firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 91dd975a7b17b2922dd23c0e49314e40
57a2ece1e3cee7c4ebf927f2ba92f52cac395fe2
09966873bbf317f8910c59544cfde2a6d46e8acd2905797cc7c85c6b4d18ea8a
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Content-Type, Alert, Backoff, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sat, 10 Sep 2022 19:06:50 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: WHmAGnT8qHWgO3Xdgu49dATnbh033nt7d4DFKk7LDszLcCBJG1h0-w==
Age: 3220
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 76d5eb597558e3dee0d99719d17e71e0
f3a0f3932fa8059f27dc9422d523b938fa9a7d09
d16de6cc9eb0e1297f53dc1137bb764bf5c21a7727be32ad05afebd1fe9501ed
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D16DE6CC9EB0E1297F53DC1137BB764BF5C21A7727BE32AD05AFEBD1FE9501ED"
Last-Modified: Sat, 10 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15070
Expires: Sun, 11 Sep 2022 00:11:40 GMT
Date: Sat, 10 Sep 2022 20:00:30 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Sat, 10 Sep 2022 07:17:13 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: BKt0ruGDycOSV5sDpdbH8ZfaiHxww2F5QQbZDMPmQyG6wS7CneMJGg==
age: 45798
X-Firefox-Spdy: h2
www.casino4business.com/mwmj/
200 OK 329 B URL HTTP/1.1 www.casino4business.com/mwmj/
IP
ASN #14061 DIGITALOCEAN-ASN
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash ecbcb8bae64098de3e587487b474f8b8
e275409fb40ea27c3826af493f70faf147d0f995
2597a3f2418586d8a9fb0764743a84486ba066c6af3ff194922fb6c65a783688
Analyzer Verdict Alert fortinet Malware
GET /mwmj/ HTTP/1.1
Host: www.casino4business.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
server: nginx/1.18.0 (Ubuntu)
date: Sat, 10 Sep 2022 20:00:30 GMT
content-type: text/html
last-modified: Wed, 12 Jan 2022 17:20:45 GMT
etag: W/"61df0ded-1ad"
content-encoding: gzip
transfer-encoding: chunked
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 10 Sep 2022 20:00:30 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js
200 OK 28 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js
IP
File type ASCII text, with very long lines (65451)
Hash 4b5f47439b640180cc3450f7de05d0d8
5a0dc9bcab80ddc409dd35fcb00a88fe6846fee2
1f85e8b327f42c17c025d69849914068536d9aa95412fe473ae90ffb2f4ebd82
GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.casino4business.com
Connection: keep-alive
Referer: http://www.casino4business.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 10 Sep 2022 20:00:30 GMT
content-type: application/javascript; charset=utf-8
content-length: 27958
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb09ed3-15d84"
last-modified: Mon, 04 May 2020 23:01:39 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 8283734
expires: Thu, 31 Aug 2023 20:00:30 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EkmK%2FH7P5yH%2B4i7x8EPDSdcf%2Bmt0892TVcXTDhLAbaMCn59fhnlCFrqsemqmDzzj1qZ%2BacSFKmYc%2BJXQqFBqDAqd5bU91dZXlhnX%2FXEmtB%2B7A01KHBMHuFTDWT7imB0rX4CFG%2Bxb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 748ac00edf7b0b41-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 51e356e8f80cf709448f42c6a67a3954
33e55e88886cb220fc93b21882cf8c9aca8cddc4
a7e9bbb3bc0b3b99cc41dcd6ce553b8bc09f4d93e02cc61ab00bfc4ed1f53bcd
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "A7E9BBB3BC0B3B99CC41DCD6CE553B8BC09F4D93E02CC61AB00BFC4ED1F53BCD"
Last-Modified: Thu, 08 Sep 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16713
Expires: Sun, 11 Sep 2022 00:39:03 GMT
Date: Sat, 10 Sep 2022 20:00:30 GMT
Connection: keep-alive
www.casino4business.com/favicon.ico
200 OK 329 B URL HTTP/1.1 www.casino4business.com/favicon.ico
IP
ASN #14061 DIGITALOCEAN-ASN
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash ecbcb8bae64098de3e587487b474f8b8
e275409fb40ea27c3826af493f70faf147d0f995
2597a3f2418586d8a9fb0764743a84486ba066c6af3ff194922fb6c65a783688
GET /favicon.ico HTTP/1.1
Host: www.casino4business.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.casino4business.com/mwmj/
HTTP/1.1 200 OK
server: nginx/1.18.0 (Ubuntu)
date: Sat, 10 Sep 2022 20:00:30 GMT
content-type: text/html
last-modified: Wed, 12 Jan 2022 17:20:45 GMT
etag: W/"61df0ded-1ad"
content-encoding: gzip
transfer-encoding: chunked
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Sat, 10 Sep 2022 19:56:07 GMT
Cache-Control: max-age=3600
Expires: Sat, 10 Sep 2022 20:00:14 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 bb1da7862c4968b28920b91b324095c0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: mTEgI2vNNvhMH91YALnxz52S2gGI54Dmr6u0HBS3oy4TbBg3OYaGQg==
Age: 263
ocsp.digicert.com/
200 OK 471 B IP
Hash 36fe04277220227ba5ecfe7d2ff1d9d9
2eb9f6560336248cc45c1cd66d87505b5ebdf5d4
94f8f2f8f3b67db18825ea48740ff0ce218d7156fe851d6b023ef43b6bee4f7f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6387
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 10 Sep 2022 20:00:31 GMT
Last-Modified: Sat, 10 Sep 2022 18:14:04 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471
domaincntrol.com/?orighost=http://www.casino4business.com/mwmj/
200 OK 32 B URL HTTP/2 domaincntrol.com/?orighost=http://www.casino4business.com/mwmj/
IP
File type ASCII text, with no line terminators
Hash cfd02db26647f43d5941109197a9b9c5
821879394b2727593b82dcb372afa1ac33c98609
8c61fb96bf8f508e05bd9521267497afb08ac0882de962e48f2b3ac31a7ffd1a
GET /?orighost=http://www.casino4business.com/mwmj/ HTTP/1.1
Host: domaincntrol.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.casino4business.com
Connection: keep-alive
Referer: http://www.casino4business.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 10 Sep 2022 20:00:31 GMT
content-type: text/javascript;charset=UTF-8
content-length: 32
access-control-allow-origin: *
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aHatjrDV933zh9QmCCKMh2Qh3Fl94zd5WWKUzYwa%2B8eM5T3SnDb4Ika8ZrSGfGg%2BWAZs9Nqsk6kHNkeCroUreGnNsTmlBvo9xi3tBmels9QrfCxnsBIolnjoEgyNXRjo3OI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 748ac00f8c590af6-OSL
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: ugAasNosie9axHF2FdAGiQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: y3fdjm4qH1/Gpmzj2snXcTWAFiM=
ww2.casino4business.com/
200 OK 1.2 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (646)
Hash 5de74414f02693b9c0886cbe861fce89
d2218ccd93e4dc178068989d082bb6faa881f814
22d3ba7216b7cbea8afe59281c1dcc107c8664cbd4dbdd16f0aea7c5776577c2
GET / HTTP/1.1
Host: ww2.casino4business.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.casino4business.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
date: Sat, 10 Sep 2022 20:00:32 GMT
content-type: text/html; charset=UTF-8
transfer-encoding: chunked
vary: Accept-Encoding
expires: Mon, 26 Jul 1997 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANnylWw2vLY4hUn9w06zQKbhKBfvjFUCsdFlb6TdQhxb9RXWXuI4t31c+o8fYOv/s8q1LGPga3DE1L/tHU4LENMCAwEAAQ==_2GlDZ88sKVkxIsiu+JW52xJ1u2cUDsBM4CGxLNWDJeyqkrvU7ZywlMco8MX+DLB8O0JzuvRWQPYB9UWbn79oQg==
last-modified: Sat, 10 Sep 2022 20:00:31 GMT
x-cache-miss-from: parking-b7c449b98-sdx9h
server: NginX
content-encoding: gzip
img.sedoparking.com/images/js_preloader.gif
200 OK 4.3 kB URL HTTP/1.1 img.sedoparking.com/images/js_preloader.gif
IP
File type GIF image data, version 89a, 16 x 16\012- data
Hash 90c93102a88c2ab94bff1575b7a6e86e
56d71bf13de464534643db9d127629a0a3bf677a
5f6ad7031600056b578a6e8c6b34bc718d13125cc8256aa4a9050e549576f81a
GET /images/js_preloader.gif HTTP/1.1
Host: img.sedoparking.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ww2.casino4business.com/
HTTP/1.1 200 OK
Date: Sat, 10 Sep 2022 20:00:32 GMT
Content-Type: image/gif
Content-Length: 4254
Connection: keep-alive
Access-Control-Allow-Origin: *
Cache-Control: max-age=604800
Expires: Sat, 17 Sep 2022 20:00:32 GMT
X-CFHash: "90c93102a88c2ab94bff1575b7a6e86e"
X-CFF: B
Last-Modified: Fri, 15 Mar 2019 12:24:07 GMT
X-CF3: H
CF4Age: 156700
x-cf-tsc: 1648179742
CF4ttl: 31536000.000
X-CF2: H
Server: CFS 0215
X-CF-ReqID: d4d49c49908d6ba150291c0b7a11c2a3
X-CF1: 11696:fA.arn1:cf:cacheN.arn1-01:H
Accept-Ranges: bytes
ww2.casino4business.com/search/tsc.php?200=NDMxMTEzMzg3&21=OTEuOTAuNDIuMTU0&681=MTY2Mjg0MDAzMjdjZDIxZGY0NzczM2M1MDU3YWYxMmI4NmY4MmQ0MTkz&crc=bda1b1dee75747b710b240d554c232e9ca01170c&cv=1
200 OK 0 B URL HTTP/1.1 ww2.casino4business.com/search/tsc.php?200=NDMxMTEzMzg3&21=OTEuOTAuNDIuMTU0&681=MTY2Mjg0MDAzMjdjZDIxZGY0NzczM2M1MDU3YWYxMmI4NmY4MmQ0MTkz&crc=bda1b1dee75747b710b240d554c232e9ca01170c&cv=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /search/tsc.php?200=NDMxMTEzMzg3&21=OTEuOTAuNDIuMTU0&681=MTY2Mjg0MDAzMjdjZDIxZGY0NzczM2M1MDU3YWYxMmI4NmY4MmQ0MTkz&crc=bda1b1dee75747b710b240d554c232e9ca01170c&cv=1 HTTP/1.1
Host: ww2.casino4business.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ww2.casino4business.com/
HTTP/1.1 200 OK
date: Sat, 10 Sep 2022 20:00:32 GMT
content-type: text/html; charset=UTF-8
content-length: 0
x-cache-miss-from: parking-b7c449b98-8nmbv
server: NginX
ww2.casino4business.com/search/redirect.php?f=http%3A%2F%2Fxml.sedodna.com%2Fclick%3Fi%3DaYNCI4HGrM8_0&v=MTM0MDU3NTM2OTNkYjhmYmViMDY2MmQ0MzIxOGVlZGMJMQl3dzIuY2FzaW5vNGJ1c2luZXNzLmNvbTYzMWNlY2RmNjg5YTUwLjQ0MzczMjExCXd3Mi5jYXNpbm80YnVzaW5lc3MuY29tNjMxY2VjZGY2ODlkZTUuOTAyNDY0MzEJMTY2Mjg0MDAzMglhZF82M18w&l=OAk3ZGQ0MmFhODgyYzYwYWI1MDBmMDYwODlmMjg4YzNjMQkwCTM1CTAJZmRjMTRlNmU2NjUwZDk1OWE5MWJhNGRkYzE4YzY3NjcJNDMxMTEzMzg3CWNhc2lubzRidXNpbmVzcwkwCTYzCTYJMgkxNjYyODQwMDMyCTAuMDA4NzA3CU4JMAkxCTE4MDUJMTIwNQk0MTg4OTI1MTEJOTEuOTAuNDIuMTU0CTA%3D
302 Found 0 B URL HTTP/1.1 ww2.casino4business.com/search/redirect.php?f=http%3A%2F%2Fxml.sedodna.com%2Fclick%3Fi%3DaYNCI4HGrM8_0&v=MTM0MDU3NTM2OTNkYjhmYmViMDY2MmQ0MzIxOGVlZGMJMQl3dzIuY2FzaW5vNGJ1c2luZXNzLmNvbTYzMWNlY2RmNjg5YTUwLjQ0MzczMjExCXd3Mi5jYXNpbm80YnVzaW5lc3MuY29tNjMxY2VjZGY2ODlkZTUuOTAyNDY0MzEJMTY2Mjg0MDAzMglhZF82M18w&l=OAk3ZGQ0MmFhODgyYzYwYWI1MDBmMDYwODlmMjg4YzNjMQkwCTM1CTAJZmRjMTRlNmU2NjUwZDk1OWE5MWJhNGRkYzE4YzY3NjcJNDMxMTEzMzg3CWNhc2lubzRidXNpbmVzcwkwCTYzCTYJMgkxNjYyODQwMDMyCTAuMDA4NzA3CU4JMAkxCTE4MDUJMTIwNQk0MTg4OTI1MTEJOTEuOTAuNDIuMTU0CTA%3D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /search/redirect.php?f=http%3A%2F%2Fxml.sedodna.com%2Fclick%3Fi%3DaYNCI4HGrM8_0&v=MTM0MDU3NTM2OTNkYjhmYmViMDY2MmQ0MzIxOGVlZGMJMQl3dzIuY2FzaW5vNGJ1c2luZXNzLmNvbTYzMWNlY2RmNjg5YTUwLjQ0MzczMjExCXd3Mi5jYXNpbm80YnVzaW5lc3MuY29tNjMxY2VjZGY2ODlkZTUuOTAyNDY0MzEJMTY2Mjg0MDAzMglhZF82M18w&l=OAk3ZGQ0MmFhODgyYzYwYWI1MDBmMDYwODlmMjg4YzNjMQkwCTM1CTAJZmRjMTRlNmU2NjUwZDk1OWE5MWJhNGRkYzE4YzY3NjcJNDMxMTEzMzg3CWNhc2lubzRidXNpbmVzcwkwCTYzCTYJMgkxNjYyODQwMDMyCTAuMDA4NzA3CU4JMAkxCTE4MDUJMTIwNQk0MTg4OTI1MTEJOTEuOTAuNDIuMTU0CTA%3D HTTP/1.1
Host: ww2.casino4business.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ww2.casino4business.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
date: Sat, 10 Sep 2022 20:00:32 GMT
content-type: text/html; charset=UTF-8
content-length: 0
expires: Mon, 26 Jul 1997 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
last-modified: Sat, 10 Sep 2022 20:00:32 GMT
location: /search/tcerider.php?f=http%3A%2F%2Fxml.sedodna.com%2Fclick%3Fi%3DaYNCI4HGrM8_0&v=MTM0MDU3NTM2OTNkYjhmYmViMDY2MmQ0MzIxOGVlZGMJMQl3dzIuY2FzaW5vNGJ1c2luZXNzLmNvbTYzMWNlY2RmNjg5YTUwLjQ0MzczMjExCXd3Mi5jYXNpbm80YnVzaW5lc3MuY29tNjMxY2VjZGY2ODlkZTUuOTAyNDY0MzEJMTY2Mjg0MDAzMglhZF82M18w&l=OAk3ZGQ0MmFhODgyYzYwYWI1MDBmMDYwODlmMjg4YzNjMQkwCTM1CTAJZmRjMTRlNmU2NjUwZDk1OWE5MWJhNGRkYzE4YzY3NjcJNDMxMTEzMzg3CWNhc2lubzRidXNpbmVzcwkwCTYzCTYJMgkxNjYyODQwMDMyCTAuMDA4NzA3CU4JMAkxCTE4MDUJMTIwNQk0MTg4OTI1MTEJOTEuOTAuNDIuMTU0CTA%3D
x-cache-miss-from: parking-b7c449b98-4drk2
server: NginX
ww2.casino4business.com/search/tcerider.php?f=http%3A%2F%2Fxml.sedodna.com%2Fclick%3Fi%3DaYNCI4HGrM8_0&v=MTM0MDU3NTM2OTNkYjhmYmViMDY2MmQ0MzIxOGVlZGMJMQl3dzIuY2FzaW5vNGJ1c2luZXNzLmNvbTYzMWNlY2RmNjg5YTUwLjQ0MzczMjExCXd3Mi5jYXNpbm80YnVzaW5lc3MuY29tNjMxY2VjZGY2ODlkZTUuOTAyNDY0MzEJMTY2Mjg0MDAzMglhZF82M18w&l=OAk3ZGQ0MmFhODgyYzYwYWI1MDBmMDYwODlmMjg4YzNjMQkwCTM1CTAJZmRjMTRlNmU2NjUwZDk1OWE5MWJhNGRkYzE4YzY3NjcJNDMxMTEzMzg3CWNhc2lubzRidXNpbmVzcwkwCTYzCTYJMgkxNjYyODQwMDMyCTAuMDA4NzA3CU4JMAkxCTE4MDUJMTIwNQk0MTg4OTI1MTEJOTEuOTAuNDIuMTU0CTA%3D
302 Found 311 B URL HTTP/1.1 ww2.casino4business.com/search/tcerider.php?f=http%3A%2F%2Fxml.sedodna.com%2Fclick%3Fi%3DaYNCI4HGrM8_0&v=MTM0MDU3NTM2OTNkYjhmYmViMDY2MmQ0MzIxOGVlZGMJMQl3dzIuY2FzaW5vNGJ1c2luZXNzLmNvbTYzMWNlY2RmNjg5YTUwLjQ0MzczMjExCXd3Mi5jYXNpbm80YnVzaW5lc3MuY29tNjMxY2VjZGY2ODlkZTUuOTAyNDY0MzEJMTY2Mjg0MDAzMglhZF82M18w&l=OAk3ZGQ0MmFhODgyYzYwYWI1MDBmMDYwODlmMjg4YzNjMQkwCTM1CTAJZmRjMTRlNmU2NjUwZDk1OWE5MWJhNGRkYzE4YzY3NjcJNDMxMTEzMzg3CWNhc2lubzRidXNpbmVzcwkwCTYzCTYJMgkxNjYyODQwMDMyCTAuMDA4NzA3CU4JMAkxCTE4MDUJMTIwNQk0MTg4OTI1MTEJOTEuOTAuNDIuMTU0CTA%3D
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 69175ed6e67e47b2bf4cbf522abaf050
47d16ebbf2c188348065e78959d507b8a7c22037
1acc0172c06ca850c9c1395d3541a8ed0c0ff731d7720dde1074f5e66452abd1
GET /search/tcerider.php?f=http%3A%2F%2Fxml.sedodna.com%2Fclick%3Fi%3DaYNCI4HGrM8_0&v=MTM0MDU3NTM2OTNkYjhmYmViMDY2MmQ0MzIxOGVlZGMJMQl3dzIuY2FzaW5vNGJ1c2luZXNzLmNvbTYzMWNlY2RmNjg5YTUwLjQ0MzczMjExCXd3Mi5jYXNpbm80YnVzaW5lc3MuY29tNjMxY2VjZGY2ODlkZTUuOTAyNDY0MzEJMTY2Mjg0MDAzMglhZF82M18w&l=OAk3ZGQ0MmFhODgyYzYwYWI1MDBmMDYwODlmMjg4YzNjMQkwCTM1CTAJZmRjMTRlNmU2NjUwZDk1OWE5MWJhNGRkYzE4YzY3NjcJNDMxMTEzMzg3CWNhc2lubzRidXNpbmVzcwkwCTYzCTYJMgkxNjYyODQwMDMyCTAuMDA4NzA3CU4JMAkxCTE4MDUJMTIwNQk0MTg4OTI1MTEJOTEuOTAuNDIuMTU0CTA%3D HTTP/1.1
Host: ww2.casino4business.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ww2.casino4business.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
date: Sat, 10 Sep 2022 20:00:32 GMT
content-type: text/html; charset=UTF-8
transfer-encoding: chunked
expires: Mon, 26 Jul 1997 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
last-modified: Sat, 10 Sep 2022 20:00:32 GMT
location: http://xml.sedodna.com/click?i=aYNCI4HGrM8_0
x-cache-miss-from: parking-b7c449b98-rt7sb
server: NginX
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 477fd76de0b69553430d504fe527cc06
88fe80a099e610212f27427ae6fd5b4e03b3df16
f27bc8051a23fbe811318b8d49f5d27e3e992962a0e72f5d30a4790fe4f42748
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F27BC8051A23FBE811318B8D49F5D27E3E992962A0E72F5D30A4790FE4F42748"
Last-Modified: Sat, 10 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14682
Expires: Sun, 11 Sep 2022 00:05:14 GMT
Date: Sat, 10 Sep 2022 20:00:32 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 477fd76de0b69553430d504fe527cc06
88fe80a099e610212f27427ae6fd5b4e03b3df16
