fathomcause.com/kvehdx74e?key=526287b768c9d41ea3a02a20a2d07f49&utm_medium=marketing&_branch_referrer=H4sIAAAAAAAAAzXLuw6CMBhA4aeREaRVLCbEEO9SDaZ42UiVog0WsPxW5enVwTOc7bsC1M3QcXLZesbmdW3fZFk4MaK9l7%20PmTmN0pPm5fmaKg7fyyxwXewj0iWIuB5GGPuDvvUAlSqRyYcKFNeFAFlerL/UIhdaCx0ses0y/EeaKmJFBUCPm5bfWdFBM8bez6q7Nqt2bQ7Ju99SCRuaTCI6JeNwMt%20Oo5384Q%20WTaG2uAAAAA==&_branch_match_id=1139280939525603105
200 OK 1.5 kB URL HTTP/1.1 fathomcause.com/kvehdx74e?key=526287b768c9d41ea3a02a20a2d07f49&utm_medium=marketing&_branch_referrer=H4sIAAAAAAAAAzXLuw6CMBhA4aeREaRVLCbEEO9SDaZ42UiVog0WsPxW5enVwTOc7bsC1M3QcXLZesbmdW3fZFk4MaK9l7%20PmTmN0pPm5fmaKg7fyyxwXewj0iWIuB5GGPuDvvUAlSqRyYcKFNeFAFlerL/UIhdaCx0ses0y/EeaKmJFBUCPm5bfWdFBM8bez6q7Nqt2bQ7Ju99SCRuaTCI6JeNwMt%20Oo5384Q%20WTaG2uAAAAA==&_branch_match_id=1139280939525603105
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (565)
Hash 250cc82e05cf727ab695f843a4ec31a4
3c8372e9a8b7548cf547e79f5b13ea3e3f2b3521
79aa8266ee93fd4194a8ee25f36aea793aee28cf3630e23a3ce66eaa6ef18834
Analyzer Verdict Alert quad9 Sinkholed
GET /kvehdx74e?key=526287b768c9d41ea3a02a20a2d07f49&utm_medium=marketing&_branch_referrer=H4sIAAAAAAAAAzXLuw6CMBhA4aeREaRVLCbEEO9SDaZ42UiVog0WsPxW5enVwTOc7bsC1M3QcXLZesbmdW3fZFk4MaK9l7%20PmTmN0pPm5fmaKg7fyyxwXewj0iWIuB5GGPuDvvUAlSqRyYcKFNeFAFlerL/UIhdaCx0ses0y/EeaKmJFBUCPm5bfWdFBM8bez6q7Nqt2bQ7Ju99SCRuaTCI6JeNwMt%20Oo5384Q%20WTaG2uAAAAA==&_branch_match_id=1139280939525603105 HTTP/1.1
Host: fathomcause.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Fri, 24 Mar 2023 09:44:14 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: u_pl=18011242; expires=Sat, 25 Mar 2023 09:44:14 GMT
ain=eyJhbGciOiJIUzI1NiJ9.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.bx9pnR2ErRcHzHV_AK6Niz-O5BsJwS9NdOAuuoNrcyc; expires=Fri, 24 Mar 2023 09:45:14 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: b675fd91ee5942feefb70b22c88a99a2
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bea3185dd820a31c1981317f37c3456d
1a548a5d27270fc11df9011837a7149571cedd78
469b97bf9f57401b3c9571039483589f2815f4794212b75c7c85cfefe0ae71e9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "469B97BF9F57401B3C9571039483589F2815F4794212B75C7C85CFEFE0AE71E9"
Last-Modified: Wed, 22 Mar 2023 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6051
Expires: Fri, 24 Mar 2023 11:25:05 GMT
Date: Fri, 24 Mar 2023 09:44:14 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 210a2a42cfc4f4aced144f5de9babcc6
ece6ecfb2db8d036c3bfc7f02f8ea387e3f965db
59553a312d3fb34f1f0aea469f7e7cc810ff9993481ddbd73ea5d461cf97ed51
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "59553A312D3FB34F1F0AEA469F7E7CC810FF9993481DDBD73EA5D461CF97ED51"
Last-Modified: Wed, 22 Mar 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6408
Expires: Fri, 24 Mar 2023 11:31:02 GMT
Date: Fri, 24 Mar 2023 09:44:14 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dc2752d83fbed82852248898a132467a
b27a6b4af2e07663a58cafb641513f7224c7a7c3
ea7838393d83805a7b8a2b01bd09e4423617c4da285b983a11e9ba36266810d5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EA7838393D83805A7B8A2B01BD09E4423617C4DA285B983A11E9BA36266810D5"
Last-Modified: Wed, 22 Mar 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6176
Expires: Fri, 24 Mar 2023 11:27:10 GMT
Date: Fri, 24 Mar 2023 09:44:14 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 4ad6984a756720fbfff47b37a75513a2
355e35258114452af8b9638985ed9d8ef3bf0aca
43181fccb10652c68cae86e5e32b4e8f426fb5ad49d8125cb99e072cff573cf5
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Length, Alert, Content-Type, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 24 Mar 2023 09:27:37 GMT
content-type: application/json
age: 997
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
IP
File type PEM certificate\012- , ASCII text
Hash e7bace7c1e04d44012e37ddffe36e5d5
3ac8d7c0a9d3e3f0b28b2530c7b8d8407b4042c2
6b4f80f2e95b26f6122ea8dcd0ef8d762299be822c69e839fc37581ca2bcb5f2
GET /chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: u8fDNnHbCjAx4EEVpi5PakAaVVbW0CDabSinMpr08/8rNh4oHAlXAseA2pkm04Yxva5N1+Om6w8=
x-amz-request-id: 46GAX8JQZ4T8Y8AK
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 24 Mar 2023 08:54:25 GMT
age: 2989
last-modified: Sat, 11 Mar 2023 16:53:15 GMT
etag: "e7bace7c1e04d44012e37ddffe36e5d5"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 24 Mar 2023 09:44:14 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
fathomcause.com/kvehdx74e?shu=f6b516625af1484c89ac2dce039436fd52b79a1bad6f15a104e1eba1c819d876c5a7c67d31ab5a25715764b1a47354650a6ee53fae7ceabf58d8b3e126ecfc6faaa172b79cd5dacdbd203e92a91f521d6efee0d6770b94b9fcf905682a0287&pst=1679651114&rmtc=t&uuid=&pii=&in=false&key=526287b768c9d41ea3a02a20a2d07f49&_branch_referrer=H4sIAAAAAAAAAzXLuw6CMBhA4aeREaRVLCbEEO9SDaZ42UiVog0WsPxW5enVwTOc7bsC1M3QcXLZesbmdW3fZFk4MaK9l7+PmTmN0pPm5fmaKg7fyyxwXewj0iWIuB5GGPuDvvUAlSqRyYcKFNeFAFlerL%2FUIhdaCx0ses0y%2FEeaKmJFBUCPm5bfWdFBM8bez6q7Nqt2bQ7Ju99SCRuaTCI6JeNwMt+Oo5384Q+WTaG2uAAAAA%3D%3D&_branch_match_id=1139280939525603105&utm_medium=marketing
302 Found 0 B URL HTTP/1.1 fathomcause.com/kvehdx74e?shu=f6b516625af1484c89ac2dce039436fd52b79a1bad6f15a104e1eba1c819d876c5a7c67d31ab5a25715764b1a47354650a6ee53fae7ceabf58d8b3e126ecfc6faaa172b79cd5dacdbd203e92a91f521d6efee0d6770b94b9fcf905682a0287&pst=1679651114&rmtc=t&uuid=&pii=&in=false&key=526287b768c9d41ea3a02a20a2d07f49&_branch_referrer=H4sIAAAAAAAAAzXLuw6CMBhA4aeREaRVLCbEEO9SDaZ42UiVog0WsPxW5enVwTOc7bsC1M3QcXLZesbmdW3fZFk4MaK9l7+PmTmN0pPm5fmaKg7fyyxwXewj0iWIuB5GGPuDvvUAlSqRyYcKFNeFAFlerL%2FUIhdaCx0ses0y%2FEeaKmJFBUCPm5bfWdFBM8bez6q7Nqt2bQ7Ju99SCRuaTCI6JeNwMt+Oo5384Q+WTaG2uAAAAA%3D%3D&_branch_match_id=1139280939525603105&utm_medium=marketing
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /kvehdx74e?shu=f6b516625af1484c89ac2dce039436fd52b79a1bad6f15a104e1eba1c819d876c5a7c67d31ab5a25715764b1a47354650a6ee53fae7ceabf58d8b3e126ecfc6faaa172b79cd5dacdbd203e92a91f521d6efee0d6770b94b9fcf905682a0287&pst=1679651114&rmtc=t&uuid=&pii=&in=false&key=526287b768c9d41ea3a02a20a2d07f49&_branch_referrer=H4sIAAAAAAAAAzXLuw6CMBhA4aeREaRVLCbEEO9SDaZ42UiVog0WsPxW5enVwTOc7bsC1M3QcXLZesbmdW3fZFk4MaK9l7+PmTmN0pPm5fmaKg7fyyxwXewj0iWIuB5GGPuDvvUAlSqRyYcKFNeFAFlerL%2FUIhdaCx0ses0y%2FEeaKmJFBUCPm5bfWdFBM8bez6q7Nqt2bQ7Ju99SCRuaTCI6JeNwMt+Oo5384Q+WTaG2uAAAAA%3D%3D&_branch_match_id=1139280939525603105&utm_medium=marketing HTTP/1.1
Host: fathomcause.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://fathomcause.com/kvehdx74e?key=9ca601a9f47c735df76d5ca46fa26a66&submetric=18011242
Cookie: u_pl=18011242; ain=eyJhbGciOiJIUzI1NiJ9.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.bx9pnR2ErRcHzHV_AK6Niz-O5BsJwS9NdOAuuoNrcyc; cjs=t
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Server: nginx/1.17.6
Date: Fri, 24 Mar 2023 09:44:15 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Location: http://binomnet.com/cb9cl2k.php?key=f0xy3cb5ozbg4artknqu&SUB_ID_SHORT=202b99c750ceeeb040b12f76ae0a7f8b&Cost=0.020000&PLACEMENT_ID=18011242&CAMPAIGN_ID=760652&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Windows&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0%29%20Gecko%2F20100101%20Firefox%2F105.0&REMOTE_LANGUAGE=11&BANNER_ID=2241879
Set-Cookie: pdhtkv=true; expires=Sat, 25 Mar 2023 09:44:15 GMT
uncs=1; expires=Sat, 25 Mar 2023 09:44:15 GMT
pdhtkv28=true; expires=Sat, 25 Mar 2023 09:44:15 GMT
uncs28=1; expires=Sat, 25 Mar 2023 09:44:15 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 83985d5421e961b88a039bf6bdb9d4a7
Strict-Transport-Security: max-age=0; includeSubdomains
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Last-Modified, Content-Length, Pragma, Expires, ETag, Backoff, Alert, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 24 Mar 2023 09:14:33 GMT
age: 1782
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
binomnet.com/cb9cl2k.php?key=f0xy3cb5ozbg4artknqu&SUB_ID_SHORT=202b99c750ceeeb040b12f76ae0a7f8b&Cost=0.020000&PLACEMENT_ID=18011242&CAMPAIGN_ID=760652&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Windows&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0%29%20Gecko%2F20100101%20Firefox%2F105.0&REMOTE_LANGUAGE=11&BANNER_ID=2241879
302 Found 0 B URL HTTP/1.1 binomnet.com/cb9cl2k.php?key=f0xy3cb5ozbg4artknqu&SUB_ID_SHORT=202b99c750ceeeb040b12f76ae0a7f8b&Cost=0.020000&PLACEMENT_ID=18011242&CAMPAIGN_ID=760652&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Windows&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0%29%20Gecko%2F20100101%20Firefox%2F105.0&REMOTE_LANGUAGE=11&BANNER_ID=2241879
