r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 326898eb925368408f6f42ee173b9d89
b8b20ee34b7e7b139e7729b8e46a54ea25f54ac8
96c2c75f700ab55649882111713ca3cfb2eaf08e404c2bc245a641dc12ae168a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "96C2C75F700AB55649882111713CA3CFB2EAF08E404C2BC245A641DC12AE168A"
Last-Modified: Wed, 04 Jan 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11483
Expires: Sat, 07 Jan 2023 07:13:05 GMT
Date: Sat, 07 Jan 2023 04:01:42 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 516b9d6951b09439a51d5284994ed92f
5c78edb38bae36caa8e2db8ed6635a32e46c91dd
eaaf4ebc59d2a06d02b552154c5adb7c713ffc4a7f5caabcff1c2b4cd6ec5c7b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EAAF4EBC59D2A06D02B552154C5ADB7C713FFC4A7F5CAABCFF1C2B4CD6EC5C7B"
Last-Modified: Fri, 06 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14710
Expires: Sat, 07 Jan 2023 08:06:52 GMT
Date: Sat, 07 Jan 2023 04:01:42 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 600f7ba6e1a6fbbd176cd2df19b1e4d9
cdd72b25fd91ee980aba193b12e890096e4fe852
860214860947dfbe26099f018747154823b175fceb2821a390cc655da191a6d0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "860214860947DFBE26099F018747154823B175FCEB2821A390CC655DA191A6D0"
Last-Modified: Thu, 05 Jan 2023 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12773
Expires: Sat, 07 Jan 2023 07:34:35 GMT
Date: Sat, 07 Jan 2023 04:01:42 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash ff250d3ef3fa45322bf05039a0122a9f
b3e7a2c383bce1bab807dbe1a03c375258b51f1d
d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Content-Type, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 07 Jan 2023 03:41:24 GMT
content-type: application/json
age: 1218
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash b1fcd419a4245617397846e8d17233f6
2a037ce244587640b27ead9a0ec2af4f862d91b2
e059b6d834c06e58494c43fb2ff42acbc27c1a1d8f7f30e2f32ca0e167599e2f
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 9+0IwqNmS78KXF2cVGiCrI8cP9IqZaXdDxIG3kVj5kLYQgyQ+qqRP7YTuu5EQSlGSHRviomFFmU=
x-amz-request-id: H7R3R5Q6KBA4RZ0F
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 07 Jan 2023 04:00:15 GMT
age: 87
last-modified: Tue, 20 Dec 2022 14:47:58 GMT
etag: "b1fcd419a4245617397846e8d17233f6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
www.t3helnternet.website/
142.250.74.179301 Moved Permanently 179 B URL HTTP/1.1 www.t3helnternet.website/
IP 142.250.74.179:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 228de78c4d6e2c34f118ef9f3965731c
10b0325930e9110c963cab3116662a8e1728bd7e
e4b11df71e3c2525e1e3c4d6c2fcc4b76c282c6a1c8b48c753d05194071928a1
GET / HTTP/1.1
Host: www.t3helnternet.website
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Location: https://www.t3helnternet.website/
Content-Type: text/html; charset=UTF-8
Content-Encoding: gzip
Date: Sat, 07 Jan 2023 04:01:42 GMT
Expires: Sat, 07 Jan 2023 04:01:42 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
X-XSS-Protection: 1; mode=block
Content-Length: 179
Server: GSE
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 04:01:42 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/sEQzP2YPNJQ
142.250.74.131200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/sEQzP2YPNJQ
IP 142.250.74.131:0
Hash ce3314445bbbcddd382eda68f8e9fa11
a3f01756b5e57dca55fe3235db17983f7380bca8
e623f4d9423103abce5eb94cf4e5db39251694ef0547bb9aa5090a95a237c97e
POST /s/gts1d4/sEQzP2YPNJQ HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 07 Jan 2023 04:01:42 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.t3helnternet.website/
142.250.74.179200 OK 1.5 kB URL HTTP/2 www.t3helnternet.website/
IP 142.250.74.179:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (362)
Hash b0f274bc52324684d3585e208866f18d
8296e5d856e5f4b9eed8b2add2a1f18874d9cb10
431b1aaa983bcbc824480b129888a1ad4627b20686e92808bbb0d6c3de0d6fc7
GET / HTTP/1.1
Host: www.t3helnternet.website
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
expires: Sat, 07 Jan 2023 04:01:42 GMT
date: Sat, 07 Jan 2023 04:01:42 GMT
cache-control: private, max-age=0
last-modified: Sat, 07 Jan 2023 03:30:40 GMT
etag: W/"eddf0e212efbab1fb8227aded9bd18e2ee3a9cbe0f601f79225afdd7c7c286e4"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 1548
server: GSE
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Expires, Pragma, Content-Type, Backoff, Last-Modified, Cache-Control, ETag
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 07 Jan 2023 03:33:39 GMT
age: 1683
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1p5/_RsGWPt_qTw
142.250.74.131200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/_RsGWPt_qTw
IP 142.250.74.131:0
Hash 3e49c8cc850291c09bc0f96939fbcf5f
cfe3cb6b4a69d78eee9dfd846a2249540b1f71e6
da92b9469f61c75966566adbb3ca0aa81bd7a436c9aea31998830bc8a50ad577
POST /s/gts1p5/_RsGWPt_qTw HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 07 Jan 2023 04:01:42 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
e1.o.lencr.org/
23.36.77.32200 OK 345 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 677e02c592e4fd97a22245ef985b59ce
cdc6bb7fb53f2cc1cd3c68ab486651f68faa8ef7
9fce10c689cb1ea2e78675d68079026b3d9f971d0260f49819b17fd2c9f42792
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "9FCE10C689CB1EA2E78675D68079026B3D9F971D0260F49819B17FD2C9F42792"
Last-Modified: Thu, 05 Jan 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14668
Expires: Sat, 07 Jan 2023 08:06:10 GMT
Date: Sat, 07 Jan 2023 04:01:42 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 43c8442b7447debab97b0f6bc973e23a
38a5f1869cff7f6ddbfd3a24e57a3da7851ba3b0
4eb7adc914570287dde1317395d1d95b07271c8fe20b97a8928025c292c47dba
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1655
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 07 Jan 2023 04:01:42 GMT
Last-Modified: Sat, 07 Jan 2023 03:34:07 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/s/gts1p5/_RsGWPt_qTw
142.250.74.131200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/_RsGWPt_qTw
IP 142.250.74.131:0
Hash 3e49c8cc850291c09bc0f96939fbcf5f
cfe3cb6b4a69d78eee9dfd846a2249540b1f71e6
da92b9469f61c75966566adbb3ca0aa81bd7a436c9aea31998830bc8a50ad577
POST /s/gts1p5/_RsGWPt_qTw HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 07 Jan 2023 04:01:42 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
e1.o.lencr.org/
23.36.77.32200 OK 345 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 677e02c592e4fd97a22245ef985b59ce
cdc6bb7fb53f2cc1cd3c68ab486651f68faa8ef7
9fce10c689cb1ea2e78675d68079026b3d9f971d0260f49819b17fd2c9f42792
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "9FCE10C689CB1EA2E78675D68079026B3D9F971D0260F49819B17FD2C9F42792"
Last-Modified: Thu, 05 Jan 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14668
Expires: Sat, 07 Jan 2023 08:06:10 GMT
Date: Sat, 07 Jan 2023 04:01:42 GMT
Connection: keep-alive
push.services.mozilla.com/
35.165.1.70101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 35.165.1.70:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 4ZTaEB86ZG3wcyGZd2HEpg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: V5neDExd0r95V9Trv15PRyZA8H8=
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash dcf2daab994bc17c7733c3bcdf7969eb
8889faf4d38fcdbff0cc1bb2df63645c4f083566
ce0d277735d9d7520d283c6895250f206b1ad6aec81ea8b2f2eac52b669a74aa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CE0D277735D9D7520D283C6895250F206B1AD6AEC81EA8B2F2EAC52B669A74AA"
Last-Modified: Fri, 06 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6872
Expires: Sat, 07 Jan 2023 05:56:15 GMT
Date: Sat, 07 Jan 2023 04:01:43 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash b57f076a9416a9cdef34df4ef7eaa4ac
2374473eb9bccfe80bacaa97072202d5e7ab7356
002ac0deb29541996f3ea8c9c171f6d54ee6a90919a61a629f1580032fc51f61
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "002AC0DEB29541996F3EA8C9C171F6D54EE6A90919A61A629F1580032FC51F61"
Last-Modified: Fri, 06 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4887
Expires: Sat, 07 Jan 2023 05:23:10 GMT
Date: Sat, 07 Jan 2023 04:01:43 GMT
Connection: keep-alive
my.rtmark.net/img.gif?f=merge&userId=248e812d9df84bf3ab95ac9382b1a0b9
139.45.195.8200 OK 43 B URL HTTP/2 my.rtmark.net/img.gif?f=merge&userId=248e812d9df84bf3ab95ac9382b1a0b9
IP 139.45.195.8:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /img.gif?f=merge&userId=248e812d9df84bf3ab95ac9382b1a0b9 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ittogepiom.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 04:01:43 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=248e812d9df84bf3ab95ac9382b1a0b9; expires=Sun, 07 Jan 2024 04:01:43 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
ittogepiom.com/?z=4501701&syncedCookie=true&rhd=false
139.45.197.237302 Found 0 B URL HTTP/2 ittogepiom.com/?z=4501701&syncedCookie=true&rhd=false
IP 139.45.197.237:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
POST /?z=4501701&syncedCookie=true&rhd=false HTTP/1.1
Host: ittogepiom.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 464
Origin: https://ittogepiom.com
Connection: keep-alive
Referer: https://ittogepiom.com/afu.php?zoneid=4501701&var=4501701&rid=dqGdfktL4PWmomSE3WzGcA%3D%3D&rhd=false
Cookie: OAID=248e812d9df84bf3ab95ac9382b1a0b9; oaidts=1673064103
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
server: nginx
date: Sat, 07 Jan 2023 04:01:43 GMT
content-length: 0
location: https://go.doubledoubleup.com/visit/?bta=35656&brand=doggocasino&rdk=rk3
x-trace-id: 2d1acaf85e7a21906caf7329559178a7
link: <https://go.doubledoubleup.com>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://diromalxx.com>; rel="preconnect dns-prefetch"
referrer-policy: no-referrer
access-control-allow-origin: https://ittogepiom.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
set-cookie: OAID=248e812d9df84bf3ab95ac9382b1a0b9; expires=Sun, 07 Jan 2024 04:01:43 GMT; path=/; secure; SameSite=None
oaidts=1673064103; expires=Sun, 07 Jan 2024 04:01:43 GMT; path=/; secure; SameSite=None
syncedCookie=true; expires=Sat, 14 Jan 2023 04:01:43 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 6b7311a62dbac99dd034dec404255d1e
76811f676f44bdc1c57cb1f69b125df313eb7463
e1a83d9afefc1e4b69847607ad54f223ed0d5be9715f25e2b98946fed3c8e4a2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E1A83D9AFEFC1E4B69847607AD54F223ED0D5BE9715F25E2B98946FED3C8E4A2"
Last-Modified: Fri, 06 Jan 2023 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10684
Expires: Sat, 07 Jan 2023 06:59:47 GMT
Date: Sat, 07 Jan 2023 04:01:43 GMT
Connection: keep-alive
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash 72505f35d69c4583c3919ceee4b66bb2
20ced463ecce8225800ae6054aa54b6b620ad8da
bcb40178183df17dd57efefce03f7d6edfb645bbbf03176e2d131cd93bac1610
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 07 Jan 2023 04:01:43 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 05 Jan 2023 14:07:08 GMT
Expires: Thu, 12 Jan 2023 14:07:07 GMT
Etag: "20ced463ecce8225800ae6054aa54b6b620ad8da"
Cache-Control: max-age=467723,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7859cb36388ab524-OSL
go.doubledoubleup.com/visit/?bta=35656&brand=doggocasino&rdk=rk3
35.234.86.61302 Object moved 296 B URL HTTP/1.1 go.doubledoubleup.com/visit/?bta=35656&brand=doggocasino&rdk=rk3
IP 35.234.86.61:0
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash c106cd9313ea42f9a358870238ca36eb
7e89f3e95f261b66895a9b49f7a8dbe61f6ec2f9
0d70ae89a38fbbdfaf738c2cc9cdef13cfca5fcee48246f3e1e79d404d4ed074
GET /visit/?bta=35656&brand=doggocasino&rdk=rk3 HTTP/1.1
Host: go.doubledoubleup.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Object moved
Server: rhino-core-shield
Date: Sat, 07 Jan 2023 04:01:43 GMT
Content-Type: text/html; Charset=UTF-8
Content-Length: 296
Connection: keep-alive
Cache-Control: private,no-cache
Pragma: no-cache
Expires: Fri, 06 Jan 2023 04:01:38 GMT
Location: https://doggocasino.com/en-us?affiliateName=[cellxpert]&affid=cx-35656_390258&bannerid=35656&trackerid=35656_390258&bta=35656&brand=doggocasino&rdk=rk3
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTR STP IND DEM"
Set-Cookie: doggocasino=bta=35656&Visitors=q&cid=390258; expires=Tue, 07-Feb-2023 04:01:38 GMT; path=/
X-Cache-Status: MISS
Access-Control-Allow-Origin: *
doggocasino.com/assets/fonts/CeraPro/CeraPro-Regular.ttf
143.204.55.92200 OK 167 kB URL HTTP/2 doggocasino.com/assets/fonts/CeraPro/CeraPro-Regular.ttf
IP 143.204.55.92:0
File type TrueType Font data, 15 tables, 1st "FFTM", 26 names, Macintosh\012- data
Size 167 kB (166620 bytes)
Hash cf954f65e33513f8a1f75f8083674834
dde47f28e602f3aa1488ec6a2126ab75c26e2ac4
21c63b1ab7ed2243a23e609485b1391e7d7bf8ba6a8a01f9ae0e515844c4591e
GET /assets/fonts/CeraPro/CeraPro-Regular.ttf HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/styles.1f7587ee8c68e382c584.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 166620
x-amz-meta-codebuild-content-sha256: c7543b0c1a387fe8fce7ecedb491413db02c94ccd3c1a1d5b2dc6c33f6e53bfc
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:dba88433-a99e-4dbd-9b3f-92c9f40e4469
x-amz-meta-codebuild-content-md5: f72fdbadddaa46b851fe89ddcab9666b
last-modified: Thu, 05 Jan 2023 08:36:21 GMT
x-amz-version-id: 1b0c50NWufrcrVZd9SIhlV1WKcw4ek3v
server: AmazonS3
date: Fri, 06 Jan 2023 11:09:12 GMT
etag: "cf954f65e33513f8a1f75f8083674834"
vary: Accept-Encoding
via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
age: 60753
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Edq-bZ9ISzFOHuf27cS6rp47rmk0U91sg7EIXhX26__GuMkK9tGhFw==
X-Firefox-Spdy: h2
doggocasino.com/runtime.58c76e964b21e45c3648.js
143.204.55.92200 OK 55 kB URL HTTP/2 doggocasino.com/runtime.58c76e964b21e45c3648.js
IP 143.204.55.92:0
Hash a4133cbee5b03775114a86bc60612ca6
cc1d7951cdec733504bdcb490560169eb11fce89
2857e2bfced3576c63bf5709ab137a6483ec70d26cf11b98a05e019c86076145
GET /runtime.58c76e964b21e45c3648.js HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/en-us?affiliateName=[cellxpert]&affid=cx-35656_390258&bannerid=35656&trackerid=35656_390258&bta=35656&brand=doggocasino&rdk=rk3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
x-amz-meta-codebuild-content-sha256: c7543b0c1a387fe8fce7ecedb491413db02c94ccd3c1a1d5b2dc6c33f6e53bfc
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:dba88433-a99e-4dbd-9b3f-92c9f40e4469
x-amz-meta-codebuild-content-md5: f72fdbadddaa46b851fe89ddcab9666b
last-modified: Thu, 05 Jan 2023 08:36:18 GMT
x-amz-version-id: Y3n9FEisQKRFlvFyYdZ9i20_l5RPDkKN
server: AmazonS3
content-encoding: gzip
date: Fri, 06 Jan 2023 11:37:16 GMT
etag: W/"905ee627812b6927f54ecd2a92af8846"
vary: Accept-Encoding
via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
age: 59068
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: rqMFVubUEC--nWhMNQe-fgrwqgLw2WjAz91C1-YPr5FHC2BJKKy_ww==
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 17cf9dce587a0172ed5024014092613a
c4d54d41bb2065c443b71ce4cb0765afcf25ff5d
c9e7f02104dba48ac14728545d4e4fbc2393ab6c2cb4b36504aad9626f8d10b1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 07 Jan 2023 04:01:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 623e85ff33837eb6c59e11ae2759237a
cea1948490802e652e7f6678dc76694e0d6ab61a
1fb30f3579d3277435c860f472008bea3680db1202d838ad4669d943ec88ba65
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 07 Jan 2023 04:01:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.iconvert.network/code/9f66804e-a360-401a-966a-3d11f064f2f2.js
143.204.55.39200 OK 3.9 kB URL HTTP/2 cdn.iconvert.network/code/9f66804e-a360-401a-966a-3d11f064f2f2.js
IP 143.204.55.39:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (46470), with no line terminators
Hash 18a6bfe25d9aab451dabd630d95c8c18
1070c8c028d60f38065c45933941690f42cc6eae
72e81a0214f2221fa643565b6f47bb4b10d3d6fee14c12221fdf423ab499ab84
GET /code/9f66804e-a360-401a-966a-3d11f064f2f2.js HTTP/1.1
Host: cdn.iconvert.network
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 3936
last-modified: Thu, 24 Nov 2022 10:07:06 GMT
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
date: Sat, 07 Jan 2023 02:22:58 GMT
cache-control: max-age=7200
etag: "18a6bfe25d9aab451dabd630d95c8c18"
x-cache: Hit from cloudfront
via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: MDkgoMOFwP3gSmk5ZBcJjX8lNwtHPFARLXLiTJfiJbOcD39ntHdbww==
age: 5927
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 280 B IP 93.184.220.29:0
Hash 85ed0c10f6d605d3495314e2345e8a14
254433987ab6cb8924bb1d80f01f9e3ddc754f83
4cc710c71700b5be6a8a9e0253ddfbc8e3f85333e5f6706e5ff69915b1c7a592
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 635
Cache-Control: max-age=152146
Content-Type: application/ocsp-response
Date: Sat, 07 Jan 2023 04:01:44 GMT
Etag: "63b89b7f-118"
Expires: Sun, 08 Jan 2023 22:17:30 GMT
Last-Modified: Fri, 06 Jan 2023 22:06:55 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 280
pixel.empdat.com/offers/5457?transaction_id=35656_390258
54.230.111.25404 Not Found 9 B URL HTTP/2 pixel.empdat.com/offers/5457?transaction_id=35656_390258
IP 54.230.111.25:0
File type ASCII text, with no line terminators
Hash 9d1ead73e678fa2f51a70a933b0bf017
d205cbd6783332a212c5ae92d73c77178c2d2f28
0019dfc4b32d63c1392aa264aed2253c1e0c2fb09216f8e2cc269bbfb8bb49b5
GET /offers/5457?transaction_id=35656_390258 HTTP/1.1
Host: pixel.empdat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
content-type: text/plain
content-length: 9
date: Sat, 07 Jan 2023 04:01:44 GMT
x-amzn-requestid: d23bc1a8-b5ec-4c38-a5b4-d4e1f3b553c3
x-amz-apigw-id: eWo6UFM3FiAFqPQ=
x-amzn-trace-id: Root=1-63b8eea8-470906ce37625cd21aec70e8;Sampled=0
x-cache: Error from cloudfront
via: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: VleL0s4543QJPb_YxsjRUg_45D8hBBTU_mRyCvO1mcQbjgIueb5erQ==
X-Firefox-Spdy: h2
cdn.iconvert.network/js/app-1.24.0/main.min.js
143.204.55.39200 OK 74 kB URL HTTP/2 cdn.iconvert.network/js/app-1.24.0/main.min.js
IP 143.204.55.39:0
File type Unicode text, UTF-8 text, with very long lines (34417)
Hash dfd65c2570b8005934fb8082936efa1d
ec4ca5d990a4e1160df66a842a78aedd09fdfe8b
470501c2035484b52a240e4a68d16560eec3e0a7630aa19ecab9629cab28574c
GET /js/app-1.24.0/main.min.js HTTP/1.1
Host: cdn.iconvert.network
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 74390
last-modified: Mon, 03 Oct 2022 14:22:54 GMT
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
date: Sat, 07 Jan 2023 02:59:34 GMT
cache-control: max-age=7200
etag: "dfd65c2570b8005934fb8082936efa1d"
x-cache: Hit from cloudfront
via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: Uf21ihnKauvX1Xdtr9DomNuN9v5wdaUy6OPrzYFLDzvgjURh9Dad4w==
age: 3731
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
e1.o.lencr.org/
23.36.77.32200 OK 346 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 3d3e368b782d26921a4981b29a13d0c7
2961a1ffcaf3e1f12cc2b089def8dd6b208a451b
69492329a5f9b70e851ad5fe1e3685131da3ffe80781755ca968f8bd35444dbf
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "69492329A5F9B70E851AD5FE1E3685131DA3FFE80781755CA968F8BD35444DBF"
Last-Modified: Fri, 06 Jan 2023 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10049
Expires: Sat, 07 Jan 2023 06:49:13 GMT
Date: Sat, 07 Jan 2023 04:01:44 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 11aea3c23fce2f77cadf7a551f4e8b17
4963aafedcf3fc5f28f1b4a6b0212abfd5526702
d2ada7d592878b58921cd0568efa62abefd7423d40bec16133886e2c67a791b3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D2ADA7D592878B58921CD0568EFA62ABEFD7423D40BEC16133886E2C67A791B3"
Last-Modified: Fri, 06 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11646
Expires: Sat, 07 Jan 2023 07:15:50 GMT
Date: Sat, 07 Jan 2023 04:01:44 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 11aea3c23fce2f77cadf7a551f4e8b17
4963aafedcf3fc5f28f1b4a6b0212abfd5526702
d2ada7d592878b58921cd0568efa62abefd7423d40bec16133886e2c67a791b3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D2ADA7D592878B58921CD0568EFA62ABEFD7423D40BEC16133886E2C67A791B3"
Last-Modified: Fri, 06 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11646
Expires: Sat, 07 Jan 2023 07:15:50 GMT
Date: Sat, 07 Jan 2023 04:01:44 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ef3a07b-bcd6-4039-8f1b-5315d2fe51c2.jpeg
34.120.237.76200 OK 5.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ef3a07b-bcd6-4039-8f1b-5315d2fe51c2.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c9ea2a04001ae6e92e56682f186ffbc2
dea01d8485f04aba4dcae63eb073a76d242a0095
c71e983f9d53f96de3553eb78da4f6da141d3dd381b1a1d55061f9141d3a54b6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ef3a07b-bcd6-4039-8f1b-5315d2fe51c2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5657
x-amzn-requestid: 4bb9764d-0119-4201-b4e1-f3193d436022
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eVxL5G-VoAMFblQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b8957f-65d303390f3426bc006f23f3;Sampled=0
x-amzn-remapped-date: Fri, 06 Jan 2023 21:41:19 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: x2J2pA3SunX-oqNpW1qO9rRvN4oylDoaKvx1WaQx_-BgHEo2YvvkZg==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 446e26a256db1310ae719d818e420898.cloudfront.net (CloudFront), 1.1 google
date: Fri, 06 Jan 2023 21:58:04 GMT
age: 21820
etag: "dea01d8485f04aba4dcae63eb073a76d242a0095"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F64e4db15-d414-487d-9c60-0875edb744c1.jpeg
34.120.237.76200 OK 5.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F64e4db15-d414-487d-9c60-0875edb744c1.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 04c3eec249b3fbec6d82cebbb75ae840
41cbddcb5a0d9f220d072b2098c8f08cb542c238
6b75330ea0129b0c1183b197519d5dfc14432d6f6d30efadfadfab45c70d2b11
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F64e4db15-d414-487d-9c60-0875edb744c1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5945
x-amzn-requestid: d3399ee5-e22a-498b-aa86-f410145b2694
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eDRw9HBLIAMFhtA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b13005-28e8c78d0387c6d55ef3616e;Sampled=0
x-amzn-remapped-date: Sun, 01 Jan 2023 07:02:29 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Ni7TExXEA9eZI53_mqMX5-uNSUUAsgfNCveN5ZJ_SjejsCPt33AGDA==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 06 Jan 2023 12:40:02 GMT
age: 55302
etag: "41cbddcb5a0d9f220d072b2098c8f08cb542c238"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F53b10b23-bc94-4aaa-ad1a-5f2fe3dc175e.jpeg
34.120.237.76200 OK 7.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F53b10b23-bc94-4aaa-ad1a-5f2fe3dc175e.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 38737d94d2cd65e9c29f76857ace4475
c833563644d1d9f66f86baea512ea3c0ce9597d0
ea22e6273f2a9e458ab44817881f764956c1f8635b52d4075eb6122cd341a26e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F53b10b23-bc94-4aaa-ad1a-5f2fe3dc175e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7693
x-amzn-requestid: a016aacf-2b2b-496a-8546-c0ffb583f43f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eO7TWGqPIAMFoQg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b5d8e2-6e8e32bf78c6bc98676fc113;Sampled=0
x-amzn-remapped-date: Wed, 04 Jan 2023 19:52:02 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: 7LPlA2tPOJ5Cv8VXhADZAl-eRNDbs_DmomRLkD9yAh0B9hr38WuzpA==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 31dfa94142c6eaf975b0e5454c00340a.cloudfront.net (CloudFront), 1.1 google
date: Fri, 06 Jan 2023 22:01:17 GMT
age: 21627
etag: "c833563644d1d9f66f86baea512ea3c0ce9597d0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f37a3ca-5b31-4876-bbcd-442c1f718b3c.jpeg
34.120.237.76200 OK 5.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f37a3ca-5b31-4876-bbcd-442c1f718b3c.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e832123ea0c92a446b5894e75efc86ae
bb438ca635b43819701067ef07a3d910ad29a0c7
e1b0c6cd873f304de15664f96af6b6914e13fbbfb3e2179ba43369e116446773
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f37a3ca-5b31-4876-bbcd-442c1f718b3c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5578
x-amzn-requestid: 93353c3e-1b26-424c-b4c6-0d113703edd6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eFvpBFGvIAMFobw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b22c9f-1d07cff31ae39320693642f0;Sampled=0
x-amzn-remapped-date: Mon, 02 Jan 2023 01:00:15 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: vIFVXgt2RmoplkAVOtUrOkXj3LmhRw-XEPe7fugZ2-mv_iDY07XzUg==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Sat, 07 Jan 2023 00:24:31 GMT
age: 13033
etag: "bb438ca635b43819701067ef07a3d910ad29a0c7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 623e85ff33837eb6c59e11ae2759237a
cea1948490802e652e7f6678dc76694e0d6ab61a
1fb30f3579d3277435c860f472008bea3680db1202d838ad4669d943ec88ba65
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 07 Jan 2023 04:01:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F528de87e-4c51-4e2a-90d5-fa6c5a52a300.jpeg
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F528de87e-4c51-4e2a-90d5-fa6c5a52a300.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c3735c87d612da35bd07f0397b95799a
47a017ef6a57d5ec43482308cda3e15f35bfacf6
e075dd0433540b3c35030bd9312273e1ed472ab1a25cfe2912086d35e6019a60
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F528de87e-4c51-4e2a-90d5-fa6c5a52a300.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10420
x-amzn-requestid: 07ec4ee5-9bf1-4562-ace2-54878d165362
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eVx2SE-AIAMF9hQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b8968e-261039fd5a03f8bd318be3f0;Sampled=0
x-amzn-remapped-date: Fri, 06 Jan 2023 21:45:50 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: Bt72dHvalgXSITQUzBErtnMBC9FV6i3-PooqUFkv09AS0tOVWkU0gQ==
via: 1.1 60b744e5b364d04abea9fa6686121242.cloudfront.net (CloudFront), 1.1 50faaaa196a6b0875217ef7827f97d7c.cloudfront.net (CloudFront), 1.1 google
date: Sat, 07 Jan 2023 03:53:23 GMT
age: 501
etag: "47a017ef6a57d5ec43482308cda3e15f35bfacf6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff9065a68-5b6b-48d9-9a67-ee52d64c7fa7.jpeg
34.120.237.76200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff9065a68-5b6b-48d9-9a67-ee52d64c7fa7.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4a9b0814cf080c45bacfd180ad0f7846
a0697b3661eeead7d18f4959207206927d24bebd
6023d83b6cc4054f4f3d4dda9059f4f93ad829b9510db7c1be8b6c9b59a29fd1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff9065a68-5b6b-48d9-9a67-ee52d64c7fa7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11399
x-amzn-requestid: ae357a33-b784-49f0-9a22-4cd564c939ec
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eGCNWEeOIAMFg5A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b24a55-794102864eb6796301cf314e;Sampled=0
x-amzn-remapped-date: Mon, 02 Jan 2023 03:07:01 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: QCx3r3CVh7eqdpZsnexk664XQXL1ilM44RyZeNeYMeIqS2YTtidN4A==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 6af3b573d8970d5db2a4d03354335b84.cloudfront.net (CloudFront), 1.1 google
