nreg.world/promotions
18.193.26.6 60 B IP 18.193.26.6:0
File type HTML document, ASCII text
Hash 68cf1a03159125f31c4e71d25e579a19
c163eed41667b5990193c69a7499eb14a089b256
122a82a12d8de6109eeddab4f6231e2d8bb05a193e481b86397c7f2ed0918880
GET /promotions HTTP/1.1
Host: nreg.world
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Sun, 03 Dec 2023 08:46:44 GMT
content-type: text/html; charset=utf-8
content-length: 60
location: https://nationalcasino.com/promotions
X-Firefox-Spdy: h2
casino.cur.a8r.games/public/sg.js
104.18.41.153200 OK 2.6 kB URL GET HTTP/2 casino.cur.a8r.games/public/sg.js
IP 104.18.41.153:443
Requested by https://nationalcasino.com/no/promotions
Certificate IssuerCloudflare, Inc.
Subjecta8r.games
FingerprintA8:A9:FA:ED:57:56:8B:B3:83:68:D1:EB:EB:CD:14:5A:F0:F4:7D:A5
ValidityMon, 19 Jun 2023 00:00:00 GMT - Tue, 18 Jun 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash cb012b7ca243c6930bad507bcd74d1d1
6ad1bfaa4e3373509829b7559041f4efb5a5507e
8d8e832d35b03678d30239c49e647879715befac26db9e6512297f3f34a36b3c
GET /public/sg.js HTTP/1.1
Host: casino.cur.a8r.games
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 03 Dec 2023 08:46:45 GMT
content-type: text/javascript; charset=utf-8
a8r-request-id: bcadfd4e-4db5-4840-b922-1f4eb872303c
strict-transport-security: max-age=15724800; includeSubDomains
last-modified: Sun, 03 Dec 2023 07:02:34 GMT
cf-cache-status: HIT
age: 5931
expires: Sun, 03 Dec 2023 12:46:45 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
server: cloudflare
cf-ray: 82fa8a80ef2156b5-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
nationalcasino.com/assets/favicon.png
172.67.69.139200 OK 23 kB URL GET HTTP/2 nationalcasino.com/assets/favicon.png
IP 172.67.69.139:443
Requested by https://nationalcasino.com/no/promotions
Certificate IssuerCloudflare, Inc.
Subjectnationalcasino.com
FingerprintCC:02:73:1C:8E:B6:5E:A0:33:ED:63:B5:75:B5:C1:5D:7E:A0:D5:47
ValidityTue, 14 Mar 2023 00:00:00 GMT - Tue, 12 Mar 2024 23:59:59 GMT
File type PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced\012- data
Hash f649afc10275f1cbfcd434396290b1b3
01582644cb47372037afd0942cc63d52d71fae41
d3a98485a8766e2cabc7b9cd05166a3dd9d8ec8eae6ef0b2a93afd6ae19e7a14
GET /assets/favicon.png HTTP/1.1
Host: nationalcasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/no/promotions
Cookie: preferred-language=no
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 03 Dec 2023 08:46:46 GMT
content-type: image/png
content-length: 22994
cf-ray: 82fa8a81aed7b505-OSL
cf-cache-status: BYPASS
accept-ranges: bytes
etag: "6568272e-59d2"
last-modified: Thu, 30 Nov 2023 06:09:50 GMT
set-cookie: is_mobile_device=false
vary: Accept-Encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=e6hfGrZuGIrtH9atZLkLdQ%2FANGP1%2FZPje1O54e31EbGYUcWLETfd4p%2BKHqK7mZFEldAowtc1y3m9W9al8fAz3jdZOU%2BzJSkqtzkeRj58SDBQDpzA5J%2Fe66C8swoCbmoeYxic7Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
X-Firefox-Spdy: h2
cdn.onesignal.com/sdks/OneSignalSDK.js
104.18.215.59 26 kB URL cdn.onesignal.com/sdks/OneSignalSDK.js
IP 104.18.215.59:0
File type ASCII text, with very long lines (9163)
Hash a87c48d211877c49b878679b2e3cdab8
e75653dd0156806682e39abe8b1323ed40d840ca
4191d89ec03bce5dc273716075335e31851031184b0fff0ab9fc900a8442019f
GET /sdks/OneSignalSDK.js HTTP/1.1
Host: cdn.onesignal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 03 Dec 2023 08:46:45 GMT
content-type: application/javascript
etag: W/"a87c48d211877c49b878679b2e3cdab8"
access-control-allow-headers: OneSignal-Subscription-Id
via: 1.1 google
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 2943
expires: Wed, 06 Dec 2023 08:46:45 GMT
cache-control: public, max-age=259200
set-cookie: __cf_bm=qhx8DXs8P7reHvs2.yJ_uh5s7cocRXWPtum.dzsxjq0-1701593205-0-AdB+FThgidO5eUokEFwgv/aRPNLvDrktvR3mQpzrpuz6soWdeQixAp775/p6h0FX/Cs8Rn5JWt7MiLTDzwe2i10=; path=/; expires=Sun, 03-Dec-23 09:16:45 GMT; domain=.onesignal.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
server: cloudflare
cf-ray: 82fa8a80eda8712d-OSL
content-encoding: br
X-Firefox-Spdy: h2
c4457c89-e5ba-4d22-92e5-c2959310ee85.snippet.antillephone.com/apg-seal.js
54.230.111.97 58 kB URL c4457c89-e5ba-4d22-92e5-c2959310ee85.snippet.antillephone.com/apg-seal.js
IP 54.230.111.97:0
File type gzip compressed data, from Unix\012- data
Hash 55a99e89bafb0da9c12a55e5315a83a4
c395f8b75d60f5a971c1eef48fdaea88df2da0d0
7312d608e31953d880f33f3936e1a08f3e594b2a7e263100a601b9a6d3ba2111
GET /apg-seal.js HTTP/1.1
Host: c4457c89-e5ba-4d22-92e5-c2959310ee85.snippet.antillephone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
date: Sun, 03 Dec 2023 08:46:27 GMT
x-powered-by: Express
cache-control: max-age=300
etag: W/"de1-tSE6laROF7AgZJkxv/sg44Hovy4"
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 82fa8a0c6db19c01-FRA
content-encoding: gzip
x-cache: Hit from cloudfront
via: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ZbxDVR0qVPl9ZpoIoQKiU4tzZnpFH7U_9ph0HdDtRPDaKuy0T5t-pg==
age: 18
X-Firefox-Spdy: h2
c4457c89-e5ba-4d22-92e5-c2959310ee85.snippet.antillephone.com/sealassets/3fee006b251b8bdc848c8e2f4184f002-nationalcasino.com-f5faf6d82a7be2057527120fa49724355adf2a8c973918d432fa7b70160234e717ac6b01358f27fc0aff52358b79fb11-c3BhY2VyLXNwcml0ZS5wbmc%3D
54.230.111.97200 OK 95 B URL GET HTTP/2 c4457c89-e5ba-4d22-92e5-c2959310ee85.snippet.antillephone.com/sealassets/3fee006b251b8bdc848c8e2f4184f002-nationalcasino.com-f5faf6d82a7be2057527120fa49724355adf2a8c973918d432fa7b70160234e717ac6b01358f27fc0aff52358b79fb11-c3BhY2VyLXNwcml0ZS5wbmc%3D
IP 54.230.111.97:443
Requested by https://nationalcasino.com/no/promotions
Certificate IssuerStarfield Technologies, Inc.
Subject*.snippet.antillephone.com
FingerprintE5:72:D2:23:23:5B:CF:9D:04:92:91:42:A3:10:C7:14:C1:B6:4C:8C
ValiditySun, 02 Apr 2023 11:55:38 GMT - Fri, 03 May 2024 11:55:38 GMT
File type PNG image data, 1 x 1, 1-bit colormap, non-interlaced\012- data
Hash 9591c410148e6883727c5339fd1c02cd
3442a95fe890ce4769b36b2ecc611b801a54cfb5
cafbd551d674da240212f6c44988757a728b9dc8cbc2a6c8dcf53c0d9159c323
GET /sealassets/3fee006b251b8bdc848c8e2f4184f002-nationalcasino.com-f5faf6d82a7be2057527120fa49724355adf2a8c973918d432fa7b70160234e717ac6b01358f27fc0aff52358b79fb11-c3BhY2VyLXNwcml0ZS5wbmc%3D HTTP/1.1
Host: c4457c89-e5ba-4d22-92e5-c2959310ee85.snippet.antillephone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 95
date: Sun, 03 Dec 2023 08:46:27 GMT
x-powered-by: Express
cache-control: max-age=1200
etag: W/"5f-NEKpX+iQzkdps2suzGEbgBpUz7U"
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 82fa8a0d7a95bbb5-FRA
x-cache: Hit from cloudfront
via: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 7d1PaTwQbs6QkxOZiuKgvmcVwX9UVCdnic7w2WUQMD3j0AwGE_MUug==
age: 19
X-Firefox-Spdy: h2
nationalcasino.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
172.67.69.139200 OK 55 kB URL GET HTTP/2 nationalcasino.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
IP 172.67.69.139:443
Requested by https://nationalcasino.com/no/promotions
Certificate IssuerCloudflare, Inc.
Subjectnationalcasino.com
FingerprintCC:02:73:1C:8E:B6:5E:A0:33:ED:63:B5:75:B5:C1:5D:7E:A0:D5:47
ValidityTue, 14 Mar 2023 00:00:00 GMT - Tue, 12 Mar 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash 9d3c1ab22fb5d6a32a03ed501a5b7965
d149576076610d24139101778dc78e0f7ab2d383
17a6953bc80947c59650c57f3177a6f1d2f3b9ae3921743149c8cb8d95c061b8
GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1
Host: nationalcasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/no/promotions
Cookie: preferred-language=no
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 03 Dec 2023 08:46:45 GMT
content-type: application/javascript
last-modified: Tue, 28 Nov 2023 16:06:21 GMT
etag: W/"65660ffd-302c"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6DtpdKhTWhU7rZHYJDR9gxOYDaHbxND3oVFPyJoKoVKLJ99cvBiaaullN5Vm1OX6%2F3OLyki9jgSPlg83Bu6URvlRaMefdE43h4zWRCj9XXd13B%2BUbjeDGlRDWJshMs%2BXc0PxSw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82fa8a7f1cd5b505-OSL
x-frame-options: DENY
x-content-type-options: nosniff
expires: Tue, 05 Dec 2023 08:46:45 GMT
cache-control: max-age=172800, public
content-encoding: gzip
X-Firefox-Spdy: h2
tm.ads.sportradar.com/dist/tag-manager.js?id=STM-AAAAJE
23.36.79.8 36 kB URL tm.ads.sportradar.com/dist/tag-manager.js?id=STM-AAAAJE
IP 23.36.79.8:0
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (62148)
Hash c01256af2e23e02db274699e63829030
6571533280b52ae05a3d6241b9ddb7c360207094
59048f1db042ad85bbac8dac0fdd3f1b7a3230e484520673bca33b0e19cb3690
GET /dist/tag-manager.js?id=STM-AAAAJE HTTP/1.1
Host: tm.ads.sportradar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
apigw-requestid: PW7_ngqgDoEEJ9A=
vary: Accept-Encoding
content-encoding: gzip
content-length: 36192
date: Sun, 03 Dec 2023 08:46:46 GMT
cache-control: max-age=900, public
x-n: S
X-Firefox-Spdy: h2
ws-cdn001.akamaized.net/7693683943e78a298c36d469e68b47d8/widgetloader
23.36.77.8 66 kB URL ws-cdn001.akamaized.net/7693683943e78a298c36d469e68b47d8/widgetloader
IP 23.36.77.8:0
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (43921)
Hash f5106bf49c7319c67b37aec6d21a50d5
1cafadd76045900543924a4c380f38c5743e725b
a374f6ae27476f2e53e6ab4ce750b1c863caf387100229b046471221cd3ef296
GET /7693683943e78a298c36d469e68b47d8/widgetloader HTTP/1.1
Host: ws-cdn001.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
content-security-policy: frame-ancestors 'self' https://st-cdn001.akamaized.net https://ls-cdn001.akamaized.net
cache-control: public, max-age=120, stale-while-revalidate=60, immutable
etag: "1fa233d1f3ecb3f89370d39d3b179988-7374ce52e08616a03018bb99a3631c27"
content-encoding: gzip
date: Sun, 03 Dec 2023 08:46:46 GMT
content-length: 66100
vary: Accept-Encoding
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
X-Firefox-Spdy: h2
fonts.gstatic.com/s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2
216.58.207.227 7.9 kB URL fonts.gstatic.com/s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 7884, version 1.0\012- data
Hash 9212f6f9860f9fc6c69b02fedf6db8c3
ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b
7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f
GET /s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://nationalcasino.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7884
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 02:38:20 GMT
expires: Fri, 29 Nov 2024 02:38:20 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 27 Apr 2022 17:03:52 GMT
content-type: font/woff2
age: 281306
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
tracker.ads.sportradar.com/dist/tracker.js
23.36.79.8 6.4 kB URL tracker.ads.sportradar.com/dist/tracker.js
IP 23.36.79.8:0
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (25690)
Hash 235331a0761142ae4fd345cdf7c7f9ed
f71a2cb5824a7049b2c86f5658f48e17ff7f588c
063237f5f52863c3f711ef56625653397a5650eca2da3fa375dc181985a1badb
GET /dist/tracker.js HTTP/1.1
Host: tracker.ads.sportradar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Tue, 12 Sep 2023 08:33:19 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
etag: "235331a0761142ae4fd345cdf7c7f9ed"
x-amz-cf-pop: AMS58-P6
x-amz-cf-id: -EwYeGF7PioTUHlG-Oks5NANDMCu7FRX3fCXB5OWm5aoRAGsypMSFQ==
vary: Accept-Encoding
content-encoding: gzip
date: Sun, 03 Dec 2023 08:46:46 GMT
content-length: 6405
cache-control: max-age=900, public
X-Firefox-Spdy: h2
nationalcasino.com/api/translation/get?locale=no_NO
172.67.69.139200 OK 49 kB URL GET HTTP/2 nationalcasino.com/api/translation/get?locale=no_NO
IP 172.67.69.139:443
Requested by https://nationalcasino.com/no/promotions
Certificate IssuerCloudflare, Inc.
Subjectnationalcasino.com
FingerprintCC:02:73:1C:8E:B6:5E:A0:33:ED:63:B5:75:B5:C1:5D:7E:A0:D5:47
ValidityTue, 14 Mar 2023 00:00:00 GMT - Tue, 12 Mar 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash e93dca9221747ca02b792576f4717667
ab0b2d4dd0eb2c60fe779937c63b31432562927f
a5ac26c0800bfa38f1c5a033ddda4cea5ecade10c26b110a2fe40d9b6131b95c
GET /api/translation/get?locale=no_NO HTTP/1.1
Host: nationalcasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/no/promotions
Cookie: preferred-language=no
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 03 Dec 2023 08:46:46 GMT
content-type: application/json
cf-ray: 82fa8a825f6bb505-OSL
cf-cache-status: DYNAMIC
cache-control: no-cache, private
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization
access-control-allow-methods: GET, POST, OPTIONS
access-control-expose-headers: Content-Length,Content-Range
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=L5tjmGqNzGMdAzDHDGy3PIDcVOC3FqSPBD2uL1rSstmkN6NOTxrdib2SlNeaffgOTm2QPorwlWPP6QfeUKPTIyH4fcwtpu7CiJ4NHAsnulrLcuN1tKvy8UWp0rvEtFT0%2BYqwvA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-5PKWDCC
142.250.74.168 76 kB URL www.googletagmanager.com/gtm.js?id=GTM-5PKWDCC
IP 142.250.74.168:0
File type ASCII text, with very long lines (15702)
Hash 3fc5dfd510cc108d47fb0bb5437d6731
e456b443668e8cc4820cb9aa25b850e196ea4a33
ee7db9da5f8adef23c42216bae232876fd4d4f2eb4fabb0bde2b64852d29def6
GET /gtm.js?id=GTM-5PKWDCC HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 03 Dec 2023 08:46:46 GMT
expires: Sun, 03 Dec 2023 08:46:46 GMT
cache-control: private, max-age=900
last-modified: Sun, 03 Dec 2023 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 75649
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
tracker.ads.sportradar.com/dist//sp-3.8.0.js
23.36.79.8200 OK 24 kB URL GET HTTP/2 tracker.ads.sportradar.com/dist//sp-3.8.0.js
IP 23.36.79.8:443
ASN #20940 Akamai International B.V.
Requested by https://nationalcasino.com/no/promotions
Certificate IssuerLet's Encrypt
Subjecttracker.ads.sportradar.com
Fingerprint2F:44:31:30:BF:6C:CE:CE:AD:55:13:9C:95:C2:98:BB:35:19:22:5B
ValidityThu, 05 Oct 2023 12:16:46 GMT - Wed, 03 Jan 2024 12:16:45 GMT
File type ASCII text, with very long lines (65378)
Hash 143272dddc33395008a84a86ac9c2e96
8a90a07a66c30b4fa28300001cf97db7baba420e
6361e3a49a38d1fdc74ec96bd29ee1ecd7c30045ccb0e5f361413d65cbf5ef87
GET /dist//sp-3.8.0.js HTTP/1.1
Host: tracker.ads.sportradar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Tue, 12 Sep 2023 08:33:18 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
etag: "143272dddc33395008a84a86ac9c2e96"
x-amz-cf-pop: AMS58-P6
x-amz-cf-id: gcGp7HaZTH7FueIi2HJWtW4PI-26GiFImTZUMGnEQ3v0N2qihQveOw==
vary: Accept-Encoding
content-encoding: gzip
date: Sun, 03 Dec 2023 08:46:46 GMT
content-length: 24162
cache-control: max-age=900, public
X-Firefox-Spdy: h2
ocsp.entrust.net/
23.38.202.187 1.6 kB IP 23.38.202.187:0
Hash 02d7fc0284840f1014a44ba9e709756f
481a23d051b28c9ce042d46d35fc2211c14f853b
1e93a2e0bffce1851c7b4ab85d63a645f83b94ca7df3d11fb9fe891597f3ad27
POST / HTTP/1.1
Host: ocsp.entrust.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
ETag: "1E93A2E0BFFCE1851C7B4AB85D63A645F83B94CA7DF3D11FB9FE891597F3AD27"
Last-Modified: Sun, 03 Dec 2023 07:00:00 UTC
Content-Length: 1588
Cache-Control: public, no-transform, must-revalidate, max-age=2995
Expires: Sun, 03 Dec 2023 09:36:41 GMT
Date: Sun, 03 Dec 2023 08:46:46 GMT
Connection: keep-alive
cdn.seon.io/js/v4/agent.js
54.230.111.35200 OK 111 kB URL GET HTTP/2 cdn.seon.io/js/v4/agent.js
IP 54.230.111.35:443
Requested by https://nationalcasino.com/no/promotions
Certificate IssuerAmazon
Subject*.seon.io
FingerprintB7:8D:A4:8E:81:24:68:2C:24:24:98:17:76:FF:44:18:95:E2:AB:B4
ValidityFri, 07 Jul 2023 00:00:00 GMT - Sat, 03 Aug 2024 23:59:59 GMT
File type C source, ASCII text, with very long lines (65536), with no line terminators
Size 111 kB (111073 bytes)
Hash c34c3067f651e0fea2609171ab7bfec0
ab7c479be36ef4d193a5f235e90ad077a95bbfc0
5ebdda80c7f59c8f3237e0fa224a491321f544cf109c939141015c75d0f45312
GET /js/v4/agent.js HTTP/1.1
Host: cdn.seon.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
last-modified: Tue, 20 Dec 2022 16:00:08 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: oBwuMALhSWNlluJ4Z9BGO_.GELHIAD3H
server: AmazonS3
content-encoding: gzip
date: Sun, 03 Dec 2023 08:42:58 GMT
cache-control: max-age=3600
etag: W/"c34c3067f651e0fea2609171ab7bfec0"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 10Hs2pJ2nlnMeD5MyRcc4SgKpm7g_-4M7ZuLn6OwvbzmOG5UA5OHVg==
age: 237
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-9G634HNY5N&l=dataLayer&cx=c
142.250.74.168200 OK 90 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=G-9G634HNY5N&l=dataLayer&cx=c
IP 142.250.74.168:443
Requested by https://nationalcasino.com/no/promotions
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (5955)
Hash e5eeda62fcca879c59c986e36b56320c
398eb1b347c3e3e08aa4067060588e4b36b5daa8
e5b192899d9731083e148da205d62cc1592d3fe97be37411583377bff8240748
GET /gtag/js?id=G-9G634HNY5N&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 03 Dec 2023 08:46:46 GMT
expires: Sun, 03 Dec 2023 08:46:46 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 89463
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
track.customer.io/events/page.gif?name=https%3A%2F%2Fnationalcasino.com%2Fno%2Fpromotions&data%5Bwidth%5D=1280&data%5Bheight%5D=1024&c=&s=a3cce01f-2d1b-603b-7244-5b511ff0909d&site_id=5e6c92038958b483c210×tamp=1701593211550
35.227.225.220 35 B URL track.customer.io/events/page.gif?name=https%3A%2F%2Fnationalcasino.com%2Fno%2Fpromotions&data%5Bwidth%5D=1280&data%5Bheight%5D=1024&c=&s=a3cce01f-2d1b-603b-7244-5b511ff0909d&site_id=5e6c92038958b483c210×tamp=1701593211550
IP 35.227.225.220:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /events/page.gif?name=https%3A%2F%2Fnationalcasino.com%2Fno%2Fpromotions&data%5Bwidth%5D=1280&data%5Bheight%5D=1024&c=&s=a3cce01f-2d1b-603b-7244-5b511ff0909d&site_id=5e6c92038958b483c210×tamp=1701593211550 HTTP/1.1
Host: track.customer.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
cache-control: no-cache, no-store, must-revalidate, max-age=0
content-disposition: attachment
content-length: 35
content-transfer-encoding: binary
content-type: image/gif
cross-origin-resource-policy: cross-origin
date: Sun, 03 Dec 2023 08:46:46 GMT
status: 200 OK
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
tracker.growthbuddy.app/track.js?e=pageview&u=https%3A%2F%2Fnationalcasino.com%2Fno%2Fpromotions&r=&i=DV-94905054618481252564&v=1.0.0&uid=d7e56dfb-84fe-4423-b360-e2cbfcc74b99&_nc=1701593211817
18.200.119.55 0 B URL tracker.growthbuddy.app/track.js?e=pageview&u=https%3A%2F%2Fnationalcasino.com%2Fno%2Fpromotions&r=&i=DV-94905054618481252564&v=1.0.0&uid=d7e56dfb-84fe-4423-b360-e2cbfcc74b99&_nc=1701593211817
IP 18.200.119.55:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /track.js?e=pageview&u=https%3A%2F%2Fnationalcasino.com%2Fno%2Fpromotions&r=&i=DV-94905054618481252564&v=1.0.0&uid=d7e56dfb-84fe-4423-b360-e2cbfcc74b99&_nc=1701593211817 HTTP/1.1
Host: tracker.growthbuddy.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 03 Dec 2023 08:46:46 GMT
content-type: application/javascript; charset=utf-8
content-length: 0
set-cookie: INGRESSCOOKIE=1701593207.601.31.382469|4755d7349ad2180cc27216e76023fb56; Path=/; Secure; HttpOnly
cache-control: no-cache
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
a.sportradarserving.com/ul_cb/pixel?type=js&aid=1186&id=2527
3.122.4.58200 OK 1.5 kB URL GET HTTP/1.1 a.sportradarserving.com/ul_cb/pixel?type=js&aid=1186&id=2527
IP 3.122.4.58:443
Requested by https://nationalcasino.com/no/promotions
Certificate IssuerEntrust, Inc.
Subject*.sportradarserving.com
FingerprintD0:C1:99:26:D2:AD:C7:6B:F2:AD:C4:44:44:70:7C:4F:D2:49:9B:C4
ValidityWed, 20 Sep 2023 07:44:29 GMT - Mon, 14 Oct 2024 07:44:28 GMT
File type ASCII text, with very long lines (1527), with no line terminators
Hash a81cef243ceb7e47f4627fa8ebb92003
eb08dfd108765c31fde9725d25de20353185a046
9c43646a9a4fd53ce57739e81bb530c5b0c2d1785074685b5f654db6913164da
GET /ul_cb/pixel?type=js&aid=1186&id=2527 HTTP/1.1
Host: a.sportradarserving.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nationalcasino.com/
DNT: 1
Connection: keep-alive
Cookie: zuuid=00f1b5a1-4adc-4895-822c-31dec1dcea92; c=1701593206; zuuid_lu=1701593206
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache, no-store, must-revalidate
Content-Type: text/javascript; charset=UTF-8
Date: Sun, 03 Dec 2023 08:46:46 GMT
Set-Cookie: zuuid=00f1b5a1-4adc-4895-822c-31dec1dcea92; path=/; expires=Mon, 02-Dec-2024 08:46:46 GMT; domain=sportradarserving.com; samesite=none; secure
zuuid_lu=1701593206; path=/; expires=Mon, 02-Dec-2024 08:46:46 GMT; domain=sportradarserving.com; samesite=none; secure
zuuid_k=1; path=/; expires=Mon, 02-Dec-2024 08:46:46 GMT; domain=sportradarserving.com; samesite=none; secure
zuuid_k_lu=1701593206; path=/; expires=Mon, 02-Dec-2024 08:46:46 GMT; domain=sportradarserving.com; samesite=none; secure
cm2=!bidswitch,470922406; path=/; expires=Mon, 02-Dec-2024 08:46:46 GMT; domain=sportradarserving.com; samesite=none; secure
bss=!bidswitch,470850406; path=/; expires=Mon, 02-Dec-2024 08:46:46 GMT; domain=sportradarserving.com; samesite=none; secure
Content-Length: 1527
Connection: keep-alive
s.magsrv.com/tag.php?goal=d23417ed7e786d7f8227d25b45f72bf0;stackUid=20231203084651810283
95.211.229.247 20 B URL s.magsrv.com/tag.php?goal=d23417ed7e786d7f8227d25b45f72bf0;stackUid=20231203084651810283
IP 95.211.229.247:0
ASN #60781 LeaseWeb Netherlands B.V.
