| poptrr.com/track/click/zTsSZvXrnDt7vTD_Fy-Nk98IOOIhAa8k7nuwYtGpH5kxrv4s5ynhvgVyDVz6xSFcjpo0rNiDD-aC596QA-nyTStD0GWveWx6_DVB-CwfCRcVdeaaog8LNbotEshNiuNAkWEMp_qwLSRBJKeHY2CrOqX2ckRqDfmld7HZ0cwOHRM4UPaBYWEqKmc8hLFgWr5VGnGv2-k_9I-nY8ktNlPgXheDfB_L5nQjtKDxot1i7QTvCyMDsBQXpqRgqi_4eq9vsQF6StwBN9h4bUPYNzoQKtUlkkITOWVKGq3fxbSnqEROSd_fmrQ6KeEk9CCBlQG1nVRfO4zBXdMu_asodp5rrjKhze3lQd4S9szRg35D-3F_f8sG0epdFXUP3Of9kllsOviqwUgS_PgaYBXZ0NVXEWnOzoQugsY9WOnchWFGRdNqDJhvgqcFQnUsgs_jBHNC748lYzwg7lJL1afDuUOVOP9RlSwIeapTBLEgFs2jGZjKgNFRrtgLBBYu7nkDDJ41IhGxjd4Ji3uwG2l7-Zr-0IKriipTlTyHqwlIAV7-KN3hQWf5URO1H3YyqX5e1whffHsJ7Jnxd0WAecLWyzQ?ur=https://analytics.ozlinedsp.com/tracking/click.gif?token=ed9bq7a2wgu21l0imiv0lqpek |  46.4.101.109 | | 0 B |
URL poptrr.com/track/click/zTsSZvXrnDt7vTD_Fy-Nk98IOOIhAa8k7nuwYtGpH5kxrv4s5ynhvgVyDVz6xSFcjpo0rNiDD-aC596QA-nyTStD0GWveWx6_DVB-CwfCRcVdeaaog8LNbotEshNiuNAkWEMp_qwLSRBJKeHY2CrOqX2ckRqDfmld7HZ0cwOHRM4UPaBYWEqKmc8hLFgWr5VGnGv2-k_9I-nY8ktNlPgXheDfB_L5nQjtKDxot1i7QTvCyMDsBQXpqRgqi_4eq9vsQF6StwBN9h4bUPYNzoQKtUlkkITOWVKGq3fxbSnqEROSd_fmrQ6KeEk9CCBlQG1nVRfO4zBXdMu_asodp5rrjKhze3lQd4S9szRg35D-3F_f8sG0epdFXUP3Of9kllsOviqwUgS_PgaYBXZ0NVXEWnOzoQugsY9WOnchWFGRdNqDJhvgqcFQnUsgs_jBHNC748lYzwg7lJL1afDuUOVOP9RlSwIeapTBLEgFs2jGZjKgNFRrtgLBBYu7nkDDJ41IhGxjd4Ji3uwG2l7-Zr-0IKriipTlTyHqwlIAV7-KN3hQWf5URO1H3YyqX5e1whffHsJ7Jnxd0WAecLWyzQ?ur=https://analytics.ozlinedsp.com/tracking/click.gif?token=ed9bq7a2wgu21l0imiv0lqpek IP46.4.101.109:0 ASN#24940 Hetzner Online GmbH
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /track/click/zTsSZvXrnDt7vTD_Fy-Nk98IOOIhAa8k7nuwYtGpH5kxrv4s5ynhvgVyDVz6xSFcjpo0rNiDD-aC596QA-nyTStD0GWveWx6_DVB-CwfCRcVdeaaog8LNbotEshNiuNAkWEMp_qwLSRBJKeHY2CrOqX2ckRqDfmld7HZ0cwOHRM4UPaBYWEqKmc8hLFgWr5VGnGv2-k_9I-nY8ktNlPgXheDfB_L5nQjtKDxot1i7QTvCyMDsBQXpqRgqi_4eq9vsQF6StwBN9h4bUPYNzoQKtUlkkITOWVKGq3fxbSnqEROSd_fmrQ6KeEk9CCBlQG1nVRfO4zBXdMu_asodp5rrjKhze3lQd4S9szRg35D-3F_f8sG0epdFXUP3Of9kllsOviqwUgS_PgaYBXZ0NVXEWnOzoQugsY9WOnchWFGRdNqDJhvgqcFQnUsgs_jBHNC748lYzwg7lJL1afDuUOVOP9RlSwIeapTBLEgFs2jGZjKgNFRrtgLBBYu7nkDDJ41IhGxjd4Ji3uwG2l7-Zr-0IKriipTlTyHqwlIAV7-KN3hQWf5URO1H3YyqX5e1whffHsJ7Jnxd0WAecLWyzQ?ur=https://analytics.ozlinedsp.com/tracking/click.gif?token=ed9bq7a2wgu21l0imiv0lqpek HTTP/1.1
Host: poptrr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302
location: https://ak.itponytaa.com/afu.php?zoneid=5917692
x-responded-by: cors-support-provider
access-control-expose-headers: set-cookie
access-control-allow-origin: *
access-control-request-headers: origin,accept,content-type,x-requested-with
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH
access-control-max-age: 86400
content-length: 0
date: Wed, 24 Apr 2024 05:23:19 GMT
|
|
| ak.itponytaa.com/afu.php?zoneid=5917692 |  95.101.11.82 | | 14 kB |
URL ak.itponytaa.com/afu.php?zoneid=5917692 IP95.101.11.82:0 ASN#20940 Akamai International B.V.
File typeHTML document, ASCII text, with very long lines (18491) Hashfd0bc7485a7a3bd16674affd61cf313f 6af2737a8953224e7e19f6837c5d3ad980d2ecd7 b95c39274294d2859b034ed8faa2dd7102bfceaeca5d7183080518f9f3085f5d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /afu.php?zoneid=5917692 HTTP/1.1
Host: ak.itponytaa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=utf8
x-trace-id: 2443e5ee37f45519936bf6bc1139317f
link: <https://yonmewon.com>; rel="preconnect dns-prefetch",<https://my.rtmark.net>; rel="preconnect dns-prefetch"
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
vary: Accept-Encoding
x-akamai-transformed: 9 13309 0 pmb=mRUM,1
content-encoding: gzip
expires: Wed, 24 Apr 2024 05:23:19 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Wed, 24 Apr 2024 05:23:19 GMT
content-length: 14135
set-cookie: OAID=008048d37f7b4c4ae7ba9fd6890cb90a; expires=Thu, 24 Apr 2025 05:23:19 GMT; path=/; secure; SameSite=None
oaidts=1713936199; expires=Thu, 24 Apr 2025 05:23:19 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
server-timing: cdn-cache; desc=MISS, edge; dur=102, origin; dur=5, ak_p; desc="1713936199797_1600457550_347004756_10629_832_7_14_41";dur=1
X-Firefox-Spdy: h2
|
|
| ak.itponytaa.com/sftouch?userId=008048d37f7b4c4ae7ba9fd6890cb90a&z=5917692&p_rid=e5a84cf6-10ae-440e-93b2-21562e5dab59&p_src=sf&branchId=0&rb=9wWT5bviWOMiManSCDA8ucEAYwQNqiL6p8aLhXxhzFx-AY-2oNcAVurgrmFbAYNmdX6xV9YrM9qLgfJ2iepAuF1M5KujBcqrdpyl3ZKIoCC8CBbdxNCE81z7XE_Vzj9wA1UMwC2nFNlaWtNEHk3piWaoQ7yzcmhFx2N6zE25C1BUUY4xQjTGLi58OosLmWNtLOTf7zoLiBtpK3_UwhpyeCt2x_YeqT2leqXd2_PNwyA= | 95.101.11.82 | | 2 B |
URL ak.itponytaa.com/sftouch?userId=008048d37f7b4c4ae7ba9fd6890cb90a&z=5917692&p_rid=e5a84cf6-10ae-440e-93b2-21562e5dab59&p_src=sf&branchId=0&rb=9wWT5bviWOMiManSCDA8ucEAYwQNqiL6p8aLhXxhzFx-AY-2oNcAVurgrmFbAYNmdX6xV9YrM9qLgfJ2iepAuF1M5KujBcqrdpyl3ZKIoCC8CBbdxNCE81z7XE_Vzj9wA1UMwC2nFNlaWtNEHk3piWaoQ7yzcmhFx2N6zE25C1BUUY4xQjTGLi58OosLmWNtLOTf7zoLiBtpK3_UwhpyeCt2x_YeqT2leqXd2_PNwyA= IP95.101.11.82:0 ASN#20940 Akamai International B.V.
File typeASCII text, with no line terminators Hash444bcb3a3fcf8389296c49467f27e1d6 7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb 2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /sftouch?userId=008048d37f7b4c4ae7ba9fd6890cb90a&z=5917692&p_rid=e5a84cf6-10ae-440e-93b2-21562e5dab59&p_src=sf&branchId=0&rb=9wWT5bviWOMiManSCDA8ucEAYwQNqiL6p8aLhXxhzFx-AY-2oNcAVurgrmFbAYNmdX6xV9YrM9qLgfJ2iepAuF1M5KujBcqrdpyl3ZKIoCC8CBbdxNCE81z7XE_Vzj9wA1UMwC2nFNlaWtNEHk3piWaoQ7yzcmhFx2N6zE25C1BUUY4xQjTGLi58OosLmWNtLOTf7zoLiBtpK3_UwhpyeCt2x_YeqT2leqXd2_PNwyA= HTTP/1.1
Host: ak.itponytaa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ak.itponytaa.com
DNT: 1
Connection: keep-alive
Referer: https://ak.itponytaa.com/afu.php?zoneid=5917692
Cookie: OAID=008048d37f7b4c4ae7ba9fd6890cb90a; oaidts=1713936199
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Content-Length: 0
TE: trailers
HTTP/2 200 OK
content-type: text/plain
content-length: 2
x-trace-id: 0188e23572803c1625258a87c876b287
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://ak.itponytaa.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
expires: Wed, 24 Apr 2024 05:23:20 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Wed, 24 Apr 2024 05:23:20 GMT
server-timing: cdn-cache; desc=MISS, edge; dur=22, origin; dur=3, ak_p; desc="1713936200143_1600457550_347004934_2559_750_6_0_1";dur=1
X-Firefox-Spdy: h2
|
|
| my.rtmark.net/img.gif?f=merge&userId=008048d37f7b4c4ae7ba9fd6890cb90a&z=5917692&p_rid=e5a84cf6-10ae-440e-93b2-21562e5dab59&p_src=sf |  139.45.195.8 | | 43 B |
URL my.rtmark.net/img.gif?f=merge&userId=008048d37f7b4c4ae7ba9fd6890cb90a&z=5917692&p_rid=e5a84cf6-10ae-440e-93b2-21562e5dab59&p_src=sf IP139.45.195.8:0
File typeGIF image data, version 89a, 1 x 1 Hashb4491705564909da7f9eaf749dbbfbb1 279315d507855c6a4351e1e2c2f39dd9cd2fccd8 4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /img.gif?f=merge&userId=008048d37f7b4c4ae7ba9fd6890cb90a&z=5917692&p_rid=e5a84cf6-10ae-440e-93b2-21562e5dab59&p_src=sf HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ak.itponytaa.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 05:23:20 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=008048d37f7b4c4ae7ba9fd6890cb90a; expires=Thu, 24 Apr 2025 05:23:20 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| ak.itponytaa.com/favicon.ico | 95.101.11.82 | | 0 B |
URL ak.itponytaa.com/favicon.ico IP95.101.11.82:0 ASN#20940 Akamai International B.V.
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: ak.itponytaa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ak.itponytaa.com/afu.php?zoneid=5917692
Cookie: OAID=008048d37f7b4c4ae7ba9fd6890cb90a; oaidts=1713936199
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
pragma: public
cache-control: public, must-revalidate, proxy-revalidate, max-age=2592000
date: Wed, 24 Apr 2024 05:23:20 GMT
server-timing: cdn-cache; desc=MISS, edge; dur=25, origin; dur=26, ak_p; desc="1713936200263_1600457550_347005002_5126_596_5_0_21";dur=1
X-Firefox-Spdy: h2
|
|
| ak.itponytaa.com/?z=5917692&syncedCookie=true&rhd=false | 95.101.11.82 | 302 Found | 0 B |
URL User Request POST HTTP/2ak.itponytaa.com/?z=5917692&syncedCookie=true&rhd=false IP95.101.11.82:443 ASN#20940 Akamai International B.V.