date: Fri, 06 Jan 2023 10:25:33 GMT
age: 63371
etag: "a0697b3661eeead7d18f4959207206927d24bebd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
143.204.42.88200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 143.204.42.88:0
Hash e3af731632524b1acf0630c03b97b2ed
73223f8eed0dc66fd197ee35a99adc6016ada7a1
b59700e9c3f43417b644040a14bebc01b4260c4945f6f1bec78ca0098815bba0
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sat, 07 Jan 2023 04:01:44 GMT
Last-Modified: Sat, 07 Jan 2023 03:55:03 GMT
Server: ECS (nyb/1D1F)
X-Cache: Miss from cloudfront
Via: 1.1 83a23d85c009b0c0e3626072e9f997fe.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Gb3hJyflTcGLuG1DJasLolEPMjemXmNpl-njIud6GWal7rJuB7A_UA==
Age: 401
ocsp.sca1b.amazontrust.com/
143.204.42.88200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 143.204.42.88:0
Hash c49206830eb6e1a8a87d178e9205bed8
d80ecfd1ffdcceb849b276bc594dd8646ba09535
053c15a72cb1b30647fee2dd4037fdf5798908f96b5a4b850cd9905f860459f4
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sat, 07 Jan 2023 04:01:44 GMT
Last-Modified: Sat, 07 Jan 2023 02:46:11 GMT
Server: ECS (bsa/EB11)
X-Cache: Miss from cloudfront
Via: 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: QChgu1Qw9awx2MzEyilhMfVHLebWjedQopfUS0RsjmL6LAXqHnrRaA==
Age: 4533
backoffice.regily.com/releases?new=true&partner=doggocasino&env=stable
54.170.34.139200 OK 2 B URL HTTP/2 backoffice.regily.com/releases?new=true&partner=doggocasino&env=stable
IP 54.170.34.139:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /releases?new=true&partner=doggocasino&env=stable HTTP/1.1
Host: backoffice.regily.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://doggocasino.com
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 07 Jan 2023 04:01:44 GMT
content-type: application/json; charset=utf-8
content-length: 2
x-amzn-requestid: ceda5200-35f2-4edd-bc2f-d8fd25649728
x-dns-prefetch-control: off
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=15552000; includeSubDomains
x-ratelimit-reset: 1673064145
x-amzn-remapped-content-length: 2
x-frame-options: SAMEORIGIN
allow: GET,POST,PUT,PATCH,DELETE
x-amzn-remapped-connection: keep-alive
x-download-options: noopen
x-ratelimit-remaining: 99
x-amz-apigw-id: eWo6WEhcDoEF-WA=
vary: Accept, Accept-Encoding
x-ratelimit-limit: 100
x-content-type-options: nosniff
etag: W/"2-vyGp6PvFo4RvsFtPoIWeCReyIC8"
x-amzn-trace-id: Root=1-63b8eea8-1d62770d73d95328674e6f59
x-amzn-remapped-date: Sat, 07 Jan 2023 04:01:44 GMT
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 280 B IP 93.184.220.29:0
Hash 85ed0c10f6d605d3495314e2345e8a14
254433987ab6cb8924bb1d80f01f9e3ddc754f83
4cc710c71700b5be6a8a9e0253ddfbc8e3f85333e5f6706e5ff69915b1c7a592
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 635
Cache-Control: max-age=152146
Content-Type: application/ocsp-response
Date: Sat, 07 Jan 2023 04:01:44 GMT
Etag: "63b89b7f-118"
Expires: Sun, 08 Jan 2023 22:17:30 GMT
Last-Modified: Fri, 06 Jan 2023 22:06:55 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 280
doggocasino.com/8.d4514208b791194b5f91.js
143.204.55.92200 OK 10 kB URL HTTP/2 doggocasino.com/8.d4514208b791194b5f91.js
IP 143.204.55.92:0
Hash 34a355c6c71dd9179077f98343a8919d
9e50e5af372183def4528477c5368a0912047186
b1830f9c54731e9c57a8366fc7f4e6fb88981579c36c3c8dd0f1cc75b165131b
GET /8.d4514208b791194b5f91.js HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/en-us?affiliateName=[cellxpert]&affid=cx-35656_390258&bannerid=35656&trackerid=35656_390258&bta=35656&brand=doggocasino&rdk=rk3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
x-amz-meta-codebuild-content-sha256: c7543b0c1a387fe8fce7ecedb491413db02c94ccd3c1a1d5b2dc6c33f6e53bfc
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:dba88433-a99e-4dbd-9b3f-92c9f40e4469
x-amz-meta-codebuild-content-md5: f72fdbadddaa46b851fe89ddcab9666b
last-modified: Thu, 05 Jan 2023 08:36:21 GMT
x-amz-version-id: KU6KXKo6lZ9CewtWvt_5k5R5dSpX60sm
server: AmazonS3
content-encoding: gzip
date: Fri, 06 Jan 2023 11:37:17 GMT
etag: W/"6931bca767bfc1e8a62f5f5ee32af36c"
vary: Accept-Encoding
via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
age: 59068
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: y8YoPqQdJkF6bT2EN3oLDcMYKCSq4rseV-HV0R-b_M6kaPbRSKBN3w==
X-Firefox-Spdy: h2
scripts.prdredir.com/scripts/k_doggocasino.js
172.64.101.29200 OK 721 B URL HTTP/2 scripts.prdredir.com/scripts/k_doggocasino.js
IP 172.64.101.29:0
Hash 5ea8a742a893a2cde11b7efbdc9b220a
df8ee4c549a8f662dd59b0d44cc7b624c7f3562d
53701d8e24e2bbfdce91147bb638138c14c0f2e2c22e62205d5e7194b35d5092
GET /scripts/k_doggocasino.js HTTP/1.1
Host: scripts.prdredir.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 07 Jan 2023 04:01:44 GMT
content-type: text/javascript; charset=utf-8
status: 200 OK
cache-control: max-age=0, public
access-control-allow-origin: *
x-request-id: cf610a33-b11d-4657-b936-ff74de60bb0e
etag: W/"95d838de11136e7964ca0eaa375bf294"
x-runtime: 0.008240
expires: 2022-12-08 04:01:44 UTC
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CqZEyohLdZ9T2P2PaubSyVE0XZDiLQgDzN5hHRziIAJV6nYKq6h6q6d8lksn08YBvf0BSuXA9qQpE3ckL65lk41BTNMhosCOp9jE86mj69eU9QMhGnfemywXjMS9ZTn%2FNbFLnupL7w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7859cb3c4fc68e2a-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cmsapi.doggocasino.com/ajax/country/countryblock
18.203.175.95200 OK 177 B URL HTTP/1.1 cmsapi.doggocasino.com/ajax/country/countryblock
IP 18.203.175.95:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 84a5fedf11ca403c40bcc33c089efabe
2e920993f57a1596c8c26b0e1b8b076458b25994
3873db006fd547eb926c6604f46a926e298eeaa909f6a667d2872f8237f3fc93
GET /ajax/country/countryblock HTTP/1.1
Host: cmsapi.doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://doggocasino.com
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 07 Jan 2023 04:01:44 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Methods: GET, POST, OPTIONS, PUT, DELETE
Access-Control-Allow-Origin: https://doggocasino.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Request-ID,X-REQ-ID
Set-Cookie: ci_session=bco687ni7di1uiqsleveavrhoo7dqoi8; expires=Sat, 07-Jan-2023 05:01:44 GMT; Max-Age=3600; path=/; SameSite=None; secure; HttpOnly
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Language: en
Vary: Accept-Encoding, Accept-Encoding
Content-Encoding: gzip
ocsp.sca1b.amazontrust.com/
143.204.42.88200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 143.204.42.88:0
Hash f1d8ccda81e923f8410b5597e76b2968
20bd23dd71b79fc8544550741558316e8a946dbb
33aa22cdcbadca821a1a505f7f8db7f9ecaeec0639489c1ca88b6a799d619b3b
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=100219
Date: Sat, 07 Jan 2023 04:01:44 GMT
Etag: "63b7c1a4-1d7"
Expires: Sun, 08 Jan 2023 07:52:03 GMT
Last-Modified: Fri, 06 Jan 2023 06:37:24 GMT
Server: ECS (nyb/1DD2)
X-Cache: Miss from cloudfront
Via: 1.1 83a23d85c009b0c0e3626072e9f997fe.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 3rAhIzsk2Lu31xN6zAQxWo2c5q2bPWoyiDGWRLJKdFHR-hcGO2AUPQ==
Age: 4479
ocsp.sca1b.amazontrust.com/
143.204.42.88200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 143.204.42.88:0
Hash f1d8ccda81e923f8410b5597e76b2968
20bd23dd71b79fc8544550741558316e8a946dbb
33aa22cdcbadca821a1a505f7f8db7f9ecaeec0639489c1ca88b6a799d619b3b
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=100440
Date: Sat, 07 Jan 2023 04:01:44 GMT
Etag: "63b7c1a4-1d7"
Expires: Sun, 08 Jan 2023 07:55:44 GMT
Last-Modified: Fri, 06 Jan 2023 06:37:24 GMT
Server: ECS (dcb/7EC9)
X-Cache: Miss from cloudfront
Via: 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: wLb_Et1D27MN_zGymCaAbN2WvL9vJ9SHnAcLwuutzY44ULyf84SMiA==
Age: 4700
ocsp.digicert.com/
93.184.220.29200 OK 281 B IP 93.184.220.29:0
Hash 52823844c39fab70f553cc9131e6c334
dd10c0e550141f9abd21c2a679f1f66b34413806
c8d5f64586d40124092a71c8d28264053768139a6b4ee023994585b41abf3783
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6368
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 07 Jan 2023 04:01:44 GMT
Last-Modified: Sat, 07 Jan 2023 02:15:38 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 280
geo-lookup.iconvert.network/?callback=_jsonp_0
54.230.111.88200 OK 23 B URL HTTP/2 geo-lookup.iconvert.network/?callback=_jsonp_0
IP 54.230.111.88:0
File type ASCII text, with no line terminators
Hash 77a2b27581b0e6f8e1866d12a9fb3460
0d6912f1aabf2f9f191883767a565846b6b23387
892b6da823563cbd0865b33fd6f805e495769f555aa11679fa72c82e56abe9fd
GET /?callback=_jsonp_0 HTTP/1.1
Host: geo-lookup.iconvert.network
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 23
x-amz-bucket-region: us-east-1
date: Sat, 07 Jan 2023 04:01:42 GMT
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: hHEvylLXWcw06haYHLiVpXJrhB_t-rh735dUjy2KAuhxoT36CdmVdw==
age: 2
X-Firefox-Spdy: h2
event.iconvert.network/com.snowplowanalytics.snowplow/tp2
52.210.18.23200 OK 0 B URL HTTP/2 event.iconvert.network/com.snowplowanalytics.snowplow/tp2
IP 52.210.18.23:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /com.snowplowanalytics.snowplow/tp2 HTTP/1.1
Host: event.iconvert.network
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://doggocasino.com/
Origin: https://doggocasino.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 07 Jan 2023 04:01:44 GMT
content-length: 0
access-control-allow-origin: https://doggocasino.com
access-control-allow-credentials: true
access-control-allow-headers: Content-Type
access-control-max-age: 5
server: akka-http/10.0.9
X-Firefox-Spdy: h2
ekr.zdassets.com/compose/65b012e7-7474-42fb-a2e0-939200b21662
104.18.70.113200 OK 442 B URL HTTP/2 ekr.zdassets.com/compose/65b012e7-7474-42fb-a2e0-939200b21662
IP 104.18.70.113:0
File type JSON data\012- , ASCII text, with very long lines (389), with no line terminators
Hash b7e56ec6df52ca7601186281a2483bb0
8480efb0c71ec4212373b217da841dd876280cf7
065d513695ef07fa402087f888e6951f3e3f03bd72a0280d0194a110ea5ed727
GET /compose/65b012e7-7474-42fb-a2e0-939200b21662 HTTP/1.1
Host: ekr.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://doggocasino.com
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 07 Jan 2023 04:01:44 GMT
content-type: application/json; charset=utf-8
status: 200 OK
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-expose-headers:
access-control-max-age: 7200
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-download-options: noopen
x-permitted-cross-domain-policies: none
referrer-policy: strict-origin-when-cross-origin
cdn-cache-control: max-age=60
cache-control: max-age=600, public, stale-while-revalidate=600, stale-if-error=21600
etag: W/"912aa25e7c61d4bfe392cb2b982bb083"
x-request-id: 77a4354dd9ff0b3d-ORD, 77a4354dd9ff0b3d-ORD
x-runtime: 0.003718
vary: Origin, Accept-Encoding
x-zendesk-zorg: yes
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VEjWP1EiHfW4Rwc5JzIemppF7uQsw2gxb9lnO0kkie1rxw%2BHT7fwwglmsvsqWKRA0GrvDjZe5R18%2FB8KFU0yuhmYQJMq6lJFPJ3rEKFKaXI%2BFhCDRx%2FcKSPi%2F4WEhUIftaU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 7859cb3beb411c12-OSL
content-encoding: br
X-Firefox-Spdy: h2
event.iconvert.network/com.snowplowanalytics.snowplow/tp2
52.210.18.23200 OK 2 B URL HTTP/2 event.iconvert.network/com.snowplowanalytics.snowplow/tp2
IP 52.210.18.23:0
File type ASCII text, with no line terminators
Hash 444bcb3a3fcf8389296c49467f27e1d6
7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1
Host: event.iconvert.network
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
Content-Length: 701
Origin: https://doggocasino.com
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 07 Jan 2023 04:01:44 GMT
content-type: text/plain; charset=UTF-8
content-length: 2
set-cookie: sp=d8c31375-5e0b-4cb2-a19f-809199ec9e31; Expires=Sun, 07 Jan 2024 04:01:44 GMT; Path=/
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA"
access-control-allow-origin: https://doggocasino.com
access-control-allow-credentials: true
server: akka-http/10.0.9
X-Firefox-Spdy: h2
cmsapi.doggocasino.com/ajax/staticPage/getPage?url_path=game-header-filter-data&language=no
18.203.175.95200 OK 787 B URL HTTP/1.1 cmsapi.doggocasino.com/ajax/staticPage/getPage?url_path=game-header-filter-data&language=no
IP 18.203.175.95:0
File type JSON data\012- , ASCII text, with very long lines (4044), with no line terminators
Hash b0cee8610450eecc568afdbed759fc7f
addd0c1c653d9aa9c1bdce67d3418ad4994ca620
922d29e0f56d5a3799bb0bfd4e98f182827b6238418f86d1c67034ed47034a70
GET /ajax/staticPage/getPage?url_path=game-header-filter-data&language=no HTTP/1.1
Host: cmsapi.doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://doggocasino.com
Connection: keep-alive
Referer: https://doggocasino.com/
Cookie: _ga_K4EHGY5F0T=GS1.1.1673064093.1.0.1673064093.60.0.0; _ga=GA1.1.207839148.1673064093; ci_session=bco687ni7di1uiqsleveavrhoo7dqoi8
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 07 Jan 2023 04:01:44 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Methods: GET, POST, OPTIONS, PUT, DELETE
Access-Control-Allow-Origin: https://doggocasino.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Request-ID,X-REQ-ID
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: ci_session=bco687ni7di1uiqsleveavrhoo7dqoi8; expires=Sat, 07-Jan-2023 05:01:44 GMT; Max-Age=3600; path=/; SameSite=None; secure; HttpOnly
Content-Language: en
Vary: Accept-Encoding, Accept-Encoding
Content-Encoding: gzip
cmsapi.doggocasino.com/ajax/game/getLobbyListWithGameGroups?languageId=en
18.203.175.95200 OK 618 B URL HTTP/1.1 cmsapi.doggocasino.com/ajax/game/getLobbyListWithGameGroups?languageId=en
IP 18.203.175.95:0
File type JSON data\012- , ASCII text, with very long lines (5234), with no line terminators
Hash 3af44e04d58117844c51b8e38b7ee76c
e92815e81b5e9151649407b7409485afd5136d6f
701c8cd4ec99d1bd8eae0abd06a8f09b3bcfe10cb80a78aefe16fcace92bfe22
GET /ajax/game/getLobbyListWithGameGroups?languageId=en HTTP/1.1
Host: cmsapi.doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://doggocasino.com
Connection: keep-alive
Referer: https://doggocasino.com/
Cookie: _ga_K4EHGY5F0T=GS1.1.1673064093.1.0.1673064093.60.0.0; _ga=GA1.1.207839148.1673064093; ci_session=bco687ni7di1uiqsleveavrhoo7dqoi8
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 07 Jan 2023 04:01:44 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Methods: GET, POST, OPTIONS, PUT, DELETE
Access-Control-Allow-Origin: https://doggocasino.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Request-ID,X-REQ-ID
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: ci_session=bco687ni7di1uiqsleveavrhoo7dqoi8; expires=Sat, 07-Jan-2023 05:01:44 GMT; Max-Age=3600; path=/; SameSite=None; secure; HttpOnly
Content-Language: en
Vary: Accept-Encoding, Accept-Encoding
Content-Encoding: gzip
cmsapi.doggocasino.com/ajax/staticPage/getPage?url_path=footer-no&language=no
18.203.175.95200 OK 1.3 kB URL HTTP/1.1 cmsapi.doggocasino.com/ajax/staticPage/getPage?url_path=footer-no&language=no
IP 18.203.175.95:0
File type JSON data\012- HTML document, ASCII text, with very long lines (6442), with no line terminators
Hash b4514acd3007bc22981a574b714d4a63
5141f79b74d18624f30fb5f77c91895fc9d73866
bbc76d53fb64b13595479d93bc7d521e0e7c90e9e2d18d636cf2dc2f12aa7718
GET /ajax/staticPage/getPage?url_path=footer-no&language=no HTTP/1.1
Host: cmsapi.doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://doggocasino.com
Connection: keep-alive
Referer: https://doggocasino.com/
Cookie: _ga_K4EHGY5F0T=GS1.1.1673064093.1.0.1673064093.60.0.0; _ga=GA1.1.207839148.1673064093; ci_session=bco687ni7di1uiqsleveavrhoo7dqoi8
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 07 Jan 2023 04:01:44 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Methods: GET, POST, OPTIONS, PUT, DELETE
Access-Control-Allow-Origin: https://doggocasino.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Request-ID,X-REQ-ID
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: ci_session=bco687ni7di1uiqsleveavrhoo7dqoi8; expires=Sat, 07-Jan-2023 05:01:44 GMT; Max-Age=3600; path=/; SameSite=None; secure; HttpOnly
Content-Language: en
Vary: Accept-Encoding, Accept-Encoding
Content-Encoding: gzip
cmsapi.doggocasino.com/ajax/staticPage/getPage?url_path=game-header-filter-data&language=no
18.203.175.95200 OK 787 B URL HTTP/1.1 cmsapi.doggocasino.com/ajax/staticPage/getPage?url_path=game-header-filter-data&language=no
IP 18.203.175.95:0
File type JSON data\012- , ASCII text, with very long lines (4044), with no line terminators
Hash b0cee8610450eecc568afdbed759fc7f
addd0c1c653d9aa9c1bdce67d3418ad4994ca620
922d29e0f56d5a3799bb0bfd4e98f182827b6238418f86d1c67034ed47034a70
GET /ajax/staticPage/getPage?url_path=game-header-filter-data&language=no HTTP/1.1
Host: cmsapi.doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://doggocasino.com
Connection: keep-alive
Referer: https://doggocasino.com/
Cookie: _ga_K4EHGY5F0T=GS1.1.1673064093.1.0.1673064093.60.0.0; _ga=GA1.1.207839148.1673064093; ci_session=bco687ni7di1uiqsleveavrhoo7dqoi8
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 07 Jan 2023 04:01:44 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Methods: GET, POST, OPTIONS, PUT, DELETE
Access-Control-Allow-Origin: https://doggocasino.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Request-ID,X-REQ-ID
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: ci_session=bco687ni7di1uiqsleveavrhoo7dqoi8; expires=Sat, 07-Jan-2023 05:01:44 GMT; Max-Age=3600; path=/; SameSite=None; secure; HttpOnly
Content-Language: en
Vary: Accept-Encoding, Accept-Encoding
Content-Encoding: gzip
cmsapi.doggocasino.com/ajax/Faq/getQuestions?lang=no
18.203.175.95200 OK 6.9 kB URL HTTP/1.1 cmsapi.doggocasino.com/ajax/Faq/getQuestions?lang=no
IP 18.203.175.95:0
File type JSON data\012- , ASCII text, with very long lines (50212), with no line terminators
Hash 46712c8114b6b2df3f50d69f2c7f96f5
ba2ea03bba7ff2af9f432739a774496d4eef540a
854ab5787fc1cefb0da2eb75c4b09de68cabf38a0738bb133964b542e9ef20ac
GET /ajax/Faq/getQuestions?lang=no HTTP/1.1
Host: cmsapi.doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://doggocasino.com
Connection: keep-alive
Referer: https://doggocasino.com/
Cookie: _ga_K4EHGY5F0T=GS1.1.1673064093.1.0.1673064093.60.0.0; _ga=GA1.1.207839148.1673064093; ci_session=bco687ni7di1uiqsleveavrhoo7dqoi8
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 07 Jan 2023 04:01:44 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Methods: GET, POST, OPTIONS, PUT, DELETE
Access-Control-Allow-Origin: https://doggocasino.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Request-ID,X-REQ-ID
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: ci_session=bco687ni7di1uiqsleveavrhoo7dqoi8; expires=Sat, 07-Jan-2023 05:01:44 GMT; Max-Age=3600; path=/; SameSite=None; secure; HttpOnly
Content-Encoding: gzip
cmsapi.doggocasino.com/languages/DOC/no.json
18.203.175.95200 OK 24 kB URL HTTP/1.1 cmsapi.doggocasino.com/languages/DOC/no.json
IP 18.203.175.95:0
File type JSON data\012- HTML document, Unicode text, UTF-8 text, with very long lines (2182), with CRLF line terminators
Hash 9b62907b1534ae01aab2a91848b8fb27
9c0a32b59d7ef6d0c68bd1d614cd1fad9da8d7c9
ce7008096ba3f8c8195ea67e429b61f7ee75c765f26f474f9dbe0db6eaf8a06a
GET /languages/DOC/no.json HTTP/1.1
Host: cmsapi.doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://doggocasino.com
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 07 Jan 2023 04:01:44 GMT
Content-Type: application/json
Last-Modified: Thu, 05 Jan 2023 16:07:34 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63b6f5c6-1c4a1"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS, HEAD
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,x-prerender,x-req-id
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/deposit.svg
151.101.86.208200 OK 650 B URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/deposit.svg
IP 151.101.86.208:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (782)
Hash 4eaf6050ffda6e8eccdf827b716f3d84
457b3fd261ce20c20f86472f006833978899abb9
cd5ca735ae64a5adad76ff9c0b8ace20e19a1e7d5cd0ee3ae8b13274ab49c404
GET /uploads/media/DOC/home/deposit.svg HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 22 Jun 2022 15:01:49 GMT
content-encoding: gzip
server: imgix
x-imgix-id: 4a6143392dbbc3c9af35d019d441944bfe50ed11
x-imgix-render-farm: 02.552
x-imgix-original-status: 200
date: Sat, 07 Jan 2023 04:01:44 GMT
age: 6370672
accept-ranges: bytes
content-type: image/svg+xml
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10066-SJC, cache-bma1632-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
content-length: 650
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/safety.svg
151.101.86.208200 OK 1.1 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/safety.svg
IP 151.101.86.208:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1535)
Hash f4bceb3b835f466f7e3c3e31f22996da
7795f48b8e4ea4ee227f3e2c0a7490f1a0e6e576
9af7e809decc127848a79a3425ddec9855db28d150f935ada5de2a4f6d9775d4
GET /uploads/media/DOC/home/safety.svg HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 22 Jun 2022 15:01:49 GMT
content-encoding: gzip
server: imgix
x-imgix-id: 964d44d72b652a9538aae37c30342dc375306c1a
x-imgix-render-farm: 02.552
x-imgix-original-status: 200
date: Sat, 07 Jan 2023 04:01:44 GMT
age: 5676216
accept-ranges: bytes
content-type: image/svg+xml
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10052-SJC, cache-bma1632-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
content-length: 1096
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/micro-gaming.png
151.101.86.208200 OK 12 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/micro-gaming.png
IP 151.101.86.208:0
File type PNG image data, 273 x 135, 8-bit/color RGBA, non-interlaced\012- data
Hash ad498e425bc190d412243470877e08c1
c7286f96e9b48afe1e0388495c6a23121688aa3d
cda4cfc287ffe13972fef5287357eb52c9bd72a3d1edb47afdb196368509883e
GET /uploads/media/DOC/home/micro-gaming.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 22 Jun 2022 15:01:49 GMT
server: imgix
x-imgix-id: 15d074cab052572c5443d02e38f7beeb535181e9
x-imgix-render-farm: 01.1064
date: Sat, 07 Jan 2023 04:01:44 GMT
age: 5146396
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10049-SJC, cache-bma1632-BMA
x-cache: HIT, HIT
content-length: 11685
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/withdrawals.svg
151.101.86.208200 OK 635 B URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/withdrawals.svg
IP 151.101.86.208:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (738)
Hash 65cf7eb945d17e10d26ffa99ae01ca31
e7a55a6ee8076ec9a25f7bf6fe656ee79094f563
bcadc56bac241e35bcfab4d5ec90dbb398ad7d2cd7bf00253e918ab932ac6429
GET /uploads/media/DOC/home/withdrawals.svg HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 09 Nov 2022 12:38:48 GMT
content-encoding: gzip
server: imgix
x-imgix-id: b0d8cbd84a5d40f7a31f8d2a40dcf6e12ddff13c
x-imgix-render-farm: 02.552
date: Sat, 07 Jan 2023 04:01:44 GMT
age: 4552393
accept-ranges: bytes
content-type: image/svg+xml
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10035-SJC, cache-bma1632-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
content-length: 635
X-Firefox-Spdy: h2
cmsapi.doggocasino.com/ajax/promotion/getPromotions?languageId=no
18.203.175.95200 OK 8.9 kB URL HTTP/1.1 cmsapi.doggocasino.com/ajax/promotion/getPromotions?languageId=no
IP 18.203.175.95:0
File type JSON data\012- HTML document, ASCII text, with very long lines (37500), with no line terminators
Hash 977d44235257add1f0f0aae028a07389
7c3a307cdacb68439b2cea975b5ef2e7e67eed41
10ac0f58712b12cc9fb033a64331ef8902dcdcaaa98d7d7a897efc44d2237af4
GET /ajax/promotion/getPromotions?languageId=no HTTP/1.1
Host: cmsapi.doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://doggocasino.com
Connection: keep-alive
Referer: https://doggocasino.com/
Cookie: _ga_K4EHGY5F0T=GS1.1.1673064093.1.0.1673064093.60.0.0; _ga=GA1.1.207839148.1673064093; ci_session=bco687ni7di1uiqsleveavrhoo7dqoi8
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 07 Jan 2023 04:01:44 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Methods: GET, POST, OPTIONS, PUT, DELETE
Access-Control-Allow-Origin: https://doggocasino.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Request-ID,X-REQ-ID
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: ci_session=bco687ni7di1uiqsleveavrhoo7dqoi8; expires=Sat, 07-Jan-2023 05:01:44 GMT; Max-Age=3600; path=/; SameSite=None; secure; HttpOnly
Content-Encoding: gzip
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/game-art.png
151.101.86.208200 OK 6.2 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/game-art.png
IP 151.101.86.208:0
File type PNG image data, 279 x 138, 8-bit/color RGBA, non-interlaced\012- data
Hash a077d41a5bfa379097dd3b0dca4c236a
1e5a4e68cdf2fa8aad5613036632a5422f804d52
dbeb43c9dfabd489d74ef02d98a9d857e9400b3f2c1dc3ecf9f7bbd3a9180a58
GET /uploads/media/DOC/home/game-art.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 22 Jun 2022 15:01:49 GMT
server: imgix
x-imgix-id: 156eae225a670763a1941c7cab6441bc1bc01231
x-imgix-render-farm: 01.1064
date: Sat, 07 Jan 2023 04:01:44 GMT
age: 5230073
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10057-SJC, cache-bma1632-BMA
x-cache: HIT, HIT
content-length: 6248
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/quick-spin.png
151.101.86.208200 OK 7.3 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/quick-spin.png
IP 151.101.86.208:0
File type PNG image data, 264 x 132, 8-bit/color RGBA, non-interlaced\012- data
Hash c4651477b077d4f4dea3646065567885
df7eecb46d7709e9c490b399b9e4795e64595792
04c9cd3e8cfb7fa6e88c28b17cf9b2c87f83d5e1adadc20f2615ff1f1fdd0e88
GET /uploads/media/DOC/home/quick-spin.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 22 Jun 2022 15:01:49 GMT
server: imgix
x-imgix-id: b3f7542b22878ec5c77012762c5b725ec229b35d
x-imgix-render-farm: 02.552
date: Sat, 07 Jan 2023 04:01:44 GMT
age: 226493
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10021-SJC, cache-bma1632-BMA
x-cache: HIT, HIT
content-length: 7266
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/netent.png
151.101.86.208200 OK 7.6 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/netent.png
IP 151.101.86.208:0
File type PNG image data, 264 x 132, 8-bit/color RGBA, non-interlaced\012- data
Hash e2b8f21ff6a62425c54d2f31ea3da47b
bc0bb5c1b693c346300dc20657113ca18be6c924
58ee78a9a65e277e9ce58fad220ebf002de259699f963819277230d67308e814
GET /uploads/media/DOC/home/netent.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 22 Jun 2022 15:01:49 GMT
server: imgix
x-imgix-id: ad53f775ba8679c60964307b8587293d2caf651a
x-imgix-render-farm: 02.552
x-imgix-original-status: 200
date: Sat, 07 Jan 2023 04:01:44 GMT
age: 4996453
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10069-SJC, cache-bma1632-BMA
x-cache: HIT, HIT
content-length: 7615
X-Firefox-Spdy: h2
adjs.media/resources/content/doggocasino.js
172.67.165.118200 OK 5.8 kB URL HTTP/2 adjs.media/resources/content/doggocasino.js
