tele-phones.site/m/th/ppt3/
302 Found 0 B URL HTTP/1.1 tele-phones.site/m/th/ppt3/
IP
ASN #212531 UAB Interneto vizija
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
GET /m/th/ppt3/ HTTP/1.1
Host: tele-phones.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Date: Wed, 08 Feb 2023 04:56:31 GMT
Server: Apache
Connection: Upgrade, Keep-Alive
Location: http://ak.lanopoon.net/4/5087048?var=ed_error
Keep-Alive: timeout=2, max=100
Transfer-Encoding: chunked
Content-Type: text/html
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b7407cc102d62a5acd5e61f8a79bed36
c2f4890a62454e514962b55b7fc14228339c8e90
be282de92da261128a7c8471f3067466aa9930fd0ab2a2cdda8cd2d6ce2bbd74
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BE282DE92DA261128A7C8471F3067466AA9930FD0AB2A2CDDA8CD2D6CE2BBD74"
Last-Modified: Wed, 08 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7183
Expires: Wed, 08 Feb 2023 06:56:14 GMT
Date: Wed, 08 Feb 2023 04:56:31 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 565c1bbc5c1c40be1988b3bf6fd9dc1a
cfdba5bc597130461dd67bf6cda53183be592493
60ceb36a8329c92fc49a3caf50daf511a38e01eac21a07d7a0a838166bea058d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "60CEB36A8329C92FC49A3CAF50DAF511A38E01EAC21A07D7A0A838166BEA058D"
Last-Modified: Mon, 06 Feb 2023 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10390
Expires: Wed, 08 Feb 2023 07:49:41 GMT
Date: Wed, 08 Feb 2023 04:56:31 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash bf0c602d32b3c14606f22a86183b5e3c
6eabd8d83475eba731968abe1a05a8bfd272f160
6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Backoff, Alert, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 08 Feb 2023 04:34:12 GMT
content-type: application/json
age: 1339
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cc14b0d2f7c451f6431dc87ba54d1d60
bab8bfda6fa3e2f17125353f5147211787dc25d0
b58fe18a5cc8fe5aaf49ba7eadd0ef34692892e68e9c52eb5bb56ea27e1300ad
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B58FE18A5CC8FE5AAF49BA7EADD0EF34692892E68E9C52EB5BB56EA27E1300AD"
Last-Modified: Mon, 06 Feb 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17923
Expires: Wed, 08 Feb 2023 09:55:14 GMT
Date: Wed, 08 Feb 2023 04:56:31 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain
IP
File type PEM certificate\012- , ASCII text
Hash e76071a28ee566dababb3834f46d68ed
aebb4e68c1ba2de0f90025283e8ed8470944fde0
78b6df2627172e5b35476bc31020f02898cdc412aaf4337af2c3b049a60912b6
GET /chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: ADboTTxQq+BULbgoFbm80w1L1RDMva0yySJ1krC2Mv+Aefmz0koSc57h9w8XtAmBen3WwI80kwY=
x-amz-request-id: QWKEYP7XKDF7TB9S
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 08 Feb 2023 04:35:48 GMT
age: 1243
last-modified: Sun, 29 Jan 2023 18:44:47 GMT
etag: "e76071a28ee566dababb3834f46d68ed"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 08 Feb 2023 04:56:31 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ak.lanopoon.net/4/5087048?var=ed_error
200 OK 617 B URL HTTP/1.1 ak.lanopoon.net/4/5087048?var=ed_error
IP
ASN #20940 Akamai International B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 364079377c1b4bf3193267278b432524
77d35a73ae2b8029b666b0b73fe4b6dae7c9b6e6
7709be670c296b2b4ed465296dda3ede4a6f91ce9bf5a59d651ec6a5c7acaddc
Analyzer Verdict Alert quad9 Sinkholed
GET /4/5087048?var=ed_error HTTP/1.1
Host: ak.lanopoon.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf8
X-Trace-Id: 877f68cdb79f1ddda936eec6c78da9cd
Link: <https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://my.rtmark.net>; rel="preconnect dns-prefetch", <https://go.doubledoubleup.com>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://diromalxx.com>; rel="preconnect dns-prefetch"
Access-Control-Allow-Credentials: true
Access-Control-Max-Age: 86400
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Methods: GET, POST, OPTIONS, POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, Accept, Content-Type, Content-Length, Accept-Encoding
Content-Encoding: gzip
Expires: Wed, 08 Feb 2023 04:56:31 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Wed, 08 Feb 2023 04:56:31 GMT
Content-Length: 617
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: OAID=fab08eb4ec284d9ebc205e1edd2bedbb; expires=Thu, 08 Feb 2024 04:56:31 GMT; path=/
oaidts=1675832191; expires=Thu, 08 Feb 2024 04:56:31 GMT; path=/
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9c14e228f19415f2af825294ff401241
dabb4fa3c22980b27aa873fd8aa429366655c95e
df9ed274a8026ea08f348145695717b6f8a11fa8f3c14e60b30b4cd60f7e2fde
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DF9ED274A8026EA08F348145695717B6F8A11FA8F3C14E60B30B4CD60F7E2FDE"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20467
Expires: Wed, 08 Feb 2023 10:37:39 GMT
Date: Wed, 08 Feb 2023 04:56:32 GMT
Connection: keep-alive
my.rtmark.net/img.gif?f=merge&userId=fab08eb4ec284d9ebc205e1edd2bedbb
200 OK 43 B URL HTTP/2 my.rtmark.net/img.gif?f=merge&userId=fab08eb4ec284d9ebc205e1edd2bedbb
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
POST /img.gif?f=merge&userId=fab08eb4ec284d9ebc205e1edd2bedbb HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 200 OK
server: nginx
date: Wed, 08 Feb 2023 04:56:32 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: null
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=fab08eb4ec284d9ebc205e1edd2bedbb; expires=Thu, 08 Feb 2024 04:56:32 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
ak.lanopoon.net/favicon.ico
204 No Content 0 B URL HTTP/1.1 ak.lanopoon.net/favicon.ico
IP
ASN #20940 Akamai International B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /favicon.ico HTTP/1.1
Host: ak.lanopoon.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Cookie: OAID=fab08eb4ec284d9ebc205e1edd2bedbb; oaidts=1675832191
HTTP/1.1 204 No Content
Pragma: public
Cache-Control: public, must-revalidate, proxy-revalidate, max-age=2592000
Date: Wed, 08 Feb 2023 04:56:32 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Expires, Retry-After, Content-Length, Content-Type, ETag, Cache-Control, Alert, Pragma, Backoff, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 08 Feb 2023 04:14:52 GMT
age: 2500
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 90ab59ca24bbbe356db66f99fe95469c
6e2acf20a7d17db726519392a195ff32a217e3c4
9d965db8ad88608ed2b7cf8e5fc1b7896cccc284b23bf60c6169ba33b62587a4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9D965DB8AD88608ED2B7CF8E5FC1B7896CCCC284B23BF60C6169BA33B62587A4"
Last-Modified: Tue, 07 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19599
Expires: Wed, 08 Feb 2023 10:23:11 GMT
Date: Wed, 08 Feb 2023 04:56:32 GMT
Connection: keep-alive
go.doubledoubleup.com/visit/?bta=35656&brand=doggocasino&rdk=rk1
302 Moved Temporarily 3 B URL HTTP/1.1 go.doubledoubleup.com/visit/?bta=35656&brand=doggocasino&rdk=rk1
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type JSON data\012- , ASCII text, with no line terminators
Hash 43e819cfbef2c8fc69c227513504087b
3ea645da8b9c23cfcf4e75e45b2ea79c5ec89c4a
82985617ce795510ad965737efe6b5a76411b26a6d7453ff4ba680e856377bc8
GET /visit/?bta=35656&brand=doggocasino&rdk=rk1 HTTP/1.1
Host: go.doubledoubleup.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Server: rhino-core-shield
Date: Wed, 08 Feb 2023 04:56:32 GMT
Content-Type: application/octet-stream
Content-Length: 3
Connection: keep-alive
Set-cookie: doggocasino-v=393091; Max-Age=2678400; Path=/; Expires=Sat, 11 Mar 2023 04:56:32 GMT; HttpOnly
cache-control: no-store
location: https://doggocasino.com/en-us?affiliateName=[cellxpert]&affid=cx-35656_393091&bannerid=35656&trackerid=35656_393091&brand=doggocasino&bta=35656&rdk=rk1
referer:
X-Cache-Status: MISS
access-control-allow-origin: *, *
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9b88bae61bca33aba8aa99f6128db8d9
a07b61fb2458917699613fcae68710941b595416
54915c2f79822732e06a592d027da421ad1e7a6458c545f98333db25612b3dea
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "54915C2F79822732E06A592D027DA421AD1E7A6458C545F98333DB25612B3DEA"
Last-Modified: Mon, 06 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5197
Expires: Wed, 08 Feb 2023 06:23:09 GMT
Date: Wed, 08 Feb 2023 04:56:32 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 280 B IP
Hash b290b9265cacca740c7a8d31bd00ebc6
fc1b0ddb7d20f33312d0b8eee2f586617dfe19ae
ba8e4070932f96fd81dee29c00d030001d01507074603c6b49cc626e4f6d198b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3875
Cache-Control: max-age=162566
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 04:56:32 GMT
Etag: "63e2f463-117"
Expires: Fri, 10 Feb 2023 02:05:58 GMT
Last-Modified: Wed, 08 Feb 2023 01:01:23 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 280
doggocasino.com/assets/fonts/CeraPro/CeraPro-Regular.ttf
200 OK 167 kB URL HTTP/2 doggocasino.com/assets/fonts/CeraPro/CeraPro-Regular.ttf
IP
File type TrueType Font data, 15 tables, 1st "FFTM", 26 names, Macintosh\012- data
Size 167 kB (166620 bytes)
Hash cf954f65e33513f8a1f75f8083674834
dde47f28e602f3aa1488ec6a2126ab75c26e2ac4
21c63b1ab7ed2243a23e609485b1391e7d7bf8ba6a8a01f9ae0e515844c4591e
GET /assets/fonts/CeraPro/CeraPro-Regular.ttf HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/styles.6fe09080dd4bc8174585.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 166620
date: Tue, 07 Feb 2023 09:00:42 GMT
x-amz-meta-codebuild-content-sha256: 3a1d5f559d5de88345d69cd1f7926e0696ca48590ba3b279ba4374bc1a2c46d3
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:dc7f672c-4669-47fb-9710-2346e6c01aac
x-amz-meta-codebuild-content-md5: acb33710ef6e17c1daa2f7ebc264824d
last-modified: Tue, 07 Feb 2023 08:57:17 GMT
x-amz-version-id: Byfm2TCxJoTNiV5D0DIiVdEEBwwnmiDk
etag: "cf954f65e33513f8a1f75f8083674834"
server: AmazonS3
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
age: 71751
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: NQCJ9UdSGr5a6pqr4soiDPvCaaLPaD0lyRX3yBYlu7Fmmz7ZpPBTgg==
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-WKDT3RB
200 OK 52 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-WKDT3RB
IP
File type ASCII text, with very long lines (10642)
Hash fd1a7a58c9abeac2e53dbbbe1a668129
3b0c23e0e13bd396da7c8965aba609d6bc45a3f9
e49cc4ba2e006b4fe3c8bd96d252d1a8a97afb7d879607c73040e8e5defdcc91
GET /gtm.js?id=GTM-WKDT3RB HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 08 Feb 2023 04:56:32 GMT
expires: Wed, 08 Feb 2023 04:56:32 GMT
cache-control: private, max-age=900
last-modified: Wed, 08 Feb 2023 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 52440
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 8d5417d247d259e3c0186136b83d9f75
49fbcf99a352669aee2559579ef73fa60f46d38d
3c013921158ec27e44d5e80a5108557de80a27f38089ac3a52c6c1cf5636f585
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 04:56:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: TUoO6Uq4fn6uAv3UuICNDw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: V68YVOS9vQw1KcOnWwwp12khpjM=
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 325a8a10ce2837a8c6820e30572d181c
195d6189f0f10fcb301fce3af4c27028bbcb9eaa
2f1a0e948582fa64266617acc77e9beb71c5031d9cffe1bed1393a554f259810
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 04:56:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
pixel.empdat.com/offers/5457?transaction_id=35656_393091
404 Not Found 9 B URL HTTP/2 pixel.empdat.com/offers/5457?transaction_id=35656_393091
IP
File type ASCII text, with no line terminators
Hash 9d1ead73e678fa2f51a70a933b0bf017
d205cbd6783332a212c5ae92d73c77178c2d2f28
0019dfc4b32d63c1392aa264aed2253c1e0c2fb09216f8e2cc269bbfb8bb49b5
GET /offers/5457?transaction_id=35656_393091 HTTP/1.1
Host: pixel.empdat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
content-type: text/plain
content-length: 9
date: Wed, 08 Feb 2023 04:56:32 GMT
x-amzn-requestid: 3f63181a-b1e0-462b-a362-4c6f34f9a023
x-amz-apigw-id: AAO8MHDqFiAFhGw=
x-amzn-trace-id: Root=1-63e32b80-1147883a69a358c76d46a297;Sampled=0
x-cache: Error from cloudfront
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: TXmP7b6kYhzI7PNErQPcIKC9GIjLvS368bGokRf8MjWfODXWP9tk7g==
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash 84cccf80ec0f30a53ef512f24cf43bc7
2cc50d5b786996899dafc314dd00c79886d1b2be
ebd94be13024ea7881bc86f1c2b3349fe6e02849706e3c3fc5f14a6cd08c2ae9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 858
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 04:56:32 GMT
Last-Modified: Wed, 08 Feb 2023 04:42:14 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 280
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash a5b922d6ded2cb42d9bf4cf8565e50e0
ad4125d5713ebe2da6826a648330cef9454a18a6
ee9294e616ed8e29c7c3a50164d67f550738174ef03fb1743fd9ee8bb3365366
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "EE9294E616ED8E29C7C3A50164D67F550738174EF03FB1743FD9EE8BB3365366"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17851
Expires: Wed, 08 Feb 2023 09:54:04 GMT
Date: Wed, 08 Feb 2023 04:56:33 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 325a8a10ce2837a8c6820e30572d181c
195d6189f0f10fcb301fce3af4c27028bbcb9eaa
2f1a0e948582fa64266617acc77e9beb71c5031d9cffe1bed1393a554f259810
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 04:56:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static.zdassets.com/web_widget/latest/web-widget-framework-4d3f4cd196c41eafe101.js
200 OK 124 kB URL HTTP/2 static.zdassets.com/web_widget/latest/web-widget-framework-4d3f4cd196c41eafe101.js
IP
File type Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Size 124 kB (124491 bytes)
Hash 623bf6d380a5341c37978ca069f04e1b
a99436de0cc689217892ab7224c6aa8e34e6b469
c1330697d89022b83dcf51c625a545708afec8da3ee427e7cefce376f2236522
GET /web_widget/latest/web-widget-framework-4d3f4cd196c41eafe101.js HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 08 Feb 2023 04:56:33 GMT
content-type: application/javascript; charset=utf-8
x-amz-id-2: LZ6W7uflFb12PAk3+SegA3iWKVmuv+Lnqdw1wCnSTyvDyI9ME2pn7Td1aVKGe5wPxgZkpnZBK/8=
x-amz-request-id: WYQ5X79NETTR3Q53
x-amz-replication-status: COMPLETED
last-modified: Mon, 06 Feb 2023 04:37:59 GMT
etag: W/"c6e13551db1de5565b0fefbb38353422"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Tue, 06 Feb 2024 04:37:58 GMT
x-amz-version-id: aoc92yrT5ZEGLTS2Qgzm.R9bUBtGWfYc
cf-cache-status: HIT
age: 165844
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qHmPoH2a9GzbmgaAEtF8MAo%2B%2BEa8uZb%2Fe0t%2B0GNoOhxvYAtB%2BJExcodNY6PIn%2FD7kXDWlPaP6SQv4fCMDzUVeabyntq5SQ2ReAawPTDTq%2BfZb8bnWg5zmdNvt2393ICFbLTa0Rk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 7961c786bfcbb524-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash 84cccf80ec0f30a53ef512f24cf43bc7
2cc50d5b786996899dafc314dd00c79886d1b2be
ebd94be13024ea7881bc86f1c2b3349fe6e02849706e3c3fc5f14a6cd08c2ae9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 859
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 04:56:33 GMT
Last-Modified: Wed, 08 Feb 2023 04:42:14 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 280
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash a5b922d6ded2cb42d9bf4cf8565e50e0
ad4125d5713ebe2da6826a648330cef9454a18a6
ee9294e616ed8e29c7c3a50164d67f550738174ef03fb1743fd9ee8bb3365366
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "EE9294E616ED8E29C7C3A50164D67F550738174EF03FB1743FD9EE8BB3365366"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17851
Expires: Wed, 08 Feb 2023 09:54:04 GMT
Date: Wed, 08 Feb 2023 04:56:33 GMT
Connection: keep-alive
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 1892fe77e990c015c56ab8d7f8c1ec73
11950cd4e1ffa056720501d0443e108a2d8e7e8c
aac11c321ddf45ccc1a2ab5956eeff14da892a1cef85a04003848700fd5a0b8e
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=137897
Date: Wed, 08 Feb 2023 04:56:33 GMT
Etag: "63e2896a-1d7"
Expires: Thu, 09 Feb 2023 19:14:50 GMT
Last-Modified: Tue, 07 Feb 2023 17:24:58 GMT
Server: ECS (dcb/7F16)
X-Cache: Miss from cloudfront
Via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: P3BTqarRwPSNm6KI_Zfe_ti2k8xwqpVkbXWEGOYHfcAknCi00ebM7A==
Age: 6592
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 0d2201d98cd59c01923fab2d8c9b4e20
c2757160cf8032e7203165009e83a84625d7ea13
6e9009bd6358fd5b43e0c78d85756c970d5bc9a4bdbecad6cc1734e3375e5c6f
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=90686
Date: Wed, 08 Feb 2023 04:56:33 GMT
Etag: "63e1db27-1d7"
Expires: Thu, 09 Feb 2023 06:07:59 GMT
Last-Modified: Tue, 07 Feb 2023 05:01:27 GMT
Server: ECS (dcb/7F18)
X-Cache: Miss from cloudfront
Via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: gVLa1C7uUWuz5XqE6KHlXhb0_IcRkZbnRDe8kEkukeOeS1CaCo_j2g==
Age: 3992
backoffice.regily.com/releases?new=true&partner=doggocasino&env=stable
200 OK 2 B URL HTTP/2 backoffice.regily.com/releases?new=true&partner=doggocasino&env=stable
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /releases?new=true&partner=doggocasino&env=stable HTTP/1.1
Host: backoffice.regily.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://doggocasino.com
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 08 Feb 2023 04:56:33 GMT
content-type: application/json; charset=utf-8
content-length: 2
x-amzn-requestid: d1abd85d-b1bb-4239-8c1f-60b987b11361
x-dns-prefetch-control: off
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=15552000; includeSubDomains
x-ratelimit-reset: 1675832194
x-amzn-remapped-content-length: 2
x-frame-options: SAMEORIGIN
allow: GET,POST,PUT,PATCH,DELETE
x-amzn-remapped-connection: keep-alive
x-download-options: noopen
x-ratelimit-remaining: 99
x-amz-apigw-id: AAO8OFSljoEFXmg=
vary: Accept, Accept-Encoding
x-ratelimit-limit: 100
x-content-type-options: nosniff
etag: W/"2-vyGp6PvFo4RvsFtPoIWeCReyIC8"
x-amzn-trace-id: Root=1-63e32b81-73cc005931ffa63a5cb8e4b9
x-amzn-remapped-date: Wed, 08 Feb 2023 04:56:33 GMT
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 346 B IP
ASN #20940 Akamai International B.V.
Hash 65dc46ab7858d4b33cbef3fdb5b56e47
77ec8a4e26605f0a6d3e1688d167367e12f2d8e2
3c5b29a576000248ffc403f51cf7a335d8344f9352fd2b461d60b5088fc0d29b
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "3C5B29A576000248FFC403F51CF7A335D8344F9352FD2B461D60B5088FC0D29B"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5370
Expires: Wed, 08 Feb 2023 06:26:03 GMT
Date: Wed, 08 Feb 2023 04:56:33 GMT
Connection: keep-alive
ocsp.sectigo.com/
200 OK 471 B IP
Hash 856ee717aec08efb3a9e22747c257070
42a6ed891bdfa1e130350375450c38f3d8adbbc8
c7400ed9b269e4a509123c00c576fc40aee7cdcbc04044b3ed1dd9c7a5476b76
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 Feb 2023 04:56:33 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 05 Feb 2023 12:28:44 GMT
Expires: Sun, 12 Feb 2023 12:28:43 GMT
Etag: "42a6ed891bdfa1e130350375450c38f3d8adbbc8"
Cache-Control: max-age=372129,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7961c788b9d8b4f9-OSL
geo-lookup.iconvert.network/?callback=_jsonp_0
200 OK 23 B URL HTTP/2 geo-lookup.iconvert.network/?callback=_jsonp_0
IP
File type ASCII text, with no line terminators
Hash 77a2b27581b0e6f8e1866d12a9fb3460
0d6912f1aabf2f9f191883767a565846b6b23387
892b6da823563cbd0865b33fd6f805e495769f555aa11679fa72c82e56abe9fd
GET /?callback=_jsonp_0 HTTP/1.1
Host: geo-lookup.iconvert.network
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 23
x-amz-bucket-region: us-east-1
date: Wed, 08 Feb 2023 04:56:19 GMT
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: sKX6zhZHoH5mvVhcNu7XJJC_ErLPRIFcJYTACjmNrzQ-UzNJvPoBPQ==
age: 14
X-Firefox-Spdy: h2
cmsapi.doggocasino.com/ajax/country/countryblock
200 OK 177 B URL HTTP/1.1 cmsapi.doggocasino.com/ajax/country/countryblock
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 84a5fedf11ca403c40bcc33c089efabe
2e920993f57a1596c8c26b0e1b8b076458b25994
3873db006fd547eb926c6604f46a926e298eeaa909f6a667d2872f8237f3fc93
GET /ajax/country/countryblock HTTP/1.1
Host: cmsapi.doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://doggocasino.com
Connection: keep-alive
Referer: https://doggocasino.com/
Cookie: _ga_K4EHGY5F0T=GS1.1.1675832245.1.0.1675832245.60.0.0; _ga=GA1.1.1763717188.1675832246
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 08 Feb 2023 04:56:33 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Methods: GET, POST, OPTIONS, PUT, DELETE
Access-Control-Allow-Origin: https://doggocasino.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Request-ID,X-REQ-ID,Authorization,X-MGS-BusinessUnit,Accept-Language
Set-Cookie: ci_session=slgs8c8cuf9g08gju231kfmv6lbqup8m; expires=Wed, 08-Feb-2023 05:56:33 GMT; Max-Age=3600; path=/; SameSite=None; secure; HttpOnly
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Language: en
Vary: Accept-Encoding, Accept-Encoding
Content-Encoding: gzip
cdn.iconvert.network/code/9f66804e-a360-401a-966a-3d11f064f2f2.js
200 OK 4.4 kB URL HTTP/2 cdn.iconvert.network/code/9f66804e-a360-401a-966a-3d11f064f2f2.js
IP
Hash 5401d6f63e89430c61f0d014613f19b9
7411a15617781101c260abba49c06f75ed328853
b8c1971ce0184e5c017a0bc951e8f6b167d037bfb6106cb242cf57c1f02e1193
GET /code/9f66804e-a360-401a-966a-3d11f064f2f2.js HTTP/1.1
Host: cdn.iconvert.network
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Thu, 19 Jan 2023 14:15:25 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: gzip
date: Wed, 08 Feb 2023 03:53:31 GMT
cache-control: max-age=7200
etag: W/"fe18a616aeaeeab3aac82bba12f10b44"
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: NnN7P6oOFHzFJ-zuVdP3S5rwqHeg813mCf47So0To1ZXsTHxMzgiMQ==
age: 3783
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
cmsapi.doggocasino.com/ajax/policy/getPolicies
200 OK 197 B URL HTTP/1.1 cmsapi.doggocasino.com/ajax/policy/getPolicies
IP
File type JSON data\012- , ASCII text, with very long lines (475), with no line terminators
Hash 3d71629c07dc044ad909dc8e02f1f27c
3ff809845e7d55d7067bee6e645c6e5b7e7fb85f
72efb757aa046854ca03633e888c7358311e12b3b4020d2e808fed3ed1a0b20e
GET /ajax/policy/getPolicies HTTP/1.1
Host: cmsapi.doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://doggocasino.com
Connection: keep-alive
Referer: https://doggocasino.com/
Cookie: _ga_K4EHGY5F0T=GS1.1.1675832245.1.0.1675832245.60.0.0; _ga=GA1.1.1763717188.1675832246; ci_session=slgs8c8cuf9g08gju231kfmv6lbqup8m
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 08 Feb 2023 04:56:33 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Methods: GET, POST, OPTIONS, PUT, DELETE
Access-Control-Allow-Origin: https://doggocasino.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Request-ID,X-REQ-ID,Authorization,X-MGS-BusinessUnit,Accept-Language
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: ci_session=slgs8c8cuf9g08gju231kfmv6lbqup8m; expires=Wed, 08-Feb-2023 05:56:33 GMT; Max-Age=3600; path=/; SameSite=None; secure; HttpOnly
Content-Language: en
Vary: Accept-Encoding, Accept-Encoding
Content-Encoding: gzip
cmsapi.doggocasino.com/ajax/game/getLobbyListWithGameGroups?languageId=en
200 OK 630 B URL HTTP/1.1 cmsapi.doggocasino.com/ajax/game/getLobbyListWithGameGroups?languageId=en
IP
File type JSON data\012- , ASCII text, with very long lines (5550), with no line terminators
Hash b0930fe971be4962a7c1a078516f89d2
5b7bf21d17843deb571640d48b6f07b9c1c63717
9754db7220236a711331f0de80f1965d3ec20cb7cb7d5cf9b58422fe9348b3c8
GET /ajax/game/getLobbyListWithGameGroups?languageId=en HTTP/1.1
Host: cmsapi.doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://doggocasino.com
Connection: keep-alive
Referer: https://doggocasino.com/
Cookie: _ga_K4EHGY5F0T=GS1.1.1675832245.1.0.1675832245.60.0.0; _ga=GA1.1.1763717188.1675832246; ci_session=slgs8c8cuf9g08gju231kfmv6lbqup8m
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 08 Feb 2023 04:56:33 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Methods: GET, POST, OPTIONS, PUT, DELETE
Access-Control-Allow-Origin: https://doggocasino.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Request-ID,X-REQ-ID,Authorization,X-MGS-BusinessUnit,Accept-Language
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: ci_session=slgs8c8cuf9g08gju231kfmv6lbqup8m; expires=Wed, 08-Feb-2023 05:56:33 GMT; Max-Age=3600; path=/; SameSite=None; secure; HttpOnly
Content-Language: en
Vary: Accept-Encoding, Accept-Encoding
Content-Encoding: gzip
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/mb.png
200 OK 996 B URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/mb.png
IP
File type PNG image data, 561 x 92, 8-bit colormap, non-interlaced\012- data
Hash 4a561b1203db848a0fd069a40105f7a3
432ddaa10b45e26988bc1bddf69a9272a3acaf15
6e979cde819c2b590d29574b712bc5716a818a133e994b7481ff6e293c0d6905
GET /uploads/media/DOC/home/mb.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Mon, 28 Nov 2022 10:47:34 GMT
server: imgix
x-imgix-id: 247d4bd2833516dbbc97ef48afd09d785450b382
x-imgix-render-farm: 02.552
date: Wed, 08 Feb 2023 04:56:33 GMT
age: 5517984
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10064-SJC, cache-bma1627-BMA
x-cache: HIT, HIT
content-length: 996
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 13c9a141bd374371ea3a25c7a8c85c11
3ebf0fa6e2e45db08c20164c96ff9a1fac5189ca
0595987799279a6c2660aee0939875563b0761ce2d1cd1d2f40964de0bd86b70
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Wed, 08 Feb 2023 04:56:33 GMT
Last-Modified: Wed, 08 Feb 2023 03:13:33 GMT
Server: ECS (nyb/1D08)
X-Cache: Miss from cloudfront
Via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: cjBvRY1uAVwx5x4L2f-sjCsZbO_ipiquk25oDgk-qeMQrr2lx6ijZg==
Age: 6180
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 13c9a141bd374371ea3a25c7a8c85c11
3ebf0fa6e2e45db08c20164c96ff9a1fac5189ca
0595987799279a6c2660aee0939875563b0761ce2d1cd1d2f40964de0bd86b70
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Wed, 08 Feb 2023 04:56:33 GMT
Etag: "63e1f19c-1d7"
Last-Modified: Wed, 08 Feb 2023 03:15:56 GMT
Server: ECS (dcb/7FA5)
X-Cache: Miss from cloudfront
Via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: g2wiZuoGZ3YN4chDCdrUr7J6ZUL0lCCj2W8plsOfLQsc_VyRDlcnUA==
Age: 6037
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/netent.png