f27bc8051a23fbe811318b8d49f5d27e3e992962a0e72f5d30a4790fe4f42748
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F27BC8051A23FBE811318B8D49F5D27E3E992962A0E72F5D30A4790FE4F42748"
Last-Modified: Sat, 10 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14682
Expires: Sun, 11 Sep 2022 00:05:14 GMT
Date: Sat, 10 Sep 2022 20:00:32 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 477fd76de0b69553430d504fe527cc06
88fe80a099e610212f27427ae6fd5b4e03b3df16
f27bc8051a23fbe811318b8d49f5d27e3e992962a0e72f5d30a4790fe4f42748
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F27BC8051A23FBE811318B8D49F5D27E3E992962A0E72F5D30A4790FE4F42748"
Last-Modified: Sat, 10 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14682
Expires: Sun, 11 Sep 2022 00:05:14 GMT
Date: Sat, 10 Sep 2022 20:00:32 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb150ddb5-18a6-405d-8041-cdea0c0e6a85.jpeg
200 OK 8.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb150ddb5-18a6-405d-8041-cdea0c0e6a85.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d21a3e07583d9fad4104b6457f7915e7
fdc9453562f993e2545ca99731a7741e748b6082
8ea38264c82c6b544447079cc92eae70d0968a070ba39022af0e18c498916338
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb150ddb5-18a6-405d-8041-cdea0c0e6a85.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8266
x-amzn-requestid: 3411ec4b-ac18-4b4e-8876-c99b94d3a4a3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YNitWEjhIAMFWpw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631bb188-4d9e496e7ff141b46748d850;Sampled=0
x-amzn-remapped-date: Fri, 09 Sep 2022 21:35:04 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: vyV1_onImxuLNGp4UI1W5grcuVW3LHJFJjvmO0VXU-OYorF6RVcoDw==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 7d01bcfcfe27ce0b8979cf621dd081de.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Sep 2022 21:51:58 GMT
age: 79714
etag: "fdc9453562f993e2545ca99731a7741e748b6082"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5e72c2e9-6d47-42ac-9514-316cd8f8f6c5.jpeg
200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5e72c2e9-6d47-42ac-9514-316cd8f8f6c5.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e8f11aeba65478b039cfb4100aa23435
88db17a82ea0207ccb4826c2961875c5106b427a
6f6ec5922ec54d824e7f933de87608c5a763da119ae9461d99c6525649b1a9af
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5e72c2e9-6d47-42ac-9514-316cd8f8f6c5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8676
x-amzn-requestid: 64a58aa8-8321-4c91-98fe-dbf97996c513
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YNiuZEjnIAMFRFg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631bb18f-77b635593b202d7d3cd0ac84;Sampled=0
x-amzn-remapped-date: Fri, 09 Sep 2022 21:35:11 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: VWwNSpFvcDq3nrn91QvYjrJX5hLjp96vrKgZzR-pOdrdHx7MlcagGQ==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 d1d67b07408bba8c682597d8303642e2.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Sep 2022 21:56:34 GMT
age: 79438
etag: "88db17a82ea0207ccb4826c2961875c5106b427a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F242561c0-8a95-468b-ba61-6859edfe8518.jpeg
200 OK 7.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F242561c0-8a95-468b-ba61-6859edfe8518.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3f8aeb20a6543be83f3e422796c4dc70
4e4e127039dd8099c63c3bde198118d2874f7342
0f9fdd1b577e4719f88620bb451131bfb120790479b4feccb4222647fb3ea453
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F242561c0-8a95-468b-ba61-6859edfe8518.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7218
x-amzn-requestid: 4e9672b6-5415-4808-9508-22e8c42de448
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YE_QzHffIAMFYTw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6318459e-743b975a2770e2a90c616d87;Sampled=0
x-amzn-remapped-date: Wed, 07 Sep 2022 07:17:50 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: dR6KtfbMJzFz0j8zIFUNtdkJHUaerjxWbUyYKBD-jR_uAAvCCty01Q==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 ebe4011a81a36e2bf678f69ce1711330.cloudfront.net (CloudFront), 1.1 google
date: Sat, 10 Sep 2022 03:23:21 GMT
age: 59831
etag: "4e4e127039dd8099c63c3bde198118d2874f7342"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe4e8861b-4d5e-4f2e-8b1c-e85d23f02c52.jpeg
200 OK 8.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe4e8861b-4d5e-4f2e-8b1c-e85d23f02c52.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2b83fa95ed30533299bc754adaced672
27eda8377e1c00c53fb66b4e2fa4f0dd6c7020af
bc59e5ba6abafd8e7b10d6f8ae2269cbf739a4b28f9cbbf3adfc29a9195e6985
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe4e8861b-4d5e-4f2e-8b1c-e85d23f02c52.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8626
x-amzn-requestid: af5e61ab-4f7b-4b03-8413-5d750b17e0df
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YLj9TH7vIAMFVMg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631ae6bb-309144fb6e02564c4fcdb966;Sampled=0
x-amzn-remapped-date: Fri, 09 Sep 2022 07:09:47 GMT
x-amz-cf-pop: SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: 3gzR4efCGz9QsLoxAMuTUgBAwEc5WdyHBhw_wRPGmfnS9SWm-0vE7w==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 a8e5d5aeee6eacca5c379e5059b1f68c.cloudfront.net (CloudFront), 1.1 google
date: Sat, 10 Sep 2022 07:23:29 GMT
age: 45423
etag: "27eda8377e1c00c53fb66b4e2fa4f0dd6c7020af"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdde1c872-426a-4aec-b295-a2cac8b36edf.webp
200 OK 4.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdde1c872-426a-4aec-b295-a2cac8b36edf.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 71bafbee3867c04c3712ff98a123d52c
ccf471cd30f5aa96f4e5fdb9e0fbbcdbb475a0bf
58ff1700e0b125caefb73719e2b3d734b2fbcc5ed1aabe5a11bb73b43edab831
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdde1c872-426a-4aec-b295-a2cac8b36edf.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4477
x-amzn-requestid: bbdca46e-5628-4faf-a0fe-ea1b5b39ac2a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YNjzaHrIoAMF-iA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631bb348-567e946e7cf77f2e11c17c97;Sampled=0
x-amzn-remapped-date: Fri, 09 Sep 2022 21:42:32 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: f2Av7EDI_l1jZfe0kR6K2yQNzxbBXdcXJGycIZbOTp4ZkCuusLk4Sw==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 27fe6f224e0cfa3f3a446471ee256e56.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Sep 2022 21:50:47 GMT
age: 79785
etag: "ccf471cd30f5aa96f4e5fdb9e0fbbcdbb475a0bf"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0bedecf7-d9af-4aa7-88b0-94b2a33f9e1a.jpeg
200 OK 9.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0bedecf7-d9af-4aa7-88b0-94b2a33f9e1a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7ade70e6dbcfb3ca1765f95112671e69
3768753be084c0e0fc268be5b192d02d769114b6
9670a3bf2476ba193cfeb3153c1254bdcfc980a28503dda0d9b398a3a59f53f4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0bedecf7-d9af-4aa7-88b0-94b2a33f9e1a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9766
x-amzn-requestid: 720a4111-91de-4672-88c8-f40db517c07d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YHsjRE13oAMFbCA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63195ae1-288f1f5456bf4d146dcf774c;Sampled=0
x-amzn-remapped-date: Thu, 08 Sep 2022 03:00:49 GMT
x-amz-cf-pop: SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: CjZw9xgHd4_7KvhiiZEIBivRgoQeh1BYxEc_bOBbTvWoqHgTPq0sSA==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 d2575afea3774df33dcf5e5ff475025e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 10 Sep 2022 05:37:01 GMT
age: 51811
etag: "3768753be084c0e0fc268be5b192d02d769114b6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
xml.sedodna.com/click?i=aYNCI4HGrM8_0
302 Found 0 B URL HTTP/1.1 xml.sedodna.com/click?i=aYNCI4HGrM8_0
IP
ASN #27257 WEBAIR-INTERNET
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /click?i=aYNCI4HGrM8_0 HTTP/1.1
Host: xml.sedodna.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ww2.casino4business.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Cache-Control: no-store
Content-Length: 0
Age: 0
Connection: keep-alive
Location: http://api.quotes.com/398ab6fe-3143-11ed-ad38-e1b37c55214d
Pragma: no-cache
api.quotes.com/398ab6fe-3143-11ed-ad38-e1b37c55214d
200 OK 171 B URL HTTP/1.1 api.quotes.com/398ab6fe-3143-11ed-ad38-e1b37c55214d
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with no line terminators
Hash 7550807b104945c33cc1113b67ca07e5
af58e6de7c1af5c5ad9073c3332044ebfbb497e7
ad2fc922f2cbfc09285b18444c44d8a6fdbd9cb8e755474a0a0e0f563d70eb2e
GET /398ab6fe-3143-11ed-ad38-e1b37c55214d HTTP/1.1
Host: api.quotes.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ww2.casino4business.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 171
content-type: text/html; charset=utf-8
date: Sat, 10 Sep 2022 20:00:32 GMT
server: nginx
api.quotes.com/398ab6fe-3143-11ed-ad38-e1b37c55214d?hr=1
302 Found 11 B URL HTTP/1.1 api.quotes.com/398ab6fe-3143-11ed-ad38-e1b37c55214d?hr=1
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type ASCII text, with no line terminators
Hash 32682312d17c7cbf18e73594f5570319
60e22121bdd0bc71cdb2bae2a3aa577006b2eae9
e55fb1a1d731153e943b68844af12dcce8bfac917c98ffdea64c80da0607dd47
GET /398ab6fe-3143-11ed-ad38-e1b37c55214d?hr=1 HTTP/1.1
Host: api.quotes.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 11
date: Sat, 10 Sep 2022 20:00:32 GMT
location: http://balor-ghn.com/zcvisitor/399cf174-3143-11ed-a1a7-0a45ab1ca4cf/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=1a6b6730-4cec-11e9-87c2-12077332b422
server: nginx
balor-ghn.com/zcvisitor/399cf174-3143-11ed-a1a7-0a45ab1ca4cf/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=1a6b6730-4cec-11e9-87c2-12077332b422
200 996 B URL HTTP/1.1 balor-ghn.com/zcvisitor/399cf174-3143-11ed-a1a7-0a45ab1ca4cf/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=1a6b6730-4cec-11e9-87c2-12077332b422
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 366f665d7abca6b6b2e0a099e684ca35
81ca6b00aa4914348d3c8c8459eb27f2454b54a8
b69655abb6398edac99d0df884cff632c66115b8008bcf17a7d59f82924e10a4
GET /zcvisitor/399cf174-3143-11ed-a1a7-0a45ab1ca4cf/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=1a6b6730-4cec-11e9-87c2-12077332b422 HTTP/1.1
Host: balor-ghn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200
Date: Sat, 10 Sep 2022 20:00:33 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Headers: X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag
Server: lgmpiPHy
balor-ghn.com/zcredirect?visitid=399cf174-3143-11ed-a1a7-0a45ab1ca4cf&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false
200 314 B URL HTTP/1.1 balor-ghn.com/zcredirect?visitid=399cf174-3143-11ed-a1a7-0a45ab1ca4cf&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a83086c47f80124cf667dcac28361609
539b319389922843824a43065024bf54a3a3792d
df9047c10b8d0d601350625c05bac811aed43f0c188d7b175b8cf81b4edd731a
GET /zcredirect?visitid=399cf174-3143-11ed-a1a7-0a45ab1ca4cf&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false HTTP/1.1
Host: balor-ghn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://balor-ghn.com/zcvisitor/399cf174-3143-11ed-a1a7-0a45ab1ca4cf/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=1a6b6730-4cec-11e9-87c2-12077332b422
Upgrade-Insecure-Requests: 1
HTTP/1.1 200
Date: Sat, 10 Sep 2022 20:00:33 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Headers: X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag
redirected: JS
Server: mMQOosQu
ocsp.digicert.com/
200 OK 279 B IP
Hash b8daef6e3e8508c2f7cab3f050f33dae
2c862ca2b102d7739f6972eb43464d3d1c878a3e
f7f56146f11ec4f6f2fe606204137ad827a841ed82f75b4bdf09b084c8d11884
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5075
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 10 Sep 2022 20:00:33 GMT
Last-Modified: Sat, 10 Sep 2022 18:35:58 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 279
balor-ghn.com/favicon.ico
404 653 B URL HTTP/1.1 balor-ghn.com/favicon.ico
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (649), with no line terminators
Hash ba2732b1b2fa2626ffaa15f62f9e7d66
203d4e7fbb1d80449d6e4e1f3ae7a9bf8625debe
879861cb72fe9fbb476dab246021c4c83b4066327de2529e05ec54d3afb0a1c8
GET /favicon.ico HTTP/1.1
Host: balor-ghn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://balor-ghn.com/zcredirect?visitid=399cf174-3143-11ed-a1a7-0a45ab1ca4cf&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false
HTTP/1.1 404
Date: Sat, 10 Sep 2022 20:00:33 GMT
Content-Type: text/html;charset=utf-8
Content-Length: 653
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Content-Language: en
Server: ZMVphWgz
www.jackpotcitycasino.com/ldnjpc/media/jpc19/en_qrios_ca.png
200 OK 5.9 kB URL HTTP/2 www.jackpotcitycasino.com/ldnjpc/media/jpc19/en_qrios_ca.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash a1e7015632ebd39ec5a6003285f957e8
8f5e5975b301b6e817477d65307bc5e9fe1ca9de
139825bed60b79d428263655bb4b9e84b383aea9de8f8deba662edab4ab32270
GET /ldnjpc/media/jpc19/en_qrios_ca.png HTTP/1.1
Host: www.jackpotcitycasino.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jackpotcitycasino.com/norge/
Cookie: Visit=visitId%3d91f8c434-45c2-44e4-8d45-4bd850a1865f%26eventId%3dJCTYPEINTRAFFIC%26promoId%3d24408%26s%3daff20307%26a%3dbfpadid94318%26b%3dJCTYPEINTRAFFIC; GA-Details=null; __cf_bm=t1yJ614tPCu6.olX95FiRvRF45wYkNqrxEbWVdi2Q0g-1662840033-0-ASoFptYePlGroPlSdoF3OwHMQpp4Gt2w9jPz+WPR3q5tuR1JrOVZuw6WbghTMjWQ1mjgIsXMy7pONuctNpq0zig=; CMSPreferredCulture=nn-NO; CMSCsrfCookie=e4JKSuUs1N5gPbvQzpHPnr2xfOM8QUiWHTl1Tifd; ASP.NET_SessionId=guxg1qqlhcofz5d4dzajiuyo; CMSCurrentTheme=base-jpc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Sep 2022 20:00:34 GMT
content-type: image/webp
content-length: 5920
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=52363
content-disposition: inline; filename="en_qrios_ca.webp"
etag: "e7fd4a94c8e5d71:0"
last-modified: Tue, 30 Nov 2021 08:59:27 GMT
vary: Accept
x-frame-options: SAMEORIGIN
x-powered-by: ASP.NET
cf-cache-status: HIT
age: 57
expires: Sun, 11 Sep 2022 00:00:34 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
server: cloudflare
cf-ray: 748ac025ede3992a-ARN
X-Firefox-Spdy: h2
www.jackpotcitycasino.com/ldnjpc/media/jpc19/en_qrapk_ca.png
200 OK 5.9 kB URL HTTP/2 www.jackpotcitycasino.com/ldnjpc/media/jpc19/en_qrapk_ca.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 322be6e9aa750752b41a0d533aacaf5e
