Overview

URLungroudonchan.com/4/4598789?ymid=EvSCAVYteVkNHTixeHgLy9&var=074b5bba-80ab-4a33-86df-edbd736e35eb
IP 139.45.197.238 (United Kingdom)
ASN#9002 RETN Limited
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2022-09-04 03:56:08 UTC
StatusLoading report..
IDS alerts0
Blocklist alert2
urlquery alerts No alerts detected
Tags None

Domain Summary (36)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
ungroudonchan.com (2) 0 2022-06-05 10:18:47 UTC 2022-09-03 16:11:16 UTC 139.45.197.238 Unknown ranking
35.227.234.222 (1) 0 2019-02-15 12:35:24 UTC 2022-06-15 16:40:06 UTC 35.227.234.222 Unknown ranking
s2.adform.net (1) 4693 2013-04-18 11:49:52 UTC 2022-09-03 05:26:21 UTC 37.157.2.248
track.adform.net (3) 3564 2012-05-21 07:01:21 UTC 2022-09-03 05:03:49 UTC 37.157.6.245
encore.scdn.co (2) 25928 2020-07-15 14:12:23 UTC 2022-09-03 06:26:53 UTC 151.101.86.248
gew4-spclient.spotify.com (4) 0 2022-03-28 13:26:27 UTC 2022-09-03 04:59:44 UTC 35.186.224.17 Domain (spotify.com) ranked at: 187
firefox.settings.services.mozilla.com (2) 867 2020-06-04 20:08:41 UTC 2022-09-03 18:20:10 UTC 143.204.55.35
my.rtmark.net (1) 9054 2017-08-22 14:11:49 UTC 2022-09-03 08:01:52 UTC 139.45.195.8
scripts.mediamathrdrt.com (1) 273493 2021-06-01 09:41:40 UTC 2022-09-03 14:34:23 UTC 172.67.170.210
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-09-03 05:01:24 UTC 34.117.237.239
eu.can-get-so.me (1) 0 2022-05-24 05:08:11 UTC 2022-09-03 16:09:16 UTC 157.90.33.78 Unknown ranking
edge.fullstory.com (1) 2769 2019-10-31 13:31:26 UTC 2022-09-03 11:26:52 UTC 35.201.112.186
rs.fullstory.com (1) 2455 2017-10-27 13:28:43 UTC 2022-09-03 13:05:06 UTC 35.186.194.58
graphql.datocms.com (2) 163121 2018-06-26 13:09:32 UTC 2022-09-03 14:36:48 UTC 172.67.11.48
push.services.mozilla.com (1) 2140 2015-09-03 10:29:36 UTC 2022-09-03 05:35:54 UTC 34.213.92.18
d3mi6d1ao3fzsg.cloudfront.net (1) 0 2021-09-23 06:47:03 UTC 2022-09-03 22:57:55 UTC 54.230.245.125 Unknown ranking
megalotto-api.gigmagic.io (5) 0 2020-09-09 18:17:35 UTC 2022-09-03 14:34:21 UTC 172.64.149.99 Unknown ranking
apresolve.spotify.com (2) 753 2013-09-30 17:51:11 UTC 2022-09-03 06:33:56 UTC 34.98.74.57
pxl.qccerttest.com (1) 0 2022-07-13 18:30:05 UTC 2022-09-04 01:06:32 UTC 143.204.55.81 Unknown ranking
sentry.io (1) 2743 2016-08-31 05:38:44 UTC 2022-09-03 06:08:56 UTC 35.188.42.15
ocsp.sectigo.com (1) 487 2018-12-17 11:31:55 UTC 2022-09-04 00:21:43 UTC 104.18.32.68
megalotto-static.gigmagic.io (4) 0 2020-11-23 07:59:35 UTC 2022-09-03 14:36:46 UTC 172.64.149.99 Unknown ranking
img-getpocket.cdn.mozilla.net (6) 1631 2017-09-01 03:40:57 UTC 2022-09-03 09:18:42 UTC 34.120.237.76
rules.quantcount.com (1) 877 2019-05-23 13:36:07 UTC 2022-09-03 05:33:05 UTC 54.230.111.16
i.scdn.co (1) 1162 2017-01-30 05:00:06 UTC 2022-09-03 04:59:51 UTC 151.101.86.248
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-09-03 05:49:56 UTC 143.204.55.110
www.megarush.com (51) 0 2020-11-23 07:59:35 UTC 2022-09-03 14:36:51 UTC 104.22.30.168 Unknown ranking
ocsp.pki.goog (2) 175 2017-06-14 07:23:31 UTC 2022-09-03 04:59:51 UTC 142.250.74.3
pixel.quantserve.com (1) 417 2018-04-06 01:24:19 UTC 2022-09-03 05:19:04 UTC 91.228.74.244
open.spotify.com (1) 3062 2012-06-04 12:41:14 UTC 2022-09-03 05:13:17 UTC 35.186.224.25
r3.o.lencr.org (6) 344 2020-12-02 08:52:13 UTC 2022-09-03 05:00:20 UTC 23.36.77.32
media.megarushaffiliates.com (1) 0 2020-12-30 14:36:06 UTC 2022-09-03 18:06:37 UTC 23.36.79.18 Unknown ranking
ocsp.digicert.com (2) 86 2012-05-21 07:02:23 UTC 2022-09-03 14:30:54 UTC 93.184.220.29
e1.o.lencr.org (2) 6159 2021-08-20 07:36:30 UTC 2022-09-03 06:43:16 UTC 23.36.76.226
megalotto-img.gigmagic.io (1) 0 2020-11-23 07:59:35 UTC 2022-09-03 12:18:48 UTC 172.64.149.99 Unknown ranking
secure.quantserve.com (1) 973 2018-05-21 20:36:17 UTC 2022-09-03 05:28:30 UTC 91.228.74.244

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
 No alerts detected

mnemonic secure dns
 No alerts detected

Quad9 DNS
Scan Date Severity Indicator Comment
2022-09-04 2 ungroudonchan.com Sinkholed
2022-09-04 2 ungroudonchan.com Sinkholed


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 139.45.197.238
Date UQ / IDS / BL URL IP
2023-03-29 18:27:51 +0000 0 - 0 - 3 dusunfloraer.com/4/4326568/ 139.45.197.238
2023-03-29 14:17:37 +0000 0 - 1 - 3 waufooke.com/4/5708882 139.45.197.238
2023-03-29 12:03:57 +0000 0 - 1 - 2 rouonixon.com/4/5830550/ 139.45.197.238
2023-03-29 12:02:18 +0000 0 - 0 - 6 dusunfloraer.com/4/5473343/ 139.45.197.238
2023-03-28 16:21:09 +0000 0 - 0 - 2 dusunfloraer.com/4/4292615/ 139.45.197.238


Last 5 reports on ASN: RETN Limited
Date UQ / IDS / BL URL IP
2023-03-29 18:27:51 +0000 0 - 0 - 3 dusunfloraer.com/4/4326568/ 139.45.197.238
2023-03-29 18:23:09 +0000 0 - 0 - 3 retryngs.com/link?z=5829621&var=12_{{zoneid}} (...) 139.45.197.249
2023-03-29 17:09:42 +0000 0 - 0 - 2 numsodsi.com/ 139.45.197.242
2023-03-29 16:54:39 +0000 0 - 0 - 3 zaipheetour.com/ 139.45.197.159
2023-03-29 16:40:13 +0000 0 - 0 - 2 wxjmpqsli.com/ 139.45.197.154


Last 5 reports on domain: ungroudonchan.com
Date UQ / IDS / BL URL IP
2023-02-28 21:04:02 +0000 0 - 1 - 2 ungroudonchan.com/4/5754622 139.45.197.238
2023-02-26 08:33:36 +0000 0 - 0 - 2 ungroudonchan.com/ 139.45.197.238
2022-12-12 16:03:35 +0000 0 - 0 - 2 ungroudonchan.com/ 139.45.197.238
2022-12-01 23:34:32 +0000 0 - 0 - 3 ungroudonchan.com/4/5423637?ymid=HTQwt8QFCnL9 (...) 139.45.197.238
2022-12-01 23:04:04 +0000 0 - 0 - 3 ungroudonchan.com/4/5423637?ymid=BUdzUhCJnuek (...) 139.45.197.238


Last 5 reports with similar screenshot
Date UQ / IDS / BL URL IP
2022-09-26 17:54:10 +0000 0 - 0 - 2 track.adspwretf.click/go/75ef24d0-aa3e-4f3b-8 (...) 3.70.16.242
2022-09-25 20:29:21 +0000 0 - 0 - 3 safe-guard.site/cl/500/movistar/ 212.237.233.86
2022-09-24 21:35:06 +0000 0 - 0 - 3 telecentrum.site/m/th/ppt3/ 194.135.87.32
2022-09-19 21:59:08 +0000 0 - 0 - 2 eu.gotbstgifts.click/za/i13s22/brand/loot/ 164.92.232.111
2022-09-19 05:51:51 +0000 0 - 0 - 2 ungroudonchan.com/4/4598789?ymid=3f9aMmzgAamo (...) 139.45.197.238

JavaScript

Executed Scripts (27)

Executed Evals (0)

Executed Writes (0)


HTTP Transactions (116)


Request Response
                                        
                                            GET /4/4598789?ymid=EvSCAVYteVkNHTixeHgLy9&var=074b5bba-80ab-4a33-86df-edbd736e35eb HTTP/1.1 
Host: ungroudonchan.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         139.45.197.238
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf8
                                        
Server: nginx
Date: Sun, 04 Sep 2022 03:55:56 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Trace-Id: b0378fa9eea314dd035f7a33f05efeba
Link: <https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://my.rtmark.net>; rel="preconnect dns-prefetch", <https://eu.can-get-so.me>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://diromalxx.com>; rel="preconnect dns-prefetch"
Access-Control-Allow-Credentials: true
Access-Control-Max-Age: 86400
Timing-Allow-Origin: *
Set-Cookie: OAID=7506f1a73a6a4138b67275c4e96ad854; expires=Mon, 04 Sep 2023 03:55:56 GMT; path=/ oaidts=1662263756; expires=Mon, 04 Sep 2023 03:55:56 GMT; path=/ syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
Pragma: no-cache, no-cache
Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
Expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Methods: GET, POST, OPTIONS, POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, Accept, Content-Type, Content-Length, Accept-Encoding
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   680
Md5:    4399e82a00c24a07b7b757d03845f7da
Sha1:   13278a4e047aff5ddddd3d48353e10d676065ac8
Sha256: 89c52fd716557024a13b066fc12b40697df588c86ddc244a7e8be24acfebb14b

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.35
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Content-Length, Backoff, Retry-After, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sun, 04 Sep 2022 03:43:49 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: kRevWrKW8d3WgCqzLoWkC3lLAcV6EurDT0LtuE4eVwozqI08KBhyAA==
Age: 727


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    99b7d23c1748d0526782b9ff9ea45f09
Sha1:   eadd801a3ba2aa00632c6fb52e1f9125bd6d5b4f
Sha256: 48f81668f76955320480b484138aebdad5d03c471036b4449c737aca1ecab08e
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "9B43EC48B16F96449208A0094C4D660806A2A2D344B5862DBFF4C393BF3F9F9F"
Last-Modified: Thu, 01 Sep 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2237
Expires: Sun, 04 Sep 2022 04:33:13 GMT
Date: Sun, 04 Sep 2022 03:55:56 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.110
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Sun, 04 Sep 2022 01:15:18 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: MlUWU-OCGnKq7hcYZ8kPcIhmQCn7dhFG_86VFMtu9NYIda_BC3rfxA==
age: 9639
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    742edb4038f38bc533514982f3d2e861
Sha1:   cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
Sha256: b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Sun, 04 Sep 2022 03:55:56 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "DDB5D3A8C7B856AB4358B1A5B8AFA245CB74013215789A540942B3824EEA1036"
Last-Modified: Thu, 01 Sep 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9310
Expires: Sun, 04 Sep 2022 06:31:06 GMT
Date: Sun, 04 Sep 2022 03:55:56 GMT
Connection: keep-alive

                                        
                                            GET /favicon.ico HTTP/1.1 
Host: ungroudonchan.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Cookie: OAID=7506f1a73a6a4138b67275c4e96ad854; oaidts=1662263756

search
                                         139.45.197.238
HTTP/1.1 204 No Content
                                        
Server: nginx
Date: Sun, 04 Sep 2022 03:55:57 GMT
Connection: keep-alive
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Pragma: public
Cache-Control: max-age=315360000, public, must-revalidate, proxy-revalidate


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /pr?ids=wbwslwlvdta&hash=ea249b91a8a738ab&ext_req_id=590139567022285393&subid1=4598789&cost=0.000171&rdk=rk1 HTTP/1.1 
Host: eu.can-get-so.me
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         157.90.33.78
HTTP/2 302 Found
                                        
server: nginx
date: Sun, 04 Sep 2022 03:55:57 GMT
content-length: 0
x-trace: 3d860cbbdc15edfaf132d1771782767b
referrer-policy: no-referrer
location: http://35.227.234.222/2/PU_NO_RA_CS_DT_MEGARUSH?source=643178&geo=NO&device=desktop
set-cookie: rauid=8HVf1SIFQKGmhjFM2wY6yA; expires=Mon, 04 Sep 2023 03:55:57 GMT; secure; SameSite=None
X-Firefox-Spdy: h2

                                        
                                            GET /2/PU_NO_RA_CS_DT_MEGARUSH?source=643178&geo=NO&device=desktop HTTP/1.1 
Host: 35.227.234.222
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         35.227.234.222
HTTP/1.1 302 Found
                                        
Server: nginx/1.14.0 (Ubuntu)
Date: Sun, 04 Sep 2022 03:55:57 GMT
Content-Length: 0
Location: https://media.megarushaffiliates.com/redirect.aspx?pid=6426&bid=1575
Via: 1.1 google

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         104.18.32.68
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 04 Sep 2022 03:55:57 GMT
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 01 Sep 2022 18:25:21 GMT
Expires: Thu, 08 Sep 2022 18:25:20 GMT
Etag: "d7a3d6a40066652fc85cdaab9e613246b6af4aab"
Cache-Control: max-age=397162,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7453cae13fa7b4e8-OSL

                                        
                                            POST /img.gif?f=merge&userId=7506f1a73a6a4138b67275c4e96ad854 HTTP/1.1 
Host: my.rtmark.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0

search
                                         139.45.195.8
HTTP/2 200 OK
content-type: image/gif
                                        
server: nginx
date: Sun, 04 Sep 2022 03:55:57 GMT
content-length: 43
access-control-allow-origin: null
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=7506f1a73a6a4138b67275c4e96ad854; expires=Mon, 04 Sep 2023 03:55:57 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    b4491705564909da7f9eaf749dbbfbb1
Sha1:   279315d507855c6a4351e1e2c2f39dd9cd2fccd8
Sha256: 4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
                                        
