www.mandarinpalaceoc.com/
200 OK 485 B URL HTTP/1.1 www.mandarinpalaceoc.com/
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (485), with no line terminators
Hash 09d65af2955fb3b0a329580d1edd89e4
6514fa33397e61871b3702e561de474b51b04254
eaa1ee9ddfe640100d841bc3392603af4ecdc7867ce366868fb6bb99af63c7d8
GET / HTTP/1.1
Host: www.mandarinpalaceoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 485
content-type: text/html; charset=utf-8
date: Tue, 31 Jan 2023 13:31:18 GMT
server: nginx
set-cookie: sid=8b5aa7c6-a16b-11ed-ab48-cb1f4a7707c1; path=/; domain=.mandarinpalaceoc.com; expires=Sun, 18 Feb 2091 16:45:25 GMT; max-age=2147483647; HttpOnly
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5eb7c9bc996a0ff420e58af45526f053
8c2614832b8efe1c9da0bbd465d6f3f172d95a9e
c085cf277dd0429fe15e4a4bce5595636e9f2204d5a8e77220f8bf88adf4068f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C085CF277DD0429FE15E4A4BCE5595636E9F2204D5A8E77220F8BF88ADF4068F"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6332
Expires: Tue, 31 Jan 2023 15:16:51 GMT
Date: Tue, 31 Jan 2023 13:31:19 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 0c35c3ec659d3a26ea97e68d787bb043
d97e3672244efec5b7814f2d8a734cd1a9387854
4c946a026114ff05316d92277750facf3d5f5d162839149da0b7fb1a4cff6b5e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4C946A026114FF05316D92277750FACF3D5F5D162839149DA0B7FB1A4CFF6B5E"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7882
Expires: Tue, 31 Jan 2023 15:42:41 GMT
Date: Tue, 31 Jan 2023 13:31:19 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash ff250d3ef3fa45322bf05039a0122a9f
b3e7a2c383bce1bab807dbe1a03c375258b51f1d
d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Backoff, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 31 Jan 2023 12:35:54 GMT
content-type: application/json
age: 3325
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a8d45deaa7ebfcd996c2055dae592ab8
55befe074589fe7b39757c145968058162a8fc6b
50d7d516f446458145a304b288a0a39d391cd37ea50dabea36ae48d291c65ba7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "50D7D516F446458145A304B288A0A39D391CD37EA50DABEA36AE48D291C65BA7"
Last-Modified: Tue, 31 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3266
Expires: Tue, 31 Jan 2023 14:25:45 GMT
Date: Tue, 31 Jan 2023 13:31:19 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: xpntf4SiiBeRBptntyEGhzv3PUpiS/dakmLkyAwufc74VnGhbmzlI++Yn313OB41EwS9ifatXP4=
x-amz-request-id: BN0JZSVFTCD17X3Z
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 31 Jan 2023 13:22:14 GMT
age: 545
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 13:31:19 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
www.mandarinpalaceoc.com/favicon.ico
404 Not Found 9 B URL HTTP/1.1 www.mandarinpalaceoc.com/favicon.ico
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type ASCII text, with no line terminators
Hash d8f4a1993546cc4b850cde3599e27aec
094b763b4cfcc0b05e5d040581cd513c3ca08067
907ba78b4545338d3539683e63ecb51cf51c10adc9dabd86e92bd52339f298b9
GET /favicon.ico HTTP/1.1
Host: www.mandarinpalaceoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.mandarinpalaceoc.com/
Cookie: sid=8b5aa7c6-a16b-11ed-ab48-cb1f4a7707c1
HTTP/1.1 404 Not Found
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 9
date: Tue, 31 Jan 2023 13:31:18 GMT
server: nginx
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Expires, Content-Type, ETag, Last-Modified, Alert, Retry-After, Content-Length, Cache-Control, Pragma, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 31 Jan 2023 12:41:42 GMT
age: 2977
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
www.mandarinpalaceoc.com/?ch=1&js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTY3NTE3OTA3OCwiaWF0IjoxNjc1MTcxODc4LCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIyc3ZtZnNtaGFkNmtsYmd2aGswM3Jpc2QiLCJuYmYiOjE2NzUxNzE4NzgsInRzIjoxNjc1MTcxODc4OTk2NjY5fQ.mjT54pk9aAO_HXbl00cTuUqahw5c1TRaT-4F8dl--gM&sid=8b5aa7c6-a16b-11ed-ab48-cb1f4a7707c1
302 Found 11 B URL HTTP/1.1 www.mandarinpalaceoc.com/?ch=1&js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTY3NTE3OTA3OCwiaWF0IjoxNjc1MTcxODc4LCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIyc3ZtZnNtaGFkNmtsYmd2aGswM3Jpc2QiLCJuYmYiOjE2NzUxNzE4NzgsInRzIjoxNjc1MTcxODc4OTk2NjY5fQ.mjT54pk9aAO_HXbl00cTuUqahw5c1TRaT-4F8dl--gM&sid=8b5aa7c6-a16b-11ed-ab48-cb1f4a7707c1
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type ASCII text, with no line terminators
Hash 32682312d17c7cbf18e73594f5570319
60e22121bdd0bc71cdb2bae2a3aa577006b2eae9
e55fb1a1d731153e943b68844af12dcce8bfac917c98ffdea64c80da0607dd47
GET /?ch=1&js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTY3NTE3OTA3OCwiaWF0IjoxNjc1MTcxODc4LCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIyc3ZtZnNtaGFkNmtsYmd2aGswM3Jpc2QiLCJuYmYiOjE2NzUxNzE4NzgsInRzIjoxNjc1MTcxODc4OTk2NjY5fQ.mjT54pk9aAO_HXbl00cTuUqahw5c1TRaT-4F8dl--gM&sid=8b5aa7c6-a16b-11ed-ab48-cb1f4a7707c1 HTTP/1.1
Host: www.mandarinpalaceoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.mandarinpalaceoc.com/
Cookie: sid=8b5aa7c6-a16b-11ed-ab48-cb1f4a7707c1
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 11
date: Tue, 31 Jan 2023 13:31:18 GMT
location: http://btpnative.com/click?data=bFM5X1ZNQ2ZjTUxLNmJrUVljZlFtYWVTX2dpbDNwRnF6dnBfRDQ2WWp4UTBoTXRPcEJ2OVJveU1PRGRQN0RPX0xndUoweXZWdHVseVdKc2FvR0gxSHUwal9hbXA1Z3pBUWVHWXBnYWxVeEhNQ0xGdU8zM3UtTEFZUVkwUWpfdE1oLXc0dEY4ODNMQkZIaTZSa2o0XzYxeF9WQXgwTHdMMnN1am85alFaWXlzMQ2&id=72d2cdd0-ba33-4f7f-a9fe-7c141f2f5c54
server: nginx
set-cookie: sid=8b5aa7c6-a16b-11ed-ab48-cb1f4a7707c1; path=/; domain=.mandarinpalaceoc.com; expires=Sun, 18 Feb 2091 16:45:26 GMT; max-age=2147483647; HttpOnly
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 22b9916fc1fafc9bdc9bb37f9eac8a9a
86f640e134a741a0f906a8e3a0f5c6659dd0e394
a29ee843c8a39551a1507cc6ad949ad509e33aaae8b72c58ac4884bad8b0b38e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A29EE843C8A39551A1507CC6AD949AD509E33AAAE8B72C58AC4884BAD8B0B38E"
Last-Modified: Sun, 29 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6534
Expires: Tue, 31 Jan 2023 15:20:13 GMT
Date: Tue, 31 Jan 2023 13:31:19 GMT
Connection: keep-alive
btpnative.com/click?data=bFM5X1ZNQ2ZjTUxLNmJrUVljZlFtYWVTX2dpbDNwRnF6dnBfRDQ2WWp4UTBoTXRPcEJ2OVJveU1PRGRQN0RPX0xndUoweXZWdHVseVdKc2FvR0gxSHUwal9hbXA1Z3pBUWVHWXBnYWxVeEhNQ0xGdU8zM3UtTEFZUVkwUWpfdE1oLXc0dEY4ODNMQkZIaTZSa2o0XzYxeF9WQXgwTHdMMnN1am85alFaWXlzMQ2&id=72d2cdd0-ba33-4f7f-a9fe-7c141f2f5c54
200 OK 5.5 kB URL HTTP/1.1 btpnative.com/click?data=bFM5X1ZNQ2ZjTUxLNmJrUVljZlFtYWVTX2dpbDNwRnF6dnBfRDQ2WWp4UTBoTXRPcEJ2OVJveU1PRGRQN0RPX0xndUoweXZWdHVseVdKc2FvR0gxSHUwal9hbXA1Z3pBUWVHWXBnYWxVeEhNQ0xGdU8zM3UtTEFZUVkwUWpfdE1oLXc0dEY4ODNMQkZIaTZSa2o0XzYxeF9WQXgwTHdMMnN1am85alFaWXlzMQ2&id=72d2cdd0-ba33-4f7f-a9fe-7c141f2f5c54
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (349), with CRLF line terminators
Hash 5ace46a37737a52916380875d41785e3
9e3946e67a76ea926a252e561c58780e673e096d
9f2edb1b992605f03e0b252e02a74a776c534fd9e6339192cc116e6038823fc1
GET /click?data=bFM5X1ZNQ2ZjTUxLNmJrUVljZlFtYWVTX2dpbDNwRnF6dnBfRDQ2WWp4UTBoTXRPcEJ2OVJveU1PRGRQN0RPX0xndUoweXZWdHVseVdKc2FvR0gxSHUwal9hbXA1Z3pBUWVHWXBnYWxVeEhNQ0xGdU8zM3UtTEFZUVkwUWpfdE1oLXc0dEY4ODNMQkZIaTZSa2o0XzYxeF9WQXgwTHdMMnN1am85alFaWXlzMQ2&id=72d2cdd0-ba33-4f7f-a9fe-7c141f2f5c54 HTTP/1.1
Host: btpnative.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.mandarinpalaceoc.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Cache-Control: private
Content-Type: text/html; charset=utf-8
Server: Microsoft-IIS/10.0
X-AspNetMvc-Version: 5.2
X-AspNet-Version: 4.0.30319
Set-Cookie: eCEDjEfniSrocxc=eCEDjEfniSrocxc; path=/
X-Powered-By: ASP.NET
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: Content-Type
Date: Tue, 31 Jan 2023 13:31:19 GMT
Content-Length: 5470
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: r96/P/KW2ZbcrIvOBC1nXA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: /ZSQUDtr5vKYd/TQOZ/MwXFbPtU=
btpnative.com/Redirect/
302 Found 1.8 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (1726), with CRLF line terminators
Hash 170bb00718b9101f65175a01b1d7c1c6
183e616f900175b4fb509e0790aed896ef9c3caf
62d510013c935b5d731addc499e33b391c85529d9891ac10930f866a0932f030
POST /Redirect/ HTTP/1.1
Host: btpnative.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
Content-Length: 358
Origin: http://btpnative.com
Connection: keep-alive
Referer: http://btpnative.com/click?data=bFM5X1ZNQ2ZjTUxLNmJrUVljZlFtYWVTX2dpbDNwRnF6dnBfRDQ2WWp4UTBoTXRPcEJ2OVJveU1PRGRQN0RPX0xndUoweXZWdHVseVdKc2FvR0gxSHUwal9hbXA1Z3pBUWVHWXBnYWxVeEhNQ0xGdU8zM3UtTEFZUVkwUWpfdE1oLXc0dEY4ODNMQkZIaTZSa2o0XzYxeF9WQXgwTHdMMnN1am85alFaWXlzMQ2&id=72d2cdd0-ba33-4f7f-a9fe-7c141f2f5c54
Cookie: eCEDjEfniSrocxc=eCEDjEfniSrocxc
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Cache-Control: private
Content-Type: text/html; charset=utf-8
Location: https://mybettermb.com/aS/feedclick?s=HFz5zNIIs95ROWPasgEEz8pnKEjD6zMjdjHvKgQ6OvEu2S6O3wonJLvp2HunfmJ7HPSltSyn7JIaCYRRpx68RBiObSopHi2Ngd2qgfzQRgWBLjVANhNuEATKyNeDwkA0mMQggtb_dXtdY6mfGvI2XKSoUN0eHB_AMdtCkkPdohlt3r2aBDtlRCSjygBeo0qB9ZuoMChH0wZtI_023iDk7Poklf1_AtYVTyWmjnZ04OMF-aTMvjbJ5kNOG6xyQ4iHkCPtwde4fm46isSYFphG7-kuyoVZk7t50HIHySf0K1MR938QWrc4Yqp2CcvfBmLww-_cIVknid14YxPWHk9HInZSTtXtRMLhVKG8mLfhLPuF_rF6V_boTimD9R_3dYzpahymb97JG4ZBNsEd6GukuElRXVPu3OpA03rDOB2MBXssM4LUC2pHmAfizqapnKNS3rtaD6qVf5gtdKXIxoRjls7w6XmynHaXdgrcMZvjpx8aB-0igEQ6-fsRsivxGvCeCmPmB-RY8Yjw1CeM3ZS_7DPjQdiaKXqmh6ZN2nJB7-trufQAwgEMOXaCwUpVzQM6qtW_yfIrqT4rKMCl77mMIoqcwjOROblDT1SypETtXsh0ClWg_D3rf98LLGUEF5P_yrc4iebN3Syvj1r-bqGN9xe5Ehid0JOH31bXMCxAnzzlLI57MLTYZXW_amNJ7DVOugwUROcxvdODDnRBerrncIfVORfCJJiyP6ckf-t9dQWc1xdUALajob0ZIM-1pwms172t8TsRzZ4nN5W65W9pqUkB_UnQgQSY6vydHR2YW_v1QVCHgb9oE72kIIz9B2BR1TnqO-a-VDt8CPJ2Yn9BwL4C3LE3IS_iF0KNUsKOcKoE6021I9mDwmSM-IPF67PgdB6LJc5PvOpbKWlQr3IEqDqwJsjDWV6EuIVuWFBhJx9kihN6SrB37lil05AjQ8JyQCL-nbtpxlBRM5oOyHj5TWT7Tjxz9Uf5YzTvOB-RcaccPFcdag1qfbTo65bU7xYUsuVijvoQA3dJX_ZrwOLcgfpNs769ub8kJA-1dwlN5xAdicX-4YoiF-VV07i0JW9pt9oJT4xtXMt464Mcjg6E9Mz8vxrI4dzZ_u2isY9hLGKkWvDnpRu376X2ECg7uKabV_C5BXzLihIYfBTNQ6JZJngwRGpz7EccXE0LUT3bse1NU9QmVlAl-Mhslg5JfObioiPDGTLR4tr9-_nyTO8ziV6bvS4IWlDg4ukJ3KRp_5IQllGPiwLw4_Nj1X-TjguhA3z6IMso3-9gXLvMLOmBmnXkjYAE2yX4sZ0w9mgj1VHrHqqidc2KI2GKtkyD3Tx4iAQUdpqW0FFr_rhP3NeQOQknRyW69PTD3HhwYyC7FScmDXBNLRMOnGJ5UoJsE19z-aZ2EWYIaNAH9eYcMCMDhnHLiC4xy8O7KlEY5beoX-yxnTD2aCPVUeseqqJ1zYojfcGUdKw0MniPYM_I89YVF9VzWwQf_IbrmFjVQRb8dpElO7oBdjPsruRSlH9JKHjb140n0pSglQUZ4NgUOjw7fAoZNLE1qLAZbbkywpUN18pxMk-KVM5BdYHkKylN1ILmgb_Pja6VrS0OUVA7kenMPLGV3XTZzyR_5oestkTcX-c
Server: Microsoft-IIS/10.0
X-AspNetMvc-Version: 5.2
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: Content-Type
Date: Tue, 31 Jan 2023 13:31:19 GMT
Content-Length: 1798
ocsp.sectigo.com/
200 OK 472 B IP
Hash bc288310c7a5f80bbc8e5dbeace292af
d68ca97515594770b04f3c3ae943d186e75ad2c5
6def27992aed1f32911f4820b432dca388db29e13b623596229f8e2ccfb9435f
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 13:31:21 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sun, 29 Jan 2023 19:25:42 GMT
Expires: Sun, 05 Feb 2023 19:25:41 GMT
Etag: "d68ca97515594770b04f3c3ae943d186e75ad2c5"
Cache-Control: max-age=452659,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7922ce9e9a19b4f3-OSL
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dfb84426fed94988d5c90372baff059c
f1c4740830034ff8a5759d59ae3f657ea524d083
d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2876
Expires: Tue, 31 Jan 2023 14:19:17 GMT
Date: Tue, 31 Jan 2023 13:31:21 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dfb84426fed94988d5c90372baff059c
f1c4740830034ff8a5759d59ae3f657ea524d083
d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2876
Expires: Tue, 31 Jan 2023 14:19:17 GMT
Date: Tue, 31 Jan 2023 13:31:21 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dfb84426fed94988d5c90372baff059c
f1c4740830034ff8a5759d59ae3f657ea524d083
d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2876
Expires: Tue, 31 Jan 2023 14:19:17 GMT
Date: Tue, 31 Jan 2023 13:31:21 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dfb84426fed94988d5c90372baff059c
f1c4740830034ff8a5759d59ae3f657ea524d083
d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2876
Expires: Tue, 31 Jan 2023 14:19:17 GMT
Date: Tue, 31 Jan 2023 13:31:21 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F003f28f8-6845-4b0d-8d8d-11c9deea4eaf.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F003f28f8-6845-4b0d-8d8d-11c9deea4eaf.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2c4934be94898028e2ab696561b51462
6cf734e2d29938688913daacfb75506d8e004a94
239adcbb538b7a6d1483c65c7694d4a9f9fa9cadf456ab5681c4b764185e3596
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F003f28f8-6845-4b0d-8d8d-11c9deea4eaf.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9987
x-amzn-requestid: 67109f87-6073-4991-b540-cdeedc2d7b3c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: flYlPF9uIAMFXMg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d86e21-60ac2c7b37c72e6e54a5c69d;Sampled=0
x-amzn-remapped-date: Tue, 31 Jan 2023 01:25:53 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: hDjKAMYoVwHdCqS8t08PrWyfQQLiWaosXbi3FOJY8BeV0yAFCGziGw==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 01:58:16 GMT
age: 41585
etag: "6cf734e2d29938688913daacfb75506d8e004a94"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F37e3fb86-3315-41fd-97cb-ac82604d8869.jpeg
200 OK 8.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F37e3fb86-3315-41fd-97cb-ac82604d8869.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e6f9ffb8f9e99229b45ca5fdb84ce7d5
04577ad69ee9749b14382254eb5bbf0e1edcd7fa
6111acf3f363123b39d13cd3d23ab39b8c8d00379874f19231d1cd3da17c52c2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F37e3fb86-3315-41fd-97cb-ac82604d8869.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8558
x-amzn-requestid: 2841cd36-22e6-4ecb-b56a-bfadce3197c7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ffB_BFA8IAMFyvA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d5e393-3fd03bd14de762b0738a3b0a;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 03:10:11 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ZP2Mar8l3QoPH733_vv3hUuQjWvaN4_TgfYwme2-6WIxGi55BoSchg==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 04:26:31 GMT
age: 32690
etag: "04577ad69ee9749b14382254eb5bbf0e1edcd7fa"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67cbd807-4e92-4ddb-a8c5-864884d25e99.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67cbd807-4e92-4ddb-a8c5-864884d25e99.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2797bfd35b7ec24888de84be14f7f2ec
8e315ac5856967286eaa8769e081d827fb4ca39e
b99f3bd73eb4395194bc7bb6a1b801750182239e5b70f3207f99e494b60b72ab
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67cbd807-4e92-4ddb-a8c5-864884d25e99.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11129
