| track.sparklemob.com/tl?a=224&o=21602&s2=A11311134202504060839539MIUkGgyHD | 43.158.121.234 | 302 Found | 0 B |
URL User Request GET track.sparklemob.com/tl?a=224&o=21602&s2=A11311134202504060839539MIUkGgyHD IP 43.158.121.234:80
ASN#132203 Tencent Building, Kejizhongyi Avenue
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tl?a=224&o=21602&s2=A11311134202504060839539MIUkGgyHD HTTP/1.1
Host: track.sparklemob.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Date: Sun, 06 Apr 2025 03:09:53 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 299
Connection: keep-alive
Server: nginx
Location: https://trckmobile.trckswrm.com/click?offer_id=92&pub_id=218&pub_sub_id=224&pub_click_id=029125B5A2A9A1743908993520896
Cache-Control: no-cache, no-store, must-revalidate
Expires: Sun, 06 Nov 1994 08:49:37 GMT
P3P: CP="NOI CUR OUR NOR INT"
Pragma: no-cache
X-Robots-Tag: noindex, nofollow
set-cookie: tid_21602=029125B5A2A9A1743908993520896; Max-Age=1209600; Expires=Sun, 20 Apr 2025 03:09:53 GMT; Path=/; SameSite=None
track_flag_2912=503; Max-Age=86400; Expires=Mon, 7 Apr 2025 03:09:53 GMT; Path=/; SameSite=None
tid_21602=029125B5A2A9A1743908993520896; Max-Age=1209600; Expires=Sun, 20 Apr 2025 03:09:53 GMT; Path=/; SameSite=None
track_flag_2912=503; Max-Age=86400; Expires=Mon, 7 Apr 2025 03:09:53 GMT; Path=/; SameSite=None
|
|
| dz-oo.battleplusliveonline.com/templates/generic/images/logo.png | 54.240.174.60 | 200 OK | 3.4 kB |
URL GET dz-oo.battleplusliveonline.com/templates/generic/images/logo.png IP 54.240.174.60:80
Requested byhttp://dz-oo.battleplusliveonline.com/battleplusdz.08.games.pin.html?r2.tx=eb798ca3-dda0-4ecc-ad4e-97e4625ac87c&utm_source=218-224&utm_campaign=hand&sw=Bm1KTesAAAGWCRN6igAAAFwAAADaAAAAAAAAAAB6AAAAAuY&he_done=true&mx=
File typePNG image data, 194 x 36, 8-bit/color RGBA, non-interlaced Hashda5297c66a9fd9358af51a371cd1c38c f7e7888ee4089e145bf4c0e60e34594f2eaad2f3 9f8cf16b7f9c9fd1d4f49100433118b5d783eaba37ae7c2af4814757b8a5ecb8
GET /templates/generic/images/logo.png HTTP/1.1
Host: dz-oo.battleplusliveonline.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://dz-oo.battleplusliveonline.com/battleplusdz.08.games.pin.html?r2.tx=eb798ca3-dda0-4ecc-ad4e-97e4625ac87c&utm_source=218-224&utm_campaign=hand&sw=Bm1KTesAAAGWCRN6igAAAFwAAADaAAAAAAAAAAB6AAAAAuY&he_done=true&mx=
DNT: 1
Connection: keep-alive
Cookie: r2.client_id=0413dc93-a9be-432a-b633-86ed595f5824
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 3383
Connection: keep-alive
Date: Sat, 05 Apr 2025 09:42:15 GMT
Last-Modified: Mon, 31 Mar 2025 08:31:04 GMT
ETag: "da5297c66a9fd9358af51a371cd1c38c"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: ZW90j4G_j5KDDfhI7yhuyIWGYkxsgAOWdGWQBVduTi0eO34gPD5BfA==
Age: 62863
|
|
| wss://ws.dcbprotect.com:8080/ | 54.73.24.130 | 101 Switching Protocols | 0 B |
URL GET wss://ws.dcbprotect.com:8080/ IP 54.73.24.130:8080
Requested byhttp://dz-oo.battleplusliveonline.com/battleplusdz.08.games.pin.html?r2.tx=eb798ca3-dda0-4ecc-ad4e-97e4625ac87c&utm_source=218-224&utm_campaign=hand&sw=Bm1KTesAAAGWCRN6igAAAFwAAADaAAAAAAAAAAB6AAAAAuY&he_done=true&mx= CertificateIssuerAmazon Subject*.dcbprotect.com FingerprintBD:E8:D4:76:C9:48:51:5A:DA:83:97:AF:BC:4D:36:03:36:29:53:10 ValidityFri, 01 Nov 2024 00:00:00 GMT - Sat, 29 Nov 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: ws.dcbprotect.com:8080
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: http://dz-oo.battleplusliveonline.com
Sec-WebSocket-Protocol: echo-protocol
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: uGpGSxTfFc1N++YjPauIuw==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
upgrade: websocket
connection: Upgrade
sec-websocket-accept: ni2hD86rMDqmB3L0cghP9qCTJqA=
sec-websocket-protocol: echo-protocol
origin: http://dz-oo.battleplusliveonline.com
date: Sun, 06 Apr 2025 03:09:58 GMT
|
|
| dz-oo.battleplusliveonline.com/templates/generic/fonts/supply/supply-regular-webfont.woff2 | 54.240.174.60 | 200 OK | 13 kB |
URL GET dz-oo.battleplusliveonline.com/templates/generic/fonts/supply/supply-regular-webfont.woff2 IP 54.240.174.60:80
Requested byhttp://dz-oo.battleplusliveonline.com/battleplusdz.08.games.pin.html?r2.tx=eb798ca3-dda0-4ecc-ad4e-97e4625ac87c&utm_source=218-224&utm_campaign=hand&sw=Bm1KTesAAAGWCRN6igAAAFwAAADaAAAAAAAAAAB6AAAAAuY&he_done=true&mx=
