inoradde.com/4/5473343/
139.45.197.238200 OK 818 B IP 139.45.197.238:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (378)
Hash c4b2ee31c84dcdd77c4c95924d7ed5e7
3d1c41fea3370793a5381d1f74cf7566a2e01b59
7b0bfc23c079aa1c1ff24d80b1e8e37c1882520ba3bc477e1a1f53e0455a7a80
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /4/5473343/ HTTP/1.1
Host: inoradde.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 03 Feb 2023 14:25:15 GMT
Content-Type: text/html; charset=utf8
Transfer-Encoding: chunked
Connection: keep-alive
X-Trace-Id: 4baef33c048de648c518afbbd06bdc58
Link: <https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://my.rtmark.net>; rel="preconnect dns-prefetch", <https://myeasetrack.com>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://diromalxx.com>; rel="preconnect dns-prefetch"
Access-Control-Allow-Credentials: true
Access-Control-Max-Age: 86400
Timing-Allow-Origin: *
Set-Cookie: OAID=373a2e0593804b4ca5a7a31676dd9244; expires=Sat, 03 Feb 2024 14:25:15 GMT; path=/
oaidts=1675434315; expires=Sat, 03 Feb 2024 14:25:15 GMT; path=/
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
Pragma: no-cache, no-cache
Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
Expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Methods: GET, POST, OPTIONS, POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, Accept, Content-Type, Content-Length, Accept-Encoding
Content-Encoding: gzip
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash d4e95d0d8982bcd07804baf6fc88231c
5027abda0875bd2529dd4d6691784c74da71a9ee
373799b5749d2cb08b5721699a3e4c6b94b0d41604ac07d4ef7179e47dabc71f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "373799B5749D2CB08B5721699A3E4C6B94B0D41604AC07D4EF7179E47DABC71F"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10728
Expires: Fri, 03 Feb 2023 17:24:03 GMT
Date: Fri, 03 Feb 2023 14:25:15 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash e935ea42be4feaed61a824b0b903913e
f966cfa80d65a805cb9d7c6a53b3340865d7c51a
eb0ce9ae50d156fe5924b2d77346735e4e93b5240cff301c9aa835bb0b385815
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EB0CE9AE50D156FE5924B2D77346735E4E93B5240CFF301C9AA835BB0B385815"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10100
Expires: Fri, 03 Feb 2023 17:13:35 GMT
Date: Fri, 03 Feb 2023 14:25:15 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Alert, Retry-After, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 03 Feb 2023 13:36:11 GMT
content-type: application/json
age: 2944
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 7d2222d41721947297aaeb5a6e3d0714
04cc1ee417c8bf6338657fd4c2e4e1c1ddfd3065
de0e45969a2ad95e52f7e2fbd0d021d9075dd7b14666c929346efe111f648f7c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DE0E45969A2AD95E52F7E2FBD0D021D9075DD7B14666C929346EFE111F648F7C"
Last-Modified: Thu, 02 Feb 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11078
Expires: Fri, 03 Feb 2023 17:29:53 GMT
Date: Fri, 03 Feb 2023 14:25:15 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: HmO+qtk7ifP+AyBDdyrxmLWMLbIxJuwVglOp9G6/HDad3U0pfNRiyVFf2zITpPDHpZpAuxJdj4o=
x-amz-request-id: 3ZBSBZM1DGWR1ADC
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 03 Feb 2023 13:52:26 GMT
age: 1969
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 14:25:15 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
myeasetrack.com/ce2939e7-f18f-4e8d-b910-5d9b23a74541?zoneid=5473343&device=desktop&browser=firefox&os=windows&country=NO®ion=03&zonetype={zone_type}&useractivity=high&campaignid=6406879&banner=16042566&cost=0.001593&visitor_id=645380897688003105&rdk=rk1
18.192.108.151302 Found 0 B URL HTTP/2 myeasetrack.com/ce2939e7-f18f-4e8d-b910-5d9b23a74541?zoneid=5473343&device=desktop&browser=firefox&os=windows&country=NO®ion=03&zonetype={zone_type}&useractivity=high&campaignid=6406879&banner=16042566&cost=0.001593&visitor_id=645380897688003105&rdk=rk1
IP 18.192.108.151:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ce2939e7-f18f-4e8d-b910-5d9b23a74541?zoneid=5473343&device=desktop&browser=firefox&os=windows&country=NO®ion=03&zonetype={zone_type}&useractivity=high&campaignid=6406879&banner=16042566&cost=0.001593&visitor_id=645380897688003105&rdk=rk1 HTTP/1.1
Host: myeasetrack.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Fri, 03 Feb 2023 14:25:16 GMT
content-length: 0
cache-control: no-store, no-cache, pre-check=0, post-check=0
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://ntrfr.leovegas.com/redirect.aspx?pid=3747044&bid=15012&c=wd9ntcsm7snti6cm2cc3khkm
pragma: no-cache
set-cookie: ce2939e7-f18f-4e8d-b910-5d9b23a74541-v4=sNe2CDakCPaTYxnHVzRSEGomTFyloqdu3P4E21RQ-dU; Max-Age=86400; Expires=Sat, 04-Feb-2023 14:25:16 GMT; Domain=myeasetrack.com; Path=/; Secure; HttpOnly;SameSite=None
cc-v4=B6NojDBzZUVH3%2BqKJs95i54fRqgG%2FVNdKr%2Bf%2F8aLq9vk3yL234o5Vj%2BhOEZEBrs5B1iz1MG6wt%2FvLH%2FOmRGrOo9AB7T0bhxEUhu6z08b%2BPqsS6H1FECHn68ksa2Lw2K6%2Fke%2BgsrGcc710nngPPSeiA%3D%3D; Max-Age=31536000; Expires=Sat, 03-Feb-2024 14:25:16 GMT; Domain=myeasetrack.com; Path=/; Secure; HttpOnly;SameSite=None
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash bb0e1ff82ab6199f715e00974b7f6957
74edba6943c202d060b471c30a3c626542bfac84
d982aa0ae1b32ffba27f789ad265b594dfef0bc4c55a0d0489d38b0827e6a7e2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D982AA0AE1B32FFBA27F789AD265B594DFEF0BC4C55A0D0489D38B0827E6A7E2"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11657
Expires: Fri, 03 Feb 2023 17:39:33 GMT
Date: Fri, 03 Feb 2023 14:25:16 GMT
Connection: keep-alive
my.rtmark.net/img.gif?f=merge&userId=373a2e0593804b4ca5a7a31676dd9244
139.45.195.8200 OK 43 B URL HTTP/2 my.rtmark.net/img.gif?f=merge&userId=373a2e0593804b4ca5a7a31676dd9244
IP 139.45.195.8:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
POST /img.gif?f=merge&userId=373a2e0593804b4ca5a7a31676dd9244 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 14:25:16 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: null
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=373a2e0593804b4ca5a7a31676dd9244; expires=Sat, 03 Feb 2024 14:25:16 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
inoradde.com/favicon.ico
139.45.197.238204 No Content 0 B IP 139.45.197.238:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /favicon.ico HTTP/1.1
Host: inoradde.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Cookie: OAID=373a2e0593804b4ca5a7a31676dd9244; oaidts=1675434315
HTTP/1.1 204 No Content
Server: nginx
Date: Fri, 03 Feb 2023 14:25:16 GMT
Connection: keep-alive
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Pragma: public
Cache-Control: max-age=315360000, public, must-revalidate, proxy-revalidate
ntrfr.leovegas.com/redirect.aspx?pid=3747044&bid=15012&c=wd9ntcsm7snti6cm2cc3khkm
95.101.10.147307 Temporary Redirect 0 B URL HTTP/2 ntrfr.leovegas.com/redirect.aspx?pid=3747044&bid=15012&c=wd9ntcsm7snti6cm2cc3khkm
IP 95.101.10.147:0
ASN #20940 Akamai International B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /redirect.aspx?pid=3747044&bid=15012&c=wd9ntcsm7snti6cm2cc3khkm HTTP/1.1
Host: ntrfr.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 307 Temporary Redirect
content-type: text/html
content-length: 0
location: https://www.leovegas.com/nb-no/livecasino?btag=667909_65C5EB0B14CC406CAED83E0A76BD6CCB&c=wd9ntcsm7snti6cm2cc3khkm&pid=3747044&bid=15012
p3p: CP="This is not a P3P policy! It is used to bypass IEs problematic handling of cookies"
x-aspnet-version: 4.0.30319
request-context: appId=cid-v1:83ffbda4-9458-475e-90ec-4427cfb5c3b0
access-control-expose-headers: Request-Context
expires: Fri, 03 Feb 2023 14:25:16 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Fri, 03 Feb 2023 14:25:16 GMT
set-cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a3747044%2c%22BID%22%3a15012%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1675434316238)%5c%2f%22%2c%22CookieTag%22%3a%22150123747044451240919C2023231425%22%7d%5d; SameSite=None;; domain=.leovegas.com; expires=Fri, 31-Dec-9999 23:59:59 GMT; path=/; secure
NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%222803909610%7c1%22%7d%5d; domain=.leovegas.com; expires=Sun, 03-Feb-3022 14:25:16 GMT; path=/; secure; SameSite=Strict
server-timing: cdn-cache; desc=MISS, edge; dur=22, origin; dur=36
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 14ce1585885d0111913e10c5e4233619
0900480e0ed0800299b75ae5c375f786100c2017
b18f72471c58a32bbe1e67b247615e3bc6d583e70c7e47d88f7b84ecc318df4e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4324
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 14:25:16 GMT
Last-Modified: Fri, 03 Feb 2023 13:13:12 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Expires, Content-Type, ETag, Last-Modified, Alert, Retry-After, Content-Length, Cache-Control, Pragma, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 03 Feb 2023 13:49:06 GMT
age: 2170
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
www.leovegas.com/_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3&ns=2&cb=1756664162
107.154.248.168200 OK 20 kB URL HTTP/2 www.leovegas.com/_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3&ns=2&cb=1756664162
IP 107.154.248.168:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash a4cdd736cacc41c15cee75a18666fc01
ee6331cb709548cb923cb82ef100e0a8c69e8c89
972e5789faecc60cb0229b7a0a3aacea2b4a1eac0c251e31c81e248552c96234
GET /_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3&ns=2&cb=1756664162 HTTP/1.1
Host: www.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.leovegas.com/en-no/livecasino?btag=667909_65C5EB0B14CC406CAED83E0A76BD6CCB&c=wd9ntcsm7snti6cm2cc3khkm&pid=3747044&bid=15012
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a3747044%2c%22BID%22%3a15012%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1675434316238)%5c%2f%22%2c%22CookieTag%22%3a%22150123747044451240919C2023231425%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%222803909610%7c1%22%7d%5d; leo-essentials=%7B%22cid%22%3A%2252cfd912-e549-4eb4-9913-041c5c778a36%22%7D; visid_incap_846569=hZEK2dUoTsqE1xXN3vqTLUwZ3WMAAAAAQUIPAAAAAAD5thl9R6cXZZLtb2TvIrby; nlbi_846569=7n9SXKSEeRmxfhFMTJV9qQAAAABgHyCCqJlWGELUBXcu+GsT; incap_ses_633_846569=ncIHBRwhXVy5DBuApd7ICEwZ3WMAAAAAQ/6lgLJj0b/eTXJyfhvzQw==; leobtag=667909_65C5EB0B14CC406CAED83E0A76BD6CCB; leonrpid=3747044; leonrbid=15012; leonrmeta=[{"value":"wd9ntcsm7snti6cm2cc3khkm","key":"c"}]
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: no-cache, no-store
content-type: application/javascript
content-encoding: gzip
x-robots-tag: noindex
content-length: 19500
strict-transport-security: max-age=63072000
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 8913af0be619500295008bb91f506660
a7b8068ba9aa506205a295b24458c2616997a0d1
6a9838d00256431807ca382fc205064b07c08d5054f2895c2ae3cc4e9094179a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6A9838D00256431807CA382FC205064B07C08D5054F2895C2AE3CC4E9094179A"
Last-Modified: Wed, 01 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9860
Expires: Fri, 03 Feb 2023 17:09:36 GMT
Date: Fri, 03 Feb 2023 14:25:16 GMT
Connection: keep-alive
push.services.mozilla.com/
54.148.242.254101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 54.148.242.254:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: vCsHXYO42gMT1LV6YEH67A==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: xaiaJG9Iw+MDT1MbbhzQAOFnt0U=
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash bbeb609cbf32a8842bf96a124588e65e
40c0f548bcb714731f62df5a27cad21adef0463d
502c60a18a13b84598933731d182aafd4b83576bfc56451b36f9238c621a571d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 14:25:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 19fcc19786a47451672be06f8a5182b5
59768d316511fa60ea3143fc2dc8f22f4ea7e4a9
c3eeec95b997691f8e23ed8f68214458b9a2001374d82039bfe481067bd6c867
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6287
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 14:25:17 GMT
Last-Modified: Fri, 03 Feb 2023 12:40:30 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 19fcc19786a47451672be06f8a5182b5
59768d316511fa60ea3143fc2dc8f22f4ea7e4a9
c3eeec95b997691f8e23ed8f68214458b9a2001374d82039bfe481067bd6c867
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6287
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 14:25:17 GMT
Last-Modified: Fri, 03 Feb 2023 12:40:30 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.app~65914263.6f996d8b6ea9f23747f1.chunk.css?e=p
34.107.241.180200 OK 1.9 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.app~65914263.6f996d8b6ea9f23747f1.chunk.css?e=p
IP 34.107.241.180:0
File type ASCII text, with very long lines (5028)
Hash 71b32aaf113588ee53a750afb9f91a02
7f378b3e6695c22fd99484613ffc4328d4d07816
068bf711982c24a8a09bd4432011c0e52355bb823392ab6421cbf62e0f082f97
GET /fulcrum/v4/master/dynamic/mobile.app~65914263.6f996d8b6ea9f23747f1.chunk.css?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycduf7YmagK4Zo_-nM7YywpimWgdYm0BO33hs95hRzmVLcSLQKwf0T93Nd2VimGzFaIU1vCe75z2wjaZvUcXXIqDIWg
vary: X-Goog-Allowed-Resources,Origin
x-goog-generation: 1669028776140146
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 1881
content-encoding: gzip
x-goog-hash: crc32c=ovdTiA==, md5=cbMqrxE1iO5Tp1CvufkaAg==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 1881
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Sun, 29 Jan 2023 14:15:53 GMT
expires: Sun, 26 Feb 2023 14:15:53 GMT
cache-control: public, max-age=2419200,no-transform
age: 432564
last-modified: Mon, 21 Nov 2022 11:06:16 GMT
etag: "71b32aaf113588ee53a750afb9f91a02"
content-type: text/css
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.app~bfe0ed74.f5afd94bdac610591557.chunk.css?e=p
34.107.241.180200 OK 585 B URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.app~bfe0ed74.f5afd94bdac610591557.chunk.css?e=p
IP 34.107.241.180:0
File type ASCII text, with very long lines (1286)
Hash 27c4a2615df59ed93991f6b354671dd6
0e0d88a402dc646af5a4c199145ac8a422d2d448
a98cad2dd71c709b26875e33ae112f368fac45aa666664ba7c94fc2e7a2b9df5
GET /fulcrum/v4/master/dynamic/mobile.app~bfe0ed74.f5afd94bdac610591557.chunk.css?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycdvRTaj6e5PG977X2Qurg4y9U-oNrugAEXZCVowpLYUvuxZt5cvM036yMCqFgBgOk1qVscbq7ePlSqVZpTpON57r1FlOZ-us
vary: X-Goog-Allowed-Resources,Origin
x-goog-generation: 1666691230328646
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 585
content-encoding: gzip
x-goog-hash: crc32c=K8QcbA==, md5=J8SiYV31ntk5kfazVGcd1g==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 585
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Sun, 29 Jan 2023 14:15:28 GMT
expires: Sun, 26 Feb 2023 14:15:28 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Tue, 25 Oct 2022 09:47:10 GMT
etag: "27c4a2615df59ed93991f6b354671dd6"
content-type: text/css
age: 432589
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.relay~93c72913.9d8920c9306f7917f5d4.chunk.js?e=p
34.107.241.180200 OK 25 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.relay~93c72913.9d8920c9306f7917f5d4.chunk.js?e=p
IP 34.107.241.180:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash 88cc9dfad78be7a8333a39c60b66409c
c40c8ddd7735becdfa00a3f800a7530dff0f5b03
7bddfaa30d3edd219ff0d9364982fd9d8f0d41854b57ecd50259dd4e24755358
GET /fulcrum/v4/master/dynamic/mobile.relay~93c72913.9d8920c9306f7917f5d4.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdsS6odZ0J0F8vX67qIFcOHKjy0iw4giCk5C3v7WTdf1rB_zucNtgiry89qQQlYqS2d9G80uP0kXVXE5jfCLLp9vPw
vary: X-Goog-Allowed-Resources,Origin
x-goog-generation: 1675328179704429
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 25189
content-encoding: gzip
x-goog-hash: crc32c=jLMiDQ==, md5=iMyd+teL56gzOjnGC2ZAnA==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 25189
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Thu, 02 Feb 2023 09:14:50 GMT
expires: Thu, 02 Mar 2023 09:14:50 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Thu, 02 Feb 2023 08:56:19 GMT
etag: "88cc9dfad78be7a8333a39c60b66409c"
content-type: application/javascript
age: 105027
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 19fcc19786a47451672be06f8a5182b5
59768d316511fa60ea3143fc2dc8f22f4ea7e4a9
c3eeec95b997691f8e23ed8f68214458b9a2001374d82039bfe481067bd6c867
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3075
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 14:25:17 GMT
Last-Modified: Fri, 03 Feb 2023 13:34:02 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.runtime.8d23bc5252eefef18874.js?e=p
34.107.241.180200 OK 12 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.runtime.8d23bc5252eefef18874.js?e=p
IP 34.107.241.180:0
File type ASCII text, with very long lines (34420)
Hash 13de8c5357b759da601e1d62aa125ae3
c20b7e121b1b906b7fbdcde7718584f570f659a9
ad577c76fc3c6adad509384d190a218a036dc17392369be7948ccdf92f9b301e
GET /fulcrum/v4/master/dynamic/mobile.runtime.8d23bc5252eefef18874.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdtlx-P1bkyIn7U-p1L047JQ3ZrfvvSuQj-9eP6UzkZXZDQjBy4khf0hNtZOS5BHCYN-2Bvi0WQRM9lpGFzw9UdgwPW2O8Qu
vary: X-Goog-Allowed-Resources,Origin
x-goog-generation: 1675349647260716
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 12188
content-encoding: gzip
x-goog-hash: crc32c=xo7Dqg==, md5=E96MU1e3WdpgHh1iqhJa4w==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 12188
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Thu, 02 Feb 2023 14:58:14 GMT
expires: Thu, 02 Mar 2023 14:58:14 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Thu, 02 Feb 2023 14:54:07 GMT
etag: "13de8c5357b759da601e1d62aa125ae3"
content-type: application/javascript
age: 84423
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/static/c16b1b72809f0ebf0713c5d56aaaa998.svg
34.107.241.180200 OK 2.9 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/static/c16b1b72809f0ebf0713c5d56aaaa998.svg
IP 34.107.241.180:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2945), with no line terminators
Hash 342bb69e34b5d81e1fab7241f0398da8
f12381655ac55a5b4a620595348576477dd61236
79387e649471e7a99751a3168ea95f57796929c435d7f1eb2cfca955bbf23c44
GET /fulcrum/v4/master/static/c16b1b72809f0ebf0713c5d56aaaa998.svg HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.leovegas.com/
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a3747044%2c%22BID%22%3a15012%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1675434316238)%5c%2f%22%2c%22CookieTag%22%3a%22150123747044451240919C2023231425%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%222803909610%7c1%22%7d%5d; visid_incap_846569=hZEK2dUoTsqE1xXN3vqTLUwZ3WMAAAAAQUIPAAAAAAD5thl9R6cXZZLtb2TvIrby; nlbi_846569=7n9SXKSEeRmxfhFMTJV9qQAAAABgHyCCqJlWGELUBXcu+GsT; incap_ses_633_846569=ncIHBRwhXVy5DBuApd7ICEwZ3WMAAAAAQ/6lgLJj0b/eTXJyfhvzQw==; leobtag=667909_65C5EB0B14CC406CAED83E0A76BD6CCB; leonrpid=3747044; leonrbid=15012; leonrmeta=[{"value":"wd9ntcsm7snti6cm2cc3khkm","key":"c"}]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdtX85i5zAy4jNPsVIg_6Yj7YOVCZeWoSposDsNysHEcCSWgZ4sg6cB71-AqQ3H7_49BIn5SVLi-3b4B8xKVx3WDIQ
vary: X-Goog-Allowed-Resources,Origin
x-goog-generation: 1675371725673331
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 2945
x-goog-meta-goog-reserved-file-mtime: 1675371697
x-goog-hash: crc32c=T17Tvw==, md5=NCu2njS12B4fq3JB8DmNqA==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 2945
server: UploadServer
date: Thu, 02 Feb 2023 22:27:44 GMT
expires: Thu, 02 Mar 2023 22:27:44 GMT
cache-control: public, max-age=2419200
last-modified: Thu, 02 Feb 2023 21:02:05 GMT
etag: "342bb69e34b5d81e1fab7241f0398da8"
content-type: image/svg+xml
age: 57453
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.app~bead5879.4ba62c335ac53fa2f433.chunk.css?e=p
34.107.241.180200 OK 1.6 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.app~bead5879.4ba62c335ac53fa2f433.chunk.css?e=p
IP 34.107.241.180:0
File type ASCII text, with very long lines (2303)
Hash e27a18cf1cd1a858e6bc1e56cfe231bd
73821fe3a5a2cff54c549ae91fb5347b5e6d8a9b
5a9ca458694d9b63411c902fe342f88de706187b5552a1670066753f502cd622
GET /fulcrum/v4/master/dynamic/mobile.app~bead5879.4ba62c335ac53fa2f433.chunk.css?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdtpY502xIHyxrkTeSmoFrOmWb2de3gAqvcK8HBnZl3HcgkPM-XLWmidaVpkNeDITMVkTHJeBhoT8Q0LO2ebnB_HJA
vary: X-Goog-Allowed-Resources,Origin
x-goog-generation: 1670506834496426
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 1625
content-encoding: gzip
x-goog-hash: crc32c=igy0xQ==, md5=4noYzxzRqFjmvB5Wz+IxvQ==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 1625
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Sun, 29 Jan 2023 14:15:53 GMT
expires: Sun, 26 Feb 2023 14:15:53 GMT
cache-control: public, max-age=2419200,no-transform
age: 432564
last-modified: Thu, 08 Dec 2022 13:40:34 GMT
etag: "e27a18cf1cd1a858e6bc1e56cfe231bd"
content-type: text/css
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.react~03cc5dce.7d492abff2b9f861ab9c.chunk.js?e=p
34.107.241.180200 OK 36 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.react~03cc5dce.7d492abff2b9f861ab9c.chunk.js?e=p
IP 34.107.241.180:0
File type ASCII text, with very long lines (58423)
Hash 7e2b85c28d0e81c76370de82accb078a
0ca5410f13c25c339685f024d985e6cab22448f9
c29b6f6762707f9ac9fd8edca2e3d342b8d47c92bd2660fb5a2b9a7daea3a7b9
GET /fulcrum/v4/master/dynamic/mobile.react~03cc5dce.7d492abff2b9f861ab9c.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdtB6HyvTXgLDMov6qIMmE6BXrLvemYWtjngivEo60Dt-9kyufscIGPBXzYAidYTUdNPFkvwWAYf84gbPg45DDVc7Q
vary: X-Goog-Allowed-Resources,Origin
x-goog-generation: 1675328179664609
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 35667
content-encoding: gzip
x-goog-hash: crc32c=JB4Iyw==, md5=fiuFwo0OgcdjcN6CrMsHig==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 35667
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Thu, 02 Feb 2023 09:14:50 GMT
expires: Thu, 02 Mar 2023 09:14:50 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Thu, 02 Feb 2023 08:56:19 GMT
etag: "7e2b85c28d0e81c76370de82accb078a"
content-type: application/javascript
age: 105027
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.vendors~app~acf67890.15da669b4021ad83d058.chunk.js?e=p
34.107.241.180200 OK 12 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.vendors~app~acf67890.15da669b4021ad83d058.chunk.js?e=p
IP 34.107.241.180:0
File type ASCII text, with very long lines (46125), with no line terminators
Hash 68465abfbaec3491818ac4636383161f
dc127f9610a639bc06db484be2287ff3250e0e69
79e46474c775953f2f9e957adddda206b3af0cea02070079aa19d86acfeff9b1
GET /fulcrum/v4/master/dynamic/mobile.vendors~app~acf67890.15da669b4021ad83d058.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdvixZjkipBWF8McRxbk_8eoxCTewN3OSM7ooQSCu_0QOaNo7-MLy2WBLzBvlvu_FRdyx9hxsAQx_qnUrK7TUIk3knK8Bvlj
vary: X-Goog-Allowed-Resources,Origin
x-goog-generation: 1675328180163950
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 12367
content-encoding: gzip
x-goog-hash: crc32c=Ny5aTQ==, md5=aEZav7rsNJGBisRjY4MWHw==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 12367
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Thu, 02 Feb 2023 09:14:50 GMT
expires: Thu, 02 Mar 2023 09:14:50 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Thu, 02 Feb 2023 08:56:20 GMT
etag: "68465abfbaec3491818ac4636383161f"
content-type: application/javascript
age: 105027
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 19fcc19786a47451672be06f8a5182b5
59768d316511fa60ea3143fc2dc8f22f4ea7e4a9
c3eeec95b997691f8e23ed8f68214458b9a2001374d82039bfe481067bd6c867
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6287
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 14:25:17 GMT
Last-Modified: Fri, 03 Feb 2023 12:40:30 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.vendors~app~4da73d43.545eda81f6d644ad31df.chunk.js?e=p
34.107.241.180200 OK 7.5 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.vendors~app~4da73d43.545eda81f6d644ad31df.chunk.js?e=p
IP 34.107.241.180:0
File type Unicode text, UTF-8 text, with very long lines (21356), with no line terminators
Hash 901800bf9e0f8a689e9e42974f045846
14a2eb1a04844e36954f06b42d3ad27cf144a426
cef389af57e9f715fc0fcca9faac05199cc762bd0808eef6c3d683e3d56b8194
GET /fulcrum/v4/master/dynamic/mobile.vendors~app~4da73d43.545eda81f6d644ad31df.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdsBhDm_c-U3IqpLPynDKM7wYq33wTQK3hZ1aeGV4c1NxnHSvjditSrEy13Svevtyp5yod4ZIyzIqQ5h9OqCWLoJPJrUmRMN
vary: X-Goog-Allowed-Resources,Origin
x-goog-generation: 1675328179893609
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 7524
content-encoding: gzip
x-goog-hash: crc32c=iD9+kw==, md5=kBgAv54PimienkKXTwRYRg==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 7524
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Thu, 02 Feb 2023 09:14:50 GMT
expires: Thu, 02 Mar 2023 09:14:50 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Thu, 02 Feb 2023 08:56:19 GMT
etag: "901800bf9e0f8a689e9e42974f045846"
content-type: application/javascript
age: 105027
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1p5/dVi66-kaLJo
142.250.74.131200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/dVi66-kaLJo
IP 142.250.74.131:0
Hash e022787c4cfdd47f2e7cf567597890da
a6cda5e69ea354157865a6531546b543a1273dd4
603fe40c6539723fffd9a6c45926b231a77963bb7f96457289c14a894d59e3e0
POST /s/gts1p5/dVi66-kaLJo HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 14:25:17 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.vendors~app~91835fe9.4c6c6e810b1dcde86c48.chunk.js?e=p
34.107.241.180200 OK 7.7 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.vendors~app~91835fe9.4c6c6e810b1dcde86c48.chunk.js?e=p
IP 34.107.241.180:0
File type ASCII text, with very long lines (25581), with no line terminators
Hash eb010ae02917a1500b804e16a7810032
bb22ae2e40fa7a8fe21f1d64caad6b78fa656033
061ed2c2d9b28dcc0322d55ff556f2569b3aded1f39969885024f1275b85865f
GET /fulcrum/v4/master/dynamic/mobile.vendors~app~91835fe9.4c6c6e810b1dcde86c48.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdv1v2iYSpq6K6VqeYRe3fRZfgjWlrkRECFhHHm1QVVIaEqXyWpzizEQMsKWVYXNdaPdRdAUYlnO0rXVD9iSxrOZudhqonuB
vary: X-Goog-Allowed-Resources,Origin