200 OK 7.6 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/netent.png
IP
File type PNG image data, 264 x 132, 8-bit/color RGBA, non-interlaced\012- data
Hash e2b8f21ff6a62425c54d2f31ea3da47b
bc0bb5c1b693c346300dc20657113ca18be6c924
58ee78a9a65e277e9ce58fad220ebf002de259699f963819277230d67308e814
GET /uploads/media/DOC/home/netent.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 22 Jun 2022 15:01:49 GMT
server: imgix
x-imgix-id: ad53f775ba8679c60964307b8587293d2caf651a
x-imgix-render-farm: 02.552
x-imgix-original-status: 200
date: Wed, 08 Feb 2023 04:56:33 GMT
age: 7764542
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10069-SJC, cache-bma1627-BMA
x-cache: HIT, HIT
content-length: 7615
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/quick-spin.png
200 OK 7.3 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/quick-spin.png
IP
File type PNG image data, 264 x 132, 8-bit/color RGBA, non-interlaced\012- data
Hash c4651477b077d4f4dea3646065567885
df7eecb46d7709e9c490b399b9e4795e64595792
04c9cd3e8cfb7fa6e88c28b17cf9b2c87f83d5e1adadc20f2615ff1f1fdd0e88
GET /uploads/media/DOC/home/quick-spin.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 22 Jun 2022 15:01:49 GMT
server: imgix
x-imgix-id: b3f7542b22878ec5c77012762c5b725ec229b35d
x-imgix-render-farm: 02.552
date: Wed, 08 Feb 2023 04:56:33 GMT
age: 2994582
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10021-SJC, cache-bma1627-BMA
x-cache: HIT, HIT
content-length: 7266
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/playson.png
200 OK 8.8 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/playson.png
IP
File type PNG image data, 264 x 132, 8-bit/color RGBA, non-interlaced\012- data
Hash 8f247ad2ba24f62d8568361c71599fcb
a47ec378109d5167452c3c84b6c0ef7e82a0f015
e9f5402ef88a83fe5198a1e164be87b7751d1aa3e3ebf67faf128ad20de81d80
GET /uploads/media/DOC/home/playson.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 22 Jun 2022 15:01:49 GMT
server: imgix
x-imgix-id: 1c27e084a48eadd6052b527d450f616b19517eec
x-imgix-render-farm: 01.1064
date: Wed, 08 Feb 2023 04:56:33 GMT
age: 2994583
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10021-SJC, cache-bma1627-BMA
x-cache: HIT, HIT
content-length: 8797
X-Firefox-Spdy: h2
cmsapi.doggocasino.com/ajax/staticPage/getPage?url_path=footer-no&language=no
200 OK 1.4 kB URL HTTP/1.1 cmsapi.doggocasino.com/ajax/staticPage/getPage?url_path=footer-no&language=no
IP
File type JSON data\012- HTML document, ASCII text, with very long lines (6630), with no line terminators
Hash abe2b784416270dc10848a25fa24f334
239929c2344a6caf292d4f5a7b3cd6a64e75baba
c16c585bd6e050e3a8dfe0d53330161789f3b5a564613576d1a5c258be58ef15
GET /ajax/staticPage/getPage?url_path=footer-no&language=no HTTP/1.1
Host: cmsapi.doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://doggocasino.com
Connection: keep-alive
Referer: https://doggocasino.com/
Cookie: _ga_K4EHGY5F0T=GS1.1.1675832245.1.0.1675832245.60.0.0; _ga=GA1.1.1763717188.1675832246; ci_session=slgs8c8cuf9g08gju231kfmv6lbqup8m
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 08 Feb 2023 04:56:33 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Methods: GET, POST, OPTIONS, PUT, DELETE
Access-Control-Allow-Origin: https://doggocasino.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Request-ID,X-REQ-ID,Authorization,X-MGS-BusinessUnit,Accept-Language
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: ci_session=slgs8c8cuf9g08gju231kfmv6lbqup8m; expires=Wed, 08-Feb-2023 05:56:33 GMT; Max-Age=3600; path=/; SameSite=None; secure; HttpOnly
Content-Language: en
Vary: Accept-Encoding, Accept-Encoding
Content-Encoding: gzip
doggocasino.com/runtime.4b27143eccb88f79924e.js
200 OK 7.5 kB URL HTTP/2 doggocasino.com/runtime.4b27143eccb88f79924e.js
IP
File type ASCII text, with very long lines (2481), with no line terminators
Hash 5172d5cdbab8f3e76141f91fc0506718
3ba0ef990af9130f7938cbc58938cf658732630c
45745478cf78e1b4148b5039a436467a8096723beaf52194232585ef37369fd1
GET /runtime.4b27143eccb88f79924e.js HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/en-us?affiliateName=[cellxpert]&affid=cx-35656_393091&bannerid=35656&trackerid=35656_393091&brand=doggocasino&bta=35656&rdk=rk1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
date: Tue, 07 Feb 2023 08:58:33 GMT
x-amz-meta-codebuild-content-sha256: 3a1d5f559d5de88345d69cd1f7926e0696ca48590ba3b279ba4374bc1a2c46d3
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:dc7f672c-4669-47fb-9710-2346e6c01aac
x-amz-meta-codebuild-content-md5: acb33710ef6e17c1daa2f7ebc264824d
last-modified: Tue, 07 Feb 2023 08:57:22 GMT
x-amz-version-id: 4wFhu_ALB1Nits.Y8awfLW3Z1kpHGxHB
etag: W/"f8164c2d4608d34a7a13c1f14afe4120"
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
age: 71880
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: cFQSiUHYqIyNLwg6SuYyz98xX_HS_L-NHWdSm76pgBr7mZ1TvKtscQ==
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/blue-print.png
200 OK 13 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/blue-print.png
IP
File type PNG image data, 276 x 138, 8-bit/color RGBA, non-interlaced\012- data
Hash 215e832f2352ba2b101cdad72966f603
a1dcf49c0377e3f1e1c6bfcef8e49435dfffc781
dc6f2ec8948d25ba0a77ce6aedfcc118857fd6733c4801697db1e8b073e65456
GET /uploads/media/DOC/home/blue-print.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 22 Jun 2022 15:01:49 GMT
server: imgix
x-imgix-id: ecfb3805c5394525af860dfdf5477a7c4267e413
x-imgix-render-farm: 01.1064
date: Wed, 08 Feb 2023 04:56:33 GMT
age: 658947
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10077-SJC, cache-bma1627-BMA
x-cache: HIT, HIT
content-length: 13093
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/fantasma.png
200 OK 8.5 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/fantasma.png
IP
File type PNG image data, 249 x 126, 8-bit/color RGBA, non-interlaced\012- data
Hash c665b0d5e32fda6859ff497e1e69c43f
c182cf5a9438a4af020fc6c98dc6a101825fd0f4
031eda00e0705a5d0c4d98517a0d465a921256d4d0ff85a571858b1d41fce01a
GET /uploads/media/DOC/home/fantasma.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 22 Jun 2022 15:01:49 GMT
server: imgix
x-imgix-id: c622a908ee5889c3d3351579a5fc23fa65472e3e
x-imgix-render-farm: 01.1064
date: Wed, 08 Feb 2023 04:56:33 GMT
age: 1574223
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10074-SJC, cache-bma1627-BMA
x-cache: HIT, HIT
content-length: 8546
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/no-limit.png
200 OK 4.9 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/no-limit.png
IP
File type PNG image data, 282 x 141, 8-bit/color RGBA, non-interlaced\012- data
Hash a5a601b38f6b3b9f958d2eca3a4a45e5
6e1c5af69461c0cbcb4a03602018a9278a5d04aa
ea215374e2595992671808fdc26279914384c72d0c487829e0d85b7d50a71e81
GET /uploads/media/DOC/home/no-limit.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 22 Jun 2022 15:01:49 GMT
server: imgix
x-imgix-id: e2ec034a596d1289c9c2aedc656513f86169709f
x-imgix-render-farm: 01.1064
date: Wed, 08 Feb 2023 04:56:33 GMT
age: 1958357
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10066-SJC, cache-bma1627-BMA
x-cache: HIT, HIT
content-length: 4863
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/micro-gaming.png
200 OK 12 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/micro-gaming.png
IP
File type PNG image data, 273 x 135, 8-bit/color RGBA, non-interlaced\012- data
Hash ad498e425bc190d412243470877e08c1
c7286f96e9b48afe1e0388495c6a23121688aa3d
cda4cfc287ffe13972fef5287357eb52c9bd72a3d1edb47afdb196368509883e
GET /uploads/media/DOC/home/micro-gaming.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 22 Jun 2022 15:01:49 GMT
server: imgix
x-imgix-id: e72faedce2955be12a47e50d32f6c5563952e8d5
x-imgix-render-farm: 01.1064
date: Wed, 08 Feb 2023 04:56:33 GMT
age: 2994584
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10049-SJC, cache-bma1627-BMA
x-cache: HIT, HIT
content-length: 11685
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/northernlights.png
200 OK 9.7 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/northernlights.png
IP
File type PNG image data, 258 x 129, 8-bit/color RGBA, non-interlaced\012- data
Hash d00971dc7290a8d83d531bfe390dd39c
a2a9e0bd0d476994c9fb564a2976f254a865fccd
d9658fdd73aae24cab7d588506ca816cd6cbe7e6917169298e4a1167d71421f0
GET /uploads/media/DOC/home/northernlights.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 22 Jun 2022 15:01:49 GMT
server: imgix
x-imgix-id: 67a7b5399ebf644a1bcc51dfa0f74eb06dcd143e
x-imgix-render-farm: 01.1064
date: Wed, 08 Feb 2023 04:56:33 GMT
age: 3002379
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10081-SJC, cache-bma1627-BMA
x-cache: HIT, HIT
content-length: 9665
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/rela-gaming.png
200 OK 4.8 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/rela-gaming.png
IP
File type PNG image data, 273 x 135, 8-bit/color RGBA, non-interlaced\012- data
Hash c9bedd7123ad42428e2ec792776053a8
0925be562535b671f95ff19d90347a8fb6a7ffe1
32409ee3167289537c27f80696a05e8591ed3cabcb086263d0d08daea12d2e61
GET /uploads/media/DOC/home/rela-gaming.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Thu, 17 Nov 2022 14:40:10 GMT
server: imgix
x-imgix-id: 38553b988467576fe289bfd72122849582d88bc2
x-imgix-render-farm: 02.552
date: Wed, 08 Feb 2023 04:56:33 GMT
age: 2556172
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10083-SJC, cache-bma1627-BMA
x-cache: HIT, HIT
content-length: 4798
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/eyecon.png
200 OK 8.8 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/eyecon.png
IP
File type PNG image data, 264 x 132, 8-bit/color RGBA, non-interlaced\012- data
Hash 8766855d25ad3843eb33359112283e5d
a838120ce318c886ad64c1dd8ff488f7c6e0f0a4
f8a978ca8b36c3044558087bcbfc54cc5ea0a4a86823e00923f52071b0960e17
GET /uploads/media/DOC/home/eyecon.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 22 Jun 2022 15:01:49 GMT
server: imgix
x-imgix-id: 56676e6e25043441184ed26e5694070c5ef007ae
x-imgix-render-farm: 01.1064
date: Wed, 08 Feb 2023 04:56:33 GMT
age: 5503319
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10052-SJC, cache-bma1627-BMA
x-cache: HIT, HIT
content-length: 8776
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/pragmatic-play.png
200 OK 10 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/pragmatic-play.png
IP
File type PNG image data, 276 x 138, 8-bit/color RGBA, non-interlaced\012- data
Hash 22799434150dca8d59bf7733f74db4b6
ff7b186d5249e3061a07724a50c9cc3f2b6e2aa1
23ed44cd444692fa3e48eb345878f1e394fbedcb34f26d3906b0ab1fe958d6a9
GET /uploads/media/DOC/home/pragmatic-play.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Tue, 15 Nov 2022 14:20:10 GMT
server: imgix
x-imgix-id: 0279be2c12197f837606a46b183386238670fa5b
x-imgix-render-farm: 02.552
date: Wed, 08 Feb 2023 04:56:33 GMT
age: 2556173
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10039-SJC, cache-bma1627-BMA
x-cache: HIT, HIT
content-length: 10517
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/elk-studios.png
200 OK 5.9 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/elk-studios.png
IP
File type PNG image data, 252 x 126, 8-bit/color RGBA, non-interlaced\012- data
Hash 51d08cb0697602f09624cc82bb4d5a55
e45470f8c08548f1048d9efd72799b7b09096673
10bdf4c280e8f097ab29f3829c19998b5a2f038a8e6b07537dbc9d777f35bbc7
GET /uploads/media/DOC/home/elk-studios.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 22 Jun 2022 15:01:49 GMT
server: imgix
x-imgix-id: d6c794d9b4d2226e40eb864af99da51781766fe9
x-imgix-render-farm: 02.552
date: Wed, 08 Feb 2023 04:56:33 GMT
age: 5849935
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10078-SJC, cache-bma1627-BMA
x-cache: HIT, HIT
content-length: 5941
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/irondog.png
200 OK 5.8 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/irondog.png
IP
File type PNG image data, 231 x 114, 8-bit/color RGBA, non-interlaced\012- data
Hash c466772fc1afd400af737640c99f88a7
9ca1c550b69d2e5cb728c2a3668b2b35b0b0749e
e779742b7d5d724cb28028beb3ce8b72ebbbfea4c993fa19e01bb065cca77485
GET /uploads/media/DOC/home/irondog.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 09 Nov 2022 07:55:59 GMT
server: imgix
x-imgix-id: 07ade4d4a329aeebb13542f1a1f1753e6ef8e471
x-imgix-render-farm: 02.552
date: Wed, 08 Feb 2023 04:56:33 GMT
age: 3000444
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10081-SJC, cache-bma1627-BMA
x-cache: HIT, HIT
content-length: 5790
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/maxwin.png
200 OK 4.5 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/maxwin.png
IP
File type PNG image data, 222 x 108, 8-bit/color RGBA, non-interlaced\012- data
Hash 7c449a3fe36a9169f6943ba2428db2b1
4454bc379ed44c9c9e4025e38fb70331826f1dcc
50b2cc15c9ffa7199cf2dfd14668041b77e1b893e1907fc2fa660fc0e70c1e34
GET /uploads/media/DOC/home/maxwin.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 22 Jun 2022 15:01:49 GMT
server: imgix
x-imgix-id: 133dff40fc4bcdce06d3e48dbc3e3cc97cb67554
x-imgix-render-farm: 01.1064
date: Wed, 08 Feb 2023 04:56:33 GMT
age: 2566025
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10079-SJC, cache-bma1627-BMA
x-cache: HIT, HIT
content-length: 4465
X-Firefox-Spdy: h2
cmsapi.doggocasino.com/ajax/Faq/getQuestions?lang=no
200 OK 6.9 kB URL HTTP/1.1 cmsapi.doggocasino.com/ajax/Faq/getQuestions?lang=no
IP
File type JSON data\012- , ASCII text, with very long lines (50212), with no line terminators
Hash 46712c8114b6b2df3f50d69f2c7f96f5
ba2ea03bba7ff2af9f432739a774496d4eef540a
854ab5787fc1cefb0da2eb75c4b09de68cabf38a0738bb133964b542e9ef20ac
GET /ajax/Faq/getQuestions?lang=no HTTP/1.1
Host: cmsapi.doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://doggocasino.com
Connection: keep-alive
Referer: https://doggocasino.com/
Cookie: _ga_K4EHGY5F0T=GS1.1.1675832245.1.0.1675832245.60.0.0; _ga=GA1.1.1763717188.1675832246; ci_session=slgs8c8cuf9g08gju231kfmv6lbqup8m
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 08 Feb 2023 04:56:33 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Methods: GET, POST, OPTIONS, PUT, DELETE
Access-Control-Allow-Origin: https://doggocasino.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Request-ID,X-REQ-ID,Authorization,X-MGS-BusinessUnit,Accept-Language
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: ci_session=slgs8c8cuf9g08gju231kfmv6lbqup8m; expires=Wed, 08-Feb-2023 05:56:33 GMT; Max-Age=3600; path=/; SameSite=None; secure; HttpOnly
Content-Encoding: gzip
cmsapi.doggocasino.com/ajax/staticPage/getPage?url_path=game-header-filter-data&language=no
200 OK 787 B URL HTTP/1.1 cmsapi.doggocasino.com/ajax/staticPage/getPage?url_path=game-header-filter-data&language=no
IP
File type JSON data\012- , ASCII text, with very long lines (4044), with no line terminators
Hash b0cee8610450eecc568afdbed759fc7f
addd0c1c653d9aa9c1bdce67d3418ad4994ca620
922d29e0f56d5a3799bb0bfd4e98f182827b6238418f86d1c67034ed47034a70
GET /ajax/staticPage/getPage?url_path=game-header-filter-data&language=no HTTP/1.1
Host: cmsapi.doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://doggocasino.com
Connection: keep-alive
Referer: https://doggocasino.com/
Cookie: _ga_K4EHGY5F0T=GS1.1.1675832245.1.0.1675832245.60.0.0; _ga=GA1.1.1763717188.1675832246; ci_session=slgs8c8cuf9g08gju231kfmv6lbqup8m
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 08 Feb 2023 04:56:33 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Methods: GET, POST, OPTIONS, PUT, DELETE
Access-Control-Allow-Origin: https://doggocasino.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Request-ID,X-REQ-ID,Authorization,X-MGS-BusinessUnit,Accept-Language
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: ci_session=slgs8c8cuf9g08gju231kfmv6lbqup8m; expires=Wed, 08-Feb-2023 05:56:33 GMT; Max-Age=3600; path=/; SameSite=None; secure; HttpOnly
Content-Language: en
Vary: Accept-Encoding, Accept-Encoding
Content-Encoding: gzip
cmsapi.doggocasino.com/ajax/staticPage/getPage?url_path=game-header-filter-data&language=no
200 OK 787 B URL HTTP/1.1 cmsapi.doggocasino.com/ajax/staticPage/getPage?url_path=game-header-filter-data&language=no
IP
File type JSON data\012- , ASCII text, with very long lines (4044), with no line terminators
Hash b0cee8610450eecc568afdbed759fc7f
addd0c1c653d9aa9c1bdce67d3418ad4994ca620
922d29e0f56d5a3799bb0bfd4e98f182827b6238418f86d1c67034ed47034a70
GET /ajax/staticPage/getPage?url_path=game-header-filter-data&language=no HTTP/1.1
Host: cmsapi.doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://doggocasino.com
Connection: keep-alive
Referer: https://doggocasino.com/
Cookie: _ga_K4EHGY5F0T=GS1.1.1675832245.1.0.1675832245.60.0.0; _ga=GA1.1.1763717188.1675832246; ci_session=slgs8c8cuf9g08gju231kfmv6lbqup8m
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 08 Feb 2023 04:56:33 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Methods: GET, POST, OPTIONS, PUT, DELETE
Access-Control-Allow-Origin: https://doggocasino.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Request-ID,X-REQ-ID,Authorization,X-MGS-BusinessUnit,Accept-Language
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: ci_session=slgs8c8cuf9g08gju231kfmv6lbqup8m; expires=Wed, 08-Feb-2023 05:56:33 GMT; Max-Age=3600; path=/; SameSite=None; secure; HttpOnly
Content-Language: en
Vary: Accept-Encoding, Accept-Encoding
Content-Encoding: gzip
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/red-tiger.png
200 OK 11 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/red-tiger.png
IP
File type PNG image data, 276 x 138, 8-bit/color RGBA, non-interlaced\012- data
Hash 4d970a8ff362df7c5514aceaa5e3ebe7
55104f39398363a86ccc9c47e5cfa26104ba5a25
cca9d171d20873e005d4c9a6fb3c9df4fb19748d2f66eeb2188aa1fce25d51e1
GET /uploads/media/DOC/home/red-tiger.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Thu, 01 Dec 2022 09:24:24 GMT
server: imgix
x-imgix-id: eb5b0a4e7c9b7ed0449b816233ce1a167f11d44d
x-imgix-render-farm: 02.552
date: Wed, 08 Feb 2023 04:56:33 GMT
age: 5511408
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10040-SJC, cache-bma1627-BMA
x-cache: HIT, HIT
content-length: 11314
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/gaming.png
200 OK 6.6 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/gaming.png
IP
File type PNG image data, 243 x 120, 8-bit/color RGBA, non-interlaced\012- data
Hash f0c61bac2c685ab90cdeba03f39a73ff
db8a075fbe70ef285b8db7d68f79d17c9cf52aa3
b5b53a76e45279edccc190cb7603e0522f77e12b72b9b9d9075c937d53627ef9
GET /uploads/media/DOC/home/gaming.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 22 Jun 2022 15:01:49 GMT
server: imgix
x-imgix-id: 967b8ec43b2a5fbcccd7f7f9d32031091657fdf1
x-imgix-render-farm: 01.1064
date: Wed, 08 Feb 2023 04:56:33 GMT
age: 3004310
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10081-SJC, cache-bma1627-BMA
x-cache: HIT, HIT
content-length: 6610
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/mb-bottom.png
200 OK 945 B URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/mb-bottom.png
IP
File type PNG image data, 555 x 78, 8-bit colormap, non-interlaced\012- data
Hash afd8b1279d095eddad3f7ad8df9892a3
407841662fc47b2d82e8a0cba898163a8c4d86b7
58b09fba62fa08df503bddcf36cf9fdc0e6d08a9a7bd2cfa122fc34fc3f6b6a2
GET /uploads/media/DOC/home/mb-bottom.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Mon, 21 Nov 2022 14:38:42 GMT
server: imgix
x-imgix-id: f38d6f1739f6520a391d3ce5a825ff72c95647d2
x-imgix-render-farm: 02.552
date: Wed, 08 Feb 2023 04:56:33 GMT
age: 1790550
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10070-SJC, cache-bma1627-BMA
x-cache: HIT, HIT
content-length: 945
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/deposit.svg
200 OK 650 B URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/deposit.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (782)
Hash ca812eca4d915271b2e433e47965572d
ad6042ddb3c5a74d706929cc9b0dde2f4388eccc
e00b74a45064d746f4eb3ed3be367b512638632d7549b2c724878603b94fb0c4
GET /uploads/media/DOC/home/deposit.svg HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 22 Jun 2022 15:01:49 GMT
content-encoding: gzip
server: imgix
x-imgix-id: e1ab6a5a4e01f54e3148750d4a24f87f38e5e6c6
x-imgix-render-farm: 01.1064
date: Wed, 08 Feb 2023 04:56:33 GMT
age: 1842092
accept-ranges: bytes
content-type: image/svg+xml
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10066-SJC, cache-bma1627-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
content-length: 650
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/withdrawals.svg
200 OK 635 B URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/withdrawals.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (738)
Hash 5cd653c6fe5eb1505ad2a9087ba43269
84a96f045d5cb4120d9074b6ab0cde7aee8a590b
6e1284f6e02ae5b5330b39440f2d9dc20610de477104b0e7aedfa9925fde8f1c
GET /uploads/media/DOC/home/withdrawals.svg HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 22 Jun 2022 15:01:49 GMT
content-encoding: gzip
server: imgix
x-imgix-id: e4311d3383c2ad74f7ba1374c5b43d24298d30ba
x-imgix-render-farm: 01.1064
date: Wed, 08 Feb 2023 04:56:33 GMT
age: 2552824
accept-ranges: bytes
content-type: image/svg+xml
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10035-SJC, cache-bma1627-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
content-length: 635
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/wins-mobile.png
200 OK 114 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/wins-mobile.png
IP
File type PNG image data, 369 x 373, 8-bit/color RGB, non-interlaced\012- data
Size 114 kB (114315 bytes)
Hash 9254612cbe7dc5e08eaad1c7b3b9bed3
4b1b7c636758fd514c10fb40179a3321f4757946
3f10fa5c434f2dc9a35bdbbe807dca7fabb1180153cf1013ceeee70846a67119
GET /uploads/media/DOC/home/wins-mobile.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Tue, 09 Aug 2022 01:43:45 GMT
server: imgix
x-imgix-id: eac79f3b66edc102783146ea29a590751c3c4c39
x-imgix-render-farm: 01.1064
date: Wed, 08 Feb 2023 04:56:33 GMT
age: 1866910
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10026-SJC, cache-bma1627-BMA
x-cache: HIT, HIT
content-length: 114315
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/safety.svg
200 OK 1.1 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/safety.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1535)
Hash f4bceb3b835f466f7e3c3e31f22996da
7795f48b8e4ea4ee227f3e2c0a7490f1a0e6e576
9af7e809decc127848a79a3425ddec9855db28d150f935ada5de2a4f6d9775d4
GET /uploads/media/DOC/home/safety.svg HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 09 Nov 2022 10:28:05 GMT
content-encoding: gzip
server: imgix
x-imgix-id: 3efeba0cea6918bc3ac3c389420eb383314a5d1c
x-imgix-render-farm: 02.552
date: Wed, 08 Feb 2023 04:56:33 GMT
age: 5503320
accept-ranges: bytes
content-type: image/svg+xml
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10052-SJC, cache-bma1627-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
content-length: 1096
X-Firefox-Spdy: h2
cmsapi.doggocasino.com/languages/DOC/no.json
200 OK 26 kB URL HTTP/1.1 cmsapi.doggocasino.com/languages/DOC/no.json
IP
File type JSON data\012- HTML document, Unicode text, UTF-8 text, with very long lines (2182), with CRLF line terminators
Hash 4ac6a2bf77cc347dd759b41373106c0e
9a10a9861c92ccf2539e174f69c06677e6c9238b
359cab6ebe9d4ac112b5a5cd8be4199e81573f0ae90715d18d16c7f5f620703b
GET /languages/DOC/no.json HTTP/1.1
Host: cmsapi.doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://doggocasino.com
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 08 Feb 2023 04:56:33 GMT
Content-Type: application/json
Last-Modified: Tue, 07 Feb 2023 12:31:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63e2449a-1e474"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS, HEAD
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,x-prerender,x-req-id
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/mc.png
200 OK 9.2 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/mc.png
IP
File type PNG image data, 156 x 156, 8-bit/color RGBA, non-interlaced\012- data
Hash c7dd6fdc3e16c819c88735699286ea81
90c72fd87afa0024ce87797a4709ae71370f89ab
f4ad70ee60ce0b2c8179c15fa2cb20f561901f02ffabb8c8abe59436a5bb1b1c
GET /uploads/media/DOC/home/mc.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Tue, 15 Nov 2022 11:12:25 GMT
server: imgix
x-imgix-id: 71ec1afef3eca3f1f98f543b8132f37911fbca73
x-imgix-render-farm: 02.552
date: Wed, 08 Feb 2023 04:56:33 GMT
age: 2567720
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10035-SJC, cache-bma1627-BMA
x-cache: HIT, HIT
content-length: 9166
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/visa.png
200 OK 10 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/visa.png
IP
File type PNG image data, 156 x 156, 8-bit/color RGBA, non-interlaced\012- data
Hash 9c283e2c4040566cd8ad97b5866c9537
c61dd5f44d2f6473aeb0a71729928c5b94f5b623
349173c164101e5a60336be685e50f70df22ddcf0b84a87450bbfecc247b9d64
GET /uploads/media/DOC/home/visa.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Thu, 04 Aug 2022 10:16:05 GMT
server: imgix
x-imgix-id: 88dac5105999550cdf9409d7adb98c4a18b289bd
x-imgix-render-farm: 01.1064
date: Wed, 08 Feb 2023 04:56:33 GMT
age: 1267042
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10080-SJC, cache-bma1627-BMA
x-cache: HIT, HIT
content-length: 10038
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/interac.png
200 OK 2.7 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/interac.png
IP
File type PNG image data, 153 x 156, 8-bit colormap, non-interlaced\012- data
Hash 9b9b9143bf86f05cda2161cc7ffcc3c8
4a793f79be620d49a751984f2a7c3bea07176894
d34b0fa6f4a752d9eaeb192ae7810afe5938865ffc0f01032f4b6ec4c1d7b8f3
GET /uploads/media/DOC/home/interac.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Thu, 04 Aug 2022 10:16:05 GMT
server: imgix
x-imgix-id: c337a6e18e1448fc8779d3ec7ef196156870eedd
x-imgix-render-farm: 01.1064
date: Wed, 08 Feb 2023 04:56:33 GMT
age: 1197274
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10052-SJC, cache-bma1627-BMA