CertificateIssuerLet's Encrypt Subjectak.hetaruwg.com Fingerprint25:F9:4E:BA:86:65:45:64:6B:96:B1:61:8C:D3:05:24:CD:CF:AD:8C ValidityMon, 15 Apr 2024 13:59:12 GMT - Sun, 14 Jul 2024 13:59:11 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /?z=5917692&syncedCookie=true&rhd=false HTTP/1.1
Host: ak.itponytaa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 539
Origin: https://ak.itponytaa.com
DNT: 1
Connection: keep-alive
Referer: https://ak.itponytaa.com/afu.php?zoneid=5917692&var=5917692&rid=dqGdfktL4PWmomSE3WzGcA%3D%3D&rhd=false&ab2r=0&sf=1
Cookie: OAID=008048d37f7b4c4ae7ba9fd6890cb90a; oaidts=1713936199
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
content-length: 0
x-trace-id: a6a687f8f6d241bf7eb50721803ec071
link: <https://track-eu.trackingtraffo.com>; rel="preconnect dns-prefetch",<https://yonmewon.com>; rel="preconnect dns-prefetch",<https://sr7pv7n5x.com>; rel="preconnect dns-prefetch"
referrer-policy: no-referrer
location: https://track-eu.trackingtraffo.com/pop/imp?auth=3z7uj5&c=PY5zKJEk9OpKLUCCG6G2pRUkg3d1UHuvOArXKzyrHzm4YrELOzA4hjZjp-AYPRZyhEck4mWNtMWxSvu_-qsSv6e4AKgeMy91eJV3DL-LJPx2FA4fPuDbfZNSHWr4MrFXp4L2ZwvdTER8DrEl9nkH969xbmxV65qKnuCQ3gYZO1_FOm6wTt2hCUDGgYJDcIZTZWdj1vKFs9I27IovjOBYf_AKtG5vMr17s3vqMoogvIFIhbkRoAKCaGzvWv21zVrf_AL9KVlzye0yyoV-b4-ADv5TN9m5cO6RKg_jU0qy1lvEcpz9NU1vB32V1lIjwMeLNJ9PN2Zw7qchfxkDnyzi2C0GPKeMpKi3pQPPjxnggUxHh8jeI3BVYoFhVYC9ja-hAt4fY84qE1rzwxhBbLAvSacYIowQrpddl3P-2virrsTyb4H37SyuxAPOagPKJxsQ0BCQ2RzXtVtK7tyldGhkosxED8qyOSPn2xd30srvjtDqyBRp3BFzPJHB0Vm0HXhyi0fe9OR_Xs4mJY5_XBaFrGGxi5DT3OD3lFXHa3Y1c-fo69doF9x5DZYRANiZLAMLbWMqe5_QI-m_y1lzi5kHHcCmFngJkH4zH-vh1fPk9soYkwh37LH1GTh6pYdzTSL7Tsbg26vNu2C0tAxpg8F5hQ
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://ak.itponytaa.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
expires: Wed, 24 Apr 2024 05:23:20 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Wed, 24 Apr 2024 05:23:20 GMT
set-cookie: OAID=008048d37f7b4c4ae7ba9fd6890cb90a; expires=Thu, 24 Apr 2025 05:23:20 GMT; path=/; secure; SameSite=None
oaidts=1713936199; expires=Thu, 24 Apr 2025 05:23:20 GMT; path=/; secure; SameSite=None
syncedCookie=true; expires=Wed, 01 May 2024 05:23:20 GMT; path=/; secure; SameSite=None
server-timing: cdn-cache; desc=MISS, edge; dur=20, origin; dur=127, ak_p; desc="1713936200396_1600457550_347005058_14783_731_5_0_41";dur=1
X-Firefox-Spdy: h2
|
|
| track-eu.trackingtraffo.com/pop/imp?auth=3z7uj5&c=PY5zKJEk9OpKLUCCG6G2pRUkg3d1UHuvOArXKzyrHzm4YrELOzA4hjZjp-AYPRZyhEck4mWNtMWxSvu_-qsSv6e4AKgeMy91eJV3DL-LJPx2FA4fPuDbfZNSHWr4MrFXp4L2ZwvdTER8DrEl9nkH969xbmxV65qKnuCQ3gYZO1_FOm6wTt2hCUDGgYJDcIZTZWdj1vKFs9I27IovjOBYf_AKtG5vMr17s3vqMoogvIFIhbkRoAKCaGzvWv21zVrf_AL9KVlzye0yyoV-b4-ADv5TN9m5cO6RKg_jU0qy1lvEcpz9NU1vB32V1lIjwMeLNJ9PN2Zw7qchfxkDnyzi2C0GPKeMpKi3pQPPjxnggUxHh8jeI3BVYoFhVYC9ja-hAt4fY84qE1rzwxhBbLAvSacYIowQrpddl3P-2virrsTyb4H37SyuxAPOagPKJxsQ0BCQ2RzXtVtK7tyldGhkosxED8qyOSPn2xd30srvjtDqyBRp3BFzPJHB0Vm0HXhyi0fe9OR_Xs4mJY5_XBaFrGGxi5DT3OD3lFXHa3Y1c-fo69doF9x5DZYRANiZLAMLbWMqe5_QI-m_y1lzi5kHHcCmFngJkH4zH-vh1fPk9soYkwh37LH1GTh6pYdzTSL7Tsbg26vNu2C0tAxpg8F5hQ | 162.55.236.100 | 302 Found | 0 B |
URL User Request GET HTTP/1.1track-eu.trackingtraffo.com/pop/imp?auth=3z7uj5&c=PY5zKJEk9OpKLUCCG6G2pRUkg3d1UHuvOArXKzyrHzm4YrELOzA4hjZjp-AYPRZyhEck4mWNtMWxSvu_-qsSv6e4AKgeMy91eJV3DL-LJPx2FA4fPuDbfZNSHWr4MrFXp4L2ZwvdTER8DrEl9nkH969xbmxV65qKnuCQ3gYZO1_FOm6wTt2hCUDGgYJDcIZTZWdj1vKFs9I27IovjOBYf_AKtG5vMr17s3vqMoogvIFIhbkRoAKCaGzvWv21zVrf_AL9KVlzye0yyoV-b4-ADv5TN9m5cO6RKg_jU0qy1lvEcpz9NU1vB32V1lIjwMeLNJ9PN2Zw7qchfxkDnyzi2C0GPKeMpKi3pQPPjxnggUxHh8jeI3BVYoFhVYC9ja-hAt4fY84qE1rzwxhBbLAvSacYIowQrpddl3P-2virrsTyb4H37SyuxAPOagPKJxsQ0BCQ2RzXtVtK7tyldGhkosxED8qyOSPn2xd30srvjtDqyBRp3BFzPJHB0Vm0HXhyi0fe9OR_Xs4mJY5_XBaFrGGxi5DT3OD3lFXHa3Y1c-fo69doF9x5DZYRANiZLAMLbWMqe5_QI-m_y1lzi5kHHcCmFngJkH4zH-vh1fPk9soYkwh37LH1GTh6pYdzTSL7Tsbg26vNu2C0tAxpg8F5hQ IP162.55.236.100:443 ASN#24940 Hetzner Online GmbH
CertificateIssuerSectigo Limited Subjecttrackingtraffo.com Fingerprint66:CE:68:F3:6C:8A:98:F0:D8:02:5B:C4:5E:2E:C7:B0:C7:73:5B:A8 ValidityThu, 23 Nov 2023 00:00:00 GMT - Fri, 22 Nov 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pop/imp?auth=3z7uj5&c=PY5zKJEk9OpKLUCCG6G2pRUkg3d1UHuvOArXKzyrHzm4YrELOzA4hjZjp-AYPRZyhEck4mWNtMWxSvu_-qsSv6e4AKgeMy91eJV3DL-LJPx2FA4fPuDbfZNSHWr4MrFXp4L2ZwvdTER8DrEl9nkH969xbmxV65qKnuCQ3gYZO1_FOm6wTt2hCUDGgYJDcIZTZWdj1vKFs9I27IovjOBYf_AKtG5vMr17s3vqMoogvIFIhbkRoAKCaGzvWv21zVrf_AL9KVlzye0yyoV-b4-ADv5TN9m5cO6RKg_jU0qy1lvEcpz9NU1vB32V1lIjwMeLNJ9PN2Zw7qchfxkDnyzi2C0GPKeMpKi3pQPPjxnggUxHh8jeI3BVYoFhVYC9ja-hAt4fY84qE1rzwxhBbLAvSacYIowQrpddl3P-2virrsTyb4H37SyuxAPOagPKJxsQ0BCQ2RzXtVtK7tyldGhkosxED8qyOSPn2xd30srvjtDqyBRp3BFzPJHB0Vm0HXhyi0fe9OR_Xs4mJY5_XBaFrGGxi5DT3OD3lFXHa3Y1c-fo69doF9x5DZYRANiZLAMLbWMqe5_QI-m_y1lzi5kHHcCmFngJkH4zH-vh1fPk9soYkwh37LH1GTh6pYdzTSL7Tsbg26vNu2C0tAxpg8F5hQ HTTP/1.1
Host: track-eu.trackingtraffo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 24 Apr 2024 05:23:20 GMT
Content-Length: 0
Connection: keep-alive
Location: https://plinksplanet.com/click.php?key=qcopnrbsgld1lpyq4gqz&clickid=ddf2cbf2-4bf2-4cf6-bb81-d0bf390a422e&cost=0.0033&PUB_ID=185&SUB_ID=5917692&KEYWORD=&SUBSCRIBER_AGE=0&SUBSCRIBER_DATE=2024-04-24&BID_PUB=0.0033&CR_ID=36456
|
|
| plinksplanet.com/click.php?key=qcopnrbsgld1lpyq4gqz&clickid=ddf2cbf2-4bf2-4cf6-bb81-d0bf390a422e&cost=0.0033&PUB_ID=185&SUB_ID=5917692&KEYWORD=&SUBSCRIBER_AGE=0&SUBSCRIBER_DATE=2024-04-24&BID_PUB=0.0033&CR_ID=36456 | 23.88.80.32 | 302 Found | 0 B |
URL User Request GET HTTP/1.1plinksplanet.com/click.php?key=qcopnrbsgld1lpyq4gqz&clickid=ddf2cbf2-4bf2-4cf6-bb81-d0bf390a422e&cost=0.0033&PUB_ID=185&SUB_ID=5917692&KEYWORD=&SUBSCRIBER_AGE=0&SUBSCRIBER_DATE=2024-04-24&BID_PUB=0.0033&CR_ID=36456 IP23.88.80.32:443 ASN#24940 Hetzner Online GmbH
CertificateIssuerLet's Encrypt Subjectplinksplanet.com Fingerprint8F:DC:E5:EE:9A:5C:35:FE:35:A3:81:ED:70:D0:B9:A6:F5:55:86:93 ValidityThu, 04 Apr 2024 10:17:31 GMT - Wed, 03 Jul 2024 10:17:30 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /click.php?key=qcopnrbsgld1lpyq4gqz&clickid=ddf2cbf2-4bf2-4cf6-bb81-d0bf390a422e&cost=0.0033&PUB_ID=185&SUB_ID=5917692&KEYWORD=&SUBSCRIBER_AGE=0&SUBSCRIBER_DATE=2024-04-24&BID_PUB=0.0033&CR_ID=36456 HTTP/1.1
Host: plinksplanet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx/1.24.0
Date: Wed, 24 Apr 2024 05:23:21 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: uclick=ydxs2tx9wj; expires=Thu, 25-Apr-2024 05:23:21 GMT; Max-Age=86400; path=/; secure; SameSite=none
uclickhash=ydxs2tx9wj-ydxs2tx9wj-slvc-0-2t1mwj-52a8wj-52a8vr-31a599; expires=Thu, 25-Apr-2024 05:23:21 GMT; Max-Age=86400; path=/; secure; SameSite=none
Location: https://promo.20bet.partners/redirect.aspx?pid=174581&bid=1971&lpid=1042&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f
Strict-Transport-Security: max-age=31536000
|
|
| promo.20bet.partners/redirect.aspx?pid=174581&bid=1971&lpid=1042&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f |  13.107.246.53 | 307 Temporary Redirect | 0 B |
URL User Request GET HTTP/2promo.20bet.partners/redirect.aspx?pid=174581&bid=1971&lpid=1042&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f IP13.107.246.53:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
CertificateIssuerSectigo Limited Subject20bet.partners Fingerprint7D:08:B3:80:9A:D9:AF:7C:D7:7C:B8:CE:FE:1A:EF:F5:BD:8C:56:FF ValidityTue, 26 Sep 2023 00:00:00 GMT - Wed, 25 Sep 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /redirect.aspx?pid=174581&bid=1971&lpid=1042&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f HTTP/1.1
Host: promo.20bet.partners
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 307 Temporary Redirect
date: Wed, 24 Apr 2024 05:23:21 GMT
content-type: text/html
content-length: 0
cache-control: private,no-cache, no-store
pragma: no-cache
location: https://20winlp.com/bonus-wheel-en/?btag=655020_b2be170a7d354084804dc8e67e2cd8a4&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop BonWheel-1042&subid=32359ydxs2tx9wj24f
p3p: CP="This is not a P3P policy! It is used to bypass IEs problematic handling of cookies"
x-aspnet-version: 4.0.30319
set-cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a174581%2c%22BID%22%3a1971%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1713936201467)%5c%2f%22%2c%22CookieTag%22%3a%221971174581451240919C2024424523%22%7d%5d; SameSite=None;; domain=.20bet.partners; expires=Fri, 31-Dec-9999 23:59:59 GMT; path=/; secure
NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%22483fc5f0-3eee-45d4-a5c2-d4a5ddc1ee6a%7c0%22%7d%5d; domain=.20bet.partners; expires=Thu, 24-Apr-3023 05:23:21 GMT; path=/; secure; SameSite=Strict
request-context: appId=cid-v1:83ffbda4-9458-475e-90ec-4427cfb5c3b0
access-control-expose-headers: Request-Context
x-azure-ref: 20240424T052321Z-16c4f695cc5xhgjd1y09e49aqw00000006t0000000003xr3
x-cache: CONFIG_NOCACHE
X-Firefox-Spdy: h2
|
|
| 20winlp.com/bonus-wheel-en/images/logo.png | 37.252.8.161 | 200 OK | 17 kB |
URL GET HTTP/220winlp.com/bonus-wheel-en/images/logo.png IP37.252.8.161:443
Requested byhttps://20winlp.com/bonus-wheel-en/?btag=655020_b2be170a7d354084804dc8e67e2cd8a4&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f CertificateIssuerLet's Encrypt Subject20winlp.com Fingerprint89:29:90:91:29:7C:9E:CB:1E:84:7D:35:18:28:AB:0B:CA:77:FC:69 ValiditySun, 14 Apr 2024 23:04:13 GMT - Sat, 13 Jul 2024 23:04:12 GMT
File typePNG image data, 254 x 124, 8-bit/color RGBA, non-interlaced Hash78def5eabf59675b4f0ee3e6649a03f7 67a6dafdbea7d307b9dfb3b18718e282e46fd219 f1a1ffabc45b0570df933b634a743941db677176ad0a917de8e95848b36f4a47
GET /bonus-wheel-en/images/logo.png HTTP/1.1
Host: 20winlp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20winlp.com/bonus-wheel-en/?btag=655020_b2be170a7d354084804dc8e67e2cd8a4&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.1
date: Wed, 24 Apr 2024 05:23:22 GMT
content-type: image/png
content-length: 17049
last-modified: Thu, 10 Aug 2023 10:00:38 GMT
etag: "64d4b546-4299"
expires: Wed, 24 Apr 2024 05:28:22 GMT
cache-control: max-age=300
strict-transport-security: max-age=31536000;
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 20winlp.com/bonus-wheel-en/images/make-a-spin.png | 37.252.8.161 | 200 OK | 127 kB |
URL GET HTTP/220winlp.com/bonus-wheel-en/images/make-a-spin.png IP37.252.8.161:443
Requested byhttps://20winlp.com/bonus-wheel-en/?btag=655020_b2be170a7d354084804dc8e67e2cd8a4&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f CertificateIssuerLet's Encrypt Subject20winlp.com Fingerprint89:29:90:91:29:7C:9E:CB:1E:84:7D:35:18:28:AB:0B:CA:77:FC:69 ValiditySun, 14 Apr 2024 23:04:13 GMT - Sat, 13 Jul 2024 23:04:12 GMT
File typePNG image data, 744 x 201, 8-bit/color RGBA, non-interlaced Size127 kB (126955 bytes) Hash2cab480711ffc79de987c81449ae9eaa 8ac2d4324e60cebaacd09aaa5c58b54b26d12fca 12ffa9a312269979d2cc05b4b553e54570a8149d6ebc0671d263662bd3dce225
GET /bonus-wheel-en/images/make-a-spin.png HTTP/1.1
Host: 20winlp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20winlp.com/bonus-wheel-en/?btag=655020_b2be170a7d354084804dc8e67e2cd8a4&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.1
date: Wed, 24 Apr 2024 05:23:22 GMT
content-type: image/png
content-length: 126955
last-modified: Thu, 10 Aug 2023 10:00:38 GMT
etag: "64d4b546-1efeb"
expires: Wed, 24 Apr 2024 05:28:22 GMT
cache-control: max-age=300
strict-transport-security: max-age=31536000;
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 20winlp.com/bonus-wheel-en/images/stopper.png | 37.252.8.161 | 200 OK | 6.9 kB |
URL GET HTTP/220winlp.com/bonus-wheel-en/images/stopper.png IP37.252.8.161:443
Requested byhttps://20winlp.com/bonus-wheel-en/?btag=655020_b2be170a7d354084804dc8e67e2cd8a4&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f CertificateIssuerLet's Encrypt Subject20winlp.com Fingerprint89:29:90:91:29:7C:9E:CB:1E:84:7D:35:18:28:AB:0B:CA:77:FC:69 ValiditySun, 14 Apr 2024 23:04:13 GMT - Sat, 13 Jul 2024 23:04:12 GMT