File type gzip compressed data, max speed, from Unix\012- data
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /tag.php?goal=d23417ed7e786d7f8227d25b45f72bf0;stackUid=20231203084651810283 HTTP/1.1
Host: s.magsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 03 Dec 2023 08:46:46 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Accept-CH:
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
platform.nationalcasino.com/api/v2/configurations
104.26.7.72 7.3 kB URL platform.nationalcasino.com/api/v2/configurations
IP 104.26.7.72:0
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash 5103c2231d68b1ee23c1064afb2d9e64
4fd3cacac3b344a4e59f9dfbd6cd4c8ff25c9820
31d4f9028d49a2bea92265e19fa6ef7da7b964bc97622d25c28633477ff8f4d9
GET /api/v2/configurations HTTP/1.1
Host: platform.nationalcasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nationalcasino.com
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 03 Dec 2023 08:46:46 GMT
content-type: application/json; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: https://nationalcasino.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,client-timezone,LOCATION-SMART-HTML-SESSION-ID,LOCATION-SMART-DEVICE-SESSION-ID
access-control-expose-headers: Content-Length,Content-Range
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zh9qmkwogVjSFDbUc2CP8TlI0FOQVrP1E3RzL1mMKw6EbzHMxOscBN1DlbY79b1WVr%2Fui4dCWWR8CPmX%2BZdcqAEHa0d6xlhb9EYkLsO1%2FxRTQsWvrd%2BedSskEto68ocapj%2FQhAbhbd2kPqbMxg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82fa8a83ffebb515-OSL
content-encoding: br
X-Firefox-Spdy: h2
s.opoxv.com/tag.php?goal=d23417ed7e786d7f8227d25b45f72bf0;stackUid=20231203084651811839
95.211.229.246200 OK 20 B URL GET HTTP/1.1 s.opoxv.com/tag.php?goal=d23417ed7e786d7f8227d25b45f72bf0;stackUid=20231203084651811839
IP 95.211.229.246:443
ASN #60781 LeaseWeb Netherlands B.V.
Requested by https://nationalcasino.com/no/promotions
Certificate IssuerLet's Encrypt
Subjectopoxv.com
Fingerprint26:70:CA:13:6E:E8:BD:7F:F1:E0:37:45:18:47:04:C0:46:0D:0C:D1
ValidityThu, 05 Oct 2023 15:29:49 GMT - Wed, 03 Jan 2024 15:29:48 GMT
File type gzip compressed data, max speed, from Unix\012- data
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /tag.php?goal=d23417ed7e786d7f8227d25b45f72bf0;stackUid=20231203084651811839 HTTP/1.1
Host: s.opoxv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 03 Dec 2023 08:46:46 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Accept-CH:
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
s.pemsrv.com/tag.php?goal=d23417ed7e786d7f8227d25b45f72bf0;stackUid=20231203084651811470
95.211.229.246 20 B URL s.pemsrv.com/tag.php?goal=d23417ed7e786d7f8227d25b45f72bf0;stackUid=20231203084651811470
IP 95.211.229.246:0
ASN #60781 LeaseWeb Netherlands B.V.
File type gzip compressed data, max speed, from Unix\012- data
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /tag.php?goal=d23417ed7e786d7f8227d25b45f72bf0;stackUid=20231203084651811470 HTTP/1.1
Host: s.pemsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 03 Dec 2023 08:46:46 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Accept-CH:
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
syndication.realsrv.com/tag.php?goal=d23417ed7e786d7f8227d25b45f72bf0;stackUid=20231203084651811400
95.211.229.246200 OK 20 B URL GET HTTP/1.1 syndication.realsrv.com/tag.php?goal=d23417ed7e786d7f8227d25b45f72bf0;stackUid=20231203084651811400
IP 95.211.229.246:443
ASN #60781 LeaseWeb Netherlands B.V.
Requested by https://nationalcasino.com/no/promotions
Certificate IssuerLet's Encrypt
Subjectrealsrv.com
Fingerprint33:54:4D:F8:0E:E4:00:D3:20:90:CA:61:C8:CC:4D:D5:CB:BB:83:57
ValidityThu, 05 Oct 2023 15:34:07 GMT - Wed, 03 Jan 2024 15:34:06 GMT
File type gzip compressed data, max speed, from Unix\012- data
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /tag.php?goal=d23417ed7e786d7f8227d25b45f72bf0;stackUid=20231203084651811400 HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 03 Dec 2023 08:46:46 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Accept-CH:
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
nationalcasino.com/app/styles.84a8b4e837bb8f6f.js
172.67.69.139200 OK 2.4 kB URL GET HTTP/2 nationalcasino.com/app/styles.84a8b4e837bb8f6f.js
IP 172.67.69.139:443
Requested by https://nationalcasino.com/no/promotions
Certificate IssuerCloudflare, Inc.
Subjectnationalcasino.com
FingerprintCC:02:73:1C:8E:B6:5E:A0:33:ED:63:B5:75:B5:C1:5D:7E:A0:D5:47
ValidityTue, 14 Mar 2023 00:00:00 GMT - Tue, 12 Mar 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 7108b17f7cfbb9566b7b829cfd07ea76
be541f6306ddd96528ea50e577551d8f2c101364
38483253df6b7d3b059d273206306329f0ff1bf779224a1372134fcc7a3061ac
GET /app/styles.84a8b4e837bb8f6f.js HTTP/1.1
Host: nationalcasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/no/promotions
Cookie: is_mobile_device=false; preferred-language=no; _cioanonid=a3cce01f-2d1b-603b-7244-5b511ff0909d; _sp_srt_ses.1060=*; _sp_srt_id.1060=ab56d405-e6af-450e-8f99-06f12a3cc201.1701593212.1.1701593212..3df79c2c-f74b-4ff3-8d46-6c66d820f5ff....0; DV_TRACK=d7e56dfb-84fe-4423-b360-e2cbfcc74b99; _ga_9G634HNY5N=GS1.1.1701593211.1.0.1701593211.60.0.0; _ga=GA1.1.1050769078.1701593212
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 03 Dec 2023 08:46:46 GMT
content-type: application/javascript
cf-ray: 82fa8a869ac4b505-OSL
cf-cache-status: BYPASS
etag: W/"65682733-f6"
last-modified: Thu, 30 Nov 2023 06:09:55 GMT
set-cookie: is_mobile_device=false
vary: Accept-Encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qsVWFQ16q17z1zzDwv4IQiko61bP%2FP0YnxLXY%2FobIx5NoPnD0KlUREkvIdqa1c2lG1uwqIHve7US7kmln1Ek5%2Feuvst6oRj1oLFLhvV2SAL6n6ZdqK0xuE3RBvxCU1Hu12oPNQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-9G634HNY5N&cid=1050769078.1701593212>m=45je3bt0v870678449z8839648142&aip=1&dma=1&dma_cps=sypham&gcd=11l1l1l1l1&z=989451518
216.58.211.3 42 B URL www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-9G634HNY5N&cid=1050769078.1701593212>m=45je3bt0v870678449z8839648142&aip=1&dma=1&dma_cps=sypham&gcd=11l1l1l1l1&z=989451518
IP 216.58.211.3:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-9G634HNY5N&cid=1050769078.1701593212>m=45je3bt0v870678449z8839648142&aip=1&dma=1&dma_cps=sypham&gcd=11l1l1l1l1&z=989451518 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 03 Dec 2023 08:46:47 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
nationalcasino.com/app/polyfills.5b6d96237094aa52.js
172.67.69.139200 OK 66 kB URL GET HTTP/2 nationalcasino.com/app/polyfills.5b6d96237094aa52.js
IP 172.67.69.139:443
Requested by https://nationalcasino.com/no/promotions
Certificate IssuerCloudflare, Inc.
Subjectnationalcasino.com
FingerprintCC:02:73:1C:8E:B6:5E:A0:33:ED:63:B5:75:B5:C1:5D:7E:A0:D5:47
ValidityTue, 14 Mar 2023 00:00:00 GMT - Tue, 12 Mar 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash d1311c02067a1e5e7560433e3b79e1d8
66ca37aadc758c22a8b3640ebe2c2a99b875e6ff
6531f609e8f36c00668131dce8dfa949c1fef8c4ca1d9997237cfb86d30edb7d
GET /app/polyfills.5b6d96237094aa52.js HTTP/1.1
Host: nationalcasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/no/promotions
Cookie: is_mobile_device=false; preferred-language=no; _cioanonid=a3cce01f-2d1b-603b-7244-5b511ff0909d; _sp_srt_ses.1060=*; _sp_srt_id.1060=ab56d405-e6af-450e-8f99-06f12a3cc201.1701593212.1.1701593212..3df79c2c-f74b-4ff3-8d46-6c66d820f5ff....0; DV_TRACK=d7e56dfb-84fe-4423-b360-e2cbfcc74b99; _ga_9G634HNY5N=GS1.1.1701593211.1.0.1701593211.60.0.0; _ga=GA1.1.1050769078.1701593212
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 03 Dec 2023 08:46:46 GMT
content-type: application/javascript
cf-ray: 82fa8a869ac8b505-OSL
cf-cache-status: BYPASS
etag: W/"6568272c-2ef10"
last-modified: Thu, 30 Nov 2023 06:09:48 GMT
set-cookie: is_mobile_device=false
vary: Accept-Encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UDViquq1QqOCDewo0v3fHhfskm5CLYVvO2GkuSmD4C9dbvoubIeAtSxIvkaMqxiyvFD1eA5ImKMzrlIqJjCTgzUdxoO%2Ft1VpUyDdWsIkvgTMayI4e88GhvepKK2389gslotUow%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
region1.analytics.google.com/g/collect?v=2&tid=G-9G634HNY5N>m=45je3bt0v870678449z8839648142&_p=1701593211371&_gaz=1&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1050769078.1701593212&ul=en-us&sr=1280x1024&_s=1&sid=1701593211&sct=1&seg=0&dl=https%3A%2F%2Fnationalcasino.com%2Fno%2Fpromotions&dt=Casinokampanjer%20og%20Bonuskoder%20p%C3%A5%20Nett%20%E2%9F%A9%20%E2%82%AC%2F%24100%20%2B%20100%20GS&en=page_view&_fv=1&_nsi=1&_ss=1&tfd=1989
216.239.34.36204 No Content 0 B URL POST HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-9G634HNY5N>m=45je3bt0v870678449z8839648142&_p=1701593211371&_gaz=1&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1050769078.1701593212&ul=en-us&sr=1280x1024&_s=1&sid=1701593211&sct=1&seg=0&dl=https%3A%2F%2Fnationalcasino.com%2Fno%2Fpromotions&dt=Casinokampanjer%20og%20Bonuskoder%20p%C3%A5%20Nett%20%E2%9F%A9%20%E2%82%AC%2F%24100%20%2B%20100%20GS&en=page_view&_fv=1&_nsi=1&_ss=1&tfd=1989
IP 216.239.34.36:443
Requested by https://nationalcasino.com/no/promotions
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-9G634HNY5N>m=45je3bt0v870678449z8839648142&_p=1701593211371&_gaz=1&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1050769078.1701593212&ul=en-us&sr=1280x1024&_s=1&sid=1701593211&sct=1&seg=0&dl=https%3A%2F%2Fnationalcasino.com%2Fno%2Fpromotions&dt=Casinokampanjer%20og%20Bonuskoder%20p%C3%A5%20Nett%20%E2%9F%A9%20%E2%82%AC%2F%24100%20%2B%20100%20GS&en=page_view&_fv=1&_nsi=1&_ss=1&tfd=1989 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nationalcasino.com
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://nationalcasino.com
date: Sun, 03 Dec 2023 08:46:47 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
platform.nationalcasino.com/api/v2/registration-configurations?desktop=1
104.26.7.72204 No Content 0 B URL OPTIONS HTTP/2 platform.nationalcasino.com/api/v2/registration-configurations?desktop=1
IP 104.26.7.72:443
Requested by https://nationalcasino.com/no/promotions
Certificate IssuerCloudflare, Inc.
Subjectnationalcasino.com
FingerprintCC:02:73:1C:8E:B6:5E:A0:33:ED:63:B5:75:B5:C1:5D:7E:A0:D5:47
ValidityTue, 14 Mar 2023 00:00:00 GMT - Tue, 12 Mar 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/v2/registration-configurations?desktop=1 HTTP/1.1
Host: platform.nationalcasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: client-timezone,content-type,x-requested-with
Referer: https://nationalcasino.com/
Origin: https://nationalcasino.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Sun, 03 Dec 2023 08:46:48 GMT
access-control-allow-origin: https://nationalcasino.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,client-timezone,LOCATION-SMART-HTML-SESSION-ID,LOCATION-SMART-DEVICE-SESSION-ID
access-control-expose-headers: Content-Length,Content-Range
access-control-max-age: 86400
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QzCyRY%2B5zXK%2Ffv91iOpinnlx%2BpXVpGnIVRcVMC9o0lMIvvSMSv3a4nb2RFEUoTyXoH9J3fYhANbwFoEXX58bRqGQaHxkKDa4qcEHGJYCCYHG4rhi6uIkUgH4b7FOLg7kV%2FZ1Wp83UhclocfiGA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82fa8a8df804b515-OSL
X-Firefox-Spdy: h2
platform.nationalcasino.com/api/v2/ip-data
104.26.7.72200 OK 0 B URL GET HTTP/2 platform.nationalcasino.com/api/v2/ip-data
IP 104.26.7.72:443
Requested by https://nationalcasino.com/no/promotions
Certificate IssuerCloudflare, Inc.
Subjectnationalcasino.com
FingerprintCC:02:73:1C:8E:B6:5E:A0:33:ED:63:B5:75:B5:C1:5D:7E:A0:D5:47
ValidityTue, 14 Mar 2023 00:00:00 GMT - Tue, 12 Mar 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/v2/ip-data HTTP/1.1
Host: platform.nationalcasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: client-timezone,content-type,x-requested-with
Referer: https://nationalcasino.com/
Origin: https://nationalcasino.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Sun, 03 Dec 2023 08:46:48 GMT
access-control-allow-origin: https://nationalcasino.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,client-timezone,LOCATION-SMART-HTML-SESSION-ID,LOCATION-SMART-DEVICE-SESSION-ID
access-control-expose-headers: Content-Length,Content-Range
access-control-max-age: 86400
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KZerdHCiUhpgFKkWib1BEhP3fh1FcIYpvkv%2FBvm9IudnrPugLf%2BOHZae4UNNnQkyzrzS4tMV55R2PRkpEyeQGHE1Mse4KIB7iXtdndLmit4v6zCoPjF8jtiU4XwO7xKCJp9CYZDw%2B3zN7MzHMQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82fa8a8e0814b515-OSL
X-Firefox-Spdy: h2
platform.nationalcasino.com/api/data/get-currencies
104.26.7.72200 OK 0 B URL GET HTTP/2 platform.nationalcasino.com/api/data/get-currencies
IP 104.26.7.72:443
Requested by https://nationalcasino.com/no/promotions
Certificate IssuerCloudflare, Inc.
Subjectnationalcasino.com
FingerprintCC:02:73:1C:8E:B6:5E:A0:33:ED:63:B5:75:B5:C1:5D:7E:A0:D5:47
ValidityTue, 14 Mar 2023 00:00:00 GMT - Tue, 12 Mar 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/data/get-currencies HTTP/1.1
Host: platform.nationalcasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: client-timezone,content-type,x-requested-with
Referer: https://nationalcasino.com/
Origin: https://nationalcasino.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Sun, 03 Dec 2023 08:46:48 GMT
access-control-allow-origin: https://nationalcasino.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,client-timezone,LOCATION-SMART-HTML-SESSION-ID,LOCATION-SMART-DEVICE-SESSION-ID
access-control-expose-headers: Content-Length,Content-Range
access-control-max-age: 86400
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=14DwufMMuwpzRfl0XOebmlQmg2d65iZBSNrY8loYwmmizxdNJ%2BZDpnXu3y1OUsoYsLe3jP3pclNA1LqYc6K4EvTatfszbQRIsJApkG5mYQPXDRg28S0J%2FXyUphKl38tSqWnGuFnbSL%2BQBXsbuA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82fa8a8e1825b515-OSL
X-Firefox-Spdy: h2
www.google.com/recaptcha/api.js?render=6LcIXVIiAAAAAOSkusfnmE4Oe97qAFgJYg71vdQc
142.250.74.132 585 B URL www.google.com/recaptcha/api.js?render=6LcIXVIiAAAAAOSkusfnmE4Oe97qAFgJYg71vdQc
IP 142.250.74.132:0
File type ASCII text, with very long lines (884), with no line terminators
Hash debddaa3d2e36f6d40686dc5d14e6d54
58e7e8102aa5eff3f64ebbdbb6d96b6f64438c2c
c54c6ef38980fe32e5a88f8d2e3c1bbdf43add171ad2c7382372f294ed1a03d1
GET /recaptcha/api.js?render=6LcIXVIiAAAAAOSkusfnmE4Oe97qAFgJYg71vdQc HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
expires: Sun, 03 Dec 2023 08:46:47 GMT
date: Sun, 03 Dec 2023 08:46:47 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
platform.nationalcasino.com/api/data/provinces
104.26.7.72204 No Content 0 B URL OPTIONS HTTP/2 platform.nationalcasino.com/api/data/provinces
IP 104.26.7.72:443
Requested by https://nationalcasino.com/no/promotions
Certificate IssuerCloudflare, Inc.
Subjectnationalcasino.com
FingerprintCC:02:73:1C:8E:B6:5E:A0:33:ED:63:B5:75:B5:C1:5D:7E:A0:D5:47
ValidityTue, 14 Mar 2023 00:00:00 GMT - Tue, 12 Mar 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/data/provinces HTTP/1.1
Host: platform.nationalcasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: client-timezone,content-type,x-requested-with
Referer: https://nationalcasino.com/
Origin: https://nationalcasino.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Sun, 03 Dec 2023 08:46:48 GMT
access-control-allow-origin: https://nationalcasino.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,client-timezone,LOCATION-SMART-HTML-SESSION-ID,LOCATION-SMART-DEVICE-SESSION-ID
access-control-expose-headers: Content-Length,Content-Range
access-control-max-age: 86400
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vdOtyeAF1Nc71VOEHfe3s4tpKsi5JnNJeGkIFS%2F%2B%2FEEaAzL2l2pR%2BOQuG1Qvzh%2F%2FrEjdn5cyfKAQwZpQz8QEzmrWA%2BJJFskVCmcsrfCMPJjfYYqXrC4%2FcwPSeSQhgGFLHLAqrMlXUcuHMnRT%2Fg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82fa8a8e7871b515-OSL
X-Firefox-Spdy: h2
platform.nationalcasino.com/api/v2/casino/category?auth=false&categoryRecentlyPlayedEnabled=true
104.26.7.72200 OK 0 B URL GET HTTP/2 platform.nationalcasino.com/api/v2/casino/category?auth=false&categoryRecentlyPlayedEnabled=true
IP 104.26.7.72:443
Requested by https://nationalcasino.com/no/promotions
Certificate IssuerCloudflare, Inc.
Subjectnationalcasino.com
FingerprintCC:02:73:1C:8E:B6:5E:A0:33:ED:63:B5:75:B5:C1:5D:7E:A0:D5:47
ValidityTue, 14 Mar 2023 00:00:00 GMT - Tue, 12 Mar 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/v2/casino/category?auth=false&categoryRecentlyPlayedEnabled=true HTTP/1.1
Host: platform.nationalcasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: client-timezone,content-type,x-requested-with
Referer: https://nationalcasino.com/
Origin: https://nationalcasino.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Sun, 03 Dec 2023 08:46:48 GMT
access-control-allow-origin: https://nationalcasino.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,client-timezone,LOCATION-SMART-HTML-SESSION-ID,LOCATION-SMART-DEVICE-SESSION-ID
access-control-expose-headers: Content-Length,Content-Range
access-control-max-age: 86400
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2B82t37Lpvts3DRJLOxkttz0mzYyFtGqlJYIEj9oY8zrwLvytpuZR2aYhD02SZPwfhwRjAxqUytuxs435A%2BmZa0WHsjk%2FxlCbevgLKJTkLv4YiG25WPNMu8I920JUKKn0UnAWzfQ%2FMWOLUY6mdg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82fa8a8e988bb515-OSL
X-Firefox-Spdy: h2
platform.nationalcasino.com/api/v2/casino/producer?is_desktop=1&is_live=0&topProducer=1
104.26.7.72204 No Content 0 B URL OPTIONS HTTP/2 platform.nationalcasino.com/api/v2/casino/producer?is_desktop=1&is_live=0&topProducer=1
IP 104.26.7.72:443
Requested by https://nationalcasino.com/no/promotions
Certificate IssuerCloudflare, Inc.
Subjectnationalcasino.com
FingerprintCC:02:73:1C:8E:B6:5E:A0:33:ED:63:B5:75:B5:C1:5D:7E:A0:D5:47
ValidityTue, 14 Mar 2023 00:00:00 GMT - Tue, 12 Mar 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/v2/casino/producer?is_desktop=1&is_live=0&topProducer=1 HTTP/1.1
Host: platform.nationalcasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: client-timezone,content-type,x-requested-with
Referer: https://nationalcasino.com/
Origin: https://nationalcasino.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Sun, 03 Dec 2023 08:46:48 GMT
access-control-allow-origin: https://nationalcasino.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,client-timezone,LOCATION-SMART-HTML-SESSION-ID,LOCATION-SMART-DEVICE-SESSION-ID
access-control-expose-headers: Content-Length,Content-Range
access-control-max-age: 86400
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Bip0JOsmHRd8lxcO6ZauwD5yppCwIjZF6FqaNJ2dDNdTdNAWuHxTyz95y5OAPkw3A36axXrgO1L6L1i6X7XDy2LMKGTfvilhqNpWufvGzUdpZBRBG2pysD4oTamUEilbNub3fA8aNcXMkVDYtQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82fa8a8e8889b515-OSL
X-Firefox-Spdy: h2
platform.nationalcasino.com/api/v2/casino/producer?is_desktop=1&is_live=1&topProducer=1
104.26.7.72 0 B URL platform.nationalcasino.com/api/v2/casino/producer?is_desktop=1&is_live=1&topProducer=1
IP 104.26.7.72:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/v2/casino/producer?is_desktop=1&is_live=1&topProducer=1 HTTP/1.1
Host: platform.nationalcasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: client-timezone,content-type,x-requested-with
Referer: https://nationalcasino.com/
Origin: https://nationalcasino.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Sun, 03 Dec 2023 08:46:48 GMT
access-control-allow-origin: https://nationalcasino.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,client-timezone,LOCATION-SMART-HTML-SESSION-ID,LOCATION-SMART-DEVICE-SESSION-ID
access-control-expose-headers: Content-Length,Content-Range
access-control-max-age: 86400
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=griTrq%2FKo%2BoezskysxvqNwfNURjhGxyDq%2BkA5raS1bAs4Pxh7uyh%2BILNrdEhZyl7FwSVZN1Yky3qWmbKU4aCie3mTWFF23IXt%2F0VLEAZu4xER6RfDZyfz0WCKAcd0tugTAlp2McIKgoSz4%2BiKQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82fa8a8e988ab515-OSL
X-Firefox-Spdy: h2
nationalcasino.com/api/promotion/list?onlyPromotionType=0&lang=no_NO
172.67.69.139 2.6 kB URL nationalcasino.com/api/promotion/list?onlyPromotionType=0&lang=no_NO
IP 172.67.69.139:0
Certificate IssuerCloudflare, Inc.
Subjectnationalcasino.com
FingerprintCC:02:73:1C:8E:B6:5E:A0:33:ED:63:B5:75:B5:C1:5D:7E:A0:D5:47
ValidityTue, 14 Mar 2023 00:00:00 GMT - Tue, 12 Mar 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (13536), with no line terminators
Hash 47e65a87312e08312b47d6a641418c2f
7c5178c05aff349107441e80b6810dcc85319864
6354443e1684a1c0f8917657f4273c914ea750247568ef50047a4cdcd6423c9b
GET /api/promotion/list?onlyPromotionType=0&lang=no_NO HTTP/1.1
Host: nationalcasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/no/promotions
Cookie: preferred-language=no; _cioanonid=a3cce01f-2d1b-603b-7244-5b511ff0909d; _sp_srt_ses.1060=*; _sp_srt_id.1060=ab56d405-e6af-450e-8f99-06f12a3cc201.1701593212.1.1701593212..3df79c2c-f74b-4ff3-8d46-6c66d820f5ff....0; DV_TRACK=d7e56dfb-84fe-4423-b360-e2cbfcc74b99; _ga_9G634HNY5N=GS1.1.1701593211.1.0.1701593211.60.0.0; _ga=GA1.1.1050769078.1701593212; ubc-code=595033c2-650f-4249-a4a5-f1db4e6ca903
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 03 Dec 2023 08:46:48 GMT
content-type: application/json
cf-ray: 82fa8a8e78f4b505-OSL
cf-cache-status: DYNAMIC
cache-control: no-cache, private
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization
access-control-allow-methods: GET, POST, OPTIONS
access-control-expose-headers: Content-Length,Content-Range
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GPgRyYwBrADHBkQL7yPuwTOsdKeryldU5tRj2SsrrLvaNPz1ZFJ3o4fu1HeIBN%2FO3kGyLuAfBtnD2LaAlk9oPkuGy7io6wb5ENHL69FuOBBNUS%2Bewx1WM8toSblIDE19kLi5pg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
nationalcasino.com/app/vendor.04b91c3c886f193d.js
172.67.69.139200 OK 1.3 MB URL GET HTTP/2 nationalcasino.com/app/vendor.04b91c3c886f193d.js
IP 172.67.69.139:443
Requested by https://nationalcasino.com/no/promotions
Certificate IssuerCloudflare, Inc.
Subjectnationalcasino.com
FingerprintCC:02:73:1C:8E:B6:5E:A0:33:ED:63:B5:75:B5:C1:5D:7E:A0:D5:47
ValidityTue, 14 Mar 2023 00:00:00 GMT - Tue, 12 Mar 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 1.3 MB (1347859 bytes)
Hash 2c7d12dd64aca496a2041d2c94d0f606
396ef509018dae9ba0baa79a35796136c0cf0d54
9efc75401fc7ef663459f6a581996d4eb3e8e606c7f57eca6ebe0419a86f76cd
GET /app/vendor.04b91c3c886f193d.js HTTP/1.1
Host: nationalcasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/no/promotions
Cookie: is_mobile_device=false; preferred-language=no; _cioanonid=a3cce01f-2d1b-603b-7244-5b511ff0909d; _sp_srt_ses.1060=*; _sp_srt_id.1060=ab56d405-e6af-450e-8f99-06f12a3cc201.1701593212.1.1701593212..3df79c2c-f74b-4ff3-8d46-6c66d820f5ff....0; DV_TRACK=d7e56dfb-84fe-4423-b360-e2cbfcc74b99; _ga_9G634HNY5N=GS1.1.1701593211.1.0.1701593211.60.0.0; _ga=GA1.1.1050769078.1701593212
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 03 Dec 2023 08:46:46 GMT
content-type: application/javascript
cf-ray: 82fa8a869acdb505-OSL
cf-cache-status: BYPASS
etag: W/"65682733-4ae0a5"
last-modified: Thu, 30 Nov 2023 06:09:55 GMT
set-cookie: is_mobile_device=false
vary: Accept-Encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=u7mw%2BnIzThAOyyBZTf6Opz1yewUTO%2FSfSK5o5v9VfyC9Hrf00tN0b%2FU7Vfm1aRlfWRGqN5Z9KkHFqwkK2eBJOU6Xh%2FsS1nnBGWzBu5LuOzCBQNUpeWKzZcVnrt6%2B73CxUSDvSw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
platform.nationalcasino.com/api/data/get-countries
172.67.69.139204 No Content 195 kB URL OPTIONS HTTP/2 platform.nationalcasino.com/api/data/get-countries
IP 172.67.69.139:443
Requested by https://nationalcasino.com/no/promotions
Certificate IssuerCloudflare, Inc.
