516c78c72.srtrak.com/promo-tools/direct-offers/mainstream/dating/boobmania/
301 Moved Permanently 162 B URL HTTP/1.1 516c78c72.srtrak.com/promo-tools/direct-offers/mainstream/dating/boobmania/
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /promo-tools/direct-offers/mainstream/dating/boobmania/ HTTP/1.1
Host: 516c78c72.srtrak.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Tue, 07 Feb 2023 08:25:36 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://516c78c72.srtrak.com/promo-tools/direct-offers/mainstream/dating/boobmania/
X-Robots-Tag: noindex, nofollow, nosnippet, noarchive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 565c1bbc5c1c40be1988b3bf6fd9dc1a
cfdba5bc597130461dd67bf6cda53183be592493
60ceb36a8329c92fc49a3caf50daf511a38e01eac21a07d7a0a838166bea058d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "60CEB36A8329C92FC49A3CAF50DAF511A38E01EAC21A07D7A0A838166BEA058D"
Last-Modified: Mon, 06 Feb 2023 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6453
Expires: Tue, 07 Feb 2023 10:13:09 GMT
Date: Tue, 07 Feb 2023 08:25:36 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dca68db7aea32f6683ce8d542c078f04
19c495238df74fca680e21f18627ff94de5dd2e5
35cab3987fc0e4a41b305cb208c1e33fa38ce8bdfd9f386c3dc0411dd4d5ac61
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "35CAB3987FC0E4A41B305CB208C1E33FA38CE8BDFD9F386C3DC0411DD4D5AC61"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3114
Expires: Tue, 07 Feb 2023 09:17:30 GMT
Date: Tue, 07 Feb 2023 08:25:36 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash bf0c602d32b3c14606f22a86183b5e3c
6eabd8d83475eba731968abe1a05a8bfd272f160
6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 07 Feb 2023 07:36:30 GMT
content-type: application/json
age: 2946
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cc14b0d2f7c451f6431dc87ba54d1d60
bab8bfda6fa3e2f17125353f5147211787dc25d0
b58fe18a5cc8fe5aaf49ba7eadd0ef34692892e68e9c52eb5bb56ea27e1300ad
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B58FE18A5CC8FE5AAF49BA7EADD0EF34692892E68E9C52EB5BB56EA27E1300AD"
Last-Modified: Mon, 06 Feb 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14142
Expires: Tue, 07 Feb 2023 12:21:18 GMT
Date: Tue, 07 Feb 2023 08:25:36 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain
IP
File type PEM certificate\012- , ASCII text
Hash e76071a28ee566dababb3834f46d68ed
aebb4e68c1ba2de0f90025283e8ed8470944fde0
78b6df2627172e5b35476bc31020f02898cdc412aaf4337af2c3b049a60912b6
GET /chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: Ewfzxlx0w4yEPmW1wA1oaJHObsBvVFCJEYk4Zrz/Xf9tyj1dJIHRXsZr7OPgH4wUf6yH22NixTCBtn1NPH0uuw==
x-amz-request-id: JZYYMPH3A4RG97V6
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 07 Feb 2023 07:45:29 GMT
age: 2407
last-modified: Sun, 29 Jan 2023 18:44:47 GMT
etag: "e76071a28ee566dababb3834f46d68ed"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 0cc64617f5860a3d55c94f557be92414
2f873391d9da28d6c78e004da2c04b572a5dacba
21e9815890b9fd6f7d0df17b33ca8b1df65bbc77a2b30b14beb4a71d4d0b1e48
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "21E9815890B9FD6F7D0DF17B33CA8B1DF65BBC77A2B30B14BEB4A71D4D0B1E48"
Last-Modified: Sun, 05 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6265
Expires: Tue, 07 Feb 2023 10:10:01 GMT
Date: Tue, 07 Feb 2023 08:25:36 GMT
Connection: keep-alive
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 07 Feb 2023 08:25:36 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Expires, Retry-After, Content-Length, Content-Type, ETag, Cache-Control, Alert, Pragma, Backoff, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 07 Feb 2023 07:51:19 GMT
age: 2058
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 157a1014565ffcfbe0a33722a9234f26
965cb69c4b0aeca055f4ebaeb983ed5232a46fba
8cbfb65bfed671b862a147336f519dc18fedc9e6fcee06924849f292ae3fff51
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8CBFB65BFED671B862A147336F519DC18FEDC9E6FCEE06924849F292AE3FFF51"
Last-Modified: Sun, 05 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21577
Expires: Tue, 07 Feb 2023 14:25:14 GMT
Date: Tue, 07 Feb 2023 08:25:37 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9b88bae61bca33aba8aa99f6128db8d9
a07b61fb2458917699613fcae68710941b595416
54915c2f79822732e06a592d027da421ad1e7a6458c545f98333db25612b3dea
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "54915C2F79822732E06A592D027DA421AD1E7A6458C545F98333DB25612B3DEA"
Last-Modified: Mon, 06 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3437
Expires: Tue, 07 Feb 2023 09:22:54 GMT
Date: Tue, 07 Feb 2023 08:25:37 GMT
Connection: keep-alive
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: MGv4PGSyKtWJhR8/ptOfQA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: sJzvNp4YT40uqezobAcnYJqyuN0=
dtrk.slimcdn.com/directclick/?pid=r3osD70AeZ7IQyPv0pjPCaK0Vjg1&wsid=&subid=
200 OK 8.6 kB URL HTTP/1.1 dtrk.slimcdn.com/directclick/?pid=r3osD70AeZ7IQyPv0pjPCaK0Vjg1&wsid=&subid=
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (23510)
Hash b6d331800dcd30c36805b5c1676161ab
ed4d070876d3606d67780090c27e409c2e231e0d
bc4b01401680dd6d427824b2ea799575efcc39f23447b16ade55a6672cf91ecf
GET /directclick/?pid=r3osD70AeZ7IQyPv0pjPCaK0Vjg1&wsid=&subid= HTTP/1.1
Host: dtrk.slimcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 Feb 2023 08:25:37 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
Expires: Sat, 26 Jul 1997 05:00:00 GMT
Set-Cookie: checkkeks=1; expires=Wed, 07-Feb-2024 08:25:37 GMT; Max-Age=31536000; path=/; domain=.slimcdn.com
eTag=6b4fd9c0821a9e785d233e807ca4da75; expires=Wed, 08-Feb-2023 08:25:37 GMT; Max-Age=86400; path=/; domain=.slimcdn.com
eTag=6b4fd9c0821a9e785d233e807ca4da75; expires=Wed, 08-Feb-2023 08:25:37 GMT; Max-Age=86400; path=/; domain=.slimspots.com
ck_uniques=1675844736%3A1310-72503; expires=Wed, 07-Feb-2024 08:25:37 GMT; Max-Age=31536000; path=/; domain=.slimcdn.com
ck_uniques=1675844736%3A1310-72503; expires=Wed, 07-Feb-2024 08:25:37 GMT; Max-Age=31536000; path=/; domain=.slimspots.com
ck_uniquesPa=1675844736%3A98576; expires=Wed, 07-Feb-2024 08:25:37 GMT; Max-Age=31536000; path=/; domain=.slimcdn.com
ck_uniquesPa=1675844736%3A98576; expires=Wed, 07-Feb-2024 08:25:37 GMT; Max-Age=31536000; path=/; domain=.slimspots.com
ck_sys_uniques_3=1; expires=Wed, 08-Feb-2023 08:25:37 GMT; Max-Age=86400; path=/; domain=.slimcdn.com
ck_sys_uniques_3=1; expires=Wed, 08-Feb-2023 08:25:37 GMT; Max-Age=86400; path=/; domain=.slimspots.com
u_current_ads_view=98576----; expires=Wed, 08-Feb-2023 08:25:37 GMT; Max-Age=86400; path=/; domain=.slimcdn.com
u_current_ads_view=98576----; expires=Wed, 08-Feb-2023 08:25:37 GMT; Max-Age=86400; path=/; domain=.slimspots.com
ETag: "6b4fd9c0821a9e785d233e807ca4da75"
Content-Encoding: gzip
ocsp.sectigo.com/
200 OK 472 B IP
Hash 62d1b4c9b556c47b85036f0532b81c04
b4d96700d99dd223b2418b410d105ecf97f2fd46
9f9c8b78e808539e64df4f38c9dd4e8c07c397814719c28e339734e248485b97
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 Feb 2023 08:25:38 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sat, 04 Feb 2023 02:23:44 GMT
Expires: Sat, 11 Feb 2023 02:23:43 GMT
Etag: "b4d96700d99dd223b2418b410d105ecf97f2fd46"
Cache-Control: max-age=323284,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 795abc6bda0fb4f9-OSL
ocsp.sectigo.com/
200 OK 472 B IP
Hash 62d1b4c9b556c47b85036f0532b81c04
b4d96700d99dd223b2418b410d105ecf97f2fd46
9f9c8b78e808539e64df4f38c9dd4e8c07c397814719c28e339734e248485b97
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 Feb 2023 08:25:38 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sat, 04 Feb 2023 02:23:44 GMT
Expires: Sat, 11 Feb 2023 02:23:43 GMT
Etag: "b4d96700d99dd223b2418b410d105ecf97f2fd46"
Cache-Control: max-age=323284,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 795abc6e4ddfb4f9-OSL
ocsp.pki.goog/s/gts1p5/Vw0ZGa9PfhE
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/Vw0ZGa9PfhE
IP
Hash c0193bfd99d426f7230834cc5657dc2d
0cf0d22546dbdda493c0a6b2522cca84b0d0485c
a928795cfcbe669b35ea773292f85654ef30650fea79ab85cae6bb160807e8d2
POST /s/gts1p5/Vw0ZGa9PfhE HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 08:25:38 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/s/gts1p5/Vw0ZGa9PfhE
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/Vw0ZGa9PfhE
IP
Hash c0193bfd99d426f7230834cc5657dc2d
0cf0d22546dbdda493c0a6b2522cca84b0d0485c
a928795cfcbe669b35ea773292f85654ef30650fea79ab85cae6bb160807e8d2
POST /s/gts1p5/Vw0ZGa9PfhE HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 08:25:38 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 68273225f74fbf7493f395610d7a73fc
5a8779ef5656aeeba23b365aad60b7901c5dd7fc
c83f285a1f3df0f7ac758a68ee95cc3d2671f80264c2e143cc0561cc574e3f19
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C83F285A1F3DF0F7AC758A68EE95CC3D2671F80264C2E143CC0561CC574E3F19"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10004
Expires: Tue, 07 Feb 2023 11:12:22 GMT
Date: Tue, 07 Feb 2023 08:25:38 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 68273225f74fbf7493f395610d7a73fc
5a8779ef5656aeeba23b365aad60b7901c5dd7fc
c83f285a1f3df0f7ac758a68ee95cc3d2671f80264c2e143cc0561cc574e3f19
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C83F285A1F3DF0F7AC758A68EE95CC3D2671F80264C2E143CC0561CC574E3F19"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10004
Expires: Tue, 07 Feb 2023 11:12:22 GMT
Date: Tue, 07 Feb 2023 08:25:38 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 68273225f74fbf7493f395610d7a73fc
5a8779ef5656aeeba23b365aad60b7901c5dd7fc
c83f285a1f3df0f7ac758a68ee95cc3d2671f80264c2e143cc0561cc574e3f19
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C83F285A1F3DF0F7AC758A68EE95CC3D2671F80264C2E143CC0561CC574E3F19"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10004
Expires: Tue, 07 Feb 2023 11:12:22 GMT
Date: Tue, 07 Feb 2023 08:25:38 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 68273225f74fbf7493f395610d7a73fc
5a8779ef5656aeeba23b365aad60b7901c5dd7fc
c83f285a1f3df0f7ac758a68ee95cc3d2671f80264c2e143cc0561cc574e3f19
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C83F285A1F3DF0F7AC758A68EE95CC3D2671F80264C2E143CC0561CC574E3F19"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10004
Expires: Tue, 07 Feb 2023 11:12:22 GMT
Date: Tue, 07 Feb 2023 08:25:38 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 68273225f74fbf7493f395610d7a73fc
5a8779ef5656aeeba23b365aad60b7901c5dd7fc
c83f285a1f3df0f7ac758a68ee95cc3d2671f80264c2e143cc0561cc574e3f19
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C83F285A1F3DF0F7AC758A68EE95CC3D2671F80264C2E143CC0561CC574E3F19"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10004
Expires: Tue, 07 Feb 2023 11:12:22 GMT
Date: Tue, 07 Feb 2023 08:25:38 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7926951f-dd16-4029-a877-933fa5d3c0f5.png
200 OK 5.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7926951f-dd16-4029-a877-933fa5d3c0f5.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cf292b03a5db7eb8e0660a518f41233c
8fa486cdecffff8a663da2df88227ee784c298a2
cfc5efb92068bdeeda5c95f9851213b14afa76776486d0493cf4c05b30453cf0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7926951f-dd16-4029-a877-933fa5d3c0f5.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5634
x-amzn-requestid: c380f2eb-c707-4086-9646-179ea89ba210
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fy9JKEpqoAMF9RA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dddbd4-49510561740468ba7b39f211;Sampled=0
x-amzn-remapped-date: Sat, 04 Feb 2023 04:15:16 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ofAz9sRlztBs3zypgsL9DkiJypsxagC7ZcUX3PLL_7FzUALp_MxtKA==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Mon, 06 Feb 2023 18:44:39 GMT
age: 49259
etag: "8fa486cdecffff8a663da2df88227ee784c298a2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe56753b9-ced9-4038-88f6-9ea3a7bc9f04.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe56753b9-ced9-4038-88f6-9ea3a7bc9f04.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash aa6c416b3a87ded887c9dcf7c51e5dd0
45f4ef9e68591c00669043abe96959bead8f17ae
9e10394b387916e40c44d4e02fbc1ea72214d870df189ce16d24015de00682bf
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe56753b9-ced9-4038-88f6-9ea3a7bc9f04.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11205
x-amzn-requestid: abdf9c40-a2b7-49ae-bea1-ff5abfcea781
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fvszZFOZoAMFkNg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dc8e7b-6e508da05ff6f33e691de130;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 04:33:00 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: hLrbI5Acy2RBlg7VqGE2b83zuqgt-bx0kD0nlH8uYaJ8tii2FqMLfw==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Mon, 06 Feb 2023 15:25:12 GMT
age: 61226
etag: "45f4ef9e68591c00669043abe96959bead8f17ae"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F09bdaec3-9afd-4cea-87ec-6adabc28a3e8.jpeg
200 OK 6.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F09bdaec3-9afd-4cea-87ec-6adabc28a3e8.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 88178e0f623494e30ece4da4eed04d60
7f016d87157a577e4ad4e4cf6c854a0489f8571a
e5658ac599ca37e797637a596ca9b65c80c1053b2ce5dacc667ae3b8b1ce54a3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F09bdaec3-9afd-4cea-87ec-6adabc28a3e8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6384
x-amzn-requestid: 5f91a438-31d9-42ca-96b4-71344cc736c6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f77IcE2-oAMFbZA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e17235-1ce1ebfa4e9ae6053434c48d;Sampled=0
x-amzn-remapped-date: Mon, 06 Feb 2023 21:33:41 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ee3lrCu0ZcpPQ-tQiF3j59bjY0W_zFOKl2H__y_twSGGESxmir3JHg==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Mon, 06 Feb 2023 21:46:30 GMT
age: 38348
etag: "7f016d87157a577e4ad4e4cf6c854a0489f8571a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
for-j.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
200 OK 10 kB URL HTTP/2 for-j.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
IP
Hash b11ccd593f89f7c3241514cde2c35244
d93786626c34032e62fcb7fab422b0efeb86635f
7d232106a32e2571e9dbadbbc2e7eb9c9c74ada055b47fe4379934a5099e387d
GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1
Host: for-j.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 08:25:38 GMT
content-type: application/javascript
last-modified: Fri, 03 Feb 2023 16:56:26 GMT
etag: W/"63dd3cba-302c"
vary: Accept-Encoding
server: cloudflare
cf-ray: 795abc70ed59b527-OSL
x-frame-options: DENY
x-content-type-options: nosniff
expires: Thu, 09 Feb 2023 08:25:38 GMT
cache-control: max-age=172800, public
content-encoding: gzip
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9bbda930-ccb5-4a8a-b679-2389a710fc6f.jpeg
200 OK 6.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9bbda930-ccb5-4a8a-b679-2389a710fc6f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d057038cd3164c40413a88f9b5c2af92
afbcb6617c7277ea42068c2aa1c8dcba02549873
ae03b42f1a5c3774e3ea569a886707a8a31da05a45bd971b829cf579be0ea6c7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9bbda930-ccb5-4a8a-b679-2389a710fc6f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6787
x-amzn-requestid: 15924d6a-68a3-414b-9e23-68d37291d4a8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fvyxSEjXIAMFT3Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dc9808-22daff920f5fe1201328ccee;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 05:13:44 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: AOnXbzTBcVZ3quJx3NoNQC08Gk5_phyp8UiWCm6Dk4GPxl8FCaIC4w==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Tue, 07 Feb 2023 04:57:41 GMT
age: 12477
etag: "afbcb6617c7277ea42068c2aa1c8dcba02549873"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8ada2635-3335-4f49-9e7f-22d2ae016030.jpeg
200 OK 4.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8ada2635-3335-4f49-9e7f-22d2ae016030.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash eedb4de12585c70ddb5b8f94fe6a59e2
83c9437e71a0a03b3e8ff652155a85eafa76cdda
d4493a30f62e9ad224b3595ba3af8a322e2d4a3d9238a1847973f962bdcc0c82
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8ada2635-3335-4f49-9e7f-22d2ae016030.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4227
x-amzn-requestid: b45f2ab7-0102-4542-9514-54fb93a0e27f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f77sTH4jIAMFnsQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e1731b-4a24bcb1102e58543cd81343;Sampled=0
x-amzn-remapped-date: Mon, 06 Feb 2023 21:37:31 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: V_4NzIAVBOZMjf_YIM3bowFdlP1y4peI5JI-jO105s3NVjmyYnC0Tg==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Mon, 06 Feb 2023 21:48:48 GMT
age: 38210
etag: "83c9437e71a0a03b3e8ff652155a85eafa76cdda"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ak.roudoduor.com/afu.php?zoneid=5460782&ymid=167575833810000TNOTV415326358024Vb7&var=315519420
200 OK 9.3 kB URL HTTP/2 ak.roudoduor.com/afu.php?zoneid=5460782&ymid=167575833810000TNOTV415326358024Vb7&var=315519420
IP
ASN #20940 Akamai International B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (12966)
Hash 539bb1bd67dc003515afb8694511294a
bf14614b30a2774c87ea249a7a18abea886fee07
9be6ae0f5691bee62ed959467fce541626044bd429015d72d2363c1c6771329d
Analyzer Verdict Alert quad9 Sinkholed
GET /afu.php?zoneid=5460782&ymid=167575833810000TNOTV415326358024Vb7&var=315519420 HTTP/1.1
Host: ak.roudoduor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=utf8
x-trace-id: b6d0f3d179ee1e4d817e79b3f64aa1b0
link: <https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://my.rtmark.net>; rel="preconnect dns-prefetch"
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
content-length: 9320
vary: Accept-Encoding
expires: Tue, 07 Feb 2023 08:25:38 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Tue, 07 Feb 2023 08:25:38 GMT
set-cookie: OAID=7c5a7616be384e16a4b83b0dc4b1ae18; expires=Wed, 07 Feb 2024 08:25:38 GMT; path=/; secure; SameSite=None
oaidts=1675758338; expires=Wed, 07 Feb 2024 08:25:38 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6f5ab3bdbb5ebcebf9a163e0c85ab467
43f1c3de55e528c5be75895eb08b64840a0c8b95
d7c6e6ba9986867972fbc47f35dc823e3c78db46acf5292b6933e0f5760e47be
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D7C6E6BA9986867972FBC47F35DC823E3C78DB46ACF5292B6933E0F5760E47BE"
Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5299
Expires: Tue, 07 Feb 2023 09:53:57 GMT
Date: Tue, 07 Feb 2023 08:25:38 GMT
Connection: keep-alive
my.rtmark.net/img.gif?f=merge&userId=7c5a7616be384e16a4b83b0dc4b1ae18
200 OK 43 B URL HTTP/2 my.rtmark.net/img.gif?f=merge&userId=7c5a7616be384e16a4b83b0dc4b1ae18
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /img.gif?f=merge&userId=7c5a7616be384e16a4b83b0dc4b1ae18 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ak.roudoduor.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 07 Feb 2023 08:25:39 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=7c5a7616be384e16a4b83b0dc4b1ae18; expires=Wed, 07 Feb 2024 08:25:39 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
ak.roudoduor.com/?z=5460782&syncedCookie=true&rhd=false
302 Found 0 B URL HTTP/2 ak.roudoduor.com/?z=5460782&syncedCookie=true&rhd=false
IP
ASN #20940 Akamai International B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
POST /?z=5460782&syncedCookie=true&rhd=false HTTP/1.1
Host: ak.roudoduor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 584
Origin: https://ak.roudoduor.com
Connection: keep-alive
Referer: https://ak.roudoduor.com/afu.php?zoneid=5460782&var=5460782&rid=BPTR34PbLD67mf1dYD5JaA%3D%3D&rhd=false
Cookie: OAID=7c5a7616be384e16a4b83b0dc4b1ae18; oaidts=1675758338
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
content-length: 0
x-trace-id: 11d3532d312ad1239f2c3a9103959918
link: <https://go.doubledoubleup.com>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://diromalxx.com>; rel="preconnect dns-prefetch"
referrer-policy: no-referrer
location: https://go.doubledoubleup.com/visit/?bta=35656&brand=doggocasino&rdk=rk3
access-control-allow-origin: https://ak.roudoduor.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
expires: Tue, 07 Feb 2023 08:25:39 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Tue, 07 Feb 2023 08:25:39 GMT
set-cookie: OAID=7c5a7616be384e16a4b83b0dc4b1ae18; expires=Wed, 07 Feb 2024 08:25:39 GMT; path=/; secure; SameSite=None
oaidts=1675758338; expires=Wed, 07 Feb 2024 08:25:39 GMT; path=/; secure; SameSite=None
syncedCookie=true; expires=Tue, 14 Feb 2023 08:25:39 GMT; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash b1b7fddaac6ae3be8490606a0b940281
c067b3dedcb3b4efde29e702d3f3178294d3eb97
00a82f093040742bfd6d73d00c2a4e98a5fa28b914533691e0a586fb2e26bec8
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 Feb 2023 08:25:39 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 06 Feb 2023 02:07:09 GMT
Expires: Mon, 13 Feb 2023 02:07:08 GMT
Etag: "c067b3dedcb3b4efde29e702d3f3178294d3eb97"
Cache-Control: max-age=495088,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 795abc729b73b4f9-OSL
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b7d133a7a4c9ef92d94864ee288ea1f6
ce3038e849a4dbc358da0a46fd9cea38abae1b24
b907538e68b5e09c461ea3cda820c010baac1207394c8742fdd5479b1ce78856
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B907538E68B5E09C461EA3CDA820C010BAAC1207394C8742FDD5479B1CE78856"
Last-Modified: Tue, 07 Feb 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7962
Expires: Tue, 07 Feb 2023 10:38:21 GMT
Date: Tue, 07 Feb 2023 08:25:39 GMT
Connection: keep-alive
go.doubledoubleup.com/visit/?bta=35656&brand=doggocasino&rdk=rk3
302 Moved Temporarily 3 B URL HTTP/1.1 go.doubledoubleup.com/visit/?bta=35656&brand=doggocasino&rdk=rk3
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type JSON data\012- , ASCII text, with no line terminators
Hash 43e819cfbef2c8fc69c227513504087b
3ea645da8b9c23cfcf4e75e45b2ea79c5ec89c4a
82985617ce795510ad965737efe6b5a76411b26a6d7453ff4ba680e856377bc8
GET /visit/?bta=35656&brand=doggocasino&rdk=rk3 HTTP/1.1
Host: go.doubledoubleup.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Server: rhino-core-shield
Date: Tue, 07 Feb 2023 08:25:39 GMT
Content-Type: application/octet-stream
Content-Length: 3
Connection: keep-alive
Set-cookie: doggocasino-v=393091; Max-Age=2678400; Path=/; Expires=Fri, 10 Mar 2023 08:25:39 GMT; HttpOnly
cache-control: no-store
location: https://doggocasino.com/en-us?affiliateName=[cellxpert]&affid=cx-35656_393091&bannerid=35656&trackerid=35656_393091&brand=doggocasino&bta=35656&rdk=rk3
referer:
X-Cache-Status: MISS
access-control-allow-origin: *, *
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 63e2e4256d6d32953ebc7881dd01f684
64ebf3c3cda5e8b742e036c1c8215effb38e988d
9b4e883c361ff81524818f3caf5f78328acc0a0b3dfec91651269fbefe39272a
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=140729
Date: Tue, 07 Feb 2023 08:25:39 GMT
Etag: "63e18dbc-1d7"
Expires: Wed, 08 Feb 2023 23:31:08 GMT
Last-Modified: Mon, 06 Feb 2023 23:31:08 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: CQiH_Cjn5a9TR9Imhg1N3Hz_AFuQbWnymQXV_VRCgN_t1OKPuI-ACw==
doggocasino.com/scripts.1064ca3406a50daf3ddc.js
200 OK 7.1 kB URL HTTP/2 doggocasino.com/scripts.1064ca3406a50daf3ddc.js
IP
Hash b615a2aef284c03617561e73ddcf17c5
65dd4e38f78f838de75de51d9e3ea283f35f5086
4afaf4bfcb2860e5a112dc3def4d788cadab8b66f2ae9bbad5eb389a56d8b1e1
GET /scripts.1064ca3406a50daf3ddc.js HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/en-us?affiliateName=[cellxpert]&affid=cx-35656_393091&bannerid=35656&trackerid=35656_393091&brand=doggocasino&bta=35656&rdk=rk3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
x-amz-meta-codebuild-content-sha256: 4f853d18badd3933524ca4a1dd6240279e0051fb38905b83f18834b4b93aaeb1
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:08219a5d-0b7c-4ae2-afb4-2507533d271d
x-amz-meta-codebuild-content-md5: 319cfed7654cbf4a61d9a3eabce3d2f4
last-modified: Fri, 03 Feb 2023 09:41:08 GMT
x-amz-version-id: Jqga6meIYXMWuaTvNYayjdPA6LVoGuYo
server: AmazonS3
content-encoding: gzip
date: Mon, 06 Feb 2023 22:00:47 GMT
etag: W/"42a2bec801024b80f39d0bc44eba9251"
vary: Accept-Encoding
via: 1.1 269b0fad85dfd450220cf6573a2d384e.cloudfront.net (CloudFront)
age: 37763
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: 9pvvUYS68in_zxgV0sOvuITWH4MzaICu2JZ9l6IXvDCTokuagzk8Gg==
X-Firefox-Spdy: h2
doggocasino.com/main.0ed9e70684f138e4f331.js
200 OK 635 kB URL HTTP/2 doggocasino.com/main.0ed9e70684f138e4f331.js
IP
Size 635 kB (634963 bytes)
Hash 7b7f26e03aa513a96c39abd1898e0c35
a61e711016087fb735fba967c82e82aacfc2747e
85580da01eb9960ea8f19d02707521acf775697a22c0bbc2cfb197cb6ec2d026
GET /main.0ed9e70684f138e4f331.js HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/en-us?affiliateName=[cellxpert]&affid=cx-35656_393091&bannerid=35656&trackerid=35656_393091&brand=doggocasino&bta=35656&rdk=rk3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
x-amz-meta-codebuild-content-sha256: 4f853d18badd3933524ca4a1dd6240279e0051fb38905b83f18834b4b93aaeb1
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:08219a5d-0b7c-4ae2-afb4-2507533d271d
x-amz-meta-codebuild-content-md5: 319cfed7654cbf4a61d9a3eabce3d2f4
last-modified: Fri, 03 Feb 2023 09:41:17 GMT
x-amz-version-id: rBVsIP7BRDNYLiEmmpnh5R6HSS2K4UKG
server: AmazonS3
content-encoding: gzip
date: Mon, 06 Feb 2023 22:00:47 GMT
etag: W/"4a08636564293c0a6f6ff19bb894bcf4"
vary: Accept-Encoding
via: 1.1 269b0fad85dfd450220cf6573a2d384e.cloudfront.net (CloudFront)
age: 37763
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: xwTI5V9T6yptXhE6j5HVMUoW25VBwIBawedE8wj2Ss4RwEjGzQjTfA==
X-Firefox-Spdy: h2
static.zdassets.com/ekr/snippet.js?key=65b012e7-7474-42fb-a2e0-939200b21662
200 OK 6.7 kB URL HTTP/2 static.zdassets.com/ekr/snippet.js?key=65b012e7-7474-42fb-a2e0-939200b21662
IP
File type ASCII text, with very long lines (23416), with no line terminators
Hash 2faeee83cdb2be5c139774e418fd42d2
f097390bbf480e1a106a58fe2178af3cf375180c
8e7294b159e9ca1b53b63d883332f8021e532b119ea1fa5fd84bf312523abaca
GET /ekr/snippet.js?key=65b012e7-7474-42fb-a2e0-939200b21662 HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 07 Feb 2023 08:25:39 GMT
content-type: application/javascript
x-amz-id-2: VYKORFZEK8ncQjbBiiAK6oiTYdRdkzwPfaxRM/jinB20cI8N0LqXAF6x6uRMZJVhRKA1YH5Ltb2qBhbqYLdq5g==
x-amz-request-id: EBZ4ZRD66V3TGNXR
x-amz-replication-status: COMPLETED
last-modified: Thu, 28 Jul 2022 23:44:02 GMT
etag: W/"5cae6ce528dce0c327b2bcbaad459fdb"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=3600, s-maxage=60
x-amz-version-id: TCAqq4sghBBBAAXd3MLZ8Fy8XIds..vO
cf-cache-status: HIT
age: 51
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aUGDRPFTIDOpb7%2FimRH%2FuNO57Y1onxk1e5rjIUmmy1G6hFXCCRpZcmnXy%2FntRGiMRrGVwkDM%2B68X1SR%2B4MHqLQVQCDRBSH2sRn49sETqoaDi2%2FllhL8OHDHDqqAIuNAhCR2Hynk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 795abc788ef50b31-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash ad2d72821808ee5f77c0598fed0f8bd1
adcd92881d1c5ac3cca4687dc6347369240f4726
c7ce86611bf0b0063c0bcb2c6a6a4b85fe6be2d89e382b8907e8bbb2e1e5962d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 08:25:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 278 B IP
Hash 4366bf51fb245f5cd1e2bd7721cbf03c
9f35a91ce7d38880d412e041bc1925f764a86202
11e22acfd959a360ddfad43c2ef7ef0aaa07b5841f7ce9a23d2835cfe12b196d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2010
Cache-Control: max-age=137691
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 08:25:40 GMT
Etag: "63e17a05-116"
Expires: Wed, 08 Feb 2023 22:40:31 GMT
Last-Modified: Mon, 06 Feb 2023 22:07:01 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 278
pixel.empdat.com/offers/5457?transaction_id=35656_393091
404 Not Found 9 B URL HTTP/2 pixel.empdat.com/offers/5457?transaction_id=35656_393091
IP
File type ASCII text, with no line terminators
Hash 9d1ead73e678fa2f51a70a933b0bf017
d205cbd6783332a212c5ae92d73c77178c2d2f28
0019dfc4b32d63c1392aa264aed2253c1e0c2fb09216f8e2cc269bbfb8bb49b5
GET /offers/5457?transaction_id=35656_393091 HTTP/1.1
Host: pixel.empdat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
content-type: text/plain
content-length: 9
date: Tue, 07 Feb 2023 08:25:40 GMT
x-amzn-requestid: 796554f9-3df3-42a7-b226-a170a1049284
x-amz-apigw-id: f9aosG-WliAFl8g=
x-amzn-trace-id: Root=1-63e20b04-18b0055913a5748e74555016;Sampled=0
x-cache: Error from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: -cHX_BuxA8y8ZmK42OySfLdDRaU_BvyQ7fjUYC2eWddX4Sd15kh54Q==
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 9b5612203e15c80e0df8d4ca4a08eb19
aa323cc25832d7ae39efe060f4508c40406f78fc
c5d746d4aa219acbdd128c3009f943cacffd29bd134215021d8b505e3b64f4b5
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "C5D746D4AA219ACBDD128C3009F943CACFFD29BD134215021D8B505E3B64F4B5"
Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11635
Expires: Tue, 07 Feb 2023 11:39:35 GMT
Date: Tue, 07 Feb 2023 08:25:40 GMT
Connection: keep-alive
e1.o.lencr.org/
200 OK 346 B IP
ASN #20940 Akamai International B.V.
