GET /redirect.aspx?pid=8839&bid=1478&lpid=133&subid=c61ceh9myqn8rbl2eb&sref=inhousecpa&inhousecpa=Kiev_Dima_BR_IviSetki HTTP/1.1
Host: media.hellpartners.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 307 Temporary Redirect
cache-control: private,no-cache, no-store
pragma: no-cache
content-type: text/html
location: https://ivibetlp.com/bonus-wheel/?btag=655279_1AF73ED39B9A4DB0A230A4F468753F31&subid=c61ceh9myqn8rbl2eb&sref=inhousecpa&inhousecpa=Kiev_Dima_BR_IviSetki
p3p: CP="This is not a P3P policy! It is used to bypass IEs problematic handling of cookies"
set-cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a14198%2c%22BID%22%3a1478%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1704423800247)%5c%2f%22%2c%22CookieTag%22%3a%22147814198451240919C20241533%22%7d%5d; SameSite=None;; domain=.hellpartners.com; expires=Fri, 31-Dec-9999 23:59:59 GMT; path=/; secure
NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%22564991202%7c1%22%7d%5d; domain=.hellpartners.com; expires=Sun, 05-Jan-3023 03:03:20 GMT; path=/; secure; SameSite=Strict
x-aspnet-version: 4.0.30319
request-context: appId=cid-v1:83ffbda4-9458-475e-90ec-4427cfb5c3b0
access-control-expose-headers: Request-Context
x-azure-ref: 0eHGXZQAAAABV6rFRLwpTTrXOVHOXAWuFU1ZHMjBFREdFMDYwNwA4M2FkYmU2OS1mMzY0LTQ4MzgtYjNmZC0zNDU0OTA3MzQ4OWE=
x-cache: CONFIG_NOCACHE
date: Fri, 05 Jan 2024 03:03:19 GMT
content-length: 0
X-Firefox-Spdy: h2

GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ivibetlp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 05 Jan 2024 03:03:20 GMT
content-type: application/javascript; charset=utf-8
content-length: 27433
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec4-1538f"
last-modified: Mon, 04 May 2020 16:11:48 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 3523640
expires: Wed, 25 Dec 2024 03:03:20 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6NvvJaTu3lkvgtzy1qRGxO4xmDUTa%2BRA1chgWVZhCACHRBWEDRSRvX%2BSDYsxbI%2F8CcTTk%2Bqk8Bozp08zZqnJ%2BLkh3pZWCtlAZxK2zYljZ6KltNiW3aB8nxOBQ0x6u1wnDBtHS9y4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 84087cd37c37b505-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET /bonus-wheel/img/wheel/wheel.png HTTP/1.1
Host: ivibetlp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ivibetlp.com/bonus-wheel/?btag=655279_1AF73ED39B9A4DB0A230A4F468753F31&subid=c61ceh9myqn8rbl2eb&sref=inhousecpa&inhousecpa=Kiev_Dima_BR_IviSetki
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 05 Jan 2024 03:03:20 GMT
content-type: image/png
content-length: 61929
last-modified: Mon, 22 Aug 2022 21:12:06 GMT
etag: "6303f126-f1e9"
strict-transport-security: max-age=31536000;
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FOOVs7j8r8n37MTjrbJXEqauQqfSm8sQdGzeqoVKivOlxa9uizC2oTS4Y108mXdAswVrcu8cnEFtK2WisrhZluKCxGNf0UFwhQhYxzxCgyFI25seHAvTIPOfu%2FMsoM0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 84087cd38f4cb50b-OSL
alt-svc: h3=":443"; ma=86400

GET /bonus-wheel/img/wheel-stopper.png HTTP/1.1
Host: ivibetlp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ivibetlp.com/bonus-wheel/?btag=655279_1AF73ED39B9A4DB0A230A4F468753F31&subid=c61ceh9myqn8rbl2eb&sref=inhousecpa&inhousecpa=Kiev_Dima_BR_IviSetki
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 05 Jan 2024 03:03:20 GMT
content-type: image/png
content-length: 2955
last-modified: Mon, 22 Aug 2022 21:11:32 GMT
etag: "6303f104-b8b"
strict-transport-security: max-age=31536000;
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Plt15glyBJ0KXoU%2F6lVSxHkVztNJfvJ2QykOINxdO%2BmTQBl%2Bdb3r%2Bu%2Fy1kKxX3Ugmgl2YxIGlmC%2FXzS%2BqIUi5CmCej%2F15JFuQWExZmBJseO9v40wW3KGaGme4gtQ8YA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 84087cd39f50b50b-OSL
alt-svc: h3=":443"; ma=86400