IP 172.67.165.118:0
File type ASCII text, with very long lines (2887)
Hash 7a1ddbda5f46198305ab47611b2ed1c3
2b238d94631e6eb562f475e722236b868418f1a9
247331c8aba528905a37b5706d124944c2134597a0765bb6a262162c359f6821
GET /resources/content/doggocasino.js HTTP/1.1
Host: adjs.media
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 07 Jan 2023 04:01:44 GMT
content-type: text/javascript; charset=utf-8
status: 200 OK
cache-control: no-cache
access-control-allow-origin: *
referrer-policy: strict-origin-when-cross-origin
x-permitted-cross-domain-policies: none
x-xss-protection: 1; mode=block
x-request-id: 46f78e78-894e-44c7-9f6f-7a5248aff62b
x-download-options: noopen
etag: W/"910a1eb1f52f1e810f827c5d4202a9f4"
x-runtime: 0.001464
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=U8M89Lin49ykL8e8Dorz2%2BXNaTaURq34PsA4y6ld6Le8rZy9ytSQu13Z4lWmeYkppuhlvgwXffKGUAY%2BRlfMwJEoxKclRi7ewPYmzMSX6VpVJ09%2FYVF3s2ihVer%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7859cb3bda78b50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/mb-bottom.png
151.101.86.208200 OK 945 B URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/mb-bottom.png
IP 151.101.86.208:0
File type PNG image data, 555 x 78, 8-bit colormap, non-interlaced\012- data
Hash afd8b1279d095eddad3f7ad8df9892a3
407841662fc47b2d82e8a0cba898163a8c4d86b7
58b09fba62fa08df503bddcf36cf9fdc0e6d08a9a7bd2cfa122fc34fc3f6b6a2
GET /uploads/media/DOC/home/mb-bottom.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Mon, 21 Nov 2022 14:38:42 GMT
server: imgix
x-imgix-id: 9604a605ff9399483ffa1266c921e5f617cc5d27
x-imgix-render-farm: 02.552
x-imgix-original-status: 200
date: Sat, 07 Jan 2023 04:01:45 GMT
age: 3173483
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10070-SJC, cache-bma1632-BMA
x-cache: HIT, HIT
content-length: 945
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/no-limit.png
151.101.86.208200 OK 4.9 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/no-limit.png
IP 151.101.86.208:0
File type PNG image data, 282 x 141, 8-bit/color RGBA, non-interlaced\012- data
Hash a5a601b38f6b3b9f958d2eca3a4a45e5
6e1c5af69461c0cbcb4a03602018a9278a5d04aa
ea215374e2595992671808fdc26279914384c72d0c487829e0d85b7d50a71e81
GET /uploads/media/DOC/home/no-limit.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 22 Jun 2022 15:01:49 GMT
server: imgix
x-imgix-id: efbe04cd14966a572ec0249915fa8e9dbcb1ab6d
x-imgix-render-farm: 01.1064
date: Sat, 07 Jan 2023 04:01:45 GMT
age: 3177025
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10066-SJC, cache-bma1632-BMA
x-cache: HIT, HIT
content-length: 4863
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/gaming.png
151.101.86.208200 OK 6.6 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/gaming.png
IP 151.101.86.208:0
File type PNG image data, 243 x 120, 8-bit/color RGBA, non-interlaced\012- data
Hash f0c61bac2c685ab90cdeba03f39a73ff
db8a075fbe70ef285b8db7d68f79d17c9cf52aa3
b5b53a76e45279edccc190cb7603e0522f77e12b72b9b9d9075c937d53627ef9
GET /uploads/media/DOC/home/gaming.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 22 Jun 2022 15:01:49 GMT
server: imgix
x-imgix-id: f5516194f1c84239a1b98d55710e00a65eb8f279
x-imgix-render-farm: 01.1064
x-imgix-original-status: 200
date: Sat, 07 Jan 2023 04:01:45 GMT
age: 5083547
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10081-SJC, cache-bma1632-BMA
x-cache: HIT, HIT
content-length: 6610
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/northernlights.png
151.101.86.208200 OK 9.7 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/northernlights.png
IP 151.101.86.208:0
File type PNG image data, 258 x 129, 8-bit/color RGBA, non-interlaced\012- data
Hash d00971dc7290a8d83d531bfe390dd39c
a2a9e0bd0d476994c9fb564a2976f254a865fccd
d9658fdd73aae24cab7d588506ca816cd6cbe7e6917169298e4a1167d71421f0
GET /uploads/media/DOC/home/northernlights.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 22 Jun 2022 15:01:49 GMT
server: imgix
x-imgix-id: b7b0828bf9802afd4ca81d7ee3b043e8a2a1a7aa
x-imgix-render-farm: 02.552
x-imgix-original-status: 200
date: Sat, 07 Jan 2023 04:01:45 GMT
age: 5083546
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10081-SJC, cache-bma1632-BMA
x-cache: HIT, HIT
content-length: 9665
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/fantasma.png
151.101.86.208200 OK 8.5 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/fantasma.png
IP 151.101.86.208:0
File type PNG image data, 249 x 126, 8-bit/color RGBA, non-interlaced\012- data
Hash c665b0d5e32fda6859ff497e1e69c43f
c182cf5a9438a4af020fc6c98dc6a101825fd0f4
031eda00e0705a5d0c4d98517a0d465a921256d4d0ff85a571858b1d41fce01a
GET /uploads/media/DOC/home/fantasma.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 22 Jun 2022 15:01:49 GMT
server: imgix
x-imgix-id: b4ad11aad057e8c05fc0b0f8b5527d7ab0b1dd0c
x-imgix-render-farm: 02.552
x-imgix-original-status: 200
date: Sat, 07 Jan 2023 04:01:45 GMT
age: 3171153
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10074-SJC, cache-bma1632-BMA
x-cache: HIT, HIT
content-length: 8546
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/visa.png
151.101.86.208200 OK 10 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/visa.png
IP 151.101.86.208:0
File type PNG image data, 156 x 156, 8-bit/color RGBA, non-interlaced\012- data
Hash 9c283e2c4040566cd8ad97b5866c9537
c61dd5f44d2f6473aeb0a71729928c5b94f5b623
349173c164101e5a60336be685e50f70df22ddcf0b84a87450bbfecc247b9d64
GET /uploads/media/DOC/home/visa.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Thu, 04 Aug 2022 10:16:05 GMT
server: imgix
x-imgix-id: fc011ac8714ce6e920fe34347bd05471a26519c8
x-imgix-render-farm: 01.1064
x-imgix-original-status: 200
date: Sat, 07 Jan 2023 04:01:45 GMT
age: 5478115
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10080-SJC, cache-bma1632-BMA
x-cache: HIT, HIT
content-length: 10038
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/mc.png
151.101.86.208200 OK 9.2 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/mc.png
IP 151.101.86.208:0
File type PNG image data, 156 x 156, 8-bit/color RGBA, non-interlaced\012- data
Hash c7dd6fdc3e16c819c88735699286ea81
90c72fd87afa0024ce87797a4709ae71370f89ab
f4ad70ee60ce0b2c8179c15fa2cb20f561901f02ffabb8c8abe59436a5bb1b1c
GET /uploads/media/DOC/home/mc.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Thu, 04 Aug 2022 10:16:04 GMT
server: imgix
x-imgix-id: 5ac1c0635257e27880e4d45804d430e0c10109ee
x-imgix-render-farm: 02.552
date: Sat, 07 Jan 2023 04:01:45 GMT
age: 4553360
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10035-SJC, cache-bma1632-BMA
x-cache: HIT, HIT
content-length: 9166
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/eyecon.png
151.101.86.208200 OK 8.8 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/eyecon.png
IP 151.101.86.208:0
File type PNG image data, 264 x 132, 8-bit/color RGBA, non-interlaced\012- data
Hash 8766855d25ad3843eb33359112283e5d
a838120ce318c886ad64c1dd8ff488f7c6e0f0a4
f8a978ca8b36c3044558087bcbfc54cc5ea0a4a86823e00923f52071b0960e17
GET /uploads/media/DOC/home/eyecon.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 22 Jun 2022 15:01:49 GMT
server: imgix
x-imgix-id: b194cba3d851abc0ae7017867d5528e25721a55a
x-imgix-render-farm: 02.552
x-imgix-original-status: 200
date: Sat, 07 Jan 2023 04:01:45 GMT
age: 5679931
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10052-SJC, cache-bma1632-BMA
x-cache: HIT, HIT
content-length: 8776
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/elk-studios.png
151.101.86.208200 OK 5.9 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/elk-studios.png
IP 151.101.86.208:0
File type PNG image data, 252 x 126, 8-bit/color RGBA, non-interlaced\012- data
Hash 51d08cb0697602f09624cc82bb4d5a55
e45470f8c08548f1048d9efd72799b7b09096673
10bdf4c280e8f097ab29f3829c19998b5a2f038a8e6b07537dbc9d777f35bbc7
GET /uploads/media/DOC/home/elk-studios.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 22 Jun 2022 15:01:49 GMT
server: imgix
x-imgix-id: a8be3f7fcc7e0e5e50a51735a763ca42e282bbcc
x-imgix-render-farm: 01.1064
x-imgix-original-status: 200
date: Sat, 07 Jan 2023 04:01:45 GMT
age: 6314625
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10078-SJC, cache-bma1632-BMA
x-cache: HIT, HIT
content-length: 5941
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/blue-print.png
151.101.86.208200 OK 13 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/blue-print.png
IP 151.101.86.208:0
File type PNG image data, 276 x 138, 8-bit/color RGBA, non-interlaced\012- data
Hash 215e832f2352ba2b101cdad72966f603
a1dcf49c0377e3f1e1c6bfcef8e49435dfffc781
dc6f2ec8948d25ba0a77ce6aedfcc118857fd6733c4801697db1e8b073e65456
GET /uploads/media/DOC/home/blue-print.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 22 Jun 2022 15:01:49 GMT
server: imgix
x-imgix-id: 22ce464371762ac6d7bfdc4518bc66e919f06221
x-imgix-render-farm: 01.1064
x-imgix-original-status: 200
date: Sat, 07 Jan 2023 04:01:44 GMT
age: 5121576
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10077-SJC, cache-bma1632-BMA
x-cache: HIT, HIT
content-length: 13093
X-Firefox-Spdy: h2
doggocasino.com/assets/images/HeroBottom.webp
143.204.55.92200 OK 8.6 kB URL HTTP/2 doggocasino.com/assets/images/HeroBottom.webp
IP 143.204.55.92:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash e7ca3e477ff57d76894214575d55ad47
e81dfea1456367bfb5a43735f377ef8d90ba9445
86b4f03b03f70a75fb273131f57ea8ec7c750f55ebb73f7acfe285b1c1df3e26
GET /assets/images/HeroBottom.webp HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/no-no?affiliateName=%5Bcellxpert%5D&affid=cx-35656_390258&bannerid=35656&trackerid=35656_390258&bta=35656&brand=doggocasino&rdk=rk3
Cookie: _ga_K4EHGY5F0T=GS1.1.1673064093.1.0.1673064093.60.0.0; _ga=GA1.1.207839148.1673064093; __adm_tid=tid-3dbfd246c.2873a269d; affiliateId=cx-35656_390258; bannerId=35656; trackerId=35656_390258; affiliateName=%5Bcellxpert%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 8556
x-amz-meta-codebuild-content-sha256: c7543b0c1a387fe8fce7ecedb491413db02c94ccd3c1a1d5b2dc6c33f6e53bfc
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:dba88433-a99e-4dbd-9b3f-92c9f40e4469
x-amz-meta-codebuild-content-md5: f72fdbadddaa46b851fe89ddcab9666b
last-modified: Thu, 05 Jan 2023 08:36:28 GMT
x-amz-version-id: p76IHIXR0zNtlWolcNZ9tb0bTMCmmH59
server: AmazonS3
date: Fri, 06 Jan 2023 11:17:40 GMT
etag: "e7ca3e477ff57d76894214575d55ad47"
vary: Accept-Encoding
via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
age: 60246
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: NQqY70CI_9aY7fyX0ejC9pzi02sc3F9a0bbB8UuDQbdz4338p97PQQ==
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/irondog.png
151.101.86.208200 OK 5.8 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/irondog.png
IP 151.101.86.208:0
File type PNG image data, 231 x 114, 8-bit/color RGBA, non-interlaced\012- data
Hash c466772fc1afd400af737640c99f88a7
9ca1c550b69d2e5cb728c2a3668b2b35b0b0749e
e779742b7d5d724cb28028beb3ce8b72ebbbfea4c993fa19e01bb065cca77485
GET /uploads/media/DOC/home/irondog.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 22 Jun 2022 15:01:49 GMT
server: imgix
x-imgix-id: 5f108a54bf8f67f0ddd0b4a74be869a348e782c4
x-imgix-render-farm: 02.552
x-imgix-original-status: 200
date: Sat, 07 Jan 2023 04:01:45 GMT
age: 5228132
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10081-SJC, cache-bma1632-BMA
x-cache: HIT, HIT
content-length: 5790
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/interac.png
151.101.86.208200 OK 2.7 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/interac.png
IP 151.101.86.208:0
File type PNG image data, 153 x 156, 8-bit colormap, non-interlaced\012- data
Hash 9b9b9143bf86f05cda2161cc7ffcc3c8
4a793f79be620d49a751984f2a7c3bea07176894
d34b0fa6f4a752d9eaeb192ae7810afe5938865ffc0f01032f4b6ec4c1d7b8f3
GET /uploads/media/DOC/home/interac.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Thu, 04 Aug 2022 10:16:05 GMT
server: imgix
x-imgix-id: ed1c6f2730a37c1819802969d210f4b0df75ad80
x-imgix-render-farm: 01.1064
date: Sat, 07 Jan 2023 04:01:45 GMT
age: 2729251
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10052-SJC, cache-bma1632-BMA
x-cache: HIT, HIT
content-length: 2738
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/ecashout.png
151.101.86.208200 OK 2.6 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/ecashout.png
IP 151.101.86.208:0
File type PNG image data, 153 x 156, 8-bit colormap, non-interlaced\012- data
Hash a4c8123c11469403a676a4b6e6a5f301
321ba2a412968a39eb4e1ed9ed72b17b591d941d
a5fd2c66784ea49cb274ef2677c646762969e54b9371cdf556404f1e73483baf
GET /uploads/media/DOC/home/ecashout.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Thu, 04 Aug 2022 10:16:05 GMT
server: imgix
x-imgix-id: 69f383545740b3576766fcb1f7f2e7fd060e9952
x-imgix-render-farm: 02.552
date: Sat, 07 Jan 2023 04:01:45 GMT
age: 2745196
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10048-SJC, cache-bma1632-BMA
x-cache: HIT, HIT
content-length: 2616
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/dcs.png
151.101.86.208200 OK 3.0 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/dcs.png
IP 151.101.86.208:0
File type PNG image data, 156 x 156, 8-bit colormap, non-interlaced\012- data
Hash 033e64d307fcfd62be869c5de0721c66
a2307ba759c902a98ec8af557f677929d2c0e28d
23050464c99491bdbff255e380dffcc5dbd1f69dffb401dc837dd3da9cfbcd54
GET /uploads/media/DOC/home/dcs.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Thu, 04 Aug 2022 09:33:44 GMT
server: imgix
x-imgix-id: f08012d74f54989bdfa4c2c6b92ef3188526885a
x-imgix-render-farm: 02.552
x-imgix-original-status: 200
date: Sat, 07 Jan 2023 04:01:45 GMT
age: 4994517
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10069-SJC, cache-bma1632-BMA
x-cache: HIT, HIT
content-length: 3003
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/dogecoin.png
151.101.86.208200 OK 15 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/dogecoin.png
IP 151.101.86.208:0
File type PNG image data, 165 x 168, 8-bit/color RGBA, non-interlaced\012- data
Hash 1e9329b8bf799a9b826f3a29b4f176c9
202c3b7f110e6a0f02cc57c4a5b9c2a0a04b0c91
c1bb8bbda40d80955c710bc3a20910eda13844db3ed1936d860de6f7bcd959ba
GET /uploads/media/DOC/home/dogecoin.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Thu, 04 Aug 2022 10:16:06 GMT
server: imgix
x-imgix-id: b93fdb7ebe47bfcaf7b9ae87de0815dc2dbcea28
x-imgix-render-farm: 02.552
x-imgix-original-status: 200
date: Sat, 07 Jan 2023 04:01:45 GMT
age: 5523519
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10060-SJC, cache-bma1632-BMA
x-cache: HIT, HIT
content-length: 15219
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/litecoin-new.png
151.101.86.208200 OK 14 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/litecoin-new.png
IP 151.101.86.208:0
File type PNG image data, 165 x 168, 8-bit/color RGBA, non-interlaced\012- data
Hash 9bc85726c5ca5e2a3d2a555a615c4256
049d4828511ea4d2bd01bb5f8a465885e6e9d704
9fd49d747b0dff0642c22a38a5fe92f32b56c91b99a1bb985e29c478a31776a1
GET /uploads/media/DOC/home/litecoin-new.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Mon, 08 Aug 2022 06:13:29 GMT
server: imgix
x-imgix-id: 496607c1ecc55274adeab02e6fc9fe2f17a021e2
x-imgix-render-farm: 02.552
x-imgix-original-status: 200
date: Sat, 07 Jan 2023 04:01:45 GMT
age: 5233222
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10029-SJC, cache-bma1632-BMA
x-cache: HIT, HIT
content-length: 14490
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/etr-new.png
151.101.86.208200 OK 5.1 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/etr-new.png
IP 151.101.86.208:0
File type PNG image data, 165 x 168, 8-bit/color RGBA, non-interlaced\012- data
Hash 5ede2b5b941cae8778d7dfa1354b6f10
6f02fcc2a92339e5bb2eb0a96962f89513ac7922
826c3ed09f7501644f305aebf992d904f308bbae1f25e5449d02de013d5a3fdb
GET /uploads/media/DOC/home/etr-new.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Mon, 08 Aug 2022 06:13:29 GMT
server: imgix
x-imgix-id: 18e894e53de3831e917cd5e37269b400d363b35d
x-imgix-render-farm: 01.1064
x-imgix-original-status: 200
date: Sat, 07 Jan 2023 04:01:45 GMT
age: 5016766
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10030-SJC, cache-bma1632-BMA
x-cache: HIT, HIT
content-length: 5095
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/ripple-new.png
151.101.86.208200 OK 2.9 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/ripple-new.png
IP 151.101.86.208:0
File type PNG image data, 165 x 168, 8-bit colormap, non-interlaced\012- data
Hash 2aef5169d3eefdcac4fa852082d208c7
ef02e2b0d695d24bb8ca48fe6101dc118703d4ea
761cc6f5576279ba59dbe0ed38d8faae2291c1cb658ac6d4425e6d0274360b2b
GET /uploads/media/DOC/home/ripple-new.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Mon, 08 Aug 2022 06:13:29 GMT
server: imgix
x-imgix-id: 7127f048971a51617be81375e201a3979c64c107
x-imgix-render-farm: 02.552
x-imgix-original-status: 200
date: Sat, 07 Jan 2023 04:01:45 GMT
age: 6872866
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10059-SJC, cache-bma1632-BMA
x-cache: HIT, HIT
content-length: 2921
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/live-chat.svg
151.101.86.208200 OK 839 B URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/live-chat.svg
IP 151.101.86.208:0
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (734)
Hash 83446e4d2f06186a15149eaff721bc82
be4daa2a3cdefe196af997d3859abd0137c2b46c
19e16d18413d121628f7ea88a731632d27f18ff3760dbb693f855f0878372c9d
GET /uploads/media/DOC/home/live-chat.svg HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Thu, 09 Jun 2022 04:34:39 GMT
content-encoding: gzip
server: imgix
x-imgix-id: 4b3de38e2392e00f600484d978499ce447f38500
x-imgix-render-farm: 01.1064
date: Sat, 07 Jan 2023 04:01:45 GMT
age: 4561923
accept-ranges: bytes
content-type: image/svg+xml
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10023-SJC, cache-bma1632-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
content-length: 839
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/help-center.svg
151.101.86.208200 OK 1.3 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/help-center.svg
IP 151.101.86.208:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1425)
Hash 8ebcd55a704acfdea2f05099cb4ef0df
dccec8929792df80545f7457d551ae69e96abf25
52f1da3a771e6c90e31cb18a055e7d628f2e5348f0283f31bf12e527de36bdd0
GET /uploads/media/DOC/home/help-center.svg HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 09 Nov 2022 10:28:05 GMT
content-encoding: gzip
server: imgix
x-imgix-id: 861a821978d06ce488f0fb32b74a9b24c0962708
x-imgix-render-farm: 02.552
date: Sat, 07 Jan 2023 04:01:45 GMT
age: 4371560
accept-ranges: bytes
content-type: image/svg+xml
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10079-SJC, cache-bma1632-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
content-length: 1334
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/pragmatic-play.png
151.101.86.208200 OK 10 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/pragmatic-play.png
IP 151.101.86.208:0
File type PNG image data, 276 x 138, 8-bit/color RGBA, non-interlaced\012- data
Hash 22799434150dca8d59bf7733f74db4b6
ff7b186d5249e3061a07724a50c9cc3f2b6e2aa1
23ed44cd444692fa3e48eb345878f1e394fbedcb34f26d3906b0ab1fe958d6a9
GET /uploads/media/DOC/home/pragmatic-play.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 22 Jun 2022 15:01:49 GMT
server: imgix
x-imgix-id: eca3ad788ddb94f321d262770254aacf2501b6da
x-imgix-render-farm: 02.552
x-imgix-original-status: 200
date: Sat, 07 Jan 2023 04:01:45 GMT
age: 4542095
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10039-SJC, cache-bma1632-BMA
x-cache: HIT, HIT
content-length: 10517
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/mb.png
151.101.86.208200 OK 996 B URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/mb.png
IP 151.101.86.208:0
File type PNG image data, 561 x 92, 8-bit colormap, non-interlaced\012- data
Hash 4a561b1203db848a0fd069a40105f7a3
432ddaa10b45e26988bc1bddf69a9272a3acaf15
6e979cde819c2b590d29574b712bc5716a818a133e994b7481ff6e293c0d6905
GET /uploads/media/DOC/home/mb.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Fri, 05 Aug 2022 07:05:23 GMT
server: imgix
x-imgix-id: 56961871c145a7e032cb319d8d2ca8989849e05d
x-imgix-render-farm: 02.552
x-imgix-original-status: 200
date: Sat, 07 Jan 2023 04:01:45 GMT
age: 3431650
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10064-SJC, cache-bma1632-BMA
x-cache: HIT, HIT
content-length: 996
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/red-tiger.png
151.101.86.208200 OK 11 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/red-tiger.png
IP 151.101.86.208:0
File type PNG image data, 276 x 138, 8-bit/color RGBA, non-interlaced\012- data
Hash 4d970a8ff362df7c5514aceaa5e3ebe7
55104f39398363a86ccc9c47e5cfa26104ba5a25
cca9d171d20873e005d4c9a6fb3c9df4fb19748d2f66eeb2188aa1fce25d51e1
GET /uploads/media/DOC/home/red-tiger.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 22 Jun 2022 15:01:49 GMT
server: imgix
x-imgix-id: 59cef1d74cb5b52ac14092208b5a093a63b364a7
x-imgix-render-farm: 02.552
x-imgix-original-status: 200
date: Sat, 07 Jan 2023 04:01:45 GMT
age: 5764457
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10040-SJC, cache-bma1632-BMA
x-cache: HIT, HIT
content-length: 11314
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/bitcash.png
151.101.86.208200 OK 18 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/bitcash.png
IP 151.101.86.208:0
File type PNG image data, 174 x 174, 8-bit/color RGBA, non-interlaced\012- data
Hash e68bafdc431bb7237b47260e8d9bc046
a0fa8db91a6ac0ad63898d7407977e7782e32180
59fd94e8ca42bbd652ab2c1af7061afd79bf98bd2b7e4ad1256bcba73e9629a3
GET /uploads/media/DOC/home/bitcash.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Thu, 04 Aug 2022 10:16:06 GMT
server: imgix
x-imgix-id: 5452e6db461140babb5d6935a851bcb990ba0848
x-imgix-render-farm: 01.1064
x-imgix-original-status: 200
date: Sat, 07 Jan 2023 04:01:45 GMT
age: 5130840
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10045-SJC, cache-bma1632-BMA
x-cache: HIT, HIT
content-length: 18036
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/bitcoin.png
151.101.86.208200 OK 19 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/bitcoin.png
IP 151.101.86.208:0
File type PNG image data, 156 x 156, 8-bit/color RGBA, non-interlaced\012- data
Hash cd562a1e7de9e5bd919fed61dffcaf85
fd9c91b81380bdd4ced09ad4f55a859d1df908f0
c4d20189a065ee8bdc172576d404b4a7a5798a94449ca2c093b4b79e33ded24a
GET /uploads/media/DOC/home/bitcoin.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Thu, 04 Aug 2022 10:16:05 GMT
server: imgix
x-imgix-id: ae543caf57d0fc396ef59580adb82d8ef6148cd3
x-imgix-render-farm: 01.1064
x-imgix-original-status: 200
date: Sat, 07 Jan 2023 04:01:45 GMT
age: 5241843
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10057-SJC, cache-bma1632-BMA
x-cache: HIT, HIT
content-length: 18782
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/wins-mobile.png
151.101.86.208200 OK 114 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/wins-mobile.png
IP 151.101.86.208:0
File type PNG image data, 369 x 373, 8-bit/color RGB, non-interlaced\012- data
Size 114 kB (114315 bytes)
Hash 9254612cbe7dc5e08eaad1c7b3b9bed3
4b1b7c636758fd514c10fb40179a3321f4757946
3f10fa5c434f2dc9a35bdbbe807dca7fabb1180153cf1013ceeee70846a67119
GET /uploads/media/DOC/home/wins-mobile.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 30 Nov 2022 11:33:31 GMT
server: imgix
x-imgix-id: f34d513edc4c2eeb153958e0fad3397b1c0f2ee9
x-imgix-render-farm: 02.552
date: Sat, 07 Jan 2023 04:01:45 GMT
age: 2994834
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10026-SJC, cache-bma1632-BMA
x-cache: HIT, HIT
content-length: 114315
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/email.svg
151.101.86.208200 OK 410 B URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/email.svg
IP 151.101.86.208:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (389)
Hash 2f7202492e5cd91e315802476d9f7050
e9e01da01a0cbbff43c54e87ec5394f76e06b179
1568eaef10ca3c8f76a6eac52e7179142ce19db9b872122bdcec5264bd118b9b
GET /uploads/media/DOC/home/email.svg HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 09 Nov 2022 10:28:05 GMT
content-encoding: gzip
server: imgix
x-imgix-id: cf506c30afd516dd73e92c439c2359a2ff562aaa
x-imgix-render-farm: 02.552
x-imgix-original-status: 200
date: Sat, 07 Jan 2023 04:01:45 GMT
age: 4552389
accept-ranges: bytes
content-type: image/svg+xml
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10023-SJC, cache-bma1632-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
content-length: 410
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/doggo-footer.svg
151.101.86.208200 OK 1.3 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/doggo-footer.svg
IP 151.101.86.208:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2775)
Hash bdc5623deb6ed892390913e3304372c2
f7f0db9505e566f2691fa9fde28f748cf30ea0d7
d39e58f66daed5cfbac2331e27fdf1f831200b828fd7c601f0740669330b5965
GET /uploads/media/DOC/home/doggo-footer.svg HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 22 Jun 2022 15:01:49 GMT
content-encoding: gzip
server: imgix
x-imgix-id: ba0fccff7fd2cafdc67f670afe808b92cd1b08e1
x-imgix-render-farm: 01.1064
x-imgix-original-status: 200
date: Sat, 07 Jan 2023 04:01:45 GMT
age: 3171154
accept-ranges: bytes
content-type: image/svg+xml
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10058-SJC, cache-bma1632-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
content-length: 1271
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/casino-mobile.png
151.101.86.208200 OK 133 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/casino-mobile.png
IP 151.101.86.208:0
File type PNG image data, 371 x 397, 8-bit/color RGB, non-interlaced\012- data
Size 133 kB (133402 bytes)
Hash 36f9ecfb460d0de18df1ce7defb10711
b7ee68bd6d2c91ac3d85a452c53974a61cf6d1f0
75db45a28f5b61014fc62b70588a10a644f06cc20dc4f6769acdb10059c0a1b1
GET /uploads/media/DOC/home/casino-mobile.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Tue, 09 Aug 2022 01:43:47 GMT
server: imgix
x-imgix-id: cbeab96184b570df81c9140de058786f3bcebcc3
x-imgix-render-farm: 01.1064
x-imgix-original-status: 200
date: Sat, 07 Jan 2023 04:01:45 GMT
age: 5230073
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10029-SJC, cache-bma1632-BMA
x-cache: HIT, HIT
content-length: 133402
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/faq-mobile.png
151.101.86.208200 OK 128 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/faq-mobile.png
IP 151.101.86.208:0
File type PNG image data, 364 x 359, 8-bit/color RGB, non-interlaced\012- data
Size 128 kB (127922 bytes)
Hash a7fb206443a401aac5e0da3d3157bd4e
3b767d26f8ff846b345042e358f9685a994f3bda
ce580ea6b4e038bf83f50d103c8f90c9f57f817f9395dfdcbeb9595961f5a6d7