File typeWeb Open Font Format (Version 2), TrueType, length 12824, version 1.0 Hash191d11eec953379af417ca537e597eb0 879976c48a560dc9ec7ea51f71eaf9d3d23e665f 0f4833a6e71838f97ea2f983572cb72e4ebcf5211e7a18ae89b775e64316686e
GET /templates/generic/fonts/supply/supply-regular-webfont.woff2 HTTP/1.1
Host: dz-oo.battleplusliveonline.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: http://dz-oo.battleplusliveonline.com/templates/generic/css/generic.css
Cookie: r2.client_id=0413dc93-a9be-432a-b633-86ed595f5824
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: binary/octet-stream
Content-Length: 12824
Connection: keep-alive
Date: Sat, 05 Apr 2025 09:42:15 GMT
Last-Modified: Mon, 31 Mar 2025 08:30:44 GMT
ETag: "191d11eec953379af417ca537e597eb0"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: IYHra6nHGsCrS5vc_5L4DHe9yTOcel1uCluUfacJME3igd-DXgZhuw==
Age: 62864
|
|
| digi.smartstalk.com/redirect/redirect.aspx?offerid=11318&pid=330&sub1=665_913765796&sub2= | 139.84.167.179 | 302 Found | 0 B |
URL User Request GET digi.smartstalk.com/redirect/redirect.aspx?offerid=11318&pid=330&sub1=665_913765796&sub2= IP 139.84.167.179:443
CertificateIssuerCertera Subject*.smartstalk.com FingerprintFB:9E:CF:5B:BC:02:42:E9:CB:62:32:74:AA:E6:34:12:A3:BC:77:84 ValiditySun, 22 Sep 2024 00:00:00 GMT - Mon, 22 Sep 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /redirect/redirect.aspx?offerid=11318&pid=330&sub1=665_913765796&sub2= HTTP/1.1
Host: digi.smartstalk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
server: nginx
date: Sun, 06 Apr 2025 03:09:53 GMT
content-type: text/html; charset=UTF-8
transfer-encoding: chunked
location: http://track.sparklemob.com/tl?a=224&o=21602&s2=A11311134202504060839539MIUkGgyHD
access-control-allow-origin: *
|
|
| cdnjs.cloudflare.com/ajax/libs/animate.css/3.7.2/animate.min.css | 104.17.25.14 | 200 OK | 58 kB |
URL GET cdnjs.cloudflare.com/ajax/libs/animate.css/3.7.2/animate.min.css IP 104.17.25.14:443
Requested byhttp://dz-oo.battleplusliveonline.com/battleplusdz.08.games.pin.html?r2.tx=eb798ca3-dda0-4ecc-ad4e-97e4625ac87c&utm_source=218-224&utm_campaign=hand&sw=Bm1KTesAAAGWCRN6igAAAFwAAADaAAAAAAAAAAB6AAAAAuY&he_done=true&mx= CertificateIssuerGoogle Trust Services Subjectcdnjs.cloudflare.com Fingerprint5D:9B:5B:BE:24:B7:4B:CA:F3:05:47:2F:AB:3F:3C:F7:4E:C3:4D:BC ValidityMon, 24 Mar 2025 12:00:12 GMT - Sun, 22 Jun 2025 13:00:01 GMT
File typeASCII text, with very long lines (57919) Hashbc1a6a99c43f5ccc97d2d350bde13f74 29a6f54569c193ffd6116f03be3eb42359c60eb7 3c770e90f98eb21b0c042fafb49755af93306fbaf42e449524f94fae9fc83295
GET /ajax/libs/animate.css/3.7.2/animate.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://dz-oo.battleplusliveonline.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 06 Apr 2025 03:09:57 GMT
content-type: text/css; charset=utf-8
content-length: 3511
cf-ray: 92be16e17f5b56b5-OSL
server: cloudflare
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03d2a-e311"
last-modified: Mon, 04 May 2020 16:04:58 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 106160
expires: Fri, 27 Mar 2026 03:09:57 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zJ%2FZHlLojibTvqOVck7vUeUt0siTTg3Mkph%2BNB26UnrZ0pTVub8K1IT3pXK2ZmA%2FNPzeJueYGu8XegbQbhBgSALzD3bWbOKatL1HHpYJZVnHjBCHJZ34AZClKm95R1QTBTThb8f8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| dz-oo.battleplusliveonline.com/templates/generic/images/blur.png | 54.240.174.60 | 200 OK | 5.8 kB |
URL GET dz-oo.battleplusliveonline.com/templates/generic/images/blur.png IP 54.240.174.60:80
Requested byhttp://dz-oo.battleplusliveonline.com/battleplusdz.08.games.pin.html?r2.tx=eb798ca3-dda0-4ecc-ad4e-97e4625ac87c&utm_source=218-224&utm_campaign=hand&sw=Bm1KTesAAAGWCRN6igAAAFwAAADaAAAAAAAAAAB6AAAAAuY&he_done=true&mx=
File typePNG image data, 41 x 210, 8-bit/color RGBA, non-interlaced Hash3fcdcb6fd4e5403b3ab319d06707e18b 2b442ee1b3dd28e70322ac8ef882fa4a58561845 55c287eafc84d0e075b66e08195727fa060f8740c1bd4b75346a17dbce5ffb4a
GET /templates/generic/images/blur.png HTTP/1.1
Host: dz-oo.battleplusliveonline.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://dz-oo.battleplusliveonline.com/battleplusdz.08.games.pin.html?r2.tx=eb798ca3-dda0-4ecc-ad4e-97e4625ac87c&utm_source=218-224&utm_campaign=hand&sw=Bm1KTesAAAGWCRN6igAAAFwAAADaAAAAAAAAAAB6AAAAAuY&he_done=true&mx=
DNT: 1
Connection: keep-alive
Cookie: r2.client_id=0413dc93-a9be-432a-b633-86ed595f5824