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cb9cl2k.php?key=f0xy3cb5ozbg4artknqu&SUB_ID_SHORT=202b99c750ceeeb040b12f76ae0a7f8b&Cost=0.020000&PLACEMENT_ID=18011242&CAMPAIGN_ID=760652&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Windows&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0%29%20Gecko%2F20100101%20Firefox%2F105.0&REMOTE_LANGUAGE=11&BANNER_ID=2241879 HTTP/1.1
Host: binomnet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://fathomcause.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Server: nginx/1.22.1
Date: Fri, 24 Mar 2023 09:44:15 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: uclick=m7e8fnuqdz; expires=Sat, 25-Mar-2023 09:44:15 GMT; Max-Age=86400; path=/
uclickhash=m7e8fnuqdz-m7e8fnuqdz-gxqe-0-qe8n-8r8w-e8vr-2afce4; expires=Sat, 25-Mar-2023 09:44:15 GMT; Max-Age=86400; path=/
Location: https://ak.hetapus.com/afu.php?zoneid=5543284&ymid=11e98m7e8fnuqdzdfb&var=18011242
ak.hetapus.com/afu.php?zoneid=5543284&ymid=11e98m7e8fnuqdzdfb&var=18011242
200 OK 819 B URL HTTP/2 ak.hetapus.com/afu.php?zoneid=5543284&ymid=11e98m7e8fnuqdzdfb&var=18011242
IP
ASN #20940 Akamai International B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (378)
Hash b2302024da429a8839c0445de52cda8f
22dce8c4b6d2d7a6385c7498df68edc8d5d4cce1
32dfcf700be24333a2195c40a3ce37a49bef454e40ff1f3aa12cca2ce830ea50
GET /afu.php?zoneid=5543284&ymid=11e98m7e8fnuqdzdfb&var=18011242 HTTP/1.1
Host: ak.hetapus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://fathomcause.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=utf8
x-trace-id: 1d6b54ab1f53077d800d41b9a7d0df1c
link: <https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://my.rtmark.net>; rel="preconnect dns-prefetch", <https://myeasetrack.com>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://diromalxx.com>; rel="preconnect dns-prefetch"
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
expires: Fri, 24 Mar 2023 09:44:15 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Fri, 24 Mar 2023 09:44:15 GMT
content-length: 819
vary: Accept-Encoding
set-cookie: OAID=b4a55c2977294d91945f1ab2dabfa78c; expires=Sat, 23 Mar 2024 09:44:15 GMT; path=/; secure; SameSite=None
oaidts=1679651055; expires=Sat, 23 Mar 2024 09:44:15 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 18b877ebbad1529e4bd91e12220d91c4
a3d64fb3d9cc1fe3a29b261c4ec9acfe134dfedc
7001d3ef847c7002ac15155f0dfcc0a369f19860e85c8e90530f1e7b2dd88f09
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7001D3EF847C7002AC15155F0DFCC0A369F19860E85C8E90530F1E7B2DD88F09"
Last-Modified: Wed, 22 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13440
Expires: Fri, 24 Mar 2023 13:28:15 GMT
Date: Fri, 24 Mar 2023 09:44:15 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3fc4e9daccaf6beba5e0040abdfd8a99
56361f3b2357d888f563867db70a247b5b4a05cc
46529a849d6e8452a307fd5ef79933553a9a49efee2c623b71af52ebdda7edd0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "46529A849D6E8452A307FD5EF79933553A9A49EFEE2C623B71AF52EBDDA7EDD0"
Last-Modified: Wed, 22 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12934
Expires: Fri, 24 Mar 2023 13:19:49 GMT
Date: Fri, 24 Mar 2023 09:44:15 GMT
Connection: keep-alive
myeasetrack.com/ce2939e7-f18f-4e8d-b910-5d9b23a74541?zoneid=5543284&device=desktop&browser=firefox&os=windows&country=NO®ion=03&zonetype={zone_type}&useractivity=high&campaignid=6406879&banner=16042566&cost=0.000539&visitor_id=663067183697637855&rdk=rk1
302 Found 0 B URL HTTP/2 myeasetrack.com/ce2939e7-f18f-4e8d-b910-5d9b23a74541?zoneid=5543284&device=desktop&browser=firefox&os=windows&country=NO®ion=03&zonetype={zone_type}&useractivity=high&campaignid=6406879&banner=16042566&cost=0.000539&visitor_id=663067183697637855&rdk=rk1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ce2939e7-f18f-4e8d-b910-5d9b23a74541?zoneid=5543284&device=desktop&browser=firefox&os=windows&country=NO®ion=03&zonetype={zone_type}&useractivity=high&campaignid=6406879&banner=16042566&cost=0.000539&visitor_id=663067183697637855&rdk=rk1 HTTP/1.1
Host: myeasetrack.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Fri, 24 Mar 2023 09:44:15 GMT
content-length: 0
cache-control: no-store, no-cache, pre-check=0, post-check=0
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://ntrfr.leovegas.com/redirect.aspx?pid=3747044&bid=14983&c=w1o8260c7a2dnpgn21uncig4
pragma: no-cache
set-cookie: ce2939e7-f18f-4e8d-b910-5d9b23a74541-v4=qbDzgBa3v_uXgIxBBUp7oSbG322mWiFRI-LeZx55Wug; Max-Age=86400; Expires=Sat, 25-Mar-2023 09:44:15 GMT; Domain=myeasetrack.com; Path=/; Secure; HttpOnly;SameSite=None
cc-v4=s%2F%2BFNEyu9Lb76EMOhVCKlJS8EpKRVMhPjBrmKrMbaTAlmAIgqbHaczqIQc7Z%2BU72zi24ZKS2%2Bi7LL5dhs%2F2XalP8Mc9sx9xhT9xV7YjzvkfegTSpSm0NCYQdGyYjRCFEBjPb2JNHo11m3uoZ9AT7oA%3D%3D; Max-Age=31536000; Expires=Sat, 23-Mar-2024 09:44:15 GMT; Domain=myeasetrack.com; Path=/; Secure; HttpOnly;SameSite=None
X-Firefox-Spdy: h2
my.rtmark.net/img.gif?f=merge&userId=b4a55c2977294d91945f1ab2dabfa78c
200 OK 43 B URL HTTP/2 my.rtmark.net/img.gif?f=merge&userId=b4a55c2977294d91945f1ab2dabfa78c
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
POST /img.gif?f=merge&userId=b4a55c2977294d91945f1ab2dabfa78c HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 200 OK
server: nginx
date: Fri, 24 Mar 2023 09:44:15 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: null
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=b4a55c2977294d91945f1ab2dabfa78c; expires=Sat, 23 Mar 2024 09:44:15 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
ak.hetapus.com/favicon.ico
204 No Content 0 B URL HTTP/2 ak.hetapus.com/favicon.ico
IP
ASN #20940 Akamai International B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: ak.hetapus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: OAID=b4a55c2977294d91945f1ab2dabfa78c; oaidts=1679651055
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 204 No Content
expires: Fri, 24 Mar 2023 09:44:15 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Fri, 24 Mar 2023 09:44:15 GMT
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: ZRjzu4ab39no09GiyejjSQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: ihPVOPQX9SEL69Sfji97op0Zn5E=
ntrfr.leovegas.com/redirect.aspx?pid=3747044&bid=14983&c=w1o8260c7a2dnpgn21uncig4
307 Temporary Redirect 0 B URL HTTP/2 ntrfr.leovegas.com/redirect.aspx?pid=3747044&bid=14983&c=w1o8260c7a2dnpgn21uncig4
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /redirect.aspx?pid=3747044&bid=14983&c=w1o8260c7a2dnpgn21uncig4 HTTP/1.1
Host: ntrfr.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 307 Temporary Redirect
cache-control: private,no-cache, no-store
pragma: no-cache
content-type: text/html
location: https://www.leovegas.com/nb-no/?btag=667909_2632B01AD09A4321A7E14C7458431DFF&c=w1o8260c7a2dnpgn21uncig4&pid=3747044&bid=14983
p3p: CP="This is not a P3P policy! It is used to bypass IEs problematic handling of cookies"
set-cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a3747044%2c%22BID%22%3a14983%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1679651056107)%5c%2f%22%2c%22CookieTag%22%3a%22149833747044451240919C2023324944%22%7d%5d; SameSite=None;; domain=.leovegas.com; expires=Fri, 31-Dec-9999 23:59:59 GMT; path=/; secure
NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%222861626257%7c1%22%7d%5d; domain=.leovegas.com; expires=Sun, 24-Mar-3022 09:44:16 GMT; path=/; secure; SameSite=Strict
x-aspnet-version: 4.0.30319
request-context: appId=cid-v1:83ffbda4-9458-475e-90ec-4427cfb5c3b0
access-control-expose-headers: Request-Context
x-powered-by: ASP.NET
x-azure-ref: 08HAdZAAAAACtvU+bnjALTZuDxMfPZv1dQ1BIMzBFREdFMDQyMAA3OGIzMGY1NS05NWIyLTQ4YzgtYjFhOC1mZTNkZmIwNTljZDk=
x-cache: CONFIG_NOCACHE
date: Fri, 24 Mar 2023 09:44:15 GMT
content-length: 0
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 74fa3f9dc11b3177fa7bffc3a67f743f
f8b82a342af963b0a0f931abb3e6f4b6179e36ab
29af481cf6d61ba9bb1bc96bb0b6d468c0a41f5864a3945400549f9e78dfb9ab
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1301
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 24 Mar 2023 09:44:16 GMT
Etag: "641cec98-1d7"
Last-Modified: Fri, 24 Mar 2023 09:22:35 GMT
Server: ECAcc (ska/F73A)
X-Cache: HIT
Content-Length: 471
www.leovegas.com/_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3&ns=2&cb=2128889453
200 OK 20 kB URL HTTP/2 www.leovegas.com/_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3&ns=2&cb=2128889453
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 3801fd819826af4b52e6b8c88ad957db
314b75399d013b02b8dc7efe374b1677d9fd3c09
40e87ebfcb22538f4882cb130901f11ec8004ecd83110bc53e8a0a463a358ee1
GET /_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3&ns=2&cb=2128889453 HTTP/1.1
Host: www.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.leovegas.com/en-no/?btag=667909_2632B01AD09A4321A7E14C7458431DFF&c=w1o8260c7a2dnpgn21uncig4&pid=3747044&bid=14983