Hash 1ee95092a0c7a4aab12cfe3c66d1733b
ebe8723cace6c8f16548ddc50463c6a54d55342e
728c0bfcb504323cd79729812e02626d531164c1fe41de2bc5b02284738762d5
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "728C0BFCB504323CD79729812E02626D531164C1FE41DE2BC5B02284738762D5"
Last-Modified: Sun, 05 Feb 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16272
Expires: Tue, 07 Feb 2023 12:56:52 GMT
Date: Tue, 07 Feb 2023 08:25:40 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash ad2d72821808ee5f77c0598fed0f8bd1
adcd92881d1c5ac3cca4687dc6347369240f4726
c7ce86611bf0b0063c0bcb2c6a6a4b85fe6be2d89e382b8907e8bbb2e1e5962d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 08:25:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 0d2201d98cd59c01923fab2d8c9b4e20
c2757160cf8032e7203165009e83a84625d7ea13
6e9009bd6358fd5b43e0c78d85756c970d5bc9a4bdbecad6cc1734e3375e5c6f
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=162912
Date: Tue, 07 Feb 2023 08:25:40 GMT
Etag: "63e1db27-1d7"
Expires: Thu, 09 Feb 2023 05:40:52 GMT
Last-Modified: Tue, 07 Feb 2023 05:01:27 GMT
Server: ECS (bsa/EB19)
X-Cache: Miss from cloudfront
Via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: uFJRifsAGrC6fjbNMWes7v6x_GRVKpAEPxog1TtrU_Wxv2lxgQ_OMw==
Age: 2365
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 2e74c18fed05f93f55c713e73cf3c9e7
76db0119e2755054ae7596bc2c0fb4c6a785bb89
ca527e03822dde8524d9a30badf9bbf071eea4de27dd44dab182a879c0b40709
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 07 Feb 2023 08:25:40 GMT
Etag: "63e137eb-1d7"
Last-Modified: Tue, 07 Feb 2023 07:55:33 GMT
Server: ECS (dcb/7F18)
X-Cache: Miss from cloudfront
Via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: jFpcsKBdG8vdVLWhBpoAqcQGquaz1IoTKRPVg9wzSr4UKZKmnryRGA==
Age: 1807
e1.o.lencr.org/
200 OK 346 B IP
ASN #20940 Akamai International B.V.
Hash 1ee95092a0c7a4aab12cfe3c66d1733b
ebe8723cace6c8f16548ddc50463c6a54d55342e
728c0bfcb504323cd79729812e02626d531164c1fe41de2bc5b02284738762d5
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "728C0BFCB504323CD79729812E02626D531164C1FE41DE2BC5B02284738762D5"
Last-Modified: Sun, 05 Feb 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16272
Expires: Tue, 07 Feb 2023 12:56:52 GMT
Date: Tue, 07 Feb 2023 08:25:40 GMT
Connection: keep-alive
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 0d2201d98cd59c01923fab2d8c9b4e20
c2757160cf8032e7203165009e83a84625d7ea13
6e9009bd6358fd5b43e0c78d85756c970d5bc9a4bdbecad6cc1734e3375e5c6f
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=164911
Date: Tue, 07 Feb 2023 08:25:40 GMT
Etag: "63e1db27-1d7"
Expires: Thu, 09 Feb 2023 06:14:11 GMT
Last-Modified: Tue, 07 Feb 2023 05:01:27 GMT
Server: ECS (nyb/1D0C)
X-Cache: Miss from cloudfront
Via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 1kjvtn77J_o0J-wSzTA-zfpKP_PIZnd6maX3mF9CehUtwywMNxwXUA==
Age: 4364
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 9b5612203e15c80e0df8d4ca4a08eb19
aa323cc25832d7ae39efe060f4508c40406f78fc
c5d746d4aa219acbdd128c3009f943cacffd29bd134215021d8b505e3b64f4b5
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "C5D746D4AA219ACBDD128C3009F943CACFFD29BD134215021D8B505E3B64F4B5"
Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11635
Expires: Tue, 07 Feb 2023 11:39:35 GMT
Date: Tue, 07 Feb 2023 08:25:40 GMT
Connection: keep-alive
backoffice.regily.com/releases?new=true&partner=doggocasino&env=stable
200 OK 1.3 kB URL HTTP/2 backoffice.regily.com/releases?new=true&partner=doggocasino&env=stable
IP
File type gzip compressed data, from Unix\012- data
Hash 8e579223970e2fe05200133b062ea7a8
65ee9144f966a1b6c77cd67ff43489ee9ceb38e6
24d61fc27341bef813a2c8916e040a6b99f77021bd316d1b89af5f7894c8a8d7
GET /releases?new=true&partner=doggocasino&env=stable HTTP/1.1
Host: backoffice.regily.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://doggocasino.com
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 07 Feb 2023 08:25:40 GMT
content-type: application/json; charset=utf-8
content-length: 2
x-amzn-requestid: 58742996-8ab9-4331-b038-b63585d93f2b
x-dns-prefetch-control: off
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=15552000; includeSubDomains
x-ratelimit-reset: 1675758394
x-amzn-remapped-content-length: 2
x-frame-options: SAMEORIGIN
allow: GET,POST,PUT,PATCH,DELETE
x-amzn-remapped-connection: keep-alive
x-download-options: noopen
x-ratelimit-remaining: 99
x-amz-apigw-id: f9aouElljoEFSZg=
vary: Accept, Accept-Encoding
x-ratelimit-limit: 100
x-content-type-options: nosniff
etag: W/"2-vyGp6PvFo4RvsFtPoIWeCReyIC8"
x-amzn-trace-id: Root=1-63e20b04-7e6447f6213cbc7c14aae9d9
x-amzn-remapped-date: Tue, 07 Feb 2023 08:25:40 GMT
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash 4366bf51fb245f5cd1e2bd7721cbf03c
9f35a91ce7d38880d412e041bc1925f764a86202
11e22acfd959a360ddfad43c2ef7ef0aaa07b5841f7ce9a23d2835cfe12b196d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2010
Cache-Control: max-age=137691
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 08:25:40 GMT
Etag: "63e17a05-116"
Expires: Wed, 08 Feb 2023 22:40:31 GMT
Last-Modified: Mon, 06 Feb 2023 22:07:01 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 278
geo-lookup.iconvert.network/?callback=_jsonp_0
200 OK 23 B URL HTTP/2 geo-lookup.iconvert.network/?callback=_jsonp_0
IP
File type ASCII text, with no line terminators
Hash 77a2b27581b0e6f8e1866d12a9fb3460
0d6912f1aabf2f9f191883767a565846b6b23387
892b6da823563cbd0865b33fd6f805e495769f555aa11679fa72c82e56abe9fd
GET /?callback=_jsonp_0 HTTP/1.1
Host: geo-lookup.iconvert.network
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 23
x-amz-bucket-region: us-east-1
date: Tue, 07 Feb 2023 08:25:10 GMT
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: QSTaEIdF6bDi0HcCxnldNMz2cbH4moqvdxNCYWNgwFAKo9MOKqm8cA==
age: 29
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 856ee717aec08efb3a9e22747c257070
42a6ed891bdfa1e130350375450c38f3d8adbbc8
c7400ed9b269e4a509123c00c576fc40aee7cdcbc04044b3ed1dd9c7a5476b76
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 Feb 2023 08:25:40 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 05 Feb 2023 12:28:44 GMT
Expires: Sun, 12 Feb 2023 12:28:43 GMT
Etag: "42a6ed891bdfa1e130350375450c38f3d8adbbc8"
Cache-Control: max-age=445982,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 795abc7cd9d5b4f9-OSL
cmsapi.doggocasino.com/ajax/country/countryblock
200 OK 177 B URL HTTP/1.1 cmsapi.doggocasino.com/ajax/country/countryblock
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 84a5fedf11ca403c40bcc33c089efabe
2e920993f57a1596c8c26b0e1b8b076458b25994
3873db006fd547eb926c6604f46a926e298eeaa909f6a667d2872f8237f3fc93
GET /ajax/country/countryblock HTTP/1.1
Host: cmsapi.doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://doggocasino.com
Connection: keep-alive
Referer: https://doggocasino.com/
Cookie: _ga_K4EHGY5F0T=GS1.1.1675758389.1.0.1675758389.60.0.0; _ga=GA1.1.1511094843.1675758389
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 Feb 2023 08:25:40 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Methods: GET, POST, OPTIONS, PUT, DELETE
Access-Control-Allow-Origin: https://doggocasino.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Request-ID,X-REQ-ID,Authorization,X-MGS-BusinessUnit,Accept-Language
Set-Cookie: ci_session=0u3otkbqvgmoo8l61a088rskqiovo788; expires=Tue, 07-Feb-2023 09:25:40 GMT; Max-Age=3600; path=/; SameSite=None; secure; HttpOnly
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Language: en
Vary: Accept-Encoding, Accept-Encoding
Content-Encoding: gzip
ocsp.digicert.com/
200 OK 279 B IP
Hash 6e056c8e84424421e66f03b9e054a869
2238a98003a57861f4283c8cf2b81468d1855ed2
86ff1069e194a1318037e89e513a6f9ccbe89911f654b2d35f7f2ac8626f3f1a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4988
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 08:25:40 GMT
Last-Modified: Tue, 07 Feb 2023 07:02:32 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 279
cmsapi.doggocasino.com/ajax/policy/getPolicies
200 OK 197 B URL HTTP/1.1 cmsapi.doggocasino.com/ajax/policy/getPolicies
IP
File type JSON data\012- , ASCII text, with very long lines (475), with no line terminators
Hash 3d71629c07dc044ad909dc8e02f1f27c
3ff809845e7d55d7067bee6e645c6e5b7e7fb85f
72efb757aa046854ca03633e888c7358311e12b3b4020d2e808fed3ed1a0b20e
GET /ajax/policy/getPolicies HTTP/1.1
Host: cmsapi.doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://doggocasino.com
Connection: keep-alive
Referer: https://doggocasino.com/
Cookie: _ga_K4EHGY5F0T=GS1.1.1675758389.1.0.1675758389.60.0.0; _ga=GA1.1.1511094843.1675758389; ci_session=0u3otkbqvgmoo8l61a088rskqiovo788
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 Feb 2023 08:25:40 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Methods: GET, POST, OPTIONS, PUT, DELETE
Access-Control-Allow-Origin: https://doggocasino.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Request-ID,X-REQ-ID,Authorization,X-MGS-BusinessUnit,Accept-Language
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: ci_session=0u3otkbqvgmoo8l61a088rskqiovo788; expires=Tue, 07-Feb-2023 09:25:40 GMT; Max-Age=3600; path=/; SameSite=None; secure; HttpOnly
Content-Language: en
Vary: Accept-Encoding, Accept-Encoding
Content-Encoding: gzip
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 13c9a141bd374371ea3a25c7a8c85c11
3ebf0fa6e2e45db08c20164c96ff9a1fac5189ca
0595987799279a6c2660aee0939875563b0761ce2d1cd1d2f40964de0bd86b70
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 07 Feb 2023 08:25:40 GMT
Last-Modified: Tue, 07 Feb 2023 07:08:53 GMT
Server: ECS (nyb/1D1B)
X-Cache: Miss from cloudfront
Via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: mWCOlEq5P09t_b_lsZS02OqOrseQLEOiEMONiA-mapWVSnuor0Q9_A==
Age: 4607
cdn.iconvert.network/code/9f66804e-a360-401a-966a-3d11f064f2f2.js
200 OK 4.6 kB URL HTTP/2 cdn.iconvert.network/code/9f66804e-a360-401a-966a-3d11f064f2f2.js
IP
Hash bc6ab1b79f2b85204956fcbe5ba6040b
068d1bb9868b5667a5fa40c92f7cb58b302900ad
fd347403a8897cc4c1267fd2bae31710a126493939ec8ba5488e102b16c2de89
GET /code/9f66804e-a360-401a-966a-3d11f064f2f2.js HTTP/1.1
Host: cdn.iconvert.network
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Thu, 19 Jan 2023 14:15:25 GMT
server: AmazonS3
content-encoding: gzip
date: Tue, 07 Feb 2023 07:43:36 GMT
cache-control: max-age=7200
etag: W/"fe18a616aeaeeab3aac82bba12f10b44"
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: Y7JGY-L3IgnLCfaEBhvwEbU46O-DuvJCOjzc7VwUF9i1vJVW-clMIQ==
age: 2525
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Roboto:wght@400;700
200 OK 1.2 kB URL HTTP/2 fonts.googleapis.com/css2?family=Roboto:wght@400;700
IP
File type ASCII text, with very long lines (5550)
Hash 407be8f1b4967add368c4ead14c339dc
710f853aa60b0349b37228d09112e9cdf60b7d7c
d256a5d14045a5935cca1f4841857024c1ab03b2be7efff5c8ce6df4c505e4ba
GET /css2?family=Roboto:wght@400;700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 07 Feb 2023 08:25:40 GMT
date: Tue, 07 Feb 2023 08:25:40 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
event.iconvert.network/com.snowplowanalytics.snowplow/tp2
200 OK 0 B URL HTTP/2 event.iconvert.network/com.snowplowanalytics.snowplow/tp2
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /com.snowplowanalytics.snowplow/tp2 HTTP/1.1
Host: event.iconvert.network
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://doggocasino.com/
Origin: https://doggocasino.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 07 Feb 2023 08:25:41 GMT
content-length: 0
access-control-allow-origin: https://doggocasino.com
access-control-allow-credentials: true
access-control-allow-headers: Content-Type
access-control-max-age: 5
server: akka-http/10.0.9
X-Firefox-Spdy: h2
www.predictionds.com/jump/next.php?r=2883479&pub_clickid=23020709_01_251613_eb5ff9872b2fa&sub1=1310_&affe=fss
200 OK 2.7 kB URL HTTP/2 www.predictionds.com/jump/next.php?r=2883479&pub_clickid=23020709_01_251613_eb5ff9872b2fa&sub1=1310_&affe=fss
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash fe31dcbcb1759d4f75adaa3a2e345254
8bedbde695fefd2a342063fc16b169c5fad0f1cf
9ee6e174e9d8e48c0b4aa869efc10dff6884a2fd501d39b2649b9ea4738b1977
GET /jump/next.php?r=2883479&pub_clickid=23020709_01_251613_eb5ff9872b2fa&sub1=1310_&affe=fss HTTP/1.1
Host: www.predictionds.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: openresty
date: Tue, 07 Feb 2023 08:25:38 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash afe7db92a730b1a76bed3113f60da924
531e2ba6a5907332e9e77fdcc2d88da9adb5f703
04534a7ebb8a6583102a0a532496c38d09b744572f1d01a5da952ff4a2b9825f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 08:25:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cmsapi.doggocasino.com/ajax/Faq/getQuestions?lang=no
200 OK 6.9 kB URL HTTP/1.1 cmsapi.doggocasino.com/ajax/Faq/getQuestions?lang=no
IP
File type JSON data\012- , ASCII text, with very long lines (50212), with no line terminators
Hash 46712c8114b6b2df3f50d69f2c7f96f5
ba2ea03bba7ff2af9f432739a774496d4eef540a
854ab5787fc1cefb0da2eb75c4b09de68cabf38a0738bb133964b542e9ef20ac
GET /ajax/Faq/getQuestions?lang=no HTTP/1.1
Host: cmsapi.doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://doggocasino.com
Connection: keep-alive
Referer: https://doggocasino.com/
Cookie: _ga_K4EHGY5F0T=GS1.1.1675758389.1.0.1675758389.60.0.0; _ga=GA1.1.1511094843.1675758389; ci_session=0u3otkbqvgmoo8l61a088rskqiovo788
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 Feb 2023 08:25:41 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Methods: GET, POST, OPTIONS, PUT, DELETE
Access-Control-Allow-Origin: https://doggocasino.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Request-ID,X-REQ-ID,Authorization,X-MGS-BusinessUnit,Accept-Language
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: ci_session=0u3otkbqvgmoo8l61a088rskqiovo788; expires=Tue, 07-Feb-2023 09:25:41 GMT; Max-Age=3600; path=/; SameSite=None; secure; HttpOnly
Content-Encoding: gzip
cmsapi.doggocasino.com/ajax/staticPage/getPage?url_path=footer-no&language=no
200 OK 1.4 kB URL HTTP/1.1 cmsapi.doggocasino.com/ajax/staticPage/getPage?url_path=footer-no&language=no
IP
File type JSON data\012- HTML document, ASCII text, with very long lines (6630), with no line terminators
Hash abe2b784416270dc10848a25fa24f334
239929c2344a6caf292d4f5a7b3cd6a64e75baba
c16c585bd6e050e3a8dfe0d53330161789f3b5a564613576d1a5c258be58ef15
GET /ajax/staticPage/getPage?url_path=footer-no&language=no HTTP/1.1
Host: cmsapi.doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://doggocasino.com
Connection: keep-alive
Referer: https://doggocasino.com/
Cookie: _ga_K4EHGY5F0T=GS1.1.1675758389.1.0.1675758389.60.0.0; _ga=GA1.1.1511094843.1675758389; ci_session=0u3otkbqvgmoo8l61a088rskqiovo788
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 Feb 2023 08:25:41 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Methods: GET, POST, OPTIONS, PUT, DELETE
Access-Control-Allow-Origin: https://doggocasino.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Request-ID,X-REQ-ID,Authorization,X-MGS-BusinessUnit,Accept-Language
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: ci_session=0u3otkbqvgmoo8l61a088rskqiovo788; expires=Tue, 07-Feb-2023 09:25:41 GMT; Max-Age=3600; path=/; SameSite=None; secure; HttpOnly
Content-Language: en
Vary: Accept-Encoding, Accept-Encoding
Content-Encoding: gzip
cmsapi.doggocasino.com/ajax/staticPage/getPage?url_path=game-header-filter-data&language=no
200 OK 787 B URL HTTP/1.1 cmsapi.doggocasino.com/ajax/staticPage/getPage?url_path=game-header-filter-data&language=no
IP
File type JSON data\012- , ASCII text, with very long lines (4044), with no line terminators
Hash b0cee8610450eecc568afdbed759fc7f
addd0c1c653d9aa9c1bdce67d3418ad4994ca620
922d29e0f56d5a3799bb0bfd4e98f182827b6238418f86d1c67034ed47034a70
GET /ajax/staticPage/getPage?url_path=game-header-filter-data&language=no HTTP/1.1
Host: cmsapi.doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://doggocasino.com
Connection: keep-alive
Referer: https://doggocasino.com/
Cookie: _ga_K4EHGY5F0T=GS1.1.1675758389.1.0.1675758389.60.0.0; _ga=GA1.1.1511094843.1675758389; ci_session=0u3otkbqvgmoo8l61a088rskqiovo788
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 Feb 2023 08:25:41 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Methods: GET, POST, OPTIONS, PUT, DELETE
Access-Control-Allow-Origin: https://doggocasino.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Request-ID,X-REQ-ID,Authorization,X-MGS-BusinessUnit,Accept-Language
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: ci_session=0u3otkbqvgmoo8l61a088rskqiovo788; expires=Tue, 07-Feb-2023 09:25:41 GMT; Max-Age=3600; path=/; SameSite=None; secure; HttpOnly
Content-Language: en
Vary: Accept-Encoding, Accept-Encoding
Content-Encoding: gzip
for-j.com/tds3.html?ymid=167575833810000TNOTV415326358024Vb7&zoneid=5460782&subid=2883479-3116811349-0&sourceid=315519420&tt=2
200 OK 1.1 kB URL HTTP/2 for-j.com/tds3.html?ymid=167575833810000TNOTV415326358024Vb7&zoneid=5460782&subid=2883479-3116811349-0&sourceid=315519420&tt=2
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash f884defce04c2f99eb858e99d92bcb54
496ce54ff99e0dc4b0903e8c9363ec89329f692a
b3b86256eb6a370f688abb429bf51c8ba78496a1baad8a1c122012949e7a7ba5
GET /tds3.html?ymid=167575833810000TNOTV415326358024Vb7&zoneid=5460782&subid=2883479-3116811349-0&sourceid=315519420&tt=2 HTTP/1.1
Host: for-j.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 07 Feb 2023 08:25:38 GMT
content-type: text/html
last-modified: Wed, 02 Nov 2022 11:31:57 GMT
cf-cache-status: HIT
age: 269364
expires: Fri, 10 Mar 2023 08:25:38 GMT
cache-control: public, max-age=2678400
vary: Accept-Encoding
server: cloudflare
cf-ray: 795abc70ad05b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
event.iconvert.network/com.snowplowanalytics.snowplow/tp2
200 OK 2 B URL HTTP/2 event.iconvert.network/com.snowplowanalytics.snowplow/tp2
IP
File type ASCII text, with no line terminators
Hash 444bcb3a3fcf8389296c49467f27e1d6
7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1
Host: event.iconvert.network
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
Content-Length: 718
Origin: https://doggocasino.com
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 08:25:41 GMT
content-type: text/plain; charset=UTF-8
content-length: 2
set-cookie: sp=a024de02-82ef-43c2-b2b4-785afafc84ac; Expires=Wed, 07 Feb 2024 08:25:41 GMT; Path=/
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA"
access-control-allow-origin: https://doggocasino.com
access-control-allow-credentials: true
server: akka-http/10.0.9
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/help-center.svg
200 OK 1.3 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/help-center.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1425)
Hash 8ebcd55a704acfdea2f05099cb4ef0df
dccec8929792df80545f7457d551ae69e96abf25
52f1da3a771e6c90e31cb18a055e7d628f2e5348f0283f31bf12e527de36bdd0
GET /uploads/media/DOC/home/help-center.svg HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 09 Nov 2022 10:28:05 GMT
content-encoding: gzip
server: imgix
x-imgix-id: c806f95492c0c281a72bb030680453ab3e699545
x-imgix-render-farm: 02.552
date: Tue, 07 Feb 2023 08:25:41 GMT
age: 2471634
accept-ranges: bytes
content-type: image/svg+xml
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10079-SJC, cache-hel1410027-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
content-length: 1334
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/email.svg
200 OK 410 B URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/email.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (389)
Hash 4aa06574f6d5747d01ce9e33fd04b1f6
7f257379469b709edf5f7549dd96ea9e32823fac
2ce71f357be50492b93cd94e28d0f604ad5fa8a99d706537d4a2d8f40e21fc05
GET /uploads/media/DOC/home/email.svg HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 22 Jun 2022 15:01:49 GMT
content-encoding: gzip
server: imgix
x-imgix-id: e8de387f43949f0ed9cb57ab3f51e59e0e30bb18
x-imgix-render-farm: 01.1064
date: Tue, 07 Feb 2023 08:25:41 GMT
age: 1811401
accept-ranges: bytes
content-type: image/svg+xml
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10026-SJC, cache-hel1410027-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
content-length: 410
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/pragmatic-play.png
200 OK 10 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/pragmatic-play.png
IP
File type PNG image data, 276 x 138, 8-bit/color RGBA, non-interlaced\012- data
Hash 22799434150dca8d59bf7733f74db4b6
ff7b186d5249e3061a07724a50c9cc3f2b6e2aa1
23ed44cd444692fa3e48eb345878f1e394fbedcb34f26d3906b0ab1fe958d6a9
GET /uploads/media/DOC/home/pragmatic-play.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Tue, 15 Nov 2022 14:20:10 GMT
server: imgix
x-imgix-id: 0279be2c12197f837606a46b183386238670fa5b
x-imgix-render-farm: 02.552
date: Tue, 07 Feb 2023 08:25:41 GMT
age: 2482319
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10039-SJC, cache-hel1410027-HEL
x-cache: HIT, HIT
content-length: 10517
X-Firefox-Spdy: h2
doggocasino.com/assets/images/HeroBottom.webp
200 OK 8.6 kB URL HTTP/2 doggocasino.com/assets/images/HeroBottom.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash e7ca3e477ff57d76894214575d55ad47
e81dfea1456367bfb5a43735f377ef8d90ba9445
86b4f03b03f70a75fb273131f57ea8ec7c750f55ebb73f7acfe285b1c1df3e26
GET /assets/images/HeroBottom.webp HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/no-no?affiliateName=%5Bcellxpert%5D&affid=cx-35656_393091&bannerid=35656&trackerid=35656_393091&brand=doggocasino&bta=35656&rdk=rk3
Cookie: _ga_K4EHGY5F0T=GS1.1.1675758389.1.0.1675758389.60.0.0; _ga=GA1.1.1511094843.1675758389; __adm_tid=tid-274fbbe92.366b3a956; affiliateId=cx-35656_393091; bannerId=35656; trackerId=35656_393091; affiliateName=%5Bcellxpert%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 8556
x-amz-meta-codebuild-content-sha256: 4f853d18badd3933524ca4a1dd6240279e0051fb38905b83f18834b4b93aaeb1
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:08219a5d-0b7c-4ae2-afb4-2507533d271d
x-amz-meta-codebuild-content-md5: 319cfed7654cbf4a61d9a3eabce3d2f4
last-modified: Fri, 03 Feb 2023 09:41:10 GMT
x-amz-version-id: n6sfRcR8khIp6_qgw41zU_a7X7YavhlN
server: AmazonS3
date: Mon, 06 Feb 2023 10:09:25 GMT
etag: "e7ca3e477ff57d76894214575d55ad47"
vary: Accept-Encoding
via: 1.1 269b0fad85dfd450220cf6573a2d384e.cloudfront.net (CloudFront)
age: 80176
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: y4hz-BmANRf9AgI_zJjo8IaR8CkTMGPOgAv3g8QTDuAiy_Ec_LN2Bw==
X-Firefox-Spdy: h2
cmsapi.doggocasino.com/languages/DOC/no.json
200 OK 26 kB URL HTTP/1.1 cmsapi.doggocasino.com/languages/DOC/no.json
IP
File type JSON data\012- HTML document, Unicode text, UTF-8 text, with very long lines (2182), with CRLF line terminators
Hash 1219d866e83bb2b04dfc3dca0fdd5ac7
ce50b073683a0e73e9053688c1862d93fa1493ca
18e7a8f2eb7ea269f749e2fa35b8065b160c918b287912ab0392b699fdbc8632
GET /languages/DOC/no.json HTTP/1.1
Host: cmsapi.doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://doggocasino.com
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 Feb 2023 08:25:41 GMT
Content-Type: application/json
Last-Modified: Fri, 03 Feb 2023 14:27:38 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63dd19da-1e407"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS, HEAD
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,x-prerender,x-req-id
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
cmsapi.doggocasino.com/ajax/promotion/getPromotions?languageId=no
200 OK 8.2 kB URL HTTP/1.1 cmsapi.doggocasino.com/ajax/promotion/getPromotions?languageId=no
IP
File type JSON data\012- HTML document text\012- HTML document, ASCII text, with very long lines (33857), with no line terminators
Hash d64eecba84c20376a2d02ee5bf3ab80d
a54382a3f7d727986f723fe8d7fb6323ed88e589
dbdad47242cd125b2b59b5280c4f4f9c069bf75cd735d542aad9e302301e1e2c
GET /ajax/promotion/getPromotions?languageId=no HTTP/1.1
Host: cmsapi.doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://doggocasino.com
Connection: keep-alive
Referer: https://doggocasino.com/
Cookie: _ga_K4EHGY5F0T=GS1.1.1675758389.1.0.1675758389.60.0.0; _ga=GA1.1.1511094843.1675758389; ci_session=0u3otkbqvgmoo8l61a088rskqiovo788
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 Feb 2023 08:25:41 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Methods: GET, POST, OPTIONS, PUT, DELETE
Access-Control-Allow-Origin: https://doggocasino.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Request-ID,X-REQ-ID,Authorization,X-MGS-BusinessUnit,Accept-Language
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: ci_session=0u3otkbqvgmoo8l61a088rskqiovo788; expires=Tue, 07-Feb-2023 09:25:41 GMT; Max-Age=3600; path=/; SameSite=None; secure; HttpOnly
Content-Encoding: gzip
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/deposit.svg
200 OK 650 B URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/deposit.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (782)
Hash ca812eca4d915271b2e433e47965572d
ad6042ddb3c5a74d706929cc9b0dde2f4388eccc
e00b74a45064d746f4eb3ed3be367b512638632d7549b2c724878603b94fb0c4
GET /uploads/media/DOC/home/deposit.svg HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 22 Jun 2022 15:01:49 GMT
content-encoding: gzip
server: imgix
x-imgix-id: 13b7a2d55e87294bf13a6a884866ef05bc1cbc0d
x-imgix-render-farm: 01.1064
date: Tue, 07 Feb 2023 08:25:41 GMT
age: 5874800
accept-ranges: bytes
content-type: image/svg+xml
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10066-SJC, cache-hel1410027-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
content-length: 650
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/safety.svg
200 OK 1.1 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/safety.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1535)
Hash f4bceb3b835f466f7e3c3e31f22996da
7795f48b8e4ea4ee227f3e2c0a7490f1a0e6e576
9af7e809decc127848a79a3425ddec9855db28d150f935ada5de2a4f6d9775d4
GET /uploads/media/DOC/home/safety.svg HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 09 Nov 2022 10:28:05 GMT
content-encoding: gzip
server: imgix
x-imgix-id: 3efeba0cea6918bc3ac3c389420eb383314a5d1c
x-imgix-render-farm: 02.552
date: Tue, 07 Feb 2023 08:25:41 GMT
age: 5429466
accept-ranges: bytes
content-type: image/svg+xml
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10052-SJC, cache-hel1410027-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
content-length: 1096
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/withdrawals.svg
200 OK 635 B URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/withdrawals.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (738)
Hash 5cd653c6fe5eb1505ad2a9087ba43269
84a96f045d5cb4120d9074b6ab0cde7aee8a590b
6e1284f6e02ae5b5330b39440f2d9dc20610de477104b0e7aedfa9925fde8f1c
GET /uploads/media/DOC/home/withdrawals.svg HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 22 Jun 2022 15:01:49 GMT
content-encoding: gzip
server: imgix
x-imgix-id: e4311d3383c2ad74f7ba1374c5b43d24298d30ba
x-imgix-render-farm: 01.1064