GET /bonus-wheel/img/wheel-joker.png HTTP/1.1
Host: ivibetlp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ivibetlp.com/bonus-wheel/?btag=655279_1AF73ED39B9A4DB0A230A4F468753F31&subid=c61ceh9myqn8rbl2eb&sref=inhousecpa&inhousecpa=Kiev_Dima_BR_IviSetki
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 05 Jan 2024 03:03:20 GMT
content-type: image/png
content-length: 9042
last-modified: Mon, 22 Aug 2022 21:11:32 GMT
etag: "6303f104-2352"
strict-transport-security: max-age=31536000;
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1%2FZlQGcQjkHH5nUuYNsPNlO%2BJ%2BBIVnZc4iEoJxD2UZ9AzUA1Kmj%2FwrGl3wQA4Pzzs1z7PdkcHvmHS43b8DPncqb6lRQGsePaieSsKGv2%2B8aFbUecDxfcL9vgEmD3VIE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 84087cd39f51b50b-OSL
alt-svc: h3=":443"; ma=86400

GET /bonus-wheel/js/refers.js HTTP/1.1
Host: ivibetlp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ivibetlp.com/bonus-wheel/?btag=655279_1AF73ED39B9A4DB0A230A4F468753F31&subid=c61ceh9myqn8rbl2eb&sref=inhousecpa&inhousecpa=Kiev_Dima_BR_IviSetki
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 05 Jan 2024 03:03:20 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Wed, 24 Aug 2022 13:51:22 GMT
etag: W/"63062cda-292"
strict-transport-security: max-age=31536000;
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5nUhrZtddhpGgNJyd52c5wpOR7rAJLt3vEw3zHEiRdEjmRWnXvOVi%2F0Ceu98FmRosNJ%2FzTlOWBCGAog78gSYWBhTMtT0YN55wcsd%2FhX%2Bv0V%2FdjMcU8lVoSit95xQ9n8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 84087cd39f55b50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

GET /gtm.js?id=GTM-PN6BVM7G HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ivibetlp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 05 Jan 2024 03:03:21 GMT
expires: Fri, 05 Jan 2024 03:03:21 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 64024
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET /bonus-wheel/js/main.js HTTP/1.1
Host: ivibetlp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ivibetlp.com/bonus-wheel/?btag=655279_1AF73ED39B9A4DB0A230A4F468753F31&subid=c61ceh9myqn8rbl2eb&sref=inhousecpa&inhousecpa=Kiev_Dima_BR_IviSetki
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 05 Jan 2024 03:03:20 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Wed, 19 Oct 2022 12:55:14 GMT
etag: W/"634ff3b2-6eb5"
strict-transport-security: max-age=31536000;
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lLyAl9IQ2X7FG8SynXdu30Q%2BHFnVy3vGzz8jOHO12YsERv20%2BhhPGYlfFy%2Fjen4QEwp2DBosk%2FkcNq54uGfz8BlZMcWFAn%2B4uJZF5R6C%2BfMrX7fZNH0uI2NOs%2FxQdv0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 84087cd39f53b50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

GET /bonus-wheel/img/main.png HTTP/1.1
Host: ivibetlp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ivibetlp.com/bonus-wheel/css/main.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 05 Jan 2024 03:03:21 GMT
content-type: image/png
content-length: 529431
last-modified: Mon, 22 Aug 2022 21:11:32 GMT
etag: "6303f104-81417"
strict-transport-security: max-age=31536000;
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AEoU5JZxWr0WhEggHZm63OOyUyy0u4QCn4O5heffRwfVhuX9U37f4a0XZj%2BgebV9BuoPOQ2CEJUOafTRJHHziRV%2FOdB0HeSMovW30y4anMjXQ%2Fp%2BnedMbjrPXF3vL7k%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 84087cd5f80bb50b-OSL
alt-svc: h3=":443"; ma=86400

GET /bonus-wheel/img/wheel-button-background.png HTTP/1.1
Host: ivibetlp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ivibetlp.com/bonus-wheel/css/main.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 05 Jan 2024 03:03:21 GMT
content-type: image/png
content-length: 9111
last-modified: Mon, 22 Aug 2022 21:11:32 GMT
etag: "6303f104-2397"
strict-transport-security: max-age=31536000;
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=o6V5vUC6WW2%2FqFc%2F%2B6N1rtxBwMPqLT9mEZFN31TlZiwvB537mC9n6kRWcYaTs%2FZpQcplpRQxhSDtlRw3cIYYC%2F0H5nnJVvRMWQolMtBZzzj6LX7KDzVxzwEFjxjISAo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 84087cd6f87bb50b-OSL
alt-svc: h3=":443"; ma=86400

GET /bonus-wheel/img/wheel-shadow.png HTTP/1.1
Host: ivibetlp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ivibetlp.com/bonus-wheel/css/main.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 05 Jan 2024 03:03:21 GMT
content-type: image/png
content-length: 58695
last-modified: Mon, 22 Aug 2022 21:11:32 GMT
etag: "6303f104-e547"
strict-transport-security: max-age=31536000;
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2Bwa2tTgCY8u8brxw4pQ9AI6Snt4u2%2BrfIIcn1LwF9zftsBwGqu1KTTM7U%2F5ILfgvYTjxKVrYvDu3c8Edls8dEDWewn7K97U12A0M%2FngeGUu2SLvjgE6UzJFymOFyIqg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 84087cd6f87cb50b-OSL
alt-svc: h3=":443"; ma=86400