x-goog-generation: 1675328180009401
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 7716
content-encoding: gzip
x-goog-hash: crc32c=sbwi2A==, md5=6wEK4CkXoVALgE4Wp4EAMg==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 7716
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Thu, 02 Feb 2023 09:14:50 GMT
expires: Thu, 02 Mar 2023 09:14:50 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Thu, 02 Feb 2023 08:56:20 GMT
etag: "eb010ae02917a1500b804e16a7810032"
content-type: application/javascript
age: 105027
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.vendors~app~9b312c24.4913fd26d7cc2d31e38d.chunk.js?e=p
34.107.241.180200 OK 12 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.vendors~app~9b312c24.4913fd26d7cc2d31e38d.chunk.js?e=p
IP 34.107.241.180:0
File type ASCII text, with very long lines (35552), with no line terminators
Hash 0364586251fdaa810c67bf91fb7068b6
eb23a74db2aa2ee6f8ffd766e122b1dbaa4f8e15
f9bbbd7458ed6eba55479dc0c998ec916c89d5d2532dadaa716ea374e19de33f
GET /fulcrum/v4/master/dynamic/mobile.vendors~app~9b312c24.4913fd26d7cc2d31e38d.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdvcBpNpUS_q3oVWC_mF8QK2A3GNAH04XSLgJTAmpbIDKK17Zl2Qtp3EO4giFq3fuSoCQE_o2Qc5ooNXcax96Uhu_A
vary: X-Goog-Allowed-Resources,Origin
x-goog-generation: 1675328180077247
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 11670
content-encoding: gzip
x-goog-hash: crc32c=PkWQmw==, md5=A2RYYlH9qoEMZ7+R+3Botg==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 11670
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Thu, 02 Feb 2023 09:14:50 GMT
expires: Thu, 02 Mar 2023 09:14:50 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Thu, 02 Feb 2023 08:56:20 GMT
etag: "0364586251fdaa810c67bf91fb7068b6"
content-type: application/javascript
age: 105027
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.vendors~app~e9b2199d.4c6b788c457b66b2dd15.chunk.js?e=p
34.107.241.180200 OK 14 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.vendors~app~e9b2199d.4c6b788c457b66b2dd15.chunk.js?e=p
IP 34.107.241.180:0
File type ASCII text, with very long lines (42449), with no line terminators
Hash 3c7b19f4a0f7ac55be57aee572fda218
90d9d47a0dd106d9d0e7ad2b299264148ac4fbe3
fdd778c1654295540dc0d7d6a87d9a42207426c17d0584e61e93f9a07266bf79
GET /fulcrum/v4/master/dynamic/mobile.vendors~app~e9b2199d.4c6b788c457b66b2dd15.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdutXwvgl7SSQlH82Z4fCfFMEwECFoWRmN6YqS_lpkoKivtSk9DaNXfhAZv0XdCQbCi04sXKGWF2I2qVIcvyfNAUsg
vary: X-Goog-Allowed-Resources,Origin
x-goog-generation: 1675328180169481
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 13604
content-encoding: gzip
x-goog-hash: crc32c=Lq3TUg==, md5=PHsZ9KD3rFW+V67lcv2iGA==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 13604
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Thu, 02 Feb 2023 09:14:50 GMT
expires: Thu, 02 Mar 2023 09:14:50 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Thu, 02 Feb 2023 08:56:20 GMT
etag: "3c7b19f4a0f7ac55be57aee572fda218"
content-type: application/javascript
age: 105027
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.vendors~app~23b211d4.9dd27998f83f955876f0.chunk.js?e=p
34.107.241.180200 OK 13 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.vendors~app~23b211d4.9dd27998f83f955876f0.chunk.js?e=p
IP 34.107.241.180:0
File type Unicode text, UTF-8 text, with very long lines (29772), with no line terminators
Hash a9a803eeac0782a4e2fd613481d5285b
ec9245cb5ed6125d90e922f0f798ce7b12019cb8
61190c753a1b862c8d56bca34174da3c3ff9db9c94c90c28da618206449e0d87
GET /fulcrum/v4/master/dynamic/mobile.vendors~app~23b211d4.9dd27998f83f955876f0.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycduWnyxpZpLv9w3SFt_c52zel6n1CH5nWWCi36RE_yrPim-00gl40dKQKmqz1xAlD61WgMqBddsML1lKQYPo1u734g
vary: X-Goog-Allowed-Resources,Origin
x-goog-generation: 1675328179939177
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 13193
content-encoding: gzip
x-goog-hash: crc32c=9v/k/g==, md5=qagD7qwHgqTi/WE0gdUoWw==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 13193
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Thu, 02 Feb 2023 09:14:50 GMT
expires: Thu, 02 Mar 2023 09:14:50 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Thu, 02 Feb 2023 08:56:19 GMT
etag: "a9a803eeac0782a4e2fd613481d5285b"
content-type: application/javascript
age: 105027
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ik.imagekit.io/leovegas/lv/games/e4raG1BNE/bldXYUedW8pZwb.jpg
54.230.111.107200 OK 23 kB URL HTTP/2 ik.imagekit.io/leovegas/lv/games/e4raG1BNE/bldXYUedW8pZwb.jpg
IP 54.230.111.107:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 278x278, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash b3a70338ca6f11c6c6a27460250f46d9
f0f9f558bd68f785430f56805bdd0549771671eb
ba918e29c68bd7f70438c22e9823757e37676cc44025b2fddc2d22f8988cc1eb
GET /leovegas/lv/games/e4raG1BNE/bldXYUedW8pZwb.jpg HTTP/1.1
Host: ik.imagekit.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 22886
x-request-id: d6be8204-077b-402a-a5c0-3993abe4997c
x-server: ImageKit.io
access-control-allow-origin: *
timing-allow-origin: *
cache-control: public, s-maxage=15552000, max-age=15552000, must-revalidate
etag: W/"5966-8Pn1WL1o94VDD1aAW90FSXcWces"
date: Mon, 30 Jan 2023 12:55:08 GMT
vary: Accept
x-cache: Hit from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 1tFJwUgt4oqaZUl2ppSuqXoBxIzklPUsUoxAOhdvyRvpXF5X6ONACQ==
age: 351009
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.vendors~app~6b6ee712.162662eb90f6dec64b1e.chunk.js?e=p
34.107.241.180200 OK 19 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.vendors~app~6b6ee712.162662eb90f6dec64b1e.chunk.js?e=p
IP 34.107.241.180:0
File type ASCII text, with very long lines (54811), with no line terminators
Hash 991d2b14040a4d33f5cbbe778d71d626
f0a9a6b943eca0c9f6c41b2223114293d8a197e4
4b690962c42f5b3537aea6fcf7dd311f6f32767e3f63a26b482322070a268030
GET /fulcrum/v4/master/dynamic/mobile.vendors~app~6b6ee712.162662eb90f6dec64b1e.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdua0Ftn2cagFFBvXfXZL1swu19uL1Ttukw5vWhjH3IwkQIicx4K7jeDP0Wp5JpW2lE5UZytvZpEYgrhNaYrCYh2ng
vary: X-Goog-Allowed-Resources,Origin
x-goog-generation: 1675328180089548
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 18815
content-encoding: gzip
x-goog-hash: crc32c=F3/tbA==, md5=mR0rFAQKTTP1y753jXHWJg==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 18815
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Thu, 02 Feb 2023 09:14:50 GMT
expires: Thu, 02 Mar 2023 09:14:50 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Thu, 02 Feb 2023 08:56:20 GMT
etag: "991d2b14040a4d33f5cbbe778d71d626"
content-type: application/javascript
age: 105027
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ik.imagekit.io/leovegas/lv/games/xG0lXm0wL/Bwg8ofxygMmwkn.jpg
54.230.111.107200 OK 28 kB URL HTTP/2 ik.imagekit.io/leovegas/lv/games/xG0lXm0wL/Bwg8ofxygMmwkn.jpg
IP 54.230.111.107:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 278x278, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 1e78db08b51bc5d4df8c34bb89ca2b74
926047fd5dcab1e1df64326c66bd42ffefe00199
65845a006378ed581930a86c5b387d4abeeff845c3b53618f067b4eaadfbdc97
GET /leovegas/lv/games/xG0lXm0wL/Bwg8ofxygMmwkn.jpg HTTP/1.1
Host: ik.imagekit.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 28228
x-request-id: 61557246-ccbc-4f6e-aa7c-77fded6dbce7
x-server: ImageKit.io
access-control-allow-origin: *
timing-allow-origin: *
cache-control: public, s-maxage=15552000, max-age=15552000, must-revalidate
etag: W/"6e44-kmBH/V3KseHfZDJsZr1C/+/gAZk"
date: Thu, 26 Jan 2023 13:31:58 GMT
vary: Accept
x-cache: Hit from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: B9mEN60lq_M-1Pa8-BrDd5M-8v7vp_LVL0f0Hu-BwqBlDHfKhGmDVw==
age: 694399
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.vendors~app~127b6cf7.0d0525409bcc0c2bfe6a.chunk.js?e=p
34.107.241.180200 OK 24 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.vendors~app~127b6cf7.0d0525409bcc0c2bfe6a.chunk.js?e=p
IP 34.107.241.180:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash 3d7d79b60c8d684beeccd53a1155b2a5
8d4c4f6293beda5320b994228abad1c0483a6858
37de6e7c9c56259bf347969f1afcd40277460af9ee60187addcc323cc5f920c2
GET /fulcrum/v4/master/dynamic/mobile.vendors~app~127b6cf7.0d0525409bcc0c2bfe6a.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdtZru4XZVlF88FZUb8rXZZwzad0sLK8ILCk7VlDzWz7RxWPTsXHJX-LOIxpHNj4ioCXdSfJJf1Fqr4h6xEUKepmxQ
vary: X-Goog-Allowed-Resources,Origin
x-goog-generation: 1675328179971354
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 23570
content-encoding: gzip
x-goog-hash: crc32c=h2O+Sg==, md5=PX15tgyNaEvuzNU6EVWypQ==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 23570
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Thu, 02 Feb 2023 09:14:50 GMT
expires: Thu, 02 Mar 2023 09:14:50 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Thu, 02 Feb 2023 08:56:20 GMT
etag: "3d7d79b60c8d684beeccd53a1155b2a5"
content-type: application/javascript
age: 105027
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ik.imagekit.io/leovegas/lv/games/DbDo4bXaZ/q5o5GtprB80qvj.jpg
54.230.111.107200 OK 35 kB URL HTTP/2 ik.imagekit.io/leovegas/lv/games/DbDo4bXaZ/q5o5GtprB80qvj.jpg
IP 54.230.111.107:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 278x278, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 6e8fac780df90a424020629a33f6b247
cafd53a668a8c4480309bdab48415e7b60ec255e
96f1f3052f77e29c4d292b4dbaeca1320c9d1057a10e2bc932b2a4c0ab5a5287
GET /leovegas/lv/games/DbDo4bXaZ/q5o5GtprB80qvj.jpg HTTP/1.1
Host: ik.imagekit.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 35116
x-request-id: 13487164-ae7c-4192-bf03-6870a5cc8f54
x-server: ImageKit.io
access-control-allow-origin: *
timing-allow-origin: *
cache-control: public, s-maxage=15552000, max-age=15552000, must-revalidate
etag: W/"892c-yv1TpmioxEgDCb2rSEFee2DsJV4"
date: Mon, 30 Jan 2023 16:45:25 GMT
vary: Accept
x-cache: Hit from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: AsSvda6TOjTVydCQ0oMJI6vkxD87X4grCCS3oFSpt_EGqEHWty08Lg==
age: 337192
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash bbeb609cbf32a8842bf96a124588e65e
40c0f548bcb714731f62df5a27cad21adef0463d
502c60a18a13b84598933731d182aafd4b83576bfc56451b36f9238c621a571d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 14:25:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 19fcc19786a47451672be06f8a5182b5
59768d316511fa60ea3143fc2dc8f22f4ea7e4a9
c3eeec95b997691f8e23ed8f68214458b9a2001374d82039bfe481067bd6c867
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3075
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 14:25:17 GMT
Last-Modified: Fri, 03 Feb 2023 13:34:02 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.vendors~app~b60d9e2a.77e906acd52b72523ea9.chunk.js?e=p
34.107.241.180200 OK 40 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.vendors~app~b60d9e2a.77e906acd52b72523ea9.chunk.js?e=p
IP 34.107.241.180:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash 7e11101ecbbe8af2b6fcbda133db99fe
82185521e7de2c32e05dffb1b3c6fdc382488c72
879d10487b2f2102e1419f1642b01472db7eb3db4efe09f0de8e661544672d66
GET /fulcrum/v4/master/dynamic/mobile.vendors~app~b60d9e2a.77e906acd52b72523ea9.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycduxcXlkmzar9SkPv3ee2k3flz2yGANeShaO6gcLP2HtE6rw1IHV0kVuHCku9ed_ss5Eb81USERkD_WQhuVUDfbyK9A43IZu
vary: X-Goog-Allowed-Resources,Origin
x-goog-generation: 1675328180178706
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 39927
content-encoding: gzip
x-goog-hash: crc32c=cCrbLg==, md5=fhEQHsu+ivK2/L2hM9uZ/g==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 39927
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Thu, 02 Feb 2023 09:14:50 GMT
expires: Thu, 02 Mar 2023 09:14:50 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Thu, 02 Feb 2023 08:56:20 GMT
etag: "7e11101ecbbe8af2b6fcbda133db99fe"
content-type: application/javascript
age: 105027
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.BonusChaserInGameCurtain~BonusChaserLobbyContainer~BonusChaserSwitcher~BottomBarScreen~CasinoCategor~5cd84f6f.05333c94070bd35e1307.chunk.css?e=p
34.107.241.180200 OK 1.9 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.BonusChaserInGameCurtain~BonusChaserLobbyContainer~BonusChaserSwitcher~BottomBarScreen~CasinoCategor~5cd84f6f.05333c94070bd35e1307.chunk.css?e=p
IP 34.107.241.180:0
File type ASCII text, with very long lines (7854)
Hash a2ae12a55f4b0779e648b0bb82ef554a
b0aa312826612b250d50cb96108592038b7c39f0
587f77ce304db6fd03c26391e41d40e5e3ef0695be34c7c672035d72959838ac
GET /fulcrum/v4/master/dynamic/mobile.BonusChaserInGameCurtain~BonusChaserLobbyContainer~BonusChaserSwitcher~BottomBarScreen~CasinoCategor~5cd84f6f.05333c94070bd35e1307.chunk.css?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdtBtnltxhTPqct9X4LZ08GO1R_xTlzJYheAyZMqaZQEolOE0zmFzdUFrLi0_0KrJvFULbqArVHjQTTbVxwWIT6M_3CXXzkt
vary: X-Goog-Allowed-Resources,Origin
x-goog-generation: 1675343754337478
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 1939
content-encoding: gzip
x-goog-hash: crc32c=/XprrA==, md5=oq4SpV9LB3nmSLC7gu9VSg==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 1939
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Thu, 02 Feb 2023 13:24:59 GMT
expires: Thu, 02 Mar 2023 13:24:59 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Thu, 02 Feb 2023 13:15:54 GMT
etag: "a2ae12a55f4b0779e648b0bb82ef554a"
content-type: text/css
age: 90018
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.app~6ae16c75.61357cf1b5631a272bdf.chunk.js?e=p
34.107.241.180200 OK 18 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.app~6ae16c75.61357cf1b5631a272bdf.chunk.js?e=p
IP 34.107.241.180:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash c84385a3573afbcca36df84313cb5b7c
3a1054d9b012430ae6d7965d4485b7a42f4e8deb
ec2ca1f27b3f010330016ac91cc5cb286ba74b705e638865c3abd404487e6743
GET /fulcrum/v4/master/dynamic/mobile.app~6ae16c75.61357cf1b5631a272bdf.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdtn5zjuCQyg7rYBNkU3y-BUO3jqVLdCeca4PwFL-oVaxus6MEhvubvsaTMeHuOmSO_0Jpd7f4yVTD3GOMQ3_13LsNzhHg6P
vary: X-Goog-Allowed-Resources,Origin
x-goog-generation: 1675328179623176
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 18243
content-encoding: gzip
x-goog-hash: crc32c=+TwEJA==, md5=yEOFo1c6+8yjbfhDE8tbfA==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 18243
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Thu, 02 Feb 2023 09:14:50 GMT
expires: Thu, 02 Mar 2023 09:14:50 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Thu, 02 Feb 2023 08:56:19 GMT
etag: "c84385a3573afbcca36df84313cb5b7c"
content-type: application/javascript
age: 105027
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.app~bead5879.f2910eb15a0443467919.chunk.js?e=p
34.107.241.180200 OK 5.3 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.app~bead5879.f2910eb15a0443467919.chunk.js?e=p
IP 34.107.241.180:0
File type ASCII text, with very long lines (15783)
Hash 7132dd0a03838820b9157e635f8ae36b
672f251bcd0beab7c010bc00e4883075d8bff476
6947f2cb74f15ac19f5885e309c31ffe851a24bc42c664dc178378c61da530e2
GET /fulcrum/v4/master/dynamic/mobile.app~bead5879.f2910eb15a0443467919.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdvK1pxOvBhEVfClp_MSyL1e-et6faHXLQvOFpPHTM3kgupUDAgjJ-b7DmgFdE18Df1KnAuJYIlzyorHESr6kqw4G962pZI4
vary: X-Goog-Allowed-Resources,Origin
x-goog-generation: 1675346487549865
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 5327
content-encoding: gzip
x-goog-hash: crc32c=fzbtfA==, md5=cTLdCgODiCC5FX5jX4rjaw==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 5327
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Thu, 02 Feb 2023 14:09:00 GMT
expires: Thu, 02 Mar 2023 14:09:00 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Thu, 02 Feb 2023 14:01:27 GMT
etag: "7132dd0a03838820b9157e635f8ae36b"
content-type: application/javascript
age: 87377
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.app~361546bd.9e9fc658b42b63778cd2.chunk.js?e=p
34.107.241.180200 OK 16 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.app~361546bd.9e9fc658b42b63778cd2.chunk.js?e=p
IP 34.107.241.180:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash bb233299fff2abc4abfb55f2e18dcf43
8c88dae5382af38d1173b4db1cef4d5ac6a4c698
519bcd3b8037567d6f47a12aab2cd08b4117b51356a40ce689e936c25810d48a
GET /fulcrum/v4/master/dynamic/mobile.app~361546bd.9e9fc658b42b63778cd2.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdtzuhVkVbwsW1QiqSu03AZ-Bf2wsxW6NP9jRO4op2lWeiJlyGu4mMIvIKAmuYUXI7BGKzUSzeaVCyr3PSOTjgDviA
vary: X-Goog-Allowed-Resources,Origin
x-goog-generation: 1675348740848123
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 15964
content-encoding: gzip
x-goog-hash: crc32c=AA32kA==, md5=uyMymf/yq8Sr+1Xy4Y3PQw==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 15964
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Thu, 02 Feb 2023 14:45:04 GMT
expires: Thu, 02 Mar 2023 14:45:04 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Thu, 02 Feb 2023 14:39:00 GMT
etag: "bb233299fff2abc4abfb55f2e18dcf43"
content-type: application/javascript
age: 85213
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.app~9675856e.566f1fb96598d7a7fb5d.chunk.js?e=p
34.107.241.180200 OK 31 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.app~9675856e.566f1fb96598d7a7fb5d.chunk.js?e=p
IP 34.107.241.180:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash 1f05a249aeba1c6a25def9fe90dd804d
1ac6e3ecb9065a5289d9d1c71b923d82e0e8074c
1e90529b4a693a213d14047ee59232a7d54338cf53325af79e385a91884c1a19
GET /fulcrum/v4/master/dynamic/mobile.app~9675856e.566f1fb96598d7a7fb5d.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdtiFLgqT9qcBrY48yOoBEW9eROQ54qGzwuj6BgiETs2VdzZaY8BJa8L19kvgzpEV2Hal1oaAGxOAkkyid0ll38cY-rlLgpW
vary: X-Goog-Allowed-Resources,Origin
x-goog-generation: 1675346487692757
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 30614
content-encoding: gzip
x-goog-hash: crc32c=hZYmkw==, md5=HwWiSa66HGol3vn+kN2ATQ==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 30614
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Thu, 02 Feb 2023 14:09:00 GMT
expires: Thu, 02 Mar 2023 14:09:00 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Thu, 02 Feb 2023 14:01:27 GMT
etag: "1f05a249aeba1c6a25def9fe90dd804d"
content-type: application/javascript
age: 87377
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.app~bfe0ed74.bb38c9744e90ac20e35f.chunk.js?e=p
34.107.241.180200 OK 23 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.app~bfe0ed74.bb38c9744e90ac20e35f.chunk.js?e=p
IP 34.107.241.180:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash 6597bbb00b8874bb766e271a4236c4b3
432a5e738f1e4a207621044425849b77d228532b
4dee43006229ac032aab15f545e2d79130957e41710f0fa276f0fd6258cf8c13
GET /fulcrum/v4/master/dynamic/mobile.app~bfe0ed74.bb38c9744e90ac20e35f.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdvkCPxmInkyzo1k75_zP7U9OjFTwSLfL8eFmq5PYwwLe0mWU-DKTGYoRBQBTZ-59A9Re5vBkNOLn65jGNJPJAQkTuJfFCaf
vary: X-Goog-Allowed-Resources,Origin
x-goog-generation: 1675349647321370
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 23208
content-encoding: gzip
x-goog-hash: crc32c=hK0X5g==, md5=ZZe7sAuIdLt2bicaQjbEsw==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 23208
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Thu, 02 Feb 2023 14:58:14 GMT
expires: Thu, 02 Mar 2023 14:58:14 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Thu, 02 Feb 2023 14:54:07 GMT
etag: "6597bbb00b8874bb766e271a4236c4b3"
content-type: application/javascript
age: 84423
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.app~1152e2e7.75b89c58b5cad5b0fc2b.chunk.js?e=p
34.107.241.180200 OK 22 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.app~1152e2e7.75b89c58b5cad5b0fc2b.chunk.js?e=p
IP 34.107.241.180:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash dd00d335f35aae85c9fcd2cf3f43d937
4e18bf6e0c74ad4407f268521ddf2b0d31c54057
56dd2d07b2e5be8e9a7cf011fb1e3bb1eb637cb2ca1794dda9dea1c79dfdf3e8
GET /fulcrum/v4/master/dynamic/mobile.app~1152e2e7.75b89c58b5cad5b0fc2b.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdtoMRS-qKdPASYruMJhROI44rA5n0SBKPqINM--t4xi1SbHyXiChhCjUK_us0PYUNY_aX4OE1k_9qOefgJdDpwkf5kPuy8M
vary: X-Goog-Allowed-Resources,Origin
x-goog-generation: 1675346487652309
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 21995
content-encoding: gzip
x-goog-hash: crc32c=ItEhNw==, md5=3QDTNfNaroXJ/NLPP0PZNw==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 21995
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Thu, 02 Feb 2023 14:09:00 GMT
expires: Thu, 02 Mar 2023 14:09:00 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Thu, 02 Feb 2023 14:01:27 GMT
etag: "dd00d335f35aae85c9fcd2cf3f43d937"
content-type: application/javascript
age: 87377
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.vendors~app~0efdf0b8.d4ea2b83b2cf2182cc78.chunk.js?e=p
34.107.241.180200 OK 30 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.vendors~app~0efdf0b8.d4ea2b83b2cf2182cc78.chunk.js?e=p
IP 34.107.241.180:0
File type Unicode text, UTF-8 text, with very long lines (46939)
Hash e66ef353146ffbdf49e235f9145a71d5
b4d3fc764e56faf0e9b8a833b57392dfb5efe9ca
7bef4889a0f419c0ca5de2bfe9e563739fe152758f1312edd0704605f9495dbf
GET /fulcrum/v4/master/dynamic/mobile.vendors~app~0efdf0b8.d4ea2b83b2cf2182cc78.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdstq423Jgt-vSPSBylC0RpWtWDt7VROEqW5RGQIHm-ZHDFJOKMadj93Hgf62NMWqJ7QdyP13sg9u91WxXlAmkvkL8SIOdMD
vary: X-Goog-Allowed-Resources,Origin
x-goog-generation: 1675328180001485
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 30348
content-encoding: gzip
x-goog-hash: crc32c=i2jjBw==, md5=5m7zUxRv+99J4jX5FFpx1Q==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 30348
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Thu, 02 Feb 2023 09:14:50 GMT
expires: Thu, 02 Mar 2023 09:14:50 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Thu, 02 Feb 2023 08:56:20 GMT
etag: "e66ef353146ffbdf49e235f9145a71d5"
content-type: application/javascript
age: 105027
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.DocumentTitle~344174d7.1ffa1d5eda6880559bda.chunk.js?e=p
34.107.241.180200 OK 1.0 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.DocumentTitle~344174d7.1ffa1d5eda6880559bda.chunk.js?e=p
IP 34.107.241.180:0
File type ASCII text, with very long lines (1674)
Hash 4b902624aea440e410476f67355e3db4
fbe6e914cd16dcd39038f374fb25f7ebbe880d08
b255257a2447500b39bba5b0c4867e3032ecf65a62750bb747ca0d1def742513
GET /fulcrum/v4/master/dynamic/mobile.DocumentTitle~344174d7.1ffa1d5eda6880559bda.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdsdDTJV9Ate44XNivlzl5QdMWk62bNWjTEGInObeuLX5m8Zqz2wzjgSUwQlOFLkGgZzeu73Uzo2kU93tS-cqTYCMfRZUgTT
vary: X-Goog-Allowed-Resources,Origin
x-goog-generation: 1675328175656035
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 1045
content-encoding: gzip
x-goog-hash: crc32c=xKiw5A==, md5=S5AmJK6kQOQQR29nNV49tA==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 1045
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Thu, 02 Feb 2023 09:14:52 GMT
expires: Thu, 02 Mar 2023 09:14:52 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Thu, 02 Feb 2023 08:56:15 GMT
etag: "4b902624aea440e410476f67355e3db4"
content-type: application/javascript
age: 105025
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.app~748942c6.b53734c1bca4cfe0f1df.chunk.js?e=p
34.107.241.180200 OK 33 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.app~748942c6.b53734c1bca4cfe0f1df.chunk.js?e=p
IP 34.107.241.180:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash c454ddf2e6046c01ef6c979bee666bff
15f805e6b99b2796aaef1c2791bc68cdb116616c
2f51c31349daf69bfebca77950b0561905dd054e441c8f200a892329b47eb469
GET /fulcrum/v4/master/dynamic/mobile.app~748942c6.b53734c1bca4cfe0f1df.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdvnsfnmlnnQ5aCxt2oqfU8RPq5gao14FXaOlRwQfmr2bX7XuKXS-D0cR21ITvlTeAANtrDkWhFPPgkSFpmDWebpqZO4dw6x
vary: X-Goog-Allowed-Resources,Origin
x-goog-generation: 1675346487777510
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 33027
content-encoding: gzip
x-goog-hash: crc32c=0v3AYg==, md5=xFTd8uYEbAHvbJeb7mZr/w==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 33027
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Thu, 02 Feb 2023 14:09:00 GMT
expires: Thu, 02 Mar 2023 14:09:00 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Thu, 02 Feb 2023 14:01:27 GMT
etag: "c454ddf2e6046c01ef6c979bee666bff"
content-type: application/javascript
age: 87377
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.vendors~app~e4dfd1bd.efabe06dcca0b93134c8.chunk.js?e=p
34.107.241.180200 OK 40 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.vendors~app~e4dfd1bd.efabe06dcca0b93134c8.chunk.js?e=p
IP 34.107.241.180:0
File type ASCII text, with very long lines (40178)
Hash 07ef144974b50f57a4b67dc73aec1ea5
d82a6952908ba7558c925afc79250f19b11e2560
ff9bb69a5b4e41a57f7c1c74ae1810af3d48956030605ece2729ffd5357410cd
GET /fulcrum/v4/master/dynamic/mobile.vendors~app~e4dfd1bd.efabe06dcca0b93134c8.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdvMvQRpQhHb9IR8LDPViq0BmjouLkozpBN18PfpPRloS-O_-0UVk-rvT8qZUO9HT9GnzErTcfYe38yJF3f8gu4erw
vary: X-Goog-Allowed-Resources,Origin
x-goog-generation: 1675328180253656
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 40018
content-encoding: gzip
x-goog-hash: crc32c=GkLgKQ==, md5=B+8USXS1D1ektn3HOuwepQ==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 40018
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Thu, 02 Feb 2023 09:14:50 GMT
expires: Thu, 02 Mar 2023 09:14:50 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Thu, 02 Feb 2023 08:56:20 GMT
etag: "07ef144974b50f57a4b67dc73aec1ea5"
content-type: application/javascript
age: 105027
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.vendors~app~c7b8ce09.a7ba145b7ffb82742c2f.chunk.js?e=p
34.107.241.180200 OK 38 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.vendors~app~c7b8ce09.a7ba145b7ffb82742c2f.chunk.js?e=p
IP 34.107.241.180:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash 442a97213d095b355bed29d77dc563c2