4153d323300da0d5e8c40fbccaeeaacfa5843d4e
a0b5510ed1aa49062b8256b47e136605d6668847a0109bac50930ca26e1ad636
GET /ldnjpc/media/jpc19/en_qrapk_ca.png HTTP/1.1
Host: www.jackpotcitycasino.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jackpotcitycasino.com/norge/
Cookie: Visit=visitId%3d91f8c434-45c2-44e4-8d45-4bd850a1865f%26eventId%3dJCTYPEINTRAFFIC%26promoId%3d24408%26s%3daff20307%26a%3dbfpadid94318%26b%3dJCTYPEINTRAFFIC; GA-Details=null; __cf_bm=t1yJ614tPCu6.olX95FiRvRF45wYkNqrxEbWVdi2Q0g-1662840033-0-ASoFptYePlGroPlSdoF3OwHMQpp4Gt2w9jPz+WPR3q5tuR1JrOVZuw6WbghTMjWQ1mjgIsXMy7pONuctNpq0zig=; CMSPreferredCulture=nn-NO; CMSCsrfCookie=e4JKSuUs1N5gPbvQzpHPnr2xfOM8QUiWHTl1Tifd; ASP.NET_SessionId=guxg1qqlhcofz5d4dzajiuyo; CMSCurrentTheme=base-jpc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Sep 2022 20:00:34 GMT
content-type: image/webp
content-length: 5906
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=52488
content-disposition: inline; filename="en_qrapk_ca.webp"
etag: "d9d01494c8e5d71:0"
last-modified: Tue, 30 Nov 2021 08:59:27 GMT
vary: Accept
x-frame-options: SAMEORIGIN
x-powered-by: ASP.NET
cf-cache-status: HIT
age: 57
expires: Sun, 11 Sep 2022 00:00:34 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
server: cloudflare
cf-ray: 748ac025ede5992a-ARN
X-Firefox-Spdy: h2
www.jackpotcitycasino.com/cdn-cgi/image/width=332/ldnjpc/media/jpc19/jpc_logo.png
200 OK 10 kB URL HTTP/2 www.jackpotcitycasino.com/cdn-cgi/image/width=332/ldnjpc/media/jpc19/jpc_logo.png
IP
File type PNG image data, 320 x 130, 8-bit colormap, non-interlaced\012- data
Hash 65830210bd0f2139ceeef676a9da840d
da40832fe1e6280ec019bb9f227c6ebceee07e0d
36d95ce8b86ca53e310c1cc8c9bf88c9d6e33b023334b5e1ce85fb778192dfe0
GET /cdn-cgi/image/width=332/ldnjpc/media/jpc19/jpc_logo.png HTTP/1.1
Host: www.jackpotcitycasino.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jackpotcitycasino.com/norge/
Cookie: Visit=visitId%3d91f8c434-45c2-44e4-8d45-4bd850a1865f%26eventId%3dJCTYPEINTRAFFIC%26promoId%3d24408%26s%3daff20307%26a%3dbfpadid94318%26b%3dJCTYPEINTRAFFIC; GA-Details=null; __cf_bm=t1yJ614tPCu6.olX95FiRvRF45wYkNqrxEbWVdi2Q0g-1662840033-0-ASoFptYePlGroPlSdoF3OwHMQpp4Gt2w9jPz+WPR3q5tuR1JrOVZuw6WbghTMjWQ1mjgIsXMy7pONuctNpq0zig=; CMSPreferredCulture=nn-NO; CMSCsrfCookie=e4JKSuUs1N5gPbvQzpHPnr2xfOM8QUiWHTl1Tifd; ASP.NET_SessionId=guxg1qqlhcofz5d4dzajiuyo; CMSCurrentTheme=base-jpc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Sep 2022 20:00:34 GMT
content-type: image/png
content-length: 9990
cf-ray: 748ac025edea992a-ARN
accept-ranges: bytes
cache-control: public, max-age=14400
etag: "cfRUiNIcYbcc8prDT1pGdIwg:61135a542af7d71:0"
last-modified: Wed, 22 Dec 2021 11:52:00 GMT
vary: Accept, Accept-Encoding
cf-cache-status: HIT
cf-bgj: imgq:100,h2pri
cf-resized: internal=ok/h q=0 n=16 c=13 v=2022.8.4 l=9990
content-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'
x-content-type-options: nosniff
server: cloudflare
X-Firefox-Spdy: h2
www.jackpotcitycasino.com/CMSScripts/Custom/jpc-app.es5.min.js
200 OK 5.6 kB URL HTTP/2 www.jackpotcitycasino.com/CMSScripts/Custom/jpc-app.es5.min.js
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (15192), with no line terminators
Hash 9032449d9f62f2ddb35f97bde87d914f
7b391dbe3248b55f9396983ca8210953c90dcebc
93061e4247b2059bf3e10d57e1dad9bf3ea14b6e71e89c0d8bb6caf153b938dc
GET /CMSScripts/Custom/jpc-app.es5.min.js HTTP/1.1
Host: www.jackpotcitycasino.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jackpotcitycasino.com/norge/
Cookie: Visit=visitId%3d91f8c434-45c2-44e4-8d45-4bd850a1865f%26eventId%3dJCTYPEINTRAFFIC%26promoId%3d24408%26s%3daff20307%26a%3dbfpadid94318%26b%3dJCTYPEINTRAFFIC; GA-Details=null; __cf_bm=t1yJ614tPCu6.olX95FiRvRF45wYkNqrxEbWVdi2Q0g-1662840033-0-ASoFptYePlGroPlSdoF3OwHMQpp4Gt2w9jPz+WPR3q5tuR1JrOVZuw6WbghTMjWQ1mjgIsXMy7pONuctNpq0zig=; CMSPreferredCulture=nn-NO; CMSCsrfCookie=e4JKSuUs1N5gPbvQzpHPnr2xfOM8QUiWHTl1Tifd; ASP.NET_SessionId=guxg1qqlhcofz5d4dzajiuyo; CMSCurrentTheme=base-jpc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Sep 2022 20:00:34 GMT
content-type: application/javascript
content-length: 5568
content-encoding: gzip
last-modified: Thu, 28 Jul 2022 10:07:22 GMT
etag: "aded19d469a2d81:0"
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
x-powered-by: ASP.NET
cf-cache-status: HIT
age: 568
expires: Sun, 11 Sep 2022 00:00:34 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
server: cloudflare
cf-ray: 748ac0260e1c992a-ARN
X-Firefox-Spdy: h2
www.jackpotcitycasino.com/cdn-cgi/image/width=972/ldnjpc/media/jpc19/jackpot-ticker-bg.png
200 OK 98 kB URL HTTP/2 www.jackpotcitycasino.com/cdn-cgi/image/width=972/ldnjpc/media/jpc19/jackpot-ticker-bg.png
IP
File type PNG image data, 972 x 436, 8-bit colormap, non-interlaced\012- data
Hash 49e1d129e06b07b317e5fe19389ae2ca
3e6a71bdc203247e7655a267b1ea8204d59c09b5
b652e61c4df01ff36ac24a3472514d3a0d3a9e509543fd6060c68aa9f2919cdc
GET /cdn-cgi/image/width=972/ldnjpc/media/jpc19/jackpot-ticker-bg.png HTTP/1.1
Host: www.jackpotcitycasino.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jackpotcitycasino.com/norge/
Cookie: Visit=visitId%3d91f8c434-45c2-44e4-8d45-4bd850a1865f%26eventId%3dJCTYPEINTRAFFIC%26promoId%3d24408%26s%3daff20307%26a%3dbfpadid94318%26b%3dJCTYPEINTRAFFIC; GA-Details=null; __cf_bm=t1yJ614tPCu6.olX95FiRvRF45wYkNqrxEbWVdi2Q0g-1662840033-0-ASoFptYePlGroPlSdoF3OwHMQpp4Gt2w9jPz+WPR3q5tuR1JrOVZuw6WbghTMjWQ1mjgIsXMy7pONuctNpq0zig=; CMSPreferredCulture=nn-NO; CMSCsrfCookie=e4JKSuUs1N5gPbvQzpHPnr2xfOM8QUiWHTl1Tifd; ASP.NET_SessionId=guxg1qqlhcofz5d4dzajiuyo; CMSCurrentTheme=base-jpc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Sep 2022 20:00:34 GMT
content-type: image/png
content-length: 97826
cf-ray: 748ac025edee992a-ARN
accept-ranges: bytes
cache-control: public, max-age=14400
etag: "cf6XHhv05-s883r0xRnPojCA:2096cba8c8e5d71:0"
last-modified: Tue, 30 Nov 2021 09:00:01 GMT
vary: Accept, Accept-Encoding
cf-cache-status: HIT
cf-bgj: imgq:76,h2pri
cf-resized: internal=ok/h q=0 n=56 c=214 v=2022.8.4 l=97826
content-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'
x-content-type-options: nosniff
server: cloudflare
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/fetch/2.0.3/fetch.js
200 OK 2.9 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/fetch/2.0.3/fetch.js
IP
Hash 19e2a5bfbd5e778294ed2e904266b549
5c1f7e7587e6a03d37335858d6378432354c2b21
92244b889ecd27c615bc644d7a658e1447e3b39b8262c04d260f98d37b7fc00d
GET /ajax/libs/fetch/2.0.3/fetch.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jackpotcitycasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 10 Sep 2022 20:00:34 GMT
content-type: application/javascript; charset=utf-8
content-length: 2864
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e59-3188"
last-modified: Mon, 04 May 2020 16:10:01 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 12131156
expires: Thu, 31 Aug 2023 20:00:34 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8YX9hNLFscnfJSPwzwzttESss3xbwx5mPwSpXfKYIzD%2FJmwIVLsjg4RRp74VDpF6JnpjxKRa3IBnb97z5OgE9tYABYbFwB7pHH98ftuhs%2BJ8UP%2F3ZnRO%2BWSlY0MBGhbwFbl2KzJR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 748ac026395b0b55-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.jackpotcitycasino.com/cdn-cgi/image/width=77/ldnjpc/media/jpc19/go-to-top.png
200 OK 2.7 kB URL HTTP/2 www.jackpotcitycasino.com/cdn-cgi/image/width=77/ldnjpc/media/jpc19/go-to-top.png
IP
File type PNG image data, 77 x 77, 8-bit/color RGBA, non-interlaced\012- data
Hash 8243d91793940fb44b00a1d9eb086138
0998443d756501a12ce8e7779df4f876817d4f68
020d723f9470261da615fc497cf84d99a89b4e390c23d9bb4f00f90f68456f1f
GET /cdn-cgi/image/width=77/ldnjpc/media/jpc19/go-to-top.png HTTP/1.1
Host: www.jackpotcitycasino.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jackpotcitycasino.com/norge/
Cookie: Visit=visitId%3d91f8c434-45c2-44e4-8d45-4bd850a1865f%26eventId%3dJCTYPEINTRAFFIC%26promoId%3d24408%26s%3daff20307%26a%3dbfpadid94318%26b%3dJCTYPEINTRAFFIC; GA-Details=null; __cf_bm=t1yJ614tPCu6.olX95FiRvRF45wYkNqrxEbWVdi2Q0g-1662840033-0-ASoFptYePlGroPlSdoF3OwHMQpp4Gt2w9jPz+WPR3q5tuR1JrOVZuw6WbghTMjWQ1mjgIsXMy7pONuctNpq0zig=; CMSPreferredCulture=nn-NO; CMSCsrfCookie=e4JKSuUs1N5gPbvQzpHPnr2xfOM8QUiWHTl1Tifd; ASP.NET_SessionId=guxg1qqlhcofz5d4dzajiuyo; CMSCurrentTheme=base-jpc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Sep 2022 20:00:34 GMT
content-type: image/png
content-length: 2667
cf-ray: 748ac025eddf992a-ARN
accept-ranges: bytes
cache-control: public, max-age=14400
etag: "cfqePjZdl0H5l8LAjzniZDrQ:586b179cc8e5d71:0"
last-modified: Tue, 30 Nov 2021 08:59:40 GMT
vary: Accept, Accept-Encoding
cf-cache-status: HIT
cf-bgj: imgq:100,h2pri
cf-resized: internal=ok/h q=0 n=36 c=8 v=2022.8.4 l=2667
content-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'
x-content-type-options: nosniff
server: cloudflare
X-Firefox-Spdy: h2
www.jackpotcitycasino.com/cdn-cgi/image/width=77/ldnjpc/media/jpc19/go-to-chat.png
200 OK 3.9 kB URL HTTP/2 www.jackpotcitycasino.com/cdn-cgi/image/width=77/ldnjpc/media/jpc19/go-to-chat.png
IP
File type PNG image data, 77 x 77, 8-bit/color RGBA, non-interlaced\012- data
Hash b98afdc8e097023acc34e3531554650d
0a83088691a3a71dc4a6587888a0f793426da081
d9321ffd1b2d53e04a4a53ec51747cdca5fed61c64e046d0e5352e63fd7e59ac
GET /cdn-cgi/image/width=77/ldnjpc/media/jpc19/go-to-chat.png HTTP/1.1
Host: www.jackpotcitycasino.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jackpotcitycasino.com/norge/
Cookie: Visit=visitId%3d91f8c434-45c2-44e4-8d45-4bd850a1865f%26eventId%3dJCTYPEINTRAFFIC%26promoId%3d24408%26s%3daff20307%26a%3dbfpadid94318%26b%3dJCTYPEINTRAFFIC; GA-Details=null; __cf_bm=t1yJ614tPCu6.olX95FiRvRF45wYkNqrxEbWVdi2Q0g-1662840033-0-ASoFptYePlGroPlSdoF3OwHMQpp4Gt2w9jPz+WPR3q5tuR1JrOVZuw6WbghTMjWQ1mjgIsXMy7pONuctNpq0zig=; CMSPreferredCulture=nn-NO; CMSCsrfCookie=e4JKSuUs1N5gPbvQzpHPnr2xfOM8QUiWHTl1Tifd; ASP.NET_SessionId=guxg1qqlhcofz5d4dzajiuyo; CMSCurrentTheme=base-jpc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Sep 2022 20:00:34 GMT
content-type: image/png
content-length: 3877
cf-ray: 748ac025ede1992a-ARN
accept-ranges: bytes
cache-control: public, max-age=14400
etag: "cf3RWa58RqrlQNfiG6hmMkhw:289dbd9bc8e5d71:0"
last-modified: Tue, 30 Nov 2021 08:59:39 GMT
vary: Accept, Accept-Encoding
cf-cache-status: HIT
cf-bgj: imgq:100,h2pri
cf-resized: internal=ok/h q=0 n=9 c=4 v=2022.8.4 l=3877
content-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'
x-content-type-options: nosniff
server: cloudflare
X-Firefox-Spdy: h2
www.jackpotcitycasino.com/cdn-cgi/image/width=1536/ldnjpc/media/jpc19/triangle_black.png?ext=.png
200 OK 5.1 kB URL HTTP/2 www.jackpotcitycasino.com/cdn-cgi/image/width=1536/ldnjpc/media/jpc19/triangle_black.png?ext=.png
IP
File type PNG image data, 1536 x 171, 8-bit colormap, non-interlaced\012- data
Hash dfae6f21deb49ebf8c778083ab9d7a8b
de6a1f3cd699137d8c87afad9f84a2f9b8687cfe
12def5fc0ea7d10a064fd912d20d694c2bdd85c49bcaf086dabf6295e2f56a01
GET /cdn-cgi/image/width=1536/ldnjpc/media/jpc19/triangle_black.png?ext=.png HTTP/1.1
Host: www.jackpotcitycasino.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jackpotcitycasino.com/norge/
Cookie: Visit=visitId%3d91f8c434-45c2-44e4-8d45-4bd850a1865f%26eventId%3dJCTYPEINTRAFFIC%26promoId%3d24408%26s%3daff20307%26a%3dbfpadid94318%26b%3dJCTYPEINTRAFFIC; GA-Details=null; __cf_bm=t1yJ614tPCu6.olX95FiRvRF45wYkNqrxEbWVdi2Q0g-1662840033-0-ASoFptYePlGroPlSdoF3OwHMQpp4Gt2w9jPz+WPR3q5tuR1JrOVZuw6WbghTMjWQ1mjgIsXMy7pONuctNpq0zig=; CMSPreferredCulture=nn-NO; CMSCsrfCookie=e4JKSuUs1N5gPbvQzpHPnr2xfOM8QUiWHTl1Tifd; ASP.NET_SessionId=guxg1qqlhcofz5d4dzajiuyo; CMSCurrentTheme=base-jpc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Sep 2022 20:00:34 GMT
content-type: image/png
content-length: 5118
cf-ray: 748ac025fdfe992a-ARN
accept-ranges: bytes
cache-control: public, max-age=14400
etag: "cfRnQkoIAGmsjG3HLOHgbPAA:f491d6d5c8e5d71:0"
last-modified: Tue, 30 Nov 2021 09:01:17 GMT
vary: Accept, Accept-Encoding
cf-cache-status: HIT
cf-bgj: imgq:100,h2pri
cf-resized: internal=ok/h q=0 n=13 c=34 v=2022.8.4 l=5118
content-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'
x-content-type-options: nosniff
server: cloudflare
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/es6-shim/0.35.5/es6-shim.min.js
200 OK 15 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/es6-shim/0.35.5/es6-shim.min.js
IP
File type ASCII text, with very long lines (32017)
Hash 3b3c747a92bbfa4afac282c940af0f4b
b424f3b284e3578f90a980e332cd4bc97e384f62
a80b515ec1cf0fc3247a9b61222fea4756167e0e577be4daad723fdf91bba4f2
GET /ajax/libs/es6-shim/0.35.5/es6-shim.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jackpotcitycasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 10 Sep 2022 20:00:34 GMT
content-type: application/javascript; charset=utf-8
content-length: 14636
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e54-e119"
last-modified: Mon, 04 May 2020 16:09:56 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 23769501
expires: Thu, 31 Aug 2023 20:00:34 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=c5XI8AojCgwC049SVHjef0rWHufhVg%2BQiTqXh1wD%2FuZ75iRZQ%2BPrtDhreM5ZBv%2BLUABCsRdGk5R5AzylJLNUdquqGwB8WZUanW1BujR%2F0z7JZ9G6KZl4LN4JMqKtmCopKEqqRoB4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 748ac02679980b55-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.jackpotcitycasino.com/CMSPages/GetResource.ashx?_webparts=1682
200 OK 4.0 kB URL HTTP/2 www.jackpotcitycasino.com/CMSPages/GetResource.ashx?_webparts=1682
IP
File type ASCII text, with very long lines (19951), with no line terminators
Hash 34dccf3b8e7e0a68db47a7cc10cec501
98000cae203fab8b409bc0b06fa9d5656808773c
9c77a3b71cd46eaeac0db2b3cedd742af548fc6217478676b8964d8ff35119cd
GET /CMSPages/GetResource.ashx?_webparts=1682 HTTP/1.1
Host: www.jackpotcitycasino.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jackpotcitycasino.com/norge/
Cookie: Visit=visitId%3d91f8c434-45c2-44e4-8d45-4bd850a1865f%26eventId%3dJCTYPEINTRAFFIC%26promoId%3d24408%26s%3daff20307%26a%3dbfpadid94318%26b%3dJCTYPEINTRAFFIC; GA-Details=null; __cf_bm=t1yJ614tPCu6.olX95FiRvRF45wYkNqrxEbWVdi2Q0g-1662840033-0-ASoFptYePlGroPlSdoF3OwHMQpp4Gt2w9jPz+WPR3q5tuR1JrOVZuw6WbghTMjWQ1mjgIsXMy7pONuctNpq0zig=; CMSPreferredCulture=nn-NO; CMSCsrfCookie=e4JKSuUs1N5gPbvQzpHPnr2xfOM8QUiWHTl1Tifd; ASP.NET_SessionId=guxg1qqlhcofz5d4dzajiuyo; CMSCurrentTheme=base-jpc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Sep 2022 20:00:34 GMT