x-amzn-requestid: 74f2a4dd-7d5d-4839-90a8-d2e74f6d785d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ffDBZGRPoAMFedg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d5e53b-3de444596550bb41188ada5b;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 03:17:15 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 9Fga247EZZqiGmdMJ72resdBZR2KLgflGDBPESmuw9cFVs4hSzMzTw==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 03:40:17 GMT
age: 35464
etag: "8e315ac5856967286eaa8769e081d827fb4ca39e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1295ec36-f5b2-4db1-83c7-667fa373f592.jpeg
200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1295ec36-f5b2-4db1-83c7-667fa373f592.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d957012d3e2b8c3bc0eefe11d66e8554
1959fdd94846fa3791c4890578dd15336b909dcc
a97e81ec5eb2eda6a603bf4bfd4fa4ef4fab762747479489e99e6c713258a736
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1295ec36-f5b2-4db1-83c7-667fa373f592.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13853
x-amzn-requestid: ca6ea6e7-3e13-4194-87f5-20a07b813e21
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fk3zzF4hIAMFwWg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d839b1-772487cb1b7495c52c552d36;Sampled=0
x-amzn-remapped-date: Mon, 30 Jan 2023 21:42:09 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: T5CaUojMEG8x8vki59UdIhI8IbbBRY_7w3xgiW3RCZlHTyeHPLIy2Q==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Mon, 30 Jan 2023 21:47:13 GMT
age: 56648
etag: "1959fdd94846fa3791c4890578dd15336b909dcc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9b71db36-11cb-45f6-a296-34813aea1c35.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9b71db36-11cb-45f6-a296-34813aea1c35.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4a2d26da68a313cc65958fc2692351c2
798c3538f3147ca77d317676ddd1bf040bd0f93b
76ce30224803d680c0115e987a712ce5552b2760beadf796a96b17439fb20797
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9b71db36-11cb-45f6-a296-34813aea1c35.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10898
x-amzn-requestid: e29f8dfc-07d4-4136-afaf-e1e067eea2ab
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fk3zxGshIAMFw5Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d839b1-5e87d2a44722af9e4e86c3d4;Sampled=0
x-amzn-remapped-date: Mon, 30 Jan 2023 21:42:09 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: djoQmYTv7Rlq9tKKkJ5U1J3YeVSIs5yzSts_xRN3bdi27Ra8UfM6OQ==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Mon, 30 Jan 2023 21:44:45 GMT
age: 56796
etag: "798c3538f3147ca77d317676ddd1bf040bd0f93b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F591a38fc-2daf-42e7-a48b-a02e54cb63e0.jpeg
200 OK 7.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F591a38fc-2daf-42e7-a48b-a02e54cb63e0.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3c83dcdb618756ebbfeb69a8bff6d38c
5f909182ab6847690e7ebd100e3f0d2798e36192
2e29d0747fb973908228501178465ac09f6553ef8e50dd70ee617f3379eb733c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F591a38fc-2daf-42e7-a48b-a02e54cb63e0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7049
x-amzn-requestid: bc6522f2-eb6b-4e59-9912-0c03d145f021
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fk31LGE2IAMF8rw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d839ba-67477ed1260c27f67e28043d;Sampled=0
x-amzn-remapped-date: Mon, 30 Jan 2023 21:42:18 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Q_aVbWJKMbX1_bjggzbdnWbgmfooGvXj76t55QGGXRr_y6ZgW2gctw==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 556b99c6be8d7078b9f067347c62df6a.cloudfront.net (CloudFront), 1.1 google
date: Mon, 30 Jan 2023 21:44:53 GMT
age: 56788
etag: "5f909182ab6847690e7ebd100e3f0d2798e36192"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
mybettermb.com/aS/feedclick?s=HFz5zNIIs95ROWPasgEEz8pnKEjD6zMjdjHvKgQ6OvEu2S6O3wonJLvp2HunfmJ7HPSltSyn7JIaCYRRpx68RBiObSopHi2Ngd2qgfzQRgWBLjVANhNuEATKyNeDwkA0mMQggtb_dXtdY6mfGvI2XKSoUN0eHB_AMdtCkkPdohlt3r2aBDtlRCSjygBeo0qB9ZuoMChH0wZtI_023iDk7Poklf1_AtYVTyWmjnZ04OMF-aTMvjbJ5kNOG6xyQ4iHkCPtwde4fm46isSYFphG7-kuyoVZk7t50HIHySf0K1MR938QWrc4Yqp2CcvfBmLww-_cIVknid14YxPWHk9HInZSTtXtRMLhVKG8mLfhLPuF_rF6V_boTimD9R_3dYzpahymb97JG4ZBNsEd6GukuElRXVPu3OpA03rDOB2MBXssM4LUC2pHmAfizqapnKNS3rtaD6qVf5gtdKXIxoRjls7w6XmynHaXdgrcMZvjpx8aB-0igEQ6-fsRsivxGvCeCmPmB-RY8Yjw1CeM3ZS_7DPjQdiaKXqmh6ZN2nJB7-trufQAwgEMOXaCwUpVzQM6qtW_yfIrqT4rKMCl77mMIoqcwjOROblDT1SypETtXsh0ClWg_D3rf98LLGUEF5P_yrc4iebN3Syvj1r-bqGN9xe5Ehid0JOH31bXMCxAnzzlLI57MLTYZXW_amNJ7DVOugwUROcxvdODDnRBerrncIfVORfCJJiyP6ckf-t9dQWc1xdUALajob0ZIM-1pwms172t8TsRzZ4nN5W65W9pqUkB_UnQgQSY6vydHR2YW_v1QVCHgb9oE72kIIz9B2BR1TnqO-a-VDt8CPJ2Yn9BwL4C3LE3IS_iF0KNUsKOcKoE6021I9mDwmSM-IPF67PgdB6LJc5PvOpbKWlQr3IEqDqwJsjDWV6EuIVuWFBhJx9kihN6SrB37lil05AjQ8JyQCL-nbtpxlBRM5oOyHj5TWT7Tjxz9Uf5YzTvOB-RcaccPFcdag1qfbTo65bU7xYUsuVijvoQA3dJX_ZrwOLcgfpNs769ub8kJA-1dwlN5xAdicX-4YoiF-VV07i0JW9pt9oJT4xtXMt464Mcjg6E9Mz8vxrI4dzZ_u2isY9hLGKkWvDnpRu376X2ECg7uKabV_C5BXzLihIYfBTNQ6JZJngwRGpz7EccXE0LUT3bse1NU9QmVlAl-Mhslg5JfObioiPDGTLR4tr9-_nyTO8ziV6bvS4IWlDg4ukJ3KRp_5IQllGPiwLw4_Nj1X-TjguhA3z6IMso3-9gXLvMLOmBmnXkjYAE2yX4sZ0w9mgj1VHrHqqidc2KI2GKtkyD3Tx4iAQUdpqW0FFr_rhP3NeQOQknRyW69PTD3HhwYyC7FScmDXBNLRMOnGJ5UoJsE19z-aZ2EWYIaNAH9eYcMCMDhnHLiC4xy8O7KlEY5beoX-yxnTD2aCPVUeseqqJ1zYojfcGUdKw0MniPYM_I89YVF9VzWwQf_IbrmFjVQRb8dpElO7oBdjPsruRSlH9JKHjb140n0pSglQUZ4NgUOjw7fAoZNLE1qLAZbbkywpUN18pxMk-KVM5BdYHkKylN1ILmgb_Pja6VrS0OUVA7kenMPLGV3XTZzyR_5oestkTcX-c
302 Found 0 B URL HTTP/2 mybettermb.com/aS/feedclick?s=HFz5zNIIs95ROWPasgEEz8pnKEjD6zMjdjHvKgQ6OvEu2S6O3wonJLvp2HunfmJ7HPSltSyn7JIaCYRRpx68RBiObSopHi2Ngd2qgfzQRgWBLjVANhNuEATKyNeDwkA0mMQggtb_dXtdY6mfGvI2XKSoUN0eHB_AMdtCkkPdohlt3r2aBDtlRCSjygBeo0qB9ZuoMChH0wZtI_023iDk7Poklf1_AtYVTyWmjnZ04OMF-aTMvjbJ5kNOG6xyQ4iHkCPtwde4fm46isSYFphG7-kuyoVZk7t50HIHySf0K1MR938QWrc4Yqp2CcvfBmLww-_cIVknid14YxPWHk9HInZSTtXtRMLhVKG8mLfhLPuF_rF6V_boTimD9R_3dYzpahymb97JG4ZBNsEd6GukuElRXVPu3OpA03rDOB2MBXssM4LUC2pHmAfizqapnKNS3rtaD6qVf5gtdKXIxoRjls7w6XmynHaXdgrcMZvjpx8aB-0igEQ6-fsRsivxGvCeCmPmB-RY8Yjw1CeM3ZS_7DPjQdiaKXqmh6ZN2nJB7-trufQAwgEMOXaCwUpVzQM6qtW_yfIrqT4rKMCl77mMIoqcwjOROblDT1SypETtXsh0ClWg_D3rf98LLGUEF5P_yrc4iebN3Syvj1r-bqGN9xe5Ehid0JOH31bXMCxAnzzlLI57MLTYZXW_amNJ7DVOugwUROcxvdODDnRBerrncIfVORfCJJiyP6ckf-t9dQWc1xdUALajob0ZIM-1pwms172t8TsRzZ4nN5W65W9pqUkB_UnQgQSY6vydHR2YW_v1QVCHgb9oE72kIIz9B2BR1TnqO-a-VDt8CPJ2Yn9BwL4C3LE3IS_iF0KNUsKOcKoE6021I9mDwmSM-IPF67PgdB6LJc5PvOpbKWlQr3IEqDqwJsjDWV6EuIVuWFBhJx9kihN6SrB37lil05AjQ8JyQCL-nbtpxlBRM5oOyHj5TWT7Tjxz9Uf5YzTvOB-RcaccPFcdag1qfbTo65bU7xYUsuVijvoQA3dJX_ZrwOLcgfpNs769ub8kJA-1dwlN5xAdicX-4YoiF-VV07i0JW9pt9oJT4xtXMt464Mcjg6E9Mz8vxrI4dzZ_u2isY9hLGKkWvDnpRu376X2ECg7uKabV_C5BXzLihIYfBTNQ6JZJngwRGpz7EccXE0LUT3bse1NU9QmVlAl-Mhslg5JfObioiPDGTLR4tr9-_nyTO8ziV6bvS4IWlDg4ukJ3KRp_5IQllGPiwLw4_Nj1X-TjguhA3z6IMso3-9gXLvMLOmBmnXkjYAE2yX4sZ0w9mgj1VHrHqqidc2KI2GKtkyD3Tx4iAQUdpqW0FFr_rhP3NeQOQknRyW69PTD3HhwYyC7FScmDXBNLRMOnGJ5UoJsE19z-aZ2EWYIaNAH9eYcMCMDhnHLiC4xy8O7KlEY5beoX-yxnTD2aCPVUeseqqJ1zYojfcGUdKw0MniPYM_I89YVF9VzWwQf_IbrmFjVQRb8dpElO7oBdjPsruRSlH9JKHjb140n0pSglQUZ4NgUOjw7fAoZNLE1qLAZbbkywpUN18pxMk-KVM5BdYHkKylN1ILmgb_Pja6VrS0OUVA7kenMPLGV3XTZzyR_5oestkTcX-c
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
GET /aS/feedclick?s=HFz5zNIIs95ROWPasgEEz8pnKEjD6zMjdjHvKgQ6OvEu2S6O3wonJLvp2HunfmJ7HPSltSyn7JIaCYRRpx68RBiObSopHi2Ngd2qgfzQRgWBLjVANhNuEATKyNeDwkA0mMQggtb_dXtdY6mfGvI2XKSoUN0eHB_AMdtCkkPdohlt3r2aBDtlRCSjygBeo0qB9ZuoMChH0wZtI_023iDk7Poklf1_AtYVTyWmjnZ04OMF-aTMvjbJ5kNOG6xyQ4iHkCPtwde4fm46isSYFphG7-kuyoVZk7t50HIHySf0K1MR938QWrc4Yqp2CcvfBmLww-_cIVknid14YxPWHk9HInZSTtXtRMLhVKG8mLfhLPuF_rF6V_boTimD9R_3dYzpahymb97JG4ZBNsEd6GukuElRXVPu3OpA03rDOB2MBXssM4LUC2pHmAfizqapnKNS3rtaD6qVf5gtdKXIxoRjls7w6XmynHaXdgrcMZvjpx8aB-0igEQ6-fsRsivxGvCeCmPmB-RY8Yjw1CeM3ZS_7DPjQdiaKXqmh6ZN2nJB7-trufQAwgEMOXaCwUpVzQM6qtW_yfIrqT4rKMCl77mMIoqcwjOROblDT1SypETtXsh0ClWg_D3rf98LLGUEF5P_yrc4iebN3Syvj1r-bqGN9xe5Ehid0JOH31bXMCxAnzzlLI57MLTYZXW_amNJ7DVOugwUROcxvdODDnRBerrncIfVORfCJJiyP6ckf-t9dQWc1xdUALajob0ZIM-1pwms172t8TsRzZ4nN5W65W9pqUkB_UnQgQSY6vydHR2YW_v1QVCHgb9oE72kIIz9B2BR1TnqO-a-VDt8CPJ2Yn9BwL4C3LE3IS_iF0KNUsKOcKoE6021I9mDwmSM-IPF67PgdB6LJc5PvOpbKWlQr3IEqDqwJsjDWV6EuIVuWFBhJx9kihN6SrB37lil05AjQ8JyQCL-nbtpxlBRM5oOyHj5TWT7Tjxz9Uf5YzTvOB-RcaccPFcdag1qfbTo65bU7xYUsuVijvoQA3dJX_ZrwOLcgfpNs769ub8kJA-1dwlN5xAdicX-4YoiF-VV07i0JW9pt9oJT4xtXMt464Mcjg6E9Mz8vxrI4dzZ_u2isY9hLGKkWvDnpRu376X2ECg7uKabV_C5BXzLihIYfBTNQ6JZJngwRGpz7EccXE0LUT3bse1NU9QmVlAl-Mhslg5JfObioiPDGTLR4tr9-_nyTO8ziV6bvS4IWlDg4ukJ3KRp_5IQllGPiwLw4_Nj1X-TjguhA3z6IMso3-9gXLvMLOmBmnXkjYAE2yX4sZ0w9mgj1VHrHqqidc2KI2GKtkyD3Tx4iAQUdpqW0FFr_rhP3NeQOQknRyW69PTD3HhwYyC7FScmDXBNLRMOnGJ5UoJsE19z-aZ2EWYIaNAH9eYcMCMDhnHLiC4xy8O7KlEY5beoX-yxnTD2aCPVUeseqqJ1zYojfcGUdKw0MniPYM_I89YVF9VzWwQf_IbrmFjVQRb8dpElO7oBdjPsruRSlH9JKHjb140n0pSglQUZ4NgUOjw7fAoZNLE1qLAZbbkywpUN18pxMk-KVM5BdYHkKylN1ILmgb_Pja6VrS0OUVA7kenMPLGV3XTZzyR_5oestkTcX-c HTTP/1.1
Host: mybettermb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://btpnative.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Tue, 31 Jan 2023 13:31:21 GMT
content-length: 0
set-cookie: rhid=82803328629; Max-Age=15552000; Expires=Sun, 30-Jul-2023 13:31:21 GMT; Domain=mybettermb.com; Path=/; SameSite=None; secure;
location: https://p274639.mybettermb.com/adServe/domainClick?ai=T-bNKdV0Pd1Nhj01ZcqbmRGab80DuHqV-cDiHQTErMzCwOYGIJdbc4vFVTTcXj_V-efcWYLpBuE7mkn2Vv40kQODAOxEq6xWMtXEYglt_nAglIiMrVIvlcHyk3m-b1G7QzopBYZBCuKBm883W2KgpGqAQTR_kWOH9SGXepio2cD0adMkN083g2Wp__riXRnqGnLL9g3RhC2ktJmalqtYdeRSlH9JKHjb140n0pSglQVL-xCfMUL4mnsmXgeLf7LqQZS_dRH0lA7IyjNbjgt25xf_JqlGW0Yalz2vc8v2BfZWQnp6mzIZzcxHyDnxK3VtZyFa5x3w2RepTNp5iFKPCjjDN7hxoakO8B0PF81k4VXFZ8E78-CR_0uP2HF_RImTS1V9Rt9xcBTZ2BGyX9whJ2HNq8kR-jp6x5WrgZj24V0RITLTjXCCEysCBXZHi5sjKH7xdaNgjm69nS2-sDJzXVWQdFTAZXOx7j-HGqYGJ1nfj8RQEHtPdbkcEcAYjxpLjwjjOocnKBOvTI1IRIcjB2WSQsQHXjql&ui=HFz5zNIIs96w8gbO8AoGVPmI0xR1wwxSH3LRhS7yFr7am_Ry8JXtPLJqHafQWAefrBefPw4CHc3o2cqvWxr7HYgx-0cSIbNufBhBhx1UQD0Zm2LVHK3CQw&si=1&oref=cf7a6e11e07251ebc9b4290034fea898&optunit=5FKUf0koeNvXjSfSlKCVBa0rozPkVpWr&rb=p0csom96i9g&rr=0&abtg=0
X-Firefox-Spdy: h2
www.spincasino.com/SPC/media/SpinCasino/9MasksofFire_slides_voted_best_games.jpg
200 OK 129 kB URL HTTP/2 www.spincasino.com/SPC/media/SpinCasino/9MasksofFire_slides_voted_best_games.jpg
IP
File type JPEG image data, progressive, precision 8, 800x480, components 3\012- data
Size 129 kB (129035 bytes)
Hash 32f95413cb5aa572781e75f43df0eab2
fb7c08a2c678bd2c63b0390d9cf570be06e482f6
d6800f78ccc60135687a1915aa870da70db92090504aa2c7fc68846ca6cb1cdd
GET /SPC/media/SpinCasino/9MasksofFire_slides_voted_best_games.jpg HTTP/1.1
Host: www.spincasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spincasino.com/no/
Cookie: Visit=visitId%3d0dc691bf-9ae5-4642-93f0-fbd13dc3d910%26eventId%3dSCTYPEINTRAFFIC%26promoId%3d421%26s%3daff20307%26a%3dbfpadid94317%26b%3dSCTYPEINTRAFFIC; GA-Details=null; __cf_bm=IRgxJrFUDAzHqTIYeEd149hGXgnk3kWw8ojxXq7SfrU-1675171881-0-AXiWy0WM8NX1vlB+97Ok1XoRHYJRB2vmqFcVsiwe0CX2ESNRQ2Xk03lW4ncOGFMemPtKGm5D9xOhZCUa84nr5Pg=; CMSPreferredCulture=nn-NO; CMSCsrfCookie=DX86FvHZD/PlFC7byxntBfs3Lt7IQ/M0erZnDtlp; ASP.NET_SessionId=jy1ifvu5hmng2ugdyqi3nxuc; CMSCurrentTheme=SpinCasino
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 13:31:22 GMT
content-type: image/jpeg
content-length: 129035
cache-control: public, max-age=86400
cf-bgj: imgq:100,h2pri
cf-polished: origSize=133173, status=webp_bigger
etag: "37a15e843d49d61:0"
last-modified: Tue, 23 Jun 2020 09:06:01 GMT
x-frame-options: SAMEORIGIN
x-powered-by: ASP.NET
cf-cache-status: HIT
age: 75459
expires: Wed, 01 Feb 2023 13:31:22 GMT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7922ceabe976b503-OSL
X-Firefox-Spdy: h2
www.spincasino.com/CMSPages/GetResource.ashx?stylesheetname=SpinCasino
200 OK 51 kB URL HTTP/2 www.spincasino.com/CMSPages/GetResource.ashx?stylesheetname=SpinCasino
IP
File type Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Hash 17d42e52b6222457bedd7b4c1eca1b22
3623e4d192cf481df01ef249dd59ee62d80d1797
7c2b342385f257aba4380a4b1f95e4f578f3e7990507f83f87a0ab04b72c4ce9
GET /CMSPages/GetResource.ashx?stylesheetname=SpinCasino HTTP/1.1
Host: www.spincasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spincasino.com/no/
Cookie: Visit=visitId%3d0dc691bf-9ae5-4642-93f0-fbd13dc3d910%26eventId%3dSCTYPEINTRAFFIC%26promoId%3d421%26s%3daff20307%26a%3dbfpadid94317%26b%3dSCTYPEINTRAFFIC; GA-Details=null; __cf_bm=IRgxJrFUDAzHqTIYeEd149hGXgnk3kWw8ojxXq7SfrU-1675171881-0-AXiWy0WM8NX1vlB+97Ok1XoRHYJRB2vmqFcVsiwe0CX2ESNRQ2Xk03lW4ncOGFMemPtKGm5D9xOhZCUa84nr5Pg=; CMSPreferredCulture=nn-NO; CMSCsrfCookie=DX86FvHZD/PlFC7byxntBfs3Lt7IQ/M0erZnDtlp; ASP.NET_SessionId=jy1ifvu5hmng2ugdyqi3nxuc; CMSCurrentTheme=SpinCasino
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 13:31:22 GMT
content-type: text/css; charset=utf-8
content-length: 50966
cache-control: public, must-revalidate
content-encoding: gzip
expires: Tue, 31 Jan 2023 13:31:22 GMT
last-modified: Fri, 27 Jan 2023 08:22:42 GMT
etag: "cssstylesheet|7f8b63b4-d0c0-4e19-9470-0e4fd19fd739"
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
content-disposition: attachment; filename="SpinCasino.css"
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7922ceabb92fb503-OSL
X-Firefox-Spdy: h2
www.spincasino.com/SPC/media/SpinCasino/arrow-up.png
200 OK 1.5 kB URL HTTP/2 www.spincasino.com/SPC/media/SpinCasino/arrow-up.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 3e1996ca6aebb6141d16ca9114baa926
71b8bcf9b9816d42c08f40a590039821e7330212
c64679069c7254d480ea99a7a44d9c1b35dc78b7d8f0217b1beb9a1c0a56e5c2
GET /SPC/media/SpinCasino/arrow-up.png HTTP/1.1
Host: www.spincasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spincasino.com/no/
Cookie: Visit=visitId%3d0dc691bf-9ae5-4642-93f0-fbd13dc3d910%26eventId%3dSCTYPEINTRAFFIC%26promoId%3d421%26s%3daff20307%26a%3dbfpadid94317%26b%3dSCTYPEINTRAFFIC; GA-Details=null; __cf_bm=IRgxJrFUDAzHqTIYeEd149hGXgnk3kWw8ojxXq7SfrU-1675171881-0-AXiWy0WM8NX1vlB+97Ok1XoRHYJRB2vmqFcVsiwe0CX2ESNRQ2Xk03lW4ncOGFMemPtKGm5D9xOhZCUa84nr5Pg=; CMSPreferredCulture=nn-NO; CMSCsrfCookie=DX86FvHZD/PlFC7byxntBfs3Lt7IQ/M0erZnDtlp; ASP.NET_SessionId=jy1ifvu5hmng2ugdyqi3nxuc; CMSCurrentTheme=SpinCasino
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 13:31:22 GMT
content-type: image/webp
content-length: 1456
cache-control: public, max-age=86400
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=4382
content-disposition: inline; filename="arrow-up.webp"
etag: "0ef29933a70d41:0"
last-modified: Tue, 30 Oct 2018 10:23:18 GMT
vary: Accept
x-frame-options: SAMEORIGIN
x-powered-by: ASP.NET
cf-cache-status: HIT
age: 71347
expires: Wed, 01 Feb 2023 13:31:22 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 7922ceac2a2eb503-OSL
X-Firefox-Spdy: h2
www.spincasino.com/SPC/media/SpinCasino/chat4w.png