bef6a1aa8501dda048fcc6125268d5428fb0fa96
5756601734ebfa591299bdfdd4ef4987e56d4985d5be673fedf221c86a78dd12
GET /fulcrum/v4/master/dynamic/mobile.vendors~app~c7b8ce09.a7ba145b7ffb82742c2f.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdu_xMxgw7XwWYGqc1Rdjh6oNDCf-nP0iIIAnbnMSoxVvdb5otcOzAscGV9Q8BHFAspAmtfUPPdVCk1nf1r7tsxcwQ
vary: X-Goog-Allowed-Resources,Origin
x-goog-generation: 1675328180170244
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 37623
content-encoding: gzip
x-goog-hash: crc32c=qG4coA==, md5=RCqXIT0JWzVb7SnXfcVjwg==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 37623
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Thu, 02 Feb 2023 09:14:50 GMT
expires: Thu, 02 Mar 2023 09:14:50 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Thu, 02 Feb 2023 08:56:20 GMT
etag: "442a97213d095b355bed29d77dc563c2"
content-type: application/javascript
age: 105027
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.BottomBarScreen~CasinoScreen~bfe0ed74.4757b9e4f5fb2c4487d8.chunk.css?e=p
34.107.241.180200 OK 4.2 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.BottomBarScreen~CasinoScreen~bfe0ed74.4757b9e4f5fb2c4487d8.chunk.css?e=p
IP 34.107.241.180:0
File type ASCII text, with very long lines (5257)
Hash a81c6a4191583e36881d30f56744dd02
ab7080df82e72821c10736da07897d0fa2b21cf2
575e5f86acc26412efef40f1e9fde5a467f19dbdd1cebd1004fd15e7ac6dbe31
GET /fulcrum/v4/master/dynamic/mobile.BottomBarScreen~CasinoScreen~bfe0ed74.4757b9e4f5fb2c4487d8.chunk.css?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdtmrrVbwURYe0IuCXTTOS0HSL91uexdIFwpgtiAL94hj7sCaBsgoeeTANJlOxE9prMvsYNJ3pqzYQ8bDpxcNjPC0w
vary: X-Goog-Allowed-Resources,Origin
x-goog-generation: 1675181240668062
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 4231
content-encoding: gzip
x-goog-hash: crc32c=88fhGg==, md5=qBxqQZFYPjaIHTD1Z0TdAg==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 4231
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Thu, 02 Feb 2023 13:07:18 GMT
expires: Thu, 02 Mar 2023 13:07:18 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Tue, 31 Jan 2023 16:07:20 GMT
etag: "a81c6a4191583e36881d30f56744dd02"
content-type: text/css
age: 91079
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.app~29a429d8.be7a25b5bebf4a6f484f.chunk.js?e=p
34.107.241.180200 OK 11 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.app~29a429d8.be7a25b5bebf4a6f484f.chunk.js?e=p
IP 34.107.241.180:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash 53c3d58d1f7efad8d8e0b8f930466f34
4e03b27ab097aefc1a27531fadadbc51578449b0
abf91635a4623c0c1dcc414d29ca182fa790aee2c19506e238513f34b6275ff8
GET /fulcrum/v4/master/dynamic/mobile.app~29a429d8.be7a25b5bebf4a6f484f.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdsxLzh1kSlQh5iD_Wk0Xm2QFF6eB5VNaxjPhwuich6c0mXCQPboU8UMMqOJ-jlQzbfljP8u1ziWlX5YgoTD8vTkQw
vary: X-Goog-Allowed-Resources,Origin
x-goog-generation: 1675328179360681
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 11446
content-encoding: gzip
x-goog-hash: crc32c=vBY9Cg==, md5=U8PVjR9++tjY4Lj5MEZvNA==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 11446
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Thu, 02 Feb 2023 09:14:50 GMT
expires: Thu, 02 Mar 2023 09:14:50 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Thu, 02 Feb 2023 08:56:19 GMT
etag: "53c3d58d1f7efad8d8e0b8f930466f34"
content-type: application/javascript
age: 105027
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.Experimentation~0035cfbb.8db5f4fe97c70a481ab2.chunk.js?e=p
34.107.241.180200 OK 1.4 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.Experimentation~0035cfbb.8db5f4fe97c70a481ab2.chunk.js?e=p
IP 34.107.241.180:0
File type ASCII text, with very long lines (2891)
Hash 8f0a8969aa34476131cb5e219e278ef3
fa84df48cac26285f96a811243978c270a8be2fe
55a43530ade66178614b0c2e723e75f21d8605042632f09eeda278fffaecc2f0
GET /fulcrum/v4/master/dynamic/mobile.Experimentation~0035cfbb.8db5f4fe97c70a481ab2.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdu4beIJNmpNIEul32IB_rSBrrmkiJcKFmY_8h8WDVfpdjKypCOv9WSocJagncR-rhTHCTb4HvgUnZCfyn4IHXlS5HgB5HVx
vary: X-Goog-Allowed-Resources,Origin
x-goog-generation: 1675328175707954
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 1389
content-encoding: gzip
x-goog-hash: crc32c=xulZVg==, md5=jwqJaao0R2Exy14hnieO8w==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 1389
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Thu, 02 Feb 2023 09:14:52 GMT
expires: Thu, 02 Mar 2023 09:14:52 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Thu, 02 Feb 2023 08:56:15 GMT
etag: "8f0a8969aa34476131cb5e219e278ef3"
content-type: application/javascript
age: 105025
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.CasinoScreen~493df0b3.e15031f0e01316d9f8ee.chunk.css?e=p
34.107.241.180200 OK 3.6 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.CasinoScreen~493df0b3.e15031f0e01316d9f8ee.chunk.css?e=p
IP 34.107.241.180:0
File type ASCII text, with very long lines (7159)
Hash 99d8d80a8e7281abf3857c31acf5b5f3
e3c598289429fcba372b3ad682934fa713d5d199
e595daf5a07b24e4db290400c934ac311927edc9712f5fcd6830b021503c5d40
GET /fulcrum/v4/master/dynamic/mobile.CasinoScreen~493df0b3.e15031f0e01316d9f8ee.chunk.css?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdtYu2ofHos9sgdZYZlgLHjbtPksCONBvsCnjlDO8mvtjYCA0fpYH5IxA5XjgTHEhUYIHH3oTs6J00vAAhMkM12wOOBS5ycu
vary: X-Goog-Allowed-Resources,Origin
x-goog-generation: 1675167093470823
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 3571
content-encoding: gzip
x-goog-hash: crc32c=cxXqQw==, md5=mdjYCo5ygavzhXwxrPW18w==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 3571
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Tue, 31 Jan 2023 12:22:18 GMT
expires: Tue, 28 Feb 2023 12:22:18 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Tue, 31 Jan 2023 12:11:33 GMT
etag: "99d8d80a8e7281abf3857c31acf5b5f3"
content-type: text/css
age: 266579
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.ResponsibleGaming~4fd0ee19.3b98c102cd668b49803d.chunk.js?e=p
34.107.241.180200 OK 2.2 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.ResponsibleGaming~4fd0ee19.3b98c102cd668b49803d.chunk.js?e=p
IP 34.107.241.180:0
File type ASCII text, with very long lines (6180)
Hash 545f206167a51f83e9d81b68b2f61efa
0fd51f11ce7b7b4f15477f9b7b2e58cfc65383a7
9c869703bad7f9ecdd9885edd27f52218b247c19bb1c32a5359585e877ca1bb2
GET /fulcrum/v4/master/dynamic/mobile.ResponsibleGaming~4fd0ee19.3b98c102cd668b49803d.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdutgcUCuurrwrefG2TgpjgpGznTQlSJllva5w08fm7xNHZQj8WANYc3MuxRkPdvb0Wty8lh9YXifEU8MTpQolGtknezve9n
vary: X-Goog-Allowed-Resources,Origin
x-goog-generation: 1675328177616686
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 2213
content-encoding: gzip
x-goog-hash: crc32c=KT33Pw==, md5=VF8gYWelH4Pp2BtosvYe+g==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 2213
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Thu, 02 Feb 2023 09:14:52 GMT
expires: Thu, 02 Mar 2023 09:14:52 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Thu, 02 Feb 2023 08:56:17 GMT
etag: "545f206167a51f83e9d81b68b2f61efa"
content-type: application/javascript
age: 105025
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.Snackbar~9765a08b.9a5c54ec61062e2834ff.chunk.js?e=p
34.107.241.180200 OK 3.0 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.Snackbar~9765a08b.9a5c54ec61062e2834ff.chunk.js?e=p
IP 34.107.241.180:0
File type ASCII text, with very long lines (8081)
Hash 493e28757d589b29d3b72a04e075f312
430ff9d5fb801569accf7a888a1ca9015d00489d
e4421aef9e49760a7eea9877c73f8ee6078ca6724c133d3b9732b9da82ed1695
GET /fulcrum/v4/master/dynamic/mobile.Snackbar~9765a08b.9a5c54ec61062e2834ff.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdvgYpsksyym6gY3dCFFagQG0snDV9t5Vyttnc86RncoLQ-n9X2Jl6WhrV8hQ3CfADc2RSwmHqOEKbRWLJZNFMrq1Xc2Miot
vary: X-Goog-Allowed-Resources,Origin
x-goog-generation: 1675328178349833
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 2976
content-encoding: gzip
x-goog-hash: crc32c=UDpjuQ==, md5=ST4odX1YmynTtyoE4HXzEg==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 2976
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Thu, 02 Feb 2023 09:14:52 GMT
expires: Thu, 02 Mar 2023 09:14:52 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Thu, 02 Feb 2023 08:56:18 GMT
etag: "493e28757d589b29d3b72a04e075f312"
content-type: application/javascript
age: 105025
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.Adform~e8e8aaba.732b6adb9ba9c968310e.chunk.js?e=p
34.107.241.180200 OK 2.7 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.Adform~e8e8aaba.732b6adb9ba9c968310e.chunk.js?e=p
IP 34.107.241.180:0
File type ASCII text, with very long lines (7023)
Hash 2bf4450cfc48e32b76f19becdba06fe6
505910ff4f3f30c3a37a4cda4b74860a9351fc05
fdc59f5aab0dcee3fb6bb3b6281cb679816e78a11f6591d24e0b1a954b285955
GET /fulcrum/v4/master/dynamic/mobile.Adform~e8e8aaba.732b6adb9ba9c968310e.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycduppY4TNGFBTzEcxzGKKamjm8ax8nuX0pSIw8hYoNuKDiW5x4u9tmccuJwSTrtbUqhMpWgAFw4Egrg8g4_8ZBVAAfyb3kSK
vary: X-Goog-Allowed-Resources,Origin
x-goog-generation: 1675328173993949
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 2716
content-encoding: gzip
x-goog-hash: crc32c=DkH48A==, md5=K/RFDPxI4yt28Zvs26Bv5g==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 2716
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Thu, 02 Feb 2023 09:14:52 GMT
expires: Thu, 02 Mar 2023 09:14:52 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Thu, 02 Feb 2023 08:56:14 GMT
etag: "2bf4450cfc48e32b76f19becdba06fe6"
content-type: application/javascript
age: 105025
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.Snackbar~9765a08b.bbb624b4c6a00e9ac79e.chunk.css?e=p
34.107.241.180200 OK 465 B URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.Snackbar~9765a08b.bbb624b4c6a00e9ac79e.chunk.css?e=p
IP 34.107.241.180:0
File type ASCII text, with very long lines (631)
Hash 99c084dd92a699e13251da924e9724c9
e005575addfea39ef22d6949f9c3dc92fb859389
20fa74d03ed880ed3615b72143b64547ed3ab72665e256e84b07157556903ec0
GET /fulcrum/v4/master/dynamic/mobile.Snackbar~9765a08b.bbb624b4c6a00e9ac79e.chunk.css?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdvgax8Wi1AymnFQCRlewBIXcO_RPXyTkQnX5v04PXBZ6z-OeZy4iLNTfRLOcHKEO-Cx25eCrF0HIjVTFTfprJWjAMlrQBop
vary: X-Goog-Allowed-Resources,Origin
x-goog-generation: 1647331609164951
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 465
content-encoding: gzip
x-goog-hash: crc32c=wV6JEQ==, md5=mcCE3ZKmmeEyUdqSTpckyQ==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 465
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Wed, 01 Feb 2023 21:43:18 GMT
expires: Wed, 01 Mar 2023 21:43:18 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Tue, 15 Mar 2022 08:06:49 GMT
etag: "99c084dd92a699e13251da924e9724c9"
content-type: text/css
age: 146519
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.BottomBarScreen~CasinoCategory~CasinoScreen~index~bfe0ed74.ae87e6b7930c3880a32e.chunk.css?e=p
34.107.241.180200 OK 4.8 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.BottomBarScreen~CasinoCategory~CasinoScreen~index~bfe0ed74.ae87e6b7930c3880a32e.chunk.css?e=p
IP 34.107.241.180:0
File type ASCII text, with very long lines (6205)
Hash 838f9a441df96c4b61de7f17c23a4b1b
eda642acd06ed42b86d8f052b1b8b42c3bbf0b35
6023d44fd58600b6582d34445ccbb2f378304b27d4c835e51439efbe6118c3fa
GET /fulcrum/v4/master/dynamic/mobile.BottomBarScreen~CasinoCategory~CasinoScreen~index~bfe0ed74.ae87e6b7930c3880a32e.chunk.css?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdvcleF6N-duMQjRmcYPDynzt5nXWRpzIXIsYb5y7c8F8mrRQc36yUdZnr9Z3mPT-xLcFrIsUlA80pk8IpdIsxpdPLYUdFvM
vary: X-Goog-Allowed-Resources,Origin
x-goog-generation: 1672743415974342
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 4806
content-encoding: gzip
x-goog-hash: crc32c=1eZ78g==, md5=g4+aRB35bEth3n8XwjpLGw==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 4806
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Sun, 29 Jan 2023 14:16:46 GMT
expires: Sun, 26 Feb 2023 14:16:46 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Tue, 03 Jan 2023 10:56:56 GMT
etag: "838f9a441df96c4b61de7f17c23a4b1b"
content-type: text/css
age: 432511
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.CasinoCategory~CasinoScreen~bfe0ed74.32f7ef14756b3c933f66.chunk.css?e=p
34.107.241.180200 OK 1.6 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.CasinoCategory~CasinoScreen~bfe0ed74.32f7ef14756b3c933f66.chunk.css?e=p
IP 34.107.241.180:0
File type ASCII text, with very long lines (2296)
Hash 904387c1183091eb71506755a0f61648
962998499c0b1144c919b0179fe9aeb6e7913772
c20668abf97b37d7a59c171ca17048e1c94b760133bebdea09aabf52e20f3d17
GET /fulcrum/v4/master/dynamic/mobile.CasinoCategory~CasinoScreen~bfe0ed74.32f7ef14756b3c933f66.chunk.css?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycduTsBCunP6doQzsSrthw5zG0W7Cvl3Zyv_k9F8rOYnTDt8bxATmwBLiy7BdZFrUbMbqkuOXkgKTz8AbPQrdR6cSK6-RV6qQ
vary: X-Goog-Allowed-Resources,Origin
x-goog-generation: 1675349647808413
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 1592
content-encoding: gzip
x-goog-hash: crc32c=hk9aPA==, md5=kEOHwRgwketxUGdVoPYWSA==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 1592
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Thu, 02 Feb 2023 14:58:14 GMT
expires: Thu, 02 Mar 2023 14:58:14 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Thu, 02 Feb 2023 14:54:07 GMT
etag: "904387c1183091eb71506755a0f61648"
content-type: text/css
age: 84423
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.BottomBarScreen~bfe0ed74.2b24c86e70212735cbca.chunk.css?e=p
34.107.241.180200 OK 3.9 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.BottomBarScreen~bfe0ed74.2b24c86e70212735cbca.chunk.css?e=p
IP 34.107.241.180:0
File type ASCII text, with very long lines (3276)
Hash 2c59688df30d68955e99cbbec9aaa09e
3e6b905631027faa74cb05b37f0b67f7d865a420
b16e7772fcbc38983179aed4fee0507a4cdf36cd5850698b92d46304fc4a7c87
GET /fulcrum/v4/master/dynamic/mobile.BottomBarScreen~bfe0ed74.2b24c86e70212735cbca.chunk.css?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdvPR-p_NLU5Gh5lLSGBzbJfJ6j00iLH6yIoH0HGjZcn2r-z1qv4E-fbSj9BrwsqlYVz7JKhLrrgVLXdcUktS7o81g
vary: X-Goog-Allowed-Resources,Origin
x-goog-generation: 1675167093429499
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 3877
content-encoding: gzip
x-goog-hash: crc32c=BU+4Ww==, md5=LFlojfMNaJVemcu+yaqgng==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 3877
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Tue, 31 Jan 2023 12:22:04 GMT
expires: Tue, 28 Feb 2023 12:22:04 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Tue, 31 Jan 2023 12:11:33 GMT
etag: "2c59688df30d68955e99cbbec9aaa09e"
content-type: text/css
age: 266593
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.vendors~app~112c8377.fefc9d505ba77a59ab90.chunk.js?e=p
34.107.241.180200 OK 45 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.vendors~app~112c8377.fefc9d505ba77a59ab90.chunk.js?e=p
IP 34.107.241.180:0
File type Unicode text, UTF-8 text, with very long lines (34517)
Hash b2b00374ffeb1db10774b23dce472540
63e3b108c3419daf6b9c4981faabfb61a4978f9b
5d9ade74c0d20456e4658632184c48c7d7b3e5782aee51fc25678b5305161479
GET /fulcrum/v4/master/dynamic/mobile.vendors~app~112c8377.fefc9d505ba77a59ab90.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdvJhuJqNqhjGp3C3jbfzngm3hf6_NWv7tc9C-aIe8Zm4ltU3codZ1Fqvl4Wv0AIZsB4vtlvCAKSFnmHHOXj4cWdsA
vary: X-Goog-Allowed-Resources,Origin
x-goog-generation: 1675328180049006
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 44753
content-encoding: gzip
x-goog-hash: crc32c=R3Uoaw==, md5=srADdP/rHbEHdLI9zkclQA==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 44753
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Thu, 02 Feb 2023 09:14:50 GMT
expires: Thu, 02 Mar 2023 09:14:50 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Thu, 02 Feb 2023 08:56:20 GMT
etag: "b2b00374ffeb1db10774b23dce472540"
content-type: application/javascript
age: 105027
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.vendors~AutoWithdrawalModal~BankID~BankingVerification~BottomBarScreen~CasinoCategory~CasinoSearch~D~de24fdcb.e9cf84d35eb09462b84d.chunk.js?e=p
34.107.241.180200 OK 13 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.vendors~AutoWithdrawalModal~BankID~BankingVerification~BottomBarScreen~CasinoCategory~CasinoSearch~D~de24fdcb.e9cf84d35eb09462b84d.chunk.js?e=p
IP 34.107.241.180:0
File type ASCII text, with very long lines (46539), with no line terminators
Hash 21bef447a4e27a6438bf7fce14f958af
7e9db1a07c926711e16f1ad89c8d04d80be4eb48
8e873b04b86b6ad2ada0497eb10cbcf4eb52e68efe3ed19160247e1c45c5022a
GET /fulcrum/v4/master/dynamic/mobile.vendors~AutoWithdrawalModal~BankID~BankingVerification~BottomBarScreen~CasinoCategory~CasinoSearch~D~de24fdcb.e9cf84d35eb09462b84d.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdtA57mk4APluGNfLwC_39dEUUiK1HT_f72DjmLSKFN_yzX-GlZeDPTF0EBPn7V5KLtLcYhimqQuVOCidnabXRqplt6E2Rde
vary: X-Goog-Allowed-Resources,Origin
x-goog-generation: 1675328179661485
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 12838
content-encoding: gzip
x-goog-hash: crc32c=rauuEg==, md5=Ib70R6TiemQ4v3/OFPlYrw==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 12838
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Thu, 02 Feb 2023 09:14:52 GMT
expires: Thu, 02 Mar 2023 09:14:52 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Thu, 02 Feb 2023 08:56:19 GMT
etag: "21bef447a4e27a6438bf7fce14f958af"
content-type: application/javascript
age: 105025
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
54.230.245.39200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.39:0
Hash 8b4e527f608c8cc39109cd731f64fb34
a41935e451a71a75cb8893d0558dc5c41f52b1cc
084cb44395c8aace2eb2f733c0b6fd97d6190179e3054d26a8c5da86a65b92e1
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Fri, 03 Feb 2023 14:25:17 GMT
Last-Modified: Fri, 03 Feb 2023 13:43:08 GMT
Server: ECS (nyb/1D23)
X-Cache: Miss from cloudfront
Via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 2DMdLevKWdf_653OXfmWf_LyrRvqK-fFpUjRje88TcyspfyU9HAN1w==
Age: 2529
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.vendors~BankID~BankingVerification~DEVerification~Deposit~FlowChecker~GameScreen~KYCCheck~LoginScree~046c31a5.3a6f788d367a9b8d7a20.chunk.js?e=p
34.107.241.180200 OK 42 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.vendors~BankID~BankingVerification~DEVerification~Deposit~FlowChecker~GameScreen~KYCCheck~LoginScree~046c31a5.3a6f788d367a9b8d7a20.chunk.js?e=p
IP 34.107.241.180:0
File type Unicode text, UTF-8 text, with very long lines (48260)
Hash fe02e2c2245242f3f8d636d8390454df
f5171a6b5d9ae985303c8940ce864725f9fccaab
00e8362ae25c23be44fd20232e8a1e419e4c30a28946744d41ab643523ab0d30
GET /fulcrum/v4/master/dynamic/mobile.vendors~BankID~BankingVerification~DEVerification~Deposit~FlowChecker~GameScreen~KYCCheck~LoginScree~046c31a5.3a6f788d367a9b8d7a20.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdtQsXct8D3LtqbkcVZaNPHnkkjfk24zKfSbMBcXwn3JeeHuJ-CbyQaE1etU-mJs0VoOL6wbyqx_IBCymxFZfCMD6rBL874u
vary: X-Goog-Allowed-Resources,Origin
x-goog-generation: 1675328179805484
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 41812
content-encoding: gzip
x-goog-hash: crc32c=34cdsQ==, md5=/gLiwiRSQvP41jbYOQRU3w==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 41812
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Thu, 02 Feb 2023 09:14:52 GMT
expires: Thu, 02 Mar 2023 09:14:52 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Thu, 02 Feb 2023 08:56:19 GMT
etag: "fe02e2c2245242f3f8d636d8390454df"
content-type: application/javascript
age: 105025
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.BankID~BankingVerification~DEVerification~Deposit~FlowChecker~GameScreen~KYCCheck~LoginScreen~LostPa~952074d0.f4caeaeb95313452cebe.chunk.js?e=p
34.107.241.180200 OK 17 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.BankID~BankingVerification~DEVerification~Deposit~FlowChecker~GameScreen~KYCCheck~LoginScreen~LostPa~952074d0.f4caeaeb95313452cebe.chunk.js?e=p
IP 34.107.241.180:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash ea4c39af472b2e4f9c2604de9165b87b
e6c1d9707ad06d883f3f70082584919d02503faf
d7da3445d91d0918fab7dd3c70b145f5320c2b9b5f53625f8bea0564d609fe02
GET /fulcrum/v4/master/dynamic/mobile.BankID~BankingVerification~DEVerification~Deposit~FlowChecker~GameScreen~KYCCheck~LoginScreen~LostPa~952074d0.f4caeaeb95313452cebe.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdvtMqcPBqtb6Gx-EuUFanQFJIE2gi-p5L0j223eMYwvUkE4aNhjH0xY8nFT-Ugj2o0FItJE0mCAhbRIH1dMQx96ljQdnvvX
vary: X-Goog-Allowed-Resources,Origin
x-goog-generation: 1675328174339672
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 17332
content-encoding: gzip
x-goog-hash: crc32c=AP/88g==, md5=6kw5r0crLk+cJgTekWW4ew==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 17332
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Thu, 02 Feb 2023 09:14:52 GMT
expires: Thu, 02 Mar 2023 09:14:52 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Thu, 02 Feb 2023 08:56:14 GMT
etag: "ea4c39af472b2e4f9c2604de9165b87b"
content-type: application/javascript
age: 105025
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.FlowChecker~493df0b3.2a66ee60dd6219bafc56.chunk.css?e=p
34.107.241.180200 OK 1.7 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.FlowChecker~493df0b3.2a66ee60dd6219bafc56.chunk.css?e=p
IP 34.107.241.180:0
File type ASCII text, with very long lines (1298)
Hash 7543b46c3dd3ee59e5532d971f2b5d5f
5d396f145a7e9b9b47fd7802b6d01613ae711f8f
14f434e87de14ce624414e3378b544ae3e4d6fc8ba68eae3623c73dd1c8e2bd6
GET /fulcrum/v4/master/dynamic/mobile.FlowChecker~493df0b3.2a66ee60dd6219bafc56.chunk.css?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdvCPY0XmeFWkgPBuO509dDyiZvG2I1m-C2EfKgN5h4qZuIS-ufFVkOCREUsNb95ixo8M3xK6y9HdzzKbLCEyAcwrmVFoPjP
vary: X-Goog-Allowed-Resources,Origin
x-goog-generation: 1672760598499902
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 1738
content-encoding: gzip
x-goog-hash: crc32c=xhs6+w==, md5=dUO0bD3T7lnlUy2XHytdXw==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 1738
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Wed, 01 Feb 2023 21:43:18 GMT
expires: Wed, 01 Mar 2023 21:43:18 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Tue, 03 Jan 2023 15:43:18 GMT
etag: "7543b46c3dd3ee59e5532d971f2b5d5f"
content-type: text/css
age: 146519
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.FlowChecker~493df0b3.b2b786f153df9940cb68.chunk.js?e=p
34.107.241.180200 OK 12 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.FlowChecker~493df0b3.b2b786f153df9940cb68.chunk.js?e=p
IP 34.107.241.180:0
File type ASCII text, with very long lines (52536)
Hash 93504c3653e95e54548bd4970fd42f7d
5ad481f6fe8b95fc0faa030db1f7c2f17e036637
9f9f7a57e1fbcd363f3e332c1302240a3103b6bda0516b28a415f6c91aa893bb
GET /fulcrum/v4/master/dynamic/mobile.FlowChecker~493df0b3.b2b786f153df9940cb68.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdvXfaESr-cJX540I-7kf9NTfKSkT2flZT-y7gJCqwfcUKNnmhKHS_acrRhwOyas5chRogUusTxcAIyE_eJMeWFiv4misVR7
vary: X-Goog-Allowed-Resources,Origin
x-goog-generation: 1675328175872878
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 12475
content-encoding: gzip
x-goog-hash: crc32c=aOncTg==, md5=k1BMNlPpXlRUi9SXD9QvfQ==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 12475
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Thu, 02 Feb 2023 09:14:52 GMT
expires: Thu, 02 Mar 2023 09:14:52 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Thu, 02 Feb 2023 08:56:15 GMT
etag: "93504c3653e95e54548bd4970fd42f7d"
content-type: application/javascript
age: 105025
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.ROWBanner~bfe0ed74.0446bb98668232c5d3be.chunk.css?e=p
34.107.241.180200 OK 855 B URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.ROWBanner~bfe0ed74.0446bb98668232c5d3be.chunk.css?e=p
IP 34.107.241.180:0
File type ASCII text, with very long lines (2056)
Hash 4a16c5f59bea1f27ee21dbcff3c5a4c0
1a5ccf49d4297fe14b0586c5302a0c7666dfd89b
270812d18857fefd0d504acb0e07180ddd0bb6be0760ff6276551565bdde8da2
GET /fulcrum/v4/master/dynamic/mobile.ROWBanner~bfe0ed74.0446bb98668232c5d3be.chunk.css?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdvyy7tJjFS_4BJlvAHLLDeWk7k6DcZbAI6iMo7i3LKxUAECsVfzKQkZCKRmMgP6vwwPO61HNk9yaArCP2FMZIMgjznLae95
vary: X-Goog-Allowed-Resources,Origin
x-goog-generation: 1675167093709299
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 855
content-encoding: gzip
x-goog-hash: crc32c=GXWvqw==, md5=ShbF9ZvqHyfuIdvP88WkwA==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 855
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Tue, 31 Jan 2023 12:22:04 GMT
expires: Tue, 28 Feb 2023 12:22:04 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Tue, 31 Jan 2023 12:11:33 GMT
etag: "4a16c5f59bea1f27ee21dbcff3c5a4c0"
content-type: text/css
age: 266593
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.ROWBanner~bfe0ed74.8ae9ed685fbd9d01deba.chunk.js?e=p
34.107.241.180200 OK 1.5 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.ROWBanner~bfe0ed74.8ae9ed685fbd9d01deba.chunk.js?e=p
IP 34.107.241.180:0
File type ASCII text, with very long lines (3281)
Hash 99cdb8580e19e018e71adc541c74cffa
543448eefb71d086b7db5a9bfd23602cee7b8b4e
0c1605d15d38701d05f8be56a51fbbae1c7c192b55803091ae04b838b3204bc6
GET /fulcrum/v4/master/dynamic/mobile.ROWBanner~bfe0ed74.8ae9ed685fbd9d01deba.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdth-y30UJmQOoZhw1Xmt-jnrc2cT_aww1POrNGRmE9a9ZTBf69XofNNV8qjnMMY_S6hSPCR8Of5yREfXNiqp6ci964POkIB
vary: X-Goog-Allowed-Resources,Origin
x-goog-generation: 1675328177596085
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 1501
content-encoding: gzip
x-goog-hash: crc32c=CEvY6A==, md5=mc24WA4Z4BjnGtxUHHTP+g==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 1501
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Thu, 02 Feb 2023 09:14:52 GMT
