inoradde.com/4/4292615/
200 OK 613 B IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 41bec43fdab4338cd5753065eed0630a
7d7ab159eaf30d5a33fb23eb6b356207cf7771d7
6fd51038cea4f87131b83a93c72540742712956da545d6e04292cbbc6d4a8d7e
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /4/4292615/ HTTP/1.1
Host: inoradde.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 05 Feb 2023 10:15:08 GMT
Content-Type: text/html; charset=utf8
Transfer-Encoding: chunked
Connection: keep-alive
X-Trace-Id: bb1df674786f6f6e654776e3cc4508bb
Link: <https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://my.rtmark.net>; rel="preconnect dns-prefetch", <https://go.doubledoubleup.com>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://diromalxx.com>; rel="preconnect dns-prefetch"
Access-Control-Allow-Credentials: true
Access-Control-Max-Age: 86400
Timing-Allow-Origin: *
Set-Cookie: OAID=80b77154722d41ac9fc553509bb37a3d; expires=Mon, 05 Feb 2024 10:15:08 GMT; path=/
oaidts=1675592108; expires=Mon, 05 Feb 2024 10:15:08 GMT; path=/
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
Pragma: no-cache, no-cache
Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
Expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Methods: GET, POST, OPTIONS, POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, Accept, Content-Type, Content-Length, Accept-Encoding
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c21ba65e44ac95470c314e068e49a9eb
17a13b13738993d889d4afa3d848dc63bf6eba64
9bd0795b30e84ce63b6e2a365ca91bbffc395dd955e112152066c31e63a4ab66
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9BD0795B30E84CE63B6E2A365CA91BBFFC395DD955E112152066C31E63A4AB66"
Last-Modified: Sat, 04 Feb 2023 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10011
Expires: Sun, 05 Feb 2023 13:01:59 GMT
Date: Sun, 05 Feb 2023 10:15:08 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 81713f952b51a865ad9764cde68e3fdb
278c3a9c4bb2a0ffb7375f90d89a1ba6e90a766a
c2eb0d8a24ecb51af28f1c71db4b9a95c568dcf6c94b41ee8c78787a4ebebcef
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C2EB0D8A24ECB51AF28F1C71DB4B9A95C568DCF6C94B41EE8C78787A4EBEBCEF"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9020
Expires: Sun, 05 Feb 2023 12:45:28 GMT
Date: Sun, 05 Feb 2023 10:15:08 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fb7b6b46e708ad73eaaa3c21e74569ae
950663c025acad81556af5aa3022ecc9d55097fe
763f58b9fb838378c92033b59907b036f4c33081f5103d9bcc2ca2a8de500d64
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "763F58B9FB838378C92033B59907B036F4C33081F5103D9BCC2CA2A8DE500D64"
Last-Modified: Sat, 04 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5314
Expires: Sun, 05 Feb 2023 11:43:42 GMT
Date: Sun, 05 Feb 2023 10:15:08 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash ff250d3ef3fa45322bf05039a0122a9f
b3e7a2c383bce1bab807dbe1a03c375258b51f1d
d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Backoff, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 05 Feb 2023 09:36:17 GMT
content-type: application/json
age: 2331
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: eNCjtkRXRdwYa7myiRBO0/ysWm2bL0QHAdxc3ZvtP91ZTGrBADleTMSxiY8xTB7U0i/8jpp318Y=
x-amz-request-id: Z3YYNWNS452N164V
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 05 Feb 2023 09:53:13 GMT
age: 1315
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 05 Feb 2023 10:15:08 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bb0e1ff82ab6199f715e00974b7f6957
74edba6943c202d060b471c30a3c626542bfac84
d982aa0ae1b32ffba27f789ad265b594dfef0bc4c55a0d0489d38b0827e6a7e2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D982AA0AE1B32FFBA27F789AD265B594DFEF0BC4C55A0D0489D38B0827E6A7E2"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5005
Expires: Sun, 05 Feb 2023 11:38:33 GMT
Date: Sun, 05 Feb 2023 10:15:08 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d837f67518b2720af1063d9f47a0a3e1
9e11cd7c8c6c6b25b51d038d4f7a4698340e6122
d736615f990c06f6658f3d513bc192ee211c30a43e544112a9dba9bcfa18bd57
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D736615F990C06F6658F3D513BC192EE211C30A43E544112A9DBA9BCFA18BD57"
Last-Modified: Sat, 04 Feb 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5757
Expires: Sun, 05 Feb 2023 11:51:05 GMT
Date: Sun, 05 Feb 2023 10:15:08 GMT
Connection: keep-alive
inoradde.com/favicon.ico
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /favicon.ico HTTP/1.1
Host: inoradde.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Cookie: OAID=80b77154722d41ac9fc553509bb37a3d; oaidts=1675592108
HTTP/1.1 204 No Content
Server: nginx
Date: Sun, 05 Feb 2023 10:15:08 GMT
Connection: keep-alive
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Pragma: public
Cache-Control: max-age=315360000, public, must-revalidate, proxy-revalidate
my.rtmark.net/img.gif?f=merge&userId=80b77154722d41ac9fc553509bb37a3d
200 OK 43 B URL HTTP/2 my.rtmark.net/img.gif?f=merge&userId=80b77154722d41ac9fc553509bb37a3d
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
POST /img.gif?f=merge&userId=80b77154722d41ac9fc553509bb37a3d HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 200 OK
server: nginx
date: Sun, 05 Feb 2023 10:15:08 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: null
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=80b77154722d41ac9fc553509bb37a3d; expires=Mon, 05 Feb 2024 10:15:08 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
go.doubledoubleup.com/visit/?bta=35656&brand=doggocasino&rdk=rk1
302 Moved Temporarily 3 B URL HTTP/1.1 go.doubledoubleup.com/visit/?bta=35656&brand=doggocasino&rdk=rk1
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type JSON data\012- , ASCII text, with no line terminators
Hash 43e819cfbef2c8fc69c227513504087b
3ea645da8b9c23cfcf4e75e45b2ea79c5ec89c4a
82985617ce795510ad965737efe6b5a76411b26a6d7453ff4ba680e856377bc8
GET /visit/?bta=35656&brand=doggocasino&rdk=rk1 HTTP/1.1
Host: go.doubledoubleup.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Server: rhino-core-shield
Date: Sun, 05 Feb 2023 10:15:08 GMT
Content-Type: application/octet-stream
Content-Length: 3
Connection: keep-alive
Set-cookie: doggocasino-v=393091; Max-Age=2678400; Path=/; Expires=Wed, 08 Mar 2023 10:15:08 GMT; HttpOnly
cache-control: no-store
location: https://doggocasino.com/en-us?affiliateName=[cellxpert]&affid=cx-35656_393091&bannerid=35656&trackerid=35656_393091&brand=doggocasino&bta=35656&rdk=rk1
referer:
X-Cache-Status: MISS
access-control-allow-origin: *, *
ocsp.digicert.com/
200 OK 280 B IP
Hash 1919a9affd83f355e2d14f59bbab1abf
66f97af1501716e43bc40c80dd928ad9e642979a
91a4ff9f494ae9bf9ff41e80094a5bef06efa9b9bbe9e1017955d908219f10b5
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5131
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 10:15:08 GMT
Last-Modified: Sun, 05 Feb 2023 08:49:37 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 280
doggocasino.regily.com/b1e55c583226311df310792321f587d2.js
200 OK 70 kB URL HTTP/2 doggocasino.regily.com/b1e55c583226311df310792321f587d2.js
IP
File type Unicode text, UTF-8 text, with very long lines (65379)
Hash 338de1b76f30a37d6e845fa2c0fbcec2
1a919e0158996bb80e0594b0fe56c2c51f84e236
051dcb2a475a2c1ccde5a45c3a20d8f13d9fef67c08a6ca36c5217ab65083551
GET /b1e55c583226311df310792321f587d2.js HTTP/1.1
Host: doggocasino.regily.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Tue, 17 Jan 2023 08:23:44 GMT
server: AmazonS3
content-encoding: br
date: Sun, 05 Feb 2023 10:13:56 GMT
etag: W/"3d26fa2efd58cd218deb440fff9ef848"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: B9G5qgwayC9SHmFkpAKV8H5S5sPM4gUS-tkXc3xbYi68o3HIxKjO_Q==
age: 73
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-WKDT3RB
200 OK 52 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-WKDT3RB
IP
File type ASCII text, with very long lines (10642)
Hash 8138757dee0dd1248285048cf641b433
a16812a2543a753f417caef7b064193ea2dbb2b5
240c50166853d8e555d12171110ff26117a59a9c10b003357327e2f5fe0f8f17
GET /gtm.js?id=GTM-WKDT3RB HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 05 Feb 2023 10:15:08 GMT
expires: Sun, 05 Feb 2023 10:15:08 GMT
cache-control: private, max-age=900
last-modified: Sun, 05 Feb 2023 09:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 52381
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
doggocasino.com/assets/fonts/CeraPro/CeraPro-Regular.ttf
200 OK 167 kB URL HTTP/2 doggocasino.com/assets/fonts/CeraPro/CeraPro-Regular.ttf
IP
File type TrueType Font data, 15 tables, 1st "FFTM", 26 names, Macintosh\012- data
Size 167 kB (166620 bytes)
Hash cf954f65e33513f8a1f75f8083674834
dde47f28e602f3aa1488ec6a2126ab75c26e2ac4
21c63b1ab7ed2243a23e609485b1391e7d7bf8ba6a8a01f9ae0e515844c4591e
GET /assets/fonts/CeraPro/CeraPro-Regular.ttf HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/styles.6fe09080dd4bc8174585.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 166620
x-amz-meta-codebuild-content-sha256: 4f853d18badd3933524ca4a1dd6240279e0051fb38905b83f18834b4b93aaeb1
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:08219a5d-0b7c-4ae2-afb4-2507533d271d
x-amz-meta-codebuild-content-md5: 319cfed7654cbf4a61d9a3eabce3d2f4
last-modified: Fri, 03 Feb 2023 09:41:16 GMT
x-amz-version-id: nHMzA_1f2YzjfQuGjPK_eQILLVHaVrWa
server: AmazonS3
date: Sun, 05 Feb 2023 10:09:13 GMT
etag: "cf954f65e33513f8a1f75f8083674834"
vary: Accept-Encoding
via: 1.1 96c778ce6156d12f24b8b6cdaa0cbf66.cloudfront.net (CloudFront)
age: 357
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: rxx9-VvcV5cfxmg91_zyw4krPrvqRuYuXqc9xbzF8cgvJyIzau6ncA==
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dedf9c519ac38c4bece9c5bc895787d7
4911175c3f8a435978c5301c33c7a99a5e00a1d5
bddd7e3a4939f863642a7c5348c1c8b9bc569b35c10a27f4cf5ec71f7e6b9698
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BDDD7E3A4939F863642A7C5348C1C8B9BC569B35C10A27F4CF5EC71F7E6B9698"
Last-Modified: Fri, 03 Feb 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7780
Expires: Sun, 05 Feb 2023 12:24:49 GMT
Date: Sun, 05 Feb 2023 10:15:09 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 153d0de36959c722c00df71ba86daca2
305f56a3134879ebf0828e169e903e560540c070
0cf533a798d42d1e97fb6619a411afadf9a68c92302ba852869b0c0555a47987
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 10:15:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 98be7fe21d059e46146a43d20c4eea92
1ec58129fea75085588be7b8baec05b0874b5274
7bb2eb5ffcd88a3b6ba7b210bdbcd4469134c9708f06befb6c616beebf8dae46
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 10:15:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 4d9b0e72192ca0f646d127400f41c5e0
122cfe4f564c380eebb32b203a82f61cedb274ca
f60c03c447a5079c73eb082638bc128afbfcfc75956ab5d208978abdf3d1d265
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sun, 05 Feb 2023 10:15:09 GMT
Etag: "63de6efa-1d7"
Last-Modified: Sun, 05 Feb 2023 08:44:14 GMT
Server: ECS (bsa/EB15)
X-Cache: Miss from cloudfront
Via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: PsNM6ILM5lalRfVL1OKlOqm955zVE-GxLqUxNUXLVO_UwiJYemyT-A==
Age: 5455
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 904c88c6e99f115c2c78a9e5b439b930
265698b5dcc6aa34ac22d6de4ea572da0b273f09
3e248db0f58cb1762adca87d38e9fb7396c483f159bf85376cb72bc11da73afb
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "3E248DB0F58CB1762ADCA87D38E9FB7396C483F159BF85376CB72BC11DA73AFB"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16413
Expires: Sun, 05 Feb 2023 14:48:42 GMT
Date: Sun, 05 Feb 2023 10:15:09 GMT
Connection: keep-alive
ekr.zdassets.com/compose/65b012e7-7474-42fb-a2e0-939200b21662
200 OK 590 B URL HTTP/2 ekr.zdassets.com/compose/65b012e7-7474-42fb-a2e0-939200b21662
IP
File type JSON data\012- , ASCII text, with very long lines (389), with no line terminators
Hash 250b5d025af40083cb764f4459171ab9
078dc48b5203da0e5c76c62f3a42541d5ad2f0bd
97232a610e9a258185f4f35c2570d719ebc6d9875d73d9bafd2afd02ccb348f0
GET /compose/65b012e7-7474-42fb-a2e0-939200b21662 HTTP/1.1
Host: ekr.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://doggocasino.com
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 05 Feb 2023 10:15:09 GMT
content-type: application/json; charset=utf-8
status: 200 OK
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-expose-headers:
access-control-max-age: 7200
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-download-options: noopen
x-permitted-cross-domain-policies: none
referrer-policy: strict-origin-when-cross-origin
cdn-cache-control: max-age=60
cache-control: max-age=600, public, stale-while-revalidate=600, stale-if-error=21600
etag: W/"db124efdcc2d727cb38f47b3cc105bb3"
x-request-id: 79286a235c61b4e8-SEA, 79286a235c61b4e8-SEA
x-runtime: 0.002611
vary: Origin, Accept-Encoding
x-zendesk-zorg: yes
cf-cache-status: HIT
age: 37
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0ciuRq6mPesd3ML0qZXxSVEXQYGcpV7bQQZ5%2B1g%2BgqYL1TAQBkLn42GRI7q1NCWIW2f2Hx0XYTyWOSHpW4RHJF878N79uGM%2FivnWsF1Vk3Y94WTc9HgDhs9GgCFPpQJ6o2c%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 794ae21a3d1cb4f4-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 277 B IP
Hash 04b877b859043902531e582b6db1fc0b
9b3146c4b37a5920871c9b0689f33b3deaeb8a0d
d7456799374de0f1d2281d59686b4163557b645a9ffa98cfac402c5205eee044
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5253
Cache-Control: max-age=134362
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 10:15:09 GMT
Etag: "63ded702-115"
Expires: Mon, 06 Feb 2023 23:34:31 GMT
Last-Modified: Sat, 04 Feb 2023 22:06:58 GMT
Server: ECS (amb/6BAB)
X-Cache: HIT
Content-Length: 277
fonts.googleapis.com/css2?family=Roboto:wght@400;700
200 OK 1.1 kB URL HTTP/2 fonts.googleapis.com/css2?family=Roboto:wght@400;700
IP
Hash 3b4888edc626ba71cefdf91c96db4a4b
a6612fb31f2f0f7f0274178f75d0477579338d03
3b714de134cd7ab453cab03253e1f813249c6849d855a608a5dd8bf7989a4bb3
GET /css2?family=Roboto:wght@400;700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 05 Feb 2023 10:15:09 GMT
date: Sun, 05 Feb 2023 10:15:09 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
pixel.empdat.com/offers/5457?transaction_id=35656_393091
404 Not Found 9 B URL HTTP/2 pixel.empdat.com/offers/5457?transaction_id=35656_393091
IP
File type ASCII text, with no line terminators
Hash 9d1ead73e678fa2f51a70a933b0bf017
d205cbd6783332a212c5ae92d73c77178c2d2f28
0019dfc4b32d63c1392aa264aed2253c1e0c2fb09216f8e2cc269bbfb8bb49b5
GET /offers/5457?transaction_id=35656_393091 HTTP/1.1
Host: pixel.empdat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
content-type: text/plain
content-length: 9
date: Sun, 05 Feb 2023 10:15:09 GMT
x-amzn-requestid: 60d4f2c7-54d6-4c21-8276-fa621acd65f8
x-amz-apigw-id: f3EzGHuJliAFfxQ=
x-amzn-trace-id: Root=1-63df81ad-655917ea0fdb123a463ab7ff;Sampled=0
x-cache: Error from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 6Y7sjo_LDlsOZcQE-pCjSiKH3vU97eBJOzvOcVvP1Q-i_P4D_L1eTw==
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 8e40738d11d3e0269200360d3863b186
ed8f3ca1c6f114c3b8a7df8ba1ed76d5343ef362
4997e6d948f302532fdf4c25279308285952bcacd3118f4a4b9ca643c30d054d
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sun, 05 Feb 2023 10:15:09 GMT
Last-Modified: Sun, 05 Feb 2023 08:55:00 GMT
Server: ECS (dcb/7F13)
X-Cache: Miss from cloudfront
Via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 1vvuehuEt8Wdh5SMuaZMi0jqzgPNvRUIq3-t8MADGFWSCY5nCDbhRQ==
Age: 4810
doggocasino.com/8.eab0308814be44e45548.js
200 OK 83 kB URL HTTP/2 doggocasino.com/8.eab0308814be44e45548.js
IP
File type ASCII text, with very long lines (50368), with no line terminators
Hash 625deb0e0d583ea6774eb9a44f8d1707
7d1b9ab35f361b621d7b5aea4d86a4666eeb8483
df56ff4e30cecf1e8e0ce02f6ace83469dca5c2a6edaab63429581538c4fad06
GET /8.eab0308814be44e45548.js HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/en-us?affiliateName=[cellxpert]&affid=cx-35656_393091&bannerid=35656&trackerid=35656_393091&brand=doggocasino&bta=35656&rdk=rk1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
x-amz-meta-codebuild-content-sha256: 4f853d18badd3933524ca4a1dd6240279e0051fb38905b83f18834b4b93aaeb1
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:08219a5d-0b7c-4ae2-afb4-2507533d271d
x-amz-meta-codebuild-content-md5: 319cfed7654cbf4a61d9a3eabce3d2f4
last-modified: Fri, 03 Feb 2023 09:41:10 GMT
x-amz-version-id: KSSnhAWalc9FBP5kx0j_ufX9PeS0UgDO
server: AmazonS3
content-encoding: br
date: Sun, 05 Feb 2023 09:43:28 GMT
etag: W/"2a2a7aa84b93bcd62ca6bf5c6055fb11"
vary: Accept-Encoding
via: 1.1 96c778ce6156d12f24b8b6cdaa0cbf66.cloudfront.net (CloudFront)
age: 1902
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: QtCShEPR2ThJKWEdHB9754k3aFYYe9sdBXgSVXfFg1QTeO23vfm1sQ==
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash a86bca2181ae8cd9ef06d09f9fc87334
641d3e097ac641b77c5950c14e1d55c6f8325f23
0564b2caf2053d56eb07de52c83398a120708b8fda3a16aa1733c574798794b8
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sun, 05 Feb 2023 10:15:09 GMT
Last-Modified: Sun, 05 Feb 2023 09:29:50 GMT
Server: ECS (dcb/7F15)
X-Cache: Miss from cloudfront
Via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: zKAEUJZFmjFLwae4-LJCm09Xe2XUbO6nwJdqzz2IQXwjzhiwS7IzqA==
Age: 2719
backoffice.regily.com/releases?new=true&partner=doggocasino&env=stable
200 OK 2 B URL HTTP/2 backoffice.regily.com/releases?new=true&partner=doggocasino&env=stable
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /releases?new=true&partner=doggocasino&env=stable HTTP/1.1
Host: backoffice.regily.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://doggocasino.com
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 05 Feb 2023 10:15:09 GMT
content-type: application/json; charset=utf-8
content-length: 2
x-amzn-requestid: e7ca97ce-a56c-47f6-a265-3fa3bb34bcc7
x-dns-prefetch-control: off
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=15552000; includeSubDomains
x-ratelimit-reset: 1675592133
x-amzn-remapped-content-length: 2
x-frame-options: SAMEORIGIN
allow: GET,POST,PUT,PATCH,DELETE
x-amzn-remapped-connection: keep-alive
x-download-options: noopen
x-ratelimit-remaining: 99
x-amz-apigw-id: f3EzHFCaDoEFWMw=
vary: Accept, Accept-Encoding
x-ratelimit-limit: 100
x-content-type-options: nosniff
etag: W/"2-vyGp6PvFo4RvsFtPoIWeCReyIC8"
x-amzn-trace-id: Root=1-63df81ad-1c09d907593edc6141a3c8c7
x-amzn-remapped-date: Sun, 05 Feb 2023 10:15:09 GMT
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 346 B IP
ASN #20940 Akamai International B.V.
Hash 1633196fb8f7daf6c7406cafaa9362b0
b17d20d0e6ade8de740f48dee4c06f4ac8f2b60e
633895554b024ce2620644e62a04cff865f1acc1fa439d24056b64301a01191f
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "3E248DB0F58CB1762ADCA87D38E9FB7396C483F159BF85376CB72BC11DA73AFB"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16413
Expires: Sun, 05 Feb 2023 14:48:42 GMT
Date: Sun, 05 Feb 2023 10:15:09 GMT
Connection: keep-alive
adjs.media/resources/content/doggocasino.js
200 OK 1.7 kB URL HTTP/2 adjs.media/resources/content/doggocasino.js
IP
File type ASCII text, with very long lines (2887)
Hash 2e7d3c373b252ede4d8a6172c981c1cd
9c9a2e0a846ec8e41c314140466d7a932b648f49
c32a23dd671a4b99b7339445493edbe9b83ff92172cdbca86ae96fc948cbdb7d
GET /resources/content/doggocasino.js HTTP/1.1
Host: adjs.media
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 05 Feb 2023 10:15:09 GMT
content-type: text/javascript; charset=utf-8
status: 200 OK
cache-control: no-cache
access-control-allow-origin: *
referrer-policy: strict-origin-when-cross-origin
x-permitted-cross-domain-policies: none
x-xss-protection: 1; mode=block
x-request-id: 6508de7d-c809-4130-9066-34f5ad40883e
x-download-options: noopen
etag: W/"910a1eb1f52f1e810f827c5d4202a9f4"
x-runtime: 0.002386
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NoTVRSMO0cLr7HD6vrdegdgyvecvQoqKbihYUXUIMTb5zrc7Vmloils2T8D5I0KXaSq66ePJ%2FWC09ugu9tXTzM2t3nKuMJEcbNb6f6jadu5borg0XhFrBphJIeaF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 794ae21a8bb9b4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: q2UlgKACvh1br/OQUZ7BeQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: tmy4Bg2kGj3pgBcqdQkpIJU4Y+4=
ocsp.digicert.com/
200 OK 277 B IP
Hash 04b877b859043902531e582b6db1fc0b
9b3146c4b37a5920871c9b0689f33b3deaeb8a0d
d7456799374de0f1d2281d59686b4163557b645a9ffa98cfac402c5205eee044
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5253
Cache-Control: max-age=134362
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 10:15:09 GMT
Etag: "63ded702-115"
Expires: Mon, 06 Feb 2023 23:34:31 GMT
Last-Modified: Sat, 04 Feb 2023 22:06:58 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 277
ocsp.sectigo.com/
200 OK 471 B IP
Hash fa209eab7e48da80845e9356b218ee22
bce25345871e2cc591a48f286ebdfeb624b1a5f8
bedc01efe45583e33ea4f5f48972b4b7e18d8f428a3b4818bf72aa2bec68f8fd
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 05 Feb 2023 10:15:09 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 02 Feb 2023 00:28:40 GMT
Expires: Thu, 09 Feb 2023 00:28:39 GMT
Etag: "bce25345871e2cc591a48f286ebdfeb624b1a5f8"
Cache-Control: max-age=309809,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 794ae21bb8de0afe-OSL
cmsapi.doggocasino.com/ajax/country/countryblock
200 OK 177 B URL HTTP/1.1 cmsapi.doggocasino.com/ajax/country/countryblock
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 84a5fedf11ca403c40bcc33c089efabe
2e920993f57a1596c8c26b0e1b8b076458b25994
3873db006fd547eb926c6604f46a926e298eeaa909f6a667d2872f8237f3fc93
GET /ajax/country/countryblock HTTP/1.1
Host: cmsapi.doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://doggocasino.com
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 05 Feb 2023 10:15:09 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Methods: GET, POST, OPTIONS, PUT, DELETE
Access-Control-Allow-Origin: https://doggocasino.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Request-ID,X-REQ-ID,Authorization,X-MGS-BusinessUnit,Accept-Language
Set-Cookie: ci_session=i7cqnih09j6tss0kkpbqdrp42p2rt25p; expires=Sun, 05-Feb-2023 11:15:09 GMT; Max-Age=3600; path=/; SameSite=None; secure; HttpOnly
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Language: en
Vary: Accept-Encoding, Accept-Encoding
Content-Encoding: gzip
ocsp.digicert.com/
200 OK 280 B IP
Hash 063642e5e429e7b686e492a9b349c7c6
d40b0c271d97b38c160654e57ed8a2bb40952b86
a6b5d329b032c31a0922aa80c83405d797761d2e7151e843b8ee12ed6d19f32e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 10:15:09 GMT
Server: ECS (amb/6BAB)
Content-Length: 280
cmsapi.doggocasino.com/ajax/policy/getPolicies
200 OK 197 B URL HTTP/1.1 cmsapi.doggocasino.com/ajax/policy/getPolicies
IP
File type JSON data\012- , ASCII text, with very long lines (475), with no line terminators
Hash 3d71629c07dc044ad909dc8e02f1f27c
3ff809845e7d55d7067bee6e645c6e5b7e7fb85f
72efb757aa046854ca03633e888c7358311e12b3b4020d2e808fed3ed1a0b20e
GET /ajax/policy/getPolicies HTTP/1.1
Host: cmsapi.doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://doggocasino.com
Connection: keep-alive
Referer: https://doggocasino.com/
Cookie: _ga_K4EHGY5F0T=GS1.1.1675592149.1.0.1675592149.60.0.0; _ga=GA1.1.88150227.1675592149; ci_session=i7cqnih09j6tss0kkpbqdrp42p2rt25p
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 05 Feb 2023 10:15:09 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Methods: GET, POST, OPTIONS, PUT, DELETE
Access-Control-Allow-Origin: https://doggocasino.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Request-ID,X-REQ-ID,Authorization,X-MGS-BusinessUnit,Accept-Language
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: ci_session=i7cqnih09j6tss0kkpbqdrp42p2rt25p; expires=Sun, 05-Feb-2023 11:15:09 GMT; Max-Age=3600; path=/; SameSite=None; secure; HttpOnly
Content-Language: en
Vary: Accept-Encoding, Accept-Encoding
Content-Encoding: gzip
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 5aae1bf0207425c762eae1c4d84386ab
1f4ae0049f8015f5104b7c200346c0f7d932c7ca
1ae6f1e364c1da8a0c051a8a5737b47b040004712268d4602f0fe9b46efafcd5
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sun, 05 Feb 2023 10:15:09 GMT
Last-Modified: Sun, 05 Feb 2023 09:27:57 GMT
Server: ECS (nyb/1D35)
X-Cache: Miss from cloudfront
Via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 3CVeidmhE3iFCdA6m3tJCs6ZW14M6CS_W8kU88kNB54Iz7XLPv_Aeg==
Age: 2832
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 5aae1bf0207425c762eae1c4d84386ab
1f4ae0049f8015f5104b7c200346c0f7d932c7ca
1ae6f1e364c1da8a0c051a8a5737b47b040004712268d4602f0fe9b46efafcd5
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sun, 05 Feb 2023 10:15:09 GMT
Last-Modified: Sun, 05 Feb 2023 10:04:04 GMT
Server: ECS (nyb/1D07)
X-Cache: Miss from cloudfront
Via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 1zihIIjj84a4J0MDE2oy9riHbin_c6xvW78u4X08_Q7izq2P-x6vAg==
Age: 665
cmsapi.doggocasino.com/ajax/staticPage/getPage?url_path=game-header-filter-data&language=no
200 OK 787 B URL HTTP/1.1 cmsapi.doggocasino.com/ajax/staticPage/getPage?url_path=game-header-filter-data&language=no
IP
File type JSON data\012- , ASCII text, with very long lines (4044), with no line terminators
Hash b0cee8610450eecc568afdbed759fc7f
addd0c1c653d9aa9c1bdce67d3418ad4994ca620
922d29e0f56d5a3799bb0bfd4e98f182827b6238418f86d1c67034ed47034a70
GET /ajax/staticPage/getPage?url_path=game-header-filter-data&language=no HTTP/1.1
Host: cmsapi.doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://doggocasino.com
Connection: keep-alive
Referer: https://doggocasino.com/
Cookie: _ga_K4EHGY5F0T=GS1.1.1675592149.1.0.1675592149.60.0.0; _ga=GA1.1.88150227.1675592149; ci_session=i7cqnih09j6tss0kkpbqdrp42p2rt25p
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 05 Feb 2023 10:15:09 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Methods: GET, POST, OPTIONS, PUT, DELETE
Access-Control-Allow-Origin: https://doggocasino.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Request-ID,X-REQ-ID,Authorization,X-MGS-BusinessUnit,Accept-Language
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: ci_session=i7cqnih09j6tss0kkpbqdrp42p2rt25p; expires=Sun, 05-Feb-2023 11:15:09 GMT; Max-Age=3600; path=/; SameSite=None; secure; HttpOnly
Content-Language: en
Vary: Accept-Encoding, Accept-Encoding
Content-Encoding: gzip
cmsapi.doggocasino.com/ajax/staticPage/getPage?url_path=footer-no&language=no
200 OK 1.4 kB URL HTTP/1.1 cmsapi.doggocasino.com/ajax/staticPage/getPage?url_path=footer-no&language=no
IP
File type JSON data\012- HTML document, ASCII text, with very long lines (6630), with no line terminators
Hash abe2b784416270dc10848a25fa24f334
239929c2344a6caf292d4f5a7b3cd6a64e75baba
c16c585bd6e050e3a8dfe0d53330161789f3b5a564613576d1a5c258be58ef15
GET /ajax/staticPage/getPage?url_path=footer-no&language=no HTTP/1.1
Host: cmsapi.doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://doggocasino.com
Connection: keep-alive
Referer: https://doggocasino.com/
Cookie: _ga_K4EHGY5F0T=GS1.1.1675592149.1.0.1675592149.60.0.0; _ga=GA1.1.88150227.1675592149; ci_session=i7cqnih09j6tss0kkpbqdrp42p2rt25p
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 05 Feb 2023 10:15:09 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Methods: GET, POST, OPTIONS, PUT, DELETE
Access-Control-Allow-Origin: https://doggocasino.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Request-ID,X-REQ-ID,Authorization,X-MGS-BusinessUnit,Accept-Language
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: ci_session=i7cqnih09j6tss0kkpbqdrp42p2rt25p; expires=Sun, 05-Feb-2023 11:15:09 GMT; Max-Age=3600; path=/; SameSite=None; secure; HttpOnly
Content-Language: en
Vary: Accept-Encoding, Accept-Encoding
Content-Encoding: gzip
cmsapi.doggocasino.com/ajax/staticPage/getPage?url_path=game-header-filter-data&language=no
200 OK 787 B URL HTTP/1.1 cmsapi.doggocasino.com/ajax/staticPage/getPage?url_path=game-header-filter-data&language=no
IP
File type JSON data\012- , ASCII text, with very long lines (4044), with no line terminators
Hash b0cee8610450eecc568afdbed759fc7f
addd0c1c653d9aa9c1bdce67d3418ad4994ca620
922d29e0f56d5a3799bb0bfd4e98f182827b6238418f86d1c67034ed47034a70
GET /ajax/staticPage/getPage?url_path=game-header-filter-data&language=no HTTP/1.1
Host: cmsapi.doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://doggocasino.com
Connection: keep-alive
Referer: https://doggocasino.com/
Cookie: _ga_K4EHGY5F0T=GS1.1.1675592149.1.0.1675592149.60.0.0; _ga=GA1.1.88150227.1675592149; ci_session=i7cqnih09j6tss0kkpbqdrp42p2rt25p
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 05 Feb 2023 10:15:09 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Methods: GET, POST, OPTIONS, PUT, DELETE
Access-Control-Allow-Origin: https://doggocasino.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Request-ID,X-REQ-ID,Authorization,X-MGS-BusinessUnit,Accept-Language
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: ci_session=i7cqnih09j6tss0kkpbqdrp42p2rt25p; expires=Sun, 05-Feb-2023 11:15:09 GMT; Max-Age=3600; path=/; SameSite=None; secure; HttpOnly
Content-Language: en
Vary: Accept-Encoding, Accept-Encoding
Content-Encoding: gzip
cmsapi.doggocasino.com/ajax/game/getLobbyListWithGameGroups?languageId=en
200 OK 630 B URL HTTP/1.1 cmsapi.doggocasino.com/ajax/game/getLobbyListWithGameGroups?languageId=en
IP
File type JSON data\012- , ASCII text, with very long lines (5550), with no line terminators
Hash b0930fe971be4962a7c1a078516f89d2
5b7bf21d17843deb571640d48b6f07b9c1c63717
9754db7220236a711331f0de80f1965d3ec20cb7cb7d5cf9b58422fe9348b3c8
GET /ajax/game/getLobbyListWithGameGroups?languageId=en HTTP/1.1
Host: cmsapi.doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://doggocasino.com
Connection: keep-alive
Referer: https://doggocasino.com/