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 5781
Connection: keep-alive
Date: Sat, 05 Apr 2025 09:42:15 GMT
Last-Modified: Mon, 31 Mar 2025 08:31:03 GMT
ETag: "3fcdcb6fd4e5403b3ab319d06707e18b"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: i2Ouqxap64l6UcxllNo5eyIDD4ps9SQtaim7wouuNb0c6NUVa4Wl5A==
Age: 62863
|
|
| dz-oo.battleplusliveonline.com/templates/generic/images/creativity.jpg | 54.240.174.60 | 200 OK | 81 kB |
URL GET dz-oo.battleplusliveonline.com/templates/generic/images/creativity.jpg IP 54.240.174.60:80
Requested byhttp://dz-oo.battleplusliveonline.com/battleplusdz.08.games.pin.html?r2.tx=eb798ca3-dda0-4ecc-ad4e-97e4625ac87c&utm_source=218-224&utm_campaign=hand&sw=Bm1KTesAAAGWCRN6igAAAFwAAADaAAAAAAAAAAB6AAAAAuY&he_done=true&mx=
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1280x663, components 3 Hash603cd714dfbbf5eee0a84a21997c3523 78c6d4b224f5882bded23fde57c1709d83c1ce68 4a6611543268b4cae60f3f20265fadceeeedf124c35169a5fbcebf29df2c467a
GET /templates/generic/images/creativity.jpg HTTP/1.1
Host: dz-oo.battleplusliveonline.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://dz-oo.battleplusliveonline.com/templates/generic/css/generic.css
Cookie: r2.client_id=0413dc93-a9be-432a-b633-86ed595f5824
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 81227
Connection: keep-alive
Date: Sat, 05 Apr 2025 09:42:15 GMT
Last-Modified: Mon, 31 Mar 2025 08:31:04 GMT
ETag: "603cd714dfbbf5eee0a84a21997c3523"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Me99b0Xqzl6fiDYK4WHosJla344G6Te8zv1nvJ6FX9Uh9kbkqP-_Qw==
Age: 62864
|
|
| dz-oo.battleplusliveonline.com/favicon.ico | 54.240.174.60 | 200 OK | 15 kB |
URL GET dz-oo.battleplusliveonline.com/favicon.ico IP 54.240.174.60:80
Requested byhttp://dz-oo.battleplusliveonline.com/battleplusdz.08.games.pin.html?r2.tx=eb798ca3-dda0-4ecc-ad4e-97e4625ac87c&utm_source=218-224&utm_campaign=hand&sw=Bm1KTesAAAGWCRN6igAAAFwAAADaAAAAAAAAAAB6AAAAAuY&he_done=true&mx=
File typePNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced Hash359859300f0a9cbc1ea488e6808a314c a643a03aac0d320a2c5019e1dfa98192dbeae6ce 823b136e640821d0c6f2ae8242e8724d04cfc9064fd9852382102b0c3ad89959
GET /favicon.ico HTTP/1.1
Host: dz-oo.battleplusliveonline.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://dz-oo.battleplusliveonline.com/battleplusdz.08.games.pin.html?r2.tx=eb798ca3-dda0-4ecc-ad4e-97e4625ac87c&utm_source=218-224&utm_campaign=hand&sw=Bm1KTesAAAGWCRN6igAAAFwAAADaAAAAAAAAAAB6AAAAAuY&he_done=true&mx=
DNT: 1
Connection: keep-alive
Cookie: r2.client_id=0413dc93-a9be-432a-b633-86ed595f5824
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/x-icon
Content-Length: 15215
Connection: keep-alive
Date: Sat, 05 Apr 2025 09:42:16 GMT
Last-Modified: Tue, 28 Jan 2025 12:12:27 GMT
ETag: "359859300f0a9cbc1ea488e6808a314c"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: wLdxY8-NKT7uuXq0IX5YBgTHLMyJs8twjuPQ7JzUEzybHintGFlUjQ==
Age: 62863
|
|
| www.googletagmanager.com/gtag/js?id=G-B46VFQJ05M&l=dataLayer&cx=c>m=45He5421v9202480111za200&tag_exp=102015666~102509682~102788824~102803279~102813109~102887800~102926062~102975949~103016951~103021830~103027016 | 142.250.74.136 | 200 OK | 373 kB |
URL GET www.googletagmanager.com/gtag/js?id=G-B46VFQJ05M&l=dataLayer&cx=c>m=45He5421v9202480111za200&tag_exp=102015666~102509682~102788824~102803279~102813109~102887800~102926062~102975949~103016951~103021830~103027016 IP 142.250.74.136:443
Requested byhttp://dz-oo.battleplusliveonline.com/battleplusdz.08.games.pin.html?r2.tx=eb798ca3-dda0-4ecc-ad4e-97e4625ac87c&utm_source=218-224&utm_campaign=hand&sw=Bm1KTesAAAGWCRN6igAAAFwAAADaAAAAAAAAAAB6AAAAAuY&he_done=true&mx= CertificateIssuerGoogle Trust Services Subject*.google-analytics.com Fingerprint88:85:26:A3:0A:0B:44:C6:92:DD:7B:0B:D1:14:38:BA:26:B9:EF:D9 ValidityThu, 20 Mar 2025 11:18:39 GMT - Thu, 12 Jun 2025 11:18:38 GMT
File typeJavaScript source, ASCII text, with very long lines (6129) Size373 kB (372918 bytes) Hashdba86444c573a1846035a2e27bd9da6c 0495b91b626bd4195993968086ae5f8dd522040f f23382b432f1d7664e059fa082c5b64a96a509f1208f105d161c154dccd11e15
GET /gtag/js?id=G-B46VFQJ05M&l=dataLayer&cx=c>m=45He5421v9202480111za200&tag_exp=102015666~102509682~102788824~102803279~102813109~102887800~102926062~102975949~103016951~103021830~103027016 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://dz-oo.battleplusliveonline.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 06 Apr 2025 03:09:59 GMT