content-type: text/css; charset=utf-8
content-length: 3989
cache-control: public, must-revalidate
content-encoding: gzip
expires: Sun, 11 Sep 2022 08:00:34 GMT
last-modified: Fri, 29 Jul 2022 09:59:44 GMT
etag: "webpart|SliderGameBox"
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
content-disposition: attachment; filename="SliderGameBox.css"
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 748ac025ddd4992a-ARN
X-Firefox-Spdy: h2
cdn.jsdelivr.net/bluebird/latest/bluebird.min.js
200 OK 23 kB URL HTTP/2 cdn.jsdelivr.net/bluebird/latest/bluebird.min.js
IP
File type ASCII text, with very long lines (32137), with escape sequences
Hash a29547f2b2be7f95207d161b0fd13b22
13d47c602815fef89f43d9a2b9000e03c707fcab
5ade47bfd01b556d02135169a9c4bac369cce30581248f85e17f868235503f02
GET /bluebird/latest/bluebird.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jackpotcitycasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
etag: W/"136ba-PRhqxtJEaRdUMD0xU4Ob9CtX99E"
content-encoding: gzip
accept-ranges: bytes
date: Sat, 10 Sep 2022 20:00:34 GMT
age: 2834732
x-served-by: cache-fra19130-FRA, cache-bma1653-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
content-length: 22719
X-Firefox-Spdy: h2
cdn.jsdelivr.net/npm/vanilla-lazyload@17.3.1/dist/lazyload.min.js
200 OK 2.7 kB URL HTTP/2 cdn.jsdelivr.net/npm/vanilla-lazyload@17.3.1/dist/lazyload.min.js
IP
File type ASCII text, with very long lines (7520)
Hash 9394c5bbb10d8f00fd9c7dfb081c0b97
00ef5cbe3fbbb4c97698da82f9c2708bdf6685db
25c3b4853204b2467c9cade6c97e1d7147cda712757479e6a534847599fe9342
GET /npm/vanilla-lazyload@17.3.1/dist/lazyload.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jackpotcitycasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 17.3.1
x-jsd-version-type: version
etag: W/"1d61-wcBCP//7m5LJeuNOb3Rtiff9UGo"
content-encoding: gzip
accept-ranges: bytes
date: Sat, 10 Sep 2022 20:00:34 GMT
age: 14324134
x-served-by: cache-fra19129-FRA, cache-bma1653-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
content-length: 2683
X-Firefox-Spdy: h2
cdn.jsdelivr.net/npm/intersection-observer@0.7.0/intersection-observer.js
200 OK 6.4 kB URL HTTP/2 cdn.jsdelivr.net/npm/intersection-observer@0.7.0/intersection-observer.js
IP
Hash ac81b4d34b19db46b96a22067f1be5d6
c2e81213b13853a94e0506faf7a6ed880e613338
c1f13c36f6b855a73477ed906a19106ef059e9d8bb1dc0339432fa67bfc6b008
GET /npm/intersection-observer@0.7.0/intersection-observer.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jackpotcitycasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 0.7.0
x-jsd-version-type: version
etag: W/"57ad-m3EaUx6495LHE8zS0+QpFP8kqM0"
content-encoding: gzip
accept-ranges: bytes
date: Sat, 10 Sep 2022 20:00:34 GMT
age: 13105141
x-served-by: cache-fra19180-FRA, cache-bma1653-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
content-length: 6401
X-Firefox-Spdy: h2
cdn.jsdelivr.net/npm/babel-regenerator-runtime@6.5.0/runtime.js
200 OK 6.2 kB URL HTTP/2 cdn.jsdelivr.net/npm/babel-regenerator-runtime@6.5.0/runtime.js
IP
Hash bb2472a1c4d2e7d85f43ef7d9ee5b548
02c4eebe845643dfe199495f684bfa8544e153f9
17f92e5e8e94b1ae680036bd64cc56821db711e1a1dc1034d255596da29b4acd
GET /npm/babel-regenerator-runtime@6.5.0/runtime.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jackpotcitycasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 6.5.0
x-jsd-version-type: version
etag: W/"53cd-XOwSN/ws1IIGTvt4xVCWVg/9RBk"
content-encoding: gzip
accept-ranges: bytes
date: Sat, 10 Sep 2022 20:00:34 GMT
age: 3440808
x-served-by: cache-fra19154-FRA, cache-bma1653-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
content-length: 6223
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 32d76dc1d98ec6e5b395e1456443acc4
9af87a5b625944bf1f600f5d048244bc4426743b
8c639403a33ef955d277a343a3ebd77443fc48477103f3c3c7ee58797c2f3452
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5080
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 10 Sep 2022 20:00:34 GMT
Last-Modified: Sat, 10 Sep 2022 18:35:54 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 279
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
200 OK 1.5 kB URL HTTP/1.1 ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
IP
Hash c9cf6940ebb1e0180f8f61f96575800f
d0828285a6725bc2a27b8a3265570bf5e2b18011
a391a381d915b702b6e7220a4020a871ddb1bb132a6b92d3edddb580ead8da45
POST /ca/gsatlasr3dvtlsca2022q1 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 10 Sep 2022 20:00:34 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "2B334171E1683D7A1108B2D754CDB6D2BA47EF83"
Expires: Sun, 11 Sep 2022 06:00:00 GMT
Last-Modified: Sat, 10 Sep 2022 18:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 2261
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 748ac026eb240b06-OSL
www.jackpotcitycasino.com/CMSPages/GetResource.ashx?stylesheetname=icons-menu
200 OK 1.3 kB URL HTTP/2 www.jackpotcitycasino.com/CMSPages/GetResource.ashx?stylesheetname=icons-menu
IP
File type Unicode text, UTF-8 text, with very long lines (6121), with no line terminators
Hash fd56c3b77a3054d4f39eefdb080b60ca
45c935b56c9b0266c21e7f1fee885820f5ca9e72
f2cbc04397d83a4dd20b8f2c04294c0557d2f3e89c8629886e6b32e60bfb82e3
GET /CMSPages/GetResource.ashx?stylesheetname=icons-menu HTTP/1.1
Host: www.jackpotcitycasino.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jackpotcitycasino.com/norge/
Cookie: Visit=visitId%3d91f8c434-45c2-44e4-8d45-4bd850a1865f%26eventId%3dJCTYPEINTRAFFIC%26promoId%3d24408%26s%3daff20307%26a%3dbfpadid94318%26b%3dJCTYPEINTRAFFIC; GA-Details=null; __cf_bm=t1yJ614tPCu6.olX95FiRvRF45wYkNqrxEbWVdi2Q0g-1662840033-0-ASoFptYePlGroPlSdoF3OwHMQpp4Gt2w9jPz+WPR3q5tuR1JrOVZuw6WbghTMjWQ1mjgIsXMy7pONuctNpq0zig=; CMSPreferredCulture=nn-NO; CMSCsrfCookie=e4JKSuUs1N5gPbvQzpHPnr2xfOM8QUiWHTl1Tifd; ASP.NET_SessionId=guxg1qqlhcofz5d4dzajiuyo; CMSCurrentTheme=base-jpc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Sep 2022 20:00:34 GMT
content-type: text/css; charset=utf-8
content-length: 1301
cache-control: public, must-revalidate
content-encoding: gzip
expires: Sun, 11 Sep 2022 08:00:34 GMT
last-modified: Wed, 06 Oct 2021 14:14:48 GMT
etag: "cssstylesheet|18c2aa69-b20f-40ba-9602-0b5170791548"
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
content-disposition: attachment; filename="Icons-menu.css"
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 748ac025ddcf992a-ARN
X-Firefox-Spdy: h2
media.rechannelapi.com/plugins/eprivacy/eprivacy-custom.js
200 OK 7.7 kB URL HTTP/2 media.rechannelapi.com/plugins/eprivacy/eprivacy-custom.js
IP
File type ASCII text, with CRLF line terminators
Hash ad9109dbee39d873c21c379f1f0349b4
9a97d07b8ebaf0d7574a98925299f1dc0ebab1fc
5154684032be22b6793dd5925f90aefd875d14685cf01c875fc2730144db850b
GET /plugins/eprivacy/eprivacy-custom.js HTTP/1.1
Host: media.rechannelapi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jackpotcitycasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 10 Sep 2022 20:00:34 GMT
content-type: application/javascript
content-length: 7731
content-encoding: gzip
last-modified: Thu, 11 Aug 2022 12:41:27 GMT
etag: "80b543ac7fadd81:0"
vary: Accept-Encoding
x-powered-by: ASP.NET
access-control-allow-origin: *
cf-cache-status: HIT
age: 2625
expires: Sun, 11 Sep 2022 00:00:34 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
set-cookie: __cf_bm=5pOMcifXtstI1SsgHb519Q3Sy6vFegfteYytTZNFouo-1662840034-0-AWcX2/SkveY9spTQTKL0gYnWnmh0XCigqbJLtb6ta09McFcGKu+T2cahTEi/CMsMRBM1AKHkzwDbWGKF02HZdhaJr7SkMRd25F591WtuwiOH; path=/; expires=Sat, 10-Sep-22 20:30:34 GMT; domain=.rechannelapi.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 748ac026e99bb511-OSL
X-Firefox-Spdy: h2
www.jackpotcitycasino.com/WebResource.axd?d=pynGkmcFUV13He1Qd6_TZNS5f5ctxX_ni3VYMU_tlSDXGQcq5ylmn5O4DPL2lKiWK4Hljz-NUsagOyWw0D2e7w2&t=637823437705833095
200 OK 6.0 kB URL HTTP/2 www.jackpotcitycasino.com/WebResource.axd?d=pynGkmcFUV13He1Qd6_TZNS5f5ctxX_ni3VYMU_tlSDXGQcq5ylmn5O4DPL2lKiWK4Hljz-NUsagOyWw0D2e7w2&t=637823437705833095
IP
File type ASCII text, with CRLF line terminators
Hash 06fd446079195e9866f38728a31b8416
bce7935598a51703a7077dd75e1d30882533c6e1
5466d19b6349cc09de47de356c3195b2fd367a5ab8f1c55e8aaf2f296915d46d
GET /WebResource.axd?d=pynGkmcFUV13He1Qd6_TZNS5f5ctxX_ni3VYMU_tlSDXGQcq5ylmn5O4DPL2lKiWK4Hljz-NUsagOyWw0D2e7w2&t=637823437705833095 HTTP/1.1
Host: www.jackpotcitycasino.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jackpotcitycasino.com/norge/
Cookie: Visit=visitId%3d91f8c434-45c2-44e4-8d45-4bd850a1865f%26eventId%3dJCTYPEINTRAFFIC%26promoId%3d24408%26s%3daff20307%26a%3dbfpadid94318%26b%3dJCTYPEINTRAFFIC; GA-Details=null; __cf_bm=t1yJ614tPCu6.olX95FiRvRF45wYkNqrxEbWVdi2Q0g-1662840033-0-ASoFptYePlGroPlSdoF3OwHMQpp4Gt2w9jPz+WPR3q5tuR1JrOVZuw6WbghTMjWQ1mjgIsXMy7pONuctNpq0zig=; CMSPreferredCulture=nn-NO; CMSCsrfCookie=e4JKSuUs1N5gPbvQzpHPnr2xfOM8QUiWHTl1Tifd; ASP.NET_SessionId=guxg1qqlhcofz5d4dzajiuyo; CMSCurrentTheme=base-jpc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Sep 2022 20:00:34 GMT
content-type: application/x-javascript
content-length: 6007
cache-control: public
content-encoding: gzip
expires: Sun, 10 Sep 2023 05:28:15 GMT
last-modified: Tue, 08 Mar 2022 11:42:50 GMT
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 748ac025ddd7992a-ARN
X-Firefox-Spdy: h2
www.jackpotcitycasino.com/CMSPages/GetResource.ashx?_webpartlayouts=660;669;658
200 OK 691 B URL HTTP/2 www.jackpotcitycasino.com/CMSPages/GetResource.ashx?_webpartlayouts=660;669;658
IP
File type ASCII text, with very long lines (1549), with no line terminators
Hash 1735f8ba04196b8c71d2ca224d72e54c
57e676bbaa9a2c91c773b3276947aa040000834d
3c80365c0f50f65d7934a6533010dcc875dc8d1b8c5d5893da7e09df89993304
GET /CMSPages/GetResource.ashx?_webpartlayouts=660;669;658 HTTP/1.1
Host: www.jackpotcitycasino.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jackpotcitycasino.com/norge/
Cookie: Visit=visitId%3d91f8c434-45c2-44e4-8d45-4bd850a1865f%26eventId%3dJCTYPEINTRAFFIC%26promoId%3d24408%26s%3daff20307%26a%3dbfpadid94318%26b%3dJCTYPEINTRAFFIC; GA-Details=null; __cf_bm=t1yJ614tPCu6.olX95FiRvRF45wYkNqrxEbWVdi2Q0g-1662840033-0-ASoFptYePlGroPlSdoF3OwHMQpp4Gt2w9jPz+WPR3q5tuR1JrOVZuw6WbghTMjWQ1mjgIsXMy7pONuctNpq0zig=; CMSPreferredCulture=nn-NO; CMSCsrfCookie=e4JKSuUs1N5gPbvQzpHPnr2xfOM8QUiWHTl1Tifd; ASP.NET_SessionId=guxg1qqlhcofz5d4dzajiuyo; CMSCurrentTheme=base-jpc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Sep 2022 20:00:34 GMT
content-type: text/css; charset=utf-8
content-length: 691
cache-control: public, must-revalidate
content-encoding: gzip
expires: Sun, 11 Sep 2022 08:00:34 GMT
last-modified: Mon, 22 Aug 2022 14:11:00 GMT
etag: "webpartlayout|338718b6-d5dd-4c98-b04d-97c60749b2a6|webpartlayout|06a28ae7-9ea6-4cb6-b6b3-f05fdbb38796|webpartlayout|437b2a43-44c6-460e-ba58-ffe48e532de1"
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
content-disposition: attachment; filename="components.css"
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 748ac025ddd5992a-ARN
X-Firefox-Spdy: h2
www.jackpotcitycasino.com/ScriptResource.axd?d=dwY9oWetJoJoVpgL6Zq8OB1rAH1FwSU1_Gq368bvSDUlD0hOeRYDMrvX61htATBOVrbYrg3Ant-M79fCPpqrDPhOSQ9-Io0Foj7xOTOHBjBJ8UioqL2_MNqOr3DYjpxmtoAlBVLNxVg9K2kp-eH5_7btKfOMkIs2B28AWYTBz7I1&t=ffffffffaa493ab8
200 OK 10 kB URL HTTP/2 www.jackpotcitycasino.com/ScriptResource.axd?d=dwY9oWetJoJoVpgL6Zq8OB1rAH1FwSU1_Gq368bvSDUlD0hOeRYDMrvX61htATBOVrbYrg3Ant-M79fCPpqrDPhOSQ9-Io0Foj7xOTOHBjBJ8UioqL2_MNqOr3DYjpxmtoAlBVLNxVg9K2kp-eH5_7btKfOMkIs2B28AWYTBz7I1&t=ffffffffaa493ab8
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (39257), with CRLF line terminators
Hash 027a7d52e1ceed8aef7dc13505b81d36
33cf0bce6a4c8b44b4a80b3116c978c12ee93fd0
29061464fb6fce2326b952eacaa95c3c6183bfea74c3851390e9838720d372a6
GET /ScriptResource.axd?d=dwY9oWetJoJoVpgL6Zq8OB1rAH1FwSU1_Gq368bvSDUlD0hOeRYDMrvX61htATBOVrbYrg3Ant-M79fCPpqrDPhOSQ9-Io0Foj7xOTOHBjBJ8UioqL2_MNqOr3DYjpxmtoAlBVLNxVg9K2kp-eH5_7btKfOMkIs2B28AWYTBz7I1&t=ffffffffaa493ab8 HTTP/1.1
Host: www.jackpotcitycasino.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jackpotcitycasino.com/norge/
Cookie: Visit=visitId%3d91f8c434-45c2-44e4-8d45-4bd850a1865f%26eventId%3dJCTYPEINTRAFFIC%26promoId%3d24408%26s%3daff20307%26a%3dbfpadid94318%26b%3dJCTYPEINTRAFFIC; GA-Details=null; __cf_bm=t1yJ614tPCu6.olX95FiRvRF45wYkNqrxEbWVdi2Q0g-1662840033-0-ASoFptYePlGroPlSdoF3OwHMQpp4Gt2w9jPz+WPR3q5tuR1JrOVZuw6WbghTMjWQ1mjgIsXMy7pONuctNpq0zig=; CMSPreferredCulture=nn-NO; CMSCsrfCookie=e4JKSuUs1N5gPbvQzpHPnr2xfOM8QUiWHTl1Tifd; ASP.NET_SessionId=guxg1qqlhcofz5d4dzajiuyo; CMSCurrentTheme=base-jpc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Sep 2022 20:00:34 GMT
content-type: application/x-javascript
content-length: 9984
cache-control: public
content-encoding: gzip
expires: Sun, 10 Sep 2023 05:28:16 GMT
last-modified: Sat, 10 Sep 2022 05:28:16 GMT
x-frame-options: SAMEORIGIN
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 748ac025dddb992a-ARN
X-Firefox-Spdy: h2
www.jackpotcitycasino.com/CMSPages/GetResource.ashx?stylesheetname=base-jpc
200 OK 17 kB URL HTTP/2 www.jackpotcitycasino.com/CMSPages/GetResource.ashx?stylesheetname=base-jpc
IP
File type Unicode text, UTF-8 text, with very long lines (62522), with no line terminators
Hash 868b7f993627c520f3900d729f08fd85
389ced3c6139cfaa181f0dc378be44b9e51f3261
7a2ee217b6a080ae936f7cc41ae94da20736e2002eeeaee04d7227dfcc960509
GET /CMSPages/GetResource.ashx?stylesheetname=base-jpc HTTP/1.1
Host: www.jackpotcitycasino.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jackpotcitycasino.com/norge/
Cookie: Visit=visitId%3d91f8c434-45c2-44e4-8d45-4bd850a1865f%26eventId%3dJCTYPEINTRAFFIC%26promoId%3d24408%26s%3daff20307%26a%3dbfpadid94318%26b%3dJCTYPEINTRAFFIC; GA-Details=null; __cf_bm=t1yJ614tPCu6.olX95FiRvRF45wYkNqrxEbWVdi2Q0g-1662840033-0-ASoFptYePlGroPlSdoF3OwHMQpp4Gt2w9jPz+WPR3q5tuR1JrOVZuw6WbghTMjWQ1mjgIsXMy7pONuctNpq0zig=; CMSPreferredCulture=nn-NO; CMSCsrfCookie=e4JKSuUs1N5gPbvQzpHPnr2xfOM8QUiWHTl1Tifd; ASP.NET_SessionId=guxg1qqlhcofz5d4dzajiuyo; CMSCurrentTheme=base-jpc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Sep 2022 20:00:34 GMT
content-type: text/css; charset=utf-8
content-length: 16610
cache-control: public, must-revalidate
content-encoding: gzip
expires: Sun, 11 Sep 2022 08:00:34 GMT
last-modified: Tue, 06 Sep 2022 11:37:46 GMT
etag: "cssstylesheet|81f26f13-92ff-442d-9361-f42e2987dbe5"