Cookie: _ga_K4EHGY5F0T=GS1.1.1675592149.1.0.1675592149.60.0.0; _ga=GA1.1.88150227.1675592149; ci_session=i7cqnih09j6tss0kkpbqdrp42p2rt25p
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 05 Feb 2023 10:15:09 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Methods: GET, POST, OPTIONS, PUT, DELETE
Access-Control-Allow-Origin: https://doggocasino.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Request-ID,X-REQ-ID,Authorization,X-MGS-BusinessUnit,Accept-Language
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: ci_session=i7cqnih09j6tss0kkpbqdrp42p2rt25p; expires=Sun, 05-Feb-2023 11:15:09 GMT; Max-Age=3600; path=/; SameSite=None; secure; HttpOnly
Content-Language: en
Vary: Accept-Encoding, Accept-Encoding
Content-Encoding: gzip
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/mb.png
200 OK 996 B URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/mb.png
IP
File type PNG image data, 561 x 92, 8-bit colormap, non-interlaced\012- data
Hash 4a561b1203db848a0fd069a40105f7a3
432ddaa10b45e26988bc1bddf69a9272a3acaf15
6e979cde819c2b590d29574b712bc5716a818a133e994b7481ff6e293c0d6905
GET /uploads/media/DOC/home/mb.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Mon, 28 Nov 2022 10:47:34 GMT
server: imgix
x-imgix-id: 247d4bd2833516dbbc97ef48afd09d785450b382
x-imgix-render-farm: 02.552
date: Sun, 05 Feb 2023 10:15:09 GMT
age: 5277900
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10064-SJC, cache-bma1634-BMA
x-cache: HIT, HIT
content-length: 996
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/safety.svg
200 OK 1.1 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/safety.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1535)
Hash f4bceb3b835f466f7e3c3e31f22996da
7795f48b8e4ea4ee227f3e2c0a7490f1a0e6e576
9af7e809decc127848a79a3425ddec9855db28d150f935ada5de2a4f6d9775d4
GET /uploads/media/DOC/home/safety.svg HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 22 Jun 2022 15:01:49 GMT
content-encoding: gzip
server: imgix
x-imgix-id: 964d44d72b652a9538aae37c30342dc375306c1a
x-imgix-render-farm: 02.552
x-imgix-original-status: 200
date: Sun, 05 Feb 2023 10:15:09 GMT
age: 8204221
accept-ranges: bytes
content-type: image/svg+xml
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10052-SJC, cache-bma1634-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
content-length: 1096
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/quick-spin.png
200 OK 7.3 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/quick-spin.png
IP
File type PNG image data, 264 x 132, 8-bit/color RGBA, non-interlaced\012- data
Hash c4651477b077d4f4dea3646065567885
df7eecb46d7709e9c490b399b9e4795e64595792
04c9cd3e8cfb7fa6e88c28b17cf9b2c87f83d5e1adadc20f2615ff1f1fdd0e88
GET /uploads/media/DOC/home/quick-spin.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 22 Jun 2022 15:01:49 GMT
server: imgix
x-imgix-id: b3f7542b22878ec5c77012762c5b725ec229b35d
x-imgix-render-farm: 02.552
date: Sun, 05 Feb 2023 10:15:09 GMT
age: 2754498
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10021-SJC, cache-bma1634-BMA
x-cache: HIT, HIT
content-length: 7266
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/blue-print.png
200 OK 13 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/blue-print.png
IP
File type PNG image data, 276 x 138, 8-bit/color RGBA, non-interlaced\012- data
Hash 215e832f2352ba2b101cdad72966f603
a1dcf49c0377e3f1e1c6bfcef8e49435dfffc781
dc6f2ec8948d25ba0a77ce6aedfcc118857fd6733c4801697db1e8b073e65456
GET /uploads/media/DOC/home/blue-print.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 22 Jun 2022 15:01:49 GMT
server: imgix
x-imgix-id: 5daeb86e027ae845822c2bb836b461094572814c
x-imgix-render-farm: 01.1064
date: Sun, 05 Feb 2023 10:15:09 GMT
age: 2745162
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10077-SJC, cache-bma1634-BMA
x-cache: HIT, HIT
content-length: 13093
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/netent.png
200 OK 7.6 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/netent.png
IP
File type PNG image data, 264 x 132, 8-bit/color RGBA, non-interlaced\012- data
Hash e2b8f21ff6a62425c54d2f31ea3da47b
bc0bb5c1b693c346300dc20657113ca18be6c924
58ee78a9a65e277e9ce58fad220ebf002de259699f963819277230d67308e814
GET /uploads/media/DOC/home/netent.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 22 Jun 2022 15:01:49 GMT
server: imgix
x-imgix-id: ad53f775ba8679c60964307b8587293d2caf651a
x-imgix-render-farm: 02.552
x-imgix-original-status: 200
date: Sun, 05 Feb 2023 10:15:09 GMT
age: 7524457
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10069-SJC, cache-bma1634-BMA
x-cache: HIT, HIT
content-length: 7615
X-Firefox-Spdy: h2
event.iconvert.network/com.snowplowanalytics.snowplow/tp2
200 OK 0 B URL HTTP/2 event.iconvert.network/com.snowplowanalytics.snowplow/tp2
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /com.snowplowanalytics.snowplow/tp2 HTTP/1.1
Host: event.iconvert.network
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://doggocasino.com/
Origin: https://doggocasino.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 05 Feb 2023 10:15:09 GMT
content-length: 0
access-control-allow-origin: https://doggocasino.com
access-control-allow-credentials: true
access-control-allow-headers: Content-Type
access-control-max-age: 5
server: akka-http/10.0.9
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/game-art.png
200 OK 6.2 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/game-art.png
IP
File type PNG image data, 279 x 138, 8-bit/color RGBA, non-interlaced\012- data
Hash a077d41a5bfa379097dd3b0dca4c236a
1e5a4e68cdf2fa8aad5613036632a5422f804d52
dbeb43c9dfabd489d74ef02d98a9d857e9400b3f2c1dc3ecf9f7bbd3a9180a58
GET /uploads/media/DOC/home/game-art.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 22 Jun 2022 15:01:49 GMT
server: imgix
x-imgix-id: a9b099e00237931176a4299b57190c5b5a7f6c58
x-imgix-render-farm: 01.1064
date: Sun, 05 Feb 2023 10:15:09 GMT
age: 2546300
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10057-SJC, cache-bma1634-BMA
x-cache: HIT, HIT
content-length: 6248
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/red-tiger.png
200 OK 11 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/red-tiger.png
IP
File type PNG image data, 276 x 138, 8-bit/color RGBA, non-interlaced\012- data
Hash 4d970a8ff362df7c5514aceaa5e3ebe7
55104f39398363a86ccc9c47e5cfa26104ba5a25
cca9d171d20873e005d4c9a6fb3c9df4fb19748d2f66eeb2188aa1fce25d51e1
GET /uploads/media/DOC/home/red-tiger.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Thu, 01 Dec 2022 09:24:24 GMT
server: imgix
x-imgix-id: eb5b0a4e7c9b7ed0449b816233ce1a167f11d44d
x-imgix-render-farm: 02.552
date: Sun, 05 Feb 2023 10:15:09 GMT
age: 5271324
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10040-SJC, cache-bma1634-BMA
x-cache: HIT, HIT
content-length: 11314
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/fantasma.png
200 OK 8.5 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/fantasma.png
IP
File type PNG image data, 249 x 126, 8-bit/color RGBA, non-interlaced\012- data
Hash c665b0d5e32fda6859ff497e1e69c43f
c182cf5a9438a4af020fc6c98dc6a101825fd0f4
031eda00e0705a5d0c4d98517a0d465a921256d4d0ff85a571858b1d41fce01a
GET /uploads/media/DOC/home/fantasma.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 22 Jun 2022 15:01:49 GMT
server: imgix
x-imgix-id: c622a908ee5889c3d3351579a5fc23fa65472e3e
x-imgix-render-farm: 01.1064
date: Sun, 05 Feb 2023 10:15:09 GMT
age: 1334138
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10074-SJC, cache-bma1634-BMA
x-cache: HIT, HIT
content-length: 8546
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/rela-gaming.png
200 OK 4.8 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/rela-gaming.png
IP
File type PNG image data, 273 x 135, 8-bit/color RGBA, non-interlaced\012- data
Hash c9bedd7123ad42428e2ec792776053a8
0925be562535b671f95ff19d90347a8fb6a7ffe1
32409ee3167289537c27f80696a05e8591ed3cabcb086263d0d08daea12d2e61
GET /uploads/media/DOC/home/rela-gaming.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Thu, 17 Nov 2022 14:40:10 GMT
server: imgix
x-imgix-id: 38553b988467576fe289bfd72122849582d88bc2
x-imgix-render-farm: 02.552
date: Sun, 05 Feb 2023 10:15:09 GMT
age: 2316088
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10083-SJC, cache-bma1634-BMA
x-cache: HIT, HIT
content-length: 4798
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/gaming.png
200 OK 6.6 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/gaming.png
IP
File type PNG image data, 243 x 120, 8-bit/color RGBA, non-interlaced\012- data
Hash f0c61bac2c685ab90cdeba03f39a73ff
db8a075fbe70ef285b8db7d68f79d17c9cf52aa3
b5b53a76e45279edccc190cb7603e0522f77e12b72b9b9d9075c937d53627ef9
GET /uploads/media/DOC/home/gaming.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 22 Jun 2022 15:01:49 GMT
server: imgix
x-imgix-id: e08772959adf441ed4d9752d5736f9155a238429
x-imgix-render-farm: 01.1064
date: Sun, 05 Feb 2023 10:15:09 GMT
age: 435432
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10081-SJC, cache-bma1634-BMA
x-cache: HIT, HIT
content-length: 6610
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/irondog.png
200 OK 5.8 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/irondog.png
IP
File type PNG image data, 231 x 114, 8-bit/color RGBA, non-interlaced\012- data
Hash c466772fc1afd400af737640c99f88a7
9ca1c550b69d2e5cb728c2a3668b2b35b0b0749e
e779742b7d5d724cb28028beb3ce8b72ebbbfea4c993fa19e01bb065cca77485
GET /uploads/media/DOC/home/irondog.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 09 Nov 2022 07:55:59 GMT
server: imgix
x-imgix-id: 07ade4d4a329aeebb13542f1a1f1753e6ef8e471
x-imgix-render-farm: 02.552
date: Sun, 05 Feb 2023 10:15:09 GMT
age: 2760360
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10081-SJC, cache-bma1634-BMA
x-cache: HIT, HIT
content-length: 5790
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/eyecon.png
200 OK 8.8 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/eyecon.png
IP
File type PNG image data, 264 x 132, 8-bit/color RGBA, non-interlaced\012- data
Hash 8766855d25ad3843eb33359112283e5d
a838120ce318c886ad64c1dd8ff488f7c6e0f0a4
f8a978ca8b36c3044558087bcbfc54cc5ea0a4a86823e00923f52071b0960e17
GET /uploads/media/DOC/home/eyecon.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 22 Jun 2022 15:01:49 GMT
server: imgix
x-imgix-id: 56676e6e25043441184ed26e5694070c5ef007ae
x-imgix-render-farm: 01.1064
date: Sun, 05 Feb 2023 10:15:09 GMT
age: 5263235
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10052-SJC, cache-bma1634-BMA
x-cache: HIT, HIT
content-length: 8776
X-Firefox-Spdy: h2
cmsapi.doggocasino.com/ajax/Faq/getQuestions?lang=no
200 OK 6.9 kB URL HTTP/1.1 cmsapi.doggocasino.com/ajax/Faq/getQuestions?lang=no
IP
File type JSON data\012- , ASCII text, with very long lines (50212), with no line terminators
Hash 46712c8114b6b2df3f50d69f2c7f96f5
ba2ea03bba7ff2af9f432739a774496d4eef540a
854ab5787fc1cefb0da2eb75c4b09de68cabf38a0738bb133964b542e9ef20ac
GET /ajax/Faq/getQuestions?lang=no HTTP/1.1
Host: cmsapi.doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://doggocasino.com
Connection: keep-alive
Referer: https://doggocasino.com/
Cookie: _ga_K4EHGY5F0T=GS1.1.1675592149.1.0.1675592149.60.0.0; _ga=GA1.1.88150227.1675592149; ci_session=i7cqnih09j6tss0kkpbqdrp42p2rt25p
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 05 Feb 2023 10:15:09 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Methods: GET, POST, OPTIONS, PUT, DELETE
Access-Control-Allow-Origin: https://doggocasino.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Request-ID,X-REQ-ID,Authorization,X-MGS-BusinessUnit,Accept-Language
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: ci_session=i7cqnih09j6tss0kkpbqdrp42p2rt25p; expires=Sun, 05-Feb-2023 11:15:09 GMT; Max-Age=3600; path=/; SameSite=None; secure; HttpOnly
Content-Encoding: gzip
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/northernlights.png
200 OK 9.7 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/northernlights.png
IP
File type PNG image data, 258 x 129, 8-bit/color RGBA, non-interlaced\012- data
Hash d00971dc7290a8d83d531bfe390dd39c
a2a9e0bd0d476994c9fb564a2976f254a865fccd
d9658fdd73aae24cab7d588506ca816cd6cbe7e6917169298e4a1167d71421f0
GET /uploads/media/DOC/home/northernlights.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 22 Jun 2022 15:01:49 GMT
server: imgix
x-imgix-id: 67a7b5399ebf644a1bcc51dfa0f74eb06dcd143e
x-imgix-render-farm: 01.1064
date: Sun, 05 Feb 2023 10:15:09 GMT
age: 2762295
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10081-SJC, cache-bma1634-BMA
x-cache: HIT, HIT
content-length: 9665
X-Firefox-Spdy: h2
doggocasino.com/assets/images/HeroBottom.webp
200 OK 8.6 kB URL HTTP/2 doggocasino.com/assets/images/HeroBottom.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash e7ca3e477ff57d76894214575d55ad47
e81dfea1456367bfb5a43735f377ef8d90ba9445
86b4f03b03f70a75fb273131f57ea8ec7c750f55ebb73f7acfe285b1c1df3e26
GET /assets/images/HeroBottom.webp HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/no-no?affiliateName=%5Bcellxpert%5D&affid=cx-35656_393091&bannerid=35656&trackerid=35656_393091&brand=doggocasino&bta=35656&rdk=rk1
Cookie: __adm_tid=tid-40b2b6784.455c98d38; _ga_K4EHGY5F0T=GS1.1.1675592149.1.0.1675592149.60.0.0; _ga=GA1.1.88150227.1675592149; affiliateId=cx-35656_393091; bannerId=35656; trackerId=35656_393091; affiliateName=%5Bcellxpert%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 8556
x-amz-meta-codebuild-content-sha256: 4f853d18badd3933524ca4a1dd6240279e0051fb38905b83f18834b4b93aaeb1
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:08219a5d-0b7c-4ae2-afb4-2507533d271d
x-amz-meta-codebuild-content-md5: 319cfed7654cbf4a61d9a3eabce3d2f4
last-modified: Fri, 03 Feb 2023 09:41:10 GMT
x-amz-version-id: n6sfRcR8khIp6_qgw41zU_a7X7YavhlN
server: AmazonS3
date: Sun, 05 Feb 2023 10:09:05 GMT
etag: "e7ca3e477ff57d76894214575d55ad47"
vary: Accept-Encoding
via: 1.1 96c778ce6156d12f24b8b6cdaa0cbf66.cloudfront.net (CloudFront)
age: 365
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: THh_qgVm6djYahke4S1JeIZky9FgEGuOB3LHqvd2bwOo6wLeZY8qwA==
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/mb-bottom.png
200 OK 945 B URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/mb-bottom.png
IP
File type PNG image data, 555 x 78, 8-bit colormap, non-interlaced\012- data
Hash afd8b1279d095eddad3f7ad8df9892a3
407841662fc47b2d82e8a0cba898163a8c4d86b7
58b09fba62fa08df503bddcf36cf9fdc0e6d08a9a7bd2cfa122fc34fc3f6b6a2
GET /uploads/media/DOC/home/mb-bottom.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Mon, 21 Nov 2022 14:38:42 GMT
server: imgix
x-imgix-id: f38d6f1739f6520a391d3ce5a825ff72c95647d2
x-imgix-render-farm: 02.552
date: Sun, 05 Feb 2023 10:15:09 GMT
age: 1550466
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10070-SJC, cache-bma1634-BMA
x-cache: HIT, HIT
content-length: 945
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/no-limit.png
200 OK 4.9 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/no-limit.png
IP
File type PNG image data, 282 x 141, 8-bit/color RGBA, non-interlaced\012- data
Hash a5a601b38f6b3b9f958d2eca3a4a45e5
6e1c5af69461c0cbcb4a03602018a9278a5d04aa
ea215374e2595992671808fdc26279914384c72d0c487829e0d85b7d50a71e81
GET /uploads/media/DOC/home/no-limit.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 22 Jun 2022 15:01:49 GMT
server: imgix
x-imgix-id: efbe04cd14966a572ec0249915fa8e9dbcb1ab6d
x-imgix-render-farm: 01.1064
date: Sun, 05 Feb 2023 10:15:09 GMT
age: 5705030
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10066-SJC, cache-bma1634-BMA
x-cache: HIT, HIT
content-length: 4863
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/elk-studios.png
200 OK 5.9 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/elk-studios.png
IP
File type PNG image data, 252 x 126, 8-bit/color RGBA, non-interlaced\012- data
Hash 51d08cb0697602f09624cc82bb4d5a55
e45470f8c08548f1048d9efd72799b7b09096673
10bdf4c280e8f097ab29f3829c19998b5a2f038a8e6b07537dbc9d777f35bbc7
GET /uploads/media/DOC/home/elk-studios.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 22 Jun 2022 15:01:49 GMT
server: imgix
x-imgix-id: d6c794d9b4d2226e40eb864af99da51781766fe9
x-imgix-render-farm: 02.552
date: Sun, 05 Feb 2023 10:15:09 GMT
age: 5609850
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10078-SJC, cache-bma1634-BMA
x-cache: HIT, HIT
content-length: 5941
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/deposit.svg
200 OK 650 B URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/deposit.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (782)
Hash ca812eca4d915271b2e433e47965572d
ad6042ddb3c5a74d706929cc9b0dde2f4388eccc
e00b74a45064d746f4eb3ed3be367b512638632d7549b2c724878603b94fb0c4
GET /uploads/media/DOC/home/deposit.svg HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 22 Jun 2022 15:01:49 GMT
content-encoding: gzip
server: imgix
x-imgix-id: e1ab6a5a4e01f54e3148750d4a24f87f38e5e6c6
x-imgix-render-farm: 01.1064
date: Sun, 05 Feb 2023 10:15:09 GMT
age: 1602008
accept-ranges: bytes
content-type: image/svg+xml
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10066-SJC, cache-bma1634-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
content-length: 650
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/withdrawals.svg
200 OK 635 B URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/withdrawals.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (738)
Hash 5cd653c6fe5eb1505ad2a9087ba43269
84a96f045d5cb4120d9074b6ab0cde7aee8a590b
6e1284f6e02ae5b5330b39440f2d9dc20610de477104b0e7aedfa9925fde8f1c
GET /uploads/media/DOC/home/withdrawals.svg HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 22 Jun 2022 15:01:49 GMT
content-encoding: gzip
server: imgix
x-imgix-id: e4311d3383c2ad74f7ba1374c5b43d24298d30ba
x-imgix-render-farm: 01.1064
date: Sun, 05 Feb 2023 10:15:09 GMT
age: 2312740
accept-ranges: bytes
content-type: image/svg+xml
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10035-SJC, cache-bma1634-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
content-length: 635
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/mc.png
200 OK 9.2 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/mc.png
IP
File type PNG image data, 156 x 156, 8-bit/color RGBA, non-interlaced\012- data
Hash c7dd6fdc3e16c819c88735699286ea81
90c72fd87afa0024ce87797a4709ae71370f89ab
f4ad70ee60ce0b2c8179c15fa2cb20f561901f02ffabb8c8abe59436a5bb1b1c
GET /uploads/media/DOC/home/mc.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Tue, 15 Nov 2022 11:12:25 GMT
server: imgix
x-imgix-id: 71ec1afef3eca3f1f98f543b8132f37911fbca73
x-imgix-render-farm: 02.552
date: Sun, 05 Feb 2023 10:15:09 GMT
age: 2327636
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10035-SJC, cache-bma1634-BMA
x-cache: HIT, HIT
content-length: 9166
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/interac.png
200 OK 2.7 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/interac.png
IP
File type PNG image data, 153 x 156, 8-bit colormap, non-interlaced\012- data
Hash 9b9b9143bf86f05cda2161cc7ffcc3c8
4a793f79be620d49a751984f2a7c3bea07176894
d34b0fa6f4a752d9eaeb192ae7810afe5938865ffc0f01032f4b6ec4c1d7b8f3
GET /uploads/media/DOC/home/interac.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Thu, 04 Aug 2022 10:16:05 GMT
server: imgix
x-imgix-id: c337a6e18e1448fc8779d3ec7ef196156870eedd
x-imgix-render-farm: 01.1064
date: Sun, 05 Feb 2023 10:15:09 GMT
age: 957190
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10052-SJC, cache-bma1634-BMA
x-cache: HIT, HIT
content-length: 2738
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/visa.png
200 OK 10 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/visa.png
IP
File type PNG image data, 156 x 156, 8-bit/color RGBA, non-interlaced\012- data
Hash 9c283e2c4040566cd8ad97b5866c9537
c61dd5f44d2f6473aeb0a71729928c5b94f5b623
349173c164101e5a60336be685e50f70df22ddcf0b84a87450bbfecc247b9d64
GET /uploads/media/DOC/home/visa.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Thu, 04 Aug 2022 10:16:05 GMT
server: imgix
x-imgix-id: 88dac5105999550cdf9409d7adb98c4a18b289bd
x-imgix-render-farm: 01.1064
date: Sun, 05 Feb 2023 10:15:09 GMT
age: 1026958
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10080-SJC, cache-bma1634-BMA
x-cache: HIT, HIT
content-length: 10038
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/ecashout.png
200 OK 2.6 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/ecashout.png
IP
File type PNG image data, 153 x 156, 8-bit colormap, non-interlaced\012- data
Hash a4c8123c11469403a676a4b6e6a5f301
321ba2a412968a39eb4e1ed9ed72b17b591d941d
a5fd2c66784ea49cb274ef2677c646762969e54b9371cdf556404f1e73483baf
GET /uploads/media/DOC/home/ecashout.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Thu, 04 Aug 2022 10:16:05 GMT
server: imgix
x-imgix-id: 3e26b2ca3455957e72976978f1a2570e54d129f4
x-imgix-render-farm: 01.1064
date: Sun, 05 Feb 2023 10:15:09 GMT
age: 920025
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10048-SJC, cache-bma1634-BMA
x-cache: HIT, HIT
content-length: 2616
X-Firefox-Spdy: h2
2d1c8d36-b9ba-45b7-87c9-e34c592a597a.seals-emr.certria.com/emr-seal.js
200 OK 10 kB URL HTTP/2 2d1c8d36-b9ba-45b7-87c9-e34c592a597a.seals-emr.certria.com/emr-seal.js
IP
Hash 9110f438e5aa062ba50e4a536f592051
5d9223785b5bbb828d7c618e975952695ad25fce
37fc8eba88f08378900cd83ea4834ee0dfa49888f389a39316b6a257f6668537
GET /emr-seal.js HTTP/1.1
Host: 2d1c8d36-b9ba-45b7-87c9-e34c592a597a.seals-emr.certria.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
date: Sun, 05 Feb 2023 10:11:46 GMT
x-powered-by: Express
cache-control: max-age=300
etag: W/"c0c-yf2ngFwFD3p7vr/AvutjqlWfJeQ"
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 794add26889139d0-FRA
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: V250sFRFK8OYVjgbB07Y-OVaOwYGhLiOpI6a9sAJDqm9knmE87E4UQ==
age: 202
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/wins-mobile.png
200 OK 114 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/wins-mobile.png
IP
File type PNG image data, 369 x 373, 8-bit/color RGB, non-interlaced\012- data
Size 114 kB (114315 bytes)
Hash 9254612cbe7dc5e08eaad1c7b3b9bed3
4b1b7c636758fd514c10fb40179a3321f4757946
3f10fa5c434f2dc9a35bdbbe807dca7fabb1180153cf1013ceeee70846a67119
GET /uploads/media/DOC/home/wins-mobile.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Tue, 09 Aug 2022 01:43:45 GMT
server: imgix
x-imgix-id: eac79f3b66edc102783146ea29a590751c3c4c39
x-imgix-render-farm: 01.1064
date: Sun, 05 Feb 2023 10:15:09 GMT
age: 1626826
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10026-SJC, cache-bma1634-BMA
x-cache: HIT, HIT
content-length: 114315
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/pragmatic-play.png
200 OK 10 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/pragmatic-play.png
IP
File type PNG image data, 276 x 138, 8-bit/color RGBA, non-interlaced\012- data
Hash 22799434150dca8d59bf7733f74db4b6
ff7b186d5249e3061a07724a50c9cc3f2b6e2aa1
23ed44cd444692fa3e48eb345878f1e394fbedcb34f26d3906b0ab1fe958d6a9
GET /uploads/media/DOC/home/pragmatic-play.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Tue, 15 Nov 2022 14:20:10 GMT
server: imgix
x-imgix-id: 0279be2c12197f837606a46b183386238670fa5b
x-imgix-render-farm: 02.552
date: Sun, 05 Feb 2023 10:15:09 GMT
age: 2316087
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10039-SJC, cache-bma1634-BMA
x-cache: HIT, HIT
content-length: 10517
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/dcs.png
200 OK 3.0 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/dcs.png
IP
File type PNG image data, 156 x 156, 8-bit colormap, non-interlaced\012- data
Hash 033e64d307fcfd62be869c5de0721c66
a2307ba759c902a98ec8af557f677929d2c0e28d
23050464c99491bdbff255e380dffcc5dbd1f69dffb401dc837dd3da9cfbcd54
GET /uploads/media/DOC/home/dcs.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Thu, 10 Nov 2022 08:39:47 GMT
server: imgix
x-imgix-id: 9ccc09c26693529650325830f9d0fe7f294a61f2
x-imgix-render-farm: 02.552
date: Sun, 05 Feb 2023 10:15:09 GMT
age: 2771697
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10069-SJC, cache-bma1634-BMA
x-cache: HIT, HIT
content-length: 3003
X-Firefox-Spdy: h2
scripts.prdredir.com/scripts/k_doggocasino.js
200 OK 5.9 kB URL HTTP/2 scripts.prdredir.com/scripts/k_doggocasino.js
IP
Hash 36688d5e7394124f3f23af90956ce044
d8694fdea5bff01b6c505fa7ac29c9477b0ec705
d7b3d6b36f326ffceee664060446c9df06d0e3f9f959ca740d02e3c7fc8b2ebe
GET /scripts/k_doggocasino.js HTTP/1.1
Host: scripts.prdredir.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 05 Feb 2023 10:15:09 GMT
content-type: text/javascript; charset=utf-8
status: 200 OK
cache-control: no-cache
access-control-allow-origin: *
x-request-id: dce57b4a-f772-4fca-88c7-d6761bc4ad18
etag: W/"95d838de11136e7964ca0eaa375bf294"
x-runtime: 0.010286
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JC2aeghe0WROky7Ih669I3C1ilYhNQ%2Fz95AfF7opGN5k2iala38F1crOO9Tg6jDs9dYOb2z94CqLkdyyDAb9LP%2BeqhGcen6EOLh8P4lvKiomTA87BXaweJD2ORXhFQno3OaCq7mfaQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 794ae21a68e2b500-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/bitcash.png
200 OK 18 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/bitcash.png
IP
File type PNG image data, 174 x 174, 8-bit/color RGBA, non-interlaced\012- data
Hash e68bafdc431bb7237b47260e8d9bc046
a0fa8db91a6ac0ad63898d7407977e7782e32180
59fd94e8ca42bbd652ab2c1af7061afd79bf98bd2b7e4ad1256bcba73e9629a3
GET /uploads/media/DOC/home/bitcash.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Thu, 04 Aug 2022 10:16:06 GMT
server: imgix
x-imgix-id: 5452e6db461140babb5d6935a851bcb990ba0848
x-imgix-render-farm: 01.1064
x-imgix-original-status: 200
date: Sun, 05 Feb 2023 10:15:09 GMT
age: 7658845
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10045-SJC, cache-bma1634-BMA
x-cache: HIT, HIT
content-length: 18036
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/live-casino-alt.png
200 OK 932 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/live-casino-alt.png
IP
File type PNG image data, 1239 x 801, 8-bit/color RGBA, non-interlaced\012- data
Size 932 kB (931521 bytes)
Hash a3113ee83d7cfdda8586b419310bdcc1
601ddede664b13671e9dc48c58e5366c9fd2028e
ba00e861f4fe98eb485ddfd62a83960ee46462037e8362a5cecdbec96a7d440e
GET /uploads/media/DOC/home/live-casino-alt.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 22 Jun 2022 15:01:49 GMT
server: imgix
x-imgix-id: 69e39fc14e96226724fcf92fcdd1ddc3c6f1a238
x-imgix-render-farm: 01.1064
date: Sun, 05 Feb 2023 10:15:09 GMT
age: 2769233
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10033-SJC, cache-bma1634-BMA
x-cache: HIT, HIT
content-length: 931521
X-Firefox-Spdy: h2
doggocasino.com/assets/images/banner/banner-desktop.webp
200 OK 78 kB URL HTTP/2 doggocasino.com/assets/images/banner/banner-desktop.webp
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1917x602, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash bc3a30c00fa79b2656a24cad032aadd9
643021f5fcb6bc3ee3df627b5ec52133a54f448d
8e9c830b777176c1c96cafa9df0014f8a6db2a953524884b67ab5281df9dc2b1
GET /assets/images/banner/banner-desktop.webp HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/en-us?affiliateName=[cellxpert]&affid=cx-35656_393091&bannerid=35656&trackerid=35656_393091&brand=doggocasino&bta=35656&rdk=rk1
Cookie: __adm_tid=tid-40b2b6784.455c98d38; _ga_K4EHGY5F0T=GS1.1.1675592149.1.0.1675592149.60.0.0; _ga=GA1.1.88150227.1675592149; affiliateId=cx-35656_393091; bannerId=35656; trackerId=35656_393091; affiliateName=%5Bcellxpert%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 78070
date: Sat, 04 Feb 2023 12:55:54 GMT
x-amz-meta-codebuild-content-sha256: 4f853d18badd3933524ca4a1dd6240279e0051fb38905b83f18834b4b93aaeb1
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:08219a5d-0b7c-4ae2-afb4-2507533d271d
x-amz-meta-codebuild-content-md5: 319cfed7654cbf4a61d9a3eabce3d2f4
last-modified: Fri, 03 Feb 2023 09:41:07 GMT
x-amz-version-id: 1R8hWN_XnN91nyaPw26x5X5Vt1ltWzA4
etag: "bc3a30c00fa79b2656a24cad032aadd9"
server: AmazonS3
via: 1.1 96c778ce6156d12f24b8b6cdaa0cbf66.cloudfront.net (CloudFront)
age: 76756
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: ni7bTbTZyBMulvobKl4gFFiGhnpYrUbGkG-kYN40xbxZ6fW2Lm5blQ==
X-Firefox-Spdy: h2
event.iconvert.network/com.snowplowanalytics.snowplow/tp2
200 OK 2 B URL HTTP/2 event.iconvert.network/com.snowplowanalytics.snowplow/tp2
IP
File type ASCII text, with no line terminators
Hash 444bcb3a3fcf8389296c49467f27e1d6
7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1
Host: event.iconvert.network
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
Content-Length: 718
Origin: https://doggocasino.com
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 10:15:09 GMT
content-type: text/plain; charset=UTF-8
content-length: 2
set-cookie: sp=7d2843fa-038c-4ea9-a653-ac105c6c29e9; Expires=Mon, 05 Feb 2024 10:15:09 GMT; Path=/
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA"
access-control-allow-origin: https://doggocasino.com
access-control-allow-credentials: true
server: akka-http/10.0.9
X-Firefox-Spdy: h2
cmsapi.doggocasino.com/languages/DOC/no.json
200 OK 26 kB URL HTTP/1.1 cmsapi.doggocasino.com/languages/DOC/no.json
IP
File type JSON data\012- HTML document, Unicode text, UTF-8 text, with very long lines (2182), with CRLF line terminators
Hash 1219d866e83bb2b04dfc3dca0fdd5ac7
ce50b073683a0e73e9053688c1862d93fa1493ca
18e7a8f2eb7ea269f749e2fa35b8065b160c918b287912ab0392b699fdbc8632
GET /languages/DOC/no.json HTTP/1.1
Host: cmsapi.doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://doggocasino.com
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 05 Feb 2023 10:15:09 GMT