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a3747044%2c%22BID%22%3a14983%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1679651056107)%5c%2f%22%2c%22CookieTag%22%3a%22149833747044451240919C2023324944%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%222861626257%7c1%22%7d%5d; leo-essentials=%7B%22cid%22%3A%2227dff399-a733-4fab-93d1-5a6120b795fa%22%7D; visid_incap_846569=DXjdECU4SLq8a14LzWFWhe9wHWQAAAAAQUIPAAAAAADejACT5oXvHiuqjsPhar1O; nlbi_846569=9UVTZ2oxnUYFcFQiTJV9qQAAAAAL+ziJ9s5gHTP7VoF/uMkL; incap_ses_720_846569=zn7xB0q17XR3KsVDGPX9Ce9wHWQAAAAAELRSLEKVBeZ7DRlICzWMdw==; leobtag=667909_2632B01AD09A4321A7E14C7458431DFF; leonrpid=3747044; leonrbid=14983; leonrmeta=[{"value":"w1o8260c7a2dnpgn21uncig4","key":"c"}]
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: no-cache, no-store
content-type: application/javascript
content-encoding: gzip
x-robots-tag: noindex
content-length: 20376
strict-transport-security: max-age=63072000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 9c689641e0b746cd4bc0dba000933496
78fedb0dc677f79859e3004dda31e1b3bd829c16
c7f67f66fc400b404c947d9cdcd59cfdc9719c6dc60e4a6d8d51cf187bb1fec3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5725
Cache-Control: max-age=119389
Content-Type: application/ocsp-response
Date: Fri, 24 Mar 2023 09:44:17 GMT
Etag: "641c89f1-1d7"
Expires: Sat, 25 Mar 2023 18:54:06 GMT
Last-Modified: Thu, 23 Mar 2023 17:18:41 GMT
Server: ECAcc (ska/F756)
X-Cache: HIT
Content-Length: 471
www.leovegas.com/en-no/?btag=667909_2632B01AD09A4321A7E14C7458431DFF&c=w1o8260c7a2dnpgn21uncig4&pid=3747044&bid=14983
200 OK 155 kB URL HTTP/2 www.leovegas.com/en-no/?btag=667909_2632B01AD09A4321A7E14C7458431DFF&c=w1o8260c7a2dnpgn21uncig4&pid=3747044&bid=14983
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (25162)
Size 155 kB (154654 bytes)
Hash 86cf2a66e07d70e73adf5a696e9844d0
5c87a4fe478d6217ec4866a5c1ad1a161f5d5888
8ad96b9b3ab796fd54c4add48f79dbd8a776d941c67b5027e61f42d1f85b6325
GET /en-no/?btag=667909_2632B01AD09A4321A7E14C7458431DFF&c=w1o8260c7a2dnpgn21uncig4&pid=3747044&bid=14983 HTTP/1.1
Host: www.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a3747044%2c%22BID%22%3a14983%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1679651056107)%5c%2f%22%2c%22CookieTag%22%3a%22149833747044451240919C2023324944%22%7d%5d; leo-essentials=%7B%22cid%22%3A%2227dff399-a733-4fab-93d1-5a6120b795fa%22%7D; visid_incap_846569=DXjdECU4SLq8a14LzWFWhe9wHWQAAAAAQUIPAAAAAADejACT5oXvHiuqjsPhar1O; nlbi_846569=9UVTZ2oxnUYFcFQiTJV9qQAAAAAL+ziJ9s5gHTP7VoF/uMkL; incap_ses_720_846569=zn7xB0q17XR3KsVDGPX9Ce9wHWQAAAAAELRSLEKVBeZ7DRlICzWMdw==
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 24 Mar 2023 09:44:16 GMT
content-type: text/html; charset=utf-8
content-encoding: gzip
set-cookie: leobtag=667909_2632B01AD09A4321A7E14C7458431DFF; Max-Age=3888000; Domain=.leovegas.com; Path=/; HttpOnly; Secure
leonrpid=3747044; Max-Age=3888000; Domain=.leovegas.com; Path=/; HttpOnly; Secure
leonrbid=14983; Max-Age=3888000; Domain=.leovegas.com; Path=/; HttpOnly; Secure
leonrmeta=[{"value":"w1o8260c7a2dnpgn21uncig4","key":"c"}]; Max-Age=3888000; Domain=.leovegas.com; Path=/; HttpOnly; Secure
etag: 6fd4d36af703bee6e7c2ad7b26c47eb875b1f84a
cache-control: public, must-revalidate
x-render-cache: 1
x-cache-key: 6fd4d36af703bee6e7c2ad7b26c47eb875b1f84a
strict-transport-security: max-age=63072000;
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy: frame-ancestors 'self' *.leovegas.com *.casinomodule.com *.yggdrasilgaming.com *.evolutiongaming.com *.gameassists.co.uk *.gameassists.dk *.rgsgames.com *.wagerworks.com *.adform.com *.livetables.io *.regily.com *.casinoalternativen.com *.onlinecasinobonus24.xyz *.livetableshu.com webcache.googleusercontent.com
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
x-cdn: Imperva
x-iinfo: 5-8964098-8964101 PNNy RT(1679651055403 123) q(0 0 0 -1) r(1 1) U12
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.relay~e741b245.556881eaa71238764923.chunk.js?e=p
200 OK 25 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.relay~e741b245.556881eaa71238764923.chunk.js?e=p
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash dbf66eb18d36660cea23083e26f60bbc
0efbe5910b161495208cfc44a186c8dba1c83a55
0862c52183bf85e7e1c79fec6999181c710763b07e95151869890bbd04f289f0
GET /fulcrum/v4/master/dynamic/mobile.relay~e741b245.556881eaa71238764923.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdunrIzlhQ-cxydEbgdX_eFOBVCItS4pEzlAth7qGa-8FFRugaKKWLMQGfX96i8gOnJg6azWXKQEdJDKlGiKnNSF9A
x-goog-generation: 1678110251442178
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 25255
content-encoding: gzip
x-goog-hash: crc32c=tv104Q==, md5=2/ZusY02ZgzqIwg+JvYLvA==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 25255
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Mon, 20 Mar 2023 13:49:09 GMT
expires: Mon, 17 Apr 2023 13:49:09 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Mon, 06 Mar 2023 13:44:11 GMT
etag: "dbf66eb18d36660cea23083e26f60bbc"
content-type: application/javascript
vary: Origin
age: 330908
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.vendors~app~9b312c24.5ce0864ab3d2da049f18.chunk.js?e=p
200 OK 12 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.vendors~app~9b312c24.5ce0864ab3d2da049f18.chunk.js?e=p
IP
File type ASCII text, with very long lines (35552), with no line terminators
Hash d16fa3cf239d96ea2f45e448dfff932d
72368ad8e73e7c73d43a20398c5f67e75d8f692d
8da665864696cacc698a6dea70702ca9d3585f5ec51f24043926849fe883db6a
GET /fulcrum/v4/master/dynamic/mobile.vendors~app~9b312c24.5ce0864ab3d2da049f18.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdvJD73nFOimmXcV_MjTkKVI59bljtbK0I0TWf7h356QLVdhVEOnPAZ55q3N7N6GJRTT4Tc-69-oZ6-2-EudfiLnZhpC6lqR
x-goog-generation: 1678110251844018
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 11677
content-encoding: gzip
x-goog-hash: crc32c=AO7PiA==, md5=0W+jzyOdluovReRI3/+TLQ==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 11677
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Mon, 20 Mar 2023 13:50:17 GMT
expires: Mon, 17 Apr 2023 13:50:17 GMT
cache-control: public, max-age=2419200,no-transform
age: 330840
last-modified: Mon, 06 Mar 2023 13:44:11 GMT
etag: "d16fa3cf239d96ea2f45e448dfff932d"
content-type: application/javascript
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.runtime.7abd96a46d5573b49655.js?e=p
200 OK 12 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.runtime.7abd96a46d5573b49655.js?e=p
IP
File type ASCII text, with very long lines (33914)
Hash 79c9fb861e35b053fe64cd719d7698ee
39a172f1f55804aa7d98c228ad4721ed2787faa0
71720828b9a028ccf64e271135ce058f684795ec852e0f34b1b6c895df00d235
GET /fulcrum/v4/master/dynamic/mobile.runtime.7abd96a46d5573b49655.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdvRRKd-lgxIC7yhEgKaNY9MhbKW7c4deQZFWG68NIRzI0RdZEPuXyQvXy2vv1mHzVHWd5KrhR3Jf23qysvwMeF7
x-goog-generation: 1679479819006749
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 12058
content-encoding: gzip
x-goog-hash: crc32c=Py62/A==, md5=ecn7hh41sFP+ZM1xnXaY7g==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 12058
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Wed, 22 Mar 2023 10:25:08 GMT
expires: Wed, 19 Apr 2023 10:25:08 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Wed, 22 Mar 2023 10:10:19 GMT
etag: "79c9fb861e35b053fe64cd719d7698ee"
content-type: application/javascript
vary: Origin
age: 170349
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 9c689641e0b746cd4bc0dba000933496
78fedb0dc677f79859e3004dda31e1b3bd829c16
c7f67f66fc400b404c947d9cdcd59cfdc9719c6dc60e4a6d8d51cf187bb1fec3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6401
Cache-Control: max-age=120065
Content-Type: application/ocsp-response
Date: Fri, 24 Mar 2023 09:44:17 GMT
Etag: "641c89f1-1d7"
Expires: Sat, 25 Mar 2023 19:05:22 GMT
Last-Modified: Thu, 23 Mar 2023 17:18:41 GMT
Server: ECAcc (ska/F6AF)
X-Cache: HIT
Content-Length: 471
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.app~65914263.6f996d8b6ea9f23747f1.chunk.css?e=p
200 OK 1.9 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.app~65914263.6f996d8b6ea9f23747f1.chunk.css?e=p
IP
File type ASCII text, with very long lines (5028)
Hash 71b32aaf113588ee53a750afb9f91a02
7f378b3e6695c22fd99484613ffc4328d4d07816
068bf711982c24a8a09bd4432011c0e52355bb823392ab6421cbf62e0f082f97
GET /fulcrum/v4/master/dynamic/mobile.app~65914263.6f996d8b6ea9f23747f1.chunk.css?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdtLK3ZyTwmVXkmiNADP8lcSCiuS_yo_0QbB-hxw9YFcJnvknaY1NYXaQrQmCQxmDvPqEmUj5HQFmtrPtj8YkUmc
x-goog-generation: 1669028776140146
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 1881
content-encoding: gzip
x-goog-hash: crc32c=ovdTiA==, md5=cbMqrxE1iO5Tp1CvufkaAg==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 1881