GET /bonus-wheel/img/popup-background.png HTTP/1.1
Host: ivibetlp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ivibetlp.com/bonus-wheel/css/main.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 05 Jan 2024 03:03:21 GMT
content-type: image/png
content-length: 138772
last-modified: Mon, 22 Aug 2022 21:11:32 GMT
etag: "6303f104-21e14"
strict-transport-security: max-age=31536000;
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BJSPVGrKFcccZDxu8lfzlmAzHWYo4pGBo7OohBBLqLE8ICDtkZthdTBjo02k3%2BOcApdbQubaaMj6bxHu5lzw9JHPDfH1Pv0dLMIi6An6z5%2BrJ6fcOBbvq18tfyr18JI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 84087cd6f87eb50b-OSL
alt-svc: h3=":443"; ma=86400

GET /bonus-wheel/audio/wheel.mp3 HTTP/1.1
Host: ivibetlp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://ivibetlp.com/bonus-wheel/?btag=655279_1AF73ED39B9A4DB0A230A4F468753F31&subid=c61ceh9myqn8rbl2eb&sref=inhousecpa&inhousecpa=Kiev_Dima_BR_IviSetki
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 206 Partial Content
date: Fri, 05 Jan 2024 03:03:21 GMT
content-type: audio/mpeg
content-length: 126084
last-modified: Thu, 28 Jul 2022 22:22:06 GMT
etag: "62e30c0e-1ec84"
strict-transport-security: max-age=31536000;
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
content-range: bytes 0-126083/126084
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IjNDxLmopANsF%2FhO%2B3VAHNbt89MQPX3D9AggCp0BqodoY8YkEbjs9El264s1aVTCgNIckEhp7bq6%2BjDcmzKItqpmEa%2FocwHnWJb5EJeCythBBePYMFcvb50Se1oc1MI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 84087cd6f87fb50b-OSL
alt-svc: h3=":443"; ma=86400

GET /bonus-wheel/audio/fanfare-1.mp3 HTTP/1.1
Host: ivibetlp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://ivibetlp.com/bonus-wheel/?btag=655279_1AF73ED39B9A4DB0A230A4F468753F31&subid=c61ceh9myqn8rbl2eb&sref=inhousecpa&inhousecpa=Kiev_Dima_BR_IviSetki
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 206 Partial Content
date: Fri, 05 Jan 2024 03:03:21 GMT
content-type: audio/mpeg
content-length: 101007
last-modified: Thu, 28 Jul 2022 22:22:09 GMT
etag: "62e30c11-18a8f"
strict-transport-security: max-age=31536000;
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
content-range: bytes 0-101006/101007
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DOCRafUMk912Y2C6Y0K4AdudLRjJGrvfHHM37AoHKlrnx5n%2Bm2v8R0%2FYHx2wlGHhmG4lDVpFrJBp6xdhiBQVzWYeTdWcRBTlCYXtOVQFK%2B2XiX7OQrVzXZ%2BGdE0VTuE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 84087cd778a9b50b-OSL
alt-svc: h3=":443"; ma=86400

GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://ivibetlp.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 29 Dec 2023 13:33:04 GMT
expires: Sat, 28 Dec 2024 13:33:04 GMT
cache-control: public, max-age=31536000
age: 567017
last-modified: Wed, 11 May 2022 19:24:45 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET /gtag/js?id=G-PBXDL40D8M&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ivibetlp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 05 Jan 2024 03:03:21 GMT
expires: Fri, 05 Jan 2024 03:03:21 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 93985
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

GET /bonus-wheel/img/favicon.png HTTP/1.1
Host: ivibetlp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ivibetlp.com/bonus-wheel/?btag=655279_1AF73ED39B9A4DB0A230A4F468753F31&subid=c61ceh9myqn8rbl2eb&sref=inhousecpa&inhousecpa=Kiev_Dima_BR_IviSetki
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 05 Jan 2024 03:03:21 GMT
content-type: image/png
content-length: 1430
last-modified: Mon, 22 Aug 2022 21:11:32 GMT
etag: "6303f104-596"
strict-transport-security: max-age=31536000;
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jk9d6T3dNAtLTMCYGSWvg991F2AoDpMVPQgH3CJehWt8lFgkggMJDBB6dyQyxUs%2FZAuAikToU%2FlVZFaOo4I1qDa%2F22SuoIqI0fXou2byjynb2oTVmQI%2BQBYGVFxzK%2F0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 84087cd9191cb50b-OSL
alt-svc: h3=":443"; ma=86400