File typePNG image data, 69 x 81, 8-bit/color RGBA, non-interlaced Hashccdaf73595b088b4fc63428f9fe100e2 081fc4e5f0d9f0b519d40e5dd760ea28f1b7c444 d7d9fcc51b3da99da21f8be521d60b994ef891ee083e68e93c8f76de755ce966
GET /bonus-wheel-en/images/stopper.png HTTP/1.1
Host: 20winlp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20winlp.com/bonus-wheel-en/?btag=655020_b2be170a7d354084804dc8e67e2cd8a4&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.1
date: Wed, 24 Apr 2024 05:23:22 GMT
content-type: image/png
content-length: 6945
last-modified: Thu, 10 Aug 2023 10:00:38 GMT
etag: "64d4b546-1b21"
expires: Wed, 24 Apr 2024 05:28:22 GMT
cache-control: max-age=300
strict-transport-security: max-age=31536000;
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 20winlp.com/bonus-wheel-en/images/wheel-fg.png | 37.252.8.161 | 200 OK | 236 kB |
URL GET HTTP/220winlp.com/bonus-wheel-en/images/wheel-fg.png IP37.252.8.161:443
Requested byhttps://20winlp.com/bonus-wheel-en/?btag=655020_b2be170a7d354084804dc8e67e2cd8a4&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f CertificateIssuerLet's Encrypt Subject20winlp.com Fingerprint89:29:90:91:29:7C:9E:CB:1E:84:7D:35:18:28:AB:0B:CA:77:FC:69 ValiditySun, 14 Apr 2024 23:04:13 GMT - Sat, 13 Jul 2024 23:04:12 GMT
File typePNG image data, 528 x 527, 8-bit/color RGBA, non-interlaced Size236 kB (236388 bytes) Hashd2e97dbd7ae4c54b415a151f39be0887 9d38dd892fbd1a93e7a61788498f72824e3b9ada 905712289eb6fa7638607e41d96ad085d59a0748f52f6068df99fb8a894b4f47
GET /bonus-wheel-en/images/wheel-fg.png HTTP/1.1
Host: 20winlp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20winlp.com/bonus-wheel-en/?btag=655020_b2be170a7d354084804dc8e67e2cd8a4&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.1
date: Wed, 24 Apr 2024 05:23:22 GMT
content-type: image/png
content-length: 236388
last-modified: Thu, 10 Aug 2023 10:00:38 GMT
etag: "64d4b546-39b64"
expires: Wed, 24 Apr 2024 05:28:22 GMT
cache-control: max-age=300
strict-transport-security: max-age=31536000;
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtm.js?id=GTM-55HKBB7 | 142.250.74.136 | 200 OK | 83 kB |
URL GET HTTP/2www.googletagmanager.com/gtm.js?id=GTM-55HKBB7 IP142.250.74.136:443
Requested byhttps://20winlp.com/bonus-wheel-en/?btag=655020_b2be170a7d354084804dc8e67e2cd8a4&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT
File typeJavaScript source, ASCII text, with very long lines (31530) Hash56cf1a84b430142b8689a75b45ddfb1a 4b0e58693c87b5669e6eb59f5f4eb69f21e44aa2 01bd7741a271918db7c31978a8c50c1af714bc7a19c16571395f1cf5de5e4131
GET /gtm.js?id=GTM-55HKBB7 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20winlp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 24 Apr 2024 05:23:22 GMT
expires: Wed, 24 Apr 2024 05:23:22 GMT
cache-control: private, max-age=900
last-modified: Wed, 24 Apr 2024 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 82988
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| 20winlp.com/bonus-wheel-en/images/logo/visamc_new.png | 37.252.8.161 | 200 OK | 3.4 kB |
URL GET HTTP/220winlp.com/bonus-wheel-en/images/logo/visamc_new.png IP37.252.8.161:443
Requested byhttps://20winlp.com/bonus-wheel-en/?btag=655020_b2be170a7d354084804dc8e67e2cd8a4&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f CertificateIssuerLet's Encrypt Subject20winlp.com Fingerprint89:29:90:91:29:7C:9E:CB:1E:84:7D:35:18:28:AB:0B:CA:77:FC:69 ValiditySun, 14 Apr 2024 23:04:13 GMT - Sat, 13 Jul 2024 23:04:12 GMT
File typePNG image data, 100 x 33, 8-bit/color RGBA, non-interlaced Hash42ae8796fddaf0636035e39d98c4f15a de35eaaf6df81c0570ec58833581617ad2099a60 4b9dc457817a3a2578a394834ecd291c8a352ad280e35e62024dda1f2dab73e9
GET /bonus-wheel-en/images/logo/visamc_new.png HTTP/1.1
Host: 20winlp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20winlp.com/bonus-wheel-en/?btag=655020_b2be170a7d354084804dc8e67e2cd8a4&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.1
date: Wed, 24 Apr 2024 05:23:22 GMT
content-type: image/png
content-length: 3374
last-modified: Thu, 10 Aug 2023 10:00:38 GMT
etag: "64d4b546-d2e"
expires: Wed, 24 Apr 2024 05:28:22 GMT
cache-control: max-age=300
strict-transport-security: max-age=31536000;
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 20winlp.com/bonus-wheel-en/images/logo/crypto.png | 37.252.8.161 | 200 OK | 3.9 kB |
URL GET HTTP/220winlp.com/bonus-wheel-en/images/logo/crypto.png IP37.252.8.161:443
Requested byhttps://20winlp.com/bonus-wheel-en/?btag=655020_b2be170a7d354084804dc8e67e2cd8a4&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f CertificateIssuerLet's Encrypt Subject20winlp.com Fingerprint89:29:90:91:29:7C:9E:CB:1E:84:7D:35:18:28:AB:0B:CA:77:FC:69 ValiditySun, 14 Apr 2024 23:04:13 GMT - Sat, 13 Jul 2024 23:04:12 GMT
File typePNG image data, 112 x 33, 8-bit/color RGBA, non-interlaced Hash4a02abf14ae557f358e5ad08779e5c63 ca1255e1af637643cfc37819686205fa98e52ab7 6b9c714743ae2b5fed2333459c1e6c5c092673ff7243a3b08427abea21b306f2
GET /bonus-wheel-en/images/logo/crypto.png HTTP/1.1
Host: 20winlp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20winlp.com/bonus-wheel-en/?btag=655020_b2be170a7d354084804dc8e67e2cd8a4&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.1
date: Wed, 24 Apr 2024 05:23:22 GMT
content-type: image/png
content-length: 3940
last-modified: Thu, 10 Aug 2023 10:00:38 GMT
etag: "64d4b546-f64"
expires: Wed, 24 Apr 2024 05:28:22 GMT
cache-control: max-age=300
strict-transport-security: max-age=31536000;
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 20winlp.com/bonus-wheel-en/images/logo/skrill_new.png | 37.252.8.161 | 200 OK | 3.1 kB |
URL GET HTTP/220winlp.com/bonus-wheel-en/images/logo/skrill_new.png IP37.252.8.161:443
Requested byhttps://20winlp.com/bonus-wheel-en/?btag=655020_b2be170a7d354084804dc8e67e2cd8a4&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f CertificateIssuerLet's Encrypt Subject20winlp.com Fingerprint89:29:90:91:29:7C:9E:CB:1E:84:7D:35:18:28:AB:0B:CA:77:FC:69 ValiditySun, 14 Apr 2024 23:04:13 GMT - Sat, 13 Jul 2024 23:04:12 GMT
File typePNG image data, 105 x 37, 8-bit/color RGBA, non-interlaced Hashf7f53770508e4524d76a646e42489eed b5b3ee0f8d851744947d03675426f297c9f1dd53 be653dca4bc909851e0ef709ec9ae0feeb50e3a67c8e4454bfff01c6a85b0757
GET /bonus-wheel-en/images/logo/skrill_new.png HTTP/1.1
Host: 20winlp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20winlp.com/bonus-wheel-en/?btag=655020_b2be170a7d354084804dc8e67e2cd8a4&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.1
date: Wed, 24 Apr 2024 05:23:22 GMT
content-type: image/png
content-length: 3056
last-modified: Thu, 10 Aug 2023 10:00:38 GMT
etag: "64d4b546-bf0"
expires: Wed, 24 Apr 2024 05:28:22 GMT
cache-control: max-age=300
strict-transport-security: max-age=31536000;
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 20winlp.com/bonus-wheel-en/images/logo/neteller_new.png | 37.252.8.161 | 200 OK | 4.2 kB |
URL GET HTTP/220winlp.com/bonus-wheel-en/images/logo/neteller_new.png IP37.252.8.161:443
Requested byhttps://20winlp.com/bonus-wheel-en/?btag=655020_b2be170a7d354084804dc8e67e2cd8a4&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f CertificateIssuerLet's Encrypt Subject20winlp.com Fingerprint89:29:90:91:29:7C:9E:CB:1E:84:7D:35:18:28:AB:0B:CA:77:FC:69 ValiditySun, 14 Apr 2024 23:04:13 GMT - Sat, 13 Jul 2024 23:04:12 GMT
File typePNG image data, 185 x 34, 8-bit/color RGBA, non-interlaced Hash0d4d7708d1139fd4793741e35d091d6d 3a12ff356a277abc12418a656fdd973ea496bac0 464604486ca20b0d844cc62b4af2a8550942aa2972f402d7a8da06e332f7702a
GET /bonus-wheel-en/images/logo/neteller_new.png HTTP/1.1
Host: 20winlp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20winlp.com/bonus-wheel-en/?btag=655020_b2be170a7d354084804dc8e67e2cd8a4&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.1
date: Wed, 24 Apr 2024 05:23:22 GMT
content-type: image/png
content-length: 4162
last-modified: Thu, 10 Aug 2023 10:00:38 GMT
etag: "64d4b546-1042"
expires: Wed, 24 Apr 2024 05:28:22 GMT
cache-control: max-age=300
strict-transport-security: max-age=31536000;
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 20winlp.com/bonus-wheel-en/images/logo/net_banking.png | 37.252.8.161 | 200 OK | 2.5 kB |
URL GET HTTP/220winlp.com/bonus-wheel-en/images/logo/net_banking.png IP37.252.8.161:443
Requested byhttps://20winlp.com/bonus-wheel-en/?btag=655020_b2be170a7d354084804dc8e67e2cd8a4&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f CertificateIssuerLet's Encrypt Subject20winlp.com Fingerprint89:29:90:91:29:7C:9E:CB:1E:84:7D:35:18:28:AB:0B:CA:77:FC:69 ValiditySun, 14 Apr 2024 23:04:13 GMT - Sat, 13 Jul 2024 23:04:12 GMT
File typePNG image data, 120 x 49, 8-bit/color RGBA, non-interlaced Hashc46d90c5747589b5c68afcd95356c976 7bd5c560be0c147e709fb7836e2b5045bce8aae3 db740d8801f6dc3c0500c5e398b6a8e00a3f15fcf9cb1adbb1e5ae7b4f8c4fd1
GET /bonus-wheel-en/images/logo/net_banking.png HTTP/1.1
Host: 20winlp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20winlp.com/bonus-wheel-en/?btag=655020_b2be170a7d354084804dc8e67e2cd8a4&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.1
date: Wed, 24 Apr 2024 05:23:22 GMT
content-type: image/png
content-length: 2465
last-modified: Thu, 10 Aug 2023 10:00:38 GMT
etag: "64d4b546-9a1"
expires: Wed, 24 Apr 2024 05:28:22 GMT
cache-control: max-age=300
strict-transport-security: max-age=31536000;
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=G-J9LNZYMXZE&l=dataLayer&cx=c | 142.250.74.136 | 200 OK | 97 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/js?id=G-J9LNZYMXZE&l=dataLayer&cx=c IP142.250.74.136:443
Requested byhttps://20winlp.com/bonus-wheel-en/?btag=655020_b2be170a7d354084804dc8e67e2cd8a4&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT
File typeJavaScript source, ASCII text, with very long lines (5945) Hashc7c545bc14e012af2e2cf5f1c03a755e 9acddaf0d474979f4be635923f2eb99219e056b7 d7d6cb1336f87aa9a13b207d9c987c05b438bd9b8722b2ad3c9e9f2b3c3c8844
GET /gtag/js?id=G-J9LNZYMXZE&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20winlp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 24 Apr 2024 05:23:22 GMT
expires: Wed, 24 Apr 2024 05:23:22 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 96596
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 20winlp.com/bonus-wheel-en/images/logo/muchbetter.png | 37.252.8.161 | 200 OK | 4.7 kB |
URL GET HTTP/220winlp.com/bonus-wheel-en/images/logo/muchbetter.png IP37.252.8.161:443
Requested byhttps://20winlp.com/bonus-wheel-en/?btag=655020_b2be170a7d354084804dc8e67e2cd8a4&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f CertificateIssuerLet's Encrypt Subject20winlp.com Fingerprint89:29:90:91:29:7C:9E:CB:1E:84:7D:35:18:28:AB:0B:CA:77:FC:69 ValiditySun, 14 Apr 2024 23:04:13 GMT - Sat, 13 Jul 2024 23:04:12 GMT
File typePNG image data, 161 x 36, 8-bit/color RGBA, non-interlaced Hash909e39a66412fc4b6687e293a69057dd 71b11cf1d7631f1febae4eba3ce40ae0483f8dd6 c6842348624c6b4fa14e6134b46d06ff4f204b86e22cfe0247347643be257cc4
GET /bonus-wheel-en/images/logo/muchbetter.png HTTP/1.1
Host: 20winlp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20winlp.com/bonus-wheel-en/?btag=655020_b2be170a7d354084804dc8e67e2cd8a4&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.1
date: Wed, 24 Apr 2024 05:23:22 GMT
content-type: image/png
content-length: 4712
last-modified: Thu, 10 Aug 2023 10:00:38 GMT
etag: "64d4b546-1268"
expires: Wed, 24 Apr 2024 05:28:22 GMT
cache-control: max-age=300
strict-transport-security: max-age=31536000;
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| s.magsrv.com/tag.php?goal=57b5280ca4f08841b71b86b4f5203cf0&stackUid=20240424052322299818 |  95.211.229.247 | 200 OK | 20 B |
URL GET HTTP/1.1s.magsrv.com/tag.php?goal=57b5280ca4f08841b71b86b4f5203cf0&stackUid=20240424052322299818 IP95.211.229.247:443 ASN#60781 LeaseWeb Netherlands B.V.