x-cache: HIT, HIT
content-length: 2738
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/ecashout.png
200 OK 2.6 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/ecashout.png
IP
File type PNG image data, 153 x 156, 8-bit colormap, non-interlaced\012- data
Hash a4c8123c11469403a676a4b6e6a5f301
321ba2a412968a39eb4e1ed9ed72b17b591d941d
a5fd2c66784ea49cb274ef2677c646762969e54b9371cdf556404f1e73483baf
GET /uploads/media/DOC/home/ecashout.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Thu, 04 Aug 2022 10:16:05 GMT
server: imgix
x-imgix-id: 3e26b2ca3455957e72976978f1a2570e54d129f4
x-imgix-render-farm: 01.1064
date: Wed, 08 Feb 2023 04:56:33 GMT
age: 1160110
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10048-SJC, cache-bma1627-BMA
x-cache: HIT, HIT
content-length: 2616
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/dcs.png
200 OK 3.0 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/dcs.png
IP
File type PNG image data, 156 x 156, 8-bit colormap, non-interlaced\012- data
Hash 033e64d307fcfd62be869c5de0721c66
a2307ba759c902a98ec8af557f677929d2c0e28d
23050464c99491bdbff255e380dffcc5dbd1f69dffb401dc837dd3da9cfbcd54
GET /uploads/media/DOC/home/dcs.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Thu, 10 Nov 2022 08:39:47 GMT
server: imgix
x-imgix-id: 9ccc09c26693529650325830f9d0fe7f294a61f2
x-imgix-render-farm: 02.552
date: Wed, 08 Feb 2023 04:56:33 GMT
age: 3011781
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10069-SJC, cache-bma1627-BMA
x-cache: HIT, HIT
content-length: 3003
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/live-casino-alt.png
200 OK 932 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/live-casino-alt.png
IP
File type PNG image data, 1239 x 801, 8-bit/color RGBA, non-interlaced\012- data
Size 932 kB (931521 bytes)
Hash a3113ee83d7cfdda8586b419310bdcc1
601ddede664b13671e9dc48c58e5366c9fd2028e
ba00e861f4fe98eb485ddfd62a83960ee46462037e8362a5cecdbec96a7d440e
GET /uploads/media/DOC/home/live-casino-alt.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 22 Jun 2022 15:01:49 GMT
server: imgix
x-imgix-id: cc5c75145f9fdba6aa16b11dda56045021649f74
x-imgix-render-farm: 01.1064
date: Wed, 08 Feb 2023 04:56:33 GMT
age: 676655
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10033-SJC, cache-bma1627-BMA
x-cache: HIT, HIT
content-length: 931521
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/bitcoin.png
200 OK 19 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/bitcoin.png
IP
File type PNG image data, 156 x 156, 8-bit/color RGBA, non-interlaced\012- data
Hash cd562a1e7de9e5bd919fed61dffcaf85
fd9c91b81380bdd4ced09ad4f55a859d1df908f0
c4d20189a065ee8bdc172576d404b4a7a5798a94449ca2c093b4b79e33ded24a
GET /uploads/media/DOC/home/bitcoin.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Thu, 04 Aug 2022 10:16:05 GMT
server: imgix
x-imgix-id: 65feeb2e7f5a33af503a917d123e59c58e65a7e6
x-imgix-render-farm: 01.1064
date: Wed, 08 Feb 2023 04:56:33 GMT
age: 2913031
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10057-SJC, cache-bma1627-BMA
x-cache: HIT, HIT
content-length: 18782
X-Firefox-Spdy: h2
doggocasino.com/assets/images/HeroBottom.webp
200 OK 8.6 kB URL HTTP/2 doggocasino.com/assets/images/HeroBottom.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash e7ca3e477ff57d76894214575d55ad47
e81dfea1456367bfb5a43735f377ef8d90ba9445
86b4f03b03f70a75fb273131f57ea8ec7c750f55ebb73f7acfe285b1c1df3e26
GET /assets/images/HeroBottom.webp HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/no-no?affiliateName=%5Bcellxpert%5D&affid=cx-35656_393091&bannerid=35656&trackerid=35656_393091&brand=doggocasino&bta=35656&rdk=rk1
Cookie: _ga_K4EHGY5F0T=GS1.1.1675832245.1.0.1675832245.60.0.0; _ga=GA1.1.1763717188.1675832246; __adm_tid=tid-30f2d5dd7.3e1c5dbad; affiliateId=cx-35656_393091; bannerId=35656; trackerId=35656_393091; affiliateName=%5Bcellxpert%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 8556
date: Tue, 07 Feb 2023 09:00:47 GMT
x-amz-meta-codebuild-content-sha256: 3a1d5f559d5de88345d69cd1f7926e0696ca48590ba3b279ba4374bc1a2c46d3
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:dc7f672c-4669-47fb-9710-2346e6c01aac
x-amz-meta-codebuild-content-md5: acb33710ef6e17c1daa2f7ebc264824d
last-modified: Tue, 07 Feb 2023 08:57:20 GMT
x-amz-version-id: spgBdltluaVl.ObyxGdGD8kq5tq1EN8T
etag: "e7ca3e477ff57d76894214575d55ad47"
server: AmazonS3
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
age: 71747
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: d3gUnQtBsbBOak0ZenvB8F_6EUdTGHCBnAgHC5URRg4i8vjnyJP_VQ==
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/bitcash.png
200 OK 18 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/bitcash.png
IP
File type PNG image data, 174 x 174, 8-bit/color RGBA, non-interlaced\012- data
Hash e68bafdc431bb7237b47260e8d9bc046
a0fa8db91a6ac0ad63898d7407977e7782e32180
59fd94e8ca42bbd652ab2c1af7061afd79bf98bd2b7e4ad1256bcba73e9629a3
GET /uploads/media/DOC/home/bitcash.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Mon, 26 Dec 2022 14:49:50 GMT
server: imgix
x-imgix-id: d8f2e691a28166c91e785d424cff15e190124eaf
x-imgix-render-farm: 02.552
date: Wed, 08 Feb 2023 04:56:33 GMT
age: 2927925
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10045-SJC, cache-bma1627-BMA
x-cache: HIT, HIT
content-length: 18036
X-Firefox-Spdy: h2
event.iconvert.network/com.snowplowanalytics.snowplow/tp2
200 OK 0 B URL HTTP/2 event.iconvert.network/com.snowplowanalytics.snowplow/tp2
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /com.snowplowanalytics.snowplow/tp2 HTTP/1.1
Host: event.iconvert.network
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://doggocasino.com/
Origin: https://doggocasino.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 08 Feb 2023 04:56:33 GMT
content-length: 0
access-control-allow-origin: https://doggocasino.com
access-control-allow-credentials: true
access-control-allow-headers: Content-Type
access-control-max-age: 5
server: akka-http/10.0.9
X-Firefox-Spdy: h2
cmsapi.doggocasino.com/ajax/promotion/getPromotions?languageId=no
200 OK 8.2 kB URL HTTP/1.1 cmsapi.doggocasino.com/ajax/promotion/getPromotions?languageId=no
IP
File type JSON data\012- HTML document text\012- HTML document, ASCII text, with very long lines (33858), with no line terminators
Hash d0ca17d440ef1c62f543c39601d227be
33392438f2ffbbb66f6fd2b35548e90b6643a3a9
32a1f82d42bc4258b1e9ca9fa6340b0d6d1657785109271591d9afcffe15b7a9
GET /ajax/promotion/getPromotions?languageId=no HTTP/1.1
Host: cmsapi.doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://doggocasino.com
Connection: keep-alive
Referer: https://doggocasino.com/
Cookie: _ga_K4EHGY5F0T=GS1.1.1675832245.1.0.1675832245.60.0.0; _ga=GA1.1.1763717188.1675832246; ci_session=slgs8c8cuf9g08gju231kfmv6lbqup8m
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 08 Feb 2023 04:56:33 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Methods: GET, POST, OPTIONS, PUT, DELETE
Access-Control-Allow-Origin: https://doggocasino.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Request-ID,X-REQ-ID,Authorization,X-MGS-BusinessUnit,Accept-Language
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: ci_session=slgs8c8cuf9g08gju231kfmv6lbqup8m; expires=Wed, 08-Feb-2023 05:56:33 GMT; Max-Age=3600; path=/; SameSite=None; secure; HttpOnly
Content-Encoding: gzip
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/dogecoin.png
200 OK 15 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/dogecoin.png
IP
File type PNG image data, 165 x 168, 8-bit/color RGBA, non-interlaced\012- data
Hash 1e9329b8bf799a9b826f3a29b4f176c9
202c3b7f110e6a0f02cc57c4a5b9c2a0a04b0c91
c1bb8bbda40d80955c710bc3a20910eda13844db3ed1936d860de6f7bcd959ba
GET /uploads/media/DOC/home/dogecoin.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Tue, 06 Dec 2022 07:58:34 GMT
server: imgix
x-imgix-id: fc503aa9afa89a90aaf56ea71b88f68ee2952f9a
x-imgix-render-farm: 02.552
date: Wed, 08 Feb 2023 04:56:33 GMT
age: 1269845
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10060-SJC, cache-bma1627-BMA
x-cache: HIT, HIT
content-length: 15219
X-Firefox-Spdy: h2
doggocasino.com/assets/images/banner/banner-desktop.webp
200 OK 78 kB URL HTTP/2 doggocasino.com/assets/images/banner/banner-desktop.webp
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1917x602, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash bc3a30c00fa79b2656a24cad032aadd9
643021f5fcb6bc3ee3df627b5ec52133a54f448d
8e9c830b777176c1c96cafa9df0014f8a6db2a953524884b67ab5281df9dc2b1
GET /assets/images/banner/banner-desktop.webp HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/en-us?affiliateName=[cellxpert]&affid=cx-35656_393091&bannerid=35656&trackerid=35656_393091&brand=doggocasino&bta=35656&rdk=rk1
Cookie: _ga_K4EHGY5F0T=GS1.1.1675832245.1.0.1675832245.60.0.0; _ga=GA1.1.1763717188.1675832246; __adm_tid=tid-30f2d5dd7.3e1c5dbad; affiliateId=cx-35656_393091; bannerId=35656; trackerId=35656_393091; affiliateName=%5Bcellxpert%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 78070
date: Tue, 07 Feb 2023 09:00:47 GMT
x-amz-meta-codebuild-content-sha256: 3a1d5f559d5de88345d69cd1f7926e0696ca48590ba3b279ba4374bc1a2c46d3
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:dc7f672c-4669-47fb-9710-2346e6c01aac
x-amz-meta-codebuild-content-md5: acb33710ef6e17c1daa2f7ebc264824d
last-modified: Tue, 07 Feb 2023 08:57:13 GMT
x-amz-version-id: lu.D_oYKQhum5aFu5tCNFVEgHmQ0Q8mC
etag: "bc3a30c00fa79b2656a24cad032aadd9"
server: AmazonS3
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
age: 71747
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: YvFCpOAf5wjcDzDYTVCMvwaGtOfTTLxmPYpyWTXFU4J3Lr4c2oJ4Tg==
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/etr-new.png
200 OK 5.1 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/etr-new.png
IP
File type PNG image data, 165 x 168, 8-bit/color RGBA, non-interlaced\012- data
Hash 5ede2b5b941cae8778d7dfa1354b6f10
6f02fcc2a92339e5bb2eb0a96962f89513ac7922
826c3ed09f7501644f305aebf992d904f308bbae1f25e5449d02de013d5a3fdb
GET /uploads/media/DOC/home/etr-new.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Mon, 08 Aug 2022 06:13:29 GMT
server: imgix
x-imgix-id: 3b2ead74ea6cd94bfd31a9fdc7776d9a0bcae2b0
x-imgix-render-farm: 01.1064
date: Wed, 08 Feb 2023 04:56:33 GMT
age: 1953357
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10030-SJC, cache-bma1627-BMA
x-cache: HIT, HIT
content-length: 5095
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/litecoin-new.png
200 OK 14 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/litecoin-new.png
IP
File type PNG image data, 165 x 168, 8-bit/color RGBA, non-interlaced\012- data
Hash 9bc85726c5ca5e2a3d2a555a615c4256
049d4828511ea4d2bd01bb5f8a465885e6e9d704
9fd49d747b0dff0642c22a38a5fe92f32b56c91b99a1bb985e29c478a31776a1
GET /uploads/media/DOC/home/litecoin-new.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Mon, 08 Aug 2022 06:13:29 GMT
server: imgix
x-imgix-id: 1d79ca603728b492e30fc6063c44aa9ed0e32776
x-imgix-render-farm: 02.552
date: Wed, 08 Feb 2023 04:56:33 GMT
age: 3002378
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10029-SJC, cache-bma1627-BMA
x-cache: HIT, HIT
content-length: 14490
X-Firefox-Spdy: h2
doggocasino.com/assets/fonts/CeraPro/Cera_Pro_Bold.otf
200 OK 189 kB URL HTTP/2 doggocasino.com/assets/fonts/CeraPro/Cera_Pro_Bold.otf
IP
File type OpenType font data\012- data
Size 189 kB (189056 bytes)
Hash 07ac815392d30140366e0a9df7f769e8
baa64ee6efc7331cbe288054213ae1eb3d4836a1
ca2bcc9e894e0a755a49f8d264bed726717c0033e6f2dcc8e888bf80ac57bbaa
GET /assets/fonts/CeraPro/Cera_Pro_Bold.otf HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/styles.6fe09080dd4bc8174585.css
Cookie: _ga_K4EHGY5F0T=GS1.1.1675832245.1.0.1675832245.60.0.0; _ga=GA1.1.1763717188.1675832246; __adm_tid=tid-30f2d5dd7.3e1c5dbad; affiliateId=cx-35656_393091; bannerId=35656; trackerId=35656_393091; affiliateName=%5Bcellxpert%5D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 189056
date: Tue, 07 Feb 2023 09:00:48 GMT
x-amz-meta-codebuild-content-sha256: 3a1d5f559d5de88345d69cd1f7926e0696ca48590ba3b279ba4374bc1a2c46d3
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:dc7f672c-4669-47fb-9710-2346e6c01aac
x-amz-meta-codebuild-content-md5: acb33710ef6e17c1daa2f7ebc264824d
last-modified: Tue, 07 Feb 2023 08:57:16 GMT
x-amz-version-id: 1DaxtAyjUAKF7WxUc0JcZKHH0ZkZYrB5
etag: "07ac815392d30140366e0a9df7f769e8"
server: AmazonS3
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
age: 71746
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: XS3wr39J4b7zxc5YZkzWY5sf5rHp8A-xKcd_ptvhn9DhqF5LQrNwGg==
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/ripple-new.png
200 OK 2.9 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/ripple-new.png
IP
File type PNG image data, 165 x 168, 8-bit colormap, non-interlaced\012- data
Hash 2aef5169d3eefdcac4fa852082d208c7
ef02e2b0d695d24bb8ca48fe6101dc118703d4ea
761cc6f5576279ba59dbe0ed38d8faae2291c1cb658ac6d4425e6d0274360b2b
GET /uploads/media/DOC/home/ripple-new.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Tue, 15 Nov 2022 11:28:36 GMT
server: imgix
x-imgix-id: e90fed76cf492faeb28f74615e2705b2680a5245
x-imgix-render-farm: 02.552
date: Wed, 08 Feb 2023 04:56:33 GMT
age: 2494360
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10059-SJC, cache-bma1627-BMA
x-cache: HIT, HIT
content-length: 2921
X-Firefox-Spdy: h2
doggocasino.com/icomoon.45820165eb8af3713881.ttf
200 OK 29 kB URL HTTP/2 doggocasino.com/icomoon.45820165eb8af3713881.ttf
IP
File type TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, icomoon \012- data
Hash eb718388a17dd6957510fb000e72e3cd
e05feec86f5b7297637a5fc431ab9d1963e2812b
c38790685fe44d27066c46fe406fbf0edef47872cefa44a342e7a25171897200
GET /icomoon.45820165eb8af3713881.ttf HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/styles.6fe09080dd4bc8174585.css
Cookie: _ga_K4EHGY5F0T=GS1.1.1675832245.1.0.1675832245.60.0.0; _ga=GA1.1.1763717188.1675832246; __adm_tid=tid-30f2d5dd7.3e1c5dbad; affiliateId=cx-35656_393091; bannerId=35656; trackerId=35656_393091; affiliateName=%5Bcellxpert%5D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 28764
date: Tue, 07 Feb 2023 09:00:45 GMT
x-amz-meta-codebuild-content-sha256: 3a1d5f559d5de88345d69cd1f7926e0696ca48590ba3b279ba4374bc1a2c46d3
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:dc7f672c-4669-47fb-9710-2346e6c01aac
x-amz-meta-codebuild-content-md5: acb33710ef6e17c1daa2f7ebc264824d
last-modified: Tue, 07 Feb 2023 08:57:18 GMT
x-amz-version-id: t3eESLIpPmkvvLIscTa29V2rSbHk4L25
etag: "eb718388a17dd6957510fb000e72e3cd"
server: AmazonS3
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
age: 71749
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: jNRR0Omw1-BQOnjCZ7xbrIBR7v7HJSkbAyyoEbIRjaZHOkqQReRb8Q==
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/casino-mobile.png
200 OK 133 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/casino-mobile.png
IP
File type PNG image data, 371 x 397, 8-bit/color RGB, non-interlaced\012- data
Size 133 kB (133402 bytes)
Hash 36f9ecfb460d0de18df1ce7defb10711
b7ee68bd6d2c91ac3d85a452c53974a61cf6d1f0
75db45a28f5b61014fc62b70588a10a644f06cc20dc4f6769acdb10059c0a1b1
GET /uploads/media/DOC/home/casino-mobile.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Tue, 09 Aug 2022 01:43:47 GMT
server: imgix
x-imgix-id: f8e8ed07a51d1fa5e117ddaac64a2417a8b5a884
x-imgix-render-farm: 01.1064
date: Wed, 08 Feb 2023 04:56:33 GMT
age: 3002377
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10029-SJC, cache-bma1627-BMA
x-cache: HIT, HIT
content-length: 133402
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/live-chat.svg
200 OK 839 B URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/live-chat.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (734)
Hash 83446e4d2f06186a15149eaff721bc82
be4daa2a3cdefe196af997d3859abd0137c2b46c
19e16d18413d121628f7ea88a731632d27f18ff3760dbb693f855f0878372c9d
GET /uploads/media/DOC/home/live-chat.svg HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Thu, 09 Jun 2022 04:34:39 GMT
content-encoding: gzip
server: imgix
x-imgix-id: 4b3de38e2392e00f600484d978499ce447f38500
x-imgix-render-farm: 01.1064
date: Wed, 08 Feb 2023 04:56:33 GMT
age: 7330012
accept-ranges: bytes
content-type: image/svg+xml
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10023-SJC, cache-bma1627-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
content-length: 839
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/email.svg
200 OK 410 B URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/email.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (389)
Hash 2f7202492e5cd91e315802476d9f7050
e9e01da01a0cbbff43c54e87ec5394f76e06b179
1568eaef10ca3c8f76a6eac52e7179142ce19db9b872122bdcec5264bd118b9b
GET /uploads/media/DOC/home/email.svg HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 09 Nov 2022 10:28:05 GMT
content-encoding: gzip
server: imgix
x-imgix-id: cf506c30afd516dd73e92c439c2359a2ff562aaa
x-imgix-render-farm: 02.552
date: Wed, 08 Feb 2023 04:56:33 GMT
age: 7320478
accept-ranges: bytes
content-type: image/svg+xml
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10026-SJC, cache-bma1627-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
content-length: 410
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/help-center.svg
200 OK 1.3 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/help-center.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1425)
Hash 8ebcd55a704acfdea2f05099cb4ef0df
dccec8929792df80545f7457d551ae69e96abf25
52f1da3a771e6c90e31cb18a055e7d628f2e5348f0283f31bf12e527de36bdd0
GET /uploads/media/DOC/home/help-center.svg HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 09 Nov 2022 10:28:05 GMT
content-encoding: gzip
server: imgix
x-imgix-id: c806f95492c0c281a72bb030680453ab3e699545
x-imgix-render-farm: 02.552
date: Wed, 08 Feb 2023 04:56:33 GMT
age: 2545487
accept-ranges: bytes
content-type: image/svg+xml
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10079-SJC, cache-bma1627-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
content-length: 1334
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/support-mobile.PNG
200 OK 215 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/support-mobile.PNG
IP
File type PNG image data, 365 x 416, 8-bit/color RGBA, non-interlaced\012- data
Size 215 kB (215081 bytes)
Hash c67edc9f2f91cc55d2bb4cd1db221f88
f1db70c0849edb72d6c1e712660ee289e6d7f755
d061850b353fc488ed78056daa271d5d94b5e62f6c840b4669cef6b0b074a7c4
GET /uploads/media/DOC/home/support-mobile.PNG HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Tue, 09 Aug 2022 01:43:43 GMT
server: imgix
x-imgix-id: 9fd727abab4fa66fcb01546ce986e8a451900ade
x-imgix-render-farm: 01.1064
date: Wed, 08 Feb 2023 04:56:33 GMT
age: 3000294
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10053-SJC, cache-bma1627-BMA
x-cache: HIT, HIT
content-length: 215081
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/doggo-footer.svg
200 OK 1.3 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/doggo-footer.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2775)
Hash bdc5623deb6ed892390913e3304372c2
f7f0db9505e566f2691fa9fde28f748cf30ea0d7
d39e58f66daed5cfbac2331e27fdf1f831200b828fd7c601f0740669330b5965
GET /uploads/media/DOC/home/doggo-footer.svg HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 22 Jun 2022 15:01:49 GMT
content-encoding: gzip
server: imgix
x-imgix-id: 757a0a7dcdac30202c138b8e77101b97e0785ca6
x-imgix-render-farm: 01.1064
date: Wed, 08 Feb 2023 04:56:33 GMT
age: 1876887
accept-ranges: bytes
content-type: image/svg+xml
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10058-SJC, cache-bma1627-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
content-length: 1271
X-Firefox-Spdy: h2
cmsapi.doggocasino.com/ajax/game/getLobbyGameGroupGames?languageId=en
200 OK 107 kB URL HTTP/1.1 cmsapi.doggocasino.com/ajax/game/getLobbyGameGroupGames?languageId=en
IP
File type JSON data\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (65536), with no line terminators
Size 107 kB (107213 bytes)
Hash 9d279903540d3d80a16dbbd52b29366d
dbd4c83af117e1fb0b1cb6b12a96d75b6d13e624
7a8cb1ca0d56b06b762602703bcf172c6cadf3980c23462be57af6fb37302404
GET /ajax/game/getLobbyGameGroupGames?languageId=en HTTP/1.1
Host: cmsapi.doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://doggocasino.com
Connection: keep-alive
Referer: https://doggocasino.com/
Cookie: _ga_K4EHGY5F0T=GS1.1.1675832245.1.0.1675832245.60.0.0; _ga=GA1.1.1763717188.1675832246; ci_session=slgs8c8cuf9g08gju231kfmv6lbqup8m
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 08 Feb 2023 04:56:33 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Methods: GET, POST, OPTIONS, PUT, DELETE
Access-Control-Allow-Origin: https://doggocasino.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Request-ID,X-REQ-ID,Authorization,X-MGS-BusinessUnit,Accept-Language
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: ci_session=slgs8c8cuf9g08gju231kfmv6lbqup8m; expires=Wed, 08-Feb-2023 05:56:33 GMT; Max-Age=3600; path=/; SameSite=None; secure; HttpOnly
Content-Language: en
Vary: Accept-Encoding, Accept-Encoding
Content-Encoding: gzip
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/faq-mobile.png
200 OK 128 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/faq-mobile.png
IP
File type PNG image data, 364 x 359, 8-bit/color RGB, non-interlaced\012- data
Size 128 kB (127922 bytes)
Hash a7fb206443a401aac5e0da3d3157bd4e
3b767d26f8ff846b345042e358f9685a994f3bda
ce580ea6b4e038bf83f50d103c8f90c9f57f817f9395dfdcbeb9595961f5a6d7
GET /uploads/media/DOC/home/faq-mobile.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Tue, 09 Aug 2022 01:55:49 GMT
server: imgix
x-imgix-id: 9df977ec3305d1fcd2280dd8ad155be340a1e160
x-imgix-render-farm: 01.1064
date: Wed, 08 Feb 2023 04:56:33 GMT
age: 663625
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10025-SJC, cache-bma1627-BMA
x-cache: HIT, HIT
content-length: 127922
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/game-providers.png
200 OK 94 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/game-providers.png
IP
File type PNG image data, 1745 x 182, 8-bit/color RGBA, non-interlaced\012- data
Hash 81248b605a052a84ea52f8c2a21eb566
cd779dc72ba988847e98bef0e526eda8d6dacc0b
8c673f835da44c70b9e1c111baeac722e344c79c6e8a9ad0e1ef0d848f4ca82d
GET /uploads/media/DOC/home/game-providers.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Tue, 13 Dec 2022 13:37:51 GMT
server: imgix
x-imgix-id: 618564c3a058ec8863ef74d3e32b5d4b0fb2a4b4
x-imgix-render-farm: 02.552
date: Wed, 08 Feb 2023 04:56:33 GMT
age: 1887694
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10026-SJC, cache-bma1627-BMA
x-cache: HIT, HIT
content-length: 93464
X-Firefox-Spdy: h2
event.iconvert.network/com.snowplowanalytics.snowplow/tp2
200 OK 2 B URL HTTP/2 event.iconvert.network/com.snowplowanalytics.snowplow/tp2
IP
File type ASCII text, with no line terminators
Hash 444bcb3a3fcf8389296c49467f27e1d6
7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1
Host: event.iconvert.network
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
Content-Length: 714
Origin: https://doggocasino.com
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 08 Feb 2023 04:56:33 GMT
content-type: text/plain; charset=UTF-8
content-length: 2
set-cookie: sp=bbf42270-b95b-417c-98d5-e30a823aa60a; Expires=Thu, 08 Feb 2024 04:56:33 GMT; Path=/
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA"
access-control-allow-origin: https://doggocasino.com
access-control-allow-credentials: true
server: akka-http/10.0.9
X-Firefox-Spdy: h2
scripts.prdredir.com/scripts/k_doggocasino.js
200 OK 34 kB URL HTTP/2 scripts.prdredir.com/scripts/k_doggocasino.js
IP
File type ASCII text, with very long lines (65521)
Hash fb777274d2c9f5ee02ec2f8a1dce4e35
674a8a72af56ae8b77f8e0770b0339866b4cde2b
21a5296f58e6c21044a9f2b9ca34df6d1e54665df2d4a6b6cb9b4784ee4fabfa
GET /scripts/k_doggocasino.js HTTP/1.1
Host: scripts.prdredir.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 08 Feb 2023 04:56:33 GMT
content-type: text/javascript; charset=utf-8
status: 200 OK
cache-control: no-cache
access-control-allow-origin: *
x-request-id: efd4c149-1d5b-47c0-8fa4-cfca16b14af9
etag: W/"f7e308d743a3c1fb1be9fe80b73d8fdb"
x-runtime: 0.008982
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wOtFtlgl7YahIJ9AKgYZy657SbQLV9axqPYLnzhTdCamopWXxrdCbLbuCRswsaHDl3U7yNdFswILC7K3KzYHx6EjCNqN4HTia6Uh0EhKLTbqOAOjsFl3x9cObM2x7z0USlehgvm9mg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7961c786993823d5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/grey-shape.svg
200 OK 268 B URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/grey-shape.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text
Hash e67eb7098ee71853fcbbbe3c95e0d0ec
1f2455492bab9ed1dba60056bbcd67178f2ee37a
5e65e35f0d76280d27163d29f5064bd628d1cc13f7e8fdae7cd8650391eefc7f
GET /uploads/media/DOC/home/grey-shape.svg HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Tue, 08 Nov 2022 09:02:38 GMT
content-encoding: gzip
server: imgix
x-imgix-id: cb2acdc5691cb7ede86c57e7e0aba797c670abfb
x-imgix-render-farm: 02.552
date: Wed, 08 Feb 2023 04:56:33 GMT
age: 1885254
accept-ranges: bytes
content-type: image/svg+xml
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10034-SJC, cache-bma1627-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
content-length: 268
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/safe-instant.png
200 OK 443 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/safe-instant.png
IP
File type PNG image data, 1714 x 1493, 8-bit/color RGBA, non-interlaced\012- data
Size 443 kB (443061 bytes)
Hash 4c909be3d5a19673623ab2349cf6a79a
b539798e89471deb60df0ea3b11c3b80e641dff9
242dd8c08ed942b0e678d615eb1ea42e524fa05bf6b83fb705456e6a5e3207c9
GET /uploads/media/DOC/home/safe-instant.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Thu, 01 Dec 2022 09:35:32 GMT
server: imgix