                                            GET /redirect.aspx?pid=6426&bid=1575 HTTP/1.1 
Host: media.megarushaffiliates.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         23.36.79.18
HTTP/2 301 Moved Permanently
content-type: text/html
                                        
content-length: 0
location: https://www.megarush.com/nb-no?btag=656126_1F051F782BF1478AB0C042E35F07CBBC
p3p: CP="This is not a P3P policy! It is used to bypass IEs problematic handling of cookies"
x-aspnet-version: 4.0.30319
request-context: appId=cid-v1:83ffbda4-9458-475e-90ec-4427cfb5c3b0
access-control-expose-headers: Request-Context
expires: Sun, 04 Sep 2022 03:55:57 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Sun, 04 Sep 2022 03:55:57 GMT
set-cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a6426%2c%22BID%22%3a1575%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1662263757294)%5c%2f%22%2c%22CookieTag%22%3a%2215756426451240919C202294355%22%7d%5d; SameSite=None;; domain=.megarushaffiliates.com; expires=Fri, 31-Dec-9999 23:59:59 GMT; path=/; secure NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%223848099%7c1%22%7d%5d; domain=.megarushaffiliates.com; expires=Tue, 04-Sep-3021 03:55:57 GMT; path=/; secure; SameSite=Strict
server-timing: cdn-cache; desc=MISS, edge; dur=21, origin; dur=48
X-Firefox-Spdy: h2

                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.35
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, ETag, Backoff, Last-Modified, Pragma, Cache-Control, Expires, Content-Type, Content-Length, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Sun, 04 Sep 2022 03:38:16 GMT
Cache-Control: max-age=3600
Expires: Sun, 04 Sep 2022 03:54:38 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 e49f22f18c16784c0f42291e768d1daa.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: kvEV6vsny77eejzQ-pxJ0Nwsf2IHRfZcQsBFPT0uof2-iAD_PXuqnw==
Age: 1061


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 867
Cache-Control: 'max-age=158059'
Date: Sun, 04 Sep 2022 03:55:57 GMT
Last-Modified: Sun, 04 Sep 2022 03:41:30 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 279

                                        
                                            GET /fonts/Inter-Regular.woff2 HTTP/1.1 
Host: www.megarush.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.megarush.com/nb-no?btag=656126_1F051F782BF1478AB0C042E35F07CBBC
Cookie: geoip_country=no; webserver=megarush-prd-58d9bc46b7-c6rj2; geoip_country=no; LanguageCode=nb-no; 73284d4086c9c5cd43ecdef7e2965d52=ce9b33b85ec97421fa7db232ed6ef05c
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.22.30.168
HTTP/2 200 OK
content-type: font/woff2
                                        
date: Sun, 04 Sep 2022 03:55:57 GMT
content-length: 10108
last-modified: Thu, 25 Aug 2022 14:33:43 GMT
etag: "63078847-277c"
access-control-allow-origin: *
cache-control: max-age=7200
cf-cache-status: HIT
age: 3194
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7453cae48e260b65-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 10108, version 3.1245\012- data
Size:   10108
Md5:    5ec57a5a91c67095e4a7e91ac375ffb1
Sha1:   23b60d1dd6790eeeb11e3c90d1f75c16d1db60d9
Sha256: 9b3f3dc1e7ce0a5a28f768d6d84d4174ffe56384db534daccc47321dea379ed5
                                        
                                            GET /fonts/DS-Digital.woff2 HTTP/1.1 
Host: www.megarush.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.megarush.com/nb-no?btag=656126_1F051F782BF1478AB0C042E35F07CBBC
Cookie: geoip_country=no; webserver=megarush-prd-58d9bc46b7-c6rj2; geoip_country=no; LanguageCode=nb-no; 73284d4086c9c5cd43ecdef7e2965d52=ce9b33b85ec97421fa7db232ed6ef05c
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.22.30.168
HTTP/2 200 OK
content-type: font/woff2
                                        
date: Sun, 04 Sep 2022 03:55:57 GMT
content-length: 776
last-modified: Thu, 25 Aug 2022 14:33:43 GMT
etag: "63078847-308"
access-control-allow-origin: *
cache-control: max-age=7200
cf-cache-status: HIT
age: 5949
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7453cae48e270b65-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 776, version 1.0\012- data
Size:   776
Md5:    789f060683abdb5574a93bf59c7dd2e2
Sha1:   17b677d648dfdc9e290a25e8c137ebb0448c069b
Sha256: 375c5411d43daa0ccc1234d8bf20effba17a231408ab44fa17c96b2f9a995248
                                        
                                            GET /fonts/Inter-Bold.woff2 HTTP/1.1 
Host: www.megarush.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.megarush.com/nb-no?btag=656126_1F051F782BF1478AB0C042E35F07CBBC
Cookie: geoip_country=no; webserver=megarush-prd-58d9bc46b7-c6rj2; geoip_country=no; LanguageCode=nb-no; 73284d4086c9c5cd43ecdef7e2965d52=ce9b33b85ec97421fa7db232ed6ef05c
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.22.30.168
HTTP/2 200 OK
content-type: font/woff2
                                        
date: Sun, 04 Sep 2022 03:55:57 GMT
content-length: 10508
last-modified: Thu, 25 Aug 2022 14:33:43 GMT
etag: "63078847-290c"
access-control-allow-origin: *
cache-control: max-age=7200
cf-cache-status: HIT
age: 729
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7453cae48e240b65-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 10508, version 3.1245\012- data
Size:   10508
Md5:    a2517956b299e0c02bfc2a92eb05f623
Sha1:   ae4c129ebfe3aec739aac5662d2ef9fcaa4d80db
Sha256: 412a6a99c5283c71838322a7f25e7a0bc4dd324e013f88a202b56af736b13d37
                                        
                                            GET /fonts/Inter-ExtraBold.woff2 HTTP/1.1 
Host: www.megarush.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.megarush.com/nb-no?btag=656126_1F051F782BF1478AB0C042E35F07CBBC
Cookie: geoip_country=no; webserver=megarush-prd-58d9bc46b7-c6rj2; geoip_country=no; LanguageCode=nb-no; 73284d4086c9c5cd43ecdef7e2965d52=ce9b33b85ec97421fa7db232ed6ef05c
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.22.30.168
HTTP/2 200 OK
content-type: font/woff2
                                        
date: Sun, 04 Sep 2022 03:55:57 GMT
content-length: 10484
last-modified: Thu, 25 Aug 2022 14:33:43 GMT
etag: "63078847-28f4"
access-control-allow-origin: *
cache-control: max-age=7200
cf-cache-status: HIT
age: 245
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7453cae48e220b65-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 10484, version 3.1245\012- data
Size:   10484
Md5:    d23da8f3e4e37a17c1d3ed7a1a11d429
Sha1:   9dda69da77b703d438db74468375685f6983625d
Sha256: a936dafc61b666c42182807bb1c5e564ec73c07f8b6fb7352d15090db9165a7c
                                        
                                            GET /js/chunk-vendors.8490e2f1.js HTTP/1.1 
Host: www.megarush.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.megarush.com/nb-no?btag=656126_1F051F782BF1478AB0C042E35F07CBBC
Cookie: geoip_country=no; webserver=megarush-prd-58d9bc46b7-c6rj2; geoip_country=no; LanguageCode=nb-no; 73284d4086c9c5cd43ecdef7e2965d52=ce9b33b85ec97421fa7db232ed6ef05c
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.22.30.168
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Sun, 04 Sep 2022 03:55:57 GMT
cf-bgj: minify
cf-polished: origSize=326117
access-control-allow-origin: *
cache-control: max-age=7200
etag: W/"63078847-4f9e5"
expires: Thu, 25 Aug 2022 14:39:00 GMT
last-modified: Thu, 25 Aug 2022 14:33:43 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 2124
server: cloudflare
cf-ray: 7453cae49e330b65-OSL
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   106052
Md5:    2c03fd8417b8e3778d338a9127681486
Sha1:   b1466c16d75c756a71a9a5b05cf59da4827e570a
Sha256: ff7659a5f5ddb851b3441942778cebb841652c55d6c5385d2bfbd88aacd1eaf6
                                        
                                            GET /index.30053c2cd5717880348c.css HTTP/1.1 
Host: www.megarush.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.megarush.com/nb-no?btag=656126_1F051F782BF1478AB0C042E35F07CBBC
Cookie: geoip_country=no; webserver=megarush-prd-58d9bc46b7-c6rj2; geoip_country=no; LanguageCode=nb-no; 73284d4086c9c5cd43ecdef7e2965d52=ce9b33b85ec97421fa7db232ed6ef05c
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.22.30.168
HTTP/2 200 OK
content-type: text/css
                                        
date: Sun, 04 Sep 2022 03:55:57 GMT
cf-bgj: minify
cf-polished: origSize=228336
access-control-allow-origin: *
cache-control: max-age=7200
etag: W/"63078847-37bf0"
expires: Thu, 25 Aug 2022 14:39:00 GMT
last-modified: Thu, 25 Aug 2022 14:33:43 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 7169
server: cloudflare
cf-ray: 7453cae48e2a0b65-OSL
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   83589
Md5:    59a7445842e6016711cee1a83c0178a0
Sha1:   ae774da602b06610f7ac6776b62faeaec72caee2
Sha256: 4affaae8d1da3bc9cc8bcd910160c615fe93706d9779a2a7ebca733db9b5cf62
                                        
                                            GET /chunk-vendors.76e8e4d0.css HTTP/1.1 
Host: www.megarush.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.megarush.com/nb-no?btag=656126_1F051F782BF1478AB0C042E35F07CBBC
Cookie: geoip_country=no; webserver=megarush-prd-58d9bc46b7-c6rj2; geoip_country=no; LanguageCode=nb-no; 73284d4086c9c5cd43ecdef7e2965d52=ce9b33b85ec97421fa7db232ed6ef05c
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.22.30.168
HTTP/2 200 OK
content-type: text/css
                                        
date: Sun, 04 Sep 2022 03:55:57 GMT
cf-bgj: minify
cf-polished: origSize=1523
access-control-allow-origin: *
cache-control: max-age=7200
etag: W/"63078847-5f3"
expires: Thu, 25 Aug 2022 15:25:15 GMT
last-modified: Thu, 25 Aug 2022 14:33:43 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 5879
server: cloudflare
cf-ray: 7453cae48e290b65-OSL
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   1042
Md5:    7968b546881d35554e8fab898f6ea80c
Sha1:   56ee09a53a6807214819ebea835a1424b17b67f8
Sha256: 55bf38cac24aff94ed9c6a6bc6641aa92e15c901fcd20f35022712641e55caa1
                                        
                                            POST / HTTP/1.1 
Host: e1.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 344
ETag: "E5805724B1DA7B1458A913B52FF1F16A9E0560407784DA836F70B60223F73DC6"
Last-Modified: Sat, 03 Sep 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19070
Expires: Sun, 04 Sep 2022 09:13:47 GMT
Date: Sun, 04 Sep 2022 03:55:57 GMT
Connection: keep-alive

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: mFRW2CaEsp9AyT6xIsiYSA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         34.213.92.18
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: IwqYkh/B1Wb2OZ8idre0v35zfW8=

                                        
                                            GET /base.css HTTP/1.1 
Host: www.megarush.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.megarush.com/nb-no?btag=656126_1F051F782BF1478AB0C042E35F07CBBC
Cookie: geoip_country=no; webserver=megarush-prd-58d9bc46b7-c6rj2; geoip_country=no; LanguageCode=nb-no; 73284d4086c9c5cd43ecdef7e2965d52=ce9b33b85ec97421fa7db232ed6ef05c
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.22.30.168
HTTP/2 200 OK
content-type: text/css
                                        
date: Sun, 04 Sep 2022 03:55:57 GMT
cf-bgj: minify
cf-polished: origSize=3913
access-control-allow-origin: *
cache-control: max-age=7200
etag: W/"63078847-f49"
expires: Sun, 28 Aug 2022 07:31:03 GMT
last-modified: Thu, 25 Aug 2022 14:33:43 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 246
server: cloudflare
cf-ray: 7453cae48e280b65-OSL
content-encoding: gzip
X-Firefox-Spdy: h2

                                        
                                            GET /favicons/favicon-194x194.png HTTP/1.1 
Host: www.megarush.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.megarush.com/nb-no?btag=656126_1F051F782BF1478AB0C042E35F07CBBC
Cookie: geoip_country=no; webserver=megarush-prd-58d9bc46b7-c6rj2; geoip_country=no; LanguageCode=nb-no; 73284d4086c9c5cd43ecdef7e2965d52=ce9b33b85ec97421fa7db232ed6ef05c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.22.30.168
HTTP/2 200 OK
content-type: image/png
                                        
date: Sun, 04 Sep 2022 03:55:58 GMT
content-length: 11668
last-modified: Mon, 23 Aug 2021 13:22:11 GMT
etag: "6123a103-2d94"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 32473901
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7453cae79f660b65-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 194 x 194, 8-bit/color RGBA, non-interlaced\012- data
Size:   11668
Md5:    3bc9ecb2b8d9e78d83d49da52c0292fc
Sha1:   b13fda2aa7ff6d2d185a90dbe6446ad52f63d244
Sha256: 9b35e254d53d3c4b6f0ce1185de9463355d340808f64b0e831162fb03cf5b39c
                                        
                                            GET /favicons/favicon-16x16.png HTTP/1.1 
Host: www.megarush.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.megarush.com/nb-no?btag=656126_1F051F782BF1478AB0C042E35F07CBBC
Cookie: geoip_country=no; webserver=megarush-prd-58d9bc46b7-c6rj2; geoip_country=no; LanguageCode=nb-no; 73284d4086c9c5cd43ecdef7e2965d52=ce9b33b85ec97421fa7db232ed6ef05c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.22.30.168
HTTP/2 200 OK
content-type: image/png
                                        
date: Sun, 04 Sep 2022 03:55:58 GMT
content-length: 437
last-modified: Mon, 06 Jun 2022 07:18:34 GMT
etag: "629daa4a-1b5"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 5307342
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7453cae79f670b65-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Size:   437
Md5:    914b291e561aafc860f86bc23c4065f1
Sha1:   b47bda2b8d530bbaead0fbcba219ac18247d1410
Sha256: 08f8a35ac0dda8a81618b381bfc0747ac80e022c0ff44dcb4d8d153dad724b45
                                        
                                            GET /webpush/1/webpush.min.js HTTP/1.1 
Host: d3mi6d1ao3fzsg.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.megarush.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         54.230.245.125
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Content-Length: 16537
Connection: keep-alive
Date: Sat, 03 Sep 2022 19:53:21 GMT
Last-Modified: Thu, 27 May 2021 15:02:08 GMT
ETag: "9f2263de140cc78c0737d17051307016"
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 8Jui9yDuMAZ9XinzxZEkrufu1YLgNSu3cfk6gYlalk1xuhxdIPxgzg==
Age: 28958


--- Additional Info ---
Magic:  ASCII text, with very long lines (16536)
Size:   16537
Md5:    9f2263de140cc78c0737d17051307016
Sha1:   0174dfe38c88f9e7043b002fb9131c7a71399d77
Sha256: 17ada4aeba85fbedca030d812ae829162ed2ad5d7a96d5c05b2b288e801a1b3a
                                        
