www.casumo.com/?btag=0_2DCF4211F36A4A12B9700C5E59402665&affid=0&bid=1&pid=0&utm_source=0&utm_medium=affiliate&utm_campaign=0&utm_content=1
301 Moved Permanently 0 B URL HTTP/1.1 www.casumo.com/?btag=0_2DCF4211F36A4A12B9700C5E59402665&affid=0&bid=1&pid=0&utm_source=0&utm_medium=affiliate&utm_campaign=0&utm_content=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?btag=0_2DCF4211F36A4A12B9700C5E59402665&affid=0&bid=1&pid=0&utm_source=0&utm_medium=affiliate&utm_campaign=0&utm_content=1 HTTP/1.1
Host: www.casumo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Wed, 18 Jan 2023 07:37:34 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Wed, 18 Jan 2023 08:37:34 GMT
Location: https://www.casumo.com/?btag=0_2DCF4211F36A4A12B9700C5E59402665&affid=0&bid=1&pid=0&utm_source=0&utm_medium=affiliate&utm_campaign=0&utm_content=1
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Server: cloudflare
CF-RAY: 78b5aa848a961c16-OSL
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 648bf42163c5d645d8a33cd0a9afebd0
9b9ac85435c4e90647e8379bca54c689058a8929
060757fb4857858d4d01a715824ea6771d0137e73a24bf75e2844d0f346380fa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "060757FB4857858D4D01A715824EA6771D0137E73A24BF75E2844D0F346380FA"
Last-Modified: Tue, 17 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5169
Expires: Wed, 18 Jan 2023 09:03:43 GMT
Date: Wed, 18 Jan 2023 07:37:34 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cc07d664b5dadee6f9120d54904dfa57
df75a55b0b2019684a6c512bee528c51a2c4a756
14a1bd6315a3256468edafedfd1c02a6ba147914c0f01e8504e7d8cc67781c34
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "14A1BD6315A3256468EDAFEDFD1C02A6BA147914C0F01E8504E7D8CC67781C34"
Last-Modified: Tue, 17 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4209
Expires: Wed, 18 Jan 2023 08:47:43 GMT
Date: Wed, 18 Jan 2023 07:37:34 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash ff250d3ef3fa45322bf05039a0122a9f
b3e7a2c383bce1bab807dbe1a03c375258b51f1d
d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Content-Type, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 18 Jan 2023 07:34:22 GMT
content-type: application/json
age: 192
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6c8239f3894cfba54d1f3a9ea1c85db5
a70f2b3bf79f2aa26b0cc0340dd182565c3eb946
64dc0508d3fcea1ec92fb60310e9b3f5454c0b69f61e8453fd443bc46ab9471b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "64DC0508D3FCEA1EC92FB60310E9B3F5454C0B69F61E8453FD443BC46AB9471B"
Last-Modified: Tue, 17 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3602
Expires: Wed, 18 Jan 2023 08:37:36 GMT
Date: Wed, 18 Jan 2023 07:37:34 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: +5BVV9RHCRd16rqVtp4YjSc+a5IASpVv3mg3QQDZIXTVOCZtTH7wbwCLgHswH7qbnfCaqDCv1xo=
x-amz-request-id: 0R0XH1MQ0CQCXGA4
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 18 Jan 2023 06:45:18 GMT
age: 3136
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
www.casumo.com/?btag=0_2DCF4211F36A4A12B9700C5E59402665&affid=0&bid=1&pid=0&utm_source=0&utm_medium=affiliate&utm_campaign=0&utm_content=1
301 Moved Permanently 0 B URL HTTP/2 www.casumo.com/?btag=0_2DCF4211F36A4A12B9700C5E59402665&affid=0&bid=1&pid=0&utm_source=0&utm_medium=affiliate&utm_campaign=0&utm_content=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?btag=0_2DCF4211F36A4A12B9700C5E59402665&affid=0&bid=1&pid=0&utm_source=0&utm_medium=affiliate&utm_campaign=0&utm_content=1 HTTP/1.1
Host: www.casumo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 301 Moved Permanently
date: Wed, 18 Jan 2023 07:37:34 GMT
content-length: 0
location: https://www.casumo.com/no/?btag=0_2DCF4211F36A4A12B9700C5E59402665&affid=0&bid=1&pid=0&utm_source=0&utm_medium=affiliate&utm_campaign=0&utm_content=1
cache-control: no-cache, no-store, must-revalidate, max-age=0, smax-age=0
x-casumo: true
vary: Accept-Encoding
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 78b5aa862ed50b31-OSL
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 18 Jan 2023 07:37:34 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
www.casumo.com/los2assets/lineto-circular-pro-book.3d6bddcb27ca32c3903e7dcd065e222f.woff2
200 OK 31 kB URL HTTP/2 www.casumo.com/los2assets/lineto-circular-pro-book.3d6bddcb27ca32c3903e7dcd065e222f.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 31352, version 1.0\012- data
Hash 3d6bddcb27ca32c3903e7dcd065e222f
4f05b26f64aae0d1e39aea73c1a8bf429808f965
726b048564807edb46155b15f4d297f2cb98f9c29e2bda0acc6d3d15e9e8fcaf
GET /los2assets/lineto-circular-pro-book.3d6bddcb27ca32c3903e7dcd065e222f.woff2 HTTP/1.1
Host: www.casumo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casumo.com/no/?btag=0_2DCF4211F36A4A12B9700C5E59402665&affid=0&bid=1&pid=0&utm_source=0&utm_medium=affiliate&utm_campaign=0&utm_content=1
Cookie: kazumoTrackingId=0ea7d5f3-9334-4a34-820f-ece7b0d568bc; kazumoMedium=eyJyZWZlcnJlckluZm8iOnsib2ZmZXJJZCI6bnVsbCwidGFyZ2V0Q2FtcGFpZ25JZCI6ImRlZmF1bHQiLCJtZXRhZGF0YSI6eyJiYW5uZXJJZCI6IjBfMkRDRjQyMTFGMzZBNEExMkI5NzAwQzVFNTk0MDI2NjUiLCJhZmZJZCI6IjBfMkRDRiJ9fX0%3D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 18 Jan 2023 07:37:34 GMT
content-type: font/woff2
content-length: 31352
cache-control: public, max-age=31536000
last-modified: Fri, 13 Jan 2023 09:46:20 GMT
etag: W/"7a78-185aa85e5e0"
x-envoy-upstream-service-time: 2
content-security-policy: frame-ancestors 'self' https://www.casumo.es https://casumo.es https://www.casumo.de https://casumo.de https://*.casumo.com https://www.casumokasino.com https://www.casumocasino.dk https://umo-egb.allianceservices.im https://evo-livecasino.casumo.com https://casumo.evo-games.com https://casumo-es.evo-games.com https://nrgs-b2b.greentube.com https://mobile2.gameassists.co.uk https://casumo-static.casinomodule.com https://casumose-static.casinomodule.com https://casumodk-static.casinomodule.com https://dpovs7i3r9tz1.cloudfront.net https://nyxmaltargs.blueprintgaming.com https://casumo-cw.playngonetwork.com https://adkcw.playngonetwork.com https://d1k6j4zyghhevb.cloudfront.net https://platform.rgsgames.com https://rgs-cust02.lab.wagerworks.com https://casumo-game.thunderkick.com https://lon-portfolio.wimobile.casinarena.com https://staticlive.yggdrasilgaming.com https://clients.casumogames.com https://regily.com https://*.regily.com https://*.contentful.com https://player.eu.regulated.pushgaming.com https://mesh.eu.regulated.pushgaming.com https://www.casumokasino.com https://tegb-edict-nex-umo.allianceservices.im https://uat1-casumo.evolutiongaming.com https://gg-nrgs-b2b-staging.greentube.com https://redirector32.valueactive.eu https://casumo-static-test.casinomodule.com https://casumose-static-test.casinomodule.com https://casumodk-static-test.casinomodule.com https://nyxmaltargspubst.blueprintgaming.com https://nogs-gl-stage.nyxmalta.com https://mltstage.playngonetwork.com https://adkcwstage.playngonetwork.com https://d2drhksbtcqozo.cloudfront.net https://rgs-cust02.lab.wagerworks.com https://ext-qa-gameservice.thunderkick.com https://lon-pt-mob.wi-gameserver.com https://staticstaginguk.yggdrasilgaming.com https://clients.test.casumogames.com http://*.casumotest.local https://regily.com https://*.regily.com https://*.contentful.com https://games.regulated-eu-staging.gsi.io
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 66904
expires: Thu, 18 Jan 2024 07:37:34 GMT
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 78b5aa87d83e0b31-OSL
X-Firefox-Spdy: h2
www.casumo.com/los2assets/lineto-circular-pro-black.910bc52613301987147cc67aabb50d02.woff2
200 OK 36 kB URL HTTP/2 www.casumo.com/los2assets/lineto-circular-pro-black.910bc52613301987147cc67aabb50d02.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 35584, version 1.0\012- data
Hash 910bc52613301987147cc67aabb50d02
503579c577f6ba57ad13d55ae40d277c69375b4b
58d2a0095b0882833a45e4b75b4750c2e762146a3b456108986e6d5132565384
GET /los2assets/lineto-circular-pro-black.910bc52613301987147cc67aabb50d02.woff2 HTTP/1.1
Host: www.casumo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casumo.com/no/?btag=0_2DCF4211F36A4A12B9700C5E59402665&affid=0&bid=1&pid=0&utm_source=0&utm_medium=affiliate&utm_campaign=0&utm_content=1
Cookie: kazumoTrackingId=0ea7d5f3-9334-4a34-820f-ece7b0d568bc; kazumoMedium=eyJyZWZlcnJlckluZm8iOnsib2ZmZXJJZCI6bnVsbCwidGFyZ2V0Q2FtcGFpZ25JZCI6ImRlZmF1bHQiLCJtZXRhZGF0YSI6eyJiYW5uZXJJZCI6IjBfMkRDRjQyMTFGMzZBNEExMkI5NzAwQzVFNTk0MDI2NjUiLCJhZmZJZCI6IjBfMkRDRiJ9fX0%3D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 18 Jan 2023 07:37:34 GMT
content-type: font/woff2
content-length: 35584
cache-control: public, max-age=31536000
last-modified: Fri, 13 Jan 2023 09:46:20 GMT
etag: W/"8b00-185aa85e5e0"
x-envoy-upstream-service-time: 1
content-security-policy: frame-ancestors 'self' https://www.casumo.es https://casumo.es https://www.casumo.de https://casumo.de https://*.casumo.com https://www.casumokasino.com https://www.casumocasino.dk https://umo-egb.allianceservices.im https://evo-livecasino.casumo.com https://casumo.evo-games.com https://casumo-es.evo-games.com https://nrgs-b2b.greentube.com https://mobile2.gameassists.co.uk https://casumo-static.casinomodule.com https://casumose-static.casinomodule.com https://casumodk-static.casinomodule.com https://dpovs7i3r9tz1.cloudfront.net https://nyxmaltargs.blueprintgaming.com https://casumo-cw.playngonetwork.com https://adkcw.playngonetwork.com https://d1k6j4zyghhevb.cloudfront.net https://platform.rgsgames.com https://rgs-cust02.lab.wagerworks.com https://casumo-game.thunderkick.com https://lon-portfolio.wimobile.casinarena.com https://staticlive.yggdrasilgaming.com https://clients.casumogames.com https://regily.com https://*.regily.com https://*.contentful.com https://player.eu.regulated.pushgaming.com https://mesh.eu.regulated.pushgaming.com https://www.casumokasino.com https://tegb-edict-nex-umo.allianceservices.im https://uat1-casumo.evolutiongaming.com https://gg-nrgs-b2b-staging.greentube.com https://redirector32.valueactive.eu https://casumo-static-test.casinomodule.com https://casumose-static-test.casinomodule.com https://casumodk-static-test.casinomodule.com https://nyxmaltargspubst.blueprintgaming.com https://nogs-gl-stage.nyxmalta.com https://mltstage.playngonetwork.com https://adkcwstage.playngonetwork.com https://d2drhksbtcqozo.cloudfront.net https://rgs-cust02.lab.wagerworks.com https://ext-qa-gameservice.thunderkick.com https://lon-pt-mob.wi-gameserver.com https://staticstaginguk.yggdrasilgaming.com https://clients.test.casumogames.com http://*.casumotest.local https://regily.com https://*.regily.com https://*.contentful.com https://games.regulated-eu-staging.gsi.io
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 66904
expires: Thu, 18 Jan 2024 07:37:34 GMT
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 78b5aa87d8370b31-OSL
X-Firefox-Spdy: h2
www.casumo.com/los2assets/pixel.5308eb7bcc5d24831125d1dacb2fda36.png
200 OK 137 B URL HTTP/2 www.casumo.com/los2assets/pixel.5308eb7bcc5d24831125d1dacb2fda36.png
IP
File type PNG image data, 5 x 5, 8-bit/color RGBA, non-interlaced\012- data
Hash 9f4f26e7020bc7fa832b161e4d8f64f1
bdbc7b878a3a039f3dc32f390e66934c21159660
b336483b38c92b11b79d71addf04fe8ee51e36d1ce672323f28f3712da0007a1
GET /los2assets/pixel.5308eb7bcc5d24831125d1dacb2fda36.png HTTP/1.1
Host: www.casumo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casumo.com/no/?btag=0_2DCF4211F36A4A12B9700C5E59402665&affid=0&bid=1&pid=0&utm_source=0&utm_medium=affiliate&utm_campaign=0&utm_content=1
Cookie: kazumoTrackingId=0ea7d5f3-9334-4a34-820f-ece7b0d568bc; kazumoMedium=eyJyZWZlcnJlckluZm8iOnsib2ZmZXJJZCI6bnVsbCwidGFyZ2V0Q2FtcGFpZ25JZCI6ImRlZmF1bHQiLCJtZXRhZGF0YSI6eyJiYW5uZXJJZCI6IjBfMkRDRjQyMTFGMzZBNEExMkI5NzAwQzVFNTk0MDI2NjUiLCJhZmZJZCI6IjBfMkRDRiJ9fX0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 18 Jan 2023 07:37:34 GMT
content-type: image/png
content-length: 137
cf-bgj: imgq:85,h2pri
cf-polished: origSize=2871
content-security-policy: frame-ancestors 'self' https://www.casumo.es https://casumo.es https://www.casumo.de https://casumo.de https://*.casumo.com https://www.casumokasino.com https://www.casumocasino.dk https://umo-egb.allianceservices.im https://evo-livecasino.casumo.com https://casumo.evo-games.com https://casumo-es.evo-games.com https://nrgs-b2b.greentube.com https://mobile2.gameassists.co.uk https://casumo-static.casinomodule.com https://casumose-static.casinomodule.com https://casumodk-static.casinomodule.com https://dpovs7i3r9tz1.cloudfront.net https://nyxmaltargs.blueprintgaming.com https://casumo-cw.playngonetwork.com https://adkcw.playngonetwork.com https://d1k6j4zyghhevb.cloudfront.net https://platform.rgsgames.com https://rgs-cust02.lab.wagerworks.com https://casumo-game.thunderkick.com https://lon-portfolio.wimobile.casinarena.com https://staticlive.yggdrasilgaming.com https://clients.casumogames.com https://regily.com https://*.regily.com https://*.contentful.com https://player.eu.regulated.pushgaming.com https://mesh.eu.regulated.pushgaming.com https://www.casumokasino.com https://tegb-edict-nex-umo.allianceservices.im https://uat1-casumo.evolutiongaming.com https://gg-nrgs-b2b-staging.greentube.com https://redirector32.valueactive.eu https://casumo-static-test.casinomodule.com https://casumose-static-test.casinomodule.com https://casumodk-static-test.casinomodule.com https://nyxmaltargspubst.blueprintgaming.com https://nogs-gl-stage.nyxmalta.com https://mltstage.playngonetwork.com https://adkcwstage.playngonetwork.com https://d2drhksbtcqozo.cloudfront.net https://rgs-cust02.lab.wagerworks.com https://ext-qa-gameservice.thunderkick.com https://lon-pt-mob.wi-gameserver.com https://staticstaginguk.yggdrasilgaming.com https://clients.test.casumogames.com http://*.casumotest.local https://regily.com https://*.regily.com https://*.contentful.com https://games.regulated-eu-staging.gsi.io
x-xss-protection: 1; mode=block
cache-control: public, max-age=31536000
etag: W/"b37-185aa85e5e0"
last-modified: Fri, 13 Jan 2023 09:46:20 GMT
x-envoy-upstream-service-time: 1
cf-cache-status: HIT
age: 70423
expires: Thu, 18 Jan 2024 07:37:34 GMT
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 78b5aa87e84b0b31-OSL
X-Firefox-Spdy: h2
images.casumo.com/0wnbu3m60jgf/77K8tgkDJ0DFx1vQmEBBE9/083f30060161be46bd04faef49bb59b7/Sticky_bar.png?w=150&fit=clamp&markscale=95&auto=compress%2Cformat&fm=png&markalign=top%2Ccenter&markfit=max&dpr=1&q=70
200 OK 4.3 kB URL HTTP/2 images.casumo.com/0wnbu3m60jgf/77K8tgkDJ0DFx1vQmEBBE9/083f30060161be46bd04faef49bb59b7/Sticky_bar.png?w=150&fit=clamp&markscale=95&auto=compress%2Cformat&fm=png&markalign=top%2Ccenter&markfit=max&dpr=1&q=70
IP
File type ISO Media, AVIF Image\012- data
Hash 85a9959265bdacbedb72febd57baf81e
325379537061deb6afedf80e37d6713330852b55
84a2ba97994a20a2f2aee24ffbcc32ff11ce474c459f30953a54e4dc2a70d296
GET /0wnbu3m60jgf/77K8tgkDJ0DFx1vQmEBBE9/083f30060161be46bd04faef49bb59b7/Sticky_bar.png?w=150&fit=clamp&markscale=95&auto=compress%2Cformat&fm=png&markalign=top%2Ccenter&markfit=max&dpr=1&q=70 HTTP/1.1
Host: images.casumo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casumo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Wed, 18 Jan 2023 07:37:34 GMT
content-type: image/avif
content-length: 4264
last-modified: Thu, 03 Nov 2022 13:42:22 GMT
cache-control: public, max-age=31536000
x-imgix-id: fcf6e6f76114ff0d328684f99598101acd11e1d2
x-imgix-render-farm: 01.560
x-imgix-original-status: 200
age: 6544512
accept-ranges: bytes
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10064-SJC, cache-bma1639-BMA
x-cache: HIT, HIT
vary: Accept, User-Agent
cf-cache-status: DYNAMIC
strict-transport-security: max-age=15552000
server: cloudflare
cf-ray: 78b5aa8848bc0b31-OSL
X-Firefox-Spdy: h2
images.casumo.com/0wnbu3m60jgf/3J1FB6xSVkvcuFBnaDdhc0/f2c94dd91c4aa60d59d9104287c7a608/Reel_Races_LOS_-_NO_Desktop.jpg?w=1440&fit=crop&markscale=95&auto=compress%2Cformat&fm=jpg&markalign=top%2Ccenter&markfit=max&dpr=1&q=50&h=1000&crop=focalpoint&fp-x=0.825&fp-y=0.35
200 OK 45 kB URL HTTP/2 images.casumo.com/0wnbu3m60jgf/3J1FB6xSVkvcuFBnaDdhc0/f2c94dd91c4aa60d59d9104287c7a608/Reel_Races_LOS_-_NO_Desktop.jpg?w=1440&fit=crop&markscale=95&auto=compress%2Cformat&fm=jpg&markalign=top%2Ccenter&markfit=max&dpr=1&q=50&h=1000&crop=focalpoint&fp-x=0.825&fp-y=0.35
IP
File type ISO Media, AVIF Image\012- data
Hash 10f48ef923c780a9caaf3eb44f3527c2
9ab6120645f20ce1f5cb6eb836ac451ab7befddd
a41fb12cc14f787041b041dc077b74ac723eaf30e71d324618450f6deda4832a
GET /0wnbu3m60jgf/3J1FB6xSVkvcuFBnaDdhc0/f2c94dd91c4aa60d59d9104287c7a608/Reel_Races_LOS_-_NO_Desktop.jpg?w=1440&fit=crop&markscale=95&auto=compress%2Cformat&fm=jpg&markalign=top%2Ccenter&markfit=max&dpr=1&q=50&h=1000&crop=focalpoint&fp-x=0.825&fp-y=0.35 HTTP/1.1
Host: images.casumo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casumo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Wed, 18 Jan 2023 07:37:34 GMT
content-type: image/avif
content-length: 45300
last-modified: Thu, 01 Dec 2022 13:29:34 GMT
cache-control: public, max-age=31536000
x-imgix-id: 7d0264975c550626cfa8f8968b342c4e1d36b888
x-imgix-render-farm: 01.560
age: 4126080
accept-ranges: bytes
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10050-SJC, cache-bma1639-BMA
x-cache: HIT, HIT
vary: Accept, User-Agent
cf-cache-status: DYNAMIC
strict-transport-security: max-age=15552000
server: cloudflare
cf-ray: 78b5aa8848bb0b31-OSL
X-Firefox-Spdy: h2
images.casumo.com/0wnbu3m60jgf/1eiRKd89Z6vcqYqHekbb5h/1a5f838883256f54af4da8bfa0f87c93/casumo-logo.70548c30a11d566d2324742e01cfb392.svg
200 OK 1.4 kB URL HTTP/2 images.casumo.com/0wnbu3m60jgf/1eiRKd89Z6vcqYqHekbb5h/1a5f838883256f54af4da8bfa0f87c93/casumo-logo.70548c30a11d566d2324742e01cfb392.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (3004), with no line terminators
Hash f0751a4899cfdda222a7e32bc412753d
6cd37cc56b2dc59ff5af8525cccd6d6a42340bdb
f4abccca03eb6276b7318d76008d49dada3775a8c66e409ac16670ad40ddad90
GET /0wnbu3m60jgf/1eiRKd89Z6vcqYqHekbb5h/1a5f838883256f54af4da8bfa0f87c93/casumo-logo.70548c30a11d566d2324742e01cfb392.svg HTTP/1.1
Host: images.casumo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casumo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Wed, 18 Jan 2023 07:37:34 GMT
content-type: image/svg+xml
content-length: 1426
cache-control: public, max-age=31536000
last-modified: Tue, 06 Dec 2022 23:20:53 GMT
content-encoding: gzip
x-imgix-id: 63f5c96e0850430356615a42fb8a5c2a81d6e92f
x-imgix-render-farm: 02.552
age: 2877518
accept-ranges: bytes
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10048-SJC, cache-bma1639-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
strict-transport-security: max-age=15552000
server: cloudflare
cf-ray: 78b5aa8848ba0b31-OSL
X-Firefox-Spdy: h2
images.casumo.com/0wnbu3m60jgf/6WQXEkNccFPuuWMUd0Ny5M/45ba9390379e4ad05e64a8d93c348911/Level.svg
200 OK 731 B URL HTTP/2 images.casumo.com/0wnbu3m60jgf/6WQXEkNccFPuuWMUd0Ny5M/45ba9390379e4ad05e64a8d93c348911/Level.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1505)
Hash 3d0ffc187c29d4d2dfc7221954ed8a75
81d3f3dbfb152f864b3e224e01ff90dc3fce097d
002eeecfbc0d61ab766333c2c7dfaa1d6d4bf8a8ff216a6f510f2563f86618d3
GET /0wnbu3m60jgf/6WQXEkNccFPuuWMUd0Ny5M/45ba9390379e4ad05e64a8d93c348911/Level.svg HTTP/1.1
Host: images.casumo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casumo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Wed, 18 Jan 2023 07:37:34 GMT
content-type: image/svg+xml
content-length: 731
cache-control: public, max-age=31536000
last-modified: Fri, 29 Apr 2022 10:46:29 GMT
content-encoding: gzip
x-imgix-id: cb3f01c8e038ea971d5426fb92d9518813e280fe
x-imgix-render-farm: 02.552
age: 3714912
accept-ranges: bytes
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10056-SJC, cache-bma1632-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
strict-transport-security: max-age=15552000
server: cloudflare
cf-ray: 78b5aa8848c20b31-OSL
X-Firefox-Spdy: h2
images.casumo.com/0wnbu3m60jgf/1PYUE4PNUDGLA4OoYRp9hw/f8dc46cd5de294152761ac9e6f233fe8/Rocket.svg
200 OK 1.3 kB URL HTTP/2 images.casumo.com/0wnbu3m60jgf/1PYUE4PNUDGLA4OoYRp9hw/f8dc46cd5de294152761ac9e6f233fe8/Rocket.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2551)
Hash 3a6bab36ccb715e7cb34d57b9d5897ec
75e89a214d06c24294aeeb6bca98dd2c002e896d
a9efbfd0e743e3dfcce6374bbbe0b0754abc3621c3338ead38b12c42b1937783
GET /0wnbu3m60jgf/1PYUE4PNUDGLA4OoYRp9hw/f8dc46cd5de294152761ac9e6f233fe8/Rocket.svg HTTP/1.1
Host: images.casumo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casumo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Wed, 18 Jan 2023 07:37:34 GMT
content-type: image/svg+xml
content-length: 1274
cache-control: public, max-age=31536000
last-modified: Fri, 29 Apr 2022 10:46:40 GMT
content-encoding: gzip
x-imgix-id: d2976198ff8fe6b4fc086ae3d622b8524e46e3f2
x-imgix-render-farm: 01.1064
age: 6119712
accept-ranges: bytes
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10041-SJC, cache-bma1630-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
strict-transport-security: max-age=15552000
server: cloudflare
cf-ray: 78b5aa8848c10b31-OSL
X-Firefox-Spdy: h2
images.casumo.com/0wnbu3m60jgf/hJVqfrv5yWMtpVd145b1J/ebc78b9922bb84e6fa9cd7120d3ee34e/Tournament.svg
200 OK 523 B URL HTTP/2 images.casumo.com/0wnbu3m60jgf/hJVqfrv5yWMtpVd145b1J/ebc78b9922bb84e6fa9cd7120d3ee34e/Tournament.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1081)
Hash c4a798d021285c75a8977e122582962a
1b9eeaa9686469019b04c8221e133fdce8c74858
3d3c3f37e03f33bc9636917a95e794892904ffbc28d9a20afb09da0e2c1479b4
GET /0wnbu3m60jgf/hJVqfrv5yWMtpVd145b1J/ebc78b9922bb84e6fa9cd7120d3ee34e/Tournament.svg HTTP/1.1
Host: images.casumo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casumo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Wed, 18 Jan 2023 07:37:34 GMT
content-type: image/svg+xml
content-length: 523
cache-control: public, max-age=31536000
last-modified: Fri, 29 Apr 2022 10:46:58 GMT
content-encoding: gzip
x-imgix-id: e23afadc574fc2eb5505a9f2c94858c0f081982b
x-imgix-render-farm: 01.1064
age: 6134113
accept-ranges: bytes
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10025-SJC, cache-bma1678-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
strict-transport-security: max-age=15552000
server: cloudflare
cf-ray: 78b5aa8848c00b31-OSL
X-Firefox-Spdy: h2
images.casumo.com/0wnbu3m60jgf/15EaxTT9SvobMXVmfQKSZE/7be79bf85e2cd7eeffac426f83925eee/18-white.svg
200 OK 677 B URL HTTP/2 images.casumo.com/0wnbu3m60jgf/15EaxTT9SvobMXVmfQKSZE/7be79bf85e2cd7eeffac426f83925eee/18-white.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document, ASCII text, with very long lines (1611), with no line terminators
Hash 0748a1d333d0b963137eb2dd9a0193cc
30354feb1cfcbfb41e797f48eb2ec523fdeafe3f
8ef2f655a9fc173478b6ce5a8a5193eb77146c75b3499f48b4b87f8af2e8f6fe
GET /0wnbu3m60jgf/15EaxTT9SvobMXVmfQKSZE/7be79bf85e2cd7eeffac426f83925eee/18-white.svg HTTP/1.1
Host: images.casumo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casumo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Wed, 18 Jan 2023 07:37:34 GMT
content-type: image/svg+xml
content-length: 677
cache-control: public, max-age=31536000
last-modified: Fri, 18 Nov 2022 08:51:17 GMT
content-encoding: gzip
x-imgix-id: 9d400901b252dffb2e1c63c22185fc665020e67a
x-imgix-render-farm: 02.552
age: 711759
accept-ranges: bytes
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10075-SJC, cache-bma1634-BMA
x-cache: MISS, HIT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
strict-transport-security: max-age=15552000
server: cloudflare
cf-ray: 78b5aa8858db0b31-OSL
X-Firefox-Spdy: h2
www.casumo.com/los2assets/runtime.7f69bb1a2c7e1b8459a4.js
200 OK 16 kB URL HTTP/2 www.casumo.com/los2assets/runtime.7f69bb1a2c7e1b8459a4.js
IP
Hash 5c4ed0e8657d66dfbb4c8b20a3755634
5871144860bc5d417720e0df81fd25a8e2b73f8a
31ec7bc197a31b32d95a50d874823da7ea2e7a9e8f201e5f1a4aebd7c3683aa3
GET /los2assets/runtime.7f69bb1a2c7e1b8459a4.js HTTP/1.1
Host: www.casumo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casumo.com/no/?btag=0_2DCF4211F36A4A12B9700C5E59402665&affid=0&bid=1&pid=0&utm_source=0&utm_medium=affiliate&utm_campaign=0&utm_content=1
Cookie: kazumoTrackingId=0ea7d5f3-9334-4a34-820f-ece7b0d568bc; kazumoMedium=eyJyZWZlcnJlckluZm8iOnsib2ZmZXJJZCI6bnVsbCwidGFyZ2V0Q2FtcGFpZ25JZCI6ImRlZmF1bHQiLCJtZXRhZGF0YSI6eyJiYW5uZXJJZCI6IjBfMkRDRjQyMTFGMzZBNEExMkI5NzAwQzVFNTk0MDI2NjUiLCJhZmZJZCI6IjBfMkRDRiJ9fX0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 18 Jan 2023 07:37:34 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Fri, 13 Jan 2023 09:46:20 GMT
etag: W/"a140-185aa85e5e0"
vary: Accept-Encoding
content-encoding: gzip
x-envoy-upstream-service-time: 3
content-security-policy: frame-ancestors 'self' https://www.casumo.es https://casumo.es https://www.casumo.de https://casumo.de https://*.casumo.com https://www.casumokasino.com https://www.casumocasino.dk https://umo-egb.allianceservices.im https://evo-livecasino.casumo.com https://casumo.evo-games.com https://casumo-es.evo-games.com https://nrgs-b2b.greentube.com https://mobile2.gameassists.co.uk https://casumo-static.casinomodule.com https://casumose-static.casinomodule.com https://casumodk-static.casinomodule.com https://dpovs7i3r9tz1.cloudfront.net https://nyxmaltargs.blueprintgaming.com https://casumo-cw.playngonetwork.com https://adkcw.playngonetwork.com https://d1k6j4zyghhevb.cloudfront.net https://platform.rgsgames.com https://rgs-cust02.lab.wagerworks.com https://casumo-game.thunderkick.com https://lon-portfolio.wimobile.casinarena.com https://staticlive.yggdrasilgaming.com https://clients.casumogames.com https://regily.com https://*.regily.com https://*.contentful.com https://player.eu.regulated.pushgaming.com https://mesh.eu.regulated.pushgaming.com https://www.casumokasino.com https://tegb-edict-nex-umo.allianceservices.im https://uat1-casumo.evolutiongaming.com https://gg-nrgs-b2b-staging.greentube.com https://redirector32.valueactive.eu https://casumo-static-test.casinomodule.com https://casumose-static-test.casinomodule.com https://casumodk-static-test.casinomodule.com https://nyxmaltargspubst.blueprintgaming.com https://nogs-gl-stage.nyxmalta.com https://mltstage.playngonetwork.com https://adkcwstage.playngonetwork.com https://d2drhksbtcqozo.cloudfront.net https://rgs-cust02.lab.wagerworks.com https://ext-qa-gameservice.thunderkick.com https://lon-pt-mob.wi-gameserver.com https://staticstaginguk.yggdrasilgaming.com https://clients.test.casumogames.com http://*.casumotest.local https://regily.com https://*.regily.com https://*.contentful.com https://games.regulated-eu-staging.gsi.io
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 70423
expires: Thu, 18 Jan 2024 07:37:34 GMT
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 78b5aa87e8500b31-OSL
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=UA-41199862-1
200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-41199862-1
IP
File type ASCII text, with very long lines (1921)
Hash c56f7b38a040751524558fed8dbf3080
fbf3b0c763ddb1e8e11bf0551ad8f707856365e8
273033bb3cfc1950985c362b7513d2666e568f2dec55c758aae2cf68fc861ff4
GET /gtag/js?id=UA-41199862-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casumo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 18 Jan 2023 07:37:34 GMT
expires: Wed, 18 Jan 2023 07:37:34 GMT
cache-control: private, max-age=900
last-modified: Wed, 18 Jan 2023 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 44138
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.casumo.com/los2assets/IntercomButton.162e281b4978d3bdc84c.js
200 OK 1.9 kB URL HTTP/2 www.casumo.com/los2assets/IntercomButton.162e281b4978d3bdc84c.js
IP
Hash 5c5706af81bf1163bf51e124353e1749
733e9f02fce29af339d54963f34d1546081d7446
fdb829979777bda3d3060865831af78e84b043ee9c0c913479accbff6c9cb723
GET /los2assets/IntercomButton.162e281b4978d3bdc84c.js HTTP/1.1
Host: www.casumo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casumo.com/no/?btag=0_2DCF4211F36A4A12B9700C5E59402665&affid=0&bid=1&pid=0&utm_source=0&utm_medium=affiliate&utm_campaign=0&utm_content=1
Cookie: kazumoTrackingId=0ea7d5f3-9334-4a34-820f-ece7b0d568bc; kazumoMedium=eyJyZWZlcnJlckluZm8iOnsib2ZmZXJJZCI6bnVsbCwidGFyZ2V0Q2FtcGFpZ25JZCI6ImRlZmF1bHQiLCJtZXRhZGF0YSI6eyJiYW5uZXJJZCI6IjBfMkRDRjQyMTFGMzZBNEExMkI5NzAwQzVFNTk0MDI2NjUiLCJhZmZJZCI6IjBfMkRDRiJ9fX0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 18 Jan 2023 07:37:34 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Fri, 13 Jan 2023 09:46:20 GMT
etag: W/"caa-185aa85e5e0"
vary: Accept-Encoding
content-encoding: gzip
x-envoy-upstream-service-time: 1
content-security-policy: frame-ancestors 'self' https://www.casumo.es https://casumo.es https://www.casumo.de https://casumo.de https://*.casumo.com https://www.casumokasino.com https://www.casumocasino.dk https://umo-egb.allianceservices.im https://evo-livecasino.casumo.com https://casumo.evo-games.com https://casumo-es.evo-games.com https://nrgs-b2b.greentube.com https://mobile2.gameassists.co.uk https://casumo-static.casinomodule.com https://casumose-static.casinomodule.com https://casumodk-static.casinomodule.com https://dpovs7i3r9tz1.cloudfront.net https://nyxmaltargs.blueprintgaming.com https://casumo-cw.playngonetwork.com https://adkcw.playngonetwork.com https://d1k6j4zyghhevb.cloudfront.net https://platform.rgsgames.com https://rgs-cust02.lab.wagerworks.com https://casumo-game.thunderkick.com https://lon-portfolio.wimobile.casinarena.com https://staticlive.yggdrasilgaming.com https://clients.casumogames.com https://regily.com https://*.regily.com https://*.contentful.com https://player.eu.regulated.pushgaming.com https://mesh.eu.regulated.pushgaming.com https://www.casumokasino.com https://tegb-edict-nex-umo.allianceservices.im https://uat1-casumo.evolutiongaming.com https://gg-nrgs-b2b-staging.greentube.com https://redirector32.valueactive.eu https://casumo-static-test.casinomodule.com https://casumose-static-test.casinomodule.com https://casumodk-static-test.casinomodule.com https://nyxmaltargspubst.blueprintgaming.com https://nogs-gl-stage.nyxmalta.com https://mltstage.playngonetwork.com https://adkcwstage.playngonetwork.com https://d2drhksbtcqozo.cloudfront.net https://rgs-cust02.lab.wagerworks.com https://ext-qa-gameservice.thunderkick.com https://lon-pt-mob.wi-gameserver.com https://staticstaginguk.yggdrasilgaming.com https://clients.test.casumogames.com http://*.casumotest.local https://regily.com https://*.regily.com https://*.contentful.com https://games.regulated-eu-staging.gsi.io
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 70332
expires: Thu, 18 Jan 2024 07:37:34 GMT
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 78b5aa8848b80b31-OSL
X-Firefox-Spdy: h2
www.casumo.com/los2assets/FaqPage.f562d4b0a91f855dd724.js
200 OK 112 kB URL HTTP/2 www.casumo.com/los2assets/FaqPage.f562d4b0a91f855dd724.js
IP
Size 112 kB (111984 bytes)
Hash 5765ec2f99a5ab35a65fe6d655143378
dd21019b62081efdca4386649ddc7bad5b54188f
3fdb9042313cf7b98ab651b56fdfffd7a06006d32ba9826f23694b4877219afa