GET /uploads/media/DOC/home/faq-mobile.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Tue, 09 Aug 2022 01:55:49 GMT
server: imgix
x-imgix-id: 37ad9b6f619eb9e082fd146a1e42cff97811254c
x-imgix-render-farm: 01.1064
x-imgix-original-status: 200
date: Sat, 07 Jan 2023 04:01:45 GMT
age: 5171251
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10025-SJC, cache-bma1632-BMA
x-cache: HIT, HIT
content-length: 127922
X-Firefox-Spdy: h2
doggocasino.com/assets/images/banner/full-doggo.webp
143.204.55.92200 OK 78 kB URL HTTP/2 doggocasino.com/assets/images/banner/full-doggo.webp
IP 143.204.55.92:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1917x602, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash bc3a30c00fa79b2656a24cad032aadd9
643021f5fcb6bc3ee3df627b5ec52133a54f448d
8e9c830b777176c1c96cafa9df0014f8a6db2a953524884b67ab5281df9dc2b1
GET /assets/images/banner/full-doggo.webp HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/en-us?affiliateName=[cellxpert]&affid=cx-35656_390258&bannerid=35656&trackerid=35656_390258&bta=35656&brand=doggocasino&rdk=rk3
Cookie: _ga_K4EHGY5F0T=GS1.1.1673064093.1.0.1673064093.60.0.0; _ga=GA1.1.207839148.1673064093; __adm_tid=tid-3dbfd246c.2873a269d; affiliateId=cx-35656_390258; bannerId=35656; trackerId=35656_390258; affiliateName=%5Bcellxpert%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 78070
x-amz-meta-codebuild-content-sha256: c7543b0c1a387fe8fce7ecedb491413db02c94ccd3c1a1d5b2dc6c33f6e53bfc
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:dba88433-a99e-4dbd-9b3f-92c9f40e4469
x-amz-meta-codebuild-content-md5: f72fdbadddaa46b851fe89ddcab9666b
last-modified: Thu, 05 Jan 2023 08:36:27 GMT
x-amz-version-id: 5vOK.UgEffGXKv6iY.rC_0qJcDbPUkwx
server: AmazonS3
date: Fri, 06 Jan 2023 22:09:30 GMT
etag: "bc3a30c00fa79b2656a24cad032aadd9"
vary: Accept-Encoding
via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
age: 21136
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: QW-0XPlVmyqfpHyaxRhcaVQYNNH50Xz2SiACIb7MW12fJBKP_ACcmA==
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/support-mobile.PNG
151.101.86.208200 OK 215 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/support-mobile.PNG
IP 151.101.86.208:0
File type PNG image data, 365 x 416, 8-bit/color RGBA, non-interlaced\012- data
Size 215 kB (215081 bytes)
Hash c67edc9f2f91cc55d2bb4cd1db221f88
f1db70c0849edb72d6c1e712660ee289e6d7f755
d061850b353fc488ed78056daa271d5d94b5e62f6c840b4669cef6b0b074a7c4
GET /uploads/media/DOC/home/support-mobile.PNG HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Tue, 09 Aug 2022 01:43:43 GMT
server: imgix
x-imgix-id: 9fd727abab4fa66fcb01546ce986e8a451900ade
x-imgix-render-farm: 01.1064
date: Sat, 07 Jan 2023 04:01:45 GMT
age: 232204
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10053-SJC, cache-bma1632-BMA
x-cache: HIT, HIT
content-length: 215081
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/live-casino-alt.png
151.101.86.208200 OK 932 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/live-casino-alt.png
IP 151.101.86.208:0
File type PNG image data, 1239 x 801, 8-bit/color RGBA, non-interlaced\012- data
Size 932 kB (931521 bytes)
Hash a3113ee83d7cfdda8586b419310bdcc1
601ddede664b13671e9dc48c58e5366c9fd2028e
ba00e861f4fe98eb485ddfd62a83960ee46462037e8362a5cecdbec96a7d440e
GET /uploads/media/DOC/home/live-casino-alt.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 22 Jun 2022 15:01:49 GMT
server: imgix
x-imgix-id: ff0a63b8737b3fac42f7dcbb1a8b46be3e99518d
x-imgix-render-farm: 01.1064
x-imgix-original-status: 200
date: Sat, 07 Jan 2023 04:01:44 GMT
age: 5169680
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10033-SJC, cache-bma1632-BMA
x-cache: HIT, HIT
content-length: 931521
X-Firefox-Spdy: h2
doggocasino.com/assets/fonts/CeraPro/Cera_Pro_Bold.otf
143.204.55.92200 OK 189 kB URL HTTP/2 doggocasino.com/assets/fonts/CeraPro/Cera_Pro_Bold.otf
IP 143.204.55.92:0
File type OpenType font data\012- data
Size 189 kB (189056 bytes)
Hash 07ac815392d30140366e0a9df7f769e8
baa64ee6efc7331cbe288054213ae1eb3d4836a1
ca2bcc9e894e0a755a49f8d264bed726717c0033e6f2dcc8e888bf80ac57bbaa
GET /assets/fonts/CeraPro/Cera_Pro_Bold.otf HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/styles.1f7587ee8c68e382c584.css
Cookie: _ga_K4EHGY5F0T=GS1.1.1673064093.1.0.1673064093.60.0.0; _ga=GA1.1.207839148.1673064093; __adm_tid=tid-3dbfd246c.2873a269d; affiliateId=cx-35656_390258; bannerId=35656; trackerId=35656_390258; affiliateName=%5Bcellxpert%5D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 189056
x-amz-meta-codebuild-content-sha256: c7543b0c1a387fe8fce7ecedb491413db02c94ccd3c1a1d5b2dc6c33f6e53bfc
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:dba88433-a99e-4dbd-9b3f-92c9f40e4469
x-amz-meta-codebuild-content-md5: f72fdbadddaa46b851fe89ddcab9666b
last-modified: Thu, 05 Jan 2023 08:36:18 GMT
x-amz-version-id: caFkw1_8ULo7eDO__ngD7u_sBgHmGtdE
server: AmazonS3
date: Fri, 06 Jan 2023 11:09:14 GMT
etag: "07ac815392d30140366e0a9df7f769e8"
vary: Accept-Encoding
via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
age: 60752
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: zf4pdY41CLWDCQBf5QWHy-Ntq1rQaLFmmZJBzZZgOR1Wsye1xFVbOQ==
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/game-providers.png
151.101.86.208200 OK 94 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/game-providers.png
IP 151.101.86.208:0
File type PNG image data, 1745 x 182, 8-bit/color RGBA, non-interlaced\012- data
Hash 81248b605a052a84ea52f8c2a21eb566
cd779dc72ba988847e98bef0e526eda8d6dacc0b
8c673f835da44c70b9e1c111baeac722e344c79c6e8a9ad0e1ef0d848f4ca82d
GET /uploads/media/DOC/home/game-providers.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 22 Jun 2022 15:01:49 GMT
server: imgix
x-imgix-id: c55ceccda88be8fb5f4fddbdaf54584f08654e6e
x-imgix-render-farm: 02.552
x-imgix-original-status: 200
date: Sat, 07 Jan 2023 04:01:45 GMT
age: 5769662
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10044-SJC, cache-bma1632-BMA
x-cache: HIT, HIT
content-length: 93464
X-Firefox-Spdy: h2
doggocasino.com/icomoon.45820165eb8af3713881.ttf
143.204.55.92200 OK 29 kB URL HTTP/2 doggocasino.com/icomoon.45820165eb8af3713881.ttf
IP 143.204.55.92:0
File type TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, icomoon \012- data
Hash eb718388a17dd6957510fb000e72e3cd
e05feec86f5b7297637a5fc431ab9d1963e2812b
c38790685fe44d27066c46fe406fbf0edef47872cefa44a342e7a25171897200
GET /icomoon.45820165eb8af3713881.ttf HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/styles.1f7587ee8c68e382c584.css
Cookie: _ga_K4EHGY5F0T=GS1.1.1673064093.1.0.1673064093.60.0.0; _ga=GA1.1.207839148.1673064093; __adm_tid=tid-3dbfd246c.2873a269d; affiliateId=cx-35656_390258; bannerId=35656; trackerId=35656_390258; affiliateName=%5Bcellxpert%5D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 28764
x-amz-meta-codebuild-content-sha256: c7543b0c1a387fe8fce7ecedb491413db02c94ccd3c1a1d5b2dc6c33f6e53bfc
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:dba88433-a99e-4dbd-9b3f-92c9f40e4469
x-amz-meta-codebuild-content-md5: f72fdbadddaa46b851fe89ddcab9666b
last-modified: Thu, 05 Jan 2023 08:36:28 GMT
x-amz-version-id: aMqoaKfsb_3UKSs04EopNax8QhjGKN3B
server: AmazonS3
date: Fri, 06 Jan 2023 11:09:14 GMT
etag: "eb718388a17dd6957510fb000e72e3cd"
vary: Accept-Encoding
via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
age: 60752
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: SWIM57ISvKWUeLyQAxlzHPBb8JAS6Xq8W5mC1hV-LAkiVvGuzeCbbA==
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/rela-gaming.png
151.101.86.208200 OK 4.8 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/rela-gaming.png
IP 151.101.86.208:0
File type PNG image data, 273 x 135, 8-bit/color RGBA, non-interlaced\012- data
Hash c9bedd7123ad42428e2ec792776053a8
0925be562535b671f95ff19d90347a8fb6a7ffe1
32409ee3167289537c27f80696a05e8591ed3cabcb086263d0d08daea12d2e61
GET /uploads/media/DOC/home/rela-gaming.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 22 Jun 2022 15:01:49 GMT
server: imgix
x-imgix-id: 6033687633caaffae73c5e17a6003f8c59b85fda
x-imgix-render-farm: 02.552
x-imgix-original-status: 200
date: Sat, 07 Jan 2023 04:01:45 GMT
age: 6984216
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10083-SJC, cache-bma1632-BMA
x-cache: HIT, HIT
content-length: 4798
X-Firefox-Spdy: h2
ocsp.entrust.net/
104.110.10.32200 OK 1.6 kB IP 104.110.10.32:0
Hash 3a51b97aa1ad227546239b44bace84c5
cdc21b8dafbbebfaf16b54d9fd33b7b92f613f39
c455972f1f4dad1e9e768194eb4c994022dc89c46e4e766f2b726816db3e8d22
POST / HTTP/1.1
Host: ocsp.entrust.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
ETag: "C455972F1F4DAD1E9E768194EB4C994022DC89C46E4E766F2B726816DB3E8D22"
Last-Modified: Fri, 06 Jan 2023 20:00:00 UTC
Content-Length: 1588
Cache-Control: public, no-transform, must-revalidate, max-age=3184
Expires: Sat, 07 Jan 2023 04:54:49 GMT
Date: Sat, 07 Jan 2023 04:01:45 GMT
Connection: keep-alive
cmsapi.doggocasino.com/ajax/game/getLobbyGameGroupGames?languageId=en
18.203.175.95200 OK 104 kB URL HTTP/1.1 cmsapi.doggocasino.com/ajax/game/getLobbyGameGroupGames?languageId=en
IP 18.203.175.95:0
File type JSON data\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (65536), with no line terminators
Size 104 kB (103995 bytes)
Hash 64c6e7dc3a7da285bb77a101dcd9328a
61c15cbae398635fdd43a9a088fa86802e88d7ef
1bae96d446fc55f31480711f7c13e776da764eab87e15318df61e75dea4ad349
GET /ajax/game/getLobbyGameGroupGames?languageId=en HTTP/1.1
Host: cmsapi.doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://doggocasino.com
Connection: keep-alive
Referer: https://doggocasino.com/
Cookie: _ga_K4EHGY5F0T=GS1.1.1673064093.1.0.1673064093.60.0.0; _ga=GA1.1.207839148.1673064093; ci_session=bco687ni7di1uiqsleveavrhoo7dqoi8
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 07 Jan 2023 04:01:45 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Methods: GET, POST, OPTIONS, PUT, DELETE
Access-Control-Allow-Origin: https://doggocasino.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Request-ID,X-REQ-ID
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: ci_session=bco687ni7di1uiqsleveavrhoo7dqoi8; expires=Sat, 07-Jan-2023 05:01:44 GMT; Max-Age=3600; path=/; SameSite=None; secure; HttpOnly
Content-Language: en
Vary: Accept-Encoding, Accept-Encoding
Content-Encoding: gzip
doggocasino-images-prd.imgix.net/uploads/media/DOC/images/9kzyghkni-akqaph2rd-CasinoIcon.svg
151.101.86.208200 OK 767 B URL HTTP/2 doggocasino-images-prd.imgix.net/uploads/media/DOC/images/9kzyghkni-akqaph2rd-CasinoIcon.svg
IP 151.101.86.208:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1076)
Hash 59a7c757952f4e73719f399cd6616389
e7a24c2b840a5c55ca3e62461675009c9928917e
79466ff238e8321bec8616124c08f8800952547ae9e89f88dad9d764c913c224
GET /uploads/media/DOC/images/9kzyghkni-akqaph2rd-CasinoIcon.svg HTTP/1.1
Host: doggocasino-images-prd.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Fri, 06 May 2022 13:28:13 GMT
content-encoding: gzip
server: imgix
x-imgix-id: 54ec309787a7b82105a80297a4d073a3745a343f
x-imgix-render-farm: 01.1064
x-imgix-original-status: 200
date: Sat, 07 Jan 2023 04:01:45 GMT
age: 4987689
accept-ranges: bytes
content-type: image/svg+xml
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10069-SJC, cache-bma1632-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
content-length: 767
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/grey-shape.svg
151.101.86.208200 OK 268 B URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/grey-shape.svg
IP 151.101.86.208:0
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text
Hash e67eb7098ee71853fcbbbe3c95e0d0ec
1f2455492bab9ed1dba60056bbcd67178f2ee37a
5e65e35f0d76280d27163d29f5064bd628d1cc13f7e8fdae7cd8650391eefc7f
GET /uploads/media/DOC/home/grey-shape.svg HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Tue, 08 Nov 2022 09:02:38 GMT
content-encoding: gzip
server: imgix
x-imgix-id: 658dfe861a37aa5eb32b429d085cd92aed13afe4
x-imgix-render-farm: 02.552
date: Sat, 07 Jan 2023 04:01:45 GMT
age: 3178959
accept-ranges: bytes
content-type: image/svg+xml
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10034-SJC, cache-bma1632-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
content-length: 268
X-Firefox-Spdy: h2
doggocasino-images-prd.imgix.net/uploads/media/DOC/images/9kzyghkpt-8kpegzft6-8kpbpz732-LiveCasino-Icon.svg
151.101.86.208200 OK 2.1 kB URL HTTP/2 doggocasino-images-prd.imgix.net/uploads/media/DOC/images/9kzyghkpt-8kpegzft6-8kpbpz732-LiveCasino-Icon.svg
IP 151.101.86.208:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2535)
Hash b8d89489d6751052aff308dd243a2ac9
2c6a3fbff3b5416f4bf60ad37ab8c7df718f6d40
2f478dd1b4943e2f1351063abd39db0317ff8f6e2645e046d1c828470ad9ccfa
GET /uploads/media/DOC/images/9kzyghkpt-8kpegzft6-8kpbpz732-LiveCasino-Icon.svg HTTP/1.1
Host: doggocasino-images-prd.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Fri, 06 May 2022 13:28:14 GMT
content-encoding: gzip
server: imgix
x-imgix-id: b6beded82f78b7a9a3b0d663db1e89b3b71cc9e3
x-imgix-render-farm: 02.552
x-imgix-original-status: 200
date: Sat, 07 Jan 2023 04:01:45 GMT
age: 6986689
accept-ranges: bytes
content-type: image/svg+xml
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10083-SJC, cache-bma1632-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
content-length: 2068
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/grey-shape-alt.svg
151.101.86.208200 OK 367 B URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/grey-shape-alt.svg
IP 151.101.86.208:0
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text
Hash edaa04ce1e94b80795bf42b64d0a228d
9ca7c2170b80225ad8d900282a403f6113e97cc9
ccef926f38277cb72a8d54e05194b88a4d36e55ac899631bd6843083e4813abe
GET /uploads/media/DOC/home/grey-shape-alt.svg HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 22 Jun 2022 15:01:49 GMT
content-encoding: gzip
server: imgix
x-imgix-id: c0a7205aeb067efcf46c92afec05993ca546e63f
x-imgix-render-farm: 02.552
x-imgix-original-status: 200
date: Sat, 07 Jan 2023 04:01:45 GMT
age: 5769663
accept-ranges: bytes
content-type: image/svg+xml
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10044-SJC, cache-bma1632-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
content-length: 367
X-Firefox-Spdy: h2
doggocasino-images-prd.imgix.net/uploads/media/DOC/images/9kzygv6fx-8kpi8m203-8kpgg29wu-gift-box-thicker.svg
151.101.86.208200 OK 941 B URL HTTP/2 doggocasino-images-prd.imgix.net/uploads/media/DOC/images/9kzygv6fx-8kpi8m203-8kpgg29wu-gift-box-thicker.svg
IP 151.101.86.208:0
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 76be76f2a7dec465f2452f35658a2e09
0f1bbf98737266b676a2c4b32b1544168e73943b
6ae9272128515c2144e856126178a61c16ab6db3c0a613d8dce9f483164d08d4
GET /uploads/media/DOC/images/9kzygv6fx-8kpi8m203-8kpgg29wu-gift-box-thicker.svg HTTP/1.1
Host: doggocasino-images-prd.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Fri, 06 May 2022 13:28:14 GMT
content-encoding: gzip
server: imgix
x-imgix-id: 2847f6dc6f3f3d9ebe6fc55cdbc85a326c1915bd
x-imgix-render-farm: 02.552
x-imgix-original-status: 200
date: Sat, 07 Jan 2023 04:01:45 GMT
age: 6900292
accept-ranges: bytes
content-type: image/svg+xml
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10043-SJC, cache-bma1632-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
content-length: 941
X-Firefox-Spdy: h2
doggocasino.com/polyfills.041a4b505b38e3453b95.js
143.204.55.92200 OK 456 kB URL HTTP/2 doggocasino.com/polyfills.041a4b505b38e3453b95.js
IP 143.204.55.92:0
Size 456 kB (455788 bytes)
Hash 9858ec76ff0bb6d8235ef6e8bc882585
b135c327211b04963d71dba63cb0c1e877aa43c0
adf76ae8aaa81319176792012bf89798ed641bc39ece9f6031487a53a5cc9a5c
GET /polyfills.041a4b505b38e3453b95.js HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/en-us?affiliateName=[cellxpert]&affid=cx-35656_390258&bannerid=35656&trackerid=35656_390258&bta=35656&brand=doggocasino&rdk=rk3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
x-amz-meta-codebuild-content-sha256: c7543b0c1a387fe8fce7ecedb491413db02c94ccd3c1a1d5b2dc6c33f6e53bfc
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:dba88433-a99e-4dbd-9b3f-92c9f40e4469
x-amz-meta-codebuild-content-md5: f72fdbadddaa46b851fe89ddcab9666b
last-modified: Thu, 05 Jan 2023 08:36:18 GMT
x-amz-version-id: htdpPG.9dCkVoOkvU100sFrI0fPekv3.
server: AmazonS3
content-encoding: gzip
date: Fri, 06 Jan 2023 11:37:16 GMT
etag: W/"43655eda45dc98456c80904f6f6683e7"
vary: Accept-Encoding
via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
age: 59068
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 9ERPVA3TRbHXjiF36BsDGQfXrjX6a8c7GbD23HeYrqxLHlUft7F-SA==
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/playson.png
151.101.86.208200 OK 8.8 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/playson.png
IP 151.101.86.208:0
File type PNG image data, 264 x 132, 8-bit/color RGBA, non-interlaced\012- data
Hash 8f247ad2ba24f62d8568361c71599fcb
a47ec378109d5167452c3c84b6c0ef7e82a0f015
e9f5402ef88a83fe5198a1e164be87b7751d1aa3e3ebf67faf128ad20de81d80
GET /uploads/media/DOC/home/playson.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 22 Jun 2022 15:01:49 GMT
server: imgix
x-imgix-id: 3ac653f153cacea1d8395bd4c0737ea8facc2bd6
x-imgix-render-farm: 02.552
x-imgix-original-status: 200
date: Sat, 07 Jan 2023 04:01:45 GMT
age: 7399847
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10021-SJC, cache-bma1632-BMA
x-cache: HIT, HIT
content-length: 8797
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/24hr-bg.png
151.101.86.208200 OK 846 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/24hr-bg.png
IP 151.101.86.208:0
File type PNG image data, 1467 x 776, 8-bit/color RGBA, non-interlaced\012- data
Size 846 kB (845713 bytes)
Hash 43c4bfb0ef50eee6044ebfd26e20b6b9
7183a0e6cbb296bb9493535579b67afe4c3244cf
e67b16b94d3723da0a5dd239a4104f4a1f46d64f3fb3915c86e8f9a46be8c1d3
GET /uploads/media/DOC/home/24hr-bg.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 22 Jun 2022 15:01:49 GMT
server: imgix
x-imgix-id: c99e8bd81796a1a516cb4d31f2984ec9eacaaef1
x-imgix-render-farm: 01.1064
x-imgix-original-status: 200
date: Sat, 07 Jan 2023 04:01:45 GMT
age: 4561932
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10023-SJC, cache-bma1632-BMA
x-cache: HIT, HIT
content-length: 845713
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/faq.png
151.101.86.208200 OK 1.0 MB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/faq.png
IP 151.101.86.208:0
File type PNG image data, 1920 x 1096, 8-bit/color RGBA, non-interlaced\012- data
Size 1.0 MB (1000337 bytes)
Hash ef96f74f51b5138969246a0b3d1996ac
ca519301ff25dec4f07e54574a40d7012eb6763d
b2e61e89a6a0e373694d5520d34bee9fc24442d94176daa9bf01ad94e8648c5a
GET /uploads/media/DOC/home/faq.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Tue, 26 Jul 2022 05:03:44 GMT
server: imgix
x-imgix-id: 1c4e3f412f3666d51c8e6500453d545a2dd259b0
x-imgix-render-farm: 02.552
date: Sat, 07 Jan 2023 04:01:45 GMT
age: 5232690
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10041-SJC, cache-bma1632-BMA
x-cache: HIT, HIT
content-length: 1000337
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/life-changin-wins.png
151.101.86.208200 OK 732 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/life-changin-wins.png
IP 151.101.86.208:0
File type PNG image data, 2015 x 1068, 8-bit/color RGBA, non-interlaced\012- data
Size 732 kB (731764 bytes)
Hash a7705b01f4799b3cab2f8cdbf71daa66
1395854d5261db43c37bb8706333ce2374e9d126
fca04d41f3c865308bffae37090a41da6d27db5b17bc7811ad7c288f0d2972b7
GET /uploads/media/DOC/home/life-changin-wins.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 22 Jun 2022 15:01:49 GMT
server: imgix
x-imgix-id: ae50c471b705e6c31749dcfe06025fabcd2f8694
x-imgix-render-farm: 01.1064
x-imgix-original-status: 200
date: Sat, 07 Jan 2023 04:01:45 GMT
age: 5161837
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10077-SJC, cache-bma1632-BMA
x-cache: HIT, HIT
content-length: 731764
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/custom-loyalty.png
151.101.86.208200 OK 884 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/custom-loyalty.png
IP 151.101.86.208:0
File type PNG image data, 1247 x 848, 8-bit/color RGBA, non-interlaced\012- data
Size 884 kB (883840 bytes)
Hash 9ebf6e306dc67cee050fe9c92de5d2cc
d5f12930b0e5b56ed0f13475d1a3fd9f9f6001ad
a95d15788e300398aec81c5fbcec4742423977b9ecaa23a8e5d3cfcbd0c6f82d
GET /uploads/media/DOC/home/custom-loyalty.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 22 Jun 2022 15:01:49 GMT
server: imgix
x-imgix-id: 3f80027569f50c2428d6316ff89921d6c28ed46d
x-imgix-render-farm: 01.1064
date: Sat, 07 Jan 2023 04:01:45 GMT
age: 233685
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10081-SJC, cache-bma1632-BMA
x-cache: HIT, HIT
content-length: 883840
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 0521e41515d6353221b262052a1379d0
093c1306189c79f1cadc7b17f2a70ea34c0bc1d6
81d59ed2135bdc6f5987a5a3ff39fd7073c158f0a6fe1b79137799d7b2963a3f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 07 Jan 2023 04:01:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
doggocasino.com/assets/fonts/CeraPro/Cera_Pro_Black.otf
143.204.55.92200 OK 188 kB URL HTTP/2 doggocasino.com/assets/fonts/CeraPro/Cera_Pro_Black.otf
IP 143.204.55.92:0
File type OpenType font data\012- data
Size 188 kB (188164 bytes)
Hash 95d55d992d7f63799ad116dbd12a25cf
37dd0e816b3828a6e996cb1b185b18e10745fb3b
7f9ef82ea041a21505f28d21766821edcc9adda8ed407f676d3623dc4f5c499a
GET /assets/fonts/CeraPro/Cera_Pro_Black.otf HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/styles.1f7587ee8c68e382c584.css
Cookie: _ga_K4EHGY5F0T=GS1.1.1673064093.1.0.1673064093.60.0.0; _ga=GA1.1.207839148.1673064093; __adm_tid=tid-3dbfd246c.2873a269d; affiliateId=cx-35656_390258; bannerId=35656; trackerId=35656_390258; affiliateName=%5Bcellxpert%5D; cookie_policy=accepted
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 188164
x-amz-meta-codebuild-content-sha256: c7543b0c1a387fe8fce7ecedb491413db02c94ccd3c1a1d5b2dc6c33f6e53bfc
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:dba88433-a99e-4dbd-9b3f-92c9f40e4469
x-amz-meta-codebuild-content-md5: f72fdbadddaa46b851fe89ddcab9666b
last-modified: Thu, 05 Jan 2023 08:36:26 GMT
x-amz-version-id: gNNjHTGlPcoeWIhgv5POJ3hF_euh6aRE
server: AmazonS3
date: Fri, 06 Jan 2023 11:09:14 GMT
etag: "95d55d992d7f63799ad116dbd12a25cf"
vary: Accept-Encoding
via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
age: 60752
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 5URilaREQaAglm-Q5C1LFVn64VqmMczNZSaKsx5rnndUs_lA9hQzTw==
X-Firefox-Spdy: h2
api2.gameassists.co.uk/casino/progressive/public/v1/counters?currencyIsoCode=NOK
193.33.229.103200 OK 7.1 kB URL HTTP/1.1 api2.gameassists.co.uk/casino/progressive/public/v1/counters?currencyIsoCode=NOK
IP 193.33.229.103:0
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (58826), with no line terminators
Hash 2855912fd2792736f2b222ad94248e30
46227c0633d87e2b11eb7f5333c485a73676991c
7483868703602fde515731a49c9d50aec650a27127b6cc6e50e7567448fbc423
GET /casino/progressive/public/v1/counters?currencyIsoCode=NOK HTTP/1.1
Host: api2.gameassists.co.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://doggocasino.com
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: no-cache
Pragma: no-cache
Content-Type: application/json; charset=utf-8
Expires: -1
Server:
X-CorrelationId: 3bef720a-ac8e-4357-b6fd-298a5f6347f2
X-Api-Version: 1.0.5.152
Access-Control-Allow-Origin: https://doggocasino.com
Access-Control-Allow-Credentials: true
Access-Control-Expose-Headers: X-CorrelationId
X-AspNet-Version: 4.0.30319
Request-Context: appId=cid-v1:39298cf6-0891-47ba-9f29-1f161231208d
Date: Sat, 07 Jan 2023 04:01:44 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 7100
Connection: Keep-Alive
doggocasino.com/assets/fonts/CeraPro/Cera_Pro_Medium.otf
143.204.55.92200 OK 187 kB URL HTTP/2 doggocasino.com/assets/fonts/CeraPro/Cera_Pro_Medium.otf
IP 143.204.55.92:0
File type OpenType font data\012- data
Size 187 kB (187396 bytes)
Hash afe6902a46c9d424e9aca916f97562db
568338d32254cc1f42c41fd4b0b8b16217ee6525
68415c8ecee10d8cbab1ded06c092c8352ca0ba608e0c01ea5f0d37a358f92e0
GET /assets/fonts/CeraPro/Cera_Pro_Medium.otf HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/styles.1f7587ee8c68e382c584.css
Cookie: _ga_K4EHGY5F0T=GS1.1.1673064093.1.0.1673064093.60.0.0; _ga=GA1.1.207839148.1673064093; __adm_tid=tid-3dbfd246c.2873a269d; affiliateId=cx-35656_390258; bannerId=35656; trackerId=35656_390258; affiliateName=%5Bcellxpert%5D; cookie_policy=accepted
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 187396
x-amz-meta-codebuild-content-sha256: c7543b0c1a387fe8fce7ecedb491413db02c94ccd3c1a1d5b2dc6c33f6e53bfc
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:dba88433-a99e-4dbd-9b3f-92c9f40e4469
x-amz-meta-codebuild-content-md5: f72fdbadddaa46b851fe89ddcab9666b
last-modified: Thu, 05 Jan 2023 08:36:25 GMT
x-amz-version-id: PO5j8iFORQPWKEWcrNPa_CI6DKwGPMtX
server: AmazonS3
date: Fri, 06 Jan 2023 11:23:34 GMT
etag: "afe6902a46c9d424e9aca916f97562db"
vary: Accept-Encoding
via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
age: 59892
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 00OVBhacIYiuDN1DxQPowJoiIvsoTvEtfMxopCTBmhfoUXifGWdP2w==
X-Firefox-Spdy: h2
region1.analytics.google.com/g/collect?v=2&tid=G-K4EHGY5F0T>m=2oe120&_p=631747045&_gaz=1&cid=207839148.1673064093&ul=en-us&sr=1280x1024&_s=1&sid=1673064093&sct=1&seg=0&dl=https%3A%2F%2Fdoggocasino.com%2Fen-us%3FaffiliateName%3D%5Bcellxpert%5D%26affid%3Dcx-35656_390258%26bannerid%3D35656%26trackerid%3D35656_390258%26bta%3D35656%26brand%3Ddoggocasino%26rdk%3Drk3&dt=Doggo%20Casino&en=page_view&_fv=1&_nsi=1&_ss=1
216.239.34.36204 No Content 0 B URL HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-K4EHGY5F0T>m=2oe120&_p=631747045&_gaz=1&cid=207839148.1673064093&ul=en-us&sr=1280x1024&_s=1&sid=1673064093&sct=1&seg=0&dl=https%3A%2F%2Fdoggocasino.com%2Fen-us%3FaffiliateName%3D%5Bcellxpert%5D%26affid%3Dcx-35656_390258%26bannerid%3D35656%26trackerid%3D35656_390258%26bta%3D35656%26brand%3Ddoggocasino%26rdk%3Drk3&dt=Doggo%20Casino&en=page_view&_fv=1&_nsi=1&_ss=1
IP 216.239.34.36:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-K4EHGY5F0T>m=2oe120&_p=631747045&_gaz=1&cid=207839148.1673064093&ul=en-us&sr=1280x1024&_s=1&sid=1673064093&sct=1&seg=0&dl=https%3A%2F%2Fdoggocasino.com%2Fen-us%3FaffiliateName%3D%5Bcellxpert%5D%26affid%3Dcx-35656_390258%26bannerid%3D35656%26trackerid%3D35656_390258%26bta%3D35656%26brand%3Ddoggocasino%26rdk%3Drk3&dt=Doggo%20Casino&en=page_view&_fv=1&_nsi=1&_ss=1 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://doggocasino.com
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://doggocasino.com
date: Sat, 07 Jan 2023 04:01:45 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
doggocasino.com/assets/images/payments/Visa.webp
143.204.55.92200 OK 5.1 kB URL HTTP/2 doggocasino.com/assets/images/payments/Visa.webp