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
content-disposition: attachment; filename="base-jpc.css"
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 748ac025ddce992a-ARN
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 65deebab57142db522e6c874673bdd9f
bfd022181afaec5035f868ccd05fac58113f81dc
7470143c8bd79f00190a3766ebaa9c632d0aa47693fc4c146f097873865da327
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 10 Sep 2022 20:00:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a4ae55dbf8e22a357ee36e37fafa37af
18d33f606a8bc692802cfaa3a22ceb4a5eedca8c
8343a46c0a87b15be71cab0ae84912ed07d3104d4b621c55e3cd69367f58ebb6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 10 Sep 2022 20:00:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 43e44f5fe147594a8dd7e263eabca2ae
99a970746a212194f339b3fdc7df516af9f2ffdf
f716e38cbb8632487d1ce62a37e0662ef8611fbe0449a82b9301118b68c7548d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 10 Sep 2022 20:00:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.jackpotcitycasino.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 Sep 2022 19:34:08 GMT
expires: Thu, 07 Sep 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 260786
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-PGQVS9
200 OK 53 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-PGQVS9
IP
File type ASCII text, with very long lines (16552)
Hash 2a2431a9f3e7171526890dbf72171052
84b965f66103cc216aade9dc1b28aeb12e22a33c
53a959a755e68fff94536897a2b2ed879a932e3b01f1c2731b8005a93e088bc7
GET /gtm.js?id=GTM-PGQVS9 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jackpotcitycasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 10 Sep 2022 20:00:34 GMT
expires: Sat, 10 Sep 2022 20:00:34 GMT
cache-control: private, max-age=900
last-modified: Sat, 10 Sep 2022 18:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 53199
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a4ae55dbf8e22a357ee36e37fafa37af
18d33f606a8bc692802cfaa3a22ceb4a5eedca8c
8343a46c0a87b15be71cab0ae84912ed07d3104d4b621c55e3cd69367f58ebb6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 10 Sep 2022 20:00:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
eu2.cdn.thunderhead.com/one/rt/js/one-tag.js?siteKey=ONE-1LOX0VT8AL-1546
200 OK 8.5 kB URL HTTP/2 eu2.cdn.thunderhead.com/one/rt/js/one-tag.js?siteKey=ONE-1LOX0VT8AL-1546
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with very long lines (23350)
Hash 45a4633cc5c8ffd0b53b09318fdcd420
86e7a99ccbc478a5bbd00a74a37c7aeb4eeec5da
a1a7081b57671ac381c8663fc5b45fc5ffc38c41bc438de4c1d5f1b6dc7df9f7
GET /one/rt/js/one-tag.js?siteKey=ONE-1LOX0VT8AL-1546 HTTP/1.1
Host: eu2.cdn.thunderhead.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jackpotcitycasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-transform, max-age=1200
content-length: 8543
content-type: text/javascript;charset=utf-8
content-encoding: gzip
etag: "ONE-1LOX0VT8AL-1546-null-451608555"
vary: Accept-Encoding
x-cache: TCP_MISS
x-one-req-metric: 1662840034914;0;233
strict-transport-security: max-age=15768000
x-azure-ref-originshield: 04uwcYwAAAACXI4pJr7nuQ485XzgxCuVcRlJBMjMxMDUwNDE4MDQ5ADYwMmJlN2YxLTAxYTEtNDkwYi1iMTYwLWJmNjk0MWUxNTJiYQ==
x-azure-ref: 04uwcYwAAAABdPzWgVtQkTZl6iOFrWYpCRlJBRURHRTEwMTIANjAyYmU3ZjEtMDFhMS00OTBiLWIxNjAtYmY2OTQxZTE1MmJh
date: Sat, 10 Sep 2022 20:00:34 GMT
X-Firefox-Spdy: h2
www.jackpotcitycasino.com/ScriptResource.axd?d=NJmAwtEo3Ipnlaxl6CMhvlYxB6ybTncrJLSdm6sybRed6Uld2kAM46WLqgs2AxgED61lxFA6i1PbB0M-VW5TVnu8BaI3rw-QKhoTvnTEfBBEOY58l2VFF0xZS06Y7rC4Y8wmKlXg20VS3vfPJANTb_xAMOhI34JOCro6vofT--Q1&t=ffffffffaa493ab8
200 OK 26 kB URL HTTP/2 www.jackpotcitycasino.com/ScriptResource.axd?d=NJmAwtEo3Ipnlaxl6CMhvlYxB6ybTncrJLSdm6sybRed6Uld2kAM46WLqgs2AxgED61lxFA6i1PbB0M-VW5TVnu8BaI3rw-QKhoTvnTEfBBEOY58l2VFF0xZS06Y7rC4Y8wmKlXg20VS3vfPJANTb_xAMOhI34JOCro6vofT--Q1&t=ffffffffaa493ab8
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (65326), with CRLF line terminators
Hash b62553925bd98826c60457d2eb6b9a46
84dbbb6d9b36a587c21b5a56b1d9e587e33ba943
c58166fe4df4ba8f25a960c21451eaf841d97f6f552f104e43431c9db1c2e2cc
GET /ScriptResource.axd?d=NJmAwtEo3Ipnlaxl6CMhvlYxB6ybTncrJLSdm6sybRed6Uld2kAM46WLqgs2AxgED61lxFA6i1PbB0M-VW5TVnu8BaI3rw-QKhoTvnTEfBBEOY58l2VFF0xZS06Y7rC4Y8wmKlXg20VS3vfPJANTb_xAMOhI34JOCro6vofT--Q1&t=ffffffffaa493ab8 HTTP/1.1
Host: www.jackpotcitycasino.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jackpotcitycasino.com/norge/
Cookie: Visit=visitId%3d91f8c434-45c2-44e4-8d45-4bd850a1865f%26eventId%3dJCTYPEINTRAFFIC%26promoId%3d24408%26s%3daff20307%26a%3dbfpadid94318%26b%3dJCTYPEINTRAFFIC; GA-Details=null; __cf_bm=t1yJ614tPCu6.olX95FiRvRF45wYkNqrxEbWVdi2Q0g-1662840033-0-ASoFptYePlGroPlSdoF3OwHMQpp4Gt2w9jPz+WPR3q5tuR1JrOVZuw6WbghTMjWQ1mjgIsXMy7pONuctNpq0zig=; CMSPreferredCulture=nn-NO; CMSCsrfCookie=e4JKSuUs1N5gPbvQzpHPnr2xfOM8QUiWHTl1Tifd; ASP.NET_SessionId=guxg1qqlhcofz5d4dzajiuyo; CMSCurrentTheme=base-jpc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Sep 2022 20:00:35 GMT
content-type: application/x-javascript
content-length: 25609
cache-control: public
content-encoding: gzip
expires: Sun, 10 Sep 2023 05:28:15 GMT
last-modified: Sat, 10 Sep 2022 05:28:15 GMT
x-frame-options: SAMEORIGIN
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 748ac025ddd8992a-ARN
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.jackpotcitycasino.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 Sep 2022 19:34:08 GMT
expires: Thu, 07 Sep 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 260787
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.jackpotcitycasino.com/ldnjpc/media/jpc19/cta-bar.jpg
200 OK 47 kB URL HTTP/2 www.jackpotcitycasino.com/ldnjpc/media/jpc19/cta-bar.jpg
IP
File type JPEG image data, progressive, precision 8, 2000x223, components 3\012- data
Hash e423c69f29a80fdfcd5ebf2385d928d3
43f773a4a6a651412ef9dd5aee251d0345391aff
9f359e5193dbe3fd967e7f4388837c3447ce67ef46433c3bf51999bfde9dc533
GET /ldnjpc/media/jpc19/cta-bar.jpg HTTP/1.1
Host: www.jackpotcitycasino.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jackpotcitycasino.com/CMSPages/GetResource.ashx?stylesheetname=base-jpc
Cookie: Visit=visitId%3d91f8c434-45c2-44e4-8d45-4bd850a1865f%26eventId%3dJCTYPEINTRAFFIC%26promoId%3d24408%26s%3daff20307%26a%3dbfpadid94318%26b%3dJCTYPEINTRAFFIC; GA-Details=null; __cf_bm=t1yJ614tPCu6.olX95FiRvRF45wYkNqrxEbWVdi2Q0g-1662840033-0-ASoFptYePlGroPlSdoF3OwHMQpp4Gt2w9jPz+WPR3q5tuR1JrOVZuw6WbghTMjWQ1mjgIsXMy7pONuctNpq0zig=; CMSPreferredCulture=nn-NO; CMSCsrfCookie=e4JKSuUs1N5gPbvQzpHPnr2xfOM8QUiWHTl1Tifd; ASP.NET_SessionId=guxg1qqlhcofz5d4dzajiuyo; CMSCurrentTheme=base-jpc; _ga_CQT5K0M51H=GS1.1.1662840024.1.0.1662840024.0.0.0; _ga=GA1.1.1666782392.1662840025; _one_NjE4NTEz=8ba3f54f-4b9a-f53b-ac15-ee7df91c45c4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Sep 2022 20:00:35 GMT
content-type: image/jpeg
content-length: 47060
cf-bgj: imgq:100,h2pri
cf-polished: origSize=52310, status=webp_bigger
etag: "43e9980c8e5d71:0"
last-modified: Tue, 30 Nov 2021 08:58:54 GMT
x-frame-options: SAMEORIGIN
x-powered-by: ASP.NET
cf-cache-status: HIT
age: 1840
expires: Sun, 11 Sep 2022 00:00:35 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 748ac02cffe6992a-ARN
X-Firefox-Spdy: h2
www.jackpotcitycasino.com/ldnjpc/media/jpc19/Fonts/unicons.woff2?64511636
200 OK 157 kB URL HTTP/2 www.jackpotcitycasino.com/ldnjpc/media/jpc19/Fonts/unicons.woff2?64511636
IP
File type Web Open Font Format (Version 2), TrueType, length 157328, version 1.0\012- data
Size 157 kB (157328 bytes)
Hash a4c968c87e771ce941de2a0579763da0
24bb90d0231e2d766571664d83605b25a130b98c
6a73f6e1ab7a72bc613acb4bbff984703188b43e69c8e76ff506332b7eed5dbe
GET /ldnjpc/media/jpc19/Fonts/unicons.woff2?64511636 HTTP/1.1
Host: www.jackpotcitycasino.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.jackpotcitycasino.com/CMSPages/GetResource.ashx?stylesheetname=icons-menu
Cookie: Visit=visitId%3d91f8c434-45c2-44e4-8d45-4bd850a1865f%26eventId%3dJCTYPEINTRAFFIC%26promoId%3d24408%26s%3daff20307%26a%3dbfpadid94318%26b%3dJCTYPEINTRAFFIC; GA-Details=null; __cf_bm=t1yJ614tPCu6.olX95FiRvRF45wYkNqrxEbWVdi2Q0g-1662840033-0-ASoFptYePlGroPlSdoF3OwHMQpp4Gt2w9jPz+WPR3q5tuR1JrOVZuw6WbghTMjWQ1mjgIsXMy7pONuctNpq0zig=; CMSPreferredCulture=nn-NO; CMSCsrfCookie=e4JKSuUs1N5gPbvQzpHPnr2xfOM8QUiWHTl1Tifd; ASP.NET_SessionId=guxg1qqlhcofz5d4dzajiuyo; CMSCurrentTheme=base-jpc; _ga_CQT5K0M51H=GS1.1.1662840024.1.0.1662840024.0.0.0; _ga=GA1.1.1666782392.1662840025; _one_NjE4NTEz=8ba3f54f-4b9a-f53b-ac15-ee7df91c45c4
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Sep 2022 20:00:35 GMT
content-type: application/font-woff2
content-length: 157328
last-modified: Tue, 30 Nov 2021 09:02:11 GMT
etag: "8cc124f6c8e5d71:0"
x-frame-options: SAMEORIGIN
x-powered-by: ASP.NET
cf-cache-status: HIT
age: 2713
expires: Sun, 11 Sep 2022 00:00:35 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 748ac02d0ffe992a-ARN
X-Firefox-Spdy: h2
www.jackpotcitycasino.com/ldnjpc/media/jpc19/Fonts/icons_menu.woff2?64511636
200 OK 10 kB URL HTTP/2 www.jackpotcitycasino.com/ldnjpc/media/jpc19/Fonts/icons_menu.woff2?64511636
IP
File type Web Open Font Format (Version 2), TrueType, length 10460, version 1.0\012- data
Hash 951105d3955b912dcd892a855ae61cb3
600d179f251c8e4e772521b17d9830b438554ff3
04d16747059812b52a8c10fb282c4fdc12933aaad26f639c37b8df9fece62f9e
GET /ldnjpc/media/jpc19/Fonts/icons_menu.woff2?64511636 HTTP/1.1
Host: www.jackpotcitycasino.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.jackpotcitycasino.com/CMSPages/GetResource.ashx?stylesheetname=icons-menu
Cookie: Visit=visitId%3d91f8c434-45c2-44e4-8d45-4bd850a1865f%26eventId%3dJCTYPEINTRAFFIC%26promoId%3d24408%26s%3daff20307%26a%3dbfpadid94318%26b%3dJCTYPEINTRAFFIC; GA-Details=null; __cf_bm=t1yJ614tPCu6.olX95FiRvRF45wYkNqrxEbWVdi2Q0g-1662840033-0-ASoFptYePlGroPlSdoF3OwHMQpp4Gt2w9jPz+WPR3q5tuR1JrOVZuw6WbghTMjWQ1mjgIsXMy7pONuctNpq0zig=; CMSPreferredCulture=nn-NO; CMSCsrfCookie=e4JKSuUs1N5gPbvQzpHPnr2xfOM8QUiWHTl1Tifd; ASP.NET_SessionId=guxg1qqlhcofz5d4dzajiuyo; CMSCurrentTheme=base-jpc; _ga_CQT5K0M51H=GS1.1.1662840024.1.0.1662840024.0.0.0; _ga=GA1.1.1666782392.1662840025; _one_NjE4NTEz=8ba3f54f-4b9a-f53b-ac15-ee7df91c45c4
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Sep 2022 20:00:35 GMT
content-type: application/font-woff2
content-length: 10460
last-modified: Thu, 21 Apr 2022 12:48:51 GMT
etag: "f5c61e277e55d81:0"
x-frame-options: SAMEORIGIN
x-powered-by: ASP.NET
cf-cache-status: HIT
age: 2713
expires: Sun, 11 Sep 2022 00:00:35 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 748ac02d2834992a-ARN
X-Firefox-Spdy: h2
www.jackpotcitycasino.com/ldnjpc/media/jpc19/Fonts/roboto-v30-latin-ext_latin_greek-ext_greek_cyrillic-ext_cyrillic-700.woff2
200 OK 50 kB URL HTTP/2 www.jackpotcitycasino.com/ldnjpc/media/jpc19/Fonts/roboto-v30-latin-ext_latin_greek-ext_greek_cyrillic-ext_cyrillic-700.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 50340, version 1.0\012- data
Hash 90f0b37f809b546f34189807169e9a76
ee8c931951df57cd7b7c8758053c72ebebf22297
9dcacf1d025168ee2f84aaf40bad826f08b43c94db12eb59dbe2a06a3e98bfb2
GET /ldnjpc/media/jpc19/Fonts/roboto-v30-latin-ext_latin_greek-ext_greek_cyrillic-ext_cyrillic-700.woff2 HTTP/1.1
Host: www.jackpotcitycasino.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.jackpotcitycasino.com/CMSPages/GetResource.ashx?stylesheetname=base-jpc
Cookie: Visit=visitId%3d91f8c434-45c2-44e4-8d45-4bd850a1865f%26eventId%3dJCTYPEINTRAFFIC%26promoId%3d24408%26s%3daff20307%26a%3dbfpadid94318%26b%3dJCTYPEINTRAFFIC; GA-Details=null; __cf_bm=t1yJ614tPCu6.olX95FiRvRF45wYkNqrxEbWVdi2Q0g-1662840033-0-ASoFptYePlGroPlSdoF3OwHMQpp4Gt2w9jPz+WPR3q5tuR1JrOVZuw6WbghTMjWQ1mjgIsXMy7pONuctNpq0zig=; CMSPreferredCulture=nn-NO; CMSCsrfCookie=e4JKSuUs1N5gPbvQzpHPnr2xfOM8QUiWHTl1Tifd; ASP.NET_SessionId=guxg1qqlhcofz5d4dzajiuyo; CMSCurrentTheme=base-jpc; _ga_CQT5K0M51H=GS1.1.1662840024.1.0.1662840024.0.0.0; _ga=GA1.1.1666782392.1662840025; _one_NjE4NTEz=8ba3f54f-4b9a-f53b-ac15-ee7df91c45c4
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Sep 2022 20:00:35 GMT
content-type: application/font-woff2
content-length: 50340
last-modified: Wed, 31 Aug 2022 09:13:38 GMT
etag: "cda372f419bdd81:0"
x-frame-options: SAMEORIGIN
x-powered-by: ASP.NET
cf-cache-status: HIT
age: 57
expires: Sun, 11 Sep 2022 00:00:35 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 748ac02d2836992a-ARN
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBxc4EsA.woff2
200 OK 6.9 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBxc4EsA.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 6936, version 1.0\012- data
Hash 3f8b2aa43c439ca2c8930c198320c231
e616fd3ee33ea9971dd71c7d667c5b4e146e8e95
1c9cc76fd52238330f0aabac35acd2cac0f04b7890862e61e013ebbb8513fb5b
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBxc4EsA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.jackpotcitycasino.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 6936
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 Sep 2022 21:02:13 GMT
expires: Thu, 07 Sep 2023 21:02:13 GMT
cache-control: public, max-age=31536000
age: 255502
last-modified: Wed, 11 May 2022 19:25:03 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2
200 OK 9.6 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 9644, version 1.0\012- data
Hash 6f112ec2b932ee12379442c42853244e
b2e73c8c70d6261e1d187f41693c43ac4fe0809d
6a84eeee6a25e7c9a8a03191007a6720566b5a2aa2384d36168fb07f49e97e9e
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.jackpotcitycasino.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9644
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 Sep 2022 19:34:41 GMT
expires: Thu, 07 Sep 2023 19:34:41 GMT
cache-control: public, max-age=31536000
age: 260754
last-modified: Wed, 11 May 2022 19:24:50 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
nexus.rechannelapi.com/betway/dos-prod/Bootstrap.js
200 OK 123 kB URL HTTP/2 nexus.rechannelapi.com/betway/dos-prod/Bootstrap.js
IP
Size 123 kB (123037 bytes)
Hash accb1448218ab4643058640824befe1e
c0afba4b3c7985a1578d4406b814b8f84d3a3aab
1f35694f7d00e5bab4a9d71afb7b8d7bf21349e27c0fc901969b99f8bf358245
GET /betway/dos-prod/Bootstrap.js HTTP/1.1
Host: nexus.rechannelapi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jackpotcitycasino.com/
Cookie: __cf_bm=5pOMcifXtstI1SsgHb519Q3Sy6vFegfteYytTZNFouo-1662840034-0-AWcX2/SkveY9spTQTKL0gYnWnmh0XCigqbJLtb6ta09McFcGKu+T2cahTEi/CMsMRBM1AKHkzwDbWGKF02HZdhaJr7SkMRd25F591WtuwiOH