GET /los2assets/FaqPage.f562d4b0a91f855dd724.js HTTP/1.1
Host: www.casumo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casumo.com/no/?btag=0_2DCF4211F36A4A12B9700C5E59402665&affid=0&bid=1&pid=0&utm_source=0&utm_medium=affiliate&utm_campaign=0&utm_content=1
Cookie: kazumoTrackingId=0ea7d5f3-9334-4a34-820f-ece7b0d568bc; kazumoMedium=eyJyZWZlcnJlckluZm8iOnsib2ZmZXJJZCI6bnVsbCwidGFyZ2V0Q2FtcGFpZ25JZCI6ImRlZmF1bHQiLCJtZXRhZGF0YSI6eyJiYW5uZXJJZCI6IjBfMkRDRjQyMTFGMzZBNEExMkI5NzAwQzVFNTk0MDI2NjUiLCJhZmZJZCI6IjBfMkRDRiJ9fX0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 18 Jan 2023 07:37:34 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Fri, 13 Jan 2023 09:46:20 GMT
etag: W/"2335-185aa85e5e0"
vary: Accept-Encoding
content-encoding: gzip
x-envoy-upstream-service-time: 2
content-security-policy: frame-ancestors 'self' https://www.casumo.es https://casumo.es https://www.casumo.de https://casumo.de https://*.casumo.com https://www.casumokasino.com https://www.casumocasino.dk https://umo-egb.allianceservices.im https://evo-livecasino.casumo.com https://casumo.evo-games.com https://casumo-es.evo-games.com https://nrgs-b2b.greentube.com https://mobile2.gameassists.co.uk https://casumo-static.casinomodule.com https://casumose-static.casinomodule.com https://casumodk-static.casinomodule.com https://dpovs7i3r9tz1.cloudfront.net https://nyxmaltargs.blueprintgaming.com https://casumo-cw.playngonetwork.com https://adkcw.playngonetwork.com https://d1k6j4zyghhevb.cloudfront.net https://platform.rgsgames.com https://rgs-cust02.lab.wagerworks.com https://casumo-game.thunderkick.com https://lon-portfolio.wimobile.casinarena.com https://staticlive.yggdrasilgaming.com https://clients.casumogames.com https://regily.com https://*.regily.com https://*.contentful.com https://player.eu.regulated.pushgaming.com https://mesh.eu.regulated.pushgaming.com https://www.casumokasino.com https://tegb-edict-nex-umo.allianceservices.im https://uat1-casumo.evolutiongaming.com https://gg-nrgs-b2b-staging.greentube.com https://redirector32.valueactive.eu https://casumo-static-test.casinomodule.com https://casumose-static-test.casinomodule.com https://casumodk-static-test.casinomodule.com https://nyxmaltargspubst.blueprintgaming.com https://nogs-gl-stage.nyxmalta.com https://mltstage.playngonetwork.com https://adkcwstage.playngonetwork.com https://d2drhksbtcqozo.cloudfront.net https://rgs-cust02.lab.wagerworks.com https://ext-qa-gameservice.thunderkick.com https://lon-pt-mob.wi-gameserver.com https://staticstaginguk.yggdrasilgaming.com https://clients.test.casumogames.com http://*.casumotest.local https://regily.com https://*.regily.com https://*.contentful.com https://games.regulated-eu-staging.gsi.io
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 70362
expires: Thu, 18 Jan 2024 07:37:34 GMT
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 78b5aa8848b20b31-OSL
X-Firefox-Spdy: h2
www.casumo.com/los2assets/button-no.f92e18731a503d71bd6610ecf2b393df.svg
200 OK 2.3 kB URL HTTP/2 www.casumo.com/los2assets/button-no.f92e18731a503d71bd6610ecf2b393df.svg
IP
Hash cd044d58babf0dcd79cda3b9089cedca
e4e57da3485426eec36a8f65661cad12d4d6be72
d4528178a9436cc2e721621c46b0a7ae193f61bff89040de4c8b7f8322f8bb04
GET /los2assets/button-no.f92e18731a503d71bd6610ecf2b393df.svg HTTP/1.1
Host: www.casumo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casumo.com/no/?btag=0_2DCF4211F36A4A12B9700C5E59402665&affid=0&bid=1&pid=0&utm_source=0&utm_medium=affiliate&utm_campaign=0&utm_content=1
Cookie: kazumoTrackingId=0ea7d5f3-9334-4a34-820f-ece7b0d568bc; kazumoMedium=eyJyZWZlcnJlckluZm8iOnsib2ZmZXJJZCI6bnVsbCwidGFyZ2V0Q2FtcGFpZ25JZCI6ImRlZmF1bHQiLCJtZXRhZGF0YSI6eyJiYW5uZXJJZCI6IjBfMkRDRjQyMTFGMzZBNEExMkI5NzAwQzVFNTk0MDI2NjUiLCJhZmZJZCI6IjBfMkRDRiJ9fX0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 18 Jan 2023 07:37:34 GMT
content-type: image/svg+xml
cache-control: public, max-age=31536000
last-modified: Fri, 13 Jan 2023 09:46:20 GMT
etag: W/"10fb-185aa85e5e0"
vary: Accept-Encoding
content-encoding: gzip
x-envoy-upstream-service-time: 2
content-security-policy: frame-ancestors 'self' https://www.casumo.es https://casumo.es https://www.casumo.de https://casumo.de https://*.casumo.com https://www.casumokasino.com https://www.casumocasino.dk https://umo-egb.allianceservices.im https://evo-livecasino.casumo.com https://casumo.evo-games.com https://casumo-es.evo-games.com https://nrgs-b2b.greentube.com https://mobile2.gameassists.co.uk https://casumo-static.casinomodule.com https://casumose-static.casinomodule.com https://casumodk-static.casinomodule.com https://dpovs7i3r9tz1.cloudfront.net https://nyxmaltargs.blueprintgaming.com https://casumo-cw.playngonetwork.com https://adkcw.playngonetwork.com https://d1k6j4zyghhevb.cloudfront.net https://platform.rgsgames.com https://rgs-cust02.lab.wagerworks.com https://casumo-game.thunderkick.com https://lon-portfolio.wimobile.casinarena.com https://staticlive.yggdrasilgaming.com https://clients.casumogames.com https://regily.com https://*.regily.com https://*.contentful.com https://player.eu.regulated.pushgaming.com https://mesh.eu.regulated.pushgaming.com https://www.casumokasino.com https://tegb-edict-nex-umo.allianceservices.im https://uat1-casumo.evolutiongaming.com https://gg-nrgs-b2b-staging.greentube.com https://redirector32.valueactive.eu https://casumo-static-test.casinomodule.com https://casumose-static-test.casinomodule.com https://casumodk-static-test.casinomodule.com https://nyxmaltargspubst.blueprintgaming.com https://nogs-gl-stage.nyxmalta.com https://mltstage.playngonetwork.com https://adkcwstage.playngonetwork.com https://d2drhksbtcqozo.cloudfront.net https://rgs-cust02.lab.wagerworks.com https://ext-qa-gameservice.thunderkick.com https://lon-pt-mob.wi-gameserver.com https://staticstaginguk.yggdrasilgaming.com https://clients.test.casumogames.com http://*.casumotest.local https://regily.com https://*.regily.com https://*.contentful.com https://games.regulated-eu-staging.gsi.io
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 69907
expires: Thu, 18 Jan 2024 07:37:34 GMT
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 78b5aa88b9220b31-OSL
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 8720730dce33d0026a1a354ac93d4a7d
ed5f086bc646a4d93d2344b19ff7821c96e44f7c
b2892fda88242fbc4d58dd1f3bb159ca02cbf98b77c57dde66fba98d183c0136
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1376
Cache-Control: max-age=93130
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 07:37:35 GMT
Etag: "63c66529-1d7"
Expires: Thu, 19 Jan 2023 09:29:45 GMT
Last-Modified: Tue, 17 Jan 2023 09:06:49 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471
images.casumo.com/0wnbu3m60jgf/4OBKOHts5kfZru4VZ1MpVr/258a7a917554c8059f015cc4cab6110d/favicon__1_.ico
200 OK 441 B URL HTTP/2 images.casumo.com/0wnbu3m60jgf/4OBKOHts5kfZru4VZ1MpVr/258a7a917554c8059f015cc4cab6110d/favicon__1_.ico
IP
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash 671e48e24a1b70fa3caeb1ced86016ae
a4ea5b8c9626f75738579adb07903299699049f3
b83ab98337fcd7376a7a6ff1f4fa4a15453896db099004ae3ae34b62108a414a
GET /0wnbu3m60jgf/4OBKOHts5kfZru4VZ1MpVr/258a7a917554c8059f015cc4cab6110d/favicon__1_.ico HTTP/1.1
Host: images.casumo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casumo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Wed, 18 Jan 2023 07:37:35 GMT
content-type: image/png
content-length: 441
cache-control: public, max-age=31536000
last-modified: Mon, 04 May 2020 11:04:39 GMT
x-imgix-id: ebb10601fe098649f02d4513f0261a357fc7e6c9
x-imgix-render-farm: 02.552
age: 3701908
accept-ranges: bytes
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10024-SJC, cache-bma1639-BMA
x-cache: HIT, HIT
cf-cache-status: DYNAMIC
strict-transport-security: max-age=15552000
server: cloudflare
cf-ray: 78b5aa8ddd920b31-OSL
X-Firefox-Spdy: h2
www.casumo.com/los2assets/ModuleSEOSchema.0b9df7e606585dbc1aa3.js
200 OK 21 kB URL HTTP/2 www.casumo.com/los2assets/ModuleSEOSchema.0b9df7e606585dbc1aa3.js
IP
File type ASCII text, with very long lines (2206)
Hash a468649511b12fb3e6c43ec28157cd01
c391204a75c2e92bce67b03e4611fea80ae43290
dc449afef179f39d354d7a3c503e1ed6a6c5d46bcda139f69e17feb981fff699
GET /los2assets/ModuleSEOSchema.0b9df7e606585dbc1aa3.js HTTP/1.1
Host: www.casumo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casumo.com/no/?btag=0_2DCF4211F36A4A12B9700C5E59402665&affid=0&bid=1&pid=0&utm_source=0&utm_medium=affiliate&utm_campaign=0&utm_content=1
Cookie: kazumoTrackingId=0ea7d5f3-9334-4a34-820f-ece7b0d568bc; kazumoMedium=eyJyZWZlcnJlckluZm8iOnsib2ZmZXJJZCI6bnVsbCwidGFyZ2V0Q2FtcGFpZ25JZCI6ImRlZmF1bHQiLCJtZXRhZGF0YSI6eyJiYW5uZXJJZCI6IjBfMkRDRjQyMTFGMzZBNEExMkI5NzAwQzVFNTk0MDI2NjUiLCJhZmZJZCI6IjBfMkRDRiJ9fX0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 18 Jan 2023 07:37:34 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Fri, 13 Jan 2023 09:46:20 GMT
etag: W/"90c-185aa85e5e0"
vary: Accept-Encoding
content-encoding: gzip
x-envoy-upstream-service-time: 3
content-security-policy: frame-ancestors 'self' https://www.casumo.es https://casumo.es https://www.casumo.de https://casumo.de https://*.casumo.com https://www.casumokasino.com https://www.casumocasino.dk https://umo-egb.allianceservices.im https://evo-livecasino.casumo.com https://casumo.evo-games.com https://casumo-es.evo-games.com https://nrgs-b2b.greentube.com https://mobile2.gameassists.co.uk https://casumo-static.casinomodule.com https://casumose-static.casinomodule.com https://casumodk-static.casinomodule.com https://dpovs7i3r9tz1.cloudfront.net https://nyxmaltargs.blueprintgaming.com https://casumo-cw.playngonetwork.com https://adkcw.playngonetwork.com https://d1k6j4zyghhevb.cloudfront.net https://platform.rgsgames.com https://rgs-cust02.lab.wagerworks.com https://casumo-game.thunderkick.com https://lon-portfolio.wimobile.casinarena.com https://staticlive.yggdrasilgaming.com https://clients.casumogames.com https://regily.com https://*.regily.com https://*.contentful.com https://player.eu.regulated.pushgaming.com https://mesh.eu.regulated.pushgaming.com https://www.casumokasino.com https://tegb-edict-nex-umo.allianceservices.im https://uat1-casumo.evolutiongaming.com https://gg-nrgs-b2b-staging.greentube.com https://redirector32.valueactive.eu https://casumo-static-test.casinomodule.com https://casumose-static-test.casinomodule.com https://casumodk-static-test.casinomodule.com https://nyxmaltargspubst.blueprintgaming.com https://nogs-gl-stage.nyxmalta.com https://mltstage.playngonetwork.com https://adkcwstage.playngonetwork.com https://d2drhksbtcqozo.cloudfront.net https://rgs-cust02.lab.wagerworks.com https://ext-qa-gameservice.thunderkick.com https://lon-pt-mob.wi-gameserver.com https://staticstaginguk.yggdrasilgaming.com https://clients.test.casumogames.com http://*.casumotest.local https://regily.com https://*.regily.com https://*.contentful.com https://games.regulated-eu-staging.gsi.io
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 70362
expires: Thu, 18 Jan 2024 07:37:34 GMT
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 78b5aa87f8620b31-OSL
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: pVSB/xdwDQw7ZudJKZdf3w==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: Tt8VhD+CwV7gDjVtu2abf3xBHQY=
images.casumo.com/0wnbu3m60jgf/jNyU3z3cT3zCopK8Dk79L/c79d28bbec77d0b8b0da40888604e6bd/bigbass__2_.png?w=230px&fit=max&markscale=95&auto=compress%2Cformat&fm=png&markalign=top%2Ccenter&markfit=max&dpr=1&q=70&h=303px
200 OK 14 kB URL HTTP/2 images.casumo.com/0wnbu3m60jgf/jNyU3z3cT3zCopK8Dk79L/c79d28bbec77d0b8b0da40888604e6bd/bigbass__2_.png?w=230px&fit=max&markscale=95&auto=compress%2Cformat&fm=png&markalign=top%2Ccenter&markfit=max&dpr=1&q=70&h=303px
IP
File type ISO Media, AVIF Image\012- data
Hash fc3d44615fb3bf487de28b731e42bba9
5c473fbd03b8d66613cf3da36b3bcfb7957ff51b
923e78b07b25518a5f46f924bcd0af4197a717fb75870056e9c10d90cf5e2ecc
GET /0wnbu3m60jgf/jNyU3z3cT3zCopK8Dk79L/c79d28bbec77d0b8b0da40888604e6bd/bigbass__2_.png?w=230px&fit=max&markscale=95&auto=compress%2Cformat&fm=png&markalign=top%2Ccenter&markfit=max&dpr=1&q=70&h=303px HTTP/1.1
Host: images.casumo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casumo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Wed, 18 Jan 2023 07:37:36 GMT
content-type: image/avif
content-length: 13607
last-modified: Tue, 15 Nov 2022 07:42:22 GMT
cache-control: public, max-age=31536000
x-imgix-id: 07b82d6d32df56476d3971a13e7e47ce09f7352c
x-imgix-render-farm: 01.560
x-imgix-original-status: 200
age: 5529313
accept-ranges: bytes
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10043-SJC, cache-bma1678-BMA
x-cache: HIT, HIT
vary: Accept, User-Agent
cf-cache-status: DYNAMIC
strict-transport-security: max-age=15552000
server: cloudflare
cf-ray: 78b5aa908fcf0b31-OSL
X-Firefox-Spdy: h2
images.casumo.com/0wnbu3m60jgf/1inJ6Bbwmfu0xQyRMkhK9Q/b4cfe2a10454cc9c4033c55a9bc60564/Casumo_Bonanza_Game_Thumbnails_460x606.png?w=230px&fit=max&markscale=95&auto=compress%2Cformat&fm=png&markalign=top%2Ccenter&markfit=max&dpr=1&q=70&h=303px
200 OK 10 kB URL HTTP/2 images.casumo.com/0wnbu3m60jgf/1inJ6Bbwmfu0xQyRMkhK9Q/b4cfe2a10454cc9c4033c55a9bc60564/Casumo_Bonanza_Game_Thumbnails_460x606.png?w=230px&fit=max&markscale=95&auto=compress%2Cformat&fm=png&markalign=top%2Ccenter&markfit=max&dpr=1&q=70&h=303px
IP
File type ISO Media, AVIF Image\012- data
Hash 4835e676d31b4b47fe57abc1c5b1da60
00cd672e9ad3a771974ac1b51000f27b8c3fe92c
54e7be9550365b4b084bdc275c2a63206f072089eb419d064214d29cabe34309
GET /0wnbu3m60jgf/1inJ6Bbwmfu0xQyRMkhK9Q/b4cfe2a10454cc9c4033c55a9bc60564/Casumo_Bonanza_Game_Thumbnails_460x606.png?w=230px&fit=max&markscale=95&auto=compress%2Cformat&fm=png&markalign=top%2Ccenter&markfit=max&dpr=1&q=70&h=303px HTTP/1.1
Host: images.casumo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casumo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Wed, 18 Jan 2023 07:37:36 GMT
content-type: image/avif
content-length: 10344
last-modified: Wed, 09 Nov 2022 11:42:22 GMT
cache-control: public, max-age=31536000
x-imgix-id: 347c060c3b02553d5e8779dc9fe55e2b71bd43c2
x-imgix-render-farm: 01.560
x-imgix-original-status: 200
age: 6033314
accept-ranges: bytes
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10061-SJC, cache-bma1634-BMA
x-cache: HIT, HIT
vary: Accept, User-Agent
cf-cache-status: DYNAMIC
strict-transport-security: max-age=15552000
server: cloudflare
cf-ray: 78b5aa909fd10b31-OSL
X-Firefox-Spdy: h2
www.casumo.com/los2assets/dotsDesktop.74858631ab7f09a08c5459e9c244c359.svg
200 OK 17 kB URL HTTP/2 www.casumo.com/los2assets/dotsDesktop.74858631ab7f09a08c5459e9c244c359.svg
IP
Hash 385ed6dcdc0ab0436b3b9eeb353a3700
bc1c1b0575aac367ee5cf93f85db84d91eb2acd6
f8cbebfc3542e9b4e1001b39260dad4f42454ba6751038a90633885e92e0972a
GET /los2assets/dotsDesktop.74858631ab7f09a08c5459e9c244c359.svg HTTP/1.1
Host: www.casumo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casumo.com/no/?btag=0_2DCF4211F36A4A12B9700C5E59402665&affid=0&bid=1&pid=0&utm_source=0&utm_medium=affiliate&utm_campaign=0&utm_content=1
Cookie: kazumoTrackingId=0ea7d5f3-9334-4a34-820f-ece7b0d568bc; kazumoMedium=eyJyZWZlcnJlckluZm8iOnsib2ZmZXJJZCI6bnVsbCwidGFyZ2V0Q2FtcGFpZ25JZCI6ImRlZmF1bHQiLCJtZXRhZGF0YSI6eyJiYW5uZXJJZCI6IjBfMkRDRjQyMTFGMzZBNEExMkI5NzAwQzVFNTk0MDI2NjUiLCJhZmZJZCI6IjBfMkRDRiJ9fX0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 18 Jan 2023 07:37:34 GMT
content-type: image/svg+xml
cache-control: public, max-age=31536000
last-modified: Fri, 13 Jan 2023 09:46:20 GMT
etag: W/"23b1-185aa85e5e0"
vary: Accept-Encoding
content-encoding: gzip
x-envoy-upstream-service-time: 2
content-security-policy: frame-ancestors 'self' https://www.casumo.es https://casumo.es https://www.casumo.de https://casumo.de https://*.casumo.com https://www.casumokasino.com https://www.casumocasino.dk https://umo-egb.allianceservices.im https://evo-livecasino.casumo.com https://casumo.evo-games.com https://casumo-es.evo-games.com https://nrgs-b2b.greentube.com https://mobile2.gameassists.co.uk https://casumo-static.casinomodule.com https://casumose-static.casinomodule.com https://casumodk-static.casinomodule.com https://dpovs7i3r9tz1.cloudfront.net https://nyxmaltargs.blueprintgaming.com https://casumo-cw.playngonetwork.com https://adkcw.playngonetwork.com https://d1k6j4zyghhevb.cloudfront.net https://platform.rgsgames.com https://rgs-cust02.lab.wagerworks.com https://casumo-game.thunderkick.com https://lon-portfolio.wimobile.casinarena.com https://staticlive.yggdrasilgaming.com https://clients.casumogames.com https://regily.com https://*.regily.com https://*.contentful.com https://player.eu.regulated.pushgaming.com https://mesh.eu.regulated.pushgaming.com https://www.casumokasino.com https://tegb-edict-nex-umo.allianceservices.im https://uat1-casumo.evolutiongaming.com https://gg-nrgs-b2b-staging.greentube.com https://redirector32.valueactive.eu https://casumo-static-test.casinomodule.com https://casumose-static-test.casinomodule.com https://casumodk-static-test.casinomodule.com https://nyxmaltargspubst.blueprintgaming.com https://nogs-gl-stage.nyxmalta.com https://mltstage.playngonetwork.com https://adkcwstage.playngonetwork.com https://d2drhksbtcqozo.cloudfront.net https://rgs-cust02.lab.wagerworks.com https://ext-qa-gameservice.thunderkick.com https://lon-pt-mob.wi-gameserver.com https://staticstaginguk.yggdrasilgaming.com https://clients.test.casumogames.com http://*.casumotest.local https://regily.com https://*.regily.com https://*.contentful.com https://games.regulated-eu-staging.gsi.io
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 70361
expires: Thu, 18 Jan 2024 07:37:34 GMT
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 78b5aa87e84c0b31-OSL
X-Firefox-Spdy: h2
images.casumo.com/0wnbu3m60jgf/4xi8wiM2g3bHpwCFmQiNKu/84d42e35dcbf5227ffc565bb6a6e72e7/BOD.png?w=230px&fit=max&markscale=95&auto=compress%2Cformat&fm=png&markalign=top%2Ccenter&markfit=max&dpr=1&q=70&h=303px
200 OK 16 kB URL HTTP/2 images.casumo.com/0wnbu3m60jgf/4xi8wiM2g3bHpwCFmQiNKu/84d42e35dcbf5227ffc565bb6a6e72e7/BOD.png?w=230px&fit=max&markscale=95&auto=compress%2Cformat&fm=png&markalign=top%2Ccenter&markfit=max&dpr=1&q=70&h=303px
IP
File type ISO Media, AVIF Image\012- data
Hash 43e31aea2ba7fe68322e770c784f0d8c
67dd5814ac9eeddcb765f57297a9728a66f4c84d
004e5aeef181779c7e2539159d44e97f9764dc66e492f8993fbd1f9df21754ad
GET /0wnbu3m60jgf/4xi8wiM2g3bHpwCFmQiNKu/84d42e35dcbf5227ffc565bb6a6e72e7/BOD.png?w=230px&fit=max&markscale=95&auto=compress%2Cformat&fm=png&markalign=top%2Ccenter&markfit=max&dpr=1&q=70&h=303px HTTP/1.1
Host: images.casumo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casumo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Wed, 18 Jan 2023 07:37:36 GMT
content-type: image/avif
content-length: 16228
last-modified: Thu, 01 Dec 2022 11:42:21 GMT
cache-control: public, max-age=31536000
x-imgix-id: c917adfb30492083f00ef4f3923aa5b95ffea1f6
x-imgix-render-farm: 01.560
age: 4132514
accept-ranges: bytes
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10074-SJC, cache-bma1678-BMA
x-cache: HIT, HIT
vary: Accept, User-Agent
cf-cache-status: DYNAMIC
strict-transport-security: max-age=15552000
server: cloudflare
cf-ray: 78b5aa909fd30b31-OSL
X-Firefox-Spdy: h2
euromero.ediemidnightzombies.com/sxp/i/7542e165244e48d825289026d3186835.js
200 OK 32 kB URL HTTP/2 euromero.ediemidnightzombies.com/sxp/i/7542e165244e48d825289026d3186835.js
IP
File type Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
Hash eeb0698001e35e4aa080d1112ead05e1
6f4db092fade84273ded6593d681f6339c8fbd94
e0f5bafc1f04dd2b32b2fcf5188affa26727d805938954489b0dfe51afc39c4e
GET /sxp/i/7542e165244e48d825289026d3186835.js HTTP/1.1
Host: euromero.ediemidnightzombies.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casumo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
content-length: 31913
content-encoding: gzip
server: Caddy
date: Wed, 18 Jan 2023 02:19:54 GMT
cache-control: max-age=43200
expires: Wed, 18 Jan 2023 14:19:52 GMT
etag: "15755-wey84UPEHdRZSZ7CmsrfA8MzzZM"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: JhGY4rP_DdHnEMllfmIk2cPfvoj83vxSm9sV10HwU6Hu-o2lGa4kcQ==
age: 19064
X-Firefox-Spdy: h2
www.casumo.com/los2assets/ModuleHeroV5.c3de30fdc8a58a76eeea.js
200 OK 72 kB URL HTTP/2 www.casumo.com/los2assets/ModuleHeroV5.c3de30fdc8a58a76eeea.js
IP
Hash 34a2ac3e3973ed1ebfa4b8366d76d8ff
ba1dda588e59af98de115ff4116594bbb76e2949
cf94310a4d8a13baf757b2edf79fb27b0c94649a7a7bc428d8b3a1477ca7561b
GET /los2assets/ModuleHeroV5.c3de30fdc8a58a76eeea.js HTTP/1.1
Host: www.casumo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casumo.com/no/?btag=0_2DCF4211F36A4A12B9700C5E59402665&affid=0&bid=1&pid=0&utm_source=0&utm_medium=affiliate&utm_campaign=0&utm_content=1
Cookie: kazumoTrackingId=0ea7d5f3-9334-4a34-820f-ece7b0d568bc; kazumoMedium=eyJyZWZlcnJlckluZm8iOnsib2ZmZXJJZCI6bnVsbCwidGFyZ2V0Q2FtcGFpZ25JZCI6ImRlZmF1bHQiLCJtZXRhZGF0YSI6eyJiYW5uZXJJZCI6IjBfMkRDRjQyMTFGMzZBNEExMkI5NzAwQzVFNTk0MDI2NjUiLCJhZmZJZCI6IjBfMkRDRiJ9fX0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 18 Jan 2023 07:37:34 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Fri, 13 Jan 2023 09:46:20 GMT
etag: W/"2e02-185aa85e5e0"
vary: Accept-Encoding
content-encoding: gzip
x-envoy-upstream-service-time: 3
content-security-policy: frame-ancestors 'self' https://www.casumo.es https://casumo.es https://www.casumo.de https://casumo.de https://*.casumo.com https://www.casumokasino.com https://www.casumocasino.dk https://umo-egb.allianceservices.im https://evo-livecasino.casumo.com https://casumo.evo-games.com https://casumo-es.evo-games.com https://nrgs-b2b.greentube.com https://mobile2.gameassists.co.uk https://casumo-static.casinomodule.com https://casumose-static.casinomodule.com https://casumodk-static.casinomodule.com https://dpovs7i3r9tz1.cloudfront.net https://nyxmaltargs.blueprintgaming.com https://casumo-cw.playngonetwork.com https://adkcw.playngonetwork.com https://d1k6j4zyghhevb.cloudfront.net https://platform.rgsgames.com https://rgs-cust02.lab.wagerworks.com https://casumo-game.thunderkick.com https://lon-portfolio.wimobile.casinarena.com https://staticlive.yggdrasilgaming.com https://clients.casumogames.com https://regily.com https://*.regily.com https://*.contentful.com https://player.eu.regulated.pushgaming.com https://mesh.eu.regulated.pushgaming.com https://www.casumokasino.com https://tegb-edict-nex-umo.allianceservices.im https://uat1-casumo.evolutiongaming.com https://gg-nrgs-b2b-staging.greentube.com https://redirector32.valueactive.eu https://casumo-static-test.casinomodule.com https://casumose-static-test.casinomodule.com https://casumodk-static-test.casinomodule.com https://nyxmaltargspubst.blueprintgaming.com https://nogs-gl-stage.nyxmalta.com https://mltstage.playngonetwork.com https://adkcwstage.playngonetwork.com https://d2drhksbtcqozo.cloudfront.net https://rgs-cust02.lab.wagerworks.com https://ext-qa-gameservice.thunderkick.com https://lon-pt-mob.wi-gameserver.com https://staticstaginguk.yggdrasilgaming.com https://clients.test.casumogames.com http://*.casumotest.local https://regily.com https://*.regily.com https://*.contentful.com https://games.regulated-eu-staging.gsi.io
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 70362
expires: Thu, 18 Jan 2024 07:37:34 GMT
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 78b5aa87f8630b31-OSL
X-Firefox-Spdy: h2
sc-static.net/scevent.min.js
200 OK 13 kB URL HTTP/2 sc-static.net/scevent.min.js
IP
File type ASCII text, with very long lines (30920), with no line terminators
Hash 5c1e6ef321052f9ef17baa3b17775b15
dc24d4674334a60c2b9d1cd9aae0b6ed1bbb09ea
12a2c25fdde940fdbf0dcf5f2743c615bf8acac3ce6d19bf8b55102526bf763f
GET /scevent.min.js HTTP/1.1
Host: sc-static.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casumo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
content-length: 13268
server: CloudFront
date: Wed, 18 Jan 2023 07:37:36 GMT
content-encoding: gzip
access-control-allow-origin: *
access-control-allow-headers: Content-Type
cache-control: private, s-maxage=0, max-age=600
set-cookie: X-AB=0d6e407936704bd380072f5891d28b0e;max-age=86400;expires=Thu, 19 Jan 2023 07:17:11 GMT;Path=/scevent.min.js; Secure; SameSite=None
x-cache: LambdaGeneratedResponse from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: iQNOdRYDQ_ngt5Nc_F-c_1_Z9HULNiElFVubEfg6BolEbT_TLfeO-g==
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 19e9c21f1e72949764d8ffcb5747bec5
65af9cb30aa7959c39889fd28d3f870dbbf896cd
3deb58a447d7318ef995f772ea43eeb2af3eaca23f96e68638d2303bbbb65108
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 07:37:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 19e9c21f1e72949764d8ffcb5747bec5
65af9cb30aa7959c39889fd28d3f870dbbf896cd
3deb58a447d7318ef995f772ea43eeb2af3eaca23f96e68638d2303bbbb65108
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 07:37:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
pixel.mathtag.com/event/js?mt_id=1399311&mt_adid=129668&mt_exem=&mt_excl=&v1=&v2=undefined&v3=undefined&s1=undefined&s2=&s3=no&s4=&s5=undefined&s6=undefined&s7=undefined
200 OK 1.5 kB URL HTTP/1.1 pixel.mathtag.com/event/js?mt_id=1399311&mt_adid=129668&mt_exem=&mt_excl=&v1=&v2=undefined&v3=undefined&s1=undefined&s2=&s3=no&s4=&s5=undefined&s6=undefined&s7=undefined
IP
Hash 5cf6b65f0399e4a5ae7788da27defcf2
c1c3cda4eb55f37aebe74599e202ca78e0f0c6ff
f72dafb89d8c06496a14dc68e27287f8335ffe6f7331d3113e54b19324ec51cf
GET /event/js?mt_id=1399311&mt_adid=129668&mt_exem=&mt_excl=&v1=&v2=undefined&v3=undefined&s1=undefined&s2=&s3=no&s4=&s5=undefined&s6=undefined&s7=undefined HTTP/1.1
Host: pixel.mathtag.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casumo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/javascript
Content-Length: 1493
Access-Control-Allow-Origin: *
Server: MT3 277 3f0ad7a master cdg-pixel-x11 config:1.0.0
Cache-Control: no-cache
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
Expires: Wed, 18 Jan 2023 07:37:35 GMT
Date: Wed, 18 Jan 2023 07:37:36 GMT
Connection: keep-alive
Set-Cookie: uuid=5aa663c7-a1c0-4900-b0ad-3e7eb1a32e44; domain=.mathtag.com; path=/; expires=Thu, 15-Feb-2024 07:37:36 GMT; SameSite=None; Secure
pixel.mathtag.com/event/js?mt_id=618789&mt_adid=129668&v1=&v2=undefined&v3=undefined&s1=undefined&s2=&s3=no&s4=&s5=undefined&s6=undefined&s7=undefined
200 OK 1.5 kB URL HTTP/1.1 pixel.mathtag.com/event/js?mt_id=618789&mt_adid=129668&v1=&v2=undefined&v3=undefined&s1=undefined&s2=&s3=no&s4=&s5=undefined&s6=undefined&s7=undefined
IP
Hash a5fe6c47208ce04d0e348a2d6625e1c7
daaebc4c33eddf1968256ae030802f4df4fdbf86
d80440ec9e55d4a67fa2d63417b41e700393895b0159ca6a34cbc45732e06e13
GET /event/js?mt_id=618789&mt_adid=129668&v1=&v2=undefined&v3=undefined&s1=undefined&s2=&s3=no&s4=&s5=undefined&s6=undefined&s7=undefined HTTP/1.1
Host: pixel.mathtag.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casumo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/javascript
Content-Length: 1493
Access-Control-Allow-Origin: *
Server: MT3 277 3f0ad7a master cdg-pixel-x29 config:1.0.0
Cache-Control: no-cache
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
Expires: Wed, 18 Jan 2023 07:37:35 GMT
Date: Wed, 18 Jan 2023 07:37:36 GMT
Connection: keep-alive
Set-Cookie: uuid=369e63c7-a1c0-4600-95b8-2155de91cd15; domain=.mathtag.com; path=/; expires=Thu, 15-Feb-2024 07:37:36 GMT; SameSite=None; Secure
5903415.fls.doubleclick.net/activityi;src=5903415;type=uk;cat=home01;ord=3499361820892;gtm=2wg1a1;auiddc=1092196729.1674027456;u1=undefined;u9=undefined;u10=undefined;u18=no;u15=undefined;u3=%2Fno%2F;u5=https%3A%2F%2Fwww.casumo.com%2Fno%2F%3Fbtag%3D0_2DCF4211F36A4A12B9700C5E59402665%26affid%3D0%26bid%3D1%26pid%3D0%26utm_source%3D0%26utm_medium%3Daffiliate%26utm_campaign%3D0%26utm_content%3D1;~oref=https%3A%2F%2Fwww.casumo.com%2Fno%2F%3Fbtag%3D0_2DCF4211F36A4A12B9700C5E59402665%26affid%3D0%26bid%3D1%26pid%3D0%26utm_source%3D0%26utm_medium%3Daffiliate%26utm_campaign%3D0%26utm_content%3D1?
200 OK 353 B URL HTTP/2 5903415.fls.doubleclick.net/activityi;src=5903415;type=uk;cat=home01;ord=3499361820892;gtm=2wg1a1;auiddc=1092196729.1674027456;u1=undefined;u9=undefined;u10=undefined;u18=no;u15=undefined;u3=%2Fno%2F;u5=https%3A%2F%2Fwww.casumo.com%2Fno%2F%3Fbtag%3D0_2DCF4211F36A4A12B9700C5E59402665%26affid%3D0%26bid%3D1%26pid%3D0%26utm_source%3D0%26utm_medium%3Daffiliate%26utm_campaign%3D0%26utm_content%3D1;~oref=https%3A%2F%2Fwww.casumo.com%2Fno%2F%3Fbtag%3D0_2DCF4211F36A4A12B9700C5E59402665%26affid%3D0%26bid%3D1%26pid%3D0%26utm_source%3D0%26utm_medium%3Daffiliate%26utm_campaign%3D0%26utm_content%3D1?
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (869), with no line terminators
Hash e4d0e3e52f4fccfa4d9e8d78a4ae20c5
73eed5c04ccb0c43d1e875c0e8f150358c29ed83
c5f29066295d33222aa8827f134a85722acb6e98c241487d90edc5ff87479fd1
GET /activityi;src=5903415;type=uk;cat=home01;ord=3499361820892;gtm=2wg1a1;auiddc=1092196729.1674027456;u1=undefined;u9=undefined;u10=undefined;u18=no;u15=undefined;u3=%2Fno%2F;u5=https%3A%2F%2Fwww.casumo.com%2Fno%2F%3Fbtag%3D0_2DCF4211F36A4A12B9700C5E59402665%26affid%3D0%26bid%3D1%26pid%3D0%26utm_source%3D0%26utm_medium%3Daffiliate%26utm_campaign%3D0%26utm_content%3D1;~oref=https%3A%2F%2Fwww.casumo.com%2Fno%2F%3Fbtag%3D0_2DCF4211F36A4A12B9700C5E59402665%26affid%3D0%26bid%3D1%26pid%3D0%26utm_source%3D0%26utm_medium%3Daffiliate%26utm_campaign%3D0%26utm_content%3D1? HTTP/1.1
Host: 5903415.fls.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casumo.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 18 Jan 2023 07:37:36 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
strict-transport-security: max-age=21600
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 353
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Wed, 18-Jan-2023 07:52:36 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
5903415.fls.doubleclick.net/activityi;src=5903415;type=uk;cat=casum00;ord=1;num=6594421429526;gtm=2wg1a1;auiddc=1092196729.1674027456;u1=undefined;u9=undefined;u10=undefined;u18=no;u15=undefined;u3=%2Fno%2F;u5=https%3A%2F%2Fwww.casumo.com%2Fno%2F%3Fbtag%3D0_2DCF4211F36A4A12B9700C5E59402665%26affid%3D0%26bid%3D1%26pid%3D0%26utm_source%3D0%26utm_medium%3Daffiliate%26utm_campaign%3D0%26utm_content%3D1;~oref=https%3A%2F%2Fwww.casumo.com%2Fno%2F%3Fbtag%3D0_2DCF4211F36A4A12B9700C5E59402665%26affid%3D0%26bid%3D1%26pid%3D0%26utm_source%3D0%26utm_medium%3Daffiliate%26utm_campaign%3D0%26utm_content%3D1?
200 OK 356 B URL HTTP/2 5903415.fls.doubleclick.net/activityi;src=5903415;type=uk;cat=casum00;ord=1;num=6594421429526;gtm=2wg1a1;auiddc=1092196729.1674027456;u1=undefined;u9=undefined;u10=undefined;u18=no;u15=undefined;u3=%2Fno%2F;u5=https%3A%2F%2Fwww.casumo.com%2Fno%2F%3Fbtag%3D0_2DCF4211F36A4A12B9700C5E59402665%26affid%3D0%26bid%3D1%26pid%3D0%26utm_source%3D0%26utm_medium%3Daffiliate%26utm_campaign%3D0%26utm_content%3D1;~oref=https%3A%2F%2Fwww.casumo.com%2Fno%2F%3Fbtag%3D0_2DCF4211F36A4A12B9700C5E59402665%26affid%3D0%26bid%3D1%26pid%3D0%26utm_source%3D0%26utm_medium%3Daffiliate%26utm_campaign%3D0%26utm_content%3D1?