Content-Type: application/json
Last-Modified: Fri, 03 Feb 2023 14:27:38 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63dd19da-1e407"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS, HEAD
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,x-prerender,x-req-id
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
cmsapi.doggocasino.com/ajax/promotion/getPromotions?languageId=no
200 OK 8.3 kB URL HTTP/1.1 cmsapi.doggocasino.com/ajax/promotion/getPromotions?languageId=no
IP
File type JSON data\012- HTML document text\012- HTML document, ASCII text, with very long lines (35109), with no line terminators
Hash 6346a631a54f858b43de87125a4f9304
c39ae55746ed4cead741f299241808cf9056346f
3d3e4bfee6846372db46e1b742f38c0cbbb32368cfe6b1043cb9b32242a270ba
GET /ajax/promotion/getPromotions?languageId=no HTTP/1.1
Host: cmsapi.doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://doggocasino.com
Connection: keep-alive
Referer: https://doggocasino.com/
Cookie: _ga_K4EHGY5F0T=GS1.1.1675592149.1.0.1675592149.60.0.0; _ga=GA1.1.88150227.1675592149; ci_session=i7cqnih09j6tss0kkpbqdrp42p2rt25p
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 05 Feb 2023 10:15:09 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Methods: GET, POST, OPTIONS, PUT, DELETE
Access-Control-Allow-Origin: https://doggocasino.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Request-ID,X-REQ-ID,Authorization,X-MGS-BusinessUnit,Accept-Language
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: ci_session=i7cqnih09j6tss0kkpbqdrp42p2rt25p; expires=Sun, 05-Feb-2023 11:15:09 GMT; Max-Age=3600; path=/; SameSite=None; secure; HttpOnly
Content-Encoding: gzip
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/dogecoin.png
200 OK 15 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/dogecoin.png
IP
File type PNG image data, 165 x 168, 8-bit/color RGBA, non-interlaced\012- data
Hash 1e9329b8bf799a9b826f3a29b4f176c9
202c3b7f110e6a0f02cc57c4a5b9c2a0a04b0c91
c1bb8bbda40d80955c710bc3a20910eda13844db3ed1936d860de6f7bcd959ba
GET /uploads/media/DOC/home/dogecoin.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Tue, 06 Dec 2022 07:58:34 GMT
server: imgix
x-imgix-id: fc503aa9afa89a90aaf56ea71b88f68ee2952f9a
x-imgix-render-farm: 02.552
date: Sun, 05 Feb 2023 10:15:09 GMT
age: 1029760
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10060-SJC, cache-bma1634-BMA
x-cache: HIT, HIT
content-length: 15219
X-Firefox-Spdy: h2
doggocasino.com/assets/fonts/CeraPro/Cera_Pro_Bold.otf
200 OK 189 kB URL HTTP/2 doggocasino.com/assets/fonts/CeraPro/Cera_Pro_Bold.otf
IP
File type OpenType font data\012- data
Size 189 kB (189056 bytes)
Hash 07ac815392d30140366e0a9df7f769e8
baa64ee6efc7331cbe288054213ae1eb3d4836a1
ca2bcc9e894e0a755a49f8d264bed726717c0033e6f2dcc8e888bf80ac57bbaa
GET /assets/fonts/CeraPro/Cera_Pro_Bold.otf HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/styles.6fe09080dd4bc8174585.css
Cookie: __adm_tid=tid-40b2b6784.455c98d38; _ga_K4EHGY5F0T=GS1.1.1675592149.1.0.1675592149.60.0.0; _ga=GA1.1.88150227.1675592149; affiliateId=cx-35656_393091; bannerId=35656; trackerId=35656_393091; affiliateName=%5Bcellxpert%5D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 189056
x-amz-meta-codebuild-content-sha256: 4f853d18badd3933524ca4a1dd6240279e0051fb38905b83f18834b4b93aaeb1
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:08219a5d-0b7c-4ae2-afb4-2507533d271d
x-amz-meta-codebuild-content-md5: 319cfed7654cbf4a61d9a3eabce3d2f4
last-modified: Fri, 03 Feb 2023 09:41:13 GMT
x-amz-version-id: hfSJd_1NlHPLjzcPzm2YDuWZ4eCkzco_
server: AmazonS3
date: Sun, 05 Feb 2023 10:09:20 GMT
etag: "07ac815392d30140366e0a9df7f769e8"
vary: Accept-Encoding
via: 1.1 96c778ce6156d12f24b8b6cdaa0cbf66.cloudfront.net (CloudFront)
age: 352
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: aPLJmoFvLtmVm-p50tyJ7ZdNkoRwifyNxNeRZZa8uqaJSF8X11B8JA==
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/micro-gaming.png
200 OK 12 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/micro-gaming.png
IP
File type PNG image data, 273 x 135, 8-bit/color RGBA, non-interlaced\012- data
Hash ad498e425bc190d412243470877e08c1
c7286f96e9b48afe1e0388495c6a23121688aa3d
cda4cfc287ffe13972fef5287357eb52c9bd72a3d1edb47afdb196368509883e
GET /uploads/media/DOC/home/micro-gaming.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 22 Jun 2022 15:01:49 GMT
server: imgix
x-imgix-id: e72faedce2955be12a47e50d32f6c5563952e8d5
x-imgix-render-farm: 01.1064
date: Sun, 05 Feb 2023 10:15:09 GMT
age: 2754500
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10049-SJC, cache-bma1634-BMA
x-cache: HIT, HIT
content-length: 11685
X-Firefox-Spdy: h2
doggocasino.com/icomoon.45820165eb8af3713881.ttf
200 OK 29 kB URL HTTP/2 doggocasino.com/icomoon.45820165eb8af3713881.ttf
IP
File type TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, icomoon \012- data
Hash eb718388a17dd6957510fb000e72e3cd
e05feec86f5b7297637a5fc431ab9d1963e2812b
c38790685fe44d27066c46fe406fbf0edef47872cefa44a342e7a25171897200
GET /icomoon.45820165eb8af3713881.ttf HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/styles.6fe09080dd4bc8174585.css
Cookie: __adm_tid=tid-40b2b6784.455c98d38; _ga_K4EHGY5F0T=GS1.1.1675592149.1.0.1675592149.60.0.0; _ga=GA1.1.88150227.1675592149; affiliateId=cx-35656_393091; bannerId=35656; trackerId=35656_393091; affiliateName=%5Bcellxpert%5D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 28764
x-amz-meta-codebuild-content-sha256: 4f853d18badd3933524ca4a1dd6240279e0051fb38905b83f18834b4b93aaeb1
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:08219a5d-0b7c-4ae2-afb4-2507533d271d
x-amz-meta-codebuild-content-md5: 319cfed7654cbf4a61d9a3eabce3d2f4
last-modified: Fri, 03 Feb 2023 09:41:15 GMT
x-amz-version-id: n_I2L5wf2eUi5YO1ObqAj3.QHKOtw8W1
server: AmazonS3
date: Sun, 05 Feb 2023 10:09:18 GMT
etag: "eb718388a17dd6957510fb000e72e3cd"
vary: Accept-Encoding
via: 1.1 96c778ce6156d12f24b8b6cdaa0cbf66.cloudfront.net (CloudFront)
age: 352
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: PlTDvcx6YFpeijIUI7B_BABIqBIJS79ZKsVBWDP_p2kSVgSHlbPh_g==
X-Firefox-Spdy: h2
geo-lookup.iconvert.network/?callback=_jsonp_0
200 OK 23 B URL HTTP/2 geo-lookup.iconvert.network/?callback=_jsonp_0
IP
File type ASCII text, with no line terminators
Hash 77a2b27581b0e6f8e1866d12a9fb3460
0d6912f1aabf2f9f191883767a565846b6b23387
892b6da823563cbd0865b33fd6f805e495769f555aa11679fa72c82e56abe9fd
GET /?callback=_jsonp_0 HTTP/1.1
Host: geo-lookup.iconvert.network
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 23
x-amz-bucket-region: us-east-1
date: Sun, 05 Feb 2023 10:15:09 GMT
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Pw3d5sWVGJvdWt2XZ8qyN3_5feP13GQjkYKgDAqmL3nS8e9FwJ8rAQ==
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/litecoin-new.png
200 OK 14 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/litecoin-new.png
IP
File type PNG image data, 165 x 168, 8-bit/color RGBA, non-interlaced\012- data
Hash 9bc85726c5ca5e2a3d2a555a615c4256
049d4828511ea4d2bd01bb5f8a465885e6e9d704
9fd49d747b0dff0642c22a38a5fe92f32b56c91b99a1bb985e29c478a31776a1
GET /uploads/media/DOC/home/litecoin-new.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Mon, 08 Aug 2022 06:13:29 GMT
server: imgix
x-imgix-id: 1d79ca603728b492e30fc6063c44aa9ed0e32776
x-imgix-render-farm: 02.552
date: Sun, 05 Feb 2023 10:15:09 GMT
age: 2762294
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10029-SJC, cache-bma1634-BMA
x-cache: HIT, HIT
content-length: 14490
X-Firefox-Spdy: h2
ocsp.entrust.net/
200 OK 1.6 kB IP
Hash 1d4ec2a1523baa4df039fe9ca0d25d50
f321ed9982a62a365af22631899a193843fa7e40
8dba86a444cf7fa52fa35587edd25d14361520da5682ae6bccb014e492d82d60
POST / HTTP/1.1
Host: ocsp.entrust.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
ETag: "8DBA86A444CF7FA52FA35587EDD25D14361520DA5682AE6BCCB014E492D82D60"
Last-Modified: Sun, 05 Feb 2023 08:00:00 UTC
Content-Length: 1588
Cache-Control: public, no-transform, must-revalidate, max-age=3136
Expires: Sun, 05 Feb 2023 11:07:25 GMT
Date: Sun, 05 Feb 2023 10:15:09 GMT
Connection: keep-alive
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/etr-new.png
200 OK 5.1 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/etr-new.png
IP
File type PNG image data, 165 x 168, 8-bit/color RGBA, non-interlaced\012- data
Hash 5ede2b5b941cae8778d7dfa1354b6f10
6f02fcc2a92339e5bb2eb0a96962f89513ac7922
826c3ed09f7501644f305aebf992d904f308bbae1f25e5449d02de013d5a3fdb
GET /uploads/media/DOC/home/etr-new.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Mon, 08 Aug 2022 06:13:29 GMT
server: imgix
x-imgix-id: 3b2ead74ea6cd94bfd31a9fdc7776d9a0bcae2b0
x-imgix-render-farm: 01.1064
date: Sun, 05 Feb 2023 10:15:09 GMT
age: 1713273
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10030-SJC, cache-bma1634-BMA
x-cache: HIT, HIT
content-length: 5095
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/ripple-new.png
200 OK 2.9 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/ripple-new.png
IP
File type PNG image data, 165 x 168, 8-bit colormap, non-interlaced\012- data
Hash 2aef5169d3eefdcac4fa852082d208c7
ef02e2b0d695d24bb8ca48fe6101dc118703d4ea
761cc6f5576279ba59dbe0ed38d8faae2291c1cb658ac6d4425e6d0274360b2b
GET /uploads/media/DOC/home/ripple-new.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Mon, 08 Aug 2022 06:13:29 GMT
server: imgix
x-imgix-id: 079749a8a2854bb2e686e1adf63b9585024b4945
x-imgix-render-farm: 02.552
date: Sun, 05 Feb 2023 10:15:09 GMT
age: 7080394
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10059-SJC, cache-bma1634-BMA
x-cache: HIT, HIT
content-length: 2921
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/casino-mobile.png
200 OK 133 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/casino-mobile.png
IP
File type PNG image data, 371 x 397, 8-bit/color RGB, non-interlaced\012- data
Size 133 kB (133402 bytes)
Hash 36f9ecfb460d0de18df1ce7defb10711
b7ee68bd6d2c91ac3d85a452c53974a61cf6d1f0
75db45a28f5b61014fc62b70588a10a644f06cc20dc4f6769acdb10059c0a1b1
GET /uploads/media/DOC/home/casino-mobile.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Tue, 09 Aug 2022 01:43:47 GMT
server: imgix
x-imgix-id: f8e8ed07a51d1fa5e117ddaac64a2417a8b5a884
x-imgix-render-farm: 01.1064
date: Sun, 05 Feb 2023 10:15:09 GMT
age: 2762294
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10029-SJC, cache-bma1634-BMA
x-cache: HIT, HIT
content-length: 133402
X-Firefox-Spdy: h2
static.zdassets.com/web_widget/latest/web-widget-framework-c82fe813e62b58e096bc.js
200 OK 51 kB URL HTTP/2 static.zdassets.com/web_widget/latest/web-widget-framework-c82fe813e62b58e096bc.js
IP
File type Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Hash 9706954aca6962de0583c52576a93ea5
2d53581822b76f0c572b4a5426b46f90a2305ee2
3217eec16102d0ff25804fe1fdbfdf3e7247addfd280c20118d8c2e7f1506e33
GET /web_widget/latest/web-widget-framework-c82fe813e62b58e096bc.js HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 10:15:09 GMT
content-type: application/javascript; charset=utf-8
x-amz-id-2: ndff87uIS/sesGzUKeSADcGds13tZiq25CUrjWZEdXa2jMUAkmL2pmb5JKzj+ohOz6faFpkS9ww=
x-amz-request-id: MJRJ9ZGS34G4N411
x-amz-replication-status: COMPLETED
last-modified: Mon, 30 Jan 2023 01:09:01 GMT
etag: W/"5c97db2a2d29c595e26430d1c8358d6a"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Tue, 30 Jan 2024 01:09:00 GMT
x-amz-version-id: 1cCOlxhNqu17ys_QySYbf1YbpGnPAUXV
cf-cache-status: HIT
age: 361937
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LVgVRSB295vNyEAYp4K817%2FwDfC%2FaSNRlPXvUX445l5CpWlApoT93MRKq7i1PU17ECehUcKF%2F7HtYQqoBpP41Kh6nzRHGrCjAq0uPCDbT%2B7WlZ5MoE5GtllXgdw%2BWxrY3JhTSTA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 794ae21cada90b55-OSL
content-encoding: br
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/email.svg
200 OK 410 B URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/email.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (389)
Hash 2f7202492e5cd91e315802476d9f7050
e9e01da01a0cbbff43c54e87ec5394f76e06b179
1568eaef10ca3c8f76a6eac52e7179142ce19db9b872122bdcec5264bd118b9b
GET /uploads/media/DOC/home/email.svg HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 09 Nov 2022 10:28:05 GMT
content-encoding: gzip
server: imgix
x-imgix-id: cf506c30afd516dd73e92c439c2359a2ff562aaa
x-imgix-render-farm: 02.552
date: Sun, 05 Feb 2023 10:15:09 GMT
age: 7080393
accept-ranges: bytes
content-type: image/svg+xml
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10026-SJC, cache-bma1634-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
content-length: 410
X-Firefox-Spdy: h2
adjs.media/hit/doggocasino.gif?date=1675592149141&page=https%3A%2F%2Fdoggocasino.com%2Fen-us%3FaffiliateName%3D%255Bcellxpert%255D%26affid%3Dcx-35656_393091%26bannerid%3D35656%26trackerid%3D35656_393091%26brand%3Ddoggocasino%26bta%3D35656%26rdk%3Drk1&ref=&tid=tid-40b2b6784.455c98d38
200 OK 241 kB URL HTTP/2 adjs.media/hit/doggocasino.gif?date=1675592149141&page=https%3A%2F%2Fdoggocasino.com%2Fen-us%3FaffiliateName%3D%255Bcellxpert%255D%26affid%3Dcx-35656_393091%26bannerid%3D35656%26trackerid%3D35656_393091%26brand%3Ddoggocasino%26bta%3D35656%26rdk%3Drk1&ref=&tid=tid-40b2b6784.455c98d38
IP
File type ASCII text, with very long lines (65523)
Size 241 kB (241305 bytes)
Hash f495c3aa055d4da0d160d45ab648d08d
5971694b53f74ca205aa9b530b091831c9d7153d
f5b1e0b041f1ed65bd3a11445b442ce0e062a606c9c522e240d481cebe882e43
GET /hit/doggocasino.gif?date=1675592149141&page=https%3A%2F%2Fdoggocasino.com%2Fen-us%3FaffiliateName%3D%255Bcellxpert%255D%26affid%3Dcx-35656_393091%26bannerid%3D35656%26trackerid%3D35656_393091%26brand%3Ddoggocasino%26bta%3D35656%26rdk%3Drk1&ref=&tid=tid-40b2b6784.455c98d38 HTTP/1.1
Host: adjs.media
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://doggocasino.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 10:15:09 GMT
content-type: text/javascript; charset=utf-8
status: 200 OK
cache-control: no-cache
access-control-allow-origin: *
referrer-policy: strict-origin-when-cross-origin
x-permitted-cross-domain-policies: none
x-xss-protection: 1; mode=block
x-request-id: 1bded71d-8565-4fdc-8b14-c98dccf45c37
x-download-options: noopen
etag: W/"b3cbc7c41460088f2f619fc7b81fea04"
x-runtime: 0.012254
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Y%2BObA6aGPX6Ga2fUzhSNvUeyuJzau%2BovYb1TkFGnXBqrS6lvRmM8p1QBITP1buyiGQSp6KdkXrsylqXTAAKPTuDcO%2BLsC9o7e4g1Jiptq2Mm%2FdjIQZefMHrvj1BS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 794ae21b9d26b4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/bitcoin.png
200 OK 19 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/bitcoin.png
IP
File type PNG image data, 156 x 156, 8-bit/color RGBA, non-interlaced\012- data
Hash cd562a1e7de9e5bd919fed61dffcaf85
fd9c91b81380bdd4ced09ad4f55a859d1df908f0
c4d20189a065ee8bdc172576d404b4a7a5798a94449ca2c093b4b79e33ded24a
GET /uploads/media/DOC/home/bitcoin.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Thu, 04 Aug 2022 10:16:05 GMT
server: imgix
x-imgix-id: 65feeb2e7f5a33af503a917d123e59c58e65a7e6
x-imgix-render-farm: 01.1064
date: Sun, 05 Feb 2023 10:15:09 GMT
age: 2672947
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10057-SJC, cache-bma1634-BMA
x-cache: HIT, HIT
content-length: 18782
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/live-chat.svg
200 OK 839 B URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/live-chat.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (734)
Hash 83446e4d2f06186a15149eaff721bc82
be4daa2a3cdefe196af997d3859abd0137c2b46c
19e16d18413d121628f7ea88a731632d27f18ff3760dbb693f855f0878372c9d
GET /uploads/media/DOC/home/live-chat.svg HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Thu, 09 Jun 2022 04:34:39 GMT
content-encoding: gzip
server: imgix
x-imgix-id: 4b3de38e2392e00f600484d978499ce447f38500
x-imgix-render-farm: 01.1064
date: Sun, 05 Feb 2023 10:15:09 GMT
age: 7089927
accept-ranges: bytes
content-type: image/svg+xml
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10023-SJC, cache-bma1634-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
content-length: 839
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/doggo-footer.svg
200 OK 1.3 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/doggo-footer.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2775)
Hash bdc5623deb6ed892390913e3304372c2
f7f0db9505e566f2691fa9fde28f748cf30ea0d7
d39e58f66daed5cfbac2331e27fdf1f831200b828fd7c601f0740669330b5965
GET /uploads/media/DOC/home/doggo-footer.svg HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 22 Jun 2022 15:01:49 GMT
content-encoding: gzip
server: imgix
x-imgix-id: 757a0a7dcdac30202c138b8e77101b97e0785ca6
x-imgix-render-farm: 01.1064
date: Sun, 05 Feb 2023 10:15:09 GMT
age: 1636802
accept-ranges: bytes
content-type: image/svg+xml
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10058-SJC, cache-bma1634-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
content-length: 1271
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/faq-mobile.png
200 OK 128 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/faq-mobile.png
IP
File type PNG image data, 364 x 359, 8-bit/color RGB, non-interlaced\012- data
Size 128 kB (127922 bytes)
Hash a7fb206443a401aac5e0da3d3157bd4e
3b767d26f8ff846b345042e358f9685a994f3bda
ce580ea6b4e038bf83f50d103c8f90c9f57f817f9395dfdcbeb9595961f5a6d7
GET /uploads/media/DOC/home/faq-mobile.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Tue, 09 Aug 2022 01:55:49 GMT
server: imgix
x-imgix-id: 73ac324052a1a0ac575782492e7019db4da31b8d
x-imgix-render-farm: 01.1064
date: Sun, 05 Feb 2023 10:15:09 GMT
age: 2762293
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10025-SJC, cache-bma1634-BMA
x-cache: HIT, HIT
content-length: 127922
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/game-providers.png
200 OK 94 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/game-providers.png
IP
File type PNG image data, 1745 x 182, 8-bit/color RGBA, non-interlaced\012- data
Hash 81248b605a052a84ea52f8c2a21eb566
cd779dc72ba988847e98bef0e526eda8d6dacc0b
8c673f835da44c70b9e1c111baeac722e344c79c6e8a9ad0e1ef0d848f4ca82d
GET /uploads/media/DOC/home/game-providers.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 22 Jun 2022 15:01:49 GMT
server: imgix
x-imgix-id: 7935679a203964ba0a03a53a8e969edf1805772a
x-imgix-render-farm: 02.552
date: Sun, 05 Feb 2023 10:15:09 GMT
age: 4653439
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10026-SJC, cache-bma1634-BMA
x-cache: HIT, HIT
content-length: 93464
X-Firefox-Spdy: h2
doggocasino-images-prd.imgix.net/uploads/media/DOC/images/9kzygv6fx-8kpi8m203-8kpgg29wu-gift-box-thicker.svg
200 OK 941 B URL HTTP/2 doggocasino-images-prd.imgix.net/uploads/media/DOC/images/9kzygv6fx-8kpi8m203-8kpgg29wu-gift-box-thicker.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 76be76f2a7dec465f2452f35658a2e09
0f1bbf98737266b676a2c4b32b1544168e73943b
6ae9272128515c2144e856126178a61c16ab6db3c0a613d8dce9f483164d08d4
GET /uploads/media/DOC/images/9kzygv6fx-8kpi8m203-8kpgg29wu-gift-box-thicker.svg HTTP/1.1
Host: doggocasino-images-prd.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 09 Nov 2022 10:27:54 GMT
content-encoding: gzip
server: imgix
x-imgix-id: dca396a7354741d934f8c0e436aef0cc54830bb3
x-imgix-render-farm: 02.552
date: Sun, 05 Feb 2023 10:15:09 GMT
age: 7085100
accept-ranges: bytes
content-type: image/svg+xml
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10043-SJC, cache-bma1634-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
content-length: 941
X-Firefox-Spdy: h2
doggocasino-images-prd.imgix.net/uploads/media/DOC/images/9kzyghkpt-8kpegzft6-8kpbpz732-LiveCasino-Icon.svg
200 OK 2.1 kB URL HTTP/2 doggocasino-images-prd.imgix.net/uploads/media/DOC/images/9kzyghkpt-8kpegzft6-8kpbpz732-LiveCasino-Icon.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2535)
Hash ca090d9ae105fcebb45202ad645b0d96
8e8d212ed026415b9b1aff0abb680594351275a7
5b0e17ce4aef9bbed4e7376bbcc564c3a4a9b649f80f7c40d8ac2306e36b9592
GET /uploads/media/DOC/images/9kzyghkpt-8kpegzft6-8kpbpz732-LiveCasino-Icon.svg HTTP/1.1
Host: doggocasino-images-prd.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Fri, 06 May 2022 13:28:14 GMT
content-encoding: gzip
server: imgix
x-imgix-id: f2fceca1e8d3249e4ad06449ba8312bfff794c54
x-imgix-render-farm: 01.1064
date: Sun, 05 Feb 2023 10:15:09 GMT
age: 2307163
accept-ranges: bytes
content-type: image/svg+xml
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10083-SJC, cache-bma1634-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
content-length: 2068
X-Firefox-Spdy: h2
doggocasino-images-prd.imgix.net/uploads/media/DOC/images/9kzyghkni-akqaph2rd-CasinoIcon.svg
200 OK 767 B URL HTTP/2 doggocasino-images-prd.imgix.net/uploads/media/DOC/images/9kzyghkni-akqaph2rd-CasinoIcon.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1076)
Hash 59a7c757952f4e73719f399cd6616389
e7a24c2b840a5c55ca3e62461675009c9928917e
79466ff238e8321bec8616124c08f8800952547ae9e89f88dad9d764c913c224
GET /uploads/media/DOC/images/9kzyghkni-akqaph2rd-CasinoIcon.svg HTTP/1.1
Host: doggocasino-images-prd.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Fri, 06 May 2022 13:28:13 GMT
content-encoding: gzip
server: imgix
x-imgix-id: c3a01bbfb844dd7c35f90c9385b96ac4a937f2e3
x-imgix-render-farm: 01.1064
date: Sun, 05 Feb 2023 10:15:09 GMT
age: 2761784
accept-ranges: bytes
content-type: image/svg+xml
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10069-SJC, cache-bma1634-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
content-length: 767
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/grey-shape.svg
200 OK 268 B URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/grey-shape.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text
Hash e67eb7098ee71853fcbbbe3c95e0d0ec
1f2455492bab9ed1dba60056bbcd67178f2ee37a
5e65e35f0d76280d27163d29f5064bd628d1cc13f7e8fdae7cd8650391eefc7f
GET /uploads/media/DOC/home/grey-shape.svg HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Tue, 08 Nov 2022 09:02:38 GMT
content-encoding: gzip
server: imgix
x-imgix-id: cb2acdc5691cb7ede86c57e7e0aba797c670abfb
x-imgix-render-farm: 02.552
date: Sun, 05 Feb 2023 10:15:09 GMT
age: 1645170
accept-ranges: bytes
content-type: image/svg+xml
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10034-SJC, cache-bma1634-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
content-length: 268
X-Firefox-Spdy: h2
api2.gameassists.co.uk/casino/progressive/public/v1/counters?currencyIsoCode=NOK
200 OK 7.3 kB URL HTTP/1.1 api2.gameassists.co.uk/casino/progressive/public/v1/counters?currencyIsoCode=NOK
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (60969), with no line terminators
Hash ac9153f94565bbc78bb61f5099736f67
e2ec1985fea692c38189b3c547e98eecc5e63a6a
5758e136e92aab51a4835166488b39fc49ced5d43b31a74ba8c25016244ee34b
GET /casino/progressive/public/v1/counters?currencyIsoCode=NOK HTTP/1.1
Host: api2.gameassists.co.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://doggocasino.com
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: no-cache
Pragma: no-cache
Content-Type: application/json; charset=utf-8
Expires: -1
Server:
X-CorrelationId: 02f96670-ba8d-441c-8ec8-b051055c4b7e
X-Api-Version: 1.0.5.152
Access-Control-Allow-Origin: https://doggocasino.com
Access-Control-Allow-Credentials: true
Access-Control-Expose-Headers: X-CorrelationId
X-AspNet-Version: 4.0.30319
Request-Context: appId=cid-v1:39298cf6-0891-47ba-9f29-1f161231208d
Date: Sun, 05 Feb 2023 10:15:09 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 7329
Connection: Keep-Alive
cmsapi.doggocasino.com/ajax/game/getLobbyGameGroupGames?languageId=en
200 OK 107 kB URL HTTP/1.1 cmsapi.doggocasino.com/ajax/game/getLobbyGameGroupGames?languageId=en
IP
File type JSON data\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (65536), with no line terminators
Size 107 kB (107391 bytes)
Hash a5be08571f4d4660f5d3f067c1422c2d
736e44869010feef945eeb4165bf037d7c487ca0
2ac9a66f469b8d16b76c9d2b23351ce4b6eaf419f6c7feeee149964d0f42eef1
GET /ajax/game/getLobbyGameGroupGames?languageId=en HTTP/1.1
Host: cmsapi.doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://doggocasino.com
Connection: keep-alive
Referer: https://doggocasino.com/
Cookie: _ga_K4EHGY5F0T=GS1.1.1675592149.1.0.1675592149.60.0.0; _ga=GA1.1.88150227.1675592149; ci_session=i7cqnih09j6tss0kkpbqdrp42p2rt25p
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 05 Feb 2023 10:15:09 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Methods: GET, POST, OPTIONS, PUT, DELETE
Access-Control-Allow-Origin: https://doggocasino.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Request-ID,X-REQ-ID,Authorization,X-MGS-BusinessUnit,Accept-Language
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: ci_session=i7cqnih09j6tss0kkpbqdrp42p2rt25p; expires=Sun, 05-Feb-2023 11:15:09 GMT; Max-Age=3600; path=/; SameSite=None; secure; HttpOnly
Content-Language: en
Vary: Accept-Encoding, Accept-Encoding
Content-Encoding: gzip
region1.analytics.google.com/g/collect?v=2&tid=G-K4EHGY5F0T>m=45je3210&_p=595916355&_gaz=1&cid=88150227.1675592149&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675592149&sct=1&seg=0&dl=https%3A%2F%2Fdoggocasino.com%2Fen-us%3FaffiliateName%3D%255Bcellxpert%255D%26affid%3Dcx-35656_393091%26bannerid%3D35656%26trackerid%3D35656_393091%26brand%3Ddoggocasino%26bta%3D35656%26rdk%3Drk1&dt=Doggo%20Casino&en=page_view&_fv=1&_nsi=1&_ss=1
204 No Content 0 B URL HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-K4EHGY5F0T>m=45je3210&_p=595916355&_gaz=1&cid=88150227.1675592149&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675592149&sct=1&seg=0&dl=https%3A%2F%2Fdoggocasino.com%2Fen-us%3FaffiliateName%3D%255Bcellxpert%255D%26affid%3Dcx-35656_393091%26bannerid%3D35656%26trackerid%3D35656_393091%26brand%3Ddoggocasino%26bta%3D35656%26rdk%3Drk1&dt=Doggo%20Casino&en=page_view&_fv=1&_nsi=1&_ss=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-K4EHGY5F0T>m=45je3210&_p=595916355&_gaz=1&cid=88150227.1675592149&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675592149&sct=1&seg=0&dl=https%3A%2F%2Fdoggocasino.com%2Fen-us%3FaffiliateName%3D%255Bcellxpert%255D%26affid%3Dcx-35656_393091%26bannerid%3D35656%26trackerid%3D35656_393091%26brand%3Ddoggocasino%26bta%3D35656%26rdk%3Drk1&dt=Doggo%20Casino&en=page_view&_fv=1&_nsi=1&_ss=1 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://doggocasino.com
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://doggocasino.com
date: Sun, 05 Feb 2023 10:15:10 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5ac5aaa2dd1a2ab697244f3c0fe3b5b5
bb8a9aeb28cc645435760f3a9a57d85e295de419
d42327bb295e41a2b04efa1c2ad6094a3480d0010de10bb32600f4d17fe9f0d4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 10:15:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/grey-shape-alt.svg
200 OK 367 B URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/grey-shape-alt.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text
Hash edaa04ce1e94b80795bf42b64d0a228d
9ca7c2170b80225ad8d900282a403f6113e97cc9
ccef926f38277cb72a8d54e05194b88a4d36e55ac899631bd6843083e4813abe
GET /uploads/media/DOC/home/grey-shape-alt.svg HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 09 Nov 2022 12:38:41 GMT
content-encoding: gzip
server: imgix
x-imgix-id: 6ce0e5247bfe15e6912f6e57dada57c9d7db5f01
x-imgix-render-farm: 02.552
date: Sun, 05 Feb 2023 10:15:09 GMT
age: 5275549
accept-ranges: bytes
content-type: image/svg+xml
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10044-SJC, cache-bma1634-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
content-length: 367
X-Firefox-Spdy: h2
stats.g.doubleclick.net/g/collect?v=2&tid=G-K4EHGY5F0T&cid=88150227.1675592149>m=45je3210&aip=1
204 No Content 0 B URL HTTP/2 stats.g.doubleclick.net/g/collect?v=2&tid=G-K4EHGY5F0T&cid=88150227.1675592149>m=45je3210&aip=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-K4EHGY5F0T&cid=88150227.1675592149>m=45je3210&aip=1 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://doggocasino.com
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://doggocasino.com
date: Sun, 05 Feb 2023 10:15:10 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/safe-instant.png
200 OK 443 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/safe-instant.png
IP
File type PNG image data, 1714 x 1493, 8-bit/color RGBA, non-interlaced\012- data
Size 443 kB (443061 bytes)
Hash 4c909be3d5a19673623ab2349cf6a79a
b539798e89471deb60df0ea3b11c3b80e641dff9
242dd8c08ed942b0e678d615eb1ea42e524fa05bf6b83fb705456e6a5e3207c9
GET /uploads/media/DOC/home/safe-instant.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Thu, 01 Dec 2022 09:35:32 GMT
server: imgix
x-imgix-id: f0fcd198a614d37120ac195c6db5b07abd07f4b9
x-imgix-render-farm: 02.552
date: Sun, 05 Feb 2023 10:15:09 GMT
age: 5271635
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10040-SJC, cache-bma1634-BMA
x-cache: HIT, HIT
content-length: 443061
X-Firefox-Spdy: h2
doggocasino.com/assets/images/payments/Visa.webp
200 OK 5.1 kB URL HTTP/2 doggocasino.com/assets/images/payments/Visa.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 4b0108440760f16641970c1d5d16cd00
507b3518c8eb975026333a76be0d0178cbc9c2ad
28da44d8c47934effa061189c0f8c3d7253f030c8551e6a5358c065c152f0e46
GET /assets/images/payments/Visa.webp HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/no-no?affiliateName=%5Bcellxpert%5D&affid=cx-35656_393091&bannerid=35656&trackerid=35656_393091&brand=doggocasino&bta=35656&rdk=rk1
Cookie: __adm_tid=tid-40b2b6784.455c98d38; _ga_K4EHGY5F0T=GS1.1.1675592149.1.0.1675592149.60.0.0; _ga=GA1.1.88150227.1675592149; affiliateId=cx-35656_393091; bannerId=35656; trackerId=35656_393091; affiliateName=%5Bcellxpert%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 5090