GET /bonus-wheel/img/title/title-en.png HTTP/1.1
Host: ivibetlp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ivibetlp.com/bonus-wheel/?btag=655279_1AF73ED39B9A4DB0A230A4F468753F31&subid=c61ceh9myqn8rbl2eb&sref=inhousecpa&inhousecpa=Kiev_Dima_BR_IviSetki
Cookie: _ga_PBXDL40D8M=GS1.1.1704423796.1.0.1704423796.0.0.0; _ga=GA1.1.115800125.1704423797
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 05 Jan 2024 03:03:21 GMT
content-type: image/png
content-length: 41396
last-modified: Mon, 22 Aug 2022 21:12:44 GMT
etag: "6303f14c-a1b4"
strict-transport-security: max-age=31536000;
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=U7sG9TuQot8LakC1iAB2lXSKEkmzqbpiM0MP8M570n7kSGs0diGUmWhgyDGjibjSgsAYjZolOmkcMtUb5D2HssWdj7fGesKEVn%2BdnMBh4afd661kpSB6Xw4L6jRUfgg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 84087cd9a949b50b-OSL
alt-svc: h3=":443"; ma=86400

GET /bonus-wheel/img/payment/crypto.svg HTTP/1.1
Host: ivibetlp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ivibetlp.com/bonus-wheel/?btag=655279_1AF73ED39B9A4DB0A230A4F468753F31&subid=c61ceh9myqn8rbl2eb&sref=inhousecpa&inhousecpa=Kiev_Dima_BR_IviSetki
Cookie: _ga_PBXDL40D8M=GS1.1.1704423796.1.0.1704423796.0.0.0; _ga=GA1.1.115800125.1704423797
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 05 Jan 2024 03:03:21 GMT
content-type: image/svg+xml
last-modified: Mon, 22 Aug 2022 09:45:44 GMT
etag: W/"63035048-f04"
strict-transport-security: max-age=31536000;
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6G7mf6bXLBdb%2FCy2AJSAkm4HsuoyM8xNQugu%2BxaWGY4ua0qcBiBESTm31uEMFHa%2FQ6YL28D7%2BJR1sMDcuM0ZWRS7o6shmcjGoF0m8G72DNgFvbPIJE5a2vtUbgoHr7U%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 84087cda0979b50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

GET /s/roboto/v30/KFOlCnqEu92Fr1MmYUtfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://ivibetlp.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15752
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 29 Dec 2023 13:33:04 GMT
expires: Sat, 28 Dec 2024 13:33:04 GMT
cache-control: public, max-age=31536000
age: 567017
last-modified: Wed, 11 May 2022 19:24:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET /bonus-wheel/img/payment/astropay.svg HTTP/1.1
Host: ivibetlp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ivibetlp.com/bonus-wheel/?btag=655279_1AF73ED39B9A4DB0A230A4F468753F31&subid=c61ceh9myqn8rbl2eb&sref=inhousecpa&inhousecpa=Kiev_Dima_BR_IviSetki
Cookie: _ga_PBXDL40D8M=GS1.1.1704423796.1.0.1704423796.0.0.0; _ga=GA1.1.115800125.1704423797
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 05 Jan 2024 03:03:21 GMT
content-type: image/svg+xml
last-modified: Mon, 22 Aug 2022 09:45:44 GMT
etag: W/"63035048-1353"
strict-transport-security: max-age=31536000;
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DVVf6UB8y9t7aT5yu5dF%2B37M5hilFegGShsiSvvI5HKtwZk40P9GSXLvl%2FBCz78s7nRLt6P8p8P7DOH%2FsqlQHXiOfx2xOHUPDt6z6%2BYn44r5xFmJFr%2F01vvdIB6%2BYZ8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 84087cd9d968b50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

GET /bonus-wheel/img/payment/neosurf.svg HTTP/1.1
Host: ivibetlp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ivibetlp.com/bonus-wheel/?btag=655279_1AF73ED39B9A4DB0A230A4F468753F31&subid=c61ceh9myqn8rbl2eb&sref=inhousecpa&inhousecpa=Kiev_Dima_BR_IviSetki
Cookie: _ga_PBXDL40D8M=GS1.1.1704423796.1.0.1704423796.0.0.0; _ga=GA1.1.115800125.1704423797
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 05 Jan 2024 03:03:21 GMT
content-type: image/svg+xml
last-modified: Mon, 22 Aug 2022 09:45:44 GMT
etag: W/"63035048-986"
strict-transport-security: max-age=31536000;
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jh1lrIjqfsLfrcao8EmI5DZVMv5bZlEMVJ8F8sdZ0jkCR5um7tEp7MKTpfgR31Mx1gw3wsGzhfmUZKogadmKkH7qPl0Ik994Phegx3kSZtEuCalDq%2FDuZkUnxOXwXIo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 84087cd9d96bb50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