expires: Sun, 06 Apr 2025 03:09:59 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1020:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1020:0
report-to: {"group":"ascgcycc:1020:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1020:0"}],}
server: Google Tag Manager
content-length: 124480
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| ooredoo-alg.telenity.com/landing/Trendy?request_id=67f1f0834796198f06fa9ca9 | 16.171.98.10 | 301 Moved Permanently | 146 kB |
URL User Request GET ooredoo-alg.telenity.com/landing/Trendy?request_id=67f1f0834796198f06fa9ca9 IP 16.171.98.10:443
CertificateIssuerSectigo Limited Subject*.telenity.com Fingerprint57:15:49:EA:3E:A3:7A:12:50:C3:EC:DB:0E:E7:A0:D2:E6:7F:6B:75 ValidityTue, 25 Mar 2025 00:00:00 GMT - Wed, 25 Mar 2026 23:59:59 GMT
Size146 kB (146154 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /landing/Trendy?request_id=67f1f0834796198f06fa9ca9 HTTP/1.1
Host: ooredoo-alg.telenity.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Sun, 06 Apr 2025 03:09:55 GMT
content-type: text/html
content-length: 178
location: http://ooredoo-alg.telenity.com/landing/Trendy?request_id=67f1f0834796198f06fa9ca9
server: nginx
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| dz-oo.battleplusliveonline.com/templates/generic/css/generic.css | 54.240.174.60 | 200 OK | 10 kB |
URL GET dz-oo.battleplusliveonline.com/templates/generic/css/generic.css IP 54.240.174.60:80
Requested byhttp://dz-oo.battleplusliveonline.com/battleplusdz.08.games.pin.html?r2.tx=eb798ca3-dda0-4ecc-ad4e-97e4625ac87c&utm_source=218-224&utm_campaign=hand&sw=Bm1KTesAAAGWCRN6igAAAFwAAADaAAAAAAAAAAB6AAAAAuY&he_done=true&mx=
Hashc246baae4ffeef4e9143228b1a5a5f79 05a184c55a7346968cbdfaacfb09293d9cfea564 79f0eca6fa42cdd5165528c8f4059e518780cec5ce3bc0e34c5e0217bfd91ddb
GET /templates/generic/css/generic.css HTTP/1.1
Host: dz-oo.battleplusliveonline.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://dz-oo.battleplusliveonline.com/battleplusdz.08.games.pin.html?r2.tx=eb798ca3-dda0-4ecc-ad4e-97e4625ac87c&utm_source=218-224&utm_campaign=hand&sw=Bm1KTesAAAGWCRN6igAAAFwAAADaAAAAAAAAAAB6AAAAAuY&he_done=true&mx=
DNT: 1
Connection: keep-alive
Cookie: r2.client_id=0413dc93-a9be-432a-b633-86ed595f5824
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Date: Sat, 05 Apr 2025 09:42:14 GMT
Last-Modified: Mon, 31 Mar 2025 08:31:03 GMT
Content-Encoding: gzip
x-amz-server-side-encryption: AES256
Server: AmazonS3
ETag: W/"c246baae4ffeef4e9143228b1a5a5f79"
Vary: accept-encoding
X-Cache: Hit from cloudfront
Via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: cON1O1PDFr3_0z0LDVKW_pS7w_kWShYVJgXhlLm5sx94KVpUXvDvmg==
Age: 62864
|
|
| dz-oo.battleplusliveonline.com/js/page.cookies.js | 54.240.174.60 | 200 OK | 16 kB |
URL GET dz-oo.battleplusliveonline.com/js/page.cookies.js IP 54.240.174.60:80
Requested byhttp://dz-oo.battleplusliveonline.com/battleplusdz.08.games.pin.html?r2.tx=eb798ca3-dda0-4ecc-ad4e-97e4625ac87c&utm_source=218-224&utm_campaign=hand&sw=Bm1KTesAAAGWCRN6igAAAFwAAADaAAAAAAAAAAB6AAAAAuY&he_done=true&mx=
Hash3072e2d4fa1abfc348120d825ff63dd0 9dd2de5af733f421a06480b7fa9a3899908a2e8a ab0cccf81213651243f8d54129f3f0a01ba91dfaf3abc90db25b339a8b43a071
GET /js/page.cookies.js HTTP/1.1
Host: dz-oo.battleplusliveonline.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://dz-oo.battleplusliveonline.com/battleplusdz.08.games.pin.html?r2.tx=eb798ca3-dda0-4ecc-ad4e-97e4625ac87c&utm_source=218-224&utm_campaign=hand&sw=Bm1KTesAAAGWCRN6igAAAFwAAADaAAAAAAAAAAB6AAAAAuY&he_done=true&mx=
DNT: 1
Connection: keep-alive
Cookie: r2.client_id=0413dc93-a9be-432a-b633-86ed595f5824
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Date: Sat, 05 Apr 2025 09:42:14 GMT
Last-Modified: Tue, 28 Jan 2025 13:24:24 GMT
Content-Encoding: gzip
x-amz-server-side-encryption: AES256
Server: AmazonS3
ETag: W/"3072e2d4fa1abfc348120d825ff63dd0"
Vary: accept-encoding
X-Cache: Hit from cloudfront
Via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 5prV_TdwSicqc_RaX3TSty5Ux4hto_02m-_y4ZCMLWN2_6DcTW_oPQ==
Age: 62864
|
|
| mvasdigitalmarketing.com/panel/smartlink?zid=665&ops=1&click_id=c1555c3acb684819a7d7cfc394690dd7 | 159.89.163.174 | 302 Found | 0 B |
URL User Request GET mvasdigitalmarketing.com/panel/smartlink?zid=665&ops=1&click_id=c1555c3acb684819a7d7cfc394690dd7 IP 159.89.163.174:443