expires: Thu, 02 Mar 2023 09:14:52 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Thu, 02 Feb 2023 08:56:17 GMT
etag: "99cdb8580e19e018e71adc541c74cffa"
content-type: application/javascript
age: 105025
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.vendors~BottomBarScreen~9b1fde68.b50b9355d8dc752bc62d.chunk.js?e=p
34.107.241.180200 OK 7.5 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.vendors~BottomBarScreen~9b1fde68.b50b9355d8dc752bc62d.chunk.js?e=p
IP 34.107.241.180:0
File type ASCII text, with very long lines (16961)
Hash 1340e43638ed7452931324bd03c3c73d
a5f59685ef37c888851455ea5ccf24a054442dbd
6d94fe002fde68fcb90cbc6e8276f4a26e3264da31e8b27e3d3f97e0bcfafb60
GET /fulcrum/v4/master/dynamic/mobile.vendors~BottomBarScreen~9b1fde68.b50b9355d8dc752bc62d.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdsGnSFivRDgUTVdS5PNGUyTnOQ-_PZ3P8ZheKg5lXRkLKGOwR5DzNV1_B4LIEILodje8SCVCd-KOWwCXNjVgnrzZg
vary: X-Goog-Allowed-Resources,Origin
x-goog-generation: 1675328179732614
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 7463
content-encoding: gzip
x-goog-hash: crc32c=2m6guA==, md5=E0DkNjjtdFKTEyS9A8PHPQ==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 7463
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Thu, 02 Feb 2023 09:14:14 GMT
expires: Thu, 02 Mar 2023 09:14:14 GMT
cache-control: public, max-age=2419200,no-transform
age: 105063
last-modified: Thu, 02 Feb 2023 08:56:19 GMT
etag: "1340e43638ed7452931324bd03c3c73d"
content-type: application/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.BottomBarScreen~CasinoScreen~bfe0ed74.85c03cd3cbde05fb76b2.chunk.js?e=p
34.107.241.180200 OK 16 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.BottomBarScreen~CasinoScreen~bfe0ed74.85c03cd3cbde05fb76b2.chunk.js?e=p
IP 34.107.241.180:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash f5fb702d44966d4b39e43dec6ee77573
7ed3b614678888949166b1b5862c88016609c017
c965d15330cde45e3a13500eb098350c69f3f1c278e4057183e4a86bd97456d0
GET /fulcrum/v4/master/dynamic/mobile.BottomBarScreen~CasinoScreen~bfe0ed74.85c03cd3cbde05fb76b2.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdupHz9DaliXh9MrN7dof7hbmi5dUJ0az1JdpsoSzW06PyxIMC_7thmybx5vdpHuv5_r4n7fiSLnX2-aTsJYMNUtfA
vary: X-Goog-Allowed-Resources,Origin
x-goog-generation: 1675328175023410
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 16085
content-encoding: gzip
x-goog-hash: crc32c=YN2lGQ==, md5=9ftwLUSWbUs55D3sbud1cw==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 16085
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Thu, 02 Feb 2023 09:14:15 GMT
expires: Thu, 02 Mar 2023 09:14:15 GMT
cache-control: public, max-age=2419200,no-transform
age: 105062
last-modified: Thu, 02 Feb 2023 08:56:15 GMT
etag: "f5fb702d44966d4b39e43dec6ee77573"
content-type: application/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.BottomBarScreen~bfe0ed74.e8b0b2c7ba07abf73567.chunk.js?e=p
34.107.241.180200 OK 27 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.BottomBarScreen~bfe0ed74.e8b0b2c7ba07abf73567.chunk.js?e=p
IP 34.107.241.180:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash 4ca3fa9bcb86851a99fa3148879c1220
f5477e4d7f6b74035735203f9dc873919afb7db6
bfc173832f6b818fbf06e92847dbddee4b125a46fbfc4fa4a16197d0c426d6e0
GET /fulcrum/v4/master/dynamic/mobile.BottomBarScreen~bfe0ed74.e8b0b2c7ba07abf73567.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdssIPtg-GPIXwmxSn6RinDWQbSNBNyBqdG6Zp72c52iLSh7k42vUyfJ7QSvwLu-rRQfzL4LsKXBYwZrLBNvM7aayUrpqwKZ
vary: X-Goog-Allowed-Resources,Origin
x-goog-generation: 1675346486841302
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 26688
content-encoding: gzip
x-goog-hash: crc32c=hi0iVA==, md5=TKP6m8uGhRqZ+jFIh5wSIA==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 26688
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Thu, 02 Feb 2023 14:09:00 GMT
expires: Thu, 02 Mar 2023 14:09:00 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Thu, 02 Feb 2023 14:01:26 GMT
etag: "4ca3fa9bcb86851a99fa3148879c1220"
content-type: application/javascript
age: 87377
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.AuthorizationBar~faa51968.96d7b9660bac924e9e28.chunk.css?e=p
34.107.241.180200 OK 825 B URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.AuthorizationBar~faa51968.96d7b9660bac924e9e28.chunk.css?e=p
IP 34.107.241.180:0
File type ASCII text, with very long lines (862)
Hash fd587e74839b1c5b1633eb0dc71cdbb3
4112fb16194b143a25e6944fa47c324db0efc7c0
05181e87f506d22c56e19cb8bacf26d7c5bea740cc1b5024a098a311d2a7f9b4
GET /fulcrum/v4/master/dynamic/mobile.AuthorizationBar~faa51968.96d7b9660bac924e9e28.chunk.css?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdvh9ww8OzLLGlJE7sE-BwGd5QvjkLsuIjKzK_yFXycMyq6EmpjbZ1H9dbWV2cQ6GYzZmFSnnqatGnExTFshBnHbJg
vary: X-Goog-Allowed-Resources,Origin
x-goog-generation: 1669118795773812
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 825
content-encoding: gzip
x-goog-hash: crc32c=4EUfsA==, md5=/Vh+dIObHFsWM+sNxxzbsw==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 825
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Sun, 29 Jan 2023 14:15:30 GMT
expires: Sun, 26 Feb 2023 14:15:30 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Tue, 22 Nov 2022 12:06:35 GMT
etag: "fd587e74839b1c5b1633eb0dc71cdbb3"
content-type: text/css
age: 432587
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.vendors~CasinoScreen~MyOffers~Payment~WelcomeOffer~b3c4a2ff.e17863f26bea8f1c020f.chunk.js?e=p
34.107.241.180200 OK 6.7 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.vendors~CasinoScreen~MyOffers~Payment~WelcomeOffer~b3c4a2ff.e17863f26bea8f1c020f.chunk.js?e=p
IP 34.107.241.180:0
File type ASCII text, with very long lines (29702), with no line terminators
Hash 850743e3b3a2edc9622d81d6544d6803
97df0777a93948da2ee630b33cdd15fdfebafd37
f093e10ab04a5b16d2f674a0f3b910f372bb9b88df09d284b2b11536087906d3
GET /fulcrum/v4/master/dynamic/mobile.vendors~CasinoScreen~MyOffers~Payment~WelcomeOffer~b3c4a2ff.e17863f26bea8f1c020f.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdsER8XvkrS83fZn2S7P3CqIkyrRWy5i2sm_Oub2WyfiX17QKtAo5Qyqhbjt3kbDl1Ca2o2_1IH0m7hD4U3LxfgVLw
vary: X-Goog-Allowed-Resources,Origin
x-goog-generation: 1675328179817291
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 6715
content-encoding: gzip
x-goog-hash: crc32c=CHwJ+w==, md5=hQdD47Oi7cliLYHWVE1oAw==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 6715
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Thu, 02 Feb 2023 09:14:15 GMT
expires: Thu, 02 Mar 2023 09:14:15 GMT
cache-control: public, max-age=2419200,no-transform
age: 105062
last-modified: Thu, 02 Feb 2023 08:56:19 GMT
etag: "850743e3b3a2edc9622d81d6544d6803"
content-type: application/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash c14d3cf8ade0150a711f094be32ac474
11e7fb5487d364c5392e1594e09f5b49831043ea
2a98ce39894b7d9befdba3916467bc95962376d0b308103e0a1eea36c0bc2302
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2A98CE39894B7D9BEFDBA3916467BC95962376D0B308103E0A1EEA36C0BC2302"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12489
Expires: Fri, 03 Feb 2023 17:53:27 GMT
Date: Fri, 03 Feb 2023 14:25:18 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash c14d3cf8ade0150a711f094be32ac474
11e7fb5487d364c5392e1594e09f5b49831043ea
2a98ce39894b7d9befdba3916467bc95962376d0b308103e0a1eea36c0bc2302
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2A98CE39894B7D9BEFDBA3916467BC95962376D0B308103E0A1EEA36C0BC2302"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12489
Expires: Fri, 03 Feb 2023 17:53:27 GMT
Date: Fri, 03 Feb 2023 14:25:18 GMT
Connection: keep-alive
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.vendors~CasinoCategory~CasinoScreen~9b1fde68.cf4a279f0ca8fa7ad6ea.chunk.js?e=p
34.107.241.180200 OK 6.4 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.vendors~CasinoCategory~CasinoScreen~9b1fde68.cf4a279f0ca8fa7ad6ea.chunk.js?e=p
IP 34.107.241.180:0
File type ASCII text, with very long lines (12295)
Hash 3f61b8810335946e268b042a8f3f45ef
85367cd476d50821235317e6d1d60230bc558fa4
c71fa8c1b620a177f06684ebf9ef53f3531a240bf6bcec587c68d67586257884
GET /fulcrum/v4/master/dynamic/mobile.vendors~CasinoCategory~CasinoScreen~9b1fde68.cf4a279f0ca8fa7ad6ea.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdviwswi6fzTtRoKi4ije7Gb7D64bawOPOPZ0P5ASl2J18YEXSDcNQux34MMxq_oV5nIi3YIThSxe24dpPEEhG1gyQ
vary: X-Goog-Allowed-Resources,Origin
x-goog-generation: 1675328179736797
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 6398
content-encoding: gzip
x-goog-hash: crc32c=ILnT5A==, md5=P2G4gQM1lG4miwQqjz9F7w==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 6398
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Thu, 02 Feb 2023 09:14:15 GMT
expires: Thu, 02 Mar 2023 09:14:15 GMT
cache-control: public, max-age=2419200,no-transform
age: 105062
last-modified: Thu, 02 Feb 2023 08:56:19 GMT
etag: "3f61b8810335946e268b042a8f3f45ef"
content-type: application/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash c14d3cf8ade0150a711f094be32ac474
11e7fb5487d364c5392e1594e09f5b49831043ea
2a98ce39894b7d9befdba3916467bc95962376d0b308103e0a1eea36c0bc2302
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2A98CE39894B7D9BEFDBA3916467BC95962376D0B308103E0A1EEA36C0BC2302"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12489
Expires: Fri, 03 Feb 2023 17:53:27 GMT
Date: Fri, 03 Feb 2023 14:25:18 GMT
Connection: keep-alive
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.AndroidAppScreen~BankID~BlogPostScreen~BlogPostsScreen~BonusInfoScreen~BonusTermsScreen~CampaignList~c348699f.6b9ef37a3fb35a118ff5.chunk.js?e=p
34.107.241.180200 OK 17 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.AndroidAppScreen~BankID~BlogPostScreen~BlogPostsScreen~BonusInfoScreen~BonusTermsScreen~CampaignList~c348699f.6b9ef37a3fb35a118ff5.chunk.js?e=p
IP 34.107.241.180:0
File type Unicode text, UTF-8 text, with very long lines (65521), with no line terminators
Hash 859584405b165a0c593ff10b27fb5e19
8c50ebb7fd68ef86c281611d43facbdabc2b52a8
6055f9ba588b7810ee0154fedfc8f799c5ae2d17ad0a0ba2e2f5d47cdc809e85
GET /fulcrum/v4/master/dynamic/mobile.AndroidAppScreen~BankID~BlogPostScreen~BlogPostsScreen~BonusInfoScreen~BonusTermsScreen~CampaignList~c348699f.6b9ef37a3fb35a118ff5.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdsqcxvOBQbWUHWMVZXd_vbV4b_d0Zj0I2c6cVfSyHdUplFvSgZqUGi_F3K7z0XC2Ad0YPuiH85QM3G5C0ZhUv5_4RQRh2d4
vary: X-Goog-Allowed-Resources,Origin
x-goog-generation: 1675346486635429
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 17162
content-encoding: gzip
x-goog-hash: crc32c=ykOnJg==, md5=hZWEQFsWWgxZP/ELJ/teGQ==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 17162
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Thu, 02 Feb 2023 14:09:00 GMT
expires: Thu, 02 Mar 2023 14:09:00 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Thu, 02 Feb 2023 14:01:26 GMT
etag: "859584405b165a0c593ff10b27fb5e19"
content-type: application/javascript
age: 87377
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.AndroidAppScreen~BankID~BonusInfoScreen~BonusTermsScreen~CampaignScreen~CasinoScreen~CommonContentSc~2f699297.a5aa39abf59295f9ed10.chunk.js?e=p
34.107.241.180200 OK 6.1 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.AndroidAppScreen~BankID~BonusInfoScreen~BonusTermsScreen~CampaignScreen~CasinoScreen~CommonContentSc~2f699297.a5aa39abf59295f9ed10.chunk.js?e=p
IP 34.107.241.180:0
File type ASCII text, with very long lines (20694)
Hash 6c8ac9a77f25ceb91779167c926952c3
a5c8300bffdeb0e178eb9caa0398aa8d2ad2f535
25b1f82bd1676823ab0a1797f32c1556b06b5e6bc7c411bf22ab7ecefc6f2fba
GET /fulcrum/v4/master/dynamic/mobile.AndroidAppScreen~BankID~BonusInfoScreen~BonusTermsScreen~CampaignScreen~CasinoScreen~CommonContentSc~2f699297.a5aa39abf59295f9ed10.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdtkJbhWeD5tY7x0eAcwsD5vxW87bB1qIxOEXQTFn142PqM_uzNkj18EMG9QUNt9bf7ptdxcL_qL8_pH4yvjL7OeAupxkbeW
vary: X-Goog-Allowed-Resources,Origin
x-goog-generation: 1675328174198389
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 6131
content-encoding: gzip
x-goog-hash: crc32c=qaStvw==, md5=bIrJp38lzrkXeRZ8kmlSww==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 6131
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Thu, 02 Feb 2023 09:14:52 GMT
expires: Thu, 02 Mar 2023 09:14:52 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Thu, 02 Feb 2023 08:56:14 GMT
etag: "6c8ac9a77f25ceb91779167c926952c3"
content-type: application/javascript
age: 105025
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49d52576-44b1-4baf-92c0-88f267415a19.jpeg
34.120.237.76200 OK 5.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49d52576-44b1-4baf-92c0-88f267415a19.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d4041f3b5316bc84c9e6d88ddbc85b89
4978a4a20836b6f5d863d331bcedad782b7b4ac6
549b62d2c4ec965b8bec62010c0ce338dfea7992ee83eb7af61ff1a30d21f8b5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49d52576-44b1-4baf-92c0-88f267415a19.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5641
x-amzn-requestid: b53b54b1-3b00-47cf-a25c-e93910c2ebfb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fuvzpHsXoAMFsuw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dc2ce3-0c4fc8154763febb44460ac2;Sampled=0
x-amzn-remapped-date: Thu, 02 Feb 2023 21:36:36 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: x4-BZdG4JGRKCSdKynnuweZfo9l0XZtDB-MiANy7C2Yz1URYMHP4sQ==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Thu, 02 Feb 2023 21:57:49 GMT
age: 59249
etag: "4978a4a20836b6f5d863d331bcedad782b7b4ac6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.CasinoCategory~CasinoScreen~bfe0ed74.017fa8d298e9d8e863f5.chunk.js?e=p
34.107.241.180200 OK 6.8 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.CasinoCategory~CasinoScreen~bfe0ed74.017fa8d298e9d8e863f5.chunk.js?e=p
IP 34.107.241.180:0
File type Unicode text, UTF-8 text, with very long lines (25242)
Hash e9f20d50728bd23df98c0f27c4d5d55b
17bc3681045f9a27b0d6af3e95596baf82826750
d5bda3a7bcf2be3902532c1f39bfa519b0921ee41c46dd47b2267aed9880116c
GET /fulcrum/v4/master/dynamic/mobile.CasinoCategory~CasinoScreen~bfe0ed74.017fa8d298e9d8e863f5.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdv_BW46paBBM0HCrlW_9F6e2nzXPyRYlneGTq-NbX-cD97bwnE7sFzwwlGlpZDD9gkBImcmBADYZMSLj_a-BjP9oj368Wlr
vary: X-Goog-Allowed-Resources,Origin
x-goog-generation: 1675328175089639
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 6787
content-encoding: gzip
x-goog-hash: crc32c=RGXJ3w==, md5=6fINUHKL0j35jA8nxNXVWw==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 6787
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Thu, 02 Feb 2023 09:14:15 GMT
expires: Thu, 02 Mar 2023 09:14:15 GMT
cache-control: public, max-age=2419200,no-transform
age: 105062
last-modified: Thu, 02 Feb 2023 08:56:15 GMT
etag: "e9f20d50728bd23df98c0f27c4d5d55b"
content-type: application/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.CasinoScreen~493df0b3.6be3e13e2c652dc10482.chunk.js?e=p
34.107.241.180200 OK 27 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.CasinoScreen~493df0b3.6be3e13e2c652dc10482.chunk.js?e=p
IP 34.107.241.180:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash 705455639c8e10bdbc6336fae14719bf
365a001c97822fbb4574aebc9b1f3ac758ec340e
b36868bd5da56f3239254c3ee0eb3d53f10d24f90bd2de86edc2eb9a702fd9b5
GET /fulcrum/v4/master/dynamic/mobile.CasinoScreen~493df0b3.6be3e13e2c652dc10482.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdu9OJvvhiV6cU965ksIVeHm1LaFFum7HwXXbaSVHB-rAAscrvIG-zfH0eOmhxmLcu4MvFLfYSFOch7aXM8msPCYXPDjnlQj
vary: X-Goog-Allowed-Resources,Origin
x-goog-generation: 1675328175205062
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 27358
content-encoding: gzip
x-goog-hash: crc32c=8mO1rw==, md5=cFRVY5yOEL28Yzb64UcZvw==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 27358
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Thu, 02 Feb 2023 09:14:15 GMT
expires: Thu, 02 Mar 2023 09:14:15 GMT
cache-control: public, max-age=2419200,no-transform
age: 105062
last-modified: Thu, 02 Feb 2023 08:56:15 GMT
etag: "705455639c8e10bdbc6336fae14719bf"
content-type: application/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.vendors~app~1d14d743.970bb9f2fd2ca616ce3d.chunk.js?e=p
34.107.241.180200 OK 503 B URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.vendors~app~1d14d743.970bb9f2fd2ca616ce3d.chunk.js?e=p
IP 34.107.241.180:0
Hash c14d3cf8ade0150a711f094be32ac474
11e7fb5487d364c5392e1594e09f5b49831043ea
2a98ce39894b7d9befdba3916467bc95962376d0b308103e0a1eea36c0bc2302
GET /fulcrum/v4/master/dynamic/mobile.vendors~app~1d14d743.970bb9f2fd2ca616ce3d.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdsxh9FS0XCcZUxItExJWvmMWlt1jeKApNpczrLz8SqSzakNFBdcQ8S5Z_xfM4-hmZrcI_rKBEthdtJuF2tSUXe0rA
vary: X-Goog-Allowed-Resources,Origin
x-goog-generation: 1675328179942071
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 4799
content-encoding: gzip
x-goog-hash: crc32c=nSZfng==, md5=EcDmP3ThTl4lBoudqDcjlg==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 4799
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Thu, 02 Feb 2023 09:14:50 GMT
expires: Thu, 02 Mar 2023 09:14:50 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Thu, 02 Feb 2023 08:56:19 GMT
etag: "11c0e63f74e14e5e25068b9da8372396"
content-type: application/javascript
age: 105027
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.DepositLogos~ef512817.616a126988b8ace38c74.chunk.js?e=p
34.107.241.180200 OK 638 B URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.DepositLogos~ef512817.616a126988b8ace38c74.chunk.js?e=p
IP 34.107.241.180:0
File type ASCII text, with very long lines (911)
Hash d3b74fb650427effc38056e939d35a45
5eee3c90ec9a5c91a1a770132c090219ada418ab
9e1d7787620d77d660c1a844a5fc31cb10fc6cbd090eded33164a2903e3b3df9
GET /fulcrum/v4/master/dynamic/mobile.DepositLogos~ef512817.616a126988b8ace38c74.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdswX_5PLGRWwI-z2JHJiigpPh9Fb8W_alrcLuXN-i2C4VZ9phItesLwImMaFwBzdmBHMzVJDW_EiIzdywYnltStnsoVUcBQ
vary: X-Goog-Allowed-Resources,Origin
x-goog-generation: 1675328175319635
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 638
content-encoding: gzip
x-goog-hash: crc32c=AMDTyw==, md5=07dPtlBCfv/DgFbpOdNaRQ==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 638
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Thu, 02 Feb 2023 09:14:58 GMT
expires: Thu, 02 Mar 2023 09:14:58 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Thu, 02 Feb 2023 08:56:15 GMT
etag: "d3b74fb650427effc38056e939d35a45"
content-type: application/javascript
age: 105019
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash c14d3cf8ade0150a711f094be32ac474
11e7fb5487d364c5392e1594e09f5b49831043ea
2a98ce39894b7d9befdba3916467bc95962376d0b308103e0a1eea36c0bc2302
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2A98CE39894B7D9BEFDBA3916467BC95962376D0B308103E0A1EEA36C0BC2302"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12489
Expires: Fri, 03 Feb 2023 17:53:27 GMT
Date: Fri, 03 Feb 2023 14:25:18 GMT
Connection: keep-alive
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.Icons-OPL~6f2a7a41.b969c50257cef78d4600.chunk.js?e=p
34.107.241.180200 OK 9.5 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.Icons-OPL~6f2a7a41.b969c50257cef78d4600.chunk.js?e=p
IP 34.107.241.180:0
File type ASCII text, with very long lines (30076)
Hash 52e9c4a5ae6ef39e46bd6844c53befb8
64b1a5a7b23d9e95422162979c9b4a7bfb77fbf6
0c5ff9aaf416cfeaa79780d38d753d8483410f9b714e8a0be1d0474c316d9b11
GET /fulcrum/v4/master/dynamic/mobile.Icons-OPL~6f2a7a41.b969c50257cef78d4600.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycduQOsYCjmt2rAtcBlrp9DMfAHupY8o2Q05g9KQ7Mqc9274tKOJWO9dCdJTNqhXXMX17c6QJ0eVSm8s1hInriSj9EQ
vary: X-Goog-Allowed-Resources,Origin
x-goog-generation: 1675328176289838
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 9509
content-encoding: gzip
x-goog-hash: crc32c=BQmOtw==, md5=UunEpa5u855GvWhExTvvuA==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 9509
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Thu, 02 Feb 2023 09:14:53 GMT
expires: Thu, 02 Mar 2023 09:14:53 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Thu, 02 Feb 2023 08:56:16 GMT
etag: "52e9c4a5ae6ef39e46bd6844c53befb8"
content-type: application/javascript
age: 105024
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.Icons-Categories~4c719359.62e5ddd37866fa6636f8.chunk.js?e=p
34.107.241.180200 OK 30 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.Icons-Categories~4c719359.62e5ddd37866fa6636f8.chunk.js?e=p
IP 34.107.241.180:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash 9c89e38d6ba6e0f46642095b5e79aacb
7df5547d1402f3f0e3ecca7a44fc0f9c6c8bcfb4
dd83a640141e8662386de132a55a297488dcb8582435df7c654cf055d7bd144c
GET /fulcrum/v4/master/dynamic/mobile.Icons-Categories~4c719359.62e5ddd37866fa6636f8.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdtRcp4AxGjNqFX0mz45niL925ARSXOw6_4ciido7cchz7n_hMFWLPEIch6WqzVKDWetbXuevUdN8m6q8bFw19c6kbAfGH5q
vary: X-Goog-Allowed-Resources,Origin
x-goog-generation: 1675328176237402
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 29837
content-encoding: gzip
x-goog-hash: crc32c=4zjL0Q==, md5=nInjjWum4PRmQglbXnmqyw==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 29837
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Thu, 02 Feb 2023 09:14:15 GMT
expires: Thu, 02 Mar 2023 09:14:15 GMT
cache-control: public, max-age=2419200,no-transform
age: 105062
last-modified: Thu, 02 Feb 2023 08:56:16 GMT
etag: "9c89e38d6ba6e0f46642095b5e79aacb"
content-type: application/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffda40dcf-1e5b-4e49-bd65-084935f52db9.jpeg
34.120.237.76200 OK 6.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffda40dcf-1e5b-4e49-bd65-084935f52db9.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e706db8a6107758a148463e916f2532d
4b0b8cb5ced3e3e67b0320a3bbaecd2176e21b81
673f18036a53f8ff297ef6a63fd094e7c41d90f3960f0e687a741cc7dd3f6172
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffda40dcf-1e5b-4e49-bd65-084935f52db9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6791
x-amzn-requestid: 665115ea-728e-4a55-aaf8-b09db3fa67a2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ffl96FIzIAMFYGg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d61d25-0abbd7262ca10b7a7d2bf9eb;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 07:15:49 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: nPgaBSGyLJQnN0ofVRFniW2LqzgKVWchSKYSjYCmuPtpL9Ner81ARQ==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Thu, 02 Feb 2023 22:14:03 GMT
age: 58275
etag: "4b0b8cb5ced3e3e67b0320a3bbaecd2176e21b81"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc5300360-6063-4d18-8dd2-28dbcf47d371.jpeg
34.120.237.76200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc5300360-6063-4d18-8dd2-28dbcf47d371.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9ab97f766ee1ed6ebbb2b3889a9157b4
f87f165404dec4d65531e6e25146cb77601f3616
f3d0f76f956371b1733a526f10a8253fc3396a459d7af59380d8e8db7dee8ec2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc5300360-6063-4d18-8dd2-28dbcf47d371.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 14071
x-amzn-requestid: 40cb363f-2c4d-4361-9fe1-10e4c8b2fe29
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fiTo4Ek2oAMFs6g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d73305-6cb63d3c49f9f84e639467f6;Sampled=0
x-amzn-remapped-date: Mon, 30 Jan 2023 03:01:25 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: b7r7phj8i49RMSuWufxF1L34K9udWa0mJ4dY12izM9ofwAuCFBGEZQ==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 02 Feb 2023 21:48:01 GMT
age: 59837
etag: "f87f165404dec4d65531e6e25146cb77601f3616"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F64144d1c-f524-496f-8b52-ba63714dbfc5.jpeg
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F64144d1c-f524-496f-8b52-ba63714dbfc5.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e366b32074025aaf60bbae8bdb08d330
a52c2883bad98fa20333aa639a5dd3a5bf544c8e
9d661c26effaec9efee16833f6459d6ecbe4f77b822c9c46e2a6433bda816e5c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F64144d1c-f524-496f-8b52-ba63714dbfc5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11565
x-amzn-requestid: 87a84ffd-1176-4656-aac4-e98f38ec2cd9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fboIrFGboAMFyyQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d48704-162ed8114aa1809204500548;Sampled=0
x-amzn-remapped-date: Sat, 28 Jan 2023 02:23:00 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: w0Zm5V0TQxsQ7917U3fdhS_n7qKE143PuhI2JmNCDM_Pf0yPLyW6yA==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 32c16f33c8f5601364fa8229b0d74dc2.cloudfront.net (CloudFront), 1.1 google
date: Thu, 02 Feb 2023 21:48:01 GMT
age: 59837
etag: "a52c2883bad98fa20333aa639a5dd3a5bf544c8e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.app~493df0b3.e3a8cf8c790c63be4011.chunk.css?e=p
34.107.241.180200 OK 9.9 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.app~493df0b3.e3a8cf8c790c63be4011.chunk.css?e=p
IP 34.107.241.180:0
File type ASCII text, with very long lines (17796)
Hash 5eb7226dc2575783709eccb6a4519e02
79d8d5cc2c5099ee653de2e4b62285a912a3c6cb
ba158e88bf0853c4c2e548c26fda44e0b347e97457aec514bb5f671ecab15706
GET /fulcrum/v4/master/dynamic/mobile.app~493df0b3.e3a8cf8c790c63be4011.chunk.css?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycduY3aLSaeeAvs-kPVQxwpo505XP9SilP7OaXv_FXO43_jz8wXe8Or1X4Z1lxki_WZn9zH-pe800yKf7D3O2fc7iNQ
vary: X-Goog-Allowed-Resources,Origin
x-goog-generation: 1675157189530005
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 9916
content-encoding: gzip
x-goog-hash: crc32c=x1FyTA==, md5=XrcibcJXV4Nwnsy2pFGeAg==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 9916
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Tue, 31 Jan 2023 09:49:58 GMT
expires: Tue, 28 Feb 2023 09:49:58 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Tue, 31 Jan 2023 09:26:29 GMT
etag: "5eb7226dc2575783709eccb6a4519e02"
content-type: text/css
age: 275719
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b4ea648-021a-44ef-a083-3ea03f73dca3.jpeg