x-amz-meta-codebuild-content-sha256: 4f853d18badd3933524ca4a1dd6240279e0051fb38905b83f18834b4b93aaeb1
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:08219a5d-0b7c-4ae2-afb4-2507533d271d
x-amz-meta-codebuild-content-md5: 319cfed7654cbf4a61d9a3eabce3d2f4
last-modified: Fri, 03 Feb 2023 09:41:11 GMT
x-amz-version-id: xDdbIodlPjf9_oe3AXRshO6gvSPWf2Y3
server: AmazonS3
date: Sun, 05 Feb 2023 10:09:18 GMT
etag: "4b0108440760f16641970c1d5d16cd00"
vary: Accept-Encoding
via: 1.1 96c778ce6156d12f24b8b6cdaa0cbf66.cloudfront.net (CloudFront)
age: 353
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: PyB14SXIuoWWl9KAVi0383vOPqqd3KPN4pZkMw8z3Cd7rurbgCDscg==
X-Firefox-Spdy: h2
static.zdassets.com/web_widget/latest/classic/web-widget-classic-34c91d3.js
200 OK 9.6 kB URL HTTP/2 static.zdassets.com/web_widget/latest/classic/web-widget-classic-34c91d3.js
IP
File type ASCII text, with very long lines (13518), with no line terminators
Hash d778b535fb39b4a083e8124b134371ed
ff690903b78c9339117cd0b17c59ca08c2a545b8
672df3e69ac19bfd8d35ed771a3c31e10762f3e21cdf466c3686e949e9482328
GET /web_widget/latest/classic/web-widget-classic-34c91d3.js HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 10:15:10 GMT
content-type: application/javascript; charset=utf-8
x-amz-id-2: kwxnrMDAE2r6YquTGTlAdKfKtQG/7dWE5cJPvgDhHS+XGag1ZsHCTbZEZXicdYtLe6lTJ9avRzo=
x-amz-request-id: 8SCAGBA7V7VV612T
x-amz-replication-status: COMPLETED
last-modified: Mon, 30 Jan 2023 01:11:44 GMT
etag: W/"9f439f16bdd7a42b3da820fde4e96890"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Tue, 30 Jan 2024 01:11:43 GMT
x-amz-version-id: XHJDUaBKxE89UxJh6.a92Af8FUc8mhAA
cf-cache-status: HIT
age: 361937
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=F7XY6l07VldPwchPhbej4PPhyF%2Fpg%2FYU3Ou4NBVNzBNCmOg87%2BerTwyWK2Nh5H6McuHRM%2FyxxX72KucPn149Cxxt1EEh2x64rs%2F2EUkkPfjSN6bzy%2BcDfdIzoAkZQUDkH0debDI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 794ae22069130b55-OSL
content-encoding: br
X-Firefox-Spdy: h2
doggocasino.com/assets/images/payments/AstroPay-isotipo.webp
200 OK 8.5 kB URL HTTP/2 doggocasino.com/assets/images/payments/AstroPay-isotipo.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 7b4904268f33a2bc7d4d9f6bf0b4cd30
0ecb6a5b1fef840b715baf1056de562dfc7cc925
2ec6fcda254d694c53f87b6df84b2cf4a0a2884d6149bf7c2b26952b4e6615b3
GET /assets/images/payments/AstroPay-isotipo.webp HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/no-no?affiliateName=%5Bcellxpert%5D&affid=cx-35656_393091&bannerid=35656&trackerid=35656_393091&brand=doggocasino&bta=35656&rdk=rk1
Cookie: __adm_tid=tid-40b2b6784.455c98d38; _ga_K4EHGY5F0T=GS1.1.1675592149.1.0.1675592149.60.0.0; _ga=GA1.1.88150227.1675592149; affiliateId=cx-35656_393091; bannerId=35656; trackerId=35656_393091; affiliateName=%5Bcellxpert%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 8482
x-amz-meta-codebuild-content-sha256: 4f853d18badd3933524ca4a1dd6240279e0051fb38905b83f18834b4b93aaeb1
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:08219a5d-0b7c-4ae2-afb4-2507533d271d
x-amz-meta-codebuild-content-md5: 319cfed7654cbf4a61d9a3eabce3d2f4
last-modified: Fri, 03 Feb 2023 09:41:17 GMT
x-amz-version-id: Ps9PKeTbbhigMc6sKz8t0it7TMlpbRef
server: AmazonS3
date: Sat, 04 Feb 2023 13:48:30 GMT
etag: "7b4904268f33a2bc7d4d9f6bf0b4cd30"
vary: Accept-Encoding
via: 1.1 96c778ce6156d12f24b8b6cdaa0cbf66.cloudfront.net (CloudFront)
age: 73601
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 6YMydjXwR7u1c8dpPzp8VG-j0AFUbao1DoKNOBnC_v7yLgAuUKivkA==
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5ac5aaa2dd1a2ab697244f3c0fe3b5b5
bb8a9aeb28cc645435760f3a9a57d85e295de419
d42327bb295e41a2b04efa1c2ad6094a3480d0010de10bb32600f4d17fe9f0d4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 10:15:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
doggocasino.com/assets/images/payments/CRYPTO-NO-square.webp
200 OK 9.5 kB URL HTTP/2 doggocasino.com/assets/images/payments/CRYPTO-NO-square.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 1743ed8f0a9ca24cb2f49dbb61f70b5b
2c3b851c280984ba7e84b08a956b6122d6575076
9b6bf4178662a1c7e7afd5f111f641de9a44afe4788afb885040b134c1cf2323
GET /assets/images/payments/CRYPTO-NO-square.webp HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/no-no?affiliateName=%5Bcellxpert%5D&affid=cx-35656_393091&bannerid=35656&trackerid=35656_393091&brand=doggocasino&bta=35656&rdk=rk1
Cookie: __adm_tid=tid-40b2b6784.455c98d38; _ga_K4EHGY5F0T=GS1.1.1675592149.1.0.1675592149.60.0.0; _ga=GA1.1.88150227.1675592149; affiliateId=cx-35656_393091; bannerId=35656; trackerId=35656_393091; affiliateName=%5Bcellxpert%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 9456
x-amz-meta-codebuild-content-sha256: 4f853d18badd3933524ca4a1dd6240279e0051fb38905b83f18834b4b93aaeb1
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:08219a5d-0b7c-4ae2-afb4-2507533d271d
x-amz-meta-codebuild-content-md5: 319cfed7654cbf4a61d9a3eabce3d2f4
last-modified: Fri, 03 Feb 2023 09:41:15 GMT
x-amz-version-id: CXYe7FgL8mjYMZm0ACe.bnpKAO_q_UJT
server: AmazonS3
date: Sat, 04 Feb 2023 13:48:30 GMT
etag: "1743ed8f0a9ca24cb2f49dbb61f70b5b"
vary: Accept-Encoding
via: 1.1 96c778ce6156d12f24b8b6cdaa0cbf66.cloudfront.net (CloudFront)
age: 73601
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: dpwUpgmYaCaM9xEgxyBfW_C4Tb7erbNyEhsAUbRF66wZF9Mvmm0krA==
X-Firefox-Spdy: h2
doggocasino.com/assets/mock/globe.webp
200 OK 1.9 kB URL HTTP/2 doggocasino.com/assets/mock/globe.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 19215c98163e609fed2e96a76e46f6cd
65fa846b9eafd2d3420b079a6ee8baac0fa183c5
685bf72f57fdcba509c9981d2ad69cd5f95d4b4135315011fad8c5bc2b5c79ad
GET /assets/mock/globe.webp HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/no-no?affiliateName=%5Bcellxpert%5D&affid=cx-35656_393091&bannerid=35656&trackerid=35656_393091&brand=doggocasino&bta=35656&rdk=rk1
Cookie: __adm_tid=tid-40b2b6784.455c98d38; _ga_K4EHGY5F0T=GS1.1.1675592149.1.0.1675592149.60.0.0; _ga=GA1.1.88150227.1675592149; affiliateId=cx-35656_393091; bannerId=35656; trackerId=35656_393091; affiliateName=%5Bcellxpert%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 1902
x-amz-meta-codebuild-content-sha256: 4f853d18badd3933524ca4a1dd6240279e0051fb38905b83f18834b4b93aaeb1
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:08219a5d-0b7c-4ae2-afb4-2507533d271d
x-amz-meta-codebuild-content-md5: 319cfed7654cbf4a61d9a3eabce3d2f4
last-modified: Fri, 03 Feb 2023 09:41:17 GMT
x-amz-version-id: 8JKg15ghmJTy5z8fnU0cMlny4_6tcsRY
server: AmazonS3
date: Sun, 05 Feb 2023 10:09:18 GMT
etag: "19215c98163e609fed2e96a76e46f6cd"
vary: Accept-Encoding
via: 1.1 96c778ce6156d12f24b8b6cdaa0cbf66.cloudfront.net (CloudFront)
age: 353
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 0_-m4Z2P224l3MiWv8S7vkv3QD90d5CWRN5a44d2z5tJQASXdHkfNw==
X-Firefox-Spdy: h2
doggocasino.com/assets/images/footer-toggler.svg
200 OK 280 B URL HTTP/2 doggocasino.com/assets/images/footer-toggler.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with no line terminators
Hash 46e6bc71c2b77f578a5f70fff751c2e2
5ee5f0f9c2895c70cdc83336ccdb2e02fe0fae6a
541b157986e7a281b28b520b8a862570975f84cedd61b8fe390985f210b7b140
GET /assets/images/footer-toggler.svg HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/no-no?affiliateName=%5Bcellxpert%5D&affid=cx-35656_393091&bannerid=35656&trackerid=35656_393091&brand=doggocasino&bta=35656&rdk=rk1
Cookie: __adm_tid=tid-40b2b6784.455c98d38; _ga_K4EHGY5F0T=GS1.1.1675592149.1.0.1675592149.60.0.0; _ga=GA1.1.88150227.1675592149; affiliateId=cx-35656_393091; bannerId=35656; trackerId=35656_393091; affiliateName=%5Bcellxpert%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 280
x-amz-meta-codebuild-content-sha256: 4f853d18badd3933524ca4a1dd6240279e0051fb38905b83f18834b4b93aaeb1
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:08219a5d-0b7c-4ae2-afb4-2507533d271d
x-amz-meta-codebuild-content-md5: 319cfed7654cbf4a61d9a3eabce3d2f4
last-modified: Fri, 03 Feb 2023 09:41:11 GMT
x-amz-version-id: cu43Y6AeD9h1fA7JazxmzeqdyAmtcOEK
server: AmazonS3
date: Sun, 05 Feb 2023 10:09:18 GMT
etag: "46e6bc71c2b77f578a5f70fff751c2e2"
vary: Accept-Encoding
via: 1.1 96c778ce6156d12f24b8b6cdaa0cbf66.cloudfront.net (CloudFront)
age: 353
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: arhvAwW6VRr90AZVZLjOjTLS0Q1iyW_VwHprX8Q12J5yYw27ZkK5tA==
X-Firefox-Spdy: h2
doggocasino.com/assets/images/chevron-up.svg
200 OK 377 B URL HTTP/2 doggocasino.com/assets/images/chevron-up.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (377), with no line terminators
Hash e99c36ba370f2d6cf266c3907e514133
8b48f9785b603081f5ee2012bd44596dd283b70c
eb236654d5b58ad96fee3c4f827259f12274576d8f17e02e3c733026674bccf3
GET /assets/images/chevron-up.svg HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/no-no?affiliateName=%5Bcellxpert%5D&affid=cx-35656_393091&bannerid=35656&trackerid=35656_393091&brand=doggocasino&bta=35656&rdk=rk1
Cookie: __adm_tid=tid-40b2b6784.455c98d38; _ga_K4EHGY5F0T=GS1.1.1675592149.1.0.1675592149.60.0.0; _ga=GA1.1.88150227.1675592149; affiliateId=cx-35656_393091; bannerId=35656; trackerId=35656_393091; affiliateName=%5Bcellxpert%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 377
x-amz-meta-codebuild-content-sha256: 4f853d18badd3933524ca4a1dd6240279e0051fb38905b83f18834b4b93aaeb1
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:08219a5d-0b7c-4ae2-afb4-2507533d271d
x-amz-meta-codebuild-content-md5: 319cfed7654cbf4a61d9a3eabce3d2f4
last-modified: Fri, 03 Feb 2023 09:41:13 GMT
x-amz-version-id: FPbk3pFh6087f8cVw9_IjvMpsUFdh.dA
server: AmazonS3
date: Sun, 05 Feb 2023 10:09:18 GMT
etag: "e99c36ba370f2d6cf266c3907e514133"
vary: Accept-Encoding
via: 1.1 96c778ce6156d12f24b8b6cdaa0cbf66.cloudfront.net (CloudFront)
age: 353
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: CKlRJYUjx33X3UwlnwAfcd2j2jSv3dSp4-zMWJTWC0-FhRpL2G40JQ==
X-Firefox-Spdy: h2
doggocasino.com/assets/fonts/CeraPro/Cera_Pro_Light.otf
200 OK 185 kB URL HTTP/2 doggocasino.com/assets/fonts/CeraPro/Cera_Pro_Light.otf
IP
File type OpenType font data\012- data
Size 185 kB (185224 bytes)
Hash 112299d7917b38aff426d451d495f3d7
6de584a008b9858f356612935204940c53f5c226
51678261b34255f1b6aa36b5ec12956d44cf63162f8e86cb838594484148fe2d
GET /assets/fonts/CeraPro/Cera_Pro_Light.otf HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/styles.6fe09080dd4bc8174585.css
Cookie: __adm_tid=tid-40b2b6784.455c98d38; _ga_K4EHGY5F0T=GS1.1.1675592149.1.0.1675592149.60.0.0; _ga=GA1.1.88150227.1675592149; affiliateId=cx-35656_393091; bannerId=35656; trackerId=35656_393091; affiliateName=%5Bcellxpert%5D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 185224
x-amz-meta-codebuild-content-sha256: 4f853d18badd3933524ca4a1dd6240279e0051fb38905b83f18834b4b93aaeb1
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:08219a5d-0b7c-4ae2-afb4-2507533d271d
x-amz-meta-codebuild-content-md5: 319cfed7654cbf4a61d9a3eabce3d2f4
last-modified: Fri, 03 Feb 2023 09:41:15 GMT
x-amz-version-id: AREsfsK_Cymcdhqvy.yskg87KXMAvmbt
server: AmazonS3
date: Sun, 05 Feb 2023 10:09:21 GMT
etag: "112299d7917b38aff426d451d495f3d7"
vary: Accept-Encoding
via: 1.1 96c778ce6156d12f24b8b6cdaa0cbf66.cloudfront.net (CloudFront)
age: 350
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: -M4_yxGigO3my_uGvYuYW0H5t9_GwkX31fiJR70nu2_S8iNdbunv0A==
X-Firefox-Spdy: h2
doggocasino.com/assets/images/doggocasino-license.png
200 OK 46 kB URL HTTP/2 doggocasino.com/assets/images/doggocasino-license.png
IP
File type PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced\012- data
Hash 375b5b5bcd1d5179f5b789e4c28ca6df
f52bfd097b13f83fa43714f59786efa4082f55a1
f7acaa7ace617964cd79de3287bfa740f1d3fbcbed82ea1d09cd94058d4b1281
GET /assets/images/doggocasino-license.png HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/no-no?affiliateName=%5Bcellxpert%5D&affid=cx-35656_393091&bannerid=35656&trackerid=35656_393091&brand=doggocasino&bta=35656&rdk=rk1
Cookie: __adm_tid=tid-40b2b6784.455c98d38; _ga_K4EHGY5F0T=GS1.1.1675592149.1.0.1675592149.60.0.0; _ga=GA1.1.88150227.1675592149; affiliateId=cx-35656_393091; bannerId=35656; trackerId=35656_393091; affiliateName=%5Bcellxpert%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 46382
x-amz-id-2: z3EfZ9kyt44IqHfiGMNj/owXwj7C3Gpt0NaRiK2xV6x2cvekaIHM+gj09tmVuVe+YJMT2Ls+qJg=
x-amz-request-id: QX2CFG43TCSTJYYP
date: Fri, 03 Feb 2023 09:43:05 GMT
x-amz-meta-codebuild-content-sha256: 4f853d18badd3933524ca4a1dd6240279e0051fb38905b83f18834b4b93aaeb1
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:08219a5d-0b7c-4ae2-afb4-2507533d271d
x-amz-meta-codebuild-content-md5: 319cfed7654cbf4a61d9a3eabce3d2f4
last-modified: Fri, 03 Feb 2023 09:41:09 GMT
x-amz-version-id: qzsIE1iyCTmCEtsI83V.sEHoZUCs3AEd
etag: "375b5b5bcd1d5179f5b789e4c28ca6df"
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 96c778ce6156d12f24b8b6cdaa0cbf66.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: S6a7L5ZZluR4y3wP5BEpqOJ4-DQ10565SzUiDHRq_u6m8CcDufUPWw==
age: 174726
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/slots-games.png
200 OK 1.4 MB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/slots-games.png
IP
File type PNG image data, 1920 x 738, 8-bit/color RGBA, non-interlaced\012- data
Size 1.4 MB (1428029 bytes)
Hash 69a5c6da5ff813320794608f66b5ee7a
e9c21af6d994f279e128ef4e441e28e2daa040b0
be88b78ea90958397eb001632620464892e60304d6f2ef4a8a30d45e2ca36265
GET /uploads/media/DOC/home/slots-games.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Tue, 06 Dec 2022 08:10:12 GMT
server: imgix
x-imgix-id: 73e8dc90f791d188397dd4e4878087854cd1add3
x-imgix-render-farm: 02.552
date: Sun, 05 Feb 2023 10:15:09 GMT
age: 2612822
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10036-SJC, cache-bma1634-BMA
x-cache: HIT, HIT
content-length: 1428029
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/24hr-bg.png
200 OK 846 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/24hr-bg.png
IP
File type PNG image data, 1467 x 776, 8-bit/color RGBA, non-interlaced\012- data
Size 846 kB (845713 bytes)
Hash 43c4bfb0ef50eee6044ebfd26e20b6b9
7183a0e6cbb296bb9493535579b67afe4c3244cf
e67b16b94d3723da0a5dd239a4104f4a1f46d64f3fb3915c86e8f9a46be8c1d3
GET /uploads/media/DOC/home/24hr-bg.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 22 Jun 2022 15:01:49 GMT
server: imgix
x-imgix-id: 59b5628c06af804b7cf1847feb821cae286d41c8
x-imgix-render-farm: 01.1064
date: Sun, 05 Feb 2023 10:15:09 GMT
age: 1729794
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10023-SJC, cache-bma1634-BMA
x-cache: HIT, HIT
content-length: 845713
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/custom-loyalty.png
200 OK 884 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/custom-loyalty.png
IP
File type PNG image data, 1247 x 848, 8-bit/color RGBA, non-interlaced\012- data
Size 884 kB (883840 bytes)
Hash 9ebf6e306dc67cee050fe9c92de5d2cc
d5f12930b0e5b56ed0f13475d1a3fd9f9f6001ad
a95d15788e300398aec81c5fbcec4742423977b9ecaa23a8e5d3cfcbd0c6f82d
GET /uploads/media/DOC/home/custom-loyalty.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 22 Jun 2022 15:01:49 GMT
server: imgix
x-imgix-id: 3f80027569f50c2428d6316ff89921d6c28ed46d
x-imgix-render-farm: 01.1064
date: Sun, 05 Feb 2023 10:15:09 GMT
age: 2761690
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10081-SJC, cache-bma1634-BMA
x-cache: HIT, HIT
content-length: 883840
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/faq.png
200 OK 1.0 MB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/faq.png
IP
File type PNG image data, 1920 x 1096, 8-bit/color RGBA, non-interlaced\012- data
Size 1.0 MB (1000337 bytes)
Hash ef96f74f51b5138969246a0b3d1996ac
ca519301ff25dec4f07e54574a40d7012eb6763d
b2e61e89a6a0e373694d5520d34bee9fc24442d94176daa9bf01ad94e8648c5a
GET /uploads/media/DOC/home/faq.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Tue, 26 Jul 2022 05:03:44 GMT
server: imgix
x-imgix-id: dd31b08aa3bffd954bc064773a93f9e63e36e2bf
x-imgix-render-farm: 02.552
date: Sun, 05 Feb 2023 10:15:09 GMT
age: 2749434
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10041-SJC, cache-bma1634-BMA
x-cache: HIT, HIT
content-length: 1000337
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dffaddbeca48214ec69d3a9632adc4fb
90f7e67b6babe0279b7cf2f8aa2753398af4587e
9fe6cf81a5229d6120ec04d4bade4d46f3ffd109f65a881eeda5867ce5694d2d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9FE6CF81A5229D6120EC04D4BADE4D46F3FFD109F65A881EEDA5867CE5694D2D"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7903
Expires: Sun, 05 Feb 2023 12:26:53 GMT
Date: Sun, 05 Feb 2023 10:15:10 GMT
Connection: keep-alive
o571455.ingest.sentry.io/api/5732343/envelope/?sentry_key=d1b047c874bf4ef7a99a8c956cfbe83d&sentry_version=7
429 Too Many Requests 198 B URL HTTP/2 o571455.ingest.sentry.io/api/5732343/envelope/?sentry_key=d1b047c874bf4ef7a99a8c956cfbe83d&sentry_version=7
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 478b411c59eb87249bea32cf7c7be5d2
023907c62eb55758905bb3c0e640b5b204ae0652
bac10d17440dcd6f6c6c4e0bd7eca2e1a7eec030ef3b1143d4be3791dcf91263
POST /api/5732343/envelope/?sentry_key=d1b047c874bf4ef7a99a8c956cfbe83d&sentry_version=7 HTTP/1.1
Host: o571455.ingest.sentry.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://doggocasino.com/
Content-Type: text/plain;charset=UTF-8
Origin: https://doggocasino.com
Content-Length: 45514
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 429 Too Many Requests
server: nginx
date: Sun, 05 Feb 2023 10:15:10 GMT
content-type: application/json
content-length: 198
retry-after: 10
x-sentry-rate-limits: 10:transaction:organization:transaction_usage_exceeded
access-control-allow-origin: https://doggocasino.com
access-control-expose-headers: x-sentry-error, retry-after, x-sentry-rate-limits
vary: Origin
x-envoy-upstream-service-time: 0
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
c1.rfihub.net/js/tc.min.js
200 OK 6.2 kB URL HTTP/2 c1.rfihub.net/js/tc.min.js
IP
File type C source, ASCII text, with very long lines (19497)
Hash ab5a2e3f2414c0a2b622e48c0b6da2fd
1a894787bde6cbf9b58d47b8f4245607420112ad
a5ef19cf7ca85f760c462ed2f228430c8d0a6d9daf3aa34894a5c42113cfdb8f
GET /js/tc.min.js HTTP/1.1
Host: c1.rfihub.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/x-javascript
content-length: 6162
date: Sun, 05 Feb 2023 09:17:48 GMT
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
cache-control: public, max-age=3600
expires: Sun, 05 Feb 2023 10:17:48 GMT
last-modified: Sun, 05 Feb 2023 09:17:38 GMT
content-encoding: gzip
server: Jetty(9.3.29.v20201019)
x-cache: Hit from cloudfront
via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: fW4SYHgW93g4KhDbeInd6iMR_OjUHNdQUNRUqDClGbEsRtFsu_XQpg==
age: 3442
X-Firefox-Spdy: h2
doggocasino.com/favicon.ico
200 OK 4.3 kB URL HTTP/2 doggocasino.com/favicon.ico
IP
File type MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel\012- data
Hash bf17160c2e430c1c7fda0c795c8ee482
2990a13dd391376c8593c9243d4430a9318c7a18
aaee36adabe0daf0003147b30c2a56b8341f2469a6f4fec886e64412063f4cd4
GET /favicon.ico HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/en-us?affiliateName=[cellxpert]&affid=cx-35656_393091&bannerid=35656&trackerid=35656_393091&brand=doggocasino&bta=35656&rdk=rk1
Cookie: __adm_tid=tid-40b2b6784.455c98d38; _ga_K4EHGY5F0T=GS1.1.1675592149.1.0.1675592149.60.0.0; _ga=GA1.1.88150227.1675592149; affiliateId=cx-35656_393091; bannerId=35656; trackerId=35656_393091; affiliateName=%5Bcellxpert%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/x-icon
content-length: 4286
x-amz-id-2: 2ste2lhugO1JPPzSB+EP26RpDA87kIOrCDF+P0F3TufMSP1CkuxSjiGsiAK/5RWB5DCzQ7mgMqs=
x-amz-request-id: MEV96PGRFFHNB2GG
date: Fri, 03 Feb 2023 09:43:19 GMT
x-amz-meta-codebuild-content-sha256: 4f853d18badd3933524ca4a1dd6240279e0051fb38905b83f18834b4b93aaeb1
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:08219a5d-0b7c-4ae2-afb4-2507533d271d
x-amz-meta-codebuild-content-md5: 319cfed7654cbf4a61d9a3eabce3d2f4
last-modified: Fri, 03 Feb 2023 09:41:18 GMT
x-amz-version-id: 0c6E6tXgf9xDc6AOFS5XVbDSv2cmmMus
etag: "bf17160c2e430c1c7fda0c795c8ee482"
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 96c778ce6156d12f24b8b6cdaa0cbf66.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: -WCJjZ1n4oLrtOkNRwfydUQrU_oOyDILn1WjlhMTfJQ4bu2GWMd1Lw==
age: 174712
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dffaddbeca48214ec69d3a9632adc4fb
90f7e67b6babe0279b7cf2f8aa2753398af4587e
9fe6cf81a5229d6120ec04d4bade4d46f3ffd109f65a881eeda5867ce5694d2d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9FE6CF81A5229D6120EC04D4BADE4D46F3FFD109F65A881EEDA5867CE5694D2D"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7903
Expires: Sun, 05 Feb 2023 12:26:53 GMT
Date: Sun, 05 Feb 2023 10:15:10 GMT
Connection: keep-alive
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Sun, 05 Feb 2023 09:44:08 GMT
expires: Sun, 05 Feb 2023 11:44:08 GMT
cache-control: public, max-age=7200
age: 1862
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 8077210062c315b98902cb06c74d485b
808e94ac31f1b45185103ce25c1bc2afd056b17a
78871f45de0c58bffa6a86b50f6bd0db61932bf6a2b7d8191dba0f0eaab628b1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 10:15:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/life-changin-wins.png
200 OK 42 B URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/life-changin-wins.png
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /uploads/media/DOC/home/life-changin-wins.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Thu, 10 Nov 2022 08:07:33 GMT
server: imgix
x-imgix-id: e6bd19099fd8263c927242cf80e82e5f9fc56217
x-imgix-render-farm: 02.552
date: Sun, 05 Feb 2023 10:15:09 GMT
age: 2754706
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10077-SJC, cache-bma1634-BMA
x-cache: HIT, HIT
content-length: 731764
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1b25bf82638deaab60981e1315ee0849
e3bd912fd1a890e64ee6746a78a674db7ff77039
a99b0dfa9ca7176b21cc2d65963a1b6eb6d534b3767d02ef06cc207a63331ebf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A99B0DFA9CA7176B21CC2D65963A1B6EB6D534B3767D02EF06CC207A63331EBF"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8408
Expires: Sun, 05 Feb 2023 12:35:18 GMT
Date: Sun, 05 Feb 2023 10:15:10 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1b25bf82638deaab60981e1315ee0849
e3bd912fd1a890e64ee6746a78a674db7ff77039
a99b0dfa9ca7176b21cc2d65963a1b6eb6d534b3767d02ef06cc207a63331ebf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A99B0DFA9CA7176B21CC2D65963A1B6EB6D534B3767D02EF06CC207A63331EBF"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8408
Expires: Sun, 05 Feb 2023 12:35:18 GMT
Date: Sun, 05 Feb 2023 10:15:10 GMT
Connection: keep-alive
static.hotjar.com/c/hotjar-3054262.js?sv=6
200 OK 4.0 kB URL HTTP/2 static.hotjar.com/c/hotjar-3054262.js?sv=6
IP
File type ASCII text, with very long lines (7460)
Hash fb885a3d41457fad56185a2d8b7647bf
b3ddd1aa3ceca83d2814346bd8eb2915307f9ba3
e89e08baf64c32a597216b6114e9ff65b84702a705c7d52441266457e4d2a5cc
GET /c/hotjar-3054262.js?sv=6 HTTP/1.1
Host: static.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
content-encoding: br
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=2592000; includeSubDomains
x-cache-hit: 1
x-content-type-options: nosniff
date: Sun, 05 Feb 2023 10:14:21 GMT
cache-control: max-age=60
etag: W/14b01302562693a284d782235df5f85f
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 1M7ZxEKWDGTi8CNarOMIZaXjSVLzVlpC_ZLOOQDM_hkpjErOERGbAg==
age: 51
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1b25bf82638deaab60981e1315ee0849
e3bd912fd1a890e64ee6746a78a674db7ff77039
a99b0dfa9ca7176b21cc2d65963a1b6eb6d534b3767d02ef06cc207a63331ebf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A99B0DFA9CA7176B21CC2D65963A1B6EB6D534B3767D02EF06CC207A63331EBF"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8408
Expires: Sun, 05 Feb 2023 12:35:18 GMT
Date: Sun, 05 Feb 2023 10:15:10 GMT
Connection: keep-alive
static.zdassets.com/web_widget/latest/classic/web-widget-5324-34c91d3.js
200 OK 124 kB URL HTTP/2 static.zdassets.com/web_widget/latest/classic/web-widget-5324-34c91d3.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Size 124 kB (123730 bytes)
Hash 306490628076d06a782d72129769498d
0c55d549fec34c66ee1748fc157cc0da179409f0
68a9cb0a9aa4cf75616af1d3b78cc510f3cb0edad79c194a2bcb38b6912c4b4c
GET /web_widget/latest/classic/web-widget-5324-34c91d3.js HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 10:15:10 GMT
content-type: application/javascript; charset=utf-8
x-amz-id-2: kNKtAh5j74VCRQUuSSi1H7gGWEBas+ZMho2E/NRakx2x+qN+2EvUVBkNbiaB2bdjibN4Eb3GEbg=
x-amz-request-id: 8SC131HFWH6HSGCE
x-amz-replication-status: COMPLETED
last-modified: Mon, 30 Jan 2023 01:11:44 GMT
etag: W/"e40ffe6686756f7ae653217693dadaac"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Tue, 30 Jan 2024 01:11:43 GMT
x-amz-version-id: 6AuBmSIJ32qDXiB1mw4Drv9aAUt8ZDjH
cf-cache-status: HIT
age: 361937
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=73W5YmSmDR9Oaz0RPXo2itXK%2F9txdrm7AQkAvDh4e6Dr3vnvUyfJv3kuhyHgQomFWDrJaYcOmdV4h18F5qybZG5xoA3k7o29bfwcbWkGcdJLfyUs1lhpc7Umfsa6JnFSv03zVmU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 794ae220a9520b55-OSL
content-encoding: br
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F37422a56-a7de-4ab8-ac8a-650de9dae97c.jpeg
200 OK 5.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F37422a56-a7de-4ab8-ac8a-650de9dae97c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5b6c30ad03669b66bf2f63b3edd69882
e630bd132b52b965a5ade646ea8a165d1abf6d7b
f8233d879ec17fd91909655ff8881f2ebfad84272fde3ed5e5be37580378a989
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F37422a56-a7de-4ab8-ac8a-650de9dae97c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5014
x-amzn-requestid: a434aae4-fe4b-4fc7-9b7e-eeb552484e8a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fi3bIE0aoAMF6YQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d76c47-5556d14757190c842bbc6b06;Sampled=0
x-amzn-remapped-date: Mon, 30 Jan 2023 07:05:43 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: k6YqagXr3Wr-u1uDKojEnIGW0CxU5yvWPtlzNpzoIvmg9F-rJb9uFQ==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 1a53057db389e96b4ef1bfbc925dde1c.cloudfront.net (CloudFront), 1.1 google
date: Sat, 04 Feb 2023 14:53:45 GMT
age: 69685
etag: "e630bd132b52b965a5ade646ea8a165d1abf6d7b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F29d53279-1206-40a7-be9b-b504e0748218.jpeg
200 OK 5.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F29d53279-1206-40a7-be9b-b504e0748218.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7fff69db25a1c7a3fbe154a3c80ac5aa
638e08807f73b70ab87b804816f9eb3e8dd2aa74
be96b347ba90dda9c39975077d963ff875831a14a4269e28edc0d2f80928bba6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F29d53279-1206-40a7-be9b-b504e0748218.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5356
x-amzn-requestid: af4c4533-48b8-4b02-951a-3e61933fb126
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fi3fyFrMoAMFr_w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d76c64-0346b30d0ded67912070f671;Sampled=0
x-amzn-remapped-date: Mon, 30 Jan 2023 07:06:12 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: IJBXK8DSlmaj48MVSTo-8A69jOe3x2cvnZYRLfyXZ7jZWqsMbTZsEg==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Sat, 04 Feb 2023 21:43:52 GMT
age: 45078
etag: "638e08807f73b70ab87b804816f9eb3e8dd2aa74"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc0def934-b27d-4612-bab8-84bfb73a9960.jpeg
200 OK 7.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc0def934-b27d-4612-bab8-84bfb73a9960.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5beaead015b2b4fb6d36009926ba0378
67e7c49ea7648fc6d1dffc22588862c993b785b7
6ae0cec9ade23fd53e9c1407b0324a8060892a65a6b675ccffa4a4c82b66f1ff
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc0def934-b27d-4612-bab8-84bfb73a9960.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7589
x-amzn-requestid: 280f7003-2696-4a82-bd50-82b0a2b66faf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fsSpoEA0oAMFSBg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63db3170-35dcb9513c891af201b973d1;Sampled=0
x-amzn-remapped-date: Thu, 02 Feb 2023 03:43:44 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 00Sp1Thtp-YIGYmu7qIB6GtKBxOGLgcAse2SusryA8xaBrnWQDD-Hg==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Sat, 04 Feb 2023 22:04:01 GMT
age: 43869
etag: "67e7c49ea7648fc6d1dffc22588862c993b785b7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
script.hotjar.com/modules.bca0d1c28285412bb689.js
200 OK 68 kB URL HTTP/2 script.hotjar.com/modules.bca0d1c28285412bb689.js
IP
File type Unicode text, UTF-8 text, with very long lines (49086)
Hash e923aa360dc485b9df86355bd040c998
03c46dbd41e9d4bdf8a9e4bfbaba3f7f2e9280ec
9c7575553c5b81f9b905dbb27c8116b175b69e7472aa6597f8cace1c6434d676
GET /modules.bca0d1c28285412bb689.js HTTP/1.1
Host: script.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 67924
date: Fri, 03 Feb 2023 13:10:06 GMT
accept-ranges: bytes
access-control-allow-origin: *
cache-control: max-age=31536000
content-encoding: br
cross-origin-resource-policy: cross-origin
etag: "e923aa360dc485b9df86355bd040c998"
last-modified: Fri, 03 Feb 2023 13:09:45 GMT
strict-transport-security: max-age=2592000; includeSubDomains
x-content-type-options: nosniff
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 2afd697fc5d0058ea30d6c4b939e714c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: l2Hrm0ZJiyqPLJJPe46I3RHtNl9XhNDpDoBaiFesmPQY307XooKddw==
age: 162304