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (876), with no line terminators
Hash a608ad73a1ed28042dd0b6fa745582d2
c2bda6b069efc09969c55dcb209dca0ba41cfb7a
b67d0fd0e790f928bc03b11ada479bf38787147ce5d81377a11875743cdcb0b3
GET /activityi;src=5903415;type=uk;cat=casum00;ord=1;num=6594421429526;gtm=2wg1a1;auiddc=1092196729.1674027456;u1=undefined;u9=undefined;u10=undefined;u18=no;u15=undefined;u3=%2Fno%2F;u5=https%3A%2F%2Fwww.casumo.com%2Fno%2F%3Fbtag%3D0_2DCF4211F36A4A12B9700C5E59402665%26affid%3D0%26bid%3D1%26pid%3D0%26utm_source%3D0%26utm_medium%3Daffiliate%26utm_campaign%3D0%26utm_content%3D1;~oref=https%3A%2F%2Fwww.casumo.com%2Fno%2F%3Fbtag%3D0_2DCF4211F36A4A12B9700C5E59402665%26affid%3D0%26bid%3D1%26pid%3D0%26utm_source%3D0%26utm_medium%3Daffiliate%26utm_campaign%3D0%26utm_content%3D1? HTTP/1.1
Host: 5903415.fls.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casumo.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 18 Jan 2023 07:37:36 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
strict-transport-security: max-age=21600
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 356
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Wed, 18-Jan-2023 07:52:36 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 97c18a1f4ad26bed14c097c5bb7459f0
2c6ee86fc895d1b3a4b5b8e4caf9cb71a54ab790
d6817e25966a6106335f3e3c2eecb392cc3cff8e148e1dfadf7c26254cc8e8dc
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1642
Cache-Control: max-age=143804
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 07:37:36 GMT
Etag: "63c72a12-1d7"
Expires: Thu, 19 Jan 2023 23:34:20 GMT
Last-Modified: Tue, 17 Jan 2023 23:06:58 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
static.ads-twitter.com/uwt.js
200 OK 15 kB URL HTTP/2 static.ads-twitter.com/uwt.js
IP
File type ASCII text, with very long lines (57596), with no line terminators
Hash 573e6a7f86f6f3063763360ef0672c01
b12eab3b4ac8872d49ac6e15f9cd17741765c0cf
02445eb022a04139531f0ce8d8980c31083a1c670936f1477f5cfc4d252133f7
GET /uwt.js HTTP/1.1
Host: static.ads-twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casumo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Thu, 27 Oct 2022 18:55:37 GMT
cache-control: no-cache
content-type: application/javascript; charset=utf-8
content-encoding: gzip
etag: "32ad004436155ec972bc50e6238b5b67+gzip+gzip"
accept-ranges: bytes
date: Wed, 18 Jan 2023 07:37:36 GMT
x-served-by: cache-iad-kiad7000089-IAD, cache-bma1666-BMA
x-cache: HIT, HIT
vary: Accept-Encoding,Host
p3p: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
x-tw-cdn: FT
content-length: 15375
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 9cc9c2c42e28ba8163f8b1aa40177e08
3042b8c3c6d00b048945fa4e194402a16dc58d2b
b3f096e6d23fb7491ddfd0cb5b286020e59a3f5c491ed2f29f360cf7a74099c1
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Wed, 18 Jan 2023 07:37:36 GMT
Last-Modified: Wed, 18 Jan 2023 06:02:27 GMT
Server: ECS (nyb/1D11)
X-Cache: Miss from cloudfront
Via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: QVpRBWVP2td0AwjsshADiBW9Jk264QpLEzDKmZ9i9lZ-q92BmILIow==
Age: 5709
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 19e9c21f1e72949764d8ffcb5747bec5
65af9cb30aa7959c39889fd28d3f870dbbf896cd
3deb58a447d7318ef995f772ea43eeb2af3eaca23f96e68638d2303bbbb65108
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 07:37:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
connect.facebook.net/en_US/fbevents.js
200 OK 28 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
File type ASCII text, with very long lines (64348)
Hash 541db4f3f0ba067bfb58cdac34cb86f4
20e6883f068568888ce37c6b9ef8f5d12be257c0
83898f3b2da2a11996d2eb3a5115ef301255030fdf231b8bf7971916769bc7be
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casumo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: paeYqPQYkmUQGudM2WmOEp71Euty2bdqlSU5xOJ3VlQWpykGVXdK8pj5obIo8X+aBH1vWRsZgiQh6GruX87/bQ==
content-length: 27815
x-fb-trip-id: 1904183273
date: Wed, 18 Jan 2023 07:37:36 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 97c18a1f4ad26bed14c097c5bb7459f0
2c6ee86fc895d1b3a4b5b8e4caf9cb71a54ab790
d6817e25966a6106335f3e3c2eecb392cc3cff8e148e1dfadf7c26254cc8e8dc
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1642
Cache-Control: max-age=143804
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 07:37:36 GMT
Etag: "63c72a12-1d7"
Expires: Thu, 19 Jan 2023 23:34:20 GMT
Last-Modified: Tue, 17 Jan 2023 23:06:58 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
pixel.mathtag.com/sync/iframe?mt_uuid=369e63c7-a1c0-4600-95b8-2155de91cd15&no_iframe=1&mt_adid=129668&source=mathtag
200 OK 713 B URL HTTP/1.1 pixel.mathtag.com/sync/iframe?mt_uuid=369e63c7-a1c0-4600-95b8-2155de91cd15&no_iframe=1&mt_adid=129668&source=mathtag
IP
File type HTML document text\012- HTML document, ASCII text
Hash f853f2ecf3f2d763c4057f4ff5c3e4e8
0f9ca6de16aa4261f1202443311462a81717dd85
8040be8c28a19b0f78481f2da17e7220e75adde27eb9713ff626652a066f92da
GET /sync/iframe?mt_uuid=369e63c7-a1c0-4600-95b8-2155de91cd15&no_iframe=1&mt_adid=129668&source=mathtag HTTP/1.1
Host: pixel.mathtag.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casumo.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 713
Access-Control-Allow-Origin: *
Server: MT3 277 3f0ad7a master cdg-pixel-x15 config:1.0.0
Cache-Control: no-cache
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
Expires: Wed, 18 Jan 2023 07:37:35 GMT
Date: Wed, 18 Jan 2023 07:37:36 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash a58bc03b6b79b7488ea8e9a0743b1755
16cef4689cfa24f7e377111b54ca40c384bfbc4d
0b7bb3118c8592ce386b0ceea811e8280b47bfd379b6e0cded128df74bc71657
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6175
Cache-Control: max-age=89664
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 07:37:36 GMT
Etag: "63c644e1-1d7"
Expires: Thu, 19 Jan 2023 08:32:00 GMT
Last-Modified: Tue, 17 Jan 2023 06:49:05 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash a58bc03b6b79b7488ea8e9a0743b1755
16cef4689cfa24f7e377111b54ca40c384bfbc4d
0b7bb3118c8592ce386b0ceea811e8280b47bfd379b6e0cded128df74bc71657
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6175
Cache-Control: max-age=89664
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 07:37:36 GMT
Etag: "63c644e1-1d7"
Expires: Thu, 19 Jan 2023 08:32:00 GMT
Last-Modified: Tue, 17 Jan 2023 06:49:05 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
tr.snapchat.com/p?pid=1576d02a-cd11-4ae1-adbb-2d4df1a0c230&ev=PAGE_VIEW&intg=gtm&pl=https%3A%2F%2Fwww.casumo.com%2Fno%2F%3Fbtag%3D0_2DCF4211F36A4A12B9700C5E59402665%26affid%3D0%26bid%3D1%26pid%3D0%26utm_source%3D0%26utm_medium%3Daffiliate%26utm_campaign%3D0%26utm_content%3D1&bt=1d53c387&if=false&m_dcl=1916&m_fcps=672&m_pi=651&m_pl=0&m_pv=v2&m_rd=2366&m_sl=2362&rf=&trackId=ab62b776-f2ee-451a-9471-a16324906b66&ts=1674027456389&u_c1=b247ea0f-2c8f-4585-8062-b7b7be60452a&u_sclid=b3b5e105-6b70-43aa-89ca-2d94a603e59e&u_scsid=bc3944c8-ce1a-4f83-b5fe-0e4e2ba386b7&v=2.0.0
200 OK 68 B URL HTTP/2 tr.snapchat.com/p?pid=1576d02a-cd11-4ae1-adbb-2d4df1a0c230&ev=PAGE_VIEW&intg=gtm&pl=https%3A%2F%2Fwww.casumo.com%2Fno%2F%3Fbtag%3D0_2DCF4211F36A4A12B9700C5E59402665%26affid%3D0%26bid%3D1%26pid%3D0%26utm_source%3D0%26utm_medium%3Daffiliate%26utm_campaign%3D0%26utm_content%3D1&bt=1d53c387&if=false&m_dcl=1916&m_fcps=672&m_pi=651&m_pl=0&m_pv=v2&m_rd=2366&m_sl=2362&rf=&trackId=ab62b776-f2ee-451a-9471-a16324906b66&ts=1674027456389&u_c1=b247ea0f-2c8f-4585-8062-b7b7be60452a&u_sclid=b3b5e105-6b70-43aa-89ca-2d94a603e59e&u_scsid=bc3944c8-ce1a-4f83-b5fe-0e4e2ba386b7&v=2.0.0
IP
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash c4a2b870062c2bb98c500bc1526c0498
528666ccdb12997358077bc8fcdbfb6b825c7788
2aa4fa20701cdd6d8d56046069001186b5267e3ee7d0ef618ad2f4a683723e11
GET /p?pid=1576d02a-cd11-4ae1-adbb-2d4df1a0c230&ev=PAGE_VIEW&intg=gtm&pl=https%3A%2F%2Fwww.casumo.com%2Fno%2F%3Fbtag%3D0_2DCF4211F36A4A12B9700C5E59402665%26affid%3D0%26bid%3D1%26pid%3D0%26utm_source%3D0%26utm_medium%3Daffiliate%26utm_campaign%3D0%26utm_content%3D1&bt=1d53c387&if=false&m_dcl=1916&m_fcps=672&m_pi=651&m_pl=0&m_pv=v2&m_rd=2366&m_sl=2362&rf=&trackId=ab62b776-f2ee-451a-9471-a16324906b66&ts=1674027456389&u_c1=b247ea0f-2c8f-4585-8062-b7b7be60452a&u_sclid=b3b5e105-6b70-43aa-89ca-2d94a603e59e&u_scsid=bc3944c8-ce1a-4f83-b5fe-0e4e2ba386b7&v=2.0.0 HTTP/1.1
Host: tr.snapchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casumo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 18 Jan 2023 07:37:36 GMT
access-control-allow-origin: *
cache-control: no-cache, no-transform
set-cookie: sc_at=v2|H4sIAAAAAAAAAAXBgRGAIAwDwIl6l0JCdBylMkWH9z+PgL1nKJlBuuKSRjzl+z1fGZ7duUwMU6vxAzqNbpQyAAAA;SameSite=None;Version=1;Comment=;Domain=.snapchat.com;Path=/;Max-Age=33696000;Secure
content-type: image/png
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-length: 68
x-envoy-upstream-service-time: 0
server: API Gateway
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash a58bc03b6b79b7488ea8e9a0743b1755
16cef4689cfa24f7e377111b54ca40c384bfbc4d
0b7bb3118c8592ce386b0ceea811e8280b47bfd379b6e0cded128df74bc71657
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3135
Cache-Control: max-age=86623
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 07:37:36 GMT
Etag: "63c644e1-1d7"
Expires: Thu, 19 Jan 2023 07:41:19 GMT
Last-Modified: Tue, 17 Jan 2023 06:49:05 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471
tr.snapchat.com/cm/i?pid=1576d02a-cd11-4ae1-adbb-2d4df1a0c230&u_scsid=bc3944c8-ce1a-4f83-b5fe-0e4e2ba386b7&u_sclid=b3b5e105-6b70-43aa-89ca-2d94a603e59e
200 OK 0 B URL HTTP/2 tr.snapchat.com/cm/i?pid=1576d02a-cd11-4ae1-adbb-2d4df1a0c230&u_scsid=bc3944c8-ce1a-4f83-b5fe-0e4e2ba386b7&u_sclid=b3b5e105-6b70-43aa-89ca-2d94a603e59e
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cm/i?pid=1576d02a-cd11-4ae1-adbb-2d4df1a0c230&u_scsid=bc3944c8-ce1a-4f83-b5fe-0e4e2ba386b7&u_sclid=b3b5e105-6b70-43aa-89ca-2d94a603e59e HTTP/1.1
Host: tr.snapchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casumo.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 18 Jan 2023 07:37:36 GMT
content-type: text/html
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-length: 0
x-envoy-upstream-service-time: 34
server: API Gateway
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
eor.ediemidnightzombies.com/ct?id=32840&url=https%3A%2F%2Fwww.casumo.com%2Fno%2F%3Fbtag%3D0_2DCF4211F36A4A12B9700C5E59402665%26affid%3D0%26bid%3D1%26pid%3D0%26utm_source%3D0%26utm_medium%3Daffiliate%26utm_campaign%3D0%26utm_content%3D1%26cq_aff%3D0&sf=0&tpi=&ch=cheq4ppc&uvid=&tsf=0&tsfmi=&tsfu=&cb=1674027456361&hl=1&op=0&ag=1317291471&rand=748771797125102192685791718021728101107956721179190099691912081112207988525&fs=1152x836&fst=1152x836&np=linux%20x86_64&nv=&ref=&ss=1280x1024&nc=0&at=&di=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%3D%3D&dep=0&pre=0&sdd=%7B%7D&cri=0MskGTxK94&pto=2339&ver=50&gac=376582927.1674027456&mei=&ap=&duid=1.1674027456.Z6Ydiw6d3ZynWjC5&suid=1.1674027456.2S4VJFdD9IolrWq8&tuid=1.1674027456.HJALfZyEu34tcUhU&fbc=->m=WyJhY3RpdmF0ZUV4cGVyaW1lbnQiLCJwYWdlVmlldyJd&it=69%2C2108%2C55&fbcl=-&gacl=&gacsd=-&rtic=-&bgc=-&spa=1&urid=0
200 OK 992 B URL HTTP/2 eor.ediemidnightzombies.com/ct?id=32840&url=https%3A%2F%2Fwww.casumo.com%2Fno%2F%3Fbtag%3D0_2DCF4211F36A4A12B9700C5E59402665%26affid%3D0%26bid%3D1%26pid%3D0%26utm_source%3D0%26utm_medium%3Daffiliate%26utm_campaign%3D0%26utm_content%3D1%26cq_aff%3D0&sf=0&tpi=&ch=cheq4ppc&uvid=&tsf=0&tsfmi=&tsfu=&cb=1674027456361&hl=1&op=0&ag=1317291471&rand=748771797125102192685791718021728101107956721179190099691912081112207988525&fs=1152x836&fst=1152x836&np=linux%20x86_64&nv=&ref=&ss=1280x1024&nc=0&at=&di=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%3D%3D&dep=0&pre=0&sdd=%7B%7D&cri=0MskGTxK94&pto=2339&ver=50&gac=376582927.1674027456&mei=&ap=&duid=1.1674027456.Z6Ydiw6d3ZynWjC5&suid=1.1674027456.2S4VJFdD9IolrWq8&tuid=1.1674027456.HJALfZyEu34tcUhU&fbc=->m=WyJhY3RpdmF0ZUV4cGVyaW1lbnQiLCJwYWdlVmlldyJd&it=69%2C2108%2C55&fbcl=-&gacl=&gacsd=-&rtic=-&bgc=-&spa=1&urid=0
IP
File type ASCII text, with very long lines (3095), with no line terminators
Hash 62d1756e62956f2578b6511e1b8b0a35
6e02be1e819953657ffd8c74149acbfa00b3cb23
9bb122854b293c430514019c57f46bd53669487cbdd2cc328058cfdc4777cfcc
GET /ct?id=32840&url=https%3A%2F%2Fwww.casumo.com%2Fno%2F%3Fbtag%3D0_2DCF4211F36A4A12B9700C5E59402665%26affid%3D0%26bid%3D1%26pid%3D0%26utm_source%3D0%26utm_medium%3Daffiliate%26utm_campaign%3D0%26utm_content%3D1%26cq_aff%3D0&sf=0&tpi=&ch=cheq4ppc&uvid=&tsf=0&tsfmi=&tsfu=&cb=1674027456361&hl=1&op=0&ag=1317291471&rand=748771797125102192685791718021728101107956721179190099691912081112207988525&fs=1152x836&fst=1152x836&np=linux%20x86_64&nv=&ref=&ss=1280x1024&nc=0&at=&di=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%3D%3D&dep=0&pre=0&sdd=%7B%7D&cri=0MskGTxK94&pto=2339&ver=50&gac=376582927.1674027456&mei=&ap=&duid=1.1674027456.Z6Ydiw6d3ZynWjC5&suid=1.1674027456.2S4VJFdD9IolrWq8&tuid=1.1674027456.HJALfZyEu34tcUhU&fbc=->m=WyJhY3RpdmF0ZUV4cGVyaW1lbnQiLCJwYWdlVmlldyJd&it=69%2C2108%2C55&fbcl=-&gacl=&gacsd=-&rtic=-&bgc=-&spa=1&urid=0 HTTP/1.1
Host: eor.ediemidnightzombies.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casumo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
content-encoding: gzip
content-type: text/javascript
date: Wed, 18 Jan 2023 07:37:36 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
set-cookie: cg_uuid=cbf070889dac5cc79345be04c290276a; Max-Age=29030400; Path=/; Expires=Wed, 20 Dec 2023 07:37:36 GMT; HttpOnly; Secure; SameSite=None
content-length: 992
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 312 B IP
Hash 6e7debaa9ef4c63cf5e6c8a600b5265f
308cce074b318f39d7883536062f49ce30cf0729
cd9c74a94de37b504c00b87d54e7f7fe44f8ef10eafad0ad06c1407f0a1f1e51
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6586
Cache-Control: max-age=108411
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 07:37:36 GMT
Etag: "63c68c81-138"
Expires: Thu, 19 Jan 2023 13:44:27 GMT
Last-Modified: Tue, 17 Jan 2023 11:54:41 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 312
cdn.iconvert.network/code/070edf54-c34b-4b88-a821-892f77441cc0.js
200 OK 6.7 kB URL HTTP/2 cdn.iconvert.network/code/070edf54-c34b-4b88-a821-892f77441cc0.js
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (65536), with no line terminators
Hash ca46fef107254893a7813512cff374c1
43b4269f4e702bb7d72dd9c96e50b2e1f01d72a6
4edbcc062d5902b69cf56edbee389440441a2ccaff70994fa31e2b85789287f5
GET /code/070edf54-c34b-4b88-a821-892f77441cc0.js HTTP/1.1
Host: cdn.iconvert.network
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casumo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Mon, 09 Jan 2023 14:31:17 GMT
server: AmazonS3
content-encoding: br
date: Wed, 18 Jan 2023 06:35:42 GMT
cache-control: max-age=7200
etag: W/"0f4494fe70b8f9e16c02e95a258896fb"
x-cache: Hit from cloudfront
via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: RmRylXoIsOY41gIpIPIW1qVPw8gPfzg7wSJLp6h3XQF8yQjjSuhe8Q==
age: 3730
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 43904744042cec16f81766250b8ebf49
8393568a2e9c86dafc36563c76703704c7cd86c6
d2359c7cce5176a68cd627ba7e39dfceff78036c6840cd468994df8519f1fb27
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 07:37:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
eor.ediemidnightzombies.com/tracker/tc_imp.gif?e=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&cri=0MskGTxK94&ts=230&cb=1674027456591
200 OK 43 B URL HTTP/2 eor.ediemidnightzombies.com/tracker/tc_imp.gif?e=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&cri=0MskGTxK94&ts=230&cb=1674027456591
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash db04c7b378cb2db912c3ba8a5a774ee3
dee34bd86c3484d31002182aa2b7caa4699126b8
98b3d9d20e032f90aca49e9b116225d539ff6fbdb7e42c3c363f63896ac03d2a
GET /tracker/tc_imp.gif?e=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&cri=0MskGTxK94&ts=230&cb=1674027456591 HTTP/1.1
Host: eor.ediemidnightzombies.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casumo.com/
Cookie: cg_uuid=cbf070889dac5cc79345be04c290276a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
date: Wed, 18 Jan 2023 07:37:36 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
content-length: 43
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/veolRqxItAk
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/veolRqxItAk
IP
Hash 033add3712ccc9a830e2945b2b240e57
fb400ac8801ab3225dc5a4154056f488ec5e1bc2
a9f28ff8106c5a9e5848aceee7eba97f4f93aab41a4781f6f6f79e135b22f6b0
POST /s/gts1d4/veolRqxItAk HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 07:37:36 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 43904744042cec16f81766250b8ebf49
8393568a2e9c86dafc36563c76703704c7cd86c6
d2359c7cce5176a68cd627ba7e39dfceff78036c6840cd468994df8519f1fb27
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 07:37:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
adservice.google.com/ddm/fls/i/src=5903415;type=uk;cat=casum00;ord=1;num=6594421429526;gtm=2wg1a1;auiddc=1092196729.1674027456;u1=undefined;u9=undefined;u10=undefined;u18=no;u15=undefined;u3=%2Fno%2F;u5=https%3A%2F%2Fwww.casumo.com%2Fno%2F%3Fbtag%3D0_2DCF4211F36A4A12B9700C5E59402665%26affid%3D0%26bid%3D1%26pid%3D0%26utm_source%3D0%26utm_medium%3Daffiliate%26utm_campaign%3D0%26utm_content%3D1;~oref=https%3A%2F%2Fwww.casumo.com%2Fno%2F%3Fbtag%3D0_2DCF4211F36A4A12B9700C5E59402665%26affid%3D0%26bid%3D1%26pid%3D0%26utm_source%3D0%26utm_medium%3Daffiliate%26utm_campaign%3D0%26utm_content%3D1
200 OK 357 B URL HTTP/2 adservice.google.com/ddm/fls/i/src=5903415;type=uk;cat=casum00;ord=1;num=6594421429526;gtm=2wg1a1;auiddc=1092196729.1674027456;u1=undefined;u9=undefined;u10=undefined;u18=no;u15=undefined;u3=%2Fno%2F;u5=https%3A%2F%2Fwww.casumo.com%2Fno%2F%3Fbtag%3D0_2DCF4211F36A4A12B9700C5E59402665%26affid%3D0%26bid%3D1%26pid%3D0%26utm_source%3D0%26utm_medium%3Daffiliate%26utm_campaign%3D0%26utm_content%3D1;~oref=https%3A%2F%2Fwww.casumo.com%2Fno%2F%3Fbtag%3D0_2DCF4211F36A4A12B9700C5E59402665%26affid%3D0%26bid%3D1%26pid%3D0%26utm_source%3D0%26utm_medium%3Daffiliate%26utm_campaign%3D0%26utm_content%3D1
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (875), with no line terminators
Hash 00e53862e8629956437511b7a645f3d3
3d01519032b536ef41e802d750018c78fe781b6b
e42bc5bb34c0a29be8ef7312f7ae4055167d43c559591c4a1c61a9ac9c96811a
GET /ddm/fls/i/src=5903415;type=uk;cat=casum00;ord=1;num=6594421429526;gtm=2wg1a1;auiddc=1092196729.1674027456;u1=undefined;u9=undefined;u10=undefined;u18=no;u15=undefined;u3=%2Fno%2F;u5=https%3A%2F%2Fwww.casumo.com%2Fno%2F%3Fbtag%3D0_2DCF4211F36A4A12B9700C5E59402665%26affid%3D0%26bid%3D1%26pid%3D0%26utm_source%3D0%26utm_medium%3Daffiliate%26utm_campaign%3D0%26utm_content%3D1;~oref=https%3A%2F%2Fwww.casumo.com%2Fno%2F%3Fbtag%3D0_2DCF4211F36A4A12B9700C5E59402665%26affid%3D0%26bid%3D1%26pid%3D0%26utm_source%3D0%26utm_medium%3Daffiliate%26utm_campaign%3D0%26utm_content%3D1 HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5903415.fls.doubleclick.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 18 Jan 2023 07:37:36 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 357
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
adservice.google.com/ddm/fls/i/src=5903415;type=uk;cat=home01;ord=3499361820892;gtm=2wg1a1;auiddc=1092196729.1674027456;u1=undefined;u9=undefined;u10=undefined;u18=no;u15=undefined;u3=%2Fno%2F;u5=https%3A%2F%2Fwww.casumo.com%2Fno%2F%3Fbtag%3D0_2DCF4211F36A4A12B9700C5E59402665%26affid%3D0%26bid%3D1%26pid%3D0%26utm_source%3D0%26utm_medium%3Daffiliate%26utm_campaign%3D0%26utm_content%3D1;~oref=https%3A%2F%2Fwww.casumo.com%2Fno%2F%3Fbtag%3D0_2DCF4211F36A4A12B9700C5E59402665%26affid%3D0%26bid%3D1%26pid%3D0%26utm_source%3D0%26utm_medium%3Daffiliate%26utm_campaign%3D0%26utm_content%3D1
200 OK 356 B URL HTTP/2 adservice.google.com/ddm/fls/i/src=5903415;type=uk;cat=home01;ord=3499361820892;gtm=2wg1a1;auiddc=1092196729.1674027456;u1=undefined;u9=undefined;u10=undefined;u18=no;u15=undefined;u3=%2Fno%2F;u5=https%3A%2F%2Fwww.casumo.com%2Fno%2F%3Fbtag%3D0_2DCF4211F36A4A12B9700C5E59402665%26affid%3D0%26bid%3D1%26pid%3D0%26utm_source%3D0%26utm_medium%3Daffiliate%26utm_campaign%3D0%26utm_content%3D1;~oref=https%3A%2F%2Fwww.casumo.com%2Fno%2F%3Fbtag%3D0_2DCF4211F36A4A12B9700C5E59402665%26affid%3D0%26bid%3D1%26pid%3D0%26utm_source%3D0%26utm_medium%3Daffiliate%26utm_campaign%3D0%26utm_content%3D1
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (868), with no line terminators
Hash 3aa70eb3636b73b1907681f061c7ba76
57fc2e9f4987cb8e578fbad013e2cdb4f3ff99fb
7b158e07c109848928530de3dd9eed7c42490adcba063c0c5d7239edae8d4171
GET /ddm/fls/i/src=5903415;type=uk;cat=home01;ord=3499361820892;gtm=2wg1a1;auiddc=1092196729.1674027456;u1=undefined;u9=undefined;u10=undefined;u18=no;u15=undefined;u3=%2Fno%2F;u5=https%3A%2F%2Fwww.casumo.com%2Fno%2F%3Fbtag%3D0_2DCF4211F36A4A12B9700C5E59402665%26affid%3D0%26bid%3D1%26pid%3D0%26utm_source%3D0%26utm_medium%3Daffiliate%26utm_campaign%3D0%26utm_content%3D1;~oref=https%3A%2F%2Fwww.casumo.com%2Fno%2F%3Fbtag%3D0_2DCF4211F36A4A12B9700C5E59402665%26affid%3D0%26bid%3D1%26pid%3D0%26utm_source%3D0%26utm_medium%3Daffiliate%26utm_campaign%3D0%26utm_content%3D1 HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5903415.fls.doubleclick.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 18 Jan 2023 07:37:36 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 356
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
vars.hotjar.com/box-5e66f98b4ee957db209dc6f63e3d59dd.html
200 OK 1.0 kB URL HTTP/2 vars.hotjar.com/box-5e66f98b4ee957db209dc6f63e3d59dd.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2368), with no line terminators
Hash e0652b84b7b3b650769c759fc520c3f8
0b55d6e28613350c7f41b88f19e726e6751ad03b
94b4c240f83065223dcacdd3f8b69cb229d0616edc3e2041eef3e270d859fc3d
GET /box-5e66f98b4ee957db209dc6f63e3d59dd.html HTTP/1.1
Host: vars.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casumo.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html
content-length: 1035
date: Sat, 03 Dec 2022 04:42:02 GMT
accept-ranges: bytes
cache-control: max-age=31536000
content-encoding: br
cross-origin-embedder-policy: require-corp
cross-origin-resource-policy: cross-origin
etag: "e0652b84b7b3b650769c759fc520c3f8"
last-modified: Thu, 01 Dec 2022 13:36:28 GMT
strict-transport-security: max-age=2592000; includeSubDomains
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Jjjp7WHPf6MRaric7VQzZWCi0ipShFXkjcPKz8QA2f30P8Mh0lPQDQ==
age: 3984934
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 43904744042cec16f81766250b8ebf49
8393568a2e9c86dafc36563c76703704c7cd86c6
d2359c7cce5176a68cd627ba7e39dfceff78036c6840cd468994df8519f1fb27
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 07:37:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
t.co/i/adsct?bci=3&eci=2&event_id=da67e666-ee71-48d8-9591-56a1b45cd8e3&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=2b1b16e5-4d1c-45a3-bad4-ac703d88c014&tw_document_href=https%3A%2F%2Fwww.casumo.com%2Fno%2F%3Fbtag%3D0_2DCF4211F36A4A12B9700C5E59402665%26affid%3D0%26bid%3D1%26pid%3D0%26utm_source%3D0%26utm_medium%3Daffiliate%26utm_campaign%3D0%26utm_content%3D1&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o89k4&type=javascript&version=2.3.29
200 OK 43 B URL HTTP/2 t.co/i/adsct?bci=3&eci=2&event_id=da67e666-ee71-48d8-9591-56a1b45cd8e3&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=2b1b16e5-4d1c-45a3-bad4-ac703d88c014&tw_document_href=https%3A%2F%2Fwww.casumo.com%2Fno%2F%3Fbtag%3D0_2DCF4211F36A4A12B9700C5E59402665%26affid%3D0%26bid%3D1%26pid%3D0%26utm_source%3D0%26utm_medium%3Daffiliate%26utm_campaign%3D0%26utm_content%3D1&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o89k4&type=javascript&version=2.3.29
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/adsct?bci=3&eci=2&event_id=da67e666-ee71-48d8-9591-56a1b45cd8e3&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=2b1b16e5-4d1c-45a3-bad4-ac703d88c014&tw_document_href=https%3A%2F%2Fwww.casumo.com%2Fno%2F%3Fbtag%3D0_2DCF4211F36A4A12B9700C5E59402665%26affid%3D0%26bid%3D1%26pid%3D0%26utm_source%3D0%26utm_medium%3Daffiliate%26utm_campaign%3D0%26utm_content%3D1&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o89k4&type=javascript&version=2.3.29 HTTP/1.1
Host: t.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casumo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 18 Jan 2023 07:37:36 GMT
perf: 7626143928
server: tsa_o
set-cookie: muc_ads=51d2b10d-a391-4a2d-9e72-109b2ad33ad4; Max-Age=63072000; Expires=Fri, 17 Jan 2025 07:37:36 GMT; Path=/; Domain=t.co; Secure; SameSite=None
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: b6a583349c33314d
strict-transport-security: max-age=0
x-response-time: 104
x-connection-hash: 7fa0be5e6efc0e0bce75bd76c37f292e23beb196bde63caec7607e23262de403
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 38de5599544ffa789bad3f8686808c5e
fa442ea8ec124d47130fe75d0e848330a279e19e
d0344819ecf4cb1795fcd668d5f1a806121a48e174588ecd2eb8751595ac61ce
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 07:37:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 38de5599544ffa789bad3f8686808c5e
fa442ea8ec124d47130fe75d0e848330a279e19e
d0344819ecf4cb1795fcd668d5f1a806121a48e174588ecd2eb8751595ac61ce
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 07:37:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7db9f11a1c6ab0117ed3dd1d36e3aecc
61a4de77803ce4ad730c21dd88b5b55a196f26d6
b52c568528f72c5653bad85a1f72fb22f43dcb5d96ad234ab2772a7f95ca6cc2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B52C568528F72C5653BAD85A1F72FB22F43DCB5D96AD234AB2772A7F95CA6CC2"
Last-Modified: Tue, 17 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8044
Expires: Wed, 18 Jan 2023 09:51:40 GMT
Date: Wed, 18 Jan 2023 07:37:36 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7db9f11a1c6ab0117ed3dd1d36e3aecc
61a4de77803ce4ad730c21dd88b5b55a196f26d6
b52c568528f72c5653bad85a1f72fb22f43dcb5d96ad234ab2772a7f95ca6cc2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B52C568528F72C5653BAD85A1F72FB22F43DCB5D96AD234AB2772A7F95CA6CC2"
Last-Modified: Tue, 17 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8044
Expires: Wed, 18 Jan 2023 09:51:40 GMT
Date: Wed, 18 Jan 2023 07:37:36 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7db9f11a1c6ab0117ed3dd1d36e3aecc
61a4de77803ce4ad730c21dd88b5b55a196f26d6
b52c568528f72c5653bad85a1f72fb22f43dcb5d96ad234ab2772a7f95ca6cc2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B52C568528F72C5653BAD85A1F72FB22F43DCB5D96AD234AB2772A7F95CA6CC2"
Last-Modified: Tue, 17 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8044
Expires: Wed, 18 Jan 2023 09:51:40 GMT
Date: Wed, 18 Jan 2023 07:37:36 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1a78cd6d-1eab-47b0-b5c7-f2d1f91acc3a.jpeg
200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1a78cd6d-1eab-47b0-b5c7-f2d1f91acc3a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3f112ea3865f38cbbcc8400b58320fa0
dacc584338546bf60f26b2a0bec48e9b584640dc
7feb3c0691f40354701d1cb0bf3c834d1eeead4a7297fac3afc0f4a7ca2c94cb
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1a78cd6d-1eab-47b0-b5c7-f2d1f91acc3a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8853
x-amzn-requestid: ff98ec33-294a-4a13-b064-3cd4744cd2b2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e0LLKHPnIAMF0vQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c4bf14-233cbc6407c6b138144d7abb;Sampled=0
x-amzn-remapped-date: Mon, 16 Jan 2023 03:05:56 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: QZZaGtGl3Z-4G4DxO4R_gjfDdQVgJc30Ur9EyLAvbGFhv4LfaXziPQ==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 caf6806821bc479b28a6f1ce3043b8a6.cloudfront.net (CloudFront), 1.1 google
date: Wed, 18 Jan 2023 04:00:29 GMT
age: 13027
etag: "dacc584338546bf60f26b2a0bec48e9b584640dc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
adservice.google.no/ddm/fls/i/src=5903415;type=uk;cat=home01;ord=3499361820892;gtm=2wg1a1;auiddc=1092196729.1674027456;u1=undefined;u9=undefined;u10=undefined;u18=no;u15=undefined;u3=%2Fno%2F;u5=https%3A%2F%2Fwww.casumo.com%2Fno%2F%3Fbtag%3D0_2DCF4211F36A4A12B9700C5E59402665%26affid%3D0%26bid%3D1%26pid%3D0%26utm_source%3D0%26utm_medium%3Daffiliate%26utm_campaign%3D0%26utm_content%3D1;~oref=https%3A%2F%2Fwww.casumo.com%2Fno%2F%3Fbtag%3D0_2DCF4211F36A4A12B9700C5E59402665%26affid%3D0%26bid%3D1%26pid%3D0%26utm_source%3D0%26utm_medium%3Daffiliate%26utm_campaign%3D0%26utm_content%3D1
302 Found 0 B URL HTTP/2 adservice.google.no/ddm/fls/i/src=5903415;type=uk;cat=home01;ord=3499361820892;gtm=2wg1a1;auiddc=1092196729.1674027456;u1=undefined;u9=undefined;u10=undefined;u18=no;u15=undefined;u3=%2Fno%2F;u5=https%3A%2F%2Fwww.casumo.com%2Fno%2F%3Fbtag%3D0_2DCF4211F36A4A12B9700C5E59402665%26affid%3D0%26bid%3D1%26pid%3D0%26utm_source%3D0%26utm_medium%3Daffiliate%26utm_campaign%3D0%26utm_content%3D1;~oref=https%3A%2F%2Fwww.casumo.com%2Fno%2F%3Fbtag%3D0_2DCF4211F36A4A12B9700C5E59402665%26affid%3D0%26bid%3D1%26pid%3D0%26utm_source%3D0%26utm_medium%3Daffiliate%26utm_campaign%3D0%26utm_content%3D1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ddm/fls/i/src=5903415;type=uk;cat=home01;ord=3499361820892;gtm=2wg1a1;auiddc=1092196729.1674027456;u1=undefined;u9=undefined;u10=undefined;u18=no;u15=undefined;u3=%2Fno%2F;u5=https%3A%2F%2Fwww.casumo.com%2Fno%2F%3Fbtag%3D0_2DCF4211F36A4A12B9700C5E59402665%26affid%3D0%26bid%3D1%26pid%3D0%26utm_source%3D0%26utm_medium%3Daffiliate%26utm_campaign%3D0%26utm_content%3D1;~oref=https%3A%2F%2Fwww.casumo.com%2Fno%2F%3Fbtag%3D0_2DCF4211F36A4A12B9700C5E59402665%26affid%3D0%26bid%3D1%26pid%3D0%26utm_source%3D0%26utm_medium%3Daffiliate%26utm_campaign%3D0%26utm_content%3D1 HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adservice.google.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 18 Jan 2023 07:37:36 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
location: https://5903415.fls.doubleclick.net/ddm/fls/r/src=5903415;type=uk;cat=home01;ord=3499361820892;gtm=2wg1a1;auiddc=1092196729.1674027456;u1=undefined;u9=undefined;u10=undefined;u18=no;u15=undefined;u3=%2Fno%2F;u5=https%3A%2F%2Fwww.casumo.com%2Fno%2F%3Fbtag%3D0_2DCF4211F36A4A12B9700C5E59402665%26affid%3D0%26bid%3D1%26pid%3D0%26utm_source%3D0%26utm_medium%3Daffiliate%26utm_campaign%3D0%26utm_content%3D1;~oref=https%3A%2F%2Fwww.casumo.com%2Fno%2F%3Fbtag%3D0_2DCF4211F36A4A12B9700C5E59402665%26affid%3D0%26bid%3D1%26pid%3D0%26utm_source%3D0%26utm_medium%3Daffiliate%26utm_campaign%3D0%26utm_content%3D1
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
adservice.google.no/ddm/fls/i/src=5903415;type=uk;cat=casum00;ord=1;num=6594421429526;gtm=2wg1a1;auiddc=1092196729.1674027456;u1=undefined;u9=undefined;u10=undefined;u18=no;u15=undefined;u3=%2Fno%2F;u5=https%3A%2F%2Fwww.casumo.com%2Fno%2F%3Fbtag%3D0_2DCF4211F36A4A12B9700C5E59402665%26affid%3D0%26bid%3D1%26pid%3D0%26utm_source%3D0%26utm_medium%3Daffiliate%26utm_campaign%3D0%26utm_content%3D1;~oref=https%3A%2F%2Fwww.casumo.com%2Fno%2F%3Fbtag%3D0_2DCF4211F36A4A12B9700C5E59402665%26affid%3D0%26bid%3D1%26pid%3D0%26utm_source%3D0%26utm_medium%3Daffiliate%26utm_campaign%3D0%26utm_content%3D1
302 Found 0 B URL HTTP/2 adservice.google.no/ddm/fls/i/src=5903415;type=uk;cat=casum00;ord=1;num=6594421429526;gtm=2wg1a1;auiddc=1092196729.1674027456;u1=undefined;u9=undefined;u10=undefined;u18=no;u15=undefined;u3=%2Fno%2F;u5=https%3A%2F%2Fwww.casumo.com%2Fno%2F%3Fbtag%3D0_2DCF4211F36A4A12B9700C5E59402665%26affid%3D0%26bid%3D1%26pid%3D0%26utm_source%3D0%26utm_medium%3Daffiliate%26utm_campaign%3D0%26utm_content%3D1;~oref=https%3A%2F%2Fwww.casumo.com%2Fno%2F%3Fbtag%3D0_2DCF4211F36A4A12B9700C5E59402665%26affid%3D0%26bid%3D1%26pid%3D0%26utm_source%3D0%26utm_medium%3Daffiliate%26utm_campaign%3D0%26utm_content%3D1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ddm/fls/i/src=5903415;type=uk;cat=casum00;ord=1;num=6594421429526;gtm=2wg1a1;auiddc=1092196729.1674027456;u1=undefined;u9=undefined;u10=undefined;u18=no;u15=undefined;u3=%2Fno%2F;u5=https%3A%2F%2Fwww.casumo.com%2Fno%2F%3Fbtag%3D0_2DCF4211F36A4A12B9700C5E59402665%26affid%3D0%26bid%3D1%26pid%3D0%26utm_source%3D0%26utm_medium%3Daffiliate%26utm_campaign%3D0%26utm_content%3D1;~oref=https%3A%2F%2Fwww.casumo.com%2Fno%2F%3Fbtag%3D0_2DCF4211F36A4A12B9700C5E59402665%26affid%3D0%26bid%3D1%26pid%3D0%26utm_source%3D0%26utm_medium%3Daffiliate%26utm_campaign%3D0%26utm_content%3D1 HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adservice.google.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 18 Jan 2023 07:37:36 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
location: https://5903415.fls.doubleclick.net/ddm/fls/r/src=5903415;type=uk;cat=casum00;ord=1;num=6594421429526;gtm=2wg1a1;auiddc=1092196729.1674027456;u1=undefined;u9=undefined;u10=undefined;u18=no;u15=undefined;u3=%2Fno%2F;u5=https%3A%2F%2Fwww.casumo.com%2Fno%2F%3Fbtag%3D0_2DCF4211F36A4A12B9700C5E59402665%26affid%3D0%26bid%3D1%26pid%3D0%26utm_source%3D0%26utm_medium%3Daffiliate%26utm_campaign%3D0%26utm_content%3D1;~oref=https%3A%2F%2Fwww.casumo.com%2Fno%2F%3Fbtag%3D0_2DCF4211F36A4A12B9700C5E59402665%26affid%3D0%26bid%3D1%26pid%3D0%26utm_source%3D0%26utm_medium%3Daffiliate%26utm_campaign%3D0%26utm_content%3D1
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe52164e3-afec-433e-87ab-adb17222f1cd.jpeg
200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe52164e3-afec-433e-87ab-adb17222f1cd.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8656702f08344d3a4658bc43a9074a1f
fba424e1d09cbdc839ca320458b51715dafbbccc
0b0ac963c377b07f843637348f3d7c41d2aca89540ab8c2b80ef5fbbf466fee8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe52164e3-afec-433e-87ab-adb17222f1cd.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13848
x-amzn-requestid: 93bbdd19-aa04-49ec-858f-9fa1d6b736d3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e6BKCGEtoAMFgsQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c71573-008911af44c3998d7b27b837;Sampled=0
x-amzn-remapped-date: Tue, 17 Jan 2023 21:38:59 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: adtKl3gOcesaXNHcRbi71-1Wz6caEgtXrAvbhB9qhId7eJEkd7d7pQ==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 17 Jan 2023 21:59:45 GMT
age: 34671
etag: "fba424e1d09cbdc839ca320458b51715dafbbccc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1983f844-6675-400d-b957-26ce8e636ae7.jpeg
200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1983f844-6675-400d-b957-26ce8e636ae7.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 015e1f23253643036d718d5a785be61b
55b5ce93ba3ab53b227aa1fdb60b6062d35ae2f0
78045e55e5e9966b1fddb9e3f734972611ea78e7cb78b92beb2e4adf56f724ed
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1983f844-6675-400d-b957-26ce8e636ae7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8939
x-amzn-requestid: 5fbb2a5d-5731-4fb0-8b95-cc59338862de
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e6A1nGMvoAMFrQA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c714f0-14de6c94416a9ced1c284d5b;Sampled=0
x-amzn-remapped-date: Tue, 17 Jan 2023 21:36:48 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 9a9h9cp9BmYqM6hR_X8VOYLSvbH8PxNs0AYpdil6CjSEy0zuZkSvsg==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 556b99c6be8d7078b9f067347c62df6a.cloudfront.net (CloudFront), 1.1 google
date: Tue, 17 Jan 2023 21:52:59 GMT
age: 35077
etag: "55b5ce93ba3ab53b227aa1fdb60b6062d35ae2f0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3d4770a8-c74a-4d56-b999-a0f191af3bf2.webp
200 OK 6.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3d4770a8-c74a-4d56-b999-a0f191af3bf2.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9200e43ca808b9ecec74828e03853d4c
3070340147ced46e5fdf73408272aa39391976fb
abdaedfc2da45180c463607686b20afd82113b78cfa78b0f28ab169b9858469b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3d4770a8-c74a-4d56-b999-a0f191af3bf2.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6454
x-amzn-requestid: 79329eb3-8d89-423f-8626-32c5e2e2831a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e6A0gHpeoAMF-Jw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c714e9-5e859dc121cd322c6b684eee;Sampled=0
x-amzn-remapped-date: Tue, 17 Jan 2023 21:36:41 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: TKl5JNASQseZsuX_yJtVaUT2TCY5lKIxjJ8QvhDIXDAkC8GwIRilYg==
via: 1.1 0005a84c2971ff4f5bbb79e7ebc622a8.cloudfront.net (CloudFront), 1.1 32c16f33c8f5601364fa8229b0d74dc2.cloudfront.net (CloudFront), 1.1 google
date: Tue, 17 Jan 2023 22:01:08 GMT
age: 34588
etag: "3070340147ced46e5fdf73408272aa39391976fb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fefcc19e1-75f3-4a6f-8686-3308f93dd409.jpeg
200 OK 7.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fefcc19e1-75f3-4a6f-8686-3308f93dd409.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash df397b10a8e03cec7f74cd8f0fbb4e6e
625e8a1b7e865def8861e194ac754c486cd374e7
6bafab2eaac6814dd4c0f2155119f71e01cf6ecd602d51fa5d5e547db3588705
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fefcc19e1-75f3-4a6f-8686-3308f93dd409.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7574
x-amzn-requestid: e330d010-6465-47c6-b45f-b25a6de84f9d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e6A16GjsIAMFYgw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c714f2-17ca5566719117874cb6a6d0;Sampled=0
x-amzn-remapped-date: Tue, 17 Jan 2023 21:36:50 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: wF_siKELQDBuWLkhNtrGzLwKyuMaGaSoCQNpE5etDRs6XotQgRYF3w==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Tue, 17 Jan 2023 22:02:53 GMT
age: 34483
etag: "625e8a1b7e865def8861e194ac754c486cd374e7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F670ced8b-7c3c-440b-8ef8-ce104b85116d.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F670ced8b-7c3c-440b-8ef8-ce104b85116d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 318731dc24b5b47b96998e30e5ce27aa
86729555b4cf8d1f460ff74981b8b5a54a4bf9ea
acb7a93f815812cab50385796f6bcd7e16e96125422fb1415388a3b94767895e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F670ced8b-7c3c-440b-8ef8-ce104b85116d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10860
x-amzn-requestid: 808ed5a6-f0c3-40d9-a45f-aba1ffdf4ad9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e0LSuEZcoAMFsyA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c4bf44-52c2a1756df73c8c1b9e041a;Sampled=0
x-amzn-remapped-date: Mon, 16 Jan 2023 03:06:44 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Dek1Pngy_IqhWKhgiItX_XsYpqBTE7oyIkvPmYSIWafSnBoAt24Hlg==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Wed, 18 Jan 2023 04:11:25 GMT
age: 12371
etag: "86729555b4cf8d1f460ff74981b8b5a54a4bf9ea"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 08f93ab5998b32f38083380f5736e44b
63762dfec124d0ca5e2dcb420cbc4beab1cfe89b
b66cee907c1de781272ba5cd391925e7a4e83e7471834c5cbc84bfbb49b853d6
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Wed, 18 Jan 2023 07:37:36 GMT
Last-Modified: Wed, 18 Jan 2023 06:51:25 GMT
Server: ECS (nyb/1D20)
X-Cache: Miss from cloudfront
Via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: gNXPSv9WQn1PxCqAqOChKjjQ0n1HQt8Pm4hIpAOGXzv8q2Q0UCpbuw==
Age: 2771
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 38de5599544ffa789bad3f8686808c5e
fa442ea8ec124d47130fe75d0e848330a279e19e
d0344819ecf4cb1795fcd668d5f1a806121a48e174588ecd2eb8751595ac61ce
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 07:37:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 08f93ab5998b32f38083380f5736e44b
63762dfec124d0ca5e2dcb420cbc4beab1cfe89b
b66cee907c1de781272ba5cd391925e7a4e83e7471834c5cbc84bfbb49b853d6
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Wed, 18 Jan 2023 07:37:36 GMT
Last-Modified: Wed, 18 Jan 2023 06:51:25 GMT
Server: ECS (nyb/1DD2)
X-Cache: Miss from cloudfront
Via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: kQqUxn_w__zvJ0LLiJM1rjDkpBxutop1vviI8s1lbIsn8gzMLRKZ6g==
Age: 2771
event.iconvert.network/com.snowplowanalytics.snowplow/tp2
200 OK 0 B URL HTTP/2 event.iconvert.network/com.snowplowanalytics.snowplow/tp2
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /com.snowplowanalytics.snowplow/tp2 HTTP/1.1
Host: event.iconvert.network
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.casumo.com/
Origin: https://www.casumo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 18 Jan 2023 07:37:36 GMT
content-length: 0
access-control-allow-origin: https://www.casumo.com
access-control-allow-credentials: true
access-control-allow-headers: Content-Type
access-control-max-age: 5
server: akka-http/10.0.9
X-Firefox-Spdy: h2
event.iconvert.network/com.snowplowanalytics.snowplow/tp2
200 OK 2 B URL HTTP/2 event.iconvert.network/com.snowplowanalytics.snowplow/tp2
IP
File type ASCII text, with no line terminators
Hash 444bcb3a3fcf8389296c49467f27e1d6
7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1
Host: event.iconvert.network
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
Content-Length: 768
Origin: https://www.casumo.com
Connection: keep-alive
Referer: https://www.casumo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 18 Jan 2023 07:37:36 GMT
content-type: text/plain; charset=UTF-8
content-length: 2
set-cookie: sp=a508c198-c506-44b0-906d-c08e6182cbb4; Expires=Thu, 18 Jan 2024 07:37:36 GMT; Path=/
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA"
access-control-allow-origin: https://www.casumo.com
access-control-allow-credentials: true
server: akka-http/10.0.9
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f528e1452c912bb6ec5e4f30f0956ead
96bda01e69fd3562c10cd2246668f995d178a6a6
c3af3ca2592e184a08865177b3bfb76d6190c786d4e55358ab8cec41610d6ddd
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 07:37:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f528e1452c912bb6ec5e4f30f0956ead
96bda01e69fd3562c10cd2246668f995d178a6a6
c3af3ca2592e184a08865177b3bfb76d6190c786d4e55358ab8cec41610d6ddd
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 07:37:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googleadservices.com/pagead/conversion.js
200 OK 17 kB URL HTTP/2 www.googleadservices.com/pagead/conversion.js
IP
File type ASCII text, with very long lines (2772)
Hash 3dd9093d5c427363b347ed3732befc98
77588d56b17ba7f8ab4001d05cdaa8398e843e2c
5fa959b8379bced46a0b720f109d5b75e992bdf647797343914e64f02cd26c8e
GET /pagead/conversion.js HTTP/1.1
Host: www.googleadservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5903415.fls.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Wed, 18 Jan 2023 07:37:36 GMT
expires: Wed, 18 Jan 2023 07:37:36 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 6595900510577199317
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 16839
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 5c3b377741ede870f54f1d39f058797a
51a291083489cac32fac5839650dd64e1347aa25
1b7d63c40914cc158a5bc5c8080b68efb258bdd39ade34334d19238ba68c3d48
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 07:37:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
geo-lookup.iconvert.network/?callback=_jsonp_0
200 OK 23 B URL HTTP/2 geo-lookup.iconvert.network/?callback=_jsonp_0
IP
File type ASCII text, with no line terminators
Hash 77a2b27581b0e6f8e1866d12a9fb3460
0d6912f1aabf2f9f191883767a565846b6b23387
892b6da823563cbd0865b33fd6f805e495769f555aa11679fa72c82e56abe9fd
GET /?callback=_jsonp_0 HTTP/1.1
Host: geo-lookup.iconvert.network
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casumo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 23
x-amz-bucket-region: us-east-1
date: Wed, 18 Jan 2023 07:37:36 GMT
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Am_uIw6hFHItARfRzpR1mAlNMKVky4wyK64NMW4BcO1nDkejKjIYfw==
X-Firefox-Spdy: h2
script.hotjar.com/modules.5bc662be9faceb9038da.js
200 OK 69 kB URL HTTP/2 script.hotjar.com/modules.5bc662be9faceb9038da.js
IP
File type Unicode text, UTF-8 text, with very long lines (47958)
Hash 80bbbdc2c462ad6e55b13b4def9dd8de
a50995d5a88154acb5328008140d677998da15c0
c52e08d76e10f378120f0d28428fedee20f57c8afcc71d52a8e770a16d7cf25b
GET /modules.5bc662be9faceb9038da.js HTTP/1.1
Host: script.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casumo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 68986
date: Tue, 17 Jan 2023 10:32:05 GMT
accept-ranges: bytes
access-control-allow-origin: *
cache-control: max-age=31536000
content-encoding: br
cross-origin-resource-policy: cross-origin
etag: "80bbbdc2c462ad6e55b13b4def9dd8de"
last-modified: Tue, 17 Jan 2023 10:31:25 GMT
strict-transport-security: max-age=2592000; includeSubDomains
x-content-type-options: nosniff
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9dd61138197a68f8d69f12574aab6930.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: iOX0NtQNDuKZPVotxc65eDskbJSSZkB5LhimVBkQpUwm_WwP46JaSA==
age: 75932
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f96ac6d23518cd0485e1d41d276d8184
58de3ad32744f1f92b86e9f60c29094c7ba5b115
a1b6546dc485dbbfc652a64b11655450987e9a391e44b05a6eb20b323ede242c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 07:37:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f96ac6d23518cd0485e1d41d276d8184
58de3ad32744f1f92b86e9f60c29094c7ba5b115
a1b6546dc485dbbfc652a64b11655450987e9a391e44b05a6eb20b323ede242c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 07:37:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ad.doubleclick.net/ddm/adj/N410415.197812NSO.CODESRV/B10286344.137561937;sz=1x2;ord=675872589838?