200 OK 2.3 kB URL HTTP/2 www.spincasino.com/SPC/media/SpinCasino/chat4w.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 26f55c185d55ff9b2ac736076a2e369d
3c25b622beea38d994b761459be365973138cf7a
85e62ff71fe174fe6d4578baa17f02f251b90835e34b87258e3df658559d81a3
GET /SPC/media/SpinCasino/chat4w.png HTTP/1.1
Host: www.spincasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spincasino.com/no/
Cookie: Visit=visitId%3d0dc691bf-9ae5-4642-93f0-fbd13dc3d910%26eventId%3dSCTYPEINTRAFFIC%26promoId%3d421%26s%3daff20307%26a%3dbfpadid94317%26b%3dSCTYPEINTRAFFIC; GA-Details=null; __cf_bm=IRgxJrFUDAzHqTIYeEd149hGXgnk3kWw8ojxXq7SfrU-1675171881-0-AXiWy0WM8NX1vlB+97Ok1XoRHYJRB2vmqFcVsiwe0CX2ESNRQ2Xk03lW4ncOGFMemPtKGm5D9xOhZCUa84nr5Pg=; CMSPreferredCulture=nn-NO; CMSCsrfCookie=DX86FvHZD/PlFC7byxntBfs3Lt7IQ/M0erZnDtlp; ASP.NET_SessionId=jy1ifvu5hmng2ugdyqi3nxuc; CMSCurrentTheme=SpinCasino
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 13:31:22 GMT
content-type: image/webp
content-length: 2332
cache-control: public, max-age=86400
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=5803
content-disposition: inline; filename="chat4w.webp"
etag: "c51fb89161b8d81:0"
last-modified: Thu, 25 Aug 2022 09:03:40 GMT
vary: Accept
x-frame-options: SAMEORIGIN
x-powered-by: ASP.NET
cf-cache-status: HIT
age: 75454
expires: Wed, 01 Feb 2023 13:31:22 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 7922ceac2a36b503-OSL
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/parallax/3.1.0/parallax.min.js
200 OK 4.7 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/parallax/3.1.0/parallax.min.js
IP
File type ASCII text, with very long lines (17272)
Hash 0bb455442d6528ba3d5c5dac37f7107e
7d59cba826ed9b3bc08bcf4c86cbe75b9fc61503
3c05436d103f8b7074c0f148209867bb8848da7f0cbc74be0b900ad0e228d3f3
GET /ajax/libs/parallax/3.1.0/parallax.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spincasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 31 Jan 2023 13:31:22 GMT
content-type: application/javascript; charset=utf-8
content-length: 4655
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03f40-43a2"
last-modified: Mon, 04 May 2020 16:13:52 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 10174912
expires: Sun, 21 Jan 2024 13:31:22 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gCRS8rISI5gLRcVhzXOwyEq0na%2F3X5mNHk89tIIYMYFEoFlyoJfu9A%2B6YvqILIOSJ%2BgEY36ZFe0TWZLwiDLbsHtPZExEvlNUiK2n%2BhKXErx2djua7cowm0xXaI8LT82usWq4zIih"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7922ceac5a02b51b-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/es6-shim/0.35.5/es6-shim.min.js
200 OK 15 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/es6-shim/0.35.5/es6-shim.min.js
IP
File type ASCII text, with very long lines (32017)
Hash 3b3c747a92bbfa4afac282c940af0f4b
b424f3b284e3578f90a980e332cd4bc97e384f62
a80b515ec1cf0fc3247a9b61222fea4756167e0e577be4daad723fdf91bba4f2
GET /ajax/libs/es6-shim/0.35.5/es6-shim.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spincasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 31 Jan 2023 13:31:22 GMT
content-type: application/javascript; charset=utf-8
content-length: 14636
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e54-e119"
last-modified: Mon, 04 May 2020 16:09:56 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1065108
expires: Sun, 21 Jan 2024 13:31:22 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LKhSLdBb9QCVblC%2B7Pk%2Bt34n%2BEFPNzoAuCx%2Bb1Eo543PfwfvhL9%2F837L6Z6hvRIJV%2BDRtgTTVOKthip8RXUVJwKzR8iBPlqnhy6Ho7LuAH%2F%2BqvbgJCD4byQfY%2BhdMHjrIPRsrnFQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7922ceac8a53b51b-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/fetch/2.0.3/fetch.js
200 OK 2.9 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/fetch/2.0.3/fetch.js
IP
Hash 19e2a5bfbd5e778294ed2e904266b549
5c1f7e7587e6a03d37335858d6378432354c2b21
92244b889ecd27c615bc644d7a658e1447e3b39b8262c04d260f98d37b7fc00d
GET /ajax/libs/fetch/2.0.3/fetch.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spincasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 31 Jan 2023 13:31:22 GMT
content-type: application/javascript; charset=utf-8
content-length: 2864
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e59-3188"
last-modified: Mon, 04 May 2020 16:10:01 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 24463004
expires: Sun, 21 Jan 2024 13:31:22 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=65lVbMiFWP8Al9tVIcEVcQUQ7SCsSpefbnYnMibU%2BjnedxK7X%2BFDxhhYeUgvnq8miXOw4l8E2aFXkDm0FYWxNPtK0fqGtE8VN22uavQk8LnuQPeqchN81UEJyOC0wNaJHesElPOf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7922ceac8a52b51b-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
dm.imagethumb.com/images/spin_casino_com/Homepage/quick_icons_craps.png
200 OK 790 B URL HTTP/2 dm.imagethumb.com/images/spin_casino_com/Homepage/quick_icons_craps.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash b3ce10c50ea818a76030f1cfe6dbc911
f09775e0d9f76078ce2e157c19e2b0d8f7c39d77
cf39e181f3426ee0db2666648eeefae24d81aa7856f713807d2e064d27c25d2f
GET /images/spin_casino_com/Homepage/quick_icons_craps.png HTTP/1.1
Host: dm.imagethumb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spincasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 31 Jan 2023 13:31:23 GMT
content-type: image/webp
content-length: 790
access-control-allow-origin: *
cache-control: public, max-age=5184000
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=2331
content-disposition: inline; filename="quick_icons_craps.webp"
etag: "0688cb2e632d41:0"
last-modified: Mon, 13 Aug 2018 09:19:12 GMT
vary: Accept
x-powered-by: ASP.NET
cf-cache-status: HIT
age: 1038425
expires: Sat, 01 Apr 2023 13:31:23 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 7922ceacbcb6b4f4-OSL
X-Firefox-Spdy: h2
dm.imagethumb.com/images/spin_casino_com/Homepage/quick_icons_blackjack.png
200 OK 478 B URL HTTP/2 dm.imagethumb.com/images/spin_casino_com/Homepage/quick_icons_blackjack.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash a9bb607d776d91ac8e826703029b51d0
d073f5dbca7e87fa4aa18b8e035be2e3cdf2dd05
c222d3fa870f618bd514be98c6283fdcae78e9a6579b80d08bebfb179cfc22a3
GET /images/spin_casino_com/Homepage/quick_icons_blackjack.png HTTP/1.1
Host: dm.imagethumb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spincasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 31 Jan 2023 13:31:23 GMT
content-type: image/webp
content-length: 478
access-control-allow-origin: *
cache-control: public, max-age=5184000
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=2074
content-disposition: inline; filename="quick_icons_blackjack.webp"
etag: "0c8668ce632d41:0"
last-modified: Mon, 13 Aug 2018 09:18:08 GMT
vary: Accept
x-powered-by: ASP.NET
cf-cache-status: HIT
age: 4579605
expires: Sat, 01 Apr 2023 13:31:23 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 7922ceacbcbfb4f4-OSL
X-Firefox-Spdy: h2
dm.imagethumb.com/images/spin_casino_com/Homepage/quick_icons_winners.png
200 OK 642 B URL HTTP/2 dm.imagethumb.com/images/spin_casino_com/Homepage/quick_icons_winners.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 2a2a4789a31f0660b08c356eeebe719c
40bc0fd92d050804ded9067a17c3605ea65ef411
d1ca8f420db01b93c4cfda855d60f57482b2b1af01072c7e0ed0b76a7b767ddc
GET /images/spin_casino_com/Homepage/quick_icons_winners.png HTTP/1.1
Host: dm.imagethumb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spincasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 31 Jan 2023 13:31:23 GMT
content-type: image/webp
content-length: 642
access-control-allow-origin: *
cache-control: public, max-age=5184000
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=2008
content-disposition: inline; filename="quick_icons_winners.webp"
etag: "06a96d9e532d41:0"
last-modified: Mon, 13 Aug 2018 09:13:08 GMT
vary: Accept
x-powered-by: ASP.NET
cf-cache-status: HIT
age: 876161
expires: Sat, 01 Apr 2023 13:31:23 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 7922ceacbcc1b4f4-OSL
X-Firefox-Spdy: h2
dm.imagethumb.com/images/spin_casino_com/Homepage/quick_icons_roulette.png
200 OK 1.1 kB URL HTTP/2 dm.imagethumb.com/images/spin_casino_com/Homepage/quick_icons_roulette.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 06392730a87e845c6773c09fcf00271d
749c5071144e83d63acbe27423df1378ec1cb846
582c542c93a9df729926185c709b540db8b9f7cad8c2f0a9936538ae90802fa9
GET /images/spin_casino_com/Homepage/quick_icons_roulette.png HTTP/1.1
Host: dm.imagethumb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spincasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 31 Jan 2023 13:31:23 GMT
content-type: image/webp
content-length: 1112
access-control-allow-origin: *
cache-control: public, max-age=5184000
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=2929
content-disposition: inline; filename="quick_icons_roulette.webp"
etag: "01a1a5fe632d41:0"
last-modified: Mon, 13 Aug 2018 09:16:52 GMT
vary: Accept
x-powered-by: ASP.NET
cf-cache-status: HIT
age: 4579605
expires: Sat, 01 Apr 2023 13:31:23 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 7922ceacbcbeb4f4-OSL
X-Firefox-Spdy: h2
dm.imagethumb.com/images/spin_casino_com/Homepage/quick_icons_videopoker.png
200 OK 862 B URL HTTP/2 dm.imagethumb.com/images/spin_casino_com/Homepage/quick_icons_videopoker.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 0b3f184e8eae52bc9c60dc19d9a3212d
8050ea1614cbf87a0b7b69ac9d8c45794f35ee2b
1ace9c815d52eb08389994b8b638baecd54735d7b22d3158b963a7ac4c9fddfc
GET /images/spin_casino_com/Homepage/quick_icons_videopoker.png HTTP/1.1
Host: dm.imagethumb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spincasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 13:31:23 GMT
content-type: image/webp
content-length: 862
access-control-allow-origin: *
cache-control: public, max-age=5184000
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=2242
content-disposition: inline; filename="quick_icons_videopoker.webp"
etag: "06b489ee632d41:0"
last-modified: Mon, 13 Aug 2018 09:18:38 GMT
vary: Accept
x-powered-by: ASP.NET
cf-cache-status: HIT
age: 4579604
expires: Sat, 01 Apr 2023 13:31:23 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 7922ceacbcbbb4f4-OSL
X-Firefox-Spdy: h2
dm.imagethumb.com/images/spin_casino_com/Homepage/quick_icons_loyalty.png
200 OK 1.0 kB URL HTTP/2 dm.imagethumb.com/images/spin_casino_com/Homepage/quick_icons_loyalty.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash f9ceca484048726108a3052bb4a11a4f
6996c8e8242b9a0ae8a618270c8a764fb049a1c4
7dc20e2425e4fe9e23dfa5ebb6e1f2c053e6f5235129be57c57094216b52ea78
GET /images/spin_casino_com/Homepage/quick_icons_loyalty.png HTTP/1.1
Host: dm.imagethumb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spincasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 31 Jan 2023 13:31:23 GMT
content-type: image/webp
content-length: 1006
access-control-allow-origin: *
cache-control: public, max-age=5184000
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=2723
content-disposition: inline; filename="quick_icons_loyalty.webp"
etag: "0175e73e632d41:0"
last-modified: Mon, 13 Aug 2018 09:17:26 GMT
vary: Accept
x-powered-by: ASP.NET
cf-cache-status: HIT
age: 4579605
expires: Sat, 01 Apr 2023 13:31:23 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 7922ceacbcc2b4f4-OSL
X-Firefox-Spdy: h2
dm.imagethumb.com/images/spin_casino_com/Homepage/quick_icons_banking.png
200 OK 884 B URL HTTP/2 dm.imagethumb.com/images/spin_casino_com/Homepage/quick_icons_banking.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash efd39fa6e0739d2d09b3ef7743239581
8f62cc6b289d8f8a57caee8749e9963d97a3b0c1
2272f831f931478887547c8377df1464184ab874f55b6a97e9bd0e3d0b005e12
GET /images/spin_casino_com/Homepage/quick_icons_banking.png HTTP/1.1
Host: dm.imagethumb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spincasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 13:31:23 GMT
content-type: image/webp
content-length: 884
access-control-allow-origin: *
cache-control: public, max-age=5184000
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=2446
content-disposition: inline; filename="quick_icons_banking.webp"
etag: "06ccd31e632d41:0"
last-modified: Mon, 13 Aug 2018 09:15:36 GMT
vary: Accept
x-powered-by: ASP.NET
cf-cache-status: HIT
age: 4579604
expires: Sat, 01 Apr 2023 13:31:23 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 7922ceacbcbdb4f4-OSL
X-Firefox-Spdy: h2
cdn.jsdelivr.net/bluebird/latest/bluebird.min.js
200 OK 23 kB URL HTTP/2 cdn.jsdelivr.net/bluebird/latest/bluebird.min.js
IP
File type ASCII text, with very long lines (32137), with escape sequences
Hash a29547f2b2be7f95207d161b0fd13b22
13d47c602815fef89f43d9a2b9000e03c707fcab
5ade47bfd01b556d02135169a9c4bac369cce30581248f85e17f868235503f02
GET /bluebird/latest/bluebird.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spincasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
etag: W/"136ba-PRhqxtJEaRdUMD0xU4Ob9CtX99E"
content-encoding: gzip
accept-ranges: bytes
date: Tue, 31 Jan 2023 13:31:23 GMT
age: 6706318
x-served-by: cache-fra-eddf8230107-FRA, cache-bma1676-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 22719
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash ac9cb78f82fca56b2c2f3697423c428d
e734c7d622c2571d8078c3306b945f31aa2e241b
312f01b9db5d85a1ee709dc943c9b09173771aae009e20ef8ae6d3f0fbd7890d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5747
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 13:31:23 GMT
Last-Modified: Tue, 31 Jan 2023 11:55:36 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 280 B IP
Hash 162664586cacf99e8bebd03209131c22
e1d094ee4849d142646c3db4148b3dcb340ccd17
1b75c697d052617fffb065ed73f6b100d68e129f26155401d5a05ba89f24ec96
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5072
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 13:31:23 GMT
Last-Modified: Tue, 31 Jan 2023 12:06:51 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 280
cdn.jsdelivr.net/npm/babel-regenerator-runtime@6.5.0/runtime.js
200 OK 6.2 kB URL HTTP/2 cdn.jsdelivr.net/npm/babel-regenerator-runtime@6.5.0/runtime.js
IP
Hash bb2472a1c4d2e7d85f43ef7d9ee5b548
02c4eebe845643dfe199495f684bfa8544e153f9
17f92e5e8e94b1ae680036bd64cc56821db711e1a1dc1034d255596da29b4acd
GET /npm/babel-regenerator-runtime@6.5.0/runtime.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spincasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 6.5.0
x-jsd-version-type: version
etag: W/"53cd-XOwSN/ws1IIGTvt4xVCWVg/9RBk"
content-encoding: gzip
accept-ranges: bytes
date: Tue, 31 Jan 2023 13:31:23 GMT
age: 1141217
x-served-by: cache-fra-eddf8230114-FRA, cache-bma1676-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 6223
X-Firefox-Spdy: h2
p.typekit.net/p.css?s=1&k=ivl2jty&ht=tk&f=7986.7988&a=15841957&app=typekit&e=css
200 OK 5 B URL HTTP/2 p.typekit.net/p.css?s=1&k=ivl2jty&ht=tk&f=7986.7988&a=15841957&app=typekit&e=css
IP
ASN #20940 Akamai International B.V.