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Sep 2022 20:00:35 GMT
content-type: application/javascript; charset=utf-8
x-amz-replication-status: COMPLETED
last-modified: Thu, 01 Sep 2022 13:57:47 GMT
etag: W/"940d50453c51e2696c7ae1fe947cd080"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=14400
x-amz-version-id: GahnA0uGns04h9ERmL0YaG20kRFCBqEV
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 471577f2b3efe669f21e138a1621a8ca.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: y_-BITqquEmk5MkgcoYDuAlz585kpmuhmlz3EFr-SK-dnomdsjuUJA==
cf-cache-status: HIT
age: 57
expires: Sun, 11 Sep 2022 00:00:35 GMT
server: cloudflare
cf-ray: 748ac02ca950b511-OSL
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15740, version 1.0\012- data
Hash b9c29351c46f3e8c8631c4002457f48a
e57e59c5780995ff2937ab2b511a769212974a87
f75911313e1c7802c23345ab57e754d87801581706780c993fb23ff4e0fe62ef
GET /s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.jackpotcitycasino.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15740
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 Sep 2022 19:34:21 GMT
expires: Thu, 07 Sep 2023 19:34:21 GMT
cache-control: public, max-age=31536000
age: 260774
last-modified: Wed, 11 May 2022 19:24:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15752, version 1.0\012- data
Hash b20371a6daf29d4a1f2e85dbbf40fb20
0355a01c1ccb45cb728e7e07c41c8ebf456f70bb
7e262106f82cc52663e403f5b73795bbeab9ca0630c33c03579354fbcd4fae1e
GET /s/roboto/v30/KFOlCnqEu92Fr1MmYUtfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.jackpotcitycasino.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15752
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 Sep 2022 19:40:23 GMT
expires: Thu, 07 Sep 2023 19:40:23 GMT
cache-control: public, max-age=31536000
age: 260412
last-modified: Wed, 11 May 2022 19:24:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.jackpotcitycasino.com/cdn-cgi/image/width=244/https://dm.imagethumb.com/images/jpc/dgb/WheelOfWishes_350x350_jpg_300_300.jpg
200 OK 19 kB URL HTTP/2 www.jackpotcitycasino.com/cdn-cgi/image/width=244/https://dm.imagethumb.com/images/jpc/dgb/WheelOfWishes_350x350_jpg_300_300.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 244x244, components 3\012- data
Hash b615533a098a53f1cecfeae92d7b1d20
dedcd71399abb7f59c8a43f95e2d9a2bcc49f7fb
0f445e1e46ade55f74d7be19046fc1e75c056c206b63a44e63d57a6d54603b06
GET /cdn-cgi/image/width=244/https://dm.imagethumb.com/images/jpc/dgb/WheelOfWishes_350x350_jpg_300_300.jpg HTTP/1.1
Host: www.jackpotcitycasino.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jackpotcitycasino.com/norge/
Cookie: Visit=visitId%3d91f8c434-45c2-44e4-8d45-4bd850a1865f%26eventId%3dJCTYPEINTRAFFIC%26promoId%3d24408%26s%3daff20307%26a%3dbfpadid94318%26b%3dJCTYPEINTRAFFIC; GA-Details=null; __cf_bm=t1yJ614tPCu6.olX95FiRvRF45wYkNqrxEbWVdi2Q0g-1662840033-0-ASoFptYePlGroPlSdoF3OwHMQpp4Gt2w9jPz+WPR3q5tuR1JrOVZuw6WbghTMjWQ1mjgIsXMy7pONuctNpq0zig=; CMSPreferredCulture=nn-NO; CMSCsrfCookie=e4JKSuUs1N5gPbvQzpHPnr2xfOM8QUiWHTl1Tifd; ASP.NET_SessionId=guxg1qqlhcofz5d4dzajiuyo; CMSCurrentTheme=base-jpc; _ga_CQT5K0M51H=GS1.1.1662840024.1.0.1662840024.0.0.0; _ga=GA1.1.1666782392.1662840025; _one_NjE4NTEz=8ba3f54f-4b9a-f53b-ac15-ee7df91c45c4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Sep 2022 20:00:35 GMT
content-type: image/jpeg
content-length: 19390
cf-ray: 748ac02df947992a-ARN
accept-ranges: bytes
access-control-allow-origin: *
cache-control: public, max-age=5184000
etag: "cfQr_SAIMPRvMOcrsojTdHFw:481e961a1bfdd51:0"
last-modified: Wed, 18 Mar 2020 11:48:12 GMT
vary: Accept, Accept-Encoding
cf-cache-status: HIT
cf-bgj: imgq:85,h2pri
cf-resized: internal=ok/h q=0 n=55 c=38 v=2022.8.4 l=19390
content-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'
x-content-type-options: nosniff
server: cloudflare
X-Firefox-Spdy: h2
www.jackpotcitycasino.com/norge/?s=aff20307&a=bfpadid94318
301 Moved Permanently 40 kB URL HTTP/2 www.jackpotcitycasino.com/norge/?s=aff20307&a=bfpadid94318
IP
Hash 08a83531fb4dc2797f6130386bcd7a53
30126bef5cae940c68224643b7c9757e5f1552f1
ba9a7c58655ffa02756580b88d0a737df2963647dd63766cf0c583f7f77dded3
GET /norge/?s=aff20307&a=bfpadid94318 HTTP/1.1
Host: www.jackpotcitycasino.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://balor-ghn.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Sat, 10 Sep 2022 20:00:33 GMT
content-type: text/html; charset=utf-8
cache-control: private
location: /norge/
x-powered-by: ASP.NET
cf-cache-status: DYNAMIC
set-cookie: Visit=visitId%3d91f8c434-45c2-44e4-8d45-4bd850a1865f%26eventId%3dJCTYPEINTRAFFIC%26promoId%3d24408%26s%3daff20307%26a%3dbfpadid94318%26b%3dJCTYPEINTRAFFIC; domain=.jackpotcitycasino.com; path=/; secure
GA-Details=null; domain=www.jackpotcitycasino.com; path=/
__cf_bm=t1yJ614tPCu6.olX95FiRvRF45wYkNqrxEbWVdi2Q0g-1662840033-0-ASoFptYePlGroPlSdoF3OwHMQpp4Gt2w9jPz+WPR3q5tuR1JrOVZuw6WbghTMjWQ1mjgIsXMy7pONuctNpq0zig=; path=/; expires=Sat, 10-Sep-22 20:30:33 GMT; domain=.jackpotcitycasino.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 748ac020af01992a-ARN
X-Firefox-Spdy: h2
region1.google-analytics.com/g/collect?v=2&tid=G-CQT5K0M51H>m=2oe970&_p=1091804259&cid=1666782392.1662840025&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&ci=bfpadid94318&sid=1662840024&sct=1&seg=0&dl=https%3A%2F%2Fwww.jackpotcitycasino.com%2Fnorge%2F&dr=http%3A%2F%2Fbalor-ghn.com%2F&dt=Online%20casino%3A%2016%20000%20kr%20i%20velkomstbonus%20%7C%20JackpotCity%20Norge&uid=bre-na-na-jpc&en=page_view&_fv=1&_nsi=1&_ss=1&ep.lobby_platform=na&ep.container_type=brand&ep.registered_country=na&ep.page_language=nn-NO&ep.content_group=null&ep.useragent_string=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&ep.client_date=2022-09-10T20%3A00%3A24.675%2B00%3A00&ep.url_parameters=&ep.brand_name=jackpotcity&ep.player_account=na-na&ep.player_id=na&ep.casino_id=na&ep.regltd_country=mlt%2Fmit&ep.product_name=casino&ep.game_id=&ep.page_path=%2Fnorge&ep.lobby_access_point=&ep.brand_short_code=JPC&ep.document_referrer=http%3A%2F%2Fbalor-ghn.com%2F&ep.meta_description=jackpotcity%20online%20casino%20%E2%80%93%20nettcasino%20med%20over%2020%20%C3%A5rs%20erfaring%20%7C%20spilleautomater%2C%20rulett%2C%20blackjack%20%7C%20norsk%20kundesupport%2C%20sikre%20banktjenester%20%7C%20spill&ep.venge_visit=91f8c434-45c2-44e4-8d45-4bd850a1865f&ep.affiliate_id=aff20307&ep.mediabanner_id=JCTYPEINTRAFFIC&ep.debug_mode=true
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-CQT5K0M51H>m=2oe970&_p=1091804259&cid=1666782392.1662840025&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&ci=bfpadid94318&sid=1662840024&sct=1&seg=0&dl=https%3A%2F%2Fwww.jackpotcitycasino.com%2Fnorge%2F&dr=http%3A%2F%2Fbalor-ghn.com%2F&dt=Online%20casino%3A%2016%20000%20kr%20i%20velkomstbonus%20%7C%20JackpotCity%20Norge&uid=bre-na-na-jpc&en=page_view&_fv=1&_nsi=1&_ss=1&ep.lobby_platform=na&ep.container_type=brand&ep.registered_country=na&ep.page_language=nn-NO&ep.content_group=null&ep.useragent_string=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&ep.client_date=2022-09-10T20%3A00%3A24.675%2B00%3A00&ep.url_parameters=&ep.brand_name=jackpotcity&ep.player_account=na-na&ep.player_id=na&ep.casino_id=na&ep.regltd_country=mlt%2Fmit&ep.product_name=casino&ep.game_id=&ep.page_path=%2Fnorge&ep.lobby_access_point=&ep.brand_short_code=JPC&ep.document_referrer=http%3A%2F%2Fbalor-ghn.com%2F&ep.meta_description=jackpotcity%20online%20casino%20%E2%80%93%20nettcasino%20med%20over%2020%20%C3%A5rs%20erfaring%20%7C%20spilleautomater%2C%20rulett%2C%20blackjack%20%7C%20norsk%20kundesupport%2C%20sikre%20banktjenester%20%7C%20spill&ep.venge_visit=91f8c434-45c2-44e4-8d45-4bd850a1865f&ep.affiliate_id=aff20307&ep.mediabanner_id=JCTYPEINTRAFFIC&ep.debug_mode=true
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-CQT5K0M51H>m=2oe970&_p=1091804259&cid=1666782392.1662840025&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&ci=bfpadid94318&sid=1662840024&sct=1&seg=0&dl=https%3A%2F%2Fwww.jackpotcitycasino.com%2Fnorge%2F&dr=http%3A%2F%2Fbalor-ghn.com%2F&dt=Online%20casino%3A%2016%20000%20kr%20i%20velkomstbonus%20%7C%20JackpotCity%20Norge&uid=bre-na-na-jpc&en=page_view&_fv=1&_nsi=1&_ss=1&ep.lobby_platform=na&ep.container_type=brand&ep.registered_country=na&ep.page_language=nn-NO&ep.content_group=null&ep.useragent_string=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&ep.client_date=2022-09-10T20%3A00%3A24.675%2B00%3A00&ep.url_parameters=&ep.brand_name=jackpotcity&ep.player_account=na-na&ep.player_id=na&ep.casino_id=na&ep.regltd_country=mlt%2Fmit&ep.product_name=casino&ep.game_id=&ep.page_path=%2Fnorge&ep.lobby_access_point=&ep.brand_short_code=JPC&ep.document_referrer=http%3A%2F%2Fbalor-ghn.com%2F&ep.meta_description=jackpotcity%20online%20casino%20%E2%80%93%20nettcasino%20med%20over%2020%20%C3%A5rs%20erfaring%20%7C%20spilleautomater%2C%20rulett%2C%20blackjack%20%7C%20norsk%20kundesupport%2C%20sikre%20banktjenester%20%7C%20spill&ep.venge_visit=91f8c434-45c2-44e4-8d45-4bd850a1865f&ep.affiliate_id=aff20307&ep.mediabanner_id=JCTYPEINTRAFFIC&ep.debug_mode=true HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.jackpotcitycasino.com
Connection: keep-alive
Referer: https://www.jackpotcitycasino.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.jackpotcitycasino.com
date: Sat, 10 Sep 2022 20:00:35 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.jackpotcitycasino.com/ldnjpc/media/jpc19/favicon.png
200 OK 530 B URL HTTP/2 www.jackpotcitycasino.com/ldnjpc/media/jpc19/favicon.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 48b149640a9eb7567d37f96d7e51fdbe
6c891c1ce6f0a386c7480b630be4c1adf03c8840
d7ec4632daf8a65c95de3994cb45a4a80e08ace2d4dc556b1c3f63504b557ded
GET /ldnjpc/media/jpc19/favicon.png HTTP/1.1
Host: www.jackpotcitycasino.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jackpotcitycasino.com/norge/
Cookie: Visit=visitId%3d91f8c434-45c2-44e4-8d45-4bd850a1865f%26eventId%3dJCTYPEINTRAFFIC%26promoId%3d24408%26s%3daff20307%26a%3dbfpadid94318%26b%3dJCTYPEINTRAFFIC; GA-Details=null; __cf_bm=t1yJ614tPCu6.olX95FiRvRF45wYkNqrxEbWVdi2Q0g-1662840033-0-ASoFptYePlGroPlSdoF3OwHMQpp4Gt2w9jPz+WPR3q5tuR1JrOVZuw6WbghTMjWQ1mjgIsXMy7pONuctNpq0zig=; CMSPreferredCulture=nn-NO; CMSCsrfCookie=e4JKSuUs1N5gPbvQzpHPnr2xfOM8QUiWHTl1Tifd; ASP.NET_SessionId=guxg1qqlhcofz5d4dzajiuyo; CMSCurrentTheme=base-jpc; _ga_CQT5K0M51H=GS1.1.1662840024.1.0.1662840024.0.0.0; _ga=GA1.1.1666782392.1662840025; _one_NjE4NTEz=8ba3f54f-4b9a-f53b-ac15-ee7df91c45c4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Sep 2022 20:00:35 GMT
content-type: image/webp
content-length: 530
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=656
content-disposition: inline; filename="favicon.webp"
etag: "4615f636a8cd81:0"
last-modified: Thu, 30 Jun 2022 10:15:56 GMT
vary: Accept
x-frame-options: SAMEORIGIN
x-powered-by: ASP.NET
cf-cache-status: HIT
age: 792
expires: Sun, 11 Sep 2022 00:00:35 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
server: cloudflare
cf-ray: 748ac02eda6f992a-ARN
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 4a8b934802b39ce62326f039ac83cd96
dbfe44bfbec869b99291881ce7c2539d34d7ca9c
c1d5a7058b585d2207c7162b7d0ed62443426b9b2e1262391ad3118884bda651
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5649
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 10 Sep 2022 20:00:35 GMT
Last-Modified: Sat, 10 Sep 2022 18:26:26 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471
www.google-analytics.com/gtm/optimize.js?id=GTM-5RPPL6R
200 OK 42 kB URL HTTP/2 www.google-analytics.com/gtm/optimize.js?id=GTM-5RPPL6R
IP
File type ASCII text, with very long lines (1615)
Hash 8c3b072bd5739c556ccad10dfbac3c9c
40d432ef2c2a6f5f573dc1cbfe4f2ed41aa6b039
8c1e39609d096966c1c68d1386adb522114f849350e2d48cdd4edc6491966d45
GET /gtm/optimize.js?id=GTM-5RPPL6R HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jackpotcitycasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 10 Sep 2022 20:00:35 GMT
expires: Sat, 10 Sep 2022 20:00:35 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 42073
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
connect.facebook.net/en_US/fbevents.js
200 OK 27 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
File type ASCII text, with very long lines (64348)
Hash 8e7e24fb3539746aa8b869558f589615
d8086d86bbd5cfacc3b6a5ef14aa917830e137dd
7304497ee417a664bdea67d7307ca36a36013556b927c3ea5bca6c04b66236ef
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jackpotcitycasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: JcjW6KdXpJBDJy7JcGZ9F127JuKkOPMh68M/l6o+nwma6aZikcXUUnvevwI3A/ePKD24y3/nOE3fko8XdFPJaA==
priority: u=3,i
content-length: 26737
x-fb-trip-id: 1679558926
date: Sat, 10 Sep 2022 20:00:35 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 4a8b934802b39ce62326f039ac83cd96
dbfe44bfbec869b99291881ce7c2539d34d7ca9c
c1d5a7058b585d2207c7162b7d0ed62443426b9b2e1262391ad3118884bda651
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5649
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 10 Sep 2022 20:00:35 GMT
Last-Modified: Sat, 10 Sep 2022 18:26:26 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471
eu2.thunderhead.com/one/rt/web/v1/ONE-1LOX0VT8AL-1546?flash=true&pv=&tid=&uri=https%3A%2F%2Fwww.jackpotcitycasino.com%2Fnorge%2F%3FcountryIsoCode%3DNO%26language%3Dnn-NO
200 OK 837 kB URL HTTP/2 eu2.thunderhead.com/one/rt/web/v1/ONE-1LOX0VT8AL-1546?flash=true&pv=&tid=&uri=https%3A%2F%2Fwww.jackpotcitycasino.com%2Fnorge%2F%3FcountryIsoCode%3DNO%26language%3Dnn-NO
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Size 837 kB (836766 bytes)
Hash 8347df65be89e3234805d92e0a7ccdbd
3353f67def57ed2ac892572572241a86a2d4555b
4fd80358f9e52b8195508d08cd1f87a13a8ea2d0da1ef898a489b0c482d14269
GET /one/rt/web/v1/ONE-1LOX0VT8AL-1546?flash=true&pv=&tid=&uri=https%3A%2F%2Fwww.jackpotcitycasino.com%2Fnorge%2F%3FcountryIsoCode%3DNO%26language%3Dnn-NO HTTP/1.1
Host: eu2.thunderhead.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.jackpotcitycasino.com
Connection: keep-alive
Referer: https://www.jackpotcitycasino.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 10 Sep 2022 20:00:35 GMT
content-type: application/json
access-control-allow-origin: https://www.jackpotcitycasino.com
access-control-allow-credentials: true
p3p: CP="Thunderhead.com does not have a P3P policy."