ASN#14061 DIGITALOCEAN-ASN
CertificateIssuerGoDaddy.com, Inc. Subjectmvasdigitalmarketing.com FingerprintBE:E3:7D:2E:D5:B4:C4:46:FA:B9:B9:34:EA:E2:B8:EE:C7:3B:02:11 ValidityWed, 06 Nov 2024 11:51:25 GMT - Thu, 06 Nov 2025 11:51:25 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /panel/smartlink?zid=665&ops=1&click_id=c1555c3acb684819a7d7cfc394690dd7 HTTP/1.1
Host: mvasdigitalmarketing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Date: Sun, 06 Apr 2025 03:09:51 GMT
Server: Apache/2.4.57 (CentOS Stream) OpenSSL/3.0.7
X-Powered-By: PHP/8.0.30
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: ci_session=i1r1u92suptmoip6muqc3cligtfhjg2b; expires=Sun, 06-Apr-2025 05:09:51 GMT; Max-Age=7200; path=/; HttpOnly
location: https://digi.smartstalk.com/redirect/redirect.aspx?offerid=11318&pid=330&sub1=665_913765796&sub2=
Content-Length: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
|
|
| fonts.gstatic.com/s/roboto/v47/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWubEbVmUiAo.woff2 | 142.250.74.35 | 200 OK | 21 kB |
URL GET fonts.gstatic.com/s/roboto/v47/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWubEbVmUiAo.woff2 IP 142.250.74.35:443
Requested byhttp://dz-oo.battleplusliveonline.com/battleplusdz.08.games.pin.html?r2.tx=eb798ca3-dda0-4ecc-ad4e-97e4625ac87c&utm_source=218-224&utm_campaign=hand&sw=Bm1KTesAAAGWCRN6igAAAFwAAADaAAAAAAAAAAB6AAAAAuY&he_done=true&mx= CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint04:FF:92:E7:16:B0:49:91:8B:B7:8D:C6:93:B9:20:B4:2A:33:9F:A8 ValidityThu, 20 Mar 2025 11:19:45 GMT - Thu, 12 Jun 2025 11:19:44 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 20612, version 1.0 Hashb07da7aa3e4f363c5cdbc11312239e8c 47bf5b2f24ea4a4caafccc89b9d2a6677ef9e3b8 e44c11f4834bdd4d6b6da7b8ee5eaebc8acb41250cd6bce5cc82ea8262140eaa
GET /s/roboto/v47/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWubEbVmUiAo.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://dz-oo.battleplusliveonline.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 20612
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 03 Apr 2025 09:13:18 GMT
expires: Fri, 03 Apr 2026 09:13:18 GMT
cache-control: public, max-age=31536000
age: 237400
last-modified: Wed, 08 Jan 2025 18:23:11 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| dz-oo.battleplusliveonline.com/battleplusdz.08.games.lander.html?utm_source=218-224&utm_campaign=hand&sw=Bm1KTesAAAGWCRN6igAAAFwAAADaAAAAAAAAAAB6AAAAAuY | 54.240.174.60 | 200 OK | 325 B |
URL User Request GET dz-oo.battleplusliveonline.com/battleplusdz.08.games.lander.html?utm_source=218-224&utm_campaign=hand&sw=Bm1KTesAAAGWCRN6igAAAFwAAADaAAAAAAAAAAB6AAAAAuY IP 54.240.174.60:80
File typeHTML document, ASCII text, with very long lines (348), with no line terminators Hashc7c86d2ff2b1bd8f7f8bd3bcdfa81246 8bb11e9fa31e33d7ead5118ba91ee5ce4dd7ecb5 8d269da7b1548edb7cb9ee161b5ab7466ad4e4521116d9c6fe91a7a9b81589e1
GET /battleplusdz.08.games.lander.html?utm_source=218-224&utm_campaign=hand&sw=Bm1KTesAAAGWCRN6igAAAFwAAADaAAAAAAAAAAB6AAAAAuY HTTP/1.1
Host: dz-oo.battleplusliveonline.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 325
Connection: keep-alive
Server: CloudFront
Date: Sun, 06 Apr 2025 03:09:55 GMT
Set-Cookie: r2.client_id=0413dc93-a9be-432a-b633-86ed595f5824
Cache-Control: no-cache, no-store, must-revalidate
X-Cache: Miss from cloudfront
Via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 0fwyuKn43ePKgkgiVngvw4EwtvYMgEDP_GYzN6vUJe7zbTyvl5Y0XQ==
|
|
| ooredoo-alg.telenity.com/landing/Trendy?request_id=67f1f0834796198f06fa9ca9 | 16.16.86.84 | 301 Moved Permanently | 146 kB |
URL User Request GET ooredoo-alg.telenity.com/landing/Trendy?request_id=67f1f0834796198f06fa9ca9 IP 16.16.86.84:80
Size146 kB (146154 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /landing/Trendy?request_id=67f1f0834796198f06fa9ca9 HTTP/1.1
Host: ooredoo-alg.telenity.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Sun, 06 Apr 2025 03:09:55 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Set-Cookie: PHPSESSID=rf0qqrbachails0domit6kmds7; expires=Mon, 07-Apr-2025 03:09:55 GMT; Max-Age=86400; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Location: http://dz-oo.battleplusliveonline.com/battleplusdz.08.games.pin.html?r2.tx=eb798ca3-dda0-4ecc-ad4e-97e4625ac87c&utm_source=218-224&utm_campaign=hand&sw=Bm1KTesAAAGWCRN6igAAAFwAAADaAAAAAAAAAAB6AAAAAuY&he_done=true&mx=
