e1.o.lencr.org/
345 B IP
ASN #20940 Akamai International B.V.
Hash 30e30bc2c5a8f67a1c2bf5ca426faa36
97e2a49a2446d45d5b3f703b38c557b039a72fe4
561f53f6e65682094dfe044d8dd9713b7de056725de292fec145f52b2717a7d4
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "561F53F6E65682094DFE044D8DD9713B7DE056725DE292FEC145F52B2717A7D4"
Last-Modified: Tue, 24 Oct 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3263
Expires: Thu, 26 Oct 2023 16:56:19 GMT
Date: Thu, 26 Oct 2023 16:01:56 GMT
Connection: keep-alive
e1.o.lencr.org/
345 B IP
ASN #20940 Akamai International B.V.
Hash 30e30bc2c5a8f67a1c2bf5ca426faa36
97e2a49a2446d45d5b3f703b38c557b039a72fe4
561f53f6e65682094dfe044d8dd9713b7de056725de292fec145f52b2717a7d4
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "561F53F6E65682094DFE044D8DD9713B7DE056725DE292FEC145F52B2717A7D4"
Last-Modified: Tue, 24 Oct 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3263
Expires: Thu, 26 Oct 2023 16:56:19 GMT
Date: Thu, 26 Oct 2023 16:01:56 GMT
Connection: keep-alive
promos.betano.pt/cdn-cgi/styles/cf.errors.css
200 OK 7.7 kB URL GET HTTP/2 promos.betano.pt/cdn-cgi/styles/cf.errors.css
IP
Requested by https://promos.betano.pt/casino-50-gratis/index.html?cod=CASINO&btag=a_5498b_407c_WrJhdwb312aR1MoqvLyor6&utm_medium=1367&utm_source=1&siteid=5498
Certificate IssuerCloudflare, Inc.
Subjectpromos.betano.pt
Fingerprint74:3E:81:5F:68:DB:E2:1C:41:8A:F2:09:7D:67:18:22:1A:96:2D:A6
ValidityMon, 11 Sep 2023 00:00:00 GMT - Tue, 10 Sep 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash 4166726d8fd3ebfc2642d0826d4e5e53
c769e7635148a1bd5accb8f47e4fc17847f821f5
c0ff80edf04d15467231a53a9399b1891d5747e20296a16481ae798154a94d35
GET /cdn-cgi/styles/cf.errors.css HTTP/1.1
Host: promos.betano.pt
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://promos.betano.pt/casino-50-gratis/index.html?cod=CASINO&btag=a_5498b_407c_WrJhdwb312aR1MoqvLyor6&utm_medium=1367&utm_source=1&siteid=5498
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=XkH4v.24nWusT7V6aWAZE9ShY.PoQFUpYhEHvpe21dI-1698336116-0-AW1yS7VqtPO4eOO8lDtpLVBsb6TIlWkBEE8XWEKhoR5vTxeMUKgTaOGkMPQg2VY79bRJjGkJYw/KdALqs/Z8wqQ=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Oct 2023 16:01:56 GMT
content-type: text/css
last-modified: Fri, 20 Oct 2023 18:17:19 GMT
etag: W/"6532c42f-5e44"
server: cloudflare
cf-ray: 81c3ebba2af2568a-OSL
x-frame-options: DENY
x-content-type-options: nosniff
vary: Accept-Encoding
expires: Thu, 26 Oct 2023 18:01:56 GMT
cache-control: max-age=7200, public
content-encoding: gzip
X-Firefox-Spdy: h2
promos.betano.pt/cdn-cgi/images/browser-bar.png?1376755637
200 OK 715 B URL GET HTTP/2 promos.betano.pt/cdn-cgi/images/browser-bar.png?1376755637
IP
Requested by https://promos.betano.pt/casino-50-gratis/index.html?cod=CASINO&btag=a_5498b_407c_WrJhdwb312aR1MoqvLyor6&utm_medium=1367&utm_source=1&siteid=5498
Certificate IssuerCloudflare, Inc.