GET /bonus-wheel/img/payment/mastercard.svg HTTP/1.1
Host: ivibetlp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ivibetlp.com/bonus-wheel/?btag=655279_1AF73ED39B9A4DB0A230A4F468753F31&subid=c61ceh9myqn8rbl2eb&sref=inhousecpa&inhousecpa=Kiev_Dima_BR_IviSetki
Cookie: _ga_PBXDL40D8M=GS1.1.1704423796.1.0.1704423796.0.0.0; _ga=GA1.1.115800125.1704423797
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 05 Jan 2024 03:03:21 GMT
content-type: image/svg+xml
last-modified: Mon, 22 Aug 2022 09:45:44 GMT
etag: W/"63035048-680"
strict-transport-security: max-age=31536000;
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=e51uydOwPvwQjIUVSxW6c8H6tgG5PYi4bOQTuM7EOouH1RJEd7PckiEjh1JkD4ro0fVjJaA7CtNP%2FZGWDOGMCsl8%2FmfUAeNPOUZoQtejloJNeY6Zi052A1nVOP6SPFI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 84087cd9b950b50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

GET /update/3/GMP/111.0a1/20230218104546/Linux_x86_64-gcc3/null/default/Linux%205.15.0-76-generic%20(GTK%203.24.34%2Clibpulse%20not-available)/default/default/update.xml HTTP/1.1
Host: aus5.mozilla.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Cache-Control: no-cache
Pragma: no-cache
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Fri, 05 Jan 2024 03:03:39 GMT
content-type: text/xml; charset=utf-8
vary: Accept-Encoding
cache-control: public, max-age=90
rule-id: unknown
rule-data-version: unknown
content-signature: x5u=https://content-signature-2.cdn.mozilla.net/chains/aus.content-signature.mozilla.org-2024-02-08-20-06-05.chain; p384ecdsa=Ie9h9DypAXpkTGs10LBjk5ltVmkmy8JVoJtltmfwY-J3GIOJd069kexiigJ-F8VS64uhBlAUt69ch_XxfgrBjoOo15TsYdDqBk4JkX8cZMC62vMxTB5clJpA4X6gG6_A
strict-transport-security: max-age=31536000;
x-content-type-options: nosniff
content-security-policy: default-src 'none'; frame-ancestors 'none'
x-proxy-cache-status: EXPIRED
content-encoding: gzip
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

GET /bonus-wheel/img/payment/neteller.svg HTTP/1.1
Host: ivibetlp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ivibetlp.com/bonus-wheel/?btag=655279_1AF73ED39B9A4DB0A230A4F468753F31&subid=c61ceh9myqn8rbl2eb&sref=inhousecpa&inhousecpa=Kiev_Dima_BR_IviSetki
Cookie: _ga_PBXDL40D8M=GS1.1.1704423796.1.0.1704423796.0.0.0; _ga=GA1.1.115800125.1704423797
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 05 Jan 2024 03:03:21 GMT
content-type: image/svg+xml
last-modified: Mon, 22 Aug 2022 09:45:44 GMT
etag: W/"63035048-5e7"
strict-transport-security: max-age=31536000;
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RPI14YEBcsRSSCsuzPibry5GAdkx203s%2Bamx9Zl3alblfYwGh%2Fg7E4Trhp3rYfXk31Jk3ynrjven7uVNyJi82fV8oYrDzj7jWWze6uUkbjhAUbA4XeMovOE%2FdzvRCCc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 84087cd9c954b50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

GET /openh264-linux64-2e1774ab6dc6c43debb0b5b628bdf122a391d521.zip HTTP/1.1
Host: ciscobinary.openh264.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive

HTTP/1.1 200 OK
Last-Modified: Thu, 16 Nov 2023 07:38:15 GMT
ETag: 152eda253e242e18443ef3282495bc7c
Content-Length: 511815
Accept-Ranges: bytes
X-Timestamp: 1700120294.87662
Content-Type: application/zip
X-Trans-Id: tx15b69f172b404fa58b2bb-006555fb11dfw1
Cache-Control: public, max-age=54573
Expires: Fri, 05 Jan 2024 18:13:12 GMT
Date: Fri, 05 Jan 2024 03:03:39 GMT
Connection: keep-alive

GET /bonus-wheel/?btag=655279_1AF73ED39B9A4DB0A230A4F468753F31&subid=c61ceh9myqn8rbl2eb&sref=inhousecpa&inhousecpa=Kiev_Dima_BR_IviSetki HTTP/1.1
Host: ivibetlp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 05 Jan 2024 03:03:20 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=31536000;
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7Gw2X5ntxB78fCx6LJD240Ex4ToMtT47FC7%2FzXVQKqTDi133id%2BkxbHKIXWTSFHMy1THLYXcsMBSUz5OU0M%2FgBlT3CdoK5vlzux5rJdNunjV2cI%2FwUd71%2FNXnFE5Qfc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 84087cd01dd156c6-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET /bonus-wheel/img/payment/jeton.svg HTTP/1.1
Host: ivibetlp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ivibetlp.com/bonus-wheel/?btag=655279_1AF73ED39B9A4DB0A230A4F468753F31&subid=c61ceh9myqn8rbl2eb&sref=inhousecpa&inhousecpa=Kiev_Dima_BR_IviSetki
Cookie: _ga_PBXDL40D8M=GS1.1.1704423796.1.0.1704423796.0.0.0; _ga=GA1.1.115800125.1704423797
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 05 Jan 2024 03:03:21 GMT
content-type: image/svg+xml
last-modified: Mon, 22 Aug 2022 09:45:44 GMT
etag: W/"63035048-1607"
strict-transport-security: max-age=31536000;
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UhL%2Fj6Fbh1nEqBvlRX6c1t%2FHdLIumGvqFkidAqdLPy4UkijBVa1aNo3fajIUWQ1roNmVNcG%2BbKg6uCzJIlBKip117XOEDEnu5PjCEiKJf%2BwMq35OcNGoQwZqgaoZh38%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 84087cd9c956b50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