x-imgix-id: f0fcd198a614d37120ac195c6db5b07abd07f4b9
x-imgix-render-farm: 02.552
date: Wed, 08 Feb 2023 04:56:33 GMT
age: 5511719
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10031-SJC, cache-bma1627-BMA
x-cache: HIT, HIT
content-length: 443061
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/life-changin-wins.png
200 OK 732 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/life-changin-wins.png
IP
File type PNG image data, 2015 x 1068, 8-bit/color RGBA, non-interlaced\012- data
Size 732 kB (731764 bytes)
Hash a7705b01f4799b3cab2f8cdbf71daa66
1395854d5261db43c37bb8706333ce2374e9d126
fca04d41f3c865308bffae37090a41da6d27db5b17bc7811ad7c288f0d2972b7
GET /uploads/media/DOC/home/life-changin-wins.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Thu, 10 Nov 2022 08:07:33 GMT
server: imgix
x-imgix-id: eaa8d30a11e07300b2c20d9eefe5f155bbf39adb
x-imgix-render-farm: 02.552
date: Wed, 08 Feb 2023 04:56:33 GMT
age: 663621
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10077-SJC, cache-bma1627-BMA
x-cache: HIT, HIT
content-length: 731764
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/custom-loyalty.png
200 OK 884 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/custom-loyalty.png
IP
File type PNG image data, 1247 x 848, 8-bit/color RGBA, non-interlaced\012- data
Size 884 kB (883840 bytes)
Hash 9ebf6e306dc67cee050fe9c92de5d2cc
d5f12930b0e5b56ed0f13475d1a3fd9f9f6001ad
a95d15788e300398aec81c5fbcec4742423977b9ecaa23a8e5d3cfcbd0c6f82d
GET /uploads/media/DOC/home/custom-loyalty.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 22 Jun 2022 15:01:49 GMT
server: imgix
x-imgix-id: 3f80027569f50c2428d6316ff89921d6c28ed46d
x-imgix-render-farm: 01.1064
date: Wed, 08 Feb 2023 04:56:33 GMT
age: 3001774
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10081-SJC, cache-bma1627-BMA
x-cache: HIT, HIT
content-length: 883840
X-Firefox-Spdy: h2
region1.analytics.google.com/g/collect?v=2&tid=G-K4EHGY5F0T>m=45je3260&_p=1420350135&_gaz=1&cid=1763717188.1675832246&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675832245&sct=1&seg=0&dl=https%3A%2F%2Fdoggocasino.com%2Fen-us%3FaffiliateName%3D%5Bcellxpert%5D%26affid%3Dcx-35656_393091%26bannerid%3D35656%26trackerid%3D35656_393091%26brand%3Ddoggocasino%26bta%3D35656%26rdk%3Drk1&dt=Doggo%20Casino&en=page_view&_fv=1&_nsi=1&_ss=1
204 No Content 0 B URL HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-K4EHGY5F0T>m=45je3260&_p=1420350135&_gaz=1&cid=1763717188.1675832246&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675832245&sct=1&seg=0&dl=https%3A%2F%2Fdoggocasino.com%2Fen-us%3FaffiliateName%3D%5Bcellxpert%5D%26affid%3Dcx-35656_393091%26bannerid%3D35656%26trackerid%3D35656_393091%26brand%3Ddoggocasino%26bta%3D35656%26rdk%3Drk1&dt=Doggo%20Casino&en=page_view&_fv=1&_nsi=1&_ss=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-K4EHGY5F0T>m=45je3260&_p=1420350135&_gaz=1&cid=1763717188.1675832246&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675832245&sct=1&seg=0&dl=https%3A%2F%2Fdoggocasino.com%2Fen-us%3FaffiliateName%3D%5Bcellxpert%5D%26affid%3Dcx-35656_393091%26bannerid%3D35656%26trackerid%3D35656_393091%26brand%3Ddoggocasino%26bta%3D35656%26rdk%3Drk1&dt=Doggo%20Casino&en=page_view&_fv=1&_nsi=1&_ss=1 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://doggocasino.com
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://doggocasino.com
date: Wed, 08 Feb 2023 04:56:34 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/slots-games.png
200 OK 1.4 MB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/slots-games.png
IP
File type PNG image data, 1920 x 738, 8-bit/color RGBA, non-interlaced\012- data
Size 1.4 MB (1428029 bytes)
Hash 69a5c6da5ff813320794608f66b5ee7a
e9c21af6d994f279e128ef4e441e28e2daa040b0
be88b78ea90958397eb001632620464892e60304d6f2ef4a8a30d45e2ca36265
GET /uploads/media/DOC/home/slots-games.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Tue, 06 Dec 2022 08:10:12 GMT
server: imgix
x-imgix-id: 73e8dc90f791d188397dd4e4878087854cd1add3
x-imgix-render-farm: 02.552
date: Wed, 08 Feb 2023 04:56:33 GMT
age: 2852906
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10036-SJC, cache-bma1627-BMA
x-cache: HIT, HIT
content-length: 1428029
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 7ec32dff957003dae195c36ca9e3bd6c
6761a20819b0d5a48216d74782e3ea752af7257a
953a3a2d35250df7b506b42f7d1d8813301dd1f9f9bcc30d2d100bd0788e4c76
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 04:56:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.entrust.net/
200 OK 1.6 kB IP
Hash 1628ebfdce01353316e30026bb1f1f27
373d4105ff8dc61236afa82f30ad1a648b9e0a68
a6b8d36ecd66964ca4bb3d79cd90b2ba708d734e689c9139b5e45857339d0930
POST / HTTP/1.1
Host: ocsp.entrust.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
ETag: "A6B8D36ECD66964CA4BB3D79CD90B2BA708D734E689C9139B5E45857339D0930"
Last-Modified: Tue, 07 Feb 2023 20:00:00 UTC
Content-Length: 1588
Cache-Control: public, no-transform, must-revalidate, max-age=3539
Expires: Wed, 08 Feb 2023 05:55:33 GMT
Date: Wed, 08 Feb 2023 04:56:34 GMT
Connection: keep-alive
doggocasino-images-prd.imgix.net/uploads/media/DOC/images/9kzyghkpt-8kpegzft6-8kpbpz732-LiveCasino-Icon.svg
200 OK 2.1 kB URL HTTP/2 doggocasino-images-prd.imgix.net/uploads/media/DOC/images/9kzyghkpt-8kpegzft6-8kpbpz732-LiveCasino-Icon.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2535)
Hash ca090d9ae105fcebb45202ad645b0d96
8e8d212ed026415b9b1aff0abb680594351275a7
5b0e17ce4aef9bbed4e7376bbcc564c3a4a9b649f80f7c40d8ac2306e36b9592
GET /uploads/media/DOC/images/9kzyghkpt-8kpegzft6-8kpbpz732-LiveCasino-Icon.svg HTTP/1.1
Host: doggocasino-images-prd.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Fri, 06 May 2022 13:28:14 GMT
content-encoding: gzip
server: imgix
x-imgix-id: f2fceca1e8d3249e4ad06449ba8312bfff794c54
x-imgix-render-farm: 01.1064
date: Wed, 08 Feb 2023 04:56:33 GMT
age: 2547247
accept-ranges: bytes
content-type: image/svg+xml
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10083-SJC, cache-bma1627-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
content-length: 2068
X-Firefox-Spdy: h2
doggocasino-images-prd.imgix.net/uploads/media/DOC/images/9kzyghkni-akqaph2rd-CasinoIcon.svg
200 OK 767 B URL HTTP/2 doggocasino-images-prd.imgix.net/uploads/media/DOC/images/9kzyghkni-akqaph2rd-CasinoIcon.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1076)
Hash 59a7c757952f4e73719f399cd6616389
e7a24c2b840a5c55ca3e62461675009c9928917e
79466ff238e8321bec8616124c08f8800952547ae9e89f88dad9d764c913c224
GET /uploads/media/DOC/images/9kzyghkni-akqaph2rd-CasinoIcon.svg HTTP/1.1
Host: doggocasino-images-prd.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Fri, 06 May 2022 13:28:13 GMT
content-encoding: gzip
server: imgix
x-imgix-id: 3bde9d2887b9fcebf87f2e594315c8700c03cf6a
x-imgix-render-farm: 01.1064
date: Wed, 08 Feb 2023 04:56:33 GMT
age: 657622
accept-ranges: bytes
content-type: image/svg+xml
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10069-SJC, cache-bma1627-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
content-length: 767
X-Firefox-Spdy: h2
doggocasino.com/assets/images/payments/Visa.webp
200 OK 5.1 kB URL HTTP/2 doggocasino.com/assets/images/payments/Visa.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 4b0108440760f16641970c1d5d16cd00
507b3518c8eb975026333a76be0d0178cbc9c2ad
28da44d8c47934effa061189c0f8c3d7253f030c8551e6a5358c065c152f0e46
GET /assets/images/payments/Visa.webp HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/no-no?affiliateName=%5Bcellxpert%5D&affid=cx-35656_393091&bannerid=35656&trackerid=35656_393091&brand=doggocasino&bta=35656&rdk=rk1
Cookie: _ga_K4EHGY5F0T=GS1.1.1675832245.1.0.1675832245.60.0.0; _ga=GA1.1.1763717188.1675832246; __adm_tid=tid-30f2d5dd7.3e1c5dbad; affiliateId=cx-35656_393091; bannerId=35656; trackerId=35656_393091; affiliateName=%5Bcellxpert%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 5090
date: Tue, 07 Feb 2023 09:00:49 GMT
x-amz-meta-codebuild-content-sha256: 3a1d5f559d5de88345d69cd1f7926e0696ca48590ba3b279ba4374bc1a2c46d3
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:dc7f672c-4669-47fb-9710-2346e6c01aac
x-amz-meta-codebuild-content-md5: acb33710ef6e17c1daa2f7ebc264824d
last-modified: Tue, 07 Feb 2023 08:57:14 GMT
x-amz-version-id: FhBXV19rSzNvX31yQ_9M6a4So5OEErql
etag: "4b0108440760f16641970c1d5d16cd00"
server: AmazonS3
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
age: 71746
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: VdUSFu267uV62BrzgbS_PHaU2HD6SwNh-PJo_G5eti0s4tYsxm-6xw==
X-Firefox-Spdy: h2
doggocasino-images-prd.imgix.net/uploads/media/DOC/images/9kzygv6fx-8kpi8m203-8kpgg29wu-gift-box-thicker.svg
200 OK 941 B URL HTTP/2 doggocasino-images-prd.imgix.net/uploads/media/DOC/images/9kzygv6fx-8kpi8m203-8kpgg29wu-gift-box-thicker.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 76be76f2a7dec465f2452f35658a2e09
0f1bbf98737266b676a2c4b32b1544168e73943b
6ae9272128515c2144e856126178a61c16ab6db3c0a613d8dce9f483164d08d4
GET /uploads/media/DOC/images/9kzygv6fx-8kpi8m203-8kpgg29wu-gift-box-thicker.svg HTTP/1.1
Host: doggocasino-images-prd.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 09 Nov 2022 10:27:54 GMT
content-encoding: gzip
server: imgix
x-imgix-id: 88911c0fad530edff12315369537684698137913
x-imgix-render-farm: 02.552
date: Wed, 08 Feb 2023 04:56:33 GMT
age: 2486443
accept-ranges: bytes
content-type: image/svg+xml
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10043-SJC, cache-bma1627-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
content-length: 941
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/24hr-bg.png
200 OK 846 kB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/24hr-bg.png
IP
File type PNG image data, 1467 x 776, 8-bit/color RGBA, non-interlaced\012- data
Size 846 kB (845713 bytes)
Hash 43c4bfb0ef50eee6044ebfd26e20b6b9
7183a0e6cbb296bb9493535579b67afe4c3244cf
e67b16b94d3723da0a5dd239a4104f4a1f46d64f3fb3915c86e8f9a46be8c1d3
GET /uploads/media/DOC/home/24hr-bg.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 22 Jun 2022 15:01:49 GMT
server: imgix
x-imgix-id: 59b5628c06af804b7cf1847feb821cae286d41c8
x-imgix-render-farm: 01.1064
date: Wed, 08 Feb 2023 04:56:33 GMT
age: 1969878
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10023-SJC, cache-bma1627-BMA
x-cache: HIT, HIT
content-length: 845713
X-Firefox-Spdy: h2
doggocasino.com/assets/images/payments/MC.webp
200 OK 5.7 kB URL HTTP/2 doggocasino.com/assets/images/payments/MC.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash a1e6c278fdafab2a5a4b685e0c58716f
b93e5dc087323be40023bbefaf8ba9c8744c944b
621320f77e17050f2f5a58e52f81fbc0031fa0fb388d3678615c1f313576b2b3
GET /assets/images/payments/MC.webp HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/no-no?affiliateName=%5Bcellxpert%5D&affid=cx-35656_393091&bannerid=35656&trackerid=35656_393091&brand=doggocasino&bta=35656&rdk=rk1
Cookie: _ga_K4EHGY5F0T=GS1.1.1675832245.1.0.1675832245.60.0.0; _ga=GA1.1.1763717188.1675832246; __adm_tid=tid-30f2d5dd7.3e1c5dbad; affiliateId=cx-35656_393091; bannerId=35656; trackerId=35656_393091; affiliateName=%5Bcellxpert%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 5670
date: Tue, 07 Feb 2023 09:00:49 GMT
x-amz-meta-codebuild-content-sha256: 3a1d5f559d5de88345d69cd1f7926e0696ca48590ba3b279ba4374bc1a2c46d3
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:dc7f672c-4669-47fb-9710-2346e6c01aac
x-amz-meta-codebuild-content-md5: acb33710ef6e17c1daa2f7ebc264824d
last-modified: Tue, 07 Feb 2023 08:57:21 GMT
x-amz-version-id: YcB4JzQNdAreQTwlgRyWzY4ciLV7LYRE
etag: "a1e6c278fdafab2a5a4b685e0c58716f"
server: AmazonS3
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
age: 71746
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: cI3IyZDDn356OSFwYXyDPO0TQIePz8XKf6GUiHR_MzAwWXNkw0Esvg==
X-Firefox-Spdy: h2
doggocasino-images-uat.imgix.net/uploads/media/DOC/home/faq.png
200 OK 1.0 MB URL HTTP/2 doggocasino-images-uat.imgix.net/uploads/media/DOC/home/faq.png
IP
File type PNG image data, 1920 x 1096, 8-bit/color RGBA, non-interlaced\012- data
Size 1.0 MB (1000337 bytes)
Hash ef96f74f51b5138969246a0b3d1996ac
ca519301ff25dec4f07e54574a40d7012eb6763d
b2e61e89a6a0e373694d5520d34bee9fc24442d94176daa9bf01ad94e8648c5a
GET /uploads/media/DOC/home/faq.png HTTP/1.1
Host: doggocasino-images-uat.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Tue, 26 Jul 2022 05:03:44 GMT
server: imgix
x-imgix-id: dd31b08aa3bffd954bc064773a93f9e63e36e2bf
x-imgix-render-farm: 02.552
date: Wed, 08 Feb 2023 04:56:33 GMT
age: 2989518
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10041-SJC, cache-bma1627-BMA
x-cache: HIT, HIT
content-length: 1000337
X-Firefox-Spdy: h2
doggocasino.com/assets/images/payments/AstroPay-isotipo.webp
200 OK 8.5 kB URL HTTP/2 doggocasino.com/assets/images/payments/AstroPay-isotipo.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 7b4904268f33a2bc7d4d9f6bf0b4cd30
0ecb6a5b1fef840b715baf1056de562dfc7cc925
2ec6fcda254d694c53f87b6df84b2cf4a0a2884d6149bf7c2b26952b4e6615b3
GET /assets/images/payments/AstroPay-isotipo.webp HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/no-no?affiliateName=%5Bcellxpert%5D&affid=cx-35656_393091&bannerid=35656&trackerid=35656_393091&brand=doggocasino&bta=35656&rdk=rk1
Cookie: _ga_K4EHGY5F0T=GS1.1.1675832245.1.0.1675832245.60.0.0; _ga=GA1.1.1763717188.1675832246; __adm_tid=tid-30f2d5dd7.3e1c5dbad; affiliateId=cx-35656_393091; bannerId=35656; trackerId=35656_393091; affiliateName=%5Bcellxpert%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 8482
date: Tue, 07 Feb 2023 09:00:49 GMT
x-amz-meta-codebuild-content-sha256: 3a1d5f559d5de88345d69cd1f7926e0696ca48590ba3b279ba4374bc1a2c46d3
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:dc7f672c-4669-47fb-9710-2346e6c01aac
x-amz-meta-codebuild-content-md5: acb33710ef6e17c1daa2f7ebc264824d
last-modified: Tue, 07 Feb 2023 08:57:13 GMT
x-amz-version-id: tH_qm1hTgupB0K2orCuBHcPZmJ8eUOkd
etag: "7b4904268f33a2bc7d4d9f6bf0b4cd30"
server: AmazonS3
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
age: 71746
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 4Z6RPp2gy9WhQYuJ17LWrl8kCWPBboaJOUfUm3wVicla-tZcqtounw==
X-Firefox-Spdy: h2
doggocasino.com/assets/images/payments/CRYPTO-NO-square.webp
200 OK 9.5 kB URL HTTP/2 doggocasino.com/assets/images/payments/CRYPTO-NO-square.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 1743ed8f0a9ca24cb2f49dbb61f70b5b
2c3b851c280984ba7e84b08a956b6122d6575076
9b6bf4178662a1c7e7afd5f111f641de9a44afe4788afb885040b134c1cf2323
GET /assets/images/payments/CRYPTO-NO-square.webp HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/no-no?affiliateName=%5Bcellxpert%5D&affid=cx-35656_393091&bannerid=35656&trackerid=35656_393091&brand=doggocasino&bta=35656&rdk=rk1
Cookie: _ga_K4EHGY5F0T=GS1.1.1675832245.1.0.1675832245.60.0.0; _ga=GA1.1.1763717188.1675832246; __adm_tid=tid-30f2d5dd7.3e1c5dbad; affiliateId=cx-35656_393091; bannerId=35656; trackerId=35656_393091; affiliateName=%5Bcellxpert%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 9456
date: Tue, 07 Feb 2023 09:00:49 GMT
x-amz-meta-codebuild-content-sha256: 3a1d5f559d5de88345d69cd1f7926e0696ca48590ba3b279ba4374bc1a2c46d3
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:dc7f672c-4669-47fb-9710-2346e6c01aac
x-amz-meta-codebuild-content-md5: acb33710ef6e17c1daa2f7ebc264824d
last-modified: Tue, 07 Feb 2023 08:57:19 GMT
x-amz-version-id: iEgs_nEnmHX9Zd0czcDlU10LGuBPbvcg
etag: "1743ed8f0a9ca24cb2f49dbb61f70b5b"
server: AmazonS3
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
age: 71746
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: xdMQEmtAjoqya_D_9VEFoIBSxOVPNsg00LBmkwo0vD4yXRzfrUd0GQ==
X-Firefox-Spdy: h2
doggocasino.com/assets/mock/globe.webp
200 OK 1.9 kB URL HTTP/2 doggocasino.com/assets/mock/globe.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 19215c98163e609fed2e96a76e46f6cd
65fa846b9eafd2d3420b079a6ee8baac0fa183c5
685bf72f57fdcba509c9981d2ad69cd5f95d4b4135315011fad8c5bc2b5c79ad
GET /assets/mock/globe.webp HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/no-no?affiliateName=%5Bcellxpert%5D&affid=cx-35656_393091&bannerid=35656&trackerid=35656_393091&brand=doggocasino&bta=35656&rdk=rk1
Cookie: _ga_K4EHGY5F0T=GS1.1.1675832245.1.0.1675832245.60.0.0; _ga=GA1.1.1763717188.1675832246; __adm_tid=tid-30f2d5dd7.3e1c5dbad; affiliateId=cx-35656_393091; bannerId=35656; trackerId=35656_393091; affiliateName=%5Bcellxpert%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 1902
date: Tue, 07 Feb 2023 09:00:49 GMT
x-amz-meta-codebuild-content-sha256: 3a1d5f559d5de88345d69cd1f7926e0696ca48590ba3b279ba4374bc1a2c46d3
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:dc7f672c-4669-47fb-9710-2346e6c01aac
x-amz-meta-codebuild-content-md5: acb33710ef6e17c1daa2f7ebc264824d
last-modified: Tue, 07 Feb 2023 08:57:12 GMT
x-amz-version-id: JIZ.Gg0P4o7VwOwKBrJ7PJXI.hxb2GgJ
etag: "19215c98163e609fed2e96a76e46f6cd"
server: AmazonS3
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
age: 71746
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: MdevItxWsjI2zeWcYA-HBuOH1nBCtiYbKAw5vaMsXREjn41IblVNFQ==
X-Firefox-Spdy: h2
stats.g.doubleclick.net/g/collect?v=2&tid=G-K4EHGY5F0T&cid=1763717188.1675832246>m=45je3260&aip=1
204 No Content 0 B URL HTTP/2 stats.g.doubleclick.net/g/collect?v=2&tid=G-K4EHGY5F0T&cid=1763717188.1675832246>m=45je3260&aip=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-K4EHGY5F0T&cid=1763717188.1675832246>m=45je3260&aip=1 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://doggocasino.com
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://doggocasino.com
date: Wed, 08 Feb 2023 04:56:34 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1d885cfc22a04f1216c98dd64df5338a
589916a844b81fac40af88a772865b8e28dfb64e
40c0e55533794d72bbba4bc9d0f07fe0741e24ca23fd9b3e31d2830c77a51bf3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "40C0E55533794D72BBBA4BC9D0F07FE0741E24CA23FD9B3E31D2830C77A51BF3"
Last-Modified: Wed, 08 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20585
Expires: Wed, 08 Feb 2023 10:39:39 GMT
Date: Wed, 08 Feb 2023 04:56:34 GMT
Connection: keep-alive
doggocasino.com/assets/images/footer-toggler.svg
200 OK 280 B URL HTTP/2 doggocasino.com/assets/images/footer-toggler.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with no line terminators
Hash 46e6bc71c2b77f578a5f70fff751c2e2
5ee5f0f9c2895c70cdc83336ccdb2e02fe0fae6a
541b157986e7a281b28b520b8a862570975f84cedd61b8fe390985f210b7b140
GET /assets/images/footer-toggler.svg HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/no-no?affiliateName=%5Bcellxpert%5D&affid=cx-35656_393091&bannerid=35656&trackerid=35656_393091&brand=doggocasino&bta=35656&rdk=rk1
Cookie: _ga_K4EHGY5F0T=GS1.1.1675832245.1.0.1675832245.60.0.0; _ga=GA1.1.1763717188.1675832246; __adm_tid=tid-30f2d5dd7.3e1c5dbad; affiliateId=cx-35656_393091; bannerId=35656; trackerId=35656_393091; affiliateName=%5Bcellxpert%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 280
date: Tue, 07 Feb 2023 09:00:49 GMT
x-amz-meta-codebuild-content-sha256: 3a1d5f559d5de88345d69cd1f7926e0696ca48590ba3b279ba4374bc1a2c46d3
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:dc7f672c-4669-47fb-9710-2346e6c01aac
x-amz-meta-codebuild-content-md5: acb33710ef6e17c1daa2f7ebc264824d
last-modified: Tue, 07 Feb 2023 08:57:18 GMT
x-amz-version-id: 6qV5s3lDWjXFDOdLm1g3QdFvyudHZNhF
etag: "46e6bc71c2b77f578a5f70fff751c2e2"
server: AmazonS3
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
age: 71746
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 3wfCXUQKoPYDs-e1sdmk9f7YwafI_P7g-Q7sbl4kuRHv03dsh89sSg==
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1d885cfc22a04f1216c98dd64df5338a
589916a844b81fac40af88a772865b8e28dfb64e
40c0e55533794d72bbba4bc9d0f07fe0741e24ca23fd9b3e31d2830c77a51bf3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "40C0E55533794D72BBBA4BC9D0F07FE0741E24CA23FD9B3E31D2830C77A51BF3"
Last-Modified: Wed, 08 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20585
Expires: Wed, 08 Feb 2023 10:39:39 GMT
Date: Wed, 08 Feb 2023 04:56:34 GMT
Connection: keep-alive
doggocasino.com/assets/images/chevron-up.svg
200 OK 377 B URL HTTP/2 doggocasino.com/assets/images/chevron-up.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (377), with no line terminators
Hash e99c36ba370f2d6cf266c3907e514133
8b48f9785b603081f5ee2012bd44596dd283b70c
eb236654d5b58ad96fee3c4f827259f12274576d8f17e02e3c733026674bccf3
GET /assets/images/chevron-up.svg HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/no-no?affiliateName=%5Bcellxpert%5D&affid=cx-35656_393091&bannerid=35656&trackerid=35656_393091&brand=doggocasino&bta=35656&rdk=rk1
Cookie: _ga_K4EHGY5F0T=GS1.1.1675832245.1.0.1675832245.60.0.0; _ga=GA1.1.1763717188.1675832246; __adm_tid=tid-30f2d5dd7.3e1c5dbad; affiliateId=cx-35656_393091; bannerId=35656; trackerId=35656_393091; affiliateName=%5Bcellxpert%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 377
date: Tue, 07 Feb 2023 09:00:49 GMT
x-amz-meta-codebuild-content-sha256: 3a1d5f559d5de88345d69cd1f7926e0696ca48590ba3b279ba4374bc1a2c46d3
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:dc7f672c-4669-47fb-9710-2346e6c01aac
x-amz-meta-codebuild-content-md5: acb33710ef6e17c1daa2f7ebc264824d
last-modified: Tue, 07 Feb 2023 08:57:11 GMT
x-amz-version-id: F0fTbC.THlyta.WLcHLgecEJ0OLcDBCM
etag: "e99c36ba370f2d6cf266c3907e514133"
server: AmazonS3
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
age: 71746
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ZJlLPnAu7fvH4pi-gnjTYp_-ld5sHbQoc4MKbwA2OpV-VtZczpC4Kw==
X-Firefox-Spdy: h2
doggocasino.com/assets/fonts/CeraPro/Cera_Pro_Light.otf
200 OK 185 kB URL HTTP/2 doggocasino.com/assets/fonts/CeraPro/Cera_Pro_Light.otf
IP
File type OpenType font data\012- data
Size 185 kB (185224 bytes)
Hash 112299d7917b38aff426d451d495f3d7
6de584a008b9858f356612935204940c53f5c226
51678261b34255f1b6aa36b5ec12956d44cf63162f8e86cb838594484148fe2d
GET /assets/fonts/CeraPro/Cera_Pro_Light.otf HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/styles.6fe09080dd4bc8174585.css
Cookie: _ga_K4EHGY5F0T=GS1.1.1675832245.1.0.1675832245.60.0.0; _ga=GA1.1.1763717188.1675832246; __adm_tid=tid-30f2d5dd7.3e1c5dbad; affiliateId=cx-35656_393091; bannerId=35656; trackerId=35656_393091; affiliateName=%5Bcellxpert%5D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 185224
date: Tue, 07 Feb 2023 09:00:49 GMT
x-amz-meta-codebuild-content-sha256: 3a1d5f559d5de88345d69cd1f7926e0696ca48590ba3b279ba4374bc1a2c46d3
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:dc7f672c-4669-47fb-9710-2346e6c01aac
x-amz-meta-codebuild-content-md5: acb33710ef6e17c1daa2f7ebc264824d
last-modified: Tue, 07 Feb 2023 08:57:10 GMT
x-amz-version-id: 32T_GxLTLwxO.RiUOeQWT7feUKNBXsel
etag: "112299d7917b38aff426d451d495f3d7"
server: AmazonS3
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
age: 71746
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: gcPJ8pP89biy4R46yRopQvF1WXNvW9g8NUsxxc-Z2MyenayalHONFQ==
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1d885cfc22a04f1216c98dd64df5338a
589916a844b81fac40af88a772865b8e28dfb64e
40c0e55533794d72bbba4bc9d0f07fe0741e24ca23fd9b3e31d2830c77a51bf3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "40C0E55533794D72BBBA4BC9D0F07FE0741E24CA23FD9B3E31D2830C77A51BF3"
Last-Modified: Wed, 08 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20585
Expires: Wed, 08 Feb 2023 10:39:39 GMT
Date: Wed, 08 Feb 2023 04:56:34 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1d885cfc22a04f1216c98dd64df5338a
589916a844b81fac40af88a772865b8e28dfb64e
40c0e55533794d72bbba4bc9d0f07fe0741e24ca23fd9b3e31d2830c77a51bf3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "40C0E55533794D72BBBA4BC9D0F07FE0741E24CA23FD9B3E31D2830C77A51BF3"
Last-Modified: Wed, 08 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20585
Expires: Wed, 08 Feb 2023 10:39:39 GMT
Date: Wed, 08 Feb 2023 04:56:34 GMT
Connection: keep-alive
doggocasino.com/assets/images/doggocasino-license.png
200 OK 46 kB URL HTTP/2 doggocasino.com/assets/images/doggocasino-license.png
IP
File type PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced\012- data
Hash 375b5b5bcd1d5179f5b789e4c28ca6df
f52bfd097b13f83fa43714f59786efa4082f55a1
f7acaa7ace617964cd79de3287bfa740f1d3fbcbed82ea1d09cd94058d4b1281
GET /assets/images/doggocasino-license.png HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/no-no?affiliateName=%5Bcellxpert%5D&affid=cx-35656_393091&bannerid=35656&trackerid=35656_393091&brand=doggocasino&bta=35656&rdk=rk1
Cookie: _ga_K4EHGY5F0T=GS1.1.1675832245.1.0.1675832245.60.0.0; _ga=GA1.1.1763717188.1675832246; __adm_tid=tid-30f2d5dd7.3e1c5dbad; affiliateId=cx-35656_393091; bannerId=35656; trackerId=35656_393091; affiliateName=%5Bcellxpert%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 46382
x-amz-id-2: 37nhd/4g01uukIjFDHJ6JJgsmc0jr+L3JworckFyrsWwX/G8g/W0B6LfUX4qXnHmEsWBKYDREQo=
x-amz-request-id: 9FZG0V2W51WC9MJG
date: Tue, 07 Feb 2023 08:59:03 GMT
x-amz-meta-codebuild-content-sha256: 3a1d5f559d5de88345d69cd1f7926e0696ca48590ba3b279ba4374bc1a2c46d3
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:dc7f672c-4669-47fb-9710-2346e6c01aac
x-amz-meta-codebuild-content-md5: acb33710ef6e17c1daa2f7ebc264824d
last-modified: Tue, 07 Feb 2023 08:57:16 GMT
x-amz-version-id: HFxAkpUY7ZLoZzkPCci0JuyJgzHpTaLq
etag: "375b5b5bcd1d5179f5b789e4c28ca6df"
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: kFC8ituvClu7_SfoWTbssJ9oFFhNNLWPNdOtxwqZ8c_vkRoJAxn8rQ==
age: 71852
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1d885cfc22a04f1216c98dd64df5338a
589916a844b81fac40af88a772865b8e28dfb64e
40c0e55533794d72bbba4bc9d0f07fe0741e24ca23fd9b3e31d2830c77a51bf3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "40C0E55533794D72BBBA4BC9D0F07FE0741E24CA23FD9B3E31D2830C77A51BF3"
Last-Modified: Wed, 08 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20585
Expires: Wed, 08 Feb 2023 10:39:39 GMT