Subjectpromos.betano.pt
Fingerprint74:3E:81:5F:68:DB:E2:1C:41:8A:F2:09:7D:67:18:22:1A:96:2D:A6
ValidityMon, 11 Sep 2023 00:00:00 GMT - Tue, 10 Sep 2024 23:59:59 GMT
File type PNG image data, 960 x 53, 8-bit colormap, non-interlaced\012- data
Hash 226dcb8f6144bdaafdfbd8f2f354be64
3785cc5b3bf52f8e398177b0ff1020b24aa86b8c
8c873472f4925d5d47521db4d52532d2983e9cb1bde8b43143a6cc6db56c35db
Analyzer Verdict Alert urlquery suspicious Suspicious - Sinkholed / Blocked
GET /cdn-cgi/images/browser-bar.png?1376755637 HTTP/1.1
Host: promos.betano.pt
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://promos.betano.pt/cdn-cgi/styles/cf.errors.css
Cookie: __cf_bm=XkH4v.24nWusT7V6aWAZE9ShY.PoQFUpYhEHvpe21dI-1698336116-0-AW1yS7VqtPO4eOO8lDtpLVBsb6TIlWkBEE8XWEKhoR5vTxeMUKgTaOGkMPQg2VY79bRJjGkJYw/KdALqs/Z8wqQ=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Oct 2023 16:01:56 GMT
content-type: image/png
content-length: 715
last-modified: Fri, 20 Oct 2023 18:17:19 GMT
etag: "6532c42f-2cb"
server: cloudflare
cf-ray: 81c3ebba7b33568a-OSL
x-frame-options: DENY
x-content-type-options: nosniff
vary: Accept-Encoding
expires: Thu, 26 Oct 2023 18:01:56 GMT
cache-control: max-age=7200, public
accept-ranges: bytes
X-Firefox-Spdy: h2
gml-grp.com/C.ashx?btag=a_5498b_407c_&affid=1367&siteid=5498&adid=407&c=WrJhdwb312aR1MoqvLyor6&asclurl=https://promos.betano.pt/casino-50-gratis/index.html?cod=CASINO&AutoR=1
302 Found 4.5 kB URL User Request GET HTTP/2 gml-grp.com/C.ashx?btag=a_5498b_407c_&affid=1367&siteid=5498&adid=407&c=WrJhdwb312aR1MoqvLyor6&asclurl=https://promos.betano.pt/casino-50-gratis/index.html?cod=CASINO&AutoR=1
IP
Certificate IssuerLet's Encrypt
Subjectgml-grp.com
FingerprintD2:39:49:CC:B2:DE:10:13:BE:86:BE:20:72:7B:F1:12:16:02:7A:DC
ValidityTue, 24 Oct 2023 07:57:34 GMT - Mon, 22 Jan 2024 07:57:33 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /C.ashx?btag=a_5498b_407c_&affid=1367&siteid=5498&adid=407&c=WrJhdwb312aR1MoqvLyor6&asclurl=https://promos.betano.pt/casino-50-gratis/index.html?cod=CASINO&AutoR=1 HTTP/1.1
Host: gml-grp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: CEK=a; __cf_bm=YOxPoeKRfL0WS_Gv7kWZsIEGbMHrIqvndrLIfQypYvE-1698336116-0-AfLn47krJUfaZj1GwAkecNdZvxQm2ZQYFtDgZ7iwEbUDleElyYVVTXAtyrV2R3wi+FR+CMleUjD2C+4GQ3TP+gQ=; _cfuvid=IEHYosWTKaWnJ.MMXB5HSfSYguPl0Bvz_lGsmwNKyA0-1698336116204-0-604800000
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Thu, 26 Oct 2023 16:01:56 GMT
content-type: text/html; charset=utf-8
location: https://promos.betano.pt/casino-50-gratis/index.html?cod=CASINO&btag=a_5498b_407c_WrJhdwb312aR1MoqvLyor6&utm_medium=1367&utm_source=1&siteid=5498
cache-control: private
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
x-aspnet-version: 4.0.30319
set-cookie: XYZ=3&1&19&&&&0&1&&f8695222-3088-4270-bb49-a4cb0f8d3a70&&a_5498b_407&; expires=Wed, 24-Jan-2024 16:01:56 GMT; path=/; SameSite=None; Secure