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F98423c35-aa11-41c0-8f4f-52bec4c9eaa8.jpeg
200 OK 9.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F98423c35-aa11-41c0-8f4f-52bec4c9eaa8.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b3e7140400336984afc6093c1246f863
59e0b21cdf4cfdac3f1ea05badd007727939ac42
4d927e74922159db5d07b9947fa1021cff74bb7b55759960cb3941d05c1e8f11
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F98423c35-aa11-41c0-8f4f-52bec4c9eaa8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9579
x-amzn-requestid: c474008d-a6a9-409b-88e2-c55062044575
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fzQtnFGhoAMF5Zw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ddfb23-54dd67257ba25ad24e977a9c;Sampled=0
x-amzn-remapped-date: Sat, 04 Feb 2023 06:28:51 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 0Of3BK3VqVMGQGDIODQthVmi7BC8Ney4zgGCpVuzYc1j6D8RRP-AxA==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Sat, 04 Feb 2023 11:55:41 GMT
age: 80369
etag: "59e0b21cdf4cfdac3f1ea05badd007727939ac42"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 8077210062c315b98902cb06c74d485b
808e94ac31f1b45185103ce25c1bc2afd056b17a
78871f45de0c58bffa6a86b50f6bd0db61932bf6a2b7d8191dba0f0eaab628b1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 10:15:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
vars.hotjar.com/box-e031119f9e9e307a08fa610f85dbfb52.html
200 OK 1.0 kB URL HTTP/2 vars.hotjar.com/box-e031119f9e9e307a08fa610f85dbfb52.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2368), with no line terminators
Hash 112fdf47cdb80b9ce3d033ed09717460
3898efa86cbf1b64dc41a90a110ed5afd6f2ae13
3bfb2e882091d872eece2eee40084183a5fcb0a7ed98c1b004850751260a4cbb
GET /box-e031119f9e9e307a08fa610f85dbfb52.html HTTP/1.1
Host: vars.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html
content-length: 1034
date: Fri, 03 Feb 2023 13:10:06 GMT
accept-ranges: bytes
cache-control: max-age=31536000
content-encoding: br
cross-origin-embedder-policy: require-corp
cross-origin-resource-policy: cross-origin
etag: "112fdf47cdb80b9ce3d033ed09717460"
last-modified: Fri, 03 Feb 2023 13:09:45 GMT
strict-transport-security: max-age=2592000; includeSubDomains
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Audx5vSi1yBxX_deE-ZDtR9Jf2H-0ik9VvzZ10juN0K0o08L5mPo8w==
age: 162304
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 6579d2f71602941ebd04035dbd8ed34e
23e257a5fb1baa65aae0a14553e717e032777cac
69172b1a2fcbeaa49d56cf8472eaf09d19a3244142f48010fdf4137be4eacd53
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sun, 05 Feb 2023 10:15:10 GMT
Last-Modified: Sun, 05 Feb 2023 09:08:29 GMT
Server: ECS (nyb/1D0F)
X-Cache: Miss from cloudfront
Via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 9mQpsU2YYLbsfBE3uEdX1w9YCJQNXDFmkFzvSg6F5_yfNRl-pwNV0Q==
Age: 4001
widget-mediator.zopim.com/s/W/ws/zfVTXMWqdLDLzRBq/c/1675592150573
101 Switching Protocols 0 B URL HTTP/1.1 widget-mediator.zopim.com/s/W/ws/zfVTXMWqdLDLzRBq/c/1675592150573
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s/W/ws/zfVTXMWqdLDLzRBq/c/1675592150573 HTTP/1.1
Host: widget-mediator.zopim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://doggocasino.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: PwbrHzgkntnuN10JTjfx6Q==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Sun, 05 Feb 2023 10:15:11 GMT
Connection: upgrade
Set-Cookie: AWSALB=xdsrc975FiklEvGjQdSP2HXwjlDptDRFQxKgLaZHv1Q6osBMzvXeTcZJHdu9uROVlkv/gTj0kp4rFIghCrPmEUmrjaXV30al10c/yP84dxLcJ9jNTJOf4E6kv6Ot; Expires=Sun, 12 Feb 2023 10:15:11 GMT; Path=/
AWSALBCORS=xdsrc975FiklEvGjQdSP2HXwjlDptDRFQxKgLaZHv1Q6osBMzvXeTcZJHdu9uROVlkv/gTj0kp4rFIghCrPmEUmrjaXV30al10c/yP84dxLcJ9jNTJOf4E6kv6Ot; Expires=Sun, 12 Feb 2023 10:15:11 GMT; Path=/; SameSite=None; Secure
Upgrade: websocket
Sec-WebSocket-Accept: 9O4K4BmcDMTTWWa8FQgruicm77o=
Sec-WebSocket-Version: 13
WebSocket-Server: uWebSockets
doggocasino.com/assets/fonts/CeraPro/Cera_Pro_Black.otf
200 OK 188 kB URL HTTP/2 doggocasino.com/assets/fonts/CeraPro/Cera_Pro_Black.otf
IP
File type OpenType font data\012- data
Size 188 kB (188164 bytes)
Hash 95d55d992d7f63799ad116dbd12a25cf
37dd0e816b3828a6e996cb1b185b18e10745fb3b
7f9ef82ea041a21505f28d21766821edcc9adda8ed407f676d3623dc4f5c499a
GET /assets/fonts/CeraPro/Cera_Pro_Black.otf HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/styles.6fe09080dd4bc8174585.css
Cookie: __adm_tid=tid-40b2b6784.455c98d38; _ga_K4EHGY5F0T=GS1.1.1675592149.1.1.1675592150.59.0.0; _ga=GA1.2.88150227.1675592149; affiliateId=cx-35656_393091; bannerId=35656; trackerId=35656_393091; affiliateName=%5Bcellxpert%5D; _gid=GA1.2.1577888892.1675592150; _gat_UA-196341002-1=1; _hjSessionUser_3054262=eyJpZCI6ImRiMmFhNDdiLWQ4M2EtNTZiNy05OTY5LTQyMmYzYmY2ZmVmNSIsImNyZWF0ZWQiOjE2NzU1OTIxNTA2MDcsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_3054262=eyJpZCI6ImRmOTk4MTk4LThlZDktNGQ2NC04YTgwLWQ5MzZiM2YxMzMzZCIsImNyZWF0ZWQiOjE2NzU1OTIxNTA4NTAsImluU2FtcGxlIjpmYWxzZX0=; _hjIncludedInPageviewSample=1; _hjAbsoluteSessionInProgress=1; cookie_policy=accepted
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 188164
x-amz-meta-codebuild-content-sha256: 4f853d18badd3933524ca4a1dd6240279e0051fb38905b83f18834b4b93aaeb1
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:08219a5d-0b7c-4ae2-afb4-2507533d271d
x-amz-meta-codebuild-content-md5: 319cfed7654cbf4a61d9a3eabce3d2f4
last-modified: Fri, 03 Feb 2023 09:41:06 GMT
x-amz-version-id: cGGVUIEFbAu.MKvOsLUqTtMQAYPt5eJ9
server: AmazonS3
date: Sun, 05 Feb 2023 10:14:21 GMT
etag: "95d55d992d7f63799ad116dbd12a25cf"
vary: Accept-Encoding
via: 1.1 96c778ce6156d12f24b8b6cdaa0cbf66.cloudfront.net (CloudFront)
age: 351
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 1uGmaTvPWuBxRsNQ3VkwFfsZ5u1kDvvef83c53fdWbcELZKH8sxSPQ==
X-Firefox-Spdy: h2
vc.hotjar.io/sessions/3054262?s=0.25&r=0.17840660649820705
204 No Content 0 B URL HTTP/2 vc.hotjar.io/sessions/3054262?s=0.25&r=0.17840660649820705
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sessions/3054262?s=0.25&r=0.17840660649820705 HTTP/1.1
Host: vc.hotjar.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://doggocasino.com
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
access-control-allow-origin: *
cache-control: no-store
date: Sun, 05 Feb 2023 10:15:11 GMT
server: Python/3.7 aiohttp/3.5.4
x-cache: Miss from cloudfront
via: 1.1 dddc8f2bbf76628526b9a5a150e6e5ba.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN54-C1
x-amz-cf-id: GHB-JP_jhLDYG9S7L3OWxUf0OD-W8sHc7wSkkuhkjTqjLbhoXE85-A==
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 351768673989e1328d2dd26306f87210
49a980b46542cdd77c0ccf284494a7b873331759
170ab615550fc9006fdf721e2514fd0eecff58f64c88239c4ef5369921d85389
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 05 Feb 2023 10:15:11 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 04 Feb 2023 14:15:48 GMT
Expires: Sat, 11 Feb 2023 14:15:47 GMT
Etag: "49a980b46542cdd77c0ccf284494a7b873331759"
Cache-Control: max-age=532235,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 794ae225c9240afe-OSL
ocsp.sectigo.com/
200 OK 471 B IP
Hash 351768673989e1328d2dd26306f87210
49a980b46542cdd77c0ccf284494a7b873331759
170ab615550fc9006fdf721e2514fd0eecff58f64c88239c4ef5369921d85389
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 05 Feb 2023 10:15:11 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 04 Feb 2023 14:15:48 GMT
Expires: Sat, 11 Feb 2023 14:15:47 GMT
Etag: "49a980b46542cdd77c0ccf284494a7b873331759"
Cache-Control: max-age=532235,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 794ae225cd61b50f-OSL
20841497p.rfihub.com/ca.html?ver=9&rb=46806&ca=20841497&_o=46806&_t=20841497&pe=https%3A%2F%2Fdoggocasino.com%2Fno-no%3FaffiliateName%3D%255Bcellxpert%255D%26affid%3Dcx-35656_393091%26bannerid%3D35656%26trackerid%3D35656_393091%26brand%3Ddoggocasino%26bta%3D35656%26rdk%3Drk1&pf=&ra=2644829123179846
200 OK 2.7 kB URL HTTP/1.1 20841497p.rfihub.com/ca.html?ver=9&rb=46806&ca=20841497&_o=46806&_t=20841497&pe=https%3A%2F%2Fdoggocasino.com%2Fno-no%3FaffiliateName%3D%255Bcellxpert%255D%26affid%3Dcx-35656_393091%26bannerid%3D35656%26trackerid%3D35656_393091%26brand%3Ddoggocasino%26bta%3D35656%26rdk%3Drk1&pf=&ra=2644829123179846
IP
File type HTML document text\012- HTML document, ASCII text, with very long lines (2660), with no line terminators
Hash 548ebacca28ce5ee9e4552827432dc40
6df64ef2eccddd24f032d087ddf92ca76d00de7a
a384fb50671d95d50fde7384ba97f4e7409e5916db1399d8a632d2c721cef1a4
GET /ca.html?ver=9&rb=46806&ca=20841497&_o=46806&_t=20841497&pe=https%3A%2F%2Fdoggocasino.com%2Fno-no%3FaffiliateName%3D%255Bcellxpert%255D%26affid%3Dcx-35656_393091%26bannerid%3D35656%26trackerid%3D35656_393091%26brand%3Ddoggocasino%26bta%3D35656%26rdk%3Drk1&pf=&ra=2644829123179846 HTTP/1.1
Host: 20841497p.rfihub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 05 Feb 2023 10:15:11 GMT
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Set-Cookie: rud=H4sIAAAAAAAA_-MSNjU0MTQyNLAwMjYxtzAwM7c0MRPiM9R1yXQyigotyXOKLPQDAHxKHoAlAAAA; Path=/; Domain=.rfihub.com; Expires=Fri, 1 Mar 2024 10:15:11 GMT; Secure; SameSite=None
ruds=H4sIAAAAAAAA_-MSNjU0MTQyNLAwMjYxtzAwM7c0MRPiM9R1yXQyigotyXOKLPQDAHxKHoAlAAAA; Path=/; Domain=.rfihub.com; Secure; SameSite=None
eud=H4sIAAAAAAAA_5vFyGtoZm5qamlkaGhoZGixC41_Co3_Co3_C40_iQmVPwuNvwiNvwqNvwmNvwtdPQsq_xYafxMrmn5uNPt50fjCqPxHaHwAv2gceSABAAA; Path=/; Domain=.rfihub.com; Expires=Fri, 1 Mar 2024 10:15:11 GMT; Secure; SameSite=None
Cache-Control: no-cache
Content-Type: text/html;charset=utf-8
Content-Length: 2660
Server: Jetty(9.3.29.v20201019)
2d1c8d36-b9ba-45b7-87c9-e34c592a597a.seals-emr.certria.com/sealassets/c9336b3e535a38f1667d686718e87e3f-doggocasino.com-8cdd4d66f8d65689b62819334a267b9a257fee4eb2750b2e47cdaf63d0becac6311bea6226c3373c1ea5283761ef2821-c2VhbC5wbmc%3D?status=valid
200 OK 53 kB URL HTTP/2 2d1c8d36-b9ba-45b7-87c9-e34c592a597a.seals-emr.certria.com/sealassets/c9336b3e535a38f1667d686718e87e3f-doggocasino.com-8cdd4d66f8d65689b62819334a267b9a257fee4eb2750b2e47cdaf63d0becac6311bea6226c3373c1ea5283761ef2821-c2VhbC5wbmc%3D?status=valid
IP
File type PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced\012- data
Hash fceb44c117d8c9766bdd23befc239931
8a57ed8068117e00c0257cb97340274253236989
428b3487df7ab6c93f3f6345481dfc178a0c6e4c7589ccd6a3a11b12db077f28
GET /sealassets/c9336b3e535a38f1667d686718e87e3f-doggocasino.com-8cdd4d66f8d65689b62819334a267b9a257fee4eb2750b2e47cdaf63d0becac6311bea6226c3373c1ea5283761ef2821-c2VhbC5wbmc%3D?status=valid HTTP/1.1
Host: 2d1c8d36-b9ba-45b7-87c9-e34c592a597a.seals-emr.certria.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 52815
date: Sun, 05 Feb 2023 10:11:12 GMT
x-powered-by: Express
cache-control: max-age=1200
etag: W/"ce4f-ilftgGgRfgDAJXy5c0AnQlMjaYk"
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 794adc52ffaa2c43-FRA
x-cache: Hit from cloudfront
via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: PNASvTYL-25Ze9F5awz_Ogsm9kU-GIBd8Oa9QGI-XSdgHf1QDwaLmg==
age: 239
X-Firefox-Spdy: h2
static.zdassets.com/web_widget/latest/classic/web-widget-locales/classic/en-us-json-34c91d3.js
200 OK 8.1 kB URL HTTP/2 static.zdassets.com/web_widget/latest/classic/web-widget-locales/classic/en-us-json-34c91d3.js
IP
File type Unicode text, UTF-8 text, with very long lines (25838), with no line terminators
Hash 4c65c4aab5b8c96c3b958d9605fd959c
83dd1ae53dff2bdf222544856fb58f8d93fa439a
2ecfcb440155c535023156ff3e4a29d0424c1982fd968c2f723fa2f2981f616f
GET /web_widget/latest/classic/web-widget-locales/classic/en-us-json-34c91d3.js HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 10:15:10 GMT
content-type: application/javascript; charset=utf-8
x-amz-id-2: tOL0FFleSRJE3w6SKllPPx0QRdru/oACibTSIx6K5epU9dkgTT4oam7NiutFeIa8at7I44UhK1k=
x-amz-request-id: S54JTKV2P7MSNREC
x-amz-replication-status: COMPLETED
last-modified: Mon, 30 Jan 2023 01:11:46 GMT
etag: W/"89b68f56c96d15075b04b0ea633eabf1"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Tue, 30 Jan 2024 01:11:45 GMT
x-amz-version-id: wbwb2bk7DXJnfcyH6H7Oj9gg1QoJr0lR
cf-cache-status: HIT
age: 361935
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=k6YjsPty9bFgmSaSh4GB1Sx1Ppnor3MSUtGgSKocXJJnNfVCiLmWWfrS9UciJ6feFWaX0vi%2Bp495AhZ7EBTILadsyjbWqcl%2BgNvqEwHVozImiU3muiQa4xHI3lxEzcOjFZgtQ8s%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 794ae222eb380b55-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 085a2ec5437d0f0e37cf3aae2678ed4a
945bd96f97be79468e9c0e3d3c0e0eff518dcdad
ea076434ef6f13c4c16a06257925b0d49425271019b7e8a9e7b3eb6d154b5ab0
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=110760
Date: Sun, 05 Feb 2023 10:15:11 GMT
Etag: "63de78de-1d7"
Expires: Mon, 06 Feb 2023 17:01:11 GMT
Last-Modified: Sat, 04 Feb 2023 15:25:18 GMT
Server: ECS (nyb/1D35)
X-Cache: Miss from cloudfront
Via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 4mO_l88CCLe6w8Siho2zXTSor6raOcYxXSALVQEOltjPPgB6fBM3Vg==
Age: 5754
51d4256e-9ede-4425-8b77-d7e5166c1c25.snippet.antillephone.com/sealassets/c9336b3e535a38f1667d686718e87e3f-doggocasino.com-2f90385e7147995d0ad0e1568dcb8420125a9230e800b76e4574b197458fcd3ec3fae37cdc434512e60b35647fd94003-c2VhbC5wbmc%3D?status=valid
200 OK 46 kB URL HTTP/2 51d4256e-9ede-4425-8b77-d7e5166c1c25.snippet.antillephone.com/sealassets/c9336b3e535a38f1667d686718e87e3f-doggocasino.com-2f90385e7147995d0ad0e1568dcb8420125a9230e800b76e4574b197458fcd3ec3fae37cdc434512e60b35647fd94003-c2VhbC5wbmc%3D?status=valid
IP
File type PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced\012- data
Hash 375b5b5bcd1d5179f5b789e4c28ca6df
f52bfd097b13f83fa43714f59786efa4082f55a1
f7acaa7ace617964cd79de3287bfa740f1d3fbcbed82ea1d09cd94058d4b1281
GET /sealassets/c9336b3e535a38f1667d686718e87e3f-doggocasino.com-2f90385e7147995d0ad0e1568dcb8420125a9230e800b76e4574b197458fcd3ec3fae37cdc434512e60b35647fd94003-c2VhbC5wbmc%3D?status=valid HTTP/1.1
Host: 51d4256e-9ede-4425-8b77-d7e5166c1c25.snippet.antillephone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 46382
date: Sun, 05 Feb 2023 10:11:12 GMT
x-powered-by: Express
cache-control: max-age=1200
etag: W/"b52e-9Sv9CXsT+D+kNxT1l4bvpAgvVaE"
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 794adc52ed08904f-FRA
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: DFMlIYFuEhtE5CzEzSD9sjTdumjX190ZeeHs_h2Y59cJzRJncdKnXQ==
age: 239
X-Firefox-Spdy: h2
51d4256e-9ede-4425-8b77-d7e5166c1c25.snippet.antillephone.com/54f396e0-b046-49b1-9cb3-0c69281d7ea9-beacon.png
200 OK 68 B URL HTTP/2 51d4256e-9ede-4425-8b77-d7e5166c1c25.snippet.antillephone.com/54f396e0-b046-49b1-9cb3-0c69281d7ea9-beacon.png
IP
File type PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced\012- data
Hash e679fbd466a2d656f194a5da4fa083cd
2aa795c7607aa6ea41313be88f1b7a9c1ab516b3
f309b7c03d9cae63a9bedbee6ed655f3dbcdb194132943639344dead5f3b9710
GET /54f396e0-b046-49b1-9cb3-0c69281d7ea9-beacon.png HTTP/1.1
Host: 51d4256e-9ede-4425-8b77-d7e5166c1c25.snippet.antillephone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 68
date: Sat, 21 Jan 2023 04:07:09 GMT
last-modified: Tue, 15 Dec 2020 08:04:53 GMT
etag: "e679fbd466a2d656f194a5da4fa083cd"
cache-control: no-cache, no-store, must-revalidate
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 5HhxzFWN645JumIwhxVIJoDcRLRIj0VHhGqbmuCs-e7fxxSNdvOH3g==
age: 1318083
X-Firefox-Spdy: h2
doggocasino.com/Cookies-Icon.a41fe3b3f8f0046c586a.svg
200 OK 5.1 kB URL HTTP/2 doggocasino.com/Cookies-Icon.a41fe3b3f8f0046c586a.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (4404)
Hash 20ae97131ea2a44e5b88bd133b3d032e
4581fd131b5ed8f044af7e54857ffb36803c6c1c
d7c7b39ba3f7074431992c685cd39acf12c66a80f22ca3254e677d2867b84e9c
GET /Cookies-Icon.a41fe3b3f8f0046c586a.svg HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/styles.6fe09080dd4bc8174585.css
Cookie: __adm_tid=tid-40b2b6784.455c98d38; _ga_K4EHGY5F0T=GS1.1.1675592149.1.1.1675592150.59.0.0; _ga=GA1.2.88150227.1675592149; affiliateId=cx-35656_393091; bannerId=35656; trackerId=35656_393091; affiliateName=%5Bcellxpert%5D; _gid=GA1.2.1577888892.1675592150; _gat_UA-196341002-1=1; _hjSessionUser_3054262=eyJpZCI6ImRiMmFhNDdiLWQ4M2EtNTZiNy05OTY5LTQyMmYzYmY2ZmVmNSIsImNyZWF0ZWQiOjE2NzU1OTIxNTA2MDcsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_3054262=eyJpZCI6ImRmOTk4MTk4LThlZDktNGQ2NC04YTgwLWQ5MzZiM2YxMzMzZCIsImNyZWF0ZWQiOjE2NzU1OTIxNTA4NTAsImluU2FtcGxlIjpmYWxzZX0=; _hjIncludedInPageviewSample=1; _hjAbsoluteSessionInProgress=1; cookie_policy=accepted
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
x-amz-meta-codebuild-content-sha256: 4f853d18badd3933524ca4a1dd6240279e0051fb38905b83f18834b4b93aaeb1
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:08219a5d-0b7c-4ae2-afb4-2507533d271d
x-amz-meta-codebuild-content-md5: 319cfed7654cbf4a61d9a3eabce3d2f4
last-modified: Fri, 03 Feb 2023 09:41:14 GMT
x-amz-version-id: gIBO9N6AihX.kGIFhoJ.XeOvV3Ymx6hD
server: AmazonS3
content-encoding: br
date: Sun, 05 Feb 2023 09:55:00 GMT
etag: W/"87dfcd5ae030f407cc281bc26d0255f4"
vary: Accept-Encoding
via: 1.1 96c778ce6156d12f24b8b6cdaa0cbf66.cloudfront.net (CloudFront)
age: 1276
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: K6sgnbHxpLiyYH45Dib4V0T8T43bHxEzYXMuuxeJFlciAMqx9UXRjA==
X-Firefox-Spdy: h2
doggocasino.com/assets/theme/images/bottom-left-ribbon-main.webp
200 OK 938 B URL HTTP/2 doggocasino.com/assets/theme/images/bottom-left-ribbon-main.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 8d68bfd2cfba32a4165feb5fb804d34e
46bb765ee90b8ab2fedecdfb5bf38d6b0cd92c85
b3fd3fe71d455cdfca148d74e4af6bc18cf49083e436740c63ba0e6b3bd1aa2e
GET /assets/theme/images/bottom-left-ribbon-main.webp HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/no-no?affiliateName=%5Bcellxpert%5D&affid=cx-35656_393091&bannerid=35656&trackerid=35656_393091&brand=doggocasino&bta=35656&rdk=rk1
Cookie: __adm_tid=tid-40b2b6784.455c98d38; _ga_K4EHGY5F0T=GS1.1.1675592149.1.1.1675592150.59.0.0; _ga=GA1.2.88150227.1675592149; affiliateId=cx-35656_393091; bannerId=35656; trackerId=35656_393091; affiliateName=%5Bcellxpert%5D; _gid=GA1.2.1577888892.1675592150; _gat_UA-196341002-1=1; _hjSessionUser_3054262=eyJpZCI6ImRiMmFhNDdiLWQ4M2EtNTZiNy05OTY5LTQyMmYzYmY2ZmVmNSIsImNyZWF0ZWQiOjE2NzU1OTIxNTA2MDcsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_3054262=eyJpZCI6ImRmOTk4MTk4LThlZDktNGQ2NC04YTgwLWQ5MzZiM2YxMzMzZCIsImNyZWF0ZWQiOjE2NzU1OTIxNTA4NTAsImluU2FtcGxlIjpmYWxzZX0=; _hjIncludedInPageviewSample=1; _hjAbsoluteSessionInProgress=1; cookie_policy=accepted
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 938
x-amz-meta-codebuild-content-sha256: 4f853d18badd3933524ca4a1dd6240279e0051fb38905b83f18834b4b93aaeb1
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:08219a5d-0b7c-4ae2-afb4-2507533d271d
x-amz-meta-codebuild-content-md5: 319cfed7654cbf4a61d9a3eabce3d2f4
last-modified: Fri, 03 Feb 2023 09:41:08 GMT
x-amz-version-id: Xu5y91fDXEAJhwSGBFPBufpeVa2i1Ha4
server: AmazonS3
date: Sun, 05 Feb 2023 10:09:34 GMT
etag: "8d68bfd2cfba32a4165feb5fb804d34e"
vary: Accept-Encoding
via: 1.1 96c778ce6156d12f24b8b6cdaa0cbf66.cloudfront.net (CloudFront)
age: 338
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Xfa4i7qOnoEZ4z7CxTQvFK4qYfjmgr2Jh6s0p6_N53s_2W4rguuofg==
X-Firefox-Spdy: h2
static.zdassets.com/web_widget/latest/classic/fda6cd35495c75f83508d9d2e77ee33d.mp3
206 Partial Content 20 kB URL HTTP/2 static.zdassets.com/web_widget/latest/classic/fda6cd35495c75f83508d9d2e77ee33d.mp3
IP
File type Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, JntStereo\012- data
Hash f11ce9e8f40a392830217253fe75d6de
89ba57fcc360da34756c127acba15a8b23267fc6
05069cc62b394b6ecc2daf3c51b4b2ba7f6cc8735988e8234487234af47eceee
GET /web_widget/latest/classic/fda6cd35495c75f83508d9d2e77ee33d.mp3 HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 206 Partial Content
date: Sun, 05 Feb 2023 10:15:12 GMT
content-type: audio/mpeg; charset=utf-8
content-length: 19698
x-amz-id-2: g87hI3qvp6u/eYrvF5ekvnlnd/ZKIURFxO017tHaVZdhHodAb1MX6TjMAHxlaiIHpETLXLY/I+c=
x-amz-request-id: X429XSBWRFS5FTSC
x-amz-replication-status: COMPLETED
last-modified: Wed, 09 Mar 2022 06:43:05 GMT
etag: "f11ce9e8f40a392830217253fe75d6de"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Thu, 09 Mar 2023 06:43:04 GMT
x-amz-version-id: ngeCnQamEcRo6kgSgz9pTF5J7hCEPwJW
cf-cache-status: HIT
age: 2559681
content-range: bytes 0-19697/19698
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2P8OLKL%2FpavmPg29cAo8dbzU6ijOUPriTqaYRxBCVCDqhthkVJT3q35qYteuyyhX1%2FPNlcRn31hXKXJPnl2oPBF%2FZ849km%2BPsOSLCvCPfqegvLOnbXUb65dfPlpqByUpqxgogng%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 794ae22e7f6e0b55-OSL
X-Firefox-Spdy: h2
live.rezync.com/pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5141210823478067946&referrer=https%3A%2F%2Fdoggocasino.com%2Fno-no%3FaffiliateName%3D%255Bcellxpert%255D%26affid%3Dcx-35656_393091%26bannerid%3D35656%26trackerid%3D35656_393091%26brand%3Ddoggocasino%26bta%3D35656%26rdk%3Drk1
302 Found 661 B URL HTTP/2 live.rezync.com/pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5141210823478067946&referrer=https%3A%2F%2Fdoggocasino.com%2Fno-no%3FaffiliateName%3D%255Bcellxpert%255D%26affid%3Dcx-35656_393091%26bannerid%3D35656%26trackerid%3D35656_393091%26brand%3Ddoggocasino%26bta%3D35656%26rdk%3Drk1
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (575)
Hash 02910c9a60e471f9a22b4f482643646e
6be9e5524d54fb6fb76e33bfb6d6170f3d8cb977
8eebf05a36ea5dba95960399a636243a1e972c2048c3a624bcee13a754944f13
GET /pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5141210823478067946&referrer=https%3A%2F%2Fdoggocasino.com%2Fno-no%3FaffiliateName%3D%255Bcellxpert%255D%26affid%3Dcx-35656_393091%26bannerid%3D35656%26trackerid%3D35656_393091%26brand%3Ddoggocasino%26bta%3D35656%26rdk%3Drk1 HTTP/1.1
Host: live.rezync.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
content-type: text/html; charset=utf-8
content-length: 661
location: https://p.rfihub.com/cm?pub=39342&in=0&userid=c71d5391-1762-47dd-b748-af098a713550%3A1675592112.3800864&forward=https%3A//idsync.rlcdn.com/501709.gif%3Fpartner_uid%3Dc71d5391-1762-47dd-b748-af098a713550%253A1675592112.3800864
date: Sun, 05 Feb 2023 10:15:12 GMT
set-cookie: zync-uuid=c71d5391-1762-47dd-b748-af098a713550:1675592112.3800864; Domain=rezync.com; Expires=Fri, 04 Aug 2023 02:15:12 GMT; Path=/; SameSite=None; Secure
sd-session-id=.eJwNylEOwiAMANC79HsYCi0tXGbBgQnRoRnzx2V3d58veQfMn7qtude-Q9q3b51gebVLA9IBo_3W-oQEjIQOrTpPojZIpADnBKOO0d59buU6i2BhH9GgBGdISjF3ITX5YaNmQc9sEwZhjg7R3bxaq4Hg_AOVZCTc.Y9-BsA.VNb17TBKlFnubEOWSbZCC6bNmUI; Expires=Fri, 04 Aug 2023 10:15:12 GMT; HttpOnly; Path=/; SameSite=None; Secure
vary: Cookie
server: lighttpd/1.4.59
x-cache: Miss from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: aQOc-ukfz_E5kgYrM4iyux65phZV3dYMhH1M1SYP7R9ua41RZPiItQ==
X-Firefox-Spdy: h2
doggocasino.zendesk.com/embeddable/config
200 OK 1.2 kB URL HTTP/2 doggocasino.zendesk.com/embeddable/config
IP
File type JSON data\012- , ASCII text, with very long lines (995), with no line terminators
Hash 19c8e627ff0805c6ee1365da3e9aaf03
bc02214706571942601a3b09fef49fc6b95e8002
e6832aa2b03e07efe8378585e1d1e1363ab921242aff524807256fe2612653dd
GET /embeddable/config HTTP/1.1
Host: doggocasino.zendesk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://doggocasino.com/
Origin: https://doggocasino.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 05 Feb 2023 10:15:09 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-expose-headers:
access-control-max-age: 7200
cache-control: public, max-age=60, stale-while-revalidate=600, stale-if-error=3600
x-zendesk-origin-server: embeddable-app-server-5f6c8f555-s7grz
x-request-id: 794adc14cac4b517-DUB
x-runtime: 0.001849
vary: Origin, Accept-Encoding
x-cached: STALE
last-modified: Sun, 05 Feb 2023 10:12:28 GMT
cf-cache-status: HIT
age: 37
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ThTSQRGKJ7Z4S6SWTw2g%2B5y8ECeV1mQEWbHfbSBc5HZT%2BYtQmppqjg1q2KlUKq12%2B5f%2Bi%2FI%2FjaV5K0DbzmmwTAXyDSV43wYnZ0Lsfbokxu7rl5%2F71UW8rZrsEfzO6E5fmF5hmvVg4GWW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
set-cookie: __cfruid=034732f2901f20f1116dd1b3deb1c05f0175c56b-1675592109; path=/; domain=.doggocasino.zendesk.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 794ae21d9c81b4ed-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash cc1b02913eed405d712b44b9d90ea403
99257c8bb5a003744ee9822680733b86185ce5db
205400b6a26a5ffdd3ccd92be184e141cd6676fdbad50185c541b5d4c5a7364d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2211
Cache-Control: max-age=125174
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 10:15:12 GMT
Etag: "63debf03-117"
Expires: Mon, 06 Feb 2023 21:01:26 GMT
Last-Modified: Sat, 04 Feb 2023 20:24:35 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 279
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash f5a4173a216236a35736c50397bf387f
c4a6e64cab943e1abf0c5ecc7244b2e87d795fd7
e51ff0e977165d7e6b1a832f3c48c1fd9d440b8a8038d358b234ca0b60d73a64
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=134196
Date: Sun, 05 Feb 2023 10:15:12 GMT
Etag: "63dedf6b-1d7"
Expires: Mon, 06 Feb 2023 23:31:48 GMT
Last-Modified: Sat, 04 Feb 2023 22:42:51 GMT
Server: ECS (nyb/1D31)
X-Cache: Miss from cloudfront
Via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 4-30lN76mAwTQYCcOfZBMYbwor4XaWaVOVUIEMvhjdIcdI6_-NyxXA==
Age: 2937
contextual.media.net/cksync.php?cs=3&type=rkt&ovsid=5141210823478067946
200 OK 237 B URL HTTP/2 contextual.media.net/cksync.php?cs=3&type=rkt&ovsid=5141210823478067946
IP
File type GIF image data, version 87a, 1 x 1\012- data
Hash 74378edf31ef26cd97c236ad08d05fa3
fdd52cdbf193d1dfd1031978667689f3414b49ed
11cb2c0e70f91c6a0326cf4a4f9fa1b177c14efba6b56bf7535624b9c7bce990
GET /cksync.php?cs=3&type=rkt&ovsid=5141210823478067946 HTTP/1.1
Host: contextual.media.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Apache
content-length: 237
content-type: image/gif
set-cookie: visitor-id=3185937123580220000V10; Expires=Mon, 05 Feb 2024 10:15:12 GMT; domain=.media.net; Path=/;
data-rk=5141210823478067946~~3;Expires=Sun, 04 Feb 2024 10:15:12 GMT;path=/;domain=.media.net;
p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA", CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA, CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA
strict-transport-security: max-age=31536000
x-mnet-hl2: E
expires: Sun, 05 Feb 2023 10:15:12 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Sun, 05 Feb 2023 10:15:12 GMT
X-Firefox-Spdy: h2
cm.g.doubleclick.net/pixel?&in=0&google_nid=zeta_interactive&google_cm=&google_sc=&google_hm=NTE0MTIxMDgyMzQ3ODA2Nzk0Ng==&forward=
302 Found 369 B URL HTTP/2 cm.g.doubleclick.net/pixel?&in=0&google_nid=zeta_interactive&google_cm=&google_sc=&google_hm=NTE0MTIxMDgyMzQ3ODA2Nzk0Ng==&forward=
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 3bc1a6830fc3a7f8ced6f364af998b6d
ff83de36371aaf08b0ae3811c5d7ea5b17d22ac8
7b8d6dbbd465754fdb9aa632de48cce388d38064332a65291dd7eabaf8a0fbff
GET /pixel?&in=0&google_nid=zeta_interactive&google_cm=&google_sc=&google_hm=NTE0MTIxMDgyMzQ3ODA2Nzk0Ng==&forward= HTTP/1.1
Host: cm.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
location: https://cm.g.doubleclick.net/pixel?in=0&google_nid=zeta_interactive&google_cm=&google_sc=&google_hm=NTE0MTIxMDgyMzQ3ODA2Nzk0Ng==&forward=&google_tc=
date: Sun, 05 Feb 2023 10:15:12 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
server: HTTP server (unknown)
content-length: 369
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Sun, 05-Feb-2023 10:30:12 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 83712ff1b330fc8aee58e72feb68a1d5
d31392c6247cbdad51a6fd71539654acbac2119a
2f2881ce7eb01a738787665d049784ade1b0ad0c3b83f311d9809ad852061288
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 05 Feb 2023 10:15:12 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 05 Feb 2023 01:42:56 GMT
Expires: Sun, 12 Feb 2023 01:42:55 GMT
Etag: "d31392c6247cbdad51a6fd71539654acbac2119a"
Cache-Control: max-age=573462,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 794ae22f8b380afe-OSL
ocsp.digicert.com/
200 OK 727 B IP
Hash d774a46ba3d8e20574683d84c02cbd7c
db8d435964a98b69d33b2972a744cb4b8186d25e
7447b09098e05b9a3b54740ba488e656d6b736cabfc056ef583c0bc30619b47f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4158
Cache-Control: max-age=163493
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 10:15:12 GMT
Etag: "63df4d17-2d7"
Expires: Tue, 07 Feb 2023 07:40:05 GMT
Last-Modified: Sun, 05 Feb 2023 06:30:47 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 727
cm.g.doubleclick.net/pixel?&in=0&google_nid=zeta_interactive&google_cm=&google_sc=&google_hm=NTEyNDMyMjMyNDg5OTc5MDk0MQ==&forward=
302 Found 369 B URL HTTP/2 cm.g.doubleclick.net/pixel?&in=0&google_nid=zeta_interactive&google_cm=&google_sc=&google_hm=NTEyNDMyMjMyNDg5OTc5MDk0MQ==&forward=
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash e1fb01c380f9e95250ce1eeb9ce82b5a
c48c9e0cc8dc6b94604fe6a5a35e61070483dbef
8d9d20cec5f05cd439565dbba136b86420edcc678fe496e09a40d56a38f42f5f
GET /pixel?&in=0&google_nid=zeta_interactive&google_cm=&google_sc=&google_hm=NTEyNDMyMjMyNDg5OTc5MDk0MQ==&forward= HTTP/1.1
Host: cm.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
location: https://cm.g.doubleclick.net/pixel?in=0&google_nid=zeta_interactive&google_cm=&google_sc=&google_hm=NTEyNDMyMjMyNDg5OTc5MDk0MQ==&forward=&google_tc=
date: Sun, 05 Feb 2023 10:15:12 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
server: HTTP server (unknown)
content-length: 369
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Sun, 05-Feb-2023 10:30:12 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
status.geotrust.com/
200 OK 471 B IP
Hash 33b4dcac47176829c3f733cf485b00d8
2f0ca8dfa8106b51602e1c9cd6a5b1e31254c924