Date: Wed, 08 Feb 2023 04:56:34 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbcb27041-48b2-474f-b9d5-f88e9e662723.jpeg
200 OK 6.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbcb27041-48b2-474f-b9d5-f88e9e662723.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d8a3fa4f1ec82d501942f9db3de2cb7d
b91c2aea7f2fb26131c8929b254c5596a1bb25ff
9d246eeab8ba04c775a03fd960c8859934a0accb737e845e89aba40bc573fdaa
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbcb27041-48b2-474f-b9d5-f88e9e662723.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6342
x-amzn-requestid: b2b61a71-5326-4fc6-baba-7baad29cf7c5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f_OkbHfDIAMF5AQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e2c482-5cc4028d01d05305637af317;Sampled=0
x-amzn-remapped-date: Tue, 07 Feb 2023 21:37:06 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: xc32O6lBfn7jYg9I3VlZ5FnR9YpJtU3DbYD_ozsf_-R_Ih1-2e1-CQ==
via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Tue, 07 Feb 2023 21:42:10 GMT
age: 26064
etag: "b91c2aea7f2fb26131c8929b254c5596a1bb25ff"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe4252883-1cf4-4e4a-98fa-fee2d1bd1a6c.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe4252883-1cf4-4e4a-98fa-fee2d1bd1a6c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 298eca3ae092fd28108db52acaa59545
ee865a4919befec21c73f7a1cf0c2405c34743b7
d490b601b1dc9e89392b902b7b7376815c81019ef53ab06aa27ed563600bb1a3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe4252883-1cf4-4e4a-98fa-fee2d1bd1a6c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13371
x-amzn-requestid: 2fd56339-7b32-4058-8eea-8565cae3037c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f2opoHjGoAMFsMw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63df54a3-5b0bd42e1e21d7d65ac7c7f1;Sampled=0
x-amzn-remapped-date: Sun, 05 Feb 2023 07:02:59 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: JsUVBJdjaEX5lknubVE44HzNtrl9gAxfQVmj1G6Wm1yaJ8gmmiOJKw==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Tue, 07 Feb 2023 10:04:13 GMT
age: 67941
etag: "ee865a4919befec21c73f7a1cf0c2405c34743b7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdcf61053-67f6-4767-ad44-fa802c5ef5b4.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdcf61053-67f6-4767-ad44-fa802c5ef5b4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a9c2a9eee923b84d4e06438a8b2acaff
520b122e3ce52220af153fee26bb7067283f9075
9ff4236fdcd05210a9c8bb48ea68179e142b1b05c8b19dd66282590dff69fa22
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdcf61053-67f6-4767-ad44-fa802c5ef5b4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10058
x-amzn-requestid: 94374454-1e89-4c43-895b-0a90f39b851d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f_O5vEgcoAMFctg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e2c50a-0bf11cad4b0818c36188ba91;Sampled=0
x-amzn-remapped-date: Tue, 07 Feb 2023 21:39:22 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 1R4SRNvqhRHbrDZsGB06NJbBXf8WRgJEHmXTbop8pqf8etTJSlmQwQ==
via: 1.1 9b311162717b41c968f6f00426d88aaa.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Tue, 07 Feb 2023 22:06:05 GMT
age: 24629
etag: "520b122e3ce52220af153fee26bb7067283f9075"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbee0b552-d236-4fa2-b702-1571b09d3fd6.jpeg
200 OK 6.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbee0b552-d236-4fa2-b702-1571b09d3fd6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash db6e81972b8835dc48a0dae751ffde5f
826e2195cc52905cfed0bc4f01646290261113b6
720e6105b2ccc9cbc8fd005d53873ced5467a852c7a5041ce2ef96785c0d92f7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbee0b552-d236-4fa2-b702-1571b09d3fd6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6060
x-amzn-requestid: 80cbc454-e1b4-4e53-a3b6-3a5ac11920c7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f_PPQEPNIAMFkqA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e2c594-4539ebb17f27d88a47100a82;Sampled=0
x-amzn-remapped-date: Tue, 07 Feb 2023 21:41:40 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 50lUvmFMZ01J2FrO3AId_U87zBmCWLFQSDsly_Cd9xF_hVIOWbf3JA==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Tue, 07 Feb 2023 22:14:43 GMT
age: 24111
etag: "826e2195cc52905cfed0bc4f01646290261113b6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8122ba3b-f49a-49fa-acfb-88990087de42.jpeg
200 OK 6.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8122ba3b-f49a-49fa-acfb-88990087de42.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 25fb37d8b072e47aae74933481fb9418
b073d213a6a7939efed7ee5ef62a5548e00082bc
59a9c61013b3a4faab6f1c578f45bb87397d2f9e7975ae58e53e2c4e4a791da2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8122ba3b-f49a-49fa-acfb-88990087de42.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6177
x-amzn-requestid: 1b73f423-5a28-48f6-9ad1-9e42c38bebc6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f-tCnF09IAMFt4g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e28edd-294711995de49ebb380b4ca2;Sampled=0
x-amzn-remapped-date: Tue, 07 Feb 2023 17:48:13 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: zr0wkfqHvE3x4qvNObXp9uIF_oXpoZuHKgyboR5ezBuiHDdxFPpswA==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 760139201585481b26f947c5f776103a.cloudfront.net (CloudFront), 1.1 google
date: Tue, 07 Feb 2023 18:09:39 GMT
age: 38815
etag: "b073d213a6a7939efed7ee5ef62a5548e00082bc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc3ed9aa0-a88e-4b92-a2bb-567735d813b6.jpeg
200 OK 8.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc3ed9aa0-a88e-4b92-a2bb-567735d813b6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash fbe359ce6fb136add75c8f3d3cc06330
e6584afcf39b6fad21eccbcce95c6645b8e1b3b8
29478bf1b8168dc457bb7d298448a78e1040bd3aa80cbf11cfa37475568590d8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc3ed9aa0-a88e-4b92-a2bb-567735d813b6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8170
x-amzn-requestid: d1ddb47f-3472-4015-8d55-72f435671f03
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f5aSPHiroAMFpSg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e070da-114975440d70915472cdba2f;Sampled=0
x-amzn-remapped-date: Mon, 06 Feb 2023 03:15:38 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 0w6JgtsKSRHLPJ3LyY6YUI8N7PS-gVlLuivQUq9jdyeYYm3STiJJIQ==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Wed, 08 Feb 2023 04:13:34 GMT
age: 2580
etag: "e6584afcf39b6fad21eccbcce95c6645b8e1b3b8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
api2.gameassists.co.uk/casino/progressive/public/v1/counters?currencyIsoCode=NOK
200 OK 7.3 kB URL HTTP/1.1 api2.gameassists.co.uk/casino/progressive/public/v1/counters?currencyIsoCode=NOK
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (60951), with no line terminators
Hash d21cfbc8f14344a956fbf2ac8b893d10
0eb52b1529fb0e5873c1ed8a686c629427800c09
7131d5318acbe75bf8fa09da0880ff10262dc34267b88ef2892d48321631c1a4
GET /casino/progressive/public/v1/counters?currencyIsoCode=NOK HTTP/1.1
Host: api2.gameassists.co.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://doggocasino.com
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: no-cache
Pragma: no-cache
Content-Type: application/json; charset=utf-8
Expires: -1
Server:
X-CorrelationId: 7dafd4be-be4c-4a36-9a67-a119f31d3d98
X-Api-Version: 1.0.5.152
Access-Control-Allow-Origin: https://doggocasino.com
Access-Control-Allow-Credentials: true
Access-Control-Expose-Headers: X-CorrelationId
X-AspNet-Version: 4.0.30319
Request-Context: appId=cid-v1:39298cf6-0891-47ba-9f29-1f161231208d
Date: Wed, 08 Feb 2023 04:56:33 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 7310
Connection: Keep-Alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c3a60afedecbc9be0a6c0c398cfe21c3
4c4b2e882503ce456cb6e66cc60df26714d3c65b
814c0dbc38dc84f347f06c1d89a77e011c6b312bda6aef69eb00653394866bea
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "814C0DBC38DC84F347F06C1D89A77E011C6B312BDA6AEF69EB00653394866BEA"
Last-Modified: Wed, 08 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11165
Expires: Wed, 08 Feb 2023 08:02:39 GMT
Date: Wed, 08 Feb 2023 04:56:34 GMT
Connection: keep-alive
static.zdassets.com/web_widget/latest/classic/web-widget-8165-8a6a509.js
200 OK 194 kB URL HTTP/2 static.zdassets.com/web_widget/latest/classic/web-widget-8165-8a6a509.js
IP
File type ASCII text, with very long lines (65307)
Size 194 kB (194150 bytes)
Hash ca22874f2437f7f70ace6817e05841f2
7d84bb26e99d7a4a8e824b7d90492cee841da7e4
ba9b4edf91e37a8fa786b4e55fd735970c2208a2db60d3b5cc9bed235c96f74d
GET /web_widget/latest/classic/web-widget-8165-8a6a509.js HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 08 Feb 2023 04:56:34 GMT
content-type: application/javascript; charset=utf-8
x-amz-id-2: lxOrAmvQiKM1F2EiPkzKL4OzRj5uoHkxJNsPMpw3XzL8LftWty26J0GiBffbXzZJ2b6tH9ExJrw=
x-amz-request-id: WYQ4XEV8W8HGCR76
x-amz-replication-status: COMPLETED
last-modified: Mon, 06 Feb 2023 04:40:42 GMT
etag: W/"d519ea27f763cb6ec80aeec5b45213a7"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Tue, 06 Feb 2024 04:40:41 GMT
x-amz-version-id: d8_vAjXcrHUlgQmyJ_IKv1tU7fPJQy7c
cf-cache-status: HIT
age: 165845
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0GIPBiM8rYbV2%2BPiyUWm%2Fgv%2FosDDwuFe4vj3BHiC5Z4f2Ewxo3Dbe6Vd3BW8cguLMIR%2BRJ1EOp4oJUYws%2BgVoWLopFZ6AWaqk8twnsWQdDjqxeeAXVnv5%2FYmJIhQCjy68TN1lgY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 7961c78e1b8cb524-OSL
content-encoding: br
X-Firefox-Spdy: h2
doggocasino.com/favicon.ico
200 OK 4.3 kB URL HTTP/2 doggocasino.com/favicon.ico
IP
File type MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel\012- data
Hash bf17160c2e430c1c7fda0c795c8ee482
2990a13dd391376c8593c9243d4430a9318c7a18
aaee36adabe0daf0003147b30c2a56b8341f2469a6f4fec886e64412063f4cd4
GET /favicon.ico HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/en-us?affiliateName=[cellxpert]&affid=cx-35656_393091&bannerid=35656&trackerid=35656_393091&brand=doggocasino&bta=35656&rdk=rk1
Cookie: _ga_K4EHGY5F0T=GS1.1.1675832245.1.0.1675832245.60.0.0; _ga=GA1.1.1763717188.1675832246; __adm_tid=tid-30f2d5dd7.3e1c5dbad; affiliateId=cx-35656_393091; bannerId=35656; trackerId=35656_393091; affiliateName=%5Bcellxpert%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/x-icon
content-length: 4286
x-amz-id-2: EAdsy9uCb3qxGOy5CPtshd3Qbp+Kc9ragpJkTj2muzpcAZcz4UhjwdskbjUNcXex61/Pc8NoXo0=
x-amz-request-id: YD4N61SYVJCW4548
date: Tue, 07 Feb 2023 08:58:41 GMT
x-amz-meta-codebuild-content-sha256: 3a1d5f559d5de88345d69cd1f7926e0696ca48590ba3b279ba4374bc1a2c46d3
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:dc7f672c-4669-47fb-9710-2346e6c01aac
x-amz-meta-codebuild-content-md5: acb33710ef6e17c1daa2f7ebc264824d
last-modified: Tue, 07 Feb 2023 08:57:11 GMT
x-amz-version-id: DkNJ5H.gZQbZvuoF5sw3fBhORtN_C.9E
etag: "bf17160c2e430c1c7fda0c795c8ee482"
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: tN1w8HKaScGlbNUWy-3fmTqeTdfLiQQkdKpfYL4ujpPV7DF3A9zrsw==
age: 71874
X-Firefox-Spdy: h2
c1.rfihub.net/js/tc.min.js
200 OK 6.2 kB URL HTTP/2 c1.rfihub.net/js/tc.min.js
IP
File type C source, ASCII text, with very long lines (19497)
Hash ab5a2e3f2414c0a2b622e48c0b6da2fd
1a894787bde6cbf9b58d47b8f4245607420112ad
a5ef19cf7ca85f760c462ed2f228430c8d0a6d9daf3aa34894a5c42113cfdb8f
GET /js/tc.min.js HTTP/1.1
Host: c1.rfihub.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/x-javascript
content-length: 6162
date: Wed, 08 Feb 2023 04:17:43 GMT
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
cache-control: public, max-age=3600
expires: Wed, 08 Feb 2023 05:17:43 GMT
last-modified: Wed, 08 Feb 2023 04:17:33 GMT
content-encoding: gzip
server: Jetty(9.3.29.v20201019)
x-cache: Hit from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: _nHHPl9rHDxbANQHM0mGMSwPR3FE2ew1xyAmsy6nW92aSCDyvPuXIg==
age: 2331
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c3a60afedecbc9be0a6c0c398cfe21c3
4c4b2e882503ce456cb6e66cc60df26714d3c65b
814c0dbc38dc84f347f06c1d89a77e011c6b312bda6aef69eb00653394866bea
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "814C0DBC38DC84F347F06C1D89A77E011C6B312BDA6AEF69EB00653394866BEA"
Last-Modified: Wed, 08 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11165
Expires: Wed, 08 Feb 2023 08:02:39 GMT
Date: Wed, 08 Feb 2023 04:56:34 GMT
Connection: keep-alive
static.zdassets.com/web_widget/latest/classic/web-widget-5324-8a6a509.js
200 OK 131 kB URL HTTP/2 static.zdassets.com/web_widget/latest/classic/web-widget-5324-8a6a509.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Size 131 kB (130907 bytes)
Hash 2cef25902dd04c30ac8b7b5dbf7059a5
69801167cf7b9780b5c588fe6eebb7e8df53bb31
4035ba265bf724c80ee01c06a70bdf3415919ea48f1a83c5546047d9371c9131
GET /web_widget/latest/classic/web-widget-5324-8a6a509.js HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 08 Feb 2023 04:56:34 GMT
content-type: application/javascript; charset=utf-8
x-amz-id-2: WmtRR1189mXDJMkJjDGUCORgQdiD9PF7D5bFRVs+4FCoO4u+YIN8yee6R45C2mBooS8PicWASwE=
x-amz-request-id: WYQ9XNV1H65RADD0
x-amz-replication-status: COMPLETED
last-modified: Mon, 06 Feb 2023 04:40:42 GMT
etag: W/"62b83d1cb2207b5e655a9fb36ca83fef"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Tue, 06 Feb 2024 04:40:41 GMT
x-amz-version-id: Y8kjdnuuhMXQULKzbx3ZD_IvpELAImAJ
cf-cache-status: HIT
age: 165845
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=P6lauTJBX6jYjFjZE3sy6nafFMCenzw%2BJQijh9wTAaE9Dm9boZSGh%2B1r2Sm%2FUMbNbdNpDhwKf%2FEXcPgoAQGPWSzeztnnIPAZS81HyHC0HgzhGsNfI1GA5kzAOvFbNp3hNiz0OVk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 7961c78e2b8fb524-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 2ccbef7dcf1b1d32956833f5127c1ad5
af220576c82f064130ee7bfa3ea966d033e51707
f6eceec81f5b6deb7005fa9f3855ecb54e4bd6b3159c705decf0921e3a49067d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 04:56:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-K4EHGY5F0T&cid=1763717188.1675832246>m=45je3260&aip=1&z=151870733
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-K4EHGY5F0T&cid=1763717188.1675832246>m=45je3260&aip=1&z=151870733
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-K4EHGY5F0T&cid=1763717188.1675832246>m=45je3260&aip=1&z=151870733 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 08 Feb 2023 04:56:34 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 2ccbef7dcf1b1d32956833f5127c1ad5
af220576c82f064130ee7bfa3ea966d033e51707
f6eceec81f5b6deb7005fa9f3855ecb54e4bd6b3159c705decf0921e3a49067d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 04:56:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
doggocasino.com/assets/fonts/CeraPro/Cera_Pro_Black.otf
200 OK 188 kB URL HTTP/2 doggocasino.com/assets/fonts/CeraPro/Cera_Pro_Black.otf
IP
File type OpenType font data\012- data
Size 188 kB (188164 bytes)
Hash 95d55d992d7f63799ad116dbd12a25cf
37dd0e816b3828a6e996cb1b185b18e10745fb3b
7f9ef82ea041a21505f28d21766821edcc9adda8ed407f676d3623dc4f5c499a
GET /assets/fonts/CeraPro/Cera_Pro_Black.otf HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/styles.6fe09080dd4bc8174585.css
Cookie: _ga_K4EHGY5F0T=GS1.1.1675832245.1.0.1675832245.60.0.0; _ga=GA1.1.1763717188.1675832246; __adm_tid=tid-30f2d5dd7.3e1c5dbad; affiliateId=cx-35656_393091; bannerId=35656; trackerId=35656_393091; affiliateName=%5Bcellxpert%5D; cookie_policy=accepted
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 188164
date: Tue, 07 Feb 2023 09:00:48 GMT
x-amz-meta-codebuild-content-sha256: 3a1d5f559d5de88345d69cd1f7926e0696ca48590ba3b279ba4374bc1a2c46d3
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:dc7f672c-4669-47fb-9710-2346e6c01aac
x-amz-meta-codebuild-content-md5: acb33710ef6e17c1daa2f7ebc264824d
last-modified: Tue, 07 Feb 2023 08:57:19 GMT
x-amz-version-id: 7ZFDC9z8h2Dloq4zS45gqUyjPG0Apq8l
etag: "95d55d992d7f63799ad116dbd12a25cf"
server: AmazonS3
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
age: 71747
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: SP_YBMdHDTyYVpn6mUhR73yuzsMl9Yt-MmgY-j6juH2TGGU0zAIseg==
X-Firefox-Spdy: h2
script.hotjar.com/modules.2fa327feea603eb929af.js
200 OK 68 kB URL HTTP/2 script.hotjar.com/modules.2fa327feea603eb929af.js
IP
File type Unicode text, UTF-8 text, with very long lines (48770)
Hash 681cdc7ac90e7eb90a7a6b1feaa2a12d
6e17378a5b53ccf900328a200a30b0c364dcf45a
2c3876fd165b115f18f2336626fbc5b9189e59a3ac8914ddc739cfa799e56b2a
GET /modules.2fa327feea603eb929af.js HTTP/1.1
Host: script.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 68048
date: Tue, 07 Feb 2023 08:59:05 GMT
accept-ranges: bytes
access-control-allow-origin: *
cache-control: max-age=31536000
content-encoding: br
cross-origin-resource-policy: cross-origin
etag: "681cdc7ac90e7eb90a7a6b1feaa2a12d"
last-modified: Tue, 07 Feb 2023 08:58:18 GMT
strict-transport-security: max-age=2592000; includeSubDomains
x-content-type-options: nosniff
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: AENN2jvBABLEoG1r4tX5T9JPxgWFEtefDPumbXs4vNLqbaVVyVWkvw==
age: 71849
X-Firefox-Spdy: h2
doggocasino.com/polyfills.041a4b505b38e3453b95.js
200 OK 13 kB URL HTTP/2 doggocasino.com/polyfills.041a4b505b38e3453b95.js
IP
File type ASCII text, with very long lines (37523), with no line terminators
Hash 4886f72983ef449b1c854c1a1b6f580c
1ebf4c53c21c27a2c5bc76c88b70d132575764aa
6be1de79b4cf407c826d41449644d00756b319bbec09f2cb05af77e3e10987ef
GET /polyfills.041a4b505b38e3453b95.js HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/en-us?affiliateName=[cellxpert]&affid=cx-35656_393091&bannerid=35656&trackerid=35656_393091&brand=doggocasino&bta=35656&rdk=rk1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
date: Tue, 07 Feb 2023 08:58:33 GMT
x-amz-meta-codebuild-content-sha256: 3a1d5f559d5de88345d69cd1f7926e0696ca48590ba3b279ba4374bc1a2c46d3
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:dc7f672c-4669-47fb-9710-2346e6c01aac
x-amz-meta-codebuild-content-md5: acb33710ef6e17c1daa2f7ebc264824d
last-modified: Tue, 07 Feb 2023 08:57:10 GMT
x-amz-version-id: 4M3YrraMoRxGh7lZ6y3yIoyLgquvoSlW
etag: W/"43655eda45dc98456c80904f6f6683e7"
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
age: 71880
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: GnVxCoL_CSLFaM__r3DhX_0EL4Bc_ZmdhozNpOYe_4wb8D0tiFYIwQ==
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 05215892a5cf26714d5989874015a371
202b3a2f58292b90b440b4771b8ef200876b2efe
06da00709c147ea1871b32a428c4647538637248a9324308071d0ac7a81aebf3
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 Feb 2023 04:56:35 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 08 Feb 2023 02:15:48 GMT
Expires: Wed, 15 Feb 2023 02:15:47 GMT
Etag: "202b3a2f58292b90b440b4771b8ef200876b2efe"
Cache-Control: max-age=594551,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7961c7922ee0b4f9-OSL
static.zdassets.com/web_widget/latest/classic/web-widget-locales/classic/en-us-json-8a6a509.js
200 OK 8.1 kB URL HTTP/2 static.zdassets.com/web_widget/latest/classic/web-widget-locales/classic/en-us-json-8a6a509.js
IP
File type Unicode text, UTF-8 text, with very long lines (25838), with no line terminators
Hash b5516c2c24c0ecd7dfa0d93b09440a32
3daf8ab0e5e20a5781a071aa7ebd4b4e58ebeed7
17e3c518db3aaed6a5cec7a6ef5e8730f7e1f2c2d1b2502f6722e669dfa5e201
GET /web_widget/latest/classic/web-widget-locales/classic/en-us-json-8a6a509.js HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 08 Feb 2023 04:56:34 GMT
content-type: application/javascript; charset=utf-8
x-amz-id-2: JyXQMFAIApPwmax3o9Ie/7KnsTohFErpavYJockVLQQ3LA0xUf3xUBTLCRL9PglxL0wAjOh+WEQ=
x-amz-request-id: WYQB6MYMEHNG1NQX
x-amz-replication-status: COMPLETED
last-modified: Mon, 06 Feb 2023 04:40:43 GMT
etag: W/"89b68f56c96d15075b04b0ea633eabf1"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Tue, 06 Feb 2024 04:40:42 GMT
x-amz-version-id: cqMx6mePo_.KI9mJ_ZskmLWluAmdthB9
cf-cache-status: HIT
age: 165844
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IjKg16I%2FhdTc4g0Z1%2B%2F7U2wnshhquzQR5X0Pu9gJai2Px6%2BIoXfKNiqH9EU1byNfoqykh5rHghNQhbxr90skLxhOHEkWfURFw1nBhZxFJuSjP27l2kyaQRyd7ohMXPhWb%2Br3jQs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 7961c7903cd8b524-OSL
content-encoding: br
X-Firefox-Spdy: h2
vars.hotjar.com/box-e031119f9e9e307a08fa610f85dbfb52.html
200 OK 1.0 kB URL HTTP/2 vars.hotjar.com/box-e031119f9e9e307a08fa610f85dbfb52.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2368), with no line terminators
Hash 112fdf47cdb80b9ce3d033ed09717460
3898efa86cbf1b64dc41a90a110ed5afd6f2ae13
3bfb2e882091d872eece2eee40084183a5fcb0a7ed98c1b004850751260a4cbb
GET /box-e031119f9e9e307a08fa610f85dbfb52.html HTTP/1.1
Host: vars.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html
content-length: 1034
date: Fri, 03 Feb 2023 13:10:06 GMT
accept-ranges: bytes
cache-control: max-age=31536000
content-encoding: br
cross-origin-embedder-policy: require-corp
cross-origin-resource-policy: cross-origin
etag: "112fdf47cdb80b9ce3d033ed09717460"
last-modified: Fri, 03 Feb 2023 13:09:45 GMT
strict-transport-security: max-age=2592000; includeSubDomains
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: C_3UbK2ck8MfwiOg6DbcITPtThCguBWWDfSGJYiCAEwPFzSMLzlyBw==
age: 402389
X-Firefox-Spdy: h2
widget-mediator.zopim.com/s/W/ws/3t+HseqZTDZVIHNV/c/1675832247683
101 Switching Protocols 0 B URL HTTP/1.1 widget-mediator.zopim.com/s/W/ws/3t+HseqZTDZVIHNV/c/1675832247683
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s/W/ws/3t+HseqZTDZVIHNV/c/1675832247683 HTTP/1.1
Host: widget-mediator.zopim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://doggocasino.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: B0RR5ppjsEnvyHkV9rUm4g==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Wed, 08 Feb 2023 04:56:35 GMT
Connection: upgrade
Set-Cookie: AWSALB=T8IkukdcTeXRnaMVM5jDO2ByAFIjebuFHsTUrztsXk6m4gI2mfi/D9um7yPmPPj+EWIGDNSx6t6j/EaysBgTGLsib+Q+2aVA9L3Tb930Zy9wWptfmue7Nxw4bUDP; Expires=Wed, 15 Feb 2023 04:56:35 GMT; Path=/
AWSALBCORS=T8IkukdcTeXRnaMVM5jDO2ByAFIjebuFHsTUrztsXk6m4gI2mfi/D9um7yPmPPj+EWIGDNSx6t6j/EaysBgTGLsib+Q+2aVA9L3Tb930Zy9wWptfmue7Nxw4bUDP; Expires=Wed, 15 Feb 2023 04:56:35 GMT; Path=/; SameSite=None; Secure
Upgrade: websocket
Sec-WebSocket-Accept: Qhl8tVxEvale5NfkBhDhsWspNy0=
Sec-WebSocket-Version: 13
WebSocket-Server: uWebSockets
ocsp.sectigo.com/
200 OK 471 B IP
Hash 05215892a5cf26714d5989874015a371
202b3a2f58292b90b440b4771b8ef200876b2efe
06da00709c147ea1871b32a428c4647538637248a9324308071d0ac7a81aebf3
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 Feb 2023 04:56:35 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 08 Feb 2023 02:15:48 GMT
Expires: Wed, 15 Feb 2023 02:15:47 GMT
Etag: "202b3a2f58292b90b440b4771b8ef200876b2efe"
Cache-Control: max-age=594551,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7961c7923fc5b511-OSL
doggocasino.com/Cookies-Icon.a41fe3b3f8f0046c586a.svg
200 OK 7.7 kB URL HTTP/2 doggocasino.com/Cookies-Icon.a41fe3b3f8f0046c586a.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (4404)
Hash e9f8225a5575d1f6c21fb61f349fe4c8
3ba1089decf672b7946fe2b48f5ced7ab4ae44e2
b822a1736489d16cebf92abe647776af87fd81111f170f31d0a610f6ea28b019
GET /Cookies-Icon.a41fe3b3f8f0046c586a.svg HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/styles.6fe09080dd4bc8174585.css
Cookie: _ga_K4EHGY5F0T=GS1.1.1675832245.1.0.1675832245.60.0.0; _ga=GA1.1.1763717188.1675832246; __adm_tid=tid-30f2d5dd7.3e1c5dbad; affiliateId=cx-35656_393091; bannerId=35656; trackerId=35656_393091; affiliateName=%5Bcellxpert%5D; cookie_policy=accepted
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
date: Tue, 07 Feb 2023 08:59:02 GMT
x-amz-meta-codebuild-content-sha256: 3a1d5f559d5de88345d69cd1f7926e0696ca48590ba3b279ba4374bc1a2c46d3
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:dc7f672c-4669-47fb-9710-2346e6c01aac
x-amz-meta-codebuild-content-md5: acb33710ef6e17c1daa2f7ebc264824d
last-modified: Tue, 07 Feb 2023 08:57:16 GMT
x-amz-version-id: M3aydn7c7vb96hTrW_qWsgA5Dm46.zTZ
etag: W/"87dfcd5ae030f407cc281bc26d0255f4"
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
age: 71853
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: KMWsVghRTQjKU7Zs66cKaYmBVvrwD-vEDsPaJfYPs2C5WaQqK5HuWg==
X-Firefox-Spdy: h2
doggocasino.com/assets/theme/images/bottom-left-ribbon-main.webp
200 OK 938 B URL HTTP/2 doggocasino.com/assets/theme/images/bottom-left-ribbon-main.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 8d68bfd2cfba32a4165feb5fb804d34e
46bb765ee90b8ab2fedecdfb5bf38d6b0cd92c85
b3fd3fe71d455cdfca148d74e4af6bc18cf49083e436740c63ba0e6b3bd1aa2e
GET /assets/theme/images/bottom-left-ribbon-main.webp HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/no-no?affiliateName=%5Bcellxpert%5D&affid=cx-35656_393091&bannerid=35656&trackerid=35656_393091&brand=doggocasino&bta=35656&rdk=rk1
Cookie: _ga_K4EHGY5F0T=GS1.1.1675832245.1.1.1675832247.58.0.0; _ga=GA1.2.1763717188.1675832246; __adm_tid=tid-30f2d5dd7.3e1c5dbad; affiliateId=cx-35656_393091; bannerId=35656; trackerId=35656_393091; affiliateName=%5Bcellxpert%5D; cookie_policy=accepted; _gid=GA1.2.501856081.1675832248; _gat_UA-196341002-1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 938
date: Tue, 07 Feb 2023 09:40:20 GMT
x-amz-meta-codebuild-content-sha256: 3a1d5f559d5de88345d69cd1f7926e0696ca48590ba3b279ba4374bc1a2c46d3
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:dc7f672c-4669-47fb-9710-2346e6c01aac
x-amz-meta-codebuild-content-md5: acb33710ef6e17c1daa2f7ebc264824d
last-modified: Tue, 07 Feb 2023 08:57:15 GMT
x-amz-version-id: T6ZJlASbsF18MOxAaq8CNHp7vm3p6V4c
etag: "8d68bfd2cfba32a4165feb5fb804d34e"
server: AmazonS3
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
age: 69376
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: bU5Ltaa22j0SXh1xJdPJ9kxZcrIrje-en7vywhWgO6waAx705cpz_A==
X-Firefox-Spdy: h2
live.rezync.com/pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5134455421026106235&referrer=https%3A%2F%2Fdoggocasino.com%2Fno-no%3FaffiliateName%3D%255Bcellxpert%255D%26affid%3Dcx-35656_393091%26bannerid%3D35656%26trackerid%3D35656_393091%26brand%3Ddoggocasino%26bta%3D35656%26rdk%3Drk1