Hash 83d24d4b43cc7eef2b61e66c95f3d158
f0cafc285ee23bb6c28c5166f305493c4331c84d
1c0ff118a4290c99f39c90abb38703a866e47251b23cca20266c69c812ccafeb
GET /p.css?s=1&k=ivl2jty&ht=tk&f=7986.7988&a=15841957&app=typekit&e=css HTTP/1.1
Host: p.typekit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spincasino.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: text/css
content-length: 5
last-modified: Thu, 28 Jul 2022 22:24:50 GMT
etag: "62e30cb2-5"
cache-control: public, max-age=604800
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
accept-ranges: bytes
date: Tue, 31 Jan 2023 13:31:23 GMT
X-Firefox-Spdy: h2
media.rechannelapi.com/plugins/eprivacy/eprivacy-custom.js
200 OK 10 kB URL HTTP/2 media.rechannelapi.com/plugins/eprivacy/eprivacy-custom.js
IP
File type ASCII text, with CRLF line terminators
Hash b9188a183286019dd6a4ba2a87d289ae
2024e0ea7bd21db5748cfad39b8b2ee95a7c0cc6
bb00a6b56e603d752f49fcc3e55e2aac4737ac161546f52becd9496e3d9c7705
GET /plugins/eprivacy/eprivacy-custom.js HTTP/1.1
Host: media.rechannelapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spincasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 31 Jan 2023 13:31:23 GMT
content-type: application/javascript
content-length: 10163
content-encoding: gzip
last-modified: Wed, 19 Oct 2022 12:36:01 GMT
etag: "ef19b058b7e3d81:0"
vary: Accept-Encoding
x-powered-by: ASP.NET
access-control-allow-origin: *
cf-cache-status: HIT
age: 6186
expires: Tue, 31 Jan 2023 17:31:23 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
set-cookie: __cf_bm=vYFg6xROu6vikM3blU8wNWryWyXML9nD9pJa2l8zZMk-1675171883-0-AaxiOxu1wdWAj+2uYFfikEgg1GpoWvHA5rB/4vmuZWwN0EzTWEVE7LYpDYMP9eoaMakKoZWCF1TRB6cKts0EZQm4HaBpswUFUnQ7eo6KYPZ+; path=/; expires=Tue, 31-Jan-23 14:01:23 GMT; domain=.rechannelapi.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 7922cead1d6e0b59-OSL
X-Firefox-Spdy: h2
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4
200 OK 1.5 kB URL HTTP/1.1 ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4
IP
Hash c25db429389ee798ca6686a2f3849387
c019952628c2667bd330de6dc0bfde0977270509
55d914604e001161657c5ec9f74225fd0bf419bf7e9e654dbbc74c9ad985a939
POST /ca/gsatlasr3dvtlsca2022q4 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 13:31:23 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "050DF05924ECD417DE0EF81405110743EBEE0451"
Expires: Wed, 01 Feb 2023 00:00:00 GMT
Last-Modified: Tue, 31 Jan 2023 12:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 2311
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7922cead1d181bfa-OSL
www.spincasino.com/WebResource.axd?d=pynGkmcFUV13He1Qd6_TZOTrtu3bhbQP9chZDab6T3T6rpswiAn_48uhi_cxqxLvNMyaTui3c8d2zcm5Ahj9CA2&t=637823437705833095
200 OK 6.0 kB URL HTTP/2 www.spincasino.com/WebResource.axd?d=pynGkmcFUV13He1Qd6_TZOTrtu3bhbQP9chZDab6T3T6rpswiAn_48uhi_cxqxLvNMyaTui3c8d2zcm5Ahj9CA2&t=637823437705833095
IP
File type ASCII text, with CRLF line terminators
Hash 06fd446079195e9866f38728a31b8416
bce7935598a51703a7077dd75e1d30882533c6e1
5466d19b6349cc09de47de356c3195b2fd367a5ab8f1c55e8aaf2f296915d46d
GET /WebResource.axd?d=pynGkmcFUV13He1Qd6_TZOTrtu3bhbQP9chZDab6T3T6rpswiAn_48uhi_cxqxLvNMyaTui3c8d2zcm5Ahj9CA2&t=637823437705833095 HTTP/1.1
Host: www.spincasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spincasino.com/no/
Cookie: Visit=visitId%3d0dc691bf-9ae5-4642-93f0-fbd13dc3d910%26eventId%3dSCTYPEINTRAFFIC%26promoId%3d421%26s%3daff20307%26a%3dbfpadid94317%26b%3dSCTYPEINTRAFFIC; GA-Details=null; __cf_bm=IRgxJrFUDAzHqTIYeEd149hGXgnk3kWw8ojxXq7SfrU-1675171881-0-AXiWy0WM8NX1vlB+97Ok1XoRHYJRB2vmqFcVsiwe0CX2ESNRQ2Xk03lW4ncOGFMemPtKGm5D9xOhZCUa84nr5Pg=; CMSPreferredCulture=nn-NO; CMSCsrfCookie=DX86FvHZD/PlFC7byxntBfs3Lt7IQ/M0erZnDtlp; ASP.NET_SessionId=jy1ifvu5hmng2ugdyqi3nxuc; CMSCurrentTheme=SpinCasino
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 13:31:23 GMT
content-type: application/x-javascript
content-length: 6007
cache-control: public
content-encoding: gzip
expires: Wed, 31 Jan 2024 13:07:16 GMT
last-modified: Tue, 08 Mar 2022 11:42:50 GMT
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7922ceabd95db503-OSL
X-Firefox-Spdy: h2
www.spincasino.com/CMSScripts/Custom/spincasino_main.js
200 OK 15 kB URL HTTP/2 www.spincasino.com/CMSScripts/Custom/spincasino_main.js
IP
File type ASCII text, with very long lines (2079)
Hash b7c75eb6b098da28fce5bdb7e193b6f1
66979715c426d9e41d1668d0df4080865f60113e
405c04254de7d5236444c1dc7e0bcac9712586a5cebbc801c971b8333bf68785
GET /CMSScripts/Custom/spincasino_main.js HTTP/1.1
Host: www.spincasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spincasino.com/no/
Cookie: Visit=visitId%3d0dc691bf-9ae5-4642-93f0-fbd13dc3d910%26eventId%3dSCTYPEINTRAFFIC%26promoId%3d421%26s%3daff20307%26a%3dbfpadid94317%26b%3dSCTYPEINTRAFFIC; GA-Details=null; __cf_bm=IRgxJrFUDAzHqTIYeEd149hGXgnk3kWw8ojxXq7SfrU-1675171881-0-AXiWy0WM8NX1vlB+97Ok1XoRHYJRB2vmqFcVsiwe0CX2ESNRQ2Xk03lW4ncOGFMemPtKGm5D9xOhZCUa84nr5Pg=; CMSPreferredCulture=nn-NO; CMSCsrfCookie=DX86FvHZD/PlFC7byxntBfs3Lt7IQ/M0erZnDtlp; ASP.NET_SessionId=jy1ifvu5hmng2ugdyqi3nxuc; CMSCurrentTheme=SpinCasino
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 13:31:23 GMT
content-type: application/javascript
content-length: 14857
cache-control: public, max-age=14400
content-encoding: gzip
last-modified: Thu, 24 Nov 2022 10:53:48 GMT
etag: "3a9458f3ffd81:0"
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
x-powered-by: ASP.NET
cf-cache-status: EXPIRED
expires: Tue, 31 Jan 2023 17:31:23 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 7922ceac09b8b503-OSL
X-Firefox-Spdy: h2
www.spincasino.com/CMSScripts/Custom/jackpot_ticker.js
200 OK 3.0 kB URL HTTP/2 www.spincasino.com/CMSScripts/Custom/jackpot_ticker.js
IP
Hash 841247dc6a5d8369442ec02f3fee6f9c
0c6c44198037a5f9513b52d2170db8d8c63c20c4
b451c703ac75f78493fc03834d760b1acc1909391f8a5587c45c914adc9b41a1
GET /CMSScripts/Custom/jackpot_ticker.js HTTP/1.1
Host: www.spincasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spincasino.com/no/
Cookie: Visit=visitId%3d0dc691bf-9ae5-4642-93f0-fbd13dc3d910%26eventId%3dSCTYPEINTRAFFIC%26promoId%3d421%26s%3daff20307%26a%3dbfpadid94317%26b%3dSCTYPEINTRAFFIC; GA-Details=null; __cf_bm=IRgxJrFUDAzHqTIYeEd149hGXgnk3kWw8ojxXq7SfrU-1675171881-0-AXiWy0WM8NX1vlB+97Ok1XoRHYJRB2vmqFcVsiwe0CX2ESNRQ2Xk03lW4ncOGFMemPtKGm5D9xOhZCUa84nr5Pg=; CMSPreferredCulture=nn-NO; CMSCsrfCookie=DX86FvHZD/PlFC7byxntBfs3Lt7IQ/M0erZnDtlp; ASP.NET_SessionId=jy1ifvu5hmng2ugdyqi3nxuc; CMSCurrentTheme=SpinCasino
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 13:31:23 GMT
content-type: application/javascript
content-length: 3047
cache-control: public, max-age=14400
content-encoding: gzip
last-modified: Thu, 06 Oct 2022 08:11:54 GMT
etag: "7ff3de4b5bd9d81:0"
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
x-powered-by: ASP.NET
cf-cache-status: EXPIRED
expires: Tue, 31 Jan 2023 17:31:23 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 7922ceac1a15b503-OSL
X-Firefox-Spdy: h2
www.spincasino.com/CMSScripts/Custom/jquery.min.js
200 OK 40 kB URL HTTP/2 www.spincasino.com/CMSScripts/Custom/jquery.min.js
IP
File type Unicode text, UTF-8 text, with very long lines (65448)
Hash 4b70ee16c518b46113a7d2ccd472bb3b
457fe4d578eb47148aac380753a53fb2bd3bc236
e7c3139745681aa1edd1f07c26d3b56ee196c514d6a26dd6177fe70cee3cd5ad
GET /CMSScripts/Custom/jquery.min.js HTTP/1.1
Host: www.spincasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spincasino.com/no/
Cookie: Visit=visitId%3d0dc691bf-9ae5-4642-93f0-fbd13dc3d910%26eventId%3dSCTYPEINTRAFFIC%26promoId%3d421%26s%3daff20307%26a%3dbfpadid94317%26b%3dSCTYPEINTRAFFIC; GA-Details=null; __cf_bm=IRgxJrFUDAzHqTIYeEd149hGXgnk3kWw8ojxXq7SfrU-1675171881-0-AXiWy0WM8NX1vlB+97Ok1XoRHYJRB2vmqFcVsiwe0CX2ESNRQ2Xk03lW4ncOGFMemPtKGm5D9xOhZCUa84nr5Pg=; CMSPreferredCulture=nn-NO; CMSCsrfCookie=DX86FvHZD/PlFC7byxntBfs3Lt7IQ/M0erZnDtlp; ASP.NET_SessionId=jy1ifvu5hmng2ugdyqi3nxuc; CMSCurrentTheme=SpinCasino
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 13:31:23 GMT
content-type: application/javascript
content-length: 39916
cache-control: public, max-age=14400
content-encoding: gzip
last-modified: Tue, 15 Feb 2022 08:48:35 GMT
etag: "bb446ed14822d81:0"
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
x-powered-by: ASP.NET
cf-cache-status: EXPIRED
expires: Tue, 31 Jan 2023 17:31:23 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 7922ceabf997b503-OSL
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d81f874741beb45c89de8bb5c6de438e
a251ab903e654953631d84721479bbae55aa5cdf
ec28dafa2a54818028d4dfe99218d9e4b507f3bd7efaabfba630d85f24d4d75d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 13:31:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.spincasino.com/CMSScripts/Custom/swiper.min.js
200 OK 44 kB URL HTTP/2 www.spincasino.com/CMSScripts/Custom/swiper.min.js
IP
File type ASCII text, with very long lines (65270)
Hash 83b5eab10a3b427a452a1800a21c4ff2
4441d7fdb830cb9b08ebc4ea477a483eb5631ccf
4e7920628d61978a223d6e02c77adbeab57778c73d615c298d7a86fc26cc3ace
GET /CMSScripts/Custom/swiper.min.js HTTP/1.1
Host: www.spincasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spincasino.com/no/
Cookie: Visit=visitId%3d0dc691bf-9ae5-4642-93f0-fbd13dc3d910%26eventId%3dSCTYPEINTRAFFIC%26promoId%3d421%26s%3daff20307%26a%3dbfpadid94317%26b%3dSCTYPEINTRAFFIC; GA-Details=null; __cf_bm=IRgxJrFUDAzHqTIYeEd149hGXgnk3kWw8ojxXq7SfrU-1675171881-0-AXiWy0WM8NX1vlB+97Ok1XoRHYJRB2vmqFcVsiwe0CX2ESNRQ2Xk03lW4ncOGFMemPtKGm5D9xOhZCUa84nr5Pg=; CMSPreferredCulture=nn-NO; CMSCsrfCookie=DX86FvHZD/PlFC7byxntBfs3Lt7IQ/M0erZnDtlp; ASP.NET_SessionId=jy1ifvu5hmng2ugdyqi3nxuc; CMSCurrentTheme=SpinCasino
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 13:31:23 GMT
content-type: application/javascript
content-length: 43747
cache-control: public, max-age=14400
content-encoding: gzip
last-modified: Mon, 11 Oct 2021 11:38:44 GMT
etag: "479b1c8c94bed71:0"
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
x-powered-by: ASP.NET
cf-cache-status: EXPIRED
expires: Tue, 31 Jan 2023 17:31:23 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 7922ceabf99db503-OSL
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-PC6JN7
200 OK 55 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-PC6JN7
IP
File type ASCII text, with very long lines (16493)
Hash 19c31107277c5263633d9293a4362a0d
37f0825c078e93234af7078e1200df298988677f
f29bd8f61fca75366fa5f52edcca715b49474e8fbac079dc191c9bf047a5238f
GET /gtm.js?id=GTM-PC6JN7 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spincasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 31 Jan 2023 13:31:23 GMT
expires: Tue, 31 Jan 2023 13:31:23 GMT
cache-control: private, max-age=900
last-modified: Tue, 31 Jan 2023 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 54595
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d81f874741beb45c89de8bb5c6de438e
a251ab903e654953631d84721479bbae55aa5cdf
ec28dafa2a54818028d4dfe99218d9e4b507f3bd7efaabfba630d85f24d4d75d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 13:31:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
region1.google-analytics.com/g/collect?v=2&tid=G-W6NG397K4R>m=2oe1p0&_p=1924215495&cid=821263410.1675171900&ul=en-us&sr=1280x1024&uaW=1&_s=1&ci=bfpadid94317&sid=1675171900&sct=1&seg=0&dl=https%3A%2F%2Fwww.spincasino.com%2Fno%2F&dt=Bes%C3%B8k%20Spin%20Casino%2C%20Norges%20mest%20popul%C3%A6re%20spilledestinasjon&en=page_view&_fv=1&_nsi=1&_ss=1&ep.brand_short_code=SPC&ep.brand_name=spincasino&ep.regltd_country=mlt%2Fmit&ep.client_date=2023-01-31T13%3A31%3A40.269%2B00%3A00&ep.product_name=casino&ep.container_type=brand&ep.page_path=%2Fno%2F&ep.page_language=nn-NO&ep.document_referrer=direct&ep.meta_description=dersom%20du%20leter%20etter%20de%20beste%20online%20casinospillene%20og%20uendelige%20utbetalingsmuligheter%2C%20b%C3%B8r%20du%20plassere%20innsatser%20og%20pr%C3%B8ve%20lykken%20p%C3%A5%20spin%20casino!&ep.venge_visit=0dc691bf-9ae5-4642-93f0-fbd13dc3d910&ep.affiliate_id=aff20307&ep.mediabanner_id=SCTYPEINTRAFFIC&ep.cookieDomain=auto&ep.useBeacon=true&ep.debug_mode=true&ep.player_account=na-na&ep.player_id=na&ep.casino_id=na
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-W6NG397K4R>m=2oe1p0&_p=1924215495&cid=821263410.1675171900&ul=en-us&sr=1280x1024&uaW=1&_s=1&ci=bfpadid94317&sid=1675171900&sct=1&seg=0&dl=https%3A%2F%2Fwww.spincasino.com%2Fno%2F&dt=Bes%C3%B8k%20Spin%20Casino%2C%20Norges%20mest%20popul%C3%A6re%20spilledestinasjon&en=page_view&_fv=1&_nsi=1&_ss=1&ep.brand_short_code=SPC&ep.brand_name=spincasino&ep.regltd_country=mlt%2Fmit&ep.client_date=2023-01-31T13%3A31%3A40.269%2B00%3A00&ep.product_name=casino&ep.container_type=brand&ep.page_path=%2Fno%2F&ep.page_language=nn-NO&ep.document_referrer=direct&ep.meta_description=dersom%20du%20leter%20etter%20de%20beste%20online%20casinospillene%20og%20uendelige%20utbetalingsmuligheter%2C%20b%C3%B8r%20du%20plassere%20innsatser%20og%20pr%C3%B8ve%20lykken%20p%C3%A5%20spin%20casino!&ep.venge_visit=0dc691bf-9ae5-4642-93f0-fbd13dc3d910&ep.affiliate_id=aff20307&ep.mediabanner_id=SCTYPEINTRAFFIC&ep.cookieDomain=auto&ep.useBeacon=true&ep.debug_mode=true&ep.player_account=na-na&ep.player_id=na&ep.casino_id=na
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-W6NG397K4R>m=2oe1p0&_p=1924215495&cid=821263410.1675171900&ul=en-us&sr=1280x1024&uaW=1&_s=1&ci=bfpadid94317&sid=1675171900&sct=1&seg=0&dl=https%3A%2F%2Fwww.spincasino.com%2Fno%2F&dt=Bes%C3%B8k%20Spin%20Casino%2C%20Norges%20mest%20popul%C3%A6re%20spilledestinasjon&en=page_view&_fv=1&_nsi=1&_ss=1&ep.brand_short_code=SPC&ep.brand_name=spincasino&ep.regltd_country=mlt%2Fmit&ep.client_date=2023-01-31T13%3A31%3A40.269%2B00%3A00&ep.product_name=casino&ep.container_type=brand&ep.page_path=%2Fno%2F&ep.page_language=nn-NO&ep.document_referrer=direct&ep.meta_description=dersom%20du%20leter%20etter%20de%20beste%20online%20casinospillene%20og%20uendelige%20utbetalingsmuligheter%2C%20b%C3%B8r%20du%20plassere%20innsatser%20og%20pr%C3%B8ve%20lykken%20p%C3%A5%20spin%20casino!&ep.venge_visit=0dc691bf-9ae5-4642-93f0-fbd13dc3d910&ep.affiliate_id=aff20307&ep.mediabanner_id=SCTYPEINTRAFFIC&ep.cookieDomain=auto&ep.useBeacon=true&ep.debug_mode=true&ep.player_account=na-na&ep.player_id=na&ep.casino_id=na HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.spincasino.com