                                            GET /js/index.f6004837.js HTTP/1.1 
Host: www.megarush.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.megarush.com/nb-no?btag=656126_1F051F782BF1478AB0C042E35F07CBBC
Cookie: geoip_country=no; webserver=megarush-prd-58d9bc46b7-c6rj2; geoip_country=no; LanguageCode=nb-no; 73284d4086c9c5cd43ecdef7e2965d52=ce9b33b85ec97421fa7db232ed6ef05c
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.22.30.168
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Sun, 04 Sep 2022 03:55:57 GMT
cf-bgj: minify
access-control-allow-origin: *
cache-control: max-age=7200
etag: W/"63078847-160eb4"
expires: Thu, 25 Aug 2022 14:39:00 GMT
last-modified: Thu, 25 Aug 2022 14:33:43 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 4029
server: cloudflare
cf-ray: 7453cae49e370b65-OSL
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   303688
Md5:    554bc08f4be1405196c545bb37a4eceb
Sha1:   74dc00538244c3496f9bc3fce9dc7d2f0adcbb5d
Sha256: f29b2f2e9f4e8cb32cecc105500fb88e74bbf844359963e511aff68873b3500e
                                        
                                            POST /s/gts1d4/nGJjDlG2mg8 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 04 Sep 2022 03:55:58 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 4574
Cache-Control: 'max-age=158059'
Date: Sun, 04 Sep 2022 03:55:58 GMT
Last-Modified: Sun, 04 Sep 2022 02:39:44 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /s/fs.js HTTP/1.1 
Host: edge.fullstory.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.megarush.com
Connection: keep-alive
Referer: https://www.megarush.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         35.201.112.186
HTTP/2 200 OK
content-type: application/javascript
                                        
x-guploader-uploadid: ADPycduI3TQX2tEvAwkx_A03VdGN-Wda_HR-e-cK9zAmovqcazCWj3A9uD1peSDJu_v4J1ZIQOew-EGCP2lxL81p6_cBdw
x-goog-generation: 1661954446968697
x-goog-metageneration: 1
x-goog-stored-content-encoding: br
x-goog-stored-content-length: 62596
content-encoding: br
x-goog-hash: crc32c=uai+sA==, md5=UjbmCePFPvwZUOFZvXUVKg==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 62596
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Sun, 04 Sep 2022 03:22:32 GMT
expires: Sun, 04 Sep 2022 04:22:32 GMT
cache-control: public, max-age=3600,no-transform
age: 2006
last-modified: Wed, 31 Aug 2022 14:00:47 GMT
etag: "5236e609e3c53efc1950e159bd75152a"
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65410)
Size:   62596
Md5:    5236e609e3c53efc1950e159bd75152a
Sha1:   ffc06f27aece0dea5a822deb1bbd5924f57ea454
Sha256: 92efe0c78c6fb028844d7ea839d2223d1bbf579fda99f8ba156d876c69a18a14
                                        
                                            GET /v2?key=5c7e3e9c1c62609cee83f960&isDesktopDevice=true&sid=631421cab0671ba2d3ce4759 HTTP/1.1 
Host: megalotto-api.gigmagic.io
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://www.megarush.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 2jDrEpQjQ1uanaLLczU+6A==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         172.64.149.99
HTTP/1.1 101 Switching Protocols
                                        
Date: Sun, 04 Sep 2022 03:55:58 GMT
Connection: upgrade
upgrade: websocket
sec-websocket-accept: 1NZT9WPRj3/f1SK926icbtDJRhU=
set-cookie: e9ef0023e1df886bed2d1501b6b20a23=37cd76cd7b4434682f3f2d1b20ad6cb2; path=/; HttpOnly; Secure; SameSite=None
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7453cae7d810b4f9-OSL

                                        
                                            POST /s/gts1d4/nGJjDlG2mg8 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 04 Sep 2022 03:55:58 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /translations/no.json HTTP/1.1 
Host: megalotto-static.gigmagic.io
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.megarush.com/
Origin: https://www.megarush.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         172.64.149.99
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
date: Sun, 04 Sep 2022 03:55:58 GMT
content-length: 75144
access-control-allow-origin: *
access-control-allow-methods: GET, POST
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
last-modified: Wed, 31 Aug 2022 11:28:51 GMT
etag: "bf20063ff80611f4c90722ee80079cc7"
content-encoding: gzip
accept-ranges: bytes
set-cookie: e242caeacb7729c5149f03e087bd04c7=81f17ed54a83fe51a535d9a669b8de47; path=/; HttpOnly; Secure; SameSite=None
cache-control: private
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7453cae88e75b51d-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , Unicode text, UTF-8 text, with very long lines (65298), with no line terminators
Size:   75144
Md5:    bf20063ff80611f4c90722ee80079cc7
Sha1:   33b4e13c5ecdd4dd17d1da7cc62d7c2c6bfdb9a6
Sha256: cd6c2e943ba34649dc851021827f2950cf3b346d74ad9c87fc7d5d8e40cdd448
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "8C16DEE0025062C07EEFB25E501DF0E81173683945BC56805FD70651DD6B7435"
Last-Modified: Fri, 02 Sep 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13445
Expires: Sun, 04 Sep 2022 07:40:03 GMT
Date: Sun, 04 Sep 2022 03:55:58 GMT
Connection: keep-alive

                                        
                                            OPTIONS /igc/megalotto/games/jackpots HTTP/1.1 
Host: megalotto-api.gigmagic.io
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-api-key,x-api-session-id
Referer: https://www.megarush.com/
Origin: https://www.megarush.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Cache-Control: max-age=0
TE: trailers

search
                                         172.64.149.99
HTTP/2 200 OK
                                        
date: Sun, 04 Sep 2022 03:55:58 GMT
content-length: 2
access-control-allow-origin: *
access-control-allow-methods: GET, POST
access-control-allow-headers: X-Requested-With, Content-Type, Accept, X-API-Key, X-API-Session-Id, x-api-sid, X-Request-ID
set-cookie: e9ef0023e1df886bed2d1501b6b20a23=5e4e526b31225b8d4c9bbe34aedc534e; path=/; HttpOnly; Secure; SameSite=None
cache-control: private
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7453caea0f37b51d-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   2
Md5:    e0aa021e21dddbd6d8cecec71e9cf564
Sha1:   9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
Sha256: 565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
                                        
                                            GET /img/home-page/coin-2-4.png HTTP/1.1 
Host: www.megarush.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.megarush.com/nb-no?btag=656126_1F051F782BF1478AB0C042E35F07CBBC
Cookie: geoip_country=no; webserver=megarush-prd-58d9bc46b7-c6rj2; geoip_country=no; LanguageCode=nb-no; 73284d4086c9c5cd43ecdef7e2965d52=ce9b33b85ec97421fa7db232ed6ef05c; _ga=GA1.2.637062566.1662263755; _gid=GA1.2.1463463030.1662263755; _gat_UA-143790984-2=1; btag=656126_1F051F782BF1478AB0C042E35F07CBBC
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.22.30.168
HTTP/2 200 OK
content-type: image/png
                                        
date: Sun, 04 Sep 2022 03:55:58 GMT
content-length: 786
last-modified: Thu, 30 Sep 2021 14:59:04 GMT
etag: "6155d0b8-312"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 29249154
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7453caea68800b65-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 29 x 33, 8-bit colormap, non-interlaced\012- data
Size:   786
Md5:    dca8df1b0d982ac3fbbc6c0b506cc0f2
Sha1:   392422815633ebaf9eef022677f0b73e1352ae66
Sha256: a027ddd9187b5d6a7a537aada497af6ebfca00c2a9f50e7950aaf6ad599b0b09
                                        
                                            OPTIONS /igc/megalotto/promotions/filter HTTP/1.1 
Host: megalotto-api.gigmagic.io
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-api-key,x-api-session-id
Referer: https://www.megarush.com/
Origin: https://www.megarush.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Cache-Control: max-age=0
TE: trailers

search
                                         172.64.149.99
HTTP/2 200 OK
                                        
date: Sun, 04 Sep 2022 03:55:58 GMT
content-length: 2
access-control-allow-origin: *
access-control-allow-methods: GET, POST
access-control-allow-headers: X-Requested-With, Content-Type, Accept, X-API-Key, X-API-Session-Id, x-api-sid, X-Request-ID
set-cookie: e9ef0023e1df886bed2d1501b6b20a23=baea5d0bac51a12bb7747df6f6519f4c; path=/; HttpOnly; Secure; SameSite=None
cache-control: private
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7453caea4f5db51d-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   1192
Md5:    615895a0c691039ed52a31620f0ed951
Sha1:   4aeff5475d41f9910f9c3ae9373d84c3563c3493
Sha256: 3df66a061ae6e75a47a7e88dac59af76cc996b5bf94c1a7ac9967426b7b74648
                                        
                                            GET /img/home-page/coin-3-2.png HTTP/1.1 
Host: www.megarush.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.megarush.com/nb-no?btag=656126_1F051F782BF1478AB0C042E35F07CBBC
Cookie: geoip_country=no; webserver=megarush-prd-58d9bc46b7-c6rj2; geoip_country=no; LanguageCode=nb-no; 73284d4086c9c5cd43ecdef7e2965d52=ce9b33b85ec97421fa7db232ed6ef05c; _ga=GA1.2.637062566.1662263755; _gid=GA1.2.1463463030.1662263755; _gat_UA-143790984-2=1; btag=656126_1F051F782BF1478AB0C042E35F07CBBC
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.22.30.168
HTTP/2 200 OK
content-type: image/png
                                        
date: Sun, 04 Sep 2022 03:55:58 GMT
content-length: 2192
last-modified: Mon, 06 Jun 2022 07:18:34 GMT
etag: "629daa4a-890"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 5306380
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7453caea68840b65-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 89 x 83, 8-bit colormap, non-interlaced\012- data
Size:   2192
Md5:    c90348c562ec643acfbdf36d973d8326
Sha1:   90c07f0c13fd06f043d36c223eb9afaa34abdf7c
Sha256: 68cf52e8ce0267c83f6bac7a67944d9b4fe37c74999eed858cde51705a148aca
                                        
                                            GET /img/home-page/coin-3-3.png HTTP/1.1 
Host: www.megarush.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.megarush.com/nb-no?btag=656126_1F051F782BF1478AB0C042E35F07CBBC
Cookie: geoip_country=no; webserver=megarush-prd-58d9bc46b7-c6rj2; geoip_country=no; LanguageCode=nb-no; 73284d4086c9c5cd43ecdef7e2965d52=ce9b33b85ec97421fa7db232ed6ef05c; _ga=GA1.2.637062566.1662263755; _gid=GA1.2.1463463030.1662263755; _gat_UA-143790984-2=1; btag=656126_1F051F782BF1478AB0C042E35F07CBBC
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.22.30.168
HTTP/2 200 OK
content-type: image/png
                                        
date: Sun, 04 Sep 2022 03:55:58 GMT
content-length: 1807
last-modified: Mon, 06 Jun 2022 07:18:34 GMT
etag: "629daa4a-70f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 7710143
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7453caea68850b65-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 64 x 71, 8-bit colormap, non-interlaced\012- data
Size:   1807
Md5:    fbdad22b02cf9a7a23c2f0553b1459e7
Sha1:   b64101b18924eba076f35318cce3e8a8bdec28b0
Sha256: 7aab4f9003ad7bd6b60fc361b6f2a0d2ddda28b35ea8ef6b0eff0f9a2cb81680
                                        
                                            POST /rec/page HTTP/1.1 
Host: rs.fullstory.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 351
Origin: https://www.megarush.com
Connection: keep-alive
Referer: https://www.megarush.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         35.186.194.58
HTTP/2 202 Accepted
content-type: text/plain; charset=utf-8
                                        
access-control-allow-credentials: true
access-control-allow-origin: https://www.megarush.com
x-content-type-options: nosniff
date: Sun, 04 Sep 2022 03:55:58 GMT
content-length: 49
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text
Size:   49
Md5:    c2d1b73bed772b2225954d302cea4c22
Sha1:   3118c449fbd379661710e6e03395152673b0a835
Sha256: 316f11bc05cdbfa020520469236dbc4c85c1583cb049c1ac61d43b1672d4840d
                                        
                                            GET /img/home-page/coin-1-1.png HTTP/1.1 
Host: www.megarush.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.megarush.com/nb-no?btag=656126_1F051F782BF1478AB0C042E35F07CBBC
Cookie: geoip_country=no; webserver=megarush-prd-58d9bc46b7-c6rj2; geoip_country=no; LanguageCode=nb-no; 73284d4086c9c5cd43ecdef7e2965d52=ce9b33b85ec97421fa7db232ed6ef05c; _ga=GA1.2.637062566.1662263755; _gid=GA1.2.1463463030.1662263755; _gat_UA-143790984-2=1; btag=656126_1F051F782BF1478AB0C042E35F07CBBC
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.22.30.168
HTTP/2 200 OK
content-type: image/png
                                        
date: Sun, 04 Sep 2022 03:55:58 GMT
content-length: 4257
last-modified: Thu, 30 Sep 2021 14:59:04 GMT
etag: "6155d0b8-10a1"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 29249154
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7453caea888f0b65-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 106 x 105, 8-bit colormap, non-interlaced\012- data
Size:   4257
Md5:    214e2f889379dcba70bace5878068150
Sha1:   d6873dae324b9fd44a70e73f20dc9eb81253a7ae
Sha256: bb731b067cd838fadedeab50866dc81f725b8f6e49f4dc2e3b4332eae36c9ef0
                                        
                                            GET /img/home-page/mega-jackpots.png HTTP/1.1 
Host: www.megarush.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.megarush.com/nb-no?btag=656126_1F051F782BF1478AB0C042E35F07CBBC
Cookie: geoip_country=no; webserver=megarush-prd-58d9bc46b7-c6rj2; geoip_country=no; LanguageCode=nb-no; 73284d4086c9c5cd43ecdef7e2965d52=ce9b33b85ec97421fa7db232ed6ef05c; _ga=GA1.2.637062566.1662263755; _gid=GA1.2.1463463030.1662263755; _gat_UA-143790984-2=1; btag=656126_1F051F782BF1478AB0C042E35F07CBBC
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.22.30.168
HTTP/2 200 OK
content-type: image/png
                                        
date: Sun, 04 Sep 2022 03:55:58 GMT
content-length: 63747
last-modified: Mon, 06 Jun 2022 07:18:34 GMT
etag: "629daa4a-f903"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 7703684
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7453caea888d0b65-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 1618 x 188, 8-bit colormap, non-interlaced\012- data
Size:   63747
Md5:    b4342b052aabdba3960a5b2b5c7e519a
Sha1:   aebc2a2c7be9d8d2895694af3fde7674affef4c2
Sha256: d3fa51da3d01f8341766925f65cf161fc2e403be7594f213c5019f8e27f3ad1d
                                        
                                            GET /img/home-page/coin-2-2.png HTTP/1.1 
Host: www.megarush.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.megarush.com/nb-no?btag=656126_1F051F782BF1478AB0C042E35F07CBBC
Cookie: geoip_country=no; webserver=megarush-prd-58d9bc46b7-c6rj2; geoip_country=no; LanguageCode=nb-no; 73284d4086c9c5cd43ecdef7e2965d52=ce9b33b85ec97421fa7db232ed6ef05c; _ga=GA1.2.637062566.1662263755; _gid=GA1.2.1463463030.1662263755; _gat_UA-143790984-2=1; btag=656126_1F051F782BF1478AB0C042E35F07CBBC
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.22.30.168
HTTP/2 200 OK
content-type: image/png
                                        
date: Sun, 04 Sep 2022 03:55:58 GMT
content-length: 2616
last-modified: Thu, 25 Aug 2022 14:33:43 GMT
etag: "63078847-a38"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1940
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7453caea98980b65-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 61 x 69, 8-bit colormap, non-interlaced\012- data
Size:   2616
Md5:    bba9175cb7f05129ab03029f757b73ec
Sha1:   3efab582d082e5eb7f9ad9106f564c6f95e1fcc0
Sha256: 5ec2a2d82d3f356dcda627c1858e64278702b9c348f707287c9e72d0cbe05ad7
                                        