set-cookie: _one_svr_NjE4NTEz=8ba3f54f-4b9a-f53b-ac15-ee7df91c45c4;Version=1;Path=/;Max-Age=63113851;Secure;Expires=Tue, 10 Sep 2024 07:38:06 GMT;HttpOnly;SameSite=None
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
x-one-req-metric: 1662840035116;5;94
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
nexus.rechannelapi.com/privacy/v1/c/r.rnc?n=0&c=2273&i=68o28i&p=dos-prod&s=435&d=9Cd7InZlcnNpb24iOiIxLjAuMCIsImdhdGV3YXkiOiIyLjMuNTc0IiwiY2xpZW50SWQiOjIyNzMQAKBOYW1lIjoiYmV0MADwDywicHVibGlzaFBhdGgiOiJkb3MtcHJvZCIsIm1vZCkAkHdoaXRlbGlzdFIA8CJvb2tpZXMiOnsiREVGQVVMVF9FTlNJR0hURU5fUFJJVkFDWV9CQU5ORVJfTE9BREVEowDxDyJ9LCJkdCI6MTY2Mjg0MDAyNTYxMiwic2V0dGluZ04A8Sdtb2RhbCI6ImVudGVycHJpc2UiLCJlbnZpcm9ubWVudCI6Ik5vcndlZ2lhbiIsImRlZmF1bHQ7AIBGdW5jdGlvbkAA8BowLCJFc3NlbnRpYWwgT25seSI6MSwiQW5hbHl0aWNzIjowLCJNYXJrZXkAsCI6MH19LCJldmVuSgAiW3sLAEEiOiJj5wBgQ2hhbmdlCgEPvQAAD_8AEMBBREVEIjoiMSJ9XX0
204 No Content 0 B URL HTTP/2 nexus.rechannelapi.com/privacy/v1/c/r.rnc?n=0&c=2273&i=68o28i&p=dos-prod&s=435&d=9Cd7InZlcnNpb24iOiIxLjAuMCIsImdhdGV3YXkiOiIyLjMuNTc0IiwiY2xpZW50SWQiOjIyNzMQAKBOYW1lIjoiYmV0MADwDywicHVibGlzaFBhdGgiOiJkb3MtcHJvZCIsIm1vZCkAkHdoaXRlbGlzdFIA8CJvb2tpZXMiOnsiREVGQVVMVF9FTlNJR0hURU5fUFJJVkFDWV9CQU5ORVJfTE9BREVEowDxDyJ9LCJkdCI6MTY2Mjg0MDAyNTYxMiwic2V0dGluZ04A8Sdtb2RhbCI6ImVudGVycHJpc2UiLCJlbnZpcm9ubWVudCI6Ik5vcndlZ2lhbiIsImRlZmF1bHQ7AIBGdW5jdGlvbkAA8BowLCJFc3NlbnRpYWwgT25seSI6MSwiQW5hbHl0aWNzIjowLCJNYXJrZXkAsCI6MH19LCJldmVuSgAiW3sLAEEiOiJj5wBgQ2hhbmdlCgEPvQAAD_8AEMBBREVEIjoiMSJ9XX0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /privacy/v1/c/r.rnc?n=0&c=2273&i=68o28i&p=dos-prod&s=435&d=9Cd7InZlcnNpb24iOiIxLjAuMCIsImdhdGV3YXkiOiIyLjMuNTc0IiwiY2xpZW50SWQiOjIyNzMQAKBOYW1lIjoiYmV0MADwDywicHVibGlzaFBhdGgiOiJkb3MtcHJvZCIsIm1vZCkAkHdoaXRlbGlzdFIA8CJvb2tpZXMiOnsiREVGQVVMVF9FTlNJR0hURU5fUFJJVkFDWV9CQU5ORVJfTE9BREVEowDxDyJ9LCJkdCI6MTY2Mjg0MDAyNTYxMiwic2V0dGluZ04A8Sdtb2RhbCI6ImVudGVycHJpc2UiLCJlbnZpcm9ubWVudCI6Ik5vcndlZ2lhbiIsImRlZmF1bHQ7AIBGdW5jdGlvbkAA8BowLCJFc3NlbnRpYWwgT25seSI6MSwiQW5hbHl0aWNzIjowLCJNYXJrZXkAsCI6MH19LCJldmVuSgAiW3sLAEEiOiJj5wBgQ2hhbmdlCgEPvQAAD_8AEMBBREVEIjoiMSJ9XX0 HTTP/1.1
Host: nexus.rechannelapi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jackpotcitycasino.com/
Cookie: __cf_bm=5pOMcifXtstI1SsgHb519Q3Sy6vFegfteYytTZNFouo-1662840034-0-AWcX2/SkveY9spTQTKL0gYnWnmh0XCigqbJLtb6ta09McFcGKu+T2cahTEi/CMsMRBM1AKHkzwDbWGKF02HZdhaJr7SkMRd25F591WtuwiOH
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sat, 10 Sep 2022 20:00:35 GMT
expires: Sat, 10 Sep 2022 20:00:34 GMT
cache-control: no-cache, no-store
x-cache: Miss from cloudfront
via: 1.1 36510edbc7ba8916907c18e15b00f64c.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: 9zfph21qGTGJWGR1TvUx8giGOWioPSDT1Ppn10U6LbQ2lgwcjgubig==
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 748ac02f2c70b511-OSL
X-Firefox-Spdy: h2
nexus.rechannelapi.com/privacy/v1/c/r.rnc?n=1&c=2273&i=68o28i&p=dos-prod&s=481&d=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
204 No Content 0 B URL HTTP/2 nexus.rechannelapi.com/privacy/v1/c/r.rnc?n=1&c=2273&i=68o28i&p=dos-prod&s=481&d=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
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /privacy/v1/c/r.rnc?n=1&c=2273&i=68o28i&p=dos-prod&s=481&d=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 HTTP/1.1
Host: nexus.rechannelapi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jackpotcitycasino.com/
Cookie: __cf_bm=5pOMcifXtstI1SsgHb519Q3Sy6vFegfteYytTZNFouo-1662840034-0-AWcX2/SkveY9spTQTKL0gYnWnmh0XCigqbJLtb6ta09McFcGKu+T2cahTEi/CMsMRBM1AKHkzwDbWGKF02HZdhaJr7SkMRd25F591WtuwiOH
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sat, 10 Sep 2022 20:00:35 GMT
expires: Sat, 10 Sep 2022 20:00:34 GMT
cache-control: no-cache, no-store
x-cache: Miss from cloudfront
via: 1.1 115d56d751589aa02dcc0096dd66b552.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: gNq2W5yzxJwQayRoYk3rvBkFz5KZ7u9SUyHou-GoxVjmZYnibamWGg==
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 748ac02f3c77b511-OSL
X-Firefox-Spdy: h2
nexus.rechannelapi.com/privacy/v1/c/r.rnc?n=2&c=2273&i=68o28i&p=dos-prod&s=525&d=9Cd7InZlcnNpb24iOiIxLjAuMCIsImdhdGV3YXkiOiIyLjMuNTc0IiwiY2xpZW50SWQiOjIyNzMQAKBOYW1lIjoiYmV0MADwDywicHVibGlzaFBhdGgiOiJkb3MtcHJvZCIsIm1vZCkAkHdoaXRlbGlzdFIA8CFvb2tpZXMiOnsiREVGQVVMVF9FTlNJR0hURU5fUFJJVkFDWV9NT0RBTF9MT0FERUSiAC8iLC0ACL9CQU5ORVJfVklFVy4AFwdcAPEOfSwiZHQiOjE2NjI4NDAwMjU2MzAsInNldHRpbmepAPEnbW9kYWwiOiJlbnRlcnByaXNlIiwiZW52aXJvbm1lbnQiOiJOb3J3ZWdpYW4iLCJkZWZhdWx0OwCARnVuY3Rpb25AAPAaMCwiRXNzZW50aWFsIE9ubHkiOjEsIkFuYWx5dGljcyI6MCwiTWFya2V5ALAiOjB9fSwiZXZlbkoAIlt7CwBBIjoiY0IBYENoYW5nZWUBD70AAA9aAQ_AQURFRCI6IjEifV19
204 No Content 0 B URL HTTP/2 nexus.rechannelapi.com/privacy/v1/c/r.rnc?n=2&c=2273&i=68o28i&p=dos-prod&s=525&d=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_AQURFRCI6IjEifV19
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /privacy/v1/c/r.rnc?n=2&c=2273&i=68o28i&p=dos-prod&s=525&d=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_AQURFRCI6IjEifV19 HTTP/1.1
Host: nexus.rechannelapi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jackpotcitycasino.com/
Cookie: __cf_bm=5pOMcifXtstI1SsgHb519Q3Sy6vFegfteYytTZNFouo-1662840034-0-AWcX2/SkveY9spTQTKL0gYnWnmh0XCigqbJLtb6ta09McFcGKu+T2cahTEi/CMsMRBM1AKHkzwDbWGKF02HZdhaJr7SkMRd25F591WtuwiOH
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sat, 10 Sep 2022 20:00:35 GMT
expires: Sat, 10 Sep 2022 20:00:34 GMT
cache-control: no-cache, no-store
x-cache: Miss from cloudfront
via: 1.1 eddbc5f97ff2aa6a4fb8714754b065e0.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: 3Wxufl7COEcHfhH_4sAmWhXOP0AjjcJUmBWdHk1tev_tTD95rFbYGA==
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 748ac02f4c90b511-OSL
X-Firefox-Spdy: h2
nexus.rechannelapi.com/privacy/v1/b/r.rnc?n=0&c=2273&i=8r7cl5&p=dos-prod&s=333&d=8Ep7InZlcnNpb24iOiIxLjAuMCIsImdhdGV3YXkiOiIyLjMuNTc0IiwiY2xpZW50SWQiOjIyNzMsInB1Ymxpc2hQYXRoIjoiZG9zLXByb2QiLCJpbnN0YW5jZSsA8BQiOHI3Y2w1IiwicGFja2V0IjowLCJtb2RlIjoiZW5mb3JjZVsA8ixvb2tpZXMiOnt9LCJlbnZpcm9ubWVudCI6Ik5vcndlZ2lhbiIsInJlcXVlc3RzIjpbeyJkZXN0aW5hdLkAYCIsInR5cFYA8A9iaWxsaW5nIiwic3RhcnQiOjE2NjI4NDAwMjU4MTVfAKBkIjotMSwic291fgAiOiIrAEF0dXMiDABgcmVhc29uZQDUXSwiZGF0YVBhdHRlchIAwmxpc3QiOltdLCJpZF0AwDg0MDAyNTgxNX1dfQ
204 No Content 0 B URL HTTP/2 nexus.rechannelapi.com/privacy/v1/b/r.rnc?n=0&c=2273&i=8r7cl5&p=dos-prod&s=333&d=8Ep7InZlcnNpb24iOiIxLjAuMCIsImdhdGV3YXkiOiIyLjMuNTc0IiwiY2xpZW50SWQiOjIyNzMsInB1Ymxpc2hQYXRoIjoiZG9zLXByb2QiLCJpbnN0YW5jZSsA8BQiOHI3Y2w1IiwicGFja2V0IjowLCJtb2RlIjoiZW5mb3JjZVsA8ixvb2tpZXMiOnt9LCJlbnZpcm9ubWVudCI6Ik5vcndlZ2lhbiIsInJlcXVlc3RzIjpbeyJkZXN0aW5hdLkAYCIsInR5cFYA8A9iaWxsaW5nIiwic3RhcnQiOjE2NjI4NDAwMjU4MTVfAKBkIjotMSwic291fgAiOiIrAEF0dXMiDABgcmVhc29uZQDUXSwiZGF0YVBhdHRlchIAwmxpc3QiOltdLCJpZF0AwDg0MDAyNTgxNX1dfQ
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /privacy/v1/b/r.rnc?n=0&c=2273&i=8r7cl5&p=dos-prod&s=333&d=8Ep7InZlcnNpb24iOiIxLjAuMCIsImdhdGV3YXkiOiIyLjMuNTc0IiwiY2xpZW50SWQiOjIyNzMsInB1Ymxpc2hQYXRoIjoiZG9zLXByb2QiLCJpbnN0YW5jZSsA8BQiOHI3Y2w1IiwicGFja2V0IjowLCJtb2RlIjoiZW5mb3JjZVsA8ixvb2tpZXMiOnt9LCJlbnZpcm9ubWVudCI6Ik5vcndlZ2lhbiIsInJlcXVlc3RzIjpbeyJkZXN0aW5hdLkAYCIsInR5cFYA8A9iaWxsaW5nIiwic3RhcnQiOjE2NjI4NDAwMjU4MTVfAKBkIjotMSwic291fgAiOiIrAEF0dXMiDABgcmVhc29uZQDUXSwiZGF0YVBhdHRlchIAwmxpc3QiOltdLCJpZF0AwDg0MDAyNTgxNX1dfQ HTTP/1.1
Host: nexus.rechannelapi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jackpotcitycasino.com/
Cookie: __cf_bm=5pOMcifXtstI1SsgHb519Q3Sy6vFegfteYytTZNFouo-1662840034-0-AWcX2/SkveY9spTQTKL0gYnWnmh0XCigqbJLtb6ta09McFcGKu+T2cahTEi/CMsMRBM1AKHkzwDbWGKF02HZdhaJr7SkMRd25F591WtuwiOH
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sat, 10 Sep 2022 20:00:35 GMT
expires: Sat, 10 Sep 2022 20:00:34 GMT
cache-control: no-cache, no-store
x-cache: Miss from cloudfront
via: 1.1 36510edbc7ba8916907c18e15b00f64c.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: eDJp_6P6NCuu_zGH-wLJXh4NSWgjECqGmBLzBPm_SQdaCZcVdDc9HA==
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 748ac0307e29b511-OSL
X-Firefox-Spdy: h2
nexus.rechannelapi.com/privacy/v1/b/r.rnc?n=1&c=2273&i=8r7cl5&p=dos-prod&s=708&d=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
204 No Content 0 B URL HTTP/2 nexus.rechannelapi.com/privacy/v1/b/r.rnc?n=1&c=2273&i=8r7cl5&p=dos-prod&s=708&d=8Ep7InZlcnNpb24iOiIxLjAuMCIsImdhdGV3YXkiOiIyLjMuNTc0IiwiY2xpZW50SWQiOjIyNzMsInB1Ymxpc2hQYXRoIjoiZG9zLXByb2QiLCJpbnN0YW5jZSsA8BQiOHI3Y2w1IiwicGFja2V0IjoxLCJtb2RlIjoiZW5mb3JjZVsA8ixvb2tpZXMiOnt9LCJlbnZpcm9ubWVudCI6Ik5vcndlZ2lhbiIsInJlcXVlc3RzIjpbeyJkZXN0aW5hdLkA8BVodHRwczovL2Nvbm5lY3QuZmFjZWJvb2submV0L3NpZ25hbHMdAPAVZmlnLzM0OTAyMjMzNjMxNDM2OD92PTIuOS43OSZyPXN0YWJskgAwdHlwowDQc2NyaXB0Iiwic3Rhcr0AwDY2Mjg0MDAyNTcxOasARmQiOjEUAHA0NSwic2911QDQOiJpbnNlcnRCZWZvclIA8ABzdGF0dXMiOiJibG9ja2UpAWByZWFzb27PAPEJIldoaXRlbGlzdCJdLCJkYXRhUGF0dGVyHQAxXSwiGgAqOlsnABJpfQDPMTQwMjU2Njg4NX0sFwEF9gp3d3cuZ29vZ2xlLWFuYWx5dGljcy5jb20vDgBfanMiLCL3AA8uNjj3AC83MPcATBRBtAAAHgED9wDQNDEzNTMyNDMxN31dfQ
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /privacy/v1/b/r.rnc?n=1&c=2273&i=8r7cl5&p=dos-prod&s=708&d=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 HTTP/1.1
Host: nexus.rechannelapi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jackpotcitycasino.com/
Cookie: __cf_bm=5pOMcifXtstI1SsgHb519Q3Sy6vFegfteYytTZNFouo-1662840034-0-AWcX2/SkveY9spTQTKL0gYnWnmh0XCigqbJLtb6ta09McFcGKu+T2cahTEi/CMsMRBM1AKHkzwDbWGKF02HZdhaJr7SkMRd25F591WtuwiOH
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sat, 10 Sep 2022 20:00:38 GMT
expires: Sat, 10 Sep 2022 20:00:37 GMT
cache-control: no-cache, no-store
x-cache: Miss from cloudfront
via: 1.1 eddbc5f97ff2aa6a4fb8714754b065e0.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: Xjk1ZrTk9XbxsZDx9bOefF8wGMwmwDeauYD-MgtbSbJjzUh1zx1rSA==
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 748ac03df868b511-OSL
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9a798806-4378-4646-89ee-e50837809910.jpeg
200 OK 9.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9a798806-4378-4646-89ee-e50837809910.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1abac18a85802f38f08561ac64020b55
afbc7666fa0b2093ef0c5d9a955d54d139c09b30
eae7f28dd178293939ecd81082ab68ae6098bb3cb1f1fe9411c38314ddb0f944
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9a798806-4378-4646-89ee-e50837809910.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 9610
x-amzn-requestid: 34102145-abda-4987-a68d-9069496366ea
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YNj0oF7loAMF6zg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631bb350-52aee64214c814812c03262e;Sampled=0
x-amzn-remapped-date: Fri, 09 Sep 2022 21:42:40 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 91AsC8-zVFCOPHFb2qnlTev2aXzdCEDYtc68JtYYsQSKS7OFF4QzgQ==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Sep 2022 22:00:27 GMT
age: 79212
etag: "afbc7666fa0b2093ef0c5d9a955d54d139c09b30"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.jackpotcitycasino.com/cdn-cgi/rum?