Requested byhttps://20winlp.com/bonus-wheel-en/?btag=655020_b2be170a7d354084804dc8e67e2cd8a4&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f CertificateIssuerLet's Encrypt Subjectmagsrv.com Fingerprint17:F9:9F:23:6D:90:C0:1A:81:DB:D1:AF:6A:07:37:42:2E:99:44:5C ValidityTue, 27 Feb 2024 16:45:44 GMT - Mon, 27 May 2024 16:45:43 GMT
File typegzip compressed data, max speed, from Unix Hasha4745abc5e7fdb89cc6df3069f3c6e69 74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /tag.php?goal=57b5280ca4f08841b71b86b4f5203cf0&stackUid=20240424052322299818 HTTP/1.1
Host: s.magsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20winlp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 05:23:22 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: goals=a%3A1%3A%7Bi%3A86672%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222024-04-24%22%3B%7D%7D; expires=Thu, 24 Apr 2025 05:23:22 GMT; path=/; domain=.magsrv.com; Secure; SameSite=none
Accept-CH:
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
|
|
| s.pemsrv.com/tag.php?goal=57b5280ca4f08841b71b86b4f5203cf0&stackUid=20240424052322300486 | 95.211.229.248 | 200 OK | 20 B |
URL GET HTTP/1.1s.pemsrv.com/tag.php?goal=57b5280ca4f08841b71b86b4f5203cf0&stackUid=20240424052322300486 IP95.211.229.248:443 ASN#60781 LeaseWeb Netherlands B.V.
Requested byhttps://20winlp.com/bonus-wheel-en/?btag=655020_b2be170a7d354084804dc8e67e2cd8a4&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f CertificateIssuerLet's Encrypt Subjectpemsrv.com FingerprintB9:FB:69:72:AD:12:6D:F5:F8:05:0B:EE:45:B6:E0:BD:1A:B2:E5:0F ValidityTue, 27 Feb 2024 16:50:21 GMT - Mon, 27 May 2024 16:50:20 GMT
File typegzip compressed data, max speed, from Unix Hasha4745abc5e7fdb89cc6df3069f3c6e69 74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /tag.php?goal=57b5280ca4f08841b71b86b4f5203cf0&stackUid=20240424052322300486 HTTP/1.1
Host: s.pemsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20winlp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 05:23:22 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: goals=a%3A1%3A%7Bi%3A86672%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222024-04-24%22%3B%7D%7D; expires=Thu, 24 Apr 2025 05:23:22 GMT; path=/; domain=.pemsrv.com; Secure; SameSite=none
Accept-CH:
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
|
|
| s.magsrv.com/tag.php?goal=8b2e6ea6f4f288415527d8eb7f5c3dc2&stackUid=20240424052322301578 | 95.211.229.247 | 200 OK | 20 B |
URL GET HTTP/1.1s.magsrv.com/tag.php?goal=8b2e6ea6f4f288415527d8eb7f5c3dc2&stackUid=20240424052322301578 IP95.211.229.247:443 ASN#60781 LeaseWeb Netherlands B.V.
Requested byhttps://20winlp.com/bonus-wheel-en/?btag=655020_b2be170a7d354084804dc8e67e2cd8a4&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f CertificateIssuerLet's Encrypt Subjectmagsrv.com Fingerprint17:F9:9F:23:6D:90:C0:1A:81:DB:D1:AF:6A:07:37:42:2E:99:44:5C ValidityTue, 27 Feb 2024 16:45:44 GMT - Mon, 27 May 2024 16:45:43 GMT
File typegzip compressed data, max speed, from Unix Hasha4745abc5e7fdb89cc6df3069f3c6e69 74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /tag.php?goal=8b2e6ea6f4f288415527d8eb7f5c3dc2&stackUid=20240424052322301578 HTTP/1.1
Host: s.magsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20winlp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 05:23:22 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: goals=a%3A1%3A%7Bi%3A93090%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222024-04-24%22%3B%7D%7D; expires=Thu, 24 Apr 2025 05:23:22 GMT; path=/; domain=.magsrv.com; Secure; SameSite=none
Accept-CH:
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
|
|
| syndication.realsrv.com/tag.php?goal=8b2e6ea6f4f288415527d8eb7f5c3dc2&stackUid=20240424052322302506 | 95.211.229.247 | 200 OK | 20 B |
URL GET HTTP/1.1syndication.realsrv.com/tag.php?goal=8b2e6ea6f4f288415527d8eb7f5c3dc2&stackUid=20240424052322302506 IP95.211.229.247:443 ASN#60781 LeaseWeb Netherlands B.V.
Requested byhttps://20winlp.com/bonus-wheel-en/?btag=655020_b2be170a7d354084804dc8e67e2cd8a4&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f CertificateIssuerLet's Encrypt Subjectrealsrv.com Fingerprint0E:69:CE:5E:E5:4B:3B:03:49:89:DA:FE:B3:5F:5F:CF:9A:87:92:1F ValidityTue, 27 Feb 2024 16:51:07 GMT - Mon, 27 May 2024 16:51:06 GMT
File typegzip compressed data, max speed, from Unix Hasha4745abc5e7fdb89cc6df3069f3c6e69 74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /tag.php?goal=8b2e6ea6f4f288415527d8eb7f5c3dc2&stackUid=20240424052322302506 HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20winlp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 05:23:22 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: goals=a%3A1%3A%7Bi%3A93090%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222024-04-24%22%3B%7D%7D; expires=Thu, 24 Apr 2025 05:23:22 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
Accept-CH:
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
|
|
| 20winlp.com/bonus-wheel-en/css/reset.css | 37.252.8.161 | 200 OK | 778 B |
URL GET HTTP/220winlp.com/bonus-wheel-en/css/reset.css IP37.252.8.161:443
Requested byhttps://20winlp.com/bonus-wheel-en/?btag=655020_b2be170a7d354084804dc8e67e2cd8a4&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f CertificateIssuerLet's Encrypt Subject20winlp.com Fingerprint89:29:90:91:29:7C:9E:CB:1E:84:7D:35:18:28:AB:0B:CA:77:FC:69 ValiditySun, 14 Apr 2024 23:04:13 GMT - Sat, 13 Jul 2024 23:04:12 GMT
Hash455ceb34c5d927c56ba116006af9afac 409dbab92b4b32ca8d7835498b51402bdf6dfb98 0a97a05ce4bafbb5238337b31062517414f29440b7255f1e4c93f9374a77a87c
GET /bonus-wheel-en/css/reset.css HTTP/1.1
Host: 20winlp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20winlp.com/bonus-wheel-en/?btag=655020_b2be170a7d354084804dc8e67e2cd8a4&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.1
date: Wed, 24 Apr 2024 05:23:21 GMT
content-type: text/css
last-modified: Thu, 10 Aug 2023 10:00:38 GMT
etag: W/"64d4b546-6a6"
expires: Wed, 24 Apr 2024 05:28:21 GMT
cache-control: max-age=300
strict-transport-security: max-age=31536000;
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| syndication.realsrv.com/tag.php?goal=57b5280ca4f08841b71b86b4f5203cf0&stackUid=20240424052322301945 | 95.211.229.247 | 200 OK | 20 B |
URL GET HTTP/1.1syndication.realsrv.com/tag.php?goal=57b5280ca4f08841b71b86b4f5203cf0&stackUid=20240424052322301945 IP95.211.229.247:443 ASN#60781 LeaseWeb Netherlands B.V.
Requested byhttps://20winlp.com/bonus-wheel-en/?btag=655020_b2be170a7d354084804dc8e67e2cd8a4&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f CertificateIssuerLet's Encrypt Subjectrealsrv.com Fingerprint0E:69:CE:5E:E5:4B:3B:03:49:89:DA:FE:B3:5F:5F:CF:9A:87:92:1F ValidityTue, 27 Feb 2024 16:51:07 GMT - Mon, 27 May 2024 16:51:06 GMT
File typegzip compressed data, max speed, from Unix Hasha4745abc5e7fdb89cc6df3069f3c6e69 74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /tag.php?goal=57b5280ca4f08841b71b86b4f5203cf0&stackUid=20240424052322301945 HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20winlp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 05:23:22 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: goals=a%3A1%3A%7Bi%3A86672%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222024-04-24%22%3B%7D%7D; expires=Thu, 24 Apr 2025 05:23:22 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
Accept-CH:
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
|
|
| 20winlp.com/bonus-wheel-en/images/logo/flexepin_new.png | 37.252.8.161 | 200 OK | 2.8 kB |
URL GET HTTP/220winlp.com/bonus-wheel-en/images/logo/flexepin_new.png IP37.252.8.161:443
Requested byhttps://20winlp.com/bonus-wheel-en/?btag=655020_b2be170a7d354084804dc8e67e2cd8a4&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f CertificateIssuerLet's Encrypt Subject20winlp.com Fingerprint89:29:90:91:29:7C:9E:CB:1E:84:7D:35:18:28:AB:0B:CA:77:FC:69 ValiditySun, 14 Apr 2024 23:04:13 GMT - Sat, 13 Jul 2024 23:04:12 GMT
File typePNG image data, 100 x 35, 8-bit/color RGBA, non-interlaced Hashf49c033c892d92fe21bbbd093216f94c cd6648cc417b11747dcc1071c619ee133445abba b12fb0ae0a41fb3dc4a379f1bae8344cf7b3b093b6f336005964e3c8b298197c
GET /bonus-wheel-en/images/logo/flexepin_new.png HTTP/1.1
Host: 20winlp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20winlp.com/bonus-wheel-en/?btag=655020_b2be170a7d354084804dc8e67e2cd8a4&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.1
date: Wed, 24 Apr 2024 05:23:22 GMT
content-type: image/png
content-length: 2827
last-modified: Thu, 10 Aug 2023 10:00:38 GMT
etag: "64d4b546-b0b"
expires: Wed, 24 Apr 2024 05:28:22 GMT
cache-control: max-age=300
strict-transport-security: max-age=31536000;
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| s.opoxv.com/tag.php?goal=8b2e6ea6f4f288415527d8eb7f5c3dc2&stackUid=2024042405232230290 | 95.211.229.248 | 200 OK | 20 B |
URL GET HTTP/1.1s.opoxv.com/tag.php?goal=8b2e6ea6f4f288415527d8eb7f5c3dc2&stackUid=2024042405232230290 IP95.211.229.248:443 ASN#60781 LeaseWeb Netherlands B.V.
Requested byhttps://20winlp.com/bonus-wheel-en/?btag=655020_b2be170a7d354084804dc8e67e2cd8a4&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f CertificateIssuerLet's Encrypt Subjectopoxv.com Fingerprint00:4E:CD:CE:9E:CD:C2:84:A0:29:D4:56:00:85:59:BB:A0:91:72:04 ValidityTue, 27 Feb 2024 16:48:35 GMT - Mon, 27 May 2024 16:48:34 GMT
File typegzip compressed data, max speed, from Unix Hasha4745abc5e7fdb89cc6df3069f3c6e69 74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /tag.php?goal=8b2e6ea6f4f288415527d8eb7f5c3dc2&stackUid=2024042405232230290 HTTP/1.1
Host: s.opoxv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20winlp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 05:23:22 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: goals=a%3A1%3A%7Bi%3A93090%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222024-04-24%22%3B%7D%7D; expires=Thu, 24 Apr 2025 05:23:22 GMT; path=/; domain=.opoxv.com; Secure; SameSite=none
Accept-CH:
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
|
|
| s.opoxv.com/tag.php?goal=57b5280ca4f08841b71b86b4f5203cf0&stackUid=20240424052322300774 | 95.211.229.248 | 200 OK | 20 B |
URL GET HTTP/1.1s.opoxv.com/tag.php?goal=57b5280ca4f08841b71b86b4f5203cf0&stackUid=20240424052322300774 IP95.211.229.248:443 ASN#60781 LeaseWeb Netherlands B.V.