Subjectnationalcasino.com
FingerprintCC:02:73:1C:8E:B6:5E:A0:33:ED:63:B5:75:B5:C1:5D:7E:A0:D5:47
ValidityTue, 14 Mar 2023 00:00:00 GMT - Tue, 12 Mar 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Size 195 kB (195171 bytes)
Hash b4389a2846722f3af7e86968b1ae82cd
80884944561e0c8428108470fa95e5dbc83d9408
c39663f9d8aa87154e6f137b19379eb0000c120ce9b5c068274a833bcb413013
GET /api/data/get-countries HTTP/1.1
Host: platform.nationalcasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-Requested-With: XMLHttpRequest
client-timezone: UTC
Origin: https://nationalcasino.com
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/
Cookie: _cioanonid=a3cce01f-2d1b-603b-7244-5b511ff0909d; _sp_srt_ses.1060=*; _sp_srt_id.1060=ab56d405-e6af-450e-8f99-06f12a3cc201.1701593212.1.1701593212..3df79c2c-f74b-4ff3-8d46-6c66d820f5ff....0; DV_TRACK=d7e56dfb-84fe-4423-b360-e2cbfcc74b99; _ga_9G634HNY5N=GS1.1.1701593211.1.0.1701593211.60.0.0; _ga=GA1.1.1050769078.1701593212; ubc-code=595033c2-650f-4249-a4a5-f1db4e6ca903
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 03 Dec 2023 08:46:48 GMT
content-type: application/json; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: https://nationalcasino.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,client-timezone,LOCATION-SMART-HTML-SESSION-ID,LOCATION-SMART-DEVICE-SESSION-ID
access-control-expose-headers: Content-Length,Content-Range
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UdwkSS7es8Eph3i7qbc1QW8PsMB6g4cczpV1NwxN3j1QiuA9TvS0h5zq8IiEOqkVcsi2jN%2B1shjmPyTCRR7694X7gWgX3MubejKtzXq3FXf1nJx31TOnSGVwIEF8k1rE729QX4acC411BKkJCg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82fa8a8e9918b505-OSL
content-encoding: br
X-Firefox-Spdy: h2
d3beicsry9ch2d.cloudfront.net/site/upload/promotion/logonc.svg
54.230.111.84 12 kB URL d3beicsry9ch2d.cloudfront.net/site/upload/promotion/logonc.svg
IP 54.230.111.84:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1384)
Hash b8c86ef35794d1bcca97eaf8d007a288
82979656ebdc8c9e64f19a8b85a9de4eaaf65063
4fba144834e4a42518e92e4417a049e31b5b1dd007dbbc0f6d0aaf0fbc662d4a
GET /site/upload/promotion/logonc.svg HTTP/1.1
Host: d3beicsry9ch2d.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 11513
last-modified: Wed, 18 Jan 2023 09:55:24 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: 4nyDvXEkcw8xGto.MiKJDHlOtfdnkuOP
accept-ranges: bytes
server: AmazonS3
date: Sun, 03 Dec 2023 07:30:01 GMT
etag: "b8c86ef35794d1bcca97eaf8d007a288"
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: G4qKEP-4KrGNEWV_rzvhAUArYYiSc46do9HneTrrXO-Gae9_gUnD1g==
age: 4608
X-Firefox-Spdy: h2
d3beicsry9ch2d.cloudfront.net/site/upload/flag_icon/70de5afe-f358-4e15-9f7b-eb1676341d34/1690371243_no.svg
54.230.111.84 630 B URL d3beicsry9ch2d.cloudfront.net/site/upload/flag_icon/70de5afe-f358-4e15-9f7b-eb1676341d34/1690371243_no.svg
IP 54.230.111.84:0
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document, ASCII text, with very long lines (592)
Hash 6bc7a719c5f9ab72cd04de00afdbcbc5
8182557fe02aff899d0bae3ad19f839dc914687f
7815a47683c4a9b2cf6f71937d341905c7c0eddfc9215aa1897326f853ca7479
GET /site/upload/flag_icon/70de5afe-f358-4e15-9f7b-eb1676341d34/1690371243_no.svg HTTP/1.1
Host: d3beicsry9ch2d.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 630
last-modified: Wed, 26 Jul 2023 11:34:04 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: RB16jSGdwYcsJAofOQk4nU9l7rXjT4U_
accept-ranges: bytes
server: AmazonS3
date: Sun, 03 Dec 2023 07:30:01 GMT
etag: "6bc7a719c5f9ab72cd04de00afdbcbc5"
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: m5RfGfUp9pf9bXioYQWhHTh_Cn3n0nliZOb5hZSy6k6UK61DU5XuKg==
age: 4608
X-Firefox-Spdy: h2
fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2
216.58.207.227 8.0 kB URL fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 8000, version 1.0\012- data
Hash 72993dddf88a63e8f226656f7de88e57
179f97ec0275f09603a8db94d4380eb584d81cd5
f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149
GET /s/poppins/v20/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://nationalcasino.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 8000
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:53:49 GMT
expires: Fri, 29 Nov 2024 04:53:49 GMT
cache-control: public, max-age=31536000
age: 273180
last-modified: Wed, 27 Apr 2022 16:59:07 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2
216.58.207.227200 OK 7.8 kB URL GET HTTP/2 fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2
IP 216.58.207.227:443
Requested by https://nationalcasino.com/no/promotions
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 7816, version 1.0\012- data
Hash 25b0e113ca7cce3770d542736db26368
cb726212d5d525021752a1d8470a0fb593e0c49e
9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526
GET /s/poppins/v20/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://nationalcasino.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7816
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:00:51 GMT
expires: Fri, 29 Nov 2024 04:00:51 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 27 Apr 2022 16:11:40 GMT
content-type: font/woff2
age: 276358
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.livechatinc.com/tracking.js
95.101.10.171200 OK 27 kB URL GET HTTP/2 cdn.livechatinc.com/tracking.js
IP 95.101.10.171:443
ASN #20940 Akamai International B.V.
Requested by https://nationalcasino.com/no/promotions
Certificate IssuerDigiCert Inc
Subjectlivechat.com
Fingerprint76:42:79:92:87:C7:74:BC:5B:DC:11:4E:54:69:70:2A:5F:78:41:8F
ValidityWed, 16 Aug 2023 00:00:00 GMT - Thu, 15 Aug 2024 23:59:59 GMT
Hash 040dea15dd9a6c28ae756160d224485f
46597206913ee680550f692bc2ce007ee878c634
3a9092e7843cd485aade33f386466a452095937fc31543f73b24b1c93b4f49b1
GET /tracking.js HTTP/1.1
Host: cdn.livechatinc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Fri, 01 Dec 2023 09:12:25 GMT
etag: W/"040dea15dd9a6c28ae756160d224485f"
x-amz-server-side-encryption: AES256
x-amz-version-id: 3CyuQk8hK5meZFX8yufVSUsdG9OUQ4w7
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: 0i1PArA7REK9NRXkvIn80rpkDM-spFz-d-KSsloz6x0uK-wl00MEEw==
content-length: 27256
cache-control: max-age=28800
expires: Sun, 03 Dec 2023 16:46:49 GMT
date: Sun, 03 Dec 2023 08:46:49 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
X-Firefox-Spdy: h2
nationalcasino.com/app/national-casino.484c1ab83fbd0d426d86.ttf?4rv0bq
172.67.69.139 50 kB URL nationalcasino.com/app/national-casino.484c1ab83fbd0d426d86.ttf?4rv0bq
IP 172.67.69.139:0
Certificate IssuerCloudflare, Inc.
Subjectnationalcasino.com
FingerprintCC:02:73:1C:8E:B6:5E:A0:33:ED:63:B5:75:B5:C1:5D:7E:A0:D5:47
ValidityTue, 14 Mar 2023 00:00:00 GMT - Tue, 12 Mar 2024 23:59:59 GMT
File type TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, national-casino\012- data
Hash 1198c557aa07432448dbe7e42dd106de
6e607318557e7e7a05333c3a254e0c23969eb5e9
0f707547e958e11a09a5932a009dcc42d7e9af42986b21c5a460800f4f3ac8c8
GET /app/national-casino.484c1ab83fbd0d426d86.ttf?4rv0bq HTTP/1.1
Host: nationalcasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/app/styles.b76d859e5f3be7cb.css
Cookie: is_mobile_device=false; preferred-language=no; _cioanonid=a3cce01f-2d1b-603b-7244-5b511ff0909d; _sp_srt_ses.1060=*; _sp_srt_id.1060=ab56d405-e6af-450e-8f99-06f12a3cc201.1701593212.1.1701593212..3df79c2c-f74b-4ff3-8d46-6c66d820f5ff....0; DV_TRACK=d7e56dfb-84fe-4423-b360-e2cbfcc74b99; _ga_9G634HNY5N=GS1.1.1701593211.1.0.1701593211.60.0.0; _ga=GA1.1.1050769078.1701593212; ubc-code=595033c2-650f-4249-a4a5-f1db4e6ca903
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 03 Dec 2023 08:46:49 GMT
content-type: application/octet-stream
content-length: 49856
cf-ray: 82fa8a947d73b505-OSL
cf-cache-status: BYPASS
accept-ranges: bytes
etag: "6568272c-c2c0"
last-modified: Thu, 30 Nov 2023 06:09:48 GMT
set-cookie: is_mobile_device=false
vary: Accept-Encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VM3SVgKg5bu9Ifv%2BqlsAR5c6awpebMrHjORf9mEZiGklwRleJS1x%2FMPKT%2FePBpn9dk2uhLK5z9pdpVXSEYziRXxgQfBxoAMOkZ1Jj6oyHfE3z621qccerv3Y2vMs6DwCVXlnVw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
X-Firefox-Spdy: h2
nationalcasino.com/assets/footer/footer-head.png
172.67.69.139 1.7 kB URL nationalcasino.com/assets/footer/footer-head.png
IP 172.67.69.139:0
Certificate IssuerCloudflare, Inc.
Subjectnationalcasino.com
FingerprintCC:02:73:1C:8E:B6:5E:A0:33:ED:63:B5:75:B5:C1:5D:7E:A0:D5:47
ValidityTue, 14 Mar 2023 00:00:00 GMT - Tue, 12 Mar 2024 23:59:59 GMT
File type PNG image data, 88 x 30, 8-bit/color RGBA, non-interlaced\012- data
Hash fc93928fb4619868fdd48ced90da63b4
2833e205cdc25a819a9fec774b67d7b55ce60874
6424b9d791c1c089ba2a5c71d0834b1d967407dacf2a13f3c1ad73f1c0c20c69
GET /assets/footer/footer-head.png HTTP/1.1
Host: nationalcasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/app/main.a7de03da3f347acd.css
Cookie: is_mobile_device=false; preferred-language=no; _cioanonid=a3cce01f-2d1b-603b-7244-5b511ff0909d; _sp_srt_ses.1060=*; _sp_srt_id.1060=ab56d405-e6af-450e-8f99-06f12a3cc201.1701593212.1.1701593212..3df79c2c-f74b-4ff3-8d46-6c66d820f5ff....0; DV_TRACK=d7e56dfb-84fe-4423-b360-e2cbfcc74b99; _ga_9G634HNY5N=GS1.1.1701593211.1.0.1701593211.60.0.0; _ga=GA1.1.1050769078.1701593212; ubc-code=595033c2-650f-4249-a4a5-f1db4e6ca903
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 03 Dec 2023 08:46:49 GMT
content-type: image/png
content-length: 1716
cf-ray: 82fa8a948d78b505-OSL
cf-cache-status: BYPASS
accept-ranges: bytes
etag: "65682734-6b4"
last-modified: Thu, 30 Nov 2023 06:09:56 GMT
set-cookie: is_mobile_device=false
vary: Accept-Encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ykxsdK23hBQ4%2FPRuIKE2lXXJvikqKiSvgu5iN1JI3MIUKNBMS5sl%2B3IEvts9xtUdZSv5B7wzIxLTEpQIROMoiPyNziqfsxpdMMh9XFkoLyBplbaMTyZP7HE24R61plzcyMOTVQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
X-Firefox-Spdy: h2
platform.nationalcasino.com/api/v2/casino/last-winners?limit=5&has_live=0
104.26.7.72204 No Content 0 B URL OPTIONS HTTP/2 platform.nationalcasino.com/api/v2/casino/last-winners?limit=5&has_live=0
IP 104.26.7.72:443
Requested by https://nationalcasino.com/no/promotions
Certificate IssuerCloudflare, Inc.
Subjectnationalcasino.com
FingerprintCC:02:73:1C:8E:B6:5E:A0:33:ED:63:B5:75:B5:C1:5D:7E:A0:D5:47
ValidityTue, 14 Mar 2023 00:00:00 GMT - Tue, 12 Mar 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/v2/casino/last-winners?limit=5&has_live=0 HTTP/1.1
Host: platform.nationalcasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: client-timezone,content-type,x-requested-with
Referer: https://nationalcasino.com/
Origin: https://nationalcasino.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Sun, 03 Dec 2023 08:46:49 GMT
access-control-allow-origin: https://nationalcasino.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,client-timezone,LOCATION-SMART-HTML-SESSION-ID,LOCATION-SMART-DEVICE-SESSION-ID
access-control-expose-headers: Content-Length,Content-Range
access-control-max-age: 86400
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=u%2BfDpZt29ILHbEDsbOn0MZgvZCFMlyCWgUcF%2BOf6JEzITL04GGC9e5CQTom8u%2FW3IaVBI5yHf8SHsoWfT1m2TTmmWMZKbjNmtrEIq8B1Sf%2BlSuEkCSCYzONcV7TKUnUHGfMFX6Nw1r0I9tWiYw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82fa8a94aeacb515-OSL
X-Firefox-Spdy: h2
platform.nationalcasino.com/api/user/is-auth
104.26.7.72 0 B URL platform.nationalcasino.com/api/user/is-auth
IP 104.26.7.72:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/user/is-auth HTTP/1.1
Host: platform.nationalcasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: client-timezone,content-type,x-requested-with
Referer: https://nationalcasino.com/
Origin: https://nationalcasino.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Sun, 03 Dec 2023 08:46:49 GMT
access-control-allow-origin: https://nationalcasino.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,client-timezone,LOCATION-SMART-HTML-SESSION-ID,LOCATION-SMART-DEVICE-SESSION-ID
access-control-expose-headers: Content-Length,Content-Range
access-control-max-age: 86400
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kkHIyjWazc5LYyxqTitNOrVRbU%2FAgGEyNd9%2BPhgHlQrCtMarCx7qtkUjQVKQa5zasRehZYZzo3muh4wcxsdHLxnprSChgvf63Z0lCE4vW1SrTvVla%2Fj7kZk39hu8aUCyn3zQukYwr64uBECPww%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82fa8a94beb1b515-OSL
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/styles__ltr.css
142.250.74.35 25 kB URL www.gstatic.com/recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/styles__ltr.css
IP 142.250.74.35:0
File type ASCII text, with very long lines (56398), with no line terminators
Hash eb4bc511f79f7a1573b45f5775b3a99b
d910fb51ad7316aa54f055079374574698e74b35
7859a62e04b0acb06516eb12454de6673883ecfaeaed6c254659bca7cd59c050
GET /recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/styles__ltr.css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 24606
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 03 Dec 2023 08:03:16 GMT
expires: Mon, 02 Dec 2024 08:03:16 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 14 Nov 2023 05:42:11 GMT
content-type: text/css
vary: Accept-Encoding
age: 2613
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
nationalcasino.com/app/common.9565dd37644cf1d7.js
172.67.69.139200 OK 199 kB URL GET HTTP/2 nationalcasino.com/app/common.9565dd37644cf1d7.js
IP 172.67.69.139:443
Requested by https://nationalcasino.com/no/promotions
Certificate IssuerCloudflare, Inc.
Subjectnationalcasino.com
FingerprintCC:02:73:1C:8E:B6:5E:A0:33:ED:63:B5:75:B5:C1:5D:7E:A0:D5:47
ValidityTue, 14 Mar 2023 00:00:00 GMT - Tue, 12 Mar 2024 23:59:59 GMT
File type ASCII text, with very long lines (28371), with no line terminators
Size 199 kB (199313 bytes)
Hash 8914d401369e762f86288758b498b7ee
1767de41ea932be064150209e8c85337d288f2f0
bbb537d33c04066e91c7d9224ef1385576a5dac0eecf6206961a57f5b3102636
GET /app/common.9565dd37644cf1d7.js HTTP/1.1
Host: nationalcasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/no/promotions
Cookie: is_mobile_device=false; preferred-language=no; _cioanonid=a3cce01f-2d1b-603b-7244-5b511ff0909d; _sp_srt_ses.1060=*; _sp_srt_id.1060=ab56d405-e6af-450e-8f99-06f12a3cc201.1701593212.1.1701593212..3df79c2c-f74b-4ff3-8d46-6c66d820f5ff....0; DV_TRACK=d7e56dfb-84fe-4423-b360-e2cbfcc74b99; _ga_9G634HNY5N=GS1.1.1701593211.1.0.1701593211.60.0.0; _ga=GA1.1.1050769078.1701593212; ubc-code=595033c2-650f-4249-a4a5-f1db4e6ca903
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 03 Dec 2023 08:46:49 GMT
content-type: application/javascript
cf-ray: 82fa8a945d5ab505-OSL
cf-cache-status: BYPASS
etag: W/"65682732-6ed3"
last-modified: Thu, 30 Nov 2023 06:09:54 GMT
set-cookie: is_mobile_device=false
vary: Accept-Encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iupFGT%2B1zVpNv5SdcU7BYqyywGmN9viP6AE5SQAFMU7x1YJxBSjumAz0HNVMuE%2FIi5ocX2XImZQNcMauaNBqtDomETk4uxvsLq%2BssyfoUj8m5S35W2d8NF1tfTDoXdAoyTZ73A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2
216.58.207.227200 OK 7.7 kB URL GET HTTP/3 fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2
IP 216.58.207.227:443
Requested by https://nationalcasino.com/no/promotions
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 7748, version 1.0\012- data
Hash a09f2fccfee35b7247b08a1a266f0328
0da2d17e738f46d2a09e6fb7969da451719a9820
cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446
GET /s/poppins/v20/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://nationalcasino.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7748
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Nov 2023 21:35:53 GMT
expires: Thu, 28 Nov 2024 21:35:53 GMT
cache-control: public, max-age=31536000
age: 299456
last-modified: Wed, 27 Apr 2022 16:21:30 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
nationalcasino.com/assets/banners/vip/vip-carousel-bg.webp
172.67.69.139200 OK 11 kB URL GET HTTP/2 nationalcasino.com/assets/banners/vip/vip-carousel-bg.webp
IP 172.67.69.139:443
Requested by https://nationalcasino.com/no/promotions
Certificate IssuerCloudflare, Inc.
Subjectnationalcasino.com
FingerprintCC:02:73:1C:8E:B6:5E:A0:33:ED:63:B5:75:B5:C1:5D:7E:A0:D5:47
ValidityTue, 14 Mar 2023 00:00:00 GMT - Tue, 12 Mar 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash a62c9229fc3a9beeb18349c2bf8bd934
6bb052048f440d89c835be72c96d21e1a928691c
01c4a6dfd04f522d965af00835ed9e93b302794263e822331902e1f2b79f214a
GET /assets/banners/vip/vip-carousel-bg.webp HTTP/1.1
Host: nationalcasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/no/promotions
Cookie: is_mobile_device=false; preferred-language=no; _cioanonid=a3cce01f-2d1b-603b-7244-5b511ff0909d; _sp_srt_ses.1060=*; _sp_srt_id.1060=ab56d405-e6af-450e-8f99-06f12a3cc201.1701593212.1.1701593212..3df79c2c-f74b-4ff3-8d46-6c66d820f5ff....0; DV_TRACK=d7e56dfb-84fe-4423-b360-e2cbfcc74b99; _ga_9G634HNY5N=GS1.1.1701593211.1.0.1701593211.60.0.0; _ga=GA1.1.1050769078.1701593212; ubc-code=595033c2-650f-4249-a4a5-f1db4e6ca903
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 03 Dec 2023 08:46:49 GMT
content-type: image/webp
content-length: 10796
cf-ray: 82fa8a970f3db505-OSL
cf-cache-status: BYPASS
accept-ranges: bytes
etag: "6568273a-2a2c"
last-modified: Thu, 30 Nov 2023 06:10:02 GMT
set-cookie: is_mobile_device=false
vary: Accept-Encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fYUnFXTdZAcnGjN%2B5Le7O5wH92GVHRQCU25dp2Sh%2FuOdR3bHbnw7ryA3u4EtUMQ5fo1GH%2Fs5OX0LaRr30ekMpQxzVzIFvEorozevH999uomzPqe3CJQeOFQO%2BhkJks3M%2B8P6eQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
X-Firefox-Spdy: h2
nationalcasino.com/assets/banners/vip/vip-progress-bg.webp
172.67.69.139200 OK 120 kB URL GET HTTP/2 nationalcasino.com/assets/banners/vip/vip-progress-bg.webp
IP 172.67.69.139:443
Requested by https://nationalcasino.com/no/promotions
Certificate IssuerCloudflare, Inc.
Subjectnationalcasino.com
FingerprintCC:02:73:1C:8E:B6:5E:A0:33:ED:63:B5:75:B5:C1:5D:7E:A0:D5:47
ValidityTue, 14 Mar 2023 00:00:00 GMT - Tue, 12 Mar 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Size 120 kB (119554 bytes)
Hash 089d13916722d36777dbef99ad9209a8
8866f76b57e52839ffaccac1994aa99307e6b12f
a9dde164dda1567901da64e30c18d484a6e5c9addbdca62fd83630e7dd811dc6
GET /assets/banners/vip/vip-progress-bg.webp HTTP/1.1
Host: nationalcasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/no/promotions
Cookie: is_mobile_device=false; preferred-language=no; _cioanonid=a3cce01f-2d1b-603b-7244-5b511ff0909d; _sp_srt_ses.1060=*; _sp_srt_id.1060=ab56d405-e6af-450e-8f99-06f12a3cc201.1701593212.1.1701593212..3df79c2c-f74b-4ff3-8d46-6c66d820f5ff....0; DV_TRACK=d7e56dfb-84fe-4423-b360-e2cbfcc74b99; _ga_9G634HNY5N=GS1.1.1701593211.1.0.1701593211.60.0.0; _ga=GA1.1.1050769078.1701593212; ubc-code=595033c2-650f-4249-a4a5-f1db4e6ca903
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 03 Dec 2023 08:46:49 GMT
content-type: image/webp
content-length: 119554
cf-ray: 82fa8a970f3cb505-OSL
cf-cache-status: BYPASS
accept-ranges: bytes
etag: "6568273a-1d302"
last-modified: Thu, 30 Nov 2023 06:10:02 GMT
set-cookie: is_mobile_device=false
vary: Accept-Encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6K39yggTm%2BTXetzAB9QY7RhyzzgY4HbXINH6qLLZ6EwtaN6KDWcxC%2FwGx0Rt7IHflMQ%2B5RLnZx9gnTUG3jsGSUlWyZNjuRBk2NTwsU4%2FwnrupRrUzjbqwDlUCsz6N7b9xFZzNw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
X-Firefox-Spdy: h2
nationalcasino.com/app/5787.943e3eb698764ab3.js
172.67.69.139 14 kB URL nationalcasino.com/app/5787.943e3eb698764ab3.js
IP 172.67.69.139:0
Certificate IssuerCloudflare, Inc.
Subjectnationalcasino.com
FingerprintCC:02:73:1C:8E:B6:5E:A0:33:ED:63:B5:75:B5:C1:5D:7E:A0:D5:47
ValidityTue, 14 Mar 2023 00:00:00 GMT - Tue, 12 Mar 2024 23:59:59 GMT
File type ASCII text, with very long lines (6684), with no line terminators
Hash c96ca9f7272f36ccfeaefcb6be975339
8356864bf9a38ae3e5c8a01eaea009ed64a19413
6dc91109fffb86cdaf10f857cbc7dc9cc73ebe4acd66f1b7b09e03610512a1d9
GET /app/5787.943e3eb698764ab3.js HTTP/1.1
Host: nationalcasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/no/promotions
Cookie: is_mobile_device=false; preferred-language=no; _cioanonid=a3cce01f-2d1b-603b-7244-5b511ff0909d; _sp_srt_ses.1060=*; _sp_srt_id.1060=ab56d405-e6af-450e-8f99-06f12a3cc201.1701593212.1.1701593212..3df79c2c-f74b-4ff3-8d46-6c66d820f5ff....0; DV_TRACK=d7e56dfb-84fe-4423-b360-e2cbfcc74b99; _ga_9G634HNY5N=GS1.1.1701593211.1.0.1701593211.60.0.0; _ga=GA1.1.1050769078.1701593212; ubc-code=595033c2-650f-4249-a4a5-f1db4e6ca903
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 03 Dec 2023 08:46:49 GMT
content-type: application/javascript
cf-ray: 82fa8a946d68b505-OSL
cf-cache-status: BYPASS
etag: W/"65682732-1a1c"
last-modified: Thu, 30 Nov 2023 06:09:54 GMT
set-cookie: is_mobile_device=false
vary: Accept-Encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=p7OWw49Kj6ranaXhRv%2FCUgJyxzfFhR0b2kv06Br1i%2FhtCIiPefmvKOuub2O8pgTMKCmdpHpGFlsmgI%2F19kcDxuqKwMhpvq2l96upOsybx2PZWetxpfiIVV191EqUDtc7v3k9vg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
nationalcasino.com/assets/vip/icons/5.webp
172.67.69.139 11 kB URL nationalcasino.com/assets/vip/icons/5.webp
IP 172.67.69.139:0
Certificate IssuerCloudflare, Inc.