date: Tue, 07 Feb 2023 08:25:41 GMT
age: 2478971
accept-ranges: bytes
content-type: image/svg+xml
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10035-SJC, cache-hel1410027-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
content-length: 635
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/ripple-new.png
200 OK 2.9 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/ripple-new.png
IP
File type PNG image data, 165 x 168, 8-bit colormap, non-interlaced\012- data
Hash 2aef5169d3eefdcac4fa852082d208c7
ef02e2b0d695d24bb8ca48fe6101dc118703d4ea
761cc6f5576279ba59dbe0ed38d8faae2291c1cb658ac6d4425e6d0274360b2b
GET /uploads/media/DOC/home/ripple-new.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Tue, 15 Nov 2022 11:28:36 GMT
server: imgix
x-imgix-id: e90fed76cf492faeb28f74615e2705b2680a5245
x-imgix-render-farm: 02.552
date: Tue, 07 Feb 2023 08:25:41 GMT
age: 2420507
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10059-SJC, cache-hel1410027-HEL
x-cache: HIT, HIT
content-length: 2921
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/etr-new.png
200 OK 5.1 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/etr-new.png
IP
File type PNG image data, 165 x 168, 8-bit/color RGBA, non-interlaced\012- data
Hash 5ede2b5b941cae8778d7dfa1354b6f10
6f02fcc2a92339e5bb2eb0a96962f89513ac7922
826c3ed09f7501644f305aebf992d904f308bbae1f25e5449d02de013d5a3fdb
GET /uploads/media/DOC/home/etr-new.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Mon, 08 Aug 2022 06:13:29 GMT
server: imgix
x-imgix-id: 3b2ead74ea6cd94bfd31a9fdc7776d9a0bcae2b0
x-imgix-render-farm: 01.1064
date: Tue, 07 Feb 2023 08:25:41 GMT
age: 1879504
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10030-SJC, cache-hel1410027-HEL
x-cache: HIT, HIT
content-length: 5095
X-Firefox-Spdy: h2
doggocasino.com/assets/images/banner/banner-desktop.webp
200 OK 78 kB URL HTTP/2 doggocasino.com/assets/images/banner/banner-desktop.webp
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1917x602, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash bc3a30c00fa79b2656a24cad032aadd9
643021f5fcb6bc3ee3df627b5ec52133a54f448d
8e9c830b777176c1c96cafa9df0014f8a6db2a953524884b67ab5281df9dc2b1
GET /assets/images/banner/banner-desktop.webp HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/en-us?affiliateName=[cellxpert]&affid=cx-35656_393091&bannerid=35656&trackerid=35656_393091&brand=doggocasino&bta=35656&rdk=rk3
Cookie: _ga_K4EHGY5F0T=GS1.1.1675758389.1.0.1675758389.60.0.0; _ga=GA1.1.1511094843.1675758389; __adm_tid=tid-274fbbe92.366b3a956; affiliateId=cx-35656_393091; bannerId=35656; trackerId=35656_393091; affiliateName=%5Bcellxpert%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 78070
date: Mon, 06 Feb 2023 17:31:35 GMT
x-amz-meta-codebuild-content-sha256: 4f853d18badd3933524ca4a1dd6240279e0051fb38905b83f18834b4b93aaeb1
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:08219a5d-0b7c-4ae2-afb4-2507533d271d
x-amz-meta-codebuild-content-md5: 319cfed7654cbf4a61d9a3eabce3d2f4
last-modified: Fri, 03 Feb 2023 09:41:07 GMT
x-amz-version-id: 1R8hWN_XnN91nyaPw26x5X5Vt1ltWzA4
etag: "bc3a30c00fa79b2656a24cad032aadd9"
server: AmazonS3
via: 1.1 269b0fad85dfd450220cf6573a2d384e.cloudfront.net (CloudFront)
age: 53647
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: nHxI-eU8mEE_SeAewmYbUyabt7wsJjevZYhi8iE2xgSN1ff--VOorg==
X-Firefox-Spdy: h2
doggocasino.com/assets/fonts/CeraPro/Cera_Pro_Bold.otf
200 OK 189 kB URL HTTP/2 doggocasino.com/assets/fonts/CeraPro/Cera_Pro_Bold.otf
IP
File type OpenType font data\012- data
Size 189 kB (189056 bytes)
Hash 07ac815392d30140366e0a9df7f769e8
baa64ee6efc7331cbe288054213ae1eb3d4836a1
ca2bcc9e894e0a755a49f8d264bed726717c0033e6f2dcc8e888bf80ac57bbaa
GET /assets/fonts/CeraPro/Cera_Pro_Bold.otf HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/styles.6fe09080dd4bc8174585.css
Cookie: _ga_K4EHGY5F0T=GS1.1.1675758389.1.0.1675758389.60.0.0; _ga=GA1.1.1511094843.1675758389; __adm_tid=tid-274fbbe92.366b3a956; affiliateId=cx-35656_393091; bannerId=35656; trackerId=35656_393091; affiliateName=%5Bcellxpert%5D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 189056
x-amz-meta-codebuild-content-sha256: 4f853d18badd3933524ca4a1dd6240279e0051fb38905b83f18834b4b93aaeb1
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:08219a5d-0b7c-4ae2-afb4-2507533d271d
x-amz-meta-codebuild-content-md5: 319cfed7654cbf4a61d9a3eabce3d2f4
last-modified: Fri, 03 Feb 2023 09:41:13 GMT
x-amz-version-id: hfSJd_1NlHPLjzcPzm2YDuWZ4eCkzco_
server: AmazonS3
date: Mon, 06 Feb 2023 10:12:40 GMT
etag: "07ac815392d30140366e0a9df7f769e8"
vary: Accept-Encoding
via: 1.1 269b0fad85dfd450220cf6573a2d384e.cloudfront.net (CloudFront)
age: 79982
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: O_dpjTtrpkMmgoIjNWiR4OyfGNn5Juf_l86BBau4u13ePDrr3vF36Q==
X-Firefox-Spdy: h2
stats.g.doubleclick.net/g/collect?v=2&tid=G-K4EHGY5F0T&cid=1511094843.1675758389>m=45je3210&aip=1
204 No Content 0 B URL HTTP/2 stats.g.doubleclick.net/g/collect?v=2&tid=G-K4EHGY5F0T&cid=1511094843.1675758389>m=45je3210&aip=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-K4EHGY5F0T&cid=1511094843.1675758389>m=45je3210&aip=1 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://doggocasino.com
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://doggocasino.com
date: Tue, 07 Feb 2023 08:25:41 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/visa.png
200 OK 10 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/visa.png
IP
File type PNG image data, 156 x 156, 8-bit/color RGBA, non-interlaced\012- data
Hash 9c283e2c4040566cd8ad97b5866c9537
c61dd5f44d2f6473aeb0a71729928c5b94f5b623
349173c164101e5a60336be685e50f70df22ddcf0b84a87450bbfecc247b9d64
GET /uploads/media/DOC/home/visa.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Thu, 04 Aug 2022 10:16:05 GMT
server: imgix
x-imgix-id: 88dac5105999550cdf9409d7adb98c4a18b289bd
x-imgix-render-farm: 01.1064
date: Tue, 07 Feb 2023 08:25:41 GMT
age: 1193188
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10080-SJC, cache-hel1410027-HEL
x-cache: HIT, HIT
content-length: 10038
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/dcs.png
200 OK 3.0 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/dcs.png
IP
File type PNG image data, 156 x 156, 8-bit colormap, non-interlaced\012- data
Hash 033e64d307fcfd62be869c5de0721c66
a2307ba759c902a98ec8af557f677929d2c0e28d
23050464c99491bdbff255e380dffcc5dbd1f69dffb401dc837dd3da9cfbcd54
GET /uploads/media/DOC/home/dcs.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Thu, 10 Nov 2022 08:39:47 GMT
server: imgix
x-imgix-id: 9ccc09c26693529650325830f9d0fe7f294a61f2
x-imgix-render-farm: 02.552
date: Tue, 07 Feb 2023 08:25:41 GMT
age: 2937928
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10069-SJC, cache-hel1410027-HEL
x-cache: HIT, HIT
content-length: 3003
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/interac.png
200 OK 2.7 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/interac.png
IP
File type PNG image data, 153 x 156, 8-bit colormap, non-interlaced\012- data
Hash 9b9b9143bf86f05cda2161cc7ffcc3c8
4a793f79be620d49a751984f2a7c3bea07176894
d34b0fa6f4a752d9eaeb192ae7810afe5938865ffc0f01032f4b6ec4c1d7b8f3
GET /uploads/media/DOC/home/interac.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Thu, 04 Aug 2022 10:16:05 GMT
server: imgix
x-imgix-id: ed1c6f2730a37c1819802969d210f4b0df75ad80
x-imgix-render-farm: 01.1064
date: Tue, 07 Feb 2023 08:25:41 GMT
age: 5423487
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10052-SJC, cache-hel1410027-HEL
x-cache: HIT, HIT
content-length: 2738
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/ecashout.png
200 OK 2.6 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/ecashout.png
IP
File type PNG image data, 153 x 156, 8-bit colormap, non-interlaced\012- data
Hash a4c8123c11469403a676a4b6e6a5f301
321ba2a412968a39eb4e1ed9ed72b17b591d941d
a5fd2c66784ea49cb274ef2677c646762969e54b9371cdf556404f1e73483baf
GET /uploads/media/DOC/home/ecashout.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Thu, 04 Aug 2022 10:16:05 GMT
server: imgix
x-imgix-id: 69f383545740b3576766fcb1f7f2e7fd060e9952
x-imgix-render-farm: 02.552
date: Tue, 07 Feb 2023 08:25:41 GMT
age: 5439431
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10048-SJC, cache-hel1410027-HEL
x-cache: HIT, HIT
content-length: 2616
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/mc.png
200 OK 9.2 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/mc.png
IP
File type PNG image data, 156 x 156, 8-bit/color RGBA, non-interlaced\012- data
Hash c7dd6fdc3e16c819c88735699286ea81
90c72fd87afa0024ce87797a4709ae71370f89ab
f4ad70ee60ce0b2c8179c15fa2cb20f561901f02ffabb8c8abe59436a5bb1b1c
GET /uploads/media/DOC/home/mc.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Tue, 15 Nov 2022 11:12:25 GMT
server: imgix
x-imgix-id: 71ec1afef3eca3f1f98f543b8132f37911fbca73
x-imgix-render-farm: 02.552
date: Tue, 07 Feb 2023 08:25:41 GMT
age: 2493867
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10035-SJC, cache-hel1410027-HEL
x-cache: HIT, HIT
content-length: 9166
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/dogecoin.png
200 OK 15 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/dogecoin.png
IP
File type PNG image data, 165 x 168, 8-bit/color RGBA, non-interlaced\012- data
Hash 1e9329b8bf799a9b826f3a29b4f176c9
202c3b7f110e6a0f02cc57c4a5b9c2a0a04b0c91
c1bb8bbda40d80955c710bc3a20910eda13844db3ed1936d860de6f7bcd959ba
GET /uploads/media/DOC/home/dogecoin.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Thu, 04 Aug 2022 10:16:06 GMT
server: imgix
x-imgix-id: 5ede9dc2563a9609de670471c066d2ea3d2ecf1c
x-imgix-render-farm: 02.552
date: Tue, 07 Feb 2023 08:25:41 GMT
age: 5444827
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10060-SJC, cache-hel1410027-HEL
x-cache: HIT, HIT
content-length: 15219
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/litecoin-new.png
200 OK 14 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/litecoin-new.png
IP
File type PNG image data, 165 x 168, 8-bit/color RGBA, non-interlaced\012- data
Hash 9bc85726c5ca5e2a3d2a555a615c4256
049d4828511ea4d2bd01bb5f8a465885e6e9d704
9fd49d747b0dff0642c22a38a5fe92f32b56c91b99a1bb985e29c478a31776a1
GET /uploads/media/DOC/home/litecoin-new.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Mon, 08 Aug 2022 06:13:29 GMT
server: imgix
x-imgix-id: 1d79ca603728b492e30fc6063c44aa9ed0e32776
x-imgix-render-farm: 02.552
date: Tue, 07 Feb 2023 08:25:41 GMT
age: 2928525
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10029-SJC, cache-hel1410027-HEL
x-cache: HIT, HIT
content-length: 14490
X-Firefox-Spdy: h2
doggocasino.com/assets/fonts/CeraPro/CeraPro-Regular.ttf
200 OK 4.9 kB URL HTTP/2 doggocasino.com/assets/fonts/CeraPro/CeraPro-Regular.ttf
IP
File type PNG image data, 282 x 141, 8-bit/color RGBA, non-interlaced\012- data
Hash a5a601b38f6b3b9f958d2eca3a4a45e5
6e1c5af69461c0cbcb4a03602018a9278a5d04aa
ea215374e2595992671808fdc26279914384c72d0c487829e0d85b7d50a71e81
GET /assets/fonts/CeraPro/CeraPro-Regular.ttf HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/styles.6fe09080dd4bc8174585.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 166620
date: Mon, 06 Feb 2023 15:17:06 GMT
x-amz-meta-codebuild-content-sha256: 4f853d18badd3933524ca4a1dd6240279e0051fb38905b83f18834b4b93aaeb1
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:08219a5d-0b7c-4ae2-afb4-2507533d271d
x-amz-meta-codebuild-content-md5: 319cfed7654cbf4a61d9a3eabce3d2f4
last-modified: Fri, 03 Feb 2023 09:41:16 GMT
x-amz-version-id: nHMzA_1f2YzjfQuGjPK_eQILLVHaVrWa
etag: "cf954f65e33513f8a1f75f8083674834"
server: AmazonS3
via: 1.1 269b0fad85dfd450220cf6573a2d384e.cloudfront.net (CloudFront)
age: 61715
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: h5MP049KOQgfHEgdlzMBFi4qXjlZxQNzs9uvohOQyByL_p4rMReFkQ==
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/fantasma.png
200 OK 8.5 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/fantasma.png
IP
File type PNG image data, 249 x 126, 8-bit/color RGBA, non-interlaced\012- data
Hash c665b0d5e32fda6859ff497e1e69c43f
c182cf5a9438a4af020fc6c98dc6a101825fd0f4
031eda00e0705a5d0c4d98517a0d465a921256d4d0ff85a571858b1d41fce01a
GET /uploads/media/DOC/home/fantasma.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 22 Jun 2022 15:01:49 GMT
server: imgix
x-imgix-id: c622a908ee5889c3d3351579a5fc23fa65472e3e
x-imgix-render-farm: 01.1064
date: Tue, 07 Feb 2023 08:25:41 GMT
age: 1500370
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10074-SJC, cache-hel1410027-HEL
x-cache: HIT, HIT
content-length: 8546
X-Firefox-Spdy: h2
scripts.mediamathrdrt.com/scripts/b_Doggocasino.js
200 OK 7.6 kB URL HTTP/2 scripts.mediamathrdrt.com/scripts/b_Doggocasino.js
IP
Hash c4795ab4c9213cd059c80a960a37e22f
a7962f357d2aa1cbab63098686ad6ecd2793059d
face364e8e386ba37586b9386eda8d1bcaf5cab07e95aca01a0a366e999336f6
GET /scripts/b_Doggocasino.js HTTP/1.1
Host: scripts.mediamathrdrt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 07 Feb 2023 08:25:40 GMT
content-type: text/javascript; charset=utf-8
status: 200 OK
cache-control: no-cache
access-control-allow-origin: *
x-request-id: 796c632d-60fb-48a3-933e-b1ceb45cc1f9
x-runtime: 0.001848
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jqB4JAHU23iMeOqZlt5piBAHuKeL4nB%2FxUXZ5YhtnRzS1u4BJJbEMXHFgyHpzWpnhOT0NKx7ZhV4uAlZtR9K%2F5TLHPRgJuXMEuOL3%2BeoDi5ww%2BRgd100Mfj2kPQXCFdLnMLAvI%2FhiajjaW7i"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 795abc7b0871b518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/quick-spin.png
200 OK 7.3 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/quick-spin.png
IP
File type PNG image data, 264 x 132, 8-bit/color RGBA, non-interlaced\012- data
Hash c4651477b077d4f4dea3646065567885
df7eecb46d7709e9c490b399b9e4795e64595792
04c9cd3e8cfb7fa6e88c28b17cf9b2c87f83d5e1adadc20f2615ff1f1fdd0e88
GET /uploads/media/DOC/home/quick-spin.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 22 Jun 2022 15:01:49 GMT
server: imgix
x-imgix-id: b3f7542b22878ec5c77012762c5b725ec229b35d
x-imgix-render-farm: 02.552
date: Tue, 07 Feb 2023 08:25:41 GMT
age: 2920729
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10021-SJC, cache-hel1410027-HEL
x-cache: HIT, HIT
content-length: 7266
X-Firefox-Spdy: h2
scripts.prdredir.com/scripts/k_doggocasino.js
200 OK 6.5 kB URL HTTP/2 scripts.prdredir.com/scripts/k_doggocasino.js
IP
Hash 2c2f63e7e4c93e72fbd787671bed4f0a
f4ef1ead854bf64a7af629455d0775dfe2409e83
592dfe9fd1c8c7f623a35800327be163a9db987eec7c5199a9536d522c849739
GET /scripts/k_doggocasino.js HTTP/1.1
Host: scripts.prdredir.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 07 Feb 2023 08:25:40 GMT
content-type: text/javascript; charset=utf-8
status: 200 OK
cache-control: no-cache
access-control-allow-origin: *
x-request-id: b797affd-9def-4df3-9a3b-c8e2ac4749a1
etag: W/"95d838de11136e7964ca0eaa375bf294"
x-runtime: 0.009872
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Q7X14BUdYzhhXE1xS3GPBBiU021wGZRqUgs2nX0hETIhCdmcfZInSzZnqzXRhcYL2Llu0pQkxfRCoSM93KVatpSFbnBkZyIfXzhv8lPK0nbfhQAtPWO71Xj4Y3hpVnhDtOzIRqLQ5Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 795abc7b0d7276ff-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/bitcoin.png
200 OK 19 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/bitcoin.png
IP
File type PNG image data, 156 x 156, 8-bit/color RGBA, non-interlaced\012- data
Hash cd562a1e7de9e5bd919fed61dffcaf85
fd9c91b81380bdd4ced09ad4f55a859d1df908f0
c4d20189a065ee8bdc172576d404b4a7a5798a94449ca2c093b4b79e33ded24a
GET /uploads/media/DOC/home/bitcoin.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Thu, 04 Aug 2022 10:16:05 GMT
server: imgix
x-imgix-id: 65feeb2e7f5a33af503a917d123e59c58e65a7e6
x-imgix-render-farm: 01.1064
date: Tue, 07 Feb 2023 08:25:41 GMT
age: 2839179
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10057-SJC, cache-hel1410027-HEL
x-cache: HIT, HIT
content-length: 18782
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/bitcash.png
200 OK 18 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/bitcash.png
IP
File type PNG image data, 174 x 174, 8-bit/color RGBA, non-interlaced\012- data
Hash e68bafdc431bb7237b47260e8d9bc046
a0fa8db91a6ac0ad63898d7407977e7782e32180
59fd94e8ca42bbd652ab2c1af7061afd79bf98bd2b7e4ad1256bcba73e9629a3
GET /uploads/media/DOC/home/bitcash.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Mon, 26 Dec 2022 14:49:50 GMT
server: imgix
x-imgix-id: d8f2e691a28166c91e785d424cff15e190124eaf
x-imgix-render-farm: 02.552
date: Tue, 07 Feb 2023 08:25:41 GMT
age: 2854072
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10045-SJC, cache-hel1410027-HEL
x-cache: HIT, HIT
content-length: 18036
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/blue-print.png
200 OK 13 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/blue-print.png
IP
File type PNG image data, 276 x 138, 8-bit/color RGBA, non-interlaced\012- data
Hash 215e832f2352ba2b101cdad72966f603
a1dcf49c0377e3f1e1c6bfcef8e49435dfffc781
dc6f2ec8948d25ba0a77ce6aedfcc118857fd6733c4801697db1e8b073e65456
GET /uploads/media/DOC/home/blue-print.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 22 Jun 2022 15:01:49 GMT
server: imgix
x-imgix-id: ecfb3805c5394525af860dfdf5477a7c4267e413
x-imgix-render-farm: 01.1064
date: Tue, 07 Feb 2023 08:25:41 GMT
age: 585094
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10077-SJC, cache-hel1410027-HEL
x-cache: HIT, HIT
content-length: 13093
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/northernlights.png
200 OK 9.7 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/northernlights.png
IP
File type PNG image data, 258 x 129, 8-bit/color RGBA, non-interlaced\012- data
Hash d00971dc7290a8d83d531bfe390dd39c
a2a9e0bd0d476994c9fb564a2976f254a865fccd
d9658fdd73aae24cab7d588506ca816cd6cbe7e6917169298e4a1167d71421f0
GET /uploads/media/DOC/home/northernlights.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 22 Jun 2022 15:01:49 GMT
server: imgix
x-imgix-id: 67a7b5399ebf644a1bcc51dfa0f74eb06dcd143e
x-imgix-render-farm: 01.1064
date: Tue, 07 Feb 2023 08:25:41 GMT
age: 2928526
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10081-SJC, cache-hel1410027-HEL
x-cache: HIT, HIT
content-length: 9665
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/eyecon.png
200 OK 8.8 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/eyecon.png
IP
File type PNG image data, 264 x 132, 8-bit/color RGBA, non-interlaced\012- data
Hash 8766855d25ad3843eb33359112283e5d
a838120ce318c886ad64c1dd8ff488f7c6e0f0a4
f8a978ca8b36c3044558087bcbfc54cc5ea0a4a86823e00923f52071b0960e17
GET /uploads/media/DOC/home/eyecon.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 22 Jun 2022 15:01:49 GMT
server: imgix
x-imgix-id: 3e339dd8fb39131d66ec1e122249731733e4fe8a
x-imgix-render-farm: 01.1064
date: Tue, 07 Feb 2023 08:25:41 GMT
age: 1123790
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10052-SJC, cache-hel1410027-HEL
x-cache: HIT, HIT
content-length: 8776
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/elk-studios.png
200 OK 5.9 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/elk-studios.png
IP
File type PNG image data, 252 x 126, 8-bit/color RGBA, non-interlaced\012- data
Hash 51d08cb0697602f09624cc82bb4d5a55
e45470f8c08548f1048d9efd72799b7b09096673
10bdf4c280e8f097ab29f3829c19998b5a2f038a8e6b07537dbc9d777f35bbc7
GET /uploads/media/DOC/home/elk-studios.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 22 Jun 2022 15:01:49 GMT
server: imgix
x-imgix-id: 515e8d2baf636de989603606a0060060811e32b2
x-imgix-render-farm: 01.1064
date: Tue, 07 Feb 2023 08:25:41 GMT
age: 1676846
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10078-SJC, cache-hel1410027-HEL
x-cache: HIT, HIT
content-length: 5941
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/irondog.png
200 OK 5.8 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/irondog.png
IP
File type PNG image data, 231 x 114, 8-bit/color RGBA, non-interlaced\012- data
Hash c466772fc1afd400af737640c99f88a7
9ca1c550b69d2e5cb728c2a3668b2b35b0b0749e
e779742b7d5d724cb28028beb3ce8b72ebbbfea4c993fa19e01bb065cca77485
GET /uploads/media/DOC/home/irondog.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 09 Nov 2022 07:55:59 GMT
server: imgix
x-imgix-id: 07ade4d4a329aeebb13542f1a1f1753e6ef8e471
x-imgix-render-farm: 02.552
date: Tue, 07 Feb 2023 08:25:41 GMT
age: 2926593
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10081-SJC, cache-hel1410027-HEL
x-cache: HIT, HIT
content-length: 5790
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/maxwin.png
200 OK 4.5 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/maxwin.png
IP
File type PNG image data, 222 x 108, 8-bit/color RGBA, non-interlaced\012- data
Hash 7c449a3fe36a9169f6943ba2428db2b1
4454bc379ed44c9c9e4025e38fb70331826f1dcc
50b2cc15c9ffa7199cf2dfd14668041b77e1b893e1907fc2fa660fc0e70c1e34
GET /uploads/media/DOC/home/maxwin.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 22 Jun 2022 15:01:49 GMT
server: imgix
x-imgix-id: 133dff40fc4bcdce06d3e48dbc3e3cc97cb67554
x-imgix-render-farm: 01.1064
date: Tue, 07 Feb 2023 08:25:41 GMT
age: 2492172
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10079-SJC, cache-hel1410027-HEL
x-cache: HIT, HIT
content-length: 4465
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/gaming.png
200 OK 6.6 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/gaming.png
IP
File type PNG image data, 243 x 120, 8-bit/color RGBA, non-interlaced\012- data
Hash f0c61bac2c685ab90cdeba03f39a73ff
db8a075fbe70ef285b8db7d68f79d17c9cf52aa3
b5b53a76e45279edccc190cb7603e0522f77e12b72b9b9d9075c937d53627ef9
GET /uploads/media/DOC/home/gaming.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 22 Jun 2022 15:01:49 GMT
server: imgix
x-imgix-id: 967b8ec43b2a5fbcccd7f7f9d32031091657fdf1
x-imgix-render-farm: 01.1064
date: Tue, 07 Feb 2023 08:25:41 GMT
age: 2930456
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10081-SJC, cache-hel1410027-HEL
x-cache: HIT, HIT
content-length: 6610
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/mb-bottom.png
200 OK 945 B URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/mb-bottom.png
IP
File type PNG image data, 555 x 78, 8-bit colormap, non-interlaced\012- data
Hash afd8b1279d095eddad3f7ad8df9892a3
407841662fc47b2d82e8a0cba898163a8c4d86b7
58b09fba62fa08df503bddcf36cf9fdc0e6d08a9a7bd2cfa122fc34fc3f6b6a2
GET /uploads/media/DOC/home/mb-bottom.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Mon, 21 Nov 2022 14:38:42 GMT
server: imgix
x-imgix-id: f38d6f1739f6520a391d3ce5a825ff72c95647d2
x-imgix-render-farm: 02.552
date: Tue, 07 Feb 2023 08:25:41 GMT
age: 1716696
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10070-SJC, cache-hel1410027-HEL
x-cache: HIT, HIT
content-length: 945
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/live-chat.svg
200 OK 839 B URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/live-chat.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (734)
Hash 83446e4d2f06186a15149eaff721bc82
be4daa2a3cdefe196af997d3859abd0137c2b46c
19e16d18413d121628f7ea88a731632d27f18ff3760dbb693f855f0878372c9d
GET /uploads/media/DOC/home/live-chat.svg HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 22 Jun 2022 15:01:49 GMT
content-encoding: gzip
server: imgix
x-imgix-id: 6484923e196b748125b0dbc61fc0a274f59fbb80
x-imgix-render-farm: 01.1064
date: Tue, 07 Feb 2023 08:25:41 GMT
age: 1463267
accept-ranges: bytes
content-type: image/svg+xml
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10023-SJC, cache-hel1410027-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
content-length: 839
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/mb.png
200 OK 996 B URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/mb.png
IP
File type PNG image data, 561 x 92, 8-bit colormap, non-interlaced\012- data
Hash 4a561b1203db848a0fd069a40105f7a3
432ddaa10b45e26988bc1bddf69a9272a3acaf15
6e979cde819c2b590d29574b712bc5716a818a133e994b7481ff6e293c0d6905
GET /uploads/media/DOC/home/mb.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Fri, 05 Aug 2022 07:05:23 GMT
server: imgix
x-imgix-id: fb4c33ff74b03ea89205450cef3631ac7caa5dca
x-imgix-render-farm: 01.1064
date: Tue, 07 Feb 2023 08:25:41 GMT
age: 1123790
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10064-SJC, cache-hel1410027-HEL
x-cache: HIT, HIT
content-length: 996
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/doggo-footer.svg
200 OK 1.3 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/doggo-footer.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2775)
Hash bdc5623deb6ed892390913e3304372c2
f7f0db9505e566f2691fa9fde28f748cf30ea0d7
d39e58f66daed5cfbac2331e27fdf1f831200b828fd7c601f0740669330b5965
GET /uploads/media/DOC/home/doggo-footer.svg HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 22 Jun 2022 15:01:49 GMT
content-encoding: gzip
server: imgix
x-imgix-id: ba0fccff7fd2cafdc67f670afe808b92cd1b08e1
x-imgix-render-farm: 01.1064
date: Tue, 07 Feb 2023 08:25:41 GMT
age: 5865391
accept-ranges: bytes
content-type: image/svg+xml
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10058-SJC, cache-hel1410027-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
content-length: 1271
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/support-mobile.PNG
200 OK 215 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/support-mobile.PNG
IP
File type PNG image data, 365 x 416, 8-bit/color RGBA, non-interlaced\012- data
Size 215 kB (215081 bytes)
Hash c67edc9f2f91cc55d2bb4cd1db221f88
f1db70c0849edb72d6c1e712660ee289e6d7f755
d061850b353fc488ed78056daa271d5d94b5e62f6c840b4669cef6b0b074a7c4
GET /uploads/media/DOC/home/support-mobile.PNG HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Tue, 09 Aug 2022 01:43:43 GMT
server: imgix
x-imgix-id: 9fd727abab4fa66fcb01546ce986e8a451900ade
x-imgix-render-farm: 01.1064
date: Tue, 07 Feb 2023 08:25:41 GMT
age: 2926441
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10053-SJC, cache-hel1410027-HEL
x-cache: HIT, HIT
content-length: 215081
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/faq-mobile.png
200 OK 128 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/faq-mobile.png
IP
File type PNG image data, 364 x 359, 8-bit/color RGB, non-interlaced\012- data
Size 128 kB (127922 bytes)
Hash a7fb206443a401aac5e0da3d3157bd4e
3b767d26f8ff846b345042e358f9685a994f3bda
ce580ea6b4e038bf83f50d103c8f90c9f57f817f9395dfdcbeb9595961f5a6d7
GET /uploads/media/DOC/home/faq-mobile.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Tue, 09 Aug 2022 01:55:49 GMT
server: imgix
x-imgix-id: 9df977ec3305d1fcd2280dd8ad155be340a1e160
x-imgix-render-farm: 01.1064
date: Tue, 07 Feb 2023 08:25:41 GMT
age: 589771
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10025-SJC, cache-hel1410027-HEL
x-cache: HIT, HIT
content-length: 127922
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/wins-mobile.png
200 OK 114 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/wins-mobile.png
IP
File type PNG image data, 369 x 373, 8-bit/color RGB, non-interlaced\012- data