34.120.237.76200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b4ea648-021a-44ef-a083-3ea03f73dca3.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3490571dd2de0a747987b9a0e18cccc8
18e9f8f160d3515f1cb31fc7538ac762a6cab344
1c071d7f3b288b29254500f94f19c0db0633c6aa90812f2e92c4f64992f5221a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b4ea648-021a-44ef-a083-3ea03f73dca3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10796
x-amzn-requestid: 5c9b1a83-c99a-44b9-9a90-5edd7ef1e225
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fi0XKG93oAMFtsA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d76760-01bf754d6c725c3275c02a1b;Sampled=0
x-amzn-remapped-date: Mon, 30 Jan 2023 06:44:48 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: XTZJAn0LMAfFtaQ2bN8z58cCsUT5GzxDMnHVB_iw9E_NskHQ-BgbRQ==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Thu, 02 Feb 2023 22:19:26 GMT
age: 84437
etag: "18e9f8f160d3515f1cb31fc7538ac762a6cab344"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.app~1152e2e7.1fa9ef0afcd69d2f27de.chunk.css?e=p
34.107.241.180200 OK 1.8 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.app~1152e2e7.1fa9ef0afcd69d2f27de.chunk.css?e=p
IP 34.107.241.180:0
File type ASCII text, with very long lines (2696)
Hash 4d3f63e8cbd0ec629f2aff72093c300a
5347f5d957958a872b734b54ec907a8747ca342d
7d17d82ffb30ae85b4a6ab33f5ee0e3d0955e0e5ad071b6ddcce470f2d2570d5
GET /fulcrum/v4/master/dynamic/mobile.app~1152e2e7.1fa9ef0afcd69d2f27de.chunk.css?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycdv1x3imOO9mtDZ-x9z6Lbs5Q0r-UdNG5o9UImaKmY4ph9PJIdI1s9OcqTwDqh29DI0lzDK-uz37_D37uJhxdntXLoGP9okb
vary: X-Goog-Allowed-Resources,Origin
x-goog-generation: 1671454859052504
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 1812
content-encoding: gzip
x-goog-hash: crc32c=kwTQpg==, md5=TT9j6MvQ7GKfKv9yCTwwCg==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 1812
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Sun, 29 Jan 2023 14:15:28 GMT
expires: Sun, 26 Feb 2023 14:15:28 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Mon, 19 Dec 2022 13:00:59 GMT
etag: "4d3f63e8cbd0ec629f2aff72093c300a"
content-type: text/css
age: 432589
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.app~748942c6.ae767656cbb1ec0a4ab9.chunk.css?e=p
34.107.241.180200 OK 1.7 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.app~748942c6.ae767656cbb1ec0a4ab9.chunk.css?e=p
IP 34.107.241.180:0
File type ASCII text, with very long lines (1772)
Hash 598b253bf510e57911fbd5fd86511a47
4209a7bdfdee81b9eeae3b1414146c97e294c847
7ebcb687ea0b9907a0ae2d2443e1b6d39de4f4b9f0a23b70c06163874247d2ab
GET /fulcrum/v4/master/dynamic/mobile.app~748942c6.ae767656cbb1ec0a4ab9.chunk.css?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycdtX7yhfOIFlERE9SfwNs0h-hJUBIf8OF8HKZwUNRKz29RGet9Y5F2LDW7_N7HINUlxpqmAzYzHMZvDpMlymtUrxzq3uH1LY
vary: X-Goog-Allowed-Resources,Origin
x-goog-generation: 1675328181413771
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 1663
content-encoding: gzip
x-goog-hash: crc32c=Q0P26g==, md5=WYslO/UQ5XkR+9X9hlEaRw==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 1663
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Thu, 02 Feb 2023 09:14:50 GMT
expires: Thu, 02 Mar 2023 09:14:50 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Thu, 02 Feb 2023 08:56:21 GMT
etag: "598b253bf510e57911fbd5fd86511a47"
content-type: text/css
age: 105027
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.app~521067a8.89f65db9ae423b9197b1.chunk.css?e=p
34.107.241.180200 OK 283 B URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.app~521067a8.89f65db9ae423b9197b1.chunk.css?e=p
IP 34.107.241.180:0
Hash 327122b5334eeb33cd79c886dd49beb3
e58dfacbb2db54d6652889e2dad8ce19f2d2fe2f
9df65c43857dea61bc65232b1e3fd20a82475f77563d3999ac0a9b9ed6d90f38
GET /fulcrum/v4/master/dynamic/mobile.app~521067a8.89f65db9ae423b9197b1.chunk.css?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycdvwZtvZW475Pi0HLfrIjdKde01yrowgczfnCzcTvDDIN4pLGCrRnxBqM-nGI_MSHrYBkA4rnLMi8huS5_FHJpKomw
vary: X-Goog-Allowed-Resources,Origin
x-goog-generation: 1663591116440358
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 283
content-encoding: gzip
x-goog-hash: crc32c=uA/axQ==, md5=MnEitTNO6zPNeciG3Um+sw==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 283
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Mon, 30 Jan 2023 00:22:26 GMT
expires: Mon, 27 Feb 2023 00:22:26 GMT
cache-control: public, max-age=2419200,no-transform
age: 396171
last-modified: Mon, 19 Sep 2022 12:38:36 GMT
etag: "327122b5334eeb33cd79c886dd49beb3"
content-type: text/css
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.app~9675856e.dd984e891c8a0e00c45b.chunk.css?e=p
34.107.241.180200 OK 2.1 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.app~9675856e.dd984e891c8a0e00c45b.chunk.css?e=p
IP 34.107.241.180:0
File type ASCII text, with very long lines (2605)
Hash 8bf6d4e9191247f34f49910ff4bce36c
083cc5e954c1cadc64847b769796b4f783194a8d
a26135400ddfc9dcb572f5cee188ef7cd5faf61bbb851a25b74738bc12cc0477
GET /fulcrum/v4/master/dynamic/mobile.app~9675856e.dd984e891c8a0e00c45b.chunk.css?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycdt0iIJit5R5CLY-LPiIzCmzQbGj9Cghruf2E-90D-r01UkuaGuB-9aY_7ZgkLLe_5M4V3err1VvC4zKEs8UfpFHuFPHSztr
vary: X-Goog-Allowed-Resources,Origin
x-goog-generation: 1670506834487828
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 2102
content-encoding: gzip
x-goog-hash: crc32c=xSTuIQ==, md5=i/bU6RkSR/NPSZEP9LzjbA==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 2102
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Sun, 29 Jan 2023 14:15:28 GMT
expires: Sun, 26 Feb 2023 14:15:28 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Thu, 08 Dec 2022 13:40:34 GMT
etag: "8bf6d4e9191247f34f49910ff4bce36c"
content-type: text/css
age: 432589
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fedd456a0-d42f-4b40-ad63-ea1dcfaf69eb.jpeg
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fedd456a0-d42f-4b40-ad63-ea1dcfaf69eb.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2a6aaf87a867f93dc9268a8b27973b97
f52ccbe6cbced1994acb13a00b05436553b6813e
3fbd7441712035f4d53c17eec93bc278e6c072043f3b5a721cac349fc0dabe77
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fedd456a0-d42f-4b40-ad63-ea1dcfaf69eb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10166
x-amzn-requestid: 54fe0d12-360f-4d97-bcf3-b24747d956aa
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fY_4zHEcoAMF1iA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d379d1-4ba89e44005f616a0ed3ed24;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 07:14:25 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: hSyEfSDToqgfnFIW68Krz-ANYUNQoUPWhyb-8xDUarI6mnVLXriHDQ==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Thu, 02 Feb 2023 21:59:54 GMT
age: 59124
etag: "f52ccbe6cbced1994acb13a00b05436553b6813e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash e3383a870b280d28b1d924543e6128af
0e9ccaf308e10ae68774fe0d32e10d063f379e7d
093a4523b327faf080d2d200d6e8d9e615abe6e048a72d70c3bc8e9f89cc50bf
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 14:25:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
142.250.74.163200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP 142.250.74.163:0
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 Feb 2023 03:13:04 GMT
expires: Fri, 02 Feb 2024 03:13:04 GMT
cache-control: public, max-age=31536000
age: 126734
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
142.250.74.163200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP 142.250.74.163:0
File type Web Open Font Format (Version 2), TrueType, length 15920, version 1.0\012- data
Hash 3a44e06eb954b96aa043227f3534189d
23cef6993ddb2b2979e8e7647fc3763694e2ba7d
b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e
GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 01 Feb 2023 14:07:32 GMT
expires: Thu, 01 Feb 2024 14:07:32 GMT
cache-control: public, max-age=31536000
age: 173866
last-modified: Wed, 11 May 2022 19:24:45 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/robotoslab/v24/BngbUXZYTXPIvIBgJJSb6s3BzlRRfKOFbvjoa4Omb2Rj.woff2
142.250.74.163200 OK 13 kB URL HTTP/2 fonts.gstatic.com/s/robotoslab/v24/BngbUXZYTXPIvIBgJJSb6s3BzlRRfKOFbvjoa4Omb2Rj.woff2
IP 142.250.74.163:0
File type Web Open Font Format (Version 2), TrueType, length 12820, version 1.0\012- data
Hash 5c02543fd50416d417c4fde1410008d5
82803a4554e56c2247c2ce50e9a0a3c77b5e0730
084c044e1a353a41a04f9c923b418d582f8e8d3a1996053c8e4912a57d158799
GET /s/robotoslab/v24/BngbUXZYTXPIvIBgJJSb6s3BzlRRfKOFbvjoa4Omb2Rj.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 12820
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 31 Jan 2023 12:46:56 GMT
expires: Wed, 31 Jan 2024 12:46:56 GMT
cache-control: public, max-age=31536000
age: 265102
last-modified: Mon, 11 Jul 2022 19:15:07 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
142.250.74.163200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP 142.250.74.163:0
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 29 Jan 2023 12:46:12 GMT
expires: Mon, 29 Jan 2024 12:46:12 GMT
cache-control: public, max-age=31536000
age: 437946
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfBBc4.woff2
142.250.74.163200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfBBc4.woff2
IP 142.250.74.163:0
File type Web Open Font Format (Version 2), TrueType, length 15752, version 1.0\012- data
Hash b20371a6daf29d4a1f2e85dbbf40fb20
0355a01c1ccb45cb728e7e07c41c8ebf456f70bb
7e262106f82cc52663e403f5b73795bbeab9ca0630c33c03579354fbcd4fae1e
GET /s/roboto/v30/KFOlCnqEu92Fr1MmYUtfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15752
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 31 Jan 2023 12:46:53 GMT
expires: Wed, 31 Jan 2024 12:46:53 GMT
cache-control: public, max-age=31536000
age: 265105
last-modified: Wed, 11 May 2022 19:24:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash e3383a870b280d28b1d924543e6128af
0e9ccaf308e10ae68774fe0d32e10d063f379e7d
093a4523b327faf080d2d200d6e8d9e615abe6e048a72d70c3bc8e9f89cc50bf
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 14:25:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
372fc806295528bc5fbf-83c638ca2a0b52c62d893afeac24561e.ssl.cf3.rackcdn.com/GenericLiveCasino.jpg
2.18.172.147200 OK 88 kB URL HTTP/1.1 372fc806295528bc5fbf-83c638ca2a0b52c62d893afeac24561e.ssl.cf3.rackcdn.com/GenericLiveCasino.jpg
IP 2.18.172.147:0
File type JPEG image data, baseline, precision 8, 600x117, components 3\012- data
Hash 354579f5e2bbf9efee9ef5b730b02bf0
494e7620512430459d1f3233366dee956897ff0a
08893d543a20215b5ee2d85fa344a9bb3470490285fd3693e9952adf979ca619
GET /GenericLiveCasino.jpg HTTP/1.1
Host: 372fc806295528bc5fbf-83c638ca2a0b52c62d893afeac24561e.ssl.cf3.rackcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Last-Modified: Tue, 03 Dec 2019 10:23:28 GMT
ETag: 354579f5e2bbf9efee9ef5b730b02bf0
Unused62: 8096267
X-Trans-Id: tx4f3a66b713364770acb5b-0060d2026dlon3
Content-Length: 88183
Accept-Ranges: bytes
X-Timestamp: 1575368607.19877
Content-Type: image/jpeg
Cache-Control: public, max-age=187115
Expires: Sun, 05 Feb 2023 18:23:53 GMT
Date: Fri, 03 Feb 2023 14:25:18 GMT
Connection: keep-alive
www.leovegas.com/_Incapsula_Resource?SWKMTFSR=1&e=0.43341814956941016
107.154.248.168200 OK 1 B URL HTTP/2 www.leovegas.com/_Incapsula_Resource?SWKMTFSR=1&e=0.43341814956941016
IP 107.154.248.168:0
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
GET /_Incapsula_Resource?SWKMTFSR=1&e=0.43341814956941016 HTTP/1.1
Host: www.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.leovegas.com/en-no/livecasino?btag=667909_65C5EB0B14CC406CAED83E0A76BD6CCB&c=wd9ntcsm7snti6cm2cc3khkm&pid=3747044&bid=15012
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a3747044%2c%22BID%22%3a15012%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1675434316238)%5c%2f%22%2c%22CookieTag%22%3a%22150123747044451240919C2023231425%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%222803909610%7c1%22%7d%5d; leo-essentials=%7B%22cid%22%3A%2252cfd912-e549-4eb4-9913-041c5c778a36%22%7D; visid_incap_846569=hZEK2dUoTsqE1xXN3vqTLUwZ3WMAAAAAQUIPAAAAAAD5thl9R6cXZZLtb2TvIrby; nlbi_846569=7n9SXKSEeRmxfhFMTJV9qQAAAABgHyCCqJlWGELUBXcu+GsT; incap_ses_633_846569=ncIHBRwhXVy5DBuApd7ICEwZ3WMAAAAAQ/6lgLJj0b/eTXJyfhvzQw==; leobtag=667909_65C5EB0B14CC406CAED83E0A76BD6CCB; leonrpid=3747044; leonrbid=15012; leonrmeta=[{"value":"wd9ntcsm7snti6cm2cc3khkm","key":"c"}]; ___utmvc=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
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: no-cache, no-store
content-type: text/plain
x-robots-tag: noindex
content-length: 1
strict-transport-security: max-age=63072000
X-Firefox-Spdy: h2
www.leovegas.com/static/fulcrum/apple-touch-icon.png
107.154.248.168200 OK 21 kB URL HTTP/2 www.leovegas.com/static/fulcrum/apple-touch-icon.png
IP 107.154.248.168:0
File type PNG image data, 192 x 192, 8-bit colormap, non-interlaced\012- data
Hash f9a35c0fdecb2ee483d7badb5e03dd5b
6b9e2d23f188021f914eb2f58ce74d4753afd996
5137e8fe669f23cfe46ec272e9621157210a5e4b3f985520d22ed65f37ad3e0b
GET /static/fulcrum/apple-touch-icon.png HTTP/1.1
Host: www.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.leovegas.com/en-no/livecasino?btag=667909_65C5EB0B14CC406CAED83E0A76BD6CCB&c=wd9ntcsm7snti6cm2cc3khkm&pid=3747044&bid=15012
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a3747044%2c%22BID%22%3a15012%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1675434316238)%5c%2f%22%2c%22CookieTag%22%3a%22150123747044451240919C2023231425%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%222803909610%7c1%22%7d%5d; leo-essentials=%7B%22cid%22%3A%2252cfd912-e549-4eb4-9913-041c5c778a36%22%7D; visid_incap_846569=hZEK2dUoTsqE1xXN3vqTLUwZ3WMAAAAAQUIPAAAAAAD5thl9R6cXZZLtb2TvIrby; nlbi_846569=7n9SXKSEeRmxfhFMTJV9qQAAAABgHyCCqJlWGELUBXcu+GsT; incap_ses_633_846569=ncIHBRwhXVy5DBuApd7ICEwZ3WMAAAAAQ/6lgLJj0b/eTXJyfhvzQw==; leobtag=667909_65C5EB0B14CC406CAED83E0A76BD6CCB; leonrpid=3747044; leonrbid=15012; leonrmeta=[{"value":"wd9ntcsm7snti6cm2cc3khkm","key":"c"}]; ___utmvc=dkEWU45+EE+Ai/I9vid2PoYltF/iOODAr2tUncfex8V0v42EdX/PBvoddDMD0iqPjw0ZgQ0x0h3BJ/fCAmxVTobdi7zWZBcUZYzyLa73wCD+iQmcuvqXnSMvNVBquiTO45dv20c+HThB+WVjO23n8bhFnWad40y9HCpIUEtHFgDV5qsreFXYWL/GadlGrpYbM5d4rPHuUe3dJ6AYcatxCZyI99Z3/xiKyulHiYHY9OCC685uoCmbH9qalDkiB7/1riR9PXwKlj83o9B0BsBYDULM3gHAiER1JAQPCBueqJwuAjTayP0ZC8/7+lvzdTYIg1fM1qFVCdcW6AuCld6tLo8h5Q05Z4v2IvT8mfIcGkz7WiAhxVsk8CHo+E1jnCapjO5bXQGSeUkZgKwAPCiYwdtJWICsO7wmTB6sJdu4ehUTwpn9byVoTwyVHhPKOW0k2araEteuDbHtimxJUlNlaOXlvdKtrX+lSoMSokVdnDyrRizNB5y+dZ+3gyY5PveqlTLRrnGiriQ0P7CQUBHqi3y74kCDbOo/GEI/qE7PSi9FOxqAKQCqxIfXFwMd6rf+g8i6eh/E1MioTNm+CJ5z52gFZmJj5+Faru5vR30OJBYspgZ9TvNHwLcetc/TjwQ299JxUr1YaTXEhRGPLpLK/9zkRj8L0Mp54Cr6jRpZK/ZpdW30smuFDsDMtO35Y1HQgSZv2o9T/qL5O7AhR0igAi2sZCd1Lj6TJjOs0GMBe4oK9BS6/eluMrKi8/KfqG08QyIH9UG3+Pmu9lXWdbnwQP83FT5OysKm720IsYsmNYjCrQeNhs9rT6x8ASEefhBQ+D93LnkyZYZjUNLPPpbsOQzE7Editq6EKpvU6BejBL/l+aAoeej1jmh61SbXamlOGYZemzzWJAwW3XVxhsQpmnsS6WjbGzwbbURzL+1Y6FD1UUYgBD3T+LWyO4PLfXoat8fv+AkIuE7LwnAKBnZU3NqXb7mtUeSr6zbQM3AfYcdkvAye/fCel7SlYO8c8aRgVL4946ocqlTYNwfAfccGqsOXrm6H6pHmHlU33Sd6hb3ZID/MeUACs42EQ5CacFdEv/2nRJO5ED8+PWfuUACLwMnPubpjIltEaTXpCpN1ftAhS1e06YE/R3xXy7iTk9gIjatHW5saLxtrldm362ZRVeAGTXhraFkwgwefq9GJEZO6a6ZWdFdxoOiJMNXjKXdoAGG3P2GHhtpSpXRiuuS9eHUanVtiyFd1xZpoyu0y1/1fX4mzBe5EPe+ElG+zGM6E22HdHsDQsoMOxMYR9kttL1K0T/qau0NWs31AyEwFS415x1v0KxNov2B/ZHPhDCHwtbTEjEbN8rvmRU1kzbh5z1BNUSpfid0JPuGecP3404xsdHVqxesqjfwAIFv6OkhwVj6BlvxEJHsGm1zkyp9JjXLZYoSWBexalCX1NcOfTP6sPmPOFNc0v+MR0/F0frDzf4rC6OYXD1lMUmJ2pAcn06dtydYXU6uNvxdH1GLDPAGd5wQOTCefhcvMv1adXitM8SUq9rvhgX2zhTDtC1hCPKTqPEGRrXP/YLGrPHwQisQm28tA3q31xveNjDNtclWT7V4QnujU+7JM9a81JwgQ+vzTXZZA+JqYi3KtLvx1bjgB8+xFZPf5obvo44S+P1JMKBTm6VUz9Uwo43P8r5c2dTQpnTgJVFSp5d6T9GsPv1vidmjJjSk2i9d1MQ5GdsteM66Jwfjgy2+g2ApcK0LXHvJ9gL5Qktl0A54ZBwsG9UkD+r0Km/gPdMIitRLzwoIwqkCsmUw0BadiO13k655gOB++QEMk6EbN7tNcEqfcrWrONlcyacCC0oUIRUUpz9FfatpX768H+ouLIL/boTiqEvPrjCpNTvoUPabwDp4XdpWobvoU3n/R2NuWQB+mUCg0Yrse+fuGAAn0/7ZuPmxQW3MucDV7LjC8N3WF9NyXT5IKj5nhQduEgXEUH7w6l7eQq7CE/OM95VCaBa2fa5nDJvNUMR7PYa3AkxaYEvzrkBkEgujfeYMCu2HP6MsHad9dngrrdrKN3D8/f99nfIQaaUn3F5fwahrIa7OB7fiZenzniT8pbqrkiEj+aPpbmkYaedMiRsd1Iv/GorNII32x5cyMDR1wD37v+7pB/QoQFuSZu+K8SajT5SSpRGzR7ZjhbrhIIPWA4sw8xHcADiBsPyFliOZ/FLsQswOKfmB+oKm6k4WbX1TWhkEkZYVdTrWocAjlfNaPGbQb0wwhcvTtg7prBC7WPCp/lTupvjZNfdZ+cQVsCWzYdorYr92Pgc/AoRtDduV0U2vogVMYwIR3vaJNrTOgt/UbA3p15A9nElPn+ZLSidJLMpPNajAFBIRdrVMRUhiostz7Zpoh7UW9G6Y6RWK3AUXpttsWblIqRhgB9j/Yqj8ekqBvO4pxYjoxyDlgZ7kOSz2Ps6yFP1T0Ye1EnXUE30NZbfknT7x5A7Ez0DcIXrYWdLcxeK3GiBZSMy1UIRJkWLbvUlFpe41aWyel08kZTTe3ykNoXuUWf0jjwluq/seYOE2bsnfgmyitsEUxN0otqO1FvEVyQPToK/xJ7aehSc40a6wNZ+KpLNimL3jmVrCckzvVvAR/OokqkQqBVR/ArZAlFYoMcbr9//DsCU9zCHKvrZuJPkTwYCfAbLw6SXbvo7cCjFBa7WwE4LLBtbFm+LjXNFAn0Bg/e6775yk1byxkaWdlc3Q9MTg1NTY2LHM9ODc2ODg5ODc4ZjhiYTk4ODg2OWU5ZDg3OTY4OThiNjU2YzlkOWNiMTliODk4NDZjYTRhOWFiOGJhMDc5YTRhYjgyOWM4ZTY1NzM3OTcyNzI=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
etag: "87ff2fdf"
last-modified: Thu, 02 Feb 2023 14:49:36 GMT
content-type: image/png
content-length: 21096
content-encoding: gzip
cache-control: max-age=2344, public
expires: Fri, 03 Feb 2023 15:04:22 GMT
date: Fri, 03 Feb 2023 14:25:18 GMT
set-cookie: ___utmvc=a; Max-Age=0; path=/; expires=Tue, 24 Jan 2023 22:43:55 GMT
strict-transport-security: max-age=63072000
x-cdn: Imperva
x-iinfo: 4-31801040-0 0CNN RT(1675434315991 2398) q(0 -1 -1 -1) r(0 -1)
X-Firefox-Spdy: h2
www.leovegas.com/static/fulcrum/favicon.ico
107.154.248.168200 OK 2.7 kB URL HTTP/2 www.leovegas.com/static/fulcrum/favicon.ico
IP 107.154.248.168:0
File type MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel\012- data
Hash a3384f0c4aa8c4b99449ef21ae4eb17b
ca4a677f9a641d29862da6cc2fd3aa8c2d9ecdda
5e0a3867060cb39118639f3b57bf79f646b0836c6279ac09f41b4a156eb6c4b2
GET /static/fulcrum/favicon.ico HTTP/1.1
Host: www.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.leovegas.com/en-no/livecasino?btag=667909_65C5EB0B14CC406CAED83E0A76BD6CCB&c=wd9ntcsm7snti6cm2cc3khkm&pid=3747044&bid=15012
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a3747044%2c%22BID%22%3a15012%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1675434316238)%5c%2f%22%2c%22CookieTag%22%3a%22150123747044451240919C2023231425%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%222803909610%7c1%22%7d%5d; leo-essentials=%7B%22cid%22%3A%2252cfd912-e549-4eb4-9913-041c5c778a36%22%7D; visid_incap_846569=hZEK2dUoTsqE1xXN3vqTLUwZ3WMAAAAAQUIPAAAAAAD5thl9R6cXZZLtb2TvIrby; nlbi_846569=7n9SXKSEeRmxfhFMTJV9qQAAAABgHyCCqJlWGELUBXcu+GsT; incap_ses_633_846569=ncIHBRwhXVy5DBuApd7ICEwZ3WMAAAAAQ/6lgLJj0b/eTXJyfhvzQw==; leobtag=667909_65C5EB0B14CC406CAED83E0A76BD6CCB; leonrpid=3747044; leonrbid=15012; leonrmeta=[{"value":"wd9ntcsm7snti6cm2cc3khkm","key":"c"}]; ___utmvc=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
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
etag: "d5630a7c"
last-modified: Thu, 02 Feb 2023 14:49:36 GMT
content-type: image/x-icon
content-length: 2663
content-encoding: gzip
cache-control: max-age=2905, public
expires: Fri, 03 Feb 2023 15:13:43 GMT
date: Fri, 03 Feb 2023 14:25:18 GMT
set-cookie: ___utmvc=a; Max-Age=0; path=/; expires=Tue, 24 Jan 2023 22:43:55 GMT
strict-transport-security: max-age=63072000
x-cdn: Imperva
x-iinfo: 4-31801040-0 0CNN RT(1675434315991 2403) q(0 -1 -1 -1) r(0 -1)
X-Firefox-Spdy: h2
www.leovegas.com/stream?relay
107.154.248.168101 Switching Protocols 0 B URL HTTP/1.1 www.leovegas.com/stream?relay
IP 107.154.248.168:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /stream?relay HTTP/1.1
Host: www.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://www.leovegas.com
Sec-WebSocket-Protocol: graphql-ws
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: IrpTtVaPlaCJ9j4iq+AsTQ==
Connection: keep-alive, Upgrade
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a3747044%2c%22BID%22%3a15012%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1675434316238)%5c%2f%22%2c%22CookieTag%22%3a%22150123747044451240919C2023231425%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%222803909610%7c1%22%7d%5d; leo-essentials=%7B%22cid%22%3A%2252cfd912-e549-4eb4-9913-041c5c778a36%22%7D; visid_incap_846569=hZEK2dUoTsqE1xXN3vqTLUwZ3WMAAAAAQUIPAAAAAAD5thl9R6cXZZLtb2TvIrby; nlbi_846569=7n9SXKSEeRmxfhFMTJV9qQAAAABgHyCCqJlWGELUBXcu+GsT; incap_ses_633_846569=ncIHBRwhXVy5DBuApd7ICEwZ3WMAAAAAQ/6lgLJj0b/eTXJyfhvzQw==; leobtag=667909_65C5EB0B14CC406CAED83E0A76BD6CCB; leonrpid=3747044; leonrbid=15012; leonrmeta=[{"value":"wd9ntcsm7snti6cm2cc3khkm","key":"c"}]; ___utmvc=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
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Server: nginx
Date: Fri, 03 Feb 2023 14:25:18 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 6WEat9oOE+WnA3l4o8qbZRwQ6Ko=
Sec-WebSocket-Protocol: graphql-ws
Via: 1.1 google
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
Set-Cookie: ___utmvc=a; Max-Age=0; path=/; expires=Tue, 24 Jan 2023 22:43:55 GMT
Strict-Transport-Security: max-age=63072000
X-CDN: Imperva
X-Iinfo: 9-22757230-22757231 NNNY CT(1 5 0) RT(1675434318404 20) q(0 0 0 -1) r(0 0) U11
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 89d4cca556346b409532ff6de7376041
99bd0178e7335d7e9a9a4676aaf6e465f0404362
fd00c68316619feccb487d44d2c0f7fd338ea7bfc706b0ffb4ccede7faba9a14
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2387
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 14:25:19 GMT
Last-Modified: Fri, 03 Feb 2023 13:45:32 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 89d4cca556346b409532ff6de7376041
99bd0178e7335d7e9a9a4676aaf6e465f0404362
fd00c68316619feccb487d44d2c0f7fd338ea7bfc706b0ffb4ccede7faba9a14
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1318
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 14:25:19 GMT
Last-Modified: Fri, 03 Feb 2023 14:03:21 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
track.adform.net/serving/cookie/?adfaction=getjs;adfcookname=uid
37.157.4.40200 OK 180 B URL HTTP/2 track.adform.net/serving/cookie/?adfaction=getjs;adfcookname=uid
IP 37.157.4.40:0
File type ASCII text, with no line terminators
Hash 2255005e68a8880fe8846b0ce53772ad
36ba75259314950e35818b9d871b02b09dab56ce
28df773657a07be0bbc8ab226c401438dacd6a9bc8662f38f0a69252c0089fc5
GET /serving/cookie/?adfaction=getjs;adfcookname=uid HTTP/1.1
Host: track.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 14:25:19 GMT
content-type: text/javascript; charset=utf-8
content-length: 180
cache-control: no-cache, no-store, must-revalidate, no-transform
pragma: no-cache
content-encoding: gzip
expires: -1
vary: Accept-Encoding
access-control-allow-origin: *
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
app.launchdarkly.com/sdk/goals/5b9627a39619fd15611a390c
151.101.130.217200 OK 23 B URL HTTP/2 app.launchdarkly.com/sdk/goals/5b9627a39619fd15611a390c
IP 151.101.130.217:0
Hash f0d79988b7772c003d04a28bd7417a62
58423a999eec2997bcfffb247e9ecd3dfd0abf44
30e6fa98fb48c2b132824d1ac5e2243c0be9e9082ff32598d34d7687ca7f6c7f
OPTIONS /sdk/goals/5b9627a39619fd15611a390c HTTP/1.1
Host: app.launchdarkly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-launchdarkly-user-agent
Referer: https://www.leovegas.com/
Origin: https://www.leovegas.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-headers: Accept,Content-Type,Content-Length,Accept-Encoding,Authorization,X-Requested-With,X-LD-Private,X-LD-AccountId,X-LD-EnvId,X-LD-PrjId,X-LaunchDarkly-Event-Schema,X-LaunchDarkly-User-Agent,X-LaunchDarkly-Wrapper,LD-API-Version,X-LaunchDarkly-Tags
access-control-allow-methods: GET, OPTIONS, HEAD
access-control-allow-origin: *
access-control-max-age: 3600
allow: GET, OPTIONS, HEAD
content-encoding: gzip
ld-region: us-east-1
strict-transport-security: max-age=31536000
accept-ranges: bytes
date: Fri, 03 Feb 2023 14:25:19 GMT
via: 1.1 varnish
x-served-by: cache-bma1659-BMA
x-cache: HIT
x-cache-hits: 88
x-timer: S1675434319.126784,VS0,VE0
vary: Accept-Encoding
age: 0
content-length: 23
X-Firefox-Spdy: h2
app.launchdarkly.com/sdk/goals/5b9627a39619fd15611a390c
151.101.130.217200 OK 26 B URL HTTP/2 app.launchdarkly.com/sdk/goals/5b9627a39619fd15611a390c
IP 151.101.130.217:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 4895d253dd2c6acdb944f2bd7579cc89
9befc050756e1ec3b4b99e2579c0b86132f642a3
261feae8b4d06341989808887b33303dfb972c7566e389dbd8e1c1ea9b096a13
GET /sdk/goals/5b9627a39619fd15611a390c HTTP/1.1
Host: app.launchdarkly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-LaunchDarkly-User-Agent: JSClient/2.24.2
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
access-control-allow-headers: Accept,Content-Type,Content-Length,Accept-Encoding,Authorization,X-Requested-With,X-LD-Private,X-LD-AccountId,X-LD-EnvId,X-LD-PrjId,X-LaunchDarkly-Event-Schema,X-LaunchDarkly-User-Agent,X-LaunchDarkly-Wrapper,LD-API-Version,X-LaunchDarkly-Tags
access-control-allow-methods: GET, OPTIONS, HEAD
access-control-allow-origin: *
access-control-max-age: 300
cache-control: max-age=0
content-encoding: gzip
content-md5: d751713988987e9331980363e24189ce
etag: "d751713988987e9331980363e24189ce"
ld-region: us-east-1
strict-transport-security: max-age=31536000
accept-ranges: bytes
date: Fri, 03 Feb 2023 14:25:19 GMT
via: 1.1 varnish
x-served-by: cache-bma1659-BMA
x-cache: HIT
x-cache-hits: 34
x-timer: S1675434319.138021,VS0,VE0
vary: Accept-Encoding
age: 0
content-length: 26
X-Firefox-Spdy: h2
app.launchdarkly.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?withReasons=true
151.101.130.217200 OK 23 B URL HTTP/2 app.launchdarkly.com/sdk/evalx/5b9627a39619fd15611a390c/users/eyJrZXkiOiI1MmNmZDkxMi1lNTQ5LTRlYjQtOTkxMy0wNDFjNWM3NzhhMzYiLCJjb3VudHJ5IjoiTk8iLCJhbm9ueW1vdXMiOnRydWUsImN1c3RvbSI6eyJjbGllbnRJZCI6ImFub255bW91cyIsImNvbnRleHRDb3VudHJ5IjoiTk8iLCJjb250ZXh0TGljZW5zZSI6Ik1HQSIsImN1cnJlbmN5IjoiIiwibGFuZ3VhZ2UiOiJFTiIsImxpY2Vuc2UiOiJNR0EiLCJtYXJrZXQiOiJOTyIsInBsYXRmb3JtVHlwZSI6Im1vYmlsZSIsInBsYXllcklkIjoiIiwicmVhbEtleSI6IjUyY2ZkOTEyLWU1NDktNGViNC05OTEzLTA0MWM1Yzc3OGEzNiIsInVuaXF1ZUlkIjoiNTJjZmQ5MTItZTU0OS00ZWI0LTk5MTMtMDQxYzVjNzc4YTM2In19?withReasons=true