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Tue, 07 Mar 2023 13:50:10 GMT
expires: Tue, 04 Apr 2023 13:50:10 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Mon, 21 Nov 2022 11:06:16 GMT
etag: "71b32aaf113588ee53a750afb9f91a02"
content-type: text/css
vary: Origin
age: 1454047
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 1d54d3c84e73cd1f00a835aa7616c399
e869898915967fb645a7ae3bd711a831329cc792
9cca1d2ea17f54a8688823e6fb8cbb7247c0a808808b382ffdda35b2770a26f8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 24 Mar 2023 09:44:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.app~bead5879.4ba62c335ac53fa2f433.chunk.css?e=p
200 OK 1.6 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.app~bead5879.4ba62c335ac53fa2f433.chunk.css?e=p
IP
File type ASCII text, with very long lines (2303)
Hash e27a18cf1cd1a858e6bc1e56cfe231bd
73821fe3a5a2cff54c549ae91fb5347b5e6d8a9b
5a9ca458694d9b63411c902fe342f88de706187b5552a1670066753f502cd622
GET /fulcrum/v4/master/dynamic/mobile.app~bead5879.4ba62c335ac53fa2f433.chunk.css?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdv4hb4EY3zRTw4rNeVVh55G0gJK_-XBk1SkEruXkT7fbCiRu3Ezvs_w4fa3fSFSoX_MZSI1GHwCkAH6vBZSQsyj
x-goog-generation: 1670506834496426
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 1625
content-encoding: gzip
x-goog-hash: crc32c=igy0xQ==, md5=4noYzxzRqFjmvB5Wz+IxvQ==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 1625
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Tue, 07 Mar 2023 14:30:14 GMT
expires: Tue, 04 Apr 2023 14:30:14 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Thu, 08 Dec 2022 13:40:34 GMT
etag: "e27a18cf1cd1a858e6bc1e56cfe231bd"
content-type: text/css
vary: Origin
age: 1451643
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.vendors~app~6b6ee712.931be5059391cb6243a1.chunk.js?e=p
200 OK 19 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.vendors~app~6b6ee712.931be5059391cb6243a1.chunk.js?e=p
IP
File type ASCII text, with very long lines (54811), with no line terminators
Hash 1ab6ec241c75d199e0e82b38fe7b1529
97e0fa46f80a8f63d1b9b5db183e49aa85950135
e5c6b38df9bf3dac285ea93ccaf697e9ed188c5122bcebcbc798df2db47c83c1
GET /fulcrum/v4/master/dynamic/mobile.vendors~app~6b6ee712.931be5059391cb6243a1.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdtcOAqmVySMwrkfaMRJyxEaX2RoaD8kpv3_qDO8hhbl7xKrKSIEQrQdjAioow-l-HP8C66ORCmvDDvpgQ-fjFYhig
x-goog-generation: 1678110251827652
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 18816
content-encoding: gzip
x-goog-hash: crc32c=NCqRqQ==, md5=GrbsJBx10Zng6Cs4/nsVKQ==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 18816
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Mon, 20 Mar 2023 13:49:04 GMT
expires: Mon, 17 Apr 2023 13:49:04 GMT
cache-control: public, max-age=2419200,no-transform
age: 330913
last-modified: Mon, 06 Mar 2023 13:44:11 GMT
etag: "1ab6ec241c75d199e0e82b38fe7b1529"
content-type: application/javascript
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.vendors~app~e9b2199d.2a075053e6b9ccf17aa7.chunk.js?e=p
200 OK 14 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.vendors~app~e9b2199d.2a075053e6b9ccf17aa7.chunk.js?e=p
IP
File type ASCII text, with very long lines (42449), with no line terminators
Hash a7d88a83ffc16e35dfd82e6cdb0990ce
533e3f5f79cb3b98bde4f1d1a74a0a305ba5ac30
4ebccd4f41430da242228eb19485e890509f5ffd48bb9b1cc4224f33cebbc811
GET /fulcrum/v4/master/dynamic/mobile.vendors~app~e9b2199d.2a075053e6b9ccf17aa7.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdtJZXBO0Wpr5S3lFBmERpDjvJAnzgsH3WRooH1_Aqdm9sXRMnEE9v_N1Ob5K5TpEyGzZfYZdT2vnfZuoTRjnHa5IO-8jIZQ
x-goog-generation: 1678110251942543
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 13609
content-encoding: gzip
x-goog-hash: crc32c=M3h1HQ==, md5=p9iKg//BbjXf2C5s2wmQzg==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 13609
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Mon, 20 Mar 2023 13:49:29 GMT
expires: Mon, 17 Apr 2023 13:49:29 GMT
cache-control: public, max-age=2419200,no-transform
age: 330888
last-modified: Mon, 06 Mar 2023 13:44:11 GMT
etag: "a7d88a83ffc16e35dfd82e6cdb0990ce"
content-type: application/javascript
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.vendors~app~23b211d4.3477b676a53896aa5699.chunk.js?e=p
200 OK 13 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.vendors~app~23b211d4.3477b676a53896aa5699.chunk.js?e=p
IP
File type Unicode text, UTF-8 text, with very long lines (29772), with no line terminators
Hash 0b077348ca70fc8da16943f848c348b2
35887d0cadb2ac7a0172e9663ee2c62effe0d4de
da902641486cdaef2e0d6d2885db63a97a1b4bcfa22d6f5a492a3985a41f2c64
GET /fulcrum/v4/master/dynamic/mobile.vendors~app~23b211d4.3477b676a53896aa5699.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdufRDc5pBF0h-AsHxla7_cMOjk9ZQ1AJAJbjdE8b9GY7hoT3yn14sHF0uRMLHenHwnT5V2HlQ-8j_LMuGDusJhoUw
x-goog-generation: 1679319458198883
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 13192
content-encoding: gzip
x-goog-hash: crc32c=Nvyc7g==, md5=CwdzSMpw/I2haUP4SMNIsg==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 13192
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Mon, 20 Mar 2023 13:49:09 GMT
expires: Mon, 17 Apr 2023 13:49:09 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Mon, 20 Mar 2023 13:37:38 GMT
etag: "0b077348ca70fc8da16943f848c348b2"
content-type: application/javascript
vary: Origin
age: 330908
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.vendors~app~acf67890.2eec108dc7748ef2e8bf.chunk.js?e=p
200 OK 12 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.vendors~app~acf67890.2eec108dc7748ef2e8bf.chunk.js?e=p
IP
File type ASCII text, with very long lines (46125), with no line terminators
Hash 07ad96a44666b86822a2b9ab666b9ab0
50d958955a9ade32dbc3962ea594d8c6b76176e2
5e835fb7860e6c4bbb2151d733087b4a7ec83ad6e3c16ae1153cb0b38e079e41
GET /fulcrum/v4/master/dynamic/mobile.vendors~app~acf67890.2eec108dc7748ef2e8bf.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdta1Bbjk5ZXZGNvFLY-KtcFZ9lpg5L2BtDVTl50on-yd49Vfc4A8Ngy6RS0X1SFFexVak_vwYfEftYnPj3KIslYqQ
x-goog-generation: 1678110251828233
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 12365
content-encoding: gzip
x-goog-hash: crc32c=rbZ/PA==, md5=B62WpEZmuGgiormrZmuasA==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 12365
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Mon, 20 Mar 2023 13:49:09 GMT
expires: Mon, 17 Apr 2023 13:49:09 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Mon, 06 Mar 2023 13:44:11 GMT
etag: "07ad96a44666b86822a2b9ab666b9ab0"
content-type: application/javascript
vary: Origin
age: 330908
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.vendors~app~4da73d43.7600ce349d005aeceee9.chunk.js?e=p
200 OK 7.5 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.vendors~app~4da73d43.7600ce349d005aeceee9.chunk.js?e=p
IP
File type Unicode text, UTF-8 text, with very long lines (21358), with no line terminators
Hash f1c144dc2301c3607f3dfb9b7e809efb
cd8b806a080cad7560daefa37a22c5796cbecd99
ceb456a1397113df5478fa6dd80c5958c3ffb8c21b1ffb135efdf51e5fe12a62
GET /fulcrum/v4/master/dynamic/mobile.vendors~app~4da73d43.7600ce349d005aeceee9.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdvT-XUeXXp28adJGDXEC6SBuYXxkfA324r76mZUGwIzLsI_hAfemTDFMOPlXbb2GpyeTmRo2RHCwj06nWvQ_WZDHQ
x-goog-generation: 1678110251767302
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 7515
content-encoding: gzip
x-goog-hash: crc32c=E+dA0Q==, md5=8cFE3CMBw2B/PfubfoCe+w==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 7515
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Mon, 20 Mar 2023 13:49:09 GMT
expires: Mon, 17 Apr 2023 13:49:09 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Mon, 06 Mar 2023 13:44:11 GMT
etag: "f1c144dc2301c3607f3dfb9b7e809efb"
content-type: application/javascript
vary: Origin
age: 330908
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 9c689641e0b746cd4bc0dba000933496
78fedb0dc677f79859e3004dda31e1b3bd829c16
c7f67f66fc400b404c947d9cdcd59cfdc9719c6dc60e4a6d8d51cf187bb1fec3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 144
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 24 Mar 2023 09:44:17 GMT
Etag: "641c89f1-1d7"
Last-Modified: Fri, 24 Mar 2023 09:41:53 GMT
Server: ECAcc (ska/F7A5)
X-Cache: HIT
Content-Length: 471
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.vendors~app~127b6cf7.5968132b62c691d897cb.chunk.js?e=p
200 OK 24 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.vendors~app~127b6cf7.5968132b62c691d897cb.chunk.js?e=p
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 38eee39516b6cb5cea3625e7e15d5f17
4ed8a03ac1643405e61e1f71d4e28d8de47d5d33