Size 114 kB (114315 bytes)
Hash 9254612cbe7dc5e08eaad1c7b3b9bed3
4b1b7c636758fd514c10fb40179a3321f4757946
3f10fa5c434f2dc9a35bdbbe807dca7fabb1180153cf1013ceeee70846a67119
GET /uploads/media/DOC/home/wins-mobile.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Tue, 09 Aug 2022 01:43:45 GMT
server: imgix
x-imgix-id: eac79f3b66edc102783146ea29a590751c3c4c39
x-imgix-render-farm: 01.1064
date: Tue, 07 Feb 2023 08:25:41 GMT
age: 1793056
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10026-SJC, cache-hel1410027-HEL
x-cache: HIT, HIT
content-length: 114315
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/casino-mobile.png
200 OK 133 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/casino-mobile.png
IP
File type PNG image data, 371 x 397, 8-bit/color RGB, non-interlaced\012- data
Size 133 kB (133402 bytes)
Hash 36f9ecfb460d0de18df1ce7defb10711
b7ee68bd6d2c91ac3d85a452c53974a61cf6d1f0
75db45a28f5b61014fc62b70588a10a644f06cc20dc4f6769acdb10059c0a1b1
GET /uploads/media/DOC/home/casino-mobile.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Tue, 09 Aug 2022 01:43:47 GMT
server: imgix
x-imgix-id: 2e9d1accc3c4eef78a25e75811b6d1d95a45df7f
x-imgix-render-farm: 01.1064
date: Tue, 07 Feb 2023 08:25:41 GMT
age: 1588755
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10029-SJC, cache-hel1410027-HEL
x-cache: HIT, HIT
content-length: 133402
X-Firefox-Spdy: h2
doggocasino.com/icomoon.45820165eb8af3713881.ttf
200 OK 29 kB URL HTTP/2 doggocasino.com/icomoon.45820165eb8af3713881.ttf
IP
File type TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, icomoon \012- data
Hash eb718388a17dd6957510fb000e72e3cd
e05feec86f5b7297637a5fc431ab9d1963e2812b
c38790685fe44d27066c46fe406fbf0edef47872cefa44a342e7a25171897200
GET /icomoon.45820165eb8af3713881.ttf HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/styles.6fe09080dd4bc8174585.css
Cookie: _ga_K4EHGY5F0T=GS1.1.1675758389.1.0.1675758389.60.0.0; _ga=GA1.1.1511094843.1675758389; __adm_tid=tid-274fbbe92.366b3a956; affiliateId=cx-35656_393091; bannerId=35656; trackerId=35656_393091; affiliateName=%5Bcellxpert%5D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 28764
x-amz-meta-codebuild-content-sha256: 4f853d18badd3933524ca4a1dd6240279e0051fb38905b83f18834b4b93aaeb1
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:08219a5d-0b7c-4ae2-afb4-2507533d271d
x-amz-meta-codebuild-content-md5: 319cfed7654cbf4a61d9a3eabce3d2f4
last-modified: Fri, 03 Feb 2023 09:41:15 GMT
x-amz-version-id: n_I2L5wf2eUi5YO1ObqAj3.QHKOtw8W1
server: AmazonS3
date: Mon, 06 Feb 2023 10:12:39 GMT
etag: "eb718388a17dd6957510fb000e72e3cd"
vary: Accept-Encoding
via: 1.1 269b0fad85dfd450220cf6573a2d384e.cloudfront.net (CloudFront)
age: 79983
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: eK6ptZi9IFo0mX-76z9BAdN44bo1TrbzL_N2pmRynbVS2hFucsa_5A==
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/live-casino-alt.png
200 OK 932 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/live-casino-alt.png
IP
File type PNG image data, 1239 x 801, 8-bit/color RGBA, non-interlaced\012- data
Size 932 kB (931521 bytes)
Hash a3113ee83d7cfdda8586b419310bdcc1
601ddede664b13671e9dc48c58e5366c9fd2028e
ba00e861f4fe98eb485ddfd62a83960ee46462037e8362a5cecdbec96a7d440e
GET /uploads/media/DOC/home/live-casino-alt.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 22 Jun 2022 15:01:49 GMT
server: imgix
x-imgix-id: 69e39fc14e96226724fcf92fcdd1ddc3c6f1a238
x-imgix-render-farm: 01.1064
date: Tue, 07 Feb 2023 08:25:41 GMT
age: 2935463
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10033-SJC, cache-hel1410027-HEL
x-cache: HIT, HIT
content-length: 931521
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/game-providers.png
200 OK 94 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/game-providers.png
IP
File type PNG image data, 1745 x 182, 8-bit/color RGBA, non-interlaced\012- data
Hash 81248b605a052a84ea52f8c2a21eb566
cd779dc72ba988847e98bef0e526eda8d6dacc0b
8c673f835da44c70b9e1c111baeac722e344c79c6e8a9ad0e1ef0d848f4ca82d
GET /uploads/media/DOC/home/game-providers.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Tue, 13 Dec 2022 13:37:51 GMT
server: imgix
x-imgix-id: 618564c3a058ec8863ef74d3e32b5d4b0fb2a4b4
x-imgix-render-farm: 02.552
date: Tue, 07 Feb 2023 08:25:41 GMT
age: 1813841
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10026-SJC, cache-hel1410027-HEL
x-cache: HIT, HIT
content-length: 93464
X-Firefox-Spdy: h2
ekr.zdassets.com/compose/65b012e7-7474-42fb-a2e0-939200b21662
200 OK 108 kB URL HTTP/2 ekr.zdassets.com/compose/65b012e7-7474-42fb-a2e0-939200b21662
IP
File type JSON data\012- , ASCII text, with very long lines (389), with no line terminators
Size 108 kB (107751 bytes)
Hash 6aef4e24bc0fb78ee0722ebbb1f72e47
0fd99467bf1f0456123839dac580730a83243356
e2186aade847e7fce1b4fac6192f2af4269896d6a33a0a2b78b5ce0922611a73
GET /compose/65b012e7-7474-42fb-a2e0-939200b21662 HTTP/1.1
Host: ekr.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://doggocasino.com
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 07 Feb 2023 08:25:40 GMT
content-type: application/json; charset=utf-8
status: 200 OK
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-expose-headers:
access-control-max-age: 7200
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-download-options: noopen
x-permitted-cross-domain-policies: none
referrer-policy: strict-origin-when-cross-origin
cdn-cache-control: max-age=60
cache-control: max-age=600, public, stale-while-revalidate=600, stale-if-error=21600
etag: W/"f87aaf2ca48628d66d5e19682c54a55d"
x-request-id: 79521768de16fe24-ARN, 79521768de16fe24-ARN
x-runtime: 0.004937
vary: Origin, Accept-Encoding
x-zendesk-zorg: yes
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OGyNEyEjbyRcED3t3cWcQpIbxk99ls8iikppmDBYCTkA4UGfXvvr0O3vvhP0qWk7kTitnA0NkL%2FyZjnI79IajMLiS9a0I4a9e%2BsmcGKbSk5ZSOXQJ%2FQvDNZTJQ7d5wt%2FM%2BY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 795abc7a397cb4f4-OSL
content-encoding: br
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/micro-gaming.png
200 OK 12 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/micro-gaming.png
IP
File type PNG image data, 273 x 135, 8-bit/color RGBA, non-interlaced\012- data
Hash ad498e425bc190d412243470877e08c1
c7286f96e9b48afe1e0388495c6a23121688aa3d
cda4cfc287ffe13972fef5287357eb52c9bd72a3d1edb47afdb196368509883e
GET /uploads/media/DOC/home/micro-gaming.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 22 Jun 2022 15:01:49 GMT
server: imgix
x-imgix-id: e72faedce2955be12a47e50d32f6c5563952e8d5
x-imgix-render-farm: 01.1064
date: Tue, 07 Feb 2023 08:25:41 GMT
age: 2920731
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10049-SJC, cache-hel1410027-HEL
x-cache: HIT, HIT
content-length: 11685
X-Firefox-Spdy: h2
doggocasino-images-prd.imgix.net/uploads/media/DOC/images/9kzyghkni-akqaph2rd-CasinoIcon.svg
200 OK 767 B URL HTTP/2 doggocasino-images-prd.imgix.net/uploads/media/DOC/images/9kzyghkni-akqaph2rd-CasinoIcon.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1076)
Hash 59a7c757952f4e73719f399cd6616389
e7a24c2b840a5c55ca3e62461675009c9928917e
79466ff238e8321bec8616124c08f8800952547ae9e89f88dad9d764c913c224
GET /uploads/media/DOC/images/9kzyghkni-akqaph2rd-CasinoIcon.svg HTTP/1.1
Host: doggocasino-images-prd.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Fri, 06 May 2022 13:28:13 GMT
content-encoding: gzip
server: imgix
x-imgix-id: c3a01bbfb844dd7c35f90c9385b96ac4a937f2e3
x-imgix-render-farm: 01.1064
date: Tue, 07 Feb 2023 08:25:41 GMT
age: 2928015
accept-ranges: bytes
content-type: image/svg+xml
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10069-SJC, cache-hel1410027-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
content-length: 767
X-Firefox-Spdy: h2
doggocasino-images-prd.imgix.net/uploads/media/DOC/images/9kzygv6fx-8kpi8m203-8kpgg29wu-gift-box-thicker.svg
200 OK 941 B URL HTTP/2 doggocasino-images-prd.imgix.net/uploads/media/DOC/images/9kzygv6fx-8kpi8m203-8kpgg29wu-gift-box-thicker.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 76be76f2a7dec465f2452f35658a2e09
0f1bbf98737266b676a2c4b32b1544168e73943b
6ae9272128515c2144e856126178a61c16ab6db3c0a613d8dce9f483164d08d4
GET /uploads/media/DOC/images/9kzygv6fx-8kpi8m203-8kpgg29wu-gift-box-thicker.svg HTTP/1.1
Host: doggocasino-images-prd.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 09 Nov 2022 10:27:54 GMT
content-encoding: gzip
server: imgix
x-imgix-id: 88911c0fad530edff12315369537684698137913
x-imgix-render-farm: 02.552
date: Tue, 07 Feb 2023 08:25:41 GMT
age: 2412590
accept-ranges: bytes
content-type: image/svg+xml
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10043-SJC, cache-hel1410027-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
content-length: 941
X-Firefox-Spdy: h2
doggocasino-images-prd.imgix.net/uploads/media/DOC/images/9kzyghkpt-8kpegzft6-8kpbpz732-LiveCasino-Icon.svg
200 OK 2.1 kB URL HTTP/2 doggocasino-images-prd.imgix.net/uploads/media/DOC/images/9kzyghkpt-8kpegzft6-8kpbpz732-LiveCasino-Icon.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2535)
Hash ca090d9ae105fcebb45202ad645b0d96
8e8d212ed026415b9b1aff0abb680594351275a7
5b0e17ce4aef9bbed4e7376bbcc564c3a4a9b649f80f7c40d8ac2306e36b9592
GET /uploads/media/DOC/images/9kzyghkpt-8kpegzft6-8kpbpz732-LiveCasino-Icon.svg HTTP/1.1
Host: doggocasino-images-prd.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Fri, 06 May 2022 13:28:14 GMT
content-encoding: gzip
server: imgix
x-imgix-id: f2fceca1e8d3249e4ad06449ba8312bfff794c54
x-imgix-render-farm: 01.1064
date: Tue, 07 Feb 2023 08:25:41 GMT
age: 2473394
accept-ranges: bytes
content-type: image/svg+xml
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10083-SJC, cache-hel1410027-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
content-length: 2068
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/grey-shape.svg
200 OK 268 B URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/grey-shape.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text
Hash e67eb7098ee71853fcbbbe3c95e0d0ec
1f2455492bab9ed1dba60056bbcd67178f2ee37a
5e65e35f0d76280d27163d29f5064bd628d1cc13f7e8fdae7cd8650391eefc7f
GET /uploads/media/DOC/home/grey-shape.svg HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Tue, 08 Nov 2022 09:02:38 GMT
content-encoding: gzip
server: imgix
x-imgix-id: cb2acdc5691cb7ede86c57e7e0aba797c670abfb
x-imgix-render-farm: 02.552
date: Tue, 07 Feb 2023 08:25:41 GMT
age: 1811401
accept-ranges: bytes
content-type: image/svg+xml
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10034-SJC, cache-hel1410027-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
content-length: 268
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/grey-shape-alt.svg
200 OK 367 B URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/grey-shape-alt.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text
Hash 812252e6aa18e5ece6ad9c78eacad834
61c799b792e62aa20c0b438f552d5d60baab8c42
9c462975e75394ae39ace0babbfe001eed944c0c331cbd9b168c60dd97a77570
GET /uploads/media/DOC/home/grey-shape-alt.svg HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 22 Jun 2022 15:01:49 GMT
content-encoding: gzip
server: imgix
x-imgix-id: eef05db3ee9572fd0a5a655dfeeb08489e25c017
x-imgix-render-farm: 01.1064
date: Tue, 07 Feb 2023 08:25:41 GMT
age: 1113524
accept-ranges: bytes
content-type: image/svg+xml
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10044-SJC, cache-hel1410027-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
content-length: 367
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/red-tiger.png
200 OK 11 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/red-tiger.png
IP
File type PNG image data, 276 x 138, 8-bit/color RGBA, non-interlaced\012- data
Hash 4d970a8ff362df7c5514aceaa5e3ebe7
55104f39398363a86ccc9c47e5cfa26104ba5a25
cca9d171d20873e005d4c9a6fb3c9df4fb19748d2f66eeb2188aa1fce25d51e1
GET /uploads/media/DOC/home/red-tiger.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Thu, 01 Dec 2022 09:24:24 GMT
server: imgix
x-imgix-id: 876148991f2cf06187358516475cf30ea821278a
x-imgix-render-farm: 02.552
date: Tue, 07 Feb 2023 08:25:41 GMT
age: 1102877
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10040-SJC, cache-hel1410027-HEL
x-cache: HIT, HIT
content-length: 11314
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/rela-gaming.png
200 OK 4.8 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/rela-gaming.png
IP
File type PNG image data, 273 x 135, 8-bit/color RGBA, non-interlaced\012- data
Hash c9bedd7123ad42428e2ec792776053a8
0925be562535b671f95ff19d90347a8fb6a7ffe1
32409ee3167289537c27f80696a05e8591ed3cabcb086263d0d08daea12d2e61
GET /uploads/media/DOC/home/rela-gaming.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Thu, 17 Nov 2022 14:40:10 GMT
server: imgix
x-imgix-id: 38553b988467576fe289bfd72122849582d88bc2
x-imgix-render-farm: 02.552
date: Tue, 07 Feb 2023 08:25:41 GMT
age: 2482319
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10083-SJC, cache-hel1410027-HEL
x-cache: HIT, HIT
content-length: 4798
X-Firefox-Spdy: h2
ocsp.entrust.net/
200 OK 1.6 kB IP
Hash 4cf641bf5358f976720503fdd2fcf504
7cf4069c9d86ee530a12347ebfee092337299f41
98b8d5337fad2d14ee089ed27109769910111b7e1ae87da3675b20e7326c891e
POST / HTTP/1.1
Host: ocsp.entrust.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
ETag: "98B8D5337FAD2D14EE089ED27109769910111B7E1AE87DA3675B20E7326C891E"
Last-Modified: Mon, 06 Feb 2023 20:00:00 UTC
Content-Length: 1588
Cache-Control: public, no-transform, must-revalidate, max-age=2931
Expires: Tue, 07 Feb 2023 09:14:32 GMT
Date: Tue, 07 Feb 2023 08:25:41 GMT
Connection: keep-alive
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/life-changin-wins.png
200 OK 732 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/life-changin-wins.png
IP
File type PNG image data, 2015 x 1068, 8-bit/color RGBA, non-interlaced\012- data
Size 732 kB (731764 bytes)
Hash a7705b01f4799b3cab2f8cdbf71daa66
1395854d5261db43c37bb8706333ce2374e9d126
fca04d41f3c865308bffae37090a41da6d27db5b17bc7811ad7c288f0d2972b7
GET /uploads/media/DOC/home/life-changin-wins.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Thu, 10 Nov 2022 08:07:33 GMT
server: imgix
x-imgix-id: eaa8d30a11e07300b2c20d9eefe5f155bbf39adb
x-imgix-render-farm: 02.552
date: Tue, 07 Feb 2023 08:25:41 GMT
age: 589769
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10077-SJC, cache-hel1410027-HEL
x-cache: HIT, HIT
content-length: 731764
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/playson.png
200 OK 8.8 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/playson.png
IP
File type PNG image data, 264 x 132, 8-bit/color RGBA, non-interlaced\012- data
Hash 8f247ad2ba24f62d8568361c71599fcb
a47ec378109d5167452c3c84b6c0ef7e82a0f015
e9f5402ef88a83fe5198a1e164be87b7751d1aa3e3ebf67faf128ad20de81d80
GET /uploads/media/DOC/home/playson.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 22 Jun 2022 15:01:49 GMT
server: imgix
x-imgix-id: 1c27e084a48eadd6052b527d450f616b19517eec
x-imgix-render-farm: 01.1064
date: Tue, 07 Feb 2023 08:25:41 GMT
age: 2920730
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10021-SJC, cache-hel1410027-HEL
x-cache: HIT, HIT
content-length: 8797
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/safe-instant.png
200 OK 469 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/safe-instant.png
IP
Size 469 kB (469208 bytes)
Hash 12ebeaced957e831a3806c680c86b43b
72624d8d51291c41f493f649a3c2757c1f2ca192
b0aca310dbf083a7d477ef7e0f659604f429b62c9ccbb65a61ad46126fb8fd27
GET /uploads/media/DOC/home/safe-instant.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Thu, 01 Dec 2022 09:35:32 GMT
server: imgix
x-imgix-id: f0fcd198a614d37120ac195c6db5b07abd07f4b9
x-imgix-render-farm: 02.552
date: Tue, 07 Feb 2023 08:25:41 GMT
age: 5437867
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10031-SJC, cache-hel1410027-HEL
x-cache: HIT, HIT
content-length: 443061
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/slots-games.png
200 OK 1.4 MB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/slots-games.png
IP
File type PNG image data, 1920 x 738, 8-bit/color RGBA, non-interlaced\012- data
Size 1.4 MB (1428029 bytes)
Hash 69a5c6da5ff813320794608f66b5ee7a
e9c21af6d994f279e128ef4e441e28e2daa040b0
be88b78ea90958397eb001632620464892e60304d6f2ef4a8a30d45e2ca36265
GET /uploads/media/DOC/home/slots-games.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Tue, 06 Dec 2022 08:10:12 GMT
server: imgix
x-imgix-id: 73e8dc90f791d188397dd4e4878087854cd1add3
x-imgix-render-farm: 02.552
date: Tue, 07 Feb 2023 08:25:41 GMT
age: 2779053
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10036-SJC, cache-hel1410027-HEL
x-cache: HIT, HIT
content-length: 1428029
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/custom-loyalty.png
200 OK 884 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/custom-loyalty.png
IP
File type PNG image data, 1247 x 848, 8-bit/color RGBA, non-interlaced\012- data
Size 884 kB (883840 bytes)
Hash 9ebf6e306dc67cee050fe9c92de5d2cc
d5f12930b0e5b56ed0f13475d1a3fd9f9f6001ad
a95d15788e300398aec81c5fbcec4742423977b9ecaa23a8e5d3cfcbd0c6f82d
GET /uploads/media/DOC/home/custom-loyalty.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 22 Jun 2022 15:01:49 GMT
server: imgix
x-imgix-id: 3f80027569f50c2428d6316ff89921d6c28ed46d
x-imgix-render-farm: 01.1064
date: Tue, 07 Feb 2023 08:25:41 GMT
age: 2927922
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10081-SJC, cache-hel1410027-HEL
x-cache: HIT, HIT
content-length: 883840
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/faq.png
200 OK 1.0 MB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/faq.png
IP
File type PNG image data, 1920 x 1096, 8-bit/color RGBA, non-interlaced\012- data
Size 1.0 MB (1000337 bytes)
Hash ef96f74f51b5138969246a0b3d1996ac
ca519301ff25dec4f07e54574a40d7012eb6763d
b2e61e89a6a0e373694d5520d34bee9fc24442d94176daa9bf01ad94e8648c5a
GET /uploads/media/DOC/home/faq.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 04 Jan 2023 14:31:17 GMT
server: imgix
x-imgix-id: 5723111c3813b25d7033e82cee6265989331c714
x-imgix-render-farm: 02.552
date: Tue, 07 Feb 2023 08:25:41 GMT
age: 597233
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10041-SJC, cache-hel1410027-HEL
x-cache: HIT, HIT
content-length: 1000337
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/24hr-bg.png
200 OK 846 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/24hr-bg.png
IP
File type PNG image data, 1467 x 776, 8-bit/color RGBA, non-interlaced\012- data
Size 846 kB (845713 bytes)
Hash 43c4bfb0ef50eee6044ebfd26e20b6b9
7183a0e6cbb296bb9493535579b67afe4c3244cf
e67b16b94d3723da0a5dd239a4104f4a1f46d64f3fb3915c86e8f9a46be8c1d3
GET /uploads/media/DOC/home/24hr-bg.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 22 Jun 2022 15:01:49 GMT
server: imgix
x-imgix-id: f033ef61aebe9b79335d1e173fc90415c42312fe
x-imgix-render-farm: 01.1064
date: Tue, 07 Feb 2023 08:25:41 GMT
age: 1466673
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10023-SJC, cache-hel1410027-HEL
x-cache: HIT, HIT
content-length: 845713
X-Firefox-Spdy: h2
doggocasino.com/assets/images/payments/Visa.webp
200 OK 5.1 kB URL HTTP/2 doggocasino.com/assets/images/payments/Visa.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 4b0108440760f16641970c1d5d16cd00
507b3518c8eb975026333a76be0d0178cbc9c2ad
28da44d8c47934effa061189c0f8c3d7253f030c8551e6a5358c065c152f0e46
GET /assets/images/payments/Visa.webp HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/no-no?affiliateName=%5Bcellxpert%5D&affid=cx-35656_393091&bannerid=35656&trackerid=35656_393091&brand=doggocasino&bta=35656&rdk=rk3
Cookie: _ga_K4EHGY5F0T=GS1.1.1675758389.1.0.1675758389.60.0.0; _ga=GA1.1.1511094843.1675758389; __adm_tid=tid-274fbbe92.366b3a956; affiliateId=cx-35656_393091; bannerId=35656; trackerId=35656_393091; affiliateName=%5Bcellxpert%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 5090
date: Mon, 06 Feb 2023 10:42:12 GMT
x-amz-meta-codebuild-content-sha256: 4f853d18badd3933524ca4a1dd6240279e0051fb38905b83f18834b4b93aaeb1
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:08219a5d-0b7c-4ae2-afb4-2507533d271d
x-amz-meta-codebuild-content-md5: 319cfed7654cbf4a61d9a3eabce3d2f4
last-modified: Fri, 03 Feb 2023 09:41:11 GMT
x-amz-version-id: xDdbIodlPjf9_oe3AXRshO6gvSPWf2Y3
etag: "4b0108440760f16641970c1d5d16cd00"
server: AmazonS3
via: 1.1 269b0fad85dfd450220cf6573a2d384e.cloudfront.net (CloudFront)
age: 78210
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: izJWZFQ03FN1h7KqLYpP_CWxpDBsCdz7lewrZ6Q17XbMzQlk609q3Q==
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash afe7db92a730b1a76bed3113f60da924
531e2ba6a5907332e9e77fdcc2d88da9adb5f703
04534a7ebb8a6583102a0a532496c38d09b744572f1d01a5da952ff4a2b9825f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 08:25:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
doggocasino.com/assets/images/payments/MC.webp
200 OK 5.7 kB URL HTTP/2 doggocasino.com/assets/images/payments/MC.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash a1e6c278fdafab2a5a4b685e0c58716f
b93e5dc087323be40023bbefaf8ba9c8744c944b
621320f77e17050f2f5a58e52f81fbc0031fa0fb388d3678615c1f313576b2b3
GET /assets/images/payments/MC.webp HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/no-no?affiliateName=%5Bcellxpert%5D&affid=cx-35656_393091&bannerid=35656&trackerid=35656_393091&brand=doggocasino&bta=35656&rdk=rk3
Cookie: _ga_K4EHGY5F0T=GS1.1.1675758389.1.0.1675758389.60.0.0; _ga=GA1.1.1511094843.1675758389; __adm_tid=tid-274fbbe92.366b3a956; affiliateId=cx-35656_393091; bannerId=35656; trackerId=35656_393091; affiliateName=%5Bcellxpert%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 5670
x-amz-meta-codebuild-content-sha256: 4f853d18badd3933524ca4a1dd6240279e0051fb38905b83f18834b4b93aaeb1
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:08219a5d-0b7c-4ae2-afb4-2507533d271d
x-amz-meta-codebuild-content-md5: 319cfed7654cbf4a61d9a3eabce3d2f4
last-modified: Fri, 03 Feb 2023 09:41:11 GMT
x-amz-version-id: V6ApUzXkoqaaeuR6uk5gf5LTnHQ3KXud
server: AmazonS3
date: Mon, 06 Feb 2023 10:12:40 GMT
etag: "a1e6c278fdafab2a5a4b685e0c58716f"
vary: Accept-Encoding
via: 1.1 269b0fad85dfd450220cf6573a2d384e.cloudfront.net (CloudFront)
age: 79982
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: g7BFfDe3OgamUOlq9HnUcHDgigCtvvoH6pt9RfjrnPn2Q0tv_7DcHw==
X-Firefox-Spdy: h2
doggocasino.com/assets/images/payments/AstroPay-isotipo.webp
200 OK 8.5 kB URL HTTP/2 doggocasino.com/assets/images/payments/AstroPay-isotipo.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 7b4904268f33a2bc7d4d9f6bf0b4cd30
0ecb6a5b1fef840b715baf1056de562dfc7cc925
2ec6fcda254d694c53f87b6df84b2cf4a0a2884d6149bf7c2b26952b4e6615b3
GET /assets/images/payments/AstroPay-isotipo.webp HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/no-no?affiliateName=%5Bcellxpert%5D&affid=cx-35656_393091&bannerid=35656&trackerid=35656_393091&brand=doggocasino&bta=35656&rdk=rk3
Cookie: _ga_K4EHGY5F0T=GS1.1.1675758389.1.0.1675758389.60.0.0; _ga=GA1.1.1511094843.1675758389; __adm_tid=tid-274fbbe92.366b3a956; affiliateId=cx-35656_393091; bannerId=35656; trackerId=35656_393091; affiliateName=%5Bcellxpert%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 8482
x-amz-meta-codebuild-content-sha256: 4f853d18badd3933524ca4a1dd6240279e0051fb38905b83f18834b4b93aaeb1
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:08219a5d-0b7c-4ae2-afb4-2507533d271d
x-amz-meta-codebuild-content-md5: 319cfed7654cbf4a61d9a3eabce3d2f4
last-modified: Fri, 03 Feb 2023 09:41:17 GMT
x-amz-version-id: Ps9PKeTbbhigMc6sKz8t0it7TMlpbRef
server: AmazonS3
date: Mon, 06 Feb 2023 10:35:22 GMT
etag: "7b4904268f33a2bc7d4d9f6bf0b4cd30"
vary: Accept-Encoding
via: 1.1 269b0fad85dfd450220cf6573a2d384e.cloudfront.net (CloudFront)
age: 78620
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: euGNF7-htH4SnNgYV1qOoTEVmiOmPYG7vDXkKlnshzlW6zorxrfhFg==
X-Firefox-Spdy: h2
doggocasino.com/assets/images/payments/CRYPTO-NO-square.webp
200 OK 9.5 kB URL HTTP/2 doggocasino.com/assets/images/payments/CRYPTO-NO-square.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 1743ed8f0a9ca24cb2f49dbb61f70b5b
2c3b851c280984ba7e84b08a956b6122d6575076
9b6bf4178662a1c7e7afd5f111f641de9a44afe4788afb885040b134c1cf2323
GET /assets/images/payments/CRYPTO-NO-square.webp HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/no-no?affiliateName=%5Bcellxpert%5D&affid=cx-35656_393091&bannerid=35656&trackerid=35656_393091&brand=doggocasino&bta=35656&rdk=rk3
Cookie: _ga_K4EHGY5F0T=GS1.1.1675758389.1.0.1675758389.60.0.0; _ga=GA1.1.1511094843.1675758389; __adm_tid=tid-274fbbe92.366b3a956; affiliateId=cx-35656_393091; bannerId=35656; trackerId=35656_393091; affiliateName=%5Bcellxpert%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 9456
x-amz-meta-codebuild-content-sha256: 4f853d18badd3933524ca4a1dd6240279e0051fb38905b83f18834b4b93aaeb1
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:08219a5d-0b7c-4ae2-afb4-2507533d271d
x-amz-meta-codebuild-content-md5: 319cfed7654cbf4a61d9a3eabce3d2f4
last-modified: Fri, 03 Feb 2023 09:41:15 GMT
x-amz-version-id: CXYe7FgL8mjYMZm0ACe.bnpKAO_q_UJT
server: AmazonS3
date: Mon, 06 Feb 2023 13:54:04 GMT
etag: "1743ed8f0a9ca24cb2f49dbb61f70b5b"
vary: Accept-Encoding
via: 1.1 269b0fad85dfd450220cf6573a2d384e.cloudfront.net (CloudFront)
age: 66698
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: oNBwbob8MxphmlUQZT3QFH2zSH9YIn3tfBS7mF_y1247yIplTySDcA==
X-Firefox-Spdy: h2
doggocasino.com/assets/mock/globe.webp
200 OK 1.9 kB URL HTTP/2 doggocasino.com/assets/mock/globe.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 19215c98163e609fed2e96a76e46f6cd
65fa846b9eafd2d3420b079a6ee8baac0fa183c5
685bf72f57fdcba509c9981d2ad69cd5f95d4b4135315011fad8c5bc2b5c79ad
GET /assets/mock/globe.webp HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/no-no?affiliateName=%5Bcellxpert%5D&affid=cx-35656_393091&bannerid=35656&trackerid=35656_393091&brand=doggocasino&bta=35656&rdk=rk3
Cookie: _ga_K4EHGY5F0T=GS1.1.1675758389.1.0.1675758389.60.0.0; _ga=GA1.1.1511094843.1675758389; __adm_tid=tid-274fbbe92.366b3a956; affiliateId=cx-35656_393091; bannerId=35656; trackerId=35656_393091; affiliateName=%5Bcellxpert%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 1902
x-amz-meta-codebuild-content-sha256: 4f853d18badd3933524ca4a1dd6240279e0051fb38905b83f18834b4b93aaeb1
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:08219a5d-0b7c-4ae2-afb4-2507533d271d
x-amz-meta-codebuild-content-md5: 319cfed7654cbf4a61d9a3eabce3d2f4
last-modified: Fri, 03 Feb 2023 09:41:17 GMT
x-amz-version-id: 8JKg15ghmJTy5z8fnU0cMlny4_6tcsRY
server: AmazonS3
date: Mon, 06 Feb 2023 10:12:40 GMT
etag: "19215c98163e609fed2e96a76e46f6cd"
vary: Accept-Encoding
via: 1.1 269b0fad85dfd450220cf6573a2d384e.cloudfront.net (CloudFront)
age: 79982
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: JgsA6o-xEhfsQJ5Kk8yfU1xQ8jji7FLNUuruN107CYDhmXsgdB2ONA==
X-Firefox-Spdy: h2
doggocasino.com/assets/images/chevron-up.svg