IP 151.101.130.217:0
Hash f0d79988b7772c003d04a28bd7417a62
58423a999eec2997bcfffb247e9ecd3dfd0abf44
30e6fa98fb48c2b132824d1ac5e2243c0be9e9082ff32598d34d7687ca7f6c7f
OPTIONS /sdk/evalx/5b9627a39619fd15611a390c/users/eyJrZXkiOiI1MmNmZDkxMi1lNTQ5LTRlYjQtOTkxMy0wNDFjNWM3NzhhMzYiLCJjb3VudHJ5IjoiTk8iLCJhbm9ueW1vdXMiOnRydWUsImN1c3RvbSI6eyJjbGllbnRJZCI6ImFub255bW91cyIsImNvbnRleHRDb3VudHJ5IjoiTk8iLCJjb250ZXh0TGljZW5zZSI6Ik1HQSIsImN1cnJlbmN5IjoiIiwibGFuZ3VhZ2UiOiJFTiIsImxpY2Vuc2UiOiJNR0EiLCJtYXJrZXQiOiJOTyIsInBsYXRmb3JtVHlwZSI6Im1vYmlsZSIsInBsYXllcklkIjoiIiwicmVhbEtleSI6IjUyY2ZkOTEyLWU1NDktNGViNC05OTEzLTA0MWM1Yzc3OGEzNiIsInVuaXF1ZUlkIjoiNTJjZmQ5MTItZTU0OS00ZWI0LTk5MTMtMDQxYzVjNzc4YTM2In19?withReasons=true HTTP/1.1
Host: app.launchdarkly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-launchdarkly-user-agent
Referer: https://www.leovegas.com/
Origin: https://www.leovegas.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-headers: Accept,Content-Type,Content-Length,Accept-Encoding,Authorization,X-Requested-With,X-LD-Private,X-LD-AccountId,X-LD-EnvId,X-LD-PrjId,X-LaunchDarkly-Event-Schema,X-LaunchDarkly-User-Agent,X-LaunchDarkly-Wrapper,LD-API-Version,X-LaunchDarkly-Tags
access-control-allow-methods: GET, OPTIONS, HEAD
access-control-allow-origin: *
access-control-max-age: 3600
allow: GET, OPTIONS, HEAD
content-encoding: gzip
ld-region: us-east-1
strict-transport-security: max-age=31536000
accept-ranges: bytes
date: Fri, 03 Feb 2023 14:25:19 GMT
via: 1.1 varnish
x-served-by: cache-bma1659-BMA
x-cache: HIT
x-cache-hits: 32
x-timer: S1675434319.278517,VS0,VE0
vary: Accept-Encoding
age: 0
content-length: 23
X-Firefox-Spdy: h2
app.launchdarkly.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?withReasons=true
151.101.130.217200 OK 23 B URL HTTP/2 app.launchdarkly.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?withReasons=true
IP 151.101.130.217:0
Hash f0d79988b7772c003d04a28bd7417a62
58423a999eec2997bcfffb247e9ecd3dfd0abf44
30e6fa98fb48c2b132824d1ac5e2243c0be9e9082ff32598d34d7687ca7f6c7f
OPTIONS /sdk/evalx/5b9627a39619fd15611a390c/users/eyJrZXkiOiI1MmNmZDkxMi1lNTQ5LTRlYjQtOTkxMy0wNDFjNWM3NzhhMzYiLCJjb3VudHJ5IjoiTk8iLCJhbm9ueW1vdXMiOnRydWUsImN1c3RvbSI6eyJjbGllbnRJZCI6ImFub255bW91cyIsImNvbnRleHRDb3VudHJ5IjoiTk8iLCJjb250ZXh0TGljZW5zZSI6Ik1HQSIsImN1cnJlbmN5IjoiTk9LIiwibGFuZ3VhZ2UiOiJFTiIsImxpY2Vuc2UiOiJNR0EiLCJtYXJrZXQiOiJOTyIsInBsYXRmb3JtVHlwZSI6Im1vYmlsZSIsInBsYXllcklkIjoiIiwicmVhbEtleSI6IjUyY2ZkOTEyLWU1NDktNGViNC05OTEzLTA0MWM1Yzc3OGEzNiIsInVuaXF1ZUlkIjoiNTJjZmQ5MTItZTU0OS00ZWI0LTk5MTMtMDQxYzVjNzc4YTM2In19?withReasons=true HTTP/1.1
Host: app.launchdarkly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-launchdarkly-user-agent
Referer: https://www.leovegas.com/
Origin: https://www.leovegas.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-headers: Accept,Content-Type,Content-Length,Accept-Encoding,Authorization,X-Requested-With,X-LD-Private,X-LD-AccountId,X-LD-EnvId,X-LD-PrjId,X-LaunchDarkly-Event-Schema,X-LaunchDarkly-User-Agent,X-LaunchDarkly-Wrapper,LD-API-Version,X-LaunchDarkly-Tags
access-control-allow-methods: GET, OPTIONS, HEAD
access-control-allow-origin: *
access-control-max-age: 3600
allow: GET, OPTIONS, HEAD
content-encoding: gzip
ld-region: us-east-1
strict-transport-security: max-age=31536000
accept-ranges: bytes
date: Fri, 03 Feb 2023 14:25:19 GMT
via: 1.1 varnish
x-served-by: cache-bma1659-BMA
x-cache: HIT
x-cache-hits: 33
x-timer: S1675434319.288042,VS0,VE0
vary: Accept-Encoding
age: 0
content-length: 23
X-Firefox-Spdy: h2
app.launchdarkly.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?withReasons=true
151.101.130.217200 OK 3.6 kB URL HTTP/2 app.launchdarkly.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?withReasons=true
IP 151.101.130.217:0
File type JSON data\012- , ASCII text, with very long lines (23664), with no line terminators
Hash 241a20d29fa6694d2bf0cf7cb157bec5
205ad0b796d81b63b489e91e9a0e5be75e67bdef
65945e5cafa402b8d1cbce1c39467dc387e5ec89cd9e38a48c6f6f53170b34ef
GET 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?withReasons=true HTTP/1.1
Host: app.launchdarkly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-LaunchDarkly-User-Agent: JSClient/2.24.2
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
cache-control: max-age=0
etag: "5347dbb"
access-control-allow-origin: *
access-control-max-age: 3600
access-control-allow-methods: OPTIONS, GET
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization, X-Requested-With, X-LD-Private, X-LD-AccountId, X-LD-EnvId, X-LD-PrjId, X-LaunchDarkly-Event-Schema, X-LaunchDarkly-User-Agent, X-LaunchDarkly-Wrapper, Ld-Api-Version
content-encoding: gzip
accept-ranges: bytes
date: Fri, 03 Feb 2023 14:25:19 GMT
via: 1.1 varnish
x-served-by: cache-bma1634-BMA, cache-bma1659-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1675434319.290164,VS0,VE56
vary: Authorization, Accept-Encoding
age: 0
content-length: 3626
X-Firefox-Spdy: h2
app.launchdarkly.com/sdk/evalx/5b9627a39619fd15611a390c/users/eyJrZXkiOiI1MmNmZDkxMi1lNTQ5LTRlYjQtOTkxMy0wNDFjNWM3NzhhMzYiLCJjb3VudHJ5IjoiTk8iLCJhbm9ueW1vdXMiOnRydWUsImN1c3RvbSI6eyJjbGllbnRJZCI6ImFub255bW91cyIsImNvbnRleHRDb3VudHJ5IjoiTk8iLCJjb250ZXh0TGljZW5zZSI6Ik1HQSIsImN1cnJlbmN5IjoiTk9LIiwibGFuZ3VhZ2UiOiJFTiIsImxpY2Vuc2UiOiJNR0EiLCJtYXJrZXQiOiJOTyIsInBsYXRmb3JtVHlwZSI6Im1vYmlsZSIsInBsYXllcklkIjoiIiwicmVhbEtleSI6IjUyY2ZkOTEyLWU1NDktNGViNC05OTEzLTA0MWM1Yzc3OGEzNiIsInVuaXF1ZUlkIjoiNTJjZmQ5MTItZTU0OS00ZWI0LTk5MTMtMDQxYzVjNzc4YTM2In19?withReasons=true
151.101.130.217200 OK 3.6 kB URL HTTP/2 app.launchdarkly.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?withReasons=true
IP 151.101.130.217:0
File type JSON data\012- , ASCII text, with very long lines (23664), with no line terminators
Hash 241a20d29fa6694d2bf0cf7cb157bec5
205ad0b796d81b63b489e91e9a0e5be75e67bdef
65945e5cafa402b8d1cbce1c39467dc387e5ec89cd9e38a48c6f6f53170b34ef
GET /sdk/evalx/5b9627a39619fd15611a390c/users/eyJrZXkiOiI1MmNmZDkxMi1lNTQ5LTRlYjQtOTkxMy0wNDFjNWM3NzhhMzYiLCJjb3VudHJ5IjoiTk8iLCJhbm9ueW1vdXMiOnRydWUsImN1c3RvbSI6eyJjbGllbnRJZCI6ImFub255bW91cyIsImNvbnRleHRDb3VudHJ5IjoiTk8iLCJjb250ZXh0TGljZW5zZSI6Ik1HQSIsImN1cnJlbmN5IjoiTk9LIiwibGFuZ3VhZ2UiOiJFTiIsImxpY2Vuc2UiOiJNR0EiLCJtYXJrZXQiOiJOTyIsInBsYXRmb3JtVHlwZSI6Im1vYmlsZSIsInBsYXllcklkIjoiIiwicmVhbEtleSI6IjUyY2ZkOTEyLWU1NDktNGViNC05OTEzLTA0MWM1Yzc3OGEzNiIsInVuaXF1ZUlkIjoiNTJjZmQ5MTItZTU0OS00ZWI0LTk5MTMtMDQxYzVjNzc4YTM2In19?withReasons=true HTTP/1.1
Host: app.launchdarkly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-LaunchDarkly-User-Agent: JSClient/2.24.2
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
cache-control: max-age=0
etag: "5347dbb"
access-control-allow-origin: *
access-control-max-age: 3600
access-control-allow-methods: OPTIONS, GET
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization, X-Requested-With, X-LD-Private, X-LD-AccountId, X-LD-EnvId, X-LD-PrjId, X-LaunchDarkly-Event-Schema, X-LaunchDarkly-User-Agent, X-LaunchDarkly-Wrapper, Ld-Api-Version
content-encoding: gzip
accept-ranges: bytes
date: Fri, 03 Feb 2023 14:25:19 GMT
via: 1.1 varnish
x-served-by: cache-bma1648-BMA, cache-bma1659-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1675434319.299635,VS0,VE68
vary: Authorization, Accept-Encoding
age: 0
content-length: 3626
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 9bfd33253208c9d034988400d66abd5d
8811fd76d9bc56c15431433f8f08d648185992ed
6382de7eb2bc0b40dc6d2e21ab8b6cb90cc0effe3241e3fb5008d2e4f626e92c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 14:25:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/r/collect?v=1&aip=1&t=dc&_r=3&tid=UA-25600410-6&cid=127406931.1675434351&jid=1926924821&_gid=1940006320.1675434351&gjid=2146869087&_v=j99&z=505606371
64.233.164.155302 Found 70 kB URL HTTP/2 stats.g.doubleclick.net/r/collect?v=1&aip=1&t=dc&_r=3&tid=UA-25600410-6&cid=127406931.1675434351&jid=1926924821&_gid=1940006320.1675434351&gjid=2146869087&_v=j99&z=505606371
IP 64.233.164.155:0
File type gzip compressed data, from Unix\012- data
Hash 47d5c957f06291fc1de32915ac80b539
75be1a42b7b669a23d073db7174c4c97ecfc99f2
bd826a04358fd9567078b8bc87df79ddfff23b8425bd404284d33a55497cfdc9
GET /r/collect?v=1&aip=1&t=dc&_r=3&tid=UA-25600410-6&cid=127406931.1675434351&jid=1926924821&_gid=1940006320.1675434351&gjid=2146869087&_v=j99&z=505606371 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Referer: https://www.leovegas.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: https://www.google.com/ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-25600410-6&cid=127406931.1675434351&jid=1926924821&_v=j99&z=505606371
access-control-allow-origin: null
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Fri, 03 Feb 2023 14:25:19 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
server: Golfe2
content-length: 365
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 4cf0ccf2909be74efd7a89dbe4228ffb
b4993da334b48312584d116a3de4be4cd71962cf
e81c8aa45d0707079d9eba798fb447059042453be4834d14467839688ca66f5d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 14:25:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 9bfd33253208c9d034988400d66abd5d
8811fd76d9bc56c15431433f8f08d648185992ed
6382de7eb2bc0b40dc6d2e21ab8b6cb90cc0effe3241e3fb5008d2e4f626e92c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 14:25:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-25600410-6&cid=127406931.1675434351&jid=1926924821&_v=j99&z=505606371
216.58.207.228302 Found 0 B URL HTTP/2 www.google.com/ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-25600410-6&cid=127406931.1675434351&jid=1926924821&_v=j99&z=505606371
IP 216.58.207.228:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-25600410-6&cid=127406931.1675434351&jid=1926924821&_v=j99&z=505606371 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Referer: https://www.leovegas.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 03 Feb 2023 14:25:19 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
location: https://www.google.no/ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-25600410-6&cid=127406931.1675434351&jid=1926924821&_v=j99&z=505606371&slf_rd=1&random=1724472605
access-control-allow-origin: null
access-control-allow-credentials: true
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 0c15fd84f4711d994724c35236542194
c47d77fe5b373a86bd9a116bd8baac07ec746add
a210a4599baaa980674b456f020282cd470559b319be263fdcf9eaec7cff0d3b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 14:25:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.leovegas.com/getMeta
107.154.248.168200 OK 630 B IP 107.154.248.168:0
Hash 4f7d51886ab8ce78c5daf06777014c5d
b98d039ed34f117a5a8bfc05aa6a8c075e49d3ad
24f9251f4d8aefe21ce806639b8635ae5ed806fd7d0dfea7f5bcf1ec4a74a66d
GET /getMeta HTTP/1.1
Host: www.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.leovegas.com/en-no/livecasino?btag=667909_65C5EB0B14CC406CAED83E0A76BD6CCB&c=wd9ntcsm7snti6cm2cc3khkm&pid=3747044&bid=15012
Connection: keep-alive
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a3747044%2c%22BID%22%3a15012%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1675434316238)%5c%2f%22%2c%22CookieTag%22%3a%22150123747044451240919C2023231425%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%222803909610%7c1%22%7d%5d; leo-essentials=%7B%22cid%22%3A%2252cfd912-e549-4eb4-9913-041c5c778a36%22%7D; visid_incap_846569=hZEK2dUoTsqE1xXN3vqTLUwZ3WMAAAAAQUIPAAAAAAD5thl9R6cXZZLtb2TvIrby; nlbi_846569=7n9SXKSEeRmxfhFMTJV9qQAAAABgHyCCqJlWGELUBXcu+GsT; incap_ses_633_846569=ncIHBRwhXVy5DBuApd7ICEwZ3WMAAAAAQ/6lgLJj0b/eTXJyfhvzQw==; leobtag=667909_65C5EB0B14CC406CAED83E0A76BD6CCB; leonrpid=3747044; leonrbid=15012; leonrmeta=[{"value":"wd9ntcsm7snti6cm2cc3khkm","key":"c"}]
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 14:25:19 GMT
content-type: application/json; charset=utf-8
content-encoding: gzip
strict-transport-security: max-age=63072000;
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy: frame-ancestors 'self' *.leovegas.com *.casinomodule.com *.yggdrasilgaming.com *.evolutiongaming.com *.gameassists.co.uk *.gameassists.dk *.rgsgames.com *.wagerworks.com *.adform.com *.livetables.io *.regily.com *.casinoalternativen.com *.onlinecasinobonus24.xyz *.livetableshu.com
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
x-cdn: Imperva
x-iinfo: 4-31801040-31801047 PNNy RT(1675434315991 2911) q(0 0 0 -1) r(0 0) U12
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-25600410-6&cid=127406931.1675434351&jid=1926924821&_v=j99&z=505606371&slf_rd=1&random=1724472605
142.250.74.163200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-25600410-6&cid=127406931.1675434351&jid=1926924821&_v=j99&z=505606371&slf_rd=1&random=1724472605
IP 142.250.74.163:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-25600410-6&cid=127406931.1675434351&jid=1926924821&_v=j99&z=505606371&slf_rd=1&random=1724472605 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Referer: https://www.leovegas.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 03 Feb 2023 14:25:19 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
access-control-allow-origin: null
access-control-allow-credentials: true
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 2bef39ac599211fe23ad884ceacf1c9b
c19b32a600412658c49a3e55d5d8353a5101c31d
0ff4181df99351d3aa3490540d2f19474531fb07e13ee457b9339efab1a47ad9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 14:25:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sca1b.amazontrust.com/
54.230.245.39200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.39:0
Hash 82dcc4b4a636c2ac98e0285c1afef196
85f3cb4072d6c49f5fb99f05698f5afe7df80140
03186d323363d456e092687bd594baa68593880f9a25e42c9112c0205826781d
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Fri, 03 Feb 2023 14:25:19 GMT
Last-Modified: Fri, 03 Feb 2023 13:49:42 GMT
Server: ECS (nyb/1D0E)
X-Cache: Miss from cloudfront
Via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: guGA-0L_WT2v9TXAM69iIAz0kUSCpqGa5JK3Z0XMElobkbWyduCvcg==
Age: 2137
www.leovegas.com/api?relay
107.154.248.168200 OK 15 kB URL HTTP/2 www.leovegas.com/api?relay
IP 107.154.248.168:0
Hash 16748f816b2d0977e095bed79bd71c6d
1330d28d0506589d77a15e638cb1319af8303e1d
8f44630c352bf890e8b782e237bcb083e3014ff0bea0c48fb96bc5fb14ec349c
POST /api?relay HTTP/1.1
Host: www.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.leovegas.com/en-no/livecasino?btag=667909_65C5EB0B14CC406CAED83E0A76BD6CCB&c=wd9ntcsm7snti6cm2cc3khkm&pid=3747044&bid=15012
x-request-id: b986fb5b-3e2b-4ca7-ad7d-5544d93ea82c
content-type: application/json
x-leo-locale: en-no
Origin: https://www.leovegas.com
Content-Length: 10899
Connection: keep-alive
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a3747044%2c%22BID%22%3a15012%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1675434316238)%5c%2f%22%2c%22CookieTag%22%3a%22150123747044451240919C2023231425%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%222803909610%7c1%22%7d%5d; leo-essentials=%7B%22cid%22%3A%2252cfd912-e549-4eb4-9913-041c5c778a36%22%7D; visid_incap_846569=hZEK2dUoTsqE1xXN3vqTLUwZ3WMAAAAAQUIPAAAAAAD5thl9R6cXZZLtb2TvIrby; nlbi_846569=7n9SXKSEeRmxfhFMTJV9qQAAAABgHyCCqJlWGELUBXcu+GsT; incap_ses_633_846569=ncIHBRwhXVy5DBuApd7ICEwZ3WMAAAAAQ/6lgLJj0b/eTXJyfhvzQw==; leobtag=667909_65C5EB0B14CC406CAED83E0A76BD6CCB; leonrpid=3747044; leonrbid=15012; leonrmeta=[{"value":"wd9ntcsm7snti6cm2cc3khkm","key":"c"}]
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 14:25:19 GMT
content-type: application/json
content-encoding: gzip
strict-transport-security: max-age=63072000;
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy: frame-ancestors 'self' *.leovegas.com *.casinomodule.com *.yggdrasilgaming.com *.evolutiongaming.com *.gameassists.co.uk *.gameassists.dk *.rgsgames.com *.wagerworks.com *.adform.com *.livetables.io *.regily.com *.casinoalternativen.com *.onlinecasinobonus24.xyz *.livetableshu.com
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
x-cdn: Imperva
x-iinfo: 4-31801040-31801047 PNNy RT(1675434315991 2686) q(0 0 0 -1) r(2 2) U6
X-Firefox-Spdy: h2
track.adform.net/Serving/TrackPoint/?pm=497538&ADFPageName=Sc_Ret&ADFdivider=%7C&ord=316664629327&ADFtpmode=2&loc=https%3A%2F%2Fwww.leovegas.com%2Fen-no%2Flivecasino%3Fbtag%3D667909_65C5EB0B14CC406CAED83E0A76BD6CCB%26c%3Dwd9ntcsm7snti6cm2cc3khkm%26pid%3D3747044%26bid%3D15012&Set1=en-US%7Cen-US%7C1280x1024%7C24
37.157.4.40302 Found 1.0 kB URL HTTP/2 track.adform.net/Serving/TrackPoint/?pm=497538&ADFPageName=Sc_Ret&ADFdivider=%7C&ord=316664629327&ADFtpmode=2&loc=https%3A%2F%2Fwww.leovegas.com%2Fen-no%2Flivecasino%3Fbtag%3D667909_65C5EB0B14CC406CAED83E0A76BD6CCB%26c%3Dwd9ntcsm7snti6cm2cc3khkm%26pid%3D3747044%26bid%3D15012&Set1=en-US%7Cen-US%7C1280x1024%7C24
IP 37.157.4.40:0
Hash a5405befcbcc56f870dfc66e08b91a4d
eb51258aa013e7dd41b81ae8c89314419bb0de4f
e0c490a1d619dc070b322eb2ec41f06fb57cb05d13e5397826abac89f9d6d02d
GET /Serving/TrackPoint/?pm=497538&ADFPageName=Sc_Ret&ADFdivider=%7C&ord=316664629327&ADFtpmode=2&loc=https%3A%2F%2Fwww.leovegas.com%2Fen-no%2Flivecasino%3Fbtag%3D667909_65C5EB0B14CC406CAED83E0A76BD6CCB%26c%3Dwd9ntcsm7snti6cm2cc3khkm%26pid%3D3747044%26bid%3D15012&Set1=en-US%7Cen-US%7C1280x1024%7C24 HTTP/1.1
Host: track.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Fri, 03 Feb 2023 14:25:20 GMT
content-type: text/html; charset=utf-8
location: https://track.adform.net/Serving/TrackPoint/?CC=1&pm=497538&ADFPageName=Sc_Ret&ADFdivider=%7C&ord=316664629327&ADFtpmode=2&loc=https%3A%2F%2Fwww.leovegas.com%2Fen-no%2Flivecasino%3Fbtag%3D667909_65C5EB0B14CC406CAED83E0A76BD6CCB%26c%3Dwd9ntcsm7snti6cm2cc3khkm%26pid%3D3747044%26bid%3D15012&Set1=en-US%7Cen-US%7C1280x1024%7C24
cache-control: no-cache, no-store, must-revalidate, no-transform
pragma: no-cache
expires: -1
access-control-allow-origin: *
set-cookie: C=1; domain=adform.net; expires=Fri, 03-Mar-2023 14:25:20 GMT; path=/
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
dmp.adform.net/serving/cookie/match?party=1140&cid=&uid=-5932061713061764574
37.157.4.28302 Found 0 B URL HTTP/2 dmp.adform.net/serving/cookie/match?party=1140&cid=&uid=-5932061713061764574
IP 37.157.4.28:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /serving/cookie/match?party=1140&cid=&uid=-5932061713061764574 HTTP/1.1
Host: dmp.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Fri, 03 Feb 2023 14:25:20 GMT
content-length: 0
location: https://dmp.adform.net/serving/cookie/match?CC=1&party=1140&cid=&uid=-5932061713061764574
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: GET
access-control-allow-origin: *
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
set-cookie: C=1; expires=Fri, 03 Mar 2023 14:25:20 GMT; domain=adform.net; path=/
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
www.leovegas.com/mobile.sw.js?e=p
107.154.248.168200 OK 11 kB URL HTTP/2 www.leovegas.com/mobile.sw.js?e=p
IP 107.154.248.168:0
File type ASCII text, with very long lines (34776)
Hash 63cfb578e4b806f79f1c531d81ab3ca6
f8ec0faadea7b5871dc3461c0de77576691ba2fd
4744b20160952080d1ce9cfcfb21afb16305b4d86a4e008035ea14ae1e7e9cb9
GET /mobile.sw.js?e=p HTTP/1.1
Host: www.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Service-Worker: script
Connection: keep-alive
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a3747044%2c%22BID%22%3a15012%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1675434316238)%5c%2f%22%2c%22CookieTag%22%3a%22150123747044451240919C2023231425%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%222803909610%7c1%22%7d%5d; leo-essentials=%7B%22cid%22%3A%2252cfd912-e549-4eb4-9913-041c5c778a36%22%7D; visid_incap_846569=hZEK2dUoTsqE1xXN3vqTLUwZ3WMAAAAAQUIPAAAAAAD5thl9R6cXZZLtb2TvIrby; nlbi_846569=7n9SXKSEeRmxfhFMTJV9qQAAAABgHyCCqJlWGELUBXcu+GsT; incap_ses_633_846569=ncIHBRwhXVy5DBuApd7ICEwZ3WMAAAAAQ/6lgLJj0b/eTXJyfhvzQw==; leobtag=667909_65C5EB0B14CC406CAED83E0A76BD6CCB; leonrpid=3747044; leonrbid=15012; leonrmeta=[{"value":"wd9ntcsm7snti6cm2cc3khkm","key":"c"}]; _ga=GA1.2.127406931.1675434351; _gid=GA1.2.1940006320.1675434351; _gat_leo=1; leo_previous_page=https://www.leovegas.com/en-no/livecasino?btag=667909_65C5EB0B14CC406CAED83E0A76BD6CCB&c=wd9ntcsm7snti6cm2cc3khkm&pid=3747044&bid=15012
Sec-Fetch-Dest: serviceworker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 02 Feb 2023 14:53:33 GMT
content-type: application/javascript
content-length: 10707
content-encoding: gzip
cache-control: max-age=2867, public
expires: Fri, 03 Feb 2023 15:13:06 GMT
date: Fri, 03 Feb 2023 14:25:19 GMT
strict-transport-security: max-age=63072000
x-cdn: Imperva
x-iinfo: 4-31801040-0 0CNN RT(1675434315991 3918) q(0 -1 -1 -1) r(0 -1)
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 727 B IP 93.184.220.29:0
Hash 02c1079122d2bc7e5f0177cad64ccedc
b066b161e6583472c9460ae4feb85f482d15af76
d69cacc340a2ace5c57fc0d3a08aeef46a33eaaa354c0043304290bc5d84d078
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5162
Cache-Control: max-age=113835
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 14:25:20 GMT
Etag: "63dc1ed1-2d7"
Expires: Sat, 04 Feb 2023 22:02:35 GMT
Last-Modified: Thu, 02 Feb 2023 20:36:33 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 727
ocsp.sca1b.amazontrust.com/
54.230.245.39200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.39:0
Hash 07308e2792e098a562686d93be9915a5
d5991441fc250841adcf8748b4d18b782eb187db
d3c11617893bf0fa7e2ef9c352145ca7791bade596abd3eb90d48a8bfb04c857
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=141311
Date: Fri, 03 Feb 2023 14:25:20 GMT
Etag: "63dc86f6-1d7"
Expires: Sun, 05 Feb 2023 05:40:31 GMT
Last-Modified: Fri, 03 Feb 2023 04:00:54 GMT
Server: ECS (bsa/EB1C)
X-Cache: Miss from cloudfront
Via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: U-Tg6FfWbZ58yGW57-A0KdCO2gItF5H_u7tnEe-4BmyFYwOe9yhyYw==
Age: 5977
ocsp.sca1b.amazontrust.com/
54.230.245.39200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.39:0
Hash 07308e2792e098a562686d93be9915a5
d5991441fc250841adcf8748b4d18b782eb187db
d3c11617893bf0fa7e2ef9c352145ca7791bade596abd3eb90d48a8bfb04c857
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=141343
Date: Fri, 03 Feb 2023 14:25:20 GMT
Etag: "63dc86f6-1d7"
Expires: Sun, 05 Feb 2023 05:41:03 GMT
Last-Modified: Fri, 03 Feb 2023 04:00:54 GMT
Server: ECS (nyb/1D19)
X-Cache: Miss from cloudfront
Via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: puIiGwr_JYqXctPVXenFn_y8gVzpyBYPnPishcKW35xQRZqthxDhFg==
Age: 6009
ocsp.pki.goog/s/gts1d4/1vmhpXYvMQg
142.250.74.131200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/1vmhpXYvMQg
IP 142.250.74.131:0
Hash 18d1991491b3b6e478bc4ecbb7736337
3bdae0c9824493fca93a6438dc0227ef85ca9ccc
e9913a2d9555fa1758d8c61f6c733e7d0f4073a849dcbd8eb7cd7dc2ccad2109
POST /s/gts1d4/1vmhpXYvMQg HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 14:25:20 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
e1.o.lencr.org/
23.36.77.32200 OK 345 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 52104a66aec82cdc03b5303ba4b4e1b4
dc842551cf50a7dedb5f464e99f2065523a38d7e
b07cb29953de589ab181e3a13bf30bc70351a215c1d5c207cc71ef5114a6d7a9
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "B07CB29953DE589AB181E3A13BF30BC70351A215C1D5C207CC71EF5114A6D7A9"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3038
Expires: Fri, 03 Feb 2023 15:15:58 GMT
Date: Fri, 03 Feb 2023 14:25:20 GMT
Connection: keep-alive
events.launchdarkly.com/events/diagnostic/5b9627a39619fd15611a390c
52.20.73.201204 No Content 0 B URL HTTP/2 events.launchdarkly.com/events/diagnostic/5b9627a39619fd15611a390c
IP 52.20.73.201:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /events/diagnostic/5b9627a39619fd15611a390c HTTP/1.1
Host: events.launchdarkly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-launchdarkly-user-agent
Referer: https://www.leovegas.com/
Origin: https://www.leovegas.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Fri, 03 Feb 2023 14:25:20 GMT
access-control-allow-headers: Accept,Content-Type,Content-Length,Accept-Encoding,X-LaunchDarkly-Event-Schema,X-LaunchDarkly-User-Agent,X-LaunchDarkly-Payload-ID,X-LaunchDarkly-Wrapper,X-LaunchDarkly-Tags
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Date
access-control-max-age: 300
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
tgtag.io/tg.js?pid=tg-g-002415-002
34.120.230.83200 OK 32 kB URL HTTP/2 tgtag.io/tg.js?pid=tg-g-002415-002
IP 34.120.230.83:0
File type Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Hash 508072c63a35c84745dd1ef33706f34f
5db9b0f2db74f01c0a450f7c0a5d0901cc61d749
f10eba601f45922924f18cd57fdf391d29bacdf5098e3d0433b0d8b58c5d3358
GET /tg.js?pid=tg-g-002415-002 HTTP/1.1
Host: tgtag.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycdvO014vHksGTOU0po9v9OfeXkhKr-M4k39OIo8ldAlwf5bPbTaW5XO_fT3RZdfkd0ymb8uowmdnWP2UHtltOzBKZ19CLTyq
vary: X-Goog-Allowed-Resources
x-goog-generation: 1675327980026762
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 31667
content-encoding: gzip
x-goog-hash: crc32c=oV25fg==, md5=UIByxjo1yEdF3R7zNwbzTw==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 31667
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Access-Control-Allow-Origin
server: UploadServer
date: Fri, 03 Feb 2023 08:57:00 GMT
expires: Sat, 04 Feb 2023 08:57:00 GMT
cache-control: public, no-transform, max-age=86400, s-maxage=86400
age: 19700
last-modified: Thu, 02 Feb 2023 08:53:00 GMT
etag: "508072c63a35c84745dd1ef33706f34f"
content-type: application/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 636897389814ca4d23aa4009b8fb1458
14394dbd8f0e226b71e1bd35c6da2278828feae4
85bcc6e816cf5ea2028e9dc4862f3de068d0606949b3fef3fcc5b32fab37ad86
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 14:25:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
9915903.fls.doubleclick.net/activityi;src=9915903;type=pagev0;cat=pagev0;ord=1675434351758.qqlv4mrf;gtm=45Fe3210;auiddc=523731217.1675434352;u4=livecasino;~oref=https%3A%2F%2Fwww.leovegas.com%2Fen-no%2Flivecasino%3Fbtag%3D667909_65C5EB0B14CC406CAED83E0A76BD6CCB%26c%3Dwd9ntcsm7snti6cm2cc3khkm%26pid%3D3747044%26bid%3D15012?