d258d8a0ec6ed7cf9fb2ee6de730c0380adde3a3c656e10f046a56f140307f2c
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3906
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 10:15:12 GMT
Last-Modified: Sun, 05 Feb 2023 09:10:06 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471
cm.g.doubleclick.net/pixel?in=0&google_nid=zeta_interactive&google_cm=&google_sc=&google_hm=NTE0MTIxMDgyMzQ3ODA2Nzk0Ng==&forward=&google_tc=
302 Found 269 B URL HTTP/2 cm.g.doubleclick.net/pixel?in=0&google_nid=zeta_interactive&google_cm=&google_sc=&google_hm=NTE0MTIxMDgyMzQ3ODA2Nzk0Ng==&forward=&google_tc=
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 2ac1f21e70e438c7e2193d02ee7e9be0
f9a11bb626bad146751fc166f96b91f6aeae7eab
de4a04a623ca095cd229a54edeb3120d9dc94d227198b75cb9a0a69677ed7c85
GET /pixel?in=0&google_nid=zeta_interactive&google_cm=&google_sc=&google_hm=NTE0MTIxMDgyMzQ3ODA2Nzk0Ng==&forward=&google_tc= HTTP/1.1
Host: cm.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20841497p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: https://a.rfihub.com/cm?pub=445&in=0&forward=&google_error=3
date: Sun, 05 Feb 2023 10:15:12 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
server: HTTP server (unknown)
content-length: 269
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
status.geotrust.com/
200 OK 471 B IP
Hash 47db3476d512629ec4f6f94562fb3cff
7c450eba3643bc6e25c74832cfbded1c854fe2b9
c47a89e3a2150f62b1ce7a69f2779481b8b819f9610e132f153d0c3546c105d5
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5926
Cache-Control: max-age=142594
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 10:15:12 GMT
Etag: "63def48c-1d7"
Expires: Tue, 07 Feb 2023 01:51:46 GMT
Last-Modified: Sun, 05 Feb 2023 00:13:00 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
contextual.media.net/cksync.php?cs=3&type=rkt&ovsid=5124322324899790941
200 OK 237 B URL HTTP/2 contextual.media.net/cksync.php?cs=3&type=rkt&ovsid=5124322324899790941
IP
File type GIF image data, version 87a, 1 x 1\012- data
Hash 74378edf31ef26cd97c236ad08d05fa3
fdd52cdbf193d1dfd1031978667689f3414b49ed
11cb2c0e70f91c6a0326cf4a4f9fa1b177c14efba6b56bf7535624b9c7bce990
GET /cksync.php?cs=3&type=rkt&ovsid=5124322324899790941 HTTP/1.1
Host: contextual.media.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: Apache
content-length: 237
content-type: image/gif
set-cookie: visitor-id=3185937123580285000V10; Expires=Mon, 05 Feb 2024 10:15:12 GMT; domain=.media.net; Path=/;
data-rk=5124322324899790941~~3;Expires=Sun, 04 Feb 2024 10:15:12 GMT;path=/;domain=.media.net;
p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA", CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA, CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA
strict-transport-security: max-age=31536000
x-mnet-hl2: E
expires: Sun, 05 Feb 2023 10:15:12 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Sun, 05 Feb 2023 10:15:12 GMT
X-Firefox-Spdy: h2
aa.agkn.com/adscores/g.pixel?sid=9212192898&rf=5141210823478067946
200 OK 43 B URL HTTP/2 aa.agkn.com/adscores/g.pixel?sid=9212192898&rf=5141210823478067946
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash db04c7b378cb2db912c3ba8a5a774ee3
dee34bd86c3484d31002182aa2b7caa4699126b8
98b3d9d20e032f90aca49e9b116225d539ff6fbdb7e42c3c363f63896ac03d2a
GET /adscores/g.pixel?sid=9212192898&rf=5141210823478067946 HTTP/1.1
Host: aa.agkn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 05 Feb 2023 10:15:12 GMT
content-type: image/gif
content-length: 43
server: AAWebServer
p3p: policyref="https://www.agkn.com/p3p/p3p.xml",CP="NOI NID"
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: accept, cache-control, origin, x-requested-with, x-file-name, content-type
X-Firefox-Spdy: h2
idsync.rlcdn.com/360947.gif?partner_uid=5141210823478067946
200 OK 42 B URL HTTP/2 idsync.rlcdn.com/360947.gif?partner_uid=5141210823478067946
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /360947.gif?partner_uid=5141210823478067946 HTTP/1.1
Host: idsync.rlcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache, no-store
content-type: image/gif
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
set-cookie: rlas3=o9/nLQBBMj3FW+bwnru/vzyxPiB/Kjg4HXJbhAA4AKs=; Path=/; Domain=rlcdn.com; Expires=Mon, 05 Feb 2024 10:15:12 GMT; Secure; SameSite=None
pxrc=CAA=; Path=/; Domain=rlcdn.com; Expires=Thu, 06 Apr 2023 10:15:12 GMT; Secure; SameSite=None
timing-allow-origin: *
date: Sun, 05 Feb 2023 10:15:12 GMT
content-length: 42
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
aa.agkn.com/adscores/g.pixel?sid=9212192898&rf=5124322324899790941
200 OK 43 B URL HTTP/2 aa.agkn.com/adscores/g.pixel?sid=9212192898&rf=5124322324899790941
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash db04c7b378cb2db912c3ba8a5a774ee3
dee34bd86c3484d31002182aa2b7caa4699126b8
98b3d9d20e032f90aca49e9b116225d539ff6fbdb7e42c3c363f63896ac03d2a
GET /adscores/g.pixel?sid=9212192898&rf=5124322324899790941 HTTP/1.1
Host: aa.agkn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 10:15:12 GMT
content-type: image/gif
content-length: 43
server: AAWebServer
p3p: policyref="https://www.agkn.com/p3p/p3p.xml",CP="NOI NID"
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: accept, cache-control, origin, x-requested-with, x-file-name, content-type
X-Firefox-Spdy: h2
idsync.rlcdn.com/360947.gif?partner_uid=5124322324899790941
200 OK 42 B URL HTTP/2 idsync.rlcdn.com/360947.gif?partner_uid=5124322324899790941
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /360947.gif?partner_uid=5124322324899790941 HTTP/1.1
Host: idsync.rlcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: no-cache, no-store
content-type: image/gif
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
set-cookie: pxrc=CAA=; Path=/; Domain=rlcdn.com; Expires=Thu, 06 Apr 2023 10:15:12 GMT; Secure; SameSite=None
timing-allow-origin: *
date: Sun, 05 Feb 2023 10:15:12 GMT
content-length: 42
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
p.rfihub.com/cm?pub=24472&in=1
302 Found 0 B URL HTTP/1.1 p.rfihub.com/cm?pub=24472&in=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cm?pub=24472&in=1 HTTP/1.1
Host: p.rfihub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 302 Found
Date: Sun, 05 Feb 2023 10:15:12 GMT
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Set-Cookie: ruds=H4sIAAAAAAAA_-MSNjU0NjExNTUxMrC0MDGyMDUwMhfiM9Q1K0x1Na4sLDKKqMgEAHqhVaIlAAAA; Path=/; Domain=.rfihub.com; Secure; SameSite=None
eud=H4sIAAAAAAAA_7vFwmtoZm5qamlkaGhkZmEOAA79A1gQAAAA; Path=/; Domain=.rfihub.com; Expires=Fri, 1 Mar 2024 10:15:12 GMT; Secure; SameSite=None
rud=H4sIAAAAAAAA_-MSNjU0NjExNTUxMrC0MDGyMDUwMhfiM9Q1K0x1Na4sLDKKqMgEAHqhVaIlAAAA; Path=/; Domain=.rfihub.com; Expires=Fri, 1 Mar 2024 10:15:12 GMT; Secure; SameSite=None
Location: https://ps.eyeota.net/match?uid=5134455420984285027&bid=omt9pi0
Content-Length: 0
Server: Jetty(9.3.29.v20201019)
cm.g.doubleclick.net/pixel?in=0&google_nid=zeta_interactive&google_cm=&google_sc=&google_hm=NTEyNDMyMjMyNDg5OTc5MDk0MQ==&forward=&google_tc=
302 Found 269 B URL HTTP/2 cm.g.doubleclick.net/pixel?in=0&google_nid=zeta_interactive&google_cm=&google_sc=&google_hm=NTEyNDMyMjMyNDg5OTc5MDk0MQ==&forward=&google_tc=
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 2ac1f21e70e438c7e2193d02ee7e9be0
f9a11bb626bad146751fc166f96b91f6aeae7eab
de4a04a623ca095cd229a54edeb3120d9dc94d227198b75cb9a0a69677ed7c85
GET /pixel?in=0&google_nid=zeta_interactive&google_cm=&google_sc=&google_hm=NTEyNDMyMjMyNDg5OTc5MDk0MQ==&forward=&google_tc= HTTP/1.1
Host: cm.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20841497p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: https://a.rfihub.com/cm?pub=445&in=0&forward=&google_error=3
date: Sun, 05 Feb 2023 10:15:12 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
server: HTTP server (unknown)
content-length: 269
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
us-u.openx.net/w/1.0/sd?id=537073062&val=5141210823478067946&r=
200 OK 43 B URL HTTP/2 us-u.openx.net/w/1.0/sd?id=537073062&val=5141210823478067946&r=
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /w/1.0/sd?id=537073062&val=5141210823478067946&r= HTTP/1.1
Host: us-u.openx.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept
server: OXGW/0.0.0
pragma: no-cache
p3p: CP="CUR ADM OUR NOR STA NID"
expires: Mon, 26 Jul 1997 05:00:00 GMT
date: Sun, 05 Feb 2023 10:15:12 GMT
content-type: image/gif
content-length: 43
cache-control: private, max-age=0, no-cache
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
us-u.openx.net/w/1.0/sd?id=537073062&val=5124322324899790941&r=
200 OK 43 B URL HTTP/2 us-u.openx.net/w/1.0/sd?id=537073062&val=5124322324899790941&r=
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /w/1.0/sd?id=537073062&val=5124322324899790941&r= HTTP/1.1
Host: us-u.openx.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
vary: Accept
server: OXGW/0.0.0
pragma: no-cache
p3p: CP="CUR ADM OUR NOR STA NID"
expires: Mon, 26 Jul 1997 05:00:00 GMT
date: Sun, 05 Feb 2023 10:15:12 GMT
content-type: image/gif
content-length: 43
cache-control: private, max-age=0, no-cache
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
sync-tm.everesttech.net/upi/pid/Mlpt2JaG/?redir=https%3A%2F%2Fp.rfihub.com%2Fcm%3Fin%3D1%26pub%3D21653%26userid%3D%24%7BTM_USER_ID%7D
302 Found 0 B URL HTTP/2 sync-tm.everesttech.net/upi/pid/Mlpt2JaG/?redir=https%3A%2F%2Fp.rfihub.com%2Fcm%3Fin%3D1%26pub%3D21653%26userid%3D%24%7BTM_USER_ID%7D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /upi/pid/Mlpt2JaG/?redir=https%3A%2F%2Fp.rfihub.com%2Fcm%3Fin%3D1%26pub%3D21653%26userid%3D%24%7BTM_USER_ID%7D HTTP/1.1
Host: sync-tm.everesttech.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: CP="NOI DSP COR LAW PSAo PSDo IVAo IVDo OUR BUS UNI DEM"
access-control-allow-origin: *
set-cookie: everest_g_v2=g_surferid~Y9_BsAAExlH3igAh; Path=/; Domain=.everesttech.net; Expires=Mon, 05-Feb-2024 10:15:12 GMT; Max-Age=31536000
location: https://sync-tm.everesttech.net/ct/upi/pid/Mlpt2JaG/?redir=https%3A%2F%2Fp.rfihub.com%2Fcm%3Fin%3D1%26pub%3D21653%26userid%3D%24%7BTM_USER_ID%7D&_test=Y9_BsAAExlH3igAh
server: Jetty(9.4.35.v20201120)
accept-ranges: bytes
date: Sun, 05 Feb 2023 10:15:12 GMT
via: 1.1 varnish
x-served-by: cache-bma1635-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1675592113.632145,VS0,VE91
cache-control: no-cache
pragma: no-cache
content-length: 0
X-Firefox-Spdy: h2
sync.search.spotxchange.com/partner?adv_id=7180&uid=5141210823478067946&img=1
302 Found 0 B URL HTTP/1.1 sync.search.spotxchange.com/partner?adv_id=7180&uid=5141210823478067946&img=1
IP
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partner?adv_id=7180&uid=5141210823478067946&img=1 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Sun, 05 Feb 2023 10:15:12 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=fa2cca4d-a53d-11ed-a12e-1ac054420106; expires=Sun, 05-Mar-2023 10:15:12 GMT; path=/; domain=.spotxchange.com; SameSite=none
Location: /partner?adv_id=7180&uid=5141210823478067946&img=1&__user_check__=1&sync_id=fa2cca8e-a53d-11ed-a12e-1ac054420106
X-fe: 125
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
ib.adnxs.com/setuid?entity=18&code=5141210823478067946
307 Redirection 0 B URL HTTP/1.1 ib.adnxs.com/setuid?entity=18&code=5141210823478067946
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /setuid?entity=18&code=5141210823478067946 HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Sun, 05 Feb 2023 10:15:12 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
Location: https://ib.adnxs.com/bounce?%2Fsetuid%3Fentity%3D18%26code%3D5141210823478067946
AN-X-Request-Uuid: ce0c8396-077b-457b-98ef-bdd27a4405a7
Set-Cookie: uuid2=3944169863773099158; SameSite=None; Path=/; Max-Age=7776000; Expires=Sat, 06-May-2023 10:15:12 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 867.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
x.dlx.addthis.com/e/rocketfuel_sync?na_exid=5141210823478067946
200 OK 43 B URL HTTP/2 x.dlx.addthis.com/e/rocketfuel_sync?na_exid=5141210823478067946
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /e/rocketfuel_sync?na_exid=5141210823478067946 HTTP/1.1
Host: x.dlx.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
content-length: 43
expires: Sun, 05 Feb 2023 10:15:12 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Sun, 05 Feb 2023 10:15:12 GMT
strict-transport-security: max-age=2628000
X-Firefox-Spdy: h2
sync-tm.everesttech.net/ct/upi/pid/Mlpt2JaG/?redir=https%3A%2F%2Fp.rfihub.com%2Fcm%3Fin%3D1%26pub%3D21653%26userid%3D%24%7BTM_USER_ID%7D&_test=Y9_BsAAExlH3igAh
200 OK 85 B URL HTTP/2 sync-tm.everesttech.net/ct/upi/pid/Mlpt2JaG/?redir=https%3A%2F%2Fp.rfihub.com%2Fcm%3Fin%3D1%26pub%3D21653%26userid%3D%24%7BTM_USER_ID%7D&_test=Y9_BsAAExlH3igAh
IP
File type PNG image data, 1 x 1, 1-bit colormap, non-interlaced\012- data
Hash 5bec6606b8392065f9da9898ca6f7b14
73ac5b01b5e3293fb792179626e7f8369cdb944d
acccc501aa6afa3cfac15e8ddccf1561deed2ed08c2f7d652abbdbe9aa71609a
GET /ct/upi/pid/Mlpt2JaG/?redir=https%3A%2F%2Fp.rfihub.com%2Fcm%3Fin%3D1%26pub%3D21653%26userid%3D%24%7BTM_USER_ID%7D&_test=Y9_BsAAExlH3igAh HTTP/1.1
Host: sync-tm.everesttech.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20841497p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
server: Jetty(9.4.35.v20201120)
accept-ranges: bytes
date: Sun, 05 Feb 2023 10:15:12 GMT
via: 1.1 varnish
age: 644
x-served-by: cache-bma1635-BMA
x-cache: HIT
x-cache-hits: 1469
x-timer: S1675592113.742423,VS0,VE0
cache-control: no-cache
pragma: no-cache
content-length: 85
X-Firefox-Spdy: h2
sync.search.spotxchange.com/partner?adv_id=7180&uid=5124322324899790941&img=1
302 Found 0 B URL HTTP/1.1 sync.search.spotxchange.com/partner?adv_id=7180&uid=5124322324899790941&img=1
IP
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partner?adv_id=7180&uid=5124322324899790941&img=1 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Sun, 05 Feb 2023 10:15:12 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=fa31c279-a53d-11ed-a497-1d34abdd0206; expires=Sun, 05-Mar-2023 10:15:12 GMT; path=/; domain=.spotxchange.com; SameSite=none
Location: /partner?adv_id=7180&uid=5124322324899790941&img=1&__user_check__=1&sync_id=fa31c2c6-a53d-11ed-a497-1d34abdd0206
X-fe: 21
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 5166c3b89ab164ecec5b2ee9905cf6c7
f0320161e7314ec22c62f35e11af5f3c09685181
388d9f7fcd361430f51a5776e5bd8320b61e4e6c71c75370996aec37fbaddd51
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sun, 05 Feb 2023 10:15:12 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19023
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sun, 05 Feb 2023 03:28:11 GMT
Expires: Mon, 06 Feb 2023 03:28:11 GMT
ETag: "f0320161e7314ec22c62f35e11af5f3c09685181"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ib.adnxs.com/bounce?%2Fsetuid%3Fentity%3D18%26code%3D5141210823478067946
200 OK 43 B URL HTTP/1.1 ib.adnxs.com/bounce?%2Fsetuid%3Fentity%3D18%26code%3D5141210823478067946
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 592ebefc7104d681d57852665e9ad514
15cdf8df32aa251dd6dd590a60bf9cf74474e7c5
4b5b6b15c6255109e06720cce42a06d3aead8b7874423d9c52cb0303212c25ef
GET /bounce?%2Fsetuid%3Fentity%3D18%26code%3D5141210823478067946 HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20841497p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sun, 05 Feb 2023 10:15:12 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
AN-X-Request-Uuid: 847aeb94-412f-4d52-850f-289a7c5db18b
Set-Cookie: anj=dTM7k!M4/YErk#WF']wIg2ImGrIb+`!@wnfH8KAM.xpH^Gmi[rFSpifD>]4eHMLugHN@U/^gGrQ7BrQ$!2>h9/+0J2!*!.im_-[Z; SameSite=None; Path=/; Max-Age=7776000; Expires=Sat, 06-May-2023 10:15:12 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 867.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
bpi.rtactivate.com/tag/?id=11017&user_id=5141210823478067946
200 OK 43 B URL HTTP/2 bpi.rtactivate.com/tag/?id=11017&user_id=5141210823478067946
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /tag/?id=11017&user_id=5141210823478067946 HTTP/1.1
Host: bpi.rtactivate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: awselb/2.0
date: Sun, 05 Feb 2023 10:15:12 GMT
content-type: image/gif
content-length: 43
X-Firefox-Spdy: h2
dsum-sec.casalemedia.com/rum?cm_dsp_id=57&external_user_id=5141210823478067946&forward=
302 Found 0 B URL HTTP/1.1 dsum-sec.casalemedia.com/rum?cm_dsp_id=57&external_user_id=5141210823478067946&forward=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rum?cm_dsp_id=57&external_user_id=5141210823478067946&forward= HTTP/1.1
Host: dsum-sec.casalemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Date: Sun, 05 Feb 2023 10:15:12 GMT
Server: Apache
Cache-Control: no-cache
Expires: 0
Location: /rum?cm_dsp_id=57&external_user_id=5141210823478067946&forward=&C=1
P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI"
Pragma: no-cache
Content-Length: 0
Set-Cookie: CMID=Y9.BsOR9PgszCP918s4lHAAA; Path=/; Domain=casalemedia.com; Expires=Mon, 05 Feb 2024 10:15:12 GMT; Max-Age=31536000; Secure; SameSite=None
CMPS=325; Path=/; Domain=casalemedia.com; Expires=Sat, 06 May 2023 10:15:12 GMT; Max-Age=7776000; Secure; SameSite=None
CMPRO=325; Path=/; Domain=casalemedia.com; Expires=Sat, 06 May 2023 10:15:12 GMT; Max-Age=7776000; Secure; SameSite=None
Keep-Alive: timeout=1, max=500
Connection: Keep-Alive
widget-mediator.zopim.com/s/W/ws/U7SnZWBcbWfnmoT7/c/1675592152306
101 Switching Protocols 0 B URL HTTP/1.1 widget-mediator.zopim.com/s/W/ws/U7SnZWBcbWfnmoT7/c/1675592152306
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s/W/ws/U7SnZWBcbWfnmoT7/c/1675592152306 HTTP/1.1
Host: widget-mediator.zopim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://doggocasino.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 5WnKDMjt6eFhYpO6KyAzwQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Sun, 05 Feb 2023 10:15:12 GMT
Connection: upgrade
Set-Cookie: AWSALB=kIQh5Y3089OXDcHBcSaPA8d8spQKnL/LLqlfYyTKJXSbQf94wxhZhRyYolKDUiU7H6Vvr/zROs71CfveLSkzGJjyZMY1937zt7IE6Xo8enfBCGiufvJO7bYiaXjY; Expires=Sun, 12 Feb 2023 10:15:12 GMT; Path=/
AWSALBCORS=kIQh5Y3089OXDcHBcSaPA8d8spQKnL/LLqlfYyTKJXSbQf94wxhZhRyYolKDUiU7H6Vvr/zROs71CfveLSkzGJjyZMY1937zt7IE6Xo8enfBCGiufvJO7bYiaXjY; Expires=Sun, 12 Feb 2023 10:15:12 GMT; Path=/; SameSite=None; Secure
Upgrade: websocket
Sec-WebSocket-Accept: MyI+Z6EVu3N69HTMizgtNpWUHp8=
Sec-WebSocket-Version: 13
WebSocket-Server: uWebSockets
p.rfihub.com/cm?pub=39342&in=0&userid=f1a99941-8333-40c7-8bb5-349615f9a03e%3A1675592112.4441051&forward=https%3A//idsync.rlcdn.com/501709.gif%3Fpartner_uid%3Df1a99941-8333-40c7-8bb5-349615f9a03e%253A1675592112.4441051
302 Found 0 B URL HTTP/1.1 p.rfihub.com/cm?pub=39342&in=0&userid=f1a99941-8333-40c7-8bb5-349615f9a03e%3A1675592112.4441051&forward=https%3A//idsync.rlcdn.com/501709.gif%3Fpartner_uid%3Df1a99941-8333-40c7-8bb5-349615f9a03e%253A1675592112.4441051
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cm?pub=39342&in=0&userid=f1a99941-8333-40c7-8bb5-349615f9a03e%3A1675592112.4441051&forward=https%3A//idsync.rlcdn.com/501709.gif%3Fpartner_uid%3Df1a99941-8333-40c7-8bb5-349615f9a03e%253A1675592112.4441051 HTTP/1.1
Host: p.rfihub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20841497p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Date: Sun, 05 Feb 2023 10:15:12 GMT
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Set-Cookie: rud=H4sIAAAAAAAA_-MSNjU0MTCwMLE0MjYzNjM3MTcwNhHiM9Q1M_bQTUpNt3QxS9YFAIrXN00lAAAA; Path=/; Domain=.rfihub.com; Expires=Fri, 1 Mar 2024 10:15:12 GMT; Secure; SameSite=None
eud=H4sIAAAAAAAA_0XIuRGAMAwEwAqIXIcYnR5LohvbgwsipFpCNtynxcaoKgOlqpLxCso5ndSqw3cN1vtCD_cSQE4zAzvedvyZLB_7wm1iSgAAAA; Path=/; Domain=.rfihub.com; Expires=Fri, 1 Mar 2024 10:15:12 GMT; Secure; SameSite=None
ruds=H4sIAAAAAAAA_-MSNjU0MTCwMLE0MjYzNjM3MTcwNhHiM9Q1M_bQTUpNt3QxS9YFAIrXN00lAAAA; Path=/; Domain=.rfihub.com; Secure; SameSite=None
euds=H4sIAAAAAAAA_wXBwRGAIAwEwI_txMmRC-HsBhgpxMrd_a46mJIIGxFh9F021koLqiOPpsf7oFemGtBukvDED6ZvUOk6AAAA; Path=/; Domain=.rfihub.com; Secure; SameSite=None
Location: https://idsync.rlcdn.com/501709.gif?partner_uid=f1a99941-8333-40c7-8bb5-349615f9a03e%3A1675592112.4441051
Content-Length: 0
Server: Jetty(9.3.29.v20201019)
ocsp.digicert.com/
200 OK 471 B IP
Hash 20986e3ad41b7c7568b647083cfa3ee9
a6199774774df812bb2e847f7d01cddbba9192f2
6cc18cd5bcc4c953f33cb49aecfed274701b2af3a15fd8f7cde0a05f8d6dc1eb
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 15
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 10:15:12 GMT
Last-Modified: Sun, 05 Feb 2023 10:14:57 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash 9ba49f1fc7f2f554049e6761ba03e37b
687a48ce650668c484bfda4b50fd202977bb85de
256310e4ec423d30bb346e06ff441daf493641a12ad9e208a2cdf90a0fcbf6f7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6519
Cache-Control: max-age=164436
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 10:15:12 GMT
Etag: "63df478d-1d7"
Expires: Tue, 07 Feb 2023 07:55:48 GMT
Last-Modified: Sun, 05 Feb 2023 06:07:09 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 471
p.rfihub.com/cm?pub=39342&in=0&userid=c71d5391-1762-47dd-b748-af098a713550%3A1675592112.3800864&forward=https%3A//idsync.rlcdn.com/501709.gif%3Fpartner_uid%3Dc71d5391-1762-47dd-b748-af098a713550%253A1675592112.3800864
302 Found 0 B URL HTTP/1.1 p.rfihub.com/cm?pub=39342&in=0&userid=c71d5391-1762-47dd-b748-af098a713550%3A1675592112.3800864&forward=https%3A//idsync.rlcdn.com/501709.gif%3Fpartner_uid%3Dc71d5391-1762-47dd-b748-af098a713550%253A1675592112.3800864
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cm?pub=39342&in=0&userid=c71d5391-1762-47dd-b748-af098a713550%3A1675592112.3800864&forward=https%3A//idsync.rlcdn.com/501709.gif%3Fpartner_uid%3Dc71d5391-1762-47dd-b748-af098a713550%253A1675592112.3800864 HTTP/1.1
Host: p.rfihub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20841497p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Date: Sun, 05 Feb 2023 10:15:12 GMT
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Set-Cookie: ruds=H4sIAAAAAAAA_-MSNjU0NjExNTUxMrC0MDGyMDUwNxPiM9QtTvQuDCpJTy8xTvQEACk__L8lAAAA; Path=/; Domain=.rfihub.com; Secure; SameSite=None
eud=H4sIAAAAAAAA_0XIwRGAMAgEwAp8pQ4cjgSO2E2UsSCfVuvTfe7TeBHlfULAMBmskpMjZd06cxHdXQ8E3acBtvdUzRhv2_5Mwwc1KMeySgAAAA; Path=/; Domain=.rfihub.com; Expires=Fri, 1 Mar 2024 10:15:12 GMT; Secure; SameSite=None
euds=H4sIAAAAAAAA_wXBwRGAMAgEwI_t4HAEOLCbKGMhVu7ud_AhJlZDwDRxzshNL9mvdm1iReiFZEQbYOcq1Ur_AUs2bXI6AAAA; Path=/; Domain=.rfihub.com; Secure; SameSite=None
rud=H4sIAAAAAAAA_-MSNjU0NjExNTUxMrC0MDGyMDUwNxPiM9QtTvQuDCpJTy8xTvQEACk__L8lAAAA; Path=/; Domain=.rfihub.com; Expires=Fri, 1 Mar 2024 10:15:12 GMT; Secure; SameSite=None
Location: https://idsync.rlcdn.com/501709.gif?partner_uid=c71d5391-1762-47dd-b748-af098a713550%3A1675592112.3800864
Content-Length: 0
Server: Jetty(9.3.29.v20201019)
ib.adnxs.com/setuid?entity=18&code=5124322324899790941
307 Redirection 0 B URL HTTP/1.1 ib.adnxs.com/setuid?entity=18&code=5124322324899790941
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /setuid?entity=18&code=5124322324899790941 HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Sun, 05 Feb 2023 10:15:12 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
Location: https://ib.adnxs.com/bounce?%2Fsetuid%3Fentity%3D18%26code%3D5124322324899790941
AN-X-Request-Uuid: 01364598-200b-40d4-b0cf-d5eeb1989d84
Set-Cookie: uuid2=392802710133577486; SameSite=None; Path=/; Max-Age=7776000; Expires=Sat, 06-May-2023 10:15:12 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 867.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
idsync.rlcdn.com/501709.gif?partner_uid=f1a99941-8333-40c7-8bb5-349615f9a03e%3A1675592112.4441051
307 Temporary Redirect 0 B URL HTTP/2 idsync.rlcdn.com/501709.gif?partner_uid=f1a99941-8333-40c7-8bb5-349615f9a03e%3A1675592112.4441051
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /501709.gif?partner_uid=f1a99941-8333-40c7-8bb5-349615f9a03e%3A1675592112.4441051 HTTP/1.1
Host: idsync.rlcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20841497p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 307 Temporary Redirect
cache-control: no-cache, no-store
location: https://idsync.rlcdn.com/1000.gif?memo=CM3PHhJBCj0IARAFGjdmMWE5OTk0MS04MzMzLTQwYzctOGJiNS0zNDk2MTVmOWEwM2U6MTY3NTU5MjExMi40NDQxMDUxEAAaDQiwg_6eBhIFCOgHEABCAEoA
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
set-cookie: pxrc=CAA=; Path=/; Domain=rlcdn.com; Expires=Thu, 06 Apr 2023 10:15:12 GMT; Secure; SameSite=None
timing-allow-origin: *
date: Sun, 05 Feb 2023 10:15:12 GMT
content-length: 0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
beacon.krxd.net/usermatch.gif?partner_id=rfuel&partner_user_id=5141210823478067946
204 No Content 0 B URL HTTP/2 beacon.krxd.net/usermatch.gif?partner_id=rfuel&partner_user_id=5141210823478067946
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /usermatch.gif?partner_id=rfuel&partner_user_id=5141210823478067946 HTTP/1.1
Host: beacon.krxd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Sun, 05 Feb 2023 10:15:12 GMT
set-cookie: _kuid_=PXHayjgD; Expires=Fri, 04-Aug-23 10:15:12 GMT; Max-Age=15552000; Domain=.krxd.net; Path=/
cache-control: private, no-cache, no-store
p3p: policyref="https://cdn.krxd.net/kruxcontent/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC"
x-served-by: beacon-n011-dub-prod.krxd.net
x-request-time: D=41 t=1675592112
X-Firefox-Spdy: h2
bpi.rtactivate.com/tag/?id=11017&user_id=5124322324899790941
200 OK 43 B URL HTTP/2 bpi.rtactivate.com/tag/?id=11017&user_id=5124322324899790941
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /tag/?id=11017&user_id=5124322324899790941 HTTP/1.1
Host: bpi.rtactivate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: awselb/2.0
date: Sun, 05 Feb 2023 10:15:12 GMT
content-type: image/gif
content-length: 43
X-Firefox-Spdy: h2
x.dlx.addthis.com/e/rocketfuel_sync?na_exid=5124322324899790941
200 OK 43 B URL HTTP/2 x.dlx.addthis.com/e/rocketfuel_sync?na_exid=5124322324899790941
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /e/rocketfuel_sync?na_exid=5124322324899790941 HTTP/1.1
Host: x.dlx.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/gif
content-length: 43
expires: Sun, 05 Feb 2023 10:15:12 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Sun, 05 Feb 2023 10:15:12 GMT
strict-transport-security: max-age=2628000
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash be7f3f4089391cef2ea78f259940035e
e1dac0692a0d3111c73cd6b3dd1045b70361406f
0ea389625b51190d2e31782836d5ba57bf2261b9c557a232c7c2eba374ff9fdb
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sun, 05 Feb 2023 10:15:12 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19023
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sat, 04 Feb 2023 21:32:54 GMT
Expires: Sun, 05 Feb 2023 21:32:54 GMT
ETag: "e1dac0692a0d3111c73cd6b3dd1045b70361406f"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
dpm.demdex.net/ibs:dpid=1121&dpuuid=5141210823478067946&redir=
302 Found 0 B URL HTTP/1.1 dpm.demdex.net/ibs:dpid=1121&dpuuid=5141210823478067946&redir=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ibs:dpid=1121&dpuuid=5141210823478067946&redir= HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
DCS: dcs-prod-irl1-2-v045-02b96ccc8.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
Location: https://dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=1121&dpuuid=5141210823478067946&redir=
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
set-cookie: demdex=86696327417493126403067861631884788614; Max-Age=15552000; Expires=Fri, 04 Aug 2023 10:15:12 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-TID: O1WEB9FvTFs=
Content-Length: 0
Connection: keep-alive
idsync.rlcdn.com/501709.gif?partner_uid=c71d5391-1762-47dd-b748-af098a713550%3A1675592112.3800864
307 Temporary Redirect 0 B URL HTTP/2 idsync.rlcdn.com/501709.gif?partner_uid=c71d5391-1762-47dd-b748-af098a713550%3A1675592112.3800864
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /501709.gif?partner_uid=c71d5391-1762-47dd-b748-af098a713550%3A1675592112.3800864 HTTP/1.1
Host: idsync.rlcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20841497p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 307 Temporary Redirect
cache-control: no-cache, no-store
location: https://cm.g.doubleclick.net/pixel?google_nid=epsilon&google_cm
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
set-cookie: pxrc=CLCD/p4GEgYIuuoBEAA=; Path=/; Domain=rlcdn.com; Expires=Thu, 06 Apr 2023 10:15:12 GMT; Secure; SameSite=None
timing-allow-origin: *
date: Sun, 05 Feb 2023 10:15:12 GMT
content-length: 0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
sync.search.spotxchange.com/partner?adv_id=7180&uid=5141210823478067946&img=1&__user_check__=1&sync_id=fa2cca8e-a53d-11ed-a12e-1ac054420106
200 OK 43 B URL HTTP/1.1 sync.search.spotxchange.com/partner?adv_id=7180&uid=5141210823478067946&img=1&__user_check__=1&sync_id=fa2cca8e-a53d-11ed-a12e-1ac054420106
IP
ASN #35220 SpotXchange, INC
File type GIF image data, version 89a, 1 x 1\012- data
Hash 55fade2068e7503eae8d7ddf5eb6bd09
317496a096d6c86486a71d4521994bcd171a6bb3
e586a84d8523747f42e510d78e141015b6424cf67d612854e892a7bcedc8ec9e
GET /partner?adv_id=7180&uid=5141210823478067946&img=1&__user_check__=1&sync_id=fa2cca8e-a53d-11ed-a12e-1ac054420106 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20841497p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 05 Feb 2023 10:15:12 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Set-Cookie: audience=fa43a987-a53d-11ed-a5b8-14bc9e680206; expires=Sun, 05-Mar-2023 10:15:12 GMT; path=/; domain=.spotxchange.com
x-spotx-halt-type: Audience DSP sync endpoint was unable to cookie the audience.