GET /bonus-wheel/img/payment/skrill.svg HTTP/1.1
Host: ivibetlp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ivibetlp.com/bonus-wheel/?btag=655279_1AF73ED39B9A4DB0A230A4F468753F31&subid=c61ceh9myqn8rbl2eb&sref=inhousecpa&inhousecpa=Kiev_Dima_BR_IviSetki
Cookie: _ga_PBXDL40D8M=GS1.1.1704423796.1.0.1704423796.0.0.0; _ga=GA1.1.115800125.1704423797
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 05 Jan 2024 03:03:21 GMT
content-type: image/svg+xml
last-modified: Mon, 22 Aug 2022 09:45:44 GMT
etag: W/"63035048-65c"
strict-transport-security: max-age=31536000;
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=84Uc2bEwSYnOjNfQ%2FXuoZpH1KeSZPieCOuWlXicgCyZiS6cRL0Ha6zT4VavSW5G3H%2F6wiFiwO3Gsk4DQ7uBn%2B6gy1LkX7AyJGA36sjO5uaLd8n%2FSw79ut1my1TGOA0Y%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 84087cd9c952b50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

GET /bonus-wheel/js/jquery-3.6.0.min.js HTTP/1.1
Host: ivibetlp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ivibetlp.com/bonus-wheel/?btag=655279_1AF73ED39B9A4DB0A230A4F468753F31&subid=c61ceh9myqn8rbl2eb&sref=inhousecpa&inhousecpa=Kiev_Dima_BR_IviSetki
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 05 Jan 2024 03:03:20 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Thu, 28 Jul 2022 10:07:10 GMT
etag: W/"62e25fce-15d9e"
strict-transport-security: max-age=31536000;
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PcKj%2BLyHr4ftKN7Qdb6bUvqOQaDcSLwgwsGv1z4cma6ebVOUs0wBnDnxv1NXIXMdzt3uKUelQQCgcs%2BeKP5pqDJLP9GmeeopdiFbWitAfdPn5UwIxbWlKI%2BQgpoTyN4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 84087cd39f52b50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

GET /css2?family=Roboto:wght@500;700;900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ivibetlp.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 05 Jan 2024 03:03:21 GMT
date: Fri, 05 Jan 2024 03:03:21 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET /bonus-wheel/css/media.css HTTP/1.1
Host: ivibetlp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ivibetlp.com/bonus-wheel/?btag=655279_1AF73ED39B9A4DB0A230A4F468753F31&subid=c61ceh9myqn8rbl2eb&sref=inhousecpa&inhousecpa=Kiev_Dima_BR_IviSetki
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 05 Jan 2024 03:03:20 GMT
content-type: text/css
last-modified: Tue, 23 Aug 2022 00:08:47 GMT
etag: W/"63041a8f-c5a"
strict-transport-security: max-age=31536000;
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OCIIhybqEw18ihsVV4elF50r%2Fb%2BB0yDSGq1D6ElPPo8PKV0PDYNWPJ2r512APuKR1RQycIM4PpNOUYqnz0ZLfB8T0nuHkZ9F%2FvTSF%2B6%2BrUJoJvormqWG7p74ogPYqmE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 84087cd35f3ab50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