Requested byhttps://20winlp.com/bonus-wheel-en/?btag=655020_b2be170a7d354084804dc8e67e2cd8a4&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f CertificateIssuerLet's Encrypt Subjectopoxv.com Fingerprint00:4E:CD:CE:9E:CD:C2:84:A0:29:D4:56:00:85:59:BB:A0:91:72:04 ValidityTue, 27 Feb 2024 16:48:35 GMT - Mon, 27 May 2024 16:48:34 GMT
File typegzip compressed data, max speed, from Unix Hasha4745abc5e7fdb89cc6df3069f3c6e69 74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /tag.php?goal=57b5280ca4f08841b71b86b4f5203cf0&stackUid=20240424052322300774 HTTP/1.1
Host: s.opoxv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20winlp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 05:23:22 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: goals=a%3A1%3A%7Bi%3A86672%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222024-04-24%22%3B%7D%7D; expires=Thu, 24 Apr 2025 05:23:22 GMT; path=/; domain=.opoxv.com; Secure; SameSite=none
Accept-CH:
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
|
|
| 20winlp.com/bonus-wheel-en/images/logo/perfectmoney_new.png | 37.252.8.161 | 200 OK | 5.2 kB |
URL GET HTTP/220winlp.com/bonus-wheel-en/images/logo/perfectmoney_new.png IP37.252.8.161:443
Requested byhttps://20winlp.com/bonus-wheel-en/?btag=655020_b2be170a7d354084804dc8e67e2cd8a4&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f CertificateIssuerLet's Encrypt Subject20winlp.com Fingerprint89:29:90:91:29:7C:9E:CB:1E:84:7D:35:18:28:AB:0B:CA:77:FC:69 ValiditySun, 14 Apr 2024 23:04:13 GMT - Sat, 13 Jul 2024 23:04:12 GMT
File typePNG image data, 168 x 35, 8-bit/color RGBA, non-interlaced Hashd29926bb1a723d10d6b5154e6801b6b4 a876e717672fa93ab89e88761e0a2f7585e90b60 6a4a985776ed324898260272af353d531ecd717db104a1d62a49bb64f64f3b19
GET /bonus-wheel-en/images/logo/perfectmoney_new.png HTTP/1.1
Host: 20winlp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20winlp.com/bonus-wheel-en/?btag=655020_b2be170a7d354084804dc8e67e2cd8a4&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.1
date: Wed, 24 Apr 2024 05:23:22 GMT
content-type: image/png
content-length: 5175
last-modified: Thu, 10 Aug 2023 10:00:38 GMT
etag: "64d4b546-1437"
expires: Wed, 24 Apr 2024 05:28:22 GMT
cache-control: max-age=300
strict-transport-security: max-age=31536000;
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 20winlp.com/bonus-wheel-en/images/logo/jeton.png | 37.252.8.161 | 200 OK | 7.1 kB |
URL GET HTTP/220winlp.com/bonus-wheel-en/images/logo/jeton.png IP37.252.8.161:443
Requested byhttps://20winlp.com/bonus-wheel-en/?btag=655020_b2be170a7d354084804dc8e67e2cd8a4&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f CertificateIssuerLet's Encrypt Subject20winlp.com Fingerprint89:29:90:91:29:7C:9E:CB:1E:84:7D:35:18:28:AB:0B:CA:77:FC:69 ValiditySun, 14 Apr 2024 23:04:13 GMT - Sat, 13 Jul 2024 23:04:12 GMT
File typePNG image data, 123 x 39, 8-bit/color RGBA, non-interlaced Hash615d8d9fe9f2056b2fbcd00cb25312cf 57278c236bb6559f44c3e9b64663973ba8317e5b abab9115e653ee3830e6fe4c0b226a21b4aceb78afd01246aec384d2783633f8
GET /bonus-wheel-en/images/logo/jeton.png HTTP/1.1
Host: 20winlp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20winlp.com/bonus-wheel-en/?btag=655020_b2be170a7d354084804dc8e67e2cd8a4&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.1
date: Wed, 24 Apr 2024 05:23:22 GMT
content-type: image/png
content-length: 7056
last-modified: Thu, 10 Aug 2023 10:00:38 GMT
etag: "64d4b546-1b90"
expires: Wed, 24 Apr 2024 05:28:22 GMT
cache-control: max-age=300
strict-transport-security: max-age=31536000;
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 20winlp.com/bonus-wheel-en/images/logo/GPay.png | 37.252.8.161 | 200 OK | 2.6 kB |
URL GET HTTP/220winlp.com/bonus-wheel-en/images/logo/GPay.png IP37.252.8.161:443
Requested byhttps://20winlp.com/bonus-wheel-en/?btag=655020_b2be170a7d354084804dc8e67e2cd8a4&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f CertificateIssuerLet's Encrypt Subject20winlp.com Fingerprint89:29:90:91:29:7C:9E:CB:1E:84:7D:35:18:28:AB:0B:CA:77:FC:69 ValiditySun, 14 Apr 2024 23:04:13 GMT - Sat, 13 Jul 2024 23:04:12 GMT
File typePNG image data, 93 x 38, 8-bit/color RGBA, non-interlaced Hash17d672ffde367ad80132340957c887c5 4f712364b138c122c7a00b65c14f683f96fe3bd2 232c254eaaf82129dc93368897f25f1c82161dbeb3f7676d7fabaff1b9e542fa
GET /bonus-wheel-en/images/logo/GPay.png HTTP/1.1
Host: 20winlp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20winlp.com/bonus-wheel-en/?btag=655020_b2be170a7d354084804dc8e67e2cd8a4&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.1
date: Wed, 24 Apr 2024 05:23:22 GMT
content-type: image/png
content-length: 2570
last-modified: Thu, 10 Aug 2023 10:00:38 GMT
etag: "64d4b546-a0a"
expires: Wed, 24 Apr 2024 05:28:22 GMT
cache-control: max-age=300
strict-transport-security: max-age=31536000;
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 20winlp.com/bonus-wheel-en/images/logo/sticpay_new.png | 37.252.8.161 | 200 OK | 5.9 kB |
URL GET HTTP/220winlp.com/bonus-wheel-en/images/logo/sticpay_new.png IP37.252.8.161:443
Requested byhttps://20winlp.com/bonus-wheel-en/?btag=655020_b2be170a7d354084804dc8e67e2cd8a4&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f CertificateIssuerLet's Encrypt Subject20winlp.com Fingerprint89:29:90:91:29:7C:9E:CB:1E:84:7D:35:18:28:AB:0B:CA:77:FC:69 ValiditySun, 14 Apr 2024 23:04:13 GMT - Sat, 13 Jul 2024 23:04:12 GMT
File typePNG image data, 156 x 34, 8-bit/color RGBA, non-interlaced Hash915e8659fe4104a9edca936e3b64af6f 237f1ddfabd6ed0654923ac52f65ed2853479004 37b66b4f7682f3d582194a6509946b7fab719aa66a16e576793abc5402c4fecc
GET /bonus-wheel-en/images/logo/sticpay_new.png HTTP/1.1
Host: 20winlp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20winlp.com/bonus-wheel-en/?btag=655020_b2be170a7d354084804dc8e67e2cd8a4&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.1
date: Wed, 24 Apr 2024 05:23:22 GMT
content-type: image/png
content-length: 5850
last-modified: Thu, 10 Aug 2023 10:00:38 GMT
etag: "64d4b546-16da"
expires: Wed, 24 Apr 2024 05:28:22 GMT
cache-control: max-age=300
strict-transport-security: max-age=31536000;
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 20winlp.com/bonus-wheel-en/images/logo/ecopayz.png | 37.252.8.161 | 200 OK | 5.2 kB |
URL GET HTTP/220winlp.com/bonus-wheel-en/images/logo/ecopayz.png IP37.252.8.161:443
Requested byhttps://20winlp.com/bonus-wheel-en/?btag=655020_b2be170a7d354084804dc8e67e2cd8a4&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f CertificateIssuerLet's Encrypt Subject20winlp.com Fingerprint89:29:90:91:29:7C:9E:CB:1E:84:7D:35:18:28:AB:0B:CA:77:FC:69 ValiditySun, 14 Apr 2024 23:04:13 GMT - Sat, 13 Jul 2024 23:04:12 GMT
File typePNG image data, 146 x 36, 8-bit/color RGBA, non-interlaced Hash0d4dbdc5ecb23f1a8798513f2f728155 f8693c37c36af34771b0d188aed78fd289767e65 1b31125b4beb00232b1566676ff8dda6d68b5dabb2b4471296cc7c10d009b000
GET /bonus-wheel-en/images/logo/ecopayz.png HTTP/1.1
Host: 20winlp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20winlp.com/bonus-wheel-en/?btag=655020_b2be170a7d354084804dc8e67e2cd8a4&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.1
date: Wed, 24 Apr 2024 05:23:22 GMT
content-type: image/png
content-length: 5161
last-modified: Thu, 10 Aug 2023 10:00:38 GMT
etag: "64d4b546-1429"
expires: Wed, 24 Apr 2024 05:28:22 GMT
cache-control: max-age=300
strict-transport-security: max-age=31536000;
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 20winlp.com/bonus-wheel-en/images/copyright.png | 37.252.8.161 | 200 OK | 3.4 kB |
URL GET HTTP/220winlp.com/bonus-wheel-en/images/copyright.png IP37.252.8.161:443
Requested byhttps://20winlp.com/bonus-wheel-en/?btag=655020_b2be170a7d354084804dc8e67e2cd8a4&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f CertificateIssuerLet's Encrypt Subject20winlp.com Fingerprint89:29:90:91:29:7C:9E:CB:1E:84:7D:35:18:28:AB:0B:CA:77:FC:69 ValiditySun, 14 Apr 2024 23:04:13 GMT - Sat, 13 Jul 2024 23:04:12 GMT
File typePNG image data, 50 x 49, 8-bit/color RGBA, non-interlaced Hash773e24b3c400ffb8bf6619fa6b2a0430 2ed762770d5f3f257df2f648e80e6376b09c8823 d1ecd9f01b462dcd82ae6c90908dbf63d02c35c0eae9b65a17570dd361fe74e4
GET /bonus-wheel-en/images/copyright.png HTTP/1.1
Host: 20winlp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20winlp.com/bonus-wheel-en/?btag=655020_b2be170a7d354084804dc8e67e2cd8a4&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.1
date: Wed, 24 Apr 2024 05:23:22 GMT
content-type: image/png
content-length: 3443
last-modified: Thu, 10 Aug 2023 10:00:38 GMT
etag: "64d4b546-d73"
expires: Wed, 24 Apr 2024 05:28:22 GMT
cache-control: max-age=300
strict-transport-security: max-age=31536000;
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 20winlp.com/bonus-wheel-en/images/main-bg.png | 37.252.8.161 | 200 OK | 2.6 MB |
URL GET HTTP/220winlp.com/bonus-wheel-en/images/main-bg.png IP37.252.8.161:443
Requested byhttps://20winlp.com/bonus-wheel-en/?btag=655020_b2be170a7d354084804dc8e67e2cd8a4&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f CertificateIssuerLet's Encrypt Subject20winlp.com Fingerprint89:29:90:91:29:7C:9E:CB:1E:84:7D:35:18:28:AB:0B:CA:77:FC:69 ValiditySun, 14 Apr 2024 23:04:13 GMT - Sat, 13 Jul 2024 23:04:12 GMT
File typePNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced Size2.6 MB (2577577 bytes) Hash2d4ab198ac7a6dce01ac7edd60989fc5 9b549e73d6f54a81950adf3b8d636b2e8f15657b 8929ccea9d65858ea6428174d8ca029dd52ff1a020d20e10b9ddeac3a33ae5e7
GET /bonus-wheel-en/images/main-bg.png HTTP/1.1
Host: 20winlp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20winlp.com/bonus-wheel-en/css/main.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.1
date: Wed, 24 Apr 2024 05:23:22 GMT
content-type: image/png
content-length: 2577577
last-modified: Thu, 10 Aug 2023 10:00:38 GMT
etag: "64d4b546-2754a9"
expires: Wed, 24 Apr 2024 05:28:22 GMT
cache-control: max-age=300
strict-transport-security: max-age=31536000;
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 20winlp.com/bonus-wheel-en/?btag=655020_b2be170a7d354084804dc8e67e2cd8a4&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f | 37.252.8.161 | 200 OK | 213 kB |
URL User Request GET HTTP/220winlp.com/bonus-wheel-en/?btag=655020_b2be170a7d354084804dc8e67e2cd8a4&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f IP37.252.8.161:443
CertificateIssuerLet's Encrypt Subject20winlp.com Fingerprint89:29:90:91:29:7C:9E:CB:1E:84:7D:35:18:28:AB:0B:CA:77:FC:69 ValiditySun, 14 Apr 2024 23:04:13 GMT - Sat, 13 Jul 2024 23:04:12 GMT
File typegzip compressed data, from Unix Size213 kB (213329 bytes) Hash71e370d0a2fc02220fe975172cd1f238 a6be3108f120dc2b50d6cc5149d7869efe78d021 0c98b2475d34c0f6c5fbdd652e8bca9ced4fb8c228f31e3cd01dd6725b460caf
GET /bonus-wheel-en/?btag=655020_b2be170a7d354084804dc8e67e2cd8a4&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f HTTP/1.1
Host: 20winlp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.14.1
date: Wed, 24 Apr 2024 05:23:21 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=31536000;
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| 20winlp.com/bonus-wheel-en/images/spin-btn.png | 37.252.8.161 | 200 OK | 51 kB |
URL GET HTTP/220winlp.com/bonus-wheel-en/images/spin-btn.png IP37.252.8.161:443
Requested byhttps://20winlp.com/bonus-wheel-en/?btag=655020_b2be170a7d354084804dc8e67e2cd8a4&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f CertificateIssuerLet's Encrypt Subject20winlp.com Fingerprint89:29:90:91:29:7C:9E:CB:1E:84:7D:35:18:28:AB:0B:CA:77:FC:69 ValiditySun, 14 Apr 2024 23:04:13 GMT - Sat, 13 Jul 2024 23:04:12 GMT
File typePNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced Hash618d28fd139fa818dd979927def57561 fb2e676d80e87ba983e8bd6975f0c698829dab04 959554bbe25ce29001bbe2e2b4ba8e862c4a1b962765bf6b179e11fb4b1dea29
GET /bonus-wheel-en/images/spin-btn.png HTTP/1.1
Host: 20winlp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20winlp.com/bonus-wheel-en/css/main.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.1
date: Wed, 24 Apr 2024 05:23:22 GMT
content-type: image/png
content-length: 51216
last-modified: Thu, 10 Aug 2023 10:00:38 GMT
etag: "64d4b546-c810"
expires: Wed, 24 Apr 2024 05:28:22 GMT
cache-control: max-age=300