IP 143.204.55.92:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 4b0108440760f16641970c1d5d16cd00
507b3518c8eb975026333a76be0d0178cbc9c2ad
28da44d8c47934effa061189c0f8c3d7253f030c8551e6a5358c065c152f0e46
GET /assets/images/payments/Visa.webp HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/no-no?affiliateName=%5Bcellxpert%5D&affid=cx-35656_390258&bannerid=35656&trackerid=35656_390258&bta=35656&brand=doggocasino&rdk=rk3
Cookie: _ga_K4EHGY5F0T=GS1.1.1673064093.1.0.1673064093.60.0.0; _ga=GA1.1.207839148.1673064093; __adm_tid=tid-3dbfd246c.2873a269d; affiliateId=cx-35656_390258; bannerId=35656; trackerId=35656_390258; affiliateName=%5Bcellxpert%5D; cookie_policy=accepted
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 5090
x-amz-meta-codebuild-content-sha256: c7543b0c1a387fe8fce7ecedb491413db02c94ccd3c1a1d5b2dc6c33f6e53bfc
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:dba88433-a99e-4dbd-9b3f-92c9f40e4469
x-amz-meta-codebuild-content-md5: f72fdbadddaa46b851fe89ddcab9666b
last-modified: Thu, 05 Jan 2023 08:36:17 GMT
x-amz-version-id: VOR_yYVw4M2RaZDf8BMXmIl3.gckRLqY
server: AmazonS3
date: Fri, 06 Jan 2023 11:09:15 GMT
etag: "4b0108440760f16641970c1d5d16cd00"
vary: Accept-Encoding
via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
age: 60751
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: xNGkRhKxvkADICXRXjs-Ub6Kbs720lI0cuatvXDOnMfjAS6dqQeHXQ==
X-Firefox-Spdy: h2
doggocasino.com/assets/images/payments/MC.webp
143.204.55.92200 OK 5.7 kB URL HTTP/2 doggocasino.com/assets/images/payments/MC.webp
IP 143.204.55.92:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash a1e6c278fdafab2a5a4b685e0c58716f
b93e5dc087323be40023bbefaf8ba9c8744c944b
621320f77e17050f2f5a58e52f81fbc0031fa0fb388d3678615c1f313576b2b3
GET /assets/images/payments/MC.webp HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/no-no?affiliateName=%5Bcellxpert%5D&affid=cx-35656_390258&bannerid=35656&trackerid=35656_390258&bta=35656&brand=doggocasino&rdk=rk3
Cookie: _ga_K4EHGY5F0T=GS1.1.1673064093.1.0.1673064093.60.0.0; _ga=GA1.1.207839148.1673064093; __adm_tid=tid-3dbfd246c.2873a269d; affiliateId=cx-35656_390258; bannerId=35656; trackerId=35656_390258; affiliateName=%5Bcellxpert%5D; cookie_policy=accepted
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 5670
x-amz-meta-codebuild-content-sha256: c7543b0c1a387fe8fce7ecedb491413db02c94ccd3c1a1d5b2dc6c33f6e53bfc
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:dba88433-a99e-4dbd-9b3f-92c9f40e4469
x-amz-meta-codebuild-content-md5: f72fdbadddaa46b851fe89ddcab9666b
last-modified: Thu, 05 Jan 2023 08:36:20 GMT
x-amz-version-id: tnjbwukL4htd3BBRjs4_iUOvz7dbUBne
server: AmazonS3
date: Fri, 06 Jan 2023 11:09:15 GMT
etag: "a1e6c278fdafab2a5a4b685e0c58716f"
vary: Accept-Encoding
via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
age: 60751
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: TL80yhoXEmtewcHjMD2nqengh2eQSy3AwM6JA-WD5OzzSKAsPFO_iA==
X-Firefox-Spdy: h2
doggocasino.com/assets/images/payments/AstroPay-isotipo.webp
143.204.55.92200 OK 8.5 kB URL HTTP/2 doggocasino.com/assets/images/payments/AstroPay-isotipo.webp
IP 143.204.55.92:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 7b4904268f33a2bc7d4d9f6bf0b4cd30
0ecb6a5b1fef840b715baf1056de562dfc7cc925
2ec6fcda254d694c53f87b6df84b2cf4a0a2884d6149bf7c2b26952b4e6615b3
GET /assets/images/payments/AstroPay-isotipo.webp HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/no-no?affiliateName=%5Bcellxpert%5D&affid=cx-35656_390258&bannerid=35656&trackerid=35656_390258&bta=35656&brand=doggocasino&rdk=rk3
Cookie: _ga_K4EHGY5F0T=GS1.1.1673064093.1.0.1673064093.60.0.0; _ga=GA1.1.207839148.1673064093; __adm_tid=tid-3dbfd246c.2873a269d; affiliateId=cx-35656_390258; bannerId=35656; trackerId=35656_390258; affiliateName=%5Bcellxpert%5D; cookie_policy=accepted
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 8482
x-amz-meta-codebuild-content-sha256: c7543b0c1a387fe8fce7ecedb491413db02c94ccd3c1a1d5b2dc6c33f6e53bfc
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:dba88433-a99e-4dbd-9b3f-92c9f40e4469
x-amz-meta-codebuild-content-md5: f72fdbadddaa46b851fe89ddcab9666b
last-modified: Thu, 05 Jan 2023 08:36:20 GMT
x-amz-version-id: 9BZxgLX5TDoX5NHNiUrNDiOA_deEKzti
server: AmazonS3
date: Fri, 06 Jan 2023 13:35:53 GMT
etag: "7b4904268f33a2bc7d4d9f6bf0b4cd30"
vary: Accept-Encoding
via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
age: 51953
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: NleL-z3Q-oqnZG-H2L0QcHIep3pIRFZhMTS7L-JB7IVHtMMeSkKK2g==
X-Firefox-Spdy: h2
doggocasino.com/assets/images/payments/CRYPTO-NO-square.webp
143.204.55.92200 OK 9.5 kB URL HTTP/2 doggocasino.com/assets/images/payments/CRYPTO-NO-square.webp
IP 143.204.55.92:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 1743ed8f0a9ca24cb2f49dbb61f70b5b
2c3b851c280984ba7e84b08a956b6122d6575076
9b6bf4178662a1c7e7afd5f111f641de9a44afe4788afb885040b134c1cf2323
GET /assets/images/payments/CRYPTO-NO-square.webp HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/no-no?affiliateName=%5Bcellxpert%5D&affid=cx-35656_390258&bannerid=35656&trackerid=35656_390258&bta=35656&brand=doggocasino&rdk=rk3
Cookie: _ga_K4EHGY5F0T=GS1.1.1673064093.1.0.1673064093.60.0.0; _ga=GA1.1.207839148.1673064093; __adm_tid=tid-3dbfd246c.2873a269d; affiliateId=cx-35656_390258; bannerId=35656; trackerId=35656_390258; affiliateName=%5Bcellxpert%5D; cookie_policy=accepted
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 9456
x-amz-meta-codebuild-content-sha256: c7543b0c1a387fe8fce7ecedb491413db02c94ccd3c1a1d5b2dc6c33f6e53bfc
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:dba88433-a99e-4dbd-9b3f-92c9f40e4469
x-amz-meta-codebuild-content-md5: f72fdbadddaa46b851fe89ddcab9666b
last-modified: Thu, 05 Jan 2023 08:36:29 GMT
x-amz-version-id: nOTPUreyntNp62lizYypd5s7hHogL2b_
server: AmazonS3
date: Fri, 06 Jan 2023 13:35:53 GMT
etag: "1743ed8f0a9ca24cb2f49dbb61f70b5b"
vary: Accept-Encoding
via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
age: 51953
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: TkXZ7E81tDX7I6ZTliuM0CriassXibAfYFJC9wDC09OZ5iAMvu1n_w==
X-Firefox-Spdy: h2
doggocasino.com/Cookies-Icon.a41fe3b3f8f0046c586a.svg
143.204.55.92200 OK 7.1 kB URL HTTP/2 doggocasino.com/Cookies-Icon.a41fe3b3f8f0046c586a.svg
IP 143.204.55.92:0
Hash 1acc435fba52d50b4e6e6b24d88f3e39
b0a5ea57301998f2eb4ca554da4483e8dfdc852c
6b62c119f0196908bc5efa02ac9a3393a66d2117ba47353046b99c7ac18f5336
GET /Cookies-Icon.a41fe3b3f8f0046c586a.svg HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/styles.1f7587ee8c68e382c584.css
Cookie: _ga_K4EHGY5F0T=GS1.1.1673064093.1.0.1673064093.60.0.0; _ga=GA1.1.207839148.1673064093; __adm_tid=tid-3dbfd246c.2873a269d; affiliateId=cx-35656_390258; bannerId=35656; trackerId=35656_390258; affiliateName=%5Bcellxpert%5D; cookie_policy=accepted
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
x-amz-meta-codebuild-content-sha256: c7543b0c1a387fe8fce7ecedb491413db02c94ccd3c1a1d5b2dc6c33f6e53bfc
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:dba88433-a99e-4dbd-9b3f-92c9f40e4469
x-amz-meta-codebuild-content-md5: f72fdbadddaa46b851fe89ddcab9666b
last-modified: Thu, 05 Jan 2023 08:36:24 GMT
x-amz-version-id: v67LzOlHf2g1K.cSPqht9o3MbOD2Ys6E
server: AmazonS3
content-encoding: gzip
date: Fri, 06 Jan 2023 16:06:22 GMT
etag: W/"87dfcd5ae030f407cc281bc26d0255f4"
vary: Accept-Encoding
via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
age: 42924
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: eoih9_dKUj0r-tc5p55zrdYws3ZPgWeFOjwuudo5CVNyLTGEBEYUwQ==
X-Firefox-Spdy: h2
stats.g.doubleclick.net/g/collect?v=2&tid=G-K4EHGY5F0T&cid=207839148.1673064093>m=2oe120&aip=1
173.194.222.156204 No Content 0 B URL HTTP/2 stats.g.doubleclick.net/g/collect?v=2&tid=G-K4EHGY5F0T&cid=207839148.1673064093>m=2oe120&aip=1
IP 173.194.222.156:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-K4EHGY5F0T&cid=207839148.1673064093>m=2oe120&aip=1 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://doggocasino.com
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://doggocasino.com
date: Sat, 07 Jan 2023 04:01:45 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
doggocasino.com/assets/fonts/CeraPro/Cera_Pro_Light.otf
143.204.55.92200 OK 185 kB URL HTTP/2 doggocasino.com/assets/fonts/CeraPro/Cera_Pro_Light.otf
IP 143.204.55.92:0
File type OpenType font data\012- data
Size 185 kB (185224 bytes)
Hash 112299d7917b38aff426d451d495f3d7
6de584a008b9858f356612935204940c53f5c226
51678261b34255f1b6aa36b5ec12956d44cf63162f8e86cb838594484148fe2d
GET /assets/fonts/CeraPro/Cera_Pro_Light.otf HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/styles.1f7587ee8c68e382c584.css
Cookie: _ga_K4EHGY5F0T=GS1.1.1673064093.1.0.1673064093.60.0.0; _ga=GA1.1.207839148.1673064093; __adm_tid=tid-3dbfd246c.2873a269d; affiliateId=cx-35656_390258; bannerId=35656; trackerId=35656_390258; affiliateName=%5Bcellxpert%5D; cookie_policy=accepted
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 185224
x-amz-meta-codebuild-content-sha256: c7543b0c1a387fe8fce7ecedb491413db02c94ccd3c1a1d5b2dc6c33f6e53bfc
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:dba88433-a99e-4dbd-9b3f-92c9f40e4469
x-amz-meta-codebuild-content-md5: f72fdbadddaa46b851fe89ddcab9666b
last-modified: Thu, 05 Jan 2023 08:36:28 GMT
x-amz-version-id: ESIpojbVBx7vaO3CbJI0InDZatTpxf02
server: AmazonS3
date: Fri, 06 Jan 2023 11:09:14 GMT
etag: "112299d7917b38aff426d451d495f3d7"
vary: Accept-Encoding
via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
age: 60752
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: audEp5url4hRnTOmr6DrEwH8qdivzeCL-K_FsjyeMnpyAV93DAM1WA==
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash ac952a23a955cca4b6feddd6459de86f
0a20125cf6413cfa2bc989389e7e3a261b10007a
229811ad51e2204f1b3542cc1776c85a2978d2a7a2b7244efb2c0181eb80c3cf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "229811AD51E2204F1B3542CC1776C85A2978D2A7A2B7244EFB2C0181EB80C3CF"
Last-Modified: Wed, 04 Jan 2023 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8042
Expires: Sat, 07 Jan 2023 06:15:47 GMT
Date: Sat, 07 Jan 2023 04:01:45 GMT
Connection: keep-alive
static.zdassets.com/web_widget/latest/classic/web-widget-classic-81a3de7.js
104.18.72.113200 OK 4.2 kB URL HTTP/2 static.zdassets.com/web_widget/latest/classic/web-widget-classic-81a3de7.js
IP 104.18.72.113:0
File type ASCII text, with very long lines (13518), with no line terminators
Hash bbcfc4eb3e0c1792c5695c13d997e131
c5a7925cb38d650ab4482f872531f7853501ab56
92f9d868e4ef7d6f25525f243d1cb1af743ada8205ef258a7544ca645aa907dc
GET /web_widget/latest/classic/web-widget-classic-81a3de7.js HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 07 Jan 2023 04:01:45 GMT
content-type: application/javascript; charset=utf-8
x-amz-id-2: Ce0nkuWjjUM/lzymVjHtiQ0M7cglO06O1GZHyYHKpApfhIFuCFdX0tcKGB1Nd+nf3sqmhVUU19M=
x-amz-request-id: F6C99C8H3KRW33CZ
x-amz-replication-status: COMPLETED
last-modified: Wed, 14 Dec 2022 15:44:37 GMT
etag: W/"0b77084bbe255e38dfc0511ed512b1b9"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Thu, 14 Dec 2023 15:44:36 GMT
x-amz-version-id: BI7BH2_wYlhqABgV_1RpW5mVt_EhVp77
cf-cache-status: HIT
age: 1904199
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EwU1UAlvXXojYocWP52Vw0nTLeaa9jAvjqRHosS6Fcq7hQ7qroBWlVfaqr6wOqY2qXVuGhyj9JOsXMiWt0BepZ0jCGvmYpRk4V0wxjMO4KTeOmq0JJhKV%2F7B8te9MnX4XCP3kOQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 7859cb427e3db512-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 0521e41515d6353221b262052a1379d0
093c1306189c79f1cadc7b17f2a70ea34c0bc1d6
81d59ed2135bdc6f5987a5a3ff39fd7073c158f0a6fe1b79137799d7b2963a3f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 07 Jan 2023 04:01:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash ac952a23a955cca4b6feddd6459de86f
0a20125cf6413cfa2bc989389e7e3a261b10007a
229811ad51e2204f1b3542cc1776c85a2978d2a7a2b7244efb2c0181eb80c3cf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "229811AD51E2204F1B3542CC1776C85A2978D2A7A2B7244EFB2C0181EB80C3CF"
Last-Modified: Wed, 04 Jan 2023 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8042
Expires: Sat, 07 Jan 2023 06:15:47 GMT
Date: Sat, 07 Jan 2023 04:01:45 GMT
Connection: keep-alive
doggocasino.com/assets/images/doggocasino-license.png
143.204.55.92200 OK 46 kB URL HTTP/2 doggocasino.com/assets/images/doggocasino-license.png
IP 143.204.55.92:0
File type PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced\012- data
Hash 375b5b5bcd1d5179f5b789e4c28ca6df
f52bfd097b13f83fa43714f59786efa4082f55a1
f7acaa7ace617964cd79de3287bfa740f1d3fbcbed82ea1d09cd94058d4b1281
GET /assets/images/doggocasino-license.png HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/no-no?affiliateName=%5Bcellxpert%5D&affid=cx-35656_390258&bannerid=35656&trackerid=35656_390258&bta=35656&brand=doggocasino&rdk=rk3
Cookie: _ga_K4EHGY5F0T=GS1.1.1673064093.1.0.1673064093.60.0.0; _ga=GA1.1.207839148.1673064093; __adm_tid=tid-3dbfd246c.2873a269d; affiliateId=cx-35656_390258; bannerId=35656; trackerId=35656_390258; affiliateName=%5Bcellxpert%5D; cookie_policy=accepted
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 46382
x-amz-id-2: Z3yrmuDe6EbZwvVcrZU4O4TMFAe3SlEBovktgMcj9E9qxvVBCzqOvlV24iqT07lFmIar2TNS9S4=
x-amz-request-id: BVYF4G3P6DMJXC4H
date: Thu, 05 Jan 2023 08:38:32 GMT
x-amz-meta-codebuild-content-sha256: c7543b0c1a387fe8fce7ecedb491413db02c94ccd3c1a1d5b2dc6c33f6e53bfc
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:dba88433-a99e-4dbd-9b3f-92c9f40e4469
x-amz-meta-codebuild-content-md5: f72fdbadddaa46b851fe89ddcab9666b
last-modified: Thu, 05 Jan 2023 08:36:26 GMT
x-amz-version-id: gbLxw23KcJy7y6EgtTXIApzB7SYCIWYF
etag: "375b5b5bcd1d5179f5b789e4c28ca6df"
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: ZvrD5bFUmzUKxWh6MmVNpiFZxkothZu9sLlGaw7vJd4ZBtgpCMQfvQ==
age: 156194
X-Firefox-Spdy: h2
doggocasino.com/favicon.ico
143.204.55.92200 OK 4.3 kB URL HTTP/2 doggocasino.com/favicon.ico
IP 143.204.55.92:0
File type MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel\012- data
Hash bf17160c2e430c1c7fda0c795c8ee482
2990a13dd391376c8593c9243d4430a9318c7a18
aaee36adabe0daf0003147b30c2a56b8341f2469a6f4fec886e64412063f4cd4
GET /favicon.ico HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/en-us?affiliateName=[cellxpert]&affid=cx-35656_390258&bannerid=35656&trackerid=35656_390258&bta=35656&brand=doggocasino&rdk=rk3
Cookie: _ga_K4EHGY5F0T=GS1.1.1673064093.1.0.1673064093.60.0.0; _ga=GA1.1.207839148.1673064093; __adm_tid=tid-3dbfd246c.2873a269d; affiliateId=cx-35656_390258; bannerId=35656; trackerId=35656_390258; affiliateName=%5Bcellxpert%5D; cookie_policy=accepted
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/x-icon
content-length: 4286
x-amz-id-2: 3vgBZKfZObbZTWaiHxxVAB3VpJ7IFBxCQXS4afymH9EfYZs4PpjNLD4Q7g2Jb/Xat9rgpdok2YQ=
x-amz-request-id: VJRS75HTTGQPNPRR
date: Thu, 05 Jan 2023 08:38:34 GMT
x-amz-meta-codebuild-content-sha256: c7543b0c1a387fe8fce7ecedb491413db02c94ccd3c1a1d5b2dc6c33f6e53bfc
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:dba88433-a99e-4dbd-9b3f-92c9f40e4469
x-amz-meta-codebuild-content-md5: f72fdbadddaa46b851fe89ddcab9666b
last-modified: Thu, 05 Jan 2023 08:36:23 GMT
x-amz-version-id: 7WJLFkh.RnFAQb3QgSG_Tm3IgArG4xy5
etag: "bf17160c2e430c1c7fda0c795c8ee482"
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 7xO96BsAnRzUbDqXe0nlgUeZDColYLsnGdl0AAFvSaRIXV1hXLDPUg==
age: 156192
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
216.58.207.206200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP 216.58.207.206:0
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Sat, 07 Jan 2023 02:41:09 GMT
expires: Sat, 07 Jan 2023 04:41:09 GMT
cache-control: public, max-age=7200
age: 4836
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 8b62eb2ee6d866c95334ecb4b78582a7
d584a56b23d50a8b250d6d99bc660cc501fb0d01
5e23906997c5de530f9ef3957e0743432dabb808461fe4895050b30b3903244f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 07 Jan 2023 04:01:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-K4EHGY5F0T&cid=207839148.1673064093>m=2oe120&aip=1&z=1846634151
142.250.74.35200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-K4EHGY5F0T&cid=207839148.1673064093>m=2oe120&aip=1&z=1846634151
IP 142.250.74.35:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-K4EHGY5F0T&cid=207839148.1673064093>m=2oe120&aip=1&z=1846634151 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 07 Jan 2023 04:01:45 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 8b62eb2ee6d866c95334ecb4b78582a7
d584a56b23d50a8b250d6d99bc660cc501fb0d01
5e23906997c5de530f9ef3957e0743432dabb808461fe4895050b30b3903244f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 07 Jan 2023 04:01:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
c1.rfihub.net/js/tc.min.js
54.230.111.77200 OK 6.2 kB URL HTTP/2 c1.rfihub.net/js/tc.min.js
IP 54.230.111.77:0
File type C source, ASCII text, with very long lines (19497)
Hash ab5a2e3f2414c0a2b622e48c0b6da2fd
1a894787bde6cbf9b58d47b8f4245607420112ad
a5ef19cf7ca85f760c462ed2f228430c8d0a6d9daf3aa34894a5c42113cfdb8f
GET /js/tc.min.js HTTP/1.1
Host: c1.rfihub.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/x-javascript
content-length: 6162
date: Sat, 07 Jan 2023 04:01:45 GMT
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
cache-control: public, max-age=3600
expires: Sat, 07 Jan 2023 05:01:45 GMT
last-modified: Sat, 07 Jan 2023 04:01:35 GMT
content-encoding: gzip
server: Jetty(9.3.29.v20201019)
x-cache: Miss from cloudfront
via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: SJdzixclV6bwmzD2n-2wsVpMBOOpCxgmMOV0zLrthSvylWW_k6WjxA==
X-Firefox-Spdy: h2
static.hotjar.com/c/hotjar-3054262.js?sv=6
143.204.55.37200 OK 72 kB URL HTTP/2 static.hotjar.com/c/hotjar-3054262.js?sv=6
IP 143.204.55.37:0
File type ASCII text, with very long lines (7679)
Hash 02719afe7623ec57db61fa8a0d9cb330
6735b889f41581cc6a99e7afdaec1fb2a5695c6a
cdd31202ca4fe81e4de45fe040223694723d2a5990ca96abcbe5d1d5ac73e9ee
GET /c/hotjar-3054262.js?sv=6 HTTP/1.1
Host: static.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
content-encoding: br
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=2592000; includeSubDomains
x-cache-hit: 1
x-content-type-options: nosniff
date: Sat, 07 Jan 2023 04:01:14 GMT
cache-control: max-age=60
etag: W/4963982ecceb6c65032e2f69dc06646d
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: y-1XMxZeTYCjdEGrISiLz1fJfJC_y5XCiWWKnvOEWbnAoThWltO4bg==
age: 31
X-Firefox-Spdy: h2
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash 69d46302b4bd60f89601167b760c1052
d5daf3a7631e952ad98a08162181ad47bbbe5d32
97dbd45d1fc42025e70560c2e4859fbc39de5eadff8b34710b3af3552d3faec2
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 07 Jan 2023 04:01:46 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 04 Jan 2023 02:15:47 GMT
Expires: Wed, 11 Jan 2023 02:15:46 GMT
Etag: "d5daf3a7631e952ad98a08162181ad47bbbe5d32"
Cache-Control: max-age=338639,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7859cb470ac1b505-OSL
20841497p.rfihub.com/ca.html?ver=9&rb=46806&ca=20841497&_o=46806&_t=20841497&pe=https%3A%2F%2Fdoggocasino.com%2Fno-no%3FaffiliateName%3D%255Bcellxpert%255D%26affid%3Dcx-35656_390258%26bannerid%3D35656%26trackerid%3D35656_390258%26bta%3D35656%26brand%3Ddoggocasino%26rdk%3Drk3&pf=&ra=3406584942322747
193.0.160.128200 OK 2.7 kB URL HTTP/1.1 20841497p.rfihub.com/ca.html?ver=9&rb=46806&ca=20841497&_o=46806&_t=20841497&pe=https%3A%2F%2Fdoggocasino.com%2Fno-no%3FaffiliateName%3D%255Bcellxpert%255D%26affid%3Dcx-35656_390258%26bannerid%3D35656%26trackerid%3D35656_390258%26bta%3D35656%26brand%3Ddoggocasino%26rdk%3Drk3&pf=&ra=3406584942322747
IP 193.0.160.128:0
File type HTML document text\012- HTML document, ASCII text, with very long lines (2660), with no line terminators
Hash 8cdd0b3d273caf1578ed9f672f79824e
54c95a2017a782a62b7746d1b4c6cec89033ca8a
27dca61c6543a88e88b5908f8187c495aead584849c90e6ffe5e7eb45f161372
GET /ca.html?ver=9&rb=46806&ca=20841497&_o=46806&_t=20841497&pe=https%3A%2F%2Fdoggocasino.com%2Fno-no%3FaffiliateName%3D%255Bcellxpert%255D%26affid%3Dcx-35656_390258%26bannerid%3D35656%26trackerid%3D35656_390258%26bta%3D35656%26brand%3Ddoggocasino%26rdk%3Drk3&pf=&ra=3406584942322747 HTTP/1.1
Host: 20841497p.rfihub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sat, 07 Jan 2023 04:01:46 GMT
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Set-Cookie: rud=H4sIAAAAAAAA_-MSNjU0MTG1sDA1MjK3MLQ0MzUyMBDiM9SNzAgK9fNMDLbIytQFANmgoColAAAA; Path=/; Domain=.rfihub.com; Expires=Thu, 1 Feb 2024 04:01:46 GMT; Secure; SameSite=None
ruds=H4sIAAAAAAAA_-MSNjU0MTG1sDA1MjK3MLQ0MzUyMBDiM9SNzAgK9fNMDLbIytQFANmgoColAAAA; Path=/; Domain=.rfihub.com; Secure; SameSite=None
eud=H4sIAAAAAAAA_5vFyGtoZm5sYGZiaGBmaGq0C41_Co3_Co3_C40_iQmVPwuNvwiNvwqNvwmNvwtdPQsq_xYafxMrmn5uNPt50fjCqPxHaHwAlJso_yABAAA; Path=/; Domain=.rfihub.com; Expires=Thu, 1 Feb 2024 04:01:46 GMT; Secure; SameSite=None
Cache-Control: no-cache
Content-Type: text/html;charset=utf-8
Content-Length: 2660
Server: Jetty(9.3.29.v20201019)
ocsp.sca1b.amazontrust.com/
143.204.42.88200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 143.204.42.88:0
Hash f3e5038e15d58e107aa6e6a8cad704a8
483fe7ff368d292062ca57ee15e9f220fba7dfd5
4e81a40c86a0c838a5bb7cc975989eba01a84438d7c9c47cb8e6929fcbc1dd4b
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sat, 07 Jan 2023 04:01:46 GMT
Last-Modified: Sat, 07 Jan 2023 02:31:54 GMT
Server: ECS (nyb/1DD2)
X-Cache: Miss from cloudfront
Via: 1.1 83a23d85c009b0c0e3626072e9f997fe.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: rvukmXU9x33ZZNzNYEvBMXDs8H6sfFjyJUkDGZsbmPxqK3MAfqQ8cA==
Age: 5392
vars.hotjar.com/box-5e66f98b4ee957db209dc6f63e3d59dd.html
143.204.55.20200 OK 1.0 kB URL HTTP/2 vars.hotjar.com/box-5e66f98b4ee957db209dc6f63e3d59dd.html
IP 143.204.55.20:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2368), with no line terminators
Hash e0652b84b7b3b650769c759fc520c3f8
0b55d6e28613350c7f41b88f19e726e6751ad03b
94b4c240f83065223dcacdd3f8b69cb229d0616edc3e2041eef3e270d859fc3d
GET /box-5e66f98b4ee957db209dc6f63e3d59dd.html HTTP/1.1
Host: vars.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html
content-length: 1035
date: Wed, 23 Nov 2022 13:10:06 GMT
accept-ranges: bytes
cache-control: max-age=31536000
content-encoding: br
cross-origin-embedder-policy: require-corp
cross-origin-resource-policy: cross-origin
etag: "e0652b84b7b3b650769c759fc520c3f8"
last-modified: Wed, 23 Nov 2022 13:09:18 GMT
strict-transport-security: max-age=2592000; includeSubDomains
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: ObOkYAdhufdaFNYjCHKmeqhnj93pZZnqeztbYkZFNxoMKb90mxAIsg==
age: 3855100
X-Firefox-Spdy: h2
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash 69d46302b4bd60f89601167b760c1052
d5daf3a7631e952ad98a08162181ad47bbbe5d32
97dbd45d1fc42025e70560c2e4859fbc39de5eadff8b34710b3af3552d3faec2
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 07 Jan 2023 04:01:46 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 04 Jan 2023 02:15:47 GMT
Expires: Wed, 11 Jan 2023 02:15:46 GMT
Etag: "d5daf3a7631e952ad98a08162181ad47bbbe5d32"
Cache-Control: max-age=338639,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7859cb46f8c9b524-OSL
live.rezync.com/pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5144588522781965200&referrer=https%3A%2F%2Fdoggocasino.com%2Fno-no%3FaffiliateName%3D%255Bcellxpert%255D%26affid%3Dcx-35656_390258%26bannerid%3D35656%26trackerid%3D35656_390258%26bta%3D35656%26brand%3Ddoggocasino%26rdk%3Drk3
143.204.55.19302 Found 657 B URL HTTP/2 live.rezync.com/pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5144588522781965200&referrer=https%3A%2F%2Fdoggocasino.com%2Fno-no%3FaffiliateName%3D%255Bcellxpert%255D%26affid%3Dcx-35656_390258%26bannerid%3D35656%26trackerid%3D35656_390258%26bta%3D35656%26brand%3Ddoggocasino%26rdk%3Drk3
IP 143.204.55.19:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (571)
Hash 9333950d4bb08e6ddf532ebee3a9516e
badc7deb15fa905397bcaeb7f19a8db897368e53
1aeebcf05109eea5f1507eeb2807ba848abe603fd6b9669dcb0b18668b18d908
GET /pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5144588522781965200&referrer=https%3A%2F%2Fdoggocasino.com%2Fno-no%3FaffiliateName%3D%255Bcellxpert%255D%26affid%3Dcx-35656_390258%26bannerid%3D35656%26trackerid%3D35656_390258%26bta%3D35656%26brand%3Ddoggocasino%26rdk%3Drk3 HTTP/1.1
Host: live.rezync.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
content-type: text/html; charset=utf-8
content-length: 657
location: https://p.rfihub.com/cm?pub=39342&in=0&userid=021137e2-c925-4c54-88ed-40561f47e037%3A1673064106.309457&forward=https%3A//idsync.rlcdn.com/501709.gif%3Fpartner_uid%3D021137e2-c925-4c54-88ed-40561f47e037%253A1673064106.309457
date: Sat, 07 Jan 2023 04:01:46 GMT
set-cookie: zync-uuid=021137e2-c925-4c54-88ed-40561f47e037:1673064106.309457; Domain=rezync.com; Expires=Wed, 05 Jul 2023 20:01:46 GMT; Path=/; SameSite=None; Secure
sd-session-id=.eJwNytsKwjAMANB_yfMqSZr09jNDughFV2WdL479u3s8cA6YP7at9259h7JvX5ugvtqlAeWA0X6rPaGAkoimpMwxUQ7KiHBOMGyM9u5zW66DTOSjsauZ1UlVcSnZ4gQ10EOioY-FQvQYhDDcPGbRCOcfZgYkdA.Y7juqg.N-X0GW0fpCIuq9M5hxvi6-eIdkA; Expires=Thu, 06 Jul 2023 04:01:46 GMT; HttpOnly; Path=/; SameSite=None; Secure
vary: Cookie
server: lighttpd/1.4.59
x-cache: Miss from cloudfront
via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Z8emS_EYznRZemEScoMaPVgwHWF16EQSI5RtYGdB_om_HocgvJnrJg==
X-Firefox-Spdy: h2
widget-mediator.zopim.com/s/W/ws/uJPeOctETjfhqA8E/c/1673064094783
35.157.139.85101 Switching Protocols 0 B URL HTTP/1.1 widget-mediator.zopim.com/s/W/ws/uJPeOctETjfhqA8E/c/1673064094783
IP 35.157.139.85:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s/W/ws/uJPeOctETjfhqA8E/c/1673064094783 HTTP/1.1
Host: widget-mediator.zopim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://doggocasino.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Y6o+dHMu4SokBs8QGAfUHw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Sat, 07 Jan 2023 04:01:46 GMT
Connection: upgrade
Set-Cookie: AWSALB=7f1IHmWqKAjBMnEpN57QA+8hl8lego5E3Yc1YdPhCoTnGc+5rjTJdNER3+vZC3jq61IjYr9XFxy6rBPP/g1G0Z+U5eMxzmTix1vq+KPWJJU7DtvWd+H5KlXLB3wH; Expires=Sat, 14 Jan 2023 04:01:46 GMT; Path=/
AWSALBCORS=7f1IHmWqKAjBMnEpN57QA+8hl8lego5E3Yc1YdPhCoTnGc+5rjTJdNER3+vZC3jq61IjYr9XFxy6rBPP/g1G0Z+U5eMxzmTix1vq+KPWJJU7DtvWd+H5KlXLB3wH; Expires=Sat, 14 Jan 2023 04:01:46 GMT; Path=/; SameSite=None; Secure
Upgrade: websocket
Sec-WebSocket-Accept: EIAtNhy4f3Uyt8gFAM8Fy+TUCOU=
Sec-WebSocket-Version: 13
WebSocket-Server: uWebSockets
20841497p.rfihub.com/ca.html?ver=9&rb=46806&ca=20841497&_o=46806&_t=20841497&pe=https%3A%2F%2Fdoggocasino.com%2Fno-no%3FaffiliateName%3D%255Bcellxpert%255D%26affid%3Dcx-35656_390258%26bannerid%3D35656%26trackerid%3D35656_390258%26bta%3D35656%26brand%3Ddoggocasino%26rdk%3Drk3&pf=&ra=7049615472530438