a1cbe75743a72971b0c70395c19194132b4c420d4135d32b10332f68490c6cad
GET /fulcrum/v4/master/dynamic/mobile.vendors~app~127b6cf7.5968132b62c691d897cb.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdvlZs0AfP9Y7PBXRSwFe4OpuqAzkNSuKyW-_q7WZTOTlgyZGnPfjmsWNovZr8GD-lk67PojL-l7TfCKFiuIhnthqw
x-goog-generation: 1678110251746595
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 23571
content-encoding: gzip
x-goog-hash: crc32c=1mAWgg==, md5=OO7jlRa2y1zqNiXn4V1fFw==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 23571
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Mon, 20 Mar 2023 13:49:09 GMT
expires: Mon, 17 Apr 2023 13:49:09 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Mon, 06 Mar 2023 13:44:11 GMT
etag: "38eee39516b6cb5cea3625e7e15d5f17"
content-type: application/javascript
vary: Origin
age: 330908
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.vendors~app~1d14d743.3c0efc34a658b73f64dc.chunk.js?e=p
200 OK 4.8 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.vendors~app~1d14d743.3c0efc34a658b73f64dc.chunk.js?e=p
IP
File type ASCII text, with very long lines (12062)
Hash 8b8453f806d76384ddac69e7dcb52311
5b79483d8d705d77ec7c768ab521d5469a890f52
150c2fc0eaa5633bf1ca68921959c29286b43c5250176bef6cd7dda73a50646e
GET /fulcrum/v4/master/dynamic/mobile.vendors~app~1d14d743.3c0efc34a658b73f64dc.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycduPPBL2DGfi-Q0HhnuJeIojUJxHDlH9VDBBC4r5e8O1ByYZl5HM8vVn4YHtBhvFq3OiYlW2UByWRgPX7h0Cecvegg
x-goog-generation: 1678110251653210
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 4804
content-encoding: gzip
x-goog-hash: crc32c=ytDTng==, md5=i4RT+AbXY4TdrGnn3LUjEQ==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 4804
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Mon, 20 Mar 2023 13:49:09 GMT
expires: Mon, 17 Apr 2023 13:49:09 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Mon, 06 Mar 2023 13:44:11 GMT
etag: "8b8453f806d76384ddac69e7dcb52311"
content-type: application/javascript
vary: Origin
age: 330908
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.vendors~app~a8f9656c.81b5147c454a9d4872bd.chunk.js?e=p
200 OK 20 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.vendors~app~a8f9656c.81b5147c454a9d4872bd.chunk.js?e=p
IP
File type ASCII text, with very long lines (52100)
Hash 4d05e785a2a4480a874c16f39c5ec305
5711d12ba972242518d83dd8310ddb48a8b2ea22
fe9c113b22c3b4aeca6c14324220168f71b6c9b8740c8fc16c540dc97d8a53e5
GET /fulcrum/v4/master/dynamic/mobile.vendors~app~a8f9656c.81b5147c454a9d4872bd.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdsUVNaI2OLV9yeKaQMonhwRPWpQyeUAdyBwRI7i3-8uVELo8yp1c2qP7KZY61fGJW6xSwYJBj6dI_h0yTIoZp2cxg
x-goog-generation: 1678110251942169
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 20063
content-encoding: gzip
x-goog-hash: crc32c=wuWPVA==, md5=TQXnhaKkSAqHTBbznF7DBQ==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 20063
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Mon, 20 Mar 2023 13:49:09 GMT
expires: Mon, 17 Apr 2023 13:49:09 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Mon, 06 Mar 2023 13:44:11 GMT
etag: "4d05e785a2a4480a874c16f39c5ec305"
content-type: application/javascript
vary: Origin
age: 330908
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.vendors~app~c7b8ce09.88b16b8189638f0ba78d.chunk.js?e=p
200 OK 38 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.vendors~app~c7b8ce09.88b16b8189638f0ba78d.chunk.js?e=p
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash ea7fd11ed0c412d833ec9c88bef24651
2530856dcae0c11030c1653d7f450bc9acba9bdd
55716f07c86d88c0ab4132db399c849fd864b721c415b186716b0ea70488efd7
GET /fulcrum/v4/master/dynamic/mobile.vendors~app~c7b8ce09.88b16b8189638f0ba78d.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycduEEgby0QtqtVhZoAZo3BiGcD6X-pMHCqc-cmhhGx2gVB4zhTTZEouEnW4_Zs3upbzdxPa5UlemArkP6ziAhOc7EP7vorAu
x-goog-generation: 1678110251951569
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 37478
content-encoding: gzip
x-goog-hash: crc32c=yTmtjg==, md5=6n/RHtDEEtgz7JyIvvJGUQ==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 37478
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Mon, 20 Mar 2023 13:49:09 GMT
expires: Mon, 17 Apr 2023 13:49:09 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Mon, 06 Mar 2023 13:44:11 GMT
etag: "ea7fd11ed0c412d833ec9c88bef24651"
content-type: application/javascript
vary: Origin
age: 330908
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 9c689641e0b746cd4bc0dba000933496
78fedb0dc677f79859e3004dda31e1b3bd829c16
c7f67f66fc400b404c947d9cdcd59cfdc9719c6dc60e4a6d8d51cf187bb1fec3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 144
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 24 Mar 2023 09:44:17 GMT
Last-Modified: Fri, 24 Mar 2023 09:41:53 GMT
Server: ECAcc (ska/F776)
X-Cache: HIT
Content-Length: 471
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.vendors~app~0efdf0b8.2b9cc901525e72d0d85a.chunk.js?e=p
200 OK 30 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.vendors~app~0efdf0b8.2b9cc901525e72d0d85a.chunk.js?e=p
IP
File type Unicode text, UTF-8 text, with very long lines (46939)
Hash 0d5841944e72acfaa9d1a30d9232e6be
7653ac365728fb053f48ef54cedcfaa6e0c9ec33
f33f772d12a9fe9add08eacca1b8dace86779b1a52970e7b4a032aa0778ae312
GET /fulcrum/v4/master/dynamic/mobile.vendors~app~0efdf0b8.2b9cc901525e72d0d85a.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycduBw4eTS55GIvA4YmsjnpEerld23vdfWg6MD7qRFwex4iYX2W9jGObhsHo76Yc0BxdWR-h-cRdV1oRka4JXVTPSl2DB7jV-
x-goog-generation: 1678110251770880
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 30343
content-encoding: gzip
x-goog-hash: crc32c=pIF2Ng==, md5=DVhBlE5yrPqp0aMNkjLmvg==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 30343
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Mon, 20 Mar 2023 13:49:09 GMT
expires: Mon, 17 Apr 2023 13:49:09 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Mon, 06 Mar 2023 13:44:11 GMT
etag: "0d5841944e72acfaa9d1a30d9232e6be"
content-type: application/javascript
vary: Origin
age: 330908
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/static/c16b1b72809f0ebf0713c5d56aaaa998.svg
200 OK 2.9 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/static/c16b1b72809f0ebf0713c5d56aaaa998.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2945), with no line terminators
Hash 342bb69e34b5d81e1fab7241f0398da8
f12381655ac55a5b4a620595348576477dd61236
79387e649471e7a99751a3168ea95f57796929c435d7f1eb2cfca955bbf23c44
GET /fulcrum/v4/master/static/c16b1b72809f0ebf0713c5d56aaaa998.svg HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.leovegas.com/
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a3747044%2c%22BID%22%3a14983%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1679651056107)%5c%2f%22%2c%22CookieTag%22%3a%22149833747044451240919C2023324944%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%222861626257%7c1%22%7d%5d; visid_incap_846569=DXjdECU4SLq8a14LzWFWhe9wHWQAAAAAQUIPAAAAAADejACT5oXvHiuqjsPhar1O; nlbi_846569=9UVTZ2oxnUYFcFQiTJV9qQAAAAAL+ziJ9s5gHTP7VoF/uMkL; incap_ses_720_846569=zn7xB0q17XR3KsVDGPX9Ce9wHWQAAAAAELRSLEKVBeZ7DRlICzWMdw==; leobtag=667909_2632B01AD09A4321A7E14C7458431DFF; leonrpid=3747044; leonrbid=14983; leonrmeta=[{"value":"w1o8260c7a2dnpgn21uncig4","key":"c"}]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdvy5-5K_4E8K4vZidvws-3kRgNLOxs1IB84WlflUtF0pZCz_tPzlep-oqiFG7o27U2xCD_-g6lXVgzTtIx7mpX3Zw
x-goog-generation: 1678963666157215
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 2945
x-goog-meta-goog-reserved-file-mtime: 1678963641
x-goog-hash: crc32c=T17Tvw==, md5=NCu2njS12B4fq3JB8DmNqA==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 2945
server: UploadServer
date: Sun, 19 Mar 2023 17:43:11 GMT
expires: Sun, 16 Apr 2023 17:43:11 GMT
cache-control: public, max-age=2419200
last-modified: Thu, 16 Mar 2023 10:47:46 GMT
etag: "342bb69e34b5d81e1fab7241f0398da8"
content-type: image/svg+xml
vary: Origin
age: 403266
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ik.imagekit.io/leovegas/lv/games/znJLEPZoQ/dX5ltjEQ7ArEe.jpg
200 OK 9.5 kB URL HTTP/2 ik.imagekit.io/leovegas/lv/games/znJLEPZoQ/dX5ltjEQ7ArEe.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 150x150, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash de7cd2f714d0dc022d17a5cbaddf93e0
3e8b9abf8ab4f5845737ffffadeb5fe72035d255
b288f02da7d9d609508bd7c0f821fad062df4bf7fef57c87cc2586454f96c205
GET /leovegas/lv/games/znJLEPZoQ/dX5ltjEQ7ArEe.jpg HTTP/1.1
Host: ik.imagekit.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 9452
x-request-id: 31a5a76f-0e3f-4686-8dce-0adaac12c519
x-server: ImageKit.io
access-control-allow-origin: *
timing-allow-origin: *
cache-control: public, s-maxage=15552000, max-age=15552000, must-revalidate