                                            GET /img/home-page/coin-2-1.png HTTP/1.1 
Host: www.megarush.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.megarush.com/nb-no?btag=656126_1F051F782BF1478AB0C042E35F07CBBC
Cookie: geoip_country=no; webserver=megarush-prd-58d9bc46b7-c6rj2; geoip_country=no; LanguageCode=nb-no; 73284d4086c9c5cd43ecdef7e2965d52=ce9b33b85ec97421fa7db232ed6ef05c; _ga=GA1.2.637062566.1662263755; _gid=GA1.2.1463463030.1662263755; _gat_UA-143790984-2=1; btag=656126_1F051F782BF1478AB0C042E35F07CBBC
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.22.30.168
HTTP/2 200 OK
content-type: image/png
                                        
date: Sun, 04 Sep 2022 03:55:58 GMT
content-length: 3452
last-modified: Thu, 30 Sep 2021 14:59:04 GMT
etag: "6155d0b8-d7c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 29249154
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7453caea98960b65-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 80 x 64, 8-bit colormap, non-interlaced\012- data
Size:   3452
Md5:    09e800f81a52a109cbf3a8b2f8e727bf
Sha1:   d44509cdbddce4991b70f10276c47786e9993d0b
Sha256: 8ab09b1bcb8c69b51ba57b7c5ee96a36994e6e97e7df49d3cce993e8881ff376
                                        
                                            GET /img/benefits/promotions.png HTTP/1.1 
Host: www.megarush.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.megarush.com/nb-no?btag=656126_1F051F782BF1478AB0C042E35F07CBBC
Cookie: geoip_country=no; webserver=megarush-prd-58d9bc46b7-c6rj2; geoip_country=no; LanguageCode=nb-no; 73284d4086c9c5cd43ecdef7e2965d52=ce9b33b85ec97421fa7db232ed6ef05c; _ga=GA1.2.637062566.1662263755; _gid=GA1.2.1463463030.1662263755; _gat_UA-143790984-2=1; btag=656126_1F051F782BF1478AB0C042E35F07CBBC
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.22.30.168
HTTP/2 200 OK
content-type: image/png
                                        
date: Sun, 04 Sep 2022 03:55:58 GMT
content-length: 21005
last-modified: Thu, 25 Aug 2022 14:33:43 GMT
etag: "63078847-520d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 825441
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7453caea989a0b65-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 216 x 216, 8-bit/color RGBA, non-interlaced\012- data
Size:   21005
Md5:    0d9863db2ba8c87a673de9ea91482d5e
Sha1:   daca14014aeb80e137b6682a8c816cdd92639b2c
Sha256: 131582b1399fc62d9464a553a37bf6938d29fa48852a4d2564a3f6315f366911
                                        
                                            GET /img/home-page/coin-3-1.png HTTP/1.1 
Host: www.megarush.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.megarush.com/nb-no?btag=656126_1F051F782BF1478AB0C042E35F07CBBC
Cookie: geoip_country=no; webserver=megarush-prd-58d9bc46b7-c6rj2; geoip_country=no; LanguageCode=nb-no; 73284d4086c9c5cd43ecdef7e2965d52=ce9b33b85ec97421fa7db232ed6ef05c; _ga=GA1.2.637062566.1662263755; _gid=GA1.2.1463463030.1662263755; _gat_UA-143790984-2=1; btag=656126_1F051F782BF1478AB0C042E35F07CBBC
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.22.30.168
HTTP/2 200 OK
content-type: image/png
                                        
date: Sun, 04 Sep 2022 03:55:58 GMT
content-length: 4434
last-modified: Thu, 30 Sep 2021 14:59:04 GMT
etag: "6155d0b8-1152"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 29249154
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7453caea98990b65-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 118 x 119, 8-bit colormap, non-interlaced\012- data
Size:   4434
Md5:    3da73129d9d4dd65c43060dacf06f3df
Sha1:   9abf4ea9710ba53af92778718c245ddf64c42a5f
Sha256: 6b899e2fa680a916e6d1fe6226eaff68b415eee4658537497ae951024d5793a6
                                        
                                            GET /img/benefits/loyalty.png HTTP/1.1 
Host: www.megarush.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.megarush.com/nb-no?btag=656126_1F051F782BF1478AB0C042E35F07CBBC
Cookie: geoip_country=no; webserver=megarush-prd-58d9bc46b7-c6rj2; geoip_country=no; LanguageCode=nb-no; 73284d4086c9c5cd43ecdef7e2965d52=ce9b33b85ec97421fa7db232ed6ef05c; _ga=GA1.2.637062566.1662263755; _gid=GA1.2.1463463030.1662263755; _gat_UA-143790984-2=1; btag=656126_1F051F782BF1478AB0C042E35F07CBBC
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.22.30.168
HTTP/2 200 OK
content-type: image/png
                                        
date: Sun, 04 Sep 2022 03:55:58 GMT
content-length: 9659
last-modified: Mon, 06 Jun 2022 07:18:34 GMT
etag: "629daa4a-25bb"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 7705986
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7453caea989d0b65-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 216 x 216, 8-bit colormap, non-interlaced\012- data
Size:   9659
Md5:    df4d6dc1ebb3bbbace8d15ec77486d46
Sha1:   287e7185a17258c716cbf616aa95287c0db255a9
Sha256: a6332d5469054e898655c9dc6f8fba37e6c300b523199c1a18441f7ce62878d8
                                        
                                            GET /img/benefits/megaclub.png HTTP/1.1 
Host: www.megarush.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.megarush.com/nb-no?btag=656126_1F051F782BF1478AB0C042E35F07CBBC
Cookie: geoip_country=no; webserver=megarush-prd-58d9bc46b7-c6rj2; geoip_country=no; LanguageCode=nb-no; 73284d4086c9c5cd43ecdef7e2965d52=ce9b33b85ec97421fa7db232ed6ef05c; _ga=GA1.2.637062566.1662263755; _gid=GA1.2.1463463030.1662263755; _gat_UA-143790984-2=1; btag=656126_1F051F782BF1478AB0C042E35F07CBBC
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.22.30.168
HTTP/2 200 OK
content-type: image/png
                                        
date: Sun, 04 Sep 2022 03:55:58 GMT
content-length: 10578
last-modified: Tue, 16 Aug 2022 12:19:34 GMT
etag: "62fb8b56-2952"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 930964
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7453caea989e0b65-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 216 x 216, 8-bit colormap, non-interlaced\012- data
Size:   10578
Md5:    6a13cb2219f5d42d2a9c95d9104ef8b2
Sha1:   7fcbf688a27942e5fc89d5796144c17095336a41
Sha256: 02796f7fee25c816673368b88fae179a1d4ac8210b8c1dd5198825e56e592e66
                                        
                                            GET /img/home-page/feel-the-rush.png HTTP/1.1 
Host: www.megarush.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.megarush.com/nb-no?btag=656126_1F051F782BF1478AB0C042E35F07CBBC
Cookie: geoip_country=no; webserver=megarush-prd-58d9bc46b7-c6rj2; geoip_country=no; LanguageCode=nb-no; 73284d4086c9c5cd43ecdef7e2965d52=ce9b33b85ec97421fa7db232ed6ef05c; _ga=GA1.2.637062566.1662263755; _gid=GA1.2.1463463030.1662263755; _gat_UA-143790984-2=1; btag=656126_1F051F782BF1478AB0C042E35F07CBBC
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.22.30.168
HTTP/2 200 OK
content-type: image/png
                                        
date: Sun, 04 Sep 2022 03:55:58 GMT
content-length: 48691
last-modified: Thu, 30 Sep 2021 14:59:04 GMT
etag: "6155d0b8-be33"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 29249154
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7453caea98a20b65-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 1382 x 188, 8-bit colormap, non-interlaced\012- data
Size:   48691
Md5:    141c6d0e374b086cf1d604173cb607c8
Sha1:   9e5531e6e26ad4cb621dd35d9521b167ce99ca53
Sha256: c4bace32963528c901f6784df93b3aecc91e0b39b70cd6ba77bcce02c4e983e2
                                        
                                            GET /img/affiliates/norges-casino.png HTTP/1.1 
Host: www.megarush.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.megarush.com/nb-no?btag=656126_1F051F782BF1478AB0C042E35F07CBBC
Cookie: geoip_country=no; webserver=megarush-prd-58d9bc46b7-c6rj2; geoip_country=no; LanguageCode=nb-no; 73284d4086c9c5cd43ecdef7e2965d52=ce9b33b85ec97421fa7db232ed6ef05c; _ga=GA1.2.637062566.1662263755; _gid=GA1.2.1463463030.1662263755; _gat_UA-143790984-2=1; btag=656126_1F051F782BF1478AB0C042E35F07CBBC
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.22.30.168
HTTP/2 200 OK
content-type: image/png
                                        
date: Sun, 04 Sep 2022 03:55:58 GMT
content-length: 12111
last-modified: Mon, 23 Aug 2021 13:22:11 GMT
etag: "6123a103-2f4f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 32474582
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7453caeab8ac0b65-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 800 x 104, 8-bit colormap, non-interlaced\012- data
Size:   12111
Md5:    453efb7650d4c514229ddc7cb4b5d04f
Sha1:   f00e51876a720516521db90908019e5ccebe0397
Sha256: d4d9aa8ca8aba5b99c183e32aee4d416e8c7768dffeb84e644e2ef5c597c546e
                                        
                                            GET /img/affiliates/online-gamblers.png HTTP/1.1 
Host: www.megarush.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.megarush.com/nb-no?btag=656126_1F051F782BF1478AB0C042E35F07CBBC
Cookie: geoip_country=no; webserver=megarush-prd-58d9bc46b7-c6rj2; geoip_country=no; LanguageCode=nb-no; 73284d4086c9c5cd43ecdef7e2965d52=ce9b33b85ec97421fa7db232ed6ef05c; _ga=GA1.2.637062566.1662263755; _gid=GA1.2.1463463030.1662263755; _gat_UA-143790984-2=1; btag=656126_1F051F782BF1478AB0C042E35F07CBBC
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.22.30.168
HTTP/2 200 OK
content-type: image/png
                                        
date: Sun, 04 Sep 2022 03:55:58 GMT
content-length: 14178
last-modified: Thu, 25 Aug 2022 14:33:43 GMT
etag: "63078847-3762"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1192
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7453caeab8ab0b65-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 800 x 104, 8-bit/color RGBA, non-interlaced\012- data
Size:   14178
Md5:    9c612bb3dbe37436b86ec881eecb90c4
Sha1:   45722b1f16d3b61f2803fa3bb78403414bd3a442
Sha256: e92c2f751a6eddbd489bf745193c6af18af7d1f270396f0a0d40efc778c5672c
                                        
                                            GET /img/icons/pragmaticPlay.svg HTTP/1.1 
Host: www.megarush.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.megarush.com/nb-no?btag=656126_1F051F782BF1478AB0C042E35F07CBBC
Cookie: geoip_country=no; webserver=megarush-prd-58d9bc46b7-c6rj2; geoip_country=no; LanguageCode=nb-no; 73284d4086c9c5cd43ecdef7e2965d52=ce9b33b85ec97421fa7db232ed6ef05c; _ga=GA1.2.637062566.1662263755; _gid=GA1.2.1463463030.1662263755; _gat_UA-143790984-2=1; btag=656126_1F051F782BF1478AB0C042E35F07CBBC
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.22.30.168
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Sun, 04 Sep 2022 03:55:58 GMT
last-modified: Mon, 06 Jun 2022 07:18:34 GMT
etag: W/"629daa4a-1799"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 7542777
vary: Accept-Encoding
server: cloudflare
cf-ray: 7453caea888c0b65-OSL
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   2923
Md5:    fe1a6460bd0e7d22817de17c56b822ab
Sha1:   51657459aebe1352c1f171c13d0a6e35eea45042
Sha256: 9b81bdea26f2a3da6ef273aa5a8b7d42910a96f1d6c143906629516bdd458307
                                        
                                            GET /games/no_NO.json HTTP/1.1 
Host: megalotto-static.gigmagic.io
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.megarush.com/
Origin: https://www.megarush.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         172.64.149.99
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
date: Sun, 04 Sep 2022 03:55:58 GMT
content-length: 713442
access-control-allow-origin: *
access-control-allow-methods: GET, POST
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
last-modified: Mon, 29 Aug 2022 13:00:08 GMT
etag: "a0b00db38fe6cec9071251cd729d7ab9"
content-encoding: gzip
accept-ranges: bytes
set-cookie: e242caeacb7729c5149f03e087bd04c7=1b3a24f4123fe071faad6589460b775b; path=/; HttpOnly; Secure; SameSite=None
cache-control: private
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7453caea0f33b51d-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Size:   713442
Md5:    a0b00db38fe6cec9071251cd729d7ab9
Sha1:   231d882f806fce7654c5a0e261d17ee047091a3a
Sha256: bda273d421c0442a5cb6f57efbc6bd8cc993e47333057777fd79ec4dc6dcb43f
                                        
                                            GET /img/icons/live-casino--flat.svg HTTP/1.1 
Host: www.megarush.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.megarush.com/nb-no?btag=656126_1F051F782BF1478AB0C042E35F07CBBC
Connection: keep-alive
Cookie: geoip_country=no; webserver=megarush-prd-58d9bc46b7-c6rj2; geoip_country=no; LanguageCode=nb-no; 73284d4086c9c5cd43ecdef7e2965d52=ce9b33b85ec97421fa7db232ed6ef05c; _ga=GA1.2.637062566.1662263755; _gid=GA1.2.1463463030.1662263755; _gat_UA-143790984-2=1; btag=656126_1F051F782BF1478AB0C042E35F07CBBC
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.22.30.168
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Sun, 04 Sep 2022 03:55:58 GMT
last-modified: Mon, 23 Aug 2021 13:22:11 GMT
etag: W/"6123a103-f78"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 32474581
vary: Accept-Encoding
server: cloudflare
cf-ray: 7453caeb78f70b65-OSL
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   2229
Md5:    cce290f7ad51cc991b59732e57a7526c
Sha1:   c30a4a4987b7709d3aa09f593bde4d46841a9337
Sha256: cb9ee1662aafa1ad98e45a72b283d985f30e26d6461969e72f89384ad2075389
                                        