193.0.160.128200 OK 2.7 kB URL HTTP/1.1 20841497p.rfihub.com/ca.html?ver=9&rb=46806&ca=20841497&_o=46806&_t=20841497&pe=https%3A%2F%2Fdoggocasino.com%2Fno-no%3FaffiliateName%3D%255Bcellxpert%255D%26affid%3Dcx-35656_390258%26bannerid%3D35656%26trackerid%3D35656_390258%26bta%3D35656%26brand%3Ddoggocasino%26rdk%3Drk3&pf=&ra=7049615472530438
IP 193.0.160.128:0
File type HTML document text\012- HTML document, ASCII text, with very long lines (2660), with no line terminators
Hash ee68edab732f516b6a599af6b94be4f6
5190a59b612bd526d56a5a22e21d1f2c3291d22f
911a0282e3d556533f76bd4203bd9f70f88ef42784815c3b03611c605af04321
GET /ca.html?ver=9&rb=46806&ca=20841497&_o=46806&_t=20841497&pe=https%3A%2F%2Fdoggocasino.com%2Fno-no%3FaffiliateName%3D%255Bcellxpert%255D%26affid%3Dcx-35656_390258%26bannerid%3D35656%26trackerid%3D35656_390258%26bta%3D35656%26brand%3Ddoggocasino%26rdk%3Drk3&pf=&ra=7049615472530438 HTTP/1.1
Host: 20841497p.rfihub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sat, 07 Jan 2023 04:01:46 GMT
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Set-Cookie: eud=H4sIAAAAAAAA_5vFyGtoZm5sYGZiCMQGprvQ-KfQ-K_Q-L_Q-JOYUPmz0PiL0Pir0Pib0Pi70NWzoPJvofE3saLp50aznxeNL4zKf4TGBwCS0a_JIAEAAA; Path=/; Domain=.rfihub.com; Expires=Thu, 1 Feb 2024 04:01:46 GMT; Secure; SameSite=None
ruds=H4sIAAAAAAAA_-MSNjU0sDSzMDUzMjUzMLY0NTAxNxbiM9QNS89wySl0Dc4rL7IEAEId0vQlAAAA; Path=/; Domain=.rfihub.com; Secure; SameSite=None
rud=H4sIAAAAAAAA_-MSNjU0sDSzMDUzMjUzMLY0NTAxNxbiM9QNS89wySl0Dc4rL7IEAEId0vQlAAAA; Path=/; Domain=.rfihub.com; Expires=Thu, 1 Feb 2024 04:01:46 GMT; Secure; SameSite=None
Cache-Control: no-cache
Content-Type: text/html;charset=utf-8
Content-Length: 2660
Server: Jetty(9.3.29.v20201019)
contextual.media.net/cksync.php?cs=3&type=rkt&ovsid=5144588522781965200
2.18.172.23200 OK 45 B URL HTTP/2 contextual.media.net/cksync.php?cs=3&type=rkt&ovsid=5144588522781965200
IP 2.18.172.23:0
File type GIF image data, version 87a, 1 x 1\012- data
Hash 99cceceaed4d575484b69ddaf9ed66a7
1e3a3b15296b585833a22d987a387aa58aa1642d
832f63f4187160c195b04f1911c2e623a75e805f4b23abb9b0bea214b4283a43
GET /cksync.php?cs=3&type=rkt&ovsid=5144588522781965200 HTTP/1.1
Host: contextual.media.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Apache
content-length: 45
content-type: image/gif
set-cookie: visitor-id=3160657063580200000V10; Expires=Sun, 07 Jan 2024 04:01:46 GMT; domain=.media.net; Path=/;
data-rk=5144588522781965200~~3;Expires=Sat, 06 Jan 2024 04:01:46 GMT;path=/;domain=.media.net;
p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA", CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA, CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-mnet-hl2: E
expires: Sat, 07 Jan 2023 04:01:46 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Sat, 07 Jan 2023 04:01:46 GMT
X-Firefox-Spdy: h2
doggocasino.com/assets/theme/images/bottom-left-ribbon-main.webp
143.204.55.92200 OK 938 B URL HTTP/2 doggocasino.com/assets/theme/images/bottom-left-ribbon-main.webp
IP 143.204.55.92:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 8d68bfd2cfba32a4165feb5fb804d34e
46bb765ee90b8ab2fedecdfb5bf38d6b0cd92c85
b3fd3fe71d455cdfca148d74e4af6bc18cf49083e436740c63ba0e6b3bd1aa2e
GET /assets/theme/images/bottom-left-ribbon-main.webp HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/no-no?affiliateName=%5Bcellxpert%5D&affid=cx-35656_390258&bannerid=35656&trackerid=35656_390258&bta=35656&brand=doggocasino&rdk=rk3
Cookie: _ga_K4EHGY5F0T=GS1.1.1673064093.1.1.1673064094.59.0.0; _ga=GA1.2.207839148.1673064093; __adm_tid=tid-3dbfd246c.2873a269d; affiliateId=cx-35656_390258; bannerId=35656; trackerId=35656_390258; affiliateName=%5Bcellxpert%5D; cookie_policy=accepted; _gid=GA1.2.1751619844.1673064095; _gat_UA-196341002-1=1; _hjSessionUser_3054262=eyJpZCI6IjJhMzcyOTBlLWExMTMtNWMxYy04NzViLWNjODcyNzZlMDM2NyIsImNyZWF0ZWQiOjE2NzMwNjQwOTQ3NDgsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_3054262=eyJpZCI6ImMwODc1YzJlLWY0ZmYtNDU3YS1hYWZhLWI2MDQ5Yjc3Njg2NCIsImNyZWF0ZWQiOjE2NzMwNjQwOTQ5OTUsImluU2FtcGxlIjpmYWxzZX0=; _hjIncludedInPageviewSample=1; _hjAbsoluteSessionInProgress=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 938
x-amz-meta-codebuild-content-sha256: c7543b0c1a387fe8fce7ecedb491413db02c94ccd3c1a1d5b2dc6c33f6e53bfc
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:dba88433-a99e-4dbd-9b3f-92c9f40e4469
x-amz-meta-codebuild-content-md5: f72fdbadddaa46b851fe89ddcab9666b
last-modified: Thu, 05 Jan 2023 08:36:26 GMT
x-amz-version-id: Td4M1nXZUWlAEYAY3jS9y1gcjjtTY_._
server: AmazonS3
date: Fri, 06 Jan 2023 11:14:46 GMT
etag: "8d68bfd2cfba32a4165feb5fb804d34e"
vary: Accept-Encoding
via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
age: 60421
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: sVGbVYa8CohjDs2ATfC_jfyWc8EH6IPJ1jYcMPUskmxEVmmBABw2HQ==
X-Firefox-Spdy: h2
cm.g.doubleclick.net/pixel?&in=0&google_nid=zeta_interactive&google_cm=&google_sc=&google_hm=NTE0NDU4ODUyMjc4MTk2NTIwMA==&forward=
142.250.74.130302 Found 369 B URL HTTP/2 cm.g.doubleclick.net/pixel?&in=0&google_nid=zeta_interactive&google_cm=&google_sc=&google_hm=NTE0NDU4ODUyMjc4MTk2NTIwMA==&forward=
IP 142.250.74.130:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash c39754aceab3a27e9b2a053ee0154754
8128566ffa1198933d1eb3278cca7e4d8dca6266
04609dc7068485ce3a3fe984d8f337d9c23d9e0879d7a458e13b19454ac747a3
GET /pixel?&in=0&google_nid=zeta_interactive&google_cm=&google_sc=&google_hm=NTE0NDU4ODUyMjc4MTk2NTIwMA==&forward= HTTP/1.1
Host: cm.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
location: https://cm.g.doubleclick.net/pixel?in=0&google_nid=zeta_interactive&google_cm=&google_sc=&google_hm=NTE0NDU4ODUyMjc4MTk2NTIwMA==&forward=&google_tc=
date: Sat, 07 Jan 2023 04:01:46 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
server: HTTP server (unknown)
content-length: 369
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Sat, 07-Jan-2023 04:16:46 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash 4f3ee704a5cd7a6e69c7fb5fbd7283a2
be50ef0da7999d632fc3d2218dfe612faa29dddc
8208ba6850f11d559d8616492481eafd0f05c39ebb4eb4379d2932ea27e49d43
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 07 Jan 2023 04:01:46 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 04 Jan 2023 13:42:55 GMT
Expires: Wed, 11 Jan 2023 13:42:54 GMT
Etag: "be50ef0da7999d632fc3d2218dfe612faa29dddc"
Cache-Control: max-age=379867,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7859cb497b8fb505-OSL
status.geotrust.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 2cb6431e2586191c6697918699fd97c3
2f1e69f0e095da8dc8b3d70eea67b037e00432cd
3d5c53daf5f54a27224f98d0efdb96b2662b089ab4a4b5eea1440e59312becf9
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1675
Cache-Control: max-age=127260
Content-Type: application/ocsp-response
Date: Sat, 07 Jan 2023 04:01:46 GMT
Etag: "63b8363b-1d7"
Expires: Sun, 08 Jan 2023 15:22:46 GMT
Last-Modified: Fri, 06 Jan 2023 14:54:51 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471
ib.adnxs.com/setuid?entity=18&code=5144588522781965200
37.252.171.53307 Redirection 0 B URL HTTP/1.1 ib.adnxs.com/setuid?entity=18&code=5144588522781965200
IP 37.252.171.53:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /setuid?entity=18&code=5144588522781965200 HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Sat, 07 Jan 2023 04:01:46 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
Location: https://ib.adnxs.com/bounce?%2Fsetuid%3Fentity%3D18%26code%3D5144588522781965200
AN-X-Request-Uuid: 29be865c-1f69-4d79-a47b-17c77c0ba975
Set-Cookie: uuid2=6475178500473802938; SameSite=None; Path=/; Max-Age=7776000; Expires=Fri, 07-Apr-2023 04:01:46 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 1003.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash 4b05f7de9746bad3fd9cc06663286565
156f95387abbd0a4836ef3d1c63bc0f9f6262c6c
d5abed0da340b1b008eb137e6f31763d2bcb3c5745715ac87f90fe825783f9e1
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 07 Jan 2023 04:01:46 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 07 Jan 2023 01:56:48 GMT
Expires: Sat, 14 Jan 2023 01:56:47 GMT
Etag: "156f95387abbd0a4836ef3d1c63bc0f9f6262c6c"
Cache-Control: max-age=596700,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7859cb49d9c0b524-OSL
ocsp.sca1b.amazontrust.com/
143.204.42.88200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 143.204.42.88:0
Hash 62c3ca8d84760574806633ade1f70dff
03aa22c98f898575e070ecad0991f8f4bb669f05
471d01404a8b7a70d4a0a0a27a4f697fd64a606bd325bcd3127f0cc54970b3d9
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sat, 07 Jan 2023 04:01:46 GMT
Last-Modified: Sat, 07 Jan 2023 02:27:58 GMT
Server: ECS (nyb/1DD2)
X-Cache: Miss from cloudfront
Via: 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: CaFXOAQOYdM6RG9MnQur2UtggVmJ3z87SD_SmO94dGQzhSG-zdmwmQ==
Age: 5628
sync-tm.everesttech.net/upi/pid/Mlpt2JaG/?redir=https%3A%2F%2Fp.rfihub.com%2Fcm%3Fin%3D1%26pub%3D21653%26userid%3D%24%7BTM_USER_ID%7D
151.101.66.49302 Found 0 B URL HTTP/2 sync-tm.everesttech.net/upi/pid/Mlpt2JaG/?redir=https%3A%2F%2Fp.rfihub.com%2Fcm%3Fin%3D1%26pub%3D21653%26userid%3D%24%7BTM_USER_ID%7D
IP 151.101.66.49:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /upi/pid/Mlpt2JaG/?redir=https%3A%2F%2Fp.rfihub.com%2Fcm%3Fin%3D1%26pub%3D21653%26userid%3D%24%7BTM_USER_ID%7D HTTP/1.1
Host: sync-tm.everesttech.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: CP="NOI DSP COR LAW PSAo PSDo IVAo IVDo OUR BUS UNI DEM"
access-control-allow-origin: *
set-cookie: everest_g_v2=g_surferid~Y7juqgAJxrxnOQAo; Path=/; Domain=.everesttech.net; Expires=Sun, 07-Jan-2024 04:01:46 GMT; Max-Age=31536000
location: https://sync-tm.everesttech.net/ct/upi/pid/Mlpt2JaG/?redir=https%3A%2F%2Fp.rfihub.com%2Fcm%3Fin%3D1%26pub%3D21653%26userid%3D%24%7BTM_USER_ID%7D&_test=Y7juqgAJxrxnOQAo
server: Jetty(9.4.35.v20201120)
accept-ranges: bytes
date: Sat, 07 Jan 2023 04:01:46 GMT
via: 1.1 varnish
x-served-by: cache-bma1668-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1673064106.488604,VS0,VE92
cache-control: no-cache
pragma: no-cache
content-length: 0
X-Firefox-Spdy: h2
idsync.rlcdn.com/360947.gif?partner_uid=5144588522781965200
35.244.174.68200 OK 42 B URL HTTP/2 idsync.rlcdn.com/360947.gif?partner_uid=5144588522781965200
IP 35.244.174.68:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /360947.gif?partner_uid=5144588522781965200 HTTP/1.1
Host: idsync.rlcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache, no-store
content-type: image/gif
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
set-cookie: rlas3=BdNHDKJDkgVlu9vVjhyyceWKqAJebPDyng+O6CKM11A=; Path=/; Domain=rlcdn.com; Expires=Sun, 07 Jan 2024 04:01:46 GMT; Secure; SameSite=None
pxrc=CAA=; Path=/; Domain=rlcdn.com; Expires=Wed, 08 Mar 2023 04:01:46 GMT; Secure; SameSite=None
timing-allow-origin: *
date: Sat, 07 Jan 2023 04:01:46 GMT
content-length: 42
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
us-u.openx.net/w/1.0/sd?id=537073062&val=5144588522781965200&r=
35.244.159.8200 OK 43 B URL HTTP/2 us-u.openx.net/w/1.0/sd?id=537073062&val=5144588522781965200&r=
IP 35.244.159.8:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /w/1.0/sd?id=537073062&val=5144588522781965200&r= HTTP/1.1
Host: us-u.openx.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept
server: OXGW/0.0.0
pragma: no-cache
p3p: CP="CUR ADM OUR NOR STA NID"
expires: Mon, 26 Jul 1997 05:00:00 GMT
date: Sat, 07 Jan 2023 04:01:46 GMT
content-type: image/gif
content-length: 43
cache-control: private, max-age=0, no-cache
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 237be78b9d678addb3dade48f0bddfd0
3e2ab54ba86a2f9cc1f5dea934a2a27b5bf9cd92
1037a6fe5242d686f9a908adffdac041e0d2c9d844d2b3f1e39777b9d5a4fc3c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3195
Cache-Control: max-age=118354
Content-Type: application/ocsp-response
Date: Sat, 07 Jan 2023 04:01:46 GMT
Etag: "63b80d81-1d7"
Expires: Sun, 08 Jan 2023 12:54:20 GMT
Last-Modified: Fri, 06 Jan 2023 12:01:05 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
93.184.220.29200 OK 727 B IP 93.184.220.29:0
Hash 12d43978009df85a1feead6932876f09
f1bdbad565ede35240aae24ba1ab84e0d044cca3
4e1288f513d4efbcd63da31bbce735f3711de785d95a067c6e1eb1c553d4ec51
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 386
Cache-Control: max-age=95732
Content-Type: application/ocsp-response
Date: Sat, 07 Jan 2023 04:01:46 GMT
Etag: "63b7c01c-2d7"
Expires: Sun, 08 Jan 2023 06:37:18 GMT
Last-Modified: Fri, 06 Jan 2023 06:30:52 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 727
status.geotrust.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 4d2423c75ce9fae2cadc86462b88db2a
085c4e78fdb747e6e92ffc293c2fff0e57b77e40
d2c99f72c591315259a8222064a591534371b6dacd2c0815c0db1935585e4f3b
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1118
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 07 Jan 2023 04:01:46 GMT
Last-Modified: Sat, 07 Jan 2023 03:43:08 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
x.bidswitch.net/sync?dsp_id=119&user_id=5144588522781965200&expires=30
52.58.228.255302 Found 0 B URL HTTP/2 x.bidswitch.net/sync?dsp_id=119&user_id=5144588522781965200&expires=30
IP 52.58.228.255:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync?dsp_id=119&user_id=5144588522781965200&expires=30 HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sat, 07 Jan 2023 04:01:46 GMT
content-length: 0
location: https://x.bidswitch.net/ul_cb/sync?dsp_id=119&user_id=5144588522781965200&expires=30
cache-control: no-cache, no-store, must-revalidate
set-cookie: tuuid=10f99f63-b6f1-494c-9317-ec4de0a7ecd6; path=/; expires=Sun, 07-Jan-2024 04:01:46 GMT; domain=.bidswitch.net; samesite=none; secure
c=1673064106; path=/; expires=Sun, 07-Jan-2024 04:01:46 GMT; domain=.bidswitch.net; samesite=none; secure
tuuid_lu=1673064106; path=/; expires=Sun, 07-Jan-2024 04:01:46 GMT; domain=.bidswitch.net; samesite=none; secure
c=1673064106; path=/; expires=Sun, 07-Jan-2024 04:01:46 GMT; domain=.bidswitch.net; samesite=none; secure
X-Firefox-Spdy: h2
2d1c8d36-b9ba-45b7-87c9-e34c592a597a.seals-emr.certria.com/sealassets/3a7c07d6ab4f68ac08759ff650c054ee-doggocasino.com-8cdd4d66f8d65689b62819334a267b9a257fee4eb2750b2e47cdaf63d0becac6311bea6226c3373c1ea5283761ef2821-c2VhbC5wbmc%3D?status=valid
54.230.111.70200 OK 53 kB URL HTTP/2 2d1c8d36-b9ba-45b7-87c9-e34c592a597a.seals-emr.certria.com/sealassets/3a7c07d6ab4f68ac08759ff650c054ee-doggocasino.com-8cdd4d66f8d65689b62819334a267b9a257fee4eb2750b2e47cdaf63d0becac6311bea6226c3373c1ea5283761ef2821-c2VhbC5wbmc%3D?status=valid
IP 54.230.111.70:0
File type PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced\012- data
Hash fceb44c117d8c9766bdd23befc239931
8a57ed8068117e00c0257cb97340274253236989
428b3487df7ab6c93f3f6345481dfc178a0c6e4c7589ccd6a3a11b12db077f28
GET /sealassets/3a7c07d6ab4f68ac08759ff650c054ee-doggocasino.com-8cdd4d66f8d65689b62819334a267b9a257fee4eb2750b2e47cdaf63d0becac6311bea6226c3373c1ea5283761ef2821-c2VhbC5wbmc%3D?status=valid HTTP/1.1
Host: 2d1c8d36-b9ba-45b7-87c9-e34c592a597a.seals-emr.certria.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 52815
x-powered-by: Express
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7859bebb8cf1914d-FRA
date: Sat, 07 Jan 2023 03:59:04 GMT
cache-control: max-age=1200
etag: W/"ce4f-ilftgGgRfgDAJXy5c0AnQlMjaYk"
x-cache: Hit from cloudfront
via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: NhfVvJWgxn02IVxIroiLZSHb21WVwBpy9wYT7CADGKUA69QxYvTOtQ==
age: 178
X-Firefox-Spdy: h2
2d1c8d36-b9ba-45b7-87c9-e34c592a597a.seals-emr.certria.com/54f396e0-b046-49b1-9cb3-0c69281d7ea9-beacon.png
54.230.111.70200 OK 68 B URL HTTP/2 2d1c8d36-b9ba-45b7-87c9-e34c592a597a.seals-emr.certria.com/54f396e0-b046-49b1-9cb3-0c69281d7ea9-beacon.png
IP 54.230.111.70:0
File type PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced\012- data
Hash e679fbd466a2d656f194a5da4fa083cd
2aa795c7607aa6ea41313be88f1b7a9c1ab516b3
f309b7c03d9cae63a9bedbee6ed655f3dbcdb194132943639344dead5f3b9710
GET /54f396e0-b046-49b1-9cb3-0c69281d7ea9-beacon.png HTTP/1.1
Host: 2d1c8d36-b9ba-45b7-87c9-e34c592a597a.seals-emr.certria.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 68
date: Thu, 15 Dec 2022 07:46:34 GMT
last-modified: Tue, 15 Dec 2020 08:04:53 GMT
etag: "e679fbd466a2d656f194a5da4fa083cd"
cache-control: no-cache, no-store, must-revalidate
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: mln1sCG7z0eFeRR_9-59lxsMwNaNYvJy1VPacT_ASJnvdkwxVNv7Pw==
age: 1973713
X-Firefox-Spdy: h2
ocsp.godaddy.com/
192.124.249.22200 OK 1.8 kB IP 192.124.249.22:0
Hash 3d50aec89aaccbf663804980beca60b1
4d9adac7abf5f26dc53f5ce5c032f971212174d6
18c74dd33558af858f0b187a2b7f845cba370aae4201ff5dbf1812d334a6f878
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sat, 07 Jan 2023 04:01:46 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19022
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Fri, 06 Jan 2023 17:20:50 GMT
Expires: Sat, 07 Jan 2023 17:20:50 GMT
ETag: "4d9adac7abf5f26dc53f5ce5c032f971212174d6"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
beacon.krxd.net/usermatch.gif?partner_id=rfuel&partner_user_id=5144588522781965200
52.208.157.7204 No Content 0 B URL HTTP/2 beacon.krxd.net/usermatch.gif?partner_id=rfuel&partner_user_id=5144588522781965200
IP 52.208.157.7:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /usermatch.gif?partner_id=rfuel&partner_user_id=5144588522781965200 HTTP/1.1
Host: beacon.krxd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Sat, 07 Jan 2023 04:01:46 GMT
set-cookie: _kuid_=PTb-st8W; Expires=Thu, 06-Jul-23 04:01:46 GMT; Max-Age=15552000; Domain=.krxd.net; Path=/
cache-control: private, no-cache, no-store
p3p: policyref="https://cdn.krxd.net/kruxcontent/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC"
x-served-by: beacon-n002-dub-prod.krxd.net
x-request-time: D=33 t=1673064106
X-Firefox-Spdy: h2
51d4256e-9ede-4425-8b77-d7e5166c1c25.snippet.antillephone.com/sealassets/3a7c07d6ab4f68ac08759ff650c054ee-doggocasino.com-2f90385e7147995d0ad0e1568dcb8420125a9230e800b76e4574b197458fcd3ec3fae37cdc434512e60b35647fd94003-c2VhbC5wbmc%3D?status=valid
143.204.55.52200 OK 46 kB URL HTTP/2 51d4256e-9ede-4425-8b77-d7e5166c1c25.snippet.antillephone.com/sealassets/3a7c07d6ab4f68ac08759ff650c054ee-doggocasino.com-2f90385e7147995d0ad0e1568dcb8420125a9230e800b76e4574b197458fcd3ec3fae37cdc434512e60b35647fd94003-c2VhbC5wbmc%3D?status=valid
IP 143.204.55.52:0
File type PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced\012- data
Hash 375b5b5bcd1d5179f5b789e4c28ca6df
f52bfd097b13f83fa43714f59786efa4082f55a1
f7acaa7ace617964cd79de3287bfa740f1d3fbcbed82ea1d09cd94058d4b1281
GET /sealassets/3a7c07d6ab4f68ac08759ff650c054ee-doggocasino.com-2f90385e7147995d0ad0e1568dcb8420125a9230e800b76e4574b197458fcd3ec3fae37cdc434512e60b35647fd94003-c2VhbC5wbmc%3D?status=valid HTTP/1.1
Host: 51d4256e-9ede-4425-8b77-d7e5166c1c25.snippet.antillephone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 46382
x-powered-by: Express
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7859bebb9c472bf0-FRA
date: Sat, 07 Jan 2023 03:59:04 GMT
cache-control: max-age=1200
etag: W/"b52e-9Sv9CXsT+D+kNxT1l4bvpAgvVaE"
x-cache: Hit from cloudfront
via: 1.1 2afd697fc5d0058ea30d6c4b939e714c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: ovnBEB4jwbhbdN_zPvyOcV638ET2EpwYXamt2tmLegvK1q8uUu0_ZA==
age: 178
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 424fc0c903154e6644707e4dcf3021af
0acbbbaac597713d637119e9e9f120fe120d9265
7bdfee9089e940dfc1df1bb4b9cb76b2e4122d9dc1f523c1aecfd9f2deb18bf1
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4064
Cache-Control: max-age=97975
Content-Type: application/ocsp-response
Date: Sat, 07 Jan 2023 04:01:46 GMT
Etag: "63b7ba81-1d7"
Expires: Sun, 08 Jan 2023 07:14:41 GMT
Last-Modified: Fri, 06 Jan 2023 06:06:57 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471
sync-tm.everesttech.net/ct/upi/pid/Mlpt2JaG/?redir=https%3A%2F%2Fp.rfihub.com%2Fcm%3Fin%3D1%26pub%3D21653%26userid%3D%24%7BTM_USER_ID%7D&_test=Y7juqgAJxrxnOQAo
151.101.66.49200 OK 85 B URL HTTP/2 sync-tm.everesttech.net/ct/upi/pid/Mlpt2JaG/?redir=https%3A%2F%2Fp.rfihub.com%2Fcm%3Fin%3D1%26pub%3D21653%26userid%3D%24%7BTM_USER_ID%7D&_test=Y7juqgAJxrxnOQAo
IP 151.101.66.49:0
File type PNG image data, 1 x 1, 1-bit colormap, non-interlaced\012- data
Hash 5bec6606b8392065f9da9898ca6f7b14
73ac5b01b5e3293fb792179626e7f8369cdb944d
acccc501aa6afa3cfac15e8ddccf1561deed2ed08c2f7d652abbdbe9aa71609a
GET /ct/upi/pid/Mlpt2JaG/?redir=https%3A%2F%2Fp.rfihub.com%2Fcm%3Fin%3D1%26pub%3D21653%26userid%3D%24%7BTM_USER_ID%7D&_test=Y7juqgAJxrxnOQAo HTTP/1.1
Host: sync-tm.everesttech.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20841497p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
server: Jetty(9.4.35.v20201120)
accept-ranges: bytes
date: Sat, 07 Jan 2023 04:01:46 GMT
via: 1.1 varnish
age: 288
x-served-by: cache-bma1668-BMA
x-cache: HIT
x-cache-hits: 126
x-timer: S1673064107.657841,VS0,VE0
cache-control: no-cache
pragma: no-cache
content-length: 85
X-Firefox-Spdy: h2
status.geotrust.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 2cb6431e2586191c6697918699fd97c3
2f1e69f0e095da8dc8b3d70eea67b037e00432cd
3d5c53daf5f54a27224f98d0efdb96b2662b089ab4a4b5eea1440e59312becf9
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1675
Cache-Control: max-age=127260
Content-Type: application/ocsp-response
Date: Sat, 07 Jan 2023 04:01:46 GMT
Etag: "63b8363b-1d7"
Expires: Sun, 08 Jan 2023 15:22:46 GMT
Last-Modified: Fri, 06 Jan 2023 14:54:51 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471
ocsp.godaddy.com/
192.124.249.22200 OK 1.8 kB IP 192.124.249.22:0
Hash 4349b8623f114739ea93e902248d5cb0
a3a1c4320347050caac235fa011363cd87ac74df
29511911f077c7888525f7f7286bc1537e9037ff86d4d2ca86b07180315a9947
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sat, 07 Jan 2023 04:01:46 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19022
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Fri, 06 Jan 2023 21:23:35 GMT
Expires: Sat, 07 Jan 2023 21:23:35 GMT
ETag: "a3a1c4320347050caac235fa011363cd87ac74df"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
sync.search.spotxchange.com/partner?adv_id=7180&uid=5144588522781965200&img=1
185.94.180.125302 Found 0 B URL HTTP/1.1 sync.search.spotxchange.com/partner?adv_id=7180&uid=5144588522781965200&img=1
IP 185.94.180.125:0
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partner?adv_id=7180&uid=5144588522781965200&img=1 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Sat, 07 Jan 2023 04:01:46 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=0125b204-8e40-11ed-a746-130dfa940406; expires=Sat, 04-Feb-2023 04:01:46 GMT; path=/; domain=.spotxchange.com; SameSite=none
Location: /partner?adv_id=7180&uid=5144588522781965200&img=1&__user_check__=1&sync_id=0125b247-8e40-11ed-a746-130dfa940406
X-fe: 40
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
p.rfihub.com/cm?pub=24472&in=1
193.0.160.128302 Found 0 B URL HTTP/1.1 p.rfihub.com/cm?pub=24472&in=1
IP 193.0.160.128:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cm?pub=24472&in=1 HTTP/1.1
Host: p.rfihub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 302 Found
Date: Sat, 07 Jan 2023 04:01:46 GMT
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Set-Cookie: rud=H4sIAAAAAAAA_-MSNjU0sDA1tTQ3MjU3NzM2NDM2MBLiM9R19i-OSswtTXFMzTAFADQzsVglAAAA; Path=/; Domain=.rfihub.com; Expires=Thu, 1 Feb 2024 04:01:46 GMT; Secure; SameSite=None
ruds=H4sIAAAAAAAA_-MSNjU0sDA1tTQ3MjU3NzM2NDM2MBLiM9R19i-OSswtTXFMzTAFADQzsVglAAAA; Path=/; Domain=.rfihub.com; Secure; SameSite=None
eud=H4sIAAAAAAAA_7vFwmtoZm5sYGZiaGBmZmYKANUd9WcQAAAA; Path=/; Domain=.rfihub.com; Expires=Thu, 1 Feb 2024 04:01:46 GMT; Secure; SameSite=None
Location: https://ps.eyeota.net/match?uid=5108559725776316302&bid=omt9pi0
Content-Length: 0
Server: Jetty(9.3.29.v20201019)
ib.adnxs.com/bounce?%2Fsetuid%3Fentity%3D18%26code%3D5144588522781965200
37.252.171.53200 OK 43 B URL HTTP/1.1 ib.adnxs.com/bounce?%2Fsetuid%3Fentity%3D18%26code%3D5144588522781965200
IP 37.252.171.53:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 592ebefc7104d681d57852665e9ad514
15cdf8df32aa251dd6dd590a60bf9cf74474e7c5
4b5b6b15c6255109e06720cce42a06d3aead8b7874423d9c52cb0303212c25ef
GET /bounce?%2Fsetuid%3Fentity%3D18%26code%3D5144588522781965200 HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20841497p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sat, 07 Jan 2023 04:01:46 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
AN-X-Request-Uuid: 5d0b9c3b-01b1-41e6-8eb9-8f637b919b4d
Set-Cookie: anj=dTM7k!M4/YErk#WF']wIg2E>5kGD__!]tbPl1MNu::wpAk`W=ie:5_DjF$didY0eXjF$IoD.J+VJ7mkY!_6-zQEVk`!)o_zw?_ky; SameSite=None; Path=/; Max-Age=7776000; Expires=Fri, 07-Apr-2023 04:01:46 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 1003.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
dsum-sec.casalemedia.com/rum?cm_dsp_id=57&external_user_id=5144588522781965200&forward=
185.80.36.245302 Found 0 B URL HTTP/1.1 dsum-sec.casalemedia.com/rum?cm_dsp_id=57&external_user_id=5144588522781965200&forward=
IP 185.80.36.245:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rum?cm_dsp_id=57&external_user_id=5144588522781965200&forward= HTTP/1.1
Host: dsum-sec.casalemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Date: Sat, 07 Jan 2023 04:01:46 GMT
Server: Apache
Cache-Control: no-cache
Expires: 0
Location: /rum?cm_dsp_id=57&external_user_id=5144588522781965200&forward=&C=1
P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI"
Pragma: no-cache
Content-Length: 0
Set-Cookie: CMID=Y7juqncttBu3R3SL5Ng3AQAA; Path=/; Domain=casalemedia.com; Expires=Sun, 07 Jan 2024 04:01:46 GMT; Max-Age=31536000; Secure; SameSite=None
CMPS=4520; Path=/; Domain=casalemedia.com; Expires=Fri, 07 Apr 2023 04:01:46 GMT; Max-Age=7776000; Secure; SameSite=None
CMPRO=4520; Path=/; Domain=casalemedia.com; Expires=Fri, 07 Apr 2023 04:01:46 GMT; Max-Age=7776000; Secure; SameSite=None
Keep-Alive: timeout=1, max=500
Connection: Keep-Alive
aa.agkn.com/adscores/g.pixel?sid=9212192898&rf=5144588522781965200
54.74.181.165200 OK 43 B URL HTTP/2 aa.agkn.com/adscores/g.pixel?sid=9212192898&rf=5144588522781965200
IP 54.74.181.165:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash db04c7b378cb2db912c3ba8a5a774ee3
dee34bd86c3484d31002182aa2b7caa4699126b8
98b3d9d20e032f90aca49e9b116225d539ff6fbdb7e42c3c363f63896ac03d2a
GET /adscores/g.pixel?sid=9212192898&rf=5144588522781965200 HTTP/1.1
Host: aa.agkn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 07 Jan 2023 04:01:46 GMT
content-type: image/gif
content-length: 43
server: AAWebServer
p3p: policyref="https://www.agkn.com/p3p/p3p.xml",CP="NOI NID"
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: accept, cache-control, origin, x-requested-with, x-file-name, content-type
X-Firefox-Spdy: h2
dpm.demdex.net/ibs:dpid=1121&dpuuid=5144588522781965200&redir=
52.30.252.118302 Found 0 B URL HTTP/1.1 dpm.demdex.net/ibs:dpid=1121&dpuuid=5144588522781965200&redir=