Connection: keep-alive
Referer: https://www.spincasino.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.spincasino.com
date: Tue, 31 Jan 2023 13:31:24 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.spincasino.com/no/
200 OK 41 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (12292), with CRLF, LF line terminators
Hash e6d19781f6d6d04a2a24c587f54bf555
d5a7a534bac2ef42aaf04be520aaa6caed92a5b0
71c63578823f19420b82b712aef6ec816dbe1106d885e3a93d5b5acf837e3e74
GET /no/ HTTP/1.1
Host: www.spincasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: Visit=visitId%3d0dc691bf-9ae5-4642-93f0-fbd13dc3d910%26eventId%3dSCTYPEINTRAFFIC%26promoId%3d421%26s%3daff20307%26a%3dbfpadid94317%26b%3dSCTYPEINTRAFFIC; GA-Details=null; __cf_bm=IRgxJrFUDAzHqTIYeEd149hGXgnk3kWw8ojxXq7SfrU-1675171881-0-AXiWy0WM8NX1vlB+97Ok1XoRHYJRB2vmqFcVsiwe0CX2ESNRQ2Xk03lW4ncOGFMemPtKGm5D9xOhZCUa84nr5Pg=
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 13:31:22 GMT
content-type: text/html; charset=utf-8
cache-control: public, max-age=3600
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
set-cookie: CMSPreferredCulture=nn-NO; expires=Wed, 31-Jan-2024 13:31:21 GMT; path=/; HttpOnly
CMSCsrfCookie=DX86FvHZD/PlFC7byxntBfs3Lt7IQ/M0erZnDtlp; path=/; HttpOnly
ASP.NET_SessionId=jy1ifvu5hmng2ugdyqi3nxuc; path=/; HttpOnly; SameSite=Lax
CMSCurrentTheme=SpinCasino; expires=Wed, 01-Feb-2023 13:31:22 GMT; path=/; HttpOnly
x-ua-compatible: IE=Edge
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7922cea6292bb503-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
www.spincasino.com/ScriptResource.axd?d=NJmAwtEo3Ipnlaxl6CMhvoy67p3qE3k42XFApznJi2W3UkfFBBRMeqc-lFV2cQU5ndvUZYZDGyLGGzy7kPfmDfWzEnj7T_O-WV2t2hR9XkuYRI-pVjmwQe3MimJCkpDncoHE_DJ3s1b1xE3p7gBTx4rW8TdHynrlXB1uuk5GcHo1&t=ffffffffaa493ab8
200 OK 26 kB URL HTTP/2 www.spincasino.com/ScriptResource.axd?d=NJmAwtEo3Ipnlaxl6CMhvoy67p3qE3k42XFApznJi2W3UkfFBBRMeqc-lFV2cQU5ndvUZYZDGyLGGzy7kPfmDfWzEnj7T_O-WV2t2hR9XkuYRI-pVjmwQe3MimJCkpDncoHE_DJ3s1b1xE3p7gBTx4rW8TdHynrlXB1uuk5GcHo1&t=ffffffffaa493ab8
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (65326), with CRLF line terminators
Hash b62553925bd98826c60457d2eb6b9a46
84dbbb6d9b36a587c21b5a56b1d9e587e33ba943
c58166fe4df4ba8f25a960c21451eaf841d97f6f552f104e43431c9db1c2e2cc
GET /ScriptResource.axd?d=NJmAwtEo3Ipnlaxl6CMhvoy67p3qE3k42XFApznJi2W3UkfFBBRMeqc-lFV2cQU5ndvUZYZDGyLGGzy7kPfmDfWzEnj7T_O-WV2t2hR9XkuYRI-pVjmwQe3MimJCkpDncoHE_DJ3s1b1xE3p7gBTx4rW8TdHynrlXB1uuk5GcHo1&t=ffffffffaa493ab8 HTTP/1.1
Host: www.spincasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spincasino.com/no/
Cookie: Visit=visitId%3d0dc691bf-9ae5-4642-93f0-fbd13dc3d910%26eventId%3dSCTYPEINTRAFFIC%26promoId%3d421%26s%3daff20307%26a%3dbfpadid94317%26b%3dSCTYPEINTRAFFIC; GA-Details=null; __cf_bm=IRgxJrFUDAzHqTIYeEd149hGXgnk3kWw8ojxXq7SfrU-1675171881-0-AXiWy0WM8NX1vlB+97Ok1XoRHYJRB2vmqFcVsiwe0CX2ESNRQ2Xk03lW4ncOGFMemPtKGm5D9xOhZCUa84nr5Pg=; CMSPreferredCulture=nn-NO; CMSCsrfCookie=DX86FvHZD/PlFC7byxntBfs3Lt7IQ/M0erZnDtlp; ASP.NET_SessionId=jy1ifvu5hmng2ugdyqi3nxuc; CMSCurrentTheme=SpinCasino
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 13:31:24 GMT
content-type: application/x-javascript
content-length: 25609
cache-control: public
content-encoding: gzip
expires: Wed, 31 Jan 2024 13:07:16 GMT
last-modified: Tue, 31 Jan 2023 13:07:16 GMT
x-frame-options: SAMEORIGIN
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7922ceabd95eb503-OSL
X-Firefox-Spdy: h2
nexus.rechannelapi.com/betway/dos-prod/Bootstrap.js
200 OK 114 kB URL HTTP/2 nexus.rechannelapi.com/betway/dos-prod/Bootstrap.js
IP
Size 114 kB (113554 bytes)
Hash d228fb78444b458e604b340e553ce0ea
0cc14b33cbda8e72d6a0841b282b747aef5a8010
6dd786833b8d2832acdf31a6d2cb5845cd54ea6d98b22a68e637c9682edd63a1
GET /betway/dos-prod/Bootstrap.js HTTP/1.1
Host: nexus.rechannelapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spincasino.com/
Cookie: __cf_bm=vYFg6xROu6vikM3blU8wNWryWyXML9nD9pJa2l8zZMk-1675171883-0-AaxiOxu1wdWAj+2uYFfikEgg1GpoWvHA5rB/4vmuZWwN0EzTWEVE7LYpDYMP9eoaMakKoZWCF1TRB6cKts0EZQm4HaBpswUFUnQ7eo6KYPZ+
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 13:31:24 GMT
content-type: application/javascript; charset=utf-8
x-amz-replication-status: COMPLETED
last-modified: Wed, 21 Dec 2022 11:27:39 GMT
etag: W/"8967bfc1e862a1cf932c54312d34c843"
x-amz-server-side-encryption: AES256
cache-control: max-age=300
x-amz-version-id: QQ2OSfA8K3ER.BPIMKYRZXFBjkZg90H1
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ICZQuQ_oeCi6TIUV918smFc_Mr9xdO49Bx7z9ayeUZvgKtdb1rmSmw==
age: 3549789
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7922ceb4be2b0b59-OSL
X-Firefox-Spdy: h2
www.spincasino.com/SPC/media/SpinCasino/menu-arrow.png
200 OK 98 B URL HTTP/2 www.spincasino.com/SPC/media/SpinCasino/menu-arrow.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash d38337e64170ade2749ba130e56667b8
d223af5b20cce0e13a3fb2e305a32501e1915cef
68a4242705fa0f06ca0b278e9b44ed9465e798f5a9094b8922db2ddbadf54465
GET /SPC/media/SpinCasino/menu-arrow.png HTTP/1.1
Host: www.spincasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spincasino.com/CMSPages/GetResource.ashx?stylesheetname=SpinCasino
Cookie: Visit=visitId%3d0dc691bf-9ae5-4642-93f0-fbd13dc3d910%26eventId%3dSCTYPEINTRAFFIC%26promoId%3d421%26s%3daff20307%26a%3dbfpadid94317%26b%3dSCTYPEINTRAFFIC; GA-Details=null; __cf_bm=IRgxJrFUDAzHqTIYeEd149hGXgnk3kWw8ojxXq7SfrU-1675171881-0-AXiWy0WM8NX1vlB+97Ok1XoRHYJRB2vmqFcVsiwe0CX2ESNRQ2Xk03lW4ncOGFMemPtKGm5D9xOhZCUa84nr5Pg=; CMSPreferredCulture=nn-NO; CMSCsrfCookie=DX86FvHZD/PlFC7byxntBfs3Lt7IQ/M0erZnDtlp; ASP.NET_SessionId=jy1ifvu5hmng2ugdyqi3nxuc; CMSCurrentTheme=SpinCasino; _ga_W6NG397K4R=GS1.1.1675171900.1.0.1675171900.0.0.0; _ga=GA1.1.821263410.1675171900
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 13:31:24 GMT
content-type: image/webp
content-length: 98
cache-control: public, max-age=86400
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=1054
content-disposition: inline; filename="menu-arrow.webp"
etag: "0bdcdf424a8d41:0"
last-modified: Wed, 09 Jan 2019 14:09:38 GMT
vary: Accept
x-frame-options: SAMEORIGIN
x-powered-by: ASP.NET
cf-cache-status: HIT
age: 3751
expires: Wed, 01 Feb 2023 13:31:24 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 7922ceb4ff39b503-OSL
X-Firefox-Spdy: h2
www.spincasino.com/SPC/media/SpinCasino/star_list.png
200 OK 4.1 kB URL HTTP/2 www.spincasino.com/SPC/media/SpinCasino/star_list.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 7a1da3ca2d510365cffe46f3483e712a
9b062f97b7e798855a6740c47d152994b9ccad0f
e7e916ff69225989e54c7eb0a7456a59f70cb8c5537b5abfff139c11c82ac463
GET /SPC/media/SpinCasino/star_list.png HTTP/1.1
Host: www.spincasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spincasino.com/CMSPages/GetResource.ashx?stylesheetname=SpinCasino
Cookie: Visit=visitId%3d0dc691bf-9ae5-4642-93f0-fbd13dc3d910%26eventId%3dSCTYPEINTRAFFIC%26promoId%3d421%26s%3daff20307%26a%3dbfpadid94317%26b%3dSCTYPEINTRAFFIC; GA-Details=null; __cf_bm=IRgxJrFUDAzHqTIYeEd149hGXgnk3kWw8ojxXq7SfrU-1675171881-0-AXiWy0WM8NX1vlB+97Ok1XoRHYJRB2vmqFcVsiwe0CX2ESNRQ2Xk03lW4ncOGFMemPtKGm5D9xOhZCUa84nr5Pg=; CMSPreferredCulture=nn-NO; CMSCsrfCookie=DX86FvHZD/PlFC7byxntBfs3Lt7IQ/M0erZnDtlp; ASP.NET_SessionId=jy1ifvu5hmng2ugdyqi3nxuc; CMSCurrentTheme=SpinCasino; _ga_W6NG397K4R=GS1.1.1675171900.1.0.1675171900.0.0.0; _ga=GA1.1.821263410.1675171900
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 13:31:24 GMT
content-type: image/webp
content-length: 4120
cache-control: public, max-age=86400
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=6445
content-disposition: inline; filename="star_list.webp"
etag: "0f6dbb7aa9d41:0"
last-modified: Thu, 10 Jan 2019 17:34:20 GMT
vary: Accept
x-frame-options: SAMEORIGIN
x-powered-by: ASP.NET
cf-cache-status: HIT
age: 71349
expires: Wed, 01 Feb 2023 13:31:24 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 7922ceb50f45b503-OSL
X-Firefox-Spdy: h2
use.typekit.net/af/491a7f/00000000000000003b9b1e4c/27/l?primer=f592e0a4b9356877842506ce344308576437e4f677d7c9b78ca2162e6cad991a&fvd=n7&v=3
200 OK 44 kB URL HTTP/2 use.typekit.net/af/491a7f/00000000000000003b9b1e4c/27/l?primer=f592e0a4b9356877842506ce344308576437e4f677d7c9b78ca2162e6cad991a&fvd=n7&v=3
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format (Version 2), CFF, length 44512, version 1.0\012- data
Hash e20b70ca1fd9704966263900526b1d22
12319f0800ee0ef63d37de86916029c7167fc2e8
acde15ecb43340ddd540f20d562060523f8ca09e60c0ea588a1d4fef37830a24
GET /af/491a7f/00000000000000003b9b1e4c/27/l?primer=f592e0a4b9356877842506ce344308576437e4f677d7c9b78ca2162e6cad991a&fvd=n7&v=3 HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.spincasino.com
Connection: keep-alive
Referer: https://www.spincasino.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/font-woff2
content-length: 44512
etag: "87591ff0c0a45708972cf865831a4d20d00496b2"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Tue, 31 Jan 2023 13:31:24 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 40bac282ee9730b7a7fde839fcf58736
be00063ec5c760560f34663d0a6a9cad87cfebe4
45b83537d8621d3c4a7c046a9b78f6745977c359db2868d720f19dbb0eb80d3d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 13:31:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
use.typekit.net/af/6e84fe/00000000000000003b9b1e46/27/l?primer=f592e0a4b9356877842506ce344308576437e4f677d7c9b78ca2162e6cad991a&fvd=n4&v=3
200 OK 48 kB URL HTTP/2 use.typekit.net/af/6e84fe/00000000000000003b9b1e46/27/l?primer=f592e0a4b9356877842506ce344308576437e4f677d7c9b78ca2162e6cad991a&fvd=n4&v=3
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format (Version 2), CFF, length 47640, version 1.0\012- data
Hash 9b8737d3d4579c26acb219c74f305490
d81b4fe896546577162a13937ad374c13d5ee131
15bceda0d535c2465e988b40e435c8367df6a78932e7361a764c681cf718a932
GET /af/6e84fe/00000000000000003b9b1e46/27/l?primer=f592e0a4b9356877842506ce344308576437e4f677d7c9b78ca2162e6cad991a&fvd=n4&v=3 HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.spincasino.com
Connection: keep-alive
Referer: https://www.spincasino.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/font-woff2
content-length: 47640
etag: "7640d123f997be1c774231483c7f737c3ecf289b"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Tue, 31 Jan 2023 13:31:24 GMT
X-Firefox-Spdy: h2
dm.imagethumb.com/images/spin_casino_com/Homepage/diamond_bj_wbem.webm
206 Partial Content 1.8 MB URL HTTP/2 dm.imagethumb.com/images/spin_casino_com/Homepage/diamond_bj_wbem.webm
IP
File type WebM\012- EBML file, creator webmB\20\012- data
Size 1.8 MB (1844765 bytes)
Hash cdd24eb95092d7d4aef83dd884205dd4
133c9db61f72aa2797b889f250e166d7990e39d3
f1372b4520bbffda3a70f30ab8ef6aaba2744819ac3d521128ecba2ef411c8e7
GET /images/spin_casino_com/Homepage/diamond_bj_wbem.webm HTTP/1.1
Host: dm.imagethumb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://www.spincasino.com/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 206 Partial Content
date: Tue, 31 Jan 2023 13:31:24 GMT
content-type: video/webm
content-length: 1844765
cache-control: public, max-age=5184000
last-modified: Tue, 28 Aug 2018 15:03:22 GMT
etag: "0991a43e03ed41:0"
x-powered-by: ASP.NET
access-control-allow-origin: *
cf-cache-status: HIT
age: 4570407
expires: Sat, 01 Apr 2023 13:31:24 GMT
content-range: bytes 0-1844764/1844765
server: cloudflare
cf-ray: 7922ceb68ac3b4f4-OSL
X-Firefox-Spdy: h2
nexus.rechannelapi.com/privacy/v1/c/r.rnc?n=0&c=2273&i=8c7nie&p=dos-prod&s=435&d=9Cd7InZlcnNpb24iOiIxLjAuMCIsImdhdGV3YXkiOiIyLjMuNjAyIiwiY2xpZW50SWQiOjIyNzMQAKBOYW1lIjoiYmV0MADwDywicHVibGlzaFBhdGgiOiJkb3MtcHJvZCIsIm1vZCkAkHdoaXRlbGlzdFIA8CJvb2tpZXMiOnsiREVGQVVMVF9FTlNJR0hURU5fUFJJVkFDWV9CQU5ORVJfTE9BREVEowDxDyJ9LCJkdCI6MTY3NTE3MTkwMTYwMSwic2V0dGluZ04A8Sdtb2RhbCI6ImVudGVycHJpc2UiLCJlbnZpcm9ubWVudCI6Ik5vcndlZ2lhbiIsImRlZmF1bHQ7AIBGdW5jdGlvbkAA8BowLCJFc3NlbnRpYWwgT25seSI6MSwiQW5hbHl0aWNzIjowLCJNYXJrZXkAsCI6MH19LCJldmVuSgAiW3sLAEEiOiJj5wBgQ2hhbmdlCgEPvQAAD_8AEMBBREVEIjoiMSJ9XX0
204 No Content 0 B URL HTTP/2 nexus.rechannelapi.com/privacy/v1/c/r.rnc?n=0&c=2273&i=8c7nie&p=dos-prod&s=435&d=9Cd7InZlcnNpb24iOiIxLjAuMCIsImdhdGV3YXkiOiIyLjMuNjAyIiwiY2xpZW50SWQiOjIyNzMQAKBOYW1lIjoiYmV0MADwDywicHVibGlzaFBhdGgiOiJkb3MtcHJvZCIsIm1vZCkAkHdoaXRlbGlzdFIA8CJvb2tpZXMiOnsiREVGQVVMVF9FTlNJR0hURU5fUFJJVkFDWV9CQU5ORVJfTE9BREVEowDxDyJ9LCJkdCI6MTY3NTE3MTkwMTYwMSwic2V0dGluZ04A8Sdtb2RhbCI6ImVudGVycHJpc2UiLCJlbnZpcm9ubWVudCI6Ik5vcndlZ2lhbiIsImRlZmF1bHQ7AIBGdW5jdGlvbkAA8BowLCJFc3NlbnRpYWwgT25seSI6MSwiQW5hbHl0aWNzIjowLCJNYXJrZXkAsCI6MH19LCJldmVuSgAiW3sLAEEiOiJj5wBgQ2hhbmdlCgEPvQAAD_8AEMBBREVEIjoiMSJ9XX0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /privacy/v1/c/r.rnc?n=0&c=2273&i=8c7nie&p=dos-prod&s=435&d=9Cd7InZlcnNpb24iOiIxLjAuMCIsImdhdGV3YXkiOiIyLjMuNjAyIiwiY2xpZW50SWQiOjIyNzMQAKBOYW1lIjoiYmV0MADwDywicHVibGlzaFBhdGgiOiJkb3MtcHJvZCIsIm1vZCkAkHdoaXRlbGlzdFIA8CJvb2tpZXMiOnsiREVGQVVMVF9FTlNJR0hURU5fUFJJVkFDWV9CQU5ORVJfTE9BREVEowDxDyJ9LCJkdCI6MTY3NTE3MTkwMTYwMSwic2V0dGluZ04A8Sdtb2RhbCI6ImVudGVycHJpc2UiLCJlbnZpcm9ubWVudCI6Ik5vcndlZ2lhbiIsImRlZmF1bHQ7AIBGdW5jdGlvbkAA8BowLCJFc3NlbnRpYWwgT25seSI6MSwiQW5hbHl0aWNzIjowLCJNYXJrZXkAsCI6MH19LCJldmVuSgAiW3sLAEEiOiJj5wBgQ2hhbmdlCgEPvQAAD_8AEMBBREVEIjoiMSJ9XX0 HTTP/1.1
Host: nexus.rechannelapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spincasino.com/
Cookie: __cf_bm=vYFg6xROu6vikM3blU8wNWryWyXML9nD9pJa2l8zZMk-1675171883-0-AaxiOxu1wdWAj+2uYFfikEgg1GpoWvHA5rB/4vmuZWwN0EzTWEVE7LYpDYMP9eoaMakKoZWCF1TRB6cKts0EZQm4HaBpswUFUnQ7eo6KYPZ+
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Tue, 31 Jan 2023 13:31:24 GMT
expires: Tue, 31 Jan 2023 13:31:23 GMT
cache-control: no-cache, no-store
x-cache: Miss from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 1yJIUb6QA8ZUUogka2CKKjOlKJt8dxub9NoaZq40Rb8prh795nF3VQ==
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7922ceb799010b59-OSL
X-Firefox-Spdy: h2
nexus.rechannelapi.com/privacy/v1/c/r.rnc?n=1&c=2273&i=8c7nie&p=dos-prod&s=481&d=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
204 No Content 0 B URL HTTP/2 nexus.rechannelapi.com/privacy/v1/c/r.rnc?n=1&c=2273&i=8c7nie&p=dos-prod&s=481&d=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