Subjectnationalcasino.com
FingerprintCC:02:73:1C:8E:B6:5E:A0:33:ED:63:B5:75:B5:C1:5D:7E:A0:D5:47
ValidityTue, 14 Mar 2023 00:00:00 GMT - Tue, 12 Mar 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash 6fb1d23be20679d08cdc58f68cbb84c1
35ec52fdfc3f35798cf7fa9c725d7c69a4e7a9cd
e9373ac9ec7ad94957b3406cbd5a3d97157762c36ea3020719c7593484a6830a
GET /assets/vip/icons/5.webp HTTP/1.1
Host: nationalcasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/no/promotions
Cookie: is_mobile_device=false; preferred-language=no; _cioanonid=a3cce01f-2d1b-603b-7244-5b511ff0909d; _sp_srt_ses.1060=*; _sp_srt_id.1060=ab56d405-e6af-450e-8f99-06f12a3cc201.1701593212.1.1701593212..3df79c2c-f74b-4ff3-8d46-6c66d820f5ff....0; DV_TRACK=d7e56dfb-84fe-4423-b360-e2cbfcc74b99; _ga_9G634HNY5N=GS1.1.1701593211.1.0.1701593211.60.0.0; _ga=GA1.1.1050769078.1701593212; ubc-code=595033c2-650f-4249-a4a5-f1db4e6ca903
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 03 Dec 2023 08:46:49 GMT
content-type: image/webp
content-length: 10704
cf-ray: 82fa8a972f66b505-OSL
cf-cache-status: BYPASS
accept-ranges: bytes
etag: "6568272f-29d0"
last-modified: Thu, 30 Nov 2023 06:09:51 GMT
set-cookie: is_mobile_device=false
vary: Accept-Encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pdRfYzvLgLu4l9SBShWzdaL%2B4%2B2ZJL6vlqR%2BVhvqxl6mBiHM6YJTiuMZEf9uI9g5oG%2BtZsoVPa43QponhpJg0ZLpQLMrZjdag5PQAOGhf4XYtwnqQOjsXVQa%2FefKdNkWjTQDjA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
X-Firefox-Spdy: h2
nationalcasino.com/assets/vip/icons/3.webp
172.67.69.139 10 kB URL nationalcasino.com/assets/vip/icons/3.webp
IP 172.67.69.139:0
Certificate IssuerCloudflare, Inc.
Subjectnationalcasino.com
FingerprintCC:02:73:1C:8E:B6:5E:A0:33:ED:63:B5:75:B5:C1:5D:7E:A0:D5:47
ValidityTue, 14 Mar 2023 00:00:00 GMT - Tue, 12 Mar 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash 11fd62f21137517d3472c49ca19b30ff
dcb39fe5a793c57d8a3aff2c341b34680b6ecb60
96447cb7e2a1010c38dad0253f3aa16682aebb775add0490b57c7ba3251ff44b
GET /assets/vip/icons/3.webp HTTP/1.1
Host: nationalcasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/no/promotions
Cookie: is_mobile_device=false; preferred-language=no; _cioanonid=a3cce01f-2d1b-603b-7244-5b511ff0909d; _sp_srt_ses.1060=*; _sp_srt_id.1060=ab56d405-e6af-450e-8f99-06f12a3cc201.1701593212.1.1701593212..3df79c2c-f74b-4ff3-8d46-6c66d820f5ff....0; DV_TRACK=d7e56dfb-84fe-4423-b360-e2cbfcc74b99; _ga_9G634HNY5N=GS1.1.1701593211.1.0.1701593211.60.0.0; _ga=GA1.1.1050769078.1701593212; ubc-code=595033c2-650f-4249-a4a5-f1db4e6ca903
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 03 Dec 2023 08:46:49 GMT
content-type: image/webp
content-length: 10082
cf-ray: 82fa8a972f62b505-OSL
cf-cache-status: BYPASS
accept-ranges: bytes
etag: "65682735-2762"
last-modified: Thu, 30 Nov 2023 06:09:57 GMT
set-cookie: is_mobile_device=false
vary: Accept-Encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yWVk5VFSK1xDllo5hdhnTBoaTmGfdVNJFPGVJJydtm1fNtY7MRa%2BLVQjTfQrqjbI3ljpeoqe5aR3azFf9MkR%2Fjfc5qT8p2XABzfIQDv%2FanPojZO1PdhpBSBkaMnLLvKC%2FHK8iA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
X-Firefox-Spdy: h2
nationalcasino.com/assets/vip/icons/6.webp
172.67.69.139 9.4 kB URL nationalcasino.com/assets/vip/icons/6.webp
IP 172.67.69.139:0
Certificate IssuerCloudflare, Inc.
Subjectnationalcasino.com
FingerprintCC:02:73:1C:8E:B6:5E:A0:33:ED:63:B5:75:B5:C1:5D:7E:A0:D5:47
ValidityTue, 14 Mar 2023 00:00:00 GMT - Tue, 12 Mar 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash 8332e789da376bfe0b1dfac9d8126876
fb3972df534f45c168c98c487f362ad0d9b0c42a
34e0b963b6391d876c4905d45690022cece5aa15754ad2888ea63e0311e33d4f
GET /assets/vip/icons/6.webp HTTP/1.1
Host: nationalcasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/no/promotions
Cookie: is_mobile_device=false; preferred-language=no; _cioanonid=a3cce01f-2d1b-603b-7244-5b511ff0909d; _sp_srt_ses.1060=*; _sp_srt_id.1060=ab56d405-e6af-450e-8f99-06f12a3cc201.1701593212.1.1701593212..3df79c2c-f74b-4ff3-8d46-6c66d820f5ff....0; DV_TRACK=d7e56dfb-84fe-4423-b360-e2cbfcc74b99; _ga_9G634HNY5N=GS1.1.1701593211.1.0.1701593211.60.0.0; _ga=GA1.1.1050769078.1701593212; ubc-code=595033c2-650f-4249-a4a5-f1db4e6ca903
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 03 Dec 2023 08:46:49 GMT
content-type: image/webp
content-length: 9398
cf-ray: 82fa8a973f6bb505-OSL
cf-cache-status: BYPASS
accept-ranges: bytes
etag: "65682735-24b6"
last-modified: Thu, 30 Nov 2023 06:09:57 GMT
set-cookie: is_mobile_device=false
vary: Accept-Encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5oqfAjpxziHYQIosPKBDw%2FFnFfHH3jOsmBcXVH4vEWGkd2ziF7ITRyuSYRVsqUI9JrGP98YLtQ9aZjz18lMjOlVYE9as5d%2FhkiIMtQt8kJTWI0rXlc%2B0s7wmfcQ03UpAMB37pA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
X-Firefox-Spdy: h2
platform.nationalcasino.com/api/user/is-auth
172.67.69.139 11 kB URL platform.nationalcasino.com/api/user/is-auth
IP 172.67.69.139:0
File type JSON data\012- , ASCII text, with no line terminators
Hash b9169af20adb2be940a35d3a8f7508cf
568312af24eadcadb00306bb3cd3cc6b2cf494ea
a53e5b90daea1d5c794bf41c3123c69533f9ea6f821e0051413ec99a1883a153
GET /api/user/is-auth HTTP/1.1
Host: platform.nationalcasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-Requested-With: XMLHttpRequest
client-timezone: UTC
Origin: https://nationalcasino.com
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/
Cookie: _cioanonid=a3cce01f-2d1b-603b-7244-5b511ff0909d; _sp_srt_ses.1060=*; _sp_srt_id.1060=ab56d405-e6af-450e-8f99-06f12a3cc201.1701593212.1.1701593212..3df79c2c-f74b-4ff3-8d46-6c66d820f5ff....0; DV_TRACK=d7e56dfb-84fe-4423-b360-e2cbfcc74b99; _ga_9G634HNY5N=GS1.1.1701593211.1.0.1701593211.60.0.0; _ga=GA1.1.1050769078.1701593212; ubc-code=595033c2-650f-4249-a4a5-f1db4e6ca903
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 03 Dec 2023 08:46:49 GMT
content-type: application/json; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: https://nationalcasino.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,client-timezone,LOCATION-SMART-HTML-SESSION-ID,LOCATION-SMART-DEVICE-SESSION-ID
access-control-expose-headers: Content-Length,Content-Range
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hNfs0p%2BFekgP5%2BlcMkFf%2BpV0NndYzxDeYPmv%2B%2FaP4A7jjmd5mUsqXceTec%2Bah72kGW2EWb1jrZCS6wXvTB90BLXhtBZd3cRRXG3tbNLtw0t9MKDmJ6RtWB%2Fw12%2F%2BDLYeOn2so%2BsaFkHmFyEe7Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82fa8a957e2db505-OSL
content-encoding: br
X-Firefox-Spdy: h2
nationalcasino.com/assets/vip/icons/7.webp
172.67.69.139200 OK 10 kB URL GET HTTP/2 nationalcasino.com/assets/vip/icons/7.webp
IP 172.67.69.139:443
Requested by https://nationalcasino.com/no/promotions
Certificate IssuerCloudflare, Inc.
Subjectnationalcasino.com
FingerprintCC:02:73:1C:8E:B6:5E:A0:33:ED:63:B5:75:B5:C1:5D:7E:A0:D5:47
ValidityTue, 14 Mar 2023 00:00:00 GMT - Tue, 12 Mar 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash 68cf41073a8d1aaf0e3943373e719c03
e28c54057729927ca44b4ca523e1f4429823d7ff
0118d5624a8402f9c7134891dddcfeb0accceb9b1b981b90a5c91642b6bc83e1
GET /assets/vip/icons/7.webp HTTP/1.1
Host: nationalcasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/no/promotions
Cookie: is_mobile_device=false; preferred-language=no; _cioanonid=a3cce01f-2d1b-603b-7244-5b511ff0909d; _sp_srt_ses.1060=*; _sp_srt_id.1060=ab56d405-e6af-450e-8f99-06f12a3cc201.1701593212.1.1701593212..3df79c2c-f74b-4ff3-8d46-6c66d820f5ff....0; DV_TRACK=d7e56dfb-84fe-4423-b360-e2cbfcc74b99; _ga_9G634HNY5N=GS1.1.1701593211.1.0.1701593211.60.0.0; _ga=GA1.1.1050769078.1701593212; ubc-code=595033c2-650f-4249-a4a5-f1db4e6ca903
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 03 Dec 2023 08:46:49 GMT
content-type: image/webp
content-length: 10384
cf-ray: 82fa8a973f74b505-OSL
cf-cache-status: BYPASS
accept-ranges: bytes
etag: "65682741-2890"
last-modified: Thu, 30 Nov 2023 06:10:09 GMT
set-cookie: is_mobile_device=false
vary: Accept-Encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7ZYLTQV9Rp6XE%2BSAzQURc%2FGW2schR3abdGrdxff%2BQ53o4L1H8k6a447c1L9nKpV5lt6IioznDpjVaHwfT85jlCbjfwrNnNKKSMZMP1%2BVN0g1Lu0GRek4KOR1Jk66rIMmxk%2FAcA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
X-Firefox-Spdy: h2
nationalcasino.com/assets/vip/icons/4.webp
172.67.69.139200 OK 9.9 kB URL GET HTTP/2 nationalcasino.com/assets/vip/icons/4.webp
IP 172.67.69.139:443
Requested by https://nationalcasino.com/no/promotions
Certificate IssuerCloudflare, Inc.
Subjectnationalcasino.com
FingerprintCC:02:73:1C:8E:B6:5E:A0:33:ED:63:B5:75:B5:C1:5D:7E:A0:D5:47
ValidityTue, 14 Mar 2023 00:00:00 GMT - Tue, 12 Mar 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash 48715253c5765ff538d0799a6498fbde
8e4aec3d020a650bd656dc1fcfbcb2ccab6a509c
edf3c791146d48b678026b961a589c48d887beb65fe856e79f4ad51f87928374
GET /assets/vip/icons/4.webp HTTP/1.1
Host: nationalcasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/no/promotions
Cookie: is_mobile_device=false; preferred-language=no; _cioanonid=a3cce01f-2d1b-603b-7244-5b511ff0909d; _sp_srt_ses.1060=*; _sp_srt_id.1060=ab56d405-e6af-450e-8f99-06f12a3cc201.1701593212.1.1701593212..3df79c2c-f74b-4ff3-8d46-6c66d820f5ff....0; DV_TRACK=d7e56dfb-84fe-4423-b360-e2cbfcc74b99; _ga_9G634HNY5N=GS1.1.1701593211.1.0.1701593211.60.0.0; _ga=GA1.1.1050769078.1701593212; ubc-code=595033c2-650f-4249-a4a5-f1db4e6ca903
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 03 Dec 2023 08:46:49 GMT
content-type: image/webp
content-length: 9936
cf-ray: 82fa8a972f63b505-OSL
cf-cache-status: BYPASS
accept-ranges: bytes
etag: "6568273b-26d0"
last-modified: Thu, 30 Nov 2023 06:10:03 GMT
set-cookie: is_mobile_device=false
vary: Accept-Encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Va28GSh7C3%2B0eVod6c%2B1EfSUayZ4F8EGWjh6ZJnXL8fRSoWO6rUuuGXuMy1ezvLB09HileBc4GUFjt5zqPTECC10e5vFr%2FUGr1USaOWiburNs8W%2BkUZ49uq%2F9hE8Tfmx3eSdVg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
X-Firefox-Spdy: h2
nationalcasino.com/assets/vip/icons/8.webp
172.67.69.139200 OK 12 kB URL GET HTTP/2 nationalcasino.com/assets/vip/icons/8.webp
IP 172.67.69.139:443
Requested by https://nationalcasino.com/no/promotions
Certificate IssuerCloudflare, Inc.
Subjectnationalcasino.com
FingerprintCC:02:73:1C:8E:B6:5E:A0:33:ED:63:B5:75:B5:C1:5D:7E:A0:D5:47
ValidityTue, 14 Mar 2023 00:00:00 GMT - Tue, 12 Mar 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash 421937e0bbbc9b42774fd77bfff41d42
af9bb961ada6b78c8c1838b0111aa59cd3090828
f5a288ae6c7c10b740298674ea90d15bb5e3fc41b930b2e49ae05673ce5e8776
GET /assets/vip/icons/8.webp HTTP/1.1
Host: nationalcasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/no/promotions
Cookie: is_mobile_device=false; preferred-language=no; _cioanonid=a3cce01f-2d1b-603b-7244-5b511ff0909d; _sp_srt_ses.1060=*; _sp_srt_id.1060=ab56d405-e6af-450e-8f99-06f12a3cc201.1701593212.1.1701593212..3df79c2c-f74b-4ff3-8d46-6c66d820f5ff....0; DV_TRACK=d7e56dfb-84fe-4423-b360-e2cbfcc74b99; _ga_9G634HNY5N=GS1.1.1701593211.1.0.1701593211.60.0.0; _ga=GA1.1.1050769078.1701593212; ubc-code=595033c2-650f-4249-a4a5-f1db4e6ca903
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 03 Dec 2023 08:46:49 GMT
content-type: image/webp
content-length: 11688
cf-ray: 82fa8a975f92b505-OSL
cf-cache-status: BYPASS
accept-ranges: bytes
etag: "6568272f-2da8"
last-modified: Thu, 30 Nov 2023 06:09:51 GMT
set-cookie: is_mobile_device=false
vary: Accept-Encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qj4A3kk4DTKgSDvp%2BN5USRJw1VdkzNFalZIsjuyhqvK54xqQon00jWQvLBPuISA6F6C%2FVRR2QG8KopXi5IIRsxVoR7uQuU7za34CrdpIhrPki1Lbl0v3Mw6rnmEy1PGjSyNZ4w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
X-Firefox-Spdy: h2
nationalcasino.com/assets/vip/icons/10.webp
172.67.69.139200 OK 11 kB URL GET HTTP/2 nationalcasino.com/assets/vip/icons/10.webp
IP 172.67.69.139:443
Requested by https://nationalcasino.com/no/promotions
Certificate IssuerCloudflare, Inc.
Subjectnationalcasino.com
FingerprintCC:02:73:1C:8E:B6:5E:A0:33:ED:63:B5:75:B5:C1:5D:7E:A0:D5:47
ValidityTue, 14 Mar 2023 00:00:00 GMT - Tue, 12 Mar 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash 0164fcc3d41326a55d4eced2fdee9de0
83afd2801841a43994b5e1f71f38f666e6f40c65
53674e34a070e678d4ced98441ca06277070b6484623a0c432546f3662fa7606
GET /assets/vip/icons/10.webp HTTP/1.1
Host: nationalcasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/no/promotions
Cookie: is_mobile_device=false; preferred-language=no; _cioanonid=a3cce01f-2d1b-603b-7244-5b511ff0909d; _sp_srt_ses.1060=*; _sp_srt_id.1060=ab56d405-e6af-450e-8f99-06f12a3cc201.1701593212.1.1701593212..3df79c2c-f74b-4ff3-8d46-6c66d820f5ff....0; DV_TRACK=d7e56dfb-84fe-4423-b360-e2cbfcc74b99; _ga_9G634HNY5N=GS1.1.1701593211.1.0.1701593211.60.0.0; _ga=GA1.1.1050769078.1701593212; ubc-code=595033c2-650f-4249-a4a5-f1db4e6ca903
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 03 Dec 2023 08:46:49 GMT
content-type: image/webp
content-length: 10810
cf-ray: 82fa8a975f95b505-OSL
cf-cache-status: BYPASS
accept-ranges: bytes
etag: "65682741-2a3a"
last-modified: Thu, 30 Nov 2023 06:10:09 GMT
set-cookie: is_mobile_device=false
vary: Accept-Encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vq1zX5f8gh0Ae1mTn2yXSaWyKzEXyreYPhS0ElvlJaEYGfUy2UraLFaZ1Y2AZrOEzpeCW%2F1Ui66AruQLdvZXymuYGyVTZB3TWtvEMWEwGvA8Tw4XH%2FNW6SDYOz0fj77Y3ftZsA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
X-Firefox-Spdy: h2
nationalcasino.com/assets/vip/icons/0.webp
172.67.69.139 8.7 kB URL nationalcasino.com/assets/vip/icons/0.webp
IP 172.67.69.139:0
Certificate IssuerCloudflare, Inc.
Subjectnationalcasino.com
FingerprintCC:02:73:1C:8E:B6:5E:A0:33:ED:63:B5:75:B5:C1:5D:7E:A0:D5:47
ValidityTue, 14 Mar 2023 00:00:00 GMT - Tue, 12 Mar 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash 45346130d251dcfe0bcd3750bb25b21b
062184668f6c1a5036f908eb3133d5adfcf83330
c74fe5c5bc745c4bb749622d58f640fea067aac5723d0e066fd0c454bc2bb10e
GET /assets/vip/icons/0.webp HTTP/1.1
Host: nationalcasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/no/promotions
Cookie: is_mobile_device=false; preferred-language=no; _cioanonid=a3cce01f-2d1b-603b-7244-5b511ff0909d; _sp_srt_ses.1060=*; _sp_srt_id.1060=ab56d405-e6af-450e-8f99-06f12a3cc201.1701593212.1.1701593212..3df79c2c-f74b-4ff3-8d46-6c66d820f5ff....0; DV_TRACK=d7e56dfb-84fe-4423-b360-e2cbfcc74b99; _ga_9G634HNY5N=GS1.1.1701593211.1.0.1701593211.60.0.0; _ga=GA1.1.1050769078.1701593212; ubc-code=595033c2-650f-4249-a4a5-f1db4e6ca903
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 03 Dec 2023 08:46:49 GMT
content-type: image/webp
content-length: 8662
cf-ray: 82fa8a975f9cb505-OSL
cf-cache-status: BYPASS
accept-ranges: bytes
etag: "6568272f-21d6"
last-modified: Thu, 30 Nov 2023 06:09:51 GMT
set-cookie: is_mobile_device=false
vary: Accept-Encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZfRotTAs%2Fpz%2F7XtND42C583Ukyvf2r8uIM0bkrcsWKsitw2Lh6ENOPDv%2B4VjVIZYYMAWWfDCPGBlU7OqfR1GRJYLE%2FBy17ixVI6079NeyjQnfopvGMvaiCvVzCH9nDZ1PSv0fg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
X-Firefox-Spdy: h2
nationalcasino.com/assets/vip/icons/15.webp
172.67.69.139200 OK 12 kB URL GET HTTP/2 nationalcasino.com/assets/vip/icons/15.webp
IP 172.67.69.139:443
Requested by https://nationalcasino.com/no/promotions
Certificate IssuerCloudflare, Inc.
Subjectnationalcasino.com
FingerprintCC:02:73:1C:8E:B6:5E:A0:33:ED:63:B5:75:B5:C1:5D:7E:A0:D5:47
ValidityTue, 14 Mar 2023 00:00:00 GMT - Tue, 12 Mar 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash ccd5195648f5f057bea2173570265fbe
afa159b4d56b508dfb36b9cbdbd510ec982e9533
0440f9403bce2b2c7efc110000dd20fc6a1f7a26d697e89266b1a3eaa238b9b3
GET /assets/vip/icons/15.webp HTTP/1.1
Host: nationalcasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/no/promotions
Cookie: is_mobile_device=false; preferred-language=no; _cioanonid=a3cce01f-2d1b-603b-7244-5b511ff0909d; _sp_srt_ses.1060=*; _sp_srt_id.1060=ab56d405-e6af-450e-8f99-06f12a3cc201.1701593212.1.1701593212..3df79c2c-f74b-4ff3-8d46-6c66d820f5ff....0; DV_TRACK=d7e56dfb-84fe-4423-b360-e2cbfcc74b99; _ga_9G634HNY5N=GS1.1.1701593211.1.0.1701593211.60.0.0; _ga=GA1.1.1050769078.1701593212; ubc-code=595033c2-650f-4249-a4a5-f1db4e6ca903
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 03 Dec 2023 08:46:49 GMT
content-type: image/webp
content-length: 11586
cf-ray: 82fa8a975f9bb505-OSL
cf-cache-status: BYPASS
accept-ranges: bytes
etag: "65682741-2d42"
last-modified: Thu, 30 Nov 2023 06:10:09 GMT
set-cookie: is_mobile_device=false
vary: Accept-Encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3mjX1rIZulA4UJ%2BGcrHTX5WE6yRvRGeZ3wxqxcxHt9OskIGvlfJdzI2fZU3QYjQtb%2BowqAJw8cYjOztUh6dCSHchsjk4N2X98tZS3iBrY1vEKMRqYUcv95PXdXhcmFlsMBZrrg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
X-Firefox-Spdy: h2
nationalcasino.com/assets/vip/icons/13.webp
172.67.69.139200 OK 11 kB URL GET HTTP/2 nationalcasino.com/assets/vip/icons/13.webp
IP 172.67.69.139:443
Requested by https://nationalcasino.com/no/promotions
Certificate IssuerCloudflare, Inc.
Subjectnationalcasino.com
FingerprintCC:02:73:1C:8E:B6:5E:A0:33:ED:63:B5:75:B5:C1:5D:7E:A0:D5:47
ValidityTue, 14 Mar 2023 00:00:00 GMT - Tue, 12 Mar 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash d629a2b8afa0bec21ef0a7d7c74faeab
17ed51856c69b86d154c52ecc56f25bb65e73bc4
fd8090c07d3f3b0cfa381c2765bfbe470667e7ab9f43061786e81ac25a3174a7
GET /assets/vip/icons/13.webp HTTP/1.1
Host: nationalcasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/no/promotions
Cookie: is_mobile_device=false; preferred-language=no; _cioanonid=a3cce01f-2d1b-603b-7244-5b511ff0909d; _sp_srt_ses.1060=*; _sp_srt_id.1060=ab56d405-e6af-450e-8f99-06f12a3cc201.1701593212.1.1701593212..3df79c2c-f74b-4ff3-8d46-6c66d820f5ff....0; DV_TRACK=d7e56dfb-84fe-4423-b360-e2cbfcc74b99; _ga_9G634HNY5N=GS1.1.1701593211.1.0.1701593211.60.0.0; _ga=GA1.1.1050769078.1701593212; ubc-code=595033c2-650f-4249-a4a5-f1db4e6ca903
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 03 Dec 2023 08:46:49 GMT
content-type: image/webp
content-length: 11004
cf-ray: 82fa8a975f98b505-OSL
cf-cache-status: BYPASS
accept-ranges: bytes
etag: "6568273b-2afc"
last-modified: Thu, 30 Nov 2023 06:10:03 GMT
set-cookie: is_mobile_device=false
vary: Accept-Encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=geXlP1b1h18XiNQQfaEqFli2uS2QMYTJ7UenaulHX31mGGsygrRiuEoAX%2BVHmONsu2reL4k7FKIY%2F%2FlHisZFhx2qNoi8hom%2FmQ5tf1XlQrrZ2nqHvuNBVQLkQvMM8cNvvIHwIg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
X-Firefox-Spdy: h2
nationalcasino.com/assets/vip/icons/12.webp
172.67.69.139 11 kB URL nationalcasino.com/assets/vip/icons/12.webp
IP 172.67.69.139:0
Certificate IssuerCloudflare, Inc.
Subjectnationalcasino.com
FingerprintCC:02:73:1C:8E:B6:5E:A0:33:ED:63:B5:75:B5:C1:5D:7E:A0:D5:47
ValidityTue, 14 Mar 2023 00:00:00 GMT - Tue, 12 Mar 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash 963cd00d3c237de905df65d4edaeb1da
dc1f485ff48e19dec36f742313be644311f93db3
2fed6419afc920e6408bdb0998c83cc7b5994d5202cf285768c82842a29962f0
GET /assets/vip/icons/12.webp HTTP/1.1
Host: nationalcasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/no/promotions
Cookie: is_mobile_device=false; preferred-language=no; _cioanonid=a3cce01f-2d1b-603b-7244-5b511ff0909d; _sp_srt_ses.1060=*; _sp_srt_id.1060=ab56d405-e6af-450e-8f99-06f12a3cc201.1701593212.1.1701593212..3df79c2c-f74b-4ff3-8d46-6c66d820f5ff....0; DV_TRACK=d7e56dfb-84fe-4423-b360-e2cbfcc74b99; _ga_9G634HNY5N=GS1.1.1701593211.1.0.1701593211.60.0.0; _ga=GA1.1.1050769078.1701593212; ubc-code=595033c2-650f-4249-a4a5-f1db4e6ca903
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 03 Dec 2023 08:46:49 GMT
content-type: image/webp
content-length: 11104
cf-ray: 82fa8a975f97b505-OSL
cf-cache-status: BYPASS
accept-ranges: bytes
etag: "6568273b-2b60"
last-modified: Thu, 30 Nov 2023 06:10:03 GMT
set-cookie: is_mobile_device=false
vary: Accept-Encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vFWlwaNWGpiuPPlWk%2F1A%2BpR77br3p4nMW1BLVaxIrmk%2BMlclAVJUPYjk7gOA940f9KBtWvycWzIZnXcL%2BPusdIppjYScX3jn3Qq5GuYwwjtAIEgkxjpb6rz%2F9P9qGJbikHvInQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
X-Firefox-Spdy: h2
nationalcasino.com/api/footer/get-content?lang=no_NO
172.67.69.139200 OK 12 kB URL GET HTTP/2 nationalcasino.com/api/footer/get-content?lang=no_NO
IP 172.67.69.139:443
Requested by https://nationalcasino.com/no/promotions
Certificate IssuerCloudflare, Inc.