IP 52.30.252.118:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ibs:dpid=1121&dpuuid=5144588522781965200&redir= HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
DCS: dcs-prod-irl1-2-v045-027dff91d.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
Location: https://dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=1121&dpuuid=5144588522781965200&redir=
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
set-cookie: demdex=82546166503365202972914115594945889560; Max-Age=15552000; Expires=Thu, 06 Jul 2023 04:01:46 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-TID: /OVR+kuhQNI=
Content-Length: 0
Connection: keep-alive
e1.emxdgt.com/put?d=d16&uid=5144588522781965200
3.71.169.66204 No Content 0 B URL HTTP/2 e1.emxdgt.com/put?d=d16&uid=5144588522781965200
IP 3.71.169.66:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /put?d=d16&uid=5144588522781965200 HTTP/1.1
Host: e1.emxdgt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
content-type: text/html
date: Sat, 07 Jan 2023 04:01:46 GMT
content-length: 0
X-Firefox-Spdy: h2
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash 4f3ee704a5cd7a6e69c7fb5fbd7283a2
be50ef0da7999d632fc3d2218dfe612faa29dddc
8208ba6850f11d559d8616492481eafd0f05c39ebb4eb4379d2932ea27e49d43
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 07 Jan 2023 04:01:46 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 04 Jan 2023 13:42:55 GMT
Expires: Wed, 11 Jan 2023 13:42:54 GMT
Etag: "be50ef0da7999d632fc3d2218dfe612faa29dddc"
Cache-Control: max-age=379867,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7859cb4aabedb505-OSL
p.rfihub.com/cm?pub=39342&in=0&userid=021137e2-c925-4c54-88ed-40561f47e037%3A1673064106.309457&forward=https%3A//idsync.rlcdn.com/501709.gif%3Fpartner_uid%3D021137e2-c925-4c54-88ed-40561f47e037%253A1673064106.309457
193.0.160.128302 Found 0 B URL HTTP/1.1 p.rfihub.com/cm?pub=39342&in=0&userid=021137e2-c925-4c54-88ed-40561f47e037%3A1673064106.309457&forward=https%3A//idsync.rlcdn.com/501709.gif%3Fpartner_uid%3D021137e2-c925-4c54-88ed-40561f47e037%253A1673064106.309457
IP 193.0.160.128:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cm?pub=39342&in=0&userid=021137e2-c925-4c54-88ed-40561f47e037%3A1673064106.309457&forward=https%3A//idsync.rlcdn.com/501709.gif%3Fpartner_uid%3D021137e2-c925-4c54-88ed-40561f47e037%253A1673064106.309457 HTTP/1.1
Host: p.rfihub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20841497p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Date: Sat, 07 Jan 2023 04:01:46 GMT
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Set-Cookie: rud=H4sIAAAAAAAA_-MSNjU0Mja0NDMxMjEzNDA3NTIxNhDiM9SNSkmy9C0tyK7wczECAGezlHclAAAA; Path=/; Domain=.rfihub.com; Expires=Thu, 1 Feb 2024 04:01:46 GMT; Secure; SameSite=None
eud=H4sIAAAAAAAA_0XIuRGAMAwEwAqIXIeY02_Rji0KIqRaQjbcZwSEWbOFVomTLTeaszcZPPi2bGheHKkIY8SpKPN8x_FfVH0hQEYZSQAAAA; Path=/; Domain=.rfihub.com; Expires=Thu, 1 Feb 2024 04:01:46 GMT; Secure; SameSite=None
euds=H4sIAAAAAAAA_wXBwRHAIAgEwE_aIXPAAWo7SgpJ5e7-T8JUvdpkTwvhDsoYfYSI1I_V8Fqa5Ugq8nVMRl1Yl3K7OQAAAA; Path=/; Domain=.rfihub.com; Secure; SameSite=None
ruds=H4sIAAAAAAAA_-MSNjU0Mja0NDMxMjEzNDA3NTIxNhDiM9SNSkmy9C0tyK7wczECAGezlHclAAAA; Path=/; Domain=.rfihub.com; Secure; SameSite=None
Location: https://idsync.rlcdn.com/501709.gif?partner_uid=021137e2-c925-4c54-88ed-40561f47e037%3A1673064106.309457
Content-Length: 0
Server: Jetty(9.3.29.v20201019)
live.rezync.com/pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5109685625603950473&referrer=https%3A%2F%2Fdoggocasino.com%2Fno-no%3FaffiliateName%3D%255Bcellxpert%255D%26affid%3Dcx-35656_390258%26bannerid%3D35656%26trackerid%3D35656_390258%26bta%3D35656%26brand%3Ddoggocasino%26rdk%3Drk3
143.204.55.19302 Found 657 B URL HTTP/2 live.rezync.com/pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5109685625603950473&referrer=https%3A%2F%2Fdoggocasino.com%2Fno-no%3FaffiliateName%3D%255Bcellxpert%255D%26affid%3Dcx-35656_390258%26bannerid%3D35656%26trackerid%3D35656_390258%26bta%3D35656%26brand%3Ddoggocasino%26rdk%3Drk3
IP 143.204.55.19:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (571)
Hash 9333950d4bb08e6ddf532ebee3a9516e
badc7deb15fa905397bcaeb7f19a8db897368e53
1aeebcf05109eea5f1507eeb2807ba848abe603fd6b9669dcb0b18668b18d908
GET /pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5109685625603950473&referrer=https%3A%2F%2Fdoggocasino.com%2Fno-no%3FaffiliateName%3D%255Bcellxpert%255D%26affid%3Dcx-35656_390258%26bannerid%3D35656%26trackerid%3D35656_390258%26bta%3D35656%26brand%3Ddoggocasino%26rdk%3Drk3 HTTP/1.1
Host: live.rezync.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Cookie: zync-uuid=021137e2-c925-4c54-88ed-40561f47e037:1673064106.309457; sd-session-id=.eJwNytsKwjAMANB_yfMqSZr09jNDughFV2WdL479u3s8cA6YP7at9259h7JvX5ugvtqlAeWA0X6rPaGAkoimpMwxUQ7KiHBOMGyM9u5zW66DTOSjsauZ1UlVcSnZ4gQ10EOioY-FQvQYhDDcPGbRCOcfZgYkdA.Y7juqg.N-X0GW0fpCIuq9M5hxvi6-eIdkA
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
content-type: text/html; charset=utf-8
content-length: 657
location: https://p.rfihub.com/cm?pub=39342&in=0&userid=021137e2-c925-4c54-88ed-40561f47e037%3A1673064106.309457&forward=https%3A//idsync.rlcdn.com/501709.gif%3Fpartner_uid%3D021137e2-c925-4c54-88ed-40561f47e037%253A1673064106.309457
date: Sat, 07 Jan 2023 04:01:46 GMT
set-cookie: zync-uuid=021137e2-c925-4c54-88ed-40561f47e037:1673064106.309457; Domain=rezync.com; Expires=Wed, 05 Jul 2023 20:01:46 GMT; Path=/; SameSite=None; Secure
sd-session-id=.eJwNytsKwjAMANB_yfMqSZukl58Z0kUouirrfHHs393jgXPA_LFtvXfrO5R9-9oE9dUuDSgHjPZb7QkFhDBrEvWiGLIgxwDnBMPGaO8-t-U66IlCNO9q9uK4CruUbHGMovTgaBhiIY0BlQn1FjCzRDj_Znkkdg.Y7juqg.aB6cq_uRz_T3ZLOGPVvE7bmb1Ek; Expires=Thu, 06 Jul 2023 04:01:46 GMT; HttpOnly; Path=/; SameSite=None; Secure
vary: Cookie
server: lighttpd/1.4.59
x-cache: Miss from cloudfront
via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: zKfD6vtcwV8QAadFcRqnK5lCp_KX8S8bkp5tquAlwm4TV_9MfJ580A==
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
143.204.42.88200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 143.204.42.88:0
Hash cbe82d78d2b0504973379e6247266ebe
cd3b891496311d7c22ee8ab5107d3462ad96168a
1fd35b7a23add722fed18e1ea2b699eab3adeb13197f11a4b0a1d9724ebfa427
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=128119
Date: Sat, 07 Jan 2023 04:01:46 GMT
Etag: "63b83d58-1d7"
Expires: Sun, 08 Jan 2023 15:37:05 GMT
Last-Modified: Fri, 06 Jan 2023 15:25:12 GMT
Server: ECS (nyb/1DD2)
X-Cache: Miss from cloudfront
Via: 1.1 83a23d85c009b0c0e3626072e9f997fe.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: dqnyWiV2Vk1SQUJnM1UsAieq87WPS8bdyIVP5De04vkNQ0-jF6npTA==
Age: 713
bpi.rtactivate.com/tag/?id=11017&user_id=5144588522781965200
54.198.16.210200 OK 43 B URL HTTP/2 bpi.rtactivate.com/tag/?id=11017&user_id=5144588522781965200
IP 54.198.16.210:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /tag/?id=11017&user_id=5144588522781965200 HTTP/1.1
Host: bpi.rtactivate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: awselb/2.0
date: Sat, 07 Jan 2023 04:01:46 GMT
content-type: image/gif
content-length: 43
X-Firefox-Spdy: h2
bpi.rtactivate.com/tag/?id=11017&user_id=5109685625603950473
54.198.16.210200 OK 43 B URL HTTP/2 bpi.rtactivate.com/tag/?id=11017&user_id=5109685625603950473
IP 54.198.16.210:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /tag/?id=11017&user_id=5109685625603950473 HTTP/1.1
Host: bpi.rtactivate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: awselb/2.0
date: Sat, 07 Jan 2023 04:01:46 GMT
content-type: image/gif
content-length: 43
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
143.204.42.88200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 143.204.42.88:0
Hash ecde53c241780694b2c881e67f903af6
c824da5e0c754fbb23d57341e388ea7f9d1f124c
b18c7ed6f0b6c8bf8d7e4bdb71170aabd23e4b8c2b98b3aab5bf4d8e0575c1fa
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=135268
Date: Sat, 07 Jan 2023 04:01:46 GMT
Etag: "63b856ab-1d7"
Expires: Sun, 08 Jan 2023 17:36:14 GMT
Last-Modified: Fri, 06 Jan 2023 17:13:15 GMT
Server: ECS (nyb/1D1E)
X-Cache: Miss from cloudfront
Via: 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: JvIK-4gmNMpAOwHkNbxtb8HS-wx5x-Ex8PuazoLwoqN8JuZg4LFMaQ==
Age: 1379
x.dlx.addthis.com/e/rocketfuel_sync?na_exid=5144588522781965200
184.24.45.23200 OK 43 B URL HTTP/2 x.dlx.addthis.com/e/rocketfuel_sync?na_exid=5144588522781965200
IP 184.24.45.23:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /e/rocketfuel_sync?na_exid=5144588522781965200 HTTP/1.1
Host: x.dlx.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
content-length: 43
expires: Sat, 07 Jan 2023 04:01:46 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Sat, 07 Jan 2023 04:01:46 GMT
strict-transport-security: max-age=2628000
X-Firefox-Spdy: h2
dsum-sec.casalemedia.com/rum?cm_dsp_id=57&external_user_id=5109685625603950473&forward=
185.80.36.245302 Found 0 B URL HTTP/1.1 dsum-sec.casalemedia.com/rum?cm_dsp_id=57&external_user_id=5109685625603950473&forward=
IP 185.80.36.245:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rum?cm_dsp_id=57&external_user_id=5109685625603950473&forward= HTTP/1.1
Host: dsum-sec.casalemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Date: Sat, 07 Jan 2023 04:01:46 GMT
Server: Apache
Cache-Control: no-cache
Expires: 0
Location: /rum?cm_dsp_id=57&external_user_id=5109685625603950473&forward=&C=1
P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI"
Pragma: no-cache
Content-Length: 0
Set-Cookie: CMID=Y7juqncttBu3R3SL5Ng3AgAA; Path=/; Domain=casalemedia.com; Expires=Sun, 07 Jan 2024 04:01:46 GMT; Max-Age=31536000; Secure; SameSite=None
CMPS=4520; Path=/; Domain=casalemedia.com; Expires=Fri, 07 Apr 2023 04:01:46 GMT; Max-Age=7776000; Secure; SameSite=None
CMPRO=4520; Path=/; Domain=casalemedia.com; Expires=Fri, 07 Apr 2023 04:01:46 GMT; Max-Age=7776000; Secure; SameSite=None
Keep-Alive: timeout=1, max=499
Connection: Keep-Alive
contextual.media.net/cksync.php?cs=3&type=rkt&ovsid=5109685625603950473
2.18.172.23200 OK 45 B URL HTTP/2 contextual.media.net/cksync.php?cs=3&type=rkt&ovsid=5109685625603950473
IP 2.18.172.23:0
File type GIF image data, version 87a, 1 x 1\012- data
Hash 99cceceaed4d575484b69ddaf9ed66a7
1e3a3b15296b585833a22d987a387aa58aa1642d
832f63f4187160c195b04f1911c2e623a75e805f4b23abb9b0bea214b4283a43
GET /cksync.php?cs=3&type=rkt&ovsid=5109685625603950473 HTTP/1.1
Host: contextual.media.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: Apache
content-length: 45
content-type: image/gif
set-cookie: visitor-id=3160657063580220000V10; Expires=Sun, 07 Jan 2024 04:01:46 GMT; domain=.media.net; Path=/;
data-rk=5109685625603950473~~3;Expires=Sat, 06 Jan 2024 04:01:46 GMT;path=/;domain=.media.net;
p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA", CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA, CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-mnet-hl2: E
expires: Sat, 07 Jan 2023 04:01:46 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Sat, 07 Jan 2023 04:01:46 GMT
X-Firefox-Spdy: h2
ib.adnxs.com/setuid?entity=18&code=5109685625603950473
37.252.171.53307 Redirection 0 B URL HTTP/1.1 ib.adnxs.com/setuid?entity=18&code=5109685625603950473
IP 37.252.171.53:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /setuid?entity=18&code=5109685625603950473 HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Sat, 07 Jan 2023 04:01:46 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
Location: https://ib.adnxs.com/bounce?%2Fsetuid%3Fentity%3D18%26code%3D5109685625603950473
AN-X-Request-Uuid: 5eaf2df2-1508-4a2b-b83b-00d78e4c0aaa
Set-Cookie: uuid2=1861722787262510614; SameSite=None; Path=/; Max-Age=7776000; Expires=Fri, 07-Apr-2023 04:01:46 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 1003.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
e1.emxdgt.com/put?d=d16&uid=5109685625603950473
3.71.169.66204 No Content 0 B URL HTTP/2 e1.emxdgt.com/put?d=d16&uid=5109685625603950473
IP 3.71.169.66:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /put?d=d16&uid=5109685625603950473 HTTP/1.1
Host: e1.emxdgt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
content-type: text/html
date: Sat, 07 Jan 2023 04:01:46 GMT
content-length: 0
X-Firefox-Spdy: h2
x.bidswitch.net/sync?dsp_id=119&user_id=5109685625603950473&expires=30
52.58.228.255200 OK 43 B URL HTTP/2 x.bidswitch.net/sync?dsp_id=119&user_id=5109685625603950473&expires=30
IP 52.58.228.255:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /sync?dsp_id=119&user_id=5109685625603950473&expires=30 HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 07 Jan 2023 04:01:46 GMT
content-type: image/gif
content-length: 43
cache-control: no-cache, no-store, must-revalidate
X-Firefox-Spdy: h2
sync.search.spotxchange.com/partner?adv_id=7180&uid=5109685625603950473&img=1
185.94.180.125302 Found 0 B URL HTTP/1.1 sync.search.spotxchange.com/partner?adv_id=7180&uid=5109685625603950473&img=1
IP 185.94.180.125:0
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partner?adv_id=7180&uid=5109685625603950473&img=1 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Sat, 07 Jan 2023 04:01:46 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=01479a94-8e40-11ed-b4f8-1891fad20206; expires=Sat, 04-Feb-2023 04:01:46 GMT; path=/; domain=.spotxchange.com; SameSite=none
Location: /partner?adv_id=7180&uid=5109685625603950473&img=1&__user_check__=1&sync_id=01479ac8-8e40-11ed-b4f8-1891fad20206
X-fe: 83
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
beacon.krxd.net/usermatch.gif?partner_id=rfuel&partner_user_id=5109685625603950473
52.208.157.7204 No Content 0 B URL HTTP/2 beacon.krxd.net/usermatch.gif?partner_id=rfuel&partner_user_id=5109685625603950473
IP 52.208.157.7:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /usermatch.gif?partner_id=rfuel&partner_user_id=5109685625603950473 HTTP/1.1
Host: beacon.krxd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sat, 07 Jan 2023 04:01:46 GMT
set-cookie: _kuid_=PTb-s0Fl; Expires=Thu, 06-Jul-23 04:01:46 GMT; Max-Age=15552000; Domain=.krxd.net; Path=/
cache-control: private, no-cache, no-store
p3p: policyref="https://cdn.krxd.net/kruxcontent/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC"
x-served-by: beacon-n011-dub-prod.krxd.net
x-request-time: D=33 t=1673064106
X-Firefox-Spdy: h2
aa.agkn.com/adscores/g.pixel?sid=9212192898&rf=5109685625603950473
54.74.181.165200 OK 43 B URL HTTP/2 aa.agkn.com/adscores/g.pixel?sid=9212192898&rf=5109685625603950473
IP 54.74.181.165:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash db04c7b378cb2db912c3ba8a5a774ee3
dee34bd86c3484d31002182aa2b7caa4699126b8
98b3d9d20e032f90aca49e9b116225d539ff6fbdb7e42c3c363f63896ac03d2a
GET /adscores/g.pixel?sid=9212192898&rf=5109685625603950473 HTTP/1.1
Host: aa.agkn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 07 Jan 2023 04:01:46 GMT
content-type: image/gif
content-length: 43
server: AAWebServer
p3p: policyref="https://www.agkn.com/p3p/p3p.xml",CP="NOI NID"
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: accept, cache-control, origin, x-requested-with, x-file-name, content-type
X-Firefox-Spdy: h2
dpm.demdex.net/ibs:dpid=1121&dpuuid=5109685625603950473&redir=
52.30.252.118302 Found 0 B URL HTTP/1.1 dpm.demdex.net/ibs:dpid=1121&dpuuid=5109685625603950473&redir=
IP 52.30.252.118:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ibs:dpid=1121&dpuuid=5109685625603950473&redir= HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
DCS: dcs-prod-irl1-2-v045-000256d3c.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
Location: https://dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=1121&dpuuid=5109685625603950473&redir=
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
set-cookie: demdex=27192218786418057841316482866646930420; Max-Age=15552000; Expires=Thu, 06 Jul 2023 04:01:46 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-TID: D4z/+804RAM=
Content-Length: 0
Connection: keep-alive
x.dlx.addthis.com/e/rocketfuel_sync?na_exid=5109685625603950473
184.24.45.23200 OK 43 B URL HTTP/2 x.dlx.addthis.com/e/rocketfuel_sync?na_exid=5109685625603950473
IP 184.24.45.23:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /e/rocketfuel_sync?na_exid=5109685625603950473 HTTP/1.1
Host: x.dlx.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/gif
content-length: 43
expires: Sat, 07 Jan 2023 04:01:47 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Sat, 07 Jan 2023 04:01:47 GMT
strict-transport-security: max-age=2628000
X-Firefox-Spdy: h2
51d4256e-9ede-4425-8b77-d7e5166c1c25.snippet.antillephone.com/54f396e0-b046-49b1-9cb3-0c69281d7ea9-beacon.png
143.204.55.52200 OK 68 B URL HTTP/2 51d4256e-9ede-4425-8b77-d7e5166c1c25.snippet.antillephone.com/54f396e0-b046-49b1-9cb3-0c69281d7ea9-beacon.png
IP 143.204.55.52:0
File type PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced\012- data
Hash e679fbd466a2d656f194a5da4fa083cd
2aa795c7607aa6ea41313be88f1b7a9c1ab516b3
f309b7c03d9cae63a9bedbee6ed655f3dbcdb194132943639344dead5f3b9710
GET /54f396e0-b046-49b1-9cb3-0c69281d7ea9-beacon.png HTTP/1.1
Host: 51d4256e-9ede-4425-8b77-d7e5166c1c25.snippet.antillephone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 68
date: Sun, 11 Dec 2022 09:03:02 GMT
last-modified: Tue, 15 Dec 2020 08:04:53 GMT
etag: "e679fbd466a2d656f194a5da4fa083cd"
cache-control: no-cache, no-store, must-revalidate
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 2afd697fc5d0058ea30d6c4b939e714c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Ein-gMv6c7d496Ui3LsBrV3XCKUJFZa3ENPUB-5Qf6kYOYL6_e5kug==
age: 2314726
X-Firefox-Spdy: h2
static.zdassets.com/web_widget/latest/classic/web-widget-chat-incoming-message-notification-81a3de7.js
104.18.72.113200 OK 6.3 kB URL HTTP/2 static.zdassets.com/web_widget/latest/classic/web-widget-chat-incoming-message-notification-81a3de7.js
IP 104.18.72.113:0
File type ASCII text, with no line terminators
Hash 8cea5e8a254c5636c2e05f50b2f6c73b
23b1908768228a9fd82e3056a381931e20feefc0
e9ddd71c4cce73d2cf095a4eeb78e05a10e5707eb15ae59fca2f7f943edb02fb
GET /web_widget/latest/classic/web-widget-chat-incoming-message-notification-81a3de7.js HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 07 Jan 2023 04:01:47 GMT
content-type: application/javascript; charset=utf-8
x-amz-id-2: SkcJzZn5RRlglaHLOhk1vV1v30pm0szNvelv2eyVm7RGrf9j3oUJTTfL0PSdr3Oz2xeVhjpMFg8=
x-amz-request-id: FXYJV7HX34MNB73Y
x-amz-replication-status: COMPLETED
last-modified: Wed, 14 Dec 2022 15:44:37 GMT
etag: W/"659635f5ad1b6653645380f46aa42236"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Thu, 14 Dec 2023 15:44:36 GMT
x-amz-version-id: yTfJjWtrph2znqvc1oRNTQcv23jcfwLc
cf-cache-status: HIT
age: 1904200
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1YAabO2uvn27vmBvev%2FHP8GC2%2BK%2FwJsm6Hni1bf3uk%2B5nQvP7eikPZDXc%2FcKGwKXP68FaEiOLN9UCDNs4L8C1rYbQbIVhl542XnzEh5Ixl6eLrqnVhTLqQUYBpjE4sW28%2BnhCFw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 7859cb4fbbf3b512-OSL
content-encoding: br
X-Firefox-Spdy: h2
static.zdassets.com/web_widget/latest/classic/fda6cd35495c75f83508d9d2e77ee33d.mp3
104.18.72.113206 Partial Content 20 kB URL HTTP/2 static.zdassets.com/web_widget/latest/classic/fda6cd35495c75f83508d9d2e77ee33d.mp3
IP 104.18.72.113:0
File type Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, JntStereo\012- data
Hash f11ce9e8f40a392830217253fe75d6de
89ba57fcc360da34756c127acba15a8b23267fc6
05069cc62b394b6ecc2daf3c51b4b2ba7f6cc8735988e8234487234af47eceee
GET /web_widget/latest/classic/fda6cd35495c75f83508d9d2e77ee33d.mp3 HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 206 Partial Content
date: Sat, 07 Jan 2023 04:01:47 GMT
content-type: audio/mpeg; charset=utf-8
content-length: 19698
x-amz-id-2: g87hI3qvp6u/eYrvF5ekvnlnd/ZKIURFxO017tHaVZdhHodAb1MX6TjMAHxlaiIHpETLXLY/I+c=
x-amz-request-id: X429XSBWRFS5FTSC
x-amz-replication-status: COMPLETED
last-modified: Wed, 09 Mar 2022 06:43:05 GMT
etag: "f11ce9e8f40a392830217253fe75d6de"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Thu, 09 Mar 2023 06:43:04 GMT
x-amz-version-id: ngeCnQamEcRo6kgSgz9pTF5J7hCEPwJW
cf-cache-status: HIT
age: 31676
content-range: bytes 0-19697/19698
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=i5YI2aT0sEFdupr4qO45ggETU6%2FsmkxMM6ORuFacqW4rmVo%2FPVar6iu%2FL48Z9YblQq6Gx%2BLMzEOlPc6JeiyYsUnkhoUfHjzxNmf39%2Bp9w%2FoyDGuTxfR02gq9NYkiW4%2F6eg5gx%2F8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 7859cb505c35b512-OSL
X-Firefox-Spdy: h2
sync.search.spotxchange.com/partner?adv_id=7180&uid=5144588522781965200&img=1&__user_check__=1&sync_id=0125b247-8e40-11ed-a746-130dfa940406
185.94.180.125200 OK 43 B URL HTTP/1.1 sync.search.spotxchange.com/partner?adv_id=7180&uid=5144588522781965200&img=1&__user_check__=1&sync_id=0125b247-8e40-11ed-a746-130dfa940406
IP 185.94.180.125:0
ASN #35220 SpotXchange, INC
File type GIF image data, version 89a, 1 x 1\012- data
Hash 55fade2068e7503eae8d7ddf5eb6bd09
317496a096d6c86486a71d4521994bcd171a6bb3
e586a84d8523747f42e510d78e141015b6424cf67d612854e892a7bcedc8ec9e
GET /partner?adv_id=7180&uid=5144588522781965200&img=1&__user_check__=1&sync_id=0125b247-8e40-11ed-a746-130dfa940406 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20841497p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 07 Jan 2023 04:01:47 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Set-Cookie: audience=01b3c3ca-8e40-11ed-ba81-1e1d47870406; expires=Sat, 04-Feb-2023 04:01:47 GMT; path=/; domain=.spotxchange.com
x-spotx-halt-type: Audience DSP sync endpoint was unable to cookie the audience.
X-fe: 104
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
dsum-sec.casalemedia.com/rum?cm_dsp_id=57&external_user_id=5144588522781965200&forward=&C=1
185.80.36.245200 OK 43 B URL HTTP/1.1 dsum-sec.casalemedia.com/rum?cm_dsp_id=57&external_user_id=5144588522781965200&forward=&C=1
IP 185.80.36.245:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /rum?cm_dsp_id=57&external_user_id=5144588522781965200&forward=&C=1 HTTP/1.1
Host: dsum-sec.casalemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20841497p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sat, 07 Jan 2023 04:01:47 GMT
Server: Apache
Cache-Control: no-cache
Content-Type: image/gif
Expires: 0
Pragma: no-cache
Content-Length: 43
Keep-Alive: timeout=1, max=498
Connection: Keep-Alive
p.rfihub.com/cm?pub=39342&in=0&userid=021137e2-c925-4c54-88ed-40561f47e037%3A1673064106.309457&forward=https%3A//idsync.rlcdn.com/501709.gif%3Fpartner_uid%3D021137e2-c925-4c54-88ed-40561f47e037%253A1673064106.309457
193.0.160.128302 Found 0 B URL HTTP/1.1 p.rfihub.com/cm?pub=39342&in=0&userid=021137e2-c925-4c54-88ed-40561f47e037%3A1673064106.309457&forward=https%3A//idsync.rlcdn.com/501709.gif%3Fpartner_uid%3D021137e2-c925-4c54-88ed-40561f47e037%253A1673064106.309457
IP 193.0.160.128:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cm?pub=39342&in=0&userid=021137e2-c925-4c54-88ed-40561f47e037%3A1673064106.309457&forward=https%3A//idsync.rlcdn.com/501709.gif%3Fpartner_uid%3D021137e2-c925-4c54-88ed-40561f47e037%253A1673064106.309457 HTTP/1.1
Host: p.rfihub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20841497p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Date: Sat, 07 Jan 2023 04:01:47 GMT
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Set-Cookie: rud=H4sIAAAAAAAA_-MSNjU0MTI2NjM3MjQyMjY0NzA2MxbiM9SNCDUyM8l2zCozcncGAKmLfHIlAAAA; Path=/; Domain=.rfihub.com; Expires=Thu, 1 Feb 2024 04:01:47 GMT; Secure; SameSite=None
euds=H4sIAAAAAAAA_wXBwRHAIAgEwE_aIXPAAWo7SgpJ5e7-T8JUvdpkTwvhDsoYfYSI1I_V8Fqa5Ugq8nVMRl1Yl3K7OQAAAA; Path=/; Domain=.rfihub.com; Secure; SameSite=None
ruds=H4sIAAAAAAAA_-MSNjU0MTI2NjM3MjQyMjY0NzA2MxbiM9SNCDUyM8l2zCozcncGAKmLfHIlAAAA; Path=/; Domain=.rfihub.com; Secure; SameSite=None
eud=H4sIAAAAAAAA_z3IuRGAMAwEwAqIXIeY02_Rji0KIqRaMjbcZwSEWbOFVomTLTeaszcZPPi2bGheHKkIY8SpKPN8x_FfhtQHj_4OQkkAAAA; Path=/; Domain=.rfihub.com; Expires=Thu, 1 Feb 2024 04:01:47 GMT; Secure; SameSite=None
Location: https://idsync.rlcdn.com/501709.gif?partner_uid=021137e2-c925-4c54-88ed-40561f47e037%3A1673064106.309457
Content-Length: 0
Server: Jetty(9.3.29.v20201019)
partners.tremorhub.com/sync?UIRF=5109685625603950473&r=3kC-gexOgjIl
75.101.171.255200 OK 102 B URL HTTP/2 partners.tremorhub.com/sync?UIRF=5109685625603950473&r=3kC-gexOgjIl
IP 75.101.171.255:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 4c18de98426bcf60ad58d860c431ff92
4095e68ac1ea98812bfb5760eef61ba3b2ea602d
001607aa8a7be8eb48505835fd15b7f3eaaa86612061e5eac5beedecd89f6571
GET /sync?UIRF=5109685625603950473&r=3kC-gexOgjIl HTTP/1.1
Host: partners.tremorhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 07 Jan 2023 04:01:46 GMT
content-type: image/gif
server: Apache-Coyote/1.1
p3p: CP='This is not a P3P policy. See https://telaria.com/privacy-policy/'
X-Firefox-Spdy: h2
ib.adnxs.com/bounce?%2Fsetuid%3Fentity%3D18%26code%3D5109685625603950473
37.252.171.53200 OK 43 B URL HTTP/1.1 ib.adnxs.com/bounce?%2Fsetuid%3Fentity%3D18%26code%3D5109685625603950473
IP 37.252.171.53:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 592ebefc7104d681d57852665e9ad514
15cdf8df32aa251dd6dd590a60bf9cf74474e7c5
4b5b6b15c6255109e06720cce42a06d3aead8b7874423d9c52cb0303212c25ef
GET /bounce?%2Fsetuid%3Fentity%3D18%26code%3D5109685625603950473 HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20841497p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sat, 07 Jan 2023 04:01:47 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
AN-X-Request-Uuid: c01019f2-0a30-468f-af5a-51f03b68d8c3
Set-Cookie: anj=dTM7k!M4/YErk#WF']wIg2E>>kGD__!]tbPl1MNu::wpAk`W=eiekW]gkN?]cyD+gcw8$4D1nCwJ7mkY!_6-zQEVk`!)wY[#=<I'; SameSite=None; Path=/; Max-Age=7776000; Expires=Fri, 07-Apr-2023 04:01:47 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 1003.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
sync.search.spotxchange.com/partner?adv_id=7180&uid=5109685625603950473&img=1&__user_check__=1&sync_id=01479ac8-8e40-11ed-b4f8-1891fad20206
185.94.180.125200 OK 43 B URL HTTP/1.1 sync.search.spotxchange.com/partner?adv_id=7180&uid=5109685625603950473&img=1&__user_check__=1&sync_id=01479ac8-8e40-11ed-b4f8-1891fad20206
IP 185.94.180.125:0
ASN #35220 SpotXchange, INC
File type GIF image data, version 89a, 1 x 1\012- data
Hash 55fade2068e7503eae8d7ddf5eb6bd09
317496a096d6c86486a71d4521994bcd171a6bb3
e586a84d8523747f42e510d78e141015b6424cf67d612854e892a7bcedc8ec9e
GET /partner?adv_id=7180&uid=5109685625603950473&img=1&__user_check__=1&sync_id=01479ac8-8e40-11ed-b4f8-1891fad20206 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20841497p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 07 Jan 2023 04:01:47 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Set-Cookie: audience=01ba8789-8e40-11ed-8c70-1f0541440406; expires=Sat, 04-Feb-2023 04:01:47 GMT; path=/; domain=.spotxchange.com
x-spotx-halt-type: Audience DSP sync endpoint was unable to cookie the audience.