etag: W/"24ec-Pouav4q09YRXN///retf5yA10lU"
date: Tue, 07 Mar 2023 06:23:12 GMT
vary: Accept
x-cache: Hit from cloudfront
via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: kscvBV-JgWLdMZId9T2wSyoLjCkakuMPPZCPkQmXr-wHAvBJqu6Vaw==
age: 1480865
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.app~bfe0ed74.2e94f4cfba6e37253e72.chunk.js?e=p
200 OK 23 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.app~bfe0ed74.2e94f4cfba6e37253e72.chunk.js?e=p
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 6ae2e28a47a6e89d2816b2c87c95f2e7
70371d31003e8c71bf750b9b147c9a41a61dfb2c
0a7f19ae1bba7214227a517cc67652d974ca0bab2921412145fd302056e313b0
GET /fulcrum/v4/master/dynamic/mobile.app~bfe0ed74.2e94f4cfba6e37253e72.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdsti6MeegzjSSZ3_6vEnmXCMVs44KbydTIhwM9K4AzpuLbAQlzAt_XfF9AXaZIl0isezoqLrqIjMRjyu78Y6HkJh7MVHhHy
x-goog-generation: 1679479819035454
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 23145
content-encoding: gzip
x-goog-hash: crc32c=bNdoAw==, md5=auLiikem6J0oFrLIfJXy5w==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 23145
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Wed, 22 Mar 2023 10:25:08 GMT
expires: Wed, 19 Apr 2023 10:25:08 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Wed, 22 Mar 2023 10:10:19 GMT
etag: "6ae2e28a47a6e89d2816b2c87c95f2e7"
content-type: application/javascript
vary: Origin
age: 170349
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.app~9675856e.a3895382864b64c9d9a0.chunk.js?e=p
200 OK 31 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.app~9675856e.a3895382864b64c9d9a0.chunk.js?e=p
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash f22d529bf23b55c098fcdf86c5da80d1
2b17724b5a0a7cf88809c70ef0d5b97c09d735ce
308e6963a13c81022999449f6fd43337522a615cc26c5dca228f68769ee90de6
GET /fulcrum/v4/master/dynamic/mobile.app~9675856e.a3895382864b64c9d9a0.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycduDzuuV1lV8m9REMZ0jKSTECIk2_GH4e6CZA8Lib905jhfT8TYfZVnoZshM_mgQYj9mDN0yWq85unTUxWTU6H200w
x-goog-generation: 1679319458052173
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 30719
content-encoding: gzip
x-goog-hash: crc32c=WZE5Vw==, md5=8i1Sm/I7VcCY/N+GxdqA0Q==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 30719
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Mon, 20 Mar 2023 13:49:09 GMT
expires: Mon, 17 Apr 2023 13:49:09 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Mon, 20 Mar 2023 13:37:38 GMT
etag: "f22d529bf23b55c098fcdf86c5da80d1"
content-type: application/javascript
vary: Origin
age: 330908
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ik.imagekit.io/leovegas/lv/games/l63mbJzJJ/DeJK8sN4bQPQXb-opt.jpg
200 OK 75 kB URL HTTP/2 ik.imagekit.io/leovegas/lv/games/l63mbJzJJ/DeJK8sN4bQPQXb-opt.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x280, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 02f040087fdb1b3d87c4a972105f1783
a22320bbc476cfe0fd182b91d1331dd41bc3defe
db0b7e1d9c6d3b5dd5accb1fcbc610af32809d3defcc351b0902f17590fac76b
GET /leovegas/lv/games/l63mbJzJJ/DeJK8sN4bQPQXb-opt.jpg HTTP/1.1
Host: ik.imagekit.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 75182
x-request-id: e74e109f-b01a-4f99-9a48-98c1972daace
x-server: ImageKit.io
access-control-allow-origin: *
timing-allow-origin: *
cache-control: public, s-maxage=15552000, max-age=15552000, must-revalidate
etag: W/"125ae-oiMgu8R2z+D9GCuR0TMd1BvD3v4"
date: Thu, 16 Mar 2023 08:24:59 GMT
vary: Accept
x-cache: Hit from cloudfront
via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: XcARZFoWw6Xwbt2Vm3jztpLh5h3o1yAzz10rP2EPKySd57LWi44A1Q==
age: 695958
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.app~521067a8.61dcb28a0f60b4851c08.chunk.js?e=p
200 OK 10 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.app~521067a8.61dcb28a0f60b4851c08.chunk.js?e=p
IP
File type ASCII text, with very long lines (49037)
Hash 72ccfaee94b50fff0a7009d7496d36bb
d8bedbc9beae280513ffcf26f6e96f4db00bda5e
43e00e84fb73caeefb1c80912fa17afc7a54aeaaee41a299289d1f4b1b14cc7c
GET /fulcrum/v4/master/dynamic/mobile.app~521067a8.61dcb28a0f60b4851c08.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdshqHGL1CLz-l0wVCnrEE5MDfVF_jKHm0kezrjywvnvPtfhbsxYddqAZTZ4GRW-gvClbWWGOf0TAGyaltKiQuZ1pjMLdwN2
x-goog-generation: 1679319457867658
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 10252
content-encoding: gzip
x-goog-hash: crc32c=Czr5MA==, md5=csz67pS1D/8KcAnXSW02uw==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 10252
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Mon, 20 Mar 2023 13:49:09 GMT
expires: Mon, 17 Apr 2023 13:49:09 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Mon, 20 Mar 2023 13:37:37 GMT
etag: "72ccfaee94b50fff0a7009d7496d36bb"
content-type: application/javascript
vary: Origin
age: 330908
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ik.imagekit.io/leovegas/lv/games/BmnRz9Qjw/wk0XyUyKZL5eJW.jpg
200 OK 54 kB URL HTTP/2 ik.imagekit.io/leovegas/lv/games/BmnRz9Qjw/wk0XyUyKZL5eJW.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 390x390, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 8c445b381b1bdbad163341f90e7c3d6f
77c379435bcea0e2ff070442d59fae8dbd433e16
f9da8dd52e4eb7c5a5fdb200d5048258fb7135c61fc56644141c23d7b087b9e8
GET /leovegas/lv/games/BmnRz9Qjw/wk0XyUyKZL5eJW.jpg HTTP/1.1
Host: ik.imagekit.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 53778
x-request-id: 819e822b-d35c-4200-9df0-b6120cd7b585
x-server: ImageKit.io
access-control-allow-origin: *
timing-allow-origin: *
cache-control: public, s-maxage=15552000, max-age=15552000, must-revalidate
etag: W/"d212-d8N5Q1vOoOL/BwRC1Z+ujb1DPhY"
date: Thu, 09 Mar 2023 08:01:13 GMT
vary: Accept
x-cache: Hit from cloudfront
via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: CHAIMMIM-OUxCdKAEe3AJzaLKzRans_uwKQaY-nohemy10b_qWJ_bg==
age: 1302184
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.app~361546bd.e22712edc33625fb4769.chunk.js?e=p
200 OK 16 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.app~361546bd.e22712edc33625fb4769.chunk.js?e=p
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 0bc6c6918d6dda60e95f8338a3adce33
7a2614d619f138ef3a1008733727c18f02fa92f5
bf56364b3d51a916b189da41c81d406eb00975d1eda1a9b7ba53e45411de5776
GET /fulcrum/v4/master/dynamic/mobile.app~361546bd.e22712edc33625fb4769.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdtslfbzZU-HqfYmi0NY6MUpr6-E5B9nndndodl6f18ggrQ6fNgBAV1-EssCXcoWN_416PteTGGBl5hpddBdHJ34MZdw2q0e
x-goog-generation: 1679319457984547
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 15923
content-encoding: gzip
x-goog-hash: crc32c=uQsLIQ==, md5=C8bGkY1t2mDpX4M4o63OMw==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 15923
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Mon, 20 Mar 2023 13:49:29 GMT
expires: Mon, 17 Apr 2023 13:49:29 GMT
cache-control: public, max-age=2419200,no-transform
age: 330888
last-modified: Mon, 20 Mar 2023 13:37:38 GMT
etag: "0bc6c6918d6dda60e95f8338a3adce33"
content-type: application/javascript
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ik.imagekit.io/leovegas/lv/games/4Vx20w42d/7kPW8SDGgj4nLK.jpg
200 OK 70 kB URL HTTP/2 ik.imagekit.io/leovegas/lv/games/4Vx20w42d/7kPW8SDGgj4nLK.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x280, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 62a6cf7f207e87872eedb1d656f24cc0
88618d873475bba4c71ee918a62e6336bbe0e5ce
4ae32d3d721877289008ca3ac45de88b7e03eeac09a6e23b84117a97a3ffb847
GET /leovegas/lv/games/4Vx20w42d/7kPW8SDGgj4nLK.jpg HTTP/1.1
Host: ik.imagekit.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 69752
x-request-id: 1f7a3911-57b2-4651-ae8c-4273cf4f4877
x-server: ImageKit.io
access-control-allow-origin: *
timing-allow-origin: *
cache-control: public, s-maxage=15552000, max-age=15552000, must-revalidate
etag: W/"11078-iGGNhzR1u6THHukYpi5jNrvg5c4"
date: Thu, 16 Mar 2023 08:24:59 GMT
vary: Accept
x-cache: Hit from cloudfront
via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: gBijJ-S9pYrtrYoyqZXYBC2sKv-Dn0ZPk8obv6qdOLcbMif7S73AcA==
age: 695958
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b62c9b9530dd66bb7f03ba2ce3d835da
bf8560766de78dd925e395f59610ab2f1335e565
62a45c1bedd4241448ab43b535518e423b0500901328b3a0b984d758c9b0540d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "62A45C1BEDD4241448AB43B535518E423B0500901328B3A0B984D758C9B0540D"
Last-Modified: Fri, 24 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6871
Expires: Fri, 24 Mar 2023 11:38:48 GMT
Date: Fri, 24 Mar 2023 09:44:17 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b62c9b9530dd66bb7f03ba2ce3d835da
bf8560766de78dd925e395f59610ab2f1335e565