Subjectnationalcasino.com
FingerprintCC:02:73:1C:8E:B6:5E:A0:33:ED:63:B5:75:B5:C1:5D:7E:A0:D5:47
ValidityTue, 14 Mar 2023 00:00:00 GMT - Tue, 12 Mar 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (4936), with no line terminators
Hash 37c03875c695eedf63ae1bd8789f003f
3e7fe8f54334b1ed3941c16291164d68a583e7b8
cd6382007489e176db5292e8b5b4b0c7bf21626bc2e43fc9a41ce404f1b32965
GET /api/footer/get-content?lang=no_NO HTTP/1.1
Host: nationalcasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/no/promotions
Cookie: preferred-language=no; _cioanonid=a3cce01f-2d1b-603b-7244-5b511ff0909d; _sp_srt_ses.1060=*; _sp_srt_id.1060=ab56d405-e6af-450e-8f99-06f12a3cc201.1701593212.1.1701593212..3df79c2c-f74b-4ff3-8d46-6c66d820f5ff....0; DV_TRACK=d7e56dfb-84fe-4423-b360-e2cbfcc74b99; _ga_9G634HNY5N=GS1.1.1701593211.1.0.1701593211.60.0.0; _ga=GA1.1.1050769078.1701593212; ubc-code=595033c2-650f-4249-a4a5-f1db4e6ca903
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 03 Dec 2023 08:46:49 GMT
content-type: application/json
cf-ray: 82fa8a948d76b505-OSL
cf-cache-status: DYNAMIC
cache-control: no-cache, private
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization
access-control-allow-methods: GET, POST, OPTIONS
access-control-expose-headers: Content-Length,Content-Range
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=p59pjzMJo%2BJYlvY3gD%2BEoNSDXIKlp2kLJ0pgaXiEHWWcyUaoZm%2Bdhk3dfUzIL8p1pcGYuXwHaLcd8IkCqWQ4rtIZj6FsdEPHDKxbo3eS%2Fv9bpsGjr2th%2B7uKBkwCAUyOCw6VHA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
nationalcasino.com/assets/vip/icons/14.webp
172.67.69.139200 OK 11 kB URL GET HTTP/2 nationalcasino.com/assets/vip/icons/14.webp
IP 172.67.69.139:443
Requested by https://nationalcasino.com/no/promotions
Certificate IssuerCloudflare, Inc.
Subjectnationalcasino.com
FingerprintCC:02:73:1C:8E:B6:5E:A0:33:ED:63:B5:75:B5:C1:5D:7E:A0:D5:47
ValidityTue, 14 Mar 2023 00:00:00 GMT - Tue, 12 Mar 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash 3fb45250557f1f04ac08919d33b71a55
b721aa4a4fe80e786e2e8c99e3106ea52ceb0f44
1b913e194a93847a8ff423529dfd836d3927a1aa41784471623815b5ce203376
GET /assets/vip/icons/14.webp HTTP/1.1
Host: nationalcasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/no/promotions
Cookie: is_mobile_device=false; preferred-language=no; _cioanonid=a3cce01f-2d1b-603b-7244-5b511ff0909d; _sp_srt_ses.1060=*; _sp_srt_id.1060=ab56d405-e6af-450e-8f99-06f12a3cc201.1701593212.1.1701593212..3df79c2c-f74b-4ff3-8d46-6c66d820f5ff....0; DV_TRACK=d7e56dfb-84fe-4423-b360-e2cbfcc74b99; _ga_9G634HNY5N=GS1.1.1701593211.1.0.1701593211.60.0.0; _ga=GA1.1.1050769078.1701593212; ubc-code=595033c2-650f-4249-a4a5-f1db4e6ca903
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 03 Dec 2023 08:46:49 GMT
content-type: image/webp
content-length: 10670
cf-ray: 82fa8a975f99b505-OSL
cf-cache-status: BYPASS
accept-ranges: bytes
etag: "6568273b-29ae"
last-modified: Thu, 30 Nov 2023 06:10:03 GMT
set-cookie: is_mobile_device=false
vary: Accept-Encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VaI4GcEAXcT0p8%2FB7TQcT3gw%2FWdz0jmSUHQGuuPTrKPGTCbvhmehAHMeRVFRFB0%2FinE0Smw5Dm8o1Mbb44h2h1KZ3xck1%2FZDquXyXxNuto%2FAYjqyel8U8XK5bFaiEfnAFXMaTA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
X-Firefox-Spdy: h2
nationalcasino.com/assets/vip/icons/11.webp
172.67.69.139 10 kB URL nationalcasino.com/assets/vip/icons/11.webp
IP 172.67.69.139:0
Certificate IssuerCloudflare, Inc.
Subjectnationalcasino.com
FingerprintCC:02:73:1C:8E:B6:5E:A0:33:ED:63:B5:75:B5:C1:5D:7E:A0:D5:47
ValidityTue, 14 Mar 2023 00:00:00 GMT - Tue, 12 Mar 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash 7528280a1530c8e2a2a69171e02d9021
c86010b3ba26f3d2219f7165cfd5f0cb3b26780d
f2b2b40865d2043be44c70fa43a435d22ea7c0ecc48c0fecbd3674e7ebf09b99
GET /assets/vip/icons/11.webp HTTP/1.1
Host: nationalcasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/no/promotions
Cookie: is_mobile_device=false; preferred-language=no; _cioanonid=a3cce01f-2d1b-603b-7244-5b511ff0909d; _sp_srt_ses.1060=*; _sp_srt_id.1060=ab56d405-e6af-450e-8f99-06f12a3cc201.1701593212.1.1701593212..3df79c2c-f74b-4ff3-8d46-6c66d820f5ff....0; DV_TRACK=d7e56dfb-84fe-4423-b360-e2cbfcc74b99; _ga_9G634HNY5N=GS1.1.1701593211.1.0.1701593211.60.0.0; _ga=GA1.1.1050769078.1701593212; ubc-code=595033c2-650f-4249-a4a5-f1db4e6ca903
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 03 Dec 2023 08:46:49 GMT
content-type: image/webp
content-length: 10326
cf-ray: 82fa8a975f96b505-OSL
cf-cache-status: BYPASS
accept-ranges: bytes
etag: "6568273b-2856"
last-modified: Thu, 30 Nov 2023 06:10:03 GMT
set-cookie: is_mobile_device=false
vary: Accept-Encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=C413ChEjOVBTOl63CtsFG%2FZRkKXnoEXaCDho0S0HtGpHCZ2QoSQYn4HU1PojHBbFvjeBFqKVOX3NniYKj34FirkL2n9%2BVD5pnMmZQzNptwzfQvqaIvM2Z35FG%2FBLR3rdMDwspg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
X-Firefox-Spdy: h2
api.livechatinc.com/v3.6/customer/action/get_dynamic_configuration?license_id=9054575&client_id=c5e4f61e1a6c3b1521b541bc5c5a2ac5&url=https%3A%2F%2Fnationalcasino.com%2Fno%2Fpromotions&channel_type=code&jsonp=__lkw7rxalsj
23.36.79.17200 OK 893 B URL GET HTTP/2 api.livechatinc.com/v3.6/customer/action/get_dynamic_configuration?license_id=9054575&client_id=c5e4f61e1a6c3b1521b541bc5c5a2ac5&url=https%3A%2F%2Fnationalcasino.com%2Fno%2Fpromotions&channel_type=code&jsonp=__lkw7rxalsj
IP 23.36.79.17:443
ASN #20940 Akamai International B.V.
Requested by https://nationalcasino.com/no/promotions
Certificate IssuerDigiCert Inc
Subjectlivechat.com
Fingerprint76:42:79:92:87:C7:74:BC:5B:DC:11:4E:54:69:70:2A:5F:78:41:8F
ValidityWed, 16 Aug 2023 00:00:00 GMT - Thu, 15 Aug 2024 23:59:59 GMT
File type ASCII text, with very long lines (893), with no line terminators
Hash 64def4081bc84bd87f8ba44f941ec652
b9aa1d17dcf233c395f9e381adda6f166c603f56
a0b1ffa22bcf84a8a3174fc0c11bbdf98a41fe3d449ec19a602ae5fde73df53b
GET /v3.6/customer/action/get_dynamic_configuration?license_id=9054575&client_id=c5e4f61e1a6c3b1521b541bc5c5a2ac5&url=https%3A%2F%2Fnationalcasino.com%2Fno%2Fpromotions&channel_type=code&jsonp=__lkw7rxalsj HTTP/1.1
Host: api.livechatinc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-security-policy: frame-ancestors https://nationalcasino.com/;
content-type: application/javascript; charset=UTF-8
vary: Accept-Encoding
x-frame-options: allow-from https://nationalcasino.com/
content-length: 893
date: Sun, 03 Dec 2023 08:46:49 GMT
X-Firefox-Spdy: h2
nationalcasino.com/assets/placeholders/games/190x190.png
172.67.69.139200 OK 6.4 kB URL GET HTTP/2 nationalcasino.com/assets/placeholders/games/190x190.png
IP 172.67.69.139:443
Requested by https://nationalcasino.com/no/promotions
Certificate IssuerCloudflare, Inc.
Subjectnationalcasino.com
FingerprintCC:02:73:1C:8E:B6:5E:A0:33:ED:63:B5:75:B5:C1:5D:7E:A0:D5:47
ValidityTue, 14 Mar 2023 00:00:00 GMT - Tue, 12 Mar 2024 23:59:59 GMT
File type PNG image data, 190 x 190, 8-bit/color RGBA, non-interlaced\012- data
Hash a17edc8d7f1e32e82b340e0f13819dba
6cb34d96f26a74bcc524314b7564fbfd2d7642df
f0a8bfff0e6d938b6a1e5eb1830c2d277eb1334ea1ce6317a75744b83cb09b18
GET /assets/placeholders/games/190x190.png HTTP/1.1
Host: nationalcasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/no/promotions
Cookie: is_mobile_device=false; preferred-language=no; _cioanonid=a3cce01f-2d1b-603b-7244-5b511ff0909d; _sp_srt_ses.1060=*; _sp_srt_id.1060=ab56d405-e6af-450e-8f99-06f12a3cc201.1701593212.1.1701593212..3df79c2c-f74b-4ff3-8d46-6c66d820f5ff....0; DV_TRACK=d7e56dfb-84fe-4423-b360-e2cbfcc74b99; _ga_9G634HNY5N=GS1.1.1701593211.1.0.1701593211.60.0.0; _ga=GA1.1.1050769078.1701593212; ubc-code=595033c2-650f-4249-a4a5-f1db4e6ca903
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 03 Dec 2023 08:46:49 GMT
content-type: image/png
content-length: 6414
cf-ray: 82fa8a987872b505-OSL
cf-cache-status: BYPASS
accept-ranges: bytes
etag: "6568272f-190e"
last-modified: Thu, 30 Nov 2023 06:09:51 GMT
set-cookie: is_mobile_device=false
vary: Accept-Encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2Fz1HG1gGYLLDKZPBfEcbnB4MlOPaUlnuInm6JhlS37IGlM%2Ba2VMWUBTnMZVz8T36RRLX%2FZmgZbGz8SvVXDsUYT1mPpqRMwJUBFCcGSS50t5ZXgujrD8Zsi800bI0KVsElH5%2Bbg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
216.58.207.227200 OK 15 kB URL GET HTTP/3 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP 216.58.207.227:443
Requested by https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcIXVIiAAAAAOSkusfnmE4Oe97qAFgJYg71vdQc&co=aHR0cHM6Ly9uYXRpb25hbGNhc2luby5jb206NDQz&hl=en&v=-QbJqHfGOUB8nuVRLvzFLVed&size=invisible&cb=iob82xdf5r7o
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 10:04:07 GMT
expires: Fri, 29 Nov 2024 10:04:07 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
age: 254562
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
216.58.207.227 16 kB URL fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 11:28:20 GMT
expires: Fri, 29 Nov 2024 11:28:20 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
age: 249509
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
nationalcasino.com/no/api/seo/get-data?pageUrl=%2Fno%2Fpromotions
172.67.69.139200 OK 1.2 kB URL GET HTTP/2 nationalcasino.com/no/api/seo/get-data?pageUrl=%2Fno%2Fpromotions
IP 172.67.69.139:443
Requested by https://nationalcasino.com/no/promotions
Certificate IssuerCloudflare, Inc.
Subjectnationalcasino.com
FingerprintCC:02:73:1C:8E:B6:5E:A0:33:ED:63:B5:75:B5:C1:5D:7E:A0:D5:47
ValidityTue, 14 Mar 2023 00:00:00 GMT - Tue, 12 Mar 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (5709), with no line terminators
Hash 9b8132edc64657a020ed01f02820065e
2930182593be26b42b057240efc32e8c5cf9aa6e
f651467776a482429f236d9e0c2e6c1094c4092e27dbb3cf211bf92096657f76
GET /no/api/seo/get-data?pageUrl=%2Fno%2Fpromotions HTTP/1.1
Host: nationalcasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-Requested-With: XMLHttpRequest
Referer: https://nationalcasino.com/no/promotions
DNT: 1
Connection: keep-alive
Cookie: preferred-language=no; _cioanonid=a3cce01f-2d1b-603b-7244-5b511ff0909d; _sp_srt_ses.1060=*; _sp_srt_id.1060=ab56d405-e6af-450e-8f99-06f12a3cc201.1701593212.1.1701593212..3df79c2c-f74b-4ff3-8d46-6c66d820f5ff....0; DV_TRACK=d7e56dfb-84fe-4423-b360-e2cbfcc74b99; _ga_9G634HNY5N=GS1.1.1701593211.1.0.1701593211.60.0.0; _ga=GA1.1.1050769078.1701593212; ubc-code=595033c2-650f-4249-a4a5-f1db4e6ca903
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 03 Dec 2023 08:46:49 GMT
content-type: application/json
cf-ray: 82fa8a97f811b505-OSL
cf-cache-status: DYNAMIC
cache-control: no-cache, private
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization
access-control-allow-methods: GET, POST, OPTIONS
access-control-expose-headers: Content-Length,Content-Range
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=32AlGf1bdKwYGLKPbOxIPmGQPcnIQnUbIbZQttVlk65wotxe3Ke8Nc0NzdftAs7NettC9xjlOvhCxxrcXP0rnEPTbpxzo%2BfzLGW1I%2F8BAwXxNY74BiVm9C4q0f%2BWioBcpi%2FWOg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
cdn.softswiss.net/i/s4/softswiss/AnubisTreasure.webp
104.16.13.151 25 kB URL cdn.softswiss.net/i/s4/softswiss/AnubisTreasure.webp
IP 104.16.13.151:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 190x190, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 4870243dfbebd62b814b114a1d7f27aa
67fda610da521ea1ce9cc5eae524592fd08b285a
2751b4dadc58ebdfec28f2cb4b0a7ea105b79b25a51029b0219429aff5499d7b
GET /i/s4/softswiss/AnubisTreasure.webp HTTP/1.1
Host: cdn.softswiss.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 03 Dec 2023 08:46:49 GMT
content-type: image/webp
content-length: 24626
last-modified: Mon, 09 Oct 2023 06:50:04 GMT
etag: "6523a29c-6032"
expires: Sat, 02 Dec 2023 16:58:00 GMT
cache-control: max-age=86400
referrer-policy: strict-origin-when-cross-origin
cf-cache-status: HIT
age: 82634
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 82fa8a991e30568f-OSL
X-Firefox-Spdy: h2
nationalcasino.com/api/seo/get-data?pageUrl=/no/promotions
172.67.69.139302 Found 12 kB URL GET HTTP/2 nationalcasino.com/api/seo/get-data?pageUrl=/no/promotions
IP 172.67.69.139:443
Requested by https://nationalcasino.com/no/promotions
Certificate IssuerCloudflare, Inc.
Subjectnationalcasino.com
FingerprintCC:02:73:1C:8E:B6:5E:A0:33:ED:63:B5:75:B5:C1:5D:7E:A0:D5:47
ValidityTue, 14 Mar 2023 00:00:00 GMT - Tue, 12 Mar 2024 23:59:59 GMT
Hash cdfa54f5213eeb03e589a7b18b2d6c92
52a9a91dd6fc3dd325000ce105754d29f849fcab
89e805b3b686f5f574447f4a0f10dbc1a7cbf4d75ab590763374cf41916be2dc
GET /api/seo/get-data?pageUrl=/no/promotions HTTP/1.1
Host: nationalcasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/no/promotions
Cookie: preferred-language=no; _cioanonid=a3cce01f-2d1b-603b-7244-5b511ff0909d; _sp_srt_ses.1060=*; _sp_srt_id.1060=ab56d405-e6af-450e-8f99-06f12a3cc201.1701593212.1.1701593212..3df79c2c-f74b-4ff3-8d46-6c66d820f5ff....0; DV_TRACK=d7e56dfb-84fe-4423-b360-e2cbfcc74b99; _ga_9G634HNY5N=GS1.1.1701593211.1.0.1701593211.60.0.0; _ga=GA1.1.1050769078.1701593212; ubc-code=595033c2-650f-4249-a4a5-f1db4e6ca903
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
date: Sun, 03 Dec 2023 08:46:49 GMT
content-type: text/html; charset=UTF-8
location: /no/api/seo/get-data?pageUrl=%2Fno%2Fpromotions
cf-ray: 82fa8a948d81b505-OSL
cf-cache-status: DYNAMIC
cache-control: no-cache, private
access-control-allow-credentials: true
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization
access-control-allow-methods: GET, POST, OPTIONS
access-control-expose-headers: Content-Length,Content-Range
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=S%2FTO8w81YvYCZRL5TFtrC%2F5xisashdziYXJ%2F%2BP9hONxt4gqgIXbBczNu8xH2KW7C3fZm3ZTYi6gVBITCnfpwTOh4zNlGg%2B%2BWW04Xa0RPPEOLh1Z8kgXoua8MjcEAre8QLMR7Tg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2
cdn.softswiss.net/i/s4/octoplay/StarKingdom.webp
104.16.13.151200 OK 10 kB URL GET HTTP/2 cdn.softswiss.net/i/s4/octoplay/StarKingdom.webp
IP 104.16.13.151:443
Requested by https://nationalcasino.com/no/promotions
Certificate IssuerCloudflare, Inc.
Subjectsoftswiss.net
Fingerprint40:43:6D:8D:F4:95:C8:31:65:B8:FA:29:59:89:E6:47:EF:BE:32:29
ValiditySat, 11 Feb 2023 00:00:00 GMT - Sat, 10 Feb 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 190x190, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 7407497ed69189dd7d1db206b3bfca55
d58d260e9406e48f0284fbc67ad0ab55d6d6ff20
6ccd4363f7509bb7cd4099e41d1ce2f09ab5f6618949ea1334bece7bd1a0d83d
GET /i/s4/octoplay/StarKingdom.webp HTTP/1.1
Host: cdn.softswiss.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 03 Dec 2023 08:46:49 GMT
content-type: image/webp
content-length: 10274
last-modified: Thu, 21 Sep 2023 14:50:05 GMT
etag: "650c581d-2822"
expires: Mon, 04 Dec 2023 04:07:16 GMT
cache-control: max-age=86400
referrer-policy: strict-origin-when-cross-origin
cf-cache-status: HIT
age: 4569
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 82fa8a992e3e568f-OSL
X-Firefox-Spdy: h2
cdn.softswiss.net/i/s4/pragmaticexternal/GatesOfOlympus1.webp
104.16.13.151200 OK 16 kB URL GET HTTP/2 cdn.softswiss.net/i/s4/pragmaticexternal/GatesOfOlympus1.webp
IP 104.16.13.151:443
Requested by https://nationalcasino.com/no/promotions
Certificate IssuerCloudflare, Inc.
Subjectsoftswiss.net
Fingerprint40:43:6D:8D:F4:95:C8:31:65:B8:FA:29:59:89:E6:47:EF:BE:32:29
ValiditySat, 11 Feb 2023 00:00:00 GMT - Sat, 10 Feb 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 190x190, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash aac8f886cd2e4363f4d97e43ea848662
8805a6875de6ee19ebd051e706898f69d3e42d22
d2f48fb4f0422b84c5bba979aeebcf45ca89738443609761c03b0433ff8cf4b8
GET /i/s4/pragmaticexternal/GatesOfOlympus1.webp HTTP/1.1
Host: cdn.softswiss.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 03 Dec 2023 08:46:49 GMT
content-type: image/webp
content-length: 16132
last-modified: Fri, 19 Feb 2021 12:30:02 GMT
etag: "602faf4a-3f04"
expires: Mon, 04 Dec 2023 03:11:09 GMT
cache-control: max-age=86400
referrer-policy: strict-origin-when-cross-origin
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 82fa8a990e28568f-OSL
X-Firefox-Spdy: h2
cdn.softswiss.net/i/s4/3oaks/green_chilli.webp
104.16.13.151200 OK 13 kB URL GET HTTP/2 cdn.softswiss.net/i/s4/3oaks/green_chilli.webp
IP 104.16.13.151:443
Requested by https://nationalcasino.com/no/promotions
Certificate IssuerCloudflare, Inc.
Subjectsoftswiss.net
Fingerprint40:43:6D:8D:F4:95:C8:31:65:B8:FA:29:59:89:E6:47:EF:BE:32:29
ValiditySat, 11 Feb 2023 00:00:00 GMT - Sat, 10 Feb 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 190x190, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash f07630ca9e0b822e466c49ab7202414e
900169aa8cdca2a3bda2e62526670c20c2b3594a
24403a5d6be3e6b7aa8bd94e750d8deb2678f7553419e779762dcbadd2c70038
GET /i/s4/3oaks/green_chilli.webp HTTP/1.1
Host: cdn.softswiss.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 03 Dec 2023 08:46:49 GMT
content-type: image/webp
content-length: 13216
last-modified: Mon, 07 Nov 2022 10:00:03 GMT
etag: "6368d723-33a0"
expires: Sat, 02 Dec 2023 18:21:30 GMT
cache-control: max-age=86400
referrer-policy: strict-origin-when-cross-origin
cf-cache-status: HIT
age: 66792
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 82fa8a993e49568f-OSL
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/api2/logo_48.png
142.250.74.35200 OK 2.2 kB URL GET HTTP/3 www.gstatic.com/recaptcha/api2/logo_48.png
IP 142.250.74.35:443
Requested by https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcIXVIiAAAAAOSkusfnmE4Oe97qAFgJYg71vdQc&co=aHR0cHM6Ly9uYXRpb25hbGNhc2luby5jb206NDQz&hl=en&v=-QbJqHfGOUB8nuVRLvzFLVed&size=invisible&cb=iob82xdf5r7o
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\012- data
Hash ef9941290c50cd3866e2ba6b793f010d
4736508c795667dcea21f8d864233031223b7832
1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a
GET /recaptcha/api2/logo_48.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gstatic.com/recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/styles__ltr.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 2228
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Nov 2023 21:37:43 GMT
expires: Wed, 06 Dec 2023 21:37:43 GMT
cache-control: public, max-age=604800
age: 299346
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
api.livechatinc.com/v3.4/customer/action/get_configuration?organization_id=0423be4a-3d48-484e-a65a-2228122b8c26&version=300204.12.12.46181.7886.2834.1580.16.3.3.3.250.7550&group_id=35&jsonp=__lc_static_config
23.36.79.17200 OK 1.4 kB URL GET HTTP/2 api.livechatinc.com/v3.4/customer/action/get_configuration?organization_id=0423be4a-3d48-484e-a65a-2228122b8c26&version=300204.12.12.46181.7886.2834.1580.16.3.3.3.250.7550&group_id=35&jsonp=__lc_static_config
IP 23.36.79.17:443
ASN #20940 Akamai International B.V.