                                            GET /img/icons/visa--white.svg HTTP/1.1 
Host: www.megarush.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.megarush.com/nb-no?btag=656126_1F051F782BF1478AB0C042E35F07CBBC
Connection: keep-alive
Cookie: geoip_country=no; webserver=megarush-prd-58d9bc46b7-c6rj2; geoip_country=no; LanguageCode=nb-no; 73284d4086c9c5cd43ecdef7e2965d52=ce9b33b85ec97421fa7db232ed6ef05c; _ga=GA1.2.637062566.1662263755; _gid=GA1.2.1463463030.1662263755; _gat_UA-143790984-2=1; btag=656126_1F051F782BF1478AB0C042E35F07CBBC
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.22.30.168
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Sun, 04 Sep 2022 03:55:58 GMT
last-modified: Mon, 23 Aug 2021 13:22:11 GMT
etag: W/"6123a103-279"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 32474581
vary: Accept-Encoding
server: cloudflare
cf-ray: 7453caeb88fc0b65-OSL
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   3547
Md5:    52b56427323074ce2afffb9ccc90c8b8
Sha1:   5c400b64a4f275a1c5d1c25279b173bbae31f774
Sha256: 9301b5114486b3b82b05bfdd4c917da61009dd859e8a32cf3648ece6f335709e
                                        
                                            GET /img/icons/promotions--flat.svg HTTP/1.1 
Host: www.megarush.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.megarush.com/nb-no?btag=656126_1F051F782BF1478AB0C042E35F07CBBC
Connection: keep-alive
Cookie: geoip_country=no; webserver=megarush-prd-58d9bc46b7-c6rj2; geoip_country=no; LanguageCode=nb-no; 73284d4086c9c5cd43ecdef7e2965d52=ce9b33b85ec97421fa7db232ed6ef05c; _ga=GA1.2.637062566.1662263755; _gid=GA1.2.1463463030.1662263755; _gat_UA-143790984-2=1; btag=656126_1F051F782BF1478AB0C042E35F07CBBC
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.22.30.168
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Sun, 04 Sep 2022 03:55:58 GMT
last-modified: Mon, 28 Feb 2022 16:02:10 GMT
etag: W/"621cf202-1d7"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 16199453
vary: Accept-Encoding
server: cloudflare
cf-ray: 7453caeb78f80b65-OSL
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   5861
Md5:    21c4f00c8edb0f9bc3b478bba2471440
Sha1:   ae415f78c1169bf92aa270f09899fd9ac32c0b4b
Sha256: 9f45d452540896801cf83e9e4f0d3c878958387e1aea318a0a57dad68fee2807
                                        
                                            GET /img/icons/begambleaware.svg HTTP/1.1 
Host: www.megarush.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.megarush.com/nb-no?btag=656126_1F051F782BF1478AB0C042E35F07CBBC
Connection: keep-alive
Cookie: geoip_country=no; webserver=megarush-prd-58d9bc46b7-c6rj2; geoip_country=no; LanguageCode=nb-no; 73284d4086c9c5cd43ecdef7e2965d52=ce9b33b85ec97421fa7db232ed6ef05c; _ga=GA1.2.637062566.1662263755; _gid=GA1.2.1463463030.1662263755; _gat_UA-143790984-2=1; btag=656126_1F051F782BF1478AB0C042E35F07CBBC
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.22.30.168
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Sun, 04 Sep 2022 03:55:58 GMT
last-modified: Mon, 23 Aug 2021 13:22:11 GMT
etag: W/"6123a103-18df"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 32474581
vary: Accept-Encoding
server: cloudflare
cf-ray: 7453caebe9290b65-OSL
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   37922
Md5:    e09e2ccfb133c9625743ddf09f350663
Sha1:   46ac43f68c8b6f91f83074bee7723146f3158eb0
Sha256: 9c29a4943ae3483edfb62bed1e72143627bb94c87d91cf25dbff5d1f5b4cbbf1
                                        
                                            GET /img/home-page/smoke-2.png HTTP/1.1 
Host: www.megarush.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.megarush.com/index.30053c2cd5717880348c.css
Cookie: geoip_country=no; webserver=megarush-prd-58d9bc46b7-c6rj2; geoip_country=no; LanguageCode=nb-no; 73284d4086c9c5cd43ecdef7e2965d52=ce9b33b85ec97421fa7db232ed6ef05c; _ga=GA1.2.637062566.1662263755; _gid=GA1.2.1463463030.1662263755; _gat_UA-143790984-2=1; btag=656126_1F051F782BF1478AB0C042E35F07CBBC
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.22.30.168
HTTP/2 200 OK
content-type: image/png
                                        
date: Sun, 04 Sep 2022 03:55:58 GMT
content-length: 74825
last-modified: Mon, 06 Jun 2022 07:18:34 GMT
etag: "629daa4a-12449"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 7710143
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7453caed09980b65-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 1187 x 471, 8-bit/color RGBA, non-interlaced\012- data
Size:   74825
Md5:    b52d54230805a82ccdbc1484c6bde4aa
Sha1:   73fcb683ec6b5598a0b89138843c479d5f479fe0
Sha256: 97b1cfcdf70c6c432984de8f4c9350281c61d6503bd8cd1add15e46ea359eade
                                        
                                            GET /img/logo.113ce962.svg HTTP/1.1 
Host: www.megarush.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.megarush.com/index.30053c2cd5717880348c.css
Cookie: geoip_country=no; webserver=megarush-prd-58d9bc46b7-c6rj2; geoip_country=no; LanguageCode=nb-no; 73284d4086c9c5cd43ecdef7e2965d52=ce9b33b85ec97421fa7db232ed6ef05c; _ga=GA1.2.637062566.1662263755; _gid=GA1.2.1463463030.1662263755; _gat_UA-143790984-2=1; btag=656126_1F051F782BF1478AB0C042E35F07CBBC
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.22.30.168
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Sun, 04 Sep 2022 03:55:58 GMT
last-modified: Mon, 06 Jun 2022 07:18:34 GMT
etag: W/"629daa4a-cf7"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 7705986
vary: Accept-Encoding
server: cloudflare
cf-ray: 7453caed09910b65-OSL
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   55051
Md5:    07b86cdac5590d1960668988dc6d0e2f
Sha1:   ae713faae6029b55956a31c32b2fc774e0342308
Sha256: 9b522a3e57e18713cc42e7672e58e25d90ba93d8722a1944abfbf4a78f48bf1f
                                        
                                            GET /img/home-page/glows/purple-jackpot.svg HTTP/1.1 
Host: www.megarush.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.megarush.com/index.30053c2cd5717880348c.css
Cookie: geoip_country=no; webserver=megarush-prd-58d9bc46b7-c6rj2; geoip_country=no; LanguageCode=nb-no; 73284d4086c9c5cd43ecdef7e2965d52=ce9b33b85ec97421fa7db232ed6ef05c; _ga=GA1.2.637062566.1662263755; _gid=GA1.2.1463463030.1662263755; _gat_UA-143790984-2=1; btag=656126_1F051F782BF1478AB0C042E35F07CBBC
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.22.30.168
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Sun, 04 Sep 2022 03:55:58 GMT
last-modified: Mon, 06 Jun 2022 07:18:34 GMT
etag: W/"629daa4a-255"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 7683281
vary: Accept-Encoding
server: cloudflare
cf-ray: 7453caed199c0b65-OSL
content-encoding: gzip
X-Firefox-Spdy: h2

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "87C27C4B0288F31FAA405BA5247767D1F299938551BD284212EE487DBB0DEB63"
Last-Modified: Fri, 02 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2277
Expires: Sun, 04 Sep 2022 04:33:56 GMT
Date: Sun, 04 Sep 2022 03:55:59 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "87C27C4B0288F31FAA405BA5247767D1F299938551BD284212EE487DBB0DEB63"
Last-Modified: Fri, 02 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2277
Expires: Sun, 04 Sep 2022 04:33:56 GMT
Date: Sun, 04 Sep 2022 03:55:59 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa7142280-0dbd-4c8e-a960-d357c9143af6.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 5652
x-amzn-requestid: 05fffcb2-43c0-4acf-81b2-1b914459e1e9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X5wwHErUIAMFmNw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6313c800-47fe166763992ab271a87aa4;Sampled=0
x-amzn-remapped-date: Sat, 03 Sep 2022 21:32:48 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: uz2NbcE4AmOvFQkhJALSpXCGizilya0TuFcczfEwtV09cGXtgVNlpQ==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 cd858042f70b416ca05e042acf3908a4.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Sep 2022 22:04:35 GMT
etag: "e5b5b649a243e5c004d9923d19d4421d1ea96d23"
age: 21084
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5652
Md5:    10318189f33f071dda64249ab9c8c5bb
Sha1:   e5b5b649a243e5c004d9923d19d4421d1ea96d23
Sha256: 3e775a1990e4d185024faf2fdff7a5eb9063f7ee19784f32fb4f7f10643c8102
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "87C27C4B0288F31FAA405BA5247767D1F299938551BD284212EE487DBB0DEB63"
Last-Modified: Fri, 02 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2277
Expires: Sun, 04 Sep 2022 04:33:56 GMT
Date: Sun, 04 Sep 2022 03:55:59 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F55a1dd43-45fc-44ee-98c0-7d02bbb304e8.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 2892
x-amzn-requestid: b627015a-7ace-47d7-ac63-634f5bb22738
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X5wifEj8IAMFgmw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6313c7a9-767a955409370ca961a4ffc6;Sampled=0
x-amzn-remapped-date: Sat, 03 Sep 2022 21:31:21 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: ZkvvX9Qe1lwx2SKOylUWb4-IWRnUwuIlda3qCMCYVwxbf0d1s4_sUA==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 ee330666adf9f04c8c30094f8ddcd004.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Sep 2022 22:04:35 GMT
age: 21084
etag: "3cff738f27f14e9cad6e9ecf905bade182359090"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   2892
Md5:    805c1612e6c8fb3c982d4771e2834337
Sha1:   3cff738f27f14e9cad6e9ecf905bade182359090
Sha256: f8273376b33895f655f207bc3753f4c9b3887c9ec5dd149549009bfc2086ff2e
                                        
                                            GET /img/icons/casino--side-nav.svg HTTP/1.1 
Host: www.megarush.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.megarush.com/nb-no?btag=656126_1F051F782BF1478AB0C042E35F07CBBC
Connection: keep-alive
Cookie: geoip_country=no; webserver=megarush-prd-58d9bc46b7-c6rj2; geoip_country=no; LanguageCode=nb-no; 73284d4086c9c5cd43ecdef7e2965d52=ce9b33b85ec97421fa7db232ed6ef05c; _ga=GA1.2.637062566.1662263755; _gid=GA1.2.1463463030.1662263755; _gat_UA-143790984-2=1; btag=656126_1F051F782BF1478AB0C042E35F07CBBC
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.22.30.168
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Sun, 04 Sep 2022 03:55:58 GMT
last-modified: Mon, 28 Feb 2022 09:33:37 GMT
etag: W/"621c96f1-9ef"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 16222179
vary: Accept-Encoding
server: cloudflare
cf-ray: 7453caeb38d60b65-OSL
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   63181
Md5:    17b9251f789e561b3d595d95d39d98af
Sha1:   a694974b405b8797cf865da727112e84f31991f0
Sha256: 128131fc88bfbf5678a211eb437915d9fee2a15ae96a602f35d049f139794623
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa54e2726-407f-4a8a-8d19-21de249844f5.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 11380
x-amzn-requestid: 61f37e21-33a8-49e6-b384-4ca1fcfbffa5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Xz8TLFA3oAMFQjg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63117414-42de5c4128eb9e011d848356;Sampled=0
x-amzn-remapped-date: Fri, 02 Sep 2022 03:10:12 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: sywGj-wLtW091vZYhx1AbRAgljYQWe6LuffDjwTDhEebqVzxpQuzEQ==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 d01e7742f82df0bbc1fb681d709ed69c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Sep 2022 03:48:58 GMT
age: 421
etag: "6ce530af682094dc5413db9de02565691fab4da7"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   11380
Md5:    fc4ceb10dd9fcaab21ae58dcf10c401f
Sha1:   6ce530af682094dc5413db9de02565691fab4da7
Sha256: 84ad58e126cce2ab6b1568ffe89a116bc1de0310bb72d4530eead2fb8191572c
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F87cad5e1-a1b5-47c6-9dc3-339735fecc60.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6129
x-amzn-requestid: 93447f39-3086-4613-8d08-5c766fb52a16
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X5xR7GuyoAMF0DA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6313c8d8-7f2c8d6d0edee0d05a3f8a72;Sampled=0
x-amzn-remapped-date: Sat, 03 Sep 2022 21:36:25 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 91ogcZ8rC1iagqvUg46tAUFai_xVKGWTDlT74jsc4ENaOoefz8tQ1A==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 5954c6394458ffb44c970b3819d7ff2a.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Sep 2022 21:48:07 GMT
age: 22072
etag: "87d4277c53e3320b8f0f9e564c112ade8e6fa8d9"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6129
Md5:    963f97e0ee4ae7015a7d9c6920aeb064
Sha1:   87d4277c53e3320b8f0f9e564c112ade8e6fa8d9
Sha256: ee1a5565dec52bb123104a4a4f9edf764e2ad7929869299a14307f6e00a50fee
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc410b0d8-b008-47cc-bbf7-a762c06e0fcd.png HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8688
x-amzn-requestid: e408351e-ba6c-4e55-815d-449af808282f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X5yMEFBLoAMFtqg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6313ca4d-13831d8572a3b3cf54a0e747;Sampled=0
x-amzn-remapped-date: Sat, 03 Sep 2022 21:42:37 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: GFM9jerDkTPdhlUTm99E7Lpksw2ZGnV81bNVaZLvWSAiRNDNtkZi4g==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 b8c4a4ca04bb1976e020396d211bc8dc.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Sep 2022 21:48:07 GMT
etag: "2768253dacaaad6cb498c6b2eb7694208b0ce0a6"
age: 22072
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8688
Md5:    6bb4b1d74f1443bc3328301ab3ae6464
Sha1:   2768253dacaaad6cb498c6b2eb7694208b0ce0a6
Sha256: 07dcc95dab7757402998a5a61b540c965ce95c8bd51a814a09438981693b563a
                                        
                                            GET /img/icons/mga.svg HTTP/1.1 
Host: www.megarush.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.megarush.com/nb-no?btag=656126_1F051F782BF1478AB0C042E35F07CBBC
Connection: keep-alive
Cookie: geoip_country=no; webserver=megarush-prd-58d9bc46b7-c6rj2; geoip_country=no; LanguageCode=nb-no; 73284d4086c9c5cd43ecdef7e2965d52=ce9b33b85ec97421fa7db232ed6ef05c; _ga=GA1.2.637062566.1662263755; _gid=GA1.2.1463463030.1662263755; _gat_UA-143790984-2=1; btag=656126_1F051F782BF1478AB0C042E35F07CBBC
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.22.30.168
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Sun, 04 Sep 2022 03:55:58 GMT
last-modified: Mon, 06 Jun 2022 07:18:34 GMT
etag: W/"629daa4a-74d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 7710142
vary: Accept-Encoding
server: cloudflare
cf-ray: 7453caebd9200b65-OSL
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (63673)
Size:   29262
Md5:    69af30696d784f962a8b14f480c0e589
Sha1:   533ca42df14e8323475715819c3c795633b871ad
Sha256: 7885aa3241bb686fce528e38cad0d73a4dc8431fe5ffc38dc4e19bc3f10ce6e9
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1814521f-0914-48f7-8ea7-8c2d8155c055.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10147
x-amzn-requestid: 7c2c3756-fc7b-4386-8c88-f1b42beed37a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XxLzHEAHoAMFV8A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631059ad-063448962d443e107716b726;Sampled=0
x-amzn-remapped-date: Thu, 01 Sep 2022 07:05:17 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: ZGR4HPl3KOfSdZzialXKeNrH_DzJzUvyLlwFtx0MQOp0VNsOtdC-bg==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 91356d2137f5a7345e93da4516c49ec4.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Sep 2022 08:04:39 GMT
age: 71480
etag: "19288de373e2bc69a51c9e0c6f49f5cf4e0d8759"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10147
Md5:    d8aa56bbbb56df10ff381fc5dd250e09
Sha1:   19288de373e2bc69a51c9e0c6f49f5cf4e0d8759
Sha256: 68c4508940b207a3e1d32a38a9f82b1fbabbb97430fe0a5e2ddc75d62c4bdfcc
                                        