strict-transport-security: max-age=31536000;
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 20winlp.com/bonus-wheel-en/fonts/Roboto-Regular.woff2 | 37.252.8.161 | 200 OK | 63 kB |
URL GET HTTP/220winlp.com/bonus-wheel-en/fonts/Roboto-Regular.woff2 IP37.252.8.161:443
Requested byhttps://20winlp.com/bonus-wheel-en/?btag=655020_b2be170a7d354084804dc8e67e2cd8a4&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f CertificateIssuerLet's Encrypt Subject20winlp.com Fingerprint89:29:90:91:29:7C:9E:CB:1E:84:7D:35:18:28:AB:0B:CA:77:FC:69 ValiditySun, 14 Apr 2024 23:04:13 GMT - Sat, 13 Jul 2024 23:04:12 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 63212, version 1.0 Hashac35bf2f313045353c04a3803608fec3 131f8a84c9daa2a8245f0e16dc90ef4a295d0d2a 0aff3d001df2f4a793cb90be4ef4b9b79d0c8d661e568aff19d9c1f0050f2d6b
GET /bonus-wheel-en/fonts/Roboto-Regular.woff2 HTTP/1.1
Host: 20winlp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://20winlp.com/bonus-wheel-en/css/main.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.1
date: Wed, 24 Apr 2024 05:23:22 GMT
content-type: font/woff2
content-length: 63212
last-modified: Thu, 10 Aug 2023 10:00:38 GMT
etag: "f6ec-6028eab0b163f"
accept-ranges: bytes
strict-transport-security: max-age=31536000;
X-Firefox-Spdy: h2
|
|
| 20winlp.com/bonus-wheel-en/audio/wheel.mp3 | 37.252.8.161 | 206 Partial Content | 126 kB |
URL GET HTTP/220winlp.com/bonus-wheel-en/audio/wheel.mp3 IP37.252.8.161:443
Requested byhttps://20winlp.com/bonus-wheel-en/?btag=655020_b2be170a7d354084804dc8e67e2cd8a4&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f CertificateIssuerLet's Encrypt Subject20winlp.com Fingerprint89:29:90:91:29:7C:9E:CB:1E:84:7D:35:18:28:AB:0B:CA:77:FC:69 ValiditySun, 14 Apr 2024 23:04:13 GMT - Sat, 13 Jul 2024 23:04:12 GMT
File typeAudio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 192 kbps, 44.1 kHz, JntStereo Size126 kB (126084 bytes) Hash20e886554f6b25f85110df851f55a460 0a94793f9bd1866580d62b70a2826904b7e167b0 6fd75847fcb250dd04d637286da58286cf472482af2840f9aabbf5845bb941ca
GET /bonus-wheel-en/audio/wheel.mp3 HTTP/1.1
Host: 20winlp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://20winlp.com/bonus-wheel-en/?btag=655020_b2be170a7d354084804dc8e67e2cd8a4&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 206 Partial Content
server: nginx/1.14.1
date: Wed, 24 Apr 2024 05:23:22 GMT
content-type: audio/mpeg
content-length: 126084
last-modified: Thu, 10 Aug 2023 10:00:38 GMT
etag: "64d4b546-1ec84"
expires: Wed, 24 Apr 2024 05:28:22 GMT
cache-control: max-age=300
strict-transport-security: max-age=31536000;
content-range: bytes 0-126083/126084
X-Firefox-Spdy: h2
|
|
| 20winlp.com/bonus-wheel-en/audio/fanfare-1.mp3 | 37.252.8.161 | 206 Partial Content | 101 kB |
URL GET HTTP/220winlp.com/bonus-wheel-en/audio/fanfare-1.mp3 IP37.252.8.161:443
Requested byhttps://20winlp.com/bonus-wheel-en/?btag=655020_b2be170a7d354084804dc8e67e2cd8a4&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f CertificateIssuerLet's Encrypt Subject20winlp.com Fingerprint89:29:90:91:29:7C:9E:CB:1E:84:7D:35:18:28:AB:0B:CA:77:FC:69 ValiditySun, 14 Apr 2024 23:04:13 GMT - Sat, 13 Jul 2024 23:04:12 GMT
File typeAudio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 192 kbps, 44.1 kHz, JntStereo Size101 kB (101007 bytes) Hash54d91dc77f4e905b3d90b66441f6333a c213f2c642c93ac76191e61d9fe530f39340b361 ae6d928ca56dcdb0635db0cfad425de2edeafb27fa4053eb8e9f30d07ee787c5
GET /bonus-wheel-en/audio/fanfare-1.mp3 HTTP/1.1
Host: 20winlp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://20winlp.com/bonus-wheel-en/?btag=655020_b2be170a7d354084804dc8e67e2cd8a4&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 206 Partial Content
server: nginx/1.14.1
date: Wed, 24 Apr 2024 05:23:22 GMT
content-type: audio/mpeg
content-length: 101007
last-modified: Thu, 10 Aug 2023 10:00:38 GMT
etag: "64d4b546-18a8f"
expires: Wed, 24 Apr 2024 05:28:22 GMT
cache-control: max-age=300
strict-transport-security: max-age=31536000;
content-range: bytes 0-101006/101007
X-Firefox-Spdy: h2
|
|
| 20winlp.com/bonus-wheel-en/audio/fanfare-2.mp3 | 37.252.8.161 | 206 Partial Content | 101 kB |
URL GET HTTP/220winlp.com/bonus-wheel-en/audio/fanfare-2.mp3 IP37.252.8.161:443
Requested byhttps://20winlp.com/bonus-wheel-en/?btag=655020_b2be170a7d354084804dc8e67e2cd8a4&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f CertificateIssuerLet's Encrypt Subject20winlp.com Fingerprint89:29:90:91:29:7C:9E:CB:1E:84:7D:35:18:28:AB:0B:CA:77:FC:69 ValiditySun, 14 Apr 2024 23:04:13 GMT - Sat, 13 Jul 2024 23:04:12 GMT
File typeAudio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 192 kbps, 44.1 kHz, JntStereo Size101 kB (101007 bytes) Hash88da6b9ed0e64ef406ab5e7b3474b227 92068d14a2c4cf93de697cf9abc9496c3c5c481b 1210732e4a4fa21a700492498829f6370b9d2a3343bfd5382af9f42b1158d4e3
GET /bonus-wheel-en/audio/fanfare-2.mp3 HTTP/1.1
Host: 20winlp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://20winlp.com/bonus-wheel-en/?btag=655020_b2be170a7d354084804dc8e67e2cd8a4&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 206 Partial Content
server: nginx/1.14.1
date: Wed, 24 Apr 2024 05:23:23 GMT
content-type: audio/mpeg
content-length: 101007
last-modified: Thu, 10 Aug 2023 10:00:38 GMT
etag: "64d4b546-18a8f"
expires: Wed, 24 Apr 2024 05:28:23 GMT
cache-control: max-age=300
strict-transport-security: max-age=31536000;
content-range: bytes 0-101006/101007
X-Firefox-Spdy: h2
|
|
| my.rtmark.net/p.js?f=sync&lr=1&partner=cd60a55da311d1562975ffab2a7f08e376179d9ae222cd454571a6753429581a | 139.45.195.8 | 200 OK | 697 B |
URL GET HTTP/2my.rtmark.net/p.js?f=sync&lr=1&partner=cd60a55da311d1562975ffab2a7f08e376179d9ae222cd454571a6753429581a IP139.45.195.8:443
Requested byhttps://20winlp.com/bonus-wheel-en/?btag=655020_b2be170a7d354084804dc8e67e2cd8a4&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f CertificateIssuerLet's Encrypt Subjectrtmark.net FingerprintDB:C0:8B:64:1C:E3:2A:9C:B9:04:0D:F3:6F:5A:E0:35:F4:C7:75:CC ValiditySat, 02 Mar 2024 21:53:43 GMT - Fri, 31 May 2024 21:53:42 GMT
File typeJavaScript source, ASCII text Hash50bd6e5705d2521bca2b787e709a056b 6216f7e6fce68eba983e254863c86f29248531b0 0f9b337808a018383c64035060134c4bbf0d8de9e9541284ab5ffaa9f42cd434
GET /p.js?f=sync&lr=1&partner=cd60a55da311d1562975ffab2a7f08e376179d9ae222cd454571a6753429581a HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20winlp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 05:23:23 GMT
content-type: text/javascript
content-length: 697
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| tsyndicate.com/api/v1/retargeting/set/45d3301c-de08-443f-9716-ba31e2632331 | 136.243.46.131 | 200 OK | 43 B |
URL GET HTTP/2tsyndicate.com/api/v1/retargeting/set/45d3301c-de08-443f-9716-ba31e2632331 IP136.243.46.131:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://20winlp.com/bonus-wheel-en/?btag=655020_b2be170a7d354084804dc8e67e2cd8a4&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f CertificateIssuerLet's Encrypt Subjecttsyndicate.com FingerprintF5:9F:1F:89:8F:08:CD:46:43:4B:55:0A:42:66:52:21:16:57:43:31 ValidityFri, 12 Apr 2024 09:06:37 GMT - Thu, 11 Jul 2024 09:06:36 GMT
File typeGIF image data, version 89a, 1 x 1 Hashba036c43037cfe89320d1ef7b64cd43f 88c72d3e26047eb1e45e5564a76427734f120efe 42cb846e07917f6731406e500f24aeb2e88c42cda124eaa59e08c5331cad8bcb
GET /api/v1/retargeting/set/45d3301c-de08-443f-9716-ba31e2632331 HTTP/1.1
Host: tsyndicate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20winlp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 05:23:23 GMT
content-type: image/gif
content-length: 43
pragma: no-cache
expires: 0
vary: *
x-api-version: 1
x-request-id: 2b7211a75bc5f421
set-cookie: ts_rt_45d3301c-de08-443f-9716-ba31e2632331=AAMC; expires=Thu, 24 Apr 2025 05:23:23 GMT; path=/; HttpOnly; secure; SameSite=None
cache-control: no-cache, no-store, no-transform, must-revalidate, no-transform
x-robots-tag: none, noindex, nofollow
report-to: { "url": "https://pxl.tsyndicate.com/api/v1/heavy-ad/report", "max_age": 86401 }
X-Firefox-Spdy: h2
|
|
| 20winlp.com/bonus-wheel-en/images/favicon.png | 37.252.8.161 | 200 OK | 2.2 kB |
URL GET HTTP/220winlp.com/bonus-wheel-en/images/favicon.png IP37.252.8.161:443
Requested byhttps://20winlp.com/bonus-wheel-en/?btag=655020_b2be170a7d354084804dc8e67e2cd8a4&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f CertificateIssuerLet's Encrypt Subject20winlp.com Fingerprint89:29:90:91:29:7C:9E:CB:1E:84:7D:35:18:28:AB:0B:CA:77:FC:69 ValiditySun, 14 Apr 2024 23:04:13 GMT - Sat, 13 Jul 2024 23:04:12 GMT
File typePNG image data, 32 x 29, 8-bit colormap, non-interlaced Hash036e0f36b5a13f1fa5ab0dd3241693ff 603c662bc6f6df4adfc53b0ee2b46c2e37bf8e61 432c7a05fd30a114d2edad7833b393a3a5077ca364fbbca7eb256385072f844e
GET /bonus-wheel-en/images/favicon.png HTTP/1.1
Host: 20winlp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20winlp.com/bonus-wheel-en/?btag=655020_b2be170a7d354084804dc8e67e2cd8a4&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f
Cookie: _ga_J9LNZYMXZE=GS1.1.1713936202.1.1.1713936202.0.0.2108101449; _ga=GA1.1.1535665926.1713936203
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.1
date: Wed, 24 Apr 2024 05:23:23 GMT
content-type: image/png
content-length: 2161
last-modified: Thu, 10 Aug 2023 10:00:38 GMT
etag: "64d4b546-871"
expires: Wed, 24 Apr 2024 05:28:23 GMT
cache-control: max-age=300
strict-transport-security: max-age=31536000;
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&dma=1&dma_cps=sypham&tid=G-J9LNZYMXZE&cid=MJQS5u6WyhlNQNnTIAKcRjoEKhN4vvib7R7Pv4aiHe8%3D.1713936203>m=45j91e44m0v889124220z8832196572z99138617576za200&aip=1&z=265538714 | 142.250.74.163 | 200 OK | 42 B |
URL GET HTTP/2www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&dma=1&dma_cps=sypham&tid=G-J9LNZYMXZE&cid=MJQS5u6WyhlNQNnTIAKcRjoEKhN4vvib7R7Pv4aiHe8%3D.1713936203>m=45j91e44m0v889124220z8832196572z99138617576za200&aip=1&z=265538714 IP142.250.74.163:443
Requested byhttps://20winlp.com/bonus-wheel-en/?btag=655020_b2be170a7d354084804dc8e67e2cd8a4&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f CertificateIssuerGoogle Trust Services LLC Subject*.google.no Fingerprint4E:BD:F9:72:97:67:A2:4B:EE:E4:B0:03:CD:C8:F3:30:53:27:53:1D ValidityMon, 18 Mar 2024 20:50:06 GMT - Mon, 10 Jun 2024 20:50:05 GMT
File typeGIF image data, version 89a, 1 x 1 Hashd89746888da2d9510b64a9f031eaecd5 d5fceb6532643d0d84ffe09c40c481ecdf59e15a ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&dma=1&dma_cps=sypham&tid=G-J9LNZYMXZE&cid=MJQS5u6WyhlNQNnTIAKcRjoEKhN4vvib7R7Pv4aiHe8%3D.1713936203>m=45j91e44m0v889124220z8832196572z99138617576za200&aip=1&z=265538714 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20winlp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 24 Apr 2024 05:23:23 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&dma=1&dma_cps=sypham&tid=G-J9LNZYMXZE&cid=MJQS5u6WyhlNQNnTIAKcRjoEKhN4vvib7R7Pv4aiHe8%3D.1713936203>m=45j91e44m0v889124220z99138617576za200&aip=1&z=770070826 | 142.250.74.163 | 200 OK | 42 B |
URL GET HTTP/2www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&dma=1&dma_cps=sypham&tid=G-J9LNZYMXZE&cid=MJQS5u6WyhlNQNnTIAKcRjoEKhN4vvib7R7Pv4aiHe8%3D.1713936203>m=45j91e44m0v889124220z99138617576za200&aip=1&z=770070826 IP142.250.74.163:443
Requested byhttps://20winlp.com/bonus-wheel-en/?btag=655020_b2be170a7d354084804dc8e67e2cd8a4&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f CertificateIssuerGoogle Trust Services LLC Subject*.google.no Fingerprint4E:BD:F9:72:97:67:A2:4B:EE:E4:B0:03:CD:C8:F3:30:53:27:53:1D ValidityMon, 18 Mar 2024 20:50:06 GMT - Mon, 10 Jun 2024 20:50:05 GMT
File typeGIF image data, version 89a, 1 x 1 Hashd89746888da2d9510b64a9f031eaecd5 d5fceb6532643d0d84ffe09c40c481ecdf59e15a ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&dma=1&dma_cps=sypham&tid=G-J9LNZYMXZE&cid=MJQS5u6WyhlNQNnTIAKcRjoEKhN4vvib7R7Pv4aiHe8%3D.1713936203>m=45j91e44m0v889124220z99138617576za200&aip=1&z=770070826 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20winlp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 24 Apr 2024 05:23:23 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| 20winlp.com/bonus-wheel-en/js/main.js | 37.252.8.161 | 200 OK | 336 B |