302 Found 661 B URL HTTP/2 live.rezync.com/pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5134455421026106235&referrer=https%3A%2F%2Fdoggocasino.com%2Fno-no%3FaffiliateName%3D%255Bcellxpert%255D%26affid%3Dcx-35656_393091%26bannerid%3D35656%26trackerid%3D35656_393091%26brand%3Ddoggocasino%26bta%3D35656%26rdk%3Drk1
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (575)
Hash 8e5229ed99a6e506a2230037054efcec
6a59e7dfcd8b542f893159c3dc9b49dc102866a3
062d5354ed274943f7d50fdf15ef262353d1678177c573ff0ebe24fc5e584565
GET /pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5134455421026106235&referrer=https%3A%2F%2Fdoggocasino.com%2Fno-no%3FaffiliateName%3D%255Bcellxpert%255D%26affid%3Dcx-35656_393091%26bannerid%3D35656%26trackerid%3D35656_393091%26brand%3Ddoggocasino%26bta%3D35656%26rdk%3Drk1 HTTP/1.1
Host: live.rezync.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
content-type: text/html; charset=utf-8
content-length: 661
location: https://p.rfihub.com/cm?pub=39342&in=0&userid=80661299-2881-4231-8090-b0ad074d2d34%3A1675832195.2413814&forward=https%3A//idsync.rlcdn.com/501709.gif%3Fpartner_uid%3D80661299-2881-4231-8090-b0ad074d2d34%253A1675832195.2413814
date: Wed, 08 Feb 2023 04:56:35 GMT
set-cookie: zync-uuid=80661299-2881-4231-8090-b0ad074d2d34:1675832195.2413814; Domain=rezync.com; Expires=Sun, 06 Aug 2023 20:56:35 GMT; Path=/; SameSite=None; Secure
sd-session-id=.eJwNyksOgjAQANC7zJqa-ZZpL0PQdtEoaChuJNxdli95B0yfui3zWtcd8r596wCPV7vUIR_Q22-pT8hgJKpmyoQcCSOLwTlAr7239zq1ch3HGIlTCuxOQVkoOCYMd5wLjlq4iGaKo7kwJbuxkjgpnH9tQSQu.Y-Mrgw.wm5pHHz3PAsh2h-kzOHPq5wOL-w; Expires=Mon, 07 Aug 2023 04:56:35 GMT; HttpOnly; Path=/; SameSite=None; Secure
vary: Cookie
server: lighttpd/1.4.59
x-cache: Miss from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: DcWdKlYR8MPTXgwApCGD1IwFI8CFi0UM2tUPdwim_FsWBgJv1BfF4g==
X-Firefox-Spdy: h2
static.zdassets.com/web_widget/latest/classic/web-widget-chat-sdk-8a6a509.js
200 OK 52 kB URL HTTP/2 static.zdassets.com/web_widget/latest/classic/web-widget-chat-sdk-8a6a509.js
IP
File type ASCII text, with very long lines (65307)
Hash 6af74d7a88d77d3b0f6e9b3b0d3d2256
aefee28edc27fd58a9df5fa7987bbfbb85ad6e98
e9dd65239b5a7a5a4f8f4d8a993914ad5de469398a9aff3a6cc508f6db96518e
GET /web_widget/latest/classic/web-widget-chat-sdk-8a6a509.js HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 08 Feb 2023 04:56:34 GMT
content-type: application/javascript; charset=utf-8
x-amz-id-2: H/SI0O3MCHA2NdumLOJwajxGBQ+AGMtNyE9ZZcrMVjkN9Efp1RF3oszIVSwbTV3+bWaH4IXspVI=
x-amz-request-id: W4FV6JZ749QHQF0F
x-amz-replication-status: COMPLETED
last-modified: Mon, 06 Feb 2023 04:40:42 GMT
etag: W/"d366c0776c2bacba354d40e564c3d3e6"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Tue, 06 Feb 2024 04:40:41 GMT
x-amz-version-id: 8FT3f3PK2d.E1qtgTkMBYvZiIjwdVgHk
cf-cache-status: HIT
age: 165844
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MguBQVhZzH1vPlCls2UUkUSDc%2FzowVVro6ioYSgax2WK6QBpiXdTIskYbn6XMeSSFdpYg2LP93ux5W%2BeX0jblZ9R1QxOzFVQTe9P3x8LW1xJ6dAVd6vPwAGY2IwlSCzBimMWkPE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 7961c790cd07b524-OSL
content-encoding: br
X-Firefox-Spdy: h2
status.geotrust.com/
200 OK 471 B IP
Hash b22bcf32296c96ca3e2d05f65172b93a
48cce177798256ddc43fb32186c1fdb16a8c2ef4
00fb81fa1dc3c5d84704d0bb0626bcc7c094f5bfd17bddc59ef46c7ee5f28ea9
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3158
Cache-Control: max-age=158945
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 04:56:35 GMT
Etag: "63e2e90e-1d7"
Expires: Fri, 10 Feb 2023 01:05:40 GMT
Last-Modified: Wed, 08 Feb 2023 00:13:02 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471
doggocasino.com/assets/theme/icons/Trophy-Icon_black.svg
200 OK 611 B URL HTTP/2 doggocasino.com/assets/theme/icons/Trophy-Icon_black.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (444)
Hash e408acb2349704b5551b8ac0eb76293e
72fba8a3e9a27d5ba04a81fa57371142c2b60076
7ca3f7f85ac574d1c71968c71f5bcf5ff8d4c31a443dfb9f62dcaa7237f19b00
GET /assets/theme/icons/Trophy-Icon_black.svg HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/no-no?affiliateName=%5Bcellxpert%5D&affid=cx-35656_393091&bannerid=35656&trackerid=35656_393091&brand=doggocasino&bta=35656&rdk=rk1
Cookie: _ga_K4EHGY5F0T=GS1.1.1675832245.1.1.1675832247.58.0.0; _ga=GA1.2.1763717188.1675832246; __adm_tid=tid-30f2d5dd7.3e1c5dbad; affiliateId=cx-35656_393091; bannerId=35656; trackerId=35656_393091; affiliateName=%5Bcellxpert%5D; cookie_policy=accepted; _gid=GA1.2.501856081.1675832248; _gat_UA-196341002-1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
date: Tue, 07 Feb 2023 08:58:38 GMT
x-amz-meta-codebuild-content-sha256: 3a1d5f559d5de88345d69cd1f7926e0696ca48590ba3b279ba4374bc1a2c46d3
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:dc7f672c-4669-47fb-9710-2346e6c01aac
x-amz-meta-codebuild-content-md5: acb33710ef6e17c1daa2f7ebc264824d
last-modified: Tue, 07 Feb 2023 08:57:11 GMT
x-amz-version-id: SA3eZCHWTnsJPY_uFtRjHUFP6SSZJJQ3
etag: W/"53db43e4c9552aaffec27abd1ebe0b2f"
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
age: 71878
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: KbcCIVvLxOhkrYW3GcWADtjjFYXt_GvQ5JAXZvLORGYcJdfpy_q7UA==
X-Firefox-Spdy: h2
status.geotrust.com/
200 OK 471 B IP
Hash 7e3e18b9a87441324f946360b140e69b
83fa06e39de172d50768d1a6c00575f6d8f9e000
d99e773e363bbd17045ea0b6c7ba5d36a3c9c037f28c6bf78fbae42580e4a367
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4140
Cache-Control: max-age=126432
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 04:56:35 GMT
Etag: "63e26637-1d7"
Expires: Thu, 09 Feb 2023 16:03:47 GMT
Last-Modified: Tue, 07 Feb 2023 14:54:47 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ddbcc8409304b59c7d2faa53ed360fb5
98746db490891a3e5aa21f3dff58438d0c7795d5
b0ffc1ea39f25451920b84f09d650c564bd412bca0e2db72d99e736e385a176d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 04:56:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
sync.search.spotxchange.com/partner?adv_id=7180&uid=5134455421026106235&img=1
302 Found 0 B URL HTTP/1.1 sync.search.spotxchange.com/partner?adv_id=7180&uid=5134455421026106235&img=1
IP
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partner?adv_id=7180&uid=5134455421026106235&img=1 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Wed, 08 Feb 2023 04:56:35 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=f6a12c4c-a76c-11ed-9346-1342c0320406; expires=Wed, 08-Mar-2023 04:56:35 GMT; path=/; domain=.spotxchange.com; SameSite=none
Location: /partner?adv_id=7180&uid=5134455421026106235&img=1&__user_check__=1&sync_id=f6a12c86-a76c-11ed-9346-1342c0320406
X-fe: 90
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
p.rfihub.com/cm?pub=24472&in=1
302 Found 0 B URL HTTP/1.1 p.rfihub.com/cm?pub=24472&in=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cm?pub=24472&in=1 HTTP/1.1
Host: p.rfihub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 302 Found
Date: Wed, 08 Feb 2023 04:56:35 GMT
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Set-Cookie: rud=H4sIAAAAAAAA_-MSNjU0MjE2MjI2MrE0MTQzNLS0NBDiM9Qti8zyjXDPM8jPSCwCADBMZ7ElAAAA; Path=/; Domain=.rfihub.com; Expires=Mon, 4 Mar 2024 04:56:35 GMT; Secure; SameSite=None
ruds=H4sIAAAAAAAA_-MSNjU0MjE2MjI2MrE0MTQzNLS0NBDiM9Qti8zyjXDPM8jPSCwCADBMZ7ElAAAA; Path=/; Domain=.rfihub.com; Secure; SameSite=None
eud=H4sIAAAAAAAA_7vFwmtoZm5qYWxkaGlqYmoIAP96YsoQAAAA; Path=/; Domain=.rfihub.com; Expires=Mon, 4 Mar 2024 04:56:35 GMT; Secure; SameSite=None
Location: https://ps.eyeota.net/match?uid=5124322324941611990&bid=omt9pi0
Content-Length: 0
Server: Jetty(9.3.29.v20201019)
cm.g.doubleclick.net/pixel?&in=0&google_nid=zeta_interactive&google_cm=&google_sc=&google_hm=NTEzNDQ1NTQyMTAyNjEwNjIzNQ==&forward=
302 Found 369 B URL HTTP/2 cm.g.doubleclick.net/pixel?&in=0&google_nid=zeta_interactive&google_cm=&google_sc=&google_hm=NTEzNDQ1NTQyMTAyNjEwNjIzNQ==&forward=
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 8a9df2c11d08441f81697d2047267cb0
096f0800e695f505ed0ec51683cd3452dbfec8f6
854acc311e7c43999e6433eae8fa906ffca9d1430f5f3e16dbc44593eeab9056
GET /pixel?&in=0&google_nid=zeta_interactive&google_cm=&google_sc=&google_hm=NTEzNDQ1NTQyMTAyNjEwNjIzNQ==&forward= HTTP/1.1
Host: cm.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
location: https://cm.g.doubleclick.net/pixel?in=0&google_nid=zeta_interactive&google_cm=&google_sc=&google_hm=NTEzNDQ1NTQyMTAyNjEwNjIzNQ==&forward=&google_tc=
date: Wed, 08 Feb 2023 04:56:35 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
server: HTTP server (unknown)
content-length: 369
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Wed, 08-Feb-2023 05:11:35 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
us-u.openx.net/w/1.0/sd?id=537073062&val=5134455421026106235&r=
200 OK 43 B URL HTTP/2 us-u.openx.net/w/1.0/sd?id=537073062&val=5134455421026106235&r=
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /w/1.0/sd?id=537073062&val=5134455421026106235&r= HTTP/1.1
Host: us-u.openx.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept
server: OXGW/0.0.0
pragma: no-cache
p3p: CP="CUR ADM OUR NOR STA NID"
expires: Mon, 26 Jul 1997 05:00:00 GMT
date: Wed, 08 Feb 2023 04:56:35 GMT
content-type: image/gif
content-length: 43
cache-control: private, max-age=0, no-cache
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash f7e44d5fc95f5c12585fb3df05da62bb
26d68330342381157a56fcb6a1e9f531d729f49e
2eed3537cedcbfe958e68d26cc439cb2e2a375abc55e5c4dbd28bf8f5a7b98f7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3780
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 04:56:35 GMT
Last-Modified: Wed, 08 Feb 2023 03:53:35 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 727 B IP
Hash be1ca9a0a7d22d78e8814f53515b1bc7
ebed04b0d5ed107554701f2bfb8b875445b880bc
ff99207dbde1d2e56e68f3a7dc3fcc454062e6358248a965b4477f47f879a794
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6588
Cache-Control: max-age=98644
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 04:56:35 GMT
Etag: "63e1f01b-2d7"
Expires: Thu, 09 Feb 2023 08:20:39 GMT
Last-Modified: Tue, 07 Feb 2023 06:30:51 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 727
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 7e85e007afeb22901ec224031a66292d
308bee7dabf99c9608ae0dcde00c35c3529e4dc0
1f75876a64f72597a16ca30c73c7ed9a34332d7b45df851b6a9c6eb27059df85
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Wed, 08 Feb 2023 04:56:35 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19024
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Wed, 08 Feb 2023 03:30:17 GMT
Expires: Thu, 09 Feb 2023 03:30:17 GMT
ETag: "308bee7dabf99c9608ae0dcde00c35c3529e4dc0"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
dpm.demdex.net/ibs:dpid=1121&dpuuid=5134455421026106235&redir=
302 Found 0 B URL HTTP/1.1 dpm.demdex.net/ibs:dpid=1121&dpuuid=5134455421026106235&redir=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ibs:dpid=1121&dpuuid=5134455421026106235&redir= HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
DCS: dcs-prod-irl1-1-v045-0ba8f5f7e.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
Location: https://dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=1121&dpuuid=5134455421026106235&redir=
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
set-cookie: demdex=71752291416901724062413844157296465514; Max-Age=15552000; Expires=Mon, 07 Aug 2023 04:56:35 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-TID: Zov6Ov+uSsc=
Content-Length: 0
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash f7eea16bc412782f8f4c46344b50b522
e4c97f478ccdbc8f49b5c62fd0dce878507df704
9f0f5e551b033505f0c74059b5ee563c2723fa2466ec22ed520ef50c0c9de9ee
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2839
Cache-Control: max-age=114708
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 04:56:35 GMT
Etag: "63e23d80-1d7"
Expires: Thu, 09 Feb 2023 12:48:23 GMT
Last-Modified: Tue, 07 Feb 2023 12:01:04 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
aa.agkn.com/adscores/g.pixel?sid=9212192898&rf=5134455421026106235
200 OK 43 B URL HTTP/2 aa.agkn.com/adscores/g.pixel?sid=9212192898&rf=5134455421026106235
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash db04c7b378cb2db912c3ba8a5a774ee3
dee34bd86c3484d31002182aa2b7caa4699126b8
98b3d9d20e032f90aca49e9b116225d539ff6fbdb7e42c3c363f63896ac03d2a
GET /adscores/g.pixel?sid=9212192898&rf=5134455421026106235 HTTP/1.1
Host: aa.agkn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 08 Feb 2023 04:56:35 GMT
content-type: image/gif
content-length: 43
server: AAWebServer
p3p: policyref="https://www.agkn.com/p3p/p3p.xml",CP="NOI NID"
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: accept, cache-control, origin, x-requested-with, x-file-name, content-type
X-Firefox-Spdy: h2
status.geotrust.com/
200 OK 471 B IP
Hash 7e3e18b9a87441324f946360b140e69b
83fa06e39de172d50768d1a6c00575f6d8f9e000
d99e773e363bbd17045ea0b6c7ba5d36a3c9c037f28c6bf78fbae42580e4a367
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3825
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 04:56:35 GMT
Etag: "63e26637-1d7"
Last-Modified: Wed, 08 Feb 2023 03:52:50 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
dsum-sec.casalemedia.com/rum?cm_dsp_id=57&external_user_id=5134455421026106235&forward=
302 Found 0 B URL HTTP/1.1 dsum-sec.casalemedia.com/rum?cm_dsp_id=57&external_user_id=5134455421026106235&forward=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rum?cm_dsp_id=57&external_user_id=5134455421026106235&forward= HTTP/1.1
Host: dsum-sec.casalemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Date: Wed, 08 Feb 2023 04:56:35 GMT
Server: Apache
Cache-Control: no-cache
Expires: 0
Location: /rum?cm_dsp_id=57&external_user_id=5134455421026106235&forward=&C=1
P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI"
Pragma: no-cache
Content-Length: 0
Set-Cookie: CMID=Y.Mrg9xjh0VpXnUoVpTMUQAA; Path=/; Domain=casalemedia.com; Expires=Thu, 08 Feb 2024 04:56:35 GMT; Max-Age=31536000; Secure; SameSite=None
CMPS=4541; Path=/; Domain=casalemedia.com; Expires=Tue, 09 May 2023 04:56:35 GMT; Max-Age=7776000; Secure; SameSite=None
CMPRO=4541; Path=/; Domain=casalemedia.com; Expires=Tue, 09 May 2023 04:56:35 GMT; Max-Age=7776000; Secure; SameSite=None
Keep-Alive: timeout=1, max=500
Connection: Keep-Alive
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 48c6d17189568d8f7ecab0a36bc43b1c
ecb8f268e18ea70cd1e0f71faf006cf7ec3bbfbc
679596a5bff05ec3627add835f923d0e569b5aa20ffb433384b4ae6338f53b89
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Wed, 08 Feb 2023 04:56:35 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19024
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Tue, 07 Feb 2023 21:35:16 GMT
Expires: Wed, 08 Feb 2023 21:35:16 GMT
ETag: "ecb8f268e18ea70cd1e0f71faf006cf7ec3bbfbc"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ddbcc8409304b59c7d2faa53ed360fb5
98746db490891a3e5aa21f3dff58438d0c7795d5
b0ffc1ea39f25451920b84f09d650c564bd412bca0e2db72d99e736e385a176d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 04:56:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sectigo.com/
200 OK 471 B IP
Hash 5eecee8746b80be9e0c125cd1a6fbe62
6bb07051e8d9ef26d47f7df9846f589178d77cbb
adc26481b4eb6697f772d1d79de38769c179963e7e9df9b093d368f031472345
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 Feb 2023 04:56:35 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 07 Feb 2023 13:56:50 GMT
Expires: Tue, 14 Feb 2023 13:56:49 GMT
Etag: "6bb07051e8d9ef26d47f7df9846f589178d77cbb"
Cache-Control: max-age=550213,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7961c79619c7b511-OSL
beacon.krxd.net/usermatch.gif?partner_id=rfuel&partner_user_id=5134455421026106235
204 No Content 0 B URL HTTP/2 beacon.krxd.net/usermatch.gif?partner_id=rfuel&partner_user_id=5134455421026106235
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /usermatch.gif?partner_id=rfuel&partner_user_id=5134455421026106235 HTTP/1.1
Host: beacon.krxd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Wed, 08 Feb 2023 04:56:35 GMT
set-cookie: _kuid_=PXdxy17q; Expires=Mon, 07-Aug-23 04:56:35 GMT; Max-Age=15552000; Domain=.krxd.net; Path=/
cache-control: private, no-cache, no-store
p3p: policyref="https://cdn.krxd.net/kruxcontent/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC"
x-served-by: beacon-n004-dub-prod.krxd.net
x-request-time: D=34 t=1675832195
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash d45872ea903269ee12334e3f4c6ad749
969d86fa06014743231f01c6604e8a13be4be641
67ca1f656a701bee2c0a0fd445f20ea373bd32807cb658186b2b0af833f38ed6
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Wed, 08 Feb 2023 04:56:35 GMT
Last-Modified: Wed, 08 Feb 2023 03:22:40 GMT
Server: ECS (nyb/1D2A)
X-Cache: Miss from cloudfront
Via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: UB9szLDLpZnKyfJSmBeknVP2nJ2sG128FTNnyEQnuT6tMAZzG4Svhg==
Age: 5635
e1.emxdgt.com/put?d=d16&uid=5134455421026106235
204 No Content 0 B URL HTTP/2 e1.emxdgt.com/put?d=d16&uid=5134455421026106235
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /put?d=d16&uid=5134455421026106235 HTTP/1.1
Host: e1.emxdgt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
content-type: text/html
date: Wed, 08 Feb 2023 04:56:35 GMT
content-length: 0
X-Firefox-Spdy: h2
x.bidswitch.net/sync?dsp_id=119&user_id=5134455421026106235&expires=30
302 Found 0 B URL HTTP/2 x.bidswitch.net/sync?dsp_id=119&user_id=5134455421026106235&expires=30
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync?dsp_id=119&user_id=5134455421026106235&expires=30 HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Wed, 08 Feb 2023 04:56:35 GMT
content-length: 0
location: https://x.bidswitch.net/ul_cb/sync?dsp_id=119&user_id=5134455421026106235&expires=30
cache-control: no-cache, no-store, must-revalidate
set-cookie: tuuid=9f6f1277-3030-4b81-8129-7b942de115a1; path=/; expires=Thu, 08-Feb-2024 04:56:35 GMT; domain=.bidswitch.net; samesite=none; secure
c=1675832195; path=/; expires=Thu, 08-Feb-2024 04:56:35 GMT; domain=.bidswitch.net; samesite=none; secure
tuuid_lu=1675832195; path=/; expires=Thu, 08-Feb-2024 04:56:35 GMT; domain=.bidswitch.net; samesite=none; secure
c=1675832195; path=/; expires=Thu, 08-Feb-2024 04:56:35 GMT; domain=.bidswitch.net; samesite=none; secure
X-Firefox-Spdy: h2
sync-tm.everesttech.net/upi/pid/Mlpt2JaG/?redir=https%3A%2F%2Fp.rfihub.com%2Fcm%3Fin%3D1%26pub%3D21653%26userid%3D%24%7BTM_USER_ID%7D
302 Found 0 B URL HTTP/2 sync-tm.everesttech.net/upi/pid/Mlpt2JaG/?redir=https%3A%2F%2Fp.rfihub.com%2Fcm%3Fin%3D1%26pub%3D21653%26userid%3D%24%7BTM_USER_ID%7D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /upi/pid/Mlpt2JaG/?redir=https%3A%2F%2Fp.rfihub.com%2Fcm%3Fin%3D1%26pub%3D21653%26userid%3D%24%7BTM_USER_ID%7D HTTP/1.1
Host: sync-tm.everesttech.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: CP="NOI DSP COR LAW PSAo PSDo IVAo IVDo OUR BUS UNI DEM"
access-control-allow-origin: *
set-cookie: everest_g_v2=g_surferid~Y_MrgwAAATY46AAF; Path=/; Domain=.everesttech.net; Expires=Thu, 08-Feb-2024 04:56:35 GMT; Max-Age=31536000
location: https://sync-tm.everesttech.net/ct/upi/pid/Mlpt2JaG/?redir=https%3A%2F%2Fp.rfihub.com%2Fcm%3Fin%3D1%26pub%3D21653%26userid%3D%24%7BTM_USER_ID%7D&_test=Y_MrgwAAATY46AAF
server: Jetty(9.4.35.v20201120)
accept-ranges: bytes
date: Wed, 08 Feb 2023 04:56:35 GMT
via: 1.1 varnish
x-served-by: cache-bma1669-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1675832196.525872,VS0,VE92
cache-control: no-cache
pragma: no-cache
content-length: 0
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 83712ff1b330fc8aee58e72feb68a1d5
d31392c6247cbdad51a6fd71539654acbac2119a
2f2881ce7eb01a738787665d049784ade1b0ad0c3b83f311d9809ad852061288
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 Feb 2023 04:56:35 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 05 Feb 2023 01:42:56 GMT
Expires: Sun, 12 Feb 2023 01:42:55 GMT
Etag: "d31392c6247cbdad51a6fd71539654acbac2119a"
Cache-Control: max-age=333379,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7961c795a8afb4f9-OSL
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash f5fb64ab712645af982460b7016b291f
7aee2842702d8e67d52c12fb14693fa532254ce1
ab4037bb88934eed33b20976bef5289a46fa6c947134e3f2e53be8350fbc29b9
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Wed, 08 Feb 2023 04:56:35 GMT
Last-Modified: Wed, 08 Feb 2023 03:52:11 GMT
Server: ECS (nyb/1D20)
X-Cache: Miss from cloudfront
Via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: -9yydbyW2nZgs9LaJwkTvAgrugrpkDVKlZ8aDLwbflGfReUedZ7bxw==
Age: 3864
x.dlx.addthis.com/e/rocketfuel_sync?na_exid=5134455421026106235
200 OK 43 B URL HTTP/2 x.dlx.addthis.com/e/rocketfuel_sync?na_exid=5134455421026106235
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /e/rocketfuel_sync?na_exid=5134455421026106235 HTTP/1.1
Host: x.dlx.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
content-length: 43
expires: Wed, 08 Feb 2023 04:56:35 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Wed, 08 Feb 2023 04:56:35 GMT
strict-transport-security: max-age=2628000
X-Firefox-Spdy: h2
idsync.rlcdn.com/360947.gif?partner_uid=5134455421026106235
200 OK 42 B URL HTTP/2 idsync.rlcdn.com/360947.gif?partner_uid=5134455421026106235
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /360947.gif?partner_uid=5134455421026106235 HTTP/1.1
Host: idsync.rlcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache, no-store
content-type: image/gif
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
set-cookie: rlas3=jcO7sACGIaKWRrdJl/ctOGMPGvk72C/9vx/AFvlobFU=; Path=/; Domain=rlcdn.com; Expires=Thu, 08 Feb 2024 04:56:35 GMT; Secure; SameSite=None
pxrc=CAA=; Path=/; Domain=rlcdn.com; Expires=Sun, 09 Apr 2023 04:56:35 GMT; Secure; SameSite=None
timing-allow-origin: *
date: Wed, 08 Feb 2023 04:56:35 GMT
content-length: 42
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
bpi.rtactivate.com/tag/?id=11017&user_id=5134455421026106235
200 OK 43 B URL HTTP/2 bpi.rtactivate.com/tag/?id=11017&user_id=5134455421026106235
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /tag/?id=11017&user_id=5134455421026106235 HTTP/1.1
Host: bpi.rtactivate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: awselb/2.0
date: Wed, 08 Feb 2023 04:56:35 GMT
content-type: image/gif
content-length: 43
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 83712ff1b330fc8aee58e72feb68a1d5
d31392c6247cbdad51a6fd71539654acbac2119a
2f2881ce7eb01a738787665d049784ade1b0ad0c3b83f311d9809ad852061288
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 Feb 2023 04:56:35 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 05 Feb 2023 01:42:56 GMT
Expires: Sun, 12 Feb 2023 01:42:55 GMT
Etag: "d31392c6247cbdad51a6fd71539654acbac2119a"
Cache-Control: max-age=333379,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7961c7973a52b511-OSL
sync-tm.everesttech.net/ct/upi/pid/Mlpt2JaG/?redir=https%3A%2F%2Fp.rfihub.com%2Fcm%3Fin%3D1%26pub%3D21653%26userid%3D%24%7BTM_USER_ID%7D&_test=Y_MrgwAAATY46AAF
200 OK 85 B URL HTTP/2 sync-tm.everesttech.net/ct/upi/pid/Mlpt2JaG/?redir=https%3A%2F%2Fp.rfihub.com%2Fcm%3Fin%3D1%26pub%3D21653%26userid%3D%24%7BTM_USER_ID%7D&_test=Y_MrgwAAATY46AAF
IP
File type PNG image data, 1 x 1, 1-bit colormap, non-interlaced\012- data
Hash 5bec6606b8392065f9da9898ca6f7b14
73ac5b01b5e3293fb792179626e7f8369cdb944d
acccc501aa6afa3cfac15e8ddccf1561deed2ed08c2f7d652abbdbe9aa71609a
GET /ct/upi/pid/Mlpt2JaG/?redir=https%3A%2F%2Fp.rfihub.com%2Fcm%3Fin%3D1%26pub%3D21653%26userid%3D%24%7BTM_USER_ID%7D&_test=Y_MrgwAAATY46AAF HTTP/1.1
Host: sync-tm.everesttech.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20841497p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
server: Jetty(9.4.35.v20201120)
accept-ranges: bytes
date: Wed, 08 Feb 2023 04:56:36 GMT
via: 1.1 varnish
age: 3089
x-served-by: cache-bma1669-BMA
x-cache: HIT
x-cache-hits: 2042
x-timer: S1675832196.102351,VS0,VE0
cache-control: no-cache
pragma: no-cache
content-length: 85
X-Firefox-Spdy: h2
ib.adnxs.com/bounce?%2Fsetuid%3Fentity%3D18%26code%3D5134455421026106235
200 OK 43 B URL HTTP/1.1 ib.adnxs.com/bounce?%2Fsetuid%3Fentity%3D18%26code%3D5134455421026106235
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 592ebefc7104d681d57852665e9ad514
15cdf8df32aa251dd6dd590a60bf9cf74474e7c5
4b5b6b15c6255109e06720cce42a06d3aead8b7874423d9c52cb0303212c25ef
GET /bounce?%2Fsetuid%3Fentity%3D18%26code%3D5134455421026106235 HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20841497p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Wed, 08 Feb 2023 04:56:36 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
AN-X-Request-Uuid: c1a40cd0-e6e6-4a2e-992b-8cd111a24d8d
Set-Cookie: anj=dTM7k!M4/YErk#WF']wIg2Hb7H[]/*!@wnfH8KAM.xpH^Gmi]#DYf*jDYx1`E:kPdEs8c0hzUl78.?`F!*0qZ(SUc*!!:R^CR>).; SameSite=None; Path=/; Max-Age=7776000; Expires=Tue, 09-May-2023 04:56:36 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 959.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
sync.search.spotxchange.com/partner?adv_id=7180&uid=5134455421026106235&img=1&__user_check__=1&sync_id=f6a12c86-a76c-11ed-9346-1342c0320406
200 OK 43 B URL HTTP/1.1 sync.search.spotxchange.com/partner?adv_id=7180&uid=5134455421026106235&img=1&__user_check__=1&sync_id=f6a12c86-a76c-11ed-9346-1342c0320406
IP
ASN #35220 SpotXchange, INC
File type GIF image data, version 89a, 1 x 1\012- data
Hash 55fade2068e7503eae8d7ddf5eb6bd09
317496a096d6c86486a71d4521994bcd171a6bb3
e586a84d8523747f42e510d78e141015b6424cf67d612854e892a7bcedc8ec9e
GET /partner?adv_id=7180&uid=5134455421026106235&img=1&__user_check__=1&sync_id=f6a12c86-a76c-11ed-9346-1342c0320406 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20841497p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 08 Feb 2023 04:56:36 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Set-Cookie: audience=f706114b-a76c-11ed-bdd4-1974e5cf0106; expires=Wed, 08-Mar-2023 04:56:36 GMT; path=/; domain=.spotxchange.com
x-spotx-halt-type: Audience DSP sync endpoint was unable to cookie the audience.