                                            POST /igc/megalotto/promotions/filter HTTP/1.1 
Host: megalotto-api.gigmagic.io
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.megarush.com/
Content-Type: application/json; charset=utf-8
X-API-Key: 5c7e3e9c1c62609cee83f960
X-API-Session-Id: 631421cab0671ba2d3ce4759
Origin: https://www.megarush.com
Content-Length: 47
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         172.64.149.99
HTTP/2 200 OK
content-type: application/json
                                        
date: Sun, 04 Sep 2022 03:55:58 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, POST
access-control-allow-headers: X-Requested-With, Content-Type, Accept, X-API-Key, X-API-Session-Id, x-api-sid, X-Request-ID
set-cookie: e9ef0023e1df886bed2d1501b6b20a23=5e4e526b31225b8d4c9bbe34aedc534e; path=/; HttpOnly; Secure; SameSite=None
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7453caea7f80b51d-OSL
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- HTML document, Unicode text, UTF-8 text, with very long lines (65498), with no line terminators
Size:   218028
Md5:    ff0877c0540e541aa77f0fbf482bdd37
Sha1:   627f20063114992fc83670d6b9ca4f1ab17fff9d
Sha256: 0c6425635b78b637f9de382a0bd7ba98d0cf0a8d641dcaeb761e8126bf2732d4
                                        
                                            GET /Serving/TrackPoint/?pm=2381934&ADFdivider=%7C&ord=276755648224&Set1=en-US%7Cen-US%7C1280x1024%7C24&ADFtpmode=2&loc=https%3A%2F%2Fwww.megarush.com%2Fnb-no%3Fbtag%3D656126_1F051F782BF1478AB0C042E35F07CBBC HTTP/1.1 
Host: track.adform.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.megarush.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         37.157.6.245
HTTP/2 302 Found
content-type: text/html; charset=utf-8
                                        
server: nginx
date: Sun, 04 Sep 2022 03:55:58 GMT
location: https://track.adform.net/Serving/TrackPoint/?CC=1&pm=2381934&ADFdivider=%7C&ord=276755648224&Set1=en-US%7Cen-US%7C1280x1024%7C24&ADFtpmode=2&loc=https%3A%2F%2Fwww.megarush.com%2Fnb-no%3Fbtag%3D656126_1F051F782BF1478AB0C042E35F07CBBC
cache-control: no-cache, no-store, must-revalidate, no-transform
pragma: no-cache
expires: -1
access-control-allow-origin: *
set-cookie: C=1; domain=adform.net; expires=Tue, 04-Oct-2022 03:55:58 GMT; path=/
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   130273
Md5:    26fb91ce58b92fa09ebb03c942ef0ce5
Sha1:   c9612fa49afb4aef14e7d0f58ccfa2063ef6c456
Sha256: fe6d16d95753d3f04593cb08fc288ae75d2d47fbf88c0831891cf7137a87134b
                                        
                                            GET /promos/img/arcade-machine.png?w=412&auto=format&fm=png HTTP/1.1 
Host: megalotto-img.gigmagic.io
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.megarush.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         172.64.149.99
HTTP/2 200 OK
content-type: image/avif
                                        
date: Sun, 04 Sep 2022 03:55:59 GMT
content-length: 30644
last-modified: Tue, 09 Aug 2022 04:19:00 GMT
cache-control: public, max-age=31536000, private
x-imgix-id: 73e1b6d76cd0ea6107194f5ce3c59e5c75e13086
age: 2245019
accept-ranges: bytes
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10081-SJC, cache-ams12721-AMS
x-cache: MISS, HIT
vary: Accept, User-Agent
set-cookie: e7105a0137896fd7032010d42344fdb4=81f17ed54a83fe51a535d9a669b8de47; path=/; HttpOnly; Secure; SameSite=None
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7453caef58070b02-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ISO Media, AVIF Image\012- data
Size:   30644
Md5:    a120f99e6d07b9526d8720e520942423
Sha1:   57edcb554c28a5787dd54c7f64b12ce9b7007d9b
Sha256: c006a30b946ca1a403a8eaca8cdf20fa22b9ea6912b59023689f6aa65c83b137
                                        
                                            GET /Serving/TrackPoint/?CC=1&pm=2381934&ADFdivider=%7C&ord=276755648224&Set1=en-US%7Cen-US%7C1280x1024%7C24&ADFtpmode=2&loc=https%3A%2F%2Fwww.megarush.com%2Fnb-no%3Fbtag%3D656126_1F051F782BF1478AB0C042E35F07CBBC HTTP/1.1 
Host: track.adform.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.megarush.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         37.157.6.245
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                        
server: nginx
date: Sun, 04 Sep 2022 03:55:59 GMT
content-length: 386
cache-control: no-cache, no-store, must-revalidate, no-transform
pragma: no-cache
content-encoding: gzip
expires: -1
vary: Accept-Encoding
access-control-allow-origin: *
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   386
Md5:    1823861e57cbdc556b59bc586315a004
Sha1:   0195d3ea89fa2ba7b01304bf8980d79aab7dd38d
Sha256: 4760b5531c95159eef9108d22eefc216a683070a9ef60040ccb748a4d954cd88
                                        
                                            GET /img/icons/live-casino--yellow.svg HTTP/1.1 
Host: www.megarush.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.megarush.com/nb-no?btag=656126_1F051F782BF1478AB0C042E35F07CBBC
Connection: keep-alive
Cookie: geoip_country=no; webserver=megarush-prd-58d9bc46b7-c6rj2; geoip_country=no; LanguageCode=nb-no; 73284d4086c9c5cd43ecdef7e2965d52=ce9b33b85ec97421fa7db232ed6ef05c; _ga=GA1.2.637062566.1662263755; _gid=GA1.2.1463463030.1662263755; _gat_UA-143790984-2=1; btag=656126_1F051F782BF1478AB0C042E35F07CBBC
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.22.30.168
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Sun, 04 Sep 2022 03:55:58 GMT
last-modified: Mon, 28 Feb 2022 16:02:10 GMT
etag: W/"621cf202-9b1"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 16199453
vary: Accept-Encoding
server: cloudflare
cf-ray: 7453caeb38dc0b65-OSL
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   86158
Md5:    8854db5bac72a0720a05b5238e77176e
Sha1:   6fdb6c9d2b7f48abe67c7670ba11e658394145ea
Sha256: cf4df19c1dac9d4414d063798a0e6076efb547c313d775ddc0d63dbc34a0f4f2
                                        
                                            POST / HTTP/1.1 
Host: e1.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 346
ETag: "698483B3698FD47FF94D2F79C8B0B66D2D4E489E2EAA465D3BF2876075C51F25"
Last-Modified: Fri, 02 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6743
Expires: Sun, 04 Sep 2022 05:48:22 GMT
Date: Sun, 04 Sep 2022 03:55:59 GMT
Connection: keep-alive

                                        
                                            OPTIONS / HTTP/1.1 
Host: graphql.datocms.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: authorization,content-type
Referer: https://www.megarush.com/
Origin: https://www.megarush.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         172.67.11.48
HTTP/2 200 OK
content-type: text/plain;charset=UTF-8
                                        
date: Sun, 04 Sep 2022 03:55:59 GMT
content-length: 0
access-control-allow-origin: https://www.megarush.com
vary: Origin, Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: authorization, content-type, x-environment, x-include-drafts, x-exclude-invalid
access-control-allow-methods: GET, POST
access-control-expose-headers: x-ratelimit-limit, x-ratelimit-remaining, x-ratelimit-reset, x-entities
access-control-max-age: 1728000
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7453caf0e9c5b4ee-OSL
X-Firefox-Spdy: h2

                                        
                                            GET /video/header-video-720p-av1.mp4 HTTP/1.1 
Host: megalotto-static.gigmagic.io
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Origin: https://www.megarush.com
Connection: keep-alive
Referer: https://www.megarush.com/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         172.64.149.99
HTTP/2 206 Partial Content
content-type: video/mp4
                                        
date: Sun, 04 Sep 2022 03:55:59 GMT
content-length: 981973
access-control-allow-origin: *
access-control-allow-methods: GET, POST
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
last-modified: Wed, 27 Oct 2021 09:33:08 GMT
etag: "2afd3c14d9a3bb96572c32fd6858f451"
cf-cache-status: HIT
age: 936
expires: Sun, 04 Sep 2022 07:55:59 GMT
cache-control: public, max-age=14400
content-range: bytes 0-981972/981973
server: cloudflare
cf-ray: 7453caf11b3fb51d-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]\012- data
Size:   401214
Md5:    48c4148d2851c40c32d77d8ddddcad08
Sha1:   5e1d0f8c3a6ffb7c824af9822b68970efba4133d
Sha256: 8655ef07cb787743c4fbb40471075cb2d9c5ee90180eb7dad6a32996d9485bd3
                                        
                                            GET /?type=dealer&type=spclient HTTP/1.1 
Host: apresolve.spotify.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://open.spotify.com/
Origin: https://open.spotify.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site

search
                                         34.98.74.57
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
cache-control: private, max-age=0
access-control-allow-origin: *
content-encoding: gzip
content-length: 110
date: Sun, 04 Sep 2022 03:55:59 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   110
Md5:    e8548e24d520efc8eb1630adca483541
Sha1:   49802630508318f5b8e3badc1b385f3dc88a0873
Sha256: f9d8a6504b110a604248ee59d3e66def0585e48baab9997ed42546a084a8c0fd
                                        
                                            GET /video/header-video-720p.webm HTTP/1.1 
Host: megalotto-static.gigmagic.io
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Origin: https://www.megarush.com
Connection: keep-alive
Referer: https://www.megarush.com/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         172.64.149.99
HTTP/2 206 Partial Content
content-type: video/webm
                                        
date: Sun, 04 Sep 2022 03:55:59 GMT
content-length: 1336865
access-control-allow-origin: *
access-control-allow-methods: GET, POST
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
last-modified: Wed, 27 Oct 2021 09:33:10 GMT
etag: "63177b286fe4cb8a5431377710ad3715"
cache-control: public, max-age=14400
cf-cache-status: MISS
expires: Sun, 04 Sep 2022 07:55:59 GMT
content-range: bytes 0-1336864/1336865
server: cloudflare
cf-ray: 7453caf13b4fb51d-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  WebM\012- EBML file, creator webmB\20\012- data
Size:   1336865
Md5:    63177b286fe4cb8a5431377710ad3715
Sha1:   e762daea246c011e634a226f6062a9a27a344f80
Sha256: ef3410a95d2b7bea43ca9dffb3e26c92db871a1ab9c2600dedf40847050cf817
                                        
                                            GET /rules-p--B_1AZ6v1_YDr.js HTTP/1.1 
Host: rules.quantcount.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://track.adform.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         54.230.111.16
HTTP/2 200 OK
content-type: application/javascript
                                        
content-length: 271
last-modified: Tue, 23 Aug 2022 12:06:41 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
access-control-allow-methods: GET
date: Sun, 04 Sep 2022 03:54:12 GMT
cache-control: max-age=3600
etag: "34e255255d25312b08a2cc8566b5bf38"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: cmFh4X42dpbKVTw-D2yF9SddpWeV0N7zwr-VbqneJtuus3AiK169jQ==
age: 108
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   271
Md5:    34e255255d25312b08a2cc8566b5bf38
Sha1:   56eb0a5a1cb20d2b51fa071b968ad50a3ac16f85
Sha256: 1980f7805afc0ade5f7d949212900dfe36abaa52cc804b7eeac07a620852cf23
                                        
                                            GET /fonts/CircularSp-Bold-fe1cfc14b7498b187c78fa72fb72d148.woff2 HTTP/1.1 
Host: encore.scdn.co
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://open.spotify.com
Connection: keep-alive
Referer: https://open.spotifycdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         151.101.86.248
HTTP/1.1 200 OK
Content-Type: font/woff2
                                        
Connection: keep-alive
Content-Length: 89536
Last-Modified: Fri, 13 May 2022 11:38:50 GMT
ETag: W/"216b12b5a9657850b1b324e158454f8e"
x-goog-generation: 1652441930609707
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 89529
X-GUploader-Response-Body-Transformations: gunzipped
Warning: 214 UploadServer gunzipped
Accept-Ranges: bytes
Date: Sun, 04 Sep 2022 03:55:59 GMT
Age: 2262366
X-Served-By: cache-ord1728-ORD, cache-chi-kigq8000035-CHI, cache-bma1660-BMA
X-Cache: MISS, HIT, HIT
X-Cache-Hits: 0, 1, 6
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=31536000


--- Additional Info ---
Magic:  data
Size:   89536
Md5:    fe1cfc14b7498b187c78fa72fb72d148
Sha1:   6bec8ce832951162e0ebc4b257e3ee850fe7aade
Sha256: 039130d456855a745451bff40707bee5512bc4466373224b2258f67cc6c6d879
                                        
                                            GET /image/ab67706c0000bebb2e3693913b1f8fbc514da7c8 HTTP/1.1 
Host: i.scdn.co
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://open.spotify.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         151.101.86.248
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Connection: keep-alive
Content-Length: 130780
Last-Modified: Fri, 30 Apr 2021 15:10:01 GMT
ETag: "ccb11204819dd6617e4e1fba9eeb5a84"
x-goog-generation: 1619795401707780
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 130780
Accept-Ranges: bytes
Date: Sun, 04 Sep 2022 03:55:59 GMT
Age: 1023285
Timing-Allow-Origin: *
X-Served-By: cache-chi-kigq8000120-CHI, cache-bma1669-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 1, 1
Access-Control-Allow-Origin: *
Cache-Control: max-age=315360000


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 640x640, components 3\012- data
Size:   130780
Md5:    ccb11204819dd6617e4e1fba9eeb5a84
Sha1:   3f5233f01c8ce71ffddde8694d269ee834964b93
Sha256: f3fa391ba021ceb98c27ff44f743db4d6a4073c0faf83ebf9f030d82bf4e6111
                                        
                                            GET /fonts/CircularSp-Book-4eaffdf96f4c6f984686e93d5d9cb325.woff2 HTTP/1.1 
Host: encore.scdn.co
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://open.spotify.com
Connection: keep-alive
Referer: https://open.spotifycdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         151.101.86.248
HTTP/1.1 200 OK
Content-Type: font/woff2
                                        
Connection: keep-alive
Content-Length: 84088
Last-Modified: Fri, 13 May 2022 11:38:51 GMT
ETag: W/"f7b12903dd7a2d536ceb2b7cd1dba2c1"
x-goog-generation: 1652441931211351
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 84027
X-GUploader-Response-Body-Transformations: gunzipped
Warning: 214 UploadServer gunzipped
Accept-Ranges: bytes
Date: Sun, 04 Sep 2022 03:55:59 GMT
Age: 943645
X-Served-By: cache-chi-klot8100167-CHI, cache-bma1659-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 1, 10
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=31536000