200 OK 377 B URL HTTP/2 doggocasino.com/assets/images/chevron-up.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (377), with no line terminators
Hash e99c36ba370f2d6cf266c3907e514133
8b48f9785b603081f5ee2012bd44596dd283b70c
eb236654d5b58ad96fee3c4f827259f12274576d8f17e02e3c733026674bccf3
GET /assets/images/chevron-up.svg HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/no-no?affiliateName=%5Bcellxpert%5D&affid=cx-35656_393091&bannerid=35656&trackerid=35656_393091&brand=doggocasino&bta=35656&rdk=rk3
Cookie: _ga_K4EHGY5F0T=GS1.1.1675758389.1.0.1675758389.60.0.0; _ga=GA1.1.1511094843.1675758389; __adm_tid=tid-274fbbe92.366b3a956; affiliateId=cx-35656_393091; bannerId=35656; trackerId=35656_393091; affiliateName=%5Bcellxpert%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 377
x-amz-meta-codebuild-content-sha256: 4f853d18badd3933524ca4a1dd6240279e0051fb38905b83f18834b4b93aaeb1
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:08219a5d-0b7c-4ae2-afb4-2507533d271d
x-amz-meta-codebuild-content-md5: 319cfed7654cbf4a61d9a3eabce3d2f4
last-modified: Fri, 03 Feb 2023 09:41:13 GMT
x-amz-version-id: FPbk3pFh6087f8cVw9_IjvMpsUFdh.dA
server: AmazonS3
date: Mon, 06 Feb 2023 10:12:40 GMT
etag: "e99c36ba370f2d6cf266c3907e514133"
vary: Accept-Encoding
via: 1.1 269b0fad85dfd450220cf6573a2d384e.cloudfront.net (CloudFront)
age: 79982
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: KtaaMLKgxIhCFGazyO9_yRjXLgg7BNWgIa2xa41cd-HCsWkeH8X2AQ==
X-Firefox-Spdy: h2
doggocasino.com/assets/images/footer-toggler.svg
200 OK 280 B URL HTTP/2 doggocasino.com/assets/images/footer-toggler.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with no line terminators
Hash 46e6bc71c2b77f578a5f70fff751c2e2
5ee5f0f9c2895c70cdc83336ccdb2e02fe0fae6a
541b157986e7a281b28b520b8a862570975f84cedd61b8fe390985f210b7b140
GET /assets/images/footer-toggler.svg HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/no-no?affiliateName=%5Bcellxpert%5D&affid=cx-35656_393091&bannerid=35656&trackerid=35656_393091&brand=doggocasino&bta=35656&rdk=rk3
Cookie: _ga_K4EHGY5F0T=GS1.1.1675758389.1.0.1675758389.60.0.0; _ga=GA1.1.1511094843.1675758389; __adm_tid=tid-274fbbe92.366b3a956; affiliateId=cx-35656_393091; bannerId=35656; trackerId=35656_393091; affiliateName=%5Bcellxpert%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 280
x-amz-meta-codebuild-content-sha256: 4f853d18badd3933524ca4a1dd6240279e0051fb38905b83f18834b4b93aaeb1
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:08219a5d-0b7c-4ae2-afb4-2507533d271d
x-amz-meta-codebuild-content-md5: 319cfed7654cbf4a61d9a3eabce3d2f4
last-modified: Fri, 03 Feb 2023 09:41:11 GMT
x-amz-version-id: cu43Y6AeD9h1fA7JazxmzeqdyAmtcOEK
server: AmazonS3
date: Mon, 06 Feb 2023 10:12:40 GMT
etag: "46e6bc71c2b77f578a5f70fff751c2e2"
vary: Accept-Encoding
via: 1.1 269b0fad85dfd450220cf6573a2d384e.cloudfront.net (CloudFront)
age: 79982
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: ZfDr2qDi70iBgvPtr6My0WdJofCq_I_DCckWpMDBKxB0WDKMT1d51A==
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 01dfab254464727dbb9211183889b47f
180d7a7133c72f6ff07493ea6054b3a6428369f5
8dfe2289902298189109f23dfefce3a78d6ab4f937fc20f47ce8de4ff4aed5f2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8DFE2289902298189109F23DFEFCE3A78D6AB4F937FC20F47CE8DE4FF4AED5F2"
Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2751
Expires: Tue, 07 Feb 2023 09:11:32 GMT
Date: Tue, 07 Feb 2023 08:25:41 GMT
Connection: keep-alive
doggocasino.com/assets/images/doggocasino-license.png
200 OK 46 kB URL HTTP/2 doggocasino.com/assets/images/doggocasino-license.png
IP
File type PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced\012- data
Hash 375b5b5bcd1d5179f5b789e4c28ca6df
f52bfd097b13f83fa43714f59786efa4082f55a1
f7acaa7ace617964cd79de3287bfa740f1d3fbcbed82ea1d09cd94058d4b1281
GET /assets/images/doggocasino-license.png HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/no-no?affiliateName=%5Bcellxpert%5D&affid=cx-35656_393091&bannerid=35656&trackerid=35656_393091&brand=doggocasino&bta=35656&rdk=rk3
Cookie: _ga_K4EHGY5F0T=GS1.1.1675758389.1.0.1675758389.60.0.0; _ga=GA1.1.1511094843.1675758389; __adm_tid=tid-274fbbe92.366b3a956; affiliateId=cx-35656_393091; bannerId=35656; trackerId=35656_393091; affiliateName=%5Bcellxpert%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 46382
x-amz-id-2: z3EfZ9kyt44IqHfiGMNj/owXwj7C3Gpt0NaRiK2xV6x2cvekaIHM+gj09tmVuVe+YJMT2Ls+qJg=
x-amz-request-id: QX2CFG43TCSTJYYP
date: Fri, 03 Feb 2023 09:43:05 GMT
x-amz-meta-codebuild-content-sha256: 4f853d18badd3933524ca4a1dd6240279e0051fb38905b83f18834b4b93aaeb1
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:08219a5d-0b7c-4ae2-afb4-2507533d271d
x-amz-meta-codebuild-content-md5: 319cfed7654cbf4a61d9a3eabce3d2f4
last-modified: Fri, 03 Feb 2023 09:41:09 GMT
x-amz-version-id: qzsIE1iyCTmCEtsI83V.sEHoZUCs3AEd
etag: "375b5b5bcd1d5179f5b789e4c28ca6df"
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 269b0fad85dfd450220cf6573a2d384e.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: sQWcPDZQSrFxwIwfD0fCTVToL4CXwsGnufjRB15l4fXC6Ct-il71pg==
age: 340957
X-Firefox-Spdy: h2
api2.gameassists.co.uk/casino/progressive/public/v1/counters?currencyIsoCode=NOK
200 OK 7.3 kB URL HTTP/1.1 api2.gameassists.co.uk/casino/progressive/public/v1/counters?currencyIsoCode=NOK
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (61029), with no line terminators
Hash 1758b5d44ff7380e0d82bb9b24d50bb4
97e59530eba8ccbf916ca662f26eae93f33066c7
16b7fad14e24799b5a2432d785119fe21adb24494abcb932e94f74f51cd0158a
GET /casino/progressive/public/v1/counters?currencyIsoCode=NOK HTTP/1.1
Host: api2.gameassists.co.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://doggocasino.com
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: no-cache
Pragma: no-cache
Content-Type: application/json; charset=utf-8
Expires: -1
Server:
X-CorrelationId: 21b170b2-1715-4940-8736-80f260ed0c82
X-Api-Version: 1.0.5.152
Access-Control-Allow-Origin: https://doggocasino.com
Access-Control-Allow-Credentials: true
Access-Control-Expose-Headers: X-CorrelationId
X-AspNet-Version: 4.0.30319
Request-Context: appId=cid-v1:39298cf6-0891-47ba-9f29-1f161231208d
cacheControlHeader: max-age-604800
Date: Tue, 07 Feb 2023 08:25:40 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 7250
Connection: Keep-Alive
o571455.ingest.sentry.io/api/5732343/envelope/?sentry_key=d1b047c874bf4ef7a99a8c956cfbe83d&sentry_version=7
429 Too Many Requests 198 B URL HTTP/2 o571455.ingest.sentry.io/api/5732343/envelope/?sentry_key=d1b047c874bf4ef7a99a8c956cfbe83d&sentry_version=7
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 478b411c59eb87249bea32cf7c7be5d2
023907c62eb55758905bb3c0e640b5b204ae0652
bac10d17440dcd6f6c6c4e0bd7eca2e1a7eec030ef3b1143d4be3791dcf91263
POST /api/5732343/envelope/?sentry_key=d1b047c874bf4ef7a99a8c956cfbe83d&sentry_version=7 HTTP/1.1
Host: o571455.ingest.sentry.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://doggocasino.com/
Content-Type: text/plain;charset=UTF-8
Origin: https://doggocasino.com
Content-Length: 41586
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 429 Too Many Requests
server: nginx
date: Tue, 07 Feb 2023 08:25:41 GMT
content-type: application/json
content-length: 198
retry-after: 23
x-sentry-rate-limits: 23:transaction:organization:transaction_usage_exceeded
access-control-allow-origin: https://doggocasino.com
access-control-expose-headers: x-sentry-error, x-sentry-rate-limits, retry-after
vary: Origin
x-envoy-upstream-service-time: 0
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
doggocasino.com/assets/fonts/CeraPro/Cera_Pro_Black.otf
200 OK 188 kB URL HTTP/2 doggocasino.com/assets/fonts/CeraPro/Cera_Pro_Black.otf
IP
File type OpenType font data\012- data
Size 188 kB (188164 bytes)
Hash 95d55d992d7f63799ad116dbd12a25cf
37dd0e816b3828a6e996cb1b185b18e10745fb3b
7f9ef82ea041a21505f28d21766821edcc9adda8ed407f676d3623dc4f5c499a
GET /assets/fonts/CeraPro/Cera_Pro_Black.otf HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/styles.6fe09080dd4bc8174585.css
Cookie: _ga_K4EHGY5F0T=GS1.1.1675758389.1.0.1675758389.60.0.0; _ga=GA1.1.1511094843.1675758389; __adm_tid=tid-274fbbe92.366b3a956; affiliateId=cx-35656_393091; bannerId=35656; trackerId=35656_393091; affiliateName=%5Bcellxpert%5D; cookie_policy=accepted
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 188164
x-amz-meta-codebuild-content-sha256: 4f853d18badd3933524ca4a1dd6240279e0051fb38905b83f18834b4b93aaeb1
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:08219a5d-0b7c-4ae2-afb4-2507533d271d
x-amz-meta-codebuild-content-md5: 319cfed7654cbf4a61d9a3eabce3d2f4
last-modified: Fri, 03 Feb 2023 09:41:06 GMT
x-amz-version-id: cGGVUIEFbAu.MKvOsLUqTtMQAYPt5eJ9
server: AmazonS3
date: Tue, 07 Feb 2023 03:09:34 GMT
etag: "95d55d992d7f63799ad116dbd12a25cf"
vary: Accept-Encoding
via: 1.1 269b0fad85dfd450220cf6573a2d384e.cloudfront.net (CloudFront)
age: 19601
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: vpc4kJBkxfvmY_dChcVJClORVuPeMRlCfMeGIZusUwdRNQ5PbGCG9w==
X-Firefox-Spdy: h2
c1.rfihub.net/js/tc.min.js
200 OK 6.2 kB URL HTTP/2 c1.rfihub.net/js/tc.min.js
IP
File type C source, ASCII text, with very long lines (19497)
Hash ab5a2e3f2414c0a2b622e48c0b6da2fd
1a894787bde6cbf9b58d47b8f4245607420112ad
a5ef19cf7ca85f760c462ed2f228430c8d0a6d9daf3aa34894a5c42113cfdb8f
GET /js/tc.min.js HTTP/1.1
Host: c1.rfihub.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/x-javascript
content-length: 6162
date: Tue, 07 Feb 2023 07:58:55 GMT
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
cache-control: public, max-age=3600
expires: Tue, 07 Feb 2023 08:58:55 GMT
last-modified: Tue, 07 Feb 2023 07:58:45 GMT
content-encoding: gzip
server: Jetty(9.3.29.v20201019)
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: DAIbnf8kQkAwJH_LQLqzQPpR-APNMdilsE1rwZm19iamaGOGksi8cA==
age: 1606
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 01dfab254464727dbb9211183889b47f
180d7a7133c72f6ff07493ea6054b3a6428369f5
8dfe2289902298189109f23dfefce3a78d6ab4f937fc20f47ce8de4ff4aed5f2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8DFE2289902298189109F23DFEFCE3A78D6AB4F937FC20F47CE8DE4FF4AED5F2"
Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2751
Expires: Tue, 07 Feb 2023 09:11:32 GMT
Date: Tue, 07 Feb 2023 08:25:41 GMT
Connection: keep-alive
doggocasino.com/favicon.ico
200 OK 4.3 kB URL HTTP/2 doggocasino.com/favicon.ico
IP
File type MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel\012- data
Hash bf17160c2e430c1c7fda0c795c8ee482
2990a13dd391376c8593c9243d4430a9318c7a18
aaee36adabe0daf0003147b30c2a56b8341f2469a6f4fec886e64412063f4cd4
GET /favicon.ico HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/en-us?affiliateName=[cellxpert]&affid=cx-35656_393091&bannerid=35656&trackerid=35656_393091&brand=doggocasino&bta=35656&rdk=rk3
Cookie: _ga_K4EHGY5F0T=GS1.1.1675758389.1.0.1675758389.60.0.0; _ga=GA1.1.1511094843.1675758389; __adm_tid=tid-274fbbe92.366b3a956; affiliateId=cx-35656_393091; bannerId=35656; trackerId=35656_393091; affiliateName=%5Bcellxpert%5D; cookie_policy=accepted
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/x-icon
content-length: 4286
x-amz-id-2: 2ste2lhugO1JPPzSB+EP26RpDA87kIOrCDF+P0F3TufMSP1CkuxSjiGsiAK/5RWB5DCzQ7mgMqs=
x-amz-request-id: MEV96PGRFFHNB2GG
date: Fri, 03 Feb 2023 09:43:19 GMT
x-amz-meta-codebuild-content-sha256: 4f853d18badd3933524ca4a1dd6240279e0051fb38905b83f18834b4b93aaeb1
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:08219a5d-0b7c-4ae2-afb4-2507533d271d
x-amz-meta-codebuild-content-md5: 319cfed7654cbf4a61d9a3eabce3d2f4
last-modified: Fri, 03 Feb 2023 09:41:18 GMT
x-amz-version-id: 0c6E6tXgf9xDc6AOFS5XVbDSv2cmmMus
etag: "bf17160c2e430c1c7fda0c795c8ee482"
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 269b0fad85dfd450220cf6573a2d384e.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: DkWSqkW6lK7Cc9h47SycnJrVIxv8QoiJqhPD3Uip0X2VT56K1ZuqHg==
age: 340943
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Tue, 07 Feb 2023 07:45:20 GMT
expires: Tue, 07 Feb 2023 09:45:20 GMT
cache-control: public, max-age=7200
age: 2421
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 2e90fb4abc4adea51d5da8fca3895c90
9ea128cefd8a4e91bc93a306cdafdcf5c0b99a40
6de37bd6d8e446c4e3b2d739ad311f23c403bb59c6adbfade793b274da3b5f28
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 08:25:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-K4EHGY5F0T&cid=1511094843.1675758389>m=45je3210&aip=1&z=1865091544
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-K4EHGY5F0T&cid=1511094843.1675758389>m=45je3210&aip=1&z=1865091544
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-K4EHGY5F0T&cid=1511094843.1675758389>m=45je3210&aip=1&z=1865091544 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 07 Feb 2023 08:25:41 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
script.hotjar.com/modules.bca0d1c28285412bb689.js
200 OK 68 kB URL HTTP/2 script.hotjar.com/modules.bca0d1c28285412bb689.js
IP
File type Unicode text, UTF-8 text, with very long lines (49086)
Hash e923aa360dc485b9df86355bd040c998
03c46dbd41e9d4bdf8a9e4bfbaba3f7f2e9280ec
9c7575553c5b81f9b905dbb27c8116b175b69e7472aa6597f8cace1c6434d676
GET /modules.bca0d1c28285412bb689.js HTTP/1.1
Host: script.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 67924
date: Fri, 03 Feb 2023 13:10:06 GMT
accept-ranges: bytes
access-control-allow-origin: *
cache-control: max-age=31536000
content-encoding: br
cross-origin-resource-policy: cross-origin
etag: "e923aa360dc485b9df86355bd040c998"
last-modified: Fri, 03 Feb 2023 13:09:45 GMT
strict-transport-security: max-age=2592000; includeSubDomains
x-content-type-options: nosniff
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: fQIt6SQiPxM8f-DNobjLkkfJ5ZU4vGgKUmwh9ZTyh9lqCX02boPLbw==
age: 328535
X-Firefox-Spdy: h2
static.zdassets.com/web_widget/latest/classic/web-widget-8165-8a6a509.js
200 OK 194 kB URL HTTP/2 static.zdassets.com/web_widget/latest/classic/web-widget-8165-8a6a509.js
IP
File type ASCII text, with very long lines (65307)
Size 194 kB (193956 bytes)
Hash bc10f16f0c07fb2d84cf2c2eff617927
885fc6be8e0ea19014d5839e7774fc66288cb126
dee1dde496b0d0c57aee23baf911b445dd01a7e5e5a42c32469159ca23702434
GET /web_widget/latest/classic/web-widget-8165-8a6a509.js HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 08:25:41 GMT
content-type: application/javascript; charset=utf-8
x-amz-id-2: lxOrAmvQiKM1F2EiPkzKL4OzRj5uoHkxJNsPMpw3XzL8LftWty26J0GiBffbXzZJ2b6tH9ExJrw=
x-amz-request-id: WYQ4XEV8W8HGCR76
x-amz-replication-status: COMPLETED
last-modified: Mon, 06 Feb 2023 04:40:42 GMT
etag: W/"d519ea27f763cb6ec80aeec5b45213a7"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Tue, 06 Feb 2024 04:40:41 GMT
x-amz-version-id: d8_vAjXcrHUlgQmyJ_IKv1tU7fPJQy7c
cf-cache-status: HIT
age: 91992
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PgDkn7FRSn2OOnFEiSVXR%2FEoseFmpm9GX7E%2FMFxi%2BS8WxhmKTXK%2FXXoxjTScoimxcQueBv6kc99iqhV7bIGVVzhWTSipQiM0FQeSr%2B0HxpH8OIhep689TljybH3BdOZi0qcBCl0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 795abc82f8de0b31-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 2e90fb4abc4adea51d5da8fca3895c90
9ea128cefd8a4e91bc93a306cdafdcf5c0b99a40
6de37bd6d8e446c4e3b2d739ad311f23c403bb59c6adbfade793b274da3b5f28
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 08:25:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sectigo.com/
200 OK 471 B IP
Hash 351768673989e1328d2dd26306f87210
49a980b46542cdd77c0ccf284494a7b873331759
170ab615550fc9006fdf721e2514fd0eecff58f64c88239c4ef5369921d85389
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 Feb 2023 08:25:42 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 04 Feb 2023 14:15:48 GMT
Expires: Sat, 11 Feb 2023 14:15:47 GMT
Etag: "49a980b46542cdd77c0ccf284494a7b873331759"
Cache-Control: max-age=366005,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 795abc845c4e0b49-OSL
ocsp.sectigo.com/
200 OK 471 B IP
Hash 351768673989e1328d2dd26306f87210
49a980b46542cdd77c0ccf284494a7b873331759
170ab615550fc9006fdf721e2514fd0eecff58f64c88239c4ef5369921d85389
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 Feb 2023 08:25:42 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 04 Feb 2023 14:15:48 GMT
Expires: Sat, 11 Feb 2023 14:15:47 GMT
Etag: "49a980b46542cdd77c0ccf284494a7b873331759"
Cache-Control: max-age=366005,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 795abc845b12b4f9-OSL
20841497p.rfihub.com/ca.html?ver=9&rb=46806&ca=20841497&_o=46806&_t=20841497&pe=https%3A%2F%2Fdoggocasino.com%2Fno-no%3FaffiliateName%3D%255Bcellxpert%255D%26affid%3Dcx-35656_393091%26bannerid%3D35656%26trackerid%3D35656_393091%26brand%3Ddoggocasino%26bta%3D35656%26rdk%3Drk3&pf=&ra=6812649336138228
200 OK 2.7 kB URL HTTP/1.1 20841497p.rfihub.com/ca.html?ver=9&rb=46806&ca=20841497&_o=46806&_t=20841497&pe=https%3A%2F%2Fdoggocasino.com%2Fno-no%3FaffiliateName%3D%255Bcellxpert%255D%26affid%3Dcx-35656_393091%26bannerid%3D35656%26trackerid%3D35656_393091%26brand%3Ddoggocasino%26bta%3D35656%26rdk%3Drk3&pf=&ra=6812649336138228
IP
File type HTML document text\012- HTML document, ASCII text, with very long lines (2660), with no line terminators
Hash 35452d251a8d34c857cb68230364a6e0
a0655e31f3f92cf69c74caa6de975ef989cad8aa
f2fb8c379d81e35a5b4765b949e6f50ed48ece281c8e481ed81753cdc5d1399b
GET /ca.html?ver=9&rb=46806&ca=20841497&_o=46806&_t=20841497&pe=https%3A%2F%2Fdoggocasino.com%2Fno-no%3FaffiliateName%3D%255Bcellxpert%255D%26affid%3Dcx-35656_393091%26bannerid%3D35656%26trackerid%3D35656_393091%26brand%3Ddoggocasino%26bta%3D35656%26rdk%3Drk3&pf=&ra=6812649336138228 HTTP/1.1
Host: 20841497p.rfihub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 07 Feb 2023 08:25:42 GMT
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Set-Cookie: ruds=H4sIAAAAAAAA_-MSNjU0NjY2sjQ1MjE0tzAxNTQ3MRPiM9Q19ykLsLR0906O9MsHAHvjVCYlAAAA; Path=/; Domain=.rfihub.com; Secure; SameSite=None
eud=H4sIAAAAAAAA_5vFyGtoZm5qbmphbGJkYGK0C41_Co3_Co3_C40_iQmVPwuNvwiNvwqNvwmNvwtdPQsq_xYafxMrmn5uNPt50fjCqPxHaHwAlQDFbyABAAA; Path=/; Domain=.rfihub.com; Expires=Sun, 3 Mar 2024 08:25:42 GMT; Secure; SameSite=None
rud=H4sIAAAAAAAA_-MSNjU0NjY2sjQ1MjE0tzAxNTQ3MRPiM9Q19ykLsLR0906O9MsHAHvjVCYlAAAA; Path=/; Domain=.rfihub.com; Expires=Sun, 3 Mar 2024 08:25:42 GMT; Secure; SameSite=None
Cache-Control: no-cache
Content-Type: text/html;charset=utf-8
Content-Length: 2660
Server: Jetty(9.3.29.v20201019)
20841497p.rfihub.com/ca.html?ver=9&rb=46806&ca=20841497&_o=46806&_t=20841497&pe=https%3A%2F%2Fdoggocasino.com%2Fno-no%3FaffiliateName%3D%255Bcellxpert%255D%26affid%3Dcx-35656_393091%26bannerid%3D35656%26trackerid%3D35656_393091%26brand%3Ddoggocasino%26bta%3D35656%26rdk%3Drk3&pf=&ra=29567288352320986
200 OK 2.7 kB URL HTTP/1.1 20841497p.rfihub.com/ca.html?ver=9&rb=46806&ca=20841497&_o=46806&_t=20841497&pe=https%3A%2F%2Fdoggocasino.com%2Fno-no%3FaffiliateName%3D%255Bcellxpert%255D%26affid%3Dcx-35656_393091%26bannerid%3D35656%26trackerid%3D35656_393091%26brand%3Ddoggocasino%26bta%3D35656%26rdk%3Drk3&pf=&ra=29567288352320986
IP
File type HTML document text\012- HTML document, ASCII text, with very long lines (2660), with no line terminators
Hash 2686eaee260bc4ad485a547a37a08d56
9816252df1f65c909124c2f4de46ce3fd8f511f1
f358e29118681d61d90b85edceeb2b0089df7260a78eea5d6e880ce6be3b15a3
GET /ca.html?ver=9&rb=46806&ca=20841497&_o=46806&_t=20841497&pe=https%3A%2F%2Fdoggocasino.com%2Fno-no%3FaffiliateName%3D%255Bcellxpert%255D%26affid%3Dcx-35656_393091%26bannerid%3D35656%26trackerid%3D35656_393091%26brand%3Ddoggocasino%26bta%3D35656%26rdk%3Drk3&pf=&ra=29567288352320986 HTTP/1.1
Host: 20841497p.rfihub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 07 Feb 2023 08:25:42 GMT
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Set-Cookie: ruds=H4sIAAAAAAAA_-MSNjU0NjY2sjQ1MjE0tzAxNTQ3MRXiM9T18kozyy9Mz0hKL_IDAIPc-uMlAAAA; Path=/; Domain=.rfihub.com; Secure; SameSite=None
eud=H4sIAAAAAAAA_5vFyGtoZm5qbmphbGJkYGK8C41_Co3_Co3_C40_iQmVPwuNvwiNvwqNvwmNvwtdPQsq_xYafxMrmn5uNPt50fjCqPxHaHwArO29TCABAAA; Path=/; Domain=.rfihub.com; Expires=Sun, 3 Mar 2024 08:25:42 GMT; Secure; SameSite=None
rud=H4sIAAAAAAAA_-MSNjU0NjY2sjQ1MjE0tzAxNTQ3MRXiM9T18kozyy9Mz0hKL_IDAIPc-uMlAAAA; Path=/; Domain=.rfihub.com; Expires=Sun, 3 Mar 2024 08:25:42 GMT; Secure; SameSite=None
Cache-Control: no-cache
Content-Type: text/html;charset=utf-8
Content-Length: 2660
Server: Jetty(9.3.29.v20201019)
vars.hotjar.com/box-e031119f9e9e307a08fa610f85dbfb52.html
200 OK 1.0 kB URL HTTP/2 vars.hotjar.com/box-e031119f9e9e307a08fa610f85dbfb52.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2368), with no line terminators
Hash 112fdf47cdb80b9ce3d033ed09717460
3898efa86cbf1b64dc41a90a110ed5afd6f2ae13
3bfb2e882091d872eece2eee40084183a5fcb0a7ed98c1b004850751260a4cbb
GET /box-e031119f9e9e307a08fa610f85dbfb52.html HTTP/1.1
Host: vars.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html
content-length: 1034
date: Fri, 03 Feb 2023 13:10:06 GMT
accept-ranges: bytes
cache-control: max-age=31536000
content-encoding: br
cross-origin-embedder-policy: require-corp
cross-origin-resource-policy: cross-origin
etag: "112fdf47cdb80b9ce3d033ed09717460"
last-modified: Fri, 03 Feb 2023 13:09:45 GMT
strict-transport-security: max-age=2592000; includeSubDomains
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: bFnGYbr_qlPJqc71jpaNDVTVfn5LM6CK_CMGd6ssej0xMLLm32KIIw==
age: 328536
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 1a89e85c6f53e0452140114e8e853b4d
af171cb28421ec9043e21ec8b2e43e176aad3da1
380a394be926b133c3c226b120a3cff09cca2fa717a7015958d758303dfb9e78
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=122730
Date: Tue, 07 Feb 2023 08:25:42 GMT
Etag: "63e1369a-1d7"
Expires: Wed, 08 Feb 2023 18:31:12 GMT
Last-Modified: Mon, 06 Feb 2023 17:19:22 GMT
Server: ECS (nyb/1D10)
X-Cache: Miss from cloudfront
Via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: pNRpCSJqHKDLhpxlJX3iYaPB_4rQOnlHMKsAnlROsEL0q0PQ8-7S4g==
Age: 4310
doggocasino.com/assets/theme/images/bottom-left-ribbon-main.webp
200 OK 938 B URL HTTP/2 doggocasino.com/assets/theme/images/bottom-left-ribbon-main.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 8d68bfd2cfba32a4165feb5fb804d34e
46bb765ee90b8ab2fedecdfb5bf38d6b0cd92c85
b3fd3fe71d455cdfca148d74e4af6bc18cf49083e436740c63ba0e6b3bd1aa2e
GET /assets/theme/images/bottom-left-ribbon-main.webp HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/no-no?affiliateName=%5Bcellxpert%5D&affid=cx-35656_393091&bannerid=35656&trackerid=35656_393091&brand=doggocasino&bta=35656&rdk=rk3
Cookie: _ga_K4EHGY5F0T=GS1.1.1675758389.1.0.1675758389.60.0.0; _ga=GA1.2.1511094843.1675758389; __adm_tid=tid-274fbbe92.366b3a956; affiliateId=cx-35656_393091; bannerId=35656; trackerId=35656_393091; affiliateName=%5Bcellxpert%5D; cookie_policy=accepted; _gid=GA1.2.633836092.1675758391; _gat_UA-196341002-1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 938
date: Mon, 06 Feb 2023 15:17:09 GMT
x-amz-meta-codebuild-content-sha256: 4f853d18badd3933524ca4a1dd6240279e0051fb38905b83f18834b4b93aaeb1
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:08219a5d-0b7c-4ae2-afb4-2507533d271d
x-amz-meta-codebuild-content-md5: 319cfed7654cbf4a61d9a3eabce3d2f4
last-modified: Fri, 03 Feb 2023 09:41:08 GMT
x-amz-version-id: Xu5y91fDXEAJhwSGBFPBufpeVa2i1Ha4
etag: "8d68bfd2cfba32a4165feb5fb804d34e"
server: AmazonS3
via: 1.1 269b0fad85dfd450220cf6573a2d384e.cloudfront.net (CloudFront)
age: 61714
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: 71C7bILBY-6rmddPQ6YOcuA_JFZWUas81xsaoT3OYV7Ntv7ITPkDbA==
X-Firefox-Spdy: h2
widget-mediator.zopim.com/s/W/ws/rjus8sgH21VMUZLd/c/1675758390901
101 Switching Protocols 0 B URL HTTP/1.1 widget-mediator.zopim.com/s/W/ws/rjus8sgH21VMUZLd/c/1675758390901
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s/W/ws/rjus8sgH21VMUZLd/c/1675758390901 HTTP/1.1
Host: widget-mediator.zopim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://doggocasino.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 1UvZjUdJg5MCHwBAn/2kYA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Tue, 07 Feb 2023 08:25:42 GMT
Connection: upgrade
Set-Cookie: AWSALB=WLgmP3AhNgwFvGqKxPnvOPmDK9v7hjWqoF5pdzfoFX2iRdKXP0bdJvwlcB0FTtaa9255/vrIYOPC6vMLNz+FCTWIUB0j2/PGLkKXa9PhKmrX+pZXErl8OlbZOUm3; Expires=Tue, 14 Feb 2023 08:25:42 GMT; Path=/
AWSALBCORS=WLgmP3AhNgwFvGqKxPnvOPmDK9v7hjWqoF5pdzfoFX2iRdKXP0bdJvwlcB0FTtaa9255/vrIYOPC6vMLNz+FCTWIUB0j2/PGLkKXa9PhKmrX+pZXErl8OlbZOUm3; Expires=Tue, 14 Feb 2023 08:25:42 GMT; Path=/; SameSite=None; Secure
Upgrade: websocket
Sec-WebSocket-Accept: qB4ltncpSFc1bUUzl0XZGHx0EvY=
Sec-WebSocket-Version: 13
WebSocket-Server: uWebSockets
live.rezync.com/pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5133329524178451746&referrer=https%3A%2F%2Fdoggocasino.com%2Fno-no%3FaffiliateName%3D%255Bcellxpert%255D%26affid%3Dcx-35656_393091%26bannerid%3D35656%26trackerid%3D35656_393091%26brand%3Ddoggocasino%26bta%3D35656%26rdk%3Drk3
302 Found 661 B URL HTTP/2 live.rezync.com/pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5133329524178451746&referrer=https%3A%2F%2Fdoggocasino.com%2Fno-no%3FaffiliateName%3D%255Bcellxpert%255D%26affid%3Dcx-35656_393091%26bannerid%3D35656%26trackerid%3D35656_393091%26brand%3Ddoggocasino%26bta%3D35656%26rdk%3Drk3
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (575)
Hash cb8886a93755753cedbbfab6f53f17db
44e1df14b12ab372a8d27634a270ebc5d89cf776
64176c72cdc2ba1517bddbfcc258f697a655bec0382695bf416d61f65f636785
GET /pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5133329524178451746&referrer=https%3A%2F%2Fdoggocasino.com%2Fno-no%3FaffiliateName%3D%255Bcellxpert%255D%26affid%3Dcx-35656_393091%26bannerid%3D35656%26trackerid%3D35656_393091%26brand%3Ddoggocasino%26bta%3D35656%26rdk%3Drk3 HTTP/1.1
Host: live.rezync.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
content-type: text/html; charset=utf-8
content-length: 661
location: https://p.rfihub.com/cm?pub=39342&in=0&userid=854595e9-4193-45d9-8463-0b0ba45ec092%3A1675758342.4071605&forward=https%3A//idsync.rlcdn.com/501709.gif%3Fpartner_uid%3D854595e9-4193-45d9-8463-0b0ba45ec092%253A1675758342.4071605
date: Tue, 07 Feb 2023 08:25:42 GMT
set-cookie: zync-uuid=854595e9-4193-45d9-8463-0b0ba45ec092:1675758342.4071605; Domain=rezync.com; Expires=Sun, 06 Aug 2023 00:25:42 GMT; Path=/; SameSite=None; Secure
sd-session-id=.eJwNyjsOwyAMANC7eA4VxjZgLhPl4wG1oVVIl0a5ezM-6Z0wfmzfpmbtgHLsXxtgedVbHcoJvf42e0IBQSIKKoExZRZMHOEaoFvv9d3Gut4nC4uKqWNUciyrusyRnJ_9PLHY4jUUjEmSZOLwYJ8weoHrD4iPJLk.Y-ILBg.uV0w6RkkXgfWykLwmCf5y-pRchk; Expires=Sun, 06 Aug 2023 08:25:42 GMT; HttpOnly; Path=/; SameSite=None; Secure
vary: Cookie
server: lighttpd/1.4.59
x-cache: Miss from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: k_vAWIptGL4dmHwS87rBOn1C4oZd_TJI31sI4cyW2ZFKF6uE8FCSrw==
X-Firefox-Spdy: h2
live.rezync.com/pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5133329524178451745&referrer=https%3A%2F%2Fdoggocasino.com%2Fno-no%3FaffiliateName%3D%255Bcellxpert%255D%26affid%3Dcx-35656_393091%26bannerid%3D35656%26trackerid%3D35656_393091%26brand%3Ddoggocasino%26bta%3D35656%26rdk%3Drk3