X-fe: 121
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
dsum-sec.casalemedia.com/rum?cm_dsp_id=57&external_user_id=5109685625603950473&forward=&C=1
185.80.36.245200 OK 43 B URL HTTP/1.1 dsum-sec.casalemedia.com/rum?cm_dsp_id=57&external_user_id=5109685625603950473&forward=&C=1
IP 185.80.36.245:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /rum?cm_dsp_id=57&external_user_id=5109685625603950473&forward=&C=1 HTTP/1.1
Host: dsum-sec.casalemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20841497p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sat, 07 Jan 2023 04:01:47 GMT
Server: Apache
Cache-Control: no-cache
Content-Type: image/gif
Expires: 0
Pragma: no-cache
Content-Length: 43
Keep-Alive: timeout=1, max=497
Connection: Keep-Alive
dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=1121&dpuuid=5109685625603950473&redir=
52.30.252.118200 OK 59 B URL HTTP/1.1 dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=1121&dpuuid=5109685625603950473&redir=
IP 52.30.252.118:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 1251cd5e5c2def4c046309375f87c1c1
e02d6b0c6a5c495c15985e2832e335eda8528c80
4e7010cc46fa361c88e57e3346d27421cf3b8a8bf5f39b43fc45997c60cb1c13
GET /demconf.jpg?et:ibs%7cdata:dpid=1121&dpuuid=5109685625603950473&redir= HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20841497p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
Content-Type: image/gif
DCS: dcs-prod-irl1-2-v045-000256d3c.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
X-TID: RoSSVzVlTog=
Content-Length: 59
Connection: keep-alive
a.rfihub.com/cm?pub=445&in=0&forward=&google_error=3
193.0.160.128200 OK 42 B URL HTTP/1.1 a.rfihub.com/cm?pub=445&in=0&forward=&google_error=3
IP 193.0.160.128:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash accba0b69f352b4c9440f05891b015c5
9d01cc5dc8e042c0d4ad6cfb8b3ac38e84a5ef9f
47043e4823a6c21a8881de789b4185355330b5804629d23f6b43dd93f5265292
GET /cm?pub=445&in=0&forward=&google_error=3 HTTP/1.1
Host: a.rfihub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20841497p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sat, 07 Jan 2023 04:01:47 GMT
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Set-Cookie: euds=H4sIAAAAAAAA_-NicjUGAEAxo38EAAAA; Path=/; Domain=.rfihub.com; Secure; SameSite=None
eud=H4sIAAAAAAAA_-NicjUO4jU0Mzc2MDMxNDA3N7QAACXfRRwTAAAA; Path=/; Domain=.rfihub.com; Expires=Thu, 1 Feb 2024 04:01:47 GMT; Secure; SameSite=None
ruds=H4sIAAAAAAAA_-MSNjU0sDSzMDUzMjUzMLY0NTAzMBDiM9RNLg3z8fLJNk4O9ckFAFUeeTMlAAAA; Path=/; Domain=.rfihub.com; Secure; SameSite=None
rud=H4sIAAAAAAAA_-MSNjU0sDSzMDUzMjUzMLY0NTAzMBDiM9RNLg3z8fLJNk4O9ckFAFUeeTMlAAAA; Path=/; Domain=.rfihub.com; Expires=Thu, 1 Feb 2024 04:01:47 GMT; Secure; SameSite=None
Cache-Control: no-cache
Content-Type: image/gif
Content-Length: 42
Server: Jetty(9.3.29.v20201019)
ocsp.usertrust.com/
172.64.155.188200 OK 472 B IP 172.64.155.188:0
Hash 7c5061c25389fdcf9c1ca26f895c9be2
2b1f21def351680e1e1656a01a31e6f898d3d4e4
af457868866235ec5c6502b26cf323420d64ed1bfe499fe139b6f36b9481fd52
POST / HTTP/1.1
Host: ocsp.usertrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 07 Jan 2023 04:01:47 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Wed, 04 Jan 2023 09:01:02 GMT
Expires: Wed, 11 Jan 2023 09:01:01 GMT
Etag: "2b1f21def351680e1e1656a01a31e6f898d3d4e4"
Cache-Control: max-age=603179,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 143
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7859cb516d1fb529-OSL
a.rfihub.com/cm?pub=445&in=0&forward=&google_error=3
193.0.160.128200 OK 42 B URL HTTP/1.1 a.rfihub.com/cm?pub=445&in=0&forward=&google_error=3
IP 193.0.160.128:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash accba0b69f352b4c9440f05891b015c5
9d01cc5dc8e042c0d4ad6cfb8b3ac38e84a5ef9f
47043e4823a6c21a8881de789b4185355330b5804629d23f6b43dd93f5265292
GET /cm?pub=445&in=0&forward=&google_error=3 HTTP/1.1
Host: a.rfihub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20841497p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sat, 07 Jan 2023 04:01:47 GMT
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Set-Cookie: rud=H4sIAAAAAAAA_-MSNjU0MDcxNrYwMrWwNDc1MzOwNBTiM9Q1DYrULanIDnbMiAoFAISU8wwlAAAA; Path=/; Domain=.rfihub.com; Expires=Thu, 1 Feb 2024 04:01:47 GMT; Secure; SameSite=None
ruds=H4sIAAAAAAAA_-MSNjU0MDcxNrYwMrWwNDc1MzOwNBTiM9Q1DYrULanIDnbMiAoFAISU8wwlAAAA; Path=/; Domain=.rfihub.com; Secure; SameSite=None
euds=H4sIAAAAAAAA_-NicjUGAEAxo38EAAAA; Path=/; Domain=.rfihub.com; Secure; SameSite=None
eud=H4sIAAAAAAAA_-NicjUO4jU0Mzc2MDMxNDA3N7UAACEaKXgTAAAA; Path=/; Domain=.rfihub.com; Expires=Thu, 1 Feb 2024 04:01:47 GMT; Secure; SameSite=None
Cache-Control: no-cache
Content-Type: image/gif
Content-Length: 42
Server: Jetty(9.3.29.v20201019)
ib.adnxs.com/getuid?https%3A%2F%2Fidsync.rlcdn.com%2F52154.gif%3Fserved_by%3Devergreen%26partner_uid%3D%24UID
37.252.171.53307 Redirection 0 B URL HTTP/1.1 ib.adnxs.com/getuid?https%3A%2F%2Fidsync.rlcdn.com%2F52154.gif%3Fserved_by%3Devergreen%26partner_uid%3D%24UID
IP 37.252.171.53:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /getuid?https%3A%2F%2Fidsync.rlcdn.com%2F52154.gif%3Fserved_by%3Devergreen%26partner_uid%3D%24UID HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20841497p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Sat, 07 Jan 2023 04:01:47 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
Location: https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Fidsync.rlcdn.com%252F52154.gif%253Fserved_by%253Devergreen%2526partner_uid%253D%2524UID
AN-X-Request-Uuid: e02cd20d-a8bb-441a-b71e-25f6e87ba857
Set-Cookie: uuid2=3685955297624325196; SameSite=None; Path=/; Max-Age=7776000; Expires=Fri, 07-Apr-2023 04:01:47 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 1003.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
ps.eyeota.net/match?uid=5108559725776316302&bid=omt9pi0
3.121.27.153200 OK 0 B URL HTTP/1.1 ps.eyeota.net/match?uid=5108559725776316302&bid=omt9pi0
IP 3.121.27.153:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match?uid=5108559725776316302&bid=omt9pi0 HTTP/1.1
Host: ps.eyeota.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20841497p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Set-Cookie: SERVERID=18449~DM; Domain=eyeota.net; Path=/; Expires=Sat, 07 Jan 2023 04:11:47 GMT; Secure; SameSite=None;
P3P: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR SAMo BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR", policyref="http://ps.eyeota.net/w3c/p3p.xml"
Content-Length: 0
Date: Sat, 07 Jan 2023 04:01:47 GMT
ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Fidsync.rlcdn.com%252F52154.gif%253Fserved_by%253Devergreen%2526partner_uid%253D%2524UID
37.252.171.53302 Found 0 B URL HTTP/1.1 ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Fidsync.rlcdn.com%252F52154.gif%253Fserved_by%253Devergreen%2526partner_uid%253D%2524UID
IP 37.252.171.53:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bounce?%2Fgetuid%3Fhttps%253A%252F%252Fidsync.rlcdn.com%252F52154.gif%253Fserved_by%253Devergreen%2526partner_uid%253D%2524UID HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20841497p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.21.3
Date: Sat, 07 Jan 2023 04:01:47 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
Location: https://idsync.rlcdn.com/52154.gif?served_by=evergreen&partner_uid=0
AN-X-Request-Uuid: db1c6c36-cec8-432b-a935-c010fca7acbd
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 1003.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
widget-mediator.zopim.com/s/W/ws/IWbkUnfLqHarE-QY/c/1673064096376
3.124.137.178101 Switching Protocols 0 B URL HTTP/1.1 widget-mediator.zopim.com/s/W/ws/IWbkUnfLqHarE-QY/c/1673064096376
IP 3.124.137.178:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s/W/ws/IWbkUnfLqHarE-QY/c/1673064096376 HTTP/1.1
Host: widget-mediator.zopim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://doggocasino.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: BEM+NaarjZlfLmMwlZrJpQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Sat, 07 Jan 2023 04:01:47 GMT
Connection: upgrade
Set-Cookie: AWSALB=PHXxVidv4DvlvF0GYcLqzY+7Rorda/e/+ryEl1qpZseKXqD8Hpph9168fwNrZjmq84yo3qcwsJ9jZDZXy1GcfA+BhLaqhFRuxc5bzmngRpnvyBapoPoq4jQDewIH; Expires=Sat, 14 Jan 2023 04:01:47 GMT; Path=/
AWSALBCORS=PHXxVidv4DvlvF0GYcLqzY+7Rorda/e/+ryEl1qpZseKXqD8Hpph9168fwNrZjmq84yo3qcwsJ9jZDZXy1GcfA+BhLaqhFRuxc5bzmngRpnvyBapoPoq4jQDewIH; Expires=Sat, 14 Jan 2023 04:01:47 GMT; Path=/; SameSite=None; Secure
Upgrade: websocket
Sec-WebSocket-Accept: pHccdf25V8s3yC3S10/5ZeTAiCw=
Sec-WebSocket-Version: 13
WebSocket-Server: uWebSockets
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00386939-61dd-4d7a-a930-6df89a8e0c57.jpeg
34.120.237.76200 OK 6.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00386939-61dd-4d7a-a930-6df89a8e0c57.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 51f29fa68742d72a5ad8ad54a973424d
4941e01c8718adfe7ce13d551e80549236e561df
83b4e946e058ae662e559703f64896ce4c5de969045cf8e3e00806297eab0007
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00386939-61dd-4d7a-a930-6df89a8e0c57.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 6895
x-amzn-requestid: 9f97f493-9846-4eb3-ad6e-f66ba96ad818
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eGCT7FfIoAMFg5A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b24a7f-3e871fb3073afc164927e98a;Sampled=0
x-amzn-remapped-date: Mon, 02 Jan 2023 03:07:43 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: m9Jwqqrb9ithrnRne7cC5MAeD_V3JhQM5jB2AYLBxkTA4hNjZUTbKQ==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Fri, 06 Jan 2023 10:25:33 GMT
age: 63378
etag: "4941e01c8718adfe7ce13d551e80549236e561df"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
doggocasino.com/main.6bcbfcb64f889e6fe6ec.js
143.204.55.92200 OK 0 B URL HTTP/2 doggocasino.com/main.6bcbfcb64f889e6fe6ec.js
IP 143.204.55.92:0
GET /main.6bcbfcb64f889e6fe6ec.js HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/en-us?affiliateName=[cellxpert]&affid=cx-35656_390258&bannerid=35656&trackerid=35656_390258&bta=35656&brand=doggocasino&rdk=rk3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
x-amz-meta-codebuild-content-sha256: c7543b0c1a387fe8fce7ecedb491413db02c94ccd3c1a1d5b2dc6c33f6e53bfc
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:dba88433-a99e-4dbd-9b3f-92c9f40e4469
x-amz-meta-codebuild-content-md5: f72fdbadddaa46b851fe89ddcab9666b
last-modified: Thu, 05 Jan 2023 08:36:23 GMT
x-amz-version-id: TEH9NwvSWV8BvtW_BHAvyxLMZAIN7VQM
server: AmazonS3
content-encoding: gzip
date: Fri, 06 Jan 2023 11:37:16 GMT
etag: W/"a9c8e910b45873a0a647bbb23c95673a"
vary: Accept-Encoding
via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
age: 59068
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: uOeBLfXv7wwk7qM7e4hpsKaqabZahg6L0jtILWjOuwtn8zsTH2bo0w==
X-Firefox-Spdy: h2
scripts.prdredir.com/safeframe
172.64.101.29200 OK 0 B URL HTTP/2 scripts.prdredir.com/safeframe
IP 172.64.101.29:0
GET /safeframe HTTP/1.1
Host: scripts.prdredir.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 07 Jan 2023 04:01:44 GMT
content-type: text/html; charset=utf-8
status: 200 OK
cache-control: no-cache
referrer-policy: strict-origin-when-cross-origin
x-permitted-cross-domain-policies: none
x-xss-protection: 1; mode=block
x-request-id: 74bdde95-1de6-49b1-bd5a-a4839049d300
x-download-options: noopen
x-runtime: 0.002704
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ngaz3ZQVPrPWD67cXCd6y9gZ%2F2Kb7UdhXVeAo6DOfPqgcx99BeJZ1QmQWPWQp0Y4ZMLCUopF10Lt9QFLkDRSjtHl%2FcpFkr%2FcVEQ7veVZkNh0qz2kXgiX9hxGMSuOpbgbk5Z9hkqGJg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7859cb3d78458e2a-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.zdassets.com/web_widget/latest/classic/web-widget-8165-81a3de7.js
104.18.72.113200 OK 0 B URL HTTP/2 static.zdassets.com/web_widget/latest/classic/web-widget-8165-81a3de7.js
IP 104.18.72.113:0
GET /web_widget/latest/classic/web-widget-8165-81a3de7.js HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 07 Jan 2023 04:01:45 GMT
content-type: application/javascript; charset=utf-8
x-amz-id-2: lzBkPtbnz0MGLlWYKiF43Rbof1dxLmCsNcfcXrLzOnOEtJYFONekq3s/EdUhjTmo6TQFKed2bBM=
x-amz-request-id: F6C4AQZ3YDWB1VQS
x-amz-replication-status: COMPLETED
last-modified: Wed, 14 Dec 2022 15:44:37 GMT
etag: W/"d519ea27f763cb6ec80aeec5b45213a7"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Thu, 14 Dec 2023 15:44:36 GMT
x-amz-version-id: kU1YYFzxaCl55Jp2ZazHPuUZRF69EWpK
cf-cache-status: HIT
age: 1904199
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RdtBOZaRosabqRBFk5A89d7j4pFd1mtljg9amZFiTZK7JOsXxaSC4mdH2h7lRJEV93lhT7XG7GlkBFzMyQ%2Ft2kiOaVkA1qt47cyIQ2bDQNR9Zs2TE9BYXb%2FCENtuharIBH2VyLs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 7859cb43cee1b512-OSL
content-encoding: br
X-Firefox-Spdy: h2
in.hotjar.com/api/v2/client/sites/3054262/visit-data?sv=6
54.76.190.65200 OK 0 B URL HTTP/2 in.hotjar.com/api/v2/client/sites/3054262/visit-data?sv=6
IP 54.76.190.65:0
POST /api/v2/client/sites/3054262/visit-data?sv=6 HTTP/1.1
Host: in.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain; charset=UTF-8
Content-Length: 132
Origin: https://doggocasino.com
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 07 Jan 2023 04:01:46 GMT
content-type: application/json
vary: Accept-Encoding
cache-control: no-cache, no-store
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 86400
content-encoding: br
X-Firefox-Spdy: h2
static.zdassets.com/ekr/snippet.js?key=65b012e7-7474-42fb-a2e0-939200b21662
104.18.72.113200 OK 0 B URL HTTP/2 static.zdassets.com/ekr/snippet.js?key=65b012e7-7474-42fb-a2e0-939200b21662
IP 104.18.72.113:0
GET /ekr/snippet.js?key=65b012e7-7474-42fb-a2e0-939200b21662 HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 07 Jan 2023 04:01:44 GMT
content-type: application/javascript
x-amz-id-2: 2vczt6VEQAujZh2Sn1saK7Q0yPHQMRKRQuuC+kOwLnJ40itjD1HXfy2Id85tVz8wD4O1ArN10VQ=
x-amz-request-id: 4MARQ9YY8PDZ70A8
x-amz-replication-status: PENDING
last-modified: Thu, 28 Jul 2022 23:44:02 GMT
etag: W/"5cae6ce528dce0c327b2bcbaad459fdb"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=3600, s-maxage=60
x-amz-version-id: TCAqq4sghBBBAAXd3MLZ8Fy8XIds..vO
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=huuY71N4RqdiAvntwmWzvEx6gqSrorPIaAaKCcFc2UnmmCjziPSvR%2B8V3eBU1%2Bvil%2Bny89Bf%2FMb%2FqRoqzn5nWYCiNuVVP4bMt1tKn3T92jCnDw8mA0OtOZogOXDD5g4HG9fBmqk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 7859cb39cb14b512-OSL
content-encoding: br
X-Firefox-Spdy: h2
onetouch16.info/pop-go/43335
188.114.96.1302 Found 0 B URL HTTP/2 onetouch16.info/pop-go/43335
IP 188.114.96.1:0
GET /pop-go/43335 HTTP/1.1
Host: onetouch16.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.t3helnternet.website/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sat, 07 Jan 2023 04:01:42 GMT
content-type: text/html; charset=UTF-8
location: https://wait4min.com/dvzMy91L?sub_id_1=pops
referrer-policy: no-referrer
set-cookie: pop-u-uni-ddb82f=96fda78722ddfdf2e4216e06b33701e8a%3A2%3A%7Bi%3A0%3Bs%3A16%3A%22pop-u-uni-ddb82f%22%3Bi%3A1%3Bs%3A2%3A%22no%22%3B%7D; expires=Sun, 08-Jan-2023 04:01:42 GMT; Max-Age=86400; path=/; HttpOnly
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AWwSRdE8Hkci4ww%2FkyhqDNLLhdDkuoXuK5WjKTLaXEZHl36xG0nGQ7gx9urJ6EALcl0o2xYZK%2BOWuySr%2B51OVJb%2Fk8r%2FI1EhfKN2Z9pDcmhMRzQhU4W0svWvA7Yd15ryAqQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7859cb315c8a0b3d-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
doggocasino.com/en-us?affiliateName=[cellxpert]&affid=cx-35656_390258&bannerid=35656&trackerid=35656_390258&bta=35656&brand=doggocasino&rdk=rk3
143.204.55.92200 OK 0 B URL HTTP/2 doggocasino.com/en-us?affiliateName=[cellxpert]&affid=cx-35656_390258&bannerid=35656&trackerid=35656_390258&bta=35656&brand=doggocasino&rdk=rk3
IP 143.204.55.92:0
GET /en-us?affiliateName=[cellxpert]&affid=cx-35656_390258&bannerid=35656&trackerid=35656_390258&bta=35656&brand=doggocasino&rdk=rk3 HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html
date: Thu, 05 Jan 2023 08:37:52 GMT
x-amz-meta-codebuild-content-sha256: c7543b0c1a387fe8fce7ecedb491413db02c94ccd3c1a1d5b2dc6c33f6e53bfc
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:dba88433-a99e-4dbd-9b3f-92c9f40e4469
x-amz-meta-codebuild-content-md5: f72fdbadddaa46b851fe89ddcab9666b
last-modified: Thu, 05 Jan 2023 08:36:27 GMT
x-amz-version-id: ofX4ChQvOtnJ9xvsFb1m0J88RfoPiR9E
etag: W/"d7a05d2f22b6a4d72bff9b8d0bdce04b"
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Error from cloudfront
via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 9tcK3P_hdlmRDR7zDQbCZQgYiL7MLSejo7x1318Ulo7rEDJ0XaZ87Q==
age: 156232
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Roboto:wght@400;700
142.250.74.106200 OK 0 B URL HTTP/2 fonts.googleapis.com/css2?family=Roboto:wght@400;700
IP 142.250.74.106:0
GET /css2?family=Roboto:wght@400;700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 07 Jan 2023 04:01:44 GMT
date: Sat, 07 Jan 2023 04:01:44 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
doggocasino.com/styles.1f7587ee8c68e382c584.css
143.204.55.92200 OK 0 B URL HTTP/2 doggocasino.com/styles.1f7587ee8c68e382c584.css
IP 143.204.55.92:0
GET /styles.1f7587ee8c68e382c584.css HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/en-us?affiliateName=[cellxpert]&affid=cx-35656_390258&bannerid=35656&trackerid=35656_390258&bta=35656&brand=doggocasino&rdk=rk3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
x-amz-meta-codebuild-content-sha256: c7543b0c1a387fe8fce7ecedb491413db02c94ccd3c1a1d5b2dc6c33f6e53bfc
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:dba88433-a99e-4dbd-9b3f-92c9f40e4469
x-amz-meta-codebuild-content-md5: f72fdbadddaa46b851fe89ddcab9666b
last-modified: Thu, 05 Jan 2023 08:36:20 GMT
x-amz-version-id: Xjj9Je2exoNVxEa4P.X.sNTUdHXzkixQ
server: AmazonS3
content-encoding: gzip
date: Fri, 06 Jan 2023 12:34:36 GMT
etag: W/"93f255b705d4a25e054f90eee3c18775"
vary: Accept-Encoding
via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
age: 55628
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: jJEz21JPaNGCjDm-j6dXjIZJg2JKrKittlrJsY34vmf4LZc_D5fEpA==
X-Firefox-Spdy: h2
doggocasino.zendesk.com/embeddable/config
104.16.53.111200 OK 0 B URL HTTP/2 doggocasino.zendesk.com/embeddable/config
IP 104.16.53.111:0
GET /embeddable/config HTTP/1.1
Host: doggocasino.zendesk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://doggocasino.com/
Origin: https://doggocasino.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 07 Jan 2023 04:01:44 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-expose-headers:
access-control-max-age: 7200
cache-control: public, max-age=60, stale-while-revalidate=600, stale-if-error=3600
x-zendesk-origin-server: embeddable-app-server-74956859c8-tpms8
x-request-id: 7859ca78bc8fb4ff-DUB
x-runtime: 0.002290
vary: Origin, Accept-Encoding
x-cached: MISS
last-modified: Sat, 07 Jan 2023 03:59:59 GMT
cf-cache-status: HIT
age: 31
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=39%2F9%2FOTYHdUo6AyIl9mI2SkndcytMP1JdnsXk53toSR%2FCN9Vc9CCuPr6vLYa5NB1UMjDqJZjyA4Xh3g8FRZtPyBJ1%2F1HZ%2BPgkmdA3YGwwf3mq5qb2nZ2ildUQE5H3%2FmHBfDlI%2Fov6StF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
set-cookie: __cfruid=1aad778228f7265a760579f18a7957125d6f30bd-1673064104; path=/; domain=.doggocasino.zendesk.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 7859cb3f1a520b51-OSL
content-encoding: br
X-Firefox-Spdy: h2
2d1c8d36-b9ba-45b7-87c9-e34c592a597a.seals-emr.certria.com/emr-seal.js
54.230.111.70200 OK 0 B URL HTTP/2 2d1c8d36-b9ba-45b7-87c9-e34c592a597a.seals-emr.certria.com/emr-seal.js
IP 54.230.111.70:0
GET /emr-seal.js HTTP/1.1
Host: 2d1c8d36-b9ba-45b7-87c9-e34c592a597a.seals-emr.certria.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
date: Sat, 07 Jan 2023 03:57:25 GMT
x-powered-by: Express
cache-control: max-age=300
etag: W/"c7e-h6UpKbJDYqwlEK3nM8DE9Yk5ZyU"
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7859c4ec3c535c38-FRA
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: uAU5FpIjMpOS9vT9qthEPeStzLQ8NvfqieZg7_kC8GXEKgLP8uqqOA==
age: 258
X-Firefox-Spdy: h2
static.zdassets.com/web_widget/latest/classic/web-widget-chat-sdk-81a3de7.js
104.18.72.113200 OK 0 B URL HTTP/2 static.zdassets.com/web_widget/latest/classic/web-widget-chat-sdk-81a3de7.js
IP 104.18.72.113:0
GET /web_widget/latest/classic/web-widget-chat-sdk-81a3de7.js HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 07 Jan 2023 04:01:46 GMT
content-type: application/javascript; charset=utf-8
x-amz-id-2: dCxOKI1VihqlzZuFneeAf4EO8DIB/CgBkri9Rz6wSPiqVn9DBEruG5PWW43tzIxAqz1PrZGMfjM=
x-amz-request-id: F6C2N3SJTY8G76TW
x-amz-replication-status: COMPLETED
last-modified: Wed, 14 Dec 2022 15:44:37 GMT
etag: W/"d366c0776c2bacba354d40e564c3d3e6"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Thu, 14 Dec 2023 15:44:36 GMT
x-amz-version-id: _S9k0k7m14Q1JXEfLI.DU.BBCg9qJXGg
cf-cache-status: HIT
age: 1904199
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=k%2B0weybaNL4xjnthYTfrHHaOOOLJdpsQ1JN0rqGbBi5%2FAceFS%2BnqhN0sSkJXJLl%2FT9uTxgUEO8NfPRdK1D8Cs5DLLCHIYbC1QYSSYu41EswWO20GEb8On4WTIf5FHzdz2dKXPkA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 7859cb467ffcb512-OSL
content-encoding: br
X-Firefox-Spdy: h2
static.zdassets.com/web_widget/latest/web-widget-framework-80d26f4cc026ac520e65.js
104.18.72.113200 OK 0 B URL HTTP/2 static.zdassets.com/web_widget/latest/web-widget-framework-80d26f4cc026ac520e65.js
IP 104.18.72.113:0
GET /web_widget/latest/web-widget-framework-80d26f4cc026ac520e65.js HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 07 Jan 2023 04:01:44 GMT
content-type: application/javascript; charset=utf-8
x-amz-id-2: flXT3MjZXq9WFSWpPRs+IiSkjkX3+v9E8zHvt24+o/uXfRysJbOibD4IZBfnohBYxkCwc++Rpqo=
x-amz-request-id: F6CCGSFWY28CB4TK
x-amz-replication-status: COMPLETED
last-modified: Wed, 14 Dec 2022 15:41:53 GMT
etag: W/"34fbbf22dcbdf81917dd5b3e02a125e4"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Thu, 14 Dec 2023 15:41:52 GMT
x-amz-version-id: BijG1SZtZft6iu4XfUmwnaVs.g5q2jvS
cf-cache-status: HIT
age: 1904199
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zawqVpbD58hMBRoq7sH51HbP97mbDxcCtBtVW8%2FpuVSW98PfowyB4KkWAd5K9GXqs2iRj0IQIpWxDUNdW8uMagcZKTNEfR0GC0RVre3HyHvSqYZUANbyojB27YLodhnfRvc0mxw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 7859cb3e6ccdb512-OSL
content-encoding: br
X-Firefox-Spdy: h2
static.zdassets.com/web_widget/latest/classic/web-widget-5324-81a3de7.js
104.18.72.113200 OK 0 B URL HTTP/2 static.zdassets.com/web_widget/latest/classic/web-widget-5324-81a3de7.js
IP 104.18.72.113:0
GET /web_widget/latest/classic/web-widget-5324-81a3de7.js HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 07 Jan 2023 04:01:45 GMT
content-type: application/javascript; charset=utf-8
x-amz-id-2: N5dT9JXWrJ6LHekTKf/mWyeV2xtYk6b8CIDMtPXNt5c/QUaa5FjHdkI91n1OR77lZMScW8RD3DY=
x-amz-request-id: F6C5FH3WES4KVVKJ
x-amz-replication-status: COMPLETED
last-modified: Wed, 14 Dec 2022 15:44:37 GMT
etag: W/"c296a94da281fc44d57ec8f4e4cfb0fa"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Thu, 14 Dec 2023 15:44:36 GMT
x-amz-version-id: CY5KQGuue_uwVKm8gYgHUkbI5bFfwkO_
cf-cache-status: HIT
age: 1904199
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jNwepB0H%2FJ9CrKFYPiE838NZn7AV3i%2BSEolM7ATpfFQOmxnYGHo72uSygKbHFlR0R1ZECXlHzaZc%2Bf5JJ4sV%2B6GA8BcCBWXyR%2FK6S9xZPEQw3t2k5tpKTfK8gGIdpBYKWxrd8Hs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 7859cb43eeedb512-OSL
content-encoding: br
X-Firefox-Spdy: h2
ittogepiom.com/afu.php?zoneid=4501701&var=
139.45.197.237200 OK 0 B URL HTTP/2 ittogepiom.com/afu.php?zoneid=4501701&var=
IP 139.45.197.237:0
Analyzer Verdict Alert quad9 Sinkholed
GET /afu.php?zoneid=4501701&var= HTTP/1.1
Host: ittogepiom.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 04:01:43 GMT
content-type: text/html; charset=utf8
x-trace-id: 35f6c0a227eddf6cf12e1494bf316102
link: <https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://my.rtmark.net>; rel="preconnect dns-prefetch"
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
set-cookie: OAID=248e812d9df84bf3ab95ac9382b1a0b9; expires=Sun, 07 Jan 2024 04:01:43 GMT; path=/; secure; SameSite=None
oaidts=1673064103; expires=Sun, 07 Jan 2024 04:01:43 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
doggocasino.com/assets/theme/icons/Trophy-Icon_black.svg
143.204.55.92200 OK 0 B URL HTTP/2 doggocasino.com/assets/theme/icons/Trophy-Icon_black.svg
IP 143.204.55.92:0
GET /assets/theme/icons/Trophy-Icon_black.svg HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/no-no?affiliateName=%5Bcellxpert%5D&affid=cx-35656_390258&bannerid=35656&trackerid=35656_390258&bta=35656&brand=doggocasino&rdk=rk3
Cookie: _ga_K4EHGY5F0T=GS1.1.1673064093.1.1.1673064094.59.0.0; _ga=GA1.2.207839148.1673064093; __adm_tid=tid-3dbfd246c.2873a269d; affiliateId=cx-35656_390258; bannerId=35656; trackerId=35656_390258; affiliateName=%5Bcellxpert%5D; cookie_policy=accepted; _gid=GA1.2.1751619844.1673064095; _gat_UA-196341002-1=1; _hjSessionUser_3054262=eyJpZCI6IjJhMzcyOTBlLWExMTMtNWMxYy04NzViLWNjODcyNzZlMDM2NyIsImNyZWF0ZWQiOjE2NzMwNjQwOTQ3NDgsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_3054262=eyJpZCI6ImMwODc1YzJlLWY0ZmYtNDU3YS1hYWZhLWI2MDQ5Yjc3Njg2NCIsImNyZWF0ZWQiOjE2NzMwNjQwOTQ5OTUsImluU2FtcGxlIjpmYWxzZX0=; _hjIncludedInPageviewSample=1; _hjAbsoluteSessionInProgress=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
x-amz-meta-codebuild-content-sha256: c7543b0c1a387fe8fce7ecedb491413db02c94ccd3c1a1d5b2dc6c33f6e53bfc
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:dba88433-a99e-4dbd-9b3f-92c9f40e4469
x-amz-meta-codebuild-content-md5: f72fdbadddaa46b851fe89ddcab9666b
last-modified: Thu, 05 Jan 2023 08:36:25 GMT
x-amz-version-id: Yp2aaTZYw8F5y1Lt1QAUYv4O8BUwmGdJ
server: AmazonS3
content-encoding: gzip
date: Fri, 06 Jan 2023 11:37:18 GMT
etag: W/"53db43e4c9552aaffec27abd1ebe0b2f"
vary: Accept-Encoding
via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
age: 59069
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 0Ld1hbNK7dS7KgnztR612rx0iVrIY6kMCJrriO31gIDkUY4Q4LrgqA==
X-Firefox-Spdy: h2
doggocasino.com/scripts.1064ca3406a50daf3ddc.js
143.204.55.92200 OK 0 B URL HTTP/2 doggocasino.com/scripts.1064ca3406a50daf3ddc.js
IP 143.204.55.92:0
GET /scripts.1064ca3406a50daf3ddc.js HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/en-us?affiliateName=[cellxpert]&affid=cx-35656_390258&bannerid=35656&trackerid=35656_390258&bta=35656&brand=doggocasino&rdk=rk3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
x-amz-meta-codebuild-content-sha256: c7543b0c1a387fe8fce7ecedb491413db02c94ccd3c1a1d5b2dc6c33f6e53bfc
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:dba88433-a99e-4dbd-9b3f-92c9f40e4469
x-amz-meta-codebuild-content-md5: f72fdbadddaa46b851fe89ddcab9666b
last-modified: Thu, 05 Jan 2023 08:36:18 GMT
x-amz-version-id: i9SuumvVdGa1HF7ZKVTOK0DBunGG_AhX
server: AmazonS3
content-encoding: gzip
date: Fri, 06 Jan 2023 11:37:16 GMT
etag: W/"42a2bec801024b80f39d0bc44eba9251"
vary: Accept-Encoding
via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
age: 59068
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: uVScWQ_uR04bm9Qr0I8srJcD20tvZOyxKiio4CcyRYBA8kCiYM0JMA==
X-Firefox-Spdy: h2
doggocasino.regily.com/b1e55c583226311df310792321f587d2.js
143.204.55.125200 OK 0 B URL HTTP/2 doggocasino.regily.com/b1e55c583226311df310792321f587d2.js
IP 143.204.55.125:0
GET /b1e55c583226311df310792321f587d2.js HTTP/1.1
Host: doggocasino.regily.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Mon, 05 Dec 2022 10:38:51 GMT
server: AmazonS3
content-encoding: br
date: Sat, 07 Jan 2023 03:58:13 GMT
etag: W/"2e1b06881b14c67c60190e85c02f446b"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 80d21802b1b80c40e55ccf83433b8eac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: DOvHFgPvbW9cYF75OKQUPJxITfZgGmgGwgd1lnVUhuFaps8GUN0ahA==
age: 211
X-Firefox-Spdy: h2
wait4min.com/dvzMy91L?sub_id_1=pops
104.21.67.118302 Found 0 B URL HTTP/2 wait4min.com/dvzMy91L?sub_id_1=pops
IP 104.21.67.118:0
GET /dvzMy91L?sub_id_1=pops HTTP/1.1
Host: wait4min.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sat, 07 Jan 2023 04:01:42 GMT
content-type: text/html; charset=UTF-8
location: https://ittogepiom.com/afu.php?zoneid=4501701&var=
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: DYNAMIC
set-cookie: _subid=s8hnpajvlg9o;Expires=Tuesday, 07-Feb-2023 04:01:42 GMT;Max-Age=2678400;Path=/
bc730=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIwODBcIjoxNjczMDY0MTAyfSxcImNhbXBhaWduc1wiOntcIjUxMVwiOjE2NzMwNjQxMDJ9LFwidGltZVwiOjE2NzMwNjQxMDJ9In0.F9CoJiyTGsEKcEIr5bb6YX9SM6j5CSKhvPfO0cHafZI;Expires=Tuesday, 14-Jan-2076 08:03:24 GMT;Max-Age=1673150502;Path=/
_token=uuid_s8hnpajvlg9o_s8hnpajvlg9o63b8eea6cb7e93.93389209;Expires=Tuesday, 07-Feb-2023 04:01:42 GMT;Max-Age=2678400;Path=/
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yTfyHs7UJFKAOvFRA1rkiMw8M2oBE6SedliDrsQukufkdoEmePR4rVxWaQWJBOG0KRp0b6BedlIjaGDunBB8P1SrS6yWwBigZJMF16Iae8jmlif2ZW6ykOAgepGaX5Y%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7859cb324ffdb4fa-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/slots-games.png
151.101.86.208200 OK 0 B URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/slots-games.png
IP 151.101.86.208:0
GET /uploads/media/DOC/home/slots-games.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 22 Jun 2022 15:01:49 GMT
server: imgix
x-imgix-id: ddc28f2ea6a71b7e00bfb4f19fd3f5b904cd6e97
x-imgix-render-farm: 01.1
x-imgix-original-status: 200
date: Sat, 07 Jan 2023 04:01:45 GMT
age: 5193438
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10041-SJC, cache-bma1632-BMA
x-cache: HIT, HIT
content-length: 1428029
X-Firefox-Spdy: h2
static.zdassets.com/web_widget/latest/classic/web-widget-locales/classic/en-us-json-81a3de7.js
104.18.72.113200 OK 0 B URL HTTP/2 static.zdassets.com/web_widget/latest/classic/web-widget-locales/classic/en-us-json-81a3de7.js
IP 104.18.72.113:0
GET /web_widget/latest/classic/web-widget-locales/classic/en-us-json-81a3de7.js HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 07 Jan 2023 04:01:45 GMT
content-type: application/javascript; charset=utf-8
x-amz-id-2: Q/WsINVJ+Z0sX1C6ewo6dm4fGCmy1q+byCALlpmYTsO763wyxLOPMW+3hlpEmMz+n7wAWQ1i9dM=
x-amz-request-id: F6CEY42KW93BNB12
x-amz-replication-status: COMPLETED
last-modified: Wed, 14 Dec 2022 15:44:38 GMT
etag: W/"10d9a30eac6ed106c66673278428cd9d"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Thu, 14 Dec 2023 15:44:37 GMT
x-amz-version-id: w19VoZjQsh3pKdlpVeLbZ8rEmUXDsh_h
cf-cache-status: HIT
age: 1904196
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=05aKgH7s2O%2Br9mDjPgJhrfWm5ku5WArRVWyLrt9IRM6wf0x45mmIrifWZrFGR%2Bdk5GdH1J8U4pEis8ePMac%2FY5T89kCGZL3SlfwCbfgIB4wIXqCiTPtQ3FfTB%2BBmW2HoeKJK7zY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 7859cb461fd6b512-OSL
content-encoding: br
X-Firefox-Spdy: h2