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /privacy/v1/c/r.rnc?n=1&c=2273&i=8c7nie&p=dos-prod&s=481&d=9Cd7InZlcnNpb24iOiIxLjAuMCIsImdhdGV3YXkiOiIyLjMuNjAyIiwiY2xpZW50SWQiOjIyNzMQAKBOYW1lIjoiYmV0MADwDywicHVibGlzaFBhdGgiOiJkb3MtcHJvZCIsIm1vZCkAkHdoaXRlbGlzdFIA8CJvb2tpZXMiOnsiREVGQVVMVF9FTlNJR0hURU5fUFJJVkFDWV9CQU5ORVJfVklFV0VEowAvIiwuAA9DTE9BRC4A8Q59LCJkdCI6MTY3NTE3MTkwMTYwNywic2V0dGluZ3wA8Sdtb2RhbCI6ImVudGVycHJpc2UiLCJlbnZpcm9ubWVudCI6Ik5vcndlZ2lhbiIsImRlZmF1bHQ7AIBGdW5jdGlvbkAA8BowLCJFc3NlbnRpYWwgT25seSI6MSwiQW5hbHl0aWNzIjowLCJNYXJrZXkAsCI6MH19LCJldmVuSgAiW3sLAEEiOiJjFQFgQ2hhbmdlOAEPvQAADy0BEMBFV0VEIjoiMSJ9XX0 HTTP/1.1
Host: nexus.rechannelapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spincasino.com/
Cookie: __cf_bm=vYFg6xROu6vikM3blU8wNWryWyXML9nD9pJa2l8zZMk-1675171883-0-AaxiOxu1wdWAj+2uYFfikEgg1GpoWvHA5rB/4vmuZWwN0EzTWEVE7LYpDYMP9eoaMakKoZWCF1TRB6cKts0EZQm4HaBpswUFUnQ7eo6KYPZ+
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Tue, 31 Jan 2023 13:31:24 GMT
expires: Tue, 31 Jan 2023 13:31:23 GMT
cache-control: no-cache, no-store
x-cache: Miss from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 8U084Cb3KJCcM5vjurj4mCstRFtU7fGGw0_gtrChduUpN_HO6h7rNA==
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7922ceb799030b59-OSL
X-Firefox-Spdy: h2
www.spincasino.com/api/CasinoProgressive/GetLatestWinnersFeed/
200 OK 1.6 kB URL HTTP/2 www.spincasino.com/api/CasinoProgressive/GetLatestWinnersFeed/
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (15195), with no line terminators
Hash c39976819619fb82c58aa2bb13eceaea
a32b5f2d188fa410c468e7c1627007df4bd4f8f2
803e36ed4e5d495da3c69f8edbdb4a60a3478c4d05265224e6188016fe9573af
GET /api/CasinoProgressive/GetLatestWinnersFeed/ HTTP/1.1
Host: www.spincasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://www.spincasino.com/no/
Cookie: Visit=visitId%3d0dc691bf-9ae5-4642-93f0-fbd13dc3d910%26eventId%3dSCTYPEINTRAFFIC%26promoId%3d421%26s%3daff20307%26a%3dbfpadid94317%26b%3dSCTYPEINTRAFFIC; GA-Details=null; __cf_bm=IRgxJrFUDAzHqTIYeEd149hGXgnk3kWw8ojxXq7SfrU-1675171881-0-AXiWy0WM8NX1vlB+97Ok1XoRHYJRB2vmqFcVsiwe0CX2ESNRQ2Xk03lW4ncOGFMemPtKGm5D9xOhZCUa84nr5Pg=; CMSPreferredCulture=nn-NO; CMSCsrfCookie=DX86FvHZD/PlFC7byxntBfs3Lt7IQ/M0erZnDtlp; ASP.NET_SessionId=jy1ifvu5hmng2ugdyqi3nxuc; CMSCurrentTheme=SpinCasino; _ga_W6NG397K4R=GS1.1.1675171900.1.0.1675171900.0.0.0; _ga=GA1.1.821263410.1675171900; DeviceFingerprint=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
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 13:31:24 GMT
content-type: application/json; charset=utf-8
cache-control: public, max-age=3600
x-frame-options: SAMEORIGIN
set-cookie: CMSPreferredCulture=en-US; expires=Wed, 31-Jan-2024 13:31:24 GMT; path=/; HttpOnly
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7922ceb66949b503-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f075625a67cefc01c034a3c732ec8023
c3ef563fbf1cf30f75fc931f82426a0f859ccb6d
75ce941806680157fcca91d6074496cbbc7cdcf6da28fa35384273bf9a76d588
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 13:31:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.spincasino.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 29 Jan 2023 22:02:00 GMT
expires: Mon, 29 Jan 2024 22:02:00 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
age: 142164
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f075625a67cefc01c034a3c732ec8023
c3ef563fbf1cf30f75fc931f82426a0f859ccb6d
75ce941806680157fcca91d6074496cbbc7cdcf6da28fa35384273bf9a76d588
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 13:31:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.spincasino.com/SPC/media/SpinCasino/hero_desktop.jpg
200 OK 436 kB URL HTTP/2 www.spincasino.com/SPC/media/SpinCasino/hero_desktop.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2048x900, components 3\012- data
Size 436 kB (436120 bytes)
Hash eca780a77c30cb049cb61aa36ecbf7b2
5e85c06d58334222d36f421a831fec3301536318
19a4f199288aa75b711e76284948d1aa34b013f9495e7064c33797164a3ddcde
GET /SPC/media/SpinCasino/hero_desktop.jpg HTTP/1.1
Host: www.spincasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spincasino.com/CMSPages/GetResource.ashx?stylesheetname=SpinCasino
Cookie: Visit=visitId%3d0dc691bf-9ae5-4642-93f0-fbd13dc3d910%26eventId%3dSCTYPEINTRAFFIC%26promoId%3d421%26s%3daff20307%26a%3dbfpadid94317%26b%3dSCTYPEINTRAFFIC; GA-Details=null; __cf_bm=IRgxJrFUDAzHqTIYeEd149hGXgnk3kWw8ojxXq7SfrU-1675171881-0-AXiWy0WM8NX1vlB+97Ok1XoRHYJRB2vmqFcVsiwe0CX2ESNRQ2Xk03lW4ncOGFMemPtKGm5D9xOhZCUa84nr5Pg=; CMSPreferredCulture=nn-NO; CMSCsrfCookie=DX86FvHZD/PlFC7byxntBfs3Lt7IQ/M0erZnDtlp; ASP.NET_SessionId=jy1ifvu5hmng2ugdyqi3nxuc; CMSCurrentTheme=SpinCasino; _ga_W6NG397K4R=GS1.1.1675171900.1.0.1675171900.0.0.0; _ga=GA1.1.821263410.1675171900
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 13:31:25 GMT
content-type: image/jpeg
content-length: 436120
cache-control: public, max-age=86400
cf-bgj: imgq:100,h2pri
cf-polished: origSize=436128, status=webp_bigger
etag: "02dd36542aed41:0"
last-modified: Thu, 17 Jan 2019 08:55:30 GMT
x-frame-options: SAMEORIGIN
x-powered-by: ASP.NET
cf-cache-status: REVALIDATED
expires: Wed, 01 Feb 2023 13:31:25 GMT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7922ceb4ff35b503-OSL
X-Firefox-Spdy: h2
www.spincasino.com/CMSScripts/Custom/scrollreveal.min.js
200 OK 5.5 kB URL HTTP/2 www.spincasino.com/CMSScripts/Custom/scrollreveal.min.js
IP
Hash 210271090612daa628f546889e26c3d0
910d488df47db37611ecff671cda45fd9bb7c6c4
1c3be9dbebb25996950caaa932a71bb03444911181e8dbd0b6df751874bb422e
GET /CMSScripts/Custom/scrollreveal.min.js HTTP/1.1
Host: www.spincasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spincasino.com/no/
Cookie: Visit=visitId%3d0dc691bf-9ae5-4642-93f0-fbd13dc3d910%26eventId%3dSCTYPEINTRAFFIC%26promoId%3d421%26s%3daff20307%26a%3dbfpadid94317%26b%3dSCTYPEINTRAFFIC; GA-Details=null; __cf_bm=IRgxJrFUDAzHqTIYeEd149hGXgnk3kWw8ojxXq7SfrU-1675171881-0-AXiWy0WM8NX1vlB+97Ok1XoRHYJRB2vmqFcVsiwe0CX2ESNRQ2Xk03lW4ncOGFMemPtKGm5D9xOhZCUa84nr5Pg=; CMSPreferredCulture=nn-NO; CMSCsrfCookie=DX86FvHZD/PlFC7byxntBfs3Lt7IQ/M0erZnDtlp; ASP.NET_SessionId=jy1ifvu5hmng2ugdyqi3nxuc; CMSCurrentTheme=SpinCasino
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 13:31:23 GMT
content-type: application/javascript
cache-control: public, max-age=14400
last-modified: Wed, 06 Oct 2021 08:42:24 GMT
etag: W/"ab2e1d168ebad71:0"
x-frame-options: SAMEORIGIN
x-powered-by: ASP.NET
cf-cache-status: REVALIDATED
expires: Tue, 31 Jan 2023 17:31:23 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 7922ceabf99fb503-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
www.spincasino.com/SPC/media/SpinCasino/star.png
200 OK 7.0 kB URL HTTP/2 www.spincasino.com/SPC/media/SpinCasino/star.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash c3a49de61c7e60e39c25e0baf52fbc5f
9011eb0e520fbdfeb1da70c86491f7ba089986ef
4a50059816146cc5fa3461fb094af1d4539d61149654745945ab0335e8ea8b72
GET /SPC/media/SpinCasino/star.png HTTP/1.1
Host: www.spincasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spincasino.com/no/
Cookie: Visit=visitId%3d0dc691bf-9ae5-4642-93f0-fbd13dc3d910%26eventId%3dSCTYPEINTRAFFIC%26promoId%3d421%26s%3daff20307%26a%3dbfpadid94317%26b%3dSCTYPEINTRAFFIC; GA-Details=null; __cf_bm=IRgxJrFUDAzHqTIYeEd149hGXgnk3kWw8ojxXq7SfrU-1675171881-0-AXiWy0WM8NX1vlB+97Ok1XoRHYJRB2vmqFcVsiwe0CX2ESNRQ2Xk03lW4ncOGFMemPtKGm5D9xOhZCUa84nr5Pg=; CMSPreferredCulture=en-US; CMSCsrfCookie=DX86FvHZD/PlFC7byxntBfs3Lt7IQ/M0erZnDtlp; ASP.NET_SessionId=jy1ifvu5hmng2ugdyqi3nxuc; CMSCurrentTheme=SpinCasino; _ga_W6NG397K4R=GS1.1.1675171900.1.0.1675171900.0.0.0; _ga=GA1.1.821263410.1675171900; DeviceFingerprint=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; DEFAULT_ENSIGHTEN_PRIVACY_BANNER_LOADED=1; DEFAULT_ENSIGHTEN_PRIVACY_BANNER_VIEWED=1; DEFAULT_ENSIGHTEN_PRIVACY_MODAL_LOADED=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 13:31:25 GMT
content-type: image/webp
content-length: 6996
cache-control: public, max-age=86400
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=8876
content-disposition: inline; filename="star.webp"
etag: "07cf1f744a7d41:0"
last-modified: Tue, 08 Jan 2019 11:26:16 GMT
vary: Accept
x-frame-options: SAMEORIGIN
x-powered-by: ASP.NET
cf-cache-status: HIT
age: 62335
expires: Wed, 01 Feb 2023 13:31:25 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 7922ceba2f5db503-OSL
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spincasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Tue, 31 Jan 2023 11:46:59 GMT
expires: Tue, 31 Jan 2023 13:46:59 GMT
cache-control: public, max-age=7200
age: 6266
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
nexus.rechannelapi.com/privacy/v1/b/r.rnc?n=0&c=2273&i=7wdg92&p=dos-prod&s=333&d=8Ep7InZlcnNpb24iOiIxLjAuMCIsImdhdGV3YXkiOiIyLjMuNjAyIiwiY2xpZW50SWQiOjIyNzMsInB1Ymxpc2hQYXRoIjoiZG9zLXByb2QiLCJpbnN0YW5jZSsAYCI3d2RnOT8A8ApwYWNrZXQiOjAsIm1vZGUiOiJlbmZvcmNlWwDyLG9va2llcyI6e30sImVudmlyb25tZW50IjoiTm9yd2VnaWFuIiwicmVxdWVzdHMiOlt7ImRlc3RpbmF0uQBgIiwidHlwVgDwD2JpbGxpbmciLCJzdGFydCI6MTY3NTE3MTkwMjE1Nl8AoGQiOi0xLCJzb3V-ACI6IisAQXR1cyIMAGByZWFzb25lANRdLCJkYXRhUGF0dGVyEgDCbGlzdCI6W10sImlkXQDAMTcxOTAyMTU2fV19
204 No Content 0 B URL HTTP/2 nexus.rechannelapi.com/privacy/v1/b/r.rnc?n=0&c=2273&i=7wdg92&p=dos-prod&s=333&d=8Ep7InZlcnNpb24iOiIxLjAuMCIsImdhdGV3YXkiOiIyLjMuNjAyIiwiY2xpZW50SWQiOjIyNzMsInB1Ymxpc2hQYXRoIjoiZG9zLXByb2QiLCJpbnN0YW5jZSsAYCI3d2RnOT8A8ApwYWNrZXQiOjAsIm1vZGUiOiJlbmZvcmNlWwDyLG9va2llcyI6e30sImVudmlyb25tZW50IjoiTm9yd2VnaWFuIiwicmVxdWVzdHMiOlt7ImRlc3RpbmF0uQBgIiwidHlwVgDwD2JpbGxpbmciLCJzdGFydCI6MTY3NTE3MTkwMjE1Nl8AoGQiOi0xLCJzb3V-ACI6IisAQXR1cyIMAGByZWFzb25lANRdLCJkYXRhUGF0dGVyEgDCbGlzdCI6W10sImlkXQDAMTcxOTAyMTU2fV19
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /privacy/v1/b/r.rnc?n=0&c=2273&i=7wdg92&p=dos-prod&s=333&d=8Ep7InZlcnNpb24iOiIxLjAuMCIsImdhdGV3YXkiOiIyLjMuNjAyIiwiY2xpZW50SWQiOjIyNzMsInB1Ymxpc2hQYXRoIjoiZG9zLXByb2QiLCJpbnN0YW5jZSsAYCI3d2RnOT8A8ApwYWNrZXQiOjAsIm1vZGUiOiJlbmZvcmNlWwDyLG9va2llcyI6e30sImVudmlyb25tZW50IjoiTm9yd2VnaWFuIiwicmVxdWVzdHMiOlt7ImRlc3RpbmF0uQBgIiwidHlwVgDwD2JpbGxpbmciLCJzdGFydCI6MTY3NTE3MTkwMjE1Nl8AoGQiOi0xLCJzb3V-ACI6IisAQXR1cyIMAGByZWFzb25lANRdLCJkYXRhUGF0dGVyEgDCbGlzdCI6W10sImlkXQDAMTcxOTAyMTU2fV19 HTTP/1.1
Host: nexus.rechannelapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spincasino.com/
Cookie: __cf_bm=vYFg6xROu6vikM3blU8wNWryWyXML9nD9pJa2l8zZMk-1675171883-0-AaxiOxu1wdWAj+2uYFfikEgg1GpoWvHA5rB/4vmuZWwN0EzTWEVE7LYpDYMP9eoaMakKoZWCF1TRB6cKts0EZQm4HaBpswUFUnQ7eo6KYPZ+
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Tue, 31 Jan 2023 13:31:25 GMT
expires: Tue, 31 Jan 2023 13:31:24 GMT
cache-control: no-cache, no-store
x-cache: Miss from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: gFswc7oM20aB-6wv5WtYL-D2RpHnoUmdXcOEqcKeMV9rQZfzO7jTXA==
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7922cebaed060b59-OSL
X-Firefox-Spdy: h2
www.spincasino.com/cdn-cgi/rum?
204 No Content 0 B URL HTTP/2 www.spincasino.com/cdn-cgi/rum?
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/rum? HTTP/1.1
Host: www.spincasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/json
Content-Length: 19948
Origin: https://www.spincasino.com
Connection: keep-alive
Referer: https://www.spincasino.com/no/
Cookie: Visit=visitId%3d0dc691bf-9ae5-4642-93f0-fbd13dc3d910%26eventId%3dSCTYPEINTRAFFIC%26promoId%3d421%26s%3daff20307%26a%3dbfpadid94317%26b%3dSCTYPEINTRAFFIC; GA-Details=null; __cf_bm=IRgxJrFUDAzHqTIYeEd149hGXgnk3kWw8ojxXq7SfrU-1675171881-0-AXiWy0WM8NX1vlB+97Ok1XoRHYJRB2vmqFcVsiwe0CX2ESNRQ2Xk03lW4ncOGFMemPtKGm5D9xOhZCUa84nr5Pg=; CMSPreferredCulture=en-US; CMSCsrfCookie=DX86FvHZD/PlFC7byxntBfs3Lt7IQ/M0erZnDtlp; ASP.NET_SessionId=jy1ifvu5hmng2ugdyqi3nxuc; CMSCurrentTheme=SpinCasino; _ga_W6NG397K4R=GS1.1.1675171900.1.0.1675171900.0.0.0; _ga=GA1.2.821263410.1675171900; DeviceFingerprint=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; DEFAULT_ENSIGHTEN_PRIVACY_BANNER_LOADED=1; DEFAULT_ENSIGHTEN_PRIVACY_BANNER_VIEWED=1; DEFAULT_ENSIGHTEN_PRIVACY_MODAL_LOADED=1; _gid=GA1.2.627966817.1675171902; _gat_UA-46028713-6=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 204 No Content
date: Tue, 31 Jan 2023 13:31:25 GMT
access-control-allow-origin: https://www.spincasino.com
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 7922cebb28f2b503-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
nexus.rechannelapi.com/privacy/v1/b/r.rnc?n=1&c=2273&i=7wdg92&p=dos-prod&s=761&d=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
204 No Content 0 B URL HTTP/2 nexus.rechannelapi.com/privacy/v1/b/r.rnc?n=1&c=2273&i=7wdg92&p=dos-prod&s=761&d=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
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /privacy/v1/b/r.rnc?n=1&c=2273&i=7wdg92&p=dos-prod&s=761&d=8Ep7InZlcnNpb24iOiIxLjAuMCIsImdhdGV3YXkiOiIyLjMuNjAyIiwiY2xpZW50SWQiOjIyNzMsInB1Ymxpc2hQYXRoIjoiZG9zLXByb2QiLCJpbnN0YW5jZSsAYCI3d2RnOT8A8ApwYWNrZXQiOjEsIm1vZGUiOiJlbmZvcmNlWwDyLG9va2llcyI6e30sImVudmlyb25tZW50IjoiTm9yd2VnaWFuIiwicmVxdWVzdHMiOlt7ImRlc3RpbmF0uQDzGGh0dHBzOi8vbmV4dXMucmVjaGFubmVsYXBpLmNvbS9iZXR3YXkvZKUA8CAvY29kZS8wMTcyZTk3YTliMjhjYTliZTZlNGJjMWU4ZmE2NDFhNS5qcz9jb25kaWQA8AFJZDA9NDc2MzU1IiwidHlwwQDQc2NyaXB0Iiwic3RhctsAgDY3NTE3MTkwBQAAyQBFZCI6MRQAgDgxOSwic2918wBROiJtdXS8AJJPYnNlcnZlckFHAJB0dXMiOiJsb2FJAWByZWFzb27vANRdLCJkYXRhUGF0dGVyEgCybGlzdCI6W10sImlpAM80MjYwODM2MDc3fSwhAY0vMjAhARwvQ0wiATHAMjYwODM2MDc4fV19 HTTP/1.1
Host: nexus.rechannelapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spincasino.com/
Cookie: __cf_bm=vYFg6xROu6vikM3blU8wNWryWyXML9nD9pJa2l8zZMk-1675171883-0-AaxiOxu1wdWAj+2uYFfikEgg1GpoWvHA5rB/4vmuZWwN0EzTWEVE7LYpDYMP9eoaMakKoZWCF1TRB6cKts0EZQm4HaBpswUFUnQ7eo6KYPZ+
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Tue, 31 Jan 2023 13:31:27 GMT
expires: Tue, 31 Jan 2023 13:31:26 GMT
cache-control: no-cache, no-store
x-cache: Miss from cloudfront
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 81sz7lby7Xiz20jRsVbAqVfcv4HDNjPC4VKsldS-KoyVAzVCQ1PCpQ==
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7922cec64a2f0b59-OSL
X-Firefox-Spdy: h2
www.spincasino.com/cdn-cgi/rum?