URL GET HTTP/220winlp.com/bonus-wheel-en/js/main.js IP37.252.8.161:443
Requested byhttps://20winlp.com/bonus-wheel-en/?btag=655020_b2be170a7d354084804dc8e67e2cd8a4&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f CertificateIssuerLet's Encrypt Subject20winlp.com Fingerprint89:29:90:91:29:7C:9E:CB:1E:84:7D:35:18:28:AB:0B:CA:77:FC:69 ValiditySun, 14 Apr 2024 23:04:13 GMT - Sat, 13 Jul 2024 23:04:12 GMT
File typeJavaScript source, ASCII text Hashfcaee45c580549bc5a1098cdc39add72 0705814694ae0ac9c6412799fe09f86dbed00879 444da91a153df8160c709eefb8c88ae337692c091d7f320167ef96eaa2c87fca
GET /bonus-wheel-en/js/main.js HTTP/1.1
Host: 20winlp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20winlp.com/bonus-wheel-en/?btag=655020_b2be170a7d354084804dc8e67e2cd8a4&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.1
date: Wed, 24 Apr 2024 05:23:22 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Thu, 10 Aug 2023 10:00:38 GMT
etag: W/"64d4b546-40a"
expires: Wed, 24 Apr 2024 05:28:22 GMT
cache-control: max-age=300
strict-transport-security: max-age=31536000;
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| region1.analytics.google.com/g/s/collect?dma=1&dma_cps=sypham>m=45j91e44m0v889124220z8832196572z99138617576za200&_gsid=J9LNZYMXZEyQ7eiFUm2gDXAk9B8Jix6A | 216.239.32.36 | 204 No Content | 0 B |
URL GET HTTP/2region1.analytics.google.com/g/s/collect?dma=1&dma_cps=sypham>m=45j91e44m0v889124220z8832196572z99138617576za200&_gsid=J9LNZYMXZEyQ7eiFUm2gDXAk9B8Jix6A IP216.239.32.36:443
Requested byhttps://20winlp.com/bonus-wheel-en/?btag=655020_b2be170a7d354084804dc8e67e2cd8a4&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /g/s/collect?dma=1&dma_cps=sypham>m=45j91e44m0v889124220z8832196572z99138617576za200&_gsid=J9LNZYMXZEyQ7eiFUm2gDXAk9B8Jix6A HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20winlp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
access-control-allow-origin: *
date: Wed, 24 Apr 2024 05:23:23 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| 20winlp.com/bonus-wheel-en/js/refers.js | 37.252.8.161 | 200 OK | 922 B |
URL GET HTTP/220winlp.com/bonus-wheel-en/js/refers.js IP37.252.8.161:443
Requested byhttps://20winlp.com/bonus-wheel-en/?btag=655020_b2be170a7d354084804dc8e67e2cd8a4&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f CertificateIssuerLet's Encrypt Subject20winlp.com Fingerprint89:29:90:91:29:7C:9E:CB:1E:84:7D:35:18:28:AB:0B:CA:77:FC:69 ValiditySun, 14 Apr 2024 23:04:13 GMT - Sat, 13 Jul 2024 23:04:12 GMT
File typegzip compressed data, from Unix Hashb258e8b471eba57584f2b4ecc8a4088f b9a181530b90794788750497559461d13b20f0ef 41224369a1159933b94b55bf1ef429e3181a4593d8d69b0de45c7ec82b8f5a53
GET /bonus-wheel-en/js/refers.js HTTP/1.1
Host: 20winlp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20winlp.com/bonus-wheel-en/?btag=655020_b2be170a7d354084804dc8e67e2cd8a4&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.1
date: Wed, 24 Apr 2024 05:23:22 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Thu, 10 Aug 2023 10:00:38 GMT
etag: W/"64d4b546-29e"
expires: Wed, 24 Apr 2024 05:28:22 GMT
cache-control: max-age=300
strict-transport-security: max-age=31536000;
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| my.rtmark.net/img.gif?f=sync&partner=cd60a55da311d1562975ffab2a7f08e376179d9ae222cd454571a6753429581a&ttl=&rurl=https%3A%2F%2F20winlp.com%2Fbonus-wheel-en%2F%3Fbtag%3D655020_b2be170a7d354084804dc8e67e2cd8a4%26utm_source%3Dretarget%26utm_medium%3DUbidex%26utm_campaign%3DUbidex-20bet-EU-NotReg-pop%2520BonWheel-1042%26utm_term%3DUbidex-20bet-EU-NotReg-pop%2520BonWheel-1042%26subid%3D32359ydxs2tx9wj24f | 139.45.195.8 | 200 OK | 43 B |
URL GET HTTP/2my.rtmark.net/img.gif?f=sync&partner=cd60a55da311d1562975ffab2a7f08e376179d9ae222cd454571a6753429581a&ttl=&rurl=https%3A%2F%2F20winlp.com%2Fbonus-wheel-en%2F%3Fbtag%3D655020_b2be170a7d354084804dc8e67e2cd8a4%26utm_source%3Dretarget%26utm_medium%3DUbidex%26utm_campaign%3DUbidex-20bet-EU-NotReg-pop%2520BonWheel-1042%26utm_term%3DUbidex-20bet-EU-NotReg-pop%2520BonWheel-1042%26subid%3D32359ydxs2tx9wj24f IP139.45.195.8:443
Requested byhttps://20winlp.com/bonus-wheel-en/?btag=655020_b2be170a7d354084804dc8e67e2cd8a4&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f CertificateIssuerLet's Encrypt Subjectrtmark.net FingerprintDB:C0:8B:64:1C:E3:2A:9C:B9:04:0D:F3:6F:5A:E0:35:F4:C7:75:CC ValiditySat, 02 Mar 2024 21:53:43 GMT - Fri, 31 May 2024 21:53:42 GMT
File typeGIF image data, version 89a, 1 x 1 Hashb4491705564909da7f9eaf749dbbfbb1 279315d507855c6a4351e1e2c2f39dd9cd2fccd8 4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /img.gif?f=sync&partner=cd60a55da311d1562975ffab2a7f08e376179d9ae222cd454571a6753429581a&ttl=&rurl=https%3A%2F%2F20winlp.com%2Fbonus-wheel-en%2F%3Fbtag%3D655020_b2be170a7d354084804dc8e67e2cd8a4%26utm_source%3Dretarget%26utm_medium%3DUbidex%26utm_campaign%3DUbidex-20bet-EU-NotReg-pop%2520BonWheel-1042%26utm_term%3DUbidex-20bet-EU-NotReg-pop%2520BonWheel-1042%26subid%3D32359ydxs2tx9wj24f HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20winlp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 05:23:23 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=08804849210344afe1e6a241c650eb7d; expires=Thu, 24 Apr 2025 05:23:23 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| track.trackingtraffo.com/pixel?auth=v3eu6k&event=visit&uid=undefined&tid=%7BTRANSACTION_ID%7D&cur=%7BDLV+-+currency%7D&amount=%7BDLV+-+value%7D&affId=%7BAFFILIATE_ID%7D&site=20winlp.com&ln=en-US | 88.214.206.175 | 200 OK | 0 B |
URL GET HTTP/1.1track.trackingtraffo.com/pixel?auth=v3eu6k&event=visit&uid=undefined&tid=%7BTRANSACTION_ID%7D&cur=%7BDLV+-+currency%7D&amount=%7BDLV+-+value%7D&affId=%7BAFFILIATE_ID%7D&site=20winlp.com&ln=en-US IP88.214.206.175:443
Requested byhttps://20winlp.com/bonus-wheel-en/?btag=655020_b2be170a7d354084804dc8e67e2cd8a4&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f CertificateIssuerSectigo Limited Subjecttrackingtraffo.com Fingerprint66:CE:68:F3:6C:8A:98:F0:D8:02:5B:C4:5E:2E:C7:B0:C7:73:5B:A8 ValidityThu, 23 Nov 2023 00:00:00 GMT - Fri, 22 Nov 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel?auth=v3eu6k&event=visit&uid=undefined&tid=%7BTRANSACTION_ID%7D&cur=%7BDLV+-+currency%7D&amount=%7BDLV+-+value%7D&affId=%7BAFFILIATE_ID%7D&site=20winlp.com&ln=en-US HTTP/1.1
Host: track.trackingtraffo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20winlp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 24 Apr 2024 05:23:23 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-cache, max-age=0, must-revalidate, proxy-revalidate, no-store
Pragma: no-cache
Expires: Sat, 01 Jan 2000 00:00:00 GMT
Access-Control-Allow-Origin: *
|
|
| 20winlp.com/bonus-wheel-en/css/media.css | 37.252.8.161 | 200 OK | 2.6 kB |
URL GET HTTP/220winlp.com/bonus-wheel-en/css/media.css IP37.252.8.161:443
Requested byhttps://20winlp.com/bonus-wheel-en/?btag=655020_b2be170a7d354084804dc8e67e2cd8a4&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f CertificateIssuerLet's Encrypt Subject20winlp.com Fingerprint89:29:90:91:29:7C:9E:CB:1E:84:7D:35:18:28:AB:0B:CA:77:FC:69 ValiditySun, 14 Apr 2024 23:04:13 GMT - Sat, 13 Jul 2024 23:04:12 GMT
File typeASCII text, with very long lines (2779), with no line terminators Hashdd96cd3cf8d655e823e7056e530e4853 d656313348d2dec470aeef5b4faacfc1ad746db1 d44b2eb0933e176bf7ddb1db704937cda137f310aaf392784edd0b4e050e92f8
GET /bonus-wheel-en/css/media.css HTTP/1.1
Host: 20winlp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20winlp.com/bonus-wheel-en/?btag=655020_b2be170a7d354084804dc8e67e2cd8a4&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.14.1
date: Wed, 24 Apr 2024 05:23:21 GMT
content-type: text/css
last-modified: Thu, 10 Aug 2023 10:00:38 GMT
etag: W/"64d4b546-a4f"
expires: Wed, 24 Apr 2024 05:28:21 GMT
cache-control: max-age=300
strict-transport-security: max-age=31536000;
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| 20winlp.com/bonus-wheel-en/css/animation.css | 37.252.8.161 | 200 OK | 12 kB |
URL GET HTTP/220winlp.com/bonus-wheel-en/css/animation.css IP37.252.8.161:443
Requested byhttps://20winlp.com/bonus-wheel-en/?btag=655020_b2be170a7d354084804dc8e67e2cd8a4&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f CertificateIssuerLet's Encrypt Subject20winlp.com Fingerprint89:29:90:91:29:7C:9E:CB:1E:84:7D:35:18:28:AB:0B:CA:77:FC:69 ValiditySun, 14 Apr 2024 23:04:13 GMT - Sat, 13 Jul 2024 23:04:12 GMT
Hashbbe0819e263653223c5817eb1f676649 1937b22543f0813ea220fc23fbb61abd2d5add13 9416e7be71710944c9095f27f8049b7f0de307d081c822905466cf14ba8c82ef
GET /bonus-wheel-en/css/animation.css HTTP/1.1
Host: 20winlp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20winlp.com/bonus-wheel-en/?btag=655020_b2be170a7d354084804dc8e67e2cd8a4&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.14.1
date: Wed, 24 Apr 2024 05:23:21 GMT
content-type: text/css
last-modified: Thu, 10 Aug 2023 10:00:38 GMT
etag: W/"64d4b546-2f55"
expires: Wed, 24 Apr 2024 05:28:21 GMT
cache-control: max-age=300
strict-transport-security: max-age=31536000;
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| 20winlp.com/bonus-wheel-en/images/wheel-bg.png | 37.252.8.161 | 200 OK | 212 kB |
URL GET HTTP/220winlp.com/bonus-wheel-en/images/wheel-bg.png IP37.252.8.161:443
Requested byhttps://20winlp.com/bonus-wheel-en/?btag=655020_b2be170a7d354084804dc8e67e2cd8a4&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f CertificateIssuerLet's Encrypt Subject20winlp.com Fingerprint89:29:90:91:29:7C:9E:CB:1E:84:7D:35:18:28:AB:0B:CA:77:FC:69 ValiditySun, 14 Apr 2024 23:04:13 GMT - Sat, 13 Jul 2024 23:04:12 GMT
File typePNG image data, 601 x 601, 8-bit/color RGBA, non-interlaced Size212 kB (211550 bytes) Hash77f3339675a5bf3bca71968782a857a9 31a4c7cbeba109adfafd495cac9f9a5b33d76652 221badfcf9c1a76ed140fe77ada496f91140c841efd09bf2335bbfb336d876bf
GET /bonus-wheel-en/images/wheel-bg.png HTTP/1.1
Host: 20winlp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20winlp.com/bonus-wheel-en/css/main.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.14.1
date: Wed, 24 Apr 2024 05:23:22 GMT
content-type: image/png
content-length: 211550
last-modified: Thu, 10 Aug 2023 10:00:38 GMT
etag: "64d4b546-33a5e"
expires: Wed, 24 Apr 2024 05:28:22 GMT
cache-control: max-age=300
strict-transport-security: max-age=31536000;
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| sgtm.20bet.com/g/collect?v=2&tid=G-J9LNZYMXZE>m=45je44m0v889124220z8832196572za200&_p=1713936202028&gcd=13l3lPl2l1&npa=1&dma_cps=sypham&dma=1&cid=1535665926.1713936203&ecid=2108101449&ul=en-us&sr=1280x1024&_fplc=0&ur=NO-03&pscdl=noapi&sst.gse=1&sst.etld=google.no&sst.gcsub=region1&sst.gcd=13l3lPl2l1&sst.tft=1713936202028&sst.ude=0&_s=2&sid=1713936202&sct=1&seg=1&dl=https%3A%2F%2F20winlp.com%2Fbonus-wheel-en%2F%3Fbtag%3D655020_b2be170a7d354084804dc8e67e2cd8a4%26utm_source%3Dretarget%26utm_medium%3DUbidex%26utm_campaign%3DUbidex-20bet-EU-NotReg-pop%2520BonWheel-1042%26utm_term%3DUbidex-20bet-EU-NotReg-pop%2520BonWheel-1042%26subid%3D32359ydxs2tx9wj24f&dt=20BET%20%7C%20Best%20Online%20Casino%20to%20Win%20Real%20Money&en=page_view&ep.hostname=20winlp.com&tfd=2988&richsstsse | 34.107.54.19 | 200 OK | 542 B |
URL GET HTTP/2sgtm.20bet.com/g/collect?v=2&tid=G-J9LNZYMXZE>m=45je44m0v889124220z8832196572za200&_p=1713936202028&gcd=13l3lPl2l1&npa=1&dma_cps=sypham&dma=1&cid=1535665926.1713936203&ecid=2108101449&ul=en-us&sr=1280x1024&_fplc=0&ur=NO-03&pscdl=noapi&sst.gse=1&sst.etld=google.no&sst.gcsub=region1&sst.gcd=13l3lPl2l1&sst.tft=1713936202028&sst.ude=0&_s=2&sid=1713936202&sct=1&seg=1&dl=https%3A%2F%2F20winlp.com%2Fbonus-wheel-en%2F%3Fbtag%3D655020_b2be170a7d354084804dc8e67e2cd8a4%26utm_source%3Dretarget%26utm_medium%3DUbidex%26utm_campaign%3DUbidex-20bet-EU-NotReg-pop%2520BonWheel-1042%26utm_term%3DUbidex-20bet-EU-NotReg-pop%2520BonWheel-1042%26subid%3D32359ydxs2tx9wj24f&dt=20BET%20%7C%20Best%20Online%20Casino%20to%20Win%20Real%20Money&en=page_view&ep.hostname=20winlp.com&tfd=2988&richsstsse IP34.107.54.19:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://20winlp.com/bonus-wheel-en/?btag=655020_b2be170a7d354084804dc8e67e2cd8a4&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f CertificateIssuerLet's Encrypt Subjectsgtm.20bet.com Fingerprint93:AC:B3:6F:92:E3:8B:9D:12:17:FF:DB:15:0D:43:F6:71:29:D2:BA ValiditySun, 21 Apr 2024 04:11:51 GMT - Sat, 20 Jul 2024 04:11:50 GMT