X-fe: 41
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
status.geotrust.com/
200 OK 471 B IP
Hash 33b4dcac47176829c3f733cf485b00d8
2f0ca8dfa8106b51602e1c9cd6a5b1e31254c924
d258d8a0ec6ed7cf9fb2ee6de730c0380adde3a3c656e10f046a56f140307f2c
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1737
Cache-Control: max-age=104911
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 10:15:12 GMT
Etag: "63de71b6-1d7"
Expires: Mon, 06 Feb 2023 15:23:43 GMT
Last-Modified: Sat, 04 Feb 2023 14:54:46 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
e1.emxdgt.com/put?d=d16&uid=5141210823478067946
204 No Content 0 B URL HTTP/2 e1.emxdgt.com/put?d=d16&uid=5141210823478067946
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /put?d=d16&uid=5141210823478067946 HTTP/1.1
Host: e1.emxdgt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
content-type: text/html
date: Sun, 05 Feb 2023 10:15:12 GMT
content-length: 0
X-Firefox-Spdy: h2
idsync.rlcdn.com/1000.gif?memo=CM3PHhJBCj0IARAFGjdmMWE5OTk0MS04MzMzLTQwYzctOGJiNS0zNDk2MTVmOWEwM2U6MTY3NTU5MjExMi40NDQxMDUxEAAaDQiwg_6eBhIFCOgHEABCAEoA
307 Temporary Redirect 0 B URL HTTP/2 idsync.rlcdn.com/1000.gif?memo=CM3PHhJBCj0IARAFGjdmMWE5OTk0MS04MzMzLTQwYzctOGJiNS0zNDk2MTVmOWEwM2U6MTY3NTU5MjExMi40NDQxMDUxEAAaDQiwg_6eBhIFCOgHEABCAEoA
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1000.gif?memo=CM3PHhJBCj0IARAFGjdmMWE5OTk0MS04MzMzLTQwYzctOGJiNS0zNDk2MTVmOWEwM2U6MTY3NTU5MjExMi40NDQxMDUxEAAaDQiwg_6eBhIFCOgHEABCAEoA HTTP/1.1
Host: idsync.rlcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20841497p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 307 Temporary Redirect
cache-control: no-cache, no-store
location: https://ib.adnxs.com/getuid?https%3A%2F%2Fidsync.rlcdn.com%2F52154.gif%3Fserved_by%3Devergreen%26partner_uid%3D%24UID
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
set-cookie: pxrc=CLCD/p4GEgUI6AcQABIGCLbqARAA; Path=/; Domain=rlcdn.com; Expires=Thu, 06 Apr 2023 10:15:12 GMT; Secure; SameSite=None
timing-allow-origin: *
date: Sun, 05 Feb 2023 10:15:12 GMT
content-length: 0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
e1.emxdgt.com/put?d=d16&uid=5124322324899790941
204 No Content 0 B URL HTTP/2 e1.emxdgt.com/put?d=d16&uid=5124322324899790941
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /put?d=d16&uid=5124322324899790941 HTTP/1.1
Host: e1.emxdgt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
content-type: text/html
date: Sun, 05 Feb 2023 10:15:12 GMT
content-length: 0
X-Firefox-Spdy: h2
sync.search.spotxchange.com/partner?adv_id=7180&uid=5124322324899790941&img=1&__user_check__=1&sync_id=fa31c2c6-a53d-11ed-a497-1d34abdd0206
200 OK 43 B URL HTTP/1.1 sync.search.spotxchange.com/partner?adv_id=7180&uid=5124322324899790941&img=1&__user_check__=1&sync_id=fa31c2c6-a53d-11ed-a497-1d34abdd0206
IP
ASN #35220 SpotXchange, INC
File type GIF image data, version 89a, 1 x 1\012- data
Hash 55fade2068e7503eae8d7ddf5eb6bd09
317496a096d6c86486a71d4521994bcd171a6bb3
e586a84d8523747f42e510d78e141015b6424cf67d612854e892a7bcedc8ec9e
GET /partner?adv_id=7180&uid=5124322324899790941&img=1&__user_check__=1&sync_id=fa31c2c6-a53d-11ed-a497-1d34abdd0206 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20841497p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 05 Feb 2023 10:15:12 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Set-Cookie: audience=fa48a278-a53d-11ed-b067-1131174c0406; expires=Sun, 05-Mar-2023 10:15:12 GMT; path=/; domain=.spotxchange.com
x-spotx-halt-type: Audience DSP sync endpoint was unable to cookie the audience.
X-fe: 86
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
ocsp.digicert.com/
200 OK 471 B IP
Hash 9ba49f1fc7f2f554049e6761ba03e37b
687a48ce650668c484bfda4b50fd202977bb85de
256310e4ec423d30bb346e06ff441daf493641a12ad9e208a2cdf90a0fcbf6f7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6519
Cache-Control: max-age=164436
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 10:15:12 GMT
Etag: "63df478d-1d7"
Expires: Tue, 07 Feb 2023 07:55:48 GMT
Last-Modified: Sun, 05 Feb 2023 06:07:09 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 471
dsum-sec.casalemedia.com/rum?cm_dsp_id=57&external_user_id=5141210823478067946&forward=&C=1
200 OK 43 B URL HTTP/1.1 dsum-sec.casalemedia.com/rum?cm_dsp_id=57&external_user_id=5141210823478067946&forward=&C=1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /rum?cm_dsp_id=57&external_user_id=5141210823478067946&forward=&C=1 HTTP/1.1
Host: dsum-sec.casalemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20841497p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 05 Feb 2023 10:15:12 GMT
Server: Apache
Cache-Control: no-cache
Content-Type: image/gif
Expires: 0
Pragma: no-cache
Content-Length: 43
Keep-Alive: timeout=1, max=499
Connection: Keep-Alive
dsum-sec.casalemedia.com/rum?cm_dsp_id=57&external_user_id=5124322324899790941&forward=
302 Found 0 B URL HTTP/1.1 dsum-sec.casalemedia.com/rum?cm_dsp_id=57&external_user_id=5124322324899790941&forward=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rum?cm_dsp_id=57&external_user_id=5124322324899790941&forward= HTTP/1.1
Host: dsum-sec.casalemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Date: Sun, 05 Feb 2023 10:15:12 GMT
Server: Apache
Cache-Control: no-cache
Expires: 0
Location: /rum?cm_dsp_id=57&external_user_id=5124322324899790941&forward=&C=1
P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI"
Pragma: no-cache
Content-Length: 0
Set-Cookie: CMID=Y9.BsKN-ZaIg-2cQUCmZRQAA; Path=/; Domain=casalemedia.com; Expires=Mon, 05 Feb 2024 10:15:12 GMT; Max-Age=31536000; Secure; SameSite=None
CMPS=4390; Path=/; Domain=casalemedia.com; Expires=Sat, 06 May 2023 10:15:12 GMT; Max-Age=7776000; Secure; SameSite=None
CMPRO=4390; Path=/; Domain=casalemedia.com; Expires=Sat, 06 May 2023 10:15:12 GMT; Max-Age=7776000; Secure; SameSite=None
Keep-Alive: timeout=1, max=500
Connection: Keep-Alive
a.rfihub.com/cm?pub=445&in=0&forward=&google_error=3
200 OK 42 B URL HTTP/1.1 a.rfihub.com/cm?pub=445&in=0&forward=&google_error=3
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash accba0b69f352b4c9440f05891b015c5
9d01cc5dc8e042c0d4ad6cfb8b3ac38e84a5ef9f
47043e4823a6c21a8881de789b4185355330b5804629d23f6b43dd93f5265292
GET /cm?pub=445&in=0&forward=&google_error=3 HTTP/1.1
Host: a.rfihub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20841497p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 05 Feb 2023 10:15:12 GMT
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Set-Cookie: rud=H4sIAAAAAAAA_-MSNjU0sDA1tTQ3MjMyNDW2NDczNRfiM9R18600Cy7VDc70DsoFADzysEYlAAAA; Path=/; Domain=.rfihub.com; Expires=Fri, 1 Mar 2024 10:15:12 GMT; Secure; SameSite=None
ruds=H4sIAAAAAAAA_-MSNjU0sDA1tTQ3MjMyNDW2NDczNRfiM9R18600Cy7VDc70DsoFADzysEYlAAAA; Path=/; Domain=.rfihub.com; Secure; SameSite=None
euds=H4sIAAAAAAAA_-NicjUGAEAxo38EAAAA; Path=/; Domain=.rfihub.com; Secure; SameSite=None
eud=H4sIAAAAAAAA_-NicjUO4jU0Mzc1tTQyNDSyNLQEAKUJG5YTAAAA; Path=/; Domain=.rfihub.com; Expires=Fri, 1 Mar 2024 10:15:12 GMT; Secure; SameSite=None
Cache-Control: no-cache
Content-Type: image/gif
Content-Length: 42
Server: Jetty(9.3.29.v20201019)
dpm.demdex.net/ibs:dpid=1121&dpuuid=5124322324899790941&redir=
302 Found 0 B URL HTTP/1.1 dpm.demdex.net/ibs:dpid=1121&dpuuid=5124322324899790941&redir=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ibs:dpid=1121&dpuuid=5124322324899790941&redir= HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
DCS: dcs-prod-irl1-1-v045-07e4ed132.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
Location: https://dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=1121&dpuuid=5124322324899790941&redir=
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
set-cookie: demdex=02708719831291823540991798051772478674; Max-Age=15552000; Expires=Fri, 04 Aug 2023 10:15:12 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-TID: 2FxdxGZmRv8=
Content-Length: 0
Connection: keep-alive
dsum-sec.casalemedia.com/rum?cm_dsp_id=57&external_user_id=5124322324899790941&forward=&C=1
200 OK 43 B URL HTTP/1.1 dsum-sec.casalemedia.com/rum?cm_dsp_id=57&external_user_id=5124322324899790941&forward=&C=1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /rum?cm_dsp_id=57&external_user_id=5124322324899790941&forward=&C=1 HTTP/1.1
Host: dsum-sec.casalemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20841497p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 05 Feb 2023 10:15:12 GMT
Server: Apache
Cache-Control: no-cache
Content-Type: image/gif
Expires: 0
Pragma: no-cache
Content-Length: 43
Keep-Alive: timeout=1, max=498
Connection: Keep-Alive
dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=1121&dpuuid=5141210823478067946&redir=
200 OK 59 B URL HTTP/1.1 dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=1121&dpuuid=5141210823478067946&redir=
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 1251cd5e5c2def4c046309375f87c1c1
e02d6b0c6a5c495c15985e2832e335eda8528c80
4e7010cc46fa361c88e57e3346d27421cf3b8a8bf5f39b43fc45997c60cb1c13
GET /demconf.jpg?et:ibs%7cdata:dpid=1121&dpuuid=5141210823478067946&redir= HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20841497p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
Content-Type: image/gif
DCS: dcs-prod-irl1-1-v045-06601d6e7.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
X-TID: H5t+X/OrR5k=
Content-Length: 59
Connection: keep-alive
beacon.krxd.net/usermatch.gif?partner_id=rfuel&partner_user_id=5124322324899790941
204 No Content 0 B URL HTTP/2 beacon.krxd.net/usermatch.gif?partner_id=rfuel&partner_user_id=5124322324899790941
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /usermatch.gif?partner_id=rfuel&partner_user_id=5124322324899790941 HTTP/1.1
Host: beacon.krxd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Sun, 05 Feb 2023 10:15:12 GMT
set-cookie: _kuid_=PXHaymg4; Expires=Fri, 04-Aug-23 10:15:12 GMT; Max-Age=15552000; Domain=.krxd.net; Path=/
cache-control: private, no-cache, no-store
p3p: policyref="https://cdn.krxd.net/kruxcontent/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC"
x-served-by: beacon-n023-dub-prod.krxd.net
x-request-time: D=67 t=1675592112
X-Firefox-Spdy: h2
ib.adnxs.com/bounce?%2Fsetuid%3Fentity%3D18%26code%3D5124322324899790941
200 OK 43 B URL HTTP/1.1 ib.adnxs.com/bounce?%2Fsetuid%3Fentity%3D18%26code%3D5124322324899790941
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 592ebefc7104d681d57852665e9ad514
15cdf8df32aa251dd6dd590a60bf9cf74474e7c5
4b5b6b15c6255109e06720cce42a06d3aead8b7874423d9c52cb0303212c25ef
GET /bounce?%2Fsetuid%3Fentity%3D18%26code%3D5124322324899790941 HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20841497p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sun, 05 Feb 2023 10:15:12 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
AN-X-Request-Uuid: 03b70d32-3a12-4912-aa9d-30191b9d8694
Set-Cookie: anj=dTM7k!M4/YErk#WF']wIg2ImGrIb+`!@wnfH8KAM.xpH^Gmi[tDZkVhGm1!eFpdM!Cyo)z^gGrQ7BrQ$!2>h9/+0J2!**0.oX$<a; SameSite=None; Path=/; Max-Age=7776000; Expires=Sat, 06-May-2023 10:15:12 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 867.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
ocsp.usertrust.com/
200 OK 472 B IP
Hash e4dbba02863ea7f0e2d1ad84db204698
5c7d22ea4fb2a0817c8462019daf1dae864fa412
fd4d5173969a7bbb6ab6cb8f67f1a532acf82abf622930d11a84a958fec6cd3c
POST / HTTP/1.1
Host: ocsp.usertrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 05 Feb 2023 10:15:12 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sat, 04 Feb 2023 21:01:04 GMT
Expires: Sat, 11 Feb 2023 21:01:03 GMT
Etag: "5c7d22ea4fb2a0817c8462019daf1dae864fa412"
Cache-Control: max-age=604160,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 984
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 794ae2322ef3b506-OSL
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 8b01e823dcdb0bc93def67791b99c1ff
c2b1ff308d5b27a776259ed5696ee0854e586c77
7be7f84db702ba6b520c773d6422eaf7e1ee519485a030057713a74618e3be2d
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sun, 05 Feb 2023 10:15:12 GMT
Last-Modified: Sun, 05 Feb 2023 09:52:24 GMT
Server: ECS (nyb/1DCD)
X-Cache: Miss from cloudfront
Via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: x54a8_wPjYKlvq-YfnrBjUre6I5ZY4NBrpA_FwZLXfDUVUjQBHzbrA==
Age: 1368
ps.eyeota.net/match?uid=5134455420984285027&bid=omt9pi0
200 OK 0 B URL HTTP/1.1 ps.eyeota.net/match?uid=5134455420984285027&bid=omt9pi0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match?uid=5134455420984285027&bid=omt9pi0 HTTP/1.1
Host: ps.eyeota.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20841497p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Set-Cookie: SERVERID=16454~DM; Domain=eyeota.net; Path=/; Expires=Sun, 05 Feb 2023 10:25:13 GMT; Secure; SameSite=None;
P3P: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR SAMo BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR", policyref="http://ps.eyeota.net/w3c/p3p.xml"
Content-Length: 0
Date: Sun, 05 Feb 2023 10:15:13 GMT
a.rfihub.com/cm?pub=445&in=0&forward=&google_error=3
200 OK 42 B URL HTTP/1.1 a.rfihub.com/cm?pub=445&in=0&forward=&google_error=3
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash accba0b69f352b4c9440f05891b015c5
9d01cc5dc8e042c0d4ad6cfb8b3ac38e84a5ef9f
47043e4823a6c21a8881de789b4185355330b5804629d23f6b43dd93f5265292
GET /cm?pub=445&in=0&forward=&google_error=3 HTTP/1.1
Host: a.rfihub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20841497p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 05 Feb 2023 10:15:13 GMT
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Set-Cookie: rud=H4sIAAAAAAAA_-MSNjU0MDcxNrYwMjM2NjM3MjA2NhfiM9R1qkozzSg3tigszzEEAJtt9swlAAAA; Path=/; Domain=.rfihub.com; Expires=Fri, 1 Mar 2024 10:15:13 GMT; Secure; SameSite=None
ruds=H4sIAAAAAAAA_-MSNjU0MDcxNrYwMjM2NjM3MjA2NhfiM9R1qkozzSg3tigszzEEAJtt9swlAAAA; Path=/; Domain=.rfihub.com; Secure; SameSite=None
euds=H4sIAAAAAAAA_-NicjUGAEAxo38EAAAA; Path=/; Domain=.rfihub.com; Secure; SameSite=None
eud=H4sIAAAAAAAA_-NicjUO4jU0Mzc1tTQyNDQ2MDICAATfiZ0TAAAA; Path=/; Domain=.rfihub.com; Expires=Fri, 1 Mar 2024 10:15:13 GMT; Secure; SameSite=None
Cache-Control: no-cache
Content-Type: image/gif
Content-Length: 42
Server: Jetty(9.3.29.v20201019)
ocsp.digicert.com/
200 OK 279 B IP
Hash cc1b02913eed405d712b44b9d90ea403
99257c8bb5a003744ee9822680733b86185ce5db
205400b6a26a5ffdd3ccd92be184e141cd6676fdbad50185c541b5d4c5a7364d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2212
Cache-Control: max-age=125174
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 10:15:13 GMT
Etag: "63debf03-117"
Expires: Mon, 06 Feb 2023 21:01:27 GMT
Last-Modified: Sat, 04 Feb 2023 20:24:35 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 279
iqbroker.com/lp/mobile-partner/en/?aff=298933
302 Found 0 B URL HTTP/2 iqbroker.com/lp/mobile-partner/en/?aff=298933
IP
ASN #204006 Iqoption Europe Ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /lp/mobile-partner/en/?aff=298933 HTTP/1.1
Host: iqbroker.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Sun, 05 Feb 2023 10:15:13 GMT
content-length: 0
location: https://affiliate.iqbroker.com/redir/?forceBackLink=1&aff=298933
x-traceid: ade01ebe08307a0deca52a5d68516c26
last-modified: 1675592113
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
set-cookie: Traceid=ade01ebe08307a0deca52a5d68516c26; expires=Mon, 13 Feb 2023 10:15:13 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
aff_model=; expires=Sun, 05 Mar 2023 10:15:13 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
aff_ts=2023-02-05T10:15:13Z; expires=Sun, 05 Mar 2023 10:15:13 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
IsRestrictedCountry=false; expires=Sun, 05 Mar 2023 10:15:13 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
IsRegulatedCountry=true; expires=Sun, 05 Mar 2023 10:15:13 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
Country=no; expires=Sun, 05 Mar 2023 10:15:13 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
CountryID=149; expires=Sun, 05 Mar 2023 10:15:13 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
AffTrackGroup=Black_team_(partnerka); expires=Sun, 05 Mar 2023 10:15:13 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
Serv=NL; expires=Sun, 05 Mar 2023 10:15:13 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
AppID=id871125783; expires=Sun, 05 Mar 2023 10:15:13 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
brand_id=1; expires=Sun, 12 Feb 2023 10:15:13 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
platform=9; expires=Sun, 05 Mar 2023 10:15:13 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
client_platform_id=9; expires=Sun, 05 Mar 2023 10:15:13 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
support_email=support@eu.iqoption.com; expires=Sun, 05 Mar 2023 10:15:13 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
company_id=1; expires=Sun, 05 Mar 2023 10:15:13 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
IsAppStoreCountry=true; expires=Sun, 05 Mar 2023 10:15:13 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
aff=; expires=Tue, 10 Nov 2009 23:00:00 GMT
afftrack=; expires=Tue, 10 Nov 2009 23:00:00 GMT
affextra=; expires=Tue, 10 Nov 2009 23:00:00 GMT
retrack=; expires=Tue, 10 Nov 2009 23:00:00 GMT
landing=; expires=Tue, 10 Nov 2009 23:00:00 GMT
backend: arbitre
strict-transport-security: max-age=15555600
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ib.adnxs.com/getuid?https%3A%2F%2Fidsync.rlcdn.com%2F52154.gif%3Fserved_by%3Devergreen%26partner_uid%3D%24UID
307 Redirection 0 B URL HTTP/1.1 ib.adnxs.com/getuid?https%3A%2F%2Fidsync.rlcdn.com%2F52154.gif%3Fserved_by%3Devergreen%26partner_uid%3D%24UID
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /getuid?https%3A%2F%2Fidsync.rlcdn.com%2F52154.gif%3Fserved_by%3Devergreen%26partner_uid%3D%24UID HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20841497p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Sun, 05 Feb 2023 10:15:13 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
Location: https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Fidsync.rlcdn.com%252F52154.gif%253Fserved_by%253Devergreen%2526partner_uid%253D%2524UID
AN-X-Request-Uuid: cb50981a-6dde-42ee-804d-f25fb7140596
Set-Cookie: uuid2=7724296413300711561; SameSite=None; Path=/; Max-Age=7776000; Expires=Sat, 06-May-2023 10:15:13 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 867.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
ocsp.sectigo.com/
200 OK 471 B IP
Hash 83712ff1b330fc8aee58e72feb68a1d5
d31392c6247cbdad51a6fd71539654acbac2119a
2f2881ce7eb01a738787665d049784ade1b0ad0c3b83f311d9809ad852061288
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 05 Feb 2023 10:15:13 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 05 Feb 2023 01:42:56 GMT
Expires: Sun, 12 Feb 2023 01:42:55 GMT
Etag: "d31392c6247cbdad51a6fd71539654acbac2119a"
Cache-Control: max-age=573461,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 794ae2316d060afe-OSL
ocsp.sectigo.com/
200 OK 471 B IP
Hash bbd90245f244e76d9f45706b1fb5ae58
1e15a0d03d74175f976310f2db334050485ed546
03fda0816cd373e36f33630fc50b4fb5e5852fb1f2c65175b98437386c436dd4
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 05 Feb 2023 10:15:13 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 04 Feb 2023 01:56:49 GMT
Expires: Sat, 11 Feb 2023 01:56:48 GMT
Etag: "1e15a0d03d74175f976310f2db334050485ed546"
Cache-Control: max-age=487894,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 794ae2313c34b50f-OSL
x.bidswitch.net/sync?dsp_id=119&user_id=5141210823478067946&expires=30
302 Found 0 B URL HTTP/2 x.bidswitch.net/sync?dsp_id=119&user_id=5141210823478067946&expires=30
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync?dsp_id=119&user_id=5141210823478067946&expires=30 HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sun, 05 Feb 2023 10:15:13 GMT
content-length: 0
location: https://x.bidswitch.net/ul_cb/sync?dsp_id=119&user_id=5141210823478067946&expires=30
cache-control: no-cache, no-store, must-revalidate
set-cookie: tuuid=82a60b8d-66ee-4196-b061-8b6f681f9556; path=/; expires=Mon, 05-Feb-2024 10:15:13 GMT; domain=.bidswitch.net; samesite=none; secure
c=1675592113; path=/; expires=Mon, 05-Feb-2024 10:15:13 GMT; domain=.bidswitch.net; samesite=none; secure
tuuid_lu=1675592113; path=/; expires=Mon, 05-Feb-2024 10:15:13 GMT; domain=.bidswitch.net; samesite=none; secure
c=1675592113; path=/; expires=Mon, 05-Feb-2024 10:15:13 GMT; domain=.bidswitch.net; samesite=none; secure
X-Firefox-Spdy: h2
ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Fidsync.rlcdn.com%252F52154.gif%253Fserved_by%253Devergreen%2526partner_uid%253D%2524UID
302 Found 0 B URL HTTP/1.1 ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Fidsync.rlcdn.com%252F52154.gif%253Fserved_by%253Devergreen%2526partner_uid%253D%2524UID
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bounce?%2Fgetuid%3Fhttps%253A%252F%252Fidsync.rlcdn.com%252F52154.gif%253Fserved_by%253Devergreen%2526partner_uid%253D%2524UID HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20841497p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.21.3
Date: Sun, 05 Feb 2023 10:15:13 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
Location: https://idsync.rlcdn.com/52154.gif?served_by=evergreen&partner_uid=0
AN-X-Request-Uuid: 094f97bc-b02b-473e-9305-0b511016eff7
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 867.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=1121&dpuuid=5124322324899790941&redir=
200 OK 59 B URL HTTP/1.1 dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=1121&dpuuid=5124322324899790941&redir=
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 1251cd5e5c2def4c046309375f87c1c1
e02d6b0c6a5c495c15985e2832e335eda8528c80
4e7010cc46fa361c88e57e3346d27421cf3b8a8bf5f39b43fc45997c60cb1c13
GET /demconf.jpg?et:ibs%7cdata:dpid=1121&dpuuid=5124322324899790941&redir= HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20841497p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
Content-Type: image/gif
DCS: dcs-prod-irl1-1-v045-05e780d2b.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
X-TID: In3O9icvSiE=
Content-Length: 59
Connection: keep-alive
x.bidswitch.net/ul_cb/sync?dsp_id=119&user_id=5141210823478067946&expires=30
200 OK 43 B URL HTTP/2 x.bidswitch.net/ul_cb/sync?dsp_id=119&user_id=5141210823478067946&expires=30
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /ul_cb/sync?dsp_id=119&user_id=5141210823478067946&expires=30 HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20841497p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 10:15:13 GMT
content-type: image/gif
content-length: 43
cache-control: no-cache, no-store, must-revalidate
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash bbd90245f244e76d9f45706b1fb5ae58
1e15a0d03d74175f976310f2db334050485ed546
03fda0816cd373e36f33630fc50b4fb5e5852fb1f2c65175b98437386c436dd4
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 05 Feb 2023 10:15:13 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 04 Feb 2023 01:56:49 GMT
Expires: Sat, 11 Feb 2023 01:56:48 GMT
Etag: "1e15a0d03d74175f976310f2db334050485ed546"
Cache-Control: max-age=487894,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 794ae2325c5cfac4-OSL
x.bidswitch.net/sync?dsp_id=119&user_id=5124322324899790941&expires=30
302 Found 0 B URL HTTP/2 x.bidswitch.net/sync?dsp_id=119&user_id=5124322324899790941&expires=30
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync?dsp_id=119&user_id=5124322324899790941&expires=30 HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sun, 05 Feb 2023 10:15:13 GMT
content-length: 0
location: https://x.bidswitch.net/ul_cb/sync?dsp_id=119&user_id=5124322324899790941&expires=30
cache-control: no-cache, no-store, must-revalidate
set-cookie: tuuid=6373d443-0bca-4b5f-b312-103afe833374; path=/; expires=Mon, 05-Feb-2024 10:15:13 GMT; domain=.bidswitch.net; samesite=none; secure
c=1675592113; path=/; expires=Mon, 05-Feb-2024 10:15:13 GMT; domain=.bidswitch.net; samesite=none; secure
tuuid_lu=1675592113; path=/; expires=Mon, 05-Feb-2024 10:15:13 GMT; domain=.bidswitch.net; samesite=none; secure
c=1675592113; path=/; expires=Mon, 05-Feb-2024 10:15:13 GMT; domain=.bidswitch.net; samesite=none; secure
X-Firefox-Spdy: h2
x.bidswitch.net/ul_cb/sync?dsp_id=119&user_id=5124322324899790941&expires=30