204 No Content 0 B URL HTTP/2 www.spincasino.com/cdn-cgi/rum?
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/rum? HTTP/1.1
Host: www.spincasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 589
Origin: https://www.spincasino.com
Connection: keep-alive
Referer: https://www.spincasino.com/no/
Cookie: Visit=visitId%3d0dc691bf-9ae5-4642-93f0-fbd13dc3d910%26eventId%3dSCTYPEINTRAFFIC%26promoId%3d421%26s%3daff20307%26a%3dbfpadid94317%26b%3dSCTYPEINTRAFFIC; GA-Details=null; __cf_bm=IRgxJrFUDAzHqTIYeEd149hGXgnk3kWw8ojxXq7SfrU-1675171881-0-AXiWy0WM8NX1vlB+97Ok1XoRHYJRB2vmqFcVsiwe0CX2ESNRQ2Xk03lW4ncOGFMemPtKGm5D9xOhZCUa84nr5Pg=; CMSPreferredCulture=en-US; CMSCsrfCookie=DX86FvHZD/PlFC7byxntBfs3Lt7IQ/M0erZnDtlp; ASP.NET_SessionId=jy1ifvu5hmng2ugdyqi3nxuc; CMSCurrentTheme=SpinCasino; _ga_W6NG397K4R=GS1.1.1675171900.1.0.1675171905.0.0.0; _ga=GA1.2.821263410.1675171900; DeviceFingerprint=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; DEFAULT_ENSIGHTEN_PRIVACY_BANNER_LOADED=1; DEFAULT_ENSIGHTEN_PRIVACY_BANNER_VIEWED=1; DEFAULT_ENSIGHTEN_PRIVACY_MODAL_LOADED=1; _gid=GA1.2.627966817.1675171902; _gat_UA-46028713-6=1; 62640=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 204 No Content
date: Tue, 31 Jan 2023 13:31:28 GMT
access-control-allow-origin: https://www.spincasino.com
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 7922cece8fd4b503-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.spincasino.com/no/?s=aff20307&a=bfpadid94317
301 Moved Permanently 0 B URL HTTP/2 www.spincasino.com/no/?s=aff20307&a=bfpadid94317
IP
GET /no/?s=aff20307&a=bfpadid94317 HTTP/1.1
Host: www.spincasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Tue, 31 Jan 2023 13:31:21 GMT
content-type: text/html; charset=utf-8
cache-control: private
location: /no/
x-powered-by: ASP.NET
cf-cache-status: DYNAMIC
set-cookie: Visit=visitId%3d0dc691bf-9ae5-4642-93f0-fbd13dc3d910%26eventId%3dSCTYPEINTRAFFIC%26promoId%3d421%26s%3daff20307%26a%3dbfpadid94317%26b%3dSCTYPEINTRAFFIC; domain=.spincasino.com; path=/; secure; HttpOnly
GA-Details=null; domain=www.spincasino.com; path=/
__cf_bm=IRgxJrFUDAzHqTIYeEd149hGXgnk3kWw8ojxXq7SfrU-1675171881-0-AXiWy0WM8NX1vlB+97Ok1XoRHYJRB2vmqFcVsiwe0CX2ESNRQ2Xk03lW4ncOGFMemPtKGm5D9xOhZCUa84nr5Pg=; path=/; expires=Tue, 31-Jan-23 14:01:21 GMT; domain=.spincasino.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 7922cea4cf2ab503-OSL
X-Firefox-Spdy: h2
www.spincasino.com/SPC/media/SpinCasino/logo.svg
200 OK 0 B URL HTTP/2 www.spincasino.com/SPC/media/SpinCasino/logo.svg
IP
GET /SPC/media/SpinCasino/logo.svg HTTP/1.1
Host: www.spincasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spincasino.com/no/
Cookie: Visit=visitId%3d0dc691bf-9ae5-4642-93f0-fbd13dc3d910%26eventId%3dSCTYPEINTRAFFIC%26promoId%3d421%26s%3daff20307%26a%3dbfpadid94317%26b%3dSCTYPEINTRAFFIC; GA-Details=null; __cf_bm=IRgxJrFUDAzHqTIYeEd149hGXgnk3kWw8ojxXq7SfrU-1675171881-0-AXiWy0WM8NX1vlB+97Ok1XoRHYJRB2vmqFcVsiwe0CX2ESNRQ2Xk03lW4ncOGFMemPtKGm5D9xOhZCUa84nr5Pg=; CMSPreferredCulture=nn-NO; CMSCsrfCookie=DX86FvHZD/PlFC7byxntBfs3Lt7IQ/M0erZnDtlp; ASP.NET_SessionId=jy1ifvu5hmng2ugdyqi3nxuc; CMSCurrentTheme=SpinCasino
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 13:31:22 GMT
content-type: image/svg+xml
cache-control: public, max-age=86400
last-modified: Tue, 08 Jan 2019 11:01:10 GMT
etag: W/"01f4c7641a7d41:0"
x-frame-options: SAMEORIGIN
x-powered-by: ASP.NET
cf-cache-status: HIT
age: 75459
expires: Wed, 01 Feb 2023 13:31:22 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 7922ceabe970b503-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
www.spincasino.com/CMSScripts/Custom/device_fingerprint.js
200 OK 0 B URL HTTP/2 www.spincasino.com/CMSScripts/Custom/device_fingerprint.js
IP
GET /CMSScripts/Custom/device_fingerprint.js HTTP/1.1
Host: www.spincasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spincasino.com/no/
Cookie: Visit=visitId%3d0dc691bf-9ae5-4642-93f0-fbd13dc3d910%26eventId%3dSCTYPEINTRAFFIC%26promoId%3d421%26s%3daff20307%26a%3dbfpadid94317%26b%3dSCTYPEINTRAFFIC; GA-Details=null; __cf_bm=IRgxJrFUDAzHqTIYeEd149hGXgnk3kWw8ojxXq7SfrU-1675171881-0-AXiWy0WM8NX1vlB+97Ok1XoRHYJRB2vmqFcVsiwe0CX2ESNRQ2Xk03lW4ncOGFMemPtKGm5D9xOhZCUa84nr5Pg=; CMSPreferredCulture=nn-NO; CMSCsrfCookie=DX86FvHZD/PlFC7byxntBfs3Lt7IQ/M0erZnDtlp; ASP.NET_SessionId=jy1ifvu5hmng2ugdyqi3nxuc; CMSCurrentTheme=SpinCasino
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 13:31:23 GMT
content-type: application/javascript
cache-control: public, max-age=14400
last-modified: Wed, 06 Oct 2021 08:42:24 GMT
etag: W/"31211a168ebad71:0"
x-frame-options: SAMEORIGIN
x-powered-by: ASP.NET
cf-cache-status: REVALIDATED
expires: Tue, 31 Jan 2023 17:31:23 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 7922ceac09b7b503-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
p274639.mybettermb.com/adServe/domainClick?ai=T-bNKdV0Pd1Nhj01ZcqbmRGab80DuHqV-cDiHQTErMzCwOYGIJdbc4vFVTTcXj_V-efcWYLpBuE7mkn2Vv40kQODAOxEq6xWMtXEYglt_nAglIiMrVIvlcHyk3m-b1G7QzopBYZBCuKBm883W2KgpGqAQTR_kWOH9SGXepio2cD0adMkN083g2Wp__riXRnqGnLL9g3RhC2ktJmalqtYdeRSlH9JKHjb140n0pSglQVL-xCfMUL4mnsmXgeLf7LqQZS_dRH0lA7IyjNbjgt25xf_JqlGW0Yalz2vc8v2BfZWQnp6mzIZzcxHyDnxK3VtZyFa5x3w2RepTNp5iFKPCjjDN7hxoakO8B0PF81k4VXFZ8E78-CR_0uP2HF_RImTS1V9Rt9xcBTZ2BGyX9whJ2HNq8kR-jp6x5WrgZj24V0RITLTjXCCEysCBXZHi5sjKH7xdaNgjm69nS2-sDJzXVWQdFTAZXOx7j-HGqYGJ1nfj8RQEHtPdbkcEcAYjxpLjwjjOocnKBOvTI1IRIcjB2WSQsQHXjql&ui=HFz5zNIIs96w8gbO8AoGVPmI0xR1wwxSH3LRhS7yFr7am_Ry8JXtPLJqHafQWAefrBefPw4CHc3o2cqvWxr7HYgx-0cSIbNufBhBhx1UQD0Zm2LVHK3CQw&si=1&oref=cf7a6e11e07251ebc9b4290034fea898&optunit=5FKUf0koeNvXjSfSlKCVBa0rozPkVpWr&rb=p0csom96i9g&rr=0&abtg=0
200 OK 0 B URL HTTP/2 p274639.mybettermb.com/adServe/domainClick?ai=T-bNKdV0Pd1Nhj01ZcqbmRGab80DuHqV-cDiHQTErMzCwOYGIJdbc4vFVTTcXj_V-efcWYLpBuE7mkn2Vv40kQODAOxEq6xWMtXEYglt_nAglIiMrVIvlcHyk3m-b1G7QzopBYZBCuKBm883W2KgpGqAQTR_kWOH9SGXepio2cD0adMkN083g2Wp__riXRnqGnLL9g3RhC2ktJmalqtYdeRSlH9JKHjb140n0pSglQVL-xCfMUL4mnsmXgeLf7LqQZS_dRH0lA7IyjNbjgt25xf_JqlGW0Yalz2vc8v2BfZWQnp6mzIZzcxHyDnxK3VtZyFa5x3w2RepTNp5iFKPCjjDN7hxoakO8B0PF81k4VXFZ8E78-CR_0uP2HF_RImTS1V9Rt9xcBTZ2BGyX9whJ2HNq8kR-jp6x5WrgZj24V0RITLTjXCCEysCBXZHi5sjKH7xdaNgjm69nS2-sDJzXVWQdFTAZXOx7j-HGqYGJ1nfj8RQEHtPdbkcEcAYjxpLjwjjOocnKBOvTI1IRIcjB2WSQsQHXjql&ui=HFz5zNIIs96w8gbO8AoGVPmI0xR1wwxSH3LRhS7yFr7am_Ry8JXtPLJqHafQWAefrBefPw4CHc3o2cqvWxr7HYgx-0cSIbNufBhBhx1UQD0Zm2LVHK3CQw&si=1&oref=cf7a6e11e07251ebc9b4290034fea898&optunit=5FKUf0koeNvXjSfSlKCVBa0rozPkVpWr&rb=p0csom96i9g&rr=0&abtg=0
IP
GET /adServe/domainClick?ai=T-bNKdV0Pd1Nhj01ZcqbmRGab80DuHqV-cDiHQTErMzCwOYGIJdbc4vFVTTcXj_V-efcWYLpBuE7mkn2Vv40kQODAOxEq6xWMtXEYglt_nAglIiMrVIvlcHyk3m-b1G7QzopBYZBCuKBm883W2KgpGqAQTR_kWOH9SGXepio2cD0adMkN083g2Wp__riXRnqGnLL9g3RhC2ktJmalqtYdeRSlH9JKHjb140n0pSglQVL-xCfMUL4mnsmXgeLf7LqQZS_dRH0lA7IyjNbjgt25xf_JqlGW0Yalz2vc8v2BfZWQnp6mzIZzcxHyDnxK3VtZyFa5x3w2RepTNp5iFKPCjjDN7hxoakO8B0PF81k4VXFZ8E78-CR_0uP2HF_RImTS1V9Rt9xcBTZ2BGyX9whJ2HNq8kR-jp6x5WrgZj24V0RITLTjXCCEysCBXZHi5sjKH7xdaNgjm69nS2-sDJzXVWQdFTAZXOx7j-HGqYGJ1nfj8RQEHtPdbkcEcAYjxpLjwjjOocnKBOvTI1IRIcjB2WSQsQHXjql&ui=HFz5zNIIs96w8gbO8AoGVPmI0xR1wwxSH3LRhS7yFr7am_Ry8JXtPLJqHafQWAefrBefPw4CHc3o2cqvWxr7HYgx-0cSIbNufBhBhx1UQD0Zm2LVHK3CQw&si=1&oref=cf7a6e11e07251ebc9b4290034fea898&optunit=5FKUf0koeNvXjSfSlKCVBa0rozPkVpWr&rb=p0csom96i9g&rr=0&abtg=0 HTTP/1.1
Host: p274639.mybettermb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://btpnative.com/
Connection: keep-alive
Cookie: rhid=82803328629
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 13:31:21 GMT
content-type: text/html;charset=ISO-8859-1
vary: Accept-Encoding
set-cookie: rhid=82803328629; Max-Age=15552000; Expires=Sun, 30-Jul-2023 13:31:21 GMT; Domain=mybettermb.com; Path=/; SameSite=None; secure;
loi=ad_767916_off_312531_aff_85409_cid_274639-529130658-MANDARINPALACEOC.COM_ts_1675171881; Max-Age=3600; Expires=Tue, 31-Jan-2023 14:31:21 GMT; Domain=mybettermb.com; Path=/; SameSite=None; secure;
content-encoding: gzip
X-Firefox-Spdy: h2
www.spincasino.com/SPC/media/SpinCasino/login_white.svg
200 OK 0 B URL HTTP/2 www.spincasino.com/SPC/media/SpinCasino/login_white.svg
IP
GET /SPC/media/SpinCasino/login_white.svg HTTP/1.1
Host: www.spincasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spincasino.com/no/
Cookie: Visit=visitId%3d0dc691bf-9ae5-4642-93f0-fbd13dc3d910%26eventId%3dSCTYPEINTRAFFIC%26promoId%3d421%26s%3daff20307%26a%3dbfpadid94317%26b%3dSCTYPEINTRAFFIC; GA-Details=null; __cf_bm=IRgxJrFUDAzHqTIYeEd149hGXgnk3kWw8ojxXq7SfrU-1675171881-0-AXiWy0WM8NX1vlB+97Ok1XoRHYJRB2vmqFcVsiwe0CX2ESNRQ2Xk03lW4ncOGFMemPtKGm5D9xOhZCUa84nr5Pg=; CMSPreferredCulture=nn-NO; CMSCsrfCookie=DX86FvHZD/PlFC7byxntBfs3Lt7IQ/M0erZnDtlp; ASP.NET_SessionId=jy1ifvu5hmng2ugdyqi3nxuc; CMSCurrentTheme=SpinCasino
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 13:31:22 GMT
content-type: image/svg+xml
cache-control: public, max-age=86400
last-modified: Mon, 13 Aug 2018 15:17:28 GMT
etag: W/"0b429bf1833d41:0"
x-frame-options: SAMEORIGIN
x-powered-by: ASP.NET
cf-cache-status: HIT
age: 75459
expires: Wed, 01 Feb 2023 13:31:22 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 7922ceabd96eb503-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
www.spincasino.com/CMSScripts/Custom/psl.min.js
200 OK 0 B URL HTTP/2 www.spincasino.com/CMSScripts/Custom/psl.min.js
IP
GET /CMSScripts/Custom/psl.min.js HTTP/1.1
Host: www.spincasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spincasino.com/no/
Cookie: Visit=visitId%3d0dc691bf-9ae5-4642-93f0-fbd13dc3d910%26eventId%3dSCTYPEINTRAFFIC%26promoId%3d421%26s%3daff20307%26a%3dbfpadid94317%26b%3dSCTYPEINTRAFFIC; GA-Details=null; __cf_bm=IRgxJrFUDAzHqTIYeEd149hGXgnk3kWw8ojxXq7SfrU-1675171881-0-AXiWy0WM8NX1vlB+97Ok1XoRHYJRB2vmqFcVsiwe0CX2ESNRQ2Xk03lW4ncOGFMemPtKGm5D9xOhZCUa84nr5Pg=; CMSPreferredCulture=nn-NO; CMSCsrfCookie=DX86FvHZD/PlFC7byxntBfs3Lt7IQ/M0erZnDtlp; ASP.NET_SessionId=jy1ifvu5hmng2ugdyqi3nxuc; CMSCurrentTheme=SpinCasino
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 13:31:23 GMT
content-type: application/javascript
cache-control: public, max-age=14400
last-modified: Wed, 06 Oct 2021 08:42:24 GMT
etag: W/"b371d168ebad71:0"
x-frame-options: SAMEORIGIN
x-powered-by: ASP.NET
cf-cache-status: REVALIDATED
expires: Tue, 31 Jan 2023 17:31:23 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 7922ceac09b4b503-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
www.spincasino.com/SPC/media/SpinCasino/register.svg
200 OK 0 B URL HTTP/2 www.spincasino.com/SPC/media/SpinCasino/register.svg
IP
GET /SPC/media/SpinCasino/register.svg HTTP/1.1
Host: www.spincasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spincasino.com/no/
Cookie: Visit=visitId%3d0dc691bf-9ae5-4642-93f0-fbd13dc3d910%26eventId%3dSCTYPEINTRAFFIC%26promoId%3d421%26s%3daff20307%26a%3dbfpadid94317%26b%3dSCTYPEINTRAFFIC; GA-Details=null; __cf_bm=IRgxJrFUDAzHqTIYeEd149hGXgnk3kWw8ojxXq7SfrU-1675171881-0-AXiWy0WM8NX1vlB+97Ok1XoRHYJRB2vmqFcVsiwe0CX2ESNRQ2Xk03lW4ncOGFMemPtKGm5D9xOhZCUa84nr5Pg=; CMSPreferredCulture=nn-NO; CMSCsrfCookie=DX86FvHZD/PlFC7byxntBfs3Lt7IQ/M0erZnDtlp; ASP.NET_SessionId=jy1ifvu5hmng2ugdyqi3nxuc; CMSCurrentTheme=SpinCasino
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 13:31:22 GMT
content-type: image/svg+xml
cache-control: public, max-age=86400
last-modified: Thu, 24 Nov 2022 10:29:58 GMT
etag: W/"9fc3adb3efffd81:0"
x-frame-options: SAMEORIGIN
x-powered-by: ASP.NET
cf-cache-status: HIT
age: 75459
expires: Wed, 01 Feb 2023 13:31:22 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 7922ceabe974b503-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
static.cloudflareinsights.com/beacon.min.js/vaafb692b2aea4879b33c060e79fe94621666317369993
200 OK 0 B URL HTTP/2 static.cloudflareinsights.com/beacon.min.js/vaafb692b2aea4879b33c060e79fe94621666317369993
IP
GET /beacon.min.js/vaafb692b2aea4879b33c060e79fe94621666317369993 HTTP/1.1
Host: static.cloudflareinsights.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.spincasino.com
Connection: keep-alive
Referer: https://www.spincasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 31 Jan 2023 13:31:23 GMT
content-type: text/javascript;charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=86400
etag: W/2022.10.1
last-modified: Fri, 21 Oct 2022 01:56:09 GMT