--- Additional Info ---
Magic:  data
Size:   84088
Md5:    4eaffdf96f4c6f984686e93d5d9cb325
Sha1:   8c576f620ae00a66282d8eb10dc2eb580888aaf1
Sha256: 9b7413f945c8b8bb3f75eb10513c7ad79d386e98494d541e5f1fa9301ffbddd6
                                        
                                            GET /pixel?r=2080005601;fpan=1;fpa=P0-1519194287-1662263756963;pbc=;ns=1;ce=0;qjs=1;qv=087c24cc-20220902090643;ref=https%3A%2F%2Fwww.megarush.com%2F;cm=;gdpr=0;d=track.adform.net;dst=0;et=1662263756963;tzo=0;url=https%3A%2F%2Ftrack.adform.net%2Fserving%2Fcontainer%2F%3Fpm%3D2381934%26lid%3D95292615%26ctype%3D0%26media%3D0%26PageName%3Dmegarush.com%252fnb-no%26rnd%3D1222244841%26cpref%3D%26loc%3Dhttps%253a%252f%252fwww.megarush.com%252fnb-no%253fbtag%253d656126_1F051F782BF1478AB0C042E35F07CBBC;ogl= HTTP/1.1 
Host: pxl.qccerttest.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://track.adform.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.81
HTTP/2 200 OK
content-type: image/gif
                                        
content-length: 35
last-modified: Thu, 04 Aug 2022 16:01:04 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Sat, 03 Sep 2022 05:55:33 GMT
etag: "55d25e9dc950d5db4d53a3b195c046c6"
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: nISBxZQ1YEG99y5rjyfNST3TZD2qTYzmL4p2iiSXkcqhTJio0FMZjw==
age: 79227
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   35
Md5:    55d25e9dc950d5db4d53a3b195c046c6
Sha1:   75e91ae3e549dab12ed1c9787ade9131aef1c981
Sha256: a0d3a0aff7dc3bf32d2176fc3dcda6e7aba2867c4f4d1f7af6355d2cfc6c44f8
                                        
                                            GET /pixel;r=267494054;labels=_fp.event.PageView;rf=0;a=p--B_1AZ6v1_YDr;url=https%3A%2F%2Ftrack.adform.net%2Fserving%2Fcontainer%2F%3Fpm%3D2381934%26lid%3D95292615%26ctype%3D0%26media%3D0%26PageName%3Dmegarush.com%252fnb-no%26rnd%3D1222244841%26cpref%3D%26loc%3Dhttps%253a%252f%252fwww.megarush.com%252fnb-no%253fbtag%253d656126_1F051F782BF1478AB0C042E35F07CBBC;ref=https%3A%2F%2Fwww.megarush.com%2F;uht=2;fpan=0;fpa=P0-1519194287-1662263756963;pbc=;ns=1;ce=0;qjs=1;qv=087c24cc-20220902090643;cm=;gdpr=0;d=track.adform.net;dst=0;et=1662263756965;tzo=0;ogl=;ses=ab4da318-7c43-4a75-b431-d1a483dd7fab HTTP/1.1 
Host: pixel.quantserve.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://track.adform.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         91.228.74.244
HTTP/2 200 OK
content-type: image/gif
                                        
date: Sun, 04 Sep 2022 03:56:00 GMT
content-length: 35
cache-control: private, no-cache, no-store, proxy-revalidate
expires: Fri, 04 Aug 1978 12:00:00 GMT
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAo PSDo OUR SAMa IND COM NAV"
pragma: no-cache
set-cookie: mc=631421d0-01421-666eb-d1951; expires=Thu, 05-Oct-2023 03:56:00 GMT; path=/; domain=.quantserve.com
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   35
Md5:    55d25e9dc950d5db4d53a3b195c046c6
Sha1:   75e91ae3e549dab12ed1c9787ade9131aef1c981
Sha256: a0d3a0aff7dc3bf32d2176fc3dcda6e7aba2867c4f4d1f7af6355d2cfc6c44f8
                                        
                                            OPTIONS /gabo-receiver-service/public/v3/events HTTP/1.1 
Host: gew4-spclient.spotify.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://open.spotify.com/
Origin: https://open.spotify.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site

search
                                         35.186.224.17
HTTP/2 200 OK
                                        
access-control-allow-origin: https://open.spotify.com
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,PATCH,POST,PUT,OPTIONS
access-control-allow-headers: Accept,Authorization,Origin,Content-Type,Spotify-App-Version,App-Platform,X-Spotify-Connection-Id,X-Client-Id,X-Spotify-Quicksilver-Uri,client-token,content-access-token,x-cloud-trace-context
access-control-max-age: 604800
vary: Accept-Encoding
date: Sun, 04 Sep 2022 03:56:00 GMT
server: envoy
content-length: 0
via: HTTP/2 edgeproxy, 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

                                        
                                            OPTIONS /gabo-receiver-service/public/v3/events HTTP/1.1 
Host: gew4-spclient.spotify.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://open.spotify.com/
Origin: https://open.spotify.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site

search
                                         35.186.224.17
HTTP/2 200 OK
                                        
access-control-allow-origin: https://open.spotify.com
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,PATCH,POST,PUT,OPTIONS
access-control-allow-headers: Accept,Authorization,Origin,Content-Type,Spotify-App-Version,App-Platform,X-Spotify-Connection-Id,X-Client-Id,X-Spotify-Quicksilver-Uri,client-token,content-access-token,x-cloud-trace-context
access-control-max-age: 604800
vary: Accept-Encoding
date: Sun, 04 Sep 2022 03:56:00 GMT
server: envoy
content-length: 0
via: HTTP/2 edgeproxy, 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

                                        
                                            POST /api/265628/envelope/?sentry_key=db1eaaeafb9044828c39cd41f9805164&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.11.1 HTTP/1.1 
Host: sentry.io
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://open.spotify.com/
Content-Type: text/plain;charset=UTF-8
Origin: https://open.spotify.com
Content-Length: 427
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         35.188.42.15
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Server: nginx
Date: Sun, 04 Sep 2022 03:56:00 GMT
Content-Length: 2
Connection: keep-alive
access-control-allow-origin: https://open.spotify.com
access-control-expose-headers: retry-after, x-sentry-rate-limits, x-sentry-error
vary: Origin
x-envoy-upstream-service-time: 0
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   2
Md5:    99914b932bd37a50b983c5e7c90ae93b
Sha1:   bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
Sha256: 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                        
                                            POST /gabo-receiver-service/public/v3/events HTTP/1.1 
Host: gew4-spclient.spotify.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://open.spotify.com/
content-type: application/json
Origin: https://open.spotify.com
Content-Length: 846
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         35.186.224.17
HTTP/2 200 OK
content-type: application/json
                                        
cache-control: private, max-age=0
access-control-allow-origin: https://open.spotify.com
access-control-allow-headers: Accept, Authorization, Origin, Content-Type, Spotify-App-Version, App-Platform, X-Spotify-Connection-Id, X-Client-Id, X-Spotify-Quicksilver-Uri, client-token, content-access-token, x-cloud-trace-context
access-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE, PATCH
access-control-allow-credentials: true
access-control-max-age: 604800
content-encoding: gzip
content-length: 39
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
date: Sun, 04 Sep 2022 03:56:00 GMT
server: envoy
via: HTTP/2 edgeproxy, 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   39
Md5:    f204785b49c504e43101096fd3a80e31
Sha1:   e92466090f918c8f9c11268c9d0027fe269a90b6
Sha256: 873696e689e27bcfa5259ade21ceefea69203ec493901b0f4634b4f255981b29
                                        
                                            POST /gabo-receiver-service/public/v3/events HTTP/1.1 
Host: gew4-spclient.spotify.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://open.spotify.com/
content-type: application/json
Origin: https://open.spotify.com
Content-Length: 697
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         35.186.224.17
HTTP/2 200 OK
content-type: application/json
                                        
cache-control: private, max-age=0
access-control-allow-origin: https://open.spotify.com
access-control-allow-headers: Accept, Authorization, Origin, Content-Type, Spotify-App-Version, App-Platform, X-Spotify-Connection-Id, X-Client-Id, X-Spotify-Quicksilver-Uri, client-token, content-access-token, x-cloud-trace-context
access-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE, PATCH
access-control-allow-credentials: true
access-control-max-age: 604800
content-encoding: gzip
content-length: 39
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
date: Sun, 04 Sep 2022 03:56:00 GMT
server: envoy
via: HTTP/2 edgeproxy, 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   39
Md5:    f204785b49c504e43101096fd3a80e31
Sha1:   e92466090f918c8f9c11268c9d0027fe269a90b6
Sha256: 873696e689e27bcfa5259ade21ceefea69203ec493901b0f4634b4f255981b29
                                        
                                            GET /?type=dealer&type=spclient HTTP/1.1 
Host: apresolve.spotify.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://open.spotify.com/
Origin: https://open.spotify.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         34.98.74.57
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
cache-control: private, max-age=0
access-control-allow-origin: *
content-encoding: gzip
content-length: 111
date: Sun, 04 Sep 2022 03:56:05 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   111
Md5:    c6625e5bff6247f0fe5327db2f69bf25
Sha1:   032c6cbd4524180f31942ba36c4e56aaa145e9b5
Sha256: 8409b12b6aa333f15ad2edc0390758cf6ac2c8841000bd9bc3ad63194a23b1ee
                                        
                                            GET /img/icons/relaxGaming.svg HTTP/1.1 
Host: www.megarush.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.megarush.com/nb-no?btag=656126_1F051F782BF1478AB0C042E35F07CBBC
Cookie: geoip_country=no; webserver=megarush-prd-58d9bc46b7-c6rj2; geoip_country=no; LanguageCode=nb-no; 73284d4086c9c5cd43ecdef7e2965d52=ce9b33b85ec97421fa7db232ed6ef05c; _ga=GA1.2.637062566.1662263755; _gid=GA1.2.1463463030.1662263755; _gat_UA-143790984-2=1; btag=656126_1F051F782BF1478AB0C042E35F07CBBC
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.22.30.168
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Sun, 04 Sep 2022 03:55:58 GMT
last-modified: Mon, 06 Jun 2022 07:18:34 GMT
etag: W/"629daa4a-22fa"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 5306380
vary: Accept-Encoding
server: cloudflare
cf-ray: 7453caea888a0b65-OSL
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            POST /igc/megalotto/games/jackpots HTTP/1.1 
Host: megalotto-api.gigmagic.io
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.megarush.com/
Content-Type: application/json; charset=utf-8
X-API-Key: 5c7e3e9c1c62609cee83f960
X-API-Session-Id: 631421cab0671ba2d3ce4759
Origin: https://www.megarush.com
Content-Length: 18
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         172.64.149.99
HTTP/2 200 OK
content-type: application/json
                                        
date: Sun, 04 Sep 2022 03:55:58 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, POST
access-control-allow-headers: X-Requested-With, Content-Type, Accept, X-API-Key, X-API-Session-Id, x-api-sid, X-Request-ID
set-cookie: e9ef0023e1df886bed2d1501b6b20a23=37cd76cd7b4434682f3f2d1b20ad6cb2; path=/; HttpOnly; Secure; SameSite=None
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7453caea4f68b51d-OSL
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /img/icons/megaclub--updated.svg HTTP/1.1 
Host: www.megarush.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.megarush.com/nb-no?btag=656126_1F051F782BF1478AB0C042E35F07CBBC
Connection: keep-alive
Cookie: geoip_country=no; webserver=megarush-prd-58d9bc46b7-c6rj2; geoip_country=no; LanguageCode=nb-no; 73284d4086c9c5cd43ecdef7e2965d52=ce9b33b85ec97421fa7db232ed6ef05c; _ga=GA1.2.637062566.1662263755; _gid=GA1.2.1463463030.1662263755; _gat_UA-143790984-2=1; btag=656126_1F051F782BF1478AB0C042E35F07CBBC
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.22.30.168
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Sun, 04 Sep 2022 03:55:58 GMT
last-modified: Mon, 06 Jun 2022 07:18:34 GMT
etag: W/"629daa4a-2ed"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 7711732
vary: Accept-Encoding
server: cloudflare
cf-ray: 7453caeb48e00b65-OSL
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /img/icons/trustly--white.svg HTTP/1.1 
Host: www.megarush.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.megarush.com/nb-no?btag=656126_1F051F782BF1478AB0C042E35F07CBBC
Connection: keep-alive
Cookie: geoip_country=no; webserver=megarush-prd-58d9bc46b7-c6rj2; geoip_country=no; LanguageCode=nb-no; 73284d4086c9c5cd43ecdef7e2965d52=ce9b33b85ec97421fa7db232ed6ef05c; _ga=GA1.2.637062566.1662263755; _gid=GA1.2.1463463030.1662263755; _gat_UA-143790984-2=1; btag=656126_1F051F782BF1478AB0C042E35F07CBBC
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.22.30.168
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Sun, 04 Sep 2022 03:55:58 GMT
last-modified: Mon, 06 Jun 2022 07:18:34 GMT
etag: W/"629daa4a-772"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 7711424
vary: Accept-Encoding
server: cloudflare
cf-ray: 7453caeb89030b65-OSL
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /nb-no?btag=656126_1F051F782BF1478AB0C042E35F07CBBC HTTP/1.1 
Host: www.megarush.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         104.22.30.168
HTTP/2 200 OK
content-type: text/html
                                        
date: Sun, 04 Sep 2022 03:55:57 GMT
last-modified: Thu, 25 Aug 2022 14:33:43 GMT
vary: Accept-Encoding
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: no-cache
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
set-cookie: geoip_country=no; Path=/; webserver=megarush-prd-58d9bc46b7-c6rj2; Domain=www.megarush.com; Path=/; geoip_country=no; Domain=www.megarush.com; Path=/; LanguageCode=nb-no; Domain=www.megarush.com; Path=/; 73284d4086c9c5cd43ecdef7e2965d52=ce9b33b85ec97421fa7db232ed6ef05c; path=/; HttpOnly; Secure; SameSite=None
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7453cae3edd00b65-OSL
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /banners/scripts/st/trackpoint-async.js HTTP/1.1 
Host: s2.adform.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.megarush.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         37.157.2.248
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Sun, 04 Sep 2022 03:55:57 GMT
vary: Accept-Encoding
last-modified: Wed, 25 May 2022 11:34:23 GMT
etag: W/"552eeb5f0620fb6f56733d625b5e719e"
x-amz-request-id: tx0000000000000914f6bc2-0063141d2d-323350c8-default
access-control-allow-origin: *
cache-control: public, max-age=604800
x-cache-status: HIT
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /serving/container/?pm=2381934&lid=95292615&ctype=0&media=0&PageName=megarush.com%2fnb-no&rnd=1222244841&cpref=&loc=https%3a%2f%2fwww.megarush.com%2fnb-no%3fbtag%3d656126_1F051F782BF1478AB0C042E35F07CBBC HTTP/1.1 
Host: track.adform.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.megarush.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         37.157.6.245
HTTP/2 200 OK
content-type: text/html; charset=utf-8
                                        