X-SERVE: Tapp01
cf-cache-status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3X0ua1VfPJtH4IR6fIoiA8EUOME3yU3UMtUjzCsKJZHBMdqyK1tmSEsR%2FJG2sTdNQbbuscV5wuZKao6ZesBXjHd7cbLc1wC68GkiuffoEdyRXxBvJkGOhxHJv2%2FD7sEvhwks"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
CF-RAY: 92be16d639082d95-ARN
server-timing: cfL4;desc="?proto=TCP&rtt=3999&min_rtt=3999&rtt_var=1999&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=616&delivery_rate=0&cwnd=230&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000; includeSubdomains; preload
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Access-Control-Allow-Methods: GET, HEAD
Access-Control-Allow-Headers: Msisdn, msisdn, X-Custom-Software, X-My-Custom
Access-Control-Expose-Headers: Origin
Access-Control-Allow-Credentials: true
|
|
| unpkg.com/imask@7.6.1/dist/imask.js | 104.17.248.203 | 200 OK | 124 kB |
URL GET unpkg.com/imask@7.6.1/dist/imask.js IP 104.17.248.203:443
Requested byhttp://dz-oo.battleplusliveonline.com/battleplusdz.08.games.pin.html?r2.tx=eb798ca3-dda0-4ecc-ad4e-97e4625ac87c&utm_source=218-224&utm_campaign=hand&sw=Bm1KTesAAAGWCRN6igAAAFwAAADaAAAAAAAAAAB6AAAAAuY&he_done=true&mx= CertificateIssuerGoogle Trust Services Subjectunpkg.com FingerprintD9:8C:AA:B3:FA:58:5C:51:D2:D2:A6:73:07:D2:24:89:C8:98:FC:43 ValidityFri, 04 Apr 2025 18:35:52 GMT - Thu, 03 Jul 2025 19:35:49 GMT
File typeJavaScript source, ASCII text, with very long lines (2154) Size124 kB (124186 bytes) Hash2c87e2f35ea8ab00ea8158b106549788 154cf5157119e081354560fe6d4cae04174c75e5 90b57afbd3c669438d15eb8b3e65cdea42685ca6d1beed64e781f1f99fca5492
GET /imask@7.6.1/dist/imask.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://dz-oo.battleplusliveonline.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 06 Apr 2025 03:09:57 GMT
content-type: text/javascript; charset=utf-8
cf-ray: 92be16e199e0712f-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 986514
cache-control: public, max-age=31536000
last-modified: Tue, 25 Mar 2025 17:08:03 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
access-control-expose-headers: *
content-digest: sha256=:kLV6+9PGaUONFeuLPmXN6kJoXKbRvu1k54Hx+Z/KVJI=:
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css2?family=Cairo:wght@200..1000&family=Roboto:ital@0;1&display=swap | 142.250.74.10 | 200 OK | 13 kB |
URL GET fonts.googleapis.com/css2?family=Cairo:wght@200..1000&family=Roboto:ital@0;1&display=swap IP 142.250.74.10:443
Requested byhttp://dz-oo.battleplusliveonline.com/battleplusdz.08.games.pin.html?r2.tx=eb798ca3-dda0-4ecc-ad4e-97e4625ac87c&utm_source=218-224&utm_campaign=hand&sw=Bm1KTesAAAGWCRN6igAAAFwAAADaAAAAAAAAAAB6AAAAAuY&he_done=true&mx= CertificateIssuerGoogle Trust Services Subjectupload.video.google.com Fingerprint3C:2E:67:30:A6:95:F3:D3:61:49:AB:AC:BC:D1:CF:77:3E:33:8F:B7 ValidityThu, 20 Mar 2025 11:19:46 GMT - Thu, 12 Jun 2025 11:19:45 GMT
File typeASCII text, with very long lines (1572) Hash973a7ec9ad8e45fae89a2a6db37fe6d7 ff6f3e54a2cc54e6f4d2450683c49f27a1fe1859 fbcd7188a43083ca1c22a2bc08b9af1189adb56c5fc12a226033cd6d85756e9a
GET /css2?family=Cairo:wght@200..1000&family=Roboto:ital@0;1&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://dz-oo.battleplusliveonline.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 06 Apr 2025 03:09:57 GMT
date: Sun, 06 Apr 2025 03:09:57 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtm.js?id=GTM-NLX8RRTB | 142.250.74.136 | 200 OK | 288 kB |
URL GET www.googletagmanager.com/gtm.js?id=GTM-NLX8RRTB IP 142.250.74.136:443
Requested byhttp://dz-oo.battleplusliveonline.com/battleplusdz.08.games.pin.html?r2.tx=eb798ca3-dda0-4ecc-ad4e-97e4625ac87c&utm_source=218-224&utm_campaign=hand&sw=Bm1KTesAAAGWCRN6igAAAFwAAADaAAAAAAAAAAB6AAAAAuY&he_done=true&mx= CertificateIssuerGoogle Trust Services Subject*.google-analytics.com Fingerprint88:85:26:A3:0A:0B:44:C6:92:DD:7B:0B:D1:14:38:BA:26:B9:EF:D9 ValidityThu, 20 Mar 2025 11:18:39 GMT - Thu, 12 Jun 2025 11:18:38 GMT
File typeJavaScript source, ASCII text, with very long lines (11738) Size288 kB (287798 bytes) Hash552befd19c502977450f7bd3e374d4dd 08a47dbccb5f2c11a88126aa29585ff2a45446d1 49b9cdf4f7673afb5bdfdae4df8aba3ac2beea1215ff22261f5a46f36f5701ad
GET /gtm.js?id=GTM-NLX8RRTB HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://dz-oo.battleplusliveonline.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 06 Apr 2025 03:09:57 GMT