X-fe: 120
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
dsum-sec.casalemedia.com/rum?cm_dsp_id=57&external_user_id=5134455421026106235&forward=&C=1
200 OK 43 B URL HTTP/1.1 dsum-sec.casalemedia.com/rum?cm_dsp_id=57&external_user_id=5134455421026106235&forward=&C=1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /rum?cm_dsp_id=57&external_user_id=5134455421026106235&forward=&C=1 HTTP/1.1
Host: dsum-sec.casalemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20841497p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Wed, 08 Feb 2023 04:56:36 GMT
Server: Apache
Cache-Control: no-cache
Content-Type: image/gif
Expires: 0
Pragma: no-cache
Content-Length: 43
Keep-Alive: timeout=1, max=499
Connection: Keep-Alive
p.rfihub.com/cm?pub=39342&in=0&userid=80661299-2881-4231-8090-b0ad074d2d34%3A1675832195.2413814&forward=https%3A//idsync.rlcdn.com/501709.gif%3Fpartner_uid%3D80661299-2881-4231-8090-b0ad074d2d34%253A1675832195.2413814
302 Found 0 B URL HTTP/1.1 p.rfihub.com/cm?pub=39342&in=0&userid=80661299-2881-4231-8090-b0ad074d2d34%3A1675832195.2413814&forward=https%3A//idsync.rlcdn.com/501709.gif%3Fpartner_uid%3D80661299-2881-4231-8090-b0ad074d2d34%253A1675832195.2413814
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cm?pub=39342&in=0&userid=80661299-2881-4231-8090-b0ad074d2d34%3A1675832195.2413814&forward=https%3A//idsync.rlcdn.com/501709.gif%3Fpartner_uid%3D80661299-2881-4231-8090-b0ad074d2d34%253A1675832195.2413814 HTTP/1.1
Host: p.rfihub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20841497p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Date: Wed, 08 Feb 2023 04:56:36 GMT
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Set-Cookie: rud=H4sIAAAAAAAA_-MSNjU0MDcxNrYwMjM2tzA1NjYyMRPiM9QNMTKy9LWwzI3M9isDAAqkolMlAAAA; Path=/; Domain=.rfihub.com; Expires=Mon, 4 Mar 2024 04:56:36 GMT; Secure; SameSite=None
ruds=H4sIAAAAAAAA_-MSNjU0MDcxNrYwMjM2tzA1NjYyMRPiM9QNMTKy9LWwzI3M9isDAAqkolMlAAAA; Path=/; Domain=.rfihub.com; Secure; SameSite=None
euds=H4sIAAAAAAAA_wXBwRGAMAgEwI_t4HAHIYfdmKESK3f3u7a8Cuw2SrBkwOTtdvwd3zmcyAe1l4LodTMRQv5LnvZQOgAAAA; Path=/; Domain=.rfihub.com; Secure; SameSite=None
eud=H4sIAAAAAAAA_z3IwRGAMAgEwAp8pQ4cDgg57CYOFfm0Wn_uc5-xqJmwKjESEuYQaqncultXtLXHhVyTbqh5WsCJeMfxZ0L5Aer6cVlKAAAA; Path=/; Domain=.rfihub.com; Expires=Mon, 4 Mar 2024 04:56:36 GMT; Secure; SameSite=None
Location: https://idsync.rlcdn.com/501709.gif?partner_uid=80661299-2881-4231-8090-b0ad074d2d34%3A1675832195.2413814
Content-Length: 0
Server: Jetty(9.3.29.v20201019)
x.bidswitch.net/ul_cb/sync?dsp_id=119&user_id=5134455421026106235&expires=30
200 OK 43 B URL HTTP/2 x.bidswitch.net/ul_cb/sync?dsp_id=119&user_id=5134455421026106235&expires=30
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /ul_cb/sync?dsp_id=119&user_id=5134455421026106235&expires=30 HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20841497p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 08 Feb 2023 04:56:36 GMT
content-type: image/gif
content-length: 43
cache-control: no-cache, no-store, must-revalidate
X-Firefox-Spdy: h2
dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=1121&dpuuid=5134455421026106235&redir=
200 OK 59 B URL HTTP/1.1 dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=1121&dpuuid=5134455421026106235&redir=
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 1251cd5e5c2def4c046309375f87c1c1
e02d6b0c6a5c495c15985e2832e335eda8528c80
4e7010cc46fa361c88e57e3346d27421cf3b8a8bf5f39b43fc45997c60cb1c13
GET /demconf.jpg?et:ibs%7cdata:dpid=1121&dpuuid=5134455421026106235&redir= HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20841497p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
Content-Type: image/gif
DCS: dcs-prod-irl1-1-v045-09f6df340.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
X-TID: hHL3DtASTno=
Content-Length: 59
Connection: keep-alive
static.zdassets.com/web_widget/latest/classic/fda6cd35495c75f83508d9d2e77ee33d.mp3
206 Partial Content 20 kB URL HTTP/2 static.zdassets.com/web_widget/latest/classic/fda6cd35495c75f83508d9d2e77ee33d.mp3
IP
File type Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, JntStereo\012- data
Hash f11ce9e8f40a392830217253fe75d6de
89ba57fcc360da34756c127acba15a8b23267fc6
05069cc62b394b6ecc2daf3c51b4b2ba7f6cc8735988e8234487234af47eceee
GET /web_widget/latest/classic/fda6cd35495c75f83508d9d2e77ee33d.mp3 HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 206 Partial Content
date: Wed, 08 Feb 2023 04:56:36 GMT
content-type: audio/mpeg; charset=utf-8
content-length: 19698
x-amz-id-2: g87hI3qvp6u/eYrvF5ekvnlnd/ZKIURFxO017tHaVZdhHodAb1MX6TjMAHxlaiIHpETLXLY/I+c=
x-amz-request-id: X429XSBWRFS5FTSC
x-amz-replication-status: COMPLETED
last-modified: Wed, 09 Mar 2022 06:43:05 GMT
etag: "f11ce9e8f40a392830217253fe75d6de"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Thu, 09 Mar 2023 06:43:04 GMT
x-amz-version-id: ngeCnQamEcRo6kgSgz9pTF5J7hCEPwJW
cf-cache-status: HIT
age: 2799765
content-range: bytes 0-19697/19698
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xDPyoSO7L7LjQ9le8uJjFmiNTDaJSYg%2BKYL8GC9wN0ASee2Ht5jOInwPK7QqhYBh8AVfc6y%2FR1Qk3y6UWeknNLUCSObokkDyskuZDymULQ3DyLHoCAhOsAoxgHR62QltGjY%2FbRQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 7961c799d90ab524-OSL
X-Firefox-Spdy: h2
2d1c8d36-b9ba-45b7-87c9-e34c592a597a.seals-emr.certria.com/sealassets/b1d666d7716f1b65141142d5fc1598ab-doggocasino.com-8cdd4d66f8d65689b62819334a267b9a257fee4eb2750b2e47cdaf63d0becac6311bea6226c3373c1ea5283761ef2821-c2VhbC5wbmc%3D?status=valid
200 OK 53 kB URL HTTP/2 2d1c8d36-b9ba-45b7-87c9-e34c592a597a.seals-emr.certria.com/sealassets/b1d666d7716f1b65141142d5fc1598ab-doggocasino.com-8cdd4d66f8d65689b62819334a267b9a257fee4eb2750b2e47cdaf63d0becac6311bea6226c3373c1ea5283761ef2821-c2VhbC5wbmc%3D?status=valid
IP
File type PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced\012- data
Hash fceb44c117d8c9766bdd23befc239931
8a57ed8068117e00c0257cb97340274253236989
428b3487df7ab6c93f3f6345481dfc178a0c6e4c7589ccd6a3a11b12db077f28
GET /sealassets/b1d666d7716f1b65141142d5fc1598ab-doggocasino.com-8cdd4d66f8d65689b62819334a267b9a257fee4eb2750b2e47cdaf63d0becac6311bea6226c3373c1ea5283761ef2821-c2VhbC5wbmc%3D?status=valid HTTP/1.1
Host: 2d1c8d36-b9ba-45b7-87c9-e34c592a597a.seals-emr.certria.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 52815
date: Wed, 08 Feb 2023 04:54:30 GMT
x-powered-by: Express
cache-control: max-age=1200
etag: W/"ce4f-ilftgGgRfgDAJXy5c0AnQlMjaYk"
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7961c48adb2f30db-FRA
x-cache: Hit from cloudfront
via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 2cxzTVTzbox3Ug4Vzw7ahyrhF9F1Snl8fpAoziEYoUuPfTmi4EgzDA==
age: 126
X-Firefox-Spdy: h2
2d1c8d36-b9ba-45b7-87c9-e34c592a597a.seals-emr.certria.com/54f396e0-b046-49b1-9cb3-0c69281d7ea9-beacon.png
200 OK 68 B URL HTTP/2 2d1c8d36-b9ba-45b7-87c9-e34c592a597a.seals-emr.certria.com/54f396e0-b046-49b1-9cb3-0c69281d7ea9-beacon.png
IP
File type PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced\012- data
Hash e679fbd466a2d656f194a5da4fa083cd
2aa795c7607aa6ea41313be88f1b7a9c1ab516b3
f309b7c03d9cae63a9bedbee6ed655f3dbcdb194132943639344dead5f3b9710
GET /54f396e0-b046-49b1-9cb3-0c69281d7ea9-beacon.png HTTP/1.1
Host: 2d1c8d36-b9ba-45b7-87c9-e34c592a597a.seals-emr.certria.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 68
date: Wed, 11 Jan 2023 03:11:33 GMT
last-modified: Tue, 15 Dec 2020 08:04:53 GMT
etag: "e679fbd466a2d656f194a5da4fa083cd"
cache-control: no-cache, no-store, must-revalidate
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: hBOBo8tz86664ogOBG4mojfpWVIF0oO8QlTvs7_i_bDwRqaWXkJsXA==
age: 2425504
X-Firefox-Spdy: h2
ocsp.usertrust.com/
200 OK 472 B IP
Hash e4dbba02863ea7f0e2d1ad84db204698
5c7d22ea4fb2a0817c8462019daf1dae864fa412
fd4d5173969a7bbb6ab6cb8f67f1a532acf82abf622930d11a84a958fec6cd3c
POST / HTTP/1.1
Host: ocsp.usertrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 Feb 2023 04:56:36 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sat, 04 Feb 2023 21:01:04 GMT
Expires: Sat, 11 Feb 2023 21:01:03 GMT
Etag: "5c7d22ea4fb2a0817c8462019daf1dae864fa412"
Cache-Control: max-age=604160,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 1622
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7961c79a6a1d0b4d-OSL
51d4256e-9ede-4425-8b77-d7e5166c1c25.snippet.antillephone.com/sealassets/b1d666d7716f1b65141142d5fc1598ab-doggocasino.com-2f90385e7147995d0ad0e1568dcb8420125a9230e800b76e4574b197458fcd3ec3fae37cdc434512e60b35647fd94003-c2VhbC5wbmc%3D?status=valid
200 OK 46 kB URL HTTP/2 51d4256e-9ede-4425-8b77-d7e5166c1c25.snippet.antillephone.com/sealassets/b1d666d7716f1b65141142d5fc1598ab-doggocasino.com-2f90385e7147995d0ad0e1568dcb8420125a9230e800b76e4574b197458fcd3ec3fae37cdc434512e60b35647fd94003-c2VhbC5wbmc%3D?status=valid
IP
File type PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced\012- data
Hash 375b5b5bcd1d5179f5b789e4c28ca6df
f52bfd097b13f83fa43714f59786efa4082f55a1
f7acaa7ace617964cd79de3287bfa740f1d3fbcbed82ea1d09cd94058d4b1281
GET /sealassets/b1d666d7716f1b65141142d5fc1598ab-doggocasino.com-2f90385e7147995d0ad0e1568dcb8420125a9230e800b76e4574b197458fcd3ec3fae37cdc434512e60b35647fd94003-c2VhbC5wbmc%3D?status=valid HTTP/1.1
Host: 51d4256e-9ede-4425-8b77-d7e5166c1c25.snippet.antillephone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 46382
date: Wed, 08 Feb 2023 04:55:14 GMT
x-powered-by: Express
cache-control: max-age=1200
etag: W/"b52e-9Sv9CXsT+D+kNxT1l4bvpAgvVaE"
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7961c59d2a1b2c61-FRA
x-cache: Hit from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: CtGHH0oCzjbcWyqukj0KLxCtiT8IddQQN3sF9ZXCHFYRLpQdoUgdzw==
age: 82
X-Firefox-Spdy: h2
51d4256e-9ede-4425-8b77-d7e5166c1c25.snippet.antillephone.com/54f396e0-b046-49b1-9cb3-0c69281d7ea9-beacon.png
200 OK 68 B URL HTTP/2 51d4256e-9ede-4425-8b77-d7e5166c1c25.snippet.antillephone.com/54f396e0-b046-49b1-9cb3-0c69281d7ea9-beacon.png
IP
File type PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced\012- data
Hash e679fbd466a2d656f194a5da4fa083cd
2aa795c7607aa6ea41313be88f1b7a9c1ab516b3
f309b7c03d9cae63a9bedbee6ed655f3dbcdb194132943639344dead5f3b9710
GET /54f396e0-b046-49b1-9cb3-0c69281d7ea9-beacon.png HTTP/1.1
Host: 51d4256e-9ede-4425-8b77-d7e5166c1c25.snippet.antillephone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 68
date: Sat, 21 Jan 2023 04:07:09 GMT
last-modified: Tue, 15 Dec 2020 08:04:53 GMT
etag: "e679fbd466a2d656f194a5da4fa083cd"
cache-control: no-cache, no-store, must-revalidate
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: h1ICGM0UX7eXPSRUuYQ1r00g8U8rYwO7JK3xM0edq-2WDKsulKR87Q==
age: 1558168
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash bd17a590e38985df96a0f58ab5f92850
64c091a007f03e37c66490f60e8e669ba9886d88
ea53033bbf4bf9146aa58ba56a44fe5ff413c1e9c14f4f8988366cc85c80df46
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5850
Cache-Control: max-age=147930
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 04:56:36 GMT
Etag: "63e2b384-118"
Expires: Thu, 09 Feb 2023 22:02:06 GMT
Last-Modified: Tue, 07 Feb 2023 20:24:36 GMT
Server: ECS (amb/6B71)
X-Cache: HIT
Content-Length: 280
bpi.rtactivate.com/tag/?id=11017&user_id=5144588523262887297
200 OK 43 B URL HTTP/2 bpi.rtactivate.com/tag/?id=11017&user_id=5144588523262887297
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /tag/?id=11017&user_id=5144588523262887297 HTTP/1.1
Host: bpi.rtactivate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: awselb/2.0
date: Wed, 08 Feb 2023 04:56:36 GMT
content-type: image/gif
content-length: 43
X-Firefox-Spdy: h2
ps.eyeota.net/match?uid=5124322324941611990&bid=omt9pi0
200 OK 0 B URL HTTP/1.1 ps.eyeota.net/match?uid=5124322324941611990&bid=omt9pi0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match?uid=5124322324941611990&bid=omt9pi0 HTTP/1.1
Host: ps.eyeota.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20841497p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Set-Cookie: SERVERID=22227~DM; Domain=eyeota.net; Path=/; Expires=Wed, 08 Feb 2023 05:06:36 GMT; Secure; SameSite=None;
P3P: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR SAMo BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR", policyref="http://ps.eyeota.net/w3c/p3p.xml"
Content-Length: 0
Date: Wed, 08 Feb 2023 04:56:36 GMT
widget-mediator.zopim.com/s/W/ws/BW2hBhF0jSybBnNx/c/1675832249115
101 Switching Protocols 0 B URL HTTP/1.1 widget-mediator.zopim.com/s/W/ws/BW2hBhF0jSybBnNx/c/1675832249115
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s/W/ws/BW2hBhF0jSybBnNx/c/1675832249115 HTTP/1.1
Host: widget-mediator.zopim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://doggocasino.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: EqegcfwOAZQ2rkmdBUNDRA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Wed, 08 Feb 2023 04:56:36 GMT
Connection: upgrade
Set-Cookie: AWSALB=9TW09VVSedAt9b+h5aAzKkk9jrzcP8W/EjWZru0x87MhRyHceZ65TyjTOsjE4omKyBXcOfmy7qD65oTBwE+D9zrQOMTM+p0aqoiqiGRlzRLQhwJHohpKagH/Kb41; Expires=Wed, 15 Feb 2023 04:56:36 GMT; Path=/
AWSALBCORS=9TW09VVSedAt9b+h5aAzKkk9jrzcP8W/EjWZru0x87MhRyHceZ65TyjTOsjE4omKyBXcOfmy7qD65oTBwE+D9zrQOMTM+p0aqoiqiGRlzRLQhwJHohpKagH/Kb41; Expires=Wed, 15 Feb 2023 04:56:36 GMT; Path=/; SameSite=None; Secure
Upgrade: websocket
Sec-WebSocket-Accept: +0wE85/tXpkuV1dBJbxDeVzaFH0=
Sec-WebSocket-Version: 13
WebSocket-Server: uWebSockets
a.rfihub.com/cm?pub=445&in=0&forward=&google_error=3
200 OK 42 B URL HTTP/1.1 a.rfihub.com/cm?pub=445&in=0&forward=&google_error=3
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash accba0b69f352b4c9440f05891b015c5
9d01cc5dc8e042c0d4ad6cfb8b3ac38e84a5ef9f
47043e4823a6c21a8881de789b4185355330b5804629d23f6b43dd93f5265292
GET /cm?pub=445&in=0&forward=&google_error=3 HTTP/1.1
Host: a.rfihub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20841497p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Wed, 08 Feb 2023 04:56:36 GMT
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Set-Cookie: rud=H4sIAAAAAAAA_-MSNjU0sDA1tTQ3MjMyNTcyMDU3NhHiM9Q1DAsLDsvU9Q3MDTAAAN-DsEMlAAAA; Path=/; Domain=.rfihub.com; Expires=Mon, 4 Mar 2024 04:56:36 GMT; Secure; SameSite=None
ruds=H4sIAAAAAAAA_-MSNjU0sDA1tTQ3MjMyNTcyMDU3NhHiM9Q1DAsLDsvU9Q3MDTAAAN-DsEMlAAAA; Path=/; Domain=.rfihub.com; Secure; SameSite=None
euds=H4sIAAAAAAAA_-NicjUGAEAxo38EAAAA; Path=/; Domain=.rfihub.com; Secure; SameSite=None
eud=H4sIAAAAAAAA_-NicjUO4jU0Mze1MDYytDQzNrMAACsNV3wTAAAA; Path=/; Domain=.rfihub.com; Expires=Mon, 4 Mar 2024 04:56:36 GMT; Secure; SameSite=None
Cache-Control: no-cache
Content-Type: image/gif
Content-Length: 42
Server: Jetty(9.3.29.v20201019)
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 4fd6e0bd7e9b54c999d0baf0823070e0
f332ecee79963e261a1ed0689eab2c37a16bf6c0
22369489168e0c03390368af25665e66efe6030c3e17870b97a0b72b9855e163
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Wed, 08 Feb 2023 04:56:36 GMT
Last-Modified: Wed, 08 Feb 2023 04:29:56 GMT
Server: ECS (nyb/1D1B)
X-Cache: Miss from cloudfront
Via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: RzcuHRByYYeBry8MtKD7SGYcJfXQ5MD-7dT_U_c0peDx_LKbSN8_qw==
Age: 1600
dsum-sec.casalemedia.com/rum?cm_dsp_id=57&external_user_id=5144588523262887297&forward=
302 Found 0 B URL HTTP/1.1 dsum-sec.casalemedia.com/rum?cm_dsp_id=57&external_user_id=5144588523262887297&forward=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rum?cm_dsp_id=57&external_user_id=5144588523262887297&forward= HTTP/1.1
Host: dsum-sec.casalemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Date: Wed, 08 Feb 2023 04:56:36 GMT
Server: Apache
Cache-Control: no-cache
Expires: 0
Location: /rum?cm_dsp_id=57&external_user_id=5144588523262887297&forward=&C=1
P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI"
Pragma: no-cache
Content-Length: 0
Set-Cookie: CMID=Y.MrhNxjh0VpXnUoVpTMUwAA; Path=/; Domain=casalemedia.com; Expires=Thu, 08 Feb 2024 04:56:36 GMT; Max-Age=31536000; Secure; SameSite=None
CMPS=4541; Path=/; Domain=casalemedia.com; Expires=Tue, 09 May 2023 04:56:36 GMT; Max-Age=7776000; Secure; SameSite=None
CMPRO=4541; Path=/; Domain=casalemedia.com; Expires=Tue, 09 May 2023 04:56:36 GMT; Max-Age=7776000; Secure; SameSite=None
Keep-Alive: timeout=1, max=498
Connection: Keep-Alive
e1.emxdgt.com/put?d=d16&uid=5144588523262887297
204 No Content 0 B URL HTTP/2 e1.emxdgt.com/put?d=d16&uid=5144588523262887297
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /put?d=d16&uid=5144588523262887297 HTTP/1.1
Host: e1.emxdgt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
content-type: text/html
date: Wed, 08 Feb 2023 04:56:36 GMT
content-length: 0
X-Firefox-Spdy: h2
sync.search.spotxchange.com/partner?adv_id=7180&uid=5144588523262887297&img=1
302 Found 0 B URL HTTP/1.1 sync.search.spotxchange.com/partner?adv_id=7180&uid=5144588523262887297&img=1
IP
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partner?adv_id=7180&uid=5144588523262887297&img=1 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Wed, 08 Feb 2023 04:56:36 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=f7363a5b-a76c-11ed-a539-102ad03c0106; expires=Wed, 08-Mar-2023 04:56:36 GMT; path=/; domain=.spotxchange.com; SameSite=none
Location: /partner?adv_id=7180&uid=5144588523262887297&img=1&__user_check__=1&sync_id=f7363aab-a76c-11ed-a539-102ad03c0106
X-fe: 134
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
aa.agkn.com/adscores/g.pixel?sid=9212192898&rf=5144588523262887297
200 OK 43 B URL HTTP/2 aa.agkn.com/adscores/g.pixel?sid=9212192898&rf=5144588523262887297
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash db04c7b378cb2db912c3ba8a5a774ee3
dee34bd86c3484d31002182aa2b7caa4699126b8
98b3d9d20e032f90aca49e9b116225d539ff6fbdb7e42c3c363f63896ac03d2a
GET /adscores/g.pixel?sid=9212192898&rf=5144588523262887297 HTTP/1.1
Host: aa.agkn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 08 Feb 2023 04:56:36 GMT
content-type: image/gif
content-length: 43
server: AAWebServer
p3p: policyref="https://www.agkn.com/p3p/p3p.xml",CP="NOI NID"
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: accept, cache-control, origin, x-requested-with, x-file-name, content-type
X-Firefox-Spdy: h2
x.bidswitch.net/sync?dsp_id=119&user_id=5144588523262887297&expires=30
200 OK 43 B URL HTTP/2 x.bidswitch.net/sync?dsp_id=119&user_id=5144588523262887297&expires=30
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /sync?dsp_id=119&user_id=5144588523262887297&expires=30 HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 08 Feb 2023 04:56:36 GMT
content-type: image/gif
content-length: 43
cache-control: no-cache, no-store, must-revalidate
X-Firefox-Spdy: h2
ib.adnxs.com/setuid?entity=18&code=5144588523262887297
307 Redirection 0 B URL HTTP/1.1 ib.adnxs.com/setuid?entity=18&code=5144588523262887297
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /setuid?entity=18&code=5144588523262887297 HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Wed, 08 Feb 2023 04:56:36 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
Location: https://ib.adnxs.com/bounce?%2Fsetuid%3Fentity%3D18%26code%3D5144588523262887297
AN-X-Request-Uuid: f843487f-3b95-4dcf-9529-1416641e204f
Set-Cookie: uuid2=2123509492775299133; SameSite=None; Path=/; Max-Age=7776000; Expires=Tue, 09-May-2023 04:56:36 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 959.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
dpm.demdex.net/ibs:dpid=1121&dpuuid=5144588523262887297&redir=
302 Found 0 B URL HTTP/1.1 dpm.demdex.net/ibs:dpid=1121&dpuuid=5144588523262887297&redir=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ibs:dpid=1121&dpuuid=5144588523262887297&redir= HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
DCS: dcs-prod-irl1-2-v045-0f14bb97f.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
Location: https://dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=1121&dpuuid=5144588523262887297&redir=
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
set-cookie: demdex=19055173359113536984379401538416160497; Max-Age=15552000; Expires=Mon, 07 Aug 2023 04:56:36 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-TID: Rsq0YjzsQXs=
Content-Length: 0
Connection: keep-alive
contextual.media.net/cksync.php?cs=3&type=rkt&ovsid=5144588523262887297
200 OK 237 B URL HTTP/2 contextual.media.net/cksync.php?cs=3&type=rkt&ovsid=5144588523262887297
IP
File type GIF image data, version 87a, 1 x 1\012- data
Hash 74378edf31ef26cd97c236ad08d05fa3
fdd52cdbf193d1dfd1031978667689f3414b49ed
11cb2c0e70f91c6a0326cf4a4f9fa1b177c14efba6b56bf7535624b9c7bce990
GET /cksync.php?cs=3&type=rkt&ovsid=5144588523262887297 HTTP/1.1
Host: contextual.media.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: Apache
content-length: 237
content-type: image/gif
set-cookie: visitor-id=3188337963580206000V10; Expires=Thu, 08 Feb 2024 04:56:36 GMT; domain=.media.net; Path=/;
data-rk=5144588523262887297~~3;Expires=Wed, 07 Feb 2024 04:56:36 GMT;path=/;domain=.media.net;
p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA", CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA, CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA
strict-transport-security: max-age=31536000
x-mnet-hl2: E
expires: Wed, 08 Feb 2023 04:56:36 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Wed, 08 Feb 2023 04:56:36 GMT
X-Firefox-Spdy: h2
live.rezync.com/pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5144588523262887297&referrer=https%3A%2F%2Fdoggocasino.com%2Fno-no%3FaffiliateName%3D%255Bcellxpert%255D%26affid%3Dcx-35656_393091%26bannerid%3D35656%26trackerid%3D35656_393091%26brand%3Ddoggocasino%26bta%3D35656%26rdk%3Drk1
302 Found 661 B URL HTTP/2 live.rezync.com/pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5144588523262887297&referrer=https%3A%2F%2Fdoggocasino.com%2Fno-no%3FaffiliateName%3D%255Bcellxpert%255D%26affid%3Dcx-35656_393091%26bannerid%3D35656%26trackerid%3D35656_393091%26brand%3Ddoggocasino%26bta%3D35656%26rdk%3Drk1
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (575)
Hash 8e5229ed99a6e506a2230037054efcec
6a59e7dfcd8b542f893159c3dc9b49dc102866a3
062d5354ed274943f7d50fdf15ef262353d1678177c573ff0ebe24fc5e584565
GET /pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5144588523262887297&referrer=https%3A%2F%2Fdoggocasino.com%2Fno-no%3FaffiliateName%3D%255Bcellxpert%255D%26affid%3Dcx-35656_393091%26bannerid%3D35656%26trackerid%3D35656_393091%26brand%3Ddoggocasino%26bta%3D35656%26rdk%3Drk1 HTTP/1.1
Host: live.rezync.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Cookie: zync-uuid=80661299-2881-4231-8090-b0ad074d2d34:1675832195.2413814; sd-session-id=.eJwNyksOgjAQANC7zJqa-ZZpL0PQdtEoaChuJNxdli95B0yfui3zWtcd8r596wCPV7vUIR_Q22-pT8hgJKpmyoQcCSOLwTlAr7239zq1ch3HGIlTCuxOQVkoOCYMd5wLjlq4iGaKo7kwJbuxkjgpnH9tQSQu.Y-Mrgw.wm5pHHz3PAsh2h-kzOHPq5wOL-w
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
content-type: text/html; charset=utf-8
content-length: 661
location: https://p.rfihub.com/cm?pub=39342&in=0&userid=80661299-2881-4231-8090-b0ad074d2d34%3A1675832195.2413814&forward=https%3A//idsync.rlcdn.com/501709.gif%3Fpartner_uid%3D80661299-2881-4231-8090-b0ad074d2d34%253A1675832195.2413814
date: Wed, 08 Feb 2023 04:56:36 GMT
set-cookie: zync-uuid=80661299-2881-4231-8090-b0ad074d2d34:1675832195.2413814; Domain=rezync.com; Expires=Sun, 06 Aug 2023 20:56:36 GMT; Path=/; SameSite=None; Secure
sd-session-id=.eJwNysEOgyAMANB_6VkWWgoUfsa4wYFM2WLdZcZ_l-NL3gnzt-7b0ms_IB_7r07wWtuQQj5B23-rb8jgkdmLeHIUSCRSinBNoFW1ffrcyjhiQ0BKyYyAhsmhEZusedql2MiFiuOMIXpxhMk_iNEJMlw3eP4kUw.Y-MrhA.s43S1k2XNF3W1jugSprjt-svl7w; Expires=Mon, 07 Aug 2023 04:56:36 GMT; HttpOnly; Path=/; SameSite=None; Secure
vary: Cookie
server: lighttpd/1.4.59
x-cache: Miss from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: I1dMScWxwcP01lf1W8TtaQs9x6UKIoN102tKqzpsxeXKiaTyQUPmDA==
X-Firefox-Spdy: h2
beacon.krxd.net/usermatch.gif?partner_id=rfuel&partner_user_id=5144588523262887297
204 No Content 0 B URL HTTP/2 beacon.krxd.net/usermatch.gif?partner_id=rfuel&partner_user_id=5144588523262887297
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /usermatch.gif?partner_id=rfuel&partner_user_id=5144588523262887297 HTTP/1.1
Host: beacon.krxd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Wed, 08 Feb 2023 04:56:36 GMT
set-cookie: _kuid_=PXdxzLHY; Expires=Mon, 07-Aug-23 04:56:36 GMT; Max-Age=15552000; Domain=.krxd.net; Path=/
cache-control: private, no-cache, no-store
p3p: policyref="https://cdn.krxd.net/kruxcontent/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC"
x-served-by: beacon-n017-dub-prod.krxd.net
x-request-time: D=42 t=1675832196
X-Firefox-Spdy: h2
dsum-sec.casalemedia.com/rum?cm_dsp_id=57&external_user_id=5144588523262887297&forward=&C=1
200 OK 43 B URL HTTP/1.1 dsum-sec.casalemedia.com/rum?cm_dsp_id=57&external_user_id=5144588523262887297&forward=&C=1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /rum?cm_dsp_id=57&external_user_id=5144588523262887297&forward=&C=1 HTTP/1.1
Host: dsum-sec.casalemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20841497p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Wed, 08 Feb 2023 04:56:36 GMT
Server: Apache
Cache-Control: no-cache
Content-Type: image/gif
Expires: 0
Pragma: no-cache
Content-Length: 43
Keep-Alive: timeout=1, max=497
Connection: Keep-Alive
sync.search.spotxchange.com/partner?adv_id=7180&uid=5144588523262887297&img=1&__user_check__=1&sync_id=f7363aab-a76c-11ed-a539-102ad03c0106
200 OK 43 B URL HTTP/1.1 sync.search.spotxchange.com/partner?adv_id=7180&uid=5144588523262887297&img=1&__user_check__=1&sync_id=f7363aab-a76c-11ed-a539-102ad03c0106
IP
ASN #35220 SpotXchange, INC
File type GIF image data, version 89a, 1 x 1\012- data
Hash 55fade2068e7503eae8d7ddf5eb6bd09
317496a096d6c86486a71d4521994bcd171a6bb3
e586a84d8523747f42e510d78e141015b6424cf67d612854e892a7bcedc8ec9e
GET /partner?adv_id=7180&uid=5144588523262887297&img=1&__user_check__=1&sync_id=f7363aab-a76c-11ed-a539-102ad03c0106 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20841497p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 08 Feb 2023 04:56:36 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Set-Cookie: audience=f73e5576-a76c-11ed-8c58-16821cb20106; expires=Wed, 08-Mar-2023 04:56:36 GMT; path=/; domain=.spotxchange.com
x-spotx-halt-type: Audience DSP sync endpoint was unable to cookie the audience.