142.250.74.6200 OK 328 B URL HTTP/2 9915903.fls.doubleclick.net/activityi;src=9915903;type=pagev0;cat=pagev0;ord=1675434351758.qqlv4mrf;gtm=45Fe3210;auiddc=523731217.1675434352;u4=livecasino;~oref=https%3A%2F%2Fwww.leovegas.com%2Fen-no%2Flivecasino%3Fbtag%3D667909_65C5EB0B14CC406CAED83E0A76BD6CCB%26c%3Dwd9ntcsm7snti6cm2cc3khkm%26pid%3D3747044%26bid%3D15012?
IP 142.250.74.6:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (599), with no line terminators
Hash 31eb8bf35f83820914c89ba22d03caa1
5bd7f5bb73e9ab7f741b758b4b4cdce7853aac15
dcc4d40772ab8f59c250b0f85f017c18267275c06f7e560b92f8c576d40e60bf
GET /activityi;src=9915903;type=pagev0;cat=pagev0;ord=1675434351758.qqlv4mrf;gtm=45Fe3210;auiddc=523731217.1675434352;u4=livecasino;~oref=https%3A%2F%2Fwww.leovegas.com%2Fen-no%2Flivecasino%3Fbtag%3D667909_65C5EB0B14CC406CAED83E0A76BD6CCB%26c%3Dwd9ntcsm7snti6cm2cc3khkm%26pid%3D3747044%26bid%3D15012? HTTP/1.1
Host: 9915903.fls.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.leovegas.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 03 Feb 2023 14:25:20 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
strict-transport-security: max-age=21600
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 328
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 03-Feb-2023 14:40:20 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/1vmhpXYvMQg
142.250.74.131200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/1vmhpXYvMQg
IP 142.250.74.131:0
Hash 18d1991491b3b6e478bc4ecbb7736337
3bdae0c9824493fca93a6438dc0227ef85ca9ccc
e9913a2d9555fa1758d8c61f6c733e7d0f4073a849dcbd8eb7cd7dc2ccad2109
POST /s/gts1d4/1vmhpXYvMQg HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 14:25:20 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
dmp.adform.net/serving/cookie/match?CC=1&party=1140&cid=&uid=-5932061713061764574
37.157.4.28200 OK 78 B URL HTTP/2 dmp.adform.net/serving/cookie/match?CC=1&party=1140&cid=&uid=-5932061713061764574
IP 37.157.4.28:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash ca84afbb31eaee46b2cde4c562094d80
5494b13426a3e6c4a85b441b156d4f39790e8ebc
9120f5d55467d793f0ca17f52bfcb4b79252f6c050ee1fa35489aeca1ba8268c
GET /serving/cookie/match?CC=1&party=1140&cid=&uid=-5932061713061764574 HTTP/1.1
Host: dmp.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.leovegas.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 14:25:20 GMT
content-type: image/gif
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: GET
access-control-allow-origin: *
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 636897389814ca4d23aa4009b8fb1458
14394dbd8f0e226b71e1bd35c6da2278828feae4
85bcc6e816cf5ea2028e9dc4862f3de068d0606949b3fef3fcc5b32fab37ad86
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 14:25:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
events.launchdarkly.com/events/diagnostic/5b9627a39619fd15611a390c
52.20.73.201202 Accepted 0 B URL HTTP/2 events.launchdarkly.com/events/diagnostic/5b9627a39619fd15611a390c
IP 52.20.73.201:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /events/diagnostic/5b9627a39619fd15611a390c HTTP/1.1
Host: events.launchdarkly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-LaunchDarkly-User-Agent: JSClient/2.24.2
Content-Length: 797
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 202 Accepted
date: Fri, 03 Feb 2023 14:25:20 GMT
content-type: application/json
content-length: 0
access-control-allow-headers: Accept,Content-Type,Content-Length,Accept-Encoding,X-LaunchDarkly-Event-Schema,X-LaunchDarkly-User-Agent,X-LaunchDarkly-Payload-ID,X-LaunchDarkly-Wrapper,X-LaunchDarkly-Tags
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Date
access-control-max-age: 300
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
e1.o.lencr.org/
23.36.77.32200 OK 345 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 52104a66aec82cdc03b5303ba4b4e1b4
dc842551cf50a7dedb5f464e99f2065523a38d7e
b07cb29953de589ab181e3a13bf30bc70351a215c1d5c207cc71ef5114a6d7a9
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "B07CB29953DE589AB181E3A13BF30BC70351A215C1D5C207CC71EF5114A6D7A9"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3038
Expires: Fri, 03 Feb 2023 15:15:58 GMT
Date: Fri, 03 Feb 2023 14:25:20 GMT
Connection: keep-alive
ocsp.pki.goog/s/gts1d4/M7vREfWOEdc
142.250.74.131200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/M7vREfWOEdc
IP 142.250.74.131:0
Hash 55ab08c0d1309c545cc97afdacd7aaae
68eeadc614db9949019898dbd5c057031d711b30
055c62d9409b4f79f22ea5f72b9d2e81f93c422ebae63acdb9f68caff95c8364
POST /s/gts1d4/M7vREfWOEdc HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 14:25:20 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 0c15fd84f4711d994724c35236542194
c47d77fe5b373a86bd9a116bd8baac07ec746add
a210a4599baaa980674b456f020282cd470559b319be263fdcf9eaec7cff0d3b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 14:25:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
adservice.google.com/ddm/fls/i/src=9915903;type=pagev0;cat=pagev0;ord=1675434351758.qqlv4mrf;gtm=45Fe3210;auiddc=523731217.1675434352;u4=livecasino;~oref=https%3A%2F%2Fwww.leovegas.com%2Fen-no%2Flivecasino%3Fbtag%3D667909_65C5EB0B14CC406CAED83E0A76BD6CCB%26c%3Dwd9ntcsm7snti6cm2cc3khkm%26pid%3D3747044%26bid%3D15012
142.250.74.162200 OK 332 B URL HTTP/2 adservice.google.com/ddm/fls/i/src=9915903;type=pagev0;cat=pagev0;ord=1675434351758.qqlv4mrf;gtm=45Fe3210;auiddc=523731217.1675434352;u4=livecasino;~oref=https%3A%2F%2Fwww.leovegas.com%2Fen-no%2Flivecasino%3Fbtag%3D667909_65C5EB0B14CC406CAED83E0A76BD6CCB%26c%3Dwd9ntcsm7snti6cm2cc3khkm%26pid%3D3747044%26bid%3D15012
IP 142.250.74.162:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (598), with no line terminators
Hash 30277dfe18552e81ec780e9adbaa69ee
45a5f4d1a92a2faacc2231d701254285ebcfb15a
7745dec1d79880a1c7bc5c56982173fca1a0474d78238f3daa6fe1935e8b6662
GET /ddm/fls/i/src=9915903;type=pagev0;cat=pagev0;ord=1675434351758.qqlv4mrf;gtm=45Fe3210;auiddc=523731217.1675434352;u4=livecasino;~oref=https%3A%2F%2Fwww.leovegas.com%2Fen-no%2Flivecasino%3Fbtag%3D667909_65C5EB0B14CC406CAED83E0A76BD6CCB%26c%3Dwd9ntcsm7snti6cm2cc3khkm%26pid%3D3747044%26bid%3D15012 HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9915903.fls.doubleclick.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 03 Feb 2023 14:25:20 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 332
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
api.trafficguard.ai/tg-g-002415-002/api/v4/client-side/validate/event
34.120.121.20200 OK 61 B URL HTTP/2 api.trafficguard.ai/tg-g-002415-002/api/v4/client-side/validate/event
IP 34.120.121.20:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 1ee7cd02b35c7097455eca23d537d40b
f95ae0ab0201aaef86698c9ac66d680fd4e046a0
18cccf9f3ae615df065ef20111e050bb202254d4cf780c150927f51d00d6bffc
POST /tg-g-002415-002/api/v4/client-side/validate/event HTTP/1.1
Host: api.trafficguard.ai
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded;charset=UTF-8
Content-Length: 2200
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expect-ct: max-age=0, report-uri="https://trafficguard.report-uri.com/r/d/ct/reportOnly"
x-xss-protection: 0
x-content-type-options: nosniff
access-control-allow-origin: https://www.leovegas.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-Requested-With, Access-Control-Allow-Origin, Access-Control-Allow-Credentials
set-cookie: geid=03010037-ef0c-4b37-b500-0ae563dd1950; Domain=.trafficguard.ai; Path=/; Expires=Sat, 03 Feb 2024 14:25:20 GMT; HttpOnly; Secure; SameSite=None
geid-legacy=03010037-ef0c-4b37-b500-0ae563dd1950; Domain=.trafficguard.ai; Path=/; Expires=Sat, 03 Feb 2024 14:25:20 GMT; HttpOnly
content-type: application/json; charset=utf-8
content-length: 61
etag: W/"3d-+VrgqwIBqu+GaYyaxm1oD9TgRqA"
date: Fri, 03 Feb 2023 14:25:20 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/M7vREfWOEdc
142.250.74.131200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/M7vREfWOEdc
IP 142.250.74.131:0
Hash 55ab08c0d1309c545cc97afdacd7aaae
68eeadc614db9949019898dbd5c057031d711b30
055c62d9409b4f79f22ea5f72b9d2e81f93c422ebae63acdb9f68caff95c8364
POST /s/gts1d4/M7vREfWOEdc HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 14:25:21 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
adservice.google.no/ddm/fls/i/src=9915903;type=pagev0;cat=pagev0;ord=1675434351758.qqlv4mrf;gtm=45Fe3210;auiddc=523731217.1675434352;u4=livecasino;~oref=https%3A%2F%2Fwww.leovegas.com%2Fen-no%2Flivecasino%3Fbtag%3D667909_65C5EB0B14CC406CAED83E0A76BD6CCB%26c%3Dwd9ntcsm7snti6cm2cc3khkm%26pid%3D3747044%26bid%3D15012
142.250.74.98200 OK 85 B URL HTTP/2 adservice.google.no/ddm/fls/i/src=9915903;type=pagev0;cat=pagev0;ord=1675434351758.qqlv4mrf;gtm=45Fe3210;auiddc=523731217.1675434352;u4=livecasino;~oref=https%3A%2F%2Fwww.leovegas.com%2Fen-no%2Flivecasino%3Fbtag%3D667909_65C5EB0B14CC406CAED83E0A76BD6CCB%26c%3Dwd9ntcsm7snti6cm2cc3khkm%26pid%3D3747044%26bid%3D15012
IP 142.250.74.98:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with no line terminators
Hash 4a3b3637744caa4a0b08fabbd76cc830
755e5626762ecf38f55012da892a227bf50f15f1
6a12009f3d99f10dd5acb27389beefed79eddd7fa55ddcc591baf92861d51bfb
GET /ddm/fls/i/src=9915903;type=pagev0;cat=pagev0;ord=1675434351758.qqlv4mrf;gtm=45Fe3210;auiddc=523731217.1675434352;u4=livecasino;~oref=https%3A%2F%2Fwww.leovegas.com%2Fen-no%2Flivecasino%3Fbtag%3D667909_65C5EB0B14CC406CAED83E0A76BD6CCB%26c%3Dwd9ntcsm7snti6cm2cc3khkm%26pid%3D3747044%26bid%3D15012 HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adservice.google.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 03 Feb 2023 14:25:21 GMT
expires: Fri, 03 Feb 2023 14:25:21 GMT
cache-control: private, max-age=0
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 85
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
websdk.appsflyer.com/?st=pba&
95.101.10.58200 OK 9.6 kB URL HTTP/1.1 websdk.appsflyer.com/?st=pba&
IP 95.101.10.58:0
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (21856)
Hash 1214b03c1da1942cfdd2183b216ba3c8
1a46d03ac7bd9bae1b849b610918d1fbe18efe76
ba7e3eba24eaccfae9be9adda9397b5a1692da83bddc9b1e08e2d9700ac271f0
GET /?st=pba& HTTP/1.1
Host: websdk.appsflyer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: M44pSGH6vcjNlP5UaqybVYuuWdAAnTeV9hRgNPOK/tpE3okTq2NYkjNTtxo9PK8D2YrCkCdNTsE=
x-amz-request-id: DAGQS2QYCYYEYGCY
Last-Modified: Thu, 26 Jan 2023 08:01:30 GMT
ETag: "3f70a47c03cc36fb3ee43dea835e4d0d"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/javascript
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=606
Expires: Fri, 03 Feb 2023 14:35:27 GMT
Date: Fri, 03 Feb 2023 14:25:21 GMT
Content-Length: 9578
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash ede42358dbe8cf2e6b7e6a2653774d01
5dc8ca0b929f04fb15c7ff81d0a9decda023b7fb
8e841815d41c4ade06e328cb1ffb9be342640167ec6acb658f6b4b373e23a52a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2780
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 14:25:21 GMT
Last-Modified: Fri, 03 Feb 2023 13:39:01 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471
connect.facebook.net/en_US/fbevents.js
31.13.72.12200 OK 28 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP 31.13.72.12:0
File type ASCII text, with very long lines (64348)
Hash dd1f85cc598419df61e254e53f9ec1ef
f86c0ee563f5b7a01e1d40b566f2bc184a32380f
c06f52b233c835b03292f39cb847507a03bb971066bf91341b58a580244398c0
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
report-to: {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/?minimize=0"}],"group":"coep_report"}
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: 4hQJpUDdnT6oyGSdi2tz8fgWa0WBVLySeK4kObgCS6FCyOWjyk3BeA58gGVbqoxXYbQzypEiS7+67qxMRPX9fg==
priority: u=3,i
content-length: 27843
x-fb-trip-id: 1904183273
date: Fri, 03 Feb 2023 14:25:21 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash ede42358dbe8cf2e6b7e6a2653774d01
5dc8ca0b929f04fb15c7ff81d0a9decda023b7fb
8e841815d41c4ade06e328cb1ffb9be342640167ec6acb658f6b4b373e23a52a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2780
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 14:25:21 GMT
Last-Modified: Fri, 03 Feb 2023 13:39:01 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471
vars.hotjar.com/box-e031119f9e9e307a08fa610f85dbfb52.html
143.204.55.20200 OK 1.0 kB URL HTTP/2 vars.hotjar.com/box-e031119f9e9e307a08fa610f85dbfb52.html
IP 143.204.55.20:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2368), with no line terminators
Hash 112fdf47cdb80b9ce3d033ed09717460
3898efa86cbf1b64dc41a90a110ed5afd6f2ae13
3bfb2e882091d872eece2eee40084183a5fcb0a7ed98c1b004850751260a4cbb
GET /box-e031119f9e9e307a08fa610f85dbfb52.html HTTP/1.1
Host: vars.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.leovegas.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html
content-length: 1034
date: Fri, 03 Feb 2023 13:10:06 GMT
accept-ranges: bytes
cache-control: max-age=31536000
content-encoding: br
cross-origin-embedder-policy: require-corp
cross-origin-resource-policy: cross-origin
etag: "112fdf47cdb80b9ce3d033ed09717460"
last-modified: Fri, 03 Feb 2023 13:09:45 GMT
strict-transport-security: max-age=2592000; includeSubDomains
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 057fdebf738f5915bf38a78949190758.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: EML8r5wTYDyVzQXeY-i57K9tmksgvx0QUDwJuOk7hOM1JzaUM3e3rw==
age: 4515
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 280 B IP 93.184.220.29:0
Hash 290b43ca76247f65621573ca2ea04b87
951b8d946f5e062a35261aa9b9f996a0f02e5da3
6ac897014ed6a38c36580b5809b3d92c991c7896cde3e3fe4966e3048970196c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4833
Cache-Control: max-age=89786
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 14:25:21 GMT
Etag: "63dbc22a-118"
Expires: Sat, 04 Feb 2023 15:21:47 GMT
Last-Modified: Thu, 02 Feb 2023 14:01:14 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 280
script.hotjar.com/modules.bca0d1c28285412bb689.js
54.230.111.93200 OK 68 kB URL HTTP/2 script.hotjar.com/modules.bca0d1c28285412bb689.js
IP 54.230.111.93:0
File type Unicode text, UTF-8 text, with very long lines (49086)
Hash e923aa360dc485b9df86355bd040c998
03c46dbd41e9d4bdf8a9e4bfbaba3f7f2e9280ec
9c7575553c5b81f9b905dbb27c8116b175b69e7472aa6597f8cace1c6434d676
GET /modules.bca0d1c28285412bb689.js HTTP/1.1
Host: script.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 67924
date: Fri, 03 Feb 2023 13:10:06 GMT
accept-ranges: bytes
access-control-allow-origin: *
cache-control: max-age=31536000
content-encoding: br
cross-origin-resource-policy: cross-origin
etag: "e923aa360dc485b9df86355bd040c998"
last-modified: Fri, 03 Feb 2023 13:09:45 GMT
strict-transport-security: max-age=2592000; includeSubDomains
x-content-type-options: nosniff
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: zhTIctdnf2GZgqccfIP5fF4emoWx3y5r0XEXZ476l_-YXw6g6eVXzA==
age: 4515
X-Firefox-Spdy: h2
track.adform.net/Serving/TrackPoint/?CC=1&pm=497538&ADFPageName=pageview&ADFdivider=%7C&ord=359649083331&ADFtpmode=2&loc=https%3A%2F%2Fwww.leovegas.com%2Fen-no%2Flivecasino%3Fbtag%3D667909_65C5EB0B14CC406CAED83E0A76BD6CCB%26c%3Dwd9ntcsm7snti6cm2cc3khkm%26pid%3D3747044%26bid%3D15012&Set1=en-US%7Cen-US%7C1280x1024%7C24
37.157.4.40200 OK 701 B URL HTTP/2 track.adform.net/Serving/TrackPoint/?CC=1&pm=497538&ADFPageName=pageview&ADFdivider=%7C&ord=359649083331&ADFtpmode=2&loc=https%3A%2F%2Fwww.leovegas.com%2Fen-no%2Flivecasino%3Fbtag%3D667909_65C5EB0B14CC406CAED83E0A76BD6CCB%26c%3Dwd9ntcsm7snti6cm2cc3khkm%26pid%3D3747044%26bid%3D15012&Set1=en-US%7Cen-US%7C1280x1024%7C24
IP 37.157.4.40:0
File type HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash ee3d6dc4ff74dc0af805ba9cdc341812
4cee760b391a9c99555c8b21af8ebb8fb1404701
b3a06976769de16535b78d0f363ccffa8e040e436964609f594465ea933ab692
GET /Serving/TrackPoint/?CC=1&pm=497538&ADFPageName=pageview&ADFdivider=%7C&ord=359649083331&ADFtpmode=2&loc=https%3A%2F%2Fwww.leovegas.com%2Fen-no%2Flivecasino%3Fbtag%3D667909_65C5EB0B14CC406CAED83E0A76BD6CCB%26c%3Dwd9ntcsm7snti6cm2cc3khkm%26pid%3D3747044%26bid%3D15012&Set1=en-US%7Cen-US%7C1280x1024%7C24 HTTP/1.1
Host: track.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.leovegas.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 14:25:21 GMT
content-type: text/javascript; charset=utf-8
content-length: 701
cache-control: no-cache, no-store, must-revalidate, no-transform
pragma: no-cache
content-encoding: gzip
expires: -1
vary: Accept-Encoding
access-control-allow-origin: *
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
54.230.245.39200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.39:0
Hash 629194259441fb6d8040a8bf0f8c4d03
06e4f473080fd8597bc61e96c93c3ef32212849e
91eb005c9cf3ba90626799083f3e96b7a374a1cacb80f38d58f4ac93d5a1f07f
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=150724
Date: Fri, 03 Feb 2023 14:25:21 GMT
Etag: "63dcb6cc-1d7"
Expires: Sun, 05 Feb 2023 08:17:25 GMT
Last-Modified: Fri, 03 Feb 2023 07:25:00 GMT
Server: ECS (nyb/1D0D)
X-Cache: Miss from cloudfront
Via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Bbc-lUN8ySVNiB7HQXIs5js1DdKg3xdd-1TK01CYP8MMln0AKx9ZSQ==
Age: 3145
wa.onelink.me/v1/onelink
52.210.10.85200 OK 88 kB IP 52.210.10.85:0
File type gzip compressed data, from Unix\012- data
Hash a576d8f12fec79900efcca4672aca9c0
ed39f7b0208ab5bc061bcb50fe79e8dbf236ded4
3652bde440f8be585e605eda21ce7f2d24eb5b7a61ee75d52b19263b6d8838a3
GET /v1/onelink HTTP/1.1
Host: wa.onelink.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Origin: https://www.leovegas.com
Content-Type: application/json
Date: Fri, 03 Feb 2023 14:25:21 GMT
Content-Length: 13
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 280 B IP 93.184.220.29:0
Hash 290b43ca76247f65621573ca2ea04b87
951b8d946f5e062a35261aa9b9f996a0f02e5da3
6ac897014ed6a38c36580b5809b3d92c991c7896cde3e3fe4966e3048970196c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4833
Cache-Control: max-age=89786
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 14:25:21 GMT
Etag: "63dbc22a-118"
Expires: Sat, 04 Feb 2023 15:21:47 GMT
Last-Modified: Thu, 02 Feb 2023 14:01:14 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 280
ocsp.digicert.com/
93.184.220.29200 OK 280 B IP 93.184.220.29:0
Hash f1dfaaafd2cd035f83610a4e903d28ad
3eb4261fe67335b262de43c29ee98408303057b4
5764e50d02ccf50b636c4ee446856f279b90c3b02e1d0e01e7932da9c9b36d07
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4379
Cache-Control: max-age=114165
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 14:25:21 GMT
Etag: "63dc232b-118"
Expires: Sat, 04 Feb 2023 22:08:06 GMT
Last-Modified: Thu, 02 Feb 2023 20:55:07 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 280
ocsp.r2m01.amazontrust.com/
54.230.80.227200 OK 471 B URL HTTP/1.1 ocsp.r2m01.amazontrust.com/
IP 54.230.80.227:0
Hash 810791ce91fffe56bb91ba6f17163139
b60208bda10423b7a0ac4cf805813b4b2958fb66
7983b12f34dde567d8922c779fe13046ed24576117353a8fb1ac0c4957599d72
POST / HTTP/1.1
Host: ocsp.r2m01.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=130366
Date: Fri, 03 Feb 2023 14:25:21 GMT
Etag: "63dc5a06-1d7"
Expires: Sun, 05 Feb 2023 02:38:07 GMT
Last-Modified: Fri, 03 Feb 2023 00:49:10 GMT
Server: ECS (nyb/1D04)
X-Cache: Miss from cloudfront
Via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: nQoyeTpP-VgDg1P-xYHs0WUyqJIRJlt7FcDMciymtnHyW3urlpjoxQ==
Age: 6538
wa.appsflyer.com/events?site-id=6d3a3941-6835-4f61-8644-5e8746828ef8
52.213.22.211200 OK 76 B URL HTTP/1.1 wa.appsflyer.com/events?site-id=6d3a3941-6835-4f61-8644-5e8746828ef8
IP 52.213.22.211:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 69510140f624f17cb853952376d4e531
a0bec019c100933f1ee41900f34f2a31ed4941ef
cda44e12ff7ac8319052390e7d25eaa1324c373855d3395725add02e8b7d5d93
POST /events?site-id=6d3a3941-6835-4f61-8644-5e8746828ef8 HTTP/1.1
Host: wa.appsflyer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: text/plain
Content-Length: 1575
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Origin: https://www.leovegas.com
Content-Type: application/json
Date: Fri, 03 Feb 2023 14:25:21 GMT
Set-Cookie: af_id=a64bbd2a-459d-4013-a33f-7f19d2a73a56-p; Domain=appsflyer.com; Expires=Sun, 02 Feb 2025 14:25:21 GMT
Content-Length: 76
Connection: keep-alive
www.facebook.com/tr/?id=1403116046706561&ev=PageView&dl=https%3A%2F%2Fwww.leovegas.com%2Fen-no%2Flivecasino%3Fbtag%3D667909_65C5EB0B14CC406CAED83E0A76BD6CCB%26c%3Dwd9ntcsm7snti6cm2cc3khkm%26pid%3D3747044%26bid%3D15012&rl=&if=false&ts=1675434352819&sw=1280&sh=1024&v=2.9.95&r=stable&ec=0&o=30&fbp=fb.1.1675434352818.1917030987&it=1675434352461&coo=false&tm=1&rqm=GET
31.13.72.36200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=1403116046706561&ev=PageView&dl=https%3A%2F%2Fwww.leovegas.com%2Fen-no%2Flivecasino%3Fbtag%3D667909_65C5EB0B14CC406CAED83E0A76BD6CCB%26c%3Dwd9ntcsm7snti6cm2cc3khkm%26pid%3D3747044%26bid%3D15012&rl=&if=false&ts=1675434352819&sw=1280&sh=1024&v=2.9.95&r=stable&ec=0&o=30&fbp=fb.1.1675434352818.1917030987&it=1675434352461&coo=false&tm=1&rqm=GET
IP 31.13.72.36:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=1403116046706561&ev=PageView&dl=https%3A%2F%2Fwww.leovegas.com%2Fen-no%2Flivecasino%3Fbtag%3D667909_65C5EB0B14CC406CAED83E0A76BD6CCB%26c%3Dwd9ntcsm7snti6cm2cc3khkm%26pid%3D3747044%26bid%3D15012&rl=&if=false&ts=1675434352819&sw=1280&sh=1024&v=2.9.95&r=stable&ec=0&o=30&fbp=fb.1.1675434352818.1917030987&it=1675434352461&coo=false&tm=1&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Fri, 03 Feb 2023 14:25:21 GMT
X-Firefox-Spdy: h2
members.bet365.com/Members/Helpers/DefaultAff.aspx?affiliate=365_01089727&enableDeviceDetection=1&prdid=1&platform=0&rurl=https%3A%2F%2Fmembers.bet365.com%2FMembers%2FHelpers%2FDefaultAff.aspx%3Faffiliate%3D365_01089727%26BCTID%3D1560100313%26enableDeviceDetection%3D1%26prdid%3D1%26platform%3D0&DisplayMode=Desktop
5.226.179.10200 OK 177 B URL HTTP/1.1 members.bet365.com/Members/Helpers/DefaultAff.aspx?affiliate=365_01089727&enableDeviceDetection=1&prdid=1&platform=0&rurl=https%3A%2F%2Fmembers.bet365.com%2FMembers%2FHelpers%2FDefaultAff.aspx%3Faffiliate%3D365_01089727%26BCTID%3D1560100313%26enableDeviceDetection%3D1%26prdid%3D1%26platform%3D0&DisplayMode=Desktop
IP 5.226.179.10:0
ASN #209242 Cloudflare London, LLC
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 475774a26d4f30240a3534bcbd2fd161
9fd7b986673786b4fc80943b330bd1c03256049e
f7541d6ca43b4da74a89ec05885dceabf1a4af132d36326cf7974a47c904c811
GET /Members/Helpers/DefaultAff.aspx?affiliate=365_01089727&enableDeviceDetection=1&prdid=1&platform=0&rurl=https%3A%2F%2Fmembers.bet365.com%2FMembers%2FHelpers%2FDefaultAff.aspx%3Faffiliate%3D365_01089727%26BCTID%3D1560100313%26enableDeviceDetection%3D1%26prdid%3D1%26platform%3D0&DisplayMode=Desktop HTTP/1.1
Host: members.bet365.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://products.admaxium.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 14:25:21 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 177
Connection: keep-alive
Cache-Control: private
Content-Encoding: gzip
Vary: Accept-Encoding
ME-Redirect: PQB
CF-Cache-Status: DYNAMIC
Set-Cookie: Affiliates=Code=365_01089727%2f166048446652&prd=Sports; domain=.bet365.com; expires=Mon, 20-Mar-2023 14:25:21 GMT; path=/; secure
session=processform=0; path=/; secure
pstk=79C977337F08C37A93FCA7BD4314DA6A000003; domain=.bet365.com; path=/; secure