expires: Sun, 06 Apr 2025 03:09:57 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1262:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1262:0
report-to: {"group":"ascgcycc:1262:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1262:0"}],}
server: Google Tag Manager
content-length: 93698
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| notify.dcbprotect.com/A400479877507743842426820864828404604446260268602 | 54.75.211.52 | 200 OK | 0 B |
URL POST notify.dcbprotect.com/A400479877507743842426820864828404604446260268602 IP 54.75.211.52:443
Requested byhttp://dz-oo.battleplusliveonline.com/battleplusdz.08.games.pin.html?r2.tx=eb798ca3-dda0-4ecc-ad4e-97e4625ac87c&utm_source=218-224&utm_campaign=hand&sw=Bm1KTesAAAGWCRN6igAAAFwAAADaAAAAAAAAAAB6AAAAAuY&he_done=true&mx= CertificateIssuerAmazon Subject*.dcbprotect.com FingerprintBD:E8:D4:76:C9:48:51:5A:DA:83:97:AF:BC:4D:36:03:36:29:53:10 ValidityFri, 01 Nov 2024 00:00:00 GMT - Sat, 29 Nov 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /A400479877507743842426820864828404604446260268602 HTTP/1.1
Host: notify.dcbprotect.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 11717
Origin: http://dz-oo.battleplusliveonline.com
DNT: 1
Connection: keep-alive
Referer: http://dz-oo.battleplusliveonline.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
date: Sun, 06 Apr 2025 03:10:00 GMT
content-type: text/html; charset=UTF-8
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
content-encoding: gzip
transfer-encoding: chunked
|
|
| trckmobile.trckswrm.com/click?offer_id=92&pub_id=218&pub_sub_id=224&pub_click_id=029125B5A2A9A1743908993520896 | 168.119.211.149 | 302 Found | 0 B |
URL User Request GET trckmobile.trckswrm.com/click?offer_id=92&pub_id=218&pub_sub_id=224&pub_click_id=029125B5A2A9A1743908993520896 IP 168.119.211.149:443
ASN#24940 Hetzner Online GmbH
CertificateIssuerZeroSSL Subjecttrckmobile.trckswrm.com Fingerprint81:81:FF:4E:63:3E:1D:A4:C1:31:B5:B2:3D:1D:51:3F:F1:6F:63:B1 ValidityThu, 20 Feb 2025 00:00:00 GMT - Wed, 21 May 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /click?offer_id=92&pub_id=218&pub_sub_id=224&pub_click_id=029125B5A2A9A1743908993520896 HTTP/1.1
Host: trckmobile.trckswrm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
access-control-allow-origin: *
location: https://dz-oo.battleplusliveonline.com/battleplusdz.08.games.lander.html?utm_source=218-224&utm_campaign=hand&sw=Bm1KTesAAAGWCRN6igAAAFwAAADaAAAAAAAAAAB6AAAAAuY
referrer-policy: no-referrer
content-length: 0
access-control-allow-methods: *
date: Sun, 06 Apr 2025 03:09:53 GMT
X-Firefox-Spdy: h2
|
|
| dz-oo.battleplusliveonline.com/battleplusdz.08.games.lander.html?utm_source=218-224&utm_campaign=hand&sw=Bm1KTesAAAGWCRN6igAAAFwAAADaAAAAAAAAAAB6AAAAAuY | 0.0.0.0 | | 0 B |
URL User Request GET dz-oo.battleplusliveonline.com/battleplusdz.08.games.lander.html?utm_source=218-224&utm_campaign=hand&sw=Bm1KTesAAAGWCRN6igAAAFwAAADaAAAAAAAAAAB6AAAAAuY IP 0.0.0.0:0
CertificateIssuerAmazon Subjectmybattlepluslive.com Fingerprint64:32:40:8A:10:EB:7A:25:D1:EA:88:55:4E:21:B9:1E:7A:12:2A:18 ValidityMon, 15 Jul 2024 00:00:00 GMT - Thu, 14 Aug 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /battleplusdz.08.games.lander.html?utm_source=218-224&utm_campaign=hand&sw=Bm1KTesAAAGWCRN6igAAAFwAAADaAAAAAAAAAAB6AAAAAuY HTTP/1.1
Host: dz-oo.battleplusliveonline.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| dz-oo.battleplusliveonline.com/battleplusdz.08.games.pin.html?r2.tx=eb798ca3-dda0-4ecc-ad4e-97e4625ac87c&utm_source=218-224&utm_campaign=hand&sw=Bm1KTesAAAGWCRN6igAAAFwAAADaAAAAAAAAAAB6AAAAAuY&he_done=true&mx= | 54.240.174.60 | 200 OK | 146 kB |
URL User Request GET dz-oo.battleplusliveonline.com/battleplusdz.08.games.pin.html?r2.tx=eb798ca3-dda0-4ecc-ad4e-97e4625ac87c&utm_source=218-224&utm_campaign=hand&sw=Bm1KTesAAAGWCRN6igAAAFwAAADaAAAAAAAAAAB6AAAAAuY&he_done=true&mx= IP 54.240.174.60:80
Size146 kB (146154 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /battleplusdz.08.games.pin.html?r2.tx=eb798ca3-dda0-4ecc-ad4e-97e4625ac87c&utm_source=218-224&utm_campaign=hand&sw=Bm1KTesAAAGWCRN6igAAAFwAAADaAAAAAAAAAAB6AAAAAuY&he_done=true&mx= HTTP/1.1
Host: dz-oo.battleplusliveonline.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Cookie: r2.client_id=0413dc93-a9be-432a-b633-86ed595f5824
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Server: CloudFront