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 7922cead1f12b517-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
www.spincasino.com/CMSScripts/Custom/slick.min.js
200 OK 0 B URL HTTP/2 www.spincasino.com/CMSScripts/Custom/slick.min.js
IP
GET /CMSScripts/Custom/slick.min.js HTTP/1.1
Host: www.spincasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spincasino.com/no/
Cookie: Visit=visitId%3d0dc691bf-9ae5-4642-93f0-fbd13dc3d910%26eventId%3dSCTYPEINTRAFFIC%26promoId%3d421%26s%3daff20307%26a%3dbfpadid94317%26b%3dSCTYPEINTRAFFIC; GA-Details=null; __cf_bm=IRgxJrFUDAzHqTIYeEd149hGXgnk3kWw8ojxXq7SfrU-1675171881-0-AXiWy0WM8NX1vlB+97Ok1XoRHYJRB2vmqFcVsiwe0CX2ESNRQ2Xk03lW4ncOGFMemPtKGm5D9xOhZCUa84nr5Pg=; CMSPreferredCulture=nn-NO; CMSCsrfCookie=DX86FvHZD/PlFC7byxntBfs3Lt7IQ/M0erZnDtlp; ASP.NET_SessionId=jy1ifvu5hmng2ugdyqi3nxuc; CMSCurrentTheme=SpinCasino
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 13:31:23 GMT
content-type: application/javascript
cache-control: public, max-age=14400
last-modified: Wed, 06 Oct 2021 08:42:24 GMT
etag: W/"1191e168ebad71:0"
x-frame-options: SAMEORIGIN
x-powered-by: ASP.NET
cf-cache-status: REVALIDATED
expires: Tue, 31 Jan 2023 17:31:23 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 7922ceabf999b503-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Roboto:wght@400;500&display=swap
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css2?family=Roboto:wght@400;500&display=swap
IP
GET /css2?family=Roboto:wght@400;500&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spincasino.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 31 Jan 2023 13:31:24 GMT
date: Tue, 31 Jan 2023 13:31:24 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.spincasino.com/SPC/media/SpinCasino/arrow_right.svg
200 OK 0 B URL HTTP/2 www.spincasino.com/SPC/media/SpinCasino/arrow_right.svg
IP
GET /SPC/media/SpinCasino/arrow_right.svg HTTP/1.1
Host: www.spincasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spincasino.com/CMSPages/GetResource.ashx?stylesheetname=SpinCasino
Cookie: Visit=visitId%3d0dc691bf-9ae5-4642-93f0-fbd13dc3d910%26eventId%3dSCTYPEINTRAFFIC%26promoId%3d421%26s%3daff20307%26a%3dbfpadid94317%26b%3dSCTYPEINTRAFFIC; GA-Details=null; __cf_bm=IRgxJrFUDAzHqTIYeEd149hGXgnk3kWw8ojxXq7SfrU-1675171881-0-AXiWy0WM8NX1vlB+97Ok1XoRHYJRB2vmqFcVsiwe0CX2ESNRQ2Xk03lW4ncOGFMemPtKGm5D9xOhZCUa84nr5Pg=; CMSPreferredCulture=nn-NO; CMSCsrfCookie=DX86FvHZD/PlFC7byxntBfs3Lt7IQ/M0erZnDtlp; ASP.NET_SessionId=jy1ifvu5hmng2ugdyqi3nxuc; CMSCurrentTheme=SpinCasino; _ga_W6NG397K4R=GS1.1.1675171900.1.0.1675171900.0.0.0; _ga=GA1.1.821263410.1675171900
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 13:31:24 GMT
content-type: image/svg+xml
cache-control: public, max-age=86400
last-modified: Tue, 28 Aug 2018 13:00:20 GMT
etag: W/"0ca1613cf3ed41:0"
x-frame-options: SAMEORIGIN
x-powered-by: ASP.NET
cf-cache-status: REVALIDATED
expires: Wed, 01 Feb 2023 13:31:24 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 7922ceb50f3cb503-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
www.spincasino.com/api/CasinoProgressive/GetLatestWinnersFeed/
200 OK 0 B URL HTTP/2 www.spincasino.com/api/CasinoProgressive/GetLatestWinnersFeed/
IP
GET /api/CasinoProgressive/GetLatestWinnersFeed/ HTTP/1.1
Host: www.spincasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://www.spincasino.com/no/
Cookie: Visit=visitId%3d0dc691bf-9ae5-4642-93f0-fbd13dc3d910%26eventId%3dSCTYPEINTRAFFIC%26promoId%3d421%26s%3daff20307%26a%3dbfpadid94317%26b%3dSCTYPEINTRAFFIC; GA-Details=null; __cf_bm=IRgxJrFUDAzHqTIYeEd149hGXgnk3kWw8ojxXq7SfrU-1675171881-0-AXiWy0WM8NX1vlB+97Ok1XoRHYJRB2vmqFcVsiwe0CX2ESNRQ2Xk03lW4ncOGFMemPtKGm5D9xOhZCUa84nr5Pg=; CMSPreferredCulture=nn-NO; CMSCsrfCookie=DX86FvHZD/PlFC7byxntBfs3Lt7IQ/M0erZnDtlp; ASP.NET_SessionId=jy1ifvu5hmng2ugdyqi3nxuc; CMSCurrentTheme=SpinCasino; _ga_W6NG397K4R=GS1.1.1675171900.1.0.1675171900.0.0.0; _ga=GA1.1.821263410.1675171900; DeviceFingerprint=MCwsLGZhbHNlLDAsTW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NDsgcnY6MTA1LjApIEdlY2tvLzIwMTAwMTAxIEZpcmVmb3gvMTA1LjAsZW4tVVMsZW4sMCwxNixMaW51eCB4ODZfNjQsNTUyOTYsLCwsdHJ1ZSwsZmFsc2UsMCxMaW51eCB4ODZfNjQsZmFsc2UsdHJ1ZSwsZmFsc2UsZmFsc2UsZmFsc2UsZmFsc2UsZmFsc2UsZmFsc2UsLDMyNTgxNzA0NSwsY3Vyc2l2ZSxtb25vc3BhY2Usc2VyaWYsZmFudGFzeSxkZWZhdWx0LEFyaWFsLEFyaWFsIEJsYWNrLEFyaWFsIE5hcnJvdyxBcmlhbCBSb3VuZGVkIE1UIEJvbGQsQm9vayBBbnRpcXVhLEJvb2ttYW4gT2xkIFN0eWxlLEJyYWRsZXkgSGFuZCBJVEMsQm9kb25pIE1ULENhbGlicmksQ2VudHVyeSxDZW50dXJ5IEdvdGhpYyxDYXN1YWwsQ29taWMgU2FucyBNUyxDb25zb2xhcyxDb3BwZXJwbGF0ZSBHb3RoaWMgQm9sZCxDb3VyaWVyLENvdXJpZXIgTmV3LEVuZ2xpc2ggVGV4dCBNVCxGZWxpeCBUaXRsaW5nLEZ1dHVyYSxHYXJhbW9uZCxHZW5ldmEsR2VvcmdpYSxHZW50aXVtLEhhZXR0ZW5zY2h3ZWlsZXIsSGVsdmV0aWNhLEltcGFjdCxKb2tlcm1hbixLaW5nLEtvb3RlbmF5LExhdGhhLExpYmVyYXRpb24gU2VyaWYsTHVjaWRhIENvbnNvbGUsTGFsaXQsTHVjaWRhIEdyYW5kZSxNYWduZXRvLE1pc3RyYWwsTW9kZW5hLE1vbm90eXBlIENvcnNpdmEsTVYgQm9saSxPQ1IgQSBFeHRlbmRlZCxPbnl4LFBhbGF0aW5vIExpbm90eXBlLFBhcHlydXMsUGFyY2htZW50LFBlcmljbGVzLFBsYXliaWxsLFNlZ29lIFByaW50LFNocnV0aSxUYWhvbWEsVGVYLFRpbWVzLFRpbWVzIE5ldyBSb21hbixUcmVidWNoZXQgTVMsVmVyZGFuYSxWZXJvbmEsc2Fucy1zZXJpZi10aGluLEFSTk8gUFJPLEFnZW5jeSBGQixBcmFiaWMgVHlwZXNldHRpbmcsQXJpYWwgVW5pY29kZSBNUyxBdmFudEdhcmRlIEJrIEJULEJhbmtHb3RoaWMgTWQgQlQsQmF0YW5nLEJpdHN0cmVhbSBWZXJhIFNhbnMgTW9ubyxDYWxpYnJpLENlbnR1cnksQ2VudHVyeSBHb3RoaWMsQ2xhcmVuZG9uLEVVUk9TVElMRSxGcmFua2xpbiBHb3RoaWMsRnV0dXJhIEJrIEJULEZ1dHVyYSBNZCBCVCxHT1RIQU0sR2lsbCBTYW5zLEhFTFYsSGFldHRlbnNjaHdlaWxlcixIZWx2ZXRpY2EgTmV1ZSxIdW1hbnN0NTIxIEJULExlZWxhd2FkZWUsTGV0dGVyIEdvdGhpYyxMZXZlbmltIE1ULEx1Y2lkYSBCcmlnaHQsTHVjaWRhIFNhbnMsTWVubG8sTVMgTWluY2hvLE1TIE91dGxvb2ssTVMgUmVmZXJlbmNlIFNwZWNpYWx0eSxNUyBVSSBHb3RoaWMsTVQgRXh0cmEsTVlSSUFEIFBSTyxNYXJsZXR0LE1laXJ5byBVSSxNaWNyb3NvZnQgVWlnaHVyLE1pbmlvbiBQcm8sTW9ub3R5cGUgQ29yc2l2YSxQTWluZ0xpVSxQcmlzdGluYSxTQ1JJUFRJTkEsU2Vnb2UgVUkgTGlnaHQsU2VyaWZhLFNpbUhlaSxTbWFsbCBGb250cyxTdGFjY2F0bzIyMiBCVCxUUkFKQU4gUFJPLFVuaXZlcnMgQ0UgNTUgTWVkaXVtLFZyaW5kYSxhY29zOiAxLjQ0NzM1ODg2NTgyNzg1MjIsYWNvc2g6IDcwOS44ODkzNTU4MjI3MjYsYWNvc2hQZjogMzU1LjI5MTI1MTUwMTY0Myxhc2luOiAwLjEyMzQzNzQ2MDk2NzA0NDM1LGFzaW5oOiAwLjg4MTM3MzU4NzAxOTU0Myxhc2luaFBmOiAwLjg4MTM3MzU4NzAxOTU0MjksYXRhbmg6IDAuNTQ5MzA2MTQ0MzM0MDU0OCxhdGFuaFBmOiAwLjU0OTMwNjE0NDMzNDA1NDgsYXRhbjogMC40NjM2NDc2MDkwMDA4MDYxLHNpbjogMC44MTc4ODE5MTIxMTU5MDg1LHNpbmg6IDEuMTc1MjAxMTkzNjQzODAxNCxzaW5oUGY6IDIuNTM0MzQyMTA3ODczMzI0LGNvczogLTAuODM5MDcxNTI5MDA5NTM3Nyxjb3NoOiAxLjU0MzA4MDYzNDgxNTI0MzcsY29zaFBmOiAxLjU0MzA4MDYzNDgxNTI0MzcsdGFuOiAtMS40MjE0NDg4MjM4NzQ3MjQ1LHRhbmg6IDAuNzYxNTk0MTU1OTU1NzY0OSx0YW5oUGY6IDAuNzYxNTk0MTU1OTU1NzY0OSxleHA6IDIuNzE4MjgxODI4NDU5MDQ1LGV4cG0xOiAxLjcxODI4MTgyODQ1OTA0NSxleHBtMVBmOiAxLjcxODI4MTgyODQ1OTA0NSxsb2cxcDogMi4zOTc4OTUyNzI3OTgzNzA3LGxvZzFwUGY6IDIuMzk3ODk1MjcyNzk4MzcwNyxwb3dQSTogMS45Mjc1ODE0MTYwNTYwMTg1ZS01MA==
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 13:31:24 GMT
content-type: application/json; charset=utf-8
cache-control: public, max-age=3600
x-frame-options: SAMEORIGIN
set-cookie: CMSPreferredCulture=en-US; expires=Wed, 31-Jan-2024 13:31:24 GMT; path=/; HttpOnly
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7922ceb6693db503-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
www.spincasino.com/SPC/media/SpinCasino/logo_white.svg
200 OK 0 B URL HTTP/2 www.spincasino.com/SPC/media/SpinCasino/logo_white.svg
IP
GET /SPC/media/SpinCasino/logo_white.svg HTTP/1.1
Host: www.spincasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spincasino.com/no/
Cookie: Visit=visitId%3d0dc691bf-9ae5-4642-93f0-fbd13dc3d910%26eventId%3dSCTYPEINTRAFFIC%26promoId%3d421%26s%3daff20307%26a%3dbfpadid94317%26b%3dSCTYPEINTRAFFIC; GA-Details=null; __cf_bm=IRgxJrFUDAzHqTIYeEd149hGXgnk3kWw8ojxXq7SfrU-1675171881-0-AXiWy0WM8NX1vlB+97Ok1XoRHYJRB2vmqFcVsiwe0CX2ESNRQ2Xk03lW4ncOGFMemPtKGm5D9xOhZCUa84nr5Pg=; CMSPreferredCulture=nn-NO; CMSCsrfCookie=DX86FvHZD/PlFC7byxntBfs3Lt7IQ/M0erZnDtlp; ASP.NET_SessionId=jy1ifvu5hmng2ugdyqi3nxuc; CMSCurrentTheme=SpinCasino
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 13:31:22 GMT
content-type: image/svg+xml
cache-control: public, max-age=86400
last-modified: Tue, 08 Jan 2019 11:04:44 GMT
etag: W/"0eed9f541a7d41:0"
x-frame-options: SAMEORIGIN
x-powered-by: ASP.NET
cf-cache-status: HIT
age: 75459
expires: Wed, 01 Feb 2023 13:31:22 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 7922ceabd969b503-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
www.spincasino.com/SPC/media/SpinCasino/login.svg
200 OK 0 B URL HTTP/2 www.spincasino.com/SPC/media/SpinCasino/login.svg
IP
GET /SPC/media/SpinCasino/login.svg HTTP/1.1
Host: www.spincasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spincasino.com/no/
Cookie: Visit=visitId%3d0dc691bf-9ae5-4642-93f0-fbd13dc3d910%26eventId%3dSCTYPEINTRAFFIC%26promoId%3d421%26s%3daff20307%26a%3dbfpadid94317%26b%3dSCTYPEINTRAFFIC; GA-Details=null; __cf_bm=IRgxJrFUDAzHqTIYeEd149hGXgnk3kWw8ojxXq7SfrU-1675171881-0-AXiWy0WM8NX1vlB+97Ok1XoRHYJRB2vmqFcVsiwe0CX2ESNRQ2Xk03lW4ncOGFMemPtKGm5D9xOhZCUa84nr5Pg=; CMSPreferredCulture=nn-NO; CMSCsrfCookie=DX86FvHZD/PlFC7byxntBfs3Lt7IQ/M0erZnDtlp; ASP.NET_SessionId=jy1ifvu5hmng2ugdyqi3nxuc; CMSCurrentTheme=SpinCasino
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 13:31:22 GMT
content-type: image/svg+xml
cache-control: public, max-age=86400
last-modified: Fri, 10 Aug 2018 09:42:30 GMT
etag: W/"0795748e30d41:0"
x-frame-options: SAMEORIGIN
x-powered-by: ASP.NET
cf-cache-status: HIT
age: 75459
expires: Wed, 01 Feb 2023 13:31:22 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 7922ceabe973b503-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
nexus.rechannelapi.com/betway/dos-prod/serverComponent.php?namespace=Bootstrapper&staticJsPath=/betway/dos-prod/code/&publishedOn=Wed%20Dec%2021%2011:27:36%20GMT%202022&ClientID=2273&PageID=https%3A%2F%2Fwww.spincasino.com%2Fno%2F&custDomain=nexus.rechannelapi.com
200 OK 0 B URL HTTP/2 nexus.rechannelapi.com/betway/dos-prod/serverComponent.php?namespace=Bootstrapper&staticJsPath=/betway/dos-prod/code/&publishedOn=Wed%20Dec%2021%2011:27:36%20GMT%202022&ClientID=2273&PageID=https%3A%2F%2Fwww.spincasino.com%2Fno%2F&custDomain=nexus.rechannelapi.com
IP
GET /betway/dos-prod/serverComponent.php?namespace=Bootstrapper&staticJsPath=/betway/dos-prod/code/&publishedOn=Wed%20Dec%2021%2011:27:36%20GMT%202022&ClientID=2273&PageID=https%3A%2F%2Fwww.spincasino.com%2Fno%2F&custDomain=nexus.rechannelapi.com HTTP/1.1
Host: nexus.rechannelapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spincasino.com/
Cookie: __cf_bm=vYFg6xROu6vikM3blU8wNWryWyXML9nD9pJa2l8zZMk-1675171883-0-AaxiOxu1wdWAj+2uYFfikEgg1GpoWvHA5rB/4vmuZWwN0EzTWEVE7LYpDYMP9eoaMakKoZWCF1TRB6cKts0EZQm4HaBpswUFUnQ7eo6KYPZ+
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 13:31:24 GMT
content-type: text/javascript
expires: Tue, 31 Jan 2023 13:31:23 GMT
cache-control: no-cache, no-store
x-cache: Miss from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 2VBSYqX9112oPGE7tpQlJEEthydl4aS3g3PyMKsjJK7xxb6_Mxw7bw==
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7922ceb7c9360b59-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
www.spincasino.com/SPC/media/SpinCasino/burger.svg
200 OK 0 B URL HTTP/2 www.spincasino.com/SPC/media/SpinCasino/burger.svg
IP
GET /SPC/media/SpinCasino/burger.svg HTTP/1.1
Host: www.spincasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spincasino.com/no/
Cookie: Visit=visitId%3d0dc691bf-9ae5-4642-93f0-fbd13dc3d910%26eventId%3dSCTYPEINTRAFFIC%26promoId%3d421%26s%3daff20307%26a%3dbfpadid94317%26b%3dSCTYPEINTRAFFIC; GA-Details=null; __cf_bm=IRgxJrFUDAzHqTIYeEd149hGXgnk3kWw8ojxXq7SfrU-1675171881-0-AXiWy0WM8NX1vlB+97Ok1XoRHYJRB2vmqFcVsiwe0CX2ESNRQ2Xk03lW4ncOGFMemPtKGm5D9xOhZCUa84nr5Pg=; CMSPreferredCulture=nn-NO; CMSCsrfCookie=DX86FvHZD/PlFC7byxntBfs3Lt7IQ/M0erZnDtlp; ASP.NET_SessionId=jy1ifvu5hmng2ugdyqi3nxuc; CMSCurrentTheme=SpinCasino
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 13:31:22 GMT
content-type: image/svg+xml
cache-control: public, max-age=86400
last-modified: Thu, 09 Aug 2018 15:12:38 GMT
etag: W/"037a868f32fd41:0"
x-frame-options: SAMEORIGIN
x-powered-by: ASP.NET
cf-cache-status: HIT
age: 75459
expires: Wed, 01 Feb 2023 13:31:22 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 7922ceabd96fb503-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
212.32.237.92
34.120.237.76
104.18.20.226
95.101.11.112
93.184.220.29
192.99.158.241