200 OK 0 B URL HTTP/2 www.jackpotcitycasino.com/cdn-cgi/rum?
IP
POST /cdn-cgi/rum? HTTP/1.1
Host: www.jackpotcitycasino.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/json
Content-Length: 18275
Origin: https://www.jackpotcitycasino.com
Connection: keep-alive
Referer: https://www.jackpotcitycasino.com/norge/
Cookie: Visit=visitId%3d91f8c434-45c2-44e4-8d45-4bd850a1865f%26eventId%3dJCTYPEINTRAFFIC%26promoId%3d24408%26s%3daff20307%26a%3dbfpadid94318%26b%3dJCTYPEINTRAFFIC; GA-Details=null; __cf_bm=t1yJ614tPCu6.olX95FiRvRF45wYkNqrxEbWVdi2Q0g-1662840033-0-ASoFptYePlGroPlSdoF3OwHMQpp4Gt2w9jPz+WPR3q5tuR1JrOVZuw6WbghTMjWQ1mjgIsXMy7pONuctNpq0zig=; CMSPreferredCulture=nn-NO; CMSCsrfCookie=e4JKSuUs1N5gPbvQzpHPnr2xfOM8QUiWHTl1Tifd; ASP.NET_SessionId=guxg1qqlhcofz5d4dzajiuyo; CMSCurrentTheme=base-jpc; _ga_CQT5K0M51H=GS1.1.1662840024.1.0.1662840024.0.0.0; _ga=GA1.1.1666782392.1662840025; _one_NjE4NTEz=8ba3f54f-4b9a-f53b-ac15-ee7df91c45c4; DEFAULT_ENSIGHTEN_PRIVACY_BANNER_LOADED=1; DEFAULT_ENSIGHTEN_PRIVACY_BANNER_VIEWED=1; DEFAULT_ENSIGHTEN_PRIVACY_MODAL_LOADED=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Sep 2022 20:00:35 GMT
content-type: text/plain
access-control-allow-origin: https://www.jackpotcitycasino.com
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 748ac030ad43992a-ARN
x-frame-options: DENY
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
www.jackpotcitycasino.com/ldnjpc/media/jpc19/play_ico.svg
200 OK 0 B URL HTTP/2 www.jackpotcitycasino.com/ldnjpc/media/jpc19/play_ico.svg
IP
GET /ldnjpc/media/jpc19/play_ico.svg HTTP/1.1
Host: www.jackpotcitycasino.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jackpotcitycasino.com/norge/
Cookie: Visit=visitId%3d91f8c434-45c2-44e4-8d45-4bd850a1865f%26eventId%3dJCTYPEINTRAFFIC%26promoId%3d24408%26s%3daff20307%26a%3dbfpadid94318%26b%3dJCTYPEINTRAFFIC; GA-Details=null; __cf_bm=t1yJ614tPCu6.olX95FiRvRF45wYkNqrxEbWVdi2Q0g-1662840033-0-ASoFptYePlGroPlSdoF3OwHMQpp4Gt2w9jPz+WPR3q5tuR1JrOVZuw6WbghTMjWQ1mjgIsXMy7pONuctNpq0zig=; CMSPreferredCulture=nn-NO; CMSCsrfCookie=e4JKSuUs1N5gPbvQzpHPnr2xfOM8QUiWHTl1Tifd; ASP.NET_SessionId=guxg1qqlhcofz5d4dzajiuyo; CMSCurrentTheme=base-jpc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Sep 2022 20:00:34 GMT
content-type: image/svg+xml
last-modified: Tue, 30 Nov 2021 09:00:53 GMT
etag: W/"5a9ad4c7c8e5d71:0"
x-frame-options: SAMEORIGIN
x-powered-by: ASP.NET
cf-cache-status: HIT
age: 57
expires: Sun, 11 Sep 2022 00:00:34 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
server: cloudflare
cf-ray: 748ac025fe01992a-ARN
content-encoding: gzip
X-Firefox-Spdy: h2
www.jackpotcitycasino.com/CMSScripts/Custom/swiper.min.js
200 OK 0 B URL HTTP/2 www.jackpotcitycasino.com/CMSScripts/Custom/swiper.min.js
IP
GET /CMSScripts/Custom/swiper.min.js HTTP/1.1
Host: www.jackpotcitycasino.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jackpotcitycasino.com/norge/
Cookie: Visit=visitId%3d91f8c434-45c2-44e4-8d45-4bd850a1865f%26eventId%3dJCTYPEINTRAFFIC%26promoId%3d24408%26s%3daff20307%26a%3dbfpadid94318%26b%3dJCTYPEINTRAFFIC; GA-Details=null; __cf_bm=t1yJ614tPCu6.olX95FiRvRF45wYkNqrxEbWVdi2Q0g-1662840033-0-ASoFptYePlGroPlSdoF3OwHMQpp4Gt2w9jPz+WPR3q5tuR1JrOVZuw6WbghTMjWQ1mjgIsXMy7pONuctNpq0zig=; CMSPreferredCulture=nn-NO; CMSCsrfCookie=e4JKSuUs1N5gPbvQzpHPnr2xfOM8QUiWHTl1Tifd; ASP.NET_SessionId=guxg1qqlhcofz5d4dzajiuyo; CMSCurrentTheme=base-jpc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Sep 2022 20:00:34 GMT
content-type: application/javascript
content-encoding: gzip
last-modified: Fri, 30 Jul 2021 08:39:11 GMT
etag: "73af785e1e85d71:0"
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
x-powered-by: ASP.NET
cf-cache-status: HIT
age: 568
expires: Sun, 11 Sep 2022 00:00:34 GMT
cache-control: public, max-age=14400
server: cloudflare
cf-ray: 748ac0260e1a992a-ARN
X-Firefox-Spdy: h2
nexus.rechannelapi.com/betway/dos-prod/code/9c00886418efb817546f4c16b427808d.js?conditionId0=476355
200 OK 0 B URL HTTP/2 nexus.rechannelapi.com/betway/dos-prod/code/9c00886418efb817546f4c16b427808d.js?conditionId0=476355
IP
GET /betway/dos-prod/code/9c00886418efb817546f4c16b427808d.js?conditionId0=476355 HTTP/1.1
Host: nexus.rechannelapi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jackpotcitycasino.com/
Cookie: __cf_bm=5pOMcifXtstI1SsgHb519Q3Sy6vFegfteYytTZNFouo-1662840034-0-AWcX2/SkveY9spTQTKL0gYnWnmh0XCigqbJLtb6ta09McFcGKu+T2cahTEi/CMsMRBM1AKHkzwDbWGKF02HZdhaJr7SkMRd25F591WtuwiOH
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Sep 2022 20:00:36 GMT
content-type: application/javascript; charset=utf-8
x-amz-replication-status: PENDING
last-modified: Thu, 04 Aug 2022 14:52:52 GMT
etag: W/"98ec0719595b1e3ad10ff75a75c8de4e"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=315360000
x-amz-version-id: I1N8P1bdPJV7pa9udfnEoQ.tWC8ujLew
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Ijm5souWa6SLDK8DlKdcOykjNpi1KdzA0EZAHFtNc_l_S7klsnm41A==
cf-cache-status: HIT
age: 3215215
expires: Tue, 07 Sep 2032 20:00:36 GMT
server: cloudflare
cf-ray: 748ac0316f3cb511-OSL
X-Firefox-Spdy: h2
www.jackpotcitycasino.com/api/casinoprogressive/counters/
200 OK 0 B URL HTTP/2 www.jackpotcitycasino.com/api/casinoprogressive/counters/
IP
POST /api/casinoprogressive/counters/ HTTP/1.1
Host: www.jackpotcitycasino.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.jackpotcitycasino.com/norge/
api-key: 8513a494-f3bb-45d7-8347-a2b252c0b38b
content-type: application/json
Origin: https://www.jackpotcitycasino.com
Content-Length: 110
Connection: keep-alive
Cookie: Visit=visitId%3d91f8c434-45c2-44e4-8d45-4bd850a1865f%26eventId%3dJCTYPEINTRAFFIC%26promoId%3d24408%26s%3daff20307%26a%3dbfpadid94318%26b%3dJCTYPEINTRAFFIC; GA-Details=null; __cf_bm=t1yJ614tPCu6.olX95FiRvRF45wYkNqrxEbWVdi2Q0g-1662840033-0-ASoFptYePlGroPlSdoF3OwHMQpp4Gt2w9jPz+WPR3q5tuR1JrOVZuw6WbghTMjWQ1mjgIsXMy7pONuctNpq0zig=; CMSPreferredCulture=nn-NO; CMSCsrfCookie=e4JKSuUs1N5gPbvQzpHPnr2xfOM8QUiWHTl1Tifd; ASP.NET_SessionId=guxg1qqlhcofz5d4dzajiuyo; CMSCurrentTheme=base-jpc; _ga_CQT5K0M51H=GS1.1.1662840024.1.0.1662840024.0.0.0; _ga=GA1.1.1666782392.1662840025; _one_NjE4NTEz=8ba3f54f-4b9a-f53b-ac15-ee7df91c45c4; DEFAULT_ENSIGHTEN_PRIVACY_BANNER_LOADED=1; DEFAULT_ENSIGHTEN_PRIVACY_BANNER_VIEWED=1; DEFAULT_ENSIGHTEN_PRIVACY_MODAL_LOADED=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Sep 2022 20:00:37 GMT
content-type: application/json; charset=utf-8
cache-control: no-cache
pragma: no-cache
expires: -1
x-frame-options: SAMEORIGIN
set-cookie: CMSPreferredCulture=en-US; expires=Sun, 10-Sep-2023 20:00:35 GMT; path=/; HttpOnly
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 748ac0307cbd992a-ARN
content-encoding: gzip
X-Firefox-Spdy: h2
static.cloudflareinsights.com/beacon.min.js/v652eace1692a40cfa3763df669d7439c1639079717194
200 OK 0 B URL HTTP/2 static.cloudflareinsights.com/beacon.min.js/v652eace1692a40cfa3763df669d7439c1639079717194
IP
GET /beacon.min.js/v652eace1692a40cfa3763df669d7439c1639079717194 HTTP/1.1
Host: static.cloudflareinsights.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.jackpotcitycasino.com
Connection: keep-alive
Referer: https://www.jackpotcitycasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 10 Sep 2022 20:00:34 GMT
content-type: text/javascript;charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=86400
etag: W/2021.12.0
last-modified: Thu, 09 Dec 2021 19:55:17 GMT
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 748ac0269bb00b59-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
nexus.rechannelapi.com/betway/dos-prod/serverComponent.php?namespace=Bootstrapper&staticJsPath=/betway/dos-prod/code/&publishedOn=Thu%20Sep%2001%2013:57:45%20GMT%202022&ClientID=2273&PageID=https%3A%2F%2Fwww.jackpotcitycasino.com%2Fnorge%2F&custDomain=nexus.rechannelapi.com
200 OK 0 B URL HTTP/2 nexus.rechannelapi.com/betway/dos-prod/serverComponent.php?namespace=Bootstrapper&staticJsPath=/betway/dos-prod/code/&publishedOn=Thu%20Sep%2001%2013:57:45%20GMT%202022&ClientID=2273&PageID=https%3A%2F%2Fwww.jackpotcitycasino.com%2Fnorge%2F&custDomain=nexus.rechannelapi.com
IP
GET /betway/dos-prod/serverComponent.php?namespace=Bootstrapper&staticJsPath=/betway/dos-prod/code/&publishedOn=Thu%20Sep%2001%2013:57:45%20GMT%202022&ClientID=2273&PageID=https%3A%2F%2Fwww.jackpotcitycasino.com%2Fnorge%2F&custDomain=nexus.rechannelapi.com HTTP/1.1
Host: nexus.rechannelapi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jackpotcitycasino.com/
Cookie: __cf_bm=5pOMcifXtstI1SsgHb519Q3Sy6vFegfteYytTZNFouo-1662840034-0-AWcX2/SkveY9spTQTKL0gYnWnmh0XCigqbJLtb6ta09McFcGKu+T2cahTEi/CMsMRBM1AKHkzwDbWGKF02HZdhaJr7SkMRd25F591WtuwiOH
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Sep 2022 20:00:36 GMT
content-type: text/javascript
expires: Sat, 10 Sep 2022 20:00:35 GMT
cache-control: no-cache, no-store
x-cache: Miss from cloudfront
via: 1.1 115d56d751589aa02dcc0096dd66b552.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: ALXmZ95Bwy2-pNNN5lvnAW_6nR4VI2y7KAzNZVgS1Me97X5Oq_Yz4Q==
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 748ac0309e4db511-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
www.jackpotcitycasino.com/api/casinoprogressive/jackpotstotal/
200 OK 0 B URL HTTP/2 www.jackpotcitycasino.com/api/casinoprogressive/jackpotstotal/
IP
POST /api/casinoprogressive/jackpotstotal/ HTTP/1.1
Host: www.jackpotcitycasino.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.jackpotcitycasino.com/norge/
api-key: 8513a494-f3bb-45d7-8347-a2b252c0b38b
content-type: application/json
Origin: https://www.jackpotcitycasino.com
Content-Length: 110
Connection: keep-alive
Cookie: Visit=visitId%3d91f8c434-45c2-44e4-8d45-4bd850a1865f%26eventId%3dJCTYPEINTRAFFIC%26promoId%3d24408%26s%3daff20307%26a%3dbfpadid94318%26b%3dJCTYPEINTRAFFIC; GA-Details=null; __cf_bm=t1yJ614tPCu6.olX95FiRvRF45wYkNqrxEbWVdi2Q0g-1662840033-0-ASoFptYePlGroPlSdoF3OwHMQpp4Gt2w9jPz+WPR3q5tuR1JrOVZuw6WbghTMjWQ1mjgIsXMy7pONuctNpq0zig=; CMSPreferredCulture=nn-NO; CMSCsrfCookie=e4JKSuUs1N5gPbvQzpHPnr2xfOM8QUiWHTl1Tifd; ASP.NET_SessionId=guxg1qqlhcofz5d4dzajiuyo; CMSCurrentTheme=base-jpc; _ga_CQT5K0M51H=GS1.1.1662840024.1.0.1662840024.0.0.0; _ga=GA1.1.1666782392.1662840025; _one_NjE4NTEz=8ba3f54f-4b9a-f53b-ac15-ee7df91c45c4; DEFAULT_ENSIGHTEN_PRIVACY_BANNER_LOADED=1; DEFAULT_ENSIGHTEN_PRIVACY_BANNER_VIEWED=1; DEFAULT_ENSIGHTEN_PRIVACY_MODAL_LOADED=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Sep 2022 20:00:36 GMT
content-type: application/json; charset=utf-8
cache-control: no-cache
pragma: no-cache
expires: -1
x-frame-options: SAMEORIGIN
set-cookie: CMSPreferredCulture=en-US; expires=Sun, 10-Sep-2023 20:00:35 GMT; path=/; HttpOnly
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 748ac0306cb4992a-ARN
content-encoding: gzip
X-Firefox-Spdy: h2
www.jackpotcitycasino.com/api/casinoprogressive/exchangerate/
200 OK 0 B URL HTTP/2 www.jackpotcitycasino.com/api/casinoprogressive/exchangerate/
IP
POST /api/casinoprogressive/exchangerate/ HTTP/1.1
Host: www.jackpotcitycasino.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.jackpotcitycasino.com/norge/
api-key: 8513a494-f3bb-45d7-8347-a2b252c0b38b
content-type: application/json
Origin: https://www.jackpotcitycasino.com
Content-Length: 110
Connection: keep-alive
Cookie: Visit=visitId%3d91f8c434-45c2-44e4-8d45-4bd850a1865f%26eventId%3dJCTYPEINTRAFFIC%26promoId%3d24408%26s%3daff20307%26a%3dbfpadid94318%26b%3dJCTYPEINTRAFFIC; GA-Details=null; __cf_bm=t1yJ614tPCu6.olX95FiRvRF45wYkNqrxEbWVdi2Q0g-1662840033-0-ASoFptYePlGroPlSdoF3OwHMQpp4Gt2w9jPz+WPR3q5tuR1JrOVZuw6WbghTMjWQ1mjgIsXMy7pONuctNpq0zig=; CMSPreferredCulture=nn-NO; CMSCsrfCookie=e4JKSuUs1N5gPbvQzpHPnr2xfOM8QUiWHTl1Tifd; ASP.NET_SessionId=guxg1qqlhcofz5d4dzajiuyo; CMSCurrentTheme=base-jpc; _ga_CQT5K0M51H=GS1.1.1662840024.1.0.1662840024.0.0.0; _ga=GA1.1.1666782392.1662840025; _one_NjE4NTEz=8ba3f54f-4b9a-f53b-ac15-ee7df91c45c4; DEFAULT_ENSIGHTEN_PRIVACY_BANNER_LOADED=1; DEFAULT_ENSIGHTEN_PRIVACY_BANNER_VIEWED=1; DEFAULT_ENSIGHTEN_PRIVACY_MODAL_LOADED=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Sep 2022 20:00:36 GMT
content-type: application/json; charset=utf-8
cache-control: no-cache
pragma: no-cache
expires: -1
x-frame-options: SAMEORIGIN
set-cookie: CMSPreferredCulture=en-US; expires=Sun, 10-Sep-2023 20:00:35 GMT; path=/; HttpOnly
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 748ac0307cbe992a-ARN
content-encoding: gzip
X-Firefox-Spdy: h2
64.225.91.73
104.18.20.226
23.33.119.27
93.184.220.29
151.101.85.229
5.79.68.236
157.240.200.14
64.190.63.136