Date: Sun, 06 Apr 2025 03:09:57 GMT
Vary: Accept-Encoding
Set-Cookie: r2.client_id=0413dc93-a9be-432a-b633-86ed595f5824
Cache-Control: no-cache, no-store, must-revalidate
Content-Encoding: gzip
X-Cache: Miss from cloudfront
Via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: JU1hStPauWE-5Vxacv7cjYGurrBIJ7krgT3ZQTC05YGCZDs8VRQ3KQ==
|
|
| fonts.gstatic.com/s/cairo/v28/SLXVc1nY6HkvangtZmpQdkhzfH5lkSscRiyS8pg_RWH1.woff2 | 142.250.74.35 | 200 OK | 34 kB |
URL GET fonts.gstatic.com/s/cairo/v28/SLXVc1nY6HkvangtZmpQdkhzfH5lkSscRiyS8pg_RWH1.woff2 IP 142.250.74.35:443
Requested byhttp://dz-oo.battleplusliveonline.com/battleplusdz.08.games.pin.html?r2.tx=eb798ca3-dda0-4ecc-ad4e-97e4625ac87c&utm_source=218-224&utm_campaign=hand&sw=Bm1KTesAAAGWCRN6igAAAFwAAADaAAAAAAAAAAB6AAAAAuY&he_done=true&mx= CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint04:FF:92:E7:16:B0:49:91:8B:B7:8D:C6:93:B9:20:B4:2A:33:9F:A8 ValidityThu, 20 Mar 2025 11:19:45 GMT - Thu, 12 Jun 2025 11:19:44 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 33588, version 1.0 Hashead8e97c01f0448365969c144c8c5fe8 4ff4d355eeaace00eeaf2ae15cc50d01ac2bfa98 1355605c748ba06b91514ca27feaa9c0c97ac33eb32fed979fc9fabb623d9023
GET /s/cairo/v28/SLXVc1nY6HkvangtZmpQdkhzfH5lkSscRiyS8pg_RWH1.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://dz-oo.battleplusliveonline.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 33588
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 03 Apr 2025 18:20:12 GMT
expires: Fri, 03 Apr 2026 18:20:12 GMT
cache-control: public, max-age=31536000
age: 204586
last-modified: Tue, 02 May 2023 14:51:32 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| dz-oo.battleplusliveonline.com/templates/generic/fonts/rifton/rifton-regular-webfont.woff2 | 54.240.174.60 | 200 OK | 15 kB |
URL GET dz-oo.battleplusliveonline.com/templates/generic/fonts/rifton/rifton-regular-webfont.woff2 IP 54.240.174.60:80
Requested byhttp://dz-oo.battleplusliveonline.com/battleplusdz.08.games.pin.html?r2.tx=eb798ca3-dda0-4ecc-ad4e-97e4625ac87c&utm_source=218-224&utm_campaign=hand&sw=Bm1KTesAAAGWCRN6igAAAFwAAADaAAAAAAAAAAB6AAAAAuY&he_done=true&mx=
File typeWeb Open Font Format (Version 2), TrueType, length 15336, version 1.0 Hashffd06686b542f6cb448f3f9b03930602 781b68ed798c2510f2ee4440ff09fcb08149dce5 4749b2a7a3fc868e1bd25b8767b06017cacb1484829b9c21d55ec136d2a15847
GET /templates/generic/fonts/rifton/rifton-regular-webfont.woff2 HTTP/1.1
Host: dz-oo.battleplusliveonline.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: http://dz-oo.battleplusliveonline.com/templates/generic/css/generic.css
Cookie: r2.client_id=0413dc93-a9be-432a-b633-86ed595f5824
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: binary/octet-stream
Content-Length: 15336
Connection: keep-alive
Date: Sat, 05 Apr 2025 09:42:15 GMT
Last-Modified: Mon, 31 Mar 2025 08:30:45 GMT
ETag: "ffd06686b542f6cb448f3f9b03930602"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: I25KuICmRrlH3uP--MjKLayuGYSKgC4iXkf13zciWl84-pgGrgFITg==
Age: 62864
|
|
| fonts.gstatic.com/s/cairo/v28/SLXVc1nY6HkvangtZmpQdkhzfH5lkSscQyyS8pg_RWH1vCk.woff2 | 142.250.74.35 | 200 OK | 31 kB |
URL GET fonts.gstatic.com/s/cairo/v28/SLXVc1nY6HkvangtZmpQdkhzfH5lkSscQyyS8pg_RWH1vCk.woff2 IP 142.250.74.35:443
Requested byhttp://dz-oo.battleplusliveonline.com/battleplusdz.08.games.pin.html?r2.tx=eb798ca3-dda0-4ecc-ad4e-97e4625ac87c&utm_source=218-224&utm_campaign=hand&sw=Bm1KTesAAAGWCRN6igAAAFwAAADaAAAAAAAAAAB6AAAAAuY&he_done=true&mx= CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint04:FF:92:E7:16:B0:49:91:8B:B7:8D:C6:93:B9:20:B4:2A:33:9F:A8 ValidityThu, 20 Mar 2025 11:19:45 GMT - Thu, 12 Jun 2025 11:19:44 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 30596, version 1.0 Hashcdfdf6997ccfea7171e17593b08e3dbd 8bcfc0fb78306b10459da6670d17221fd1a0132d 60d51fea6669a866e3dce8a8583978127ef1808feb14c073b2f5c2a05a45908c
GET /s/cairo/v28/SLXVc1nY6HkvangtZmpQdkhzfH5lkSscQyyS8pg_RWH1vCk.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://dz-oo.battleplusliveonline.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 30596
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 03 Apr 2025 18:19:02 GMT
expires: Fri, 03 Apr 2026 18:19:02 GMT
cache-control: public, max-age=31536000
age: 204657
last-modified: Tue, 02 May 2023 14:51:33 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|