X-fe: 60
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
ib.adnxs.com/bounce?%2Fsetuid%3Fentity%3D18%26code%3D5144588523262887297
200 OK 43 B URL HTTP/1.1 ib.adnxs.com/bounce?%2Fsetuid%3Fentity%3D18%26code%3D5144588523262887297
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 592ebefc7104d681d57852665e9ad514
15cdf8df32aa251dd6dd590a60bf9cf74474e7c5
4b5b6b15c6255109e06720cce42a06d3aead8b7874423d9c52cb0303212c25ef
GET /bounce?%2Fsetuid%3Fentity%3D18%26code%3D5144588523262887297 HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20841497p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Wed, 08 Feb 2023 04:56:36 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
AN-X-Request-Uuid: 9dceea82-a733-4de1-9fb8-f899a3b9ce44
Set-Cookie: anj=dTM7k!M4/YErk#WF']wIg2Hb7H[]/*!@wnfH8KAM.xpH^Gmi[rDZXA`G4Q0pEs8A^HMiL9hzUl78.?`F!*0qZ(SUc*!!YxgOI*zT; SameSite=None; Path=/; Max-Age=7776000; Expires=Tue, 09-May-2023 04:56:36 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 959.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
p.rfihub.com/cm?pub=39342&in=0&userid=80661299-2881-4231-8090-b0ad074d2d34%3A1675832195.2413814&forward=https%3A//idsync.rlcdn.com/501709.gif%3Fpartner_uid%3D80661299-2881-4231-8090-b0ad074d2d34%253A1675832195.2413814
302 Found 0 B URL HTTP/1.1 p.rfihub.com/cm?pub=39342&in=0&userid=80661299-2881-4231-8090-b0ad074d2d34%3A1675832195.2413814&forward=https%3A//idsync.rlcdn.com/501709.gif%3Fpartner_uid%3D80661299-2881-4231-8090-b0ad074d2d34%253A1675832195.2413814
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cm?pub=39342&in=0&userid=80661299-2881-4231-8090-b0ad074d2d34%3A1675832195.2413814&forward=https%3A//idsync.rlcdn.com/501709.gif%3Fpartner_uid%3D80661299-2881-4231-8090-b0ad074d2d34%253A1675832195.2413814 HTTP/1.1
Host: p.rfihub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20841497p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Date: Wed, 08 Feb 2023 04:56:36 GMT
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Set-Cookie: rud=H4sIAAAAAAAA_-MSNjU0MTCwMLE0MjYztzA1NzK2NBbiM9T1CCo3cnHXdXQNM_MBAGUGL50lAAAA; Path=/; Domain=.rfihub.com; Expires=Mon, 4 Mar 2024 04:56:36 GMT; Secure; SameSite=None
eud=H4sIAAAAAAAA_z3IwRGAMAgEwAp8pQ4cDgg57CYOFfm0Wn_uc5-xqJmwKjESEuYQaqncultXtLXHhVyTbqh5WsCJeMfxZwbxAa0Kv-5KAAAA; Path=/; Domain=.rfihub.com; Expires=Mon, 4 Mar 2024 04:56:36 GMT; Secure; SameSite=None
ruds=H4sIAAAAAAAA_-MSNjU0MTCwMLE0MjYztzA1NzK2NBbiM9T1CCo3cnHXdXQNM_MBAGUGL50lAAAA; Path=/; Domain=.rfihub.com; Secure; SameSite=None
euds=H4sIAAAAAAAA_wXBwRGAMAgEwI_t4HAHIYfdmKESK3f3u7a8Cuw2SrBkwOTtdvwd3zmcyAe1l4LodTMRQv5LnvZQOgAAAA; Path=/; Domain=.rfihub.com; Secure; SameSite=None
Location: https://idsync.rlcdn.com/501709.gif?partner_uid=80661299-2881-4231-8090-b0ad074d2d34%3A1675832195.2413814
Content-Length: 0
Server: Jetty(9.3.29.v20201019)
dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=1121&dpuuid=5144588523262887297&redir=
200 OK 59 B URL HTTP/1.1 dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=1121&dpuuid=5144588523262887297&redir=
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 1251cd5e5c2def4c046309375f87c1c1
e02d6b0c6a5c495c15985e2832e335eda8528c80
4e7010cc46fa361c88e57e3346d27421cf3b8a8bf5f39b43fc45997c60cb1c13
GET /demconf.jpg?et:ibs%7cdata:dpid=1121&dpuuid=5144588523262887297&redir= HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20841497p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
Content-Type: image/gif
DCS: dcs-prod-irl1-2-v045-02b96ccc8.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
X-TID: fIgn72XVR4k=
Content-Length: 59
Connection: keep-alive
a.rfihub.com/cm?pub=445&in=0&forward=&google_error=3
200 OK 42 B URL HTTP/1.1 a.rfihub.com/cm?pub=445&in=0&forward=&google_error=3
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash accba0b69f352b4c9440f05891b015c5
9d01cc5dc8e042c0d4ad6cfb8b3ac38e84a5ef9f
47043e4823a6c21a8881de789b4185355330b5804629d23f6b43dd93f5265292
GET /cm?pub=445&in=0&forward=&google_error=3 HTTP/1.1
Host: a.rfihub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20841497p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Wed, 08 Feb 2023 04:56:36 GMT
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Set-Cookie: rud=H4sIAAAAAAAA_-MSNjU0MjE2MjI2MrE0MTQzNDKwMBfiM9Q1LQkONy111C1Kt_AFAN52GMYlAAAA; Path=/; Domain=.rfihub.com; Expires=Mon, 4 Mar 2024 04:56:36 GMT; Secure; SameSite=None
ruds=H4sIAAAAAAAA_-MSNjU0MjE2MjI2MrE0MTQzNDKwMBfiM9Q1LQkONy111C1Kt_AFAN52GMYlAAAA; Path=/; Domain=.rfihub.com; Secure; SameSite=None
euds=H4sIAAAAAAAA_-NicjUGAEAxo38EAAAA; Path=/; Domain=.rfihub.com; Secure; SameSite=None
eud=H4sIAAAAAAAA_-NicjUO4jU0Mze1MDYytDQzsTQDAGYqOBkTAAAA; Path=/; Domain=.rfihub.com; Expires=Mon, 4 Mar 2024 04:56:36 GMT; Secure; SameSite=None
Cache-Control: no-cache
Content-Type: image/gif
Content-Length: 42
Server: Jetty(9.3.29.v20201019)
ocsp.digicert.com/
200 OK 280 B IP
Hash bd17a590e38985df96a0f58ab5f92850
64c091a007f03e37c66490f60e8e669ba9886d88
ea53033bbf4bf9146aa58ba56a44fe5ff413c1e9c14f4f8988366cc85c80df46
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5850
Cache-Control: max-age=147930
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 04:56:36 GMT
Etag: "63e2b384-118"
Expires: Thu, 09 Feb 2023 22:02:06 GMT
Last-Modified: Tue, 07 Feb 2023 20:24:36 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 280
x.dlx.addthis.com/e/rocketfuel_sync?na_exid=5144588523262887297
200 OK 43 B URL HTTP/2 x.dlx.addthis.com/e/rocketfuel_sync?na_exid=5144588523262887297
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /e/rocketfuel_sync?na_exid=5144588523262887297 HTTP/1.1
Host: x.dlx.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/gif
content-length: 43
expires: Wed, 08 Feb 2023 04:56:36 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Wed, 08 Feb 2023 04:56:36 GMT
strict-transport-security: max-age=2628000
X-Firefox-Spdy: h2
ib.adnxs.com/getuid?https%3A%2F%2Fidsync.rlcdn.com%2F52154.gif%3Fserved_by%3Devergreen%26partner_uid%3D%24UID
307 Redirection 0 B URL HTTP/1.1 ib.adnxs.com/getuid?https%3A%2F%2Fidsync.rlcdn.com%2F52154.gif%3Fserved_by%3Devergreen%26partner_uid%3D%24UID
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /getuid?https%3A%2F%2Fidsync.rlcdn.com%2F52154.gif%3Fserved_by%3Devergreen%26partner_uid%3D%24UID HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20841497p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Wed, 08 Feb 2023 04:56:37 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
Location: https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Fidsync.rlcdn.com%252F52154.gif%253Fserved_by%253Devergreen%2526partner_uid%253D%2524UID
AN-X-Request-Uuid: 0e6f8506-c81a-4752-a752-3230b4d4674c
Set-Cookie: uuid2=4634326179416097176; SameSite=None; Path=/; Max-Age=7776000; Expires=Tue, 09-May-2023 04:56:37 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 959.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Fidsync.rlcdn.com%252F52154.gif%253Fserved_by%253Devergreen%2526partner_uid%253D%2524UID
302 Found 0 B URL HTTP/1.1 ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Fidsync.rlcdn.com%252F52154.gif%253Fserved_by%253Devergreen%2526partner_uid%253D%2524UID
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bounce?%2Fgetuid%3Fhttps%253A%252F%252Fidsync.rlcdn.com%252F52154.gif%253Fserved_by%253Devergreen%2526partner_uid%253D%2524UID HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20841497p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.21.3
Date: Wed, 08 Feb 2023 04:56:37 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
Location: https://idsync.rlcdn.com/52154.gif?served_by=evergreen&partner_uid=0
AN-X-Request-Uuid: c7a4f4fd-7048-46c5-97da-0312f33fb5fe
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 959.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
iqbroker.com/lp/mobile-partner/en/?aff=298933
302 Found 0 B URL HTTP/2 iqbroker.com/lp/mobile-partner/en/?aff=298933
IP
ASN #204006 Iqoption Europe Ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /lp/mobile-partner/en/?aff=298933 HTTP/1.1
Host: iqbroker.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Wed, 08 Feb 2023 04:56:37 GMT
content-length: 0
location: https://affiliate.iqbroker.com/redir/?forceBackLink=1&aff=298933
x-traceid: 09a232ab25993f869f4187a07daeb321
last-modified: 1675832197
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
set-cookie: Traceid=09a232ab25993f869f4187a07daeb321; expires=Thu, 16 Feb 2023 04:56:37 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
aff_model=; expires=Wed, 08 Mar 2023 04:56:37 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
aff_ts=2023-02-08T04:56:37Z; expires=Wed, 08 Mar 2023 04:56:37 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
IsRestrictedCountry=false; expires=Wed, 08 Mar 2023 04:56:37 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
IsRegulatedCountry=true; expires=Wed, 08 Mar 2023 04:56:37 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
Country=no; expires=Wed, 08 Mar 2023 04:56:37 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
CountryID=149; expires=Wed, 08 Mar 2023 04:56:37 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
AffTrackGroup=Black_team_(partnerka); expires=Wed, 08 Mar 2023 04:56:37 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
Serv=NL; expires=Wed, 08 Mar 2023 04:56:37 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
AppID=id871125783; expires=Wed, 08 Mar 2023 04:56:37 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
brand_id=1; expires=Wed, 15 Feb 2023 04:56:37 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
platform=9; expires=Wed, 08 Mar 2023 04:56:37 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
client_platform_id=9; expires=Wed, 08 Mar 2023 04:56:37 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
support_email=support@eu.iqoption.com; expires=Wed, 08 Mar 2023 04:56:37 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
company_id=1; expires=Wed, 08 Mar 2023 04:56:37 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
IsAppStoreCountry=true; expires=Wed, 08 Mar 2023 04:56:37 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
aff=; expires=Tue, 10 Nov 2009 23:00:00 GMT
afftrack=; expires=Tue, 10 Nov 2009 23:00:00 GMT
affextra=; expires=Tue, 10 Nov 2009 23:00:00 GMT
retrack=; expires=Tue, 10 Nov 2009 23:00:00 GMT
landing=; expires=Tue, 10 Nov 2009 23:00:00 GMT
backend: arbitre
strict-transport-security: max-age=15555600
x-content-type-options: nosniff
X-Firefox-Spdy: h2
affiliate.iqbroker.com/redir/?forceBackLink=1&aff=298933
302 Found 0 B URL HTTP/2 affiliate.iqbroker.com/redir/?forceBackLink=1&aff=298933
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /redir/?forceBackLink=1&aff=298933 HTTP/1.1
Host: affiliate.iqbroker.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: Traceid=09a232ab25993f869f4187a07daeb321; aff_model=; aff_ts=2023-02-08T04:56:37Z; IsRestrictedCountry=false; IsRegulatedCountry=true; Country=no; CountryID=149; AffTrackGroup=Black_team_(partnerka); Serv=NL; AppID=id871125783; brand_id=1; platform=9; client_platform_id=9; support_email=support@eu.iqoption.com; company_id=1; IsAppStoreCountry=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Wed, 08 Feb 2023 04:56:37 GMT
content-length: 0
location: https://iqbroker.com/lp/mobile-partner/pt/
backend: arbitre_v4_api
strict-transport-security: max-age=15555600
x-content-type-options: nosniff
set-cookie: visid_incap_2683110=cKvrKbgnQUWr6i2L9IaPdYQr42MAAAAAQUIPAAAAAABbMUvWQ9Bvw77here7KLZu; expires=Wed, 07 Feb 2024 22:32:30 GMT; HttpOnly; path=/; Domain=.iqbroker.com
incap_ses_720_2683110=9YHXS39E31qXgXKfDPX9CYUr42MAAAAA4H222EJfJ/9eM7lp6q0Qkw==; path=/; Domain=.iqbroker.com
x-cdn: Imperva
x-iinfo: 7-4469607-4469613 NNNN CT(25 55 0) RT(1675832196918 34) q(0 0 1 1) r(1 1) U5
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf4a5986-35e6-4c6b-9dba-c981908d9ec1.jpeg
200 OK 8.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf4a5986-35e6-4c6b-9dba-c981908d9ec1.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 726928e5de19ef978faebbe933c34008
bdaba3ed0c7efb65de88af96063d830683c8499b
c6d208fcee052da80de1bf2dcccbbc48853511b8888c4777799ee676abba51b5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf4a5986-35e6-4c6b-9dba-c981908d9ec1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 8644
x-amzn-requestid: d6d71f42-f887-4ad0-a2b7-9073d3857b03
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f_OjRHBFoAMF4_Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e2c47b-57490f255d8d30a561fdcd3a;Sampled=0
x-amzn-remapped-date: Tue, 07 Feb 2023 21:36:59 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: xU_uVO78ZQRKon3Cz-fVcHJuPEMMgzDsVuY8BXoKL6ntJwkl-SLeQA==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Tue, 07 Feb 2023 21:42:03 GMT
age: 26077
etag: "bdaba3ed0c7efb65de88af96063d830683c8499b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
adjs.media/resources/content/doggocasino.js
200 OK 0 B URL HTTP/2 adjs.media/resources/content/doggocasino.js
IP
GET /resources/content/doggocasino.js HTTP/1.1
Host: adjs.media
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 08 Feb 2023 04:56:33 GMT
content-type: text/javascript; charset=utf-8
status: 200 OK
cache-control: no-cache
access-control-allow-origin: *
referrer-policy: strict-origin-when-cross-origin
x-permitted-cross-domain-policies: none
x-xss-protection: 1; mode=block
x-request-id: db44d713-161b-4710-b03c-4769a5d0522c
x-download-options: noopen
etag: W/"910a1eb1f52f1e810f827c5d4202a9f4"
x-runtime: 0.002527
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Q%2B0n35gn2K8Bs3oY1XZPS9NKGMJneqLukG9oPFOCnv%2FHft08We3ejPV6cNe1cavk%2BBbdliRyEx%2BZQq0xzSA6RGyMcv%2BR26SiWfmZePoFmL1UitnO7IIKh%2BCcIhcK"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7961c7864dd5b51b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.hotjar.com/c/hotjar-3054262.js?sv=6
200 OK 0 B URL HTTP/2 static.hotjar.com/c/hotjar-3054262.js?sv=6
IP
GET /c/hotjar-3054262.js?sv=6 HTTP/1.1
Host: static.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
content-encoding: br
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=2592000; includeSubDomains
x-cache-hit: 1
x-content-type-options: nosniff
date: Wed, 08 Feb 2023 04:55:55 GMT
cache-control: max-age=60
etag: W/77c1f019a62a499a130126637440f560
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: An5MoBYxIcWcPJp5H64LuBGXcaMfbzjXYUR0WGcE-l2iOhU8egtISw==
age: 39
X-Firefox-Spdy: h2
iqbroker.com/lp/mobile-partner/pt/
200 OK 0 B URL HTTP/2 iqbroker.com/lp/mobile-partner/pt/
IP
ASN #204006 Iqoption Europe Ltd
GET /lp/mobile-partner/pt/ HTTP/1.1
Host: iqbroker.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: Traceid=09a232ab25993f869f4187a07daeb321; aff_model=; aff_ts=2023-02-08T04:56:37Z; IsRestrictedCountry=false; IsRegulatedCountry=true; Country=no; CountryID=149; AffTrackGroup=Black_team_(partnerka); Serv=NL; AppID=id871125783; brand_id=1; platform=9; client_platform_id=9; support_email=support@eu.iqoption.com; company_id=1; IsAppStoreCountry=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 Feb 2023 04:56:37 GMT
content-type: text/html; charset=utf-8
last-modified: Tue, 07 Feb 2023 18:25:23 GMT
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
set-cookie: Traceid=ed1e531fb82a871bd469ead6960df97d; expires=Thu, 16 Feb 2023 04:56:37 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
landing=/lp/mobile-partner/pt/; expires=Wed, 08 Mar 2023 04:56:37 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
IsRestrictedCountry=false; expires=Wed, 08 Mar 2023 04:56:37 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
IsRegulatedCountry=true; expires=Wed, 08 Mar 2023 04:56:37 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
Country=no; expires=Wed, 08 Mar 2023 04:56:37 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
CountryID=149; expires=Wed, 08 Mar 2023 04:56:37 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
Serv=NL; expires=Wed, 08 Mar 2023 04:56:37 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
AppID=id871125783; expires=Wed, 08 Mar 2023 04:56:37 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
brand_id=1; expires=Wed, 15 Feb 2023 04:56:37 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
platform=9; expires=Wed, 08 Mar 2023 04:56:37 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
client_platform_id=9; expires=Wed, 08 Mar 2023 04:56:37 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
support_email=support@eu.iqoption.com; expires=Wed, 08 Mar 2023 04:56:37 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
company_id=1; expires=Wed, 08 Mar 2023 04:56:37 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
IsAppStoreCountry=true; expires=Wed, 08 Mar 2023 04:56:37 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
RedirectDomain=iqoption.com; expires=Wed, 08 Mar 2023 04:56:37 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
RedirectDomains=iqoption.com,iqtrading.asia; expires=Wed, 08 Mar 2023 04:56:37 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
link: <https://iqbroker.com/lp/mobile-partner/pt/>; rel="canonical"
backend: arbitre_v4
remote-addr: 91.90.42.154
content-encoding: gzip
strict-transport-security: max-age=15555600
x-content-type-options: nosniff
X-Firefox-Spdy: h2
doggocasino.com/en-us?affiliateName=[cellxpert]&affid=cx-35656_393091&bannerid=35656&trackerid=35656_393091&brand=doggocasino&bta=35656&rdk=rk1
200 OK 0 B URL HTTP/2 doggocasino.com/en-us?affiliateName=[cellxpert]&affid=cx-35656_393091&bannerid=35656&trackerid=35656_393091&brand=doggocasino&bta=35656&rdk=rk1
IP
GET /en-us?affiliateName=[cellxpert]&affid=cx-35656_393091&bannerid=35656&trackerid=35656_393091&brand=doggocasino&bta=35656&rdk=rk1 HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html
date: Tue, 07 Feb 2023 08:58:33 GMT
x-amz-meta-codebuild-content-sha256: 3a1d5f559d5de88345d69cd1f7926e0696ca48590ba3b279ba4374bc1a2c46d3
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:dc7f672c-4669-47fb-9710-2346e6c01aac
x-amz-meta-codebuild-content-md5: acb33710ef6e17c1daa2f7ebc264824d
last-modified: Tue, 07 Feb 2023 08:57:09 GMT
x-amz-version-id: lmoGI0YkE6JxnOo2yffOLKhty06Llw0o
etag: W/"f23a003d3a3ed0db7f5f94391375ceb3"
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Error from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: mF7oFq3hNsoofGhgVOsRRq4jdzdb3tpqlfVcAhhTvriN2C0WVF2GBQ==
age: 71880
X-Firefox-Spdy: h2
doggocasino.com/scripts.1064ca3406a50daf3ddc.js
200 OK 0 B URL HTTP/2 doggocasino.com/scripts.1064ca3406a50daf3ddc.js
IP
GET /scripts.1064ca3406a50daf3ddc.js HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/en-us?affiliateName=[cellxpert]&affid=cx-35656_393091&bannerid=35656&trackerid=35656_393091&brand=doggocasino&bta=35656&rdk=rk1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
date: Tue, 07 Feb 2023 08:58:33 GMT
x-amz-meta-codebuild-content-sha256: 3a1d5f559d5de88345d69cd1f7926e0696ca48590ba3b279ba4374bc1a2c46d3
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:dc7f672c-4669-47fb-9710-2346e6c01aac
x-amz-meta-codebuild-content-md5: acb33710ef6e17c1daa2f7ebc264824d
last-modified: Tue, 07 Feb 2023 08:57:19 GMT
x-amz-version-id: 9POs31x6qsgqcrp3yu22gNd9ZXOh.aV6
etag: W/"42a2bec801024b80f39d0bc44eba9251"
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
age: 71880
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: -zsN2k-EXcV_eRlc--txYxBLyUm5Jf4TIi9t7E6aBm74pHxw0oH78A==
X-Firefox-Spdy: h2
doggocasino.com/main.a78afe82c2c7bda78908.js
200 OK 0 B URL HTTP/2 doggocasino.com/main.a78afe82c2c7bda78908.js
IP
GET /main.a78afe82c2c7bda78908.js HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/en-us?affiliateName=[cellxpert]&affid=cx-35656_393091&bannerid=35656&trackerid=35656_393091&brand=doggocasino&bta=35656&rdk=rk1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
date: Tue, 07 Feb 2023 08:58:33 GMT
x-amz-meta-codebuild-content-sha256: 3a1d5f559d5de88345d69cd1f7926e0696ca48590ba3b279ba4374bc1a2c46d3
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:dc7f672c-4669-47fb-9710-2346e6c01aac
x-amz-meta-codebuild-content-md5: acb33710ef6e17c1daa2f7ebc264824d
last-modified: Tue, 07 Feb 2023 08:57:21 GMT
x-amz-version-id: Hp9SqWsnQjvTfP7d5r4U6sG.9Z53FELk
etag: W/"bcd8b3a353feb750772ab66dae99042d"
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
age: 71880
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 0q7DogBF2q74u0RhGzDulVL08NviX2fBSihRyMYxQgxzkE5YP3R-dQ==
X-Firefox-Spdy: h2
2d1c8d36-b9ba-45b7-87c9-e34c592a597a.seals-emr.certria.com/emr-seal.js
200 OK 0 B URL HTTP/2 2d1c8d36-b9ba-45b7-87c9-e34c592a597a.seals-emr.certria.com/emr-seal.js
IP
GET /emr-seal.js HTTP/1.1
Host: 2d1c8d36-b9ba-45b7-87c9-e34c592a597a.seals-emr.certria.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
date: Wed, 08 Feb 2023 04:53:53 GMT
x-powered-by: Express
cache-control: max-age=300
etag: W/"c3d-J5u88m8IhR0/QPMxXnccZA20fvg"
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7961c3a37e1a9b64-FRA
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ma9GhSsHxgOZC1a7GDQ0kV-42g6XJqg7j_secLhb251nNjY6PAE5vw==
age: 159
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Roboto:wght@400;700
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css2?family=Roboto:wght@400;700
IP
GET /css2?family=Roboto:wght@400;700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 08 Feb 2023 04:56:32 GMT
date: Wed, 08 Feb 2023 04:56:32 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ekr.zdassets.com/compose/65b012e7-7474-42fb-a2e0-939200b21662
200 OK 0 B URL HTTP/2 ekr.zdassets.com/compose/65b012e7-7474-42fb-a2e0-939200b21662
IP
GET /compose/65b012e7-7474-42fb-a2e0-939200b21662 HTTP/1.1
Host: ekr.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://doggocasino.com
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 08 Feb 2023 04:56:32 GMT
content-type: application/json; charset=utf-8
status: 200 OK
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-expose-headers:
access-control-max-age: 7200
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-download-options: noopen
x-permitted-cross-domain-policies: none
referrer-policy: strict-origin-when-cross-origin
cdn-cache-control: max-age=60
cache-control: max-age=600, public, stale-while-revalidate=600, stale-if-error=21600
etag: W/"f87aaf2ca48628d66d5e19682c54a55d"
x-request-id: 79521768de16fe24-ARN, 79521768de16fe24-ARN
x-runtime: 0.004937
vary: Origin, Accept-Encoding
x-zendesk-zorg: yes
cf-cache-status: HIT
age: 29
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3qZA3aWdug%2BwwrWHFBtt2SbJ9kN%2FsvwVlSiTrGxlpgBkXWEkBGgSXbA%2Byj0neeWlzknUKxpKfPiHd9sQJxSPMIUV8jwlUdgJFzyTusvVtuC2GXxs3j%2F8O9kQCoJKfRArOnk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 7961c785f926b503-OSL
content-encoding: br
X-Firefox-Spdy: h2
static.zdassets.com/web_widget/latest/classic/web-widget-classic-8a6a509.js
200 OK 0 B URL HTTP/2 static.zdassets.com/web_widget/latest/classic/web-widget-classic-8a6a509.js
IP
GET /web_widget/latest/classic/web-widget-classic-8a6a509.js HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 08 Feb 2023 04:56:34 GMT
content-type: application/javascript; charset=utf-8
x-amz-id-2: 9sgxbFo4s920gUx0lzbv4KbDW2IVU0cLwGh8IFjs7s7L5FPd7PzLieIsHsmH/JHFmsAGuln4RFA=
x-amz-request-id: WYQFMYQF8NSM0X1E
x-amz-replication-status: COMPLETED
last-modified: Mon, 06 Feb 2023 04:40:42 GMT
etag: W/"8713cc1ea67a213b3368c62c47f3af36"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Tue, 06 Feb 2024 04:40:41 GMT
x-amz-version-id: NnT5jEA2g14n4aK1JcBhR7IHnWIF5WDd
cf-cache-status: HIT
age: 165845
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=If%2Bo8e3mzFK7kvrV9EDFEt4m2fI1eqqk%2Fzt%2FbKenO7sE966Q6z%2FHlnV11KLqoeBWyB233PMs7TxKhMkMttkukBg81u6dOXTnjnHt3vqdhn7iwQ%2Fs7kzcJ%2Be6q835rWS6QJJ2dIA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 7961c78ddb68b524-OSL
content-encoding: br
X-Firefox-Spdy: h2
scripts.mediamathrdrt.com/scripts/b_Doggocasino.js
200 OK 0 B URL HTTP/2 scripts.mediamathrdrt.com/scripts/b_Doggocasino.js
IP
GET /scripts/b_Doggocasino.js HTTP/1.1
Host: scripts.mediamathrdrt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 08 Feb 2023 04:56:33 GMT
content-type: text/javascript; charset=utf-8
status: 200 OK
cache-control: no-cache
access-control-allow-origin: *
x-request-id: e7821391-f706-4b87-8ac0-0b025a587da8
x-runtime: 0.002144
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xJmvI45j8sqOWUDccMhWCWNzzCIJyq5XsWF3%2BU950ModU90%2BnIjW7Pc1Wlydl1aeWmAhYfEfyaef2TXCVJ%2F0w7QmNf1ifM%2BQ6mGg9FdiZNBzgP3bSa07F8hbN%2Fopgr8WQAP8xxNZIr3f2jav"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7961c78659d71bfe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.zdassets.com/web_widget/latest/classic/web-widget-chat-incoming-message-notification-8a6a509.js
200 OK 0 B URL HTTP/2 static.zdassets.com/web_widget/latest/classic/web-widget-chat-incoming-message-notification-8a6a509.js
IP
GET /web_widget/latest/classic/web-widget-chat-incoming-message-notification-8a6a509.js HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 08 Feb 2023 04:56:36 GMT
content-type: application/javascript; charset=utf-8
x-amz-id-2: FaRIpyr5EDsnQtAEBC3gPbD7om43OrjwCwynKfx+pRPWJGAoq5BJjGw3lFvBXpq0d452Hz7xbsk=
x-amz-request-id: W4FTS32T04HM6VPT
x-amz-replication-status: COMPLETED
last-modified: Mon, 06 Feb 2023 04:40:42 GMT
etag: W/"659635f5ad1b6653645380f46aa42236"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Tue, 06 Feb 2024 04:40:41 GMT
x-amz-version-id: bbG32VWInkuPLpAZPOJWuZLbAmttkUmV
cf-cache-status: HIT
age: 165846
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7ueyjeEYzezq%2BfCZf77sG%2BMw0X6QmeaeJoS2IuBqNUs8gqit4nCCVNVdJyKzgUR%2BEoSsCCJDcZt183IobbplYn8nccI6m8rYOwvYUaNlAppQit39hITQ%2FyXOM65r%2FqbbWLQ8cew%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 7961c79948c4b524-OSL
content-encoding: br
X-Firefox-Spdy: h2
partners.tremorhub.com/sync?UIRF=5144588523262887297&r=JQpqD8-JYcl3
200 OK 0 B URL HTTP/2 partners.tremorhub.com/sync?UIRF=5144588523262887297&r=JQpqD8-JYcl3
IP
GET /sync?UIRF=5144588523262887297&r=JQpqD8-JYcl3 HTTP/1.1
Host: partners.tremorhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 08 Feb 2023 04:56:36 GMT
content-type: image/gif
server: Apache-Coyote/1.1
p3p: CP='This is not a P3P policy. See https://telaria.com/privacy-policy/'
X-Firefox-Spdy: h2
doggocasino.regily.com/b1e55c583226311df310792321f587d2.js
200 OK 0 B URL HTTP/2 doggocasino.regily.com/b1e55c583226311df310792321f587d2.js
IP
GET /b1e55c583226311df310792321f587d2.js HTTP/1.1
Host: doggocasino.regily.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Tue, 17 Jan 2023 08:23:44 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
date: Wed, 08 Feb 2023 04:51:51 GMT
etag: W/"3d26fa2efd58cd218deb440fff9ef848"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: EyecyazSnUE0UJD9qdtvJz0dC817imEZzECIDj097NWySfKe6Y5OvQ==
age: 284
X-Firefox-Spdy: h2
static.zdassets.com/ekr/snippet.js?key=65b012e7-7474-42fb-a2e0-939200b21662
200 OK 0 B URL HTTP/2 static.zdassets.com/ekr/snippet.js?key=65b012e7-7474-42fb-a2e0-939200b21662
IP
GET /ekr/snippet.js?key=65b012e7-7474-42fb-a2e0-939200b21662 HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 08 Feb 2023 04:56:32 GMT
content-type: application/javascript
x-amz-id-2: VYKORFZEK8ncQjbBiiAK6oiTYdRdkzwPfaxRM/jinB20cI8N0LqXAF6x6uRMZJVhRKA1YH5Ltb2qBhbqYLdq5g==
x-amz-request-id: EBZ4ZRD66V3TGNXR
x-amz-replication-status: COMPLETED
last-modified: Thu, 28 Jul 2022 23:44:02 GMT
etag: W/"5cae6ce528dce0c327b2bcbaad459fdb"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=3600, s-maxage=60
x-amz-version-id: TCAqq4sghBBBAAXd3MLZ8Fy8XIds..vO
cf-cache-status: HIT
age: 27
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=b6PjLBxxtDMm9y7lidc8glSBh%2Fc6x2pIqWColqLjiLUenLHDulVZ9tu3J2WgfVIlBdunjQu3D%2F6jqAuS7mYZ8tb98odH5jrL7RVS%2FF1hTBeWipHx3Af8gBBhNiL0wTmz8q5H9gI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 7961c784bed8b524-OSL
content-encoding: br
X-Firefox-Spdy: h2
redirect.lista10.dev/click?click_id=xhJBrb9ToiUtfiKt
200 OK 0 B URL HTTP/2 redirect.lista10.dev/click?click_id=xhJBrb9ToiUtfiKt
IP
GET /click?click_id=xhJBrb9ToiUtfiKt HTTP/1.1
Host: redirect.lista10.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 08 Feb 2023 04:56:36 GMT
content-type: text/html; charset=utf-8
status: 200 OK
cache-control: no-cache
access-control-allow-origin: *
referrer-policy: strict-origin-when-cross-origin
x-permitted-cross-domain-policies: none
x-xss-protection: 1; mode=block
x-request-id: a4684a83-2b39-4f2b-b313-e75780371224
x-download-options: noopen
x-runtime: 0.010964
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=humxX89r4WzzTquDOcca2AWVod6me1LoD2k6KeB8Zxno5MiJ6jawf7%2BFOdUjiM3544hAp%2FCIO7IOGf%2FOR5Lyj47Ucunfh%2B4JeOL8bzwntpJQjYWvti2bU%2BkI0PNqMOQYmcBvbl3PBQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7961c79acb85b4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
doggocasino.com/styles.6fe09080dd4bc8174585.css
200 OK 0 B URL HTTP/2 doggocasino.com/styles.6fe09080dd4bc8174585.css
IP
GET /styles.6fe09080dd4bc8174585.css HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/en-us?affiliateName=[cellxpert]&affid=cx-35656_393091&bannerid=35656&trackerid=35656_393091&brand=doggocasino&bta=35656&rdk=rk1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
date: Tue, 07 Feb 2023 08:58:33 GMT
x-amz-meta-codebuild-content-sha256: 3a1d5f559d5de88345d69cd1f7926e0696ca48590ba3b279ba4374bc1a2c46d3
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:dc7f672c-4669-47fb-9710-2346e6c01aac
x-amz-meta-codebuild-content-md5: acb33710ef6e17c1daa2f7ebc264824d
last-modified: Tue, 07 Feb 2023 08:57:14 GMT
x-amz-version-id: d1pybLqF5tmtbdPAQ6ErxYP7lwo.n_7f
etag: W/"28df2050b7c0c4d9b66b26865c4c7606"
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
age: 71880
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: hm70NzvUGSL1IIz3uN5VTMeNm6FK8lLQRMvbGQWdv0VgHBQNLXtV1w==
X-Firefox-Spdy: h2
partners.tremorhub.com/sync?UIRF=5134455421026106235&r=yHxGv9yICMn4
200 OK 0 B URL HTTP/2 partners.tremorhub.com/sync?UIRF=5134455421026106235&r=yHxGv9yICMn4
IP
GET /sync?UIRF=5134455421026106235&r=yHxGv9yICMn4 HTTP/1.1
Host: partners.tremorhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20841497p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 08 Feb 2023 04:56:35 GMT
content-type: image/gif
server: Apache-Coyote/1.1
p3p: CP='This is not a P3P policy. See https://telaria.com/privacy-policy/'
X-Firefox-Spdy: h2
in.hotjar.com/api/v2/client/sites/3054262/visit-data?sv=6
200 OK 0 B URL HTTP/2 in.hotjar.com/api/v2/client/sites/3054262/visit-data?sv=6
IP
POST /api/v2/client/sites/3054262/visit-data?sv=6 HTTP/1.1
Host: in.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain; charset=UTF-8
Content-Length: 130
Origin: https://doggocasino.com
Connection: keep-alive
Referer: https://doggocasino.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 08 Feb 2023 04:56:36 GMT
content-type: application/json
vary: Accept-Encoding
cache-control: no-cache, no-store
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 86400
content-encoding: br
X-Firefox-Spdy: h2
doggocasino.com/8.eab0308814be44e45548.js
200 OK 0 B URL HTTP/2 doggocasino.com/8.eab0308814be44e45548.js
IP
GET /8.eab0308814be44e45548.js HTTP/1.1
Host: doggocasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://doggocasino.com/en-us?affiliateName=[cellxpert]&affid=cx-35656_393091&bannerid=35656&trackerid=35656_393091&brand=doggocasino&bta=35656&rdk=rk1
Cookie: _ga_K4EHGY5F0T=GS1.1.1675832245.1.0.1675832245.60.0.0; _ga=GA1.1.1763717188.1675832246
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
date: Tue, 07 Feb 2023 08:58:34 GMT
x-amz-meta-codebuild-content-sha256: 3a1d5f559d5de88345d69cd1f7926e0696ca48590ba3b279ba4374bc1a2c46d3
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:889751173095:build/du-frontend-build:dc7f672c-4669-47fb-9710-2346e6c01aac
x-amz-meta-codebuild-content-md5: acb33710ef6e17c1daa2f7ebc264824d
last-modified: Tue, 07 Feb 2023 08:57:20 GMT
x-amz-version-id: NBD30ZVDLiVJ7R0camml2tLCAOk1.2hg
etag: W/"2a2a7aa84b93bcd62ca6bf5c6055fb11"
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
age: 71880
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 9jvABegZLYtV7i2uXaRdtScX_XVWluBQDPjR1H0zgNuSOSfzFxQjNw==
X-Firefox-Spdy: h2
doggocasino.zendesk.com/embeddable/config
200 OK 0 B URL HTTP/2 doggocasino.zendesk.com/embeddable/config
IP
GET /embeddable/config HTTP/1.1
Host: doggocasino.zendesk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://doggocasino.com/
Origin: https://doggocasino.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 08 Feb 2023 04:56:33 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-expose-headers:
access-control-max-age: 7200
cache-control: public, max-age=60, stale-while-revalidate=600, stale-if-error=3600
x-zendesk-origin-server: embeddable-app-server-5f6c8f555-s7grz
x-request-id: 7961838088b2993c-DUB
x-runtime: 0.001661
vary: Origin, Accept-Encoding
x-cached: STALE
last-modified: Wed, 08 Feb 2023 04:51:25 GMT
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KmaTB%2Br7B%2BBcJmDwe7%2FR8FgGe4z9HLQzF3Grlvckw1guvlvoY%2B3k0i3AxBkoJ40UGhjo4qEG7C3ITPbsQb5jFuP3nHwXO4g8d4DO%2FftzP%2Bc2f0g5Kq37zHkEfHgpadEB3TovNOl56Oci"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
set-cookie: __cfruid=5aadaae7688fc278526e3bbc1c4c914b4928d334-1675832193; path=/; domain=.doggocasino.zendesk.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 7961c789daebb503-OSL
content-encoding: br
X-Firefox-Spdy: h2
79.98.29.30
34.243.172.152
172.67.129.102
95.101.11.115
185.89.211.84
185.117.134.138
104.18.70.113
93.184.220.29
151.101.86.208
185.94.180.126
193.33.229.103
185.80.36.245