File typeASCII text, with very long lines (567), with no line terminators Hash68e894edcbf98cfcb720ee72912caca8 4654c05c8ca2dd01196a3c93bccfce5fe51c7049 68a0a78b409207f42f0ba2d207e147155ea627a234798fe79ca1d925166fb671
GET /g/collect?v=2&tid=G-J9LNZYMXZE>m=45je44m0v889124220z8832196572za200&_p=1713936202028&gcd=13l3lPl2l1&npa=1&dma_cps=sypham&dma=1&cid=1535665926.1713936203&ecid=2108101449&ul=en-us&sr=1280x1024&_fplc=0&ur=NO-03&pscdl=noapi&sst.gse=1&sst.etld=google.no&sst.gcsub=region1&sst.gcd=13l3lPl2l1&sst.tft=1713936202028&sst.ude=0&_s=2&sid=1713936202&sct=1&seg=1&dl=https%3A%2F%2F20winlp.com%2Fbonus-wheel-en%2F%3Fbtag%3D655020_b2be170a7d354084804dc8e67e2cd8a4%26utm_source%3Dretarget%26utm_medium%3DUbidex%26utm_campaign%3DUbidex-20bet-EU-NotReg-pop%2520BonWheel-1042%26utm_term%3DUbidex-20bet-EU-NotReg-pop%2520BonWheel-1042%26subid%3D32359ydxs2tx9wj24f&dt=20BET%20%7C%20Best%20Online%20Casino%20to%20Win%20Real%20Money&en=page_view&ep.hostname=20winlp.com&tfd=2988&richsstsse HTTP/1.1
Host: sgtm.20bet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://20winlp.com
DNT: 1
Connection: keep-alive
Referer: https://20winlp.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-origin: https://20winlp.com
cache-control: no-cache
content-type: text/plain
date: Wed, 24 Apr 2024 05:23:23 GMT
set-cookie: FPID=FPID2.2.MJQS5u6WyhlNQNnTIAKcRjoEKhN4vvib7R7Pv4aiHe8%3D.1713936203; Max-Age=63072000; Domain=20winlp.com; Path=/; Secure; HttpOnly
FPLC=N4%2F14PxFwsE6cGWm3pPulsfi2aerjgbUh0L4d7N%2BNOhAiAu4Px6KIF1uTCi6ekQPMooNmuo9CITU6PEbA8ofkcl37GprKFAHdRbVrp%2FNw1%2FtTzehy415eLNRUlYRBw%3D%3D; Max-Age=72000; Domain=20winlp.com; Path=/; Secure
FPGSID=1.1713936203.1713936203.G-J9LNZYMXZE.yQ7eiFUm2gDXAk9B8Jix6A; Max-Age=1800; Domain=20winlp.com; Path=/; SameSite=strict; Secure
x-accel-buffering: no
x-content-type-options: nosniff
x-robots-tag: noindex, nofollow
X-Firefox-Spdy: h2
|
|
| region1.analytics.google.com/g/s/collect?dma=1&dma_cps=sypham>m=45j91e44m0v889124220z99138617576za200&_gsid=J9LNZYMXZE8yZyBxmbjjvjXzCzql6VUw | 216.239.32.36 | 204 No Content | 0 B |
URL GET HTTP/2region1.analytics.google.com/g/s/collect?dma=1&dma_cps=sypham>m=45j91e44m0v889124220z99138617576za200&_gsid=J9LNZYMXZE8yZyBxmbjjvjXzCzql6VUw IP216.239.32.36:443
Requested byhttps://20winlp.com/bonus-wheel-en/?btag=655020_b2be170a7d354084804dc8e67e2cd8a4&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /g/s/collect?dma=1&dma_cps=sypham>m=45j91e44m0v889124220z99138617576za200&_gsid=J9LNZYMXZE8yZyBxmbjjvjXzCzql6VUw HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20winlp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
access-control-allow-origin: *
date: Wed, 24 Apr 2024 05:23:23 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| track.trackingtraffo.com/pixel/js?auth=v3eu6k&event=visit&uid=undefined&tid={TRANSACTION_ID}&cur={DLV%20-%20currency}&amount={DLV%20-%20value}&affId={AFFILIATE_ID} | 88.214.206.175 | 200 OK | 534 B |
URL GET HTTP/1.1track.trackingtraffo.com/pixel/js?auth=v3eu6k&event=visit&uid=undefined&tid={TRANSACTION_ID}&cur={DLV%20-%20currency}&amount={DLV%20-%20value}&affId={AFFILIATE_ID} IP88.214.206.175:443
Requested byhttps://20winlp.com/bonus-wheel-en/?btag=655020_b2be170a7d354084804dc8e67e2cd8a4&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f CertificateIssuerSectigo Limited Subjecttrackingtraffo.com Fingerprint66:CE:68:F3:6C:8A:98:F0:D8:02:5B:C4:5E:2E:C7:B0:C7:73:5B:A8 ValidityThu, 23 Nov 2023 00:00:00 GMT - Fri, 22 Nov 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (546), with no line terminators Hashe157ae783ad95621af840a1f9cce7d66 3775a5f1480d771824760683ef0205c1993bb660 51bc7091bae84adba5873abb321b3dee4ee9ac917ebca0e58b8c3c1ce5ea478e
GET /pixel/js?auth=v3eu6k&event=visit&uid=undefined&tid={TRANSACTION_ID}&cur={DLV%20-%20currency}&amount={DLV%20-%20value}&affId={AFFILIATE_ID} HTTP/1.1
Host: track.trackingtraffo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20winlp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 24 Apr 2024 05:23:23 GMT
Content-Type: text/javascript
Content-Length: 534
Connection: keep-alive
Cache-Control: no-cache, max-age=0, must-revalidate, proxy-revalidate, no-store
Pragma: no-cache
Expires: Sat, 01 Jan 2000 00:00:00 GMT
Access-Control-Allow-Origin: *
|
|
| 20winlp.com/bonus-wheel-en/js/jquery-3.3.1.min.js | 37.252.8.161 | 200 OK | 87 kB |
URL GET HTTP/220winlp.com/bonus-wheel-en/js/jquery-3.3.1.min.js IP37.252.8.161:443
Requested byhttps://20winlp.com/bonus-wheel-en/?btag=655020_b2be170a7d354084804dc8e67e2cd8a4&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f CertificateIssuerLet's Encrypt Subject20winlp.com Fingerprint89:29:90:91:29:7C:9E:CB:1E:84:7D:35:18:28:AB:0B:CA:77:FC:69 ValiditySun, 14 Apr 2024 23:04:13 GMT - Sat, 13 Jul 2024 23:04:12 GMT
File typeJavaScript source, ASCII text, with very long lines (65451) Hash4b57cf46dc8cb95c4cca54afc85e9540 05e1ad0cc600a057886deaf237ab6e3d4fcdb5ac a28ccf8a7b50522bdeea0cd83cdeca221c18fc1f9df3ee6b3d3c48d599206855
GET /bonus-wheel-en/js/jquery-3.3.1.min.js HTTP/1.1
Host: 20winlp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20winlp.com/bonus-wheel-en/?btag=655020_b2be170a7d354084804dc8e67e2cd8a4&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.14.1
date: Wed, 24 Apr 2024 05:23:21 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Thu, 10 Aug 2023 10:00:38 GMT
etag: W/"64d4b546-1538e"
expires: Wed, 24 Apr 2024 05:28:21 GMT
cache-control: max-age=300
strict-transport-security: max-age=31536000;
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| 20winlp.com/bonus-wheel-en/css/main.css | 37.252.8.161 | 200 OK | 8.3 kB |
URL GET HTTP/220winlp.com/bonus-wheel-en/css/main.css IP37.252.8.161:443
Requested byhttps://20winlp.com/bonus-wheel-en/?btag=655020_b2be170a7d354084804dc8e67e2cd8a4&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f CertificateIssuerLet's Encrypt Subject20winlp.com Fingerprint89:29:90:91:29:7C:9E:CB:1E:84:7D:35:18:28:AB:0B:CA:77:FC:69 ValiditySun, 14 Apr 2024 23:04:13 GMT - Sat, 13 Jul 2024 23:04:12 GMT
File typeASCII text, with very long lines (8683), with no line terminators Hash3265a0963c783f424f35c4ef762eefc1 ee1195124d82ebfcfb0778b55b55d5cba360afbf 6082cf538290b4eb51c23979e35b278422a7f7ebd5a4f13fa1417597e09e1a62
GET /bonus-wheel-en/css/main.css HTTP/1.1
Host: 20winlp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20winlp.com/bonus-wheel-en/?btag=655020_b2be170a7d354084804dc8e67e2cd8a4&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.14.1
date: Wed, 24 Apr 2024 05:23:21 GMT
content-type: text/css
last-modified: Thu, 10 Aug 2023 10:00:38 GMT
etag: W/"64d4b546-2071"
expires: Wed, 24 Apr 2024 05:28:21 GMT
cache-control: max-age=300
strict-transport-security: max-age=31536000;
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| sgtm.20bet.com/g/collect?v=2&tid=G-J9LNZYMXZE>m=45je44m0v889124220za200&_p=1713936202028&gcd=13l3lPl2l1&npa=1&dma_cps=sypham&dma=1&cid=1535665926.1713936203&ecid=2108101449&ul=en-us&sr=1280x1024&_fplc=0&ur=NO-03&pscdl=noapi&_eu=AEA&sst.gse=1&sst.etld=google.no&sst.gcsub=region1&sst.gcd=13l3lPl2l1&sst.tft=1713936202028&sst.sp=1&sst.em_event=1&sst.ude=0&_s=1&sid=1713936202&sct=1&seg=0&dl=https%3A%2F%2F20winlp.com%2Fbonus-wheel-en%2F%3Fbtag%3D655020_b2be170a7d354084804dc8e67e2cd8a4%26utm_source%3Dretarget%26utm_medium%3DUbidex%26utm_campaign%3DUbidex-20bet-EU-NotReg-pop%2520BonWheel-1042%26utm_term%3DUbidex-20bet-EU-NotReg-pop%2520BonWheel-1042%26subid%3D32359ydxs2tx9wj24f&dt=20BET%20%7C%20Best%20Online%20Casino%20to%20Win%20Real%20Money&en=scroll&_fv=1&_nsi=1&_ss=1&ep.hostname=20winlp.com&epn.percent_scrolled=90&tfd=2155&richsstsse | 34.107.54.19 | 200 OK | 755 B |
URL GET HTTP/2sgtm.20bet.com/g/collect?v=2&tid=G-J9LNZYMXZE>m=45je44m0v889124220za200&_p=1713936202028&gcd=13l3lPl2l1&npa=1&dma_cps=sypham&dma=1&cid=1535665926.1713936203&ecid=2108101449&ul=en-us&sr=1280x1024&_fplc=0&ur=NO-03&pscdl=noapi&_eu=AEA&sst.gse=1&sst.etld=google.no&sst.gcsub=region1&sst.gcd=13l3lPl2l1&sst.tft=1713936202028&sst.sp=1&sst.em_event=1&sst.ude=0&_s=1&sid=1713936202&sct=1&seg=0&dl=https%3A%2F%2F20winlp.com%2Fbonus-wheel-en%2F%3Fbtag%3D655020_b2be170a7d354084804dc8e67e2cd8a4%26utm_source%3Dretarget%26utm_medium%3DUbidex%26utm_campaign%3DUbidex-20bet-EU-NotReg-pop%2520BonWheel-1042%26utm_term%3DUbidex-20bet-EU-NotReg-pop%2520BonWheel-1042%26subid%3D32359ydxs2tx9wj24f&dt=20BET%20%7C%20Best%20Online%20Casino%20to%20Win%20Real%20Money&en=scroll&_fv=1&_nsi=1&_ss=1&ep.hostname=20winlp.com&epn.percent_scrolled=90&tfd=2155&richsstsse IP34.107.54.19:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://20winlp.com/bonus-wheel-en/?btag=655020_b2be170a7d354084804dc8e67e2cd8a4&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f CertificateIssuerLet's Encrypt Subjectsgtm.20bet.com Fingerprint93:AC:B3:6F:92:E3:8B:9D:12:17:FF:DB:15:0D:43:F6:71:29:D2:BA ValiditySun, 21 Apr 2024 04:11:51 GMT - Sat, 20 Jul 2024 04:11:50 GMT
File typeASCII text, with very long lines (787), with no line terminators Hashdf9943b50f7cb45d2a0933845d7d2d30 733e900439e6a57884b2ca6cee7425ec128887ce df07f8e4ad5110e161525593cdacb975d11db05d1226cd212515eaea2cc8ab26
GET /g/collect?v=2&tid=G-J9LNZYMXZE>m=45je44m0v889124220za200&_p=1713936202028&gcd=13l3lPl2l1&npa=1&dma_cps=sypham&dma=1&cid=1535665926.1713936203&ecid=2108101449&ul=en-us&sr=1280x1024&_fplc=0&ur=NO-03&pscdl=noapi&_eu=AEA&sst.gse=1&sst.etld=google.no&sst.gcsub=region1&sst.gcd=13l3lPl2l1&sst.tft=1713936202028&sst.sp=1&sst.em_event=1&sst.ude=0&_s=1&sid=1713936202&sct=1&seg=0&dl=https%3A%2F%2F20winlp.com%2Fbonus-wheel-en%2F%3Fbtag%3D655020_b2be170a7d354084804dc8e67e2cd8a4%26utm_source%3Dretarget%26utm_medium%3DUbidex%26utm_campaign%3DUbidex-20bet-EU-NotReg-pop%2520BonWheel-1042%26utm_term%3DUbidex-20bet-EU-NotReg-pop%2520BonWheel-1042%26subid%3D32359ydxs2tx9wj24f&dt=20BET%20%7C%20Best%20Online%20Casino%20to%20Win%20Real%20Money&en=scroll&_fv=1&_nsi=1&_ss=1&ep.hostname=20winlp.com&epn.percent_scrolled=90&tfd=2155&richsstsse HTTP/1.1
Host: sgtm.20bet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://20winlp.com
DNT: 1
Connection: keep-alive
Referer: https://20winlp.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-origin: https://20winlp.com
cache-control: no-cache
content-type: text/plain
date: Wed, 24 Apr 2024 05:23:23 GMT
set-cookie: FPID=FPID2.2.MJQS5u6WyhlNQNnTIAKcRjoEKhN4vvib7R7Pv4aiHe8%3D.1713936203; Max-Age=63072000; Domain=20winlp.com; Path=/; Secure; HttpOnly
FPLC=oyWKErle2qBZYzVdjZFjUCIbemOX0e%2BclfHz6FpFppwN4Bt4cRcelfQIuW8r7VdwvU1YoiDFZtrnOZmrvvesJBXlI5zgx4XsDsVdCb8XJzsJqFZ3Xt9DbWZBOm5yxg%3D%3D; Max-Age=72000; Domain=20winlp.com; Path=/; Secure
FPGSID=1.1713936203.1713936203.G-J9LNZYMXZE.8yZyBxmbjjvjXzCzql6VUw; Max-Age=1800; Domain=20winlp.com; Path=/; SameSite=strict; Secure
x-accel-buffering: no
x-content-type-options: nosniff
x-robots-tag: noindex, nofollow
X-Firefox-Spdy: h2
|
|
| s.pemsrv.com/tag.php?goal=8b2e6ea6f4f288415527d8eb7f5c3dc2&stackUid=20240424052322302303 | 95.211.229.248 | 200 OK | 0 B |
URL GET HTTP/1.1s.pemsrv.com/tag.php?goal=8b2e6ea6f4f288415527d8eb7f5c3dc2&stackUid=20240424052322302303 IP95.211.229.248:443 ASN#60781 LeaseWeb Netherlands B.V.
Requested byhttps://20winlp.com/bonus-wheel-en/?btag=655020_b2be170a7d354084804dc8e67e2cd8a4&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=32359ydxs2tx9wj24f CertificateIssuerLet's Encrypt Subjectpemsrv.com FingerprintB9:FB:69:72:AD:12:6D:F5:F8:05:0B:EE:45:B6:E0:BD:1A:B2:E5:0F ValidityTue, 27 Feb 2024 16:50:21 GMT - Mon, 27 May 2024 16:50:20 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tag.php?goal=8b2e6ea6f4f288415527d8eb7f5c3dc2&stackUid=20240424052322302303 HTTP/1.1
Host: s.pemsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20winlp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 05:23:22 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: goals=a%3A1%3A%7Bi%3A93090%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222024-04-24%22%3B%7D%7D; expires=Thu, 24 Apr 2025 05:23:22 GMT; path=/; domain=.pemsrv.com; Secure; SameSite=none
Accept-CH:
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
|
|
104.21.21.122