A_407=a=407&r=0&fv=0&lv=0&vc=0&fc=20231026&lc=20231026040156&cc=1; expires=Wed, 24-Jan-2024 16:01:56 GMT; path=/; SameSite=None; Secure
PM_13=id=8727e65a-1fc2-48dc-9fb5-8f6d439eb16e&c=WrJhdwb312aR1MoqvLyor6&s=5498&ad=407&md=0&pm=13&d=20231026160156&ip=1532635802&r=0&ref=&RedirectParams=cod%3DCASINO%26btag%3Da_5498b_407c_WrJhdwb312aR1MoqvLyor6%26utm_medium%3D1367%26utm_source%3D1%26siteid%3D5498&cip=OTEuOTAuNDIuMTU0; expires=Wed, 24-Jan-2024 16:01:56 GMT; path=/; SameSite=None; Secure
CEK=a; expires=Fri, 31-Dec-9999 23:59:59 GMT; path=/; SameSite=None; Secure
x-powered-by: ASP.NET
x-xss-protection: 1; mode=block
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ifPWgMglooEJBK6ap9qWYjwEgDXw%2FmoX9nojW0YeShghg2WC2nRpF%2FvZ2u9UzrVCifNy42tk7kad8PaLMG6Z7gqtsnrS0Ggo5I4BEF%2Fya3kr%2FL5FmnDwg31AyDwyEA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c3ebb67f6cb50b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
promos.betano.pt/casino-50-gratis/index.html?cod=CASINO&btag=a_5498b_407c_WrJhdwb312aR1MoqvLyor6&utm_medium=1367&utm_source=1&siteid=5498
403 Forbidden 4.5 kB URL User Request GET HTTP/2 promos.betano.pt/casino-50-gratis/index.html?cod=CASINO&btag=a_5498b_407c_WrJhdwb312aR1MoqvLyor6&utm_medium=1367&utm_source=1&siteid=5498
IP
Certificate IssuerCloudflare, Inc.
Subjectpromos.betano.pt
Fingerprint74:3E:81:5F:68:DB:E2:1C:41:8A:F2:09:7D:67:18:22:1A:96:2D:A6
ValidityMon, 11 Sep 2023 00:00:00 GMT - Tue, 10 Sep 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (4746), with no line terminators
Hash fb1c3f22142d674ed3738cf011e7ba90
d249d5a981a11071ed695e6731fd9b9427ef8bc7
02e5e35a872cb58cb177207aed19ef6637ef51e23958794eb58b215d66a395f9
GET /casino-50-gratis/index.html?cod=CASINO&btag=a_5498b_407c_WrJhdwb312aR1MoqvLyor6&utm_medium=1367&utm_source=1&siteid=5498 HTTP/1.1
Host: promos.betano.pt
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
date: Thu, 26 Oct 2023 16:01:56 GMT
content-type: text/html; charset=UTF-8
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: max-age=15
expires: Thu, 26 Oct 2023 16:02:11 GMT
set-cookie: __cf_bm=XkH4v.24nWusT7V6aWAZE9ShY.PoQFUpYhEHvpe21dI-1698336116-0-AW1yS7VqtPO4eOO8lDtpLVBsb6TIlWkBEE8XWEKhoR5vTxeMUKgTaOGkMPQg2VY79bRJjGkJYw/KdALqs/Z8wqQ=; path=/; expires=Thu, 26-Oct-23 16:31:56 GMT; domain=.betano.pt; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 81c3ebb75fd6568a-OSL
content-encoding: br
X-Firefox-Spdy: h2
promos.betano.pt/casino-50-gratis/index.html?cod=CASINO&btag=a_5498b_407c_WrJhdwb312aR1MoqvLyor6&utm_medium=1367&utm_source=1&siteid=5498
403 Forbidden 4.5 kB URL User Request GET HTTP/2 promos.betano.pt/casino-50-gratis/index.html?cod=CASINO&btag=a_5498b_407c_WrJhdwb312aR1MoqvLyor6&utm_medium=1367&utm_source=1&siteid=5498
IP
Certificate IssuerCloudflare, Inc.