GET /v1/ip/geo.js?callback=geoip&_=1704423796356 HTTP/1.1
Host: get.geojs.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ivibetlp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 05 Jan 2024 03:03:21 GMT
content-type: application/javascript; charset=utf-8
x-request-id: 7de0fbb28d4d3c6e017744a5074b9b6e-AMS
strict-transport-security: max-age=15552000; includeSubDomains; preload
access-control-allow-origin: *
access-control-allow-methods: GET
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, private, max-age=0
x-geojs-location: AMS
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=oR9D9BxQGAgzHFqHPyAaPN6UoIjbq%2FPMEBO7Xj%2FdwQmX9qC9Hx0wrJUY%2B9saY1YClS9Nk8IlFCZ590XNTyy5sJ%2FkQZM%2FWmwDOiBJCwjSrqD7By6JXizh0v34UP%2FMPA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 84087cd8489456c6-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET /bonus-wheel/css/main.css HTTP/1.1
Host: ivibetlp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ivibetlp.com/bonus-wheel/?btag=655279_1AF73ED39B9A4DB0A230A4F468753F31&subid=c61ceh9myqn8rbl2eb&sref=inhousecpa&inhousecpa=Kiev_Dima_BR_IviSetki
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 05 Jan 2024 03:03:20 GMT
content-type: text/css
last-modified: Tue, 23 Aug 2022 00:08:39 GMT
etag: W/"63041a87-283e"
strict-transport-security: max-age=31536000;
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=65eW1tRmffuTkGyNx8YYe33lOnUztapeFqG81lZ4rS73H%2BFzHAhu8ZyMN9wNPDKj5a9KrRUCFcan2Z7qyN8Wy2BdKYO9eoxa4gxG1Gyv0qv%2FR%2FnPtD0s18RPZmST5jg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 84087cd35f39b50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

GET /bonus-wheel/img/payment/paysafe.svg HTTP/1.1
Host: ivibetlp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ivibetlp.com/bonus-wheel/?btag=655279_1AF73ED39B9A4DB0A230A4F468753F31&subid=c61ceh9myqn8rbl2eb&sref=inhousecpa&inhousecpa=Kiev_Dima_BR_IviSetki
Cookie: _ga_PBXDL40D8M=GS1.1.1704423796.1.0.1704423796.0.0.0; _ga=GA1.1.115800125.1704423797
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 05 Jan 2024 03:03:21 GMT
content-type: image/svg+xml
last-modified: Mon, 22 Aug 2022 09:45:44 GMT
etag: W/"63035048-21aa"
strict-transport-security: max-age=31536000;
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UqbUna5N8T0lI%2BksPttOF%2BRjwcH%2FuRPzl%2BZwDWsWTyVXgBEsqm6%2FScWEvmpqw4vxxJ1IYayBGyH7ZH8ZJ%2FfGyDEW%2BwRUOOcWR3ux3BRjNK0OSIchOJp9r6cNXz%2FToeU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 84087cda0978b50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://ivibetlp.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 01 Jan 2024 19:43:02 GMT
expires: Tue, 31 Dec 2024 19:43:02 GMT
cache-control: public, max-age=31536000
age: 285619
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET /bonus-wheel/img/payment/ezee-wallet.svg HTTP/1.1
Host: ivibetlp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ivibetlp.com/bonus-wheel/?btag=655279_1AF73ED39B9A4DB0A230A4F468753F31&subid=c61ceh9myqn8rbl2eb&sref=inhousecpa&inhousecpa=Kiev_Dima_BR_IviSetki
Cookie: _ga_PBXDL40D8M=GS1.1.1704423796.1.0.1704423796.0.0.0; _ga=GA1.1.115800125.1704423797
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 05 Jan 2024 03:03:21 GMT
content-type: image/svg+xml
last-modified: Mon, 22 Aug 2022 09:45:44 GMT
etag: W/"63035048-2abf"
strict-transport-security: max-age=31536000;
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=djt7%2FM1xzoGiRNikE3GBubBbembk%2FU09H0RohV6AoXKz3rusfsJMRNmUn2q0bXMr7UMcrPIfhncXwtN%2FrEs9lveq1n6iDgbDzrjWl8Rhh6OKwnJ0xTFmc0SLrPclhtA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 84087cda0976b50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

GET /bonus-wheel/css/reset.css HTTP/1.1
Host: ivibetlp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ivibetlp.com/bonus-wheel/?btag=655279_1AF73ED39B9A4DB0A230A4F468753F31&subid=c61ceh9myqn8rbl2eb&sref=inhousecpa&inhousecpa=Kiev_Dima_BR_IviSetki
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 05 Jan 2024 03:03:20 GMT
content-type: text/css
last-modified: Thu, 28 Jul 2022 09:47:54 GMT
etag: W/"62e25b4a-99c"
strict-transport-security: max-age=31536000;
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2fs5fLz%2FNbIvX53SX4V7Fh%2F1UFSYh7FwLj%2BNsRs7m3gpImapwRxVQXqryrvKyva7WoWD%2FVQkCKcdZ%2FasSeAN0D9KTm%2B0ThJ%2BZbF5kEJfWLx7lm0U%2BRpElCAkVrt8hMU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 84087cd35f38b50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