302 Found 661 B URL HTTP/2 live.rezync.com/pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5133329524178451745&referrer=https%3A%2F%2Fdoggocasino.com%2Fno-no%3FaffiliateName%3D%255Bcellxpert%255D%26affid%3Dcx-35656_393091%26bannerid%3D35656%26trackerid%3D35656_393091%26brand%3Ddoggocasino%26bta%3D35656%26rdk%3Drk3
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (575)
Hash de7c3ecfc4935f0129aceb4e87315e82
5508cbefc6eaeda3048c1ce5d0da426479038ef3
7c9bfe27030778cae9bc2beae50ac25965e571cc70c4711462e73267e0f61da8
GET /pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5133329524178451745&referrer=https%3A%2F%2Fdoggocasino.com%2Fno-no%3FaffiliateName%3D%255Bcellxpert%255D%26affid%3Dcx-35656_393091%26bannerid%3D35656%26trackerid%3D35656_393091%26brand%3Ddoggocasino%26bta%3D35656%26rdk%3Drk3 HTTP/1.1
Host: live.rezync.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
content-type: text/html; charset=utf-8
content-length: 661
location: https://p.rfihub.com/cm?pub=39342&in=0&userid=bc15cf18-22ba-4f17-b6c1-fc46216aafe9%3A1675758342.4141598&forward=https%3A//idsync.rlcdn.com/501709.gif%3Fpartner_uid%3Dbc15cf18-22ba-4f17-b6c1-fc46216aafe9%253A1675758342.4141598
date: Tue, 07 Feb 2023 08:25:42 GMT
set-cookie: zync-uuid=bc15cf18-22ba-4f17-b6c1-fc46216aafe9:1675758342.4141598; Domain=rezync.com; Expires=Sun, 06 Aug 2023 00:25:42 GMT; Path=/; SameSite=None; Secure
sd-session-id=.eJwNylEKwyAMANC75LsOEhO1XqaoiyBb3ajtz0rvvn4-eCcsX93W1LXvEPft0AnKu90aEE8Y7bfqCyIIWmtpFmL0gQU9C1wTDB2jffrSnvfJBaVUDIYoJ8MVvcmuoKmFHaFLqeoc0XnxEizTg5FR5gDXH8SEJiY.Y-ILBg.GaZVUyNTrFTgbM_PdJVGzeiGukI; Expires=Sun, 06 Aug 2023 08:25:42 GMT; HttpOnly; Path=/; SameSite=None; Secure
vary: Cookie
server: lighttpd/1.4.59
x-cache: Miss from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 28IbejY5xIPq2FeRLHQP0PGF3nxh82xo-truVDXoo6a5wMS2XnTgFg==
X-Firefox-Spdy: h2
2d1c8d36-b9ba-45b7-87c9-e34c592a597a.seals-emr.certria.com/sealassets/c2f58aab3b91e32236325bd02ee19209-doggocasino.com-8cdd4d66f8d65689b62819334a267b9a257fee4eb2750b2e47cdaf63d0becac6311bea6226c3373c1ea5283761ef2821-c2VhbC5wbmc%3D?status=valid
200 OK 53 kB URL HTTP/2 2d1c8d36-b9ba-45b7-87c9-e34c592a597a.seals-emr.certria.com/sealassets/c2f58aab3b91e32236325bd02ee19209-doggocasino.com-8cdd4d66f8d65689b62819334a267b9a257fee4eb2750b2e47cdaf63d0becac6311bea6226c3373c1ea5283761ef2821-c2VhbC5wbmc%3D?status=valid
IP
File type PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced\012- data
Hash fceb44c117d8c9766bdd23befc239931
8a57ed8068117e00c0257cb97340274253236989
428b3487df7ab6c93f3f6345481dfc178a0c6e4c7589ccd6a3a11b12db077f28
GET /sealassets/c2f58aab3b91e32236325bd02ee19209-doggocasino.com-8cdd4d66f8d65689b62819334a267b9a257fee4eb2750b2e47cdaf63d0becac6311bea6226c3373c1ea5283761ef2821-c2VhbC5wbmc%3D?status=valid HTTP/1.1
Host: 2d1c8d36-b9ba-45b7-87c9-e34c592a597a.seals-emr.certria.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 52815
date: Tue, 07 Feb 2023 08:24:26 GMT
x-powered-by: Express
cache-control: max-age=1200
etag: W/"ce4f-ilftgGgRfgDAJXy5c0AnQlMjaYk"
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 795abaae2dd2908a-FRA
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: qLjYdTNNgGU_QxBhiZ3kdWbWo9CWmpcSFZrLW6zUMDvpx72W_mheSQ==
age: 76
X-Firefox-Spdy: h2
51d4256e-9ede-4425-8b77-d7e5166c1c25.snippet.antillephone.com/sealassets/c2f58aab3b91e32236325bd02ee19209-doggocasino.com-2f90385e7147995d0ad0e1568dcb8420125a9230e800b76e4574b197458fcd3ec3fae37cdc434512e60b35647fd94003-c2VhbC5wbmc%3D?status=valid
200 OK 46 kB URL HTTP/2 51d4256e-9ede-4425-8b77-d7e5166c1c25.snippet.antillephone.com/sealassets/c2f58aab3b91e32236325bd02ee19209-doggocasino.com-2f90385e7147995d0ad0e1568dcb8420125a9230e800b76e4574b197458fcd3ec3fae37cdc434512e60b35647fd94003-c2VhbC5wbmc%3D?status=valid
IP
File type PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced\012- data
Hash 375b5b5bcd1d5179f5b789e4c28ca6df
f52bfd097b13f83fa43714f59786efa4082f55a1
f7acaa7ace617964cd79de3287bfa740f1d3fbcbed82ea1d09cd94058d4b1281
GET /sealassets/c2f58aab3b91e32236325bd02ee19209-doggocasino.com-2f90385e7147995d0ad0e1568dcb8420125a9230e800b76e4574b197458fcd3ec3fae37cdc434512e60b35647fd94003-c2VhbC5wbmc%3D?status=valid HTTP/1.1
Host: 51d4256e-9ede-4425-8b77-d7e5166c1c25.snippet.antillephone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 46382
date: Tue, 07 Feb 2023 08:24:26 GMT
x-powered-by: Express
cache-control: max-age=1200
etag: W/"b52e-9Sv9CXsT+D+kNxT1l4bvpAgvVaE"
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 795abaae3bf32c18-FRA
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: QBH64u1Zede4KcI-ved88i2f6T3GOoZnNf1cns6DyxeP-WCCJYWusA==
age: 76
X-Firefox-Spdy: h2
2d1c8d36-b9ba-45b7-87c9-e34c592a597a.seals-emr.certria.com/54f396e0-b046-49b1-9cb3-0c69281d7ea9-beacon.png
200 OK 68 B URL HTTP/2 2d1c8d36-b9ba-45b7-87c9-e34c592a597a.seals-emr.certria.com/54f396e0-b046-49b1-9cb3-0c69281d7ea9-beacon.png
IP
File type PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced\012- data
Hash e679fbd466a2d656f194a5da4fa083cd
2aa795c7607aa6ea41313be88f1b7a9c1ab516b3
f309b7c03d9cae63a9bedbee6ed655f3dbcdb194132943639344dead5f3b9710
GET /54f396e0-b046-49b1-9cb3-0c69281d7ea9-beacon.png HTTP/1.1
Host: 2d1c8d36-b9ba-45b7-87c9-e34c592a597a.seals-emr.certria.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 68
date: Wed, 11 Jan 2023 03:11:33 GMT
last-modified: Tue, 15 Dec 2020 08:04:53 GMT
etag: "e679fbd466a2d656f194a5da4fa083cd"
cache-control: no-cache, no-store, must-revalidate
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Ft4xLRDLSmu1q_aDzcZEOqT489pZTuXfEyt9Wy2XHd2IuL1a1EB6xw==
age: 2351650
X-Firefox-Spdy: h2
51d4256e-9ede-4425-8b77-d7e5166c1c25.snippet.antillephone.com/54f396e0-b046-49b1-9cb3-0c69281d7ea9-beacon.png
200 OK 68 B URL HTTP/2 51d4256e-9ede-4425-8b77-d7e5166c1c25.snippet.antillephone.com/54f396e0-b046-49b1-9cb3-0c69281d7ea9-beacon.png
IP
File type PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced\012- data
Hash e679fbd466a2d656f194a5da4fa083cd
2aa795c7607aa6ea41313be88f1b7a9c1ab516b3
f309b7c03d9cae63a9bedbee6ed655f3dbcdb194132943639344dead5f3b9710
GET /54f396e0-b046-49b1-9cb3-0c69281d7ea9-beacon.png HTTP/1.1
Host: 51d4256e-9ede-4425-8b77-d7e5166c1c25.snippet.antillephone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 68
date: Sat, 21 Jan 2023 04:07:09 GMT
last-modified: Tue, 15 Dec 2020 08:04:53 GMT
etag: "e679fbd466a2d656f194a5da4fa083cd"
cache-control: no-cache, no-store, must-revalidate
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: j5ojXkMiQic_iaii_o4err_EcrJJlarRkbW4hEjHhwwi41VS6vuT1w==
age: 1484314
X-Firefox-Spdy: h2
status.geotrust.com/
200 OK 471 B IP
Hash 5ee251a62940fe98ad0b69a0094e8b6e
b10c6e93501b138a999ce7f01faac6b99c001c86
5df954f04827354bbd960f188a137644a3ca3ae532b21efe03bac33abae6a7f1
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2946
Cache-Control: max-age=112689
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 08:25:42 GMT
Etag: "63e114b5-1d7"
Expires: Wed, 08 Feb 2023 15:43:51 GMT
Last-Modified: Mon, 06 Feb 2023 14:54:45 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 29af19f4d35dda344776c6f6db66c235
164bc64453a7e1e9c960982ff07d116ccf11434f
64ead99aef7098e547907e17edee7de198173e5951a82f91a038a562b50d1486
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 07 Feb 2023 08:25:42 GMT
Last-Modified: Tue, 07 Feb 2023 07:31:22 GMT
Server: ECS (bsa/EB13)
X-Cache: Miss from cloudfront
Via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: ETWZDTbO5y-X3P7NTBw3udgVClIsey9EA1-ie3h9E7mDGYz1Xn0aZQ==
Age: 3260
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash ad8a1482be1b46ed50b2022f71cb1999
9fc816060f5a6f9893f6084bbcad37524414314d
a68ac3a567e87f32ab2ae9a721fcf981c494db7e779e295b77ef36f2c4691bee
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 07 Feb 2023 08:25:42 GMT
Last-Modified: Tue, 07 Feb 2023 07:09:19 GMT
Server: ECS (nyb/1D1C)
X-Cache: Miss from cloudfront
Via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: m16qz5vPRBN0-TYXSHUAQdgA94APYZ4HZJ1eJfMe9P5nv40mBc69gg==
Age: 4585
us-u.openx.net/w/1.0/sd?id=537073062&val=5133329524178451746&r=
200 OK 43 B URL HTTP/2 us-u.openx.net/w/1.0/sd?id=537073062&val=5133329524178451746&r=
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /w/1.0/sd?id=537073062&val=5133329524178451746&r= HTTP/1.1
Host: us-u.openx.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept
server: OXGW/0.0.0
pragma: no-cache
p3p: CP="CUR ADM OUR NOR STA NID"
expires: Mon, 26 Jul 1997 05:00:00 GMT
date: Tue, 07 Feb 2023 08:25:42 GMT
content-type: image/gif
content-length: 43
cache-control: private, max-age=0, no-cache
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp2.globalsign.com/gsalphasha2g2
200 OK 43 B URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 Feb 2023 08:25:39 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Sat, 11 Feb 2023 06:37:38 GMT
ETag: "58c9fe16f5ba203498e41d1a1cd2ce2283ca0bfd"
Last-Modified: Tue, 07 Feb 2023 06:37:39 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1046
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 795abc78cfaab4f4-OSL
in.hotjar.com/api/v2/client/sites/3054262/visit-data?sv=6
200 OK 130 B URL HTTP/2 in.hotjar.com/api/v2/client/sites/3054262/visit-data?sv=6
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 3ac5a1abb0b1156eb94593de38e35ee8
9118cc2bc5d0509b6767bf1e98c41daa4760f2fe
9cfd20c9bc14e494dbc0f213bc0132f4982b5b6b092fa36c8d086f45d781765a
POST /api/v2/client/sites/3054262/visit-data?sv=6 HTTP/1.1
Host: in.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain; charset=UTF-8
Content-Length: 146
Origin: https://doggocasino.com
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 07 Feb 2023 08:25:42 GMT
content-type: application/json
vary: Accept-Encoding
cache-control: no-cache, no-store
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 86400
content-encoding: br
X-Firefox-Spdy: h2
contextual.media.net/cksync.php?cs=3&type=rkt&ovsid=5133329524178451746
200 OK 237 B URL HTTP/2 contextual.media.net/cksync.php?cs=3&type=rkt&ovsid=5133329524178451746
IP
File type GIF image data, version 87a, 1 x 1\012- data
Hash 74378edf31ef26cd97c236ad08d05fa3
fdd52cdbf193d1dfd1031978667689f3414b49ed
11cb2c0e70f91c6a0326cf4a4f9fa1b177c14efba6b56bf7535624b9c7bce990
GET /cksync.php?cs=3&type=rkt&ovsid=5133329524178451746 HTTP/1.1
Host: contextual.media.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Apache
content-length: 237
content-type: image/gif
set-cookie: visitor-id=3187599423580208000V10; Expires=Wed, 07 Feb 2024 08:25:42 GMT; domain=.media.net; Path=/;
data-rk=5133329524178451746~~3;Expires=Tue, 06 Feb 2024 08:25:42 GMT;path=/;domain=.media.net;
p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA", CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA, CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA
strict-transport-security: max-age=31536000
x-mnet-hl2: E
expires: Tue, 07 Feb 2023 08:25:42 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Tue, 07 Feb 2023 08:25:42 GMT
X-Firefox-Spdy: h2
contextual.media.net/cksync.php?cs=3&type=rkt&ovsid=5133329524178451745
200 OK 237 B URL HTTP/2 contextual.media.net/cksync.php?cs=3&type=rkt&ovsid=5133329524178451745
IP
File type GIF image data, version 87a, 1 x 1\012- data
Hash 74378edf31ef26cd97c236ad08d05fa3
fdd52cdbf193d1dfd1031978667689f3414b49ed
11cb2c0e70f91c6a0326cf4a4f9fa1b177c14efba6b56bf7535624b9c7bce990
GET /cksync.php?cs=3&type=rkt&ovsid=5133329524178451745 HTTP/1.1
Host: contextual.media.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: Apache
content-length: 237
content-type: image/gif
set-cookie: visitor-id=3187599423580213000V10; Expires=Wed, 07 Feb 2024 08:25:42 GMT; domain=.media.net; Path=/;
data-rk=5133329524178451745~~3;Expires=Tue, 06 Feb 2024 08:25:42 GMT;path=/;domain=.media.net;
p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA", CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA, CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA
strict-transport-security: max-age=31536000
x-mnet-hl2: E
expires: Tue, 07 Feb 2023 08:25:42 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Tue, 07 Feb 2023 08:25:42 GMT
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash ad8a1482be1b46ed50b2022f71cb1999
9fc816060f5a6f9893f6084bbcad37524414314d
a68ac3a567e87f32ab2ae9a721fcf981c494db7e779e295b77ef36f2c4691bee
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 07 Feb 2023 08:25:42 GMT
Last-Modified: Tue, 07 Feb 2023 07:30:28 GMT
Server: ECS (bsa/EB19)
X-Cache: Miss from cloudfront
Via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: yO_thvNga89NBAG2QWqsM_46nP4QKnk3atoB6ArsEo_cRp8DI7wUSA==
Age: 3315
ib.adnxs.com/setuid?entity=18&code=5133329524178451746
307 Redirection 0 B URL HTTP/1.1 ib.adnxs.com/setuid?entity=18&code=5133329524178451746
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /setuid?entity=18&code=5133329524178451746 HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Tue, 07 Feb 2023 08:25:42 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
Location: https://ib.adnxs.com/bounce?%2Fsetuid%3Fentity%3D18%26code%3D5133329524178451746
AN-X-Request-Uuid: fcf1d3e3-96f7-43b5-861d-a237c7fa2533
Set-Cookie: uuid2=1077465792218840842; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 08-May-2023 08:25:42 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 958.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
p.rfihub.com/cm?pub=24472&in=1
302 Found 0 B URL HTTP/1.1 p.rfihub.com/cm?pub=24472&in=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cm?pub=24472&in=1 HTTP/1.1
Host: p.rfihub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 302 Found
Date: Tue, 07 Feb 2023 08:25:42 GMT
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Set-Cookie: rud=H4sIAAAAAAAA_-MSNjU0MjE2MjI2MrE0sjAxMDIxMRDiM9Qtd0z1qsytqvApzEwFAMhwZh4lAAAA; Path=/; Domain=.rfihub.com; Expires=Sun, 3 Mar 2024 08:25:42 GMT; Secure; SameSite=None
ruds=H4sIAAAAAAAA_-MSNjU0MjE2MjI2MrE0sjAxMDIxMRDiM9Qtd0z1qsytqvApzEwFAMhwZh4lAAAA; Path=/; Domain=.rfihub.com; Secure; SameSite=None
eud=H4sIAAAAAAAA_7vFwmtoZm5qbmphbGJkZmkOALOAGRkQAAAA; Path=/; Domain=.rfihub.com; Expires=Sun, 3 Mar 2024 08:25:42 GMT; Secure; SameSite=None
Location: https://ps.eyeota.net/match?uid=5124322324928402440&bid=omt9pi0
Content-Length: 0
Server: Jetty(9.3.29.v20201019)
ib.adnxs.com/setuid?entity=18&code=5133329524178451745
307 Redirection 0 B URL HTTP/1.1 ib.adnxs.com/setuid?entity=18&code=5133329524178451745
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /setuid?entity=18&code=5133329524178451745 HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Tue, 07 Feb 2023 08:25:42 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
Location: https://ib.adnxs.com/bounce?%2Fsetuid%3Fentity%3D18%26code%3D5133329524178451745
AN-X-Request-Uuid: 8673c30e-a084-492d-84f0-6a5c5b7c9adb
Set-Cookie: uuid2=4608394828874111735; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 08-May-2023 08:25:42 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 958.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
bpi.rtactivate.com/tag/?id=11017&user_id=5133329524178451745
200 OK 43 B URL HTTP/2 bpi.rtactivate.com/tag/?id=11017&user_id=5133329524178451745
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /tag/?id=11017&user_id=5133329524178451745 HTTP/1.1
Host: bpi.rtactivate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: awselb/2.0
date: Tue, 07 Feb 2023 08:25:42 GMT
content-type: image/gif
content-length: 43
X-Firefox-Spdy: h2
x.dlx.addthis.com/e/rocketfuel_sync?na_exid=5133329524178451746
200 OK 43 B URL HTTP/2 x.dlx.addthis.com/e/rocketfuel_sync?na_exid=5133329524178451746
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /e/rocketfuel_sync?na_exid=5133329524178451746 HTTP/1.1
Host: x.dlx.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
content-length: 43
expires: Tue, 07 Feb 2023 08:25:42 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Tue, 07 Feb 2023 08:25:42 GMT
strict-transport-security: max-age=2628000
X-Firefox-Spdy: h2
x.dlx.addthis.com/e/rocketfuel_sync?na_exid=5133329524178451745
200 OK 43 B URL HTTP/2 x.dlx.addthis.com/e/rocketfuel_sync?na_exid=5133329524178451745
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /e/rocketfuel_sync?na_exid=5133329524178451745 HTTP/1.1
Host: x.dlx.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/gif
content-length: 43
expires: Tue, 07 Feb 2023 08:25:42 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Tue, 07 Feb 2023 08:25:42 GMT
strict-transport-security: max-age=2628000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 262283a921f231669fd41486228a6e9a
4b96dcb2cd03f53280d2ecf5ccb249b0b32e6e97
13b8cc87c28e0113401d88f89971eb966afde870a3e4be2602ff34942e81862d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 08:25:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
doggocasino.com/assets/theme/icons/Trophy-Icon_black.svg
200 OK 1.1 kB URL HTTP/2 doggocasino.com/assets/theme/icons/Trophy-Icon_black.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (444)
Hash 7b1929c41539ec668d0ee7f90d60c806
7f2a67a40cda73535300b2c1163d944ed359a90a
e7d1b00e0af53bde997f0f3cc563031647bef86b05ae617866a1744255569164
GET /assets/theme/icons/Trophy-Icon_black.svg HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/no-no?affiliateName=%5Bcellxpert%5D&affid=cx-35656_393091&bannerid=35656&trackerid=35656_393091&brand=doggocasino&bta=35656&rdk=rk3
Cookie: _ga_K4EHGY5F0T=GS1.1.1675758389.1.0.1675758389.60.0.0; _ga=GA1.2.1511094843.1675758389; __adm_tid=tid-274fbbe92.366b3a956; affiliateId=cx-35656_393091; bannerId=35656; trackerId=35656_393091; affiliateName=%5Bcellxpert%5D; cookie_policy=accepted; _gid=GA1.2.633836092.1675758391; _gat_UA-196341002-1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
x-amz-meta-codebuild-content-sha256: 4f853d18badd3933524ca4a1dd6240279e0051fb38905b83f18834b4b93aaeb1
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:08219a5d-0b7c-4ae2-afb4-2507533d271d
x-amz-meta-codebuild-content-md5: 319cfed7654cbf4a61d9a3eabce3d2f4
last-modified: Fri, 03 Feb 2023 09:41:14 GMT
x-amz-version-id: Esd2v9c7Skpxa24A5OTvAGl.eNx6QZfv
server: AmazonS3
content-encoding: br
date: Mon, 06 Feb 2023 09:55:09 GMT
etag: W/"53db43e4c9552aaffec27abd1ebe0b2f"
vary: Accept-Encoding
via: 1.1 269b0fad85dfd450220cf6573a2d384e.cloudfront.net (CloudFront)
age: 81034
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: rZrQkrVeThJxm1XqkWzolSILFl58TsYjYwemZcJ2IQ9jFLJ1e0SDRw==
X-Firefox-Spdy: h2
p.rfihub.com/cm?pub=39342&in=0&userid=854595e9-4193-45d9-8463-0b0ba45ec092%3A1675758342.4071605&forward=https%3A//idsync.rlcdn.com/501709.gif%3Fpartner_uid%3D854595e9-4193-45d9-8463-0b0ba45ec092%253A1675758342.4071605
302 Found 0 B URL HTTP/1.1 p.rfihub.com/cm?pub=39342&in=0&userid=854595e9-4193-45d9-8463-0b0ba45ec092%3A1675758342.4071605&forward=https%3A//idsync.rlcdn.com/501709.gif%3Fpartner_uid%3D854595e9-4193-45d9-8463-0b0ba45ec092%253A1675758342.4071605
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cm?pub=39342&in=0&userid=854595e9-4193-45d9-8463-0b0ba45ec092%3A1675758342.4071605&forward=https%3A//idsync.rlcdn.com/501709.gif%3Fpartner_uid%3D854595e9-4193-45d9-8463-0b0ba45ec092%253A1675758342.4071605 HTTP/1.1
Host: p.rfihub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20841497p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Date: Tue, 07 Feb 2023 08:25:42 GMT
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Set-Cookie: rud=H4sIAAAAAAAA_-MSNjU0sDSzMDUzMjM0MLMwNjI2tBTiM9QtywzNL3XLKapyLvEDAEtwsW8lAAAA; Path=/; Domain=.rfihub.com; Expires=Sun, 3 Mar 2024 08:25:42 GMT; Secure; SameSite=None
eud=H4sIAAAAAAAA_0XIsRWAMAgFwAmsMgc-CP8HcBujWcjSaS298p4WSbC4SmDlAt4lieGiU-cJrkurHzaCwXT0HRo2lG_b_sxuH938G75KAAAA; Path=/; Domain=.rfihub.com; Expires=Sun, 3 Mar 2024 08:25:42 GMT; Secure; SameSite=None
ruds=H4sIAAAAAAAA_-MSNjU0sDSzMDUzMjM0MLMwNjI2tBTiM9QtywzNL3XLKapyLvEDAEtwsW8lAAAA; Path=/; Domain=.rfihub.com; Secure; SameSite=None
euds=H4sIAAAAAAAA_wXByxWAMAgEwIvt4IOwy8dujKaRVJ6ZfWURbK4WWLuAf0shXHTqfMH1aY_HIpksx7ihaaE8eeMpnToAAAA; Path=/; Domain=.rfihub.com; Secure; SameSite=None
Location: https://idsync.rlcdn.com/501709.gif?partner_uid=854595e9-4193-45d9-8463-0b0ba45ec092%3A1675758342.4071605
Content-Length: 0
Server: Jetty(9.3.29.v20201019)
cm.g.doubleclick.net/pixel?&in=0&google_nid=zeta_interactive&google_cm=&google_sc=&google_hm=NTEzMzMyOTUyNDE3ODQ1MTc0Ng==&forward=
302 Found 369 B URL HTTP/2 cm.g.doubleclick.net/pixel?&in=0&google_nid=zeta_interactive&google_cm=&google_sc=&google_hm=NTEzMzMyOTUyNDE3ODQ1MTc0Ng==&forward=
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 88a20ad3dcbafd6988ee7ab880531c7f
6c8ef5a3ed32018a63c0bb41d5144e08d1844c1a
54ba2a74bde83794fa44ec410abfa562d2cd4b8bfb412a8737572d84eb623dcd
GET /pixel?&in=0&google_nid=zeta_interactive&google_cm=&google_sc=&google_hm=NTEzMzMyOTUyNDE3ODQ1MTc0Ng==&forward= HTTP/1.1
Host: cm.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
location: https://cm.g.doubleclick.net/pixel?in=0&google_nid=zeta_interactive&google_cm=&google_sc=&google_hm=NTEzMzMyOTUyNDE3ODQ1MTc0Ng==&forward=&google_tc=
date: Tue, 07 Feb 2023 08:25:42 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
server: HTTP server (unknown)
content-length: 369
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Tue, 07-Feb-2023 08:40:42 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 00f2751a37aac848a15d1869a815caf5
bd98800c5aef1a41c680649a9bb8a26a70992019
5a0735cf78bf66696733b5b03b45f9c9e3f1bd5cdf96ebe45cd7630542ae88b5
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Tue, 07 Feb 2023 08:25:42 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19036
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Mon, 06 Feb 2023 21:34:15 GMT
Expires: Tue, 07 Feb 2023 21:34:15 GMT
ETag: "bd98800c5aef1a41c680649a9bb8a26a70992019"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
bpi.rtactivate.com/tag/?id=11017&user_id=5133329524178451746
200 OK 43 B URL HTTP/2 bpi.rtactivate.com/tag/?id=11017&user_id=5133329524178451746
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /tag/?id=11017&user_id=5133329524178451746 HTTP/1.1
Host: bpi.rtactivate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: awselb/2.0
date: Tue, 07 Feb 2023 08:25:42 GMT
content-type: image/gif
content-length: 43
X-Firefox-Spdy: h2
status.geotrust.com/
200 OK 471 B IP
Hash be0279d2ee2439ec090bf88eec5d7818
7bee2a38a0abb877ed9f93216d96b738e7259369
8bc575542e5a14ca292bcc18c6f9736d753d858f8d52c20092b5af4fedf3c11c
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5938
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 08:25:42 GMT
Last-Modified: Tue, 07 Feb 2023 06:46:44 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
dpm.demdex.net/ibs:dpid=1121&dpuuid=5133329524178451746&redir=
302 Found 0 B URL HTTP/1.1 dpm.demdex.net/ibs:dpid=1121&dpuuid=5133329524178451746&redir=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ibs:dpid=1121&dpuuid=5133329524178451746&redir= HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
DCS: dcs-prod-irl1-2-v045-027dff91d.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
Location: https://dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=1121&dpuuid=5133329524178451746&redir=
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
set-cookie: demdex=82698076364761507472609714845547331034; Max-Age=15552000; Expires=Sun, 06 Aug 2023 08:25:42 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-TID: C7etacUWT2I=
Content-Length: 0
Connection: keep-alive
ocsp.digicert.com/
200 OK 727 B IP
Hash be1ca9a0a7d22d78e8814f53515b1bc7
ebed04b0d5ed107554701f2bfb8b875445b880bc
ff99207dbde1d2e56e68f3a7dc3fcc454062e6358248a965b4477f47f879a794
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4638
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 08:25:42 GMT
Last-Modified: Tue, 07 Feb 2023 07:08:25 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 727
status.geotrust.com/
200 OK 471 B IP
Hash 5ee251a62940fe98ad0b69a0094e8b6e
b10c6e93501b138a999ce7f01faac6b99c001c86
5df954f04827354bbd960f188a137644a3ca3ae532b21efe03bac33abae6a7f1
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2946
Cache-Control: max-age=112689
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 08:25:42 GMT
Etag: "63e114b5-1d7"
Expires: Wed, 08 Feb 2023 15:43:51 GMT
Last-Modified: Mon, 06 Feb 2023 14:54:45 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash d7b6d91279850b1a77c9e1fd78dd0008
48dbe4d8605ffa0a460412ed168f5a41226154ea
54d0b9abbf414fa8b6f377c086bbbb5f0be3369fc01a1ed812dffbe16c83d362
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Tue, 07 Feb 2023 08:25:42 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19036
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Tue, 07 Feb 2023 03:29:35 GMT
Expires: Wed, 08 Feb 2023 03:29:35 GMT
ETag: "48dbe4d8605ffa0a460412ed168f5a41226154ea"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
cm.g.doubleclick.net/pixel?&in=0&google_nid=zeta_interactive&google_cm=&google_sc=&google_hm=NTEzMzMyOTUyNDE3ODQ1MTc0NQ==&forward=
302 Found 369 B URL HTTP/2 cm.g.doubleclick.net/pixel?&in=0&google_nid=zeta_interactive&google_cm=&google_sc=&google_hm=NTEzMzMyOTUyNDE3ODQ1MTc0NQ==&forward=
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 85e407a63310526a71ee8ddf7d271faa
d3abf005fd994156d5dd56e8a09fe43e64fcae19
6a190ebd65082510208e842e5a4f09b9e936023e76d312117521dc2c7625f831
GET /pixel?&in=0&google_nid=zeta_interactive&google_cm=&google_sc=&google_hm=NTEzMzMyOTUyNDE3ODQ1MTc0NQ==&forward= HTTP/1.1
Host: cm.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
location: https://cm.g.doubleclick.net/pixel?in=0&google_nid=zeta_interactive&google_cm=&google_sc=&google_hm=NTEzMzMyOTUyNDE3ODQ1MTc0NQ==&forward=&google_tc=
date: Tue, 07 Feb 2023 08:25:42 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
server: HTTP server (unknown)
content-length: 369
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Tue, 07-Feb-2023 08:40:42 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash e548ffa4af9ee22662d5165121d3e540
2a547f747c811a23cbb01197be13b1e7013563b9
0322cac5181098be177f16427d6cb44217dae4a8f423750615009fef0fa36714
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2546
Cache-Control: max-age=101872
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 08:25:42 GMT
Etag: "63e0ec04-1d7"
Expires: Wed, 08 Feb 2023 12:43:34 GMT
Last-Modified: Mon, 06 Feb 2023 12:01:08 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
e1.emxdgt.com/put?d=d16&uid=5133329524178451746
204 No Content 0 B URL HTTP/2 e1.emxdgt.com/put?d=d16&uid=5133329524178451746
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /put?d=d16&uid=5133329524178451746 HTTP/1.1
Host: e1.emxdgt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
content-type: text/html
date: Tue, 07 Feb 2023 08:25:42 GMT
content-length: 0
X-Firefox-Spdy: h2
sync.search.spotxchange.com/partner?adv_id=7180&uid=5133329524178451746&img=1
302 Found 0 B URL HTTP/1.1 sync.search.spotxchange.com/partner?adv_id=7180&uid=5133329524178451746&img=1
IP