200 OK 14 B URL HTTP/2 ad.doubleclick.net/ddm/adj/N410415.197812NSO.CODESRV/B10286344.137561937;sz=1x2;ord=675872589838?
IP
File type exported SGML document, ASCII text
Hash d3ed124e3790adc26aff3aaccdba4c52
4c3ee29b1f1e47d7cc2bb707a0b4e7a81bf44f3c
019d22f4d7f452acbea918a6e36146f2acbc4a06fc2f8536d40454afdc824d22
GET /ddm/adj/N410415.197812NSO.CODESRV/B10286344.137561937;sz=1x2;ord=675872589838? HTTP/1.1
Host: ad.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casumo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 18 Jan 2023 07:37:37 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 14
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Wed, 18-Jan-2023 07:52:37 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash cc801dcdb63bac82d1f66fc29a1ac762
07778d4f04632fd2190a2140e28fdfc64f9093ca
34e03c2acf99396bb3b97bb45285e98550314a14a42f407f8849ac8ff6add142
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4939
Cache-Control: max-age=147793
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 07:37:37 GMT
Etag: "63c72cc7-139"
Expires: Fri, 20 Jan 2023 00:40:50 GMT
Last-Modified: Tue, 17 Jan 2023 23:18:31 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 313
googleads.g.doubleclick.net/pagead/viewthroughconversion/770218393/?random=827283546&cv=9&fst=1674027456981&num=2&npa=1&label=Yb7iCJ_639UBEJmzou8C&guid=ON&resp=GooglemKTybQhCsO&eid=375603260&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=2&url=https%3A%2F%2F5903415.fls.doubleclick.net%2Fddm%2Ffls%2Fr%2Fsrc%3D5903415%3Btype%3Duk%3Bcat%3Dcasum00%3Bord%3D1%3Bnum%3D6594421429526%3Bgtm%3D2wg1a1%3Bauiddc%3D1092196729.1674027456%3Bu1%3Dundefined%3Bu9%3Dundefined%3Bu10%3Dundefined%3Bu18%3Dno%3Bu15%3Dundefined%3Bu3%3D%252Fno%252F%3Bu5%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526bid%253D1%2526pid%253D0%2526utm_source%253D0%2526utm_medium%253Daffiliate%2526utm_campaign%253D0%2526utm_content%253D1%3B~oref%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526b&ref=https%3A%2F%2Fadservice.google.com%2F&hn=www.googleadservices.com&fmt=3&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&ocp_id=waHHY9-qBN2T78EPvfi-uAI&sscte=1&crd=
302 Found 42 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/770218393/?random=827283546&cv=9&fst=1674027456981&num=2&npa=1&label=Yb7iCJ_639UBEJmzou8C&guid=ON&resp=GooglemKTybQhCsO&eid=375603260&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=2&url=https%3A%2F%2F5903415.fls.doubleclick.net%2Fddm%2Ffls%2Fr%2Fsrc%3D5903415%3Btype%3Duk%3Bcat%3Dcasum00%3Bord%3D1%3Bnum%3D6594421429526%3Bgtm%3D2wg1a1%3Bauiddc%3D1092196729.1674027456%3Bu1%3Dundefined%3Bu9%3Dundefined%3Bu10%3Dundefined%3Bu18%3Dno%3Bu15%3Dundefined%3Bu3%3D%252Fno%252F%3Bu5%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526bid%253D1%2526pid%253D0%2526utm_source%253D0%2526utm_medium%253Daffiliate%2526utm_campaign%253D0%2526utm_content%253D1%3B~oref%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526b&ref=https%3A%2F%2Fadservice.google.com%2F&hn=www.googleadservices.com&fmt=3&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&ocp_id=waHHY9-qBN2T78EPvfi-uAI&sscte=1&crd=
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/viewthroughconversion/770218393/?random=827283546&cv=9&fst=1674027456981&num=2&npa=1&label=Yb7iCJ_639UBEJmzou8C&guid=ON&resp=GooglemKTybQhCsO&eid=375603260&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=2&url=https%3A%2F%2F5903415.fls.doubleclick.net%2Fddm%2Ffls%2Fr%2Fsrc%3D5903415%3Btype%3Duk%3Bcat%3Dcasum00%3Bord%3D1%3Bnum%3D6594421429526%3Bgtm%3D2wg1a1%3Bauiddc%3D1092196729.1674027456%3Bu1%3Dundefined%3Bu9%3Dundefined%3Bu10%3Dundefined%3Bu18%3Dno%3Bu15%3Dundefined%3Bu3%3D%252Fno%252F%3Bu5%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526bid%253D1%2526pid%253D0%2526utm_source%253D0%2526utm_medium%253Daffiliate%2526utm_campaign%253D0%2526utm_content%253D1%3B~oref%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526b&ref=https%3A%2F%2Fadservice.google.com%2F&hn=www.googleadservices.com&fmt=3&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&ocp_id=waHHY9-qBN2T78EPvfi-uAI&sscte=1&crd= HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5903415.fls.doubleclick.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 18 Jan 2023 07:37:37 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
location: https://www.google.com/pagead/1p-conversion/770218393/?random=827283546&cv=9&fst=1674027456981&num=2&npa=1&label=Yb7iCJ_639UBEJmzou8C&guid=ON&resp=GooglemKTybQhCsO&eid=375603260&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=2&url=https%3A%2F%2F5903415.fls.doubleclick.net%2Fddm%2Ffls%2Fr%2Fsrc%3D5903415%3Btype%3Duk%3Bcat%3Dcasum00%3Bord%3D1%3Bnum%3D6594421429526%3Bgtm%3D2wg1a1%3Bauiddc%3D1092196729.1674027456%3Bu1%3Dundefined%3Bu9%3Dundefined%3Bu10%3Dundefined%3Bu18%3Dno%3Bu15%3Dundefined%3Bu3%3D%252Fno%252F%3Bu5%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526bid%253D1%2526pid%253D0%2526utm_source%253D0%2526utm_medium%253Daffiliate%2526utm_campaign%253D0%2526utm_content%253D1%3B~oref%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526b&ref=https%3A%2F%2Fadservice.google.com%2F&hn=www.googleadservices.com&fmt=3&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&sscte=1&crd=&is_vtc=1&ocp_id=waHHY9-qBN2T78EPvfi-uAI&random=3826505950&resp=GooglemKTybQhCsO
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Wed, 18-Jan-2023 07:52:37 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/620182431/?random=1035857986&cv=9&fst=1674027456981&num=1&npa=1&label=bYLfCIj5t9YBEJ_33KcC&guid=ON&resp=GooglemKTybQhCsO&eid=375603260&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=2&url=https%3A%2F%2F5903415.fls.doubleclick.net%2Fddm%2Ffls%2Fr%2Fsrc%3D5903415%3Btype%3Duk%3Bcat%3Dcasum00%3Bord%3D1%3Bnum%3D6594421429526%3Bgtm%3D2wg1a1%3Bauiddc%3D1092196729.1674027456%3Bu1%3Dundefined%3Bu9%3Dundefined%3Bu10%3Dundefined%3Bu18%3Dno%3Bu15%3Dundefined%3Bu3%3D%252Fno%252F%3Bu5%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526bid%253D1%2526pid%253D0%2526utm_source%253D0%2526utm_medium%253Daffiliate%2526utm_campaign%253D0%2526utm_content%253D1%3B~oref%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526b&ref=https%3A%2F%2Fadservice.google.com%2F&hn=www.googleadservices.com&fmt=3&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&ocp_id=waHHY4avBPOS78EP_cm3iA4&sscte=1&crd=
302 Found 42 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/620182431/?random=1035857986&cv=9&fst=1674027456981&num=1&npa=1&label=bYLfCIj5t9YBEJ_33KcC&guid=ON&resp=GooglemKTybQhCsO&eid=375603260&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=2&url=https%3A%2F%2F5903415.fls.doubleclick.net%2Fddm%2Ffls%2Fr%2Fsrc%3D5903415%3Btype%3Duk%3Bcat%3Dcasum00%3Bord%3D1%3Bnum%3D6594421429526%3Bgtm%3D2wg1a1%3Bauiddc%3D1092196729.1674027456%3Bu1%3Dundefined%3Bu9%3Dundefined%3Bu10%3Dundefined%3Bu18%3Dno%3Bu15%3Dundefined%3Bu3%3D%252Fno%252F%3Bu5%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526bid%253D1%2526pid%253D0%2526utm_source%253D0%2526utm_medium%253Daffiliate%2526utm_campaign%253D0%2526utm_content%253D1%3B~oref%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526b&ref=https%3A%2F%2Fadservice.google.com%2F&hn=www.googleadservices.com&fmt=3&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&ocp_id=waHHY4avBPOS78EP_cm3iA4&sscte=1&crd=
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/viewthroughconversion/620182431/?random=1035857986&cv=9&fst=1674027456981&num=1&npa=1&label=bYLfCIj5t9YBEJ_33KcC&guid=ON&resp=GooglemKTybQhCsO&eid=375603260&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=2&url=https%3A%2F%2F5903415.fls.doubleclick.net%2Fddm%2Ffls%2Fr%2Fsrc%3D5903415%3Btype%3Duk%3Bcat%3Dcasum00%3Bord%3D1%3Bnum%3D6594421429526%3Bgtm%3D2wg1a1%3Bauiddc%3D1092196729.1674027456%3Bu1%3Dundefined%3Bu9%3Dundefined%3Bu10%3Dundefined%3Bu18%3Dno%3Bu15%3Dundefined%3Bu3%3D%252Fno%252F%3Bu5%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526bid%253D1%2526pid%253D0%2526utm_source%253D0%2526utm_medium%253Daffiliate%2526utm_campaign%253D0%2526utm_content%253D1%3B~oref%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526b&ref=https%3A%2F%2Fadservice.google.com%2F&hn=www.googleadservices.com&fmt=3&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&ocp_id=waHHY4avBPOS78EP_cm3iA4&sscte=1&crd= HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5903415.fls.doubleclick.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 18 Jan 2023 07:37:37 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
location: https://www.google.com/pagead/1p-conversion/620182431/?random=1035857986&cv=9&fst=1674027456981&num=1&npa=1&label=bYLfCIj5t9YBEJ_33KcC&guid=ON&resp=GooglemKTybQhCsO&eid=375603260&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=2&url=https%3A%2F%2F5903415.fls.doubleclick.net%2Fddm%2Ffls%2Fr%2Fsrc%3D5903415%3Btype%3Duk%3Bcat%3Dcasum00%3Bord%3D1%3Bnum%3D6594421429526%3Bgtm%3D2wg1a1%3Bauiddc%3D1092196729.1674027456%3Bu1%3Dundefined%3Bu9%3Dundefined%3Bu10%3Dundefined%3Bu18%3Dno%3Bu15%3Dundefined%3Bu3%3D%252Fno%252F%3Bu5%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526bid%253D1%2526pid%253D0%2526utm_source%253D0%2526utm_medium%253Daffiliate%2526utm_campaign%253D0%2526utm_content%253D1%3B~oref%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526b&ref=https%3A%2F%2Fadservice.google.com%2F&hn=www.googleadservices.com&fmt=3&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&sscte=1&crd=&is_vtc=1&ocp_id=waHHY4avBPOS78EP_cm3iA4&random=2116543458&resp=GooglemKTybQhCsO
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Wed, 18-Jan-2023 07:52:37 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/620182431/?random=1229713378&cv=9&fst=1674027456989&num=1&npa=1&label=xn0wCN6Lx9YBEJ_33KcC&guid=ON&resp=GooglemKTybQhCsO&eid=375603261&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=2&url=https%3A%2F%2F5903415.fls.doubleclick.net%2Fddm%2Ffls%2Fr%2Fsrc%3D5903415%3Btype%3Duk%3Bcat%3Dhome01%3Bord%3D3499361820892%3Bgtm%3D2wg1a1%3Bauiddc%3D1092196729.1674027456%3Bu1%3Dundefined%3Bu9%3Dundefined%3Bu10%3Dundefined%3Bu18%3Dno%3Bu15%3Dundefined%3Bu3%3D%252Fno%252F%3Bu5%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526bid%253D1%2526pid%253D0%2526utm_source%253D0%2526utm_medium%253Daffiliate%2526utm_campaign%253D0%2526utm_content%253D1%3B~oref%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526bid%253D1%25&ref=https%3A%2F%2Fadservice.google.com%2F&hn=www.googleadservices.com&fmt=3&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&ocp_id=waHHY8__BICV78EP3q-AGA&sscte=1&crd=
302 Found 42 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/620182431/?random=1229713378&cv=9&fst=1674027456989&num=1&npa=1&label=xn0wCN6Lx9YBEJ_33KcC&guid=ON&resp=GooglemKTybQhCsO&eid=375603261&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=2&url=https%3A%2F%2F5903415.fls.doubleclick.net%2Fddm%2Ffls%2Fr%2Fsrc%3D5903415%3Btype%3Duk%3Bcat%3Dhome01%3Bord%3D3499361820892%3Bgtm%3D2wg1a1%3Bauiddc%3D1092196729.1674027456%3Bu1%3Dundefined%3Bu9%3Dundefined%3Bu10%3Dundefined%3Bu18%3Dno%3Bu15%3Dundefined%3Bu3%3D%252Fno%252F%3Bu5%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526bid%253D1%2526pid%253D0%2526utm_source%253D0%2526utm_medium%253Daffiliate%2526utm_campaign%253D0%2526utm_content%253D1%3B~oref%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526bid%253D1%25&ref=https%3A%2F%2Fadservice.google.com%2F&hn=www.googleadservices.com&fmt=3&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&ocp_id=waHHY8__BICV78EP3q-AGA&sscte=1&crd=
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/viewthroughconversion/620182431/?random=1229713378&cv=9&fst=1674027456989&num=1&npa=1&label=xn0wCN6Lx9YBEJ_33KcC&guid=ON&resp=GooglemKTybQhCsO&eid=375603261&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=2&url=https%3A%2F%2F5903415.fls.doubleclick.net%2Fddm%2Ffls%2Fr%2Fsrc%3D5903415%3Btype%3Duk%3Bcat%3Dhome01%3Bord%3D3499361820892%3Bgtm%3D2wg1a1%3Bauiddc%3D1092196729.1674027456%3Bu1%3Dundefined%3Bu9%3Dundefined%3Bu10%3Dundefined%3Bu18%3Dno%3Bu15%3Dundefined%3Bu3%3D%252Fno%252F%3Bu5%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526bid%253D1%2526pid%253D0%2526utm_source%253D0%2526utm_medium%253Daffiliate%2526utm_campaign%253D0%2526utm_content%253D1%3B~oref%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526bid%253D1%25&ref=https%3A%2F%2Fadservice.google.com%2F&hn=www.googleadservices.com&fmt=3&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&ocp_id=waHHY8__BICV78EP3q-AGA&sscte=1&crd= HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5903415.fls.doubleclick.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 18 Jan 2023 07:37:37 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
location: https://www.google.com/pagead/1p-conversion/620182431/?random=1229713378&cv=9&fst=1674027456989&num=1&npa=1&label=xn0wCN6Lx9YBEJ_33KcC&guid=ON&resp=GooglemKTybQhCsO&eid=375603261&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=2&url=https%3A%2F%2F5903415.fls.doubleclick.net%2Fddm%2Ffls%2Fr%2Fsrc%3D5903415%3Btype%3Duk%3Bcat%3Dhome01%3Bord%3D3499361820892%3Bgtm%3D2wg1a1%3Bauiddc%3D1092196729.1674027456%3Bu1%3Dundefined%3Bu9%3Dundefined%3Bu10%3Dundefined%3Bu18%3Dno%3Bu15%3Dundefined%3Bu3%3D%252Fno%252F%3Bu5%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526bid%253D1%2526pid%253D0%2526utm_source%253D0%2526utm_medium%253Daffiliate%2526utm_campaign%253D0%2526utm_content%253D1%3B~oref%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526bid%253D1%25&ref=https%3A%2F%2Fadservice.google.com%2F&hn=www.googleadservices.com&fmt=3&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&sscte=1&crd=&is_vtc=1&ocp_id=waHHY8__BICV78EP3q-AGA&random=1800252716&resp=GooglemKTybQhCsO
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Wed, 18-Jan-2023 07:52:37 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/770218393/?random=396122178&cv=9&fst=1674027456989&num=2&npa=1&label=D77vCNSI4NUBEJmzou8C&guid=ON&resp=GooglemKTybQhCsO&eid=375603260&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=2&url=https%3A%2F%2F5903415.fls.doubleclick.net%2Fddm%2Ffls%2Fr%2Fsrc%3D5903415%3Btype%3Duk%3Bcat%3Dhome01%3Bord%3D3499361820892%3Bgtm%3D2wg1a1%3Bauiddc%3D1092196729.1674027456%3Bu1%3Dundefined%3Bu9%3Dundefined%3Bu10%3Dundefined%3Bu18%3Dno%3Bu15%3Dundefined%3Bu3%3D%252Fno%252F%3Bu5%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526bid%253D1%2526pid%253D0%2526utm_source%253D0%2526utm_medium%253Daffiliate%2526utm_campaign%253D0%2526utm_content%253D1%3B~oref%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526bid%253D1%25&ref=https%3A%2F%2Fadservice.google.com%2F&hn=www.googleadservices.com&fmt=3&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&ocp_id=waHHY5OcBfuT78EPrYin8AI&sscte=1&crd=
302 Found 42 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/770218393/?random=396122178&cv=9&fst=1674027456989&num=2&npa=1&label=D77vCNSI4NUBEJmzou8C&guid=ON&resp=GooglemKTybQhCsO&eid=375603260&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=2&url=https%3A%2F%2F5903415.fls.doubleclick.net%2Fddm%2Ffls%2Fr%2Fsrc%3D5903415%3Btype%3Duk%3Bcat%3Dhome01%3Bord%3D3499361820892%3Bgtm%3D2wg1a1%3Bauiddc%3D1092196729.1674027456%3Bu1%3Dundefined%3Bu9%3Dundefined%3Bu10%3Dundefined%3Bu18%3Dno%3Bu15%3Dundefined%3Bu3%3D%252Fno%252F%3Bu5%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526bid%253D1%2526pid%253D0%2526utm_source%253D0%2526utm_medium%253Daffiliate%2526utm_campaign%253D0%2526utm_content%253D1%3B~oref%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526bid%253D1%25&ref=https%3A%2F%2Fadservice.google.com%2F&hn=www.googleadservices.com&fmt=3&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&ocp_id=waHHY5OcBfuT78EPrYin8AI&sscte=1&crd=
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/viewthroughconversion/770218393/?random=396122178&cv=9&fst=1674027456989&num=2&npa=1&label=D77vCNSI4NUBEJmzou8C&guid=ON&resp=GooglemKTybQhCsO&eid=375603260&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=2&url=https%3A%2F%2F5903415.fls.doubleclick.net%2Fddm%2Ffls%2Fr%2Fsrc%3D5903415%3Btype%3Duk%3Bcat%3Dhome01%3Bord%3D3499361820892%3Bgtm%3D2wg1a1%3Bauiddc%3D1092196729.1674027456%3Bu1%3Dundefined%3Bu9%3Dundefined%3Bu10%3Dundefined%3Bu18%3Dno%3Bu15%3Dundefined%3Bu3%3D%252Fno%252F%3Bu5%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526bid%253D1%2526pid%253D0%2526utm_source%253D0%2526utm_medium%253Daffiliate%2526utm_campaign%253D0%2526utm_content%253D1%3B~oref%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526bid%253D1%25&ref=https%3A%2F%2Fadservice.google.com%2F&hn=www.googleadservices.com&fmt=3&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&ocp_id=waHHY5OcBfuT78EPrYin8AI&sscte=1&crd= HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5903415.fls.doubleclick.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 18 Jan 2023 07:37:37 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
location: https://www.google.com/pagead/1p-conversion/770218393/?random=396122178&cv=9&fst=1674027456989&num=2&npa=1&label=D77vCNSI4NUBEJmzou8C&guid=ON&resp=GooglemKTybQhCsO&eid=375603260&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=2&url=https%3A%2F%2F5903415.fls.doubleclick.net%2Fddm%2Ffls%2Fr%2Fsrc%3D5903415%3Btype%3Duk%3Bcat%3Dhome01%3Bord%3D3499361820892%3Bgtm%3D2wg1a1%3Bauiddc%3D1092196729.1674027456%3Bu1%3Dundefined%3Bu9%3Dundefined%3Bu10%3Dundefined%3Bu18%3Dno%3Bu15%3Dundefined%3Bu3%3D%252Fno%252F%3Bu5%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526bid%253D1%2526pid%253D0%2526utm_source%253D0%2526utm_medium%253Daffiliate%2526utm_campaign%253D0%2526utm_content%253D1%3B~oref%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526bid%253D1%25&ref=https%3A%2F%2Fadservice.google.com%2F&hn=www.googleadservices.com&fmt=3&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&sscte=1&crd=&is_vtc=1&ocp_id=waHHY5OcBfuT78EPrYin8AI&random=1910655441&resp=GooglemKTybQhCsO
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Wed, 18-Jan-2023 07:52:37 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f96ac6d23518cd0485e1d41d276d8184
58de3ad32744f1f92b86e9f60c29094c7ba5b115
a1b6546dc485dbbfc652a64b11655450987e9a391e44b05a6eb20b323ede242c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 07:37:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e1c7515ba5231aaae042ef63071a8562
676673d88597e11f572ac38844b18562ab57b920
002b5adabb3fb37aa6c0f18adee2f221a770e217fe95a027fcf8b8fe84794a19
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 07:37:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e1c7515ba5231aaae042ef63071a8562
676673d88597e11f572ac38844b18562ab57b920
002b5adabb3fb37aa6c0f18adee2f221a770e217fe95a027fcf8b8fe84794a19
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 07:37:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6a6b2d9466c78838d5b89a24b1afc5f1
056b045d2648e975609cc689aace2cebf56dc4b8
87f1afd429d569be0ae89952298d447806d8c9d543b4ed8d2bc80cd9dc3d125d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 07:37:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.facebook.com/tr/?id=480045292158269&ev=PageView&dl=https%3A%2F%2Fwww.casumo.com%2Fno%2F%3Fbtag%3D0_2DCF4211F36A4A12B9700C5E59402665%26affid%3D0%26bid%3D1%26pid%3D0%26utm_source%3D0%26utm_medium%3Daffiliate%26utm_campaign%3D0%26utm_content%3D1&rl=&if=false&ts=1674027457182&sw=1280&sh=1024&v=2.9.92&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=30&cs_est=true&fbp=fb.1.1674027457181.946184520&it=1674027456469&coo=false&eid=1674027454591_1674028161418_6_pageView&tm=1&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=480045292158269&ev=PageView&dl=https%3A%2F%2Fwww.casumo.com%2Fno%2F%3Fbtag%3D0_2DCF4211F36A4A12B9700C5E59402665%26affid%3D0%26bid%3D1%26pid%3D0%26utm_source%3D0%26utm_medium%3Daffiliate%26utm_campaign%3D0%26utm_content%3D1&rl=&if=false&ts=1674027457182&sw=1280&sh=1024&v=2.9.92&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=30&cs_est=true&fbp=fb.1.1674027457181.946184520&it=1674027456469&coo=false&eid=1674027454591_1674028161418_6_pageView&tm=1&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=480045292158269&ev=PageView&dl=https%3A%2F%2Fwww.casumo.com%2Fno%2F%3Fbtag%3D0_2DCF4211F36A4A12B9700C5E59402665%26affid%3D0%26bid%3D1%26pid%3D0%26utm_source%3D0%26utm_medium%3Daffiliate%26utm_campaign%3D0%26utm_content%3D1&rl=&if=false&ts=1674027457182&sw=1280&sh=1024&v=2.9.92&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=30&cs_est=true&fbp=fb.1.1674027457181.946184520&it=1674027456469&coo=false&eid=1674027454591_1674028161418_6_pageView&tm=1&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casumo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Wed, 18 Jan 2023 07:37:37 GMT
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-41199862-1&cid=376582927.1674027456&jid=1823293055&uid=undefined&gjid=720237453&_gid=689842286.1674027456&_u=aHDAAUACQAAAACgAI~&z=2118944388
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-41199862-1&cid=376582927.1674027456&jid=1823293055&uid=undefined&gjid=720237453&_gid=689842286.1674027456&_u=aHDAAUACQAAAACgAI~&z=2118944388
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-41199862-1&cid=376582927.1674027456&jid=1823293055&uid=undefined&gjid=720237453&_gid=689842286.1674027456&_u=aHDAAUACQAAAACgAI~&z=2118944388 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.casumo.com
Connection: keep-alive
Referer: https://www.casumo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.casumo.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Wed, 18 Jan 2023 07:37:37 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/pagead/1p-conversion/620182431/?random=1035857986&cv=9&fst=1674027456981&num=1&npa=1&label=bYLfCIj5t9YBEJ_33KcC&guid=ON&resp=GooglemKTybQhCsO&eid=375603260&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=2&url=https%3A%2F%2F5903415.fls.doubleclick.net%2Fddm%2Ffls%2Fr%2Fsrc%3D5903415%3Btype%3Duk%3Bcat%3Dcasum00%3Bord%3D1%3Bnum%3D6594421429526%3Bgtm%3D2wg1a1%3Bauiddc%3D1092196729.1674027456%3Bu1%3Dundefined%3Bu9%3Dundefined%3Bu10%3Dundefined%3Bu18%3Dno%3Bu15%3Dundefined%3Bu3%3D%252Fno%252F%3Bu5%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526bid%253D1%2526pid%253D0%2526utm_source%253D0%2526utm_medium%253Daffiliate%2526utm_campaign%253D0%2526utm_content%253D1%3B~oref%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526b&ref=https%3A%2F%2Fadservice.google.com%2F&hn=www.googleadservices.com&fmt=3&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&sscte=1&crd=&is_vtc=1&ocp_id=waHHY4avBPOS78EP_cm3iA4&random=2116543458&resp=GooglemKTybQhCsO
302 Found 42 B URL HTTP/2 www.google.com/pagead/1p-conversion/620182431/?random=1035857986&cv=9&fst=1674027456981&num=1&npa=1&label=bYLfCIj5t9YBEJ_33KcC&guid=ON&resp=GooglemKTybQhCsO&eid=375603260&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=2&url=https%3A%2F%2F5903415.fls.doubleclick.net%2Fddm%2Ffls%2Fr%2Fsrc%3D5903415%3Btype%3Duk%3Bcat%3Dcasum00%3Bord%3D1%3Bnum%3D6594421429526%3Bgtm%3D2wg1a1%3Bauiddc%3D1092196729.1674027456%3Bu1%3Dundefined%3Bu9%3Dundefined%3Bu10%3Dundefined%3Bu18%3Dno%3Bu15%3Dundefined%3Bu3%3D%252Fno%252F%3Bu5%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526bid%253D1%2526pid%253D0%2526utm_source%253D0%2526utm_medium%253Daffiliate%2526utm_campaign%253D0%2526utm_content%253D1%3B~oref%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526b&ref=https%3A%2F%2Fadservice.google.com%2F&hn=www.googleadservices.com&fmt=3&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&sscte=1&crd=&is_vtc=1&ocp_id=waHHY4avBPOS78EP_cm3iA4&random=2116543458&resp=GooglemKTybQhCsO
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-conversion/620182431/?random=1035857986&cv=9&fst=1674027456981&num=1&npa=1&label=bYLfCIj5t9YBEJ_33KcC&guid=ON&resp=GooglemKTybQhCsO&eid=375603260&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=2&url=https%3A%2F%2F5903415.fls.doubleclick.net%2Fddm%2Ffls%2Fr%2Fsrc%3D5903415%3Btype%3Duk%3Bcat%3Dcasum00%3Bord%3D1%3Bnum%3D6594421429526%3Bgtm%3D2wg1a1%3Bauiddc%3D1092196729.1674027456%3Bu1%3Dundefined%3Bu9%3Dundefined%3Bu10%3Dundefined%3Bu18%3Dno%3Bu15%3Dundefined%3Bu3%3D%252Fno%252F%3Bu5%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526bid%253D1%2526pid%253D0%2526utm_source%253D0%2526utm_medium%253Daffiliate%2526utm_campaign%253D0%2526utm_content%253D1%3B~oref%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526b&ref=https%3A%2F%2Fadservice.google.com%2F&hn=www.googleadservices.com&fmt=3&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&sscte=1&crd=&is_vtc=1&ocp_id=waHHY4avBPOS78EP_cm3iA4&random=2116543458&resp=GooglemKTybQhCsO HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://5903415.fls.doubleclick.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 18 Jan 2023 07:37:37 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
location: https://www.google.no/pagead/1p-conversion/620182431/?random=1035857986&cv=9&fst=1674027456981&num=1&npa=1&label=bYLfCIj5t9YBEJ_33KcC&guid=ON&resp=GooglemKTybQhCsO&eid=375603260&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=2&url=https%3A%2F%2F5903415.fls.doubleclick.net%2Fddm%2Ffls%2Fr%2Fsrc%3D5903415%3Btype%3Duk%3Bcat%3Dcasum00%3Bord%3D1%3Bnum%3D6594421429526%3Bgtm%3D2wg1a1%3Bauiddc%3D1092196729.1674027456%3Bu1%3Dundefined%3Bu9%3Dundefined%3Bu10%3Dundefined%3Bu18%3Dno%3Bu15%3Dundefined%3Bu3%3D%252Fno%252F%3Bu5%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526bid%253D1%2526pid%253D0%2526utm_source%253D0%2526utm_medium%253Daffiliate%2526utm_campaign%253D0%2526utm_content%253D1%3B~oref%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526b&ref=https%3A%2F%2Fadservice.google.com%2F&hn=www.googleadservices.com&fmt=3&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&sscte=1&crd=&is_vtc=1&ocp_id=waHHY4avBPOS78EP_cm3iA4&random=2116543458&resp=GooglemKTybQhCsO&ipr=y&prhg=0
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/pagead/1p-conversion/770218393/?random=827283546&cv=9&fst=1674027456981&num=2&npa=1&label=Yb7iCJ_639UBEJmzou8C&guid=ON&resp=GooglemKTybQhCsO&eid=375603260&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=2&url=https%3A%2F%2F5903415.fls.doubleclick.net%2Fddm%2Ffls%2Fr%2Fsrc%3D5903415%3Btype%3Duk%3Bcat%3Dcasum00%3Bord%3D1%3Bnum%3D6594421429526%3Bgtm%3D2wg1a1%3Bauiddc%3D1092196729.1674027456%3Bu1%3Dundefined%3Bu9%3Dundefined%3Bu10%3Dundefined%3Bu18%3Dno%3Bu15%3Dundefined%3Bu3%3D%252Fno%252F%3Bu5%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526bid%253D1%2526pid%253D0%2526utm_source%253D0%2526utm_medium%253Daffiliate%2526utm_campaign%253D0%2526utm_content%253D1%3B~oref%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526b&ref=https%3A%2F%2Fadservice.google.com%2F&hn=www.googleadservices.com&fmt=3&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&sscte=1&crd=&is_vtc=1&ocp_id=waHHY9-qBN2T78EPvfi-uAI&random=3826505950&resp=GooglemKTybQhCsO
302 Found 42 B URL HTTP/2 www.google.com/pagead/1p-conversion/770218393/?random=827283546&cv=9&fst=1674027456981&num=2&npa=1&label=Yb7iCJ_639UBEJmzou8C&guid=ON&resp=GooglemKTybQhCsO&eid=375603260&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=2&url=https%3A%2F%2F5903415.fls.doubleclick.net%2Fddm%2Ffls%2Fr%2Fsrc%3D5903415%3Btype%3Duk%3Bcat%3Dcasum00%3Bord%3D1%3Bnum%3D6594421429526%3Bgtm%3D2wg1a1%3Bauiddc%3D1092196729.1674027456%3Bu1%3Dundefined%3Bu9%3Dundefined%3Bu10%3Dundefined%3Bu18%3Dno%3Bu15%3Dundefined%3Bu3%3D%252Fno%252F%3Bu5%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526bid%253D1%2526pid%253D0%2526utm_source%253D0%2526utm_medium%253Daffiliate%2526utm_campaign%253D0%2526utm_content%253D1%3B~oref%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526b&ref=https%3A%2F%2Fadservice.google.com%2F&hn=www.googleadservices.com&fmt=3&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&sscte=1&crd=&is_vtc=1&ocp_id=waHHY9-qBN2T78EPvfi-uAI&random=3826505950&resp=GooglemKTybQhCsO
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-conversion/770218393/?random=827283546&cv=9&fst=1674027456981&num=2&npa=1&label=Yb7iCJ_639UBEJmzou8C&guid=ON&resp=GooglemKTybQhCsO&eid=375603260&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=2&url=https%3A%2F%2F5903415.fls.doubleclick.net%2Fddm%2Ffls%2Fr%2Fsrc%3D5903415%3Btype%3Duk%3Bcat%3Dcasum00%3Bord%3D1%3Bnum%3D6594421429526%3Bgtm%3D2wg1a1%3Bauiddc%3D1092196729.1674027456%3Bu1%3Dundefined%3Bu9%3Dundefined%3Bu10%3Dundefined%3Bu18%3Dno%3Bu15%3Dundefined%3Bu3%3D%252Fno%252F%3Bu5%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526bid%253D1%2526pid%253D0%2526utm_source%253D0%2526utm_medium%253Daffiliate%2526utm_campaign%253D0%2526utm_content%253D1%3B~oref%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526b&ref=https%3A%2F%2Fadservice.google.com%2F&hn=www.googleadservices.com&fmt=3&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&sscte=1&crd=&is_vtc=1&ocp_id=waHHY9-qBN2T78EPvfi-uAI&random=3826505950&resp=GooglemKTybQhCsO HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://5903415.fls.doubleclick.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 18 Jan 2023 07:37:37 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
location: https://www.google.no/pagead/1p-conversion/770218393/?random=827283546&cv=9&fst=1674027456981&num=2&npa=1&label=Yb7iCJ_639UBEJmzou8C&guid=ON&resp=GooglemKTybQhCsO&eid=375603260&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=2&url=https%3A%2F%2F5903415.fls.doubleclick.net%2Fddm%2Ffls%2Fr%2Fsrc%3D5903415%3Btype%3Duk%3Bcat%3Dcasum00%3Bord%3D1%3Bnum%3D6594421429526%3Bgtm%3D2wg1a1%3Bauiddc%3D1092196729.1674027456%3Bu1%3Dundefined%3Bu9%3Dundefined%3Bu10%3Dundefined%3Bu18%3Dno%3Bu15%3Dundefined%3Bu3%3D%252Fno%252F%3Bu5%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526bid%253D1%2526pid%253D0%2526utm_source%253D0%2526utm_medium%253Daffiliate%2526utm_campaign%253D0%2526utm_content%253D1%3B~oref%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526b&ref=https%3A%2F%2Fadservice.google.com%2F&hn=www.googleadservices.com&fmt=3&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&sscte=1&crd=&is_vtc=1&ocp_id=waHHY9-qBN2T78EPvfi-uAI&random=3826505950&resp=GooglemKTybQhCsO&ipr=y&prhg=0
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/pagead/1p-conversion/770218393/?random=396122178&cv=9&fst=1674027456989&num=2&npa=1&label=D77vCNSI4NUBEJmzou8C&guid=ON&resp=GooglemKTybQhCsO&eid=375603260&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=2&url=https%3A%2F%2F5903415.fls.doubleclick.net%2Fddm%2Ffls%2Fr%2Fsrc%3D5903415%3Btype%3Duk%3Bcat%3Dhome01%3Bord%3D3499361820892%3Bgtm%3D2wg1a1%3Bauiddc%3D1092196729.1674027456%3Bu1%3Dundefined%3Bu9%3Dundefined%3Bu10%3Dundefined%3Bu18%3Dno%3Bu15%3Dundefined%3Bu3%3D%252Fno%252F%3Bu5%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526bid%253D1%2526pid%253D0%2526utm_source%253D0%2526utm_medium%253Daffiliate%2526utm_campaign%253D0%2526utm_content%253D1%3B~oref%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526bid%253D1%25&ref=https%3A%2F%2Fadservice.google.com%2F&hn=www.googleadservices.com&fmt=3&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&sscte=1&crd=&is_vtc=1&ocp_id=waHHY5OcBfuT78EPrYin8AI&random=1910655441&resp=GooglemKTybQhCsO
302 Found 42 B URL HTTP/2 www.google.com/pagead/1p-conversion/770218393/?random=396122178&cv=9&fst=1674027456989&num=2&npa=1&label=D77vCNSI4NUBEJmzou8C&guid=ON&resp=GooglemKTybQhCsO&eid=375603260&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=2&url=https%3A%2F%2F5903415.fls.doubleclick.net%2Fddm%2Ffls%2Fr%2Fsrc%3D5903415%3Btype%3Duk%3Bcat%3Dhome01%3Bord%3D3499361820892%3Bgtm%3D2wg1a1%3Bauiddc%3D1092196729.1674027456%3Bu1%3Dundefined%3Bu9%3Dundefined%3Bu10%3Dundefined%3Bu18%3Dno%3Bu15%3Dundefined%3Bu3%3D%252Fno%252F%3Bu5%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526bid%253D1%2526pid%253D0%2526utm_source%253D0%2526utm_medium%253Daffiliate%2526utm_campaign%253D0%2526utm_content%253D1%3B~oref%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526bid%253D1%25&ref=https%3A%2F%2Fadservice.google.com%2F&hn=www.googleadservices.com&fmt=3&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&sscte=1&crd=&is_vtc=1&ocp_id=waHHY5OcBfuT78EPrYin8AI&random=1910655441&resp=GooglemKTybQhCsO
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-conversion/770218393/?random=396122178&cv=9&fst=1674027456989&num=2&npa=1&label=D77vCNSI4NUBEJmzou8C&guid=ON&resp=GooglemKTybQhCsO&eid=375603260&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=2&url=https%3A%2F%2F5903415.fls.doubleclick.net%2Fddm%2Ffls%2Fr%2Fsrc%3D5903415%3Btype%3Duk%3Bcat%3Dhome01%3Bord%3D3499361820892%3Bgtm%3D2wg1a1%3Bauiddc%3D1092196729.1674027456%3Bu1%3Dundefined%3Bu9%3Dundefined%3Bu10%3Dundefined%3Bu18%3Dno%3Bu15%3Dundefined%3Bu3%3D%252Fno%252F%3Bu5%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526bid%253D1%2526pid%253D0%2526utm_source%253D0%2526utm_medium%253Daffiliate%2526utm_campaign%253D0%2526utm_content%253D1%3B~oref%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526bid%253D1%25&ref=https%3A%2F%2Fadservice.google.com%2F&hn=www.googleadservices.com&fmt=3&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&sscte=1&crd=&is_vtc=1&ocp_id=waHHY5OcBfuT78EPrYin8AI&random=1910655441&resp=GooglemKTybQhCsO HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://5903415.fls.doubleclick.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 18 Jan 2023 07:37:37 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