GET /bonus-wheel/img/payment/visa.svg HTTP/1.1
Host: ivibetlp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ivibetlp.com/bonus-wheel/?btag=655279_1AF73ED39B9A4DB0A230A4F468753F31&subid=c61ceh9myqn8rbl2eb&sref=inhousecpa&inhousecpa=Kiev_Dima_BR_IviSetki
Cookie: _ga_PBXDL40D8M=GS1.1.1704423796.1.0.1704423796.0.0.0; _ga=GA1.1.115800125.1704423797
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 05 Jan 2024 03:03:21 GMT
content-type: image/svg+xml
last-modified: Mon, 22 Aug 2022 09:45:44 GMT
etag: W/"63035048-749"
strict-transport-security: max-age=31536000;
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FjGNZqDsP6ePDvTPJsS9fNV%2Fiwgw4inXYjMFCWc2bm4hnQyjQ4OdHyBoHca2KibCSWGIkxCXObC1frGdPFhh0F4vAg1pabu4k3JfNheXtUdGb9FqpuMH25LhQKWuFDA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 84087cd9a94db50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

GET /bonus-wheel/img/payment/bank-transfer.svg HTTP/1.1
Host: ivibetlp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ivibetlp.com/bonus-wheel/?btag=655279_1AF73ED39B9A4DB0A230A4F468753F31&subid=c61ceh9myqn8rbl2eb&sref=inhousecpa&inhousecpa=Kiev_Dima_BR_IviSetki
Cookie: _ga_PBXDL40D8M=GS1.1.1704423796.1.0.1704423796.0.0.0; _ga=GA1.1.115800125.1704423797
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 05 Jan 2024 03:03:21 GMT
content-type: image/svg+xml
last-modified: Mon, 22 Aug 2022 09:45:44 GMT
etag: W/"63035048-20bd"
strict-transport-security: max-age=31536000;
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fWCt8z57Y5F0ghq9rVJMLibNrwwkr5SklGGkdmlh5fCgejIu9u0pb0PNHnkZ%2FD7sgZyuWaBFJu2uO%2BJdLC9OnZ8t%2BZG0MQey57kDVINJGk3C%2BxX%2BD9RFUqdWvu3GRhE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 84087cd9c955b50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

GET /bonus-wheel/img/logo.svg HTTP/1.1
Host: ivibetlp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ivibetlp.com/bonus-wheel/?btag=655279_1AF73ED39B9A4DB0A230A4F468753F31&subid=c61ceh9myqn8rbl2eb&sref=inhousecpa&inhousecpa=Kiev_Dima_BR_IviSetki
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 05 Jan 2024 03:03:20 GMT
content-type: image/svg+xml
last-modified: Mon, 22 Aug 2022 10:02:45 GMT
etag: W/"63035445-1bbb"
strict-transport-security: max-age=31536000;
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0QJVkEJfS%2BePRlGQxei3vyJY8oCHaH3K%2BfKEJq34al%2Fo%2F8L5H0muNNI8yZ3WEWmroIs%2B%2B8LFKQTRSBA5tUOTtIVFIaigsnaXCZoIcHGipH5ugq%2B%2BpeeebBfiTjm2uMg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 84087cd37f44b50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

GET /bonus-wheel/img/payment/muchbetter.svg HTTP/1.1
Host: ivibetlp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ivibetlp.com/bonus-wheel/?btag=655279_1AF73ED39B9A4DB0A230A4F468753F31&subid=c61ceh9myqn8rbl2eb&sref=inhousecpa&inhousecpa=Kiev_Dima_BR_IviSetki
Cookie: _ga_PBXDL40D8M=GS1.1.1704423796.1.0.1704423796.0.0.0; _ga=GA1.1.115800125.1704423797
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 05 Jan 2024 03:03:21 GMT
content-type: image/svg+xml
last-modified: Mon, 22 Aug 2022 09:45:44 GMT
etag: W/"63035048-48ba"
strict-transport-security: max-age=31536000;
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8MZUA122fEvgD2ElgQcpjdnzmplMsHGBYYQeZJ2URz%2FhZgCoXmnhE4%2B5XTm5zP5GbaGwlHv3sQAeSM99NzaTIMPulzKGrPd8Z6VRx52nvi9SXHatgehcZW7ZeS4Lfak%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 84087cd9d967b50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

GET /bonus-wheel/img/payment/pay-do.svg HTTP/1.1
Host: ivibetlp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ivibetlp.com/bonus-wheel/?btag=655279_1AF73ED39B9A4DB0A230A4F468753F31&subid=c61ceh9myqn8rbl2eb&sref=inhousecpa&inhousecpa=Kiev_Dima_BR_IviSetki
Cookie: _ga_PBXDL40D8M=GS1.1.1704423796.1.0.1704423796.0.0.0; _ga=GA1.1.115800125.1704423797
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 05 Jan 2024 03:03:21 GMT
content-type: image/svg+xml
last-modified: Mon, 22 Aug 2022 09:45:44 GMT
etag: W/"63035048-2bb4"
strict-transport-security: max-age=31536000;
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=riEaOWJ%2BAL9RROq9mMcvSBXw5%2Be1%2F50o3Z3RyCZOWZx6YVRwFi%2FxvWFB%2FHL20AKNO6%2BR73OyGCrDdItxrBgPXU5A2HRUXNZV1gmM%2FNcfrWIlr9cucmua0ueaqiu5Bfw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 84087cd9f973b50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400