Requested by https://nationalcasino.com/no/promotions
Certificate IssuerDigiCert Inc
Subjectlivechat.com
Fingerprint76:42:79:92:87:C7:74:BC:5B:DC:11:4E:54:69:70:2A:5F:78:41:8F
ValidityWed, 16 Aug 2023 00:00:00 GMT - Thu, 15 Aug 2024 23:59:59 GMT
File type ASCII text, with very long lines (4211), with no line terminators
Hash cd36985f23733e3f0246469ad24d65ef
3d27e205ea06494add49a8238eed18d451d9fad7
f14480b88b97ae15ccd98301fa3ef8b9aabab7bb709bb2d572f7f710e325c61a
GET /v3.4/customer/action/get_configuration?organization_id=0423be4a-3d48-484e-a65a-2228122b8c26&version=300204.12.12.46181.7886.2834.1580.16.3.3.3.250.7550&group_id=35&jsonp=__lc_static_config HTTP/1.1
Host: api.livechatinc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
content-type: application/javascript; charset=UTF-8
legacy: 2024-05-31
vary: Accept-Encoding
content-length: 1427
cache-control: public, max-age=583
expires: Sun, 03 Dec 2023 08:56:32 GMT
date: Sun, 03 Dec 2023 08:46:49 GMT
X-Firefox-Spdy: h2
d3beicsry9ch2d.cloudfront.net/site/upload/promotion/0cf8ab0c-c82b-4f67-a1df-1511705ac6ec/1639033909_f699caf636d8a0537d1c815c325131e7_25
54.230.111.84 138 kB URL d3beicsry9ch2d.cloudfront.net/site/upload/promotion/0cf8ab0c-c82b-4f67-a1df-1511705ac6ec/1639033909_f699caf636d8a0537d1c815c325131e7_25
IP 54.230.111.84:0
File type PNG image data, 1326 x 425, 8-bit colormap, non-interlaced\012- data
Size 138 kB (138281 bytes)
Hash f699caf636d8a0537d1c815c325131e7
1a364c17171f2af6b667c26baace6deb36cbc4a6
ba5c540d511aecb11d4e7e9bd3ff590ea45eab6d5dcd108b556445464e472c80
GET /site/upload/promotion/0cf8ab0c-c82b-4f67-a1df-1511705ac6ec/1639033909_f699caf636d8a0537d1c815c325131e7_25 HTTP/1.1
Host: d3beicsry9ch2d.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 138281
last-modified: Thu, 09 Dec 2021 07:11:51 GMT
x-amz-version-id: mBLbGR32gv0RbpI0hRZk.6D38XnGaF4O
accept-ranges: bytes
server: AmazonS3
date: Sun, 03 Dec 2023 08:46:33 GMT
etag: "f699caf636d8a0537d1c815c325131e7"
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: DMk1kfMg2jslu0INDuJa-bL2uvfKFWGtUQWXFssCE9O1oAx5zzCohg==
age: 17
X-Firefox-Spdy: h2
d3beicsry9ch2d.cloudfront.net/site/upload/90b03d59439f5d197d7b8f3bc692310b_28
54.230.111.84 176 kB URL d3beicsry9ch2d.cloudfront.net/site/upload/90b03d59439f5d197d7b8f3bc692310b_28
IP 54.230.111.84:0
File type PNG image data, 1322 x 425, 8-bit colormap, non-interlaced\012- data
Size 176 kB (176076 bytes)
Hash 90b03d59439f5d197d7b8f3bc692310b
60112f1dc050761dba888d1761e6a7a78ba91fc3
93353e5d53296cdbb23ea8e9ff9236d54488b054fcd67748c450b11d5eebbd3e
GET /site/upload/90b03d59439f5d197d7b8f3bc692310b_28 HTTP/1.1
Host: d3beicsry9ch2d.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 176076
last-modified: Thu, 04 Feb 2021 13:53:32 GMT
x-amz-version-id: mzNkA1U_IMtzGwfg9Bi.379BoPM4jHC5
accept-ranges: bytes
server: AmazonS3
date: Sun, 03 Dec 2023 08:46:33 GMT
etag: "90b03d59439f5d197d7b8f3bc692310b"
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 2J-9k9SSTn9trmaio94PdgZIVFcHobfl6X9HDHeNGEUlk8r4HLRFcA==
age: 17
X-Firefox-Spdy: h2
d3beicsry9ch2d.cloudfront.net/site/upload/promotion/logonc.svg
54.230.111.84 12 kB URL d3beicsry9ch2d.cloudfront.net/site/upload/promotion/logonc.svg
IP 54.230.111.84:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1384)
Hash b8c86ef35794d1bcca97eaf8d007a288
82979656ebdc8c9e64f19a8b85a9de4eaaf65063
4fba144834e4a42518e92e4417a049e31b5b1dd007dbbc0f6d0aaf0fbc662d4a
GET /site/upload/promotion/logonc.svg HTTP/1.1
Host: d3beicsry9ch2d.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 11513
last-modified: Wed, 18 Jan 2023 09:55:24 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: 4nyDvXEkcw8xGto.MiKJDHlOtfdnkuOP
accept-ranges: bytes
server: AmazonS3
date: Sun, 03 Dec 2023 07:30:01 GMT
etag: "b8c86ef35794d1bcca97eaf8d007a288"
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: yeUM69eWnbG5iHRtVsuh7i6UHqlZDJz3aQ5I93lc3zZXv9_E0gnZZA==
age: 4609
X-Firefox-Spdy: h2
d3beicsry9ch2d.cloudfront.net/site/upload/ea846e1f4163fb435bb73e73724c8970_31
54.230.111.84 203 kB URL d3beicsry9ch2d.cloudfront.net/site/upload/ea846e1f4163fb435bb73e73724c8970_31
IP 54.230.111.84:0
File type PNG image data, 1328 x 419, 8-bit colormap, non-interlaced\012- data
Size 203 kB (203375 bytes)
Hash ea846e1f4163fb435bb73e73724c8970
97455d8e28d8c5fedb78878339a31b9803e5407e
0ba098203608712c2a21ea65eab1e050b8e3fb56031f035b63c9637fe619bea2
GET /site/upload/ea846e1f4163fb435bb73e73724c8970_31 HTTP/1.1
Host: d3beicsry9ch2d.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 203375
last-modified: Thu, 04 Feb 2021 13:53:32 GMT
x-amz-version-id: _OZWyhBLh6nRsETGeKq_lMOABGrYqazu
accept-ranges: bytes
server: AmazonS3
date: Sun, 03 Dec 2023 08:46:33 GMT
etag: "ea846e1f4163fb435bb73e73724c8970"
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: bVGZYHLKHDsyevWQVcQYr9weY-m1dVHid9yjVmeNUuzOM9_8lWSZSw==
age: 17
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/recaptcha__en.js
142.250.74.35200 OK 191 kB URL GET HTTP/2 www.gstatic.com/recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/recaptcha__en.js
IP 142.250.74.35:443
Requested by https://nationalcasino.com/no/promotions
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (563)
Size 191 kB (190682 bytes)
Hash 23b9dd721490a4062ba8d01454ef6ba9
efdbb7331585411f7d397dacbf51fd3e95f3031d
4970c7161d03503a3eb5ec49e4190a03445c50cd5a9081714bd13183d2d948a7
GET /recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 190682
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 03 Dec 2023 08:27:14 GMT
expires: Mon, 02 Dec 2024 08:27:14 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 14 Nov 2023 05:42:11 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 1175
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
d3beicsry9ch2d.cloudfront.net/site/upload/promotion/a83b3c49-4e0f-423f-b45b-b374ef9632c0/1699093347_ncinstructio.webp
54.230.111.84 96 kB URL d3beicsry9ch2d.cloudfront.net/site/upload/promotion/a83b3c49-4e0f-423f-b45b-b374ef9632c0/1699093347_ncinstructio.webp
IP 54.230.111.84:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1330x591, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash b81febab9afa1f792041e44bf9b48b7c
c4a3bc4547aee9658ec469fcf474c84a7b680569
4c41f93689620a9ef18ba15b10d01f72259b9f27e75799f3813253cdbfb6ded2
GET /site/upload/promotion/a83b3c49-4e0f-423f-b45b-b374ef9632c0/1699093347_ncinstructio.webp HTTP/1.1
Host: d3beicsry9ch2d.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 95978
date: Sun, 03 Dec 2023 08:46:33 GMT
last-modified: Sat, 04 Nov 2023 10:22:28 GMT
etag: "b81febab9afa1f792041e44bf9b48b7c"
x-amz-server-side-encryption: AES256
x-amz-version-id: DUnmBhiR9u10Hll141BQ.3ttiler.rmK
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: MS0mhkSu0WO0vjJr5QaX7eyKQJhkn22O561uYAlWc39djvGNpXegFA==
age: 17
X-Firefox-Spdy: h2
d3beicsry9ch2d.cloudfront.net/site/upload/promotion/7410b8ef-ba2a-4f24-a8d5-50e9f3a244d1/1639033909_8df3e49e126370bba17c73626138c6a1_24
54.230.111.84 55 kB URL d3beicsry9ch2d.cloudfront.net/site/upload/promotion/7410b8ef-ba2a-4f24-a8d5-50e9f3a244d1/1639033909_8df3e49e126370bba17c73626138c6a1_24
IP 54.230.111.84:0
File type PNG image data, 404 x 425, 8-bit colormap, non-interlaced\012- data
Hash 8df3e49e126370bba17c73626138c6a1
c5c439cc69a5b1c549848ba775cb0cbadba73775
3e150da90a4552bfce210b29fba139e0eda3b8c4d3d79184d241bae3e4aaa5c2
GET /site/upload/promotion/7410b8ef-ba2a-4f24-a8d5-50e9f3a244d1/1639033909_8df3e49e126370bba17c73626138c6a1_24 HTTP/1.1
Host: d3beicsry9ch2d.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 55274
last-modified: Thu, 09 Dec 2021 07:11:50 GMT
x-amz-version-id: yKxE_yHbD874fuzSfQQQB0SJJf17237u
accept-ranges: bytes
server: AmazonS3
date: Sun, 03 Dec 2023 07:30:02 GMT
etag: "8df3e49e126370bba17c73626138c6a1"
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: E6341yk8ucLJaNwxcsC27rdPjQQY-6MtmVxG5ulZqOg-iPRCRIdTmA==
age: 4608
X-Firefox-Spdy: h2
d3beicsry9ch2d.cloudfront.net/site/upload/9710c5de3dcbe1d29c9f1b2eec0921a4_27
54.230.111.84200 OK 24 kB URL GET HTTP/2 d3beicsry9ch2d.cloudfront.net/site/upload/9710c5de3dcbe1d29c9f1b2eec0921a4_27
IP 54.230.111.84:443
Requested by https://nationalcasino.com/no/promotions
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type PNG image data, 419 x 425, 8-bit colormap, non-interlaced\012- data
Hash 9710c5de3dcbe1d29c9f1b2eec0921a4
911c7c1de05e4b28649bd3e0fb6dc03ec34e5d6b
6b466f091d1566aee847b7da1dda6701a2dde07b8a6c86cc73f48f965046939a
GET /site/upload/9710c5de3dcbe1d29c9f1b2eec0921a4_27 HTTP/1.1
Host: d3beicsry9ch2d.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 24527
last-modified: Thu, 04 Feb 2021 13:53:32 GMT
x-amz-version-id: eBrkK0ePUa0cBKf_jilgtD5zWCt4cvZg
accept-ranges: bytes
server: AmazonS3
date: Sun, 03 Dec 2023 07:30:02 GMT
etag: "9710c5de3dcbe1d29c9f1b2eec0921a4"
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: xjYpIgxOOFXiyZPOzkjJubvldOW_LTNWucV5pK2ufRUXGsZcBKhGDQ==
age: 4608
X-Firefox-Spdy: h2
d3beicsry9ch2d.cloudfront.net/site/upload/flag_icon/70de5afe-f358-4e15-9f7b-eb1676341d34/1690371243_no.svg
54.230.111.84 630 B URL d3beicsry9ch2d.cloudfront.net/site/upload/flag_icon/70de5afe-f358-4e15-9f7b-eb1676341d34/1690371243_no.svg
IP 54.230.111.84:0
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document, ASCII text, with very long lines (592)
Hash 6bc7a719c5f9ab72cd04de00afdbcbc5
8182557fe02aff899d0bae3ad19f839dc914687f
7815a47683c4a9b2cf6f71937d341905c7c0eddfc9215aa1897326f853ca7479
GET /site/upload/flag_icon/70de5afe-f358-4e15-9f7b-eb1676341d34/1690371243_no.svg HTTP/1.1
Host: d3beicsry9ch2d.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 630
last-modified: Wed, 26 Jul 2023 11:34:04 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: RB16jSGdwYcsJAofOQk4nU9l7rXjT4U_
accept-ranges: bytes
server: AmazonS3
date: Sun, 03 Dec 2023 07:30:01 GMT
etag: "6bc7a719c5f9ab72cd04de00afdbcbc5"
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: F2SKUP_usdzSTk7Mp7G-LsfsvmI4uRxUsbpUdOqdCUHNcguUBmFbnw==
age: 4609
X-Firefox-Spdy: h2
d3beicsry9ch2d.cloudfront.net/site/upload/4857465b940686363a0cf65a42256bc2_34
54.230.111.84200 OK 317 kB URL GET HTTP/2 d3beicsry9ch2d.cloudfront.net/site/upload/4857465b940686363a0cf65a42256bc2_34
IP 54.230.111.84:443
Requested by https://nationalcasino.com/no/promotions
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type PNG image data, 1328 x 427, 8-bit colormap, non-interlaced\012- data
Size 317 kB (317280 bytes)
Hash 4857465b940686363a0cf65a42256bc2
1016ddfe4183cd4f603f8cfdfc68a0e3082a633f
730e0818d716a6ab5b00430aaceee347f66a9f4dea517970874c5e436fcbcc5d
GET /site/upload/4857465b940686363a0cf65a42256bc2_34 HTTP/1.1
Host: d3beicsry9ch2d.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 317280
last-modified: Thu, 04 Feb 2021 13:53:32 GMT
x-amz-version-id: UHN5dGHx_aZegOPoPQiHsC44uVd5Z9dh
accept-ranges: bytes
server: AmazonS3
date: Sun, 03 Dec 2023 08:46:33 GMT
etag: "4857465b940686363a0cf65a42256bc2"
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: JOcao_7tmFzCdLFqRzZsDjocprymelNgxajQ07jtRjPrA6aemhCleQ==
age: 17
X-Firefox-Spdy: h2
secure.livechatinc.com/customer/action/open_chat?license_id=9054575&group=35&embedded=1&widget_version=3&unique_groups=1
23.36.79.17 2.6 kB URL secure.livechatinc.com/customer/action/open_chat?license_id=9054575&group=35&embedded=1&widget_version=3&unique_groups=1
IP 23.36.79.17:0
ASN #20940 Akamai International B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (8911), with no line terminators
Hash 5d5e2818bfde3f97c7c717552a9d4435
d9152624df02dd703ca4b9090b2def298942f080
70f82e173809bbbcd4884d0b853599ec31f03527a47282721d722c69d9de56d3
GET /customer/action/open_chat?license_id=9054575&group=35&embedded=1&widget_version=3&unique_groups=1 HTTP/1.1
Host: secure.livechatinc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
content-type: text/html; charset=utf-8
vary: Accept-Encoding
date: Sun, 03 Dec 2023 08:46:50 GMT
content-length: 2616
X-Firefox-Spdy: h2
d3beicsry9ch2d.cloudfront.net/site/upload/47476b4c16a063d975f5bb9268988df2_37
54.230.111.84 52 kB URL d3beicsry9ch2d.cloudfront.net/site/upload/47476b4c16a063d975f5bb9268988df2_37
IP 54.230.111.84:0
File type PNG image data, 465 x 471, 8-bit colormap, non-interlaced\012- data
Hash 47476b4c16a063d975f5bb9268988df2
ac67a825c2be0b8e1b90176b7085ee56b40f7498
aa2cec73a48f336664aa23d161cb87500d0b8bb8145545639dacafef6e2cb593
GET /site/upload/47476b4c16a063d975f5bb9268988df2_37 HTTP/1.1
Host: d3beicsry9ch2d.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 52108
last-modified: Thu, 04 Feb 2021 13:53:31 GMT
x-amz-version-id: HyO5ORrgevY.tcav92mke62uWHbaSZDH
accept-ranges: bytes
server: AmazonS3
date: Sun, 03 Dec 2023 08:46:33 GMT
etag: "47476b4c16a063d975f5bb9268988df2"
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: hCU1kiITenEVRxSxUPYMsW0UbcVHZNWzFSyaxKsN6lE7_4s3mX13Cw==
age: 17
X-Firefox-Spdy: h2
api.livechatinc.com/v3.4/customer/action/get_localization?organization_id=0423be4a-3d48-484e-a65a-2228122b8c26&version=075b79d72a19c7c515c01775c17428ae_095cc81313bfe4269aa3c1b7e50f1a9d&language=en&group_id=35&jsonp=__lc_localization
23.36.79.17200 OK 3.8 kB URL GET HTTP/2 api.livechatinc.com/v3.4/customer/action/get_localization?organization_id=0423be4a-3d48-484e-a65a-2228122b8c26&version=075b79d72a19c7c515c01775c17428ae_095cc81313bfe4269aa3c1b7e50f1a9d&language=en&group_id=35&jsonp=__lc_localization
IP 23.36.79.17:443
ASN #20940 Akamai International B.V.
Requested by https://nationalcasino.com/no/promotions
Certificate IssuerDigiCert Inc
Subjectlivechat.com
Fingerprint76:42:79:92:87:C7:74:BC:5B:DC:11:4E:54:69:70:2A:5F:78:41:8F
ValidityWed, 16 Aug 2023 00:00:00 GMT - Thu, 15 Aug 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (11083), with no line terminators
Hash f5e42de1d66ba5c2aab9d4e45ec3c657
656fe52cad38300fc95f2ba67089a5c29abbafeb
0004cffb2ccf8731a3ed840f7c31a823fa09481d9ee677a8665b9b22aba37339
GET /v3.4/customer/action/get_localization?organization_id=0423be4a-3d48-484e-a65a-2228122b8c26&version=075b79d72a19c7c515c01775c17428ae_095cc81313bfe4269aa3c1b7e50f1a9d&language=en&group_id=35&jsonp=__lc_localization HTTP/1.1
Host: api.livechatinc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
content-type: application/javascript; charset=UTF-8
legacy: 2024-05-31
vary: Accept-Encoding
cache-control: public, max-age=582
expires: Sun, 03 Dec 2023 08:56:32 GMT
date: Sun, 03 Dec 2023 08:46:50 GMT
content-length: 3841
X-Firefox-Spdy: h2
d3beicsry9ch2d.cloudfront.net/site/upload/721ce2ecfd1cfba8944960d7c19892b6_30
54.230.111.84200 OK 51 kB URL GET HTTP/2 d3beicsry9ch2d.cloudfront.net/site/upload/721ce2ecfd1cfba8944960d7c19892b6_30
IP 54.230.111.84:443
Requested by https://nationalcasino.com/no/promotions
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type PNG image data, 448 x 431, 8-bit colormap, non-interlaced\012- data
Hash 721ce2ecfd1cfba8944960d7c19892b6
ea752756362a61600f4bb0e7131629d8140dd01a
48a1cf6ac2f539bd82a1e068610235df3cb3e7a36b88a97cde9fb972ba6375ab
GET /site/upload/721ce2ecfd1cfba8944960d7c19892b6_30 HTTP/1.1
Host: d3beicsry9ch2d.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 50568
last-modified: Thu, 04 Feb 2021 13:53:32 GMT
x-amz-version-id: TnTQM02iPY57IgszkGR.gFiTGDb.nSOi
accept-ranges: bytes
server: AmazonS3
date: Sun, 03 Dec 2023 08:46:33 GMT
etag: "721ce2ecfd1cfba8944960d7c19892b6"
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: oVEGrkrKy8mCOOGT5qGXqekUbDNN-wD9YgrAYmOScdxyjAIIEFekzA==
age: 17
X-Firefox-Spdy: h2
d3beicsry9ch2d.cloudfront.net/site/upload/promotion/055e947c-51b4-4f97-a36b-74d60616ee89/1699093362_char1.webp
54.230.111.84 63 kB URL d3beicsry9ch2d.cloudfront.net/site/upload/promotion/055e947c-51b4-4f97-a36b-74d60616ee89/1699093362_char1.webp
IP 54.230.111.84:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 1df86847202186a071d14c872c443559
617d3c5b5a6c82f407c1d2ecf16b24c3926cea10
17c4d9797829ec4ed0f4c41aa96fdb6989565b4b3de92dff93c8a5f4851c35eb
GET /site/upload/promotion/055e947c-51b4-4f97-a36b-74d60616ee89/1699093362_char1.webp HTTP/1.1
Host: d3beicsry9ch2d.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 63170
last-modified: Sat, 04 Nov 2023 10:22:43 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: iqPXW7Y1T8Hz8d5dDNMhiB234.hn78RL
accept-ranges: bytes
server: AmazonS3
date: Sun, 03 Dec 2023 08:46:33 GMT
etag: "1df86847202186a071d14c872c443559"
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: xGpTezMl2Oj27P0pmlepJsL_rJATclq0ZzuWV6Ntk0sT21zrRsKa7A==
age: 17
X-Firefox-Spdy: h2
dueh421xfqdi.cloudfront.net/img/payment-iq-creditcard-visa.svg
54.230.241.20 1.9 kB URL dueh421xfqdi.cloudfront.net/img/payment-iq-creditcard-visa.svg
IP 54.230.241.20:0
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash aeac19527d7d39db9d3f318d2996ce0d
b59de14e18f7fe3bd3e71bc2056b8626687c0649
2a85a40eedf0a1e3131804dc968beb0a1ca52c314fcc0359e7ad790f0817d705
GET /img/payment-iq-creditcard-visa.svg HTTP/1.1
Host: dueh421xfqdi.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 1872
vary: Accept-Encoding
date: Sun, 03 Dec 2023 08:46:51 GMT
last-modified: Wed, 22 Sep 2021 12:02:04 GMT
etag: "aeac19527d7d39db9d3f318d2996ce0d"
x-amz-meta-s3cmd-attrs: md5:aeac19527d7d39db9d3f318d2996ce0d
accept-ranges: bytes
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: _IiXmi5eHtoj1Ysuo48i27iK91wsOdSvSekmo8T7CItJKuZSDSZRWQ==
X-Firefox-Spdy: h2
dueh421xfqdi.cloudfront.net/img/payment-iq-bank-interac.svg
54.230.241.20200 OK 3.7 kB URL GET HTTP/2 dueh421xfqdi.cloudfront.net/img/payment-iq-bank-interac.svg
IP 54.230.241.20:443
Requested by https://nationalcasino.com/no/promotions
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with CRLF line terminators
Hash a86d7530ab31d4d8168ca27c921f11f7
ad02e815accc5dca106dc583234853ad8bde09fe
a02a3c8cf56a8ddfd893498accbd987a279fbff825fffaa1fb1bde50ea84273a
GET /img/payment-iq-bank-interac.svg HTTP/1.1
Host: dueh421xfqdi.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 3668
vary: Accept-Encoding
date: Sun, 03 Dec 2023 08:46:51 GMT
last-modified: Fri, 08 Sep 2023 10:26:30 GMT
etag: "a86d7530ab31d4d8168ca27c921f11f7"
x-amz-server-side-encryption: AES256
x-amz-meta-s3cmd-attrs: atime:1694168786/ctime:1694168785/gid:20/gname:staff/md5:a86d7530ab31d4d8168ca27c921f11f7/mode:33188/mtime:1694168784/uid:501/uname:nikitaschekin
accept-ranges: bytes
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: yfAYraszRfx0gTnI5TlU4A6UQPJYmjTL3GzK6NdYAFWbctZq2F__JA==
X-Firefox-Spdy: h2
dueh421xfqdi.cloudfront.net/img/payment-iq-webredirect-perfectmoney.svg
54.230.241.20200 OK 12 kB URL GET HTTP/2 dueh421xfqdi.cloudfront.net/img/payment-iq-webredirect-perfectmoney.svg
IP 54.230.241.20:443
Requested by https://nationalcasino.com/no/promotions
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 74162b1db90f81e0443efbb9195748d5
f561fad9462fb085a8fe51677161f1534ecc8bd5
e5a63a413df2bd4c32e3bebc823092f678a59df623144f079bdffc84519ebc52
GET /img/payment-iq-webredirect-perfectmoney.svg HTTP/1.1
Host: dueh421xfqdi.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 12425
vary: Accept-Encoding
date: Sun, 03 Dec 2023 08:46:51 GMT
last-modified: Wed, 22 Sep 2021 12:02:07 GMT
etag: "74162b1db90f81e0443efbb9195748d5"
x-amz-meta-s3cmd-attrs: md5:74162b1db90f81e0443efbb9195748d5
accept-ranges: bytes
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: lKjpNXPOyidub1ESeONHvAA5ty-bHtP6Qv3aIpXWKePuuLwqbvqCHQ==
X-Firefox-Spdy: h2
dueh421xfqdi.cloudfront.net/img/payment-iq-cryptocurrency-bitcoin.svg
54.230.241.20200 OK 1.9 kB URL GET HTTP/2 dueh421xfqdi.cloudfront.net/img/payment-iq-cryptocurrency-bitcoin.svg
IP 54.230.241.20:443
Requested by https://nationalcasino.com/no/promotions
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- HTML document, Unicode text, UTF-8 text, with very long lines (807), with CRLF line terminators
Hash 40b876dbba657dc8fa89754bba6a94a5
4d3186e82d2d9bad11b5f6c8ba75a456ce6d19fb
f542c59efd4bfd7e917ad2f6c6de8ea67f0d962742b2c4bdf354385a5ffa824b
GET /img/payment-iq-cryptocurrency-bitcoin.svg HTTP/1.1
Host: dueh421xfqdi.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 1867
vary: Accept-Encoding
date: Sun, 03 Dec 2023 08:46:51 GMT
last-modified: Fri, 06 May 2022 12:41:57 GMT
etag: "40b876dbba657dc8fa89754bba6a94a5"
x-amz-meta-s3cmd-attrs: atime:1651839897/ctime:1651839896/gid:2033007316/gname:AGCSOFT%5CDomain%20Users/md5:40b876dbba657dc8fa89754bba6a94a5/mode:33188/mtime:1651839887/uid:1501083981/uname:yevhen.karavanchenko
accept-ranges: bytes
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: tx1cwPM4VXFmQ50c8XNFqVLWs1fUG_ifJwUENjf6hlYS4MwcE2wFYA==
X-Firefox-Spdy: h2
c4457c89-e5ba-4d22-92e5-c2959310ee85.snippet.antillephone.com/apg-seal.js
54.230.111.97 2.7 kB URL c4457c89-e5ba-4d22-92e5-c2959310ee85.snippet.antillephone.com/apg-seal.js
IP 54.230.111.97:0
File type gzip compressed data, from Unix\012- data
Hash 44e652dd2b2f40ac5c11551ab9444332
cfd6a0057e2d93b6caeb207cd63fcac268bf547d
5f896d4e41a0dc443cc0a73589bf653249c4e8fe6b7c8b589b36d4a312ad26d1
GET /apg-seal.js HTTP/1.1
Host: c4457c89-e5ba-4d22-92e5-c2959310ee85.snippet.antillephone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
date: Sun, 03 Dec 2023 08:46:27 GMT
x-powered-by: Express
cache-control: max-age=300
etag: W/"de1-tSE6laROF7AgZJkxv/sg44Hovy4"
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 82fa8a0c6db19c01-FRA
content-encoding: gzip
x-cache: Hit from cloudfront
via: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: RIE-e4EFxTItGxkOgUVi97Rf_Q7u7Zh3Zzz-0O9WjrMjErmMZc-pew==
age: 22
X-Firefox-Spdy: h2
dueh421xfqdi.cloudfront.net/img/payment-iq-jeton-jeton.svg
54.230.241.20200 OK 5.5 kB URL GET HTTP/2 dueh421xfqdi.cloudfront.net/img/payment-iq-jeton-jeton.svg
IP 54.230.241.20:443
Requested by https://nationalcasino.com/no/promotions
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (5347), with CRLF line terminators
Hash 364fab25b65b27e259b39a9d26c93f9f
4c3273a2e7386c9f82241ecf18e091eabe8bb527
848d629baeeb43c44b7171790a27e57ff9c073603db5e5601a8499a1cbed6203
GET /img/payment-iq-jeton-jeton.svg HTTP/1.1
Host: dueh421xfqdi.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 5454
x-amz-id-2: 3GQshno4Kl5x6EyBfyi4gC1ooYS4MBpdd3ZHlCcsscoSYge7+QrTJDXLE4Q9T7bclgSYTz1vtF8aslMzm4TSjg==
x-amz-request-id: 051Y04CFBY9P9J0B
date: Sun, 03 Dec 2023 08:46:51 GMT
last-modified: Wed, 22 Sep 2021 12:02:05 GMT
etag: "364fab25b65b27e259b39a9d26c93f9f"
x-amz-meta-s3cmd-attrs: md5:364fab25b65b27e259b39a9d26c93f9f
accept-ranges: bytes
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: XnbHg9v-zWX_0HJomsKt2pCAFi8M1Gwi3NHoCu_p0kOh8dxuAj4cGg==
X-Firefox-Spdy: h2
dueh421xfqdi.cloudfront.net/img/payment-iq-creditcard-mastercard.svg
54.230.241.20 7.4 kB URL dueh421xfqdi.cloudfront.net/img/payment-iq-creditcard-mastercard.svg
IP 54.230.241.20:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (6371), with CRLF line terminators
Hash 9dd541faa0fe8e2862e9a5778fded6ee
d3f5d33c95b7fa52de171e571f83f7060a50ff8f
75aba97ab51fbdf2da87d5416be978c86256e2054e8bde519f0c5af3fd998b7e
GET /img/payment-iq-creditcard-mastercard.svg HTTP/1.1
Host: dueh421xfqdi.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 7437
vary: Accept-Encoding
date: Sun, 03 Dec 2023 08:46:51 GMT
last-modified: Wed, 22 Sep 2021 12:02:04 GMT
etag: "9dd541faa0fe8e2862e9a5778fded6ee"
x-amz-meta-s3cmd-attrs: md5:9dd541faa0fe8e2862e9a5778fded6ee
accept-ranges: bytes
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ja2qw-uaKiam8m-GD4nzaFWGxJuaiqYZctDp3AD63a8-LjV6HyAGnQ==
X-Firefox-Spdy: h2
dueh421xfqdi.cloudfront.net/img/payment-iq-cryptocurrency-ethereum.svg
54.230.241.20200 OK 1.8 kB URL GET HTTP/2 dueh421xfqdi.cloudfront.net/img/payment-iq-cryptocurrency-ethereum.svg
IP 54.230.241.20:443
Requested by https://nationalcasino.com/no/promotions
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Hash 2819177e29240e9abba945193708002d
a2be8ffbb3100098dd943bb859fb617c3daf2635
f4a3adf3ced22ef3a3a6a1cb8e26c619ead66f51d71d3896701680222fc4d9df
GET /img/payment-iq-cryptocurrency-ethereum.svg HTTP/1.1
Host: dueh421xfqdi.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 1785
vary: Accept-Encoding
date: Sun, 03 Dec 2023 08:46:51 GMT
last-modified: Fri, 06 May 2022 12:42:20 GMT
etag: "2819177e29240e9abba945193708002d"
x-amz-meta-s3cmd-attrs: atime:1651840619/ctime:1651840618/gid:2033007316/gname:AGCSOFT%5CDomain%20Users/md5:2819177e29240e9abba945193708002d/mode:33188/mtime:1651840608/uid:1501083981/uname:yevhen.karavanchenko
accept-ranges: bytes
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: sBSnfLFmEMKF1JDD5GA3H6NLt5-kqoUf4Pe0-Tqf1PK1H3QkUyZ5GQ==
X-Firefox-Spdy: h2
dueh421xfqdi.cloudfront.net/img/payment-iq-ecopayz-ecopayz.svg
54.230.241.20200 OK 2.7 kB URL GET HTTP/2 dueh421xfqdi.cloudfront.net/img/payment-iq-ecopayz-ecopayz.svg
IP 54.230.241.20:443
Requested by https://nationalcasino.com/no/promotions
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- HTML document, Unicode text, UTF-8 text, with very long lines (652), with CRLF line terminators
Hash ec6e2f4f2e966e4d8de4f3ad6447da05
8357d1f3e1955c51def18d0b4374854f116f22af
cd9a6b8b6e92379aaa5c07b52c5e47b979d924c3a7a8d66339773b5f6e1aeb63
GET /img/payment-iq-ecopayz-ecopayz.svg HTTP/1.1
Host: dueh421xfqdi.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 2706
x-amz-id-2: VjuzFEdKh8VrNmO9V+2ccRYpXtPjxiwc9AGinPp4fqqHt0MVMYsB3bg6AO1dk3YQ0rK0WAANpgo=
x-amz-request-id: 051YHY5FPFJMQXM4
date: Sun, 03 Dec 2023 08:46:51 GMT
last-modified: Mon, 07 Aug 2023 13:47:12 GMT
etag: "ec6e2f4f2e966e4d8de4f3ad6447da05"
x-amz-server-side-encryption: AES256
x-amz-meta-s3cmd-attrs: atime:1691416027/ctime:1691416026/gid:20/gname:staff/md5:ec6e2f4f2e966e4d8de4f3ad6447da05/mode:33188/mtime:1691416025/uid:501/uname:nikitaschekin
accept-ranges: bytes
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: V-TsaV9cBVAIOVwGDAuDcJvIaFhOJrNUkqmdaAFA5QYSLeT4b9OCaQ==
X-Firefox-Spdy: h2
nationalcasino.com/api/promotion/list?onlyPromotionType=0&lang=no_NO
172.67.69.139 4.5 kB URL nationalcasino.com/api/promotion/list?onlyPromotionType=0&lang=no_NO
IP 172.67.69.139:0
Certificate IssuerCloudflare, Inc.