location: https://www.google.no/pagead/1p-conversion/770218393/?random=396122178&cv=9&fst=1674027456989&num=2&npa=1&label=D77vCNSI4NUBEJmzou8C&guid=ON&resp=GooglemKTybQhCsO&eid=375603260&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=2&url=https%3A%2F%2F5903415.fls.doubleclick.net%2Fddm%2Ffls%2Fr%2Fsrc%3D5903415%3Btype%3Duk%3Bcat%3Dhome01%3Bord%3D3499361820892%3Bgtm%3D2wg1a1%3Bauiddc%3D1092196729.1674027456%3Bu1%3Dundefined%3Bu9%3Dundefined%3Bu10%3Dundefined%3Bu18%3Dno%3Bu15%3Dundefined%3Bu3%3D%252Fno%252F%3Bu5%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526bid%253D1%2526pid%253D0%2526utm_source%253D0%2526utm_medium%253Daffiliate%2526utm_campaign%253D0%2526utm_content%253D1%3B~oref%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526bid%253D1%25&ref=https%3A%2F%2Fadservice.google.com%2F&hn=www.googleadservices.com&fmt=3&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&sscte=1&crd=&is_vtc=1&ocp_id=waHHY5OcBfuT78EPrYin8AI&random=1910655441&resp=GooglemKTybQhCsO&ipr=y&prhg=0
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/pagead/1p-conversion/620182431/?random=1229713378&cv=9&fst=1674027456989&num=1&npa=1&label=xn0wCN6Lx9YBEJ_33KcC&guid=ON&resp=GooglemKTybQhCsO&eid=375603261&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=2&url=https%3A%2F%2F5903415.fls.doubleclick.net%2Fddm%2Ffls%2Fr%2Fsrc%3D5903415%3Btype%3Duk%3Bcat%3Dhome01%3Bord%3D3499361820892%3Bgtm%3D2wg1a1%3Bauiddc%3D1092196729.1674027456%3Bu1%3Dundefined%3Bu9%3Dundefined%3Bu10%3Dundefined%3Bu18%3Dno%3Bu15%3Dundefined%3Bu3%3D%252Fno%252F%3Bu5%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526bid%253D1%2526pid%253D0%2526utm_source%253D0%2526utm_medium%253Daffiliate%2526utm_campaign%253D0%2526utm_content%253D1%3B~oref%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526bid%253D1%25&ref=https%3A%2F%2Fadservice.google.com%2F&hn=www.googleadservices.com&fmt=3&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&sscte=1&crd=&is_vtc=1&ocp_id=waHHY8__BICV78EP3q-AGA&random=1800252716&resp=GooglemKTybQhCsO
302 Found 42 B URL HTTP/2 www.google.com/pagead/1p-conversion/620182431/?random=1229713378&cv=9&fst=1674027456989&num=1&npa=1&label=xn0wCN6Lx9YBEJ_33KcC&guid=ON&resp=GooglemKTybQhCsO&eid=375603261&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=2&url=https%3A%2F%2F5903415.fls.doubleclick.net%2Fddm%2Ffls%2Fr%2Fsrc%3D5903415%3Btype%3Duk%3Bcat%3Dhome01%3Bord%3D3499361820892%3Bgtm%3D2wg1a1%3Bauiddc%3D1092196729.1674027456%3Bu1%3Dundefined%3Bu9%3Dundefined%3Bu10%3Dundefined%3Bu18%3Dno%3Bu15%3Dundefined%3Bu3%3D%252Fno%252F%3Bu5%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526bid%253D1%2526pid%253D0%2526utm_source%253D0%2526utm_medium%253Daffiliate%2526utm_campaign%253D0%2526utm_content%253D1%3B~oref%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526bid%253D1%25&ref=https%3A%2F%2Fadservice.google.com%2F&hn=www.googleadservices.com&fmt=3&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&sscte=1&crd=&is_vtc=1&ocp_id=waHHY8__BICV78EP3q-AGA&random=1800252716&resp=GooglemKTybQhCsO
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-conversion/620182431/?random=1229713378&cv=9&fst=1674027456989&num=1&npa=1&label=xn0wCN6Lx9YBEJ_33KcC&guid=ON&resp=GooglemKTybQhCsO&eid=375603261&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=2&url=https%3A%2F%2F5903415.fls.doubleclick.net%2Fddm%2Ffls%2Fr%2Fsrc%3D5903415%3Btype%3Duk%3Bcat%3Dhome01%3Bord%3D3499361820892%3Bgtm%3D2wg1a1%3Bauiddc%3D1092196729.1674027456%3Bu1%3Dundefined%3Bu9%3Dundefined%3Bu10%3Dundefined%3Bu18%3Dno%3Bu15%3Dundefined%3Bu3%3D%252Fno%252F%3Bu5%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526bid%253D1%2526pid%253D0%2526utm_source%253D0%2526utm_medium%253Daffiliate%2526utm_campaign%253D0%2526utm_content%253D1%3B~oref%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526bid%253D1%25&ref=https%3A%2F%2Fadservice.google.com%2F&hn=www.googleadservices.com&fmt=3&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&sscte=1&crd=&is_vtc=1&ocp_id=waHHY8__BICV78EP3q-AGA&random=1800252716&resp=GooglemKTybQhCsO HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://5903415.fls.doubleclick.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 18 Jan 2023 07:37:37 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
location: https://www.google.no/pagead/1p-conversion/620182431/?random=1229713378&cv=9&fst=1674027456989&num=1&npa=1&label=xn0wCN6Lx9YBEJ_33KcC&guid=ON&resp=GooglemKTybQhCsO&eid=375603261&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=2&url=https%3A%2F%2F5903415.fls.doubleclick.net%2Fddm%2Ffls%2Fr%2Fsrc%3D5903415%3Btype%3Duk%3Bcat%3Dhome01%3Bord%3D3499361820892%3Bgtm%3D2wg1a1%3Bauiddc%3D1092196729.1674027456%3Bu1%3Dundefined%3Bu9%3Dundefined%3Bu10%3Dundefined%3Bu18%3Dno%3Bu15%3Dundefined%3Bu3%3D%252Fno%252F%3Bu5%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526bid%253D1%2526pid%253D0%2526utm_source%253D0%2526utm_medium%253Daffiliate%2526utm_campaign%253D0%2526utm_content%253D1%3B~oref%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526bid%253D1%25&ref=https%3A%2F%2Fadservice.google.com%2F&hn=www.googleadservices.com&fmt=3&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&sscte=1&crd=&is_vtc=1&ocp_id=waHHY8__BICV78EP3q-AGA&random=1800252716&resp=GooglemKTybQhCsO&ipr=y&prhg=0
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
analytics.twitter.com/i/adsct?bci=3&eci=2&event_id=da67e666-ee71-48d8-9591-56a1b45cd8e3&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=2b1b16e5-4d1c-45a3-bad4-ac703d88c014&tw_document_href=https%3A%2F%2Fwww.casumo.com%2Fno%2F%3Fbtag%3D0_2DCF4211F36A4A12B9700C5E59402665%26affid%3D0%26bid%3D1%26pid%3D0%26utm_source%3D0%26utm_medium%3Daffiliate%26utm_campaign%3D0%26utm_content%3D1&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o89k4&type=javascript&version=2.3.29
200 OK 43 B URL HTTP/2 analytics.twitter.com/i/adsct?bci=3&eci=2&event_id=da67e666-ee71-48d8-9591-56a1b45cd8e3&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=2b1b16e5-4d1c-45a3-bad4-ac703d88c014&tw_document_href=https%3A%2F%2Fwww.casumo.com%2Fno%2F%3Fbtag%3D0_2DCF4211F36A4A12B9700C5E59402665%26affid%3D0%26bid%3D1%26pid%3D0%26utm_source%3D0%26utm_medium%3Daffiliate%26utm_campaign%3D0%26utm_content%3D1&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o89k4&type=javascript&version=2.3.29
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/adsct?bci=3&eci=2&event_id=da67e666-ee71-48d8-9591-56a1b45cd8e3&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=2b1b16e5-4d1c-45a3-bad4-ac703d88c014&tw_document_href=https%3A%2F%2Fwww.casumo.com%2Fno%2F%3Fbtag%3D0_2DCF4211F36A4A12B9700C5E59402665%26affid%3D0%26bid%3D1%26pid%3D0%26utm_source%3D0%26utm_medium%3Daffiliate%26utm_campaign%3D0%26utm_content%3D1&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o89k4&type=javascript&version=2.3.29 HTTP/1.1
Host: analytics.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casumo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 18 Jan 2023 07:37:36 GMT
perf: 7626143928
server: tsa_o
set-cookie: personalization_id="v1_5vLywgZL1pJjN9DRWUW3WA=="; Max-Age=63072000; Expires=Fri, 17 Jan 2025 07:37:37 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: a6a9c385b7047de1
strict-transport-security: max-age=631138519
x-response-time: 106
x-connection-hash: ca7e5d45e8d36defc1e1fc4661a70c1ac0e0af7123edd3f4101585d5b59c46b5
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6a6b2d9466c78838d5b89a24b1afc5f1
056b045d2648e975609cc689aace2cebf56dc4b8
87f1afd429d569be0ae89952298d447806d8c9d543b4ed8d2bc80cd9dc3d125d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 07:37:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/pagead/1p-conversion/620182431/?random=1035857986&cv=9&fst=1674027456981&num=1&npa=1&label=bYLfCIj5t9YBEJ_33KcC&guid=ON&resp=GooglemKTybQhCsO&eid=375603260&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=2&url=https%3A%2F%2F5903415.fls.doubleclick.net%2Fddm%2Ffls%2Fr%2Fsrc%3D5903415%3Btype%3Duk%3Bcat%3Dcasum00%3Bord%3D1%3Bnum%3D6594421429526%3Bgtm%3D2wg1a1%3Bauiddc%3D1092196729.1674027456%3Bu1%3Dundefined%3Bu9%3Dundefined%3Bu10%3Dundefined%3Bu18%3Dno%3Bu15%3Dundefined%3Bu3%3D%252Fno%252F%3Bu5%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526bid%253D1%2526pid%253D0%2526utm_source%253D0%2526utm_medium%253Daffiliate%2526utm_campaign%253D0%2526utm_content%253D1%3B~oref%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526b&ref=https%3A%2F%2Fadservice.google.com%2F&hn=www.googleadservices.com&fmt=3&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&sscte=1&crd=&is_vtc=1&ocp_id=waHHY4avBPOS78EP_cm3iA4&random=2116543458&resp=GooglemKTybQhCsO&ipr=y&prhg=0
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-conversion/620182431/?random=1035857986&cv=9&fst=1674027456981&num=1&npa=1&label=bYLfCIj5t9YBEJ_33KcC&guid=ON&resp=GooglemKTybQhCsO&eid=375603260&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=2&url=https%3A%2F%2F5903415.fls.doubleclick.net%2Fddm%2Ffls%2Fr%2Fsrc%3D5903415%3Btype%3Duk%3Bcat%3Dcasum00%3Bord%3D1%3Bnum%3D6594421429526%3Bgtm%3D2wg1a1%3Bauiddc%3D1092196729.1674027456%3Bu1%3Dundefined%3Bu9%3Dundefined%3Bu10%3Dundefined%3Bu18%3Dno%3Bu15%3Dundefined%3Bu3%3D%252Fno%252F%3Bu5%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526bid%253D1%2526pid%253D0%2526utm_source%253D0%2526utm_medium%253Daffiliate%2526utm_campaign%253D0%2526utm_content%253D1%3B~oref%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526b&ref=https%3A%2F%2Fadservice.google.com%2F&hn=www.googleadservices.com&fmt=3&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&sscte=1&crd=&is_vtc=1&ocp_id=waHHY4avBPOS78EP_cm3iA4&random=2116543458&resp=GooglemKTybQhCsO&ipr=y&prhg=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-conversion/620182431/?random=1035857986&cv=9&fst=1674027456981&num=1&npa=1&label=bYLfCIj5t9YBEJ_33KcC&guid=ON&resp=GooglemKTybQhCsO&eid=375603260&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=2&url=https%3A%2F%2F5903415.fls.doubleclick.net%2Fddm%2Ffls%2Fr%2Fsrc%3D5903415%3Btype%3Duk%3Bcat%3Dcasum00%3Bord%3D1%3Bnum%3D6594421429526%3Bgtm%3D2wg1a1%3Bauiddc%3D1092196729.1674027456%3Bu1%3Dundefined%3Bu9%3Dundefined%3Bu10%3Dundefined%3Bu18%3Dno%3Bu15%3Dundefined%3Bu3%3D%252Fno%252F%3Bu5%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526bid%253D1%2526pid%253D0%2526utm_source%253D0%2526utm_medium%253Daffiliate%2526utm_campaign%253D0%2526utm_content%253D1%3B~oref%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526b&ref=https%3A%2F%2Fadservice.google.com%2F&hn=www.googleadservices.com&fmt=3&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&sscte=1&crd=&is_vtc=1&ocp_id=waHHY4avBPOS78EP_cm3iA4&random=2116543458&resp=GooglemKTybQhCsO&ipr=y&prhg=0 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://5903415.fls.doubleclick.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 18 Jan 2023 07:37:37 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-41199862-1&cid=376582927.1674027456&jid=1823293055&_u=aHDAAUACQAAAACgAI~&z=141786814
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-41199862-1&cid=376582927.1674027456&jid=1823293055&_u=aHDAAUACQAAAACgAI~&z=141786814
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-41199862-1&cid=376582927.1674027456&jid=1823293055&_u=aHDAAUACQAAAACgAI~&z=141786814 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casumo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 18 Jan 2023 07:37:37 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/pagead/1p-conversion/770218393/?random=396122178&cv=9&fst=1674027456989&num=2&npa=1&label=D77vCNSI4NUBEJmzou8C&guid=ON&resp=GooglemKTybQhCsO&eid=375603260&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=2&url=https%3A%2F%2F5903415.fls.doubleclick.net%2Fddm%2Ffls%2Fr%2Fsrc%3D5903415%3Btype%3Duk%3Bcat%3Dhome01%3Bord%3D3499361820892%3Bgtm%3D2wg1a1%3Bauiddc%3D1092196729.1674027456%3Bu1%3Dundefined%3Bu9%3Dundefined%3Bu10%3Dundefined%3Bu18%3Dno%3Bu15%3Dundefined%3Bu3%3D%252Fno%252F%3Bu5%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526bid%253D1%2526pid%253D0%2526utm_source%253D0%2526utm_medium%253Daffiliate%2526utm_campaign%253D0%2526utm_content%253D1%3B~oref%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526bid%253D1%25&ref=https%3A%2F%2Fadservice.google.com%2F&hn=www.googleadservices.com&fmt=3&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&sscte=1&crd=&is_vtc=1&ocp_id=waHHY5OcBfuT78EPrYin8AI&random=1910655441&resp=GooglemKTybQhCsO&ipr=y&prhg=0
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-conversion/770218393/?random=396122178&cv=9&fst=1674027456989&num=2&npa=1&label=D77vCNSI4NUBEJmzou8C&guid=ON&resp=GooglemKTybQhCsO&eid=375603260&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=2&url=https%3A%2F%2F5903415.fls.doubleclick.net%2Fddm%2Ffls%2Fr%2Fsrc%3D5903415%3Btype%3Duk%3Bcat%3Dhome01%3Bord%3D3499361820892%3Bgtm%3D2wg1a1%3Bauiddc%3D1092196729.1674027456%3Bu1%3Dundefined%3Bu9%3Dundefined%3Bu10%3Dundefined%3Bu18%3Dno%3Bu15%3Dundefined%3Bu3%3D%252Fno%252F%3Bu5%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526bid%253D1%2526pid%253D0%2526utm_source%253D0%2526utm_medium%253Daffiliate%2526utm_campaign%253D0%2526utm_content%253D1%3B~oref%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526bid%253D1%25&ref=https%3A%2F%2Fadservice.google.com%2F&hn=www.googleadservices.com&fmt=3&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&sscte=1&crd=&is_vtc=1&ocp_id=waHHY5OcBfuT78EPrYin8AI&random=1910655441&resp=GooglemKTybQhCsO&ipr=y&prhg=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-conversion/770218393/?random=396122178&cv=9&fst=1674027456989&num=2&npa=1&label=D77vCNSI4NUBEJmzou8C&guid=ON&resp=GooglemKTybQhCsO&eid=375603260&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=2&url=https%3A%2F%2F5903415.fls.doubleclick.net%2Fddm%2Ffls%2Fr%2Fsrc%3D5903415%3Btype%3Duk%3Bcat%3Dhome01%3Bord%3D3499361820892%3Bgtm%3D2wg1a1%3Bauiddc%3D1092196729.1674027456%3Bu1%3Dundefined%3Bu9%3Dundefined%3Bu10%3Dundefined%3Bu18%3Dno%3Bu15%3Dundefined%3Bu3%3D%252Fno%252F%3Bu5%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526bid%253D1%2526pid%253D0%2526utm_source%253D0%2526utm_medium%253Daffiliate%2526utm_campaign%253D0%2526utm_content%253D1%3B~oref%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526bid%253D1%25&ref=https%3A%2F%2Fadservice.google.com%2F&hn=www.googleadservices.com&fmt=3&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&sscte=1&crd=&is_vtc=1&ocp_id=waHHY5OcBfuT78EPrYin8AI&random=1910655441&resp=GooglemKTybQhCsO&ipr=y&prhg=0 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://5903415.fls.doubleclick.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 18 Jan 2023 07:37:37 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/pagead/1p-conversion/770218393/?random=827283546&cv=9&fst=1674027456981&num=2&npa=1&label=Yb7iCJ_639UBEJmzou8C&guid=ON&resp=GooglemKTybQhCsO&eid=375603260&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=2&url=https%3A%2F%2F5903415.fls.doubleclick.net%2Fddm%2Ffls%2Fr%2Fsrc%3D5903415%3Btype%3Duk%3Bcat%3Dcasum00%3Bord%3D1%3Bnum%3D6594421429526%3Bgtm%3D2wg1a1%3Bauiddc%3D1092196729.1674027456%3Bu1%3Dundefined%3Bu9%3Dundefined%3Bu10%3Dundefined%3Bu18%3Dno%3Bu15%3Dundefined%3Bu3%3D%252Fno%252F%3Bu5%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526bid%253D1%2526pid%253D0%2526utm_source%253D0%2526utm_medium%253Daffiliate%2526utm_campaign%253D0%2526utm_content%253D1%3B~oref%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526b&ref=https%3A%2F%2Fadservice.google.com%2F&hn=www.googleadservices.com&fmt=3&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&sscte=1&crd=&is_vtc=1&ocp_id=waHHY9-qBN2T78EPvfi-uAI&random=3826505950&resp=GooglemKTybQhCsO&ipr=y&prhg=0
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-conversion/770218393/?random=827283546&cv=9&fst=1674027456981&num=2&npa=1&label=Yb7iCJ_639UBEJmzou8C&guid=ON&resp=GooglemKTybQhCsO&eid=375603260&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=2&url=https%3A%2F%2F5903415.fls.doubleclick.net%2Fddm%2Ffls%2Fr%2Fsrc%3D5903415%3Btype%3Duk%3Bcat%3Dcasum00%3Bord%3D1%3Bnum%3D6594421429526%3Bgtm%3D2wg1a1%3Bauiddc%3D1092196729.1674027456%3Bu1%3Dundefined%3Bu9%3Dundefined%3Bu10%3Dundefined%3Bu18%3Dno%3Bu15%3Dundefined%3Bu3%3D%252Fno%252F%3Bu5%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526bid%253D1%2526pid%253D0%2526utm_source%253D0%2526utm_medium%253Daffiliate%2526utm_campaign%253D0%2526utm_content%253D1%3B~oref%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526b&ref=https%3A%2F%2Fadservice.google.com%2F&hn=www.googleadservices.com&fmt=3&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&sscte=1&crd=&is_vtc=1&ocp_id=waHHY9-qBN2T78EPvfi-uAI&random=3826505950&resp=GooglemKTybQhCsO&ipr=y&prhg=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-conversion/770218393/?random=827283546&cv=9&fst=1674027456981&num=2&npa=1&label=Yb7iCJ_639UBEJmzou8C&guid=ON&resp=GooglemKTybQhCsO&eid=375603260&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=2&url=https%3A%2F%2F5903415.fls.doubleclick.net%2Fddm%2Ffls%2Fr%2Fsrc%3D5903415%3Btype%3Duk%3Bcat%3Dcasum00%3Bord%3D1%3Bnum%3D6594421429526%3Bgtm%3D2wg1a1%3Bauiddc%3D1092196729.1674027456%3Bu1%3Dundefined%3Bu9%3Dundefined%3Bu10%3Dundefined%3Bu18%3Dno%3Bu15%3Dundefined%3Bu3%3D%252Fno%252F%3Bu5%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526bid%253D1%2526pid%253D0%2526utm_source%253D0%2526utm_medium%253Daffiliate%2526utm_campaign%253D0%2526utm_content%253D1%3B~oref%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526b&ref=https%3A%2F%2Fadservice.google.com%2F&hn=www.googleadservices.com&fmt=3&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&sscte=1&crd=&is_vtc=1&ocp_id=waHHY9-qBN2T78EPvfi-uAI&random=3826505950&resp=GooglemKTybQhCsO&ipr=y&prhg=0 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://5903415.fls.doubleclick.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 18 Jan 2023 07:37:37 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/pagead/1p-conversion/620182431/?random=1229713378&cv=9&fst=1674027456989&num=1&npa=1&label=xn0wCN6Lx9YBEJ_33KcC&guid=ON&resp=GooglemKTybQhCsO&eid=375603261&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=2&url=https%3A%2F%2F5903415.fls.doubleclick.net%2Fddm%2Ffls%2Fr%2Fsrc%3D5903415%3Btype%3Duk%3Bcat%3Dhome01%3Bord%3D3499361820892%3Bgtm%3D2wg1a1%3Bauiddc%3D1092196729.1674027456%3Bu1%3Dundefined%3Bu9%3Dundefined%3Bu10%3Dundefined%3Bu18%3Dno%3Bu15%3Dundefined%3Bu3%3D%252Fno%252F%3Bu5%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526bid%253D1%2526pid%253D0%2526utm_source%253D0%2526utm_medium%253Daffiliate%2526utm_campaign%253D0%2526utm_content%253D1%3B~oref%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526bid%253D1%25&ref=https%3A%2F%2Fadservice.google.com%2F&hn=www.googleadservices.com&fmt=3&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&sscte=1&crd=&is_vtc=1&ocp_id=waHHY8__BICV78EP3q-AGA&random=1800252716&resp=GooglemKTybQhCsO&ipr=y&prhg=0
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-conversion/620182431/?random=1229713378&cv=9&fst=1674027456989&num=1&npa=1&label=xn0wCN6Lx9YBEJ_33KcC&guid=ON&resp=GooglemKTybQhCsO&eid=375603261&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=2&url=https%3A%2F%2F5903415.fls.doubleclick.net%2Fddm%2Ffls%2Fr%2Fsrc%3D5903415%3Btype%3Duk%3Bcat%3Dhome01%3Bord%3D3499361820892%3Bgtm%3D2wg1a1%3Bauiddc%3D1092196729.1674027456%3Bu1%3Dundefined%3Bu9%3Dundefined%3Bu10%3Dundefined%3Bu18%3Dno%3Bu15%3Dundefined%3Bu3%3D%252Fno%252F%3Bu5%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526bid%253D1%2526pid%253D0%2526utm_source%253D0%2526utm_medium%253Daffiliate%2526utm_campaign%253D0%2526utm_content%253D1%3B~oref%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526bid%253D1%25&ref=https%3A%2F%2Fadservice.google.com%2F&hn=www.googleadservices.com&fmt=3&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&sscte=1&crd=&is_vtc=1&ocp_id=waHHY8__BICV78EP3q-AGA&random=1800252716&resp=GooglemKTybQhCsO&ipr=y&prhg=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-conversion/620182431/?random=1229713378&cv=9&fst=1674027456989&num=1&npa=1&label=xn0wCN6Lx9YBEJ_33KcC&guid=ON&resp=GooglemKTybQhCsO&eid=375603261&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=2&url=https%3A%2F%2F5903415.fls.doubleclick.net%2Fddm%2Ffls%2Fr%2Fsrc%3D5903415%3Btype%3Duk%3Bcat%3Dhome01%3Bord%3D3499361820892%3Bgtm%3D2wg1a1%3Bauiddc%3D1092196729.1674027456%3Bu1%3Dundefined%3Bu9%3Dundefined%3Bu10%3Dundefined%3Bu18%3Dno%3Bu15%3Dundefined%3Bu3%3D%252Fno%252F%3Bu5%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526bid%253D1%2526pid%253D0%2526utm_source%253D0%2526utm_medium%253Daffiliate%2526utm_campaign%253D0%2526utm_content%253D1%3B~oref%3Dhttps%253A%252F%252Fwww.casumo.com%252Fno%252F%253Fbtag%253D0_2DCF4211F36A4A12B9700C5E59402665%2526affid%253D0%2526bid%253D1%25&ref=https%3A%2F%2Fadservice.google.com%2F&hn=www.googleadservices.com&fmt=3&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&sscte=1&crd=&is_vtc=1&ocp_id=waHHY8__BICV78EP3q-AGA&random=1800252716&resp=GooglemKTybQhCsO&ipr=y&prhg=0 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://5903415.fls.doubleclick.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 18 Jan 2023 07:37:37 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
eor.ediemidnightzombies.com/mon
200 OK 0 B URL HTTP/2 eor.ediemidnightzombies.com/mon
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: eor.ediemidnightzombies.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1644
Origin: https://www.casumo.com
Connection: keep-alive
Referer: https://www.casumo.com/
Cookie: cg_uuid=cbf070889dac5cc79345be04c290276a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://www.casumo.com
content-type: application/json
date: Wed, 18 Jan 2023 07:37:37 GMT
content-length: 0
X-Firefox-Spdy: h2
eor.ediemidnightzombies.com/mon
200 OK 0 B URL HTTP/2 eor.ediemidnightzombies.com/mon
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: eor.ediemidnightzombies.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1639
Origin: https://www.casumo.com
Connection: keep-alive
Referer: https://www.casumo.com/
Cookie: cg_uuid=cbf070889dac5cc79345be04c290276a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://www.casumo.com
content-type: application/json
date: Wed, 18 Jan 2023 07:37:37 GMT
content-length: 0
X-Firefox-Spdy: h2
eor.ediemidnightzombies.com/mon
200 OK 0 B URL HTTP/2 eor.ediemidnightzombies.com/mon
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: eor.ediemidnightzombies.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1639
Origin: https://www.casumo.com
Connection: keep-alive
Referer: https://www.casumo.com/
Cookie: cg_uuid=cbf070889dac5cc79345be04c290276a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://www.casumo.com
content-type: application/json
date: Wed, 18 Jan 2023 07:37:39 GMT
content-length: 0
X-Firefox-Spdy: h2
eor.ediemidnightzombies.com/mon
200 OK 0 B URL HTTP/2 eor.ediemidnightzombies.com/mon
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: eor.ediemidnightzombies.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1639
Origin: https://www.casumo.com
Connection: keep-alive
Referer: https://www.casumo.com/
Cookie: cg_uuid=cbf070889dac5cc79345be04c290276a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://www.casumo.com
content-type: application/json
date: Wed, 18 Jan 2023 07:37:41 GMT
content-length: 0
X-Firefox-Spdy: h2
www.casumo.com/los2assets/vendor.109b077b8de395a3beb0.js
200 OK 0 B URL HTTP/2 www.casumo.com/los2assets/vendor.109b077b8de395a3beb0.js
IP
GET /los2assets/vendor.109b077b8de395a3beb0.js HTTP/1.1
Host: www.casumo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casumo.com/no/?btag=0_2DCF4211F36A4A12B9700C5E59402665&affid=0&bid=1&pid=0&utm_source=0&utm_medium=affiliate&utm_campaign=0&utm_content=1
Cookie: kazumoTrackingId=0ea7d5f3-9334-4a34-820f-ece7b0d568bc; kazumoMedium=eyJyZWZlcnJlckluZm8iOnsib2ZmZXJJZCI6bnVsbCwidGFyZ2V0Q2FtcGFpZ25JZCI6ImRlZmF1bHQiLCJtZXRhZGF0YSI6eyJiYW5uZXJJZCI6IjBfMkRDRjQyMTFGMzZBNEExMkI5NzAwQzVFNTk0MDI2NjUiLCJhZmZJZCI6IjBfMkRDRiJ9fX0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 18 Jan 2023 07:37:34 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Fri, 13 Jan 2023 09:46:20 GMT
etag: W/"edfb3-185aa85e5e0"
vary: Accept-Encoding
content-encoding: gzip
x-envoy-upstream-service-time: 5
content-security-policy: frame-ancestors 'self' https://www.casumo.es https://casumo.es https://www.casumo.de https://casumo.de https://*.casumo.com https://www.casumokasino.com https://www.casumocasino.dk https://umo-egb.allianceservices.im https://evo-livecasino.casumo.com https://casumo.evo-games.com https://casumo-es.evo-games.com https://nrgs-b2b.greentube.com https://mobile2.gameassists.co.uk https://casumo-static.casinomodule.com https://casumose-static.casinomodule.com https://casumodk-static.casinomodule.com https://dpovs7i3r9tz1.cloudfront.net https://nyxmaltargs.blueprintgaming.com https://casumo-cw.playngonetwork.com https://adkcw.playngonetwork.com https://d1k6j4zyghhevb.cloudfront.net https://platform.rgsgames.com https://rgs-cust02.lab.wagerworks.com https://casumo-game.thunderkick.com https://lon-portfolio.wimobile.casinarena.com https://staticlive.yggdrasilgaming.com https://clients.casumogames.com https://regily.com https://*.regily.com https://*.contentful.com https://player.eu.regulated.pushgaming.com https://mesh.eu.regulated.pushgaming.com https://www.casumokasino.com https://tegb-edict-nex-umo.allianceservices.im https://uat1-casumo.evolutiongaming.com https://gg-nrgs-b2b-staging.greentube.com https://redirector32.valueactive.eu https://casumo-static-test.casinomodule.com https://casumose-static-test.casinomodule.com https://casumodk-static-test.casinomodule.com https://nyxmaltargspubst.blueprintgaming.com https://nogs-gl-stage.nyxmalta.com https://mltstage.playngonetwork.com https://adkcwstage.playngonetwork.com https://d2drhksbtcqozo.cloudfront.net https://rgs-cust02.lab.wagerworks.com https://ext-qa-gameservice.thunderkick.com https://lon-pt-mob.wi-gameserver.com https://staticstaginguk.yggdrasilgaming.com https://clients.test.casumogames.com http://*.casumotest.local https://regily.com https://*.regily.com https://*.contentful.com https://games.regulated-eu-staging.gsi.io
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 70362
expires: Thu, 18 Jan 2024 07:37:34 GMT
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 78b5aa87e8510b31-OSL
X-Firefox-Spdy: h2
www.casumo.com/los2assets/react.ba56069c6768d6e8d05f.js
200 OK 0 B URL HTTP/2 www.casumo.com/los2assets/react.ba56069c6768d6e8d05f.js
IP
GET /los2assets/react.ba56069c6768d6e8d05f.js HTTP/1.1
Host: www.casumo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casumo.com/no/?btag=0_2DCF4211F36A4A12B9700C5E59402665&affid=0&bid=1&pid=0&utm_source=0&utm_medium=affiliate&utm_campaign=0&utm_content=1
Cookie: kazumoTrackingId=0ea7d5f3-9334-4a34-820f-ece7b0d568bc; kazumoMedium=eyJyZWZlcnJlckluZm8iOnsib2ZmZXJJZCI6bnVsbCwidGFyZ2V0Q2FtcGFpZ25JZCI6ImRlZmF1bHQiLCJtZXRhZGF0YSI6eyJiYW5uZXJJZCI6IjBfMkRDRjQyMTFGMzZBNEExMkI5NzAwQzVFNTk0MDI2NjUiLCJhZmZJZCI6IjBfMkRDRiJ9fX0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 18 Jan 2023 07:37:34 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Fri, 13 Jan 2023 09:46:20 GMT
etag: W/"354f4-185aa85e5e0"
vary: Accept-Encoding
content-encoding: gzip
x-envoy-upstream-service-time: 3
content-security-policy: frame-ancestors 'self' https://www.casumo.es https://casumo.es https://www.casumo.de https://casumo.de https://*.casumo.com https://www.casumokasino.com https://www.casumocasino.dk https://umo-egb.allianceservices.im https://evo-livecasino.casumo.com https://casumo.evo-games.com https://casumo-es.evo-games.com https://nrgs-b2b.greentube.com https://mobile2.gameassists.co.uk https://casumo-static.casinomodule.com https://casumose-static.casinomodule.com https://casumodk-static.casinomodule.com https://dpovs7i3r9tz1.cloudfront.net https://nyxmaltargs.blueprintgaming.com https://casumo-cw.playngonetwork.com https://adkcw.playngonetwork.com https://d1k6j4zyghhevb.cloudfront.net https://platform.rgsgames.com https://rgs-cust02.lab.wagerworks.com https://casumo-game.thunderkick.com https://lon-portfolio.wimobile.casinarena.com https://staticlive.yggdrasilgaming.com https://clients.casumogames.com https://regily.com https://*.regily.com https://*.contentful.com https://player.eu.regulated.pushgaming.com https://mesh.eu.regulated.pushgaming.com https://www.casumokasino.com https://tegb-edict-nex-umo.allianceservices.im https://uat1-casumo.evolutiongaming.com https://gg-nrgs-b2b-staging.greentube.com https://redirector32.valueactive.eu https://casumo-static-test.casinomodule.com https://casumose-static-test.casinomodule.com https://casumodk-static-test.casinomodule.com https://nyxmaltargspubst.blueprintgaming.com https://nogs-gl-stage.nyxmalta.com https://mltstage.playngonetwork.com https://adkcwstage.playngonetwork.com https://d2drhksbtcqozo.cloudfront.net https://rgs-cust02.lab.wagerworks.com https://ext-qa-gameservice.thunderkick.com https://lon-pt-mob.wi-gameserver.com https://staticstaginguk.yggdrasilgaming.com https://clients.test.casumogames.com http://*.casumotest.local https://regily.com https://*.regily.com https://*.contentful.com https://games.regulated-eu-staging.gsi.io
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 70362
expires: Thu, 18 Jan 2024 07:37:34 GMT
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 78b5aa87e8560b31-OSL
X-Firefox-Spdy: h2
www.casumo.com/los2assets/ModuleMenu.e8e69616e51161cd988d.js
200 OK 0 B URL HTTP/2 www.casumo.com/los2assets/ModuleMenu.e8e69616e51161cd988d.js
IP
GET /los2assets/ModuleMenu.e8e69616e51161cd988d.js HTTP/1.1
Host: www.casumo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casumo.com/no/?btag=0_2DCF4211F36A4A12B9700C5E59402665&affid=0&bid=1&pid=0&utm_source=0&utm_medium=affiliate&utm_campaign=0&utm_content=1
Cookie: kazumoTrackingId=0ea7d5f3-9334-4a34-820f-ece7b0d568bc; kazumoMedium=eyJyZWZlcnJlckluZm8iOnsib2ZmZXJJZCI6bnVsbCwidGFyZ2V0Q2FtcGFpZ25JZCI6ImRlZmF1bHQiLCJtZXRhZGF0YSI6eyJiYW5uZXJJZCI6IjBfMkRDRjQyMTFGMzZBNEExMkI5NzAwQzVFNTk0MDI2NjUiLCJhZmZJZCI6IjBfMkRDRiJ9fX0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 18 Jan 2023 07:37:34 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Fri, 13 Jan 2023 09:46:20 GMT
etag: W/"a31-185aa85e5e0"
vary: Accept-Encoding
content-encoding: gzip
x-envoy-upstream-service-time: 2
content-security-policy: frame-ancestors 'self' https://www.casumo.es https://casumo.es https://www.casumo.de https://casumo.de https://*.casumo.com https://www.casumokasino.com https://www.casumocasino.dk https://umo-egb.allianceservices.im https://evo-livecasino.casumo.com https://casumo.evo-games.com https://casumo-es.evo-games.com https://nrgs-b2b.greentube.com https://mobile2.gameassists.co.uk https://casumo-static.casinomodule.com https://casumose-static.casinomodule.com https://casumodk-static.casinomodule.com https://dpovs7i3r9tz1.cloudfront.net https://nyxmaltargs.blueprintgaming.com https://casumo-cw.playngonetwork.com https://adkcw.playngonetwork.com https://d1k6j4zyghhevb.cloudfront.net https://platform.rgsgames.com https://rgs-cust02.lab.wagerworks.com https://casumo-game.thunderkick.com https://lon-portfolio.wimobile.casinarena.com https://staticlive.yggdrasilgaming.com https://clients.casumogames.com https://regily.com https://*.regily.com https://*.contentful.com https://player.eu.regulated.pushgaming.com https://mesh.eu.regulated.pushgaming.com https://www.casumokasino.com https://tegb-edict-nex-umo.allianceservices.im https://uat1-casumo.evolutiongaming.com https://gg-nrgs-b2b-staging.greentube.com https://redirector32.valueactive.eu https://casumo-static-test.casinomodule.com https://casumose-static-test.casinomodule.com https://casumodk-static-test.casinomodule.com https://nyxmaltargspubst.blueprintgaming.com https://nogs-gl-stage.nyxmalta.com https://mltstage.playngonetwork.com https://adkcwstage.playngonetwork.com https://d2drhksbtcqozo.cloudfront.net https://rgs-cust02.lab.wagerworks.com https://ext-qa-gameservice.thunderkick.com https://lon-pt-mob.wi-gameserver.com https://staticstaginguk.yggdrasilgaming.com https://clients.test.casumogames.com http://*.casumotest.local https://regily.com https://*.regily.com https://*.contentful.com https://games.regulated-eu-staging.gsi.io
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 70362
expires: Thu, 18 Jan 2024 07:37:34 GMT
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 78b5aa87f8610b31-OSL
X-Firefox-Spdy: h2
www.casumo.com/los2assets/ModuleHeaderAndText.e52f2741586bf82feba6.js
200 OK 0 B URL HTTP/2 www.casumo.com/los2assets/ModuleHeaderAndText.e52f2741586bf82feba6.js