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partner?adv_id=7180&uid=5133329524178451746&img=1 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Tue, 07 Feb 2023 08:25:42 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=0313ffb8-a6c1-11ed-870e-124172220406; expires=Tue, 07-Mar-2023 08:25:42 GMT; path=/; domain=.spotxchange.com; SameSite=none
Location: /partner?adv_id=7180&uid=5133329524178451746&img=1&__user_check__=1&sync_id=0314000e-a6c1-11ed-870e-124172220406
X-fe: 70
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
aa.agkn.com/adscores/g.pixel?sid=9212192898&rf=5133329524178451746
200 OK 43 B URL HTTP/2 aa.agkn.com/adscores/g.pixel?sid=9212192898&rf=5133329524178451746
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash db04c7b378cb2db912c3ba8a5a774ee3
dee34bd86c3484d31002182aa2b7caa4699126b8
98b3d9d20e032f90aca49e9b116225d539ff6fbdb7e42c3c363f63896ac03d2a
GET /adscores/g.pixel?sid=9212192898&rf=5133329524178451746 HTTP/1.1
Host: aa.agkn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 07 Feb 2023 08:25:42 GMT
content-type: image/gif
content-length: 43
server: AAWebServer
p3p: policyref="https://www.agkn.com/p3p/p3p.xml",CP="NOI NID"
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: accept, cache-control, origin, x-requested-with, x-file-name, content-type
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash bbd90245f244e76d9f45706b1fb5ae58
1e15a0d03d74175f976310f2db334050485ed546
03fda0816cd373e36f33630fc50b4fb5e5852fb1f2c65175b98437386c436dd4
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 Feb 2023 08:25:42 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 04 Feb 2023 01:56:49 GMT
Expires: Sat, 11 Feb 2023 01:56:48 GMT
Etag: "1e15a0d03d74175f976310f2db334050485ed546"
Cache-Control: max-age=321665,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 795abc8aeb880b49-OSL
dsum-sec.casalemedia.com/rum?cm_dsp_id=57&external_user_id=5133329524178451746&forward=
302 Found 0 B URL HTTP/1.1 dsum-sec.casalemedia.com/rum?cm_dsp_id=57&external_user_id=5133329524178451746&forward=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rum?cm_dsp_id=57&external_user_id=5133329524178451746&forward= HTTP/1.1
Host: dsum-sec.casalemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Date: Tue, 07 Feb 2023 08:25:42 GMT
Server: Apache
Cache-Control: no-cache
Expires: 0
Location: /rum?cm_dsp_id=57&external_user_id=5133329524178451746&forward=&C=1
P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI"
Pragma: no-cache
Content-Length: 0
Set-Cookie: CMID=Y.ILBl1Oif7xQJE20NPyjwAA; Path=/; Domain=casalemedia.com; Expires=Wed, 07 Feb 2024 08:25:42 GMT; Max-Age=31536000; Secure; SameSite=None
CMPS=4441; Path=/; Domain=casalemedia.com; Expires=Mon, 08 May 2023 08:25:42 GMT; Max-Age=7776000; Secure; SameSite=None
CMPRO=4441; Path=/; Domain=casalemedia.com; Expires=Mon, 08 May 2023 08:25:42 GMT; Max-Age=7776000; Secure; SameSite=None
Keep-Alive: timeout=1, max=500
Connection: Keep-Alive
sync-tm.everesttech.net/upi/pid/Mlpt2JaG/?redir=https%3A%2F%2Fp.rfihub.com%2Fcm%3Fin%3D1%26pub%3D21653%26userid%3D%24%7BTM_USER_ID%7D
302 Found 0 B URL HTTP/2 sync-tm.everesttech.net/upi/pid/Mlpt2JaG/?redir=https%3A%2F%2Fp.rfihub.com%2Fcm%3Fin%3D1%26pub%3D21653%26userid%3D%24%7BTM_USER_ID%7D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /upi/pid/Mlpt2JaG/?redir=https%3A%2F%2Fp.rfihub.com%2Fcm%3Fin%3D1%26pub%3D21653%26userid%3D%24%7BTM_USER_ID%7D HTTP/1.1
Host: sync-tm.everesttech.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: CP="NOI DSP COR LAW PSAo PSDo IVAo IVDo OUR BUS UNI DEM"
access-control-allow-origin: *
set-cookie: everest_g_v2=g_surferid~Y_ILBgAFQG_kFwAh; Path=/; Domain=.everesttech.net; Expires=Wed, 07-Feb-2024 08:25:42 GMT; Max-Age=31536000
location: https://sync-tm.everesttech.net/ct/upi/pid/Mlpt2JaG/?redir=https%3A%2F%2Fp.rfihub.com%2Fcm%3Fin%3D1%26pub%3D21653%26userid%3D%24%7BTM_USER_ID%7D&_test=Y_ILBgAFQG_kFwAh
server: Jetty(9.4.35.v20201120)
accept-ranges: bytes
date: Tue, 07 Feb 2023 08:25:42 GMT
via: 1.1 varnish
x-served-by: cache-bma1625-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1675758343.837451,VS0,VE92
cache-control: no-cache
pragma: no-cache
content-length: 0
X-Firefox-Spdy: h2
beacon.krxd.net/usermatch.gif?partner_id=rfuel&partner_user_id=5133329524178451746
204 No Content 0 B URL HTTP/2 beacon.krxd.net/usermatch.gif?partner_id=rfuel&partner_user_id=5133329524178451746
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /usermatch.gif?partner_id=rfuel&partner_user_id=5133329524178451746 HTTP/1.1
Host: beacon.krxd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Tue, 07 Feb 2023 08:25:42 GMT
set-cookie: _kuid_=PXW5mTKR; Expires=Sun, 06-Aug-23 08:25:42 GMT; Max-Age=15552000; Domain=.krxd.net; Path=/
cache-control: private, no-cache, no-store
p3p: policyref="https://cdn.krxd.net/kruxcontent/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC"
x-served-by: beacon-n018-dub-prod.krxd.net
x-request-time: D=31 t=1675758342
X-Firefox-Spdy: h2
e1.emxdgt.com/put?d=d16&uid=5133329524178451745
204 No Content 0 B URL HTTP/2 e1.emxdgt.com/put?d=d16&uid=5133329524178451745
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /put?d=d16&uid=5133329524178451745 HTTP/1.1
Host: e1.emxdgt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
content-type: text/html
date: Tue, 07 Feb 2023 08:25:42 GMT
content-length: 0
X-Firefox-Spdy: h2
x.bidswitch.net/sync?dsp_id=119&user_id=5133329524178451746&expires=30
302 Found 0 B URL HTTP/2 x.bidswitch.net/sync?dsp_id=119&user_id=5133329524178451746&expires=30
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync?dsp_id=119&user_id=5133329524178451746&expires=30 HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Tue, 07 Feb 2023 08:25:42 GMT
content-length: 0
location: https://x.bidswitch.net/ul_cb/sync?dsp_id=119&user_id=5133329524178451746&expires=30
cache-control: no-cache, no-store, must-revalidate
set-cookie: tuuid=6aa3efc3-1d5e-4858-ae19-d800070e6138; path=/; expires=Wed, 07-Feb-2024 08:25:42 GMT; domain=.bidswitch.net; samesite=none; secure
c=1675758342; path=/; expires=Wed, 07-Feb-2024 08:25:42 GMT; domain=.bidswitch.net; samesite=none; secure
tuuid_lu=1675758342; path=/; expires=Wed, 07-Feb-2024 08:25:42 GMT; domain=.bidswitch.net; samesite=none; secure
c=1675758342; path=/; expires=Wed, 07-Feb-2024 08:25:42 GMT; domain=.bidswitch.net; samesite=none; secure
X-Firefox-Spdy: h2
p.rfihub.com/cm?pub=39342&in=0&userid=bc15cf18-22ba-4f17-b6c1-fc46216aafe9%3A1675758342.4141598&forward=https%3A//idsync.rlcdn.com/501709.gif%3Fpartner_uid%3Dbc15cf18-22ba-4f17-b6c1-fc46216aafe9%253A1675758342.4141598
302 Found 0 B URL HTTP/1.1 p.rfihub.com/cm?pub=39342&in=0&userid=bc15cf18-22ba-4f17-b6c1-fc46216aafe9%3A1675758342.4141598&forward=https%3A//idsync.rlcdn.com/501709.gif%3Fpartner_uid%3Dbc15cf18-22ba-4f17-b6c1-fc46216aafe9%253A1675758342.4141598
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cm?pub=39342&in=0&userid=bc15cf18-22ba-4f17-b6c1-fc46216aafe9%3A1675758342.4141598&forward=https%3A//idsync.rlcdn.com/501709.gif%3Fpartner_uid%3Dbc15cf18-22ba-4f17-b6c1-fc46216aafe9%253A1675758342.4141598 HTTP/1.1
Host: p.rfihub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20841497p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Date: Tue, 07 Feb 2023 08:25:42 GMT
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Set-Cookie: ruds=H4sIAAAAAAAA_-MSNjU0MTG1sDA1MjYysTQztzQ3MBHiM9QNzkn1N3SudAw3TgwFAHviaK4lAAAA; Path=/; Domain=.rfihub.com; Secure; SameSite=None
euds=H4sIAAAAAAAA_wXByQ3AMAgEwE_aIdJiLrsbQKaQVJ6Z7_FqaA-CmCtJBk5lDZoWY1jm3H1grq6xhF-BQHf87RAfIDoAAAA; Path=/; Domain=.rfihub.com; Secure; SameSite=None
eud=H4sIAAAAAAAA_0XIuw2AMAwFwAmoMoeRnuNPzDaOhQeiZFpKrrxn-C5oNRYx7yRpOG0rUJcYwzL7jgvm6rqm8CkQaKx3HH_GtA_PSsC8SgAAAA; Path=/; Domain=.rfihub.com; Expires=Sun, 3 Mar 2024 08:25:42 GMT; Secure; SameSite=None
rud=H4sIAAAAAAAA_-MSNjU0MTG1sDA1MjYysTQztzQ3MBHiM9QNzkn1N3SudAw3TgwFAHviaK4lAAAA; Path=/; Domain=.rfihub.com; Expires=Sun, 3 Mar 2024 08:25:42 GMT; Secure; SameSite=None
Location: https://idsync.rlcdn.com/501709.gif?partner_uid=bc15cf18-22ba-4f17-b6c1-fc46216aafe9%3A1675758342.4141598
Content-Length: 0
Server: Jetty(9.3.29.v20201019)
dsum-sec.casalemedia.com/rum?cm_dsp_id=57&external_user_id=5133329524178451745&forward=
302 Found 0 B URL HTTP/1.1 dsum-sec.casalemedia.com/rum?cm_dsp_id=57&external_user_id=5133329524178451745&forward=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rum?cm_dsp_id=57&external_user_id=5133329524178451745&forward= HTTP/1.1
Host: dsum-sec.casalemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Date: Tue, 07 Feb 2023 08:25:42 GMT
Server: Apache
Cache-Control: no-cache
Expires: 0
Location: /rum?cm_dsp_id=57&external_user_id=5133329524178451745&forward=&C=1
P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI"
Pragma: no-cache
Content-Length: 0
Set-Cookie: CMID=Y.ILBtRB1SDS.FIj2bTsbAAA; Path=/; Domain=casalemedia.com; Expires=Wed, 07 Feb 2024 08:25:42 GMT; Max-Age=31536000; Secure; SameSite=None
CMPS=4403; Path=/; Domain=casalemedia.com; Expires=Mon, 08 May 2023 08:25:42 GMT; Max-Age=7776000; Secure; SameSite=None
CMPRO=4403; Path=/; Domain=casalemedia.com; Expires=Mon, 08 May 2023 08:25:42 GMT; Max-Age=7776000; Secure; SameSite=None
Keep-Alive: timeout=1, max=500
Connection: Keep-Alive
dpm.demdex.net/ibs:dpid=1121&dpuuid=5133329524178451745&redir=
302 Found 0 B URL HTTP/1.1 dpm.demdex.net/ibs:dpid=1121&dpuuid=5133329524178451745&redir=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ibs:dpid=1121&dpuuid=5133329524178451745&redir= HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
DCS: dcs-prod-irl1-1-v045-0227c85fb.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
Location: https://dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=1121&dpuuid=5133329524178451745&redir=
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
set-cookie: demdex=90456792209520918921681161998826958848; Max-Age=15552000; Expires=Sun, 06 Aug 2023 08:25:42 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-TID: +PuxCTRPTZk=
Content-Length: 0
Connection: keep-alive
aa.agkn.com/adscores/g.pixel?sid=9212192898&rf=5133329524178451745
200 OK 43 B URL HTTP/2 aa.agkn.com/adscores/g.pixel?sid=9212192898&rf=5133329524178451745
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash db04c7b378cb2db912c3ba8a5a774ee3
dee34bd86c3484d31002182aa2b7caa4699126b8
98b3d9d20e032f90aca49e9b116225d539ff6fbdb7e42c3c363f63896ac03d2a
GET /adscores/g.pixel?sid=9212192898&rf=5133329524178451745 HTTP/1.1
Host: aa.agkn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 07 Feb 2023 08:25:42 GMT
content-type: image/gif
content-length: 43
server: AAWebServer
p3p: policyref="https://www.agkn.com/p3p/p3p.xml",CP="NOI NID"
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: accept, cache-control, origin, x-requested-with, x-file-name, content-type
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 262283a921f231669fd41486228a6e9a
4b96dcb2cd03f53280d2ecf5ccb249b0b32e6e97
13b8cc87c28e0113401d88f89971eb966afde870a3e4be2602ff34942e81862d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 08:25:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
sync.search.spotxchange.com/partner?adv_id=7180&uid=5133329524178451745&img=1
302 Found 0 B URL HTTP/1.1 sync.search.spotxchange.com/partner?adv_id=7180&uid=5133329524178451745&img=1
IP
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partner?adv_id=7180&uid=5133329524178451745&img=1 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Tue, 07 Feb 2023 08:25:42 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=031fa650-a6c1-11ed-893c-10b91cd50406; expires=Tue, 07-Mar-2023 08:25:42 GMT; path=/; domain=.spotxchange.com; SameSite=none
Location: /partner?adv_id=7180&uid=5133329524178451745&img=1&__user_check__=1&sync_id=031fa6a0-a6c1-11ed-893c-10b91cd50406
X-fe: 144
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
x.bidswitch.net/sync?dsp_id=119&user_id=5133329524178451745&expires=30
302 Found 0 B URL HTTP/2 x.bidswitch.net/sync?dsp_id=119&user_id=5133329524178451745&expires=30
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync?dsp_id=119&user_id=5133329524178451745&expires=30 HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Tue, 07 Feb 2023 08:25:42 GMT
content-length: 0
location: https://x.bidswitch.net/ul_cb/sync?dsp_id=119&user_id=5133329524178451745&expires=30
cache-control: no-cache, no-store, must-revalidate
set-cookie: tuuid=eb92bbc0-b467-4f53-924b-aad800bf5163; path=/; expires=Wed, 07-Feb-2024 08:25:42 GMT; domain=.bidswitch.net; samesite=none; secure
c=1675758342; path=/; expires=Wed, 07-Feb-2024 08:25:42 GMT; domain=.bidswitch.net; samesite=none; secure
tuuid_lu=1675758342; path=/; expires=Wed, 07-Feb-2024 08:25:42 GMT; domain=.bidswitch.net; samesite=none; secure
c=1675758342; path=/; expires=Wed, 07-Feb-2024 08:25:42 GMT; domain=.bidswitch.net; samesite=none; secure
X-Firefox-Spdy: h2
beacon.krxd.net/usermatch.gif?partner_id=rfuel&partner_user_id=5133329524178451745
204 No Content 0 B URL HTTP/2 beacon.krxd.net/usermatch.gif?partner_id=rfuel&partner_user_id=5133329524178451745
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /usermatch.gif?partner_id=rfuel&partner_user_id=5133329524178451745 HTTP/1.1
Host: beacon.krxd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Tue, 07 Feb 2023 08:25:42 GMT
set-cookie: _kuid_=PXW5mUc4; Expires=Sun, 06-Aug-23 08:25:42 GMT; Max-Age=15552000; Domain=.krxd.net; Path=/
cache-control: private, no-cache, no-store
p3p: policyref="https://cdn.krxd.net/kruxcontent/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC"
x-served-by: beacon-n017-dub-prod.krxd.net
x-request-time: D=30 t=1675758342
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 8bbdc5f1d52745aec14f4d37c09fa8e9
db5a4efee2a2f1071307833dec63f04ad5bfeeaf
5990a23f9e59c41bddb2c7d5f1932e4d74fd37ca7b22cca51c06867c21b84554
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=120650
Date: Tue, 07 Feb 2023 08:25:42 GMT
Etag: "63e13527-1d7"
Expires: Wed, 08 Feb 2023 17:56:32 GMT
Last-Modified: Mon, 06 Feb 2023 17:13:11 GMT
Server: ECS (nyb/1D1C)
X-Cache: Miss from cloudfront
Via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: ocrt8QMyXgqmeWsSkHnk3Bdv_MHL651Ox5wAbkal5ulifS4MJE8v2Q==
Age: 2601
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 8bbdc5f1d52745aec14f4d37c09fa8e9
db5a4efee2a2f1071307833dec63f04ad5bfeeaf
5990a23f9e59c41bddb2c7d5f1932e4d74fd37ca7b22cca51c06867c21b84554
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=120666
Date: Tue, 07 Feb 2023 08:25:43 GMT
Etag: "63e13527-1d7"
Expires: Wed, 08 Feb 2023 17:56:49 GMT
Last-Modified: Mon, 06 Feb 2023 17:13:11 GMT
Server: ECS (nyb/1D22)
X-Cache: Miss from cloudfront
Via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: ko8wo7NVj9k_32XdX1NSOelL-7-WwjmXYoT9vSb_Yil6iTaDnfNcSg==
Age: 2618
ocsp.sectigo.com/
200 OK 471 B IP
Hash 83712ff1b330fc8aee58e72feb68a1d5
d31392c6247cbdad51a6fd71539654acbac2119a
2f2881ce7eb01a738787665d049784ade1b0ad0c3b83f311d9809ad852061288
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 Feb 2023 08:25:43 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 05 Feb 2023 01:42:56 GMT
Expires: Sun, 12 Feb 2023 01:42:55 GMT
Etag: "d31392c6247cbdad51a6fd71539654acbac2119a"
Cache-Control: max-age=407231,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 795abc8b4bde0b49-OSL
idsync.rlcdn.com/360947.gif?partner_uid=5133329524178451745
200 OK 42 B URL HTTP/2 idsync.rlcdn.com/360947.gif?partner_uid=5133329524178451745
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /360947.gif?partner_uid=5133329524178451745 HTTP/1.1
Host: idsync.rlcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache, no-store
content-type: image/gif
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
set-cookie: rlas3=5Cp8tP+2iHstK1w48VZ3e2FUNCVoOVhyC8K89mmoAoo=; Path=/; Domain=rlcdn.com; Expires=Wed, 07 Feb 2024 08:25:43 GMT; Secure; SameSite=None
pxrc=CAA=; Path=/; Domain=rlcdn.com; Expires=Sat, 08 Apr 2023 08:25:43 GMT; Secure; SameSite=None
timing-allow-origin: *
date: Tue, 07 Feb 2023 08:25:43 GMT
content-length: 42
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 83712ff1b330fc8aee58e72feb68a1d5
d31392c6247cbdad51a6fd71539654acbac2119a
2f2881ce7eb01a738787665d049784ade1b0ad0c3b83f311d9809ad852061288
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 Feb 2023 08:25:43 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 05 Feb 2023 01:42:56 GMT
Expires: Sun, 12 Feb 2023 01:42:55 GMT
Etag: "d31392c6247cbdad51a6fd71539654acbac2119a"
Cache-Control: max-age=407231,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 795abc8ceda10b49-OSL
ocsp.sectigo.com/
200 OK 471 B IP
Hash 83712ff1b330fc8aee58e72feb68a1d5
d31392c6247cbdad51a6fd71539654acbac2119a
2f2881ce7eb01a738787665d049784ade1b0ad0c3b83f311d9809ad852061288
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 Feb 2023 08:25:43 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 05 Feb 2023 01:42:56 GMT
Expires: Sun, 12 Feb 2023 01:42:55 GMT
Etag: "d31392c6247cbdad51a6fd71539654acbac2119a"
Cache-Control: max-age=407232,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 795abc899a22b4f9-OSL
static.zdassets.com/web_widget/latest/classic/web-widget-chat-incoming-message-notification-8a6a509.js
200 OK 26 kB URL HTTP/2 static.zdassets.com/web_widget/latest/classic/web-widget-chat-incoming-message-notification-8a6a509.js
IP
File type ASCII text, with no line terminators
Hash 2b67f2ff8483a66d283ef65184cd0af0
f70dda1c19f2fe65db2af09e45491dfa9ea2275a
5d92a201061e47c8e8b64506a3ef3124325b4e3e6efcd15f544bd5ea78c07db3
GET /web_widget/latest/classic/web-widget-chat-incoming-message-notification-8a6a509.js HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 08:25:43 GMT
content-type: application/javascript; charset=utf-8
x-amz-id-2: FaRIpyr5EDsnQtAEBC3gPbD7om43OrjwCwynKfx+pRPWJGAoq5BJjGw3lFvBXpq0d452Hz7xbsk=
x-amz-request-id: W4FTS32T04HM6VPT
x-amz-replication-status: COMPLETED
last-modified: Mon, 06 Feb 2023 04:40:42 GMT
etag: W/"659635f5ad1b6653645380f46aa42236"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Tue, 06 Feb 2024 04:40:41 GMT
x-amz-version-id: bbG32VWInkuPLpAZPOJWuZLbAmttkUmV
cf-cache-status: HIT
age: 91993
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DJ2Q%2FBXQq8D8gwKQZhHNVFSenhKnpXLsRQn4RkNpwo8La9O%2FPEb7rGbnu4j6CQ%2BcbTv7I4%2BJov8x4Ifyw7ddviJeAcATr%2BJN9Q7sdnEWOUVvNX6y6kIxI%2FqjdW5ZnDPq1yEncSE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 795abc8eec640b31-OSL
content-encoding: br
X-Firefox-Spdy: h2
sync-tm.everesttech.net/ct/upi/pid/Mlpt2JaG/?redir=https%3A%2F%2Fp.rfihub.com%2Fcm%3Fin%3D1%26pub%3D21653%26userid%3D%24%7BTM_USER_ID%7D&_test=Y_ILBgAFQG_kFwAh
200 OK 85 B URL HTTP/2 sync-tm.everesttech.net/ct/upi/pid/Mlpt2JaG/?redir=https%3A%2F%2Fp.rfihub.com%2Fcm%3Fin%3D1%26pub%3D21653%26userid%3D%24%7BTM_USER_ID%7D&_test=Y_ILBgAFQG_kFwAh
IP
File type PNG image data, 1 x 1, 1-bit colormap, non-interlaced\012- data
Hash 5bec6606b8392065f9da9898ca6f7b14
73ac5b01b5e3293fb792179626e7f8369cdb944d
acccc501aa6afa3cfac15e8ddccf1561deed2ed08c2f7d652abbdbe9aa71609a
GET /ct/upi/pid/Mlpt2JaG/?redir=https%3A%2F%2Fp.rfihub.com%2Fcm%3Fin%3D1%26pub%3D21653%26userid%3D%24%7BTM_USER_ID%7D&_test=Y_ILBgAFQG_kFwAh HTTP/1.1
Host: sync-tm.everesttech.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20841497p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
server: Jetty(9.4.35.v20201120)
accept-ranges: bytes
date: Tue, 07 Feb 2023 08:25:43 GMT
via: 1.1 varnish
age: 1239
x-served-by: cache-bma1625-BMA
x-cache: HIT
x-cache-hits: 3581
x-timer: S1675758344.651410,VS0,VE0
cache-control: no-cache
pragma: no-cache
content-length: 85
X-Firefox-Spdy: h2
dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=1121&dpuuid=5133329524178451746&redir=
200 OK 59 B URL HTTP/1.1 dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=1121&dpuuid=5133329524178451746&redir=
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 1251cd5e5c2def4c046309375f87c1c1
e02d6b0c6a5c495c15985e2832e335eda8528c80
4e7010cc46fa361c88e57e3346d27421cf3b8a8bf5f39b43fc45997c60cb1c13
GET /demconf.jpg?et:ibs%7cdata:dpid=1121&dpuuid=5133329524178451746&redir= HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20841497p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
Content-Type: image/gif
DCS: dcs-prod-irl1-1-v045-0227c85fb.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
X-TID: gsaMu31WTa0=
Content-Length: 59
Connection: keep-alive
dsum-sec.casalemedia.com/rum?cm_dsp_id=57&external_user_id=5133329524178451746&forward=&C=1
200 OK 43 B URL HTTP/1.1 dsum-sec.casalemedia.com/rum?cm_dsp_id=57&external_user_id=5133329524178451746&forward=&C=1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /rum?cm_dsp_id=57&external_user_id=5133329524178451746&forward=&C=1 HTTP/1.1
Host: dsum-sec.casalemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20841497p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 07 Feb 2023 08:25:43 GMT
Server: Apache
Cache-Control: no-cache
Content-Type: image/gif
Expires: 0
Pragma: no-cache
Content-Length: 43
Keep-Alive: timeout=1, max=499
Connection: Keep-Alive
sync.search.spotxchange.com/partner?adv_id=7180&uid=5133329524178451746&img=1&__user_check__=1&sync_id=0314000e-a6c1-11ed-870e-124172220406
200 OK 43 B URL HTTP/1.1 sync.search.spotxchange.com/partner?adv_id=7180&uid=5133329524178451746&img=1&__user_check__=1&sync_id=0314000e-a6c1-11ed-870e-124172220406
IP
ASN #35220 SpotXchange, INC
File type GIF image data, version 89a, 1 x 1\012- data
Hash 55fade2068e7503eae8d7ddf5eb6bd09
317496a096d6c86486a71d4521994bcd171a6bb3
e586a84d8523747f42e510d78e141015b6424cf67d612854e892a7bcedc8ec9e
GET /partner?adv_id=7180&uid=5133329524178451746&img=1&__user_check__=1&sync_id=0314000e-a6c1-11ed-870e-124172220406 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20841497p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 Feb 2023 08:25:43 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Set-Cookie: audience=0389ba33-a6c1-11ed-8b8a-132476d60506; expires=Tue, 07-Mar-2023 08:25:43 GMT; path=/; domain=.spotxchange.com
x-spotx-halt-type: Audience DSP sync endpoint was unable to cookie the audience.
X-fe: 143
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
x.bidswitch.net/ul_cb/sync?dsp_id=119&user_id=5133329524178451746&expires=30
200 OK 43 B URL HTTP/2 x.bidswitch.net/ul_cb/sync?dsp_id=119&user_id=5133329524178451746&expires=30
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /ul_cb/sync?dsp_id=119&user_id=5133329524178451746&expires=30 HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20841497p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 08:25:43 GMT
content-type: image/gif
content-length: 43
cache-control: no-cache, no-store, must-revalidate
X-Firefox-Spdy: h2
ib.adnxs.com/bounce?%2Fsetuid%3Fentity%3D18%26code%3D5133329524178451745
200 OK 43 B URL HTTP/1.1 ib.adnxs.com/bounce?%2Fsetuid%3Fentity%3D18%26code%3D5133329524178451745
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 592ebefc7104d681d57852665e9ad514
15cdf8df32aa251dd6dd590a60bf9cf74474e7c5
4b5b6b15c6255109e06720cce42a06d3aead8b7874423d9c52cb0303212c25ef
GET /bounce?%2Fsetuid%3Fentity%3D18%26code%3D5133329524178451745 HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20841497p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Tue, 07 Feb 2023 08:25:43 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
AN-X-Request-Uuid: 815d5de4-35ba-4c1c-8673-53c95fc0c2f6
Set-Cookie: anj=dTM7k!M4/YErk#WF']wIg2Hb>F$9dU!@wnfH8KAM.xpH^Gmi]#Gn![wG4PijHMM!mFTv=2hu#VE8.?`F!*0qZ(SUc*!@3B=0RJ/L; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 08-May-2023 08:25:43 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 958.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
dsum-sec.casalemedia.com/rum?cm_dsp_id=57&external_user_id=5133329524178451745&forward=&C=1
200 OK 43 B URL HTTP/1.1 dsum-sec.casalemedia.com/rum?cm_dsp_id=57&external_user_id=5133329524178451745&forward=&C=1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /rum?cm_dsp_id=57&external_user_id=5133329524178451745&forward=&C=1 HTTP/1.1
Host: dsum-sec.casalemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20841497p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 07 Feb 2023 08:25:43 GMT
Server: Apache
Cache-Control: no-cache
Content-Type: image/gif
Expires: 0
Pragma: no-cache
Content-Length: 43
Keep-Alive: timeout=1, max=499
Connection: Keep-Alive
ib.adnxs.com/bounce?%2Fsetuid%3Fentity%3D18%26code%3D5133329524178451746
200 OK 43 B URL HTTP/1.1 ib.adnxs.com/bounce?%2Fsetuid%3Fentity%3D18%26code%3D5133329524178451746
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 592ebefc7104d681d57852665e9ad514
15cdf8df32aa251dd6dd590a60bf9cf74474e7c5
4b5b6b15c6255109e06720cce42a06d3aead8b7874423d9c52cb0303212c25ef
GET /bounce?%2Fsetuid%3Fentity%3D18%26code%3D5133329524178451746 HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20841497p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Tue, 07 Feb 2023 08:25:43 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
AN-X-Request-Uuid: 9bc7e42a-7310-4bda-bb6a-ff2c3c7f957d
Set-Cookie: anj=dTM7k!M4/YErk#WF']wIg2Hb>F$9dU!@wnfH8KAM.xpH^Gmi]#Gn![wG4PijHMM!mFTv=.hu#VE8.?`F!*0qZ(SUc*!@3vN0nf8M; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 08-May-2023 08:25:43 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 958.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=1121&dpuuid=5133329524178451745&redir=
200 OK 59 B URL HTTP/1.1 dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=1121&dpuuid=5133329524178451745&redir=
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 1251cd5e5c2def4c046309375f87c1c1
e02d6b0c6a5c495c15985e2832e335eda8528c80
4e7010cc46fa361c88e57e3346d27421cf3b8a8bf5f39b43fc45997c60cb1c13
GET /demconf.jpg?et:ibs%7cdata:dpid=1121&dpuuid=5133329524178451745&redir= HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20841497p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
Content-Type: image/gif
DCS: dcs-prod-irl1-2-v045-0e1f48b6d.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
X-TID: +in4WxIaRzw=
Content-Length: 59
Connection: keep-alive
sync.search.spotxchange.com/partner?adv_id=7180&uid=5133329524178451745&img=1&__user_check__=1&sync_id=031fa6a0-a6c1-11ed-893c-10b91cd50406
200 OK 43 B URL HTTP/1.1 sync.search.spotxchange.com/partner?adv_id=7180&uid=5133329524178451745&img=1&__user_check__=1&sync_id=031fa6a0-a6c1-11ed-893c-10b91cd50406
IP
ASN #35220 SpotXchange, INC
File type GIF image data, version 89a, 1 x 1\012- data
Hash 55fade2068e7503eae8d7ddf5eb6bd09
317496a096d6c86486a71d4521994bcd171a6bb3
e586a84d8523747f42e510d78e141015b6424cf67d612854e892a7bcedc8ec9e
GET /partner?adv_id=7180&uid=5133329524178451745&img=1&__user_check__=1&sync_id=031fa6a0-a6c1-11ed-893c-10b91cd50406 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20841497p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 Feb 2023 08:25:43 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Set-Cookie: audience=038d548a-a6c1-11ed-913a-1f6fc1870306; expires=Tue, 07-Mar-2023 08:25:43 GMT; path=/; domain=.spotxchange.com
x-spotx-halt-type: Audience DSP sync endpoint was unable to cookie the audience.