62a45c1bedd4241448ab43b535518e423b0500901328b3a0b984d758c9b0540d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "62A45C1BEDD4241448AB43B535518E423B0500901328B3A0B984D758C9B0540D"
Last-Modified: Fri, 24 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6871
Expires: Fri, 24 Mar 2023 11:38:48 GMT
Date: Fri, 24 Mar 2023 09:44:17 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 9c689641e0b746cd4bc0dba000933496
78fedb0dc677f79859e3004dda31e1b3bd829c16
c7f67f66fc400b404c947d9cdcd59cfdc9719c6dc60e4a6d8d51cf187bb1fec3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5818
Cache-Control: max-age=119482
Content-Type: application/ocsp-response
Date: Fri, 24 Mar 2023 09:44:17 GMT
Etag: "641c89f1-1d7"
Expires: Sat, 25 Mar 2023 18:55:39 GMT
Last-Modified: Thu, 23 Mar 2023 17:18:41 GMT
Server: ECAcc (ska/F7A3)
X-Cache: HIT
Content-Length: 471
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.Adform~e8e8aaba.764514d34ff150bc1ac9.chunk.js?e=p
200 OK 2.7 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.Adform~e8e8aaba.764514d34ff150bc1ac9.chunk.js?e=p
IP
File type ASCII text, with very long lines (7023)
Hash ed6fb98e3e1dcd274e9d3e8fe5a10a71
d0f62be5c65b19341445bcf50e95dbb396e55479
ddb326b090a4f9d68e8ba3b2bf388f3898ef0be90c705bff0588cce011d1b353
GET /fulcrum/v4/master/dynamic/mobile.Adform~e8e8aaba.764514d34ff150bc1ac9.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdvCTcJYBlTCKAvY_S-_hCVzLnHC6aXNoCgrpwdFRB6h--Qacj0Xl8A9S23CR34aDrH_tNcfFue-5bShiK2D9i03
x-goog-generation: 1678352175802367
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 2719
content-encoding: gzip
x-goog-hash: crc32c=gQkb5w==, md5=7W+5jj4dzSdOnT6P5aEKcQ==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 2719
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Thu, 09 Mar 2023 09:03:24 GMT
expires: Thu, 06 Apr 2023 09:03:24 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Thu, 09 Mar 2023 08:56:15 GMT
etag: "ed6fb98e3e1dcd274e9d3e8fe5a10a71"
content-type: application/javascript
vary: Origin
age: 1298453
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ik.imagekit.io/leovegas/lv/games/72qpPZ6L4/M55X0IgwGxnyPm.jpg
200 OK 58 kB URL HTTP/2 ik.imagekit.io/leovegas/lv/games/72qpPZ6L4/M55X0IgwGxnyPm.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 390x390, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 2cf66770aefba4af5576db83e3f5a560
90e992ad77ad8336a08792e6df353d9cb9d759e5
235f1bcf85913ea28dbaeb7afb16ab624067ebf05a72d3e5d477a25be60c8ced
GET /leovegas/lv/games/72qpPZ6L4/M55X0IgwGxnyPm.jpg HTTP/1.1
Host: ik.imagekit.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 58506
x-request-id: ed6eb765-b9e6-4f64-b8e4-a00427c5eb70
x-server: ImageKit.io
access-control-allow-origin: *
timing-allow-origin: *
cache-control: public, s-maxage=15552000, max-age=15552000, must-revalidate
etag: W/"e48a-kOmSrXetgzagh5Lm3zU9nLnXWeU"
date: Tue, 07 Mar 2023 05:32:05 GMT
vary: Accept
x-cache: Hit from cloudfront
via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: SySAvXWv7MklBxfTI8kIjGf3LKaMCwsWXm4f-CsIkuU0eriUBAZxiA==
age: 1483932
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b62c9b9530dd66bb7f03ba2ce3d835da
bf8560766de78dd925e395f59610ab2f1335e565
62a45c1bedd4241448ab43b535518e423b0500901328b3a0b984d758c9b0540d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "62A45C1BEDD4241448AB43B535518E423B0500901328B3A0B984D758C9B0540D"
Last-Modified: Fri, 24 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6871
Expires: Fri, 24 Mar 2023 11:38:48 GMT
Date: Fri, 24 Mar 2023 09:44:17 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b62c9b9530dd66bb7f03ba2ce3d835da
bf8560766de78dd925e395f59610ab2f1335e565
62a45c1bedd4241448ab43b535518e423b0500901328b3a0b984d758c9b0540d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "62A45C1BEDD4241448AB43B535518E423B0500901328B3A0B984D758C9B0540D"
Last-Modified: Fri, 24 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6871
Expires: Fri, 24 Mar 2023 11:38:48 GMT
Date: Fri, 24 Mar 2023 09:44:17 GMT
Connection: keep-alive
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.Snackbar~9765a08b.503e1e70d5dd35ddac15.chunk.js?e=p
200 OK 3.0 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.Snackbar~9765a08b.503e1e70d5dd35ddac15.chunk.js?e=p
IP
File type ASCII text, with very long lines (8082)
Hash e9b93445bbac208b7c4118bb2f4fe5e7
36cf481b29fdfeb6776202206e380f30fb16bfeb
b46254df2c33160213b4ea9efc5353d44eea2a2e4cfca6b4b24a101098f4e04e
GET /fulcrum/v4/master/dynamic/mobile.Snackbar~9765a08b.503e1e70d5dd35ddac15.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdunLM_7dBBvYZKYAhcTdlfDycDkiQ84fVlCOcJRJ_AKsefHQ-AD7uilbe8Zbop13pv_Dc89H-Er4_-osL-iDTyoNw
x-goog-generation: 1679319457071286
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 2973
content-encoding: gzip
x-goog-hash: crc32c=rM4yVw==, md5=6bk0RbusIIt8QRi7L0/l5w==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 2973
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Mon, 20 Mar 2023 13:49:09 GMT
expires: Mon, 17 Apr 2023 13:49:09 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Mon, 20 Mar 2023 13:37:37 GMT
etag: "e9b93445bbac208b7c4118bb2f4fe5e7"
content-type: application/javascript
vary: Origin
age: 330908
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.ResponsibleGaming~4fd0ee19.2cdbfc03b69425c3a2f3.chunk.js?e=p
200 OK 2.2 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.ResponsibleGaming~4fd0ee19.2cdbfc03b69425c3a2f3.chunk.js?e=p
IP
File type ASCII text, with very long lines (6173)
Hash 63aab1ccdc8b1f3f26e738d611fb30af
b2aae46dad159850e4b5e899b2249e4246913392
857db148a03abe8da349fee53b4721e03ed9be182364998702f8b3bee28681fb
GET /fulcrum/v4/master/dynamic/mobile.ResponsibleGaming~4fd0ee19.2cdbfc03b69425c3a2f3.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdtt8qwC1C-QNon--NPnm2R_RfPPy7mGJN_pjTPaGIb3-Cp74xfu5jlPzcrog0Ws5WnXIvJkqHH22eeKzvHHRae0dg
x-goog-generation: 1679319456813787
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 2211
content-encoding: gzip
x-goog-hash: crc32c=zgt6Bg==, md5=Y6qxzNyLHz8m5zjWEfswrw==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 2211
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Mon, 20 Mar 2023 13:49:09 GMT
expires: Mon, 17 Apr 2023 13:49:09 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Mon, 20 Mar 2023 13:37:36 GMT
etag: "63aab1ccdc8b1f3f26e738d611fb30af"
content-type: application/javascript
vary: Origin
age: 330908
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.Experimentation~0035cfbb.87b9638f5bff200a8c5d.chunk.js?e=p
200 OK 1.4 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.Experimentation~0035cfbb.87b9638f5bff200a8c5d.chunk.js?e=p
IP
File type ASCII text, with very long lines (2892)
Hash 67ad7f2b4bcaa15ca6ceb76659b50e67
93b80493c1f216342097e1a2e3f46a909238d8cd
03940f0814f5dad654419b01bbf7fb2fa8975edb953a4b3d8cf6795e95c59067
GET /fulcrum/v4/master/dynamic/mobile.Experimentation~0035cfbb.87b9638f5bff200a8c5d.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdvGFd9arTc5NFxPNoMZ56y6uF7GM4HvshA9tWGNXJ-ZNG443ixFt_YZ_02m5NZ497THUHkBSqD1lKT5irc0wLZMgg
x-goog-generation: 1677830925394314
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 1390
content-encoding: gzip
x-goog-hash: crc32c=sOKjiA==, md5=Z61/K0vKoVymzrdmWbUOZw==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 1390
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Tue, 14 Mar 2023 10:19:27 GMT
expires: Tue, 11 Apr 2023 10:19:27 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Fri, 03 Mar 2023 08:08:45 GMT
etag: "67ad7f2b4bcaa15ca6ceb76659b50e67"
content-type: application/javascript
vary: Origin
age: 861890
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.vendors~app~112c8377.7a25fd9ed93fd294b508.chunk.js?e=p
200 OK 45 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.vendors~app~112c8377.7a25fd9ed93fd294b508.chunk.js?e=p
IP
File type Unicode text, UTF-8 text, with very long lines (35008)
Hash bd79a07f550c07a4aaed66855ad1687f
cecee8196ee4cc98dc6eda7734d91f519cecaaa5
fd2a40ee495eca811fd8fa15d611edb79f356c2a516f94d1a37bc5c1b7a55852
GET /fulcrum/v4/master/dynamic/mobile.vendors~app~112c8377.7a25fd9ed93fd294b508.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdtFgBwuzPayI4Z8XWmjCg7p1NYeyZ723bhdLkAm84oomrtsVhxeniOJCPIjpBBUoyP7jqlasvkpB3tqO6XSNBattg
x-goog-generation: 1679319458247598
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 44757
content-encoding: gzip
x-goog-hash: crc32c=cDgEbQ==, md5=vXmgf1UMB6Sq7WaFWtFofw==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 44757
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Mon, 20 Mar 2023 13:49:09 GMT
expires: Mon, 17 Apr 2023 13:49:09 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Mon, 20 Mar 2023 13:37:38 GMT
etag: "bd79a07f550c07a4aaed66855ad1687f"