IP
GET /los2assets/ModuleHeaderAndText.e52f2741586bf82feba6.js HTTP/1.1
Host: www.casumo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casumo.com/no/?btag=0_2DCF4211F36A4A12B9700C5E59402665&affid=0&bid=1&pid=0&utm_source=0&utm_medium=affiliate&utm_campaign=0&utm_content=1
Cookie: kazumoTrackingId=0ea7d5f3-9334-4a34-820f-ece7b0d568bc; kazumoMedium=eyJyZWZlcnJlckluZm8iOnsib2ZmZXJJZCI6bnVsbCwidGFyZ2V0Q2FtcGFpZ25JZCI6ImRlZmF1bHQiLCJtZXRhZGF0YSI6eyJiYW5uZXJJZCI6IjBfMkRDRjQyMTFGMzZBNEExMkI5NzAwQzVFNTk0MDI2NjUiLCJhZmZJZCI6IjBfMkRDRiJ9fX0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 18 Jan 2023 07:37:34 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Fri, 13 Jan 2023 09:46:20 GMT
etag: W/"720-185aa85e5e0"
vary: Accept-Encoding
content-encoding: gzip
x-envoy-upstream-service-time: 2
content-security-policy: frame-ancestors 'self' https://www.casumo.es https://casumo.es https://www.casumo.de https://casumo.de https://*.casumo.com https://www.casumokasino.com https://www.casumocasino.dk https://umo-egb.allianceservices.im https://evo-livecasino.casumo.com https://casumo.evo-games.com https://casumo-es.evo-games.com https://nrgs-b2b.greentube.com https://mobile2.gameassists.co.uk https://casumo-static.casinomodule.com https://casumose-static.casinomodule.com https://casumodk-static.casinomodule.com https://dpovs7i3r9tz1.cloudfront.net https://nyxmaltargs.blueprintgaming.com https://casumo-cw.playngonetwork.com https://adkcw.playngonetwork.com https://d1k6j4zyghhevb.cloudfront.net https://platform.rgsgames.com https://rgs-cust02.lab.wagerworks.com https://casumo-game.thunderkick.com https://lon-portfolio.wimobile.casinarena.com https://staticlive.yggdrasilgaming.com https://clients.casumogames.com https://regily.com https://*.regily.com https://*.contentful.com https://player.eu.regulated.pushgaming.com https://mesh.eu.regulated.pushgaming.com https://www.casumokasino.com https://tegb-edict-nex-umo.allianceservices.im https://uat1-casumo.evolutiongaming.com https://gg-nrgs-b2b-staging.greentube.com https://redirector32.valueactive.eu https://casumo-static-test.casinomodule.com https://casumose-static-test.casinomodule.com https://casumodk-static-test.casinomodule.com https://nyxmaltargspubst.blueprintgaming.com https://nogs-gl-stage.nyxmalta.com https://mltstage.playngonetwork.com https://adkcwstage.playngonetwork.com https://d2drhksbtcqozo.cloudfront.net https://rgs-cust02.lab.wagerworks.com https://ext-qa-gameservice.thunderkick.com https://lon-pt-mob.wi-gameserver.com https://staticstaginguk.yggdrasilgaming.com https://clients.test.casumogames.com http://*.casumotest.local https://regily.com https://*.regily.com https://*.contentful.com https://games.regulated-eu-staging.gsi.io
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 70423
expires: Thu, 18 Jan 2024 07:37:34 GMT
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 78b5aa8818930b31-OSL
X-Firefox-Spdy: h2
www.casumo.com/los2assets/IntercomPortal.02a0dbeb1a39464a2709.js
200 OK 0 B URL HTTP/2 www.casumo.com/los2assets/IntercomPortal.02a0dbeb1a39464a2709.js
IP
GET /los2assets/IntercomPortal.02a0dbeb1a39464a2709.js HTTP/1.1
Host: www.casumo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casumo.com/no/?btag=0_2DCF4211F36A4A12B9700C5E59402665&affid=0&bid=1&pid=0&utm_source=0&utm_medium=affiliate&utm_campaign=0&utm_content=1
Cookie: kazumoTrackingId=0ea7d5f3-9334-4a34-820f-ece7b0d568bc; kazumoMedium=eyJyZWZlcnJlckluZm8iOnsib2ZmZXJJZCI6bnVsbCwidGFyZ2V0Q2FtcGFpZ25JZCI6ImRlZmF1bHQiLCJtZXRhZGF0YSI6eyJiYW5uZXJJZCI6IjBfMkRDRjQyMTFGMzZBNEExMkI5NzAwQzVFNTk0MDI2NjUiLCJhZmZJZCI6IjBfMkRDRiJ9fX0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 18 Jan 2023 07:37:34 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Fri, 13 Jan 2023 09:46:20 GMT
etag: W/"886-185aa85e5e0"
vary: Accept-Encoding
content-encoding: gzip
x-envoy-upstream-service-time: 2
content-security-policy: frame-ancestors 'self' https://www.casumo.es https://casumo.es https://www.casumo.de https://casumo.de https://*.casumo.com https://www.casumokasino.com https://www.casumocasino.dk https://umo-egb.allianceservices.im https://evo-livecasino.casumo.com https://casumo.evo-games.com https://casumo-es.evo-games.com https://nrgs-b2b.greentube.com https://mobile2.gameassists.co.uk https://casumo-static.casinomodule.com https://casumose-static.casinomodule.com https://casumodk-static.casinomodule.com https://dpovs7i3r9tz1.cloudfront.net https://nyxmaltargs.blueprintgaming.com https://casumo-cw.playngonetwork.com https://adkcw.playngonetwork.com https://d1k6j4zyghhevb.cloudfront.net https://platform.rgsgames.com https://rgs-cust02.lab.wagerworks.com https://casumo-game.thunderkick.com https://lon-portfolio.wimobile.casinarena.com https://staticlive.yggdrasilgaming.com https://clients.casumogames.com https://regily.com https://*.regily.com https://*.contentful.com https://player.eu.regulated.pushgaming.com https://mesh.eu.regulated.pushgaming.com https://www.casumokasino.com https://tegb-edict-nex-umo.allianceservices.im https://uat1-casumo.evolutiongaming.com https://gg-nrgs-b2b-staging.greentube.com https://redirector32.valueactive.eu https://casumo-static-test.casinomodule.com https://casumose-static-test.casinomodule.com https://casumodk-static-test.casinomodule.com https://nyxmaltargspubst.blueprintgaming.com https://nogs-gl-stage.nyxmalta.com https://mltstage.playngonetwork.com https://adkcwstage.playngonetwork.com https://d2drhksbtcqozo.cloudfront.net https://rgs-cust02.lab.wagerworks.com https://ext-qa-gameservice.thunderkick.com https://lon-pt-mob.wi-gameserver.com https://staticstaginguk.yggdrasilgaming.com https://clients.test.casumogames.com http://*.casumotest.local https://regily.com https://*.regily.com https://*.contentful.com https://games.regulated-eu-staging.gsi.io
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 70332
expires: Thu, 18 Jan 2024 07:37:34 GMT
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 78b5aa87f85c0b31-OSL
X-Firefox-Spdy: h2
www.casumo.com/los2assets/CasumoCookieConsent.d0e005bdfba50978669f.js
200 OK 0 B URL HTTP/2 www.casumo.com/los2assets/CasumoCookieConsent.d0e005bdfba50978669f.js
IP
GET /los2assets/CasumoCookieConsent.d0e005bdfba50978669f.js HTTP/1.1
Host: www.casumo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casumo.com/no/?btag=0_2DCF4211F36A4A12B9700C5E59402665&affid=0&bid=1&pid=0&utm_source=0&utm_medium=affiliate&utm_campaign=0&utm_content=1
Cookie: kazumoTrackingId=0ea7d5f3-9334-4a34-820f-ece7b0d568bc; kazumoMedium=eyJyZWZlcnJlckluZm8iOnsib2ZmZXJJZCI6bnVsbCwidGFyZ2V0Q2FtcGFpZ25JZCI6ImRlZmF1bHQiLCJtZXRhZGF0YSI6eyJiYW5uZXJJZCI6IjBfMkRDRjQyMTFGMzZBNEExMkI5NzAwQzVFNTk0MDI2NjUiLCJhZmZJZCI6IjBfMkRDRiJ9fX0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 18 Jan 2023 07:37:34 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Fri, 13 Jan 2023 09:46:20 GMT
etag: W/"19cf-185aa85e5e0"
vary: Accept-Encoding
content-encoding: gzip
x-envoy-upstream-service-time: 2
content-security-policy: frame-ancestors 'self' https://www.casumo.es https://casumo.es https://www.casumo.de https://casumo.de https://*.casumo.com https://www.casumokasino.com https://www.casumocasino.dk https://umo-egb.allianceservices.im https://evo-livecasino.casumo.com https://casumo.evo-games.com https://casumo-es.evo-games.com https://nrgs-b2b.greentube.com https://mobile2.gameassists.co.uk https://casumo-static.casinomodule.com https://casumose-static.casinomodule.com https://casumodk-static.casinomodule.com https://dpovs7i3r9tz1.cloudfront.net https://nyxmaltargs.blueprintgaming.com https://casumo-cw.playngonetwork.com https://adkcw.playngonetwork.com https://d1k6j4zyghhevb.cloudfront.net https://platform.rgsgames.com https://rgs-cust02.lab.wagerworks.com https://casumo-game.thunderkick.com https://lon-portfolio.wimobile.casinarena.com https://staticlive.yggdrasilgaming.com https://clients.casumogames.com https://regily.com https://*.regily.com https://*.contentful.com https://player.eu.regulated.pushgaming.com https://mesh.eu.regulated.pushgaming.com https://www.casumokasino.com https://tegb-edict-nex-umo.allianceservices.im https://uat1-casumo.evolutiongaming.com https://gg-nrgs-b2b-staging.greentube.com https://redirector32.valueactive.eu https://casumo-static-test.casinomodule.com https://casumose-static-test.casinomodule.com https://casumodk-static-test.casinomodule.com https://nyxmaltargspubst.blueprintgaming.com https://nogs-gl-stage.nyxmalta.com https://mltstage.playngonetwork.com https://adkcwstage.playngonetwork.com https://d2drhksbtcqozo.cloudfront.net https://rgs-cust02.lab.wagerworks.com https://ext-qa-gameservice.thunderkick.com https://lon-pt-mob.wi-gameserver.com https://staticstaginguk.yggdrasilgaming.com https://clients.test.casumogames.com http://*.casumotest.local https://regily.com https://*.regily.com https://*.contentful.com https://games.regulated-eu-staging.gsi.io
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 70086
expires: Thu, 18 Jan 2024 07:37:34 GMT
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 78b5aa87f85f0b31-OSL
X-Firefox-Spdy: h2
www.casumo.com/los2assets/ModuleSpacer.cd7ddb2a1b3add200e0e.js
200 OK 0 B URL HTTP/2 www.casumo.com/los2assets/ModuleSpacer.cd7ddb2a1b3add200e0e.js
IP
GET /los2assets/ModuleSpacer.cd7ddb2a1b3add200e0e.js HTTP/1.1
Host: www.casumo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casumo.com/no/?btag=0_2DCF4211F36A4A12B9700C5E59402665&affid=0&bid=1&pid=0&utm_source=0&utm_medium=affiliate&utm_campaign=0&utm_content=1
Cookie: kazumoTrackingId=0ea7d5f3-9334-4a34-820f-ece7b0d568bc; kazumoMedium=eyJyZWZlcnJlckluZm8iOnsib2ZmZXJJZCI6bnVsbCwidGFyZ2V0Q2FtcGFpZ25JZCI6ImRlZmF1bHQiLCJtZXRhZGF0YSI6eyJiYW5uZXJJZCI6IjBfMkRDRjQyMTFGMzZBNEExMkI5NzAwQzVFNTk0MDI2NjUiLCJhZmZJZCI6IjBfMkRDRiJ9fX0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 18 Jan 2023 07:37:34 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Fri, 13 Jan 2023 09:46:20 GMT
etag: W/"295-185aa85e5e0"
vary: Accept-Encoding
content-encoding: gzip
x-envoy-upstream-service-time: 8
content-security-policy: frame-ancestors 'self' https://www.casumo.es https://casumo.es https://www.casumo.de https://casumo.de https://*.casumo.com https://www.casumokasino.com https://www.casumocasino.dk https://umo-egb.allianceservices.im https://evo-livecasino.casumo.com https://casumo.evo-games.com https://casumo-es.evo-games.com https://nrgs-b2b.greentube.com https://mobile2.gameassists.co.uk https://casumo-static.casinomodule.com https://casumose-static.casinomodule.com https://casumodk-static.casinomodule.com https://dpovs7i3r9tz1.cloudfront.net https://nyxmaltargs.blueprintgaming.com https://casumo-cw.playngonetwork.com https://adkcw.playngonetwork.com https://d1k6j4zyghhevb.cloudfront.net https://platform.rgsgames.com https://rgs-cust02.lab.wagerworks.com https://casumo-game.thunderkick.com https://lon-portfolio.wimobile.casinarena.com https://staticlive.yggdrasilgaming.com https://clients.casumogames.com https://regily.com https://*.regily.com https://*.contentful.com https://player.eu.regulated.pushgaming.com https://mesh.eu.regulated.pushgaming.com https://www.casumokasino.com https://tegb-edict-nex-umo.allianceservices.im https://uat1-casumo.evolutiongaming.com https://gg-nrgs-b2b-staging.greentube.com https://redirector32.valueactive.eu https://casumo-static-test.casinomodule.com https://casumose-static-test.casinomodule.com https://casumodk-static-test.casinomodule.com https://nyxmaltargspubst.blueprintgaming.com https://nogs-gl-stage.nyxmalta.com https://mltstage.playngonetwork.com https://adkcwstage.playngonetwork.com https://d2drhksbtcqozo.cloudfront.net https://rgs-cust02.lab.wagerworks.com https://ext-qa-gameservice.thunderkick.com https://lon-pt-mob.wi-gameserver.com https://staticstaginguk.yggdrasilgaming.com https://clients.test.casumogames.com http://*.casumotest.local https://regily.com https://*.regily.com https://*.contentful.com https://games.regulated-eu-staging.gsi.io
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 70362
expires: Thu, 18 Jan 2024 07:37:34 GMT
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 78b5aa8808780b31-OSL
X-Firefox-Spdy: h2
www.casumo.com/los2assets/ModuleCTAButton.335ad199a5cdeb5aae56.js
200 OK 0 B URL HTTP/2 www.casumo.com/los2assets/ModuleCTAButton.335ad199a5cdeb5aae56.js
IP
GET /los2assets/ModuleCTAButton.335ad199a5cdeb5aae56.js HTTP/1.1
Host: www.casumo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casumo.com/no/?btag=0_2DCF4211F36A4A12B9700C5E59402665&affid=0&bid=1&pid=0&utm_source=0&utm_medium=affiliate&utm_campaign=0&utm_content=1
Cookie: kazumoTrackingId=0ea7d5f3-9334-4a34-820f-ece7b0d568bc; kazumoMedium=eyJyZWZlcnJlckluZm8iOnsib2ZmZXJJZCI6bnVsbCwidGFyZ2V0Q2FtcGFpZ25JZCI6ImRlZmF1bHQiLCJtZXRhZGF0YSI6eyJiYW5uZXJJZCI6IjBfMkRDRjQyMTFGMzZBNEExMkI5NzAwQzVFNTk0MDI2NjUiLCJhZmZJZCI6IjBfMkRDRiJ9fX0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 18 Jan 2023 07:37:34 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Fri, 13 Jan 2023 09:46:20 GMT
etag: W/"57e-185aa85e5e0"
vary: Accept-Encoding
content-encoding: gzip
x-envoy-upstream-service-time: 2
content-security-policy: frame-ancestors 'self' https://www.casumo.es https://casumo.es https://www.casumo.de https://casumo.de https://*.casumo.com https://www.casumokasino.com https://www.casumocasino.dk https://umo-egb.allianceservices.im https://evo-livecasino.casumo.com https://casumo.evo-games.com https://casumo-es.evo-games.com https://nrgs-b2b.greentube.com https://mobile2.gameassists.co.uk https://casumo-static.casinomodule.com https://casumose-static.casinomodule.com https://casumodk-static.casinomodule.com https://dpovs7i3r9tz1.cloudfront.net https://nyxmaltargs.blueprintgaming.com https://casumo-cw.playngonetwork.com https://adkcw.playngonetwork.com https://d1k6j4zyghhevb.cloudfront.net https://platform.rgsgames.com https://rgs-cust02.lab.wagerworks.com https://casumo-game.thunderkick.com https://lon-portfolio.wimobile.casinarena.com https://staticlive.yggdrasilgaming.com https://clients.casumogames.com https://regily.com https://*.regily.com https://*.contentful.com https://player.eu.regulated.pushgaming.com https://mesh.eu.regulated.pushgaming.com https://www.casumokasino.com https://tegb-edict-nex-umo.allianceservices.im https://uat1-casumo.evolutiongaming.com https://gg-nrgs-b2b-staging.greentube.com https://redirector32.valueactive.eu https://casumo-static-test.casinomodule.com https://casumose-static-test.casinomodule.com https://casumodk-static-test.casinomodule.com https://nyxmaltargspubst.blueprintgaming.com https://nogs-gl-stage.nyxmalta.com https://mltstage.playngonetwork.com https://adkcwstage.playngonetwork.com https://d2drhksbtcqozo.cloudfront.net https://rgs-cust02.lab.wagerworks.com https://ext-qa-gameservice.thunderkick.com https://lon-pt-mob.wi-gameserver.com https://staticstaginguk.yggdrasilgaming.com https://clients.test.casumogames.com http://*.casumotest.local https://regily.com https://*.regily.com https://*.contentful.com https://games.regulated-eu-staging.gsi.io
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 70362
expires: Thu, 18 Jan 2024 07:37:34 GMT
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 78b5aa8818990b31-OSL
X-Firefox-Spdy: h2
static.hotjar.com/c/hotjar-8563.js?sv=7
200 OK 0 B URL HTTP/2 static.hotjar.com/c/hotjar-8563.js?sv=7
IP
GET /c/hotjar-8563.js?sv=7 HTTP/1.1
Host: static.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casumo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
content-encoding: br
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=2592000; includeSubDomains
x-cache-hit: 1
x-content-type-options: nosniff
date: Wed, 18 Jan 2023 07:37:36 GMT
cache-control: max-age=60
etag: W/0d334e273c897eef0fe0ab7855d455a1
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: awc54mJj1UjMBxLjneAXVBHBQhGTOPrOhh655XfCzs4-PK1UZpRJqQ==
age: 29
X-Firefox-Spdy: h2
tr.snapchat.com/config/com/1576d02a-cd11-4ae1-adbb-2d4df1a0c230.js
200 OK 0 B URL HTTP/2 tr.snapchat.com/config/com/1576d02a-cd11-4ae1-adbb-2d4df1a0c230.js
IP
GET /config/com/1576d02a-cd11-4ae1-adbb-2d4df1a0c230.js HTTP/1.1
Host: tr.snapchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.casumo.com
Connection: keep-alive
Referer: https://www.casumo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 18 Jan 2023 07:37:36 GMT
access-control-allow-origin: https://www.casumo.com
content-type: application/javascript
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-envoy-upstream-service-time: 0
content-encoding: gzip
vary: Accept-Encoding
server: API Gateway
access-control-allow-credentials: true
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.casumo.com/los2assets/button-idle.d35ada61f410db246e9e923be785de86.svg
200 OK 0 B URL HTTP/2 www.casumo.com/los2assets/button-idle.d35ada61f410db246e9e923be785de86.svg
IP
GET /los2assets/button-idle.d35ada61f410db246e9e923be785de86.svg HTTP/1.1
Host: www.casumo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casumo.com/no/?btag=0_2DCF4211F36A4A12B9700C5E59402665&affid=0&bid=1&pid=0&utm_source=0&utm_medium=affiliate&utm_campaign=0&utm_content=1
Cookie: kazumoTrackingId=0ea7d5f3-9334-4a34-820f-ece7b0d568bc; kazumoMedium=eyJyZWZlcnJlckluZm8iOnsib2ZmZXJJZCI6bnVsbCwidGFyZ2V0Q2FtcGFpZ25JZCI6ImRlZmF1bHQiLCJtZXRhZGF0YSI6eyJiYW5uZXJJZCI6IjBfMkRDRjQyMTFGMzZBNEExMkI5NzAwQzVFNTk0MDI2NjUiLCJhZmZJZCI6IjBfMkRDRiJ9fX0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 18 Jan 2023 07:37:34 GMT
content-type: image/svg+xml
cache-control: public, max-age=31536000
last-modified: Fri, 13 Jan 2023 09:46:20 GMT
etag: W/"7c8-185aa85e5e0"
vary: Accept-Encoding
content-encoding: gzip
x-envoy-upstream-service-time: 1
content-security-policy: frame-ancestors 'self' https://www.casumo.es https://casumo.es https://www.casumo.de https://casumo.de https://*.casumo.com https://www.casumokasino.com https://www.casumocasino.dk https://umo-egb.allianceservices.im https://evo-livecasino.casumo.com https://casumo.evo-games.com https://casumo-es.evo-games.com https://nrgs-b2b.greentube.com https://mobile2.gameassists.co.uk https://casumo-static.casinomodule.com https://casumose-static.casinomodule.com https://casumodk-static.casinomodule.com https://dpovs7i3r9tz1.cloudfront.net https://nyxmaltargs.blueprintgaming.com https://casumo-cw.playngonetwork.com https://adkcw.playngonetwork.com https://d1k6j4zyghhevb.cloudfront.net https://platform.rgsgames.com https://rgs-cust02.lab.wagerworks.com https://casumo-game.thunderkick.com https://lon-portfolio.wimobile.casinarena.com https://staticlive.yggdrasilgaming.com https://clients.casumogames.com https://regily.com https://*.regily.com https://*.contentful.com https://player.eu.regulated.pushgaming.com https://mesh.eu.regulated.pushgaming.com https://www.casumokasino.com https://tegb-edict-nex-umo.allianceservices.im https://uat1-casumo.evolutiongaming.com https://gg-nrgs-b2b-staging.greentube.com https://redirector32.valueactive.eu https://casumo-static-test.casinomodule.com https://casumose-static-test.casinomodule.com https://casumodk-static-test.casinomodule.com https://nyxmaltargspubst.blueprintgaming.com https://nogs-gl-stage.nyxmalta.com https://mltstage.playngonetwork.com https://adkcwstage.playngonetwork.com https://d2drhksbtcqozo.cloudfront.net https://rgs-cust02.lab.wagerworks.com https://ext-qa-gameservice.thunderkick.com https://lon-pt-mob.wi-gameserver.com https://staticstaginguk.yggdrasilgaming.com https://clients.test.casumogames.com http://*.casumotest.local https://regily.com https://*.regily.com https://*.contentful.com https://games.regulated-eu-staging.gsi.io
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 70086
expires: Thu, 18 Jan 2024 07:37:34 GMT
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 78b5aa87d8450b31-OSL
X-Firefox-Spdy: h2
www.casumo.com/los2assets/dots.b6c68ff50fae51a0cab51dee0e505a7d.svg
200 OK 0 B URL HTTP/2 www.casumo.com/los2assets/dots.b6c68ff50fae51a0cab51dee0e505a7d.svg
IP
GET /los2assets/dots.b6c68ff50fae51a0cab51dee0e505a7d.svg HTTP/1.1
Host: www.casumo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casumo.com/no/?btag=0_2DCF4211F36A4A12B9700C5E59402665&affid=0&bid=1&pid=0&utm_source=0&utm_medium=affiliate&utm_campaign=0&utm_content=1
Cookie: kazumoTrackingId=0ea7d5f3-9334-4a34-820f-ece7b0d568bc; kazumoMedium=eyJyZWZlcnJlckluZm8iOnsib2ZmZXJJZCI6bnVsbCwidGFyZ2V0Q2FtcGFpZ25JZCI6ImRlZmF1bHQiLCJtZXRhZGF0YSI6eyJiYW5uZXJJZCI6IjBfMkRDRjQyMTFGMzZBNEExMkI5NzAwQzVFNTk0MDI2NjUiLCJhZmZJZCI6IjBfMkRDRiJ9fX0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 18 Jan 2023 07:37:34 GMT
content-type: image/svg+xml
cache-control: public, max-age=31536000
last-modified: Fri, 13 Jan 2023 09:46:20 GMT
etag: W/"66b-185aa85e5e0"
vary: Accept-Encoding
content-encoding: gzip
x-envoy-upstream-service-time: 2
content-security-policy: frame-ancestors 'self' https://www.casumo.es https://casumo.es https://www.casumo.de https://casumo.de https://*.casumo.com https://www.casumokasino.com https://www.casumocasino.dk https://umo-egb.allianceservices.im https://evo-livecasino.casumo.com https://casumo.evo-games.com https://casumo-es.evo-games.com https://nrgs-b2b.greentube.com https://mobile2.gameassists.co.uk https://casumo-static.casinomodule.com https://casumose-static.casinomodule.com https://casumodk-static.casinomodule.com https://dpovs7i3r9tz1.cloudfront.net https://nyxmaltargs.blueprintgaming.com https://casumo-cw.playngonetwork.com https://adkcw.playngonetwork.com https://d1k6j4zyghhevb.cloudfront.net https://platform.rgsgames.com https://rgs-cust02.lab.wagerworks.com https://casumo-game.thunderkick.com https://lon-portfolio.wimobile.casinarena.com https://staticlive.yggdrasilgaming.com https://clients.casumogames.com https://regily.com https://*.regily.com https://*.contentful.com https://player.eu.regulated.pushgaming.com https://mesh.eu.regulated.pushgaming.com https://www.casumokasino.com https://tegb-edict-nex-umo.allianceservices.im https://uat1-casumo.evolutiongaming.com https://gg-nrgs-b2b-staging.greentube.com https://redirector32.valueactive.eu https://casumo-static-test.casinomodule.com https://casumose-static-test.casinomodule.com https://casumodk-static-test.casinomodule.com https://nyxmaltargspubst.blueprintgaming.com https://nogs-gl-stage.nyxmalta.com https://mltstage.playngonetwork.com https://adkcwstage.playngonetwork.com https://d2drhksbtcqozo.cloudfront.net https://rgs-cust02.lab.wagerworks.com https://ext-qa-gameservice.thunderkick.com https://lon-pt-mob.wi-gameserver.com https://staticstaginguk.yggdrasilgaming.com https://clients.test.casumogames.com http://*.casumotest.local https://regily.com https://*.regily.com https://*.contentful.com https://games.regulated-eu-staging.gsi.io
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 70422
expires: Thu, 18 Jan 2024 07:37:34 GMT
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 78b5aa87e84d0b31-OSL
X-Firefox-Spdy: h2
www.casumo.com/los2assets/DOMParser.8316dc0c70e25ddf60cd.js
200 OK 0 B URL HTTP/2 www.casumo.com/los2assets/DOMParser.8316dc0c70e25ddf60cd.js
IP
GET /los2assets/DOMParser.8316dc0c70e25ddf60cd.js HTTP/1.1
Host: www.casumo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casumo.com/no/?btag=0_2DCF4211F36A4A12B9700C5E59402665&affid=0&bid=1&pid=0&utm_source=0&utm_medium=affiliate&utm_campaign=0&utm_content=1
Cookie: kazumoTrackingId=0ea7d5f3-9334-4a34-820f-ece7b0d568bc; kazumoMedium=eyJyZWZlcnJlckluZm8iOnsib2ZmZXJJZCI6bnVsbCwidGFyZ2V0Q2FtcGFpZ25JZCI6ImRlZmF1bHQiLCJtZXRhZGF0YSI6eyJiYW5uZXJJZCI6IjBfMkRDRjQyMTFGMzZBNEExMkI5NzAwQzVFNTk0MDI2NjUiLCJhZmZJZCI6IjBfMkRDRiJ9fX0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 18 Jan 2023 07:37:34 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Fri, 13 Jan 2023 09:46:20 GMT
etag: W/"305b-185aa85e5e0"
vary: Accept-Encoding
content-encoding: gzip
x-envoy-upstream-service-time: 1
content-security-policy: frame-ancestors 'self' https://www.casumo.es https://casumo.es https://www.casumo.de https://casumo.de https://*.casumo.com https://www.casumokasino.com https://www.casumocasino.dk https://umo-egb.allianceservices.im https://evo-livecasino.casumo.com https://casumo.evo-games.com https://casumo-es.evo-games.com https://nrgs-b2b.greentube.com https://mobile2.gameassists.co.uk https://casumo-static.casinomodule.com https://casumose-static.casinomodule.com https://casumodk-static.casinomodule.com https://dpovs7i3r9tz1.cloudfront.net https://nyxmaltargs.blueprintgaming.com https://casumo-cw.playngonetwork.com https://adkcw.playngonetwork.com https://d1k6j4zyghhevb.cloudfront.net https://platform.rgsgames.com https://rgs-cust02.lab.wagerworks.com https://casumo-game.thunderkick.com https://lon-portfolio.wimobile.casinarena.com https://staticlive.yggdrasilgaming.com https://clients.casumogames.com https://regily.com https://*.regily.com https://*.contentful.com https://player.eu.regulated.pushgaming.com https://mesh.eu.regulated.pushgaming.com https://www.casumokasino.com https://tegb-edict-nex-umo.allianceservices.im https://uat1-casumo.evolutiongaming.com https://gg-nrgs-b2b-staging.greentube.com https://redirector32.valueactive.eu https://casumo-static-test.casinomodule.com https://casumose-static-test.casinomodule.com https://casumodk-static-test.casinomodule.com https://nyxmaltargspubst.blueprintgaming.com https://nogs-gl-stage.nyxmalta.com https://mltstage.playngonetwork.com https://adkcwstage.playngonetwork.com https://d2drhksbtcqozo.cloudfront.net https://rgs-cust02.lab.wagerworks.com https://ext-qa-gameservice.thunderkick.com https://lon-pt-mob.wi-gameserver.com https://staticstaginguk.yggdrasilgaming.com https://clients.test.casumogames.com http://*.casumotest.local https://regily.com https://*.regily.com https://*.contentful.com https://games.regulated-eu-staging.gsi.io
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 70362
expires: Thu, 18 Jan 2024 07:37:34 GMT
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 78b5aa87f8670b31-OSL
X-Firefox-Spdy: h2
www.casumo.com/los2assets/ModulePayments.639ab0286b31bd51b303.js
200 OK 0 B URL HTTP/2 www.casumo.com/los2assets/ModulePayments.639ab0286b31bd51b303.js
IP
GET /los2assets/ModulePayments.639ab0286b31bd51b303.js HTTP/1.1
Host: www.casumo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casumo.com/no/?btag=0_2DCF4211F36A4A12B9700C5E59402665&affid=0&bid=1&pid=0&utm_source=0&utm_medium=affiliate&utm_campaign=0&utm_content=1
Cookie: kazumoTrackingId=0ea7d5f3-9334-4a34-820f-ece7b0d568bc; kazumoMedium=eyJyZWZlcnJlckluZm8iOnsib2ZmZXJJZCI6bnVsbCwidGFyZ2V0Q2FtcGFpZ25JZCI6ImRlZmF1bHQiLCJtZXRhZGF0YSI6eyJiYW5uZXJJZCI6IjBfMkRDRjQyMTFGMzZBNEExMkI5NzAwQzVFNTk0MDI2NjUiLCJhZmZJZCI6IjBfMkRDRiJ9fX0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 18 Jan 2023 07:37:34 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Fri, 13 Jan 2023 09:46:20 GMT
etag: W/"e7b-185aa85e5e0"
vary: Accept-Encoding
content-encoding: gzip
x-envoy-upstream-service-time: 2
content-security-policy: frame-ancestors 'self' https://www.casumo.es https://casumo.es https://www.casumo.de https://casumo.de https://*.casumo.com https://www.casumokasino.com https://www.casumocasino.dk https://umo-egb.allianceservices.im https://evo-livecasino.casumo.com https://casumo.evo-games.com https://casumo-es.evo-games.com https://nrgs-b2b.greentube.com https://mobile2.gameassists.co.uk https://casumo-static.casinomodule.com https://casumose-static.casinomodule.com https://casumodk-static.casinomodule.com https://dpovs7i3r9tz1.cloudfront.net https://nyxmaltargs.blueprintgaming.com https://casumo-cw.playngonetwork.com https://adkcw.playngonetwork.com https://d1k6j4zyghhevb.cloudfront.net https://platform.rgsgames.com https://rgs-cust02.lab.wagerworks.com https://casumo-game.thunderkick.com https://lon-portfolio.wimobile.casinarena.com https://staticlive.yggdrasilgaming.com https://clients.casumogames.com https://regily.com https://*.regily.com https://*.contentful.com https://player.eu.regulated.pushgaming.com https://mesh.eu.regulated.pushgaming.com https://www.casumokasino.com https://tegb-edict-nex-umo.allianceservices.im https://uat1-casumo.evolutiongaming.com https://gg-nrgs-b2b-staging.greentube.com https://redirector32.valueactive.eu https://casumo-static-test.casinomodule.com https://casumose-static-test.casinomodule.com https://casumodk-static-test.casinomodule.com https://nyxmaltargspubst.blueprintgaming.com https://nogs-gl-stage.nyxmalta.com https://mltstage.playngonetwork.com https://adkcwstage.playngonetwork.com https://d2drhksbtcqozo.cloudfront.net https://rgs-cust02.lab.wagerworks.com https://ext-qa-gameservice.thunderkick.com https://lon-pt-mob.wi-gameserver.com https://staticstaginguk.yggdrasilgaming.com https://clients.test.casumogames.com http://*.casumotest.local https://regily.com https://*.regily.com https://*.contentful.com https://games.regulated-eu-staging.gsi.io
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 25856
expires: Thu, 18 Jan 2024 07:37:34 GMT
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 78b5aa8808800b31-OSL
X-Firefox-Spdy: h2
www.casumo.com/los2assets/FooterNew.660aece9da65afa78a3d.js
200 OK 0 B URL HTTP/2 www.casumo.com/los2assets/FooterNew.660aece9da65afa78a3d.js
IP
GET /los2assets/FooterNew.660aece9da65afa78a3d.js HTTP/1.1
Host: www.casumo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casumo.com/no/?btag=0_2DCF4211F36A4A12B9700C5E59402665&affid=0&bid=1&pid=0&utm_source=0&utm_medium=affiliate&utm_campaign=0&utm_content=1
Cookie: kazumoTrackingId=0ea7d5f3-9334-4a34-820f-ece7b0d568bc; kazumoMedium=eyJyZWZlcnJlckluZm8iOnsib2ZmZXJJZCI6bnVsbCwidGFyZ2V0Q2FtcGFpZ25JZCI6ImRlZmF1bHQiLCJtZXRhZGF0YSI6eyJiYW5uZXJJZCI6IjBfMkRDRjQyMTFGMzZBNEExMkI5NzAwQzVFNTk0MDI2NjUiLCJhZmZJZCI6IjBfMkRDRiJ9fX0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 18 Jan 2023 07:37:34 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Fri, 13 Jan 2023 09:46:20 GMT
etag: W/"3821-185aa85e5e0"
vary: Accept-Encoding
content-encoding: gzip
x-envoy-upstream-service-time: 3
content-security-policy: frame-ancestors 'self' https://www.casumo.es https://casumo.es https://www.casumo.de https://casumo.de https://*.casumo.com https://www.casumokasino.com https://www.casumocasino.dk https://umo-egb.allianceservices.im https://evo-livecasino.casumo.com https://casumo.evo-games.com https://casumo-es.evo-games.com https://nrgs-b2b.greentube.com https://mobile2.gameassists.co.uk https://casumo-static.casinomodule.com https://casumose-static.casinomodule.com https://casumodk-static.casinomodule.com https://dpovs7i3r9tz1.cloudfront.net https://nyxmaltargs.blueprintgaming.com https://casumo-cw.playngonetwork.com https://adkcw.playngonetwork.com https://d1k6j4zyghhevb.cloudfront.net https://platform.rgsgames.com https://rgs-cust02.lab.wagerworks.com https://casumo-game.thunderkick.com https://lon-portfolio.wimobile.casinarena.com https://staticlive.yggdrasilgaming.com https://clients.casumogames.com https://regily.com https://*.regily.com https://*.contentful.com https://player.eu.regulated.pushgaming.com https://mesh.eu.regulated.pushgaming.com https://www.casumokasino.com https://tegb-edict-nex-umo.allianceservices.im https://uat1-casumo.evolutiongaming.com https://gg-nrgs-b2b-staging.greentube.com https://redirector32.valueactive.eu https://casumo-static-test.casinomodule.com https://casumose-static-test.casinomodule.com https://casumodk-static-test.casinomodule.com https://nyxmaltargspubst.blueprintgaming.com https://nogs-gl-stage.nyxmalta.com https://mltstage.playngonetwork.com https://adkcwstage.playngonetwork.com https://d2drhksbtcqozo.cloudfront.net https://rgs-cust02.lab.wagerworks.com https://ext-qa-gameservice.thunderkick.com https://lon-pt-mob.wi-gameserver.com https://staticstaginguk.yggdrasilgaming.com https://clients.test.casumogames.com http://*.casumotest.local https://regily.com https://*.regily.com https://*.contentful.com https://games.regulated-eu-staging.gsi.io
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 70086
expires: Thu, 18 Jan 2024 07:37:34 GMT
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 78b5aa8848b60b31-OSL
X-Firefox-Spdy: h2
www.casumo.com/los2assets/ModuleGamesSelection.28aa0cdb367d5dd63b46.js
200 OK 0 B URL HTTP/2 www.casumo.com/los2assets/ModuleGamesSelection.28aa0cdb367d5dd63b46.js
IP
GET /los2assets/ModuleGamesSelection.28aa0cdb367d5dd63b46.js HTTP/1.1
Host: www.casumo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casumo.com/no/?btag=0_2DCF4211F36A4A12B9700C5E59402665&affid=0&bid=1&pid=0&utm_source=0&utm_medium=affiliate&utm_campaign=0&utm_content=1
Cookie: kazumoTrackingId=0ea7d5f3-9334-4a34-820f-ece7b0d568bc; kazumoMedium=eyJyZWZlcnJlckluZm8iOnsib2ZmZXJJZCI6bnVsbCwidGFyZ2V0Q2FtcGFpZ25JZCI6ImRlZmF1bHQiLCJtZXRhZGF0YSI6eyJiYW5uZXJJZCI6IjBfMkRDRjQyMTFGMzZBNEExMkI5NzAwQzVFNTk0MDI2NjUiLCJhZmZJZCI6IjBfMkRDRiJ9fX0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 18 Jan 2023 07:37:34 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Fri, 13 Jan 2023 09:46:20 GMT