__cf_bm=ocKn_pFR7CoJzoNBn6yrKKGDikqIqj49T2u4G9NpB9Q-1675434321-0-AZs1oPZH3WnPi5UbG7E3BYIndaqrQtIcfQ0NUlDVDZlSkSa6Bhb7sKhnHC8V8y9Byc9v1y5y7sq0uYEZqDZcMiA=; path=/; expires=Fri, 03-Feb-23 14:55:21 GMT; domain=.bet365.com; HttpOnly; Secure; SameSite=None
Server: cloudflare
CF-RAY: 793bd5decbba0b02-OSL
wa.onelink.me/v1/onelink?af_id=a64bbd2a-459d-4013-a33f-7f19d2a73a56-p
52.210.10.85200 OK 51 B URL HTTP/1.1 wa.onelink.me/v1/onelink?af_id=a64bbd2a-459d-4013-a33f-7f19d2a73a56-p
IP 52.210.10.85:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 1917dfcb917a288cc9ae89254a3cb97e
6d405c6b627b08206bca489f69b42ff96a62bd07
d50cb9807402a88c6dc3f7f0487c53d132e5a2bc336a1aeba817bea67af0eec1
GET /v1/onelink?af_id=a64bbd2a-459d-4013-a33f-7f19d2a73a56-p HTTP/1.1
Host: wa.onelink.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Origin: https://www.leovegas.com
Content-Type: application/json
Date: Fri, 03 Feb 2023 14:25:21 GMT
Set-Cookie: af_id=a64bbd2a-459d-4013-a33f-7f19d2a73a56-p; Path=/; Domain=onelink.me; Expires=Sun, 02 Feb 2025 14:25:21 GMT
Content-Length: 51
Connection: keep-alive
track.adform.net/Serving/TrackPoint/?CC=1&pm=497538&ADFPageName=Sc_Ret&ADFdivider=%7C&ord=18438296486&ADFtpmode=2&loc=https%3A%2F%2Fwww.leovegas.com%2Fen-no%2Flivecasino%3Fbtag%3D667909_65C5EB0B14CC406CAED83E0A76BD6CCB%26c%3Dwd9ntcsm7snti6cm2cc3khkm%26pid%3D3747044%26bid%3D15012&Set1=en-US%7Cen-US%7C1280x1024%7C24
37.157.4.40200 OK 573 B URL HTTP/2 track.adform.net/Serving/TrackPoint/?CC=1&pm=497538&ADFPageName=Sc_Ret&ADFdivider=%7C&ord=18438296486&ADFtpmode=2&loc=https%3A%2F%2Fwww.leovegas.com%2Fen-no%2Flivecasino%3Fbtag%3D667909_65C5EB0B14CC406CAED83E0A76BD6CCB%26c%3Dwd9ntcsm7snti6cm2cc3khkm%26pid%3D3747044%26bid%3D15012&Set1=en-US%7Cen-US%7C1280x1024%7C24
IP 37.157.4.40:0
File type HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 351c7a7421a138541018da39debee3ae
87f9afbf9bb4b440bc0eb139bd84c959c1cb5f2b
447c85044229bb6282b1cb85d1b0ff7344a36d34ece1d71ca1478272d27a0c86
GET /Serving/TrackPoint/?CC=1&pm=497538&ADFPageName=Sc_Ret&ADFdivider=%7C&ord=18438296486&ADFtpmode=2&loc=https%3A%2F%2Fwww.leovegas.com%2Fen-no%2Flivecasino%3Fbtag%3D667909_65C5EB0B14CC406CAED83E0A76BD6CCB%26c%3Dwd9ntcsm7snti6cm2cc3khkm%26pid%3D3747044%26bid%3D15012&Set1=en-US%7Cen-US%7C1280x1024%7C24 HTTP/1.1
Host: track.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.leovegas.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 14:25:21 GMT
content-type: text/javascript; charset=utf-8
content-length: 573
cache-control: no-cache, no-store, must-revalidate, no-transform
pragma: no-cache
content-encoding: gzip
expires: -1
vary: Accept-Encoding
access-control-allow-origin: *
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
events.launchdarkly.com/events/bulk/5b9627a39619fd15611a390c
52.20.73.201204 No Content 0 B URL HTTP/2 events.launchdarkly.com/events/bulk/5b9627a39619fd15611a390c
IP 52.20.73.201:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /events/bulk/5b9627a39619fd15611a390c HTTP/1.1
Host: events.launchdarkly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-launchdarkly-event-schema,x-launchdarkly-payload-id,x-launchdarkly-user-agent
Referer: https://www.leovegas.com/
Origin: https://www.leovegas.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Fri, 03 Feb 2023 14:25:22 GMT
access-control-allow-headers: Accept,Content-Type,Content-Length,Accept-Encoding,X-LaunchDarkly-Event-Schema,X-LaunchDarkly-User-Agent,X-LaunchDarkly-Payload-ID,X-LaunchDarkly-Wrapper,X-LaunchDarkly-Tags
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Date
access-control-max-age: 300
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
events.launchdarkly.com/events/bulk/5b9627a39619fd15611a390c
52.20.73.201202 Accepted 0 B URL HTTP/2 events.launchdarkly.com/events/bulk/5b9627a39619fd15611a390c
IP 52.20.73.201:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /events/bulk/5b9627a39619fd15611a390c HTTP/1.1
Host: events.launchdarkly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-LaunchDarkly-User-Agent: JSClient/2.24.2
X-LaunchDarkly-Event-Schema: 3
X-LaunchDarkly-Payload-ID: aa54ad60-a3ce-11ed-b929-cdb5d0e8cb6f
Content-Length: 5054
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 202 Accepted
date: Fri, 03 Feb 2023 14:25:22 GMT
content-type: application/json
content-length: 0
access-control-allow-headers: Accept,Content-Type,Content-Length,Accept-Encoding,X-LaunchDarkly-Event-Schema,X-LaunchDarkly-User-Agent,X-LaunchDarkly-Payload-ID,X-LaunchDarkly-Wrapper,X-LaunchDarkly-Tags
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Date
access-control-max-age: 300
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
static.hotjar.com/c/hotjar-380080.js?sv=7
54.230.111.66200 OK 0 B URL HTTP/2 static.hotjar.com/c/hotjar-380080.js?sv=7
IP 54.230.111.66:0
GET /c/hotjar-380080.js?sv=7 HTTP/1.1
Host: static.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
content-encoding: br
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=2592000; includeSubDomains
x-cache-hit: 1
x-content-type-options: nosniff
date: Fri, 03 Feb 2023 14:24:22 GMT
cache-control: max-age=60
etag: W/4a239a6be6dfa8f531a49c77ec9cbf7e
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: DN3m-mxEwQBbdZGO2Bay8zu89Ey0mNUSZbYgK84UWp2AjCI671IS5g==
age: 59
X-Firefox-Spdy: h2
track.adform.net/Serving/TrackPoint/?pm=497538&ADFPageName=Sc_Ret&ADFdivider=%7C&ord=18438296486&ADFtpmode=2&loc=https%3A%2F%2Fwww.leovegas.com%2Fen-no%2Flivecasino%3Fbtag%3D667909_65C5EB0B14CC406CAED83E0A76BD6CCB%26c%3Dwd9ntcsm7snti6cm2cc3khkm%26pid%3D3747044%26bid%3D15012&Set1=en-US%7Cen-US%7C1280x1024%7C24
37.157.4.40302 Found 0 B URL HTTP/2 track.adform.net/Serving/TrackPoint/?pm=497538&ADFPageName=Sc_Ret&ADFdivider=%7C&ord=18438296486&ADFtpmode=2&loc=https%3A%2F%2Fwww.leovegas.com%2Fen-no%2Flivecasino%3Fbtag%3D667909_65C5EB0B14CC406CAED83E0A76BD6CCB%26c%3Dwd9ntcsm7snti6cm2cc3khkm%26pid%3D3747044%26bid%3D15012&Set1=en-US%7Cen-US%7C1280x1024%7C24
IP 37.157.4.40:0
GET /Serving/TrackPoint/?pm=497538&ADFPageName=Sc_Ret&ADFdivider=%7C&ord=18438296486&ADFtpmode=2&loc=https%3A%2F%2Fwww.leovegas.com%2Fen-no%2Flivecasino%3Fbtag%3D667909_65C5EB0B14CC406CAED83E0A76BD6CCB%26c%3Dwd9ntcsm7snti6cm2cc3khkm%26pid%3D3747044%26bid%3D15012&Set1=en-US%7Cen-US%7C1280x1024%7C24 HTTP/1.1
Host: track.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Fri, 03 Feb 2023 14:25:21 GMT
content-type: text/html; charset=utf-8
location: https://track.adform.net/Serving/TrackPoint/?CC=1&pm=497538&ADFPageName=Sc_Ret&ADFdivider=%7C&ord=18438296486&ADFtpmode=2&loc=https%3A%2F%2Fwww.leovegas.com%2Fen-no%2Flivecasino%3Fbtag%3D667909_65C5EB0B14CC406CAED83E0A76BD6CCB%26c%3Dwd9ntcsm7snti6cm2cc3khkm%26pid%3D3747044%26bid%3D15012&Set1=en-US%7Cen-US%7C1280x1024%7C24
cache-control: no-cache, no-store, must-revalidate, no-transform
pragma: no-cache
expires: -1
access-control-allow-origin: *
set-cookie: C=1; domain=adform.net; expires=Fri, 03-Mar-2023 14:25:21 GMT; path=/
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
www.leovegas.com/nb-no/livecasino?btag=667909_65C5EB0B14CC406CAED83E0A76BD6CCB&c=wd9ntcsm7snti6cm2cc3khkm&pid=3747044&bid=15012
107.154.248.168302 Found 0 B URL HTTP/2 www.leovegas.com/nb-no/livecasino?btag=667909_65C5EB0B14CC406CAED83E0A76BD6CCB&c=wd9ntcsm7snti6cm2cc3khkm&pid=3747044&bid=15012
IP 107.154.248.168:0
GET /nb-no/livecasino?btag=667909_65C5EB0B14CC406CAED83E0A76BD6CCB&c=wd9ntcsm7snti6cm2cc3khkm&pid=3747044&bid=15012 HTTP/1.1
Host: www.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a3747044%2c%22BID%22%3a15012%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1675434316238)%5c%2f%22%2c%22CookieTag%22%3a%22150123747044451240919C2023231425%22%7d%5d
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Fri, 03 Feb 2023 14:25:16 GMT
content-type: application/json; charset=utf8
content-encoding: gzip
location: /en-no/livecasino?btag=667909_65C5EB0B14CC406CAED83E0A76BD6CCB&c=wd9ntcsm7snti6cm2cc3khkm&pid=3747044&bid=15012
strict-transport-security: max-age=63072000;
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy: frame-ancestors 'self' *.leovegas.com *.casinomodule.com *.yggdrasilgaming.com *.evolutiongaming.com *.gameassists.co.uk *.gameassists.dk *.rgsgames.com *.wagerworks.com *.adform.com *.livetables.io *.regily.com *.casinoalternativen.com *.onlinecasinobonus24.xyz *.livetableshu.com
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
set-cookie: leo-essentials=%7B%22cid%22%3A%2252cfd912-e549-4eb4-9913-041c5c778a36%22%7D; Max-Age=31536000; Path=/; Secure
visid_incap_846569=hZEK2dUoTsqE1xXN3vqTLUwZ3WMAAAAAQUIPAAAAAAD5thl9R6cXZZLtb2TvIrby; expires=Fri, 02 Feb 2024 22:50:38 GMT; HttpOnly; path=/; Domain=.leovegas.com; Secure; SameSite=None
nlbi_846569=7n9SXKSEeRmxfhFMTJV9qQAAAABgHyCCqJlWGELUBXcu+GsT; path=/; Domain=.leovegas.com; Secure; SameSite=None
incap_ses_633_846569=ncIHBRwhXVy5DBuApd7ICEwZ3WMAAAAAQ/6lgLJj0b/eTXJyfhvzQw==; path=/; Domain=.leovegas.com; Secure; SameSite=None
x-cdn: Imperva
x-iinfo: 4-31801040-31801047 NNNY CT(1 13 0) RT(1675434315991 61) q(0 0 0 0) r(1 1) U11
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.app~7a676cbb.1011d686d38b3587b223.chunk.js?e=p
34.107.241.180200 OK 0 B URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.app~7a676cbb.1011d686d38b3587b223.chunk.js?e=p
IP 34.107.241.180:0
GET /fulcrum/v4/master/dynamic/mobile.app~7a676cbb.1011d686d38b3587b223.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdsLOHJohPOI0UupkHP4Nub72uNhBQPz_aWVGAyqDQdsNFXfIDD8WEMeC4a3SzyJWQwux41PN4fQCVm-xiAWNWwhWQ
vary: X-Goog-Allowed-Resources,Origin
x-goog-generation: 1675328179475373
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 6371
content-encoding: gzip
x-goog-hash: crc32c=DLaeTw==, md5=zDc547V0UGiBAY62pHNrSw==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 6371
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Thu, 02 Feb 2023 09:14:50 GMT
expires: Thu, 02 Mar 2023 09:14:50 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Thu, 02 Feb 2023 08:56:19 GMT
etag: "cc3739e3b574506881018eb6a4736b4b"
content-type: application/javascript
age: 105027
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
track.adform.net/serving/scripts/trackpoint/async/
37.157.4.40301 Moved Permanently 0 B URL HTTP/2 track.adform.net/serving/scripts/trackpoint/async/
IP 37.157.4.40:0
GET /serving/scripts/trackpoint/async/ HTTP/1.1
Host: track.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: nginx
date: Fri, 03 Feb 2023 14:25:19 GMT
content-type: text/html
location: https://s2.adform.net/banners/scripts/st/trackpoint-async.js
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
scripts.prdredir.com/scripts/k_leovegas.js
172.64.160.2200 OK 0 B URL HTTP/2 scripts.prdredir.com/scripts/k_leovegas.js
IP 172.64.160.2:0
GET /scripts/k_leovegas.js HTTP/1.1
Host: scripts.prdredir.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 03 Feb 2023 14:25:20 GMT
content-type: text/javascript; charset=utf-8
status: 200 OK
cache-control: no-cache
access-control-allow-origin: *
x-request-id: ff579f57-65be-4609-b670-0b99fd26f70b
etag: W/"89e89b8bc17e0295fa9e233334c6118a"
x-runtime: 0.013676
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UdZ6QN3qmTRQPjq9DshRTGCd%2B3L2%2Fdm9CjiJtzh9Womn6J6l2qZOCwT03C4QhdiLfJ0KNwvQw%2BirQddIdHf2RMLoeVaOIlJ99KgYvwB2sirHhjVAXBbmnFEgL0Xg9E2jLbb7oYNKgw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 793bd5d84b9076d1-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.seondf.com/js/v4/agent.js
188.114.97.1200 OK 0 B URL HTTP/2 cdn.seondf.com/js/v4/agent.js
IP 188.114.97.1:0
GET /js/v4/agent.js HTTP/1.1
Host: cdn.seondf.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 03 Feb 2023 14:25:17 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Tue, 20 Dec 2022 16:00:08 GMT
etag: W/"c34c3067f651e0fea2609171ab7bfec0"
cache-control: max-age=14400
x-amz-version-id: oBwuMALhSWNlluJ4Z9BGO_.GELHIAD3H
x-cache: Miss from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: r3vBq8zJ-CY-NYQu_l7H4C5pSplwPeCF8zFIyJyqVW6saqZZag2g2w==
cf-cache-status: HIT
age: 2156
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2OlpqTOM1i9KrQ2N1ybSRajdvMNY6Ewqld18xttVMMJvvJecKkide5LS5yUSQoBJE%2FKxC7W1HKvBmRxzgm9Vy4YYkH47PBMzyufwf6L1sgVzNv%2FqgR4YISRuDcuzB6NG3g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 793bd5c62df20b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
sgtm.leovegas.com/gtm.js?id=GTM-PNLF5QG
34.107.236.224200 OK 0 B URL HTTP/2 sgtm.leovegas.com/gtm.js?id=GTM-PNLF5QG
IP 34.107.236.224:0
GET /gtm.js?id=GTM-PNLF5QG HTTP/1.1
Host: sgtm.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.leovegas.com/
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a3747044%2c%22BID%22%3a15012%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1675434316238)%5c%2f%22%2c%22CookieTag%22%3a%22150123747044451240919C2023231425%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%222803909610%7c1%22%7d%5d; visid_incap_846569=hZEK2dUoTsqE1xXN3vqTLUwZ3WMAAAAAQUIPAAAAAAD5thl9R6cXZZLtb2TvIrby; nlbi_846569=7n9SXKSEeRmxfhFMTJV9qQAAAABgHyCCqJlWGELUBXcu+GsT; incap_ses_633_846569=ncIHBRwhXVy5DBuApd7ICEwZ3WMAAAAAQ/6lgLJj0b/eTXJyfhvzQw==; leobtag=667909_65C5EB0B14CC406CAED83E0A76BD6CCB; leonrpid=3747044; leonrbid=15012; leonrmeta=[{"value":"wd9ntcsm7snti6cm2cc3khkm","key":"c"}]
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
server: nginx/1.23.2
date: Fri, 03 Feb 2023 14:25:19 GMT
content-type: application/javascript; charset=UTF-8
vary: Accept-Encoding
cache-control: private, max-age=900
expires: Fri, 03 Feb 2023 14:39:21 GMT
last-modified: Fri, 03 Feb 2023 12:00:00 GMT
content-encoding: gzip
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
products.admaxium.com/product/0f9c4578a20d7b6ed99ea63da0b32bb94e92c0ac4d1149a6b05aef7d7735a41f
172.67.193.247200 OK 0 B URL HTTP/2 products.admaxium.com/product/0f9c4578a20d7b6ed99ea63da0b32bb94e92c0ac4d1149a6b05aef7d7735a41f
IP 172.67.193.247:0
GET /product/0f9c4578a20d7b6ed99ea63da0b32bb94e92c0ac4d1149a6b05aef7d7735a41f HTTP/1.1
Host: products.admaxium.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.leovegas.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 03 Feb 2023 14:25:21 GMT
content-type: text/html;charset=utf-8
status: 200 OK
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Rvh4w57wqm2BYqST%2BVbayseylRjT%2Fo1QjbPXyPSvxnWIqhkRAKKfmwoVZICyoVmKU%2B8usm%2FJtWD2ljRInwGOMeT1zsNb3sWSVr%2FPuyEg9bEx3ftW89cxKfJbejyWgIg4S14UGzkMKek%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 793bd5dd3997b509-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
clientstream.launchdarkly.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?withReasons=true
76.223.31.44200 OK 0 B URL HTTP/2 clientstream.launchdarkly.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?withReasons=true
IP 76.223.31.44:0
GET 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?withReasons=true HTTP/1.1
Host: clientstream.launchdarkly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/event-stream
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 03 Feb 2023 14:25:20 GMT
content-type: text/event-stream; charset=utf-8
accept-ranges: bytes
access-control-allow-headers: Accept,Content-Type,Content-Length,Accept-Encoding,Cache-Control,X-Requested-With,X-LaunchDarkly-User-Agent,X-LaunchDarkly-Wrapper
access-control-allow-methods: GET,OPTIONS
access-control-allow-origin: *
access-control-max-age: 300
cache-control: no-cache, no-store, must-revalidate
ld-region: eu-west-1
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.app~65914263.77a6484c7d72d3f5f775.chunk.js?e=p
34.107.241.180200 OK 0 B URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.app~65914263.77a6484c7d72d3f5f775.chunk.js?e=p
IP 34.107.241.180:0
GET /fulcrum/v4/master/dynamic/mobile.app~65914263.77a6484c7d72d3f5f775.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdvMHoYYU69AUpcrJesC91sDwfHbDM31gTLjWZ5up06-hftojB_LUhLvGkU-b4iEWBqM7-079I8cFitUly_lHxvbjJ1BG8DN
vary: X-Goog-Allowed-Resources,Origin
x-goog-generation: 1675348740819954
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 10746
content-encoding: gzip
x-goog-hash: crc32c=to3Pkw==, md5=ZO36SzOPozEAl7FHLv9a8g==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 10746
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Thu, 02 Feb 2023 14:45:04 GMT
expires: Thu, 02 Mar 2023 14:45:04 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Thu, 02 Feb 2023 14:39:00 GMT
etag: "64edfa4b338fa3310097b1472eff5af2"
content-type: application/javascript
age: 85213
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
track.adform.net/Serving/TrackPoint/?pm=497538&ADFPageName=pageview&ADFdivider=%7C&ord=359649083331&ADFtpmode=2&loc=https%3A%2F%2Fwww.leovegas.com%2Fen-no%2Flivecasino%3Fbtag%3D667909_65C5EB0B14CC406CAED83E0A76BD6CCB%26c%3Dwd9ntcsm7snti6cm2cc3khkm%26pid%3D3747044%26bid%3D15012&Set1=en-US%7Cen-US%7C1280x1024%7C24
37.157.4.40302 Found 0 B URL HTTP/2 track.adform.net/Serving/TrackPoint/?pm=497538&ADFPageName=pageview&ADFdivider=%7C&ord=359649083331&ADFtpmode=2&loc=https%3A%2F%2Fwww.leovegas.com%2Fen-no%2Flivecasino%3Fbtag%3D667909_65C5EB0B14CC406CAED83E0A76BD6CCB%26c%3Dwd9ntcsm7snti6cm2cc3khkm%26pid%3D3747044%26bid%3D15012&Set1=en-US%7Cen-US%7C1280x1024%7C24
IP 37.157.4.40:0
GET /Serving/TrackPoint/?pm=497538&ADFPageName=pageview&ADFdivider=%7C&ord=359649083331&ADFtpmode=2&loc=https%3A%2F%2Fwww.leovegas.com%2Fen-no%2Flivecasino%3Fbtag%3D667909_65C5EB0B14CC406CAED83E0A76BD6CCB%26c%3Dwd9ntcsm7snti6cm2cc3khkm%26pid%3D3747044%26bid%3D15012&Set1=en-US%7Cen-US%7C1280x1024%7C24 HTTP/1.1
Host: track.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Fri, 03 Feb 2023 14:25:21 GMT
content-type: text/html; charset=utf-8
location: https://track.adform.net/Serving/TrackPoint/?CC=1&pm=497538&ADFPageName=pageview&ADFdivider=%7C&ord=359649083331&ADFtpmode=2&loc=https%3A%2F%2Fwww.leovegas.com%2Fen-no%2Flivecasino%3Fbtag%3D667909_65C5EB0B14CC406CAED83E0A76BD6CCB%26c%3Dwd9ntcsm7snti6cm2cc3khkm%26pid%3D3747044%26bid%3D15012&Set1=en-US%7Cen-US%7C1280x1024%7C24
cache-control: no-cache, no-store, must-revalidate, no-transform
pragma: no-cache
expires: -1
access-control-allow-origin: *
set-cookie: C=1; domain=adform.net; expires=Fri, 03-Mar-2023 14:25:21 GMT; path=/
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
www.leovegas.com/static/fulcrum/offline.html?e=p
107.154.248.168200 OK 0 B URL HTTP/2 www.leovegas.com/static/fulcrum/offline.html?e=p
IP 107.154.248.168:0
GET /static/fulcrum/offline.html?e=p HTTP/1.1
Host: www.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.leovegas.com/mobile.sw.js?e=p
Connection: keep-alive
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a3747044%2c%22BID%22%3a15012%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1675434316238)%5c%2f%22%2c%22CookieTag%22%3a%22150123747044451240919C2023231425%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%222803909610%7c1%22%7d%5d; leo-essentials=%7B%22cid%22%3A%2252cfd912-e549-4eb4-9913-041c5c778a36%22%7D; visid_incap_846569=hZEK2dUoTsqE1xXN3vqTLUwZ3WMAAAAAQUIPAAAAAAD5thl9R6cXZZLtb2TvIrby; nlbi_846569=7n9SXKSEeRmxfhFMTJV9qQAAAABgHyCCqJlWGELUBXcu+GsT; incap_ses_633_846569=ncIHBRwhXVy5DBuApd7ICEwZ3WMAAAAAQ/6lgLJj0b/eTXJyfhvzQw==; leobtag=667909_65C5EB0B14CC406CAED83E0A76BD6CCB; leonrpid=3747044; leonrbid=15012; leonrmeta=[{"value":"wd9ntcsm7snti6cm2cc3khkm","key":"c"}]; _ga=GA1.1.127406931.1675434351; _gid=GA1.2.1940006320.1675434351; _gat_leo=1; leo_previous_page=https://www.leovegas.com/en-no/livecasino?btag=667909_65C5EB0B14CC406CAED83E0A76BD6CCB&c=wd9ntcsm7snti6cm2cc3khkm&pid=3747044&bid=15012; _ga_R99CHBN90V=GS1.1.1675434351.1.0.1675434351.60.0.0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 14:25:20 GMT
content-type: text/html
content-encoding: gzip
cache-control: public, max-age=3600
last-modified: Thu, 02 Feb 2023 14:53:33 GMT
strict-transport-security: max-age=63072000;
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy: frame-ancestors 'self' *.leovegas.com *.casinomodule.com *.yggdrasilgaming.com *.evolutiongaming.com *.gameassists.co.uk *.gameassists.dk *.rgsgames.com *.wagerworks.com *.adform.com *.livetables.io *.regily.com *.casinoalternativen.com *.onlinecasinobonus24.xyz *.livetableshu.com
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
x-cdn: Imperva
x-iinfo: 4-31801040-31801047 PNNy RT(1675434315991 4011) q(0 0 0 -1) r(0 0) U12
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto:400,400i,500,500i,700,700i,900,900i|Roboto+Slab:700&subset=latin-ext&display=swap
142.250.74.106200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Roboto:400,400i,500,500i,700,700i,900,900i|Roboto+Slab:700&subset=latin-ext&display=swap
IP 142.250.74.106:0
GET /css?family=Roboto:400,400i,500,500i,700,700i,900,900i|Roboto+Slab:700&subset=latin-ext&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 03 Feb 2023 14:25:17 GMT
date: Fri, 03 Feb 2023 14:25:17 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.leovegas.com/api?relay
107.154.248.168200 OK 0 B URL HTTP/2 www.leovegas.com/api?relay
IP 107.154.248.168:0
POST /api?relay HTTP/1.1
Host: www.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.leovegas.com/en-no/livecasino?btag=667909_65C5EB0B14CC406CAED83E0A76BD6CCB&c=wd9ntcsm7snti6cm2cc3khkm&pid=3747044&bid=15012
x-request-id: 2edf570d-7751-4f66-8808-fb91ba026d0a
content-type: application/json
x-leo-locale: en-no
Origin: https://www.leovegas.com
Content-Length: 230
Connection: keep-alive
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a3747044%2c%22BID%22%3a15012%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1675434316238)%5c%2f%22%2c%22CookieTag%22%3a%22150123747044451240919C2023231425%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%222803909610%7c1%22%7d%5d; leo-essentials=%7B%22cid%22%3A%2252cfd912-e549-4eb4-9913-041c5c778a36%22%7D; visid_incap_846569=hZEK2dUoTsqE1xXN3vqTLUwZ3WMAAAAAQUIPAAAAAAD5thl9R6cXZZLtb2TvIrby; nlbi_846569=7n9SXKSEeRmxfhFMTJV9qQAAAABgHyCCqJlWGELUBXcu+GsT; incap_ses_633_846569=ncIHBRwhXVy5DBuApd7ICEwZ3WMAAAAAQ/6lgLJj0b/eTXJyfhvzQw==; leobtag=667909_65C5EB0B14CC406CAED83E0A76BD6CCB; leonrpid=3747044; leonrbid=15012; leonrmeta=[{"value":"wd9ntcsm7snti6cm2cc3khkm","key":"c"}]
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 14:25:19 GMT
content-type: application/json
content-encoding: gzip
strict-transport-security: max-age=63072000;
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy: frame-ancestors 'self' *.leovegas.com *.casinomodule.com *.yggdrasilgaming.com *.evolutiongaming.com *.gameassists.co.uk *.gameassists.dk *.rgsgames.com *.wagerworks.com *.adform.com *.livetables.io *.regily.com *.casinoalternativen.com *.onlinecasinobonus24.xyz *.livetableshu.com
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
x-cdn: Imperva
x-iinfo: 4-31801040-31801182 NNNY CT(1 4 0) RT(1675434315991 2701) q(0 0 0 -1) r(1 1) U6
X-Firefox-Spdy: h2
s2.adform.net/banners/scripts/st/trackpoint-async.js
37.157.6.234200 OK 0 B URL HTTP/2 s2.adform.net/banners/scripts/st/trackpoint-async.js
IP 37.157.6.234:0
GET /banners/scripts/st/trackpoint-async.js HTTP/1.1
Host: s2.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.leovegas.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 14:25:19 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Tue, 29 Nov 2022 10:23:25 GMT
x-rgw-object-type: Normal
etag: W/"83eb5fafaa212c785f7393188ff817aa"
x-amz-request-id: tx00000ea5be29143837370-006385e0d3-32941e2b-default
access-control-allow-origin: *
cache-control: public, max-age=604800
x-cache-status: HIT
content-encoding: gzip
X-Firefox-Spdy: h2