server: nginx
date: Sun, 04 Sep 2022 03:55:59 GMT
cache-control: no-cache, no-store, must-revalidate, no-transform
pragma: no-cache
content-encoding: gzip
expires: -1
vary: Accept-Encoding
access-control-allow-origin: *
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /img/icons/help-round.svg HTTP/1.1 
Host: www.megarush.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.megarush.com/nb-no?btag=656126_1F051F782BF1478AB0C042E35F07CBBC
Connection: keep-alive
Cookie: geoip_country=no; webserver=megarush-prd-58d9bc46b7-c6rj2; geoip_country=no; LanguageCode=nb-no; 73284d4086c9c5cd43ecdef7e2965d52=ce9b33b85ec97421fa7db232ed6ef05c; _ga=GA1.2.637062566.1662263755; _gid=GA1.2.1463463030.1662263755; _gat_UA-143790984-2=1; btag=656126_1F051F782BF1478AB0C042E35F07CBBC
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.22.30.168
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Sun, 04 Sep 2022 03:55:58 GMT
last-modified: Mon, 23 Aug 2021 13:22:11 GMT
etag: W/"6123a103-5e8"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 32474581
vary: Accept-Encoding
server: cloudflare
cf-ray: 7453caeb78f40b65-OSL
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /img/icons/menu.svg HTTP/1.1 
Host: www.megarush.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.megarush.com/nb-no?btag=656126_1F051F782BF1478AB0C042E35F07CBBC
Connection: keep-alive
Cookie: geoip_country=no; webserver=megarush-prd-58d9bc46b7-c6rj2; geoip_country=no; LanguageCode=nb-no; 73284d4086c9c5cd43ecdef7e2965d52=ce9b33b85ec97421fa7db232ed6ef05c; _ga=GA1.2.637062566.1662263755; _gid=GA1.2.1463463030.1662263755; _gat_UA-143790984-2=1; btag=656126_1F051F782BF1478AB0C042E35F07CBBC
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.22.30.168
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Sun, 04 Sep 2022 03:55:58 GMT
last-modified: Thu, 17 Mar 2022 09:55:04 GMT
etag: W/"62330578-22f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 14481340
vary: Accept-Encoding
server: cloudflare
cf-ray: 7453caeb88fb0b65-OSL
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /img/icons/astropaycard--white.svg HTTP/1.1 
Host: www.megarush.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.megarush.com/nb-no?btag=656126_1F051F782BF1478AB0C042E35F07CBBC
Connection: keep-alive
Cookie: geoip_country=no; webserver=megarush-prd-58d9bc46b7-c6rj2; geoip_country=no; LanguageCode=nb-no; 73284d4086c9c5cd43ecdef7e2965d52=ce9b33b85ec97421fa7db232ed6ef05c; _ga=GA1.2.637062566.1662263755; _gid=GA1.2.1463463030.1662263755; _gat_UA-143790984-2=1; btag=656126_1F051F782BF1478AB0C042E35F07CBBC
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.22.30.168
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Sun, 04 Sep 2022 03:55:58 GMT
last-modified: Mon, 06 Jun 2022 07:18:34 GMT
etag: W/"629daa4a-e1f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 5306955
vary: Accept-Encoding
server: cloudflare
cf-ray: 7453caeb89010b65-OSL
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /img/icons/mastercard--white.svg HTTP/1.1 
Host: www.megarush.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.megarush.com/nb-no?btag=656126_1F051F782BF1478AB0C042E35F07CBBC
Connection: keep-alive
Cookie: geoip_country=no; webserver=megarush-prd-58d9bc46b7-c6rj2; geoip_country=no; LanguageCode=nb-no; 73284d4086c9c5cd43ecdef7e2965d52=ce9b33b85ec97421fa7db232ed6ef05c; _ga=GA1.2.637062566.1662263755; _gid=GA1.2.1463463030.1662263755; _gat_UA-143790984-2=1; btag=656126_1F051F782BF1478AB0C042E35F07CBBC
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.22.30.168
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Sun, 04 Sep 2022 03:55:58 GMT
last-modified: Mon, 23 Aug 2021 13:22:11 GMT
etag: W/"6123a103-939"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 32474581
vary: Accept-Encoding
server: cloudflare
cf-ray: 7453caeb89000b65-OSL
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /img/logo.4c52d90d.svg HTTP/1.1 
Host: www.megarush.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.megarush.com/index.30053c2cd5717880348c.css
Cookie: geoip_country=no; webserver=megarush-prd-58d9bc46b7-c6rj2; geoip_country=no; LanguageCode=nb-no; 73284d4086c9c5cd43ecdef7e2965d52=ce9b33b85ec97421fa7db232ed6ef05c; _ga=GA1.2.637062566.1662263755; _gid=GA1.2.1463463030.1662263755; _gat_UA-143790984-2=1; btag=656126_1F051F782BF1478AB0C042E35F07CBBC
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.22.30.168
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Sun, 04 Sep 2022 03:55:58 GMT
last-modified: Mon, 06 Jun 2022 07:18:34 GMT
etag: W/"629daa4a-931"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 7705986
vary: Accept-Encoding
server: cloudflare
cf-ray: 7453caed39af0b65-OSL
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /scripts/b_megarush.js HTTP/1.1 
Host: scripts.mediamathrdrt.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.megarush.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         172.67.170.210
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                        
date: Sun, 04 Sep 2022 03:55:57 GMT
status: 200 OK
cache-control: max-age=0, public
access-control-allow-origin: *
x-request-id: e611a9a1-a190-4ed3-b6f7-e492a92cc8f6
etag: W/"b89528e21d6f85cc11459c7b6ec733cb"
x-runtime: 0.004373
expires: 2022-08-05 03:55:57 UTC
x-powered-by: Phusion Passenger(R) 6.0.11
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qsiawQTbYxBxJg%2Bh0c9kO6kVUe7aOhxTQtNivR5FC5iGKhy%2BTiIxQgo3PYskWqVygj9OecSuFIVPfGRkz7TeEzJ1IeAEN5orc2VFMrjLxfqJlKLZbaUc%2FD4l9sGP0Sw5Rm216ZypcH0%2Brrvp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7453cae69f6eb4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /img/icons/netent.svg HTTP/1.1 
Host: www.megarush.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.megarush.com/nb-no?btag=656126_1F051F782BF1478AB0C042E35F07CBBC
Cookie: geoip_country=no; webserver=megarush-prd-58d9bc46b7-c6rj2; geoip_country=no; LanguageCode=nb-no; 73284d4086c9c5cd43ecdef7e2965d52=ce9b33b85ec97421fa7db232ed6ef05c; _ga=GA1.2.637062566.1662263755; _gid=GA1.2.1463463030.1662263755; _gat_UA-143790984-2=1; btag=656126_1F051F782BF1478AB0C042E35F07CBBC
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.22.30.168
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Sun, 04 Sep 2022 03:55:58 GMT
last-modified: Mon, 06 Jun 2022 07:18:34 GMT
etag: W/"629daa4a-519"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 7711424
vary: Accept-Encoding
server: cloudflare
cf-ray: 7453caea888b0b65-OSL
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /service-worker.js HTTP/1.1 
Host: www.megarush.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Service-Worker: script
Connection: keep-alive
Cookie: geoip_country=no; webserver=megarush-prd-58d9bc46b7-c6rj2; geoip_country=no; LanguageCode=nb-no; 73284d4086c9c5cd43ecdef7e2965d52=ce9b33b85ec97421fa7db232ed6ef05c; _ga=GA1.2.637062566.1662263755; _gid=GA1.2.1463463030.1662263755; _gat_UA-143790984-2=1; btag=656126_1F051F782BF1478AB0C042E35F07CBBC
Sec-Fetch-Dest: serviceworker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

search
                                         104.22.30.168
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Sun, 04 Sep 2022 03:56:00 GMT
last-modified: Thu, 25 Aug 2022 14:33:43 GMT
vary: Accept-Encoding
etag: W/"63078847-64d2"
expires: Sun, 04 Sep 2022 03:56:30 GMT
cache-control: max-age=30
access-control-allow-origin: *
content-encoding: gzip
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7453caf45c410b65-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /img/icons/playAndGo.svg HTTP/1.1 
Host: www.megarush.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.megarush.com/nb-no?btag=656126_1F051F782BF1478AB0C042E35F07CBBC
Cookie: geoip_country=no; webserver=megarush-prd-58d9bc46b7-c6rj2; geoip_country=no; LanguageCode=nb-no; 73284d4086c9c5cd43ecdef7e2965d52=ce9b33b85ec97421fa7db232ed6ef05c; _ga=GA1.2.637062566.1662263755; _gid=GA1.2.1463463030.1662263755; _gat_UA-143790984-2=1; btag=656126_1F051F782BF1478AB0C042E35F07CBBC
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.22.30.168
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Sun, 04 Sep 2022 03:55:58 GMT
last-modified: Thu, 30 Sep 2021 14:59:04 GMT
etag: W/"6155d0b8-dfe"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 29248985
vary: Accept-Encoding
server: cloudflare
cf-ray: 7453caea78880b65-OSL
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /embed/playlist/2ucixR5s50chGr0o0pm4Pi HTTP/1.1 
Host: open.spotify.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.megarush.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         35.186.224.25
HTTP/2 302 Found
content-type: text/html; charset=utf-8
                                        
date: Sun, 04 Sep 2022 03:55:58 GMT
vary: Accept-Encoding
set-cookie: sp_t=f026edda0f2f16bba50048dd183bcc9c; path=/; expires=Mon, 04 Sep 2023 03:55:58 GMT; domain=.spotify.com; samesite=none; secure sp_landing=https%3A%2F%2Fopen.spotify.com%2Fembed%2Fplaylist%2F2ucixR5s50chGr0o0pm4Pi%3Fsp_cid%3Df026edda0f2f16bba50048dd183bcc9c%26device%3Ddesktop; path=/; expires=Mon, 05 Sep 2022 03:55:58 GMT; domain=.spotify.com; samesite=none; secure; httponly
location: /embed-legacy/playlist/2ucixR5s50chGr0o0pm4Pi
sp-trace-id: fca89f54d622ce4c
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-encoding: gzip
server: envoy
via: HTTP/2 edgeproxy, 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /quant.js HTTP/1.1 
Host: secure.quantserve.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://track.adform.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         91.228.74.244
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Sun, 04 Sep 2022 03:55:59 GMT
accept-ranges: bytes
cache-control: private, max-age=604800
content-encoding: gzip
etag: "3K3nn1ChiYCKxJYFUmbsHw=="
expires: Sun, 11 Sep 2022 03:55:59 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /img/home-page/grid-new-2.svg HTTP/1.1 
Host: www.megarush.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.megarush.com/index.30053c2cd5717880348c.css
Cookie: geoip_country=no; webserver=megarush-prd-58d9bc46b7-c6rj2; geoip_country=no; LanguageCode=nb-no; 73284d4086c9c5cd43ecdef7e2965d52=ce9b33b85ec97421fa7db232ed6ef05c; _ga=GA1.2.637062566.1662263755; _gid=GA1.2.1463463030.1662263755; _gat_UA-143790984-2=1; btag=656126_1F051F782BF1478AB0C042E35F07CBBC
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.22.30.168
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Sun, 04 Sep 2022 03:55:58 GMT
last-modified: Mon, 18 Oct 2021 10:20:15 GMT
etag: W/"616d4a5f-3194"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 27711090
vary: Accept-Encoding
server: cloudflare
cf-ray: 7453caed39ac0b65-OSL
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /img/icons/promotions--updated.svg HTTP/1.1 
Host: www.megarush.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.megarush.com/nb-no?btag=656126_1F051F782BF1478AB0C042E35F07CBBC
Connection: keep-alive
Cookie: geoip_country=no; webserver=megarush-prd-58d9bc46b7-c6rj2; geoip_country=no; LanguageCode=nb-no; 73284d4086c9c5cd43ecdef7e2965d52=ce9b33b85ec97421fa7db232ed6ef05c; _ga=GA1.2.637062566.1662263755; _gid=GA1.2.1463463030.1662263755; _gat_UA-143790984-2=1; btag=656126_1F051F782BF1478AB0C042E35F07CBBC
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.22.30.168
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Sun, 04 Sep 2022 03:55:58 GMT
last-modified: Mon, 06 Jun 2022 07:18:34 GMT
etag: W/"629daa4a-306"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 7705986
vary: Accept-Encoding
server: cloudflare
cf-ray: 7453caeb48e10b65-OSL
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            POST / HTTP/1.1 
Host: graphql.datocms.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/json
authorization: Bearer 35d777e787abbc619166a62135c433
Content-Length: 151
Origin: https://www.megarush.com
Connection: keep-alive
Referer: https://www.megarush.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         172.67.11.48
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
date: Sun, 04 Sep 2022 03:55:59 GMT
cf-ray: 7453caf0e9cdb4ee-OSL
accept-ranges: bytes
access-control-allow-origin: https://www.megarush.com
age: 2242989
cache-control: no-store
content-encoding: gzip
etag: W/"8a069ed1bdcb8517251ab69433826adb"
expires: 0
strict-transport-security: max-age=15552000; includeSubDomains; preload
vary: Authorization, Accept-Encoding, X-Environment, X-Include-Drafts, X-Exclude-Invalid, Origin
via: 1.1 vegur, 1.1 varnish, 1.1 varnish
cf-cache-status: DYNAMIC
access-control-allow-credentials: true
access-control-allow-headers: authorization, content-type, x-environment, x-include-drafts, x-exclude-invalid
access-control-allow-methods: GET, POST
access-control-expose-headers: x-ratelimit-limit, x-ratelimit-remaining, x-ratelimit-reset, x-entities
access-control-max-age: 1728000
pragma: no-cache
referrer-policy: strict-origin-when-cross-origin
x-cache: HIT, HIT
x-cache-hits: 1, 388
x-cacheable-on-cdn: true
x-cacheable-on-cdn-query-length-limit: 203/8192
x-complexity: 92
x-content-type-options: nosniff
x-download-options: noopen
x-environment: main
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-queue-time: 0ms
x-request-id: 0f274e57-e572-4252-8a11-69b9b51533b0
x-runtime: 0.073587
x-served-by: cache-dub4335-DUB, cache-bma1682-BMA
x-timer: S1662263760.534716,VS0,VE0
x-xss-protection: 1; mode=block
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /img/icons/payments.svg HTTP/1.1 
Host: www.megarush.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.megarush.com/nb-no?btag=656126_1F051F782BF1478AB0C042E35F07CBBC
Connection: keep-alive
Cookie: geoip_country=no; webserver=megarush-prd-58d9bc46b7-c6rj2; geoip_country=no; LanguageCode=nb-no; 73284d4086c9c5cd43ecdef7e2965d52=ce9b33b85ec97421fa7db232ed6ef05c; _ga=GA1.2.637062566.1662263755; _gid=GA1.2.1463463030.1662263755; _gat_UA-143790984-2=1; btag=656126_1F051F782BF1478AB0C042E35F07CBBC
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.22.30.168
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Sun, 04 Sep 2022 03:55:58 GMT
last-modified: Mon, 06 Jun 2022 07:18:34 GMT
etag: W/"629daa4a-429"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 7710143
vary: Accept-Encoding
server: cloudflare
cf-ray: 7453caeb48e30b65-OSL
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---