etag: W/"1b99-185aa85e5e0"
vary: Accept-Encoding
content-encoding: gzip
x-envoy-upstream-service-time: 1
content-security-policy: frame-ancestors 'self' https://www.casumo.es https://casumo.es https://www.casumo.de https://casumo.de https://*.casumo.com https://www.casumokasino.com https://www.casumocasino.dk https://umo-egb.allianceservices.im https://evo-livecasino.casumo.com https://casumo.evo-games.com https://casumo-es.evo-games.com https://nrgs-b2b.greentube.com https://mobile2.gameassists.co.uk https://casumo-static.casinomodule.com https://casumose-static.casinomodule.com https://casumodk-static.casinomodule.com https://dpovs7i3r9tz1.cloudfront.net https://nyxmaltargs.blueprintgaming.com https://casumo-cw.playngonetwork.com https://adkcw.playngonetwork.com https://d1k6j4zyghhevb.cloudfront.net https://platform.rgsgames.com https://rgs-cust02.lab.wagerworks.com https://casumo-game.thunderkick.com https://lon-portfolio.wimobile.casinarena.com https://staticlive.yggdrasilgaming.com https://clients.casumogames.com https://regily.com https://*.regily.com https://*.contentful.com https://player.eu.regulated.pushgaming.com https://mesh.eu.regulated.pushgaming.com https://www.casumokasino.com https://tegb-edict-nex-umo.allianceservices.im https://uat1-casumo.evolutiongaming.com https://gg-nrgs-b2b-staging.greentube.com https://redirector32.valueactive.eu https://casumo-static-test.casinomodule.com https://casumose-static-test.casinomodule.com https://casumodk-static-test.casinomodule.com https://nyxmaltargspubst.blueprintgaming.com https://nogs-gl-stage.nyxmalta.com https://mltstage.playngonetwork.com https://adkcwstage.playngonetwork.com https://d2drhksbtcqozo.cloudfront.net https://rgs-cust02.lab.wagerworks.com https://ext-qa-gameservice.thunderkick.com https://lon-pt-mob.wi-gameserver.com https://staticstaginguk.yggdrasilgaming.com https://clients.test.casumogames.com http://*.casumotest.local https://regily.com https://*.regily.com https://*.contentful.com https://games.regulated-eu-staging.gsi.io
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 70422
expires: Thu, 18 Jan 2024 07:37:34 GMT
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 78b5aa87f8720b31-OSL
X-Firefox-Spdy: h2
www.casumo.com/los2assets/expand.29248e8900a64a0abe63e20006f57dfd.svg
200 OK 0 B URL HTTP/2 www.casumo.com/los2assets/expand.29248e8900a64a0abe63e20006f57dfd.svg
IP
GET /los2assets/expand.29248e8900a64a0abe63e20006f57dfd.svg HTTP/1.1
Host: www.casumo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casumo.com/no/?btag=0_2DCF4211F36A4A12B9700C5E59402665&affid=0&bid=1&pid=0&utm_source=0&utm_medium=affiliate&utm_campaign=0&utm_content=1
Cookie: kazumoTrackingId=0ea7d5f3-9334-4a34-820f-ece7b0d568bc; kazumoMedium=eyJyZWZlcnJlckluZm8iOnsib2ZmZXJJZCI6bnVsbCwidGFyZ2V0Q2FtcGFpZ25JZCI6ImRlZmF1bHQiLCJtZXRhZGF0YSI6eyJiYW5uZXJJZCI6IjBfMkRDRjQyMTFGMzZBNEExMkI5NzAwQzVFNTk0MDI2NjUiLCJhZmZJZCI6IjBfMkRDRiJ9fX0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 18 Jan 2023 07:37:34 GMT
content-type: image/svg+xml
cache-control: public, max-age=31536000
last-modified: Fri, 13 Jan 2023 09:46:20 GMT
etag: W/"458-185aa85e5e0"
vary: Accept-Encoding
content-encoding: gzip
x-envoy-upstream-service-time: 2
content-security-policy: frame-ancestors 'self' https://www.casumo.es https://casumo.es https://www.casumo.de https://casumo.de https://*.casumo.com https://www.casumokasino.com https://www.casumocasino.dk https://umo-egb.allianceservices.im https://evo-livecasino.casumo.com https://casumo.evo-games.com https://casumo-es.evo-games.com https://nrgs-b2b.greentube.com https://mobile2.gameassists.co.uk https://casumo-static.casinomodule.com https://casumose-static.casinomodule.com https://casumodk-static.casinomodule.com https://dpovs7i3r9tz1.cloudfront.net https://nyxmaltargs.blueprintgaming.com https://casumo-cw.playngonetwork.com https://adkcw.playngonetwork.com https://d1k6j4zyghhevb.cloudfront.net https://platform.rgsgames.com https://rgs-cust02.lab.wagerworks.com https://casumo-game.thunderkick.com https://lon-portfolio.wimobile.casinarena.com https://staticlive.yggdrasilgaming.com https://clients.casumogames.com https://regily.com https://*.regily.com https://*.contentful.com https://player.eu.regulated.pushgaming.com https://mesh.eu.regulated.pushgaming.com https://www.casumokasino.com https://tegb-edict-nex-umo.allianceservices.im https://uat1-casumo.evolutiongaming.com https://gg-nrgs-b2b-staging.greentube.com https://redirector32.valueactive.eu https://casumo-static-test.casinomodule.com https://casumose-static-test.casinomodule.com https://casumodk-static-test.casinomodule.com https://nyxmaltargspubst.blueprintgaming.com https://nogs-gl-stage.nyxmalta.com https://mltstage.playngonetwork.com https://adkcwstage.playngonetwork.com https://d2drhksbtcqozo.cloudfront.net https://rgs-cust02.lab.wagerworks.com https://ext-qa-gameservice.thunderkick.com https://lon-pt-mob.wi-gameserver.com https://staticstaginguk.yggdrasilgaming.com https://clients.test.casumogames.com http://*.casumotest.local https://regily.com https://*.regily.com https://*.contentful.com https://games.regulated-eu-staging.gsi.io
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 70423
expires: Thu, 18 Jan 2024 07:37:34 GMT
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 78b5aa87e84e0b31-OSL
X-Firefox-Spdy: h2
www.casumo.com/los2assets/ModuleHeaderV2.cd0969857d1e8073c18d.js
200 OK 0 B URL HTTP/2 www.casumo.com/los2assets/ModuleHeaderV2.cd0969857d1e8073c18d.js
IP
GET /los2assets/ModuleHeaderV2.cd0969857d1e8073c18d.js HTTP/1.1
Host: www.casumo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casumo.com/no/?btag=0_2DCF4211F36A4A12B9700C5E59402665&affid=0&bid=1&pid=0&utm_source=0&utm_medium=affiliate&utm_campaign=0&utm_content=1
Cookie: kazumoTrackingId=0ea7d5f3-9334-4a34-820f-ece7b0d568bc; kazumoMedium=eyJyZWZlcnJlckluZm8iOnsib2ZmZXJJZCI6bnVsbCwidGFyZ2V0Q2FtcGFpZ25JZCI6ImRlZmF1bHQiLCJtZXRhZGF0YSI6eyJiYW5uZXJJZCI6IjBfMkRDRjQyMTFGMzZBNEExMkI5NzAwQzVFNTk0MDI2NjUiLCJhZmZJZCI6IjBfMkRDRiJ9fX0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 18 Jan 2023 07:37:34 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Fri, 13 Jan 2023 09:46:20 GMT
etag: W/"1b57-185aa85e5e0"
vary: Accept-Encoding
content-encoding: gzip
x-envoy-upstream-service-time: 2
content-security-policy: frame-ancestors 'self' https://www.casumo.es https://casumo.es https://www.casumo.de https://casumo.de https://*.casumo.com https://www.casumokasino.com https://www.casumocasino.dk https://umo-egb.allianceservices.im https://evo-livecasino.casumo.com https://casumo.evo-games.com https://casumo-es.evo-games.com https://nrgs-b2b.greentube.com https://mobile2.gameassists.co.uk https://casumo-static.casinomodule.com https://casumose-static.casinomodule.com https://casumodk-static.casinomodule.com https://dpovs7i3r9tz1.cloudfront.net https://nyxmaltargs.blueprintgaming.com https://casumo-cw.playngonetwork.com https://adkcw.playngonetwork.com https://d1k6j4zyghhevb.cloudfront.net https://platform.rgsgames.com https://rgs-cust02.lab.wagerworks.com https://casumo-game.thunderkick.com https://lon-portfolio.wimobile.casinarena.com https://staticlive.yggdrasilgaming.com https://clients.casumogames.com https://regily.com https://*.regily.com https://*.contentful.com https://player.eu.regulated.pushgaming.com https://mesh.eu.regulated.pushgaming.com https://www.casumokasino.com https://tegb-edict-nex-umo.allianceservices.im https://uat1-casumo.evolutiongaming.com https://gg-nrgs-b2b-staging.greentube.com https://redirector32.valueactive.eu https://casumo-static-test.casinomodule.com https://casumose-static-test.casinomodule.com https://casumodk-static-test.casinomodule.com https://nyxmaltargspubst.blueprintgaming.com https://nogs-gl-stage.nyxmalta.com https://mltstage.playngonetwork.com https://adkcwstage.playngonetwork.com https://d2drhksbtcqozo.cloudfront.net https://rgs-cust02.lab.wagerworks.com https://ext-qa-gameservice.thunderkick.com https://lon-pt-mob.wi-gameserver.com https://staticstaginguk.yggdrasilgaming.com https://clients.test.casumogames.com http://*.casumotest.local https://regily.com https://*.regily.com https://*.contentful.com https://games.regulated-eu-staging.gsi.io
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 70086
expires: Thu, 18 Jan 2024 07:37:34 GMT
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 78b5aa87e85a0b31-OSL
X-Firefox-Spdy: h2
www.casumo.com/los2assets/LinkTranslated.2da6b24e096a09d31607.js
200 OK 0 B URL HTTP/2 www.casumo.com/los2assets/LinkTranslated.2da6b24e096a09d31607.js
IP
GET /los2assets/LinkTranslated.2da6b24e096a09d31607.js HTTP/1.1
Host: www.casumo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casumo.com/no/?btag=0_2DCF4211F36A4A12B9700C5E59402665&affid=0&bid=1&pid=0&utm_source=0&utm_medium=affiliate&utm_campaign=0&utm_content=1
Cookie: kazumoTrackingId=0ea7d5f3-9334-4a34-820f-ece7b0d568bc; kazumoMedium=eyJyZWZlcnJlckluZm8iOnsib2ZmZXJJZCI6bnVsbCwidGFyZ2V0Q2FtcGFpZ25JZCI6ImRlZmF1bHQiLCJtZXRhZGF0YSI6eyJiYW5uZXJJZCI6IjBfMkRDRjQyMTFGMzZBNEExMkI5NzAwQzVFNTk0MDI2NjUiLCJhZmZJZCI6IjBfMkRDRiJ9fX0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 18 Jan 2023 07:37:34 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Fri, 13 Jan 2023 09:46:20 GMT
etag: W/"1e8e-185aa85e5e0"
vary: Accept-Encoding
content-encoding: gzip
x-envoy-upstream-service-time: 2
content-security-policy: frame-ancestors 'self' https://www.casumo.es https://casumo.es https://www.casumo.de https://casumo.de https://*.casumo.com https://www.casumokasino.com https://www.casumocasino.dk https://umo-egb.allianceservices.im https://evo-livecasino.casumo.com https://casumo.evo-games.com https://casumo-es.evo-games.com https://nrgs-b2b.greentube.com https://mobile2.gameassists.co.uk https://casumo-static.casinomodule.com https://casumose-static.casinomodule.com https://casumodk-static.casinomodule.com https://dpovs7i3r9tz1.cloudfront.net https://nyxmaltargs.blueprintgaming.com https://casumo-cw.playngonetwork.com https://adkcw.playngonetwork.com https://d1k6j4zyghhevb.cloudfront.net https://platform.rgsgames.com https://rgs-cust02.lab.wagerworks.com https://casumo-game.thunderkick.com https://lon-portfolio.wimobile.casinarena.com https://staticlive.yggdrasilgaming.com https://clients.casumogames.com https://regily.com https://*.regily.com https://*.contentful.com https://player.eu.regulated.pushgaming.com https://mesh.eu.regulated.pushgaming.com https://www.casumokasino.com https://tegb-edict-nex-umo.allianceservices.im https://uat1-casumo.evolutiongaming.com https://gg-nrgs-b2b-staging.greentube.com https://redirector32.valueactive.eu https://casumo-static-test.casinomodule.com https://casumose-static-test.casinomodule.com https://casumodk-static-test.casinomodule.com https://nyxmaltargspubst.blueprintgaming.com https://nogs-gl-stage.nyxmalta.com https://mltstage.playngonetwork.com https://adkcwstage.playngonetwork.com https://d2drhksbtcqozo.cloudfront.net https://rgs-cust02.lab.wagerworks.com https://ext-qa-gameservice.thunderkick.com https://lon-pt-mob.wi-gameserver.com https://staticstaginguk.yggdrasilgaming.com https://clients.test.casumogames.com http://*.casumotest.local https://regily.com https://*.regily.com https://*.contentful.com https://games.regulated-eu-staging.gsi.io
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 24218
expires: Thu, 18 Jan 2024 07:37:34 GMT
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 78b5aa87e85b0b31-OSL
X-Firefox-Spdy: h2
www.casumo.com/los2assets/ModuleFeaturedGames.6c49f5d6642aaffa6aff.js
200 OK 0 B URL HTTP/2 www.casumo.com/los2assets/ModuleFeaturedGames.6c49f5d6642aaffa6aff.js
IP
GET /los2assets/ModuleFeaturedGames.6c49f5d6642aaffa6aff.js HTTP/1.1
Host: www.casumo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casumo.com/no/?btag=0_2DCF4211F36A4A12B9700C5E59402665&affid=0&bid=1&pid=0&utm_source=0&utm_medium=affiliate&utm_campaign=0&utm_content=1
Cookie: kazumoTrackingId=0ea7d5f3-9334-4a34-820f-ece7b0d568bc; kazumoMedium=eyJyZWZlcnJlckluZm8iOnsib2ZmZXJJZCI6bnVsbCwidGFyZ2V0Q2FtcGFpZ25JZCI6ImRlZmF1bHQiLCJtZXRhZGF0YSI6eyJiYW5uZXJJZCI6IjBfMkRDRjQyMTFGMzZBNEExMkI5NzAwQzVFNTk0MDI2NjUiLCJhZmZJZCI6IjBfMkRDRiJ9fX0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 18 Jan 2023 07:37:34 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Fri, 13 Jan 2023 09:46:20 GMT
etag: W/"2244-185aa85e5e0"
vary: Accept-Encoding
content-encoding: gzip
x-envoy-upstream-service-time: 2
content-security-policy: frame-ancestors 'self' https://www.casumo.es https://casumo.es https://www.casumo.de https://casumo.de https://*.casumo.com https://www.casumokasino.com https://www.casumocasino.dk https://umo-egb.allianceservices.im https://evo-livecasino.casumo.com https://casumo.evo-games.com https://casumo-es.evo-games.com https://nrgs-b2b.greentube.com https://mobile2.gameassists.co.uk https://casumo-static.casinomodule.com https://casumose-static.casinomodule.com https://casumodk-static.casinomodule.com https://dpovs7i3r9tz1.cloudfront.net https://nyxmaltargs.blueprintgaming.com https://casumo-cw.playngonetwork.com https://adkcw.playngonetwork.com https://d1k6j4zyghhevb.cloudfront.net https://platform.rgsgames.com https://rgs-cust02.lab.wagerworks.com https://casumo-game.thunderkick.com https://lon-portfolio.wimobile.casinarena.com https://staticlive.yggdrasilgaming.com https://clients.casumogames.com https://regily.com https://*.regily.com https://*.contentful.com https://player.eu.regulated.pushgaming.com https://mesh.eu.regulated.pushgaming.com https://www.casumokasino.com https://tegb-edict-nex-umo.allianceservices.im https://uat1-casumo.evolutiongaming.com https://gg-nrgs-b2b-staging.greentube.com https://redirector32.valueactive.eu https://casumo-static-test.casinomodule.com https://casumose-static-test.casinomodule.com https://casumodk-static-test.casinomodule.com https://nyxmaltargspubst.blueprintgaming.com https://nogs-gl-stage.nyxmalta.com https://mltstage.playngonetwork.com https://adkcwstage.playngonetwork.com https://d2drhksbtcqozo.cloudfront.net https://rgs-cust02.lab.wagerworks.com https://ext-qa-gameservice.thunderkick.com https://lon-pt-mob.wi-gameserver.com https://staticstaginguk.yggdrasilgaming.com https://clients.test.casumogames.com http://*.casumotest.local https://regily.com https://*.regily.com https://*.contentful.com https://games.regulated-eu-staging.gsi.io
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 70423
expires: Thu, 18 Jan 2024 07:37:34 GMT
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 78b5aa87f86e0b31-OSL
X-Firefox-Spdy: h2
tr.casumo.com/g/collect?v=2&tid=G-E2CNNK79B7>m=2oe1a1&_p=1589397767&cid=376582927.1674027456&ul=en-us&sr=1280x1024&_fplc=0&_uc=NO&_s=1&dl=https%3A%2F%2Fwww.casumo.com%2Fno%2F%3Fbtag%3D0_2DCF4211F36A4A12B9700C5E59402665%26affid%3D0%26bid%3D1%26pid%3D0%26utm_source%3D0%26utm_medium%3Daffiliate%26utm_campaign%3D0%26utm_content%3D1&sid=1674027456&sct=1&seg=0&dt=Online%20Casino%20%7C%20Casumo%20%7C%20100%20gratisspinn%20og%20opptil%205%20000%20kr%20i%20bonus&en=page_view&_fv=1&_ss=1&epn.event_time=1674027456&ep.event_id=1674027454591_1674028161418_6_pageView&ep.action_source=website&ep.market_corrected=no&ep.location=https%3A%2F%2Fwww.casumo.com%2Fno%2F%3Fbtag%3D0_2DCF4211F36A4A12B9700C5E59402665%26affid%3D0%26bid%3D1%26pid%3D0%26utm_source%3D0%26utm_medium%3Daffiliate%26utm_campaign%3D0%26utm_content%3D1&ep.cookieDomain=auto&ep.Platform_LOS_LIS=LOS&ep.kazumoTrackingId=0ea7d5f3-9334-4a34-820f-ece7b0d568bc&richsstsse
200 OK 0 B URL HTTP/2 tr.casumo.com/g/collect?v=2&tid=G-E2CNNK79B7>m=2oe1a1&_p=1589397767&cid=376582927.1674027456&ul=en-us&sr=1280x1024&_fplc=0&_uc=NO&_s=1&dl=https%3A%2F%2Fwww.casumo.com%2Fno%2F%3Fbtag%3D0_2DCF4211F36A4A12B9700C5E59402665%26affid%3D0%26bid%3D1%26pid%3D0%26utm_source%3D0%26utm_medium%3Daffiliate%26utm_campaign%3D0%26utm_content%3D1&sid=1674027456&sct=1&seg=0&dt=Online%20Casino%20%7C%20Casumo%20%7C%20100%20gratisspinn%20og%20opptil%205%20000%20kr%20i%20bonus&en=page_view&_fv=1&_ss=1&epn.event_time=1674027456&ep.event_id=1674027454591_1674028161418_6_pageView&ep.action_source=website&ep.market_corrected=no&ep.location=https%3A%2F%2Fwww.casumo.com%2Fno%2F%3Fbtag%3D0_2DCF4211F36A4A12B9700C5E59402665%26affid%3D0%26bid%3D1%26pid%3D0%26utm_source%3D0%26utm_medium%3Daffiliate%26utm_campaign%3D0%26utm_content%3D1&ep.cookieDomain=auto&ep.Platform_LOS_LIS=LOS&ep.kazumoTrackingId=0ea7d5f3-9334-4a34-820f-ece7b0d568bc&richsstsse
IP
GET /g/collect?v=2&tid=G-E2CNNK79B7>m=2oe1a1&_p=1589397767&cid=376582927.1674027456&ul=en-us&sr=1280x1024&_fplc=0&_uc=NO&_s=1&dl=https%3A%2F%2Fwww.casumo.com%2Fno%2F%3Fbtag%3D0_2DCF4211F36A4A12B9700C5E59402665%26affid%3D0%26bid%3D1%26pid%3D0%26utm_source%3D0%26utm_medium%3Daffiliate%26utm_campaign%3D0%26utm_content%3D1&sid=1674027456&sct=1&seg=0&dt=Online%20Casino%20%7C%20Casumo%20%7C%20100%20gratisspinn%20og%20opptil%205%20000%20kr%20i%20bonus&en=page_view&_fv=1&_ss=1&epn.event_time=1674027456&ep.event_id=1674027454591_1674028161418_6_pageView&ep.action_source=website&ep.market_corrected=no&ep.location=https%3A%2F%2Fwww.casumo.com%2Fno%2F%3Fbtag%3D0_2DCF4211F36A4A12B9700C5E59402665%26affid%3D0%26bid%3D1%26pid%3D0%26utm_source%3D0%26utm_medium%3Daffiliate%26utm_campaign%3D0%26utm_content%3D1&ep.cookieDomain=auto&ep.Platform_LOS_LIS=LOS&ep.kazumoTrackingId=0ea7d5f3-9334-4a34-820f-ece7b0d568bc&richsstsse HTTP/1.1
Host: tr.casumo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.casumo.com
Connection: keep-alive
Referer: https://www.casumo.com/
Cookie: _ga=GA1.1.376582927.1674027456; _gid=GA1.2.689842286.1674027456; _gcl_au=1.1.1092196729.1674027456; _cq_duid=1.1674027456.Z6Ydiw6d3ZynWjC5; _cq_suid=1.1674027456.2S4VJFdD9IolrWq8; _scid=b247ea0f-2c8f-4585-8062-b7b7be60452a; _ga_E2CNNK79B7=GS1.1.1674027456.1.0.1674027456.0.0.0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Wed, 18 Jan 2023 07:37:36 GMT
content-type: text/plain
vary: Accept-Encoding
set-cookie: FPLC=1iiDLaDbOIJcD3W1qGxMsC9X7gupDPhSwGTVMaQPkb02X%2FVvW5vdXtsnZ52CPQKQ4LfZYDMriICAaJMZzejyuZisJ0K7hy5qXJSrhsRm5jAUcammEKQmWYL%2Fpf1cXQ%3D%3D; Max-Age=72000; Domain=casumo.com; Path=/; Secure
FPID=FPID2.2.iob%2BOPLpwWikg%2FPjsEZPHS2A%2FhKWu2lM6SS2r0fi5yY%3D.1674027456; Max-Age=63072000; Domain=casumo.com; Path=/; Secure; HttpOnly
cache-control: no-cache
x-content-type-options: nosniff
access-control-allow-origin: https://www.casumo.com
access-control-allow-credentials: true
content-encoding: gzip
via: 1.1 google
X-Firefox-Spdy: h2
www.casumo.com/no/?btag=0_2DCF4211F36A4A12B9700C5E59402665&affid=0&bid=1&pid=0&utm_source=0&utm_medium=affiliate&utm_campaign=0&utm_content=1
200 OK 0 B URL HTTP/2 www.casumo.com/no/?btag=0_2DCF4211F36A4A12B9700C5E59402665&affid=0&bid=1&pid=0&utm_source=0&utm_medium=affiliate&utm_campaign=0&utm_content=1
IP
GET /no/?btag=0_2DCF4211F36A4A12B9700C5E59402665&affid=0&bid=1&pid=0&utm_source=0&utm_medium=affiliate&utm_campaign=0&utm_content=1 HTTP/1.1
Host: www.casumo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 200 OK
date: Wed, 18 Jan 2023 07:37:34 GMT
content-type: text/html; charset=utf-8
cf-ray: 78b5aa86cf4c0b31-OSL
age: 2169
cache-control: no-cache, no-store, must-revalidate, max-age=0, smax-age=0
content-encoding: gzip
etag: W/"6b428-BwaAgsv8wnT7wmP3zUR0m7NcIik"
expires: Sun, 23 Jul 2023 07:37:34 GMT
strict-transport-security: max-age=15552000
vary: Accept-Encoding
cf-cache-status: HIT
content-security-policy: frame-ancestors 'self' https://www.casumo.es https://casumo.es https://www.casumo.de https://casumo.de https://*.casumo.com https://www.casumokasino.com https://www.casumocasino.dk https://umo-egb.allianceservices.im https://evo-livecasino.casumo.com https://casumo.evo-games.com https://casumo-es.evo-games.com https://nrgs-b2b.greentube.com https://mobile2.gameassists.co.uk https://casumo-static.casinomodule.com https://casumose-static.casinomodule.com https://casumodk-static.casinomodule.com https://dpovs7i3r9tz1.cloudfront.net https://nyxmaltargs.blueprintgaming.com https://casumo-cw.playngonetwork.com https://adkcw.playngonetwork.com https://d1k6j4zyghhevb.cloudfront.net https://platform.rgsgames.com https://rgs-cust02.lab.wagerworks.com https://casumo-game.thunderkick.com https://lon-portfolio.wimobile.casinarena.com https://staticlive.yggdrasilgaming.com https://clients.casumogames.com https://regily.com https://*.regily.com https://*.contentful.com https://player.eu.regulated.pushgaming.com https://mesh.eu.regulated.pushgaming.com https://www.casumokasino.com https://tegb-edict-nex-umo.allianceservices.im https://uat1-casumo.evolutiongaming.com https://gg-nrgs-b2b-staging.greentube.com https://redirector32.valueactive.eu https://casumo-static-test.casinomodule.com https://casumose-static-test.casinomodule.com https://casumodk-static-test.casinomodule.com https://nyxmaltargspubst.blueprintgaming.com https://nogs-gl-stage.nyxmalta.com https://mltstage.playngonetwork.com https://adkcwstage.playngonetwork.com https://d2drhksbtcqozo.cloudfront.net https://rgs-cust02.lab.wagerworks.com https://ext-qa-gameservice.thunderkick.com https://lon-pt-mob.wi-gameserver.com https://staticstaginguk.yggdrasilgaming.com https://clients.test.casumogames.com http://*.casumotest.local https://regily.com https://*.regily.com https://*.contentful.com https://games.regulated-eu-staging.gsi.io
set-cookie: kazumoTrackingId=0ea7d5f3-9334-4a34-820f-ece7b0d568bc; Path=/; Expires=Sat, 15 Jan 2033 07:37:34 GMT; Secure; SameSite=None
kazumoMedium=eyJyZWZlcnJlckluZm8iOnsib2ZmZXJJZCI6bnVsbCwidGFyZ2V0Q2FtcGFpZ25JZCI6ImRlZmF1bHQiLCJtZXRhZGF0YSI6eyJiYW5uZXJJZCI6IjBfMkRDRjQyMTFGMzZBNEExMkI5NzAwQzVFNTk0MDI2NjUiLCJhZmZJZCI6IjBfMkRDRiJ9fX0%3D; Path=/; Expires=Fri, 17 Feb 2023 07:37:34 GMT; Secure; SameSite=None
x-content-type-options: nosniff
x-envoy-decorator-operation: logged-out-state-2.service.svc.cluster.local:8080/*
x-envoy-upstream-service-time: 543
x-xss-protection: 1; mode=block
server: cloudflare
X-Firefox-Spdy: h2
www.casumo.com/los2assets/ModuleLiveCasino.6bd3c722a9a73a379327.js
200 OK 0 B URL HTTP/2 www.casumo.com/los2assets/ModuleLiveCasino.6bd3c722a9a73a379327.js
IP
GET /los2assets/ModuleLiveCasino.6bd3c722a9a73a379327.js HTTP/1.1
Host: www.casumo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casumo.com/no/?btag=0_2DCF4211F36A4A12B9700C5E59402665&affid=0&bid=1&pid=0&utm_source=0&utm_medium=affiliate&utm_campaign=0&utm_content=1
Cookie: kazumoTrackingId=0ea7d5f3-9334-4a34-820f-ece7b0d568bc; kazumoMedium=eyJyZWZlcnJlckluZm8iOnsib2ZmZXJJZCI6bnVsbCwidGFyZ2V0Q2FtcGFpZ25JZCI6ImRlZmF1bHQiLCJtZXRhZGF0YSI6eyJiYW5uZXJJZCI6IjBfMkRDRjQyMTFGMzZBNEExMkI5NzAwQzVFNTk0MDI2NjUiLCJhZmZJZCI6IjBfMkRDRiJ9fX0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 18 Jan 2023 07:37:34 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Fri, 13 Jan 2023 09:46:20 GMT
etag: W/"ebb-185aa85e5e0"
vary: Accept-Encoding
content-encoding: gzip
x-envoy-upstream-service-time: 2
content-security-policy: frame-ancestors 'self' https://www.casumo.es https://casumo.es https://www.casumo.de https://casumo.de https://*.casumo.com https://www.casumokasino.com https://www.casumocasino.dk https://umo-egb.allianceservices.im https://evo-livecasino.casumo.com https://casumo.evo-games.com https://casumo-es.evo-games.com https://nrgs-b2b.greentube.com https://mobile2.gameassists.co.uk https://casumo-static.casinomodule.com https://casumose-static.casinomodule.com https://casumodk-static.casinomodule.com https://dpovs7i3r9tz1.cloudfront.net https://nyxmaltargs.blueprintgaming.com https://casumo-cw.playngonetwork.com https://adkcw.playngonetwork.com https://d1k6j4zyghhevb.cloudfront.net https://platform.rgsgames.com https://rgs-cust02.lab.wagerworks.com https://casumo-game.thunderkick.com https://lon-portfolio.wimobile.casinarena.com https://staticlive.yggdrasilgaming.com https://clients.casumogames.com https://regily.com https://*.regily.com https://*.contentful.com https://player.eu.regulated.pushgaming.com https://mesh.eu.regulated.pushgaming.com https://www.casumokasino.com https://tegb-edict-nex-umo.allianceservices.im https://uat1-casumo.evolutiongaming.com https://gg-nrgs-b2b-staging.greentube.com https://redirector32.valueactive.eu https://casumo-static-test.casinomodule.com https://casumose-static-test.casinomodule.com https://casumodk-static-test.casinomodule.com https://nyxmaltargspubst.blueprintgaming.com https://nogs-gl-stage.nyxmalta.com https://mltstage.playngonetwork.com https://adkcwstage.playngonetwork.com https://d2drhksbtcqozo.cloudfront.net https://rgs-cust02.lab.wagerworks.com https://ext-qa-gameservice.thunderkick.com https://lon-pt-mob.wi-gameserver.com https://staticstaginguk.yggdrasilgaming.com https://clients.test.casumogames.com http://*.casumotest.local https://regily.com https://*.regily.com https://*.contentful.com https://games.regulated-eu-staging.gsi.io
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 70423
expires: Thu, 18 Jan 2024 07:37:34 GMT
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 78b5aa88087a0b31-OSL
X-Firefox-Spdy: h2
www.casumo.com/los2assets/ImageLazy.2253ff14346f84e6e992.js
200 OK 0 B URL HTTP/2 www.casumo.com/los2assets/ImageLazy.2253ff14346f84e6e992.js
IP
GET /los2assets/ImageLazy.2253ff14346f84e6e992.js HTTP/1.1
Host: www.casumo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casumo.com/no/?btag=0_2DCF4211F36A4A12B9700C5E59402665&affid=0&bid=1&pid=0&utm_source=0&utm_medium=affiliate&utm_campaign=0&utm_content=1
Cookie: kazumoTrackingId=0ea7d5f3-9334-4a34-820f-ece7b0d568bc; kazumoMedium=eyJyZWZlcnJlckluZm8iOnsib2ZmZXJJZCI6bnVsbCwidGFyZ2V0Q2FtcGFpZ25JZCI6ImRlZmF1bHQiLCJtZXRhZGF0YSI6eyJiYW5uZXJJZCI6IjBfMkRDRjQyMTFGMzZBNEExMkI5NzAwQzVFNTk0MDI2NjUiLCJhZmZJZCI6IjBfMkRDRiJ9fX0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 18 Jan 2023 07:37:34 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Fri, 13 Jan 2023 09:46:20 GMT
etag: W/"1d32-185aa85e5e0"
vary: Accept-Encoding
content-encoding: gzip
x-envoy-upstream-service-time: 2
content-security-policy: frame-ancestors 'self' https://www.casumo.es https://casumo.es https://www.casumo.de https://casumo.de https://*.casumo.com https://www.casumokasino.com https://www.casumocasino.dk https://umo-egb.allianceservices.im https://evo-livecasino.casumo.com https://casumo.evo-games.com https://casumo-es.evo-games.com https://nrgs-b2b.greentube.com https://mobile2.gameassists.co.uk https://casumo-static.casinomodule.com https://casumose-static.casinomodule.com https://casumodk-static.casinomodule.com https://dpovs7i3r9tz1.cloudfront.net https://nyxmaltargs.blueprintgaming.com https://casumo-cw.playngonetwork.com https://adkcw.playngonetwork.com https://d1k6j4zyghhevb.cloudfront.net https://platform.rgsgames.com https://rgs-cust02.lab.wagerworks.com https://casumo-game.thunderkick.com https://lon-portfolio.wimobile.casinarena.com https://staticlive.yggdrasilgaming.com https://clients.casumogames.com https://regily.com https://*.regily.com https://*.contentful.com https://player.eu.regulated.pushgaming.com https://mesh.eu.regulated.pushgaming.com https://www.casumokasino.com https://tegb-edict-nex-umo.allianceservices.im https://uat1-casumo.evolutiongaming.com https://gg-nrgs-b2b-staging.greentube.com https://redirector32.valueactive.eu https://casumo-static-test.casinomodule.com https://casumose-static-test.casinomodule.com https://casumodk-static-test.casinomodule.com https://nyxmaltargspubst.blueprintgaming.com https://nogs-gl-stage.nyxmalta.com https://mltstage.playngonetwork.com https://adkcwstage.playngonetwork.com https://d2drhksbtcqozo.cloudfront.net https://rgs-cust02.lab.wagerworks.com https://ext-qa-gameservice.thunderkick.com https://lon-pt-mob.wi-gameserver.com https://staticstaginguk.yggdrasilgaming.com https://clients.test.casumogames.com http://*.casumotest.local https://regily.com https://*.regily.com https://*.contentful.com https://games.regulated-eu-staging.gsi.io
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 70423
expires: Thu, 18 Jan 2024 07:37:34 GMT
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 78b5aa87f8650b31-OSL
X-Firefox-Spdy: h2
www.casumo.com/los2assets/ModuleTickerTapeV2.867721aa9b792f0c0c80.js
200 OK 0 B URL HTTP/2 www.casumo.com/los2assets/ModuleTickerTapeV2.867721aa9b792f0c0c80.js
IP
GET /los2assets/ModuleTickerTapeV2.867721aa9b792f0c0c80.js HTTP/1.1
Host: www.casumo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casumo.com/no/?btag=0_2DCF4211F36A4A12B9700C5E59402665&affid=0&bid=1&pid=0&utm_source=0&utm_medium=affiliate&utm_campaign=0&utm_content=1
Cookie: kazumoTrackingId=0ea7d5f3-9334-4a34-820f-ece7b0d568bc; kazumoMedium=eyJyZWZlcnJlckluZm8iOnsib2ZmZXJJZCI6bnVsbCwidGFyZ2V0Q2FtcGFpZ25JZCI6ImRlZmF1bHQiLCJtZXRhZGF0YSI6eyJiYW5uZXJJZCI6IjBfMkRDRjQyMTFGMzZBNEExMkI5NzAwQzVFNTk0MDI2NjUiLCJhZmZJZCI6IjBfMkRDRiJ9fX0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 18 Jan 2023 07:37:34 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Fri, 13 Jan 2023 09:46:20 GMT
etag: W/"d16-185aa85e5e0"
vary: Accept-Encoding
content-encoding: gzip
x-envoy-upstream-service-time: 3
content-security-policy: frame-ancestors 'self' https://www.casumo.es https://casumo.es https://www.casumo.de https://casumo.de https://*.casumo.com https://www.casumokasino.com https://www.casumocasino.dk https://umo-egb.allianceservices.im https://evo-livecasino.casumo.com https://casumo.evo-games.com https://casumo-es.evo-games.com https://nrgs-b2b.greentube.com https://mobile2.gameassists.co.uk https://casumo-static.casinomodule.com https://casumose-static.casinomodule.com https://casumodk-static.casinomodule.com https://dpovs7i3r9tz1.cloudfront.net https://nyxmaltargs.blueprintgaming.com https://casumo-cw.playngonetwork.com https://adkcw.playngonetwork.com https://d1k6j4zyghhevb.cloudfront.net https://platform.rgsgames.com https://rgs-cust02.lab.wagerworks.com https://casumo-game.thunderkick.com https://lon-portfolio.wimobile.casinarena.com https://staticlive.yggdrasilgaming.com https://clients.casumogames.com https://regily.com https://*.regily.com https://*.contentful.com https://player.eu.regulated.pushgaming.com https://mesh.eu.regulated.pushgaming.com https://www.casumokasino.com https://tegb-edict-nex-umo.allianceservices.im https://uat1-casumo.evolutiongaming.com https://gg-nrgs-b2b-staging.greentube.com https://redirector32.valueactive.eu https://casumo-static-test.casinomodule.com https://casumose-static-test.casinomodule.com https://casumodk-static-test.casinomodule.com https://nyxmaltargspubst.blueprintgaming.com https://nogs-gl-stage.nyxmalta.com https://mltstage.playngonetwork.com https://adkcwstage.playngonetwork.com https://d2drhksbtcqozo.cloudfront.net https://rgs-cust02.lab.wagerworks.com https://ext-qa-gameservice.thunderkick.com https://lon-pt-mob.wi-gameserver.com https://staticstaginguk.yggdrasilgaming.com https://clients.test.casumogames.com http://*.casumotest.local https://regily.com https://*.regily.com https://*.contentful.com https://games.regulated-eu-staging.gsi.io
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 70423
expires: Thu, 18 Jan 2024 07:37:34 GMT
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 78b5aa87f8690b31-OSL
X-Firefox-Spdy: h2
www.casumo.com/los2assets/ModuleReelRaces.4e6546e0079c5a100afa.js
200 OK 0 B URL HTTP/2 www.casumo.com/los2assets/ModuleReelRaces.4e6546e0079c5a100afa.js
IP
GET /los2assets/ModuleReelRaces.4e6546e0079c5a100afa.js HTTP/1.1
Host: www.casumo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casumo.com/no/?btag=0_2DCF4211F36A4A12B9700C5E59402665&affid=0&bid=1&pid=0&utm_source=0&utm_medium=affiliate&utm_campaign=0&utm_content=1
Cookie: kazumoTrackingId=0ea7d5f3-9334-4a34-820f-ece7b0d568bc; kazumoMedium=eyJyZWZlcnJlckluZm8iOnsib2ZmZXJJZCI6bnVsbCwidGFyZ2V0Q2FtcGFpZ25JZCI6ImRlZmF1bHQiLCJtZXRhZGF0YSI6eyJiYW5uZXJJZCI6IjBfMkRDRjQyMTFGMzZBNEExMkI5NzAwQzVFNTk0MDI2NjUiLCJhZmZJZCI6IjBfMkRDRiJ9fX0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 18 Jan 2023 07:37:34 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Fri, 13 Jan 2023 09:46:20 GMT
etag: W/"107e-185aa85e5e0"
vary: Accept-Encoding
content-encoding: gzip
x-envoy-upstream-service-time: 2