Subjectpromos.betano.pt
Fingerprint74:3E:81:5F:68:DB:E2:1C:41:8A:F2:09:7D:67:18:22:1A:96:2D:A6
ValidityMon, 11 Sep 2023 00:00:00 GMT - Tue, 10 Sep 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (4746), with no line terminators
Hash 2e373d7bf9e6203308a621192dc2fcbf
836d0951af829e77d82fc06be8b1577279ad903f
f195cb9c1a254f0289b60fc7694765b9c3ebd0cfbdfd22fdb11a9dcea7fab9d4
GET /casino-50-gratis/index.html?cod=CASINO&btag=a_5498b_407c_WrJhdwb312aR1MoqvLyor6&utm_medium=1367&utm_source=1&siteid=5498 HTTP/1.1
Host: promos.betano.pt
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Cookie: __cf_bm=XkH4v.24nWusT7V6aWAZE9ShY.PoQFUpYhEHvpe21dI-1698336116-0-AW1yS7VqtPO4eOO8lDtpLVBsb6TIlWkBEE8XWEKhoR5vTxeMUKgTaOGkMPQg2VY79bRJjGkJYw/KdALqs/Z8wqQ=
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
date: Thu, 26 Oct 2023 16:01:56 GMT
content-type: text/html; charset=UTF-8
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: max-age=15
expires: Thu, 26 Oct 2023 16:02:11 GMT
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 81c3ebb8c98a568a-OSL
content-encoding: br
X-Firefox-Spdy: h2
promos.betano.pt/cdn-cgi/images/cf-no-screenshot-error.png
200 OK 3.2 kB URL GET HTTP/2 promos.betano.pt/cdn-cgi/images/cf-no-screenshot-error.png
IP
Requested by https://promos.betano.pt/casino-50-gratis/index.html?cod=CASINO&btag=a_5498b_407c_WrJhdwb312aR1MoqvLyor6&utm_medium=1367&utm_source=1&siteid=5498
Certificate IssuerCloudflare, Inc.
Subjectpromos.betano.pt
Fingerprint74:3E:81:5F:68:DB:E2:1C:41:8A:F2:09:7D:67:18:22:1A:96:2D:A6
ValidityMon, 11 Sep 2023 00:00:00 GMT - Tue, 10 Sep 2024 23:59:59 GMT
File type PNG image data, 178 x 175, 8-bit colormap, non-interlaced\012- data
Hash 0d768cbc261841d3affc933b9ac3130e
aff136a4c761e1df1ada7e5d9a6ed0ebea74a4b7
1c53772285052e52bb7c12ad46a85a55747ed7bf66963fe1993fcef91ff5b0d0
Analyzer Verdict Alert urlquery suspicious Suspicious - Sinkholed / Blocked
GET /cdn-cgi/images/cf-no-screenshot-error.png HTTP/1.1
Host: promos.betano.pt
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://promos.betano.pt/cdn-cgi/styles/cf.errors.css
Cookie: __cf_bm=XkH4v.24nWusT7V6aWAZE9ShY.PoQFUpYhEHvpe21dI-1698336116-0-AW1yS7VqtPO4eOO8lDtpLVBsb6TIlWkBEE8XWEKhoR5vTxeMUKgTaOGkMPQg2VY79bRJjGkJYw/KdALqs/Z8wqQ=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 26 Oct 2023 16:01:56 GMT
content-type: image/png
content-length: 3213
last-modified: Fri, 20 Oct 2023 18:17:19 GMT
etag: "6532c42f-c8d"
server: cloudflare
cf-ray: 81c3ebba7b35568a-OSL
x-frame-options: DENY
x-content-type-options: nosniff
vary: Accept-Encoding
expires: Thu, 26 Oct 2023 18:01:56 GMT
cache-control: max-age=7200, public
accept-ranges: bytes
X-Firefox-Spdy: h2
promos.betano.pt/favicon.ico
403 Forbidden 4.5 kB URL GET HTTP/2 promos.betano.pt/favicon.ico
IP
Requested by https://promos.betano.pt/casino-50-gratis/index.html?cod=CASINO&btag=a_5498b_407c_WrJhdwb312aR1MoqvLyor6&utm_medium=1367&utm_source=1&siteid=5498
Certificate IssuerCloudflare, Inc.