Subjectnationalcasino.com
FingerprintCC:02:73:1C:8E:B6:5E:A0:33:ED:63:B5:75:B5:C1:5D:7E:A0:D5:47
ValidityTue, 14 Mar 2023 00:00:00 GMT - Tue, 12 Mar 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (13536), with no line terminators
Hash 47e65a87312e08312b47d6a641418c2f
7c5178c05aff349107441e80b6810dcc85319864
6354443e1684a1c0f8917657f4273c914ea750247568ef50047a4cdcd6423c9b
GET /api/promotion/list?onlyPromotionType=0&lang=no_NO HTTP/1.1
Host: nationalcasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/no/promotions
Cookie: preferred-language=no; _cioanonid=a3cce01f-2d1b-603b-7244-5b511ff0909d; _sp_srt_ses.1060=*; _sp_srt_id.1060=ab56d405-e6af-450e-8f99-06f12a3cc201.1701593212.1.1701593212..3df79c2c-f74b-4ff3-8d46-6c66d820f5ff....0; DV_TRACK=d7e56dfb-84fe-4423-b360-e2cbfcc74b99; _ga_9G634HNY5N=GS1.1.1701593211.1.0.1701593211.60.0.0; _ga=GA1.1.1050769078.1701593212; ubc-code=595033c2-650f-4249-a4a5-f1db4e6ca903
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 03 Dec 2023 08:46:49 GMT
content-type: application/json
cf-ray: 82fa8a975f9db505-OSL
cf-cache-status: DYNAMIC
cache-control: no-cache, private
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization
access-control-allow-methods: GET, POST, OPTIONS
access-control-expose-headers: Content-Length,Content-Range
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mftJ0t6vlNMsE74D6HA0r9ObL0L%2FgYkENrvbrdRVwOZ6YU63h7BKjwd0YReHgplzgtlv4uPgEQKCLFAnNlGc5haSrXFvlIZxDCfsmVcr0Nw2qywD%2BwikKZC888sH6sMW%2BLdpTw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
cdn.livechatinc.com/widget/static/js/0.560086b6.chunk.js
95.101.10.171200 OK 15 kB URL GET HTTP/2 cdn.livechatinc.com/widget/static/js/0.560086b6.chunk.js
IP 95.101.10.171:443
ASN #20940 Akamai International B.V.
Requested by https://secure.livechatinc.com/customer/action/open_chat?license_id=9054575&group=35&embedded=1&widget_version=3&unique_groups=1
Certificate IssuerDigiCert Inc
Subjectlivechat.com
Fingerprint76:42:79:92:87:C7:74:BC:5B:DC:11:4E:54:69:70:2A:5F:78:41:8F
ValidityWed, 16 Aug 2023 00:00:00 GMT - Thu, 15 Aug 2024 23:59:59 GMT
File type ASCII text, with very long lines (47599), with no line terminators
Hash 1ac03d967e46fcf63e261e02fe3ac706
6ed4f32f5bee5e2aaf28a057ca0a8a83ad404b99
37e38fc2a4947983da3a03b38d58f6a734e61530fd9bcb6dca05bc48ed1f73ca
GET /widget/static/js/0.560086b6.chunk.js HTTP/1.1
Host: cdn.livechatinc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.livechatinc.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 31 Jul 2023 10:32:01 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: x4bp2rNlF.2.Kjwsgr0x4zgcAMUxyD_n
server: AmazonS3
content-encoding: br
etag: W/"1ac03d967e46fcf63e261e02fe3ac706"
vary: Accept-Encoding
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: iO68LFTKsE5oAk4sskP39JIOp4J8EIfoiByZsATnWjmW3TwnZVjTpg==
content-length: 14880
cache-control: max-age=31536000
expires: Mon, 02 Dec 2024 08:46:50 GMT
date: Sun, 03 Dec 2023 08:46:50 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
X-Firefox-Spdy: h2
cdn.livechatinc.com/widget/static/js/1.b3e9bd18.chunk.js
95.101.10.171200 OK 66 kB URL GET HTTP/2 cdn.livechatinc.com/widget/static/js/1.b3e9bd18.chunk.js
IP 95.101.10.171:443
ASN #20940 Akamai International B.V.
Requested by https://secure.livechatinc.com/customer/action/open_chat?license_id=9054575&group=35&embedded=1&widget_version=3&unique_groups=1
Certificate IssuerDigiCert Inc
Subjectlivechat.com
Fingerprint76:42:79:92:87:C7:74:BC:5B:DC:11:4E:54:69:70:2A:5F:78:41:8F
ValidityWed, 16 Aug 2023 00:00:00 GMT - Thu, 15 Aug 2024 23:59:59 GMT
File type ASCII text, with very long lines (65462)
Hash a1c381c5236d931e165b5f97bb458c7f
ca2fd79d761e9d7895a9ea92e53f1073930bf50d
c3fa220489a7130866d79f6a79792aa69ce0ce23ea4ba181a03144002736d5ae
GET /widget/static/js/1.b3e9bd18.chunk.js HTTP/1.1
Host: cdn.livechatinc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.livechatinc.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 23 Nov 2023 10:38:14 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: RWJiCAzhtwX6bpdOAENKLtzWJ..6vb_F
server: AmazonS3
content-encoding: br
etag: W/"a1c381c5236d931e165b5f97bb458c7f"
vary: Accept-Encoding
x-amz-cf-pop: ARN1-C1
x-amz-cf-id: kRDMaqYdstmr5MBBXkcvXC-Q4lLB0o9zj1zA7cqlWIxcPv84Et1yDA==
content-length: 66487
cache-control: max-age=31536000
expires: Mon, 02 Dec 2024 08:46:50 GMT
date: Sun, 03 Dec 2023 08:46:50 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
X-Firefox-Spdy: h2
cdn.livechatinc.com/widget/static/js/iframe.bb4ab153.chunk.js
95.101.10.171200 OK 222 kB URL GET HTTP/2 cdn.livechatinc.com/widget/static/js/iframe.bb4ab153.chunk.js
IP 95.101.10.171:443
ASN #20940 Akamai International B.V.
Requested by https://secure.livechatinc.com/customer/action/open_chat?license_id=9054575&group=35&embedded=1&widget_version=3&unique_groups=1
Certificate IssuerDigiCert Inc
Subjectlivechat.com
Fingerprint76:42:79:92:87:C7:74:BC:5B:DC:11:4E:54:69:70:2A:5F:78:41:8F
ValidityWed, 16 Aug 2023 00:00:00 GMT - Thu, 15 Aug 2024 23:59:59 GMT
File type ASCII text, with very long lines (65457)
Size 222 kB (222200 bytes)
Hash 5eea972ba892e91b5afa4c0055c8931a
468657ec85fc8c1637ff5411e8a79528dbded746
7940d8af9045467b193030f86b21ef9949600e11c524a110186cacb3cb84644c
GET /widget/static/js/iframe.bb4ab153.chunk.js HTTP/1.1
Host: cdn.livechatinc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.livechatinc.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 01 Dec 2023 09:12:28 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: 5YEJ2U9AQDXGnhO4_TkuMnKZpb8ReKEa
server: AmazonS3
content-encoding: br
etag: W/"5eea972ba892e91b5afa4c0055c8931a"
vary: Accept-Encoding
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: 65EMyW2Ma03qnNYs8z4Nlc-EOeKjjQnJrFNQSQrGs1sB1aJ0-gch2w==
content-length: 222200
cache-control: max-age=31536000
expires: Mon, 02 Dec 2024 08:46:50 GMT
date: Sun, 03 Dec 2023 08:46:50 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
X-Firefox-Spdy: h2
accounts.livechatinc.com/v2/customer/0423be4a-3d48-484e-a65a-2228122b8c26/35/token
23.36.79.17200 OK 195 B URL POST HTTP/2 accounts.livechatinc.com/v2/customer/0423be4a-3d48-484e-a65a-2228122b8c26/35/token
IP 23.36.79.17:443
ASN #20940 Akamai International B.V.
Requested by https://secure.livechatinc.com/customer/action/open_chat?license_id=9054575&group=35&embedded=1&widget_version=3&unique_groups=1
Certificate IssuerDigiCert Inc
Subjectlivechat.com
Fingerprint76:42:79:92:87:C7:74:BC:5B:DC:11:4E:54:69:70:2A:5F:78:41:8F
ValidityWed, 16 Aug 2023 00:00:00 GMT - Thu, 15 Aug 2024 23:59:59 GMT
File type JSON data\012- , ASCII text
Hash c2c7b1d0235f164e0647f38b7963c349
082c1a9834e4d6bec964aa428d7a03d8f19fa84c
254e6d672b5c450503f5a561f413a23795886e661fe560335c2765da19ad526f
POST /v2/customer/0423be4a-3d48-484e-a65a-2228122b8c26/35/token HTTP/1.1
Host: accounts.livechatinc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 225
Origin: https://secure.livechatinc.com
DNT: 1
Connection: keep-alive
Referer: https://secure.livechatinc.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-origin: https://secure.livechatinc.com
cache-control: no-cache, no-store, max-age=0, must-revalidate
content-type: application/json
expires: Fri, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
content-length: 195
date: Sun, 03 Dec 2023 08:46:50 GMT
set-cookie: __lc_cid=1b25dcc9-5c4c-4a1e-a6f6-5378958c4bb9; Path=/v2/customer/0423be4a-3d48-484e-a65a-2228122b8c26/35/token; Domain=accounts.livechatinc.com; Expires=Wed, 03 Dec 2025 08:46:50 GMT; Max-Age=63072000; HttpOnly; Secure; SameSite=None
__lc_cst=889be103cd4e47dd2dd61bba2552ae9f7f2c442abb207e9ea1566076e04e78f1913f85b78e040903ab7cfbdfffb7e4d9b392cc9461df11e659d24ec2e688; Path=/v2/customer/0423be4a-3d48-484e-a65a-2228122b8c26/35/token; Domain=accounts.livechatinc.com; Expires=Wed, 03 Dec 2025 08:46:50 GMT; Max-Age=63072000; HttpOnly; Secure; SameSite=None
__lc_cid=1b25dcc9-5c4c-4a1e-a6f6-5378958c4bb9; Path=/licence/g9054575_35/; Domain=accounts.livechatinc.com; Expires=Wed, 03 Dec 2025 08:46:50 GMT; Max-Age=63072000; HttpOnly; Secure; SameSite=None
__lc_cst=889be103cd4e47dd2dd61bba2552ae9f7f2c442abb207e9ea1566076e04e78f1913f85b78e040903ab7cfbdfffb7e4d9b392cc9461df11e659d24ec2e688; Path=/licence/g9054575_35/; Domain=accounts.livechatinc.com; Expires=Wed, 03 Dec 2025 08:46:50 GMT; Max-Age=63072000; HttpOnly; Secure; SameSite=None
__oauth_redirect_detector=counter=1&t=1701593240&tag=418f96f12fbd3fc4acd6a26c5977497836d81f9d; Path=/; Expires=Sun, 03 Dec 2023 08:47:20 GMT; HttpOnly; Secure; SameSite=None
X-Firefox-Spdy: h2
api.livechatinc.com/v3.5/customer/action/check_goals?organization_id=0423be4a-3d48-484e-a65a-2228122b8c26
23.36.79.17 0 B URL api.livechatinc.com/v3.5/customer/action/check_goals?organization_id=0423be4a-3d48-484e-a65a-2228122b8c26
IP 23.36.79.17:0
ASN #20940 Akamai International B.V.
Certificate IssuerDigiCert Inc
Subjectlivechat.com
Fingerprint76:42:79:92:87:C7:74:BC:5B:DC:11:4E:54:69:70:2A:5F:78:41:8F
ValidityWed, 16 Aug 2023 00:00:00 GMT - Thu, 15 Aug 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /v3.5/customer/action/check_goals?organization_id=0423be4a-3d48-484e-a65a-2228122b8c26 HTTP/1.1
Host: api.livechatinc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: authorization,content-type
Referer: https://secure.livechatinc.com/
Origin: https://secure.livechatinc.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-headers: Authorization,Content-Type
access-control-allow-origin: https://secure.livechatinc.com
vary: Accept-Encoding
content-length: 0
date: Sun, 03 Dec 2023 08:46:51 GMT
X-Firefox-Spdy: h2
api.livechatinc.com/v3.5/customer/action/check_goals?organization_id=0423be4a-3d48-484e-a65a-2228122b8c26
23.36.79.17 2 B URL api.livechatinc.com/v3.5/customer/action/check_goals?organization_id=0423be4a-3d48-484e-a65a-2228122b8c26
IP 23.36.79.17:0
ASN #20940 Akamai International B.V.
Certificate IssuerDigiCert Inc
Subjectlivechat.com
Fingerprint76:42:79:92:87:C7:74:BC:5B:DC:11:4E:54:69:70:2A:5F:78:41:8F
ValidityWed, 16 Aug 2023 00:00:00 GMT - Thu, 15 Aug 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
POST /v3.5/customer/action/check_goals?organization_id=0423be4a-3d48-484e-a65a-2228122b8c26 HTTP/1.1
Host: api.livechatinc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Authorization: Bearer dal:JilU2v8CSQSrQXA-iGPu9g
Content-Length: 89
Origin: https://secure.livechatinc.com
DNT: 1
Connection: keep-alive
Referer: https://secure.livechatinc.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-origin: https://secure.livechatinc.com
content-type: application/json
vary: Accept-Encoding
content-length: 2
date: Sun, 03 Dec 2023 08:46:51 GMT
X-Firefox-Spdy: h2
region1.analytics.google.com/g/collect?v=2&tid=G-9G634HNY5N>m=45je3bt0v870678449&_p=1701593211371&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1050769078.1701593212&ul=en-us&sr=1280x1024&_eu=AEA&_s=2&sid=1701593211&sct=1&seg=0&dl=https%3A%2F%2Fnationalcasino.com%2Fno%2Fpromotions&dt=Casinokampanjer%20og%20Bonuskoder%20p%C3%A5%20Nett%20%E2%9F%A9%20%E2%82%AC%2F%24100%20%2B%20100%20GS&en=scroll&epn.percent_scrolled=90&tfd=7009
216.239.34.36204 No Content 0 B URL POST HTTP/3 region1.analytics.google.com/g/collect?v=2&tid=G-9G634HNY5N>m=45je3bt0v870678449&_p=1701593211371&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1050769078.1701593212&ul=en-us&sr=1280x1024&_eu=AEA&_s=2&sid=1701593211&sct=1&seg=0&dl=https%3A%2F%2Fnationalcasino.com%2Fno%2Fpromotions&dt=Casinokampanjer%20og%20Bonuskoder%20p%C3%A5%20Nett%20%E2%9F%A9%20%E2%82%AC%2F%24100%20%2B%20100%20GS&en=scroll&epn.percent_scrolled=90&tfd=7009
IP 216.239.34.36:443
Requested by https://nationalcasino.com/no/promotions
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-9G634HNY5N>m=45je3bt0v870678449&_p=1701593211371&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1050769078.1701593212&ul=en-us&sr=1280x1024&_eu=AEA&_s=2&sid=1701593211&sct=1&seg=0&dl=https%3A%2F%2Fnationalcasino.com%2Fno%2Fpromotions&dt=Casinokampanjer%20og%20Bonuskoder%20p%C3%A5%20Nett%20%E2%9F%A9%20%E2%82%AC%2F%24100%20%2B%20100%20GS&en=scroll&epn.percent_scrolled=90&tfd=7009 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nationalcasino.com
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/3 204 No Content
access-control-allow-origin: https://nationalcasino.com
date: Sun, 03 Dec 2023 08:46:52 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
platform.nationalcasino.com/api/v2/casino/last-winners?limit=1&has_live=0
104.26.7.72 0 B URL platform.nationalcasino.com/api/v2/casino/last-winners?limit=1&has_live=0
IP 104.26.7.72:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/v2/casino/last-winners?limit=1&has_live=0 HTTP/1.1
Host: platform.nationalcasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: client-timezone,content-type,x-requested-with
Referer: https://nationalcasino.com/
Origin: https://nationalcasino.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Sun, 03 Dec 2023 08:46:58 GMT
access-control-allow-origin: https://nationalcasino.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,client-timezone,LOCATION-SMART-HTML-SESSION-ID,LOCATION-SMART-DEVICE-SESSION-ID
access-control-expose-headers: Content-Length,Content-Range
access-control-max-age: 86400
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AeKTc7T8pYzUTD3Qp4rmabpkGeinvxTEc47Mezs6EfIjekFURI57muzq7DW0RWefgewLO6hsvczzdd6Y9xnTacjkwAV1qj10q75%2FDe38VmKM5PyQaJe4DLhXMR4s0hdQ3mTgFwoPIolWUgw5Ag%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82fa8ad21915b515-OSL
X-Firefox-Spdy: h2
platform.nationalcasino.com/api/v2/casino/last-winners?limit=1&has_live=0
172.67.69.139 9.7 kB URL platform.nationalcasino.com/api/v2/casino/last-winners?limit=1&has_live=0
IP 172.67.69.139:0
File type JSON data\012- , ASCII text, with very long lines (451), with no line terminators
Hash a7353f7284d809d437d4ca969e2df81d
82c34479cda90adc2dd0b10871c6281a17e13afa
ce8a1c672e6cfe329df27e75d2739d4c5031d3631bd4025a2d11043cfeeace72
GET /api/v2/casino/last-winners?limit=1&has_live=0 HTTP/1.1
Host: platform.nationalcasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-Requested-With: XMLHttpRequest
client-timezone: UTC
Origin: https://nationalcasino.com
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/
Cookie: _cioanonid=a3cce01f-2d1b-603b-7244-5b511ff0909d; _sp_srt_ses.1060=*; _sp_srt_id.1060=ab56d405-e6af-450e-8f99-06f12a3cc201.1701593212.1.1701593212..3df79c2c-f74b-4ff3-8d46-6c66d820f5ff....0; DV_TRACK=d7e56dfb-84fe-4423-b360-e2cbfcc74b99; _ga_9G634HNY5N=GS1.1.1701593211.1.0.1701593211.60.0.0; _ga=GA1.1.1050769078.1701593212; ubc-code=595033c2-650f-4249-a4a5-f1db4e6ca903
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 03 Dec 2023 08:46:59 GMT
content-type: application/json; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: https://nationalcasino.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,client-timezone,LOCATION-SMART-HTML-SESSION-ID,LOCATION-SMART-DEVICE-SESSION-ID
access-control-expose-headers: Content-Length,Content-Range
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=s2QX6k2wLyFLy7J%2FrHzoZN4e%2FNZRgcgHNWsw6JMPaig0kSxRxNQPoU2UjscBjX1F4%2FT82UWu91QQQbbjjKvvpAvsST4MtCZpXt5vQ15Eb62mdIFg5efix%2Fxb0XZqfybMnK0ScuKFC5TNjdateQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82fa8ad26d88b505-OSL
content-encoding: br
X-Firefox-Spdy: h2
nationalcasino.com/app/vendor.4dc3bc7d7201b4c2.css
172.67.69.139200 OK 22 kB URL GET HTTP/2 nationalcasino.com/app/vendor.4dc3bc7d7201b4c2.css
IP 172.67.69.139:443
Requested by https://nationalcasino.com/no/promotions
Certificate IssuerCloudflare, Inc.
Subjectnationalcasino.com
FingerprintCC:02:73:1C:8E:B6:5E:A0:33:ED:63:B5:75:B5:C1:5D:7E:A0:D5:47
ValidityTue, 14 Mar 2023 00:00:00 GMT - Tue, 12 Mar 2024 23:59:59 GMT
File type ASCII text, with very long lines (14967)
Hash 679c17e364b16e725d460490949719a0
f0f9da385a4cc5244f5079a6d0368d74cd65b3f6
cc9ada242efe5a64db29380bb87ebf29300ceeeb1c125e749af15ffe90c62e7f
GET /app/vendor.4dc3bc7d7201b4c2.css HTTP/1.1
Host: nationalcasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/no/promotions
Cookie: preferred-language=no
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 03 Dec 2023 08:46:45 GMT
content-type: text/css
cf-ray: 82fa8a7f1cd4b505-OSL
cf-cache-status: BYPASS
etag: W/"6568272d-552c"
last-modified: Thu, 30 Nov 2023 06:09:49 GMT
set-cookie: is_mobile_device=false
vary: Accept-Encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZeDwWRjTUdZXmYDL5qKsen%2BkAHM%2FDSsYZwz8iiZVWVKCWFUFBHA3DxNZWlv2s4ilVMI3znDJUWLLafGEvpjsSSdPHqwoRSyfFsD566hrzVljsAsLFdoYkwPzD2Z9d5SSvlUK9g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
nationalcasino.com/promotions
172.67.69.139302 Found 28 kB URL User Request GET HTTP/2 nationalcasino.com/promotions
IP 172.67.69.139:443
Certificate IssuerCloudflare, Inc.
Subjectnationalcasino.com
FingerprintCC:02:73:1C:8E:B6:5E:A0:33:ED:63:B5:75:B5:C1:5D:7E:A0:D5:47
ValidityTue, 14 Mar 2023 00:00:00 GMT - Tue, 12 Mar 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /promotions HTTP/1.1
Host: nationalcasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Sun, 03 Dec 2023 08:46:45 GMT
content-type: text/html; charset=UTF-8
location: /no/promotions
cf-ray: 82fa8a7b6a19b505-OSL
cf-cache-status: DYNAMIC
cache-control: no-cache, private
set-cookie: preferred-language=no; path=/; secure; httponly; samesite=lax
access-control-allow-credentials: true
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization
access-control-allow-methods: GET, POST, OPTIONS
access-control-expose-headers: Content-Length,Content-Range
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qL1H6xmTyA7swi%2Bttz46IFkgUL%2F5B1Fip3XTgq%2BJigl%2BOMiCDfEi5JfPNAS1fN0r%2Fvznu4%2B5GHoAfBUliGaFNFESju%2BJRrXHUVIjDoKPKiNK%2BfEDG186AH8AjWPhmHlg1jiMCg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2
nationalcasino.com/api/promotion/tournaments?lang=no_NO
172.67.69.139200 OK 18 kB URL GET HTTP/2 nationalcasino.com/api/promotion/tournaments?lang=no_NO
IP 172.67.69.139:443
Requested by https://nationalcasino.com/no/promotions
Certificate IssuerCloudflare, Inc.