content-security-policy: frame-ancestors 'self' https://www.casumo.es https://casumo.es https://www.casumo.de https://casumo.de https://*.casumo.com https://www.casumokasino.com https://www.casumocasino.dk https://umo-egb.allianceservices.im https://evo-livecasino.casumo.com https://casumo.evo-games.com https://casumo-es.evo-games.com https://nrgs-b2b.greentube.com https://mobile2.gameassists.co.uk https://casumo-static.casinomodule.com https://casumose-static.casinomodule.com https://casumodk-static.casinomodule.com https://dpovs7i3r9tz1.cloudfront.net https://nyxmaltargs.blueprintgaming.com https://casumo-cw.playngonetwork.com https://adkcw.playngonetwork.com https://d1k6j4zyghhevb.cloudfront.net https://platform.rgsgames.com https://rgs-cust02.lab.wagerworks.com https://casumo-game.thunderkick.com https://lon-portfolio.wimobile.casinarena.com https://staticlive.yggdrasilgaming.com https://clients.casumogames.com https://regily.com https://*.regily.com https://*.contentful.com https://player.eu.regulated.pushgaming.com https://mesh.eu.regulated.pushgaming.com https://www.casumokasino.com https://tegb-edict-nex-umo.allianceservices.im https://uat1-casumo.evolutiongaming.com https://gg-nrgs-b2b-staging.greentube.com https://redirector32.valueactive.eu https://casumo-static-test.casinomodule.com https://casumose-static-test.casinomodule.com https://casumodk-static-test.casinomodule.com https://nyxmaltargspubst.blueprintgaming.com https://nogs-gl-stage.nyxmalta.com https://mltstage.playngonetwork.com https://adkcwstage.playngonetwork.com https://d2drhksbtcqozo.cloudfront.net https://rgs-cust02.lab.wagerworks.com https://ext-qa-gameservice.thunderkick.com https://lon-pt-mob.wi-gameserver.com https://staticstaginguk.yggdrasilgaming.com https://clients.test.casumogames.com http://*.casumotest.local https://regily.com https://*.regily.com https://*.contentful.com https://games.regulated-eu-staging.gsi.io
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 70423
expires: Thu, 18 Jan 2024 07:37:34 GMT
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 78b5aa8808850b31-OSL
X-Firefox-Spdy: h2
www.casumo.com/los2assets/ModuleSplash.0919583bc668d34424ae.js
200 OK 0 B URL HTTP/2 www.casumo.com/los2assets/ModuleSplash.0919583bc668d34424ae.js
IP
GET /los2assets/ModuleSplash.0919583bc668d34424ae.js HTTP/1.1
Host: www.casumo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casumo.com/no/?btag=0_2DCF4211F36A4A12B9700C5E59402665&affid=0&bid=1&pid=0&utm_source=0&utm_medium=affiliate&utm_campaign=0&utm_content=1
Cookie: kazumoTrackingId=0ea7d5f3-9334-4a34-820f-ece7b0d568bc; kazumoMedium=eyJyZWZlcnJlckluZm8iOnsib2ZmZXJJZCI6bnVsbCwidGFyZ2V0Q2FtcGFpZ25JZCI6ImRlZmF1bHQiLCJtZXRhZGF0YSI6eyJiYW5uZXJJZCI6IjBfMkRDRjQyMTFGMzZBNEExMkI5NzAwQzVFNTk0MDI2NjUiLCJhZmZJZCI6IjBfMkRDRiJ9fX0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 18 Jan 2023 07:37:34 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Fri, 13 Jan 2023 09:46:20 GMT
etag: W/"3be4-185aa85e5e0"
vary: Accept-Encoding
content-encoding: gzip
x-envoy-upstream-service-time: 5
x-envoy-decorator-operation: logged-out-state-2.service.svc.cluster.local:8080/*
content-security-policy: frame-ancestors 'self' https://www.casumo.es https://casumo.es https://www.casumo.de https://casumo.de https://*.casumo.com https://www.casumokasino.com https://www.casumocasino.dk https://umo-egb.allianceservices.im https://evo-livecasino.casumo.com https://casumo.evo-games.com https://casumo-es.evo-games.com https://nrgs-b2b.greentube.com https://mobile2.gameassists.co.uk https://casumo-static.casinomodule.com https://casumose-static.casinomodule.com https://casumodk-static.casinomodule.com https://dpovs7i3r9tz1.cloudfront.net https://nyxmaltargs.blueprintgaming.com https://casumo-cw.playngonetwork.com https://adkcw.playngonetwork.com https://d1k6j4zyghhevb.cloudfront.net https://platform.rgsgames.com https://rgs-cust02.lab.wagerworks.com https://casumo-game.thunderkick.com https://lon-portfolio.wimobile.casinarena.com https://staticlive.yggdrasilgaming.com https://clients.casumogames.com https://regily.com https://*.regily.com https://*.contentful.com https://player.eu.regulated.pushgaming.com https://mesh.eu.regulated.pushgaming.com https://www.casumokasino.com https://tegb-edict-nex-umo.allianceservices.im https://uat1-casumo.evolutiongaming.com https://gg-nrgs-b2b-staging.greentube.com https://redirector32.valueactive.eu https://casumo-static-test.casinomodule.com https://casumose-static-test.casinomodule.com https://casumodk-static-test.casinomodule.com https://nyxmaltargspubst.blueprintgaming.com https://nogs-gl-stage.nyxmalta.com https://mltstage.playngonetwork.com https://adkcwstage.playngonetwork.com https://d2drhksbtcqozo.cloudfront.net https://rgs-cust02.lab.wagerworks.com https://ext-qa-gameservice.thunderkick.com https://lon-pt-mob.wi-gameserver.com https://staticstaginguk.yggdrasilgaming.com https://clients.test.casumogames.com http://*.casumotest.local https://regily.com https://*.regily.com https://*.contentful.com https://games.regulated-eu-staging.gsi.io
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 24218
expires: Thu, 18 Jan 2024 07:37:34 GMT
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 78b5aa8808820b31-OSL
X-Firefox-Spdy: h2
www.casumo.com/los2assets/ModuleSportsAnnouncement.606ee9e9b9d4c747b167.js
200 OK 0 B URL HTTP/2 www.casumo.com/los2assets/ModuleSportsAnnouncement.606ee9e9b9d4c747b167.js
IP
GET /los2assets/ModuleSportsAnnouncement.606ee9e9b9d4c747b167.js HTTP/1.1
Host: www.casumo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casumo.com/no/?btag=0_2DCF4211F36A4A12B9700C5E59402665&affid=0&bid=1&pid=0&utm_source=0&utm_medium=affiliate&utm_campaign=0&utm_content=1
Cookie: kazumoTrackingId=0ea7d5f3-9334-4a34-820f-ece7b0d568bc; kazumoMedium=eyJyZWZlcnJlckluZm8iOnsib2ZmZXJJZCI6bnVsbCwidGFyZ2V0Q2FtcGFpZ25JZCI6ImRlZmF1bHQiLCJtZXRhZGF0YSI6eyJiYW5uZXJJZCI6IjBfMkRDRjQyMTFGMzZBNEExMkI5NzAwQzVFNTk0MDI2NjUiLCJhZmZJZCI6IjBfMkRDRiJ9fX0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 18 Jan 2023 07:37:34 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Fri, 13 Jan 2023 09:46:20 GMT
etag: W/"95e-185aa85e5e0"
vary: Accept-Encoding
content-encoding: gzip
x-envoy-upstream-service-time: 7
content-security-policy: frame-ancestors 'self' https://www.casumo.es https://casumo.es https://www.casumo.de https://casumo.de https://*.casumo.com https://www.casumokasino.com https://www.casumocasino.dk https://umo-egb.allianceservices.im https://evo-livecasino.casumo.com https://casumo.evo-games.com https://casumo-es.evo-games.com https://nrgs-b2b.greentube.com https://mobile2.gameassists.co.uk https://casumo-static.casinomodule.com https://casumose-static.casinomodule.com https://casumodk-static.casinomodule.com https://dpovs7i3r9tz1.cloudfront.net https://nyxmaltargs.blueprintgaming.com https://casumo-cw.playngonetwork.com https://adkcw.playngonetwork.com https://d1k6j4zyghhevb.cloudfront.net https://platform.rgsgames.com https://rgs-cust02.lab.wagerworks.com https://casumo-game.thunderkick.com https://lon-portfolio.wimobile.casinarena.com https://staticlive.yggdrasilgaming.com https://clients.casumogames.com https://regily.com https://*.regily.com https://*.contentful.com https://player.eu.regulated.pushgaming.com https://mesh.eu.regulated.pushgaming.com https://www.casumokasino.com https://tegb-edict-nex-umo.allianceservices.im https://uat1-casumo.evolutiongaming.com https://gg-nrgs-b2b-staging.greentube.com https://redirector32.valueactive.eu https://casumo-static-test.casinomodule.com https://casumose-static-test.casinomodule.com https://casumodk-static-test.casinomodule.com https://nyxmaltargspubst.blueprintgaming.com https://nogs-gl-stage.nyxmalta.com https://mltstage.playngonetwork.com https://adkcwstage.playngonetwork.com https://d2drhksbtcqozo.cloudfront.net https://rgs-cust02.lab.wagerworks.com https://ext-qa-gameservice.thunderkick.com https://lon-pt-mob.wi-gameserver.com https://staticstaginguk.yggdrasilgaming.com https://clients.test.casumogames.com http://*.casumotest.local https://regily.com https://*.regily.com https://*.contentful.com https://games.regulated-eu-staging.gsi.io
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 70423
expires: Thu, 18 Jan 2024 07:37:34 GMT
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 78b5aa8808790b31-OSL
X-Firefox-Spdy: h2
www.casumo.com/los2assets/ModuleScrollableTerms.2918f339697642ed6eea.js
200 OK 0 B URL HTTP/2 www.casumo.com/los2assets/ModuleScrollableTerms.2918f339697642ed6eea.js
IP
GET /los2assets/ModuleScrollableTerms.2918f339697642ed6eea.js HTTP/1.1
Host: www.casumo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casumo.com/no/?btag=0_2DCF4211F36A4A12B9700C5E59402665&affid=0&bid=1&pid=0&utm_source=0&utm_medium=affiliate&utm_campaign=0&utm_content=1
Cookie: kazumoTrackingId=0ea7d5f3-9334-4a34-820f-ece7b0d568bc; kazumoMedium=eyJyZWZlcnJlckluZm8iOnsib2ZmZXJJZCI6bnVsbCwidGFyZ2V0Q2FtcGFpZ25JZCI6ImRlZmF1bHQiLCJtZXRhZGF0YSI6eyJiYW5uZXJJZCI6IjBfMkRDRjQyMTFGMzZBNEExMkI5NzAwQzVFNTk0MDI2NjUiLCJhZmZJZCI6IjBfMkRDRiJ9fX0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 18 Jan 2023 07:37:34 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Fri, 13 Jan 2023 09:46:20 GMT
etag: W/"1b84-185aa85e5e0"
vary: Accept-Encoding
content-encoding: gzip
x-envoy-upstream-service-time: 2
content-security-policy: frame-ancestors 'self' https://www.casumo.es https://casumo.es https://www.casumo.de https://casumo.de https://*.casumo.com https://www.casumokasino.com https://www.casumocasino.dk https://umo-egb.allianceservices.im https://evo-livecasino.casumo.com https://casumo.evo-games.com https://casumo-es.evo-games.com https://nrgs-b2b.greentube.com https://mobile2.gameassists.co.uk https://casumo-static.casinomodule.com https://casumose-static.casinomodule.com https://casumodk-static.casinomodule.com https://dpovs7i3r9tz1.cloudfront.net https://nyxmaltargs.blueprintgaming.com https://casumo-cw.playngonetwork.com https://adkcw.playngonetwork.com https://d1k6j4zyghhevb.cloudfront.net https://platform.rgsgames.com https://rgs-cust02.lab.wagerworks.com https://casumo-game.thunderkick.com https://lon-portfolio.wimobile.casinarena.com https://staticlive.yggdrasilgaming.com https://clients.casumogames.com https://regily.com https://*.regily.com https://*.contentful.com https://player.eu.regulated.pushgaming.com https://mesh.eu.regulated.pushgaming.com https://www.casumokasino.com https://tegb-edict-nex-umo.allianceservices.im https://uat1-casumo.evolutiongaming.com https://gg-nrgs-b2b-staging.greentube.com https://redirector32.valueactive.eu https://casumo-static-test.casinomodule.com https://casumose-static-test.casinomodule.com https://casumodk-static-test.casinomodule.com https://nyxmaltargspubst.blueprintgaming.com https://nogs-gl-stage.nyxmalta.com https://mltstage.playngonetwork.com https://adkcwstage.playngonetwork.com https://d2drhksbtcqozo.cloudfront.net https://rgs-cust02.lab.wagerworks.com https://ext-qa-gameservice.thunderkick.com https://lon-pt-mob.wi-gameserver.com https://staticstaginguk.yggdrasilgaming.com https://clients.test.casumogames.com http://*.casumotest.local https://regily.com https://*.regily.com https://*.contentful.com https://games.regulated-eu-staging.gsi.io
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 70362
expires: Thu, 18 Jan 2024 07:37:34 GMT
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 78b5aa8808870b31-OSL
X-Firefox-Spdy: h2
www.casumo.com/los2assets/casumo.1ac95f2fdb47ec86120f.js
200 OK 0 B URL HTTP/2 www.casumo.com/los2assets/casumo.1ac95f2fdb47ec86120f.js
IP
GET /los2assets/casumo.1ac95f2fdb47ec86120f.js HTTP/1.1
Host: www.casumo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casumo.com/no/?btag=0_2DCF4211F36A4A12B9700C5E59402665&affid=0&bid=1&pid=0&utm_source=0&utm_medium=affiliate&utm_campaign=0&utm_content=1
Cookie: kazumoTrackingId=0ea7d5f3-9334-4a34-820f-ece7b0d568bc; kazumoMedium=eyJyZWZlcnJlckluZm8iOnsib2ZmZXJJZCI6bnVsbCwidGFyZ2V0Q2FtcGFpZ25JZCI6ImRlZmF1bHQiLCJtZXRhZGF0YSI6eyJiYW5uZXJJZCI6IjBfMkRDRjQyMTFGMzZBNEExMkI5NzAwQzVFNTk0MDI2NjUiLCJhZmZJZCI6IjBfMkRDRiJ9fX0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 18 Jan 2023 07:37:34 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Fri, 13 Jan 2023 09:46:20 GMT
etag: W/"d958e-185aa85e5e0"
vary: Accept-Encoding
content-encoding: gzip
x-envoy-upstream-service-time: 3
content-security-policy: frame-ancestors 'self' https://www.casumo.es https://casumo.es https://www.casumo.de https://casumo.de https://*.casumo.com https://www.casumokasino.com https://www.casumocasino.dk https://umo-egb.allianceservices.im https://evo-livecasino.casumo.com https://casumo.evo-games.com https://casumo-es.evo-games.com https://nrgs-b2b.greentube.com https://mobile2.gameassists.co.uk https://casumo-static.casinomodule.com https://casumose-static.casinomodule.com https://casumodk-static.casinomodule.com https://dpovs7i3r9tz1.cloudfront.net https://nyxmaltargs.blueprintgaming.com https://casumo-cw.playngonetwork.com https://adkcw.playngonetwork.com https://d1k6j4zyghhevb.cloudfront.net https://platform.rgsgames.com https://rgs-cust02.lab.wagerworks.com https://casumo-game.thunderkick.com https://lon-portfolio.wimobile.casinarena.com https://staticlive.yggdrasilgaming.com https://clients.casumogames.com https://regily.com https://*.regily.com https://*.contentful.com https://player.eu.regulated.pushgaming.com https://mesh.eu.regulated.pushgaming.com https://www.casumokasino.com https://tegb-edict-nex-umo.allianceservices.im https://uat1-casumo.evolutiongaming.com https://gg-nrgs-b2b-staging.greentube.com https://redirector32.valueactive.eu https://casumo-static-test.casinomodule.com https://casumose-static-test.casinomodule.com https://casumodk-static-test.casinomodule.com https://nyxmaltargspubst.blueprintgaming.com https://nogs-gl-stage.nyxmalta.com https://mltstage.playngonetwork.com https://adkcwstage.playngonetwork.com https://d2drhksbtcqozo.cloudfront.net https://rgs-cust02.lab.wagerworks.com https://ext-qa-gameservice.thunderkick.com https://lon-pt-mob.wi-gameserver.com https://staticstaginguk.yggdrasilgaming.com https://clients.test.casumogames.com http://*.casumotest.local https://regily.com https://*.regily.com https://*.contentful.com https://games.regulated-eu-staging.gsi.io
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 70423
expires: Thu, 18 Jan 2024 07:37:34 GMT
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 78b5aa87e8520b31-OSL
X-Firefox-Spdy: h2
www.casumo.com/los2assets/ModuleGlobalMenu.0b877147fcf9c3f44703.js
200 OK 0 B URL HTTP/2 www.casumo.com/los2assets/ModuleGlobalMenu.0b877147fcf9c3f44703.js
IP
GET /los2assets/ModuleGlobalMenu.0b877147fcf9c3f44703.js HTTP/1.1
Host: www.casumo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casumo.com/no/?btag=0_2DCF4211F36A4A12B9700C5E59402665&affid=0&bid=1&pid=0&utm_source=0&utm_medium=affiliate&utm_campaign=0&utm_content=1
Cookie: kazumoTrackingId=0ea7d5f3-9334-4a34-820f-ece7b0d568bc; kazumoMedium=eyJyZWZlcnJlckluZm8iOnsib2ZmZXJJZCI6bnVsbCwidGFyZ2V0Q2FtcGFpZ25JZCI6ImRlZmF1bHQiLCJtZXRhZGF0YSI6eyJiYW5uZXJJZCI6IjBfMkRDRjQyMTFGMzZBNEExMkI5NzAwQzVFNTk0MDI2NjUiLCJhZmZJZCI6IjBfMkRDRiJ9fX0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 18 Jan 2023 07:37:34 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Fri, 13 Jan 2023 09:46:20 GMT
etag: W/"22da-185aa85e5e0"
vary: Accept-Encoding
content-encoding: gzip
x-envoy-upstream-service-time: 1
content-security-policy: frame-ancestors 'self' https://www.casumo.es https://casumo.es https://www.casumo.de https://casumo.de https://*.casumo.com https://www.casumokasino.com https://www.casumocasino.dk https://umo-egb.allianceservices.im https://evo-livecasino.casumo.com https://casumo.evo-games.com https://casumo-es.evo-games.com https://nrgs-b2b.greentube.com https://mobile2.gameassists.co.uk https://casumo-static.casinomodule.com https://casumose-static.casinomodule.com https://casumodk-static.casinomodule.com https://dpovs7i3r9tz1.cloudfront.net https://nyxmaltargs.blueprintgaming.com https://casumo-cw.playngonetwork.com https://adkcw.playngonetwork.com https://d1k6j4zyghhevb.cloudfront.net https://platform.rgsgames.com https://rgs-cust02.lab.wagerworks.com https://casumo-game.thunderkick.com https://lon-portfolio.wimobile.casinarena.com https://staticlive.yggdrasilgaming.com https://clients.casumogames.com https://regily.com https://*.regily.com https://*.contentful.com https://player.eu.regulated.pushgaming.com https://mesh.eu.regulated.pushgaming.com https://www.casumokasino.com https://tegb-edict-nex-umo.allianceservices.im https://uat1-casumo.evolutiongaming.com https://gg-nrgs-b2b-staging.greentube.com https://redirector32.valueactive.eu https://casumo-static-test.casinomodule.com https://casumose-static-test.casinomodule.com https://casumodk-static-test.casinomodule.com https://nyxmaltargspubst.blueprintgaming.com https://nogs-gl-stage.nyxmalta.com https://mltstage.playngonetwork.com https://adkcwstage.playngonetwork.com https://d2drhksbtcqozo.cloudfront.net https://rgs-cust02.lab.wagerworks.com https://ext-qa-gameservice.thunderkick.com https://lon-pt-mob.wi-gameserver.com https://staticstaginguk.yggdrasilgaming.com https://clients.test.casumogames.com http://*.casumotest.local https://regily.com https://*.regily.com https://*.contentful.com https://games.regulated-eu-staging.gsi.io
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 70086
expires: Thu, 18 Jan 2024 07:37:34 GMT
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 78b5aa8848b40b31-OSL
X-Firefox-Spdy: h2
static.cloudflareinsights.com/beacon.min.js
200 OK 0 B URL HTTP/2 static.cloudflareinsights.com/beacon.min.js
IP
GET /beacon.min.js HTTP/1.1
Host: static.cloudflareinsights.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casumo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 18 Jan 2023 07:37:34 GMT
content-type: text/javascript;charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=86400
etag: W/2022.10.1
last-modified: Fri, 21 Oct 2022 01:56:09 GMT
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 78b5aa88b8d30b3d-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
www.casumo.com/los2assets/main.66e842a9419506e64c73.js
200 OK 0 B URL HTTP/2 www.casumo.com/los2assets/main.66e842a9419506e64c73.js
IP
GET /los2assets/main.66e842a9419506e64c73.js HTTP/1.1
Host: www.casumo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casumo.com/no/?btag=0_2DCF4211F36A4A12B9700C5E59402665&affid=0&bid=1&pid=0&utm_source=0&utm_medium=affiliate&utm_campaign=0&utm_content=1
Cookie: kazumoTrackingId=0ea7d5f3-9334-4a34-820f-ece7b0d568bc; kazumoMedium=eyJyZWZlcnJlckluZm8iOnsib2ZmZXJJZCI6bnVsbCwidGFyZ2V0Q2FtcGFpZ25JZCI6ImRlZmF1bHQiLCJtZXRhZGF0YSI6eyJiYW5uZXJJZCI6IjBfMkRDRjQyMTFGMzZBNEExMkI5NzAwQzVFNTk0MDI2NjUiLCJhZmZJZCI6IjBfMkRDRiJ9fX0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 18 Jan 2023 07:37:34 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Fri, 13 Jan 2023 09:46:20 GMT
etag: W/"61643-185aa85e5e0"
vary: Accept-Encoding
content-encoding: gzip
x-envoy-upstream-service-time: 5
content-security-policy: frame-ancestors 'self' https://www.casumo.es https://casumo.es https://www.casumo.de https://casumo.de https://*.casumo.com https://www.casumokasino.com https://www.casumocasino.dk https://umo-egb.allianceservices.im https://evo-livecasino.casumo.com https://casumo.evo-games.com https://casumo-es.evo-games.com https://nrgs-b2b.greentube.com https://mobile2.gameassists.co.uk https://casumo-static.casinomodule.com https://casumose-static.casinomodule.com https://casumodk-static.casinomodule.com https://dpovs7i3r9tz1.cloudfront.net https://nyxmaltargs.blueprintgaming.com https://casumo-cw.playngonetwork.com https://adkcw.playngonetwork.com https://d1k6j4zyghhevb.cloudfront.net https://platform.rgsgames.com https://rgs-cust02.lab.wagerworks.com https://casumo-game.thunderkick.com https://lon-portfolio.wimobile.casinarena.com https://staticlive.yggdrasilgaming.com https://clients.casumogames.com https://regily.com https://*.regily.com https://*.contentful.com https://player.eu.regulated.pushgaming.com https://mesh.eu.regulated.pushgaming.com https://www.casumokasino.com https://tegb-edict-nex-umo.allianceservices.im https://uat1-casumo.evolutiongaming.com https://gg-nrgs-b2b-staging.greentube.com https://redirector32.valueactive.eu https://casumo-static-test.casinomodule.com https://casumose-static-test.casinomodule.com https://casumodk-static-test.casinomodule.com https://nyxmaltargspubst.blueprintgaming.com https://nogs-gl-stage.nyxmalta.com https://mltstage.playngonetwork.com https://adkcwstage.playngonetwork.com https://d2drhksbtcqozo.cloudfront.net https://rgs-cust02.lab.wagerworks.com https://ext-qa-gameservice.thunderkick.com https://lon-pt-mob.wi-gameserver.com https://staticstaginguk.yggdrasilgaming.com https://clients.test.casumogames.com http://*.casumotest.local https://regily.com https://*.regily.com https://*.contentful.com https://games.regulated-eu-staging.gsi.io
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 70362
expires: Thu, 18 Jan 2024 07:37:34 GMT
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 78b5aa87e8570b31-OSL
X-Firefox-Spdy: h2
www.casumo.com/los2assets/Scrollable.c567fed5a0383b94c137.js
200 OK 0 B URL HTTP/2 www.casumo.com/los2assets/Scrollable.c567fed5a0383b94c137.js
IP
GET /los2assets/Scrollable.c567fed5a0383b94c137.js HTTP/1.1
Host: www.casumo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casumo.com/no/?btag=0_2DCF4211F36A4A12B9700C5E59402665&affid=0&bid=1&pid=0&utm_source=0&utm_medium=affiliate&utm_campaign=0&utm_content=1
Cookie: kazumoTrackingId=0ea7d5f3-9334-4a34-820f-ece7b0d568bc; kazumoMedium=eyJyZWZlcnJlckluZm8iOnsib2ZmZXJJZCI6bnVsbCwidGFyZ2V0Q2FtcGFpZ25JZCI6ImRlZmF1bHQiLCJtZXRhZGF0YSI6eyJiYW5uZXJJZCI6IjBfMkRDRjQyMTFGMzZBNEExMkI5NzAwQzVFNTk0MDI2NjUiLCJhZmZJZCI6IjBfMkRDRiJ9fX0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 18 Jan 2023 07:37:34 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Fri, 13 Jan 2023 09:46:20 GMT
etag: W/"10e5-185aa85e5e0"
vary: Accept-Encoding
content-encoding: gzip
x-envoy-upstream-service-time: 4
content-security-policy: frame-ancestors 'self' https://www.casumo.es https://casumo.es https://www.casumo.de https://casumo.de https://*.casumo.com https://www.casumokasino.com https://www.casumocasino.dk https://umo-egb.allianceservices.im https://evo-livecasino.casumo.com https://casumo.evo-games.com https://casumo-es.evo-games.com https://nrgs-b2b.greentube.com https://mobile2.gameassists.co.uk https://casumo-static.casinomodule.com https://casumose-static.casinomodule.com https://casumodk-static.casinomodule.com https://dpovs7i3r9tz1.cloudfront.net https://nyxmaltargs.blueprintgaming.com https://casumo-cw.playngonetwork.com https://adkcw.playngonetwork.com https://d1k6j4zyghhevb.cloudfront.net https://platform.rgsgames.com https://rgs-cust02.lab.wagerworks.com https://casumo-game.thunderkick.com https://lon-portfolio.wimobile.casinarena.com https://staticlive.yggdrasilgaming.com https://clients.casumogames.com https://regily.com https://*.regily.com https://*.contentful.com https://player.eu.regulated.pushgaming.com https://mesh.eu.regulated.pushgaming.com https://www.casumokasino.com https://tegb-edict-nex-umo.allianceservices.im https://uat1-casumo.evolutiongaming.com https://gg-nrgs-b2b-staging.greentube.com https://redirector32.valueactive.eu https://casumo-static-test.casinomodule.com https://casumose-static-test.casinomodule.com https://casumodk-static-test.casinomodule.com https://nyxmaltargspubst.blueprintgaming.com https://nogs-gl-stage.nyxmalta.com https://mltstage.playngonetwork.com https://adkcwstage.playngonetwork.com https://d2drhksbtcqozo.cloudfront.net https://rgs-cust02.lab.wagerworks.com https://ext-qa-gameservice.thunderkick.com https://lon-pt-mob.wi-gameserver.com https://staticstaginguk.yggdrasilgaming.com https://clients.test.casumogames.com http://*.casumotest.local https://regily.com https://*.regily.com https://*.contentful.com https://games.regulated-eu-staging.gsi.io
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 25263
expires: Thu, 18 Jan 2024 07:37:34 GMT
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 78b5aa87f8700b31-OSL
X-Firefox-Spdy: h2
www.casumo.com/los2assets/ModuleStickyBarV2.d10c5fc7eee1a312bad8.js
200 OK 0 B URL HTTP/2 www.casumo.com/los2assets/ModuleStickyBarV2.d10c5fc7eee1a312bad8.js
IP
GET /los2assets/ModuleStickyBarV2.d10c5fc7eee1a312bad8.js HTTP/1.1
Host: www.casumo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casumo.com/no/?btag=0_2DCF4211F36A4A12B9700C5E59402665&affid=0&bid=1&pid=0&utm_source=0&utm_medium=affiliate&utm_campaign=0&utm_content=1
Cookie: kazumoTrackingId=0ea7d5f3-9334-4a34-820f-ece7b0d568bc; kazumoMedium=eyJyZWZlcnJlckluZm8iOnsib2ZmZXJJZCI6bnVsbCwidGFyZ2V0Q2FtcGFpZ25JZCI6ImRlZmF1bHQiLCJtZXRhZGF0YSI6eyJiYW5uZXJJZCI6IjBfMkRDRjQyMTFGMzZBNEExMkI5NzAwQzVFNTk0MDI2NjUiLCJhZmZJZCI6IjBfMkRDRiJ9fX0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 18 Jan 2023 07:37:34 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Fri, 13 Jan 2023 09:46:20 GMT
etag: W/"150c-185aa85e5e0"
vary: Accept-Encoding
content-encoding: gzip
x-envoy-upstream-service-time: 3
content-security-policy: frame-ancestors 'self' https://www.casumo.es https://casumo.es https://www.casumo.de https://casumo.de https://*.casumo.com https://www.casumokasino.com https://www.casumocasino.dk https://umo-egb.allianceservices.im https://evo-livecasino.casumo.com https://casumo.evo-games.com https://casumo-es.evo-games.com https://nrgs-b2b.greentube.com https://mobile2.gameassists.co.uk https://casumo-static.casinomodule.com https://casumose-static.casinomodule.com https://casumodk-static.casinomodule.com https://dpovs7i3r9tz1.cloudfront.net https://nyxmaltargs.blueprintgaming.com https://casumo-cw.playngonetwork.com https://adkcw.playngonetwork.com https://d1k6j4zyghhevb.cloudfront.net https://platform.rgsgames.com https://rgs-cust02.lab.wagerworks.com https://casumo-game.thunderkick.com https://lon-portfolio.wimobile.casinarena.com https://staticlive.yggdrasilgaming.com https://clients.casumogames.com https://regily.com https://*.regily.com https://*.contentful.com https://player.eu.regulated.pushgaming.com https://mesh.eu.regulated.pushgaming.com https://www.casumokasino.com https://tegb-edict-nex-umo.allianceservices.im https://uat1-casumo.evolutiongaming.com https://gg-nrgs-b2b-staging.greentube.com https://redirector32.valueactive.eu https://casumo-static-test.casinomodule.com https://casumose-static-test.casinomodule.com https://casumodk-static-test.casinomodule.com https://nyxmaltargspubst.blueprintgaming.com https://nogs-gl-stage.nyxmalta.com https://mltstage.playngonetwork.com https://adkcwstage.playngonetwork.com https://d2drhksbtcqozo.cloudfront.net https://rgs-cust02.lab.wagerworks.com https://ext-qa-gameservice.thunderkick.com https://lon-pt-mob.wi-gameserver.com https://staticstaginguk.yggdrasilgaming.com https://clients.test.casumogames.com http://*.casumotest.local https://regily.com https://*.regily.com https://*.contentful.com https://games.regulated-eu-staging.gsi.io
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 70362
expires: Thu, 18 Jan 2024 07:37:34 GMT
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 78b5aa87f8680b31-OSL
X-Firefox-Spdy: h2
www.casumo.com/los2assets/ModuleRewards.1da43dcabecb00852a66.js
200 OK 0 B URL HTTP/2 www.casumo.com/los2assets/ModuleRewards.1da43dcabecb00852a66.js
IP
GET /los2assets/ModuleRewards.1da43dcabecb00852a66.js HTTP/1.1
Host: www.casumo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casumo.com/no/?btag=0_2DCF4211F36A4A12B9700C5E59402665&affid=0&bid=1&pid=0&utm_source=0&utm_medium=affiliate&utm_campaign=0&utm_content=1
Cookie: kazumoTrackingId=0ea7d5f3-9334-4a34-820f-ece7b0d568bc; kazumoMedium=eyJyZWZlcnJlckluZm8iOnsib2ZmZXJJZCI6bnVsbCwidGFyZ2V0Q2FtcGFpZ25JZCI6ImRlZmF1bHQiLCJtZXRhZGF0YSI6eyJiYW5uZXJJZCI6IjBfMkRDRjQyMTFGMzZBNEExMkI5NzAwQzVFNTk0MDI2NjUiLCJhZmZJZCI6IjBfMkRDRiJ9fX0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 18 Jan 2023 07:37:34 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Fri, 13 Jan 2023 09:46:20 GMT
etag: W/"1c0c-185aa85e5e0"
vary: Accept-Encoding
content-encoding: gzip
x-envoy-upstream-service-time: 1
content-security-policy: frame-ancestors 'self' https://www.casumo.es https://casumo.es https://www.casumo.de https://casumo.de https://*.casumo.com https://www.casumokasino.com https://www.casumocasino.dk https://umo-egb.allianceservices.im https://evo-livecasino.casumo.com https://casumo.evo-games.com https://casumo-es.evo-games.com https://nrgs-b2b.greentube.com https://mobile2.gameassists.co.uk https://casumo-static.casinomodule.com https://casumose-static.casinomodule.com https://casumodk-static.casinomodule.com https://dpovs7i3r9tz1.cloudfront.net https://nyxmaltargs.blueprintgaming.com https://casumo-cw.playngonetwork.com https://adkcw.playngonetwork.com https://d1k6j4zyghhevb.cloudfront.net https://platform.rgsgames.com https://rgs-cust02.lab.wagerworks.com https://casumo-game.thunderkick.com https://lon-portfolio.wimobile.casinarena.com https://staticlive.yggdrasilgaming.com https://clients.casumogames.com https://regily.com https://*.regily.com https://*.contentful.com https://player.eu.regulated.pushgaming.com https://mesh.eu.regulated.pushgaming.com https://www.casumokasino.com https://tegb-edict-nex-umo.allianceservices.im https://uat1-casumo.evolutiongaming.com https://gg-nrgs-b2b-staging.greentube.com https://redirector32.valueactive.eu https://casumo-static-test.casinomodule.com https://casumose-static-test.casinomodule.com https://casumodk-static-test.casinomodule.com https://nyxmaltargspubst.blueprintgaming.com https://nogs-gl-stage.nyxmalta.com https://mltstage.playngonetwork.com https://adkcwstage.playngonetwork.com https://d2drhksbtcqozo.cloudfront.net https://rgs-cust02.lab.wagerworks.com https://ext-qa-gameservice.thunderkick.com https://lon-pt-mob.wi-gameserver.com https://staticstaginguk.yggdrasilgaming.com https://clients.test.casumogames.com http://*.casumotest.local https://regily.com https://*.regily.com https://*.contentful.com https://games.regulated-eu-staging.gsi.io
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 70423
expires: Thu, 18 Jan 2024 07:37:34 GMT
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 78b5aa8808760b31-OSL
X-Firefox-Spdy: h2
www.casumo.com/los2assets/Regily.e25925b94a2500f53265.js
200 OK 0 B URL HTTP/2 www.casumo.com/los2assets/Regily.e25925b94a2500f53265.js
IP
GET /los2assets/Regily.e25925b94a2500f53265.js HTTP/1.1
Host: www.casumo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.casumo.com/no/?btag=0_2DCF4211F36A4A12B9700C5E59402665&affid=0&bid=1&pid=0&utm_source=0&utm_medium=affiliate&utm_campaign=0&utm_content=1
Cookie: kazumoTrackingId=0ea7d5f3-9334-4a34-820f-ece7b0d568bc; kazumoMedium=eyJyZWZlcnJlckluZm8iOnsib2ZmZXJJZCI6bnVsbCwidGFyZ2V0Q2FtcGFpZ25JZCI6ImRlZmF1bHQiLCJtZXRhZGF0YSI6eyJiYW5uZXJJZCI6IjBfMkRDRjQyMTFGMzZBNEExMkI5NzAwQzVFNTk0MDI2NjUiLCJhZmZJZCI6IjBfMkRDRiJ9fX0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 18 Jan 2023 07:37:34 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Fri, 13 Jan 2023 09:46:20 GMT
etag: W/"a3fe-185aa85e5e0"
vary: Accept-Encoding
content-encoding: gzip
x-envoy-upstream-service-time: 4
content-security-policy: frame-ancestors 'self' https://www.casumo.es https://casumo.es https://www.casumo.de https://casumo.de https://*.casumo.com https://www.casumokasino.com https://www.casumocasino.dk https://umo-egb.allianceservices.im https://evo-livecasino.casumo.com https://casumo.evo-games.com https://casumo-es.evo-games.com https://nrgs-b2b.greentube.com https://mobile2.gameassists.co.uk https://casumo-static.casinomodule.com https://casumose-static.casinomodule.com https://casumodk-static.casinomodule.com https://dpovs7i3r9tz1.cloudfront.net https://nyxmaltargs.blueprintgaming.com https://casumo-cw.playngonetwork.com https://adkcw.playngonetwork.com https://d1k6j4zyghhevb.cloudfront.net https://platform.rgsgames.com https://rgs-cust02.lab.wagerworks.com https://casumo-game.thunderkick.com https://lon-portfolio.wimobile.casinarena.com https://staticlive.yggdrasilgaming.com https://clients.casumogames.com https://regily.com https://*.regily.com https://*.contentful.com https://player.eu.regulated.pushgaming.com https://mesh.eu.regulated.pushgaming.com https://www.casumokasino.com https://tegb-edict-nex-umo.allianceservices.im https://uat1-casumo.evolutiongaming.com https://gg-nrgs-b2b-staging.greentube.com https://redirector32.valueactive.eu https://casumo-static-test.casinomodule.com https://casumose-static-test.casinomodule.com https://casumodk-static-test.casinomodule.com https://nyxmaltargspubst.blueprintgaming.com https://nogs-gl-stage.nyxmalta.com https://mltstage.playngonetwork.com https://adkcwstage.playngonetwork.com https://d2drhksbtcqozo.cloudfront.net https://rgs-cust02.lab.wagerworks.com https://ext-qa-gameservice.thunderkick.com https://lon-pt-mob.wi-gameserver.com https://staticstaginguk.yggdrasilgaming.com https://clients.test.casumogames.com http://*.casumotest.local https://regily.com https://*.regily.com https://*.contentful.com https://games.regulated-eu-staging.gsi.io
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 70332
expires: Thu, 18 Jan 2024 07:37:34 GMT
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 78b5aa87f85e0b31-OSL
X-Firefox-Spdy: h2
104.18.1.35
34.160.144.191
151.101.84.157
2.18.172.207
93.184.220.29
34.251.101.162