200 OK 43 B URL HTTP/2 x.bidswitch.net/ul_cb/sync?dsp_id=119&user_id=5124322324899790941&expires=30
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /ul_cb/sync?dsp_id=119&user_id=5124322324899790941&expires=30 HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20841497p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 10:15:13 GMT
content-type: image/gif
content-length: 43
cache-control: no-cache, no-store, must-revalidate
X-Firefox-Spdy: h2
affiliate.iqbroker.com/redir/?forceBackLink=1&aff=298933
302 Found 0 B URL HTTP/2 affiliate.iqbroker.com/redir/?forceBackLink=1&aff=298933
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /redir/?forceBackLink=1&aff=298933 HTTP/1.1
Host: affiliate.iqbroker.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: Traceid=ade01ebe08307a0deca52a5d68516c26; aff_model=; aff_ts=2023-02-05T10:15:13Z; IsRestrictedCountry=false; IsRegulatedCountry=true; Country=no; CountryID=149; AffTrackGroup=Black_team_(partnerka); Serv=NL; AppID=id871125783; brand_id=1; platform=9; client_platform_id=9; support_email=support@eu.iqoption.com; company_id=1; IsAppStoreCountry=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Sun, 05 Feb 2023 10:15:13 GMT
content-length: 0
location: https://iqbroker.com/lp/mobile-partner/pt/
backend: arbitre_v4_api
strict-transport-security: max-age=15555600
x-content-type-options: nosniff
set-cookie: visid_incap_2683110=SdL+nVL7TeeME7VByr8IabCB32MAAAAAQUIPAAAAAABeXVJ+XtIfkvW0Nwl9F4an; expires=Sun, 04 Feb 2024 22:53:42 GMT; HttpOnly; path=/; Domain=.iqbroker.com
incap_ses_720_2683110=P+xwWGJWP2S32y9OCvX9CbCB32MAAAAAZBSvtVgP4k4JOdjH8GsDhg==; path=/; Domain=.iqbroker.com
x-cdn: Imperva
x-iinfo: 4-16268027-16268029 NNNN CT(25 54 0) RT(1675592112863 21) q(0 0 1 0) r(1 1) U5
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc3f52758-d976-47aa-a47d-f0d6026514dc.jpeg
200 OK 7.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc3f52758-d976-47aa-a47d-f0d6026514dc.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f28ffcf384ce958b6302d05b6690c088
e5d4cbfc7482d35ee2ca03a7178426f3e2e97010
725d42a020d496f596074794cc2abdaca8a9b821e1a3502eee26056d0f528506
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc3f52758-d976-47aa-a47d-f0d6026514dc.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 7665
x-amzn-requestid: 001ba86d-ebc8-4819-89f7-1604bc059cd8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fPGibFeqIAMFqMA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cf8475-076d982b5fccf2b931a05976;Sampled=0
x-amzn-remapped-date: Tue, 24 Jan 2023 07:10:45 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: gnkjykHYcMthJkIb-A1P1rRw9FZieh3TmoTT3qVaceWw03TQNX8qfQ==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Sat, 04 Feb 2023 22:32:24 GMT
age: 42173
etag: "e5d4cbfc7482d35ee2ca03a7178426f3e2e97010"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
static.zdassets.com/web_widget/latest/classic/web-widget-8165-34c91d3.js
200 OK 0 B URL HTTP/2 static.zdassets.com/web_widget/latest/classic/web-widget-8165-34c91d3.js
IP
GET /web_widget/latest/classic/web-widget-8165-34c91d3.js HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 10:15:10 GMT
content-type: application/javascript; charset=utf-8
x-amz-id-2: fchTH8ZKP5XzJ9X5tMP8Gb0FrLmWduzX+toUb4CYjGPL2cSNUiJ5dwSXuHr879IrNtt8Or/pLvv3dgxnRitbqg==
x-amz-request-id: 8SCCQPT6TR1YFJ84
x-amz-replication-status: COMPLETED
last-modified: Mon, 30 Jan 2023 01:11:44 GMT
etag: W/"d519ea27f763cb6ec80aeec5b45213a7"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Tue, 30 Jan 2024 01:11:43 GMT
x-amz-version-id: tYOSfzpt5WjSOWaRj9efQMLiLa0r_8B0
cf-cache-status: HIT
age: 361937
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hMnFCUMjtiUUwEGgTS7eyUbx4l1x59ePknG8Bmy%2FJblfB9NZRvegQC6sO22BzybBxzco9Crzd6QK7T4luP%2FlDA5XGhhXq4uOe5xnbjMfPrDazJjTurm0WBN53SWrMuadQ7S1JrU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 794ae220a9510b55-OSL
content-encoding: br
X-Firefox-Spdy: h2
partners.tremorhub.com/sync?UIRF=5141210823478067946&r=CI3Zd3BOMMzD
200 OK 0 B URL HTTP/2 partners.tremorhub.com/sync?UIRF=5141210823478067946&r=CI3Zd3BOMMzD
IP
GET /sync?UIRF=5141210823478067946&r=CI3Zd3BOMMzD HTTP/1.1
Host: partners.tremorhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 05 Feb 2023 10:15:13 GMT
content-type: image/gif
server: Apache-Coyote/1.1
p3p: CP='This is not a P3P policy. See https://telaria.com/privacy-policy/'
X-Firefox-Spdy: h2
static.zdassets.com/web_widget/latest/classic/web-widget-chat-sdk-34c91d3.js
200 OK 0 B URL HTTP/2 static.zdassets.com/web_widget/latest/classic/web-widget-chat-sdk-34c91d3.js
IP
GET /web_widget/latest/classic/web-widget-chat-sdk-34c91d3.js HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 10:15:10 GMT
content-type: application/javascript; charset=utf-8
x-amz-id-2: 5Q2KsWrkmrWTiYVRLyXyCI/rMs3+B9hjg0s80kwkbyjooUCh5ERMvYHuuJOp3Lj7ZZLHDIYGSG0=
x-amz-request-id: 8SCA84J1BTNRMEF1
x-amz-replication-status: COMPLETED
last-modified: Mon, 30 Jan 2023 01:11:44 GMT
etag: W/"d366c0776c2bacba354d40e564c3d3e6"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Tue, 30 Jan 2024 01:11:43 GMT
x-amz-version-id: 7IG5ZMdUlemQ4ejtzcD59BhvR7ULO8qs
cf-cache-status: HIT
age: 361936
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fjU4Esc4ctG3pNJCqv8a4SLE13oz9SrZgrCKjy4f6axk0CwkgJ%2B%2BcBOihtnvdlWuSFxwpMshR6rAxjTBWgcle2uu9nH4%2BipuoCBKBLuWmRSRNaDBarD5Ja6dfIBtSOlO0OZKKpk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 794ae2236ba70b55-OSL
content-encoding: br
X-Firefox-Spdy: h2
doggocasino.com/scripts.1064ca3406a50daf3ddc.js
200 OK 0 B URL HTTP/2 doggocasino.com/scripts.1064ca3406a50daf3ddc.js
IP
GET /scripts.1064ca3406a50daf3ddc.js HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/en-us?affiliateName=[cellxpert]&affid=cx-35656_393091&bannerid=35656&trackerid=35656_393091&brand=doggocasino&bta=35656&rdk=rk1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
x-amz-meta-codebuild-content-sha256: 4f853d18badd3933524ca4a1dd6240279e0051fb38905b83f18834b4b93aaeb1
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:08219a5d-0b7c-4ae2-afb4-2507533d271d
x-amz-meta-codebuild-content-md5: 319cfed7654cbf4a61d9a3eabce3d2f4
last-modified: Fri, 03 Feb 2023 09:41:08 GMT
x-amz-version-id: Jqga6meIYXMWuaTvNYayjdPA6LVoGuYo
server: AmazonS3
content-encoding: br
date: Sun, 05 Feb 2023 09:46:02 GMT
etag: W/"42a2bec801024b80f39d0bc44eba9251"
vary: Accept-Encoding
via: 1.1 96c778ce6156d12f24b8b6cdaa0cbf66.cloudfront.net (CloudFront)
age: 1747
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: VwxIDLE7wQhDiyrMe8xWNd0sFuc0J0aM1jLNrOtoGaJOVsU1Q_IZKg==
X-Firefox-Spdy: h2
redirect.lista10.dev/click?click_id=Lgx2W6LgyPk58QHF
200 OK 0 B URL HTTP/2 redirect.lista10.dev/click?click_id=Lgx2W6LgyPk58QHF
IP
GET /click?click_id=Lgx2W6LgyPk58QHF HTTP/1.1
Host: redirect.lista10.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 05 Feb 2023 10:15:12 GMT
content-type: text/html; charset=utf-8
status: 200 OK
cache-control: no-cache
access-control-allow-origin: *
referrer-policy: strict-origin-when-cross-origin
x-permitted-cross-domain-policies: none
x-xss-protection: 1; mode=block
x-request-id: 50fb0709-a197-4cd6-b495-fb368a90c9f6
x-download-options: noopen
x-runtime: 0.007788
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gtFbv1%2Bzq82NqM1ZnCSMHvLLqDcXyyYtdAUr95BoYPCRRFytitfR6XBT6rZthbRKW7BAqV%2B0pm%2BCnolhXvDh%2BePF5uUJ%2Fxjnm1cDmyTvjeWG1Nptk%2FN%2FhEnMWFDRY1EarG%2FqwbyDmQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 794ae22fdd6c0b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.iconvert.network/js/sp/2.18.2/snowplow.js
200 OK 0 B URL HTTP/2 cdn.iconvert.network/js/sp/2.18.2/snowplow.js
IP
GET /js/sp/2.18.2/snowplow.js HTTP/1.1
Host: cdn.iconvert.network
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Thu, 12 Jan 2023 05:01:20 GMT
last-modified: Fri, 02 Dec 2022 14:21:03 GMT
etag: W/"0a624c4cf1d03d57f36c0054aa6db9a8"
cache-control: max-age=31536000,immutable
server: AmazonS3
content-encoding: gzip
x-cache: Hit from cloudfront
via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: Y63Q1w95YrmQ9eSBf-jeJKELLOovGoIUCPMRJxZmxW_b_p4okl2LQw==
age: 2092430
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
in.hotjar.com/api/v2/client/sites/3054262/visit-data?sv=6
200 OK 0 B URL HTTP/2 in.hotjar.com/api/v2/client/sites/3054262/visit-data?sv=6
IP
POST /api/v2/client/sites/3054262/visit-data?sv=6 HTTP/1.1
Host: in.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain; charset=UTF-8
Content-Length: 112
Origin: https://doggocasino.com
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 05 Feb 2023 10:15:11 GMT
content-type: application/json
vary: Accept-Encoding
cache-control: no-cache, no-store
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 86400
content-encoding: br
X-Firefox-Spdy: h2
static.zdassets.com/web_widget/latest/classic/web-widget-chat-incoming-message-notification-34c91d3.js
200 OK 0 B URL HTTP/2 static.zdassets.com/web_widget/latest/classic/web-widget-chat-incoming-message-notification-34c91d3.js
IP
GET /web_widget/latest/classic/web-widget-chat-incoming-message-notification-34c91d3.js HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 10:15:12 GMT
content-type: application/javascript; charset=utf-8
x-amz-id-2: cJPl58f1Z/0sqIdUecCLv4quM2PK+wq3pTKGh7joMMBk9lLWnDUnJx2V9E5xs0ZBmxG5+X67qmQiDkGQA6Ym8Q==
x-amz-request-id: 8SC6VZS6VZW7TZQH
x-amz-replication-status: COMPLETED
last-modified: Mon, 30 Jan 2023 01:11:44 GMT
etag: W/"659635f5ad1b6653645380f46aa42236"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Tue, 30 Jan 2024 01:11:43 GMT
x-amz-version-id: xcNPO7Jko.vSxuLt0DB2ypeRYH_2idj5
cf-cache-status: HIT
age: 361937
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dQuWovvDAgbFwA5gLQ9WA80p5QHLrLD1BAmi3dVexRLqLL%2BPXyu1ZIkJMDKpstZxC7AjcB98vs3BuMifnOkbKvLVT54TUYTrSXZE2a6jAevVgRR9AXpbHmLP8rzTJD5tLOKCDso%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 794ae22dbea00b55-OSL
content-encoding: br
X-Firefox-Spdy: h2
partners.tremorhub.com/sync?UIRF=5124322324899790941&r=vtoExYmM40Nh
200 OK 0 B URL HTTP/2 partners.tremorhub.com/sync?UIRF=5124322324899790941&r=vtoExYmM40Nh
IP
GET /sync?UIRF=5124322324899790941&r=vtoExYmM40Nh HTTP/1.1
Host: partners.tremorhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 05 Feb 2023 10:15:13 GMT
content-type: image/gif
server: Apache-Coyote/1.1
p3p: CP='This is not a P3P policy. See https://telaria.com/privacy-policy/'
X-Firefox-Spdy: h2
doggocasino.com/styles.6fe09080dd4bc8174585.css
200 OK 0 B URL HTTP/2 doggocasino.com/styles.6fe09080dd4bc8174585.css
IP
GET /styles.6fe09080dd4bc8174585.css HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/en-us?affiliateName=[cellxpert]&affid=cx-35656_393091&bannerid=35656&trackerid=35656_393091&brand=doggocasino&bta=35656&rdk=rk1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
x-amz-meta-codebuild-content-sha256: 4f853d18badd3933524ca4a1dd6240279e0051fb38905b83f18834b4b93aaeb1
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:08219a5d-0b7c-4ae2-afb4-2507533d271d
x-amz-meta-codebuild-content-md5: 319cfed7654cbf4a61d9a3eabce3d2f4
last-modified: Fri, 03 Feb 2023 09:41:11 GMT
x-amz-version-id: npjfCT2QxfWuonZeBjBpr6rCTapaYC1B
server: AmazonS3
content-encoding: br
date: Sun, 05 Feb 2023 09:46:02 GMT
etag: W/"28df2050b7c0c4d9b66b26865c4c7606"
vary: Accept-Encoding
via: 1.1 96c778ce6156d12f24b8b6cdaa0cbf66.cloudfront.net (CloudFront)
age: 1747
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: eYnNVhb3NzVzFg1N2XeHeoUaFgZMJXICa84bwjgsoNh0UPGZOGRg0Q==
X-Firefox-Spdy: h2
doggocasino.com/polyfills.041a4b505b38e3453b95.js
200 OK 0 B URL HTTP/2 doggocasino.com/polyfills.041a4b505b38e3453b95.js
IP
GET /polyfills.041a4b505b38e3453b95.js HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/en-us?affiliateName=[cellxpert]&affid=cx-35656_393091&bannerid=35656&trackerid=35656_393091&brand=doggocasino&bta=35656&rdk=rk1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
x-amz-meta-codebuild-content-sha256: 4f853d18badd3933524ca4a1dd6240279e0051fb38905b83f18834b4b93aaeb1
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:08219a5d-0b7c-4ae2-afb4-2507533d271d
x-amz-meta-codebuild-content-md5: 319cfed7654cbf4a61d9a3eabce3d2f4
last-modified: Fri, 03 Feb 2023 09:41:10 GMT
x-amz-version-id: c7xOJuDqHqwOzshR3WYnjzsQa8Mh26d_
server: AmazonS3
content-encoding: br
date: Sun, 05 Feb 2023 09:46:02 GMT
etag: W/"43655eda45dc98456c80904f6f6683e7"
vary: Accept-Encoding
via: 1.1 96c778ce6156d12f24b8b6cdaa0cbf66.cloudfront.net (CloudFront)
age: 1747
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 3llszRaa34t35oYMw4zdocdjL4c1gCQdObVDkORaszOs0c95fsGz1A==
X-Firefox-Spdy: h2
doggocasino.com/main.0ed9e70684f138e4f331.js
200 OK 0 B URL HTTP/2 doggocasino.com/main.0ed9e70684f138e4f331.js
IP
GET /main.0ed9e70684f138e4f331.js HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/en-us?affiliateName=[cellxpert]&affid=cx-35656_393091&bannerid=35656&trackerid=35656_393091&brand=doggocasino&bta=35656&rdk=rk1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
x-amz-meta-codebuild-content-sha256: 4f853d18badd3933524ca4a1dd6240279e0051fb38905b83f18834b4b93aaeb1
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:08219a5d-0b7c-4ae2-afb4-2507533d271d
x-amz-meta-codebuild-content-md5: 319cfed7654cbf4a61d9a3eabce3d2f4
last-modified: Fri, 03 Feb 2023 09:41:17 GMT
x-amz-version-id: rBVsIP7BRDNYLiEmmpnh5R6HSS2K4UKG
server: AmazonS3
content-encoding: br
date: Sun, 05 Feb 2023 09:43:27 GMT
etag: W/"4a08636564293c0a6f6ff19bb894bcf4"
vary: Accept-Encoding
via: 1.1 96c778ce6156d12f24b8b6cdaa0cbf66.cloudfront.net (CloudFront)
age: 1902
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: TgPoWUvxliOsHb6Uay2eew2gAYP2g7uyTd9PPyhxaoM4e8S_aJAmuA==
X-Firefox-Spdy: h2
cdn.iconvert.network/code/9f66804e-a360-401a-966a-3d11f064f2f2.js
200 OK 0 B URL HTTP/2 cdn.iconvert.network/code/9f66804e-a360-401a-966a-3d11f064f2f2.js
IP
GET /code/9f66804e-a360-401a-966a-3d11f064f2f2.js HTTP/1.1
Host: cdn.iconvert.network
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Thu, 19 Jan 2023 14:15:25 GMT
server: AmazonS3
content-encoding: gzip
date: Sun, 05 Feb 2023 09:08:29 GMT
cache-control: max-age=7200
etag: W/"fe18a616aeaeeab3aac82bba12f10b44"
x-cache: Hit from cloudfront
via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: ELybDhQPdJtUvs_kKv-Fux25YoYZMWZjZqfwg1YEdFxxyJ7mn8ZQWQ==
age: 4030
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
doggocasino.com/assets/theme/icons/Trophy-Icon_black.svg
200 OK 0 B URL HTTP/2 doggocasino.com/assets/theme/icons/Trophy-Icon_black.svg
IP
GET /assets/theme/icons/Trophy-Icon_black.svg HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/no-no?affiliateName=%5Bcellxpert%5D&affid=cx-35656_393091&bannerid=35656&trackerid=35656_393091&brand=doggocasino&bta=35656&rdk=rk1
Cookie: __adm_tid=tid-40b2b6784.455c98d38; _ga_K4EHGY5F0T=GS1.1.1675592149.1.1.1675592150.59.0.0; _ga=GA1.2.88150227.1675592149; affiliateId=cx-35656_393091; bannerId=35656; trackerId=35656_393091; affiliateName=%5Bcellxpert%5D; _gid=GA1.2.1577888892.1675592150; _gat_UA-196341002-1=1; _hjSessionUser_3054262=eyJpZCI6ImRiMmFhNDdiLWQ4M2EtNTZiNy05OTY5LTQyMmYzYmY2ZmVmNSIsImNyZWF0ZWQiOjE2NzU1OTIxNTA2MDcsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_3054262=eyJpZCI6ImRmOTk4MTk4LThlZDktNGQ2NC04YTgwLWQ5MzZiM2YxMzMzZCIsImNyZWF0ZWQiOjE2NzU1OTIxNTA4NTAsImluU2FtcGxlIjpmYWxzZX0=; _hjIncludedInPageviewSample=1; _hjAbsoluteSessionInProgress=1; cookie_policy=accepted
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
x-amz-meta-codebuild-content-sha256: 4f853d18badd3933524ca4a1dd6240279e0051fb38905b83f18834b4b93aaeb1
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:08219a5d-0b7c-4ae2-afb4-2507533d271d
x-amz-meta-codebuild-content-md5: 319cfed7654cbf4a61d9a3eabce3d2f4
last-modified: Fri, 03 Feb 2023 09:41:14 GMT
x-amz-version-id: Esd2v9c7Skpxa24A5OTvAGl.eNx6QZfv
server: AmazonS3
content-encoding: br
date: Sun, 05 Feb 2023 09:55:01 GMT
etag: W/"53db43e4c9552aaffec27abd1ebe0b2f"
vary: Accept-Encoding
via: 1.1 96c778ce6156d12f24b8b6cdaa0cbf66.cloudfront.net (CloudFront)
age: 1276
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: SFJOTz4FaY9m8NxzxBY0Lmz6EspjGXrkKNNNWlyxUjmm2f3n4aVERg==
X-Firefox-Spdy: h2
static.zdassets.com/web_widget/latest/classic/web-widget-locales/classic/no-json-34c91d3.js
200 OK 0 B URL HTTP/2 static.zdassets.com/web_widget/latest/classic/web-widget-locales/classic/no-json-34c91d3.js
IP
GET /web_widget/latest/classic/web-widget-locales/classic/no-json-34c91d3.js HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 10:15:12 GMT
content-type: application/javascript; charset=utf-8
x-amz-id-2: OOuMfgDiLcV8tCPYtqWT+uANpJ4qSN7suQ5V3vDUTzWHP78HVpTLl8znC70NEwvle673pqKIR7o=
x-amz-request-id: S54VGV93ZMP4D2HQ
x-amz-replication-status: COMPLETED
last-modified: Mon, 30 Jan 2023 01:11:48 GMT
etag: W/"5e9d61c5a5245ee1efc1f4327035e998"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Tue, 30 Jan 2024 01:11:47 GMT
x-amz-version-id: EtJGDeTP.S2Rw6.rzS4c79seQ2ob_x2m
cf-cache-status: HIT
age: 361938
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KtK1la64itr0N12i1M1kuygcdGn%2Fku3vHsL9j5sokKpoSZtZN44hZJ4rN%2FO4BMNaQfGGAOA71CU2anTAF59c%2BXq2Tgf1iZ5oFw4qn8fFB3sYNXkCcuItd5cbMukHGXASJjUG6sQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 794ae22e1f050b55-OSL
content-encoding: br
X-Firefox-Spdy: h2
iqbroker.com/lp/mobile-partner/pt/
200 OK 0 B URL HTTP/2 iqbroker.com/lp/mobile-partner/pt/
IP
ASN #204006 Iqoption Europe Ltd
GET /lp/mobile-partner/pt/ HTTP/1.1
Host: iqbroker.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: Traceid=ade01ebe08307a0deca52a5d68516c26; aff_model=; aff_ts=2023-02-05T10:15:13Z; IsRestrictedCountry=false; IsRegulatedCountry=true; Country=no; CountryID=149; AffTrackGroup=Black_team_(partnerka); Serv=NL; AppID=id871125783; brand_id=1; platform=9; client_platform_id=9; support_email=support@eu.iqoption.com; company_id=1; IsAppStoreCountry=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 Feb 2023 10:15:13 GMT
content-type: text/html; charset=utf-8
last-modified: Fri, 03 Feb 2023 16:19:22 GMT
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
set-cookie: Traceid=0a65e4479db4380482535c9fc0eb1b2b; expires=Mon, 13 Feb 2023 10:15:13 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
landing=/lp/mobile-partner/pt/; expires=Sun, 05 Mar 2023 10:15:13 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
IsRestrictedCountry=false; expires=Sun, 05 Mar 2023 10:15:13 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
IsRegulatedCountry=true; expires=Sun, 05 Mar 2023 10:15:13 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
Country=no; expires=Sun, 05 Mar 2023 10:15:13 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
CountryID=149; expires=Sun, 05 Mar 2023 10:15:13 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
Serv=NL; expires=Sun, 05 Mar 2023 10:15:13 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
AppID=id871125783; expires=Sun, 05 Mar 2023 10:15:13 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
brand_id=1; expires=Sun, 12 Feb 2023 10:15:13 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
platform=9; expires=Sun, 05 Mar 2023 10:15:13 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
client_platform_id=9; expires=Sun, 05 Mar 2023 10:15:13 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
support_email=support@eu.iqoption.com; expires=Sun, 05 Mar 2023 10:15:13 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
company_id=1; expires=Sun, 05 Mar 2023 10:15:13 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
IsAppStoreCountry=true; expires=Sun, 05 Mar 2023 10:15:13 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
RedirectDomain=iqoption.com; expires=Sun, 05 Mar 2023 10:15:13 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
RedirectDomains=iqoption.com,iqtrading.asia; expires=Sun, 05 Mar 2023 10:15:13 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
link: <https://iqbroker.com/lp/mobile-partner/pt/>; rel="canonical"
backend: arbitre_v4
remote-addr: 91.90.42.154
content-encoding: gzip
strict-transport-security: max-age=15555600
x-content-type-options: nosniff
X-Firefox-Spdy: h2
doggocasino.com/en-us?affiliateName=[cellxpert]&affid=cx-35656_393091&bannerid=35656&trackerid=35656_393091&brand=doggocasino&bta=35656&rdk=rk1
200 OK 0 B URL HTTP/2 doggocasino.com/en-us?affiliateName=[cellxpert]&affid=cx-35656_393091&bannerid=35656&trackerid=35656_393091&brand=doggocasino&bta=35656&rdk=rk1
IP
GET /en-us?affiliateName=[cellxpert]&affid=cx-35656_393091&bannerid=35656&trackerid=35656_393091&brand=doggocasino&bta=35656&rdk=rk1 HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html
date: Fri, 03 Feb 2023 09:43:02 GMT
x-amz-meta-codebuild-content-sha256: 4f853d18badd3933524ca4a1dd6240279e0051fb38905b83f18834b4b93aaeb1
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:08219a5d-0b7c-4ae2-afb4-2507533d271d
x-amz-meta-codebuild-content-md5: 319cfed7654cbf4a61d9a3eabce3d2f4
last-modified: Fri, 03 Feb 2023 09:41:11 GMT
x-amz-version-id: iMU8Rz5NZWxFiubeF.hu4CYkoQaOzmMh
etag: W/"b184614308c803b6dfdeeb5998254a65"
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Error from cloudfront
via: 1.1 96c778ce6156d12f24b8b6cdaa0cbf66.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: BHRz7flzwbE3s3qEOcJz9Fy_XcLwl6sptNi8dCFw5xTCNxpITyK4pw==
age: 174727
X-Firefox-Spdy: h2
doggocasino.com/runtime.4b27143eccb88f79924e.js
200 OK 0 B URL HTTP/2 doggocasino.com/runtime.4b27143eccb88f79924e.js
IP
GET /runtime.4b27143eccb88f79924e.js HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/en-us?affiliateName=[cellxpert]&affid=cx-35656_393091&bannerid=35656&trackerid=35656_393091&brand=doggocasino&bta=35656&rdk=rk1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
x-amz-meta-codebuild-content-sha256: 4f853d18badd3933524ca4a1dd6240279e0051fb38905b83f18834b4b93aaeb1
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:08219a5d-0b7c-4ae2-afb4-2507533d271d
x-amz-meta-codebuild-content-md5: 319cfed7654cbf4a61d9a3eabce3d2f4
last-modified: Fri, 03 Feb 2023 09:41:12 GMT
x-amz-version-id: OXhHe2stnaNA1WKKk4ncIbKIh1Ifvj8h
server: AmazonS3
content-encoding: br
date: Sun, 05 Feb 2023 10:13:19 GMT
etag: W/"f8164c2d4608d34a7a13c1f14afe4120"
vary: Accept-Encoding
via: 1.1 96c778ce6156d12f24b8b6cdaa0cbf66.cloudfront.net (CloudFront)
age: 110
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: cfN7M9_qdLSQrQ1MMboDkvFCxLmcegDtJH-7zIDy6Y0EgQM_GWfRyQ==
X-Firefox-Spdy: h2
static.zdassets.com/ekr/snippet.js?key=65b012e7-7474-42fb-a2e0-939200b21662
200 OK 0 B URL HTTP/2 static.zdassets.com/ekr/snippet.js?key=65b012e7-7474-42fb-a2e0-939200b21662
IP
GET /ekr/snippet.js?key=65b012e7-7474-42fb-a2e0-939200b21662 HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 05 Feb 2023 10:15:08 GMT
content-type: application/javascript
x-amz-id-2: VYKORFZEK8ncQjbBiiAK6oiTYdRdkzwPfaxRM/jinB20cI8N0LqXAF6x6uRMZJVhRKA1YH5Ltb2qBhbqYLdq5g==
x-amz-request-id: EBZ4ZRD66V3TGNXR
x-amz-replication-status: COMPLETED
last-modified: Thu, 28 Jul 2022 23:44:02 GMT
etag: W/"5cae6ce528dce0c327b2bcbaad459fdb"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=3600, s-maxage=60
x-amz-version-id: TCAqq4sghBBBAAXd3MLZ8Fy8XIds..vO
cf-cache-status: HIT
age: 10
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JlEWXKFIbApPzmnI2KGnhYPdg%2BqC0VFPf5anHgL7lFxhTcACP7CO0e7ZwRE8u9zFE5WBb4694OoG2Lrj3tiiIjjrwo0Wvuu3WRry%2BMn5YE3IhBAL0eMq3CcD%2FM4spF3%2FFSW9JvE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 794ae21909c80b55-OSL
content-encoding: br
X-Firefox-Spdy: h2
51d4256e-9ede-4425-8b77-d7e5166c1c25.snippet.antillephone.com/apg-seal.js
200 OK 0 B URL HTTP/2 51d4256e-9ede-4425-8b77-d7e5166c1c25.snippet.antillephone.com/apg-seal.js
IP
GET /apg-seal.js HTTP/1.1
Host: 51d4256e-9ede-4425-8b77-d7e5166c1c25.snippet.antillephone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
date: Sun, 05 Feb 2023 10:13:55 GMT
x-powered-by: Express
cache-control: max-age=300
etag: W/"c58-ZbPweqKe19OFxdP8NkPuG7PNlIk"
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 794ae04abe9a9b98-FRA
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: U_i8Typ3NTj4lofv0joSFMue0IBCMUupCHJVWiUdB0UbzPuKwfDQOA==
age: 73
X-Firefox-Spdy: h2
139.45.197.238
35.234.86.61
52.89.3.63
52.51.180.135
151.101.86.208
193.33.229.103
104.21.57.187
23.36.76.226
185.94.180.125
188.114.97.1
185.117.134.138
185.80.36.245