Subjectnationalcasino.com
FingerprintCC:02:73:1C:8E:B6:5E:A0:33:ED:63:B5:75:B5:C1:5D:7E:A0:D5:47
ValidityTue, 14 Mar 2023 00:00:00 GMT - Tue, 12 Mar 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (17804), with no line terminators
Hash 769f4a3dfbdbb9e20a747caa4e16b96f
fd2e59523d2e0d4f79012f1a2dd9928fdcbf9f68
cc78719fe550ac80e6772dcdf1d7d50ef6a7af7b88295666a01c60273bffea87
GET /api/promotion/tournaments?lang=no_NO HTTP/1.1
Host: nationalcasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/no/promotions
Cookie: preferred-language=no; _cioanonid=a3cce01f-2d1b-603b-7244-5b511ff0909d; _sp_srt_ses.1060=*; _sp_srt_id.1060=ab56d405-e6af-450e-8f99-06f12a3cc201.1701593212.1.1701593212..3df79c2c-f74b-4ff3-8d46-6c66d820f5ff....0; DV_TRACK=d7e56dfb-84fe-4423-b360-e2cbfcc74b99; _ga_9G634HNY5N=GS1.1.1701593211.1.0.1701593211.60.0.0; _ga=GA1.1.1050769078.1701593212; ubc-code=595033c2-650f-4249-a4a5-f1db4e6ca903
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 03 Dec 2023 08:46:48 GMT
content-type: application/json
cf-ray: 82fa8a8e78f5b505-OSL
cf-cache-status: DYNAMIC
cache-control: no-cache, private
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization
access-control-allow-methods: GET, POST, OPTIONS
access-control-expose-headers: Content-Length,Content-Range
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dwiE9coYM5aGPx2aFj1jJkTv0noyT4iC9SYxG9ciP4BGap9I36YCAXQ4VFXImUV6aOlRjhvjPf%2BRg1%2FcFZ5OP0TWOgDwSmM2Dl7iqTc8G%2Bm2SrPpC4layvMR7dePi3eXNWFxKQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Poppins:wght@300;400;500;600;700;900&display=swap&subset=cyrillic
142.250.74.106200 OK 6.7 kB URL GET HTTP/2 fonts.googleapis.com/css2?family=Poppins:wght@300;400;500;600;700;900&display=swap&subset=cyrillic
IP 142.250.74.106:443
Requested by https://nationalcasino.com/no/promotions
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (6876), with no line terminators
Hash 213b438bb616ad5990269dc584245926
af2039726f5232e92013da301dd29082fa623463
1175b150c0289734852aeaf2faa5eddcd0528612683b4b003803db774907fc0a
GET /css2?family=Poppins:wght@300;400;500;600;700;900&display=swap&subset=cyrillic HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 03 Dec 2023 08:46:45 GMT
date: Sun, 03 Dec 2023 08:46:45 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
dueh421xfqdi.cloudfront.net/img/payment-iq-skrill-skrill.svg
54.230.241.20200 OK 1.9 kB URL GET HTTP/2 dueh421xfqdi.cloudfront.net/img/payment-iq-skrill-skrill.svg
IP 54.230.241.20:443
Requested by https://nationalcasino.com/no/promotions
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1967), with no line terminators
Hash 3472b7219f08fe5bfdb4ba4185be5d54
0344524a55f8695c98e12c01cfb579c7dff9d3ef
bd9955a2e518846d80f8f7c2ba2f47ac690f545dce37d6bdd0525d6c4b0d71a6
GET /img/payment-iq-skrill-skrill.svg HTTP/1.1
Host: dueh421xfqdi.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 1913
vary: Accept-Encoding
date: Sun, 03 Dec 2023 08:46:51 GMT
last-modified: Wed, 22 Sep 2021 12:02:06 GMT
etag: "1b7572d6671dcf82401653b6221ee54d"
x-amz-meta-s3cmd-attrs: md5:1b7572d6671dcf82401653b6221ee54d
accept-ranges: bytes
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: FyFLMWaYvuQ7Fj2fJuWohL_WsU1FxByl7RnhL3H-ZN9kTurw4w1z9A==
X-Firefox-Spdy: h2
www.google.com/recaptcha/api2/anchor?ar=1&k=6LcIXVIiAAAAAOSkusfnmE4Oe97qAFgJYg71vdQc&co=aHR0cHM6Ly9uYXRpb25hbGNhc2luby5jb206NDQz&hl=en&v=-QbJqHfGOUB8nuVRLvzFLVed&size=invisible&cb=iob82xdf5r7o
142.250.74.132200 OK 62 kB URL GET HTTP/3 www.google.com/recaptcha/api2/anchor?ar=1&k=6LcIXVIiAAAAAOSkusfnmE4Oe97qAFgJYg71vdQc&co=aHR0cHM6Ly9uYXRpb25hbGNhc2luby5jb206NDQz&hl=en&v=-QbJqHfGOUB8nuVRLvzFLVed&size=invisible&cb=iob82xdf5r7o
IP 142.250.74.132:443
Requested by https://nationalcasino.com/no/promotions
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (53781)
Hash 6e0e450749ef30e4fa7b9fc658861f6e
60aea89e668e2523e7c8cb46e94fb48dd503a80c
d5d2a2cf0ae6ae25fb8c225b5de56ba6dd34f320a0a543765dd5db319931ca51
GET /recaptcha/api2/anchor?ar=1&k=6LcIXVIiAAAAAOSkusfnmE4Oe97qAFgJYg71vdQc&co=aHR0cHM6Ly9uYXRpb25hbGNhc2luby5jb206NDQz&hl=en&v=-QbJqHfGOUB8nuVRLvzFLVed&size=invisible&cb=iob82xdf5r7o HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/html; charset=utf-8
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 03 Dec 2023 08:46:48 GMT
content-security-policy: script-src 'nonce-uVtqhErTYvM_H8C5YtANAw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
dueh421xfqdi.cloudfront.net/img/payment-iq-neteller-neteller.svg
54.230.241.20200 OK 1.3 kB URL GET HTTP/2 dueh421xfqdi.cloudfront.net/img/payment-iq-neteller-neteller.svg
IP 54.230.241.20:443
Requested by https://nationalcasino.com/no/promotions
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1326), with no line terminators
Hash 1c1cb9117778c0d0feb7ae5fa1b87a57
b960994b5b3fa22fa6a03a5904a643d600006847
82d83343586da260f9c0ec36739557126cf6317d766b5e940cc5769f0bf2d224
GET /img/payment-iq-neteller-neteller.svg HTTP/1.1
Host: dueh421xfqdi.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 1306
x-amz-id-2: kX79hSdhrw1xWrEe9T0vJP07OuxaMopdsMeiFQLkoa9n2+xWgAXLMS3iGBexno9ethPjmr93CbhUS+4dFZbo8Q==
x-amz-request-id: 051V0B5Q9V5X4A3J
date: Sun, 03 Dec 2023 08:46:51 GMT
last-modified: Wed, 22 Sep 2021 12:02:06 GMT
etag: "76a5b4b5026d360a5ceee36e1e4899bf"
x-amz-meta-s3cmd-attrs: md5:76a5b4b5026d360a5ceee36e1e4899bf
accept-ranges: bytes
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: k8S4Ym-Nw4azZ0Kjy0R1doEGkQuAhRByaoQqkhWlsVWCeOwhkNTtPg==
X-Firefox-Spdy: h2
nationalcasino.com/configuration.js
172.67.69.139200 OK 3.8 kB URL GET HTTP/2 nationalcasino.com/configuration.js
IP 172.67.69.139:443
Requested by https://nationalcasino.com/no/promotions
Certificate IssuerCloudflare, Inc.
Subjectnationalcasino.com
FingerprintCC:02:73:1C:8E:B6:5E:A0:33:ED:63:B5:75:B5:C1:5D:7E:A0:D5:47
ValidityTue, 14 Mar 2023 00:00:00 GMT - Tue, 12 Mar 2024 23:59:59 GMT
File type ASCII text, with very long lines (4160), with no line terminators
Hash 08778a334427cb594cdf815e45838057
4db5ea21cc4dc11e2c31193d3f4b9ef085a08f45
aab7f7b4701021ae3c2d62de5ec53ed603752ec32aadf084f7a20dc56b9e85a7
GET /configuration.js HTTP/1.1
Host: nationalcasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/no/promotions
Cookie: preferred-language=no
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 03 Dec 2023 08:46:45 GMT
content-type: text/javascript; charset=UTF-8
cf-ray: 82fa8a808deeb505-OSL
cf-cache-status: BYPASS
cache-control: no-cache, no-store, private
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization
access-control-allow-methods: GET, POST, OPTIONS
access-control-expose-headers: Content-Length,Content-Range
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pDyblFMUXAem%2FgG0u85UE2lxPL3WvWUm4s6m%2BUHk6W6hxVI9oeivfhVZbjfoapHjhEBdOf2nGSZxj8dPC4bLHrItO7gKStauOKzQC%2BGv8H73jr1ugL8eRvMc4tywmUg4oaZ6vg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
assets.customer.io/assets/track.js
54.230.111.79200 OK 6.8 kB URL GET HTTP/2 assets.customer.io/assets/track.js
IP 54.230.111.79:443
Requested by https://nationalcasino.com/no/promotions
Certificate IssuerAmazon
Subject*.customer.io
Fingerprint14:0F:58:A3:B8:6F:7D:56:35:72:0F:D3:A7:0E:62:05:C5:9A:09:FC
ValidityThu, 19 Oct 2023 00:00:00 GMT - Fri, 15 Nov 2024 23:59:59 GMT
File type ASCII text, with very long lines (7014), with no line terminators
Hash 445d110574be7f6c6d67a10d87228826
e436ff01d8af301393be480a8ca7e06def84621b
c68912f2c4882c0712b1f1f59f10e4a87b40232d8956dd494fcfca58b77c334f
GET /assets/track.js HTTP/1.1
Host: assets.customer.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
last-modified: Fri, 11 Aug 2023 18:01:41 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: YnPUbk.59KSLpiqsKMfvCCZt1qaij9rt
server: AmazonS3
content-encoding: gzip
date: Sun, 03 Dec 2023 01:12:29 GMT
etag: W/"92f4f643083ddfd3fc572a181243cb46"
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: CpzUkzDR-rpTy4VEhIDLbppbDJuNTqU85ghuIG6uZ-Ng15rhX4sszA==
age: 27262
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
platform.nationalcasino.com/api/v2/bonuses/tournaments?lang=no&frontendIdentifier_in%5B%5D=mystery-slot-race&frontendIdentifier_in%5B%5D=queens-live-race&frontendIdentifier_in%5B%5D=mystery-drop&frontendIdentifier_in%5B%5D=drops-n-wins&frontendIdentifier_in%5B%5D=book-of-billionaire
172.67.69.139200 OK 1.9 kB URL GET HTTP/2 platform.nationalcasino.com/api/v2/bonuses/tournaments?lang=no&frontendIdentifier_in%5B%5D=mystery-slot-race&frontendIdentifier_in%5B%5D=queens-live-race&frontendIdentifier_in%5B%5D=mystery-drop&frontendIdentifier_in%5B%5D=drops-n-wins&frontendIdentifier_in%5B%5D=book-of-billionaire
IP 172.67.69.139:443
Requested by https://nationalcasino.com/no/promotions
Certificate IssuerCloudflare, Inc.
Subjectnationalcasino.com
FingerprintCC:02:73:1C:8E:B6:5E:A0:33:ED:63:B5:75:B5:C1:5D:7E:A0:D5:47
ValidityTue, 14 Mar 2023 00:00:00 GMT - Tue, 12 Mar 2024 23:59:59 GMT
File type troff or preprocessor input, ASCII text, with very long lines (2076), with no line terminators
Hash 2ba119806332703ea75ac616b0e9b7c1
f86eb942c38ea9bc47f6cef6cbe219247e085321
1949320470b85d538634ed5bfcb1c398f6e1d49991f288fb3b446c0059b75bd1
GET /api/v2/bonuses/tournaments?lang=no&frontendIdentifier_in%5B%5D=mystery-slot-race&frontendIdentifier_in%5B%5D=queens-live-race&frontendIdentifier_in%5B%5D=mystery-drop&frontendIdentifier_in%5B%5D=drops-n-wins&frontendIdentifier_in%5B%5D=book-of-billionaire HTTP/1.1
Host: platform.nationalcasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-Requested-With: XMLHttpRequest
client-timezone: UTC
Origin: https://nationalcasino.com
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/
Cookie: _cioanonid=a3cce01f-2d1b-603b-7244-5b511ff0909d; _sp_srt_ses.1060=*; _sp_srt_id.1060=ab56d405-e6af-450e-8f99-06f12a3cc201.1701593212.1.1701593212..3df79c2c-f74b-4ff3-8d46-6c66d820f5ff....0; DV_TRACK=d7e56dfb-84fe-4423-b360-e2cbfcc74b99; _ga_9G634HNY5N=GS1.1.1701593211.1.0.1701593211.60.0.0; _ga=GA1.1.1050769078.1701593212; ubc-code=595033c2-650f-4249-a4a5-f1db4e6ca903
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 03 Dec 2023 08:46:48 GMT
content-type: application/json; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: https://nationalcasino.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,client-timezone,LOCATION-SMART-HTML-SESSION-ID,LOCATION-SMART-DEVICE-SESSION-ID
access-control-expose-headers: Content-Length,Content-Range
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VV5kkz6M5YLcET2SjlGyiu%2Bso7x6Twj8Y58eTXWAwyeSuoDSSjmbcIXVCvKxA607ZoAGYhujN%2B9tvD%2Bs%2BLb6sUS2eti%2FWzpUO3Rpgq3SfAEP3c5GcNAO5uEjdLIJ8d2M8oXWdTT0V9bKi6UiGQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82fa8a901a49b505-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.google.com/recaptcha/api2/webworker.js?hl=en&v=-QbJqHfGOUB8nuVRLvzFLVed
142.250.74.132200 OK 102 B URL GET HTTP/3 www.google.com/recaptcha/api2/webworker.js?hl=en&v=-QbJqHfGOUB8nuVRLvzFLVed
IP 142.250.74.132:443
Requested by https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcIXVIiAAAAAOSkusfnmE4Oe97qAFgJYg71vdQc&co=aHR0cHM6Ly9uYXRpb25hbGNhc2luby5jb206NDQz&hl=en&v=-QbJqHfGOUB8nuVRLvzFLVed&size=invisible&cb=iob82xdf5r7o
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with no line terminators
Hash b581f6e6ac7eb4d572233bdd384918f8
12a90cd14cfea2286982801538560f638670eaff
b62f36160407c81030404ab242125afd42fa0da6626ef11e5f406dda12acf144
GET /recaptcha/api2/webworker.js?hl=en&v=-QbJqHfGOUB8nuVRLvzFLVed HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcIXVIiAAAAAOSkusfnmE4Oe97qAFgJYg71vdQc&co=aHR0cHM6Ly9uYXRpb25hbGNhc2luby5jb206NDQz&hl=en&v=-QbJqHfGOUB8nuVRLvzFLVed&size=invisible&cb=iob82xdf5r7o
Sec-Fetch-Dest: worker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/javascript; charset=utf-8
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
expires: Sun, 03 Dec 2023 08:46:49 GMT
date: Sun, 03 Dec 2023 08:46:49 GMT
cache-control: private, max-age=300
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
nationalcasino.com/app/main.a7de03da3f347acd.css
172.67.69.139200 OK 164 kB URL GET HTTP/2 nationalcasino.com/app/main.a7de03da3f347acd.css
IP 172.67.69.139:443
Requested by https://nationalcasino.com/no/promotions
Certificate IssuerCloudflare, Inc.
Subjectnationalcasino.com
FingerprintCC:02:73:1C:8E:B6:5E:A0:33:ED:63:B5:75:B5:C1:5D:7E:A0:D5:47
ValidityTue, 14 Mar 2023 00:00:00 GMT - Tue, 12 Mar 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 164 kB (164269 bytes)
Hash 87d3bd792e3372d60ad6ecde61b3e268
d05901e6b6d3afbde589426697c13ef1fd9d002a
bc18d14094bd5105d2a09de4b1b602462c95fe5eee6b03c090cba9dd4dd59b2d
GET /app/main.a7de03da3f347acd.css HTTP/1.1
Host: nationalcasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/no/promotions
Cookie: preferred-language=no
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 03 Dec 2023 08:46:45 GMT
content-type: text/css
cf-ray: 82fa8a7f1cd3b505-OSL
cf-cache-status: BYPASS
etag: W/"6568272c-281ad"
last-modified: Thu, 30 Nov 2023 06:09:48 GMT
set-cookie: is_mobile_device=false
vary: Accept-Encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BYIoCerguVHlniD568mkRPkTwXoYC9hR1d9BU9k0YQ7Klsw4RM5kOFUkg7qhSM%2F0s1xaHTPnV59phnaZf4tPLnQ0ioZWEO%2BYXfU4URwHlnR6dOxE2ZwMv7s5Jv8N9dYWjkGixA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
c4457c89-e5ba-4d22-92e5-c2959310ee85.snippet.antillephone.com/54f396e0-b046-49b1-9cb3-0c69281d7ea9-beacon.png
54.230.111.97200 OK 68 B URL GET HTTP/2 c4457c89-e5ba-4d22-92e5-c2959310ee85.snippet.antillephone.com/54f396e0-b046-49b1-9cb3-0c69281d7ea9-beacon.png
IP 54.230.111.97:443
Requested by https://nationalcasino.com/no/promotions
Certificate IssuerStarfield Technologies, Inc.
Subject*.snippet.antillephone.com
FingerprintE5:72:D2:23:23:5B:CF:9D:04:92:91:42:A3:10:C7:14:C1:B6:4C:8C
ValiditySun, 02 Apr 2023 11:55:38 GMT - Fri, 03 May 2024 11:55:38 GMT
File type PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced\012- data
Hash e679fbd466a2d656f194a5da4fa083cd
2aa795c7607aa6ea41313be88f1b7a9c1ab516b3
f309b7c03d9cae63a9bedbee6ed655f3dbcdb194132943639344dead5f3b9710
GET /54f396e0-b046-49b1-9cb3-0c69281d7ea9-beacon.png HTTP/1.1
Host: c4457c89-e5ba-4d22-92e5-c2959310ee85.snippet.antillephone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
content-length: 68
date: Thu, 30 Nov 2023 21:58:43 GMT
last-modified: Tue, 15 Dec 2020 08:04:53 GMT
etag: "e679fbd466a2d656f194a5da4fa083cd"
cache-control: no-cache, no-store, must-revalidate
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ItOGyECsPU_-LsHQPswcTFdFWhmenHa04xDhq1SxHeSXu-3pJMsKOA==
age: 211687
X-Firefox-Spdy: h2
c4457c89-e5ba-4d22-92e5-c2959310ee85.snippet.antillephone.com/sealassets/3fee006b251b8bdc848c8e2f4184f002-nationalcasino.com-f5faf6d82a7be2057527120fa49724355adf2a8c973918d432fa7b70160234e717ac6b01358f27fc0aff52358b79fb11-c3ByaXRlLXNlYWwucG5n?status=valid
54.230.111.97200 OK 49 kB URL GET HTTP/2 c4457c89-e5ba-4d22-92e5-c2959310ee85.snippet.antillephone.com/sealassets/3fee006b251b8bdc848c8e2f4184f002-nationalcasino.com-f5faf6d82a7be2057527120fa49724355adf2a8c973918d432fa7b70160234e717ac6b01358f27fc0aff52358b79fb11-c3ByaXRlLXNlYWwucG5n?status=valid
IP 54.230.111.97:443
Requested by https://nationalcasino.com/no/promotions
Certificate IssuerStarfield Technologies, Inc.
Subject*.snippet.antillephone.com
FingerprintE5:72:D2:23:23:5B:CF:9D:04:92:91:42:A3:10:C7:14:C1:B6:4C:8C
ValiditySun, 02 Apr 2023 11:55:38 GMT - Fri, 03 May 2024 11:55:38 GMT
File type PNG image data, 512 x 256, 8-bit/color RGBA, non-interlaced\012- data
Hash 8ef6782be55b8ce8f5b132d28af8e0d0
cb99df77f4865d9c2f287539a5ca474cf76f7d09
d614922fde9604f8899e47f3cc3d69bf952312b996f7cf1421163996710850fa
GET /sealassets/3fee006b251b8bdc848c8e2f4184f002-nationalcasino.com-f5faf6d82a7be2057527120fa49724355adf2a8c973918d432fa7b70160234e717ac6b01358f27fc0aff52358b79fb11-c3ByaXRlLXNlYWwucG5n?status=valid HTTP/1.1
Host: c4457c89-e5ba-4d22-92e5-c2959310ee85.snippet.antillephone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
content-length: 49397
date: Sun, 03 Dec 2023 08:46:27 GMT
x-powered-by: Express
cache-control: max-age=1200
etag: W/"c0f5-y5nfd/SGXZwvKHU5pcpHTPdvfQk"
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 82fa8a0dace83721-FRA
x-cache: Hit from cloudfront
via: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: bmq_5gx5DQA6tUseSKF06x9fTemKTR317rFTZ3fkiUuYsL-o69yrHw==
age: 19
X-Firefox-Spdy: h2
track.trackingtraffo.com/pixel/js?auth=61xu7tg&event=visit&uid=undefined&tid={TRANSACTION_ID}&cur={CURRENCY}&amount=0
0.0.0.0 0 B URL GET track.trackingtraffo.com/pixel/js?auth=61xu7tg&event=visit&uid=undefined&tid={TRANSACTION_ID}&cur={CURRENCY}&amount=0
IP 0.0.0.0:0
Requested by https://nationalcasino.com/no/promotions
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/js?auth=61xu7tg&event=visit&uid=undefined&tid={TRANSACTION_ID}&cur={CURRENCY}&amount=0 HTTP/1.1
Host: track.trackingtraffo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
nationalcasino.com/app/styles.b76d859e5f3be7cb.css
172.67.69.139200 OK 938 kB URL GET HTTP/2 nationalcasino.com/app/styles.b76d859e5f3be7cb.css
IP 172.67.69.139:443
Requested by https://nationalcasino.com/no/promotions
Certificate IssuerCloudflare, Inc.
Subjectnationalcasino.com
FingerprintCC:02:73:1C:8E:B6:5E:A0:33:ED:63:B5:75:B5:C1:5D:7E:A0:D5:47
ValidityTue, 14 Mar 2023 00:00:00 GMT - Tue, 12 Mar 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 938 kB (938447 bytes)
Hash c96c9fad12b8d8524395483f76b407db
3410a696f301c6667b1e853868fcc37506261fe5
65cd2cc345c063272a78f8e9264028c882a49a019c552e8c1283af8cae0202ec
GET /app/styles.b76d859e5f3be7cb.css HTTP/1.1
Host: nationalcasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/no/promotions
Cookie: preferred-language=no
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 03 Dec 2023 08:46:45 GMT
content-type: text/css
cf-ray: 82fa8a7f1cd2b505-OSL
cf-cache-status: BYPASS
etag: W/"6568273f-e51cf"
last-modified: Thu, 30 Nov 2023 06:10:07 GMT
set-cookie: is_mobile_device=false
vary: Accept-Encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yCv2xKr9xaaiEBhBHyp5lKMlns3u1TzGdSc4zfSex%2BVflJyvWHjCdr7rd11Gy%2F6G7m7V9SbNABa1bbQHJ42vpqwdhi1nXJWa00wCL66VCrsNdIInAcua458OKaxjcfHHvJJKPA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
tag.growthbuddy.app/tag.js?id=DV-94905054618481252564
18.200.119.55200 OK 5.0 kB URL GET HTTP/2 tag.growthbuddy.app/tag.js?id=DV-94905054618481252564
IP 18.200.119.55:443
Requested by https://nationalcasino.com/no/promotions
Certificate IssuerLet's Encrypt
Subject*.growthbuddy.app
Fingerprint61:16:04:9A:79:A0:77:A8:93:09:A1:58:55:3F:FD:5E:F7:00:C1:95
ValidityMon, 20 Nov 2023 01:44:47 GMT - Sun, 18 Feb 2024 01:44:46 GMT
File type ASCII text, with very long lines (5116), with no line terminators
Hash d9726284005c4e3eb2de26c912826efb
3601f856070ce3eb231a2def18c54b90f402acbf
62fb46f283fae9132a835fa173e571d2ae2a29409804be90fc41487f0d401dfb
GET /tag.js?id=DV-94905054618481252564 HTTP/1.1
Host: tag.growthbuddy.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 03 Dec 2023 08:46:46 GMT
content-type: application/javascript; charset=utf-8
set-cookie: INGRESSCOOKIE=1701593207.472.31.514863|5f2e1b57d78510d04b0cf9036879032b; Path=/; Secure; HttpOnly
vary: Accept-Encoding
cache-control: public, max-age=7200
x-content-type-options: nosniff
etag: "1382-negDj3/q3mLK2bONN/3hDb5WPZA"
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
d3beicsry9ch2d.cloudfront.net/site/upload/promotion/loadernc.gif
54.230.111.84200 OK 241 kB URL GET HTTP/2 d3beicsry9ch2d.cloudfront.net/site/upload/promotion/loadernc.gif
IP 54.230.111.84:443
Requested by https://nationalcasino.com/no/promotions
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type GIF image data, version 89a, 500 x 500\012- data
Size 241 kB (241054 bytes)
Hash 2b8631087e6b5060df2cf7e806a61377
3776e74ef2e8c09732d45a449d58f73591a0572c
164a68f8fab65827db4bc02f792c2f4c368922fe4d18b7a3bd1d2893bf925391
GET /site/upload/promotion/loadernc.gif HTTP/1.1
Host: d3beicsry9ch2d.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nationalcasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/gif
content-length: 241054
last-modified: Wed, 18 Jan 2023 09:34:25 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: nJ9FUOjT87XYbg4UPhNz6ChKEWxznyle
accept-ranges: bytes
server: AmazonS3
date: Sun, 03 Dec 2023 06:28:23 GMT
etag: "2b8631087e6b5060df2cf7e806a61377"
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: kOhtzxPgw9tZaZoeiiFSZhWHjCKtI-81cIBXuEEdoc-O25Lk2AeY8g==
age: 8306
X-Firefox-Spdy: h2