Subjectpromos.betano.pt
Fingerprint74:3E:81:5F:68:DB:E2:1C:41:8A:F2:09:7D:67:18:22:1A:96:2D:A6
ValidityMon, 11 Sep 2023 00:00:00 GMT - Tue, 10 Sep 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (4746), with no line terminators
Hash 8dc00c8f874c3d379197bc64f065c301
f4f066dccc29346ff7c53f31f1d76f125e049648
66c732234d2f21cff643c76a2c2a96e73613736551ba5b82711d6f512949eec7
GET /favicon.ico HTTP/1.1
Host: promos.betano.pt
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://promos.betano.pt/casino-50-gratis/index.html?cod=CASINO&btag=a_5498b_407c_WrJhdwb312aR1MoqvLyor6&utm_medium=1367&utm_source=1&siteid=5498
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=XkH4v.24nWusT7V6aWAZE9ShY.PoQFUpYhEHvpe21dI-1698336116-0-AW1yS7VqtPO4eOO8lDtpLVBsb6TIlWkBEE8XWEKhoR5vTxeMUKgTaOGkMPQg2VY79bRJjGkJYw/KdALqs/Z8wqQ=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
date: Thu, 26 Oct 2023 16:01:56 GMT
content-type: text/html; charset=UTF-8
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: max-age=15
expires: Thu, 26 Oct 2023 16:02:11 GMT
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 81c3ebba9b5b568a-OSL
content-encoding: br
X-Firefox-Spdy: h2
gml-grp.com/C.ashx?btag=a_5498b_407c_&affid=1367&siteid=5498&adid=407&c=WrJhdwb312aR1MoqvLyor6&asclurl=https://promos.betano.pt/casino-50-gratis/index.html?cod=CASINO
302 Found 4.5 kB URL User Request GET HTTP/2 gml-grp.com/C.ashx?btag=a_5498b_407c_&affid=1367&siteid=5498&adid=407&c=WrJhdwb312aR1MoqvLyor6&asclurl=https://promos.betano.pt/casino-50-gratis/index.html?cod=CASINO
IP
Certificate IssuerLet's Encrypt
Subjectgml-grp.com
FingerprintD2:39:49:CC:B2:DE:10:13:BE:86:BE:20:72:7B:F1:12:16:02:7A:DC
ValidityTue, 24 Oct 2023 07:57:34 GMT - Mon, 22 Jan 2024 07:57:33 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /C.ashx?btag=a_5498b_407c_&affid=1367&siteid=5498&adid=407&c=WrJhdwb312aR1MoqvLyor6&asclurl=https://promos.betano.pt/casino-50-gratis/index.html?cod=CASINO HTTP/1.1
Host: gml-grp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Thu, 26 Oct 2023 16:01:56 GMT
content-type: text/html; charset=utf-8
cache-control: private
location: //gml-grp.com/C.ashx?btag=a_5498b_407c_&affid=1367&siteid=5498&adid=407&c=WrJhdwb312aR1MoqvLyor6&asclurl=https://promos.betano.pt/casino-50-gratis/index.html?cod=CASINO&AutoR=1
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
x-xss-protection: 1; mode=block
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=t9xPEOpyVse4xRL5ODH8TPA7Tw%2Fck3mYYNmsf2Zjfe5VDHTuTW0SFEPcYMvFhH094lfqihrhCO%2BLh3sunG06mHoJVkDMS5zkeJbYoPHZKoKn6qIxpC4ril%2BGRsONTw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
set-cookie: CEK=a; expires=Fri, 31-Dec-9999 23:59:59 GMT; path=/; SameSite=None; Secure
__cf_bm=YOxPoeKRfL0WS_Gv7kWZsIEGbMHrIqvndrLIfQypYvE-1698336116-0-AfLn47krJUfaZj1GwAkecNdZvxQm2ZQYFtDgZ7iwEbUDleElyYVVTXAtyrV2R3wi+FR+CMleUjD2C+4GQ3TP+gQ=; path=/; expires=Thu, 26-Oct-23 16:31:56 GMT; domain=.gml-grp.com; HttpOnly; Secure; SameSite=None
_cfuvid=IEHYosWTKaWnJ.MMXB5HSfSYguPl0Bvz_lGsmwNKyA0-1698336116204-0-604800000; path=/; domain=.gml-grp.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 81c3ebb5fefbb50b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
104.21.58.14
23.36.76.226
172.67.197.50