X-fe: 10
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
x.bidswitch.net/ul_cb/sync?dsp_id=119&user_id=5133329524178451745&expires=30
200 OK 43 B URL HTTP/2 x.bidswitch.net/ul_cb/sync?dsp_id=119&user_id=5133329524178451745&expires=30
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /ul_cb/sync?dsp_id=119&user_id=5133329524178451745&expires=30 HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20841497p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 08:25:43 GMT
content-type: image/gif
content-length: 43
cache-control: no-cache, no-store, must-revalidate
X-Firefox-Spdy: h2
ocsp.usertrust.com/
200 OK 472 B IP
Hash e4dbba02863ea7f0e2d1ad84db204698
5c7d22ea4fb2a0817c8462019daf1dae864fa412
fd4d5173969a7bbb6ab6cb8f67f1a532acf82abf622930d11a84a958fec6cd3c
POST / HTTP/1.1
Host: ocsp.usertrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 Feb 2023 08:25:43 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sat, 04 Feb 2023 21:01:04 GMT
Expires: Sat, 11 Feb 2023 21:01:03 GMT
Etag: "5c7d22ea4fb2a0817c8462019daf1dae864fa412"
Cache-Control: max-age=604160,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 342
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 795abc908f6fb4f4-OSL
ps.eyeota.net/match?uid=5124322324928402440&bid=omt9pi0
200 OK 0 B URL HTTP/1.1 ps.eyeota.net/match?uid=5124322324928402440&bid=omt9pi0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match?uid=5124322324928402440&bid=omt9pi0 HTTP/1.1
Host: ps.eyeota.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20841497p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Set-Cookie: SERVERID=21295~DM; Domain=eyeota.net; Path=/; Expires=Tue, 07 Feb 2023 08:35:43 GMT; Secure; SameSite=None;
P3P: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR SAMo BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR", policyref="http://ps.eyeota.net/w3c/p3p.xml"
Content-Length: 0
Date: Tue, 07 Feb 2023 08:25:43 GMT
widget-mediator.zopim.com/s/W/ws/q8j74U5ExHjewdAE/c/1675758392578
101 Switching Protocols 0 B URL HTTP/1.1 widget-mediator.zopim.com/s/W/ws/q8j74U5ExHjewdAE/c/1675758392578
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s/W/ws/q8j74U5ExHjewdAE/c/1675758392578 HTTP/1.1
Host: widget-mediator.zopim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://doggocasino.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: +km+dzXebWrNmk7RYWd1WQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Tue, 07 Feb 2023 08:25:43 GMT
Connection: upgrade
Set-Cookie: AWSALB=qZf34r2hcnC/CBIygr9bobSBwHChxhvHLNhSVNdzEVLoo1ShXzvDB3ZBZv6SbpHR/MMEfB9JPmIJ/PYln4joQ17+W+rCQBbbxLzUT+CpxUXifkTZexaF+qRJBLcN; Expires=Tue, 14 Feb 2023 08:25:43 GMT; Path=/
AWSALBCORS=qZf34r2hcnC/CBIygr9bobSBwHChxhvHLNhSVNdzEVLoo1ShXzvDB3ZBZv6SbpHR/MMEfB9JPmIJ/PYln4joQ17+W+rCQBbbxLzUT+CpxUXifkTZexaF+qRJBLcN; Expires=Tue, 14 Feb 2023 08:25:43 GMT; Path=/; SameSite=None; Secure
Upgrade: websocket
Sec-WebSocket-Accept: eHlhin7Xe3taYPxyyxcsqvv4eEk=
Sec-WebSocket-Version: 13
WebSocket-Server: uWebSockets
ib.adnxs.com/getuid?https%3A%2F%2Fidsync.rlcdn.com%2F52154.gif%3Fserved_by%3Devergreen%26partner_uid%3D%24UID
307 Redirection 0 B URL HTTP/1.1 ib.adnxs.com/getuid?https%3A%2F%2Fidsync.rlcdn.com%2F52154.gif%3Fserved_by%3Devergreen%26partner_uid%3D%24UID
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /getuid?https%3A%2F%2Fidsync.rlcdn.com%2F52154.gif%3Fserved_by%3Devergreen%26partner_uid%3D%24UID HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20841497p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Tue, 07 Feb 2023 08:25:43 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
Location: https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Fidsync.rlcdn.com%252F52154.gif%253Fserved_by%253Devergreen%2526partner_uid%253D%2524UID
AN-X-Request-Uuid: 3ff3662c-9100-4385-924d-ed96fa485610
Set-Cookie: uuid2=4321003455170747499; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 08-May-2023 08:25:43 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 958.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
a.rfihub.com/cm?pub=445&in=0&forward=&google_error=3
200 OK 42 B URL HTTP/1.1 a.rfihub.com/cm?pub=445&in=0&forward=&google_error=3
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash accba0b69f352b4c9440f05891b015c5
9d01cc5dc8e042c0d4ad6cfb8b3ac38e84a5ef9f
47043e4823a6c21a8881de789b4185355330b5804629d23f6b43dd93f5265292
GET /cm?pub=445&in=0&forward=&google_error=3 HTTP/1.1
Host: a.rfihub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20841497p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 07 Feb 2023 08:25:43 GMT
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Set-Cookie: rud=H4sIAAAAAAAA_-MSNjU0sDA1tTQ3MjMyMTEwMDEwMhDiM9T18AmtKPXId_ZODAoAAO-4o50lAAAA; Path=/; Domain=.rfihub.com; Expires=Sun, 3 Mar 2024 08:25:43 GMT; Secure; SameSite=None
ruds=H4sIAAAAAAAA_-MSNjU0sDA1tTQ3MjMyMTEwMDEwMhDiM9T18AmtKPXId_ZODAoAAO-4o50lAAAA; Path=/; Domain=.rfihub.com; Secure; SameSite=None
euds=H4sIAAAAAAAA_-NicjUGAEAxo38EAAAA; Path=/; Domain=.rfihub.com; Secure; SameSite=None
eud=H4sIAAAAAAAA_-NicjUO4jU0Mzc1N7UwNjG2MDcGAJMG68ETAAAA; Path=/; Domain=.rfihub.com; Expires=Sun, 3 Mar 2024 08:25:43 GMT; Secure; SameSite=None
Cache-Control: no-cache
Content-Type: image/gif
Content-Length: 42
Server: Jetty(9.3.29.v20201019)
ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Fidsync.rlcdn.com%252F52154.gif%253Fserved_by%253Devergreen%2526partner_uid%253D%2524UID
302 Found 0 B URL HTTP/1.1 ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Fidsync.rlcdn.com%252F52154.gif%253Fserved_by%253Devergreen%2526partner_uid%253D%2524UID
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bounce?%2Fgetuid%3Fhttps%253A%252F%252Fidsync.rlcdn.com%252F52154.gif%253Fserved_by%253Devergreen%2526partner_uid%253D%2524UID HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20841497p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.21.3
Date: Tue, 07 Feb 2023 08:25:43 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
Location: https://idsync.rlcdn.com/52154.gif?served_by=evergreen&partner_uid=0
AN-X-Request-Uuid: 00bb790e-574a-4a36-bf69-ecb0f08b9803
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 958.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
a.rfihub.com/cm?pub=445&in=0&forward=&google_error=3
200 OK 42 B URL HTTP/1.1 a.rfihub.com/cm?pub=445&in=0&forward=&google_error=3
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash accba0b69f352b4c9440f05891b015c5
9d01cc5dc8e042c0d4ad6cfb8b3ac38e84a5ef9f
47043e4823a6c21a8881de789b4185355330b5804629d23f6b43dd93f5265292
GET /cm?pub=445&in=0&forward=&google_error=3 HTTP/1.1
Host: a.rfihub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20841497p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 07 Feb 2023 08:25:43 GMT
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Set-Cookie: rud=H4sIAAAAAAAA_-MSNjU0MjE2MjI2MrE0sjAxMDKzsBTiM9StSKkwNCsyMfc3snAHAD5JF6olAAAA; Path=/; Domain=.rfihub.com; Expires=Sun, 3 Mar 2024 08:25:43 GMT; Secure; SameSite=None
ruds=H4sIAAAAAAAA_-MSNjU0MjE2MjI2MrE0sjAxMDKzsBTiM9StSKkwNCsyMfc3snAHAD5JF6olAAAA; Path=/; Domain=.rfihub.com; Secure; SameSite=None
euds=H4sIAAAAAAAA_-NicjUGAEAxo38EAAAA; Path=/; Domain=.rfihub.com; Secure; SameSite=None
eud=H4sIAAAAAAAA_-NicjUO4jU0Mzc1N7UwNjG2NDQFABduEH8TAAAA; Path=/; Domain=.rfihub.com; Expires=Sun, 3 Mar 2024 08:25:43 GMT; Secure; SameSite=None
Cache-Control: no-cache
Content-Type: image/gif
Content-Length: 42
Server: Jetty(9.3.29.v20201019)
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F121b1de4-8f9a-42ce-aca5-9ff190235e9e.jpeg
200 OK 5.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F121b1de4-8f9a-42ce-aca5-9ff190235e9e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 94a975a866d575be68f687fd81a36f5b
16f334adff0205badeb468d248f925504137782a
d550618f7c7e902ca0f4f57f8da3199b22063f242e0fa07f10fe6631b35e026b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F121b1de4-8f9a-42ce-aca5-9ff190235e9e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 5584
x-amzn-requestid: 130aa2ee-b175-4658-9c82-8f49944207dd
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fpdejHeaIAMFYgQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63da0f90-4f9c757a30af548878052b0d;Sampled=0
x-amzn-remapped-date: Wed, 01 Feb 2023 07:06:56 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 9URXL7tafn0kenWtzS1LRu2q0bgjM8ZC4NCS6L6MMPkvBqIHDOMugA==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Tue, 07 Feb 2023 02:04:18 GMT
age: 22887
etag: "16f334adff0205badeb468d248f925504137782a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
partners.tremorhub.com/sync?UIRF=5133329524178451746&r=fojF1LkpcA9g
200 OK 0 B URL HTTP/2 partners.tremorhub.com/sync?UIRF=5133329524178451746&r=fojF1LkpcA9g
IP
GET /sync?UIRF=5133329524178451746&r=fojF1LkpcA9g HTTP/1.1
Host: partners.tremorhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 07 Feb 2023 08:25:43 GMT
content-type: image/gif
server: Apache-Coyote/1.1
p3p: CP='This is not a P3P policy. See https://telaria.com/privacy-policy/'
X-Firefox-Spdy: h2
516c78c72.srtrak.com/promo-tools/direct-offers/mainstream/dating/boobmania/
302 Found 0 B URL HTTP/2 516c78c72.srtrak.com/promo-tools/direct-offers/mainstream/dating/boobmania/
IP
GET /promo-tools/direct-offers/mainstream/dating/boobmania/ HTTP/1.1
Host: 516c78c72.srtrak.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
server: nginx
date: Tue, 07 Feb 2023 08:25:36 GMT
content-type: text/html; charset=UTF-8
location: https://dtrk.slimcdn.com/directclick/?pid=r3osD70AeZ7IQyPv0pjPCaK0Vjg1&wsid=&subid=
set-cookie: _s=mmbiddshh5n0tdmfp7flhfp596; path=/; HttpOnly
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
referrer-policy: no-referrer
x-robots-tag: noindex, nofollow, nosnippet, noarchive
X-Firefox-Spdy: h2
static.zdassets.com/web_widget/latest/classic/web-widget-classic-8a6a509.js
200 OK 0 B URL HTTP/2 static.zdassets.com/web_widget/latest/classic/web-widget-classic-8a6a509.js
IP
GET /web_widget/latest/classic/web-widget-classic-8a6a509.js HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 08:25:41 GMT
content-type: application/javascript; charset=utf-8
x-amz-id-2: 9sgxbFo4s920gUx0lzbv4KbDW2IVU0cLwGh8IFjs7s7L5FPd7PzLieIsHsmH/JHFmsAGuln4RFA=
x-amz-request-id: WYQFMYQF8NSM0X1E
x-amz-replication-status: COMPLETED
last-modified: Mon, 06 Feb 2023 04:40:42 GMT
etag: W/"8713cc1ea67a213b3368c62c47f3af36"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Tue, 06 Feb 2024 04:40:41 GMT
x-amz-version-id: NnT5jEA2g14n4aK1JcBhR7IHnWIF5WDd
cf-cache-status: HIT
age: 91992
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Yrbrf2ocvfdM3mi%2BCXhoFszghSsKUyt7NZWaT55Ohx8B2fBGEyjKYAU9OmkHMqfgoWPBuiCSzWi%2FlPFN3qWkizwib7hbruv7318wUVQ%2B74HfNKBWUkCbyPCW1LJ3gl3YeuarC8A%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 795abc8298a60b31-OSL
content-encoding: br
X-Firefox-Spdy: h2
adjs.media/resources/content/doggocasino.js
200 OK 0 B URL HTTP/2 adjs.media/resources/content/doggocasino.js
IP
GET /resources/content/doggocasino.js HTTP/1.1
Host: adjs.media
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 07 Feb 2023 08:25:40 GMT
content-type: text/javascript; charset=utf-8
status: 200 OK
cache-control: no-cache
access-control-allow-origin: *
referrer-policy: strict-origin-when-cross-origin
x-permitted-cross-domain-policies: none
x-xss-protection: 1; mode=block
x-request-id: f623a8c3-80bc-4198-9171-7c7dd1636f0c
x-download-options: noopen
etag: W/"910a1eb1f52f1e810f827c5d4202a9f4"
x-runtime: 0.003401
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PTEW%2BEg%2BsBCkgTY0lqgSYdLw5dVb8UQs0We6Wd9JF2KEdji5coMNDW0hgVy%2BPYIVY40GECMG484ZN05wHzfZAdL%2FWU9oQzQNv0TktUjICwGSVryirOOp7MgKgNnG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 795abc7aaa0cb4f4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
doggocasino.com/Cookies-Icon.a41fe3b3f8f0046c586a.svg
200 OK 0 B URL HTTP/2 doggocasino.com/Cookies-Icon.a41fe3b3f8f0046c586a.svg
IP
GET /Cookies-Icon.a41fe3b3f8f0046c586a.svg HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/styles.6fe09080dd4bc8174585.css
Cookie: _ga_K4EHGY5F0T=GS1.1.1675758389.1.0.1675758389.60.0.0; _ga=GA1.1.1511094843.1675758389; __adm_tid=tid-274fbbe92.366b3a956; affiliateId=cx-35656_393091; bannerId=35656; trackerId=35656_393091; affiliateName=%5Bcellxpert%5D; cookie_policy=accepted
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
x-amz-meta-codebuild-content-sha256: 4f853d18badd3933524ca4a1dd6240279e0051fb38905b83f18834b4b93aaeb1
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:08219a5d-0b7c-4ae2-afb4-2507533d271d
x-amz-meta-codebuild-content-md5: 319cfed7654cbf4a61d9a3eabce3d2f4
last-modified: Fri, 03 Feb 2023 09:41:14 GMT
x-amz-version-id: gIBO9N6AihX.kGIFhoJ.XeOvV3Ymx6hD
server: AmazonS3
content-encoding: br
date: Mon, 06 Feb 2023 09:55:09 GMT
etag: W/"87dfcd5ae030f407cc281bc26d0255f4"
vary: Accept-Encoding
via: 1.1 269b0fad85dfd450220cf6573a2d384e.cloudfront.net (CloudFront)
age: 81033
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: 5r1fofYQ-SK4HAYrgYqQEvMJgFPhHgMLJ-rdD66gQ8qzgfQ3Lj71xw==
X-Firefox-Spdy: h2
doggocasino.com/polyfills.041a4b505b38e3453b95.js
200 OK 0 B URL HTTP/2 doggocasino.com/polyfills.041a4b505b38e3453b95.js
IP
GET /polyfills.041a4b505b38e3453b95.js HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/en-us?affiliateName=[cellxpert]&affid=cx-35656_393091&bannerid=35656&trackerid=35656_393091&brand=doggocasino&bta=35656&rdk=rk3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
x-amz-meta-codebuild-content-sha256: 4f853d18badd3933524ca4a1dd6240279e0051fb38905b83f18834b4b93aaeb1
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:08219a5d-0b7c-4ae2-afb4-2507533d271d
x-amz-meta-codebuild-content-md5: 319cfed7654cbf4a61d9a3eabce3d2f4
last-modified: Fri, 03 Feb 2023 09:41:10 GMT
x-amz-version-id: c7xOJuDqHqwOzshR3WYnjzsQa8Mh26d_
server: AmazonS3
content-encoding: br
date: Mon, 06 Feb 2023 09:46:09 GMT
etag: W/"43655eda45dc98456c80904f6f6683e7"
vary: Accept-Encoding
via: 1.1 269b0fad85dfd450220cf6573a2d384e.cloudfront.net (CloudFront)
age: 81571
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: DKJ9tD7DYRs_pFoEZoOtqqel1jgA1HF1sqZIqFkVVgR-nLCaAoLm6w==
X-Firefox-Spdy: h2
static.zdassets.com/web_widget/latest/web-widget-framework-4d3f4cd196c41eafe101.js
200 OK 0 B URL HTTP/2 static.zdassets.com/web_widget/latest/web-widget-framework-4d3f4cd196c41eafe101.js
IP
GET /web_widget/latest/web-widget-framework-4d3f4cd196c41eafe101.js HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 08:25:40 GMT
content-type: application/javascript; charset=utf-8
x-amz-id-2: LZ6W7uflFb12PAk3+SegA3iWKVmuv+Lnqdw1wCnSTyvDyI9ME2pn7Td1aVKGe5wPxgZkpnZBK/8=
x-amz-request-id: WYQ5X79NETTR3Q53
x-amz-replication-status: COMPLETED
last-modified: Mon, 06 Feb 2023 04:37:59 GMT
etag: W/"c6e13551db1de5565b0fefbb38353422"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Tue, 06 Feb 2024 04:37:58 GMT
x-amz-version-id: aoc92yrT5ZEGLTS2Qgzm.R9bUBtGWfYc
cf-cache-status: HIT
age: 91991
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0tvNoK7GhsbvzlP2x9VRCNnhj8OQSyi3mtURJusobEnlx6SfCq0xspT6KfO078CV0Im7pQWptr2Jd1Zd0KQ6BcMjCU8VOThsSt9BVRlnHYhYIXaEbTBz22tjnvWIAfkUTQ5zT%2BQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 795abc7dab7f0b31-OSL
content-encoding: br
X-Firefox-Spdy: h2
doggocasino.com/runtime.4b27143eccb88f79924e.js
200 OK 0 B URL HTTP/2 doggocasino.com/runtime.4b27143eccb88f79924e.js
IP
GET /runtime.4b27143eccb88f79924e.js HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/en-us?affiliateName=[cellxpert]&affid=cx-35656_393091&bannerid=35656&trackerid=35656_393091&brand=doggocasino&bta=35656&rdk=rk3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
x-amz-meta-codebuild-content-sha256: 4f853d18badd3933524ca4a1dd6240279e0051fb38905b83f18834b4b93aaeb1
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:08219a5d-0b7c-4ae2-afb4-2507533d271d
x-amz-meta-codebuild-content-md5: 319cfed7654cbf4a61d9a3eabce3d2f4
last-modified: Fri, 03 Feb 2023 09:41:12 GMT
x-amz-version-id: OXhHe2stnaNA1WKKk4ncIbKIh1Ifvj8h
server: AmazonS3
content-encoding: gzip
date: Mon, 06 Feb 2023 10:14:27 GMT
etag: W/"f8164c2d4608d34a7a13c1f14afe4120"
vary: Accept-Encoding
via: 1.1 269b0fad85dfd450220cf6573a2d384e.cloudfront.net (CloudFront)
age: 79873
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: 1uJ_yOtxWr38jbeha8l18aKJkcLGibtfX9j-Y561CrpbPMLsv3FBWA==
X-Firefox-Spdy: h2
www.predictionds.com/jump/next.php?stamat=m%257CFiNiE2N2aQdH8AH0dEdHP3xP.6ad%252C7H0PozvLiGV-YkDx825CHjXHsSctWIGDQyh13bePJRrUcf9BgFvSW-ll-hHeCIlQAaVWjIdYJDuFqSMNZBLjGgdsmSg6l7JKIp3YfIxIdln-J00jMvZ1Dbwr-kb294bC&cbpage=https://www.predictionds.com/jump/next.php?r=2883479&pub_clickid=23020709_01_251613_eb5ff9872b2fa&sub1=1310_&affe=fss&cbur=0.6558812763929159&cbtitle=&cbiframe=0&cbWidth=1280&cbHeight=939&cbdescription=&cbkeywords=&cbref=
302 Found 0 B URL HTTP/2 www.predictionds.com/jump/next.php?stamat=m%257CFiNiE2N2aQdH8AH0dEdHP3xP.6ad%252C7H0PozvLiGV-YkDx825CHjXHsSctWIGDQyh13bePJRrUcf9BgFvSW-ll-hHeCIlQAaVWjIdYJDuFqSMNZBLjGgdsmSg6l7JKIp3YfIxIdln-J00jMvZ1Dbwr-kb294bC&cbpage=https://www.predictionds.com/jump/next.php?r=2883479&pub_clickid=23020709_01_251613_eb5ff9872b2fa&sub1=1310_&affe=fss&cbur=0.6558812763929159&cbtitle=&cbiframe=0&cbWidth=1280&cbHeight=939&cbdescription=&cbkeywords=&cbref=
IP
GET /jump/next.php?stamat=m%257CFiNiE2N2aQdH8AH0dEdHP3xP.6ad%252C7H0PozvLiGV-YkDx825CHjXHsSctWIGDQyh13bePJRrUcf9BgFvSW-ll-hHeCIlQAaVWjIdYJDuFqSMNZBLjGgdsmSg6l7JKIp3YfIxIdln-J00jMvZ1Dbwr-kb294bC&cbpage=https://www.predictionds.com/jump/next.php?r=2883479&pub_clickid=23020709_01_251613_eb5ff9872b2fa&sub1=1310_&affe=fss&cbur=0.6558812763929159&cbtitle=&cbiframe=0&cbWidth=1280&cbHeight=939&cbdescription=&cbkeywords=&cbref= HTTP/1.1
Host: www.predictionds.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
server: openresty
date: Tue, 07 Feb 2023 08:25:38 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
location: https://www.predictionds.com/script/i.php?t=1&stamat=m%257C%252C%252CgiL2d2a3oGU3B5-GH0dEdHP3xP.519%252CcmuESizALuqvKeZfEBbCSOVm6PhWax3WXKDXiO9AoZIJ7xhXYLCN0Mc_Vue42RCHnZYrcs3ScWfOB-Lu5CcMaFoglWZ51k1p6Dx-r6wZy9nlf0P5IGHJ9hDHZRUiQm0sDvWjQNJuClgTXsWvLVDxMa4XpX7rYxH0bv1MLF9dXvtqJXOztyCNTkmK8Yp1CMwjUOiKk2ePCj2-sho5M4_vsEic1rgkPnNZo2YamJcNEMBQKS3XhbT5LH3E25d9FIJIvxEMr_ogci5m29qaQycoqwvkZySmBosN-mQnGYai-MlSBCDKI68zDNO3n2uVtPbDYYTel6ZzIvjzcQd72UCYk7FRAMFpPz8BfFIc1ZIn62klEUT8S1SCfTpaFeTiig4xrV252u5xLg-VLeifYIv2PF7iEpCcu3Owb9KDFUZ8awBMkmMKlhAm0c5k_D-iaUe6U5WupJElA7-RE2ftCsUXCSNMTrqrS_O6ynUZOctGyeVDRirFywod-3i_VWmA1Sdcx1_p4ZFqn_HtEG0qi7tQqCYIGm6yWNIiHRUsHNVEGelt6nd4TBfKXXScN9Ni2poT8A_bYbhlCHYJHGL8es11_g%252C%252C
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
doggocasino.regily.com/b1e55c583226311df310792321f587d2.js
200 OK 0 B URL HTTP/2 doggocasino.regily.com/b1e55c583226311df310792321f587d2.js
IP
GET /b1e55c583226311df310792321f587d2.js HTTP/1.1
Host: doggocasino.regily.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Tue, 17 Jan 2023 08:23:44 GMT
server: AmazonS3
content-encoding: br
date: Tue, 07 Feb 2023 08:21:58 GMT
etag: W/"3d26fa2efd58cd218deb440fff9ef848"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: fVfrv7Cd8DyzZYZ7gp5Edd-S0ETsXgUwQOlGpNvWWOL_X-0yFyQtCA==
age: 222
X-Firefox-Spdy: h2
doggocasino.com/assets/fonts/CeraPro/Cera_Pro_Light.otf
200 OK 0 B URL HTTP/2 doggocasino.com/assets/fonts/CeraPro/Cera_Pro_Light.otf
IP
GET /assets/fonts/CeraPro/Cera_Pro_Light.otf HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/styles.6fe09080dd4bc8174585.css
Cookie: _ga_K4EHGY5F0T=GS1.1.1675758389.1.0.1675758389.60.0.0; _ga=GA1.1.1511094843.1675758389; __adm_tid=tid-274fbbe92.366b3a956; affiliateId=cx-35656_393091; bannerId=35656; trackerId=35656_393091; affiliateName=%5Bcellxpert%5D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 185224
date: Mon, 06 Feb 2023 15:17:08 GMT
x-amz-meta-codebuild-content-sha256: 4f853d18badd3933524ca4a1dd6240279e0051fb38905b83f18834b4b93aaeb1
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:08219a5d-0b7c-4ae2-afb4-2507533d271d
x-amz-meta-codebuild-content-md5: 319cfed7654cbf4a61d9a3eabce3d2f4
last-modified: Fri, 03 Feb 2023 09:41:15 GMT
x-amz-version-id: AREsfsK_Cymcdhqvy.yskg87KXMAvmbt
etag: "112299d7917b38aff426d451d495f3d7"
server: AmazonS3
via: 1.1 269b0fad85dfd450220cf6573a2d384e.cloudfront.net (CloudFront)
age: 61714
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: uHKlpF38OqSIXA6cmG1nyqvDrsJE1yGX8dhgW9yK3D3Uby_flYUI9g==
X-Firefox-Spdy: h2
partners.tremorhub.com/sync?UIRF=5133329524178451745&r=E29Cii0kcZa2
200 OK 0 B URL HTTP/2 partners.tremorhub.com/sync?UIRF=5133329524178451745&r=E29Cii0kcZa2
IP
GET /sync?UIRF=5133329524178451745&r=E29Cii0kcZa2 HTTP/1.1
Host: partners.tremorhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 07 Feb 2023 08:25:43 GMT
content-type: image/gif
server: Apache-Coyote/1.1
p3p: CP='This is not a P3P policy. See https://telaria.com/privacy-policy/'
X-Firefox-Spdy: h2
doggocasino.com/en-us?affiliateName=[cellxpert]&affid=cx-35656_393091&bannerid=35656&trackerid=35656_393091&brand=doggocasino&bta=35656&rdk=rk3
200 OK 0 B URL HTTP/2 doggocasino.com/en-us?affiliateName=[cellxpert]&affid=cx-35656_393091&bannerid=35656&trackerid=35656_393091&brand=doggocasino&bta=35656&rdk=rk3
IP
GET /en-us?affiliateName=[cellxpert]&affid=cx-35656_393091&bannerid=35656&trackerid=35656_393091&brand=doggocasino&bta=35656&rdk=rk3 HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html
date: Fri, 03 Feb 2023 09:43:02 GMT
x-amz-meta-codebuild-content-sha256: 4f853d18badd3933524ca4a1dd6240279e0051fb38905b83f18834b4b93aaeb1
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:08219a5d-0b7c-4ae2-afb4-2507533d271d
x-amz-meta-codebuild-content-md5: 319cfed7654cbf4a61d9a3eabce3d2f4
last-modified: Fri, 03 Feb 2023 09:41:11 GMT
x-amz-version-id: iMU8Rz5NZWxFiubeF.hu4CYkoQaOzmMh
etag: W/"b184614308c803b6dfdeeb5998254a65"
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Error from cloudfront
via: 1.1 269b0fad85dfd450220cf6573a2d384e.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: 069HkU22CYW2hUNgMG6ZI42tfK8SyQd7QKV5kuv8P0YPcpv1XUlJjw==
age: 340957
X-Firefox-Spdy: h2
doggocasino.com/styles.6fe09080dd4bc8174585.css
200 OK 0 B URL HTTP/2 doggocasino.com/styles.6fe09080dd4bc8174585.css
IP
GET /styles.6fe09080dd4bc8174585.css HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/en-us?affiliateName=[cellxpert]&affid=cx-35656_393091&bannerid=35656&trackerid=35656_393091&brand=doggocasino&bta=35656&rdk=rk3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
x-amz-meta-codebuild-content-sha256: 4f853d18badd3933524ca4a1dd6240279e0051fb38905b83f18834b4b93aaeb1
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:08219a5d-0b7c-4ae2-afb4-2507533d271d
x-amz-meta-codebuild-content-md5: 319cfed7654cbf4a61d9a3eabce3d2f4
last-modified: Fri, 03 Feb 2023 09:41:11 GMT
x-amz-version-id: npjfCT2QxfWuonZeBjBpr6rCTapaYC1B
server: AmazonS3
content-encoding: gzip
date: Tue, 07 Feb 2023 07:51:50 GMT
etag: W/"28df2050b7c0c4d9b66b26865c4c7606"
vary: Accept-Encoding
via: 1.1 269b0fad85dfd450220cf6573a2d384e.cloudfront.net (CloudFront)
age: 2030
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: fQIxGo1ZNzK-AfjU823m6nmn-japnKiCk7Mu9322zK5PYEy_csaRLg==
X-Firefox-Spdy: h2
doggocasino.zendesk.com/embeddable/config
200 OK 0 B URL HTTP/2 doggocasino.zendesk.com/embeddable/config
IP
GET /embeddable/config HTTP/1.1
Host: doggocasino.zendesk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://doggocasino.com/
Origin: https://doggocasino.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 07 Feb 2023 08:25:40 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-expose-headers:
access-control-max-age: 7200
cache-control: public, max-age=60, stale-while-revalidate=600, stale-if-error=3600
x-zendesk-origin-server: embeddable-app-server-5f6c8f555-s7grz
x-request-id: 795abc7eaf861c06-DUB
x-runtime: 0.001766
vary: Origin, Accept-Encoding
x-cached: MISS
last-modified: Tue, 07 Feb 2023 08:21:59 GMT
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rtL1caMCaWV8bJHC5Yvde6X2BnA%2BtKNCmk%2Bbdu%2FFTK7z72nXDEgeAnDj2X0rwIxEKOsOzsE5IjZHxgNwdOWn1i7HwumiRNDQlBdDzAPSHcP%2BGXuYpV1xmmX%2BxOisAjmmzKYVLpJLbP8H"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
set-cookie: __cfruid=62250202de3c9e45e6cbe33d45f35ff308e09508-1675758340; path=/; domain=.doggocasino.zendesk.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 795abc7eaf861c06-OSL
content-encoding: br
X-Firefox-Spdy: h2
static.hotjar.com/c/hotjar-3054262.js?sv=6
200 OK 0 B URL HTTP/2 static.hotjar.com/c/hotjar-3054262.js?sv=6
IP
GET /c/hotjar-3054262.js?sv=6 HTTP/1.1
Host: static.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
date: Tue, 07 Feb 2023 08:25:14 GMT
access-control-allow-origin: *
cache-control: max-age=60
content-encoding: br
cross-origin-resource-policy: cross-origin
etag: W/777774e9b127b4c8ca52b41a052ad86d
strict-transport-security: max-age=2592000; includeSubDomains
x-cache-hit: 1
x-content-type-options: nosniff
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 8vFutRGeCRmH6eMChWExr9ZK5TDtGefIEwcetFlbyUKvbEY5UvN0zg==
age: 27
X-Firefox-Spdy: h2
doggocasino.com/8.eab0308814be44e45548.js
200 OK 0 B URL HTTP/2 doggocasino.com/8.eab0308814be44e45548.js
IP
GET /8.eab0308814be44e45548.js HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/en-us?affiliateName=[cellxpert]&affid=cx-35656_393091&bannerid=35656&trackerid=35656_393091&brand=doggocasino&bta=35656&rdk=rk3
Cookie: _ga_K4EHGY5F0T=GS1.1.1675758389.1.0.1675758389.60.0.0; _ga=GA1.1.1511094843.1675758389
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
x-amz-meta-codebuild-content-sha256: 4f853d18badd3933524ca4a1dd6240279e0051fb38905b83f18834b4b93aaeb1
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:08219a5d-0b7c-4ae2-afb4-2507533d271d
x-amz-meta-codebuild-content-md5: 319cfed7654cbf4a61d9a3eabce3d2f4
last-modified: Fri, 03 Feb 2023 09:41:10 GMT
x-amz-version-id: KSSnhAWalc9FBP5kx0j_ufX9PeS0UgDO
server: AmazonS3
content-encoding: br
date: Mon, 06 Feb 2023 09:46:10 GMT
etag: W/"2a2a7aa84b93bcd62ca6bf5c6055fb11"
vary: Accept-Encoding
via: 1.1 269b0fad85dfd450220cf6573a2d384e.cloudfront.net (CloudFront)
age: 81571
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: X9MT9_cJykfcxgFAwG6keixbsD7xv2hG54nX1FH9RdHhLJtyr1vWng==
X-Firefox-Spdy: h2
static.zdassets.com/web_widget/latest/classic/web-widget-5324-8a6a509.js
200 OK 0 B URL HTTP/2 static.zdassets.com/web_widget/latest/classic/web-widget-5324-8a6a509.js
IP
GET /web_widget/latest/classic/web-widget-5324-8a6a509.js HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 08:25:41 GMT
content-type: application/javascript; charset=utf-8
x-amz-id-2: WmtRR1189mXDJMkJjDGUCORgQdiD9PF7D5bFRVs+4FCoO4u+YIN8yee6R45C2mBooS8PicWASwE=
x-amz-request-id: WYQ9XNV1H65RADD0
x-amz-replication-status: COMPLETED
last-modified: Mon, 06 Feb 2023 04:40:42 GMT
etag: W/"62b83d1cb2207b5e655a9fb36ca83fef"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Tue, 06 Feb 2024 04:40:41 GMT
x-amz-version-id: Y8kjdnuuhMXQULKzbx3ZD_IvpELAImAJ
cf-cache-status: HIT
age: 91992
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DCDoUZD1fuhC8nf8RPokHRk2wnmMDBhJr6CUcKJWHrpN08W06nUyfOwK3cM0ld%2BITCYp%2FkqWmyhdHWdpu8CfH842J5XT%2Bwgc7RMzPCNwa%2Bl3p4S584HaZgBoJZ6%2F9DPyF9Rtlc0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 795abc82f8e20b31-OSL
content-encoding: br
X-Firefox-Spdy: h2
static.zdassets.com/web_widget/latest/classic/web-widget-locales/classic/en-us-json-8a6a509.js
200 OK 0 B URL HTTP/2 static.zdassets.com/web_widget/latest/classic/web-widget-locales/classic/en-us-json-8a6a509.js
IP
GET /web_widget/latest/classic/web-widget-locales/classic/en-us-json-8a6a509.js HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 08:25:41 GMT
content-type: application/javascript; charset=utf-8
x-amz-id-2: JyXQMFAIApPwmax3o9Ie/7KnsTohFErpavYJockVLQQ3LA0xUf3xUBTLCRL9PglxL0wAjOh+WEQ=
x-amz-request-id: WYQB6MYMEHNG1NQX
x-amz-replication-status: COMPLETED
last-modified: Mon, 06 Feb 2023 04:40:43 GMT
etag: W/"89b68f56c96d15075b04b0ea633eabf1"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Tue, 06 Feb 2024 04:40:42 GMT
x-amz-version-id: cqMx6mePo_.KI9mJ_ZskmLWluAmdthB9
cf-cache-status: HIT
age: 91991
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OvOZXW53NsbOGmn67qg6QMp8ycRV05DMB1eQKA2dh4AohNA7pIXCYXaV797fVHtPxAym3sdQKi4dj6Nwqqz5%2F9y%2F12n9HRShXQQt2EP7tIQWS1dIZ6tbnvfZDKatYhkjLaZq90s%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 795abc852ac00b31-OSL
content-encoding: br
X-Firefox-Spdy: h2
static.zdassets.com/web_widget/latest/classic/web-widget-chat-sdk-8a6a509.js
200 OK 0 B URL HTTP/2 static.zdassets.com/web_widget/latest/classic/web-widget-chat-sdk-8a6a509.js
IP
GET /web_widget/latest/classic/web-widget-chat-sdk-8a6a509.js HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 08:25:41 GMT
content-type: application/javascript; charset=utf-8
x-amz-id-2: H/SI0O3MCHA2NdumLOJwajxGBQ+AGMtNyE9ZZcrMVjkN9Efp1RF3oszIVSwbTV3+bWaH4IXspVI=
x-amz-request-id: W4FV6JZ749QHQF0F
x-amz-replication-status: COMPLETED
last-modified: Mon, 06 Feb 2023 04:40:42 GMT
etag: W/"d366c0776c2bacba354d40e564c3d3e6"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Tue, 06 Feb 2024 04:40:41 GMT
x-amz-version-id: 8FT3f3PK2d.E1qtgTkMBYvZiIjwdVgHk
cf-cache-status: HIT
age: 91991
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UebPAWab03c%2F1cdfjZtnxj2UHF2D3eznAjHkBfRfuSpmliof%2FY54ppiX2K2onuAl6wTHzwXirRgXdAIk5HdABiwqAPi45qB3MTpFVAaGRdsxzPq8k8rrMo57PhfCZ6i8JY0dvtQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 795abc856afb0b31-OSL
content-encoding: br
X-Firefox-Spdy: h2
91.132.60.212
34.117.237.239
104.18.8.13
23.33.119.27
3.64.167.250
188.114.97.1
18.203.175.95
151.101.246.208
93.184.220.29
185.94.180.126
185.80.36.245
193.33.229.103