content-type: application/javascript
vary: Origin
age: 330908
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.vendors~app~e4dfd1bd.bcc6308af9f2b7335e9f.chunk.js?e=p
200 OK 40 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.vendors~app~e4dfd1bd.bcc6308af9f2b7335e9f.chunk.js?e=p
IP
File type ASCII text, with very long lines (40178)
Hash bb950e856cf951ccb7fc61cc88f6089c
9587b8222f16e76db010d1550f91f5eae6b67b33
22f6ce54a5085f32547bd7118b4ba4d9171efd8222aaa0877fb259383e06efc9
GET /fulcrum/v4/master/dynamic/mobile.vendors~app~e4dfd1bd.bcc6308af9f2b7335e9f.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdvcX5gJzDxijRFfKuqFz40wuCUBDd14S1JkFkTfdbwFakMaZ71s9rN7iMp7OYv0W9QjKcn5xhC-_zc61NgnpYCt7w
x-goog-generation: 1679319458364714
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 40043
content-encoding: gzip
x-goog-hash: crc32c=a4Cldg==, md5=u5UOhWz5Ucy3/GHMiPYInA==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 40043
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Mon, 20 Mar 2023 13:49:09 GMT
expires: Mon, 17 Apr 2023 13:49:09 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Mon, 20 Mar 2023 13:37:38 GMT
etag: "bb950e856cf951ccb7fc61cc88f6089c"
content-type: application/javascript
vary: Origin
age: 330908
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F255e6a5a-97bb-4a35-8a48-4d120747a63c.jpeg
200 OK 4.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F255e6a5a-97bb-4a35-8a48-4d120747a63c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 85351059b67b0a42eda7e69a31b3b4b4
b798268806dc2f79f033e5872676019faf0e0cc1
86e163b7159b197d6358ab01333ac6da221de0ebe1c5da8d5cef2977d38625fe
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F255e6a5a-97bb-4a35-8a48-4d120747a63c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4000
x-amzn-requestid: 68dc01d7-3eed-48f6-8532-8efaa96cc1ec
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CJpraEqyoAMFgNQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641a2315-3852cc8961365a560d1fa02f;Sampled=0
x-amzn-remapped-date: Tue, 21 Mar 2023 21:35:17 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: Ncagzm12kJaHQtYhhjUUhcfXVfbwMdonoNYqpK-QXEmLfyyENgFnFA==
via: 1.1 288c777a01e22425da9494dad7a69734.cloudfront.net (CloudFront), 1.1 42ef990e439ae115ff739f04e3945234.cloudfront.net (CloudFront), 1.1 google
date: Fri, 24 Mar 2023 06:10:34 GMT
age: 12823
etag: "b798268806dc2f79f033e5872676019faf0e0cc1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.app~748942c6.0e315a717ce30b07f0b7.chunk.js?e=p
200 OK 33 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.app~748942c6.0e315a717ce30b07f0b7.chunk.js?e=p
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 0e237fca94e0bf6190acafcd2e73f6a7
5a91140e6f149718a649061ce973c8c0e4af4cd4
57deaf2dc6559db1b2c6bf20d07d8a3ff1c3ded1300abdfac4289fce4e5d0ce5
GET /fulcrum/v4/master/dynamic/mobile.app~748942c6.0e315a717ce30b07f0b7.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdu_QkFbrpTd6jFjQ8hldeyAnj3cAODc-U8axYiKhRCmQH00qZUp3NupRawn_vls-zZ8XCTE2B-aMg-AZ-fSYBm6vQ
x-goog-generation: 1679319458072973
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 33101
content-encoding: gzip
x-goog-hash: crc32c=HeJ/Jg==, md5=DiN/ypTgv2GQrK/NLnP2pw==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 33101
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Mon, 20 Mar 2023 13:49:09 GMT
expires: Mon, 17 Apr 2023 13:49:09 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Mon, 20 Mar 2023 13:37:38 GMT
etag: "0e237fca94e0bf6190acafcd2e73f6a7"
content-type: application/javascript
vary: Origin
age: 330908
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc8f2a5e3-1443-4c66-9b07-bbc789ebd9ab.jpeg
200 OK 8.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc8f2a5e3-1443-4c66-9b07-bbc789ebd9ab.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3d6ed667dad0c17b3f1697f6ad5f1dd2
9eff2b1900bc9788dfbff11fce69cc7c944b1fc1
ec0f7b928c7efd46d2679477acd9f3bf0b335f31b9739c4e925b23bd5cd16a05
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc8f2a5e3-1443-4c66-9b07-bbc789ebd9ab.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8385
x-amzn-requestid: 7b1e47a8-7adb-48d9-9b0e-036305a77957
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: B9xbmGJsoAMF-5A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641562b0-2e4e7a3b14bfce4210def298;Sampled=0
x-amzn-remapped-date: Sat, 18 Mar 2023 07:05:20 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: 61beGZuZOIgOsG91c3VjhfcAEk4jwLQ1wyZ8OufNOLMkPwRSCcHo7Q==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 0bb842bd5868b86440983b936bb0adee.cloudfront.net (CloudFront), 1.1 google
date: Fri, 24 Mar 2023 04:34:28 GMT
age: 18589
etag: "9eff2b1900bc9788dfbff11fce69cc7c944b1fc1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d9f0256-f2a3-48d2-9cbe-230433c09812.jpeg
200 OK 7.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d9f0256-f2a3-48d2-9cbe-230433c09812.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9bb55b1044454d0db2324a4af956cd51
5aa34545aa2274453b301c74a083034273177cbd
fb7fa8b91ff7374ac6be2df05e1e98194f2adf3ce728b02a66323993145975ef
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d9f0256-f2a3-48d2-9cbe-230433c09812.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7405
x-amzn-requestid: 9865b715-ff9b-498d-95b3-c728fd3430be
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CQPt7E46oAMF1Fg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641cc658-78b66faf317a7aaf689de782;Sampled=0
x-amzn-remapped-date: Thu, 23 Mar 2023 21:36:24 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: MOdi4IjE6ooc_bhXhjI2pikpJfBxxg7kS8qHmvDRZD169vLef4FKYw==
via: 1.1 e39f48cc8f516dc1072afdb086c71f32.cloudfront.net (CloudFront), 1.1 331202b5b8aab67acbf389883133f256.cloudfront.net (CloudFront), 1.1 google
date: Thu, 23 Mar 2023 21:42:31 GMT
age: 43306
etag: "5aa34545aa2274453b301c74a083034273177cbd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.app~bead5879.bf5c0dc96a6e5f40a6a5.chunk.js?e=p
200 OK 5.3 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.app~bead5879.bf5c0dc96a6e5f40a6a5.chunk.js?e=p
IP
File type ASCII text, with very long lines (15830)
Hash d3cff5fb13c1906e48a21cd6d6fec497
17f822bb13934ff0e1c3f48388c76d4bbf45385f
b9cb3237707e366d4426307527a8e95b7ba7d1bed41b9d34527fac4552553c79
GET /fulcrum/v4/master/dynamic/mobile.app~bead5879.bf5c0dc96a6e5f40a6a5.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdu5lVHEm-6_rQFaVdmqrWPEsyOZUZBuOjnq4s8QnPFDQdIWxsWUwKbXtSZmQ3_KSBOFr1WokeixKE1X8GDNZEuiqA
x-goog-generation: 1679319457895645
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 5336
content-encoding: gzip
x-goog-hash: crc32c=9yXgoQ==, md5=08/1+xPBkG5IohzW1v7Elw==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 5336
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Mon, 20 Mar 2023 13:49:09 GMT
expires: Mon, 17 Apr 2023 13:49:09 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Mon, 20 Mar 2023 13:37:37 GMT
etag: "d3cff5fb13c1906e48a21cd6d6fec497"
content-type: application/javascript
vary: Origin
age: 330908
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49e3bd59-44bb-4c85-81cb-08614cf98777.jpeg
200 OK 8.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49e3bd59-44bb-4c85-81cb-08614cf98777.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 89cd024b8021bb2873b0b8972c77cb47
9aea167a3ebf62d91e705433f13b9fb0194daad4
454e0b9e6e12f7a8a1a87913fb7f539358bbfdb1371e30abd472c897082c2a38
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49e3bd59-44bb-4c85-81cb-08614cf98777.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8490
x-amzn-requestid: 7444a745-87e0-4424-92fd-630bf7cacc0a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CQP4QFRxoAMF3Yg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641cc69a-112bec36430d78e3733e6e12;Sampled=0
x-amzn-remapped-date: Thu, 23 Mar 2023 21:37:31 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: 7bujxVYzIuSbb0k7QTtODPpARYVNjAExwSJwNlRWNwR1u_oGeDZqow==
via: 1.1 626ad4a6bf529166d2aad94a2957694c.cloudfront.net (CloudFront), 1.1 d90109c5a0c30f43223e0db85921c5c2.cloudfront.net (CloudFront), 1.1 google
date: Thu, 23 Mar 2023 22:13:47 GMT
age: 41430
etag: "9aea167a3ebf62d91e705433f13b9fb0194daad4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.app~29a429d8.a095d48301c87c612de9.chunk.js?e=p
200 OK 10 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.app~29a429d8.a095d48301c87c612de9.chunk.js?e=p
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 11a4b0a4325866f5600b2f6dec35e5bb
0f28eb130ae62d61f6cdf8c83b4d0e4fcdd1aa0c
f536746189c7bb0bb3aefe49ca2310feba47e24770af4e2a819854ca6e2bb168
GET /fulcrum/v4/master/dynamic/mobile.app~29a429d8.a095d48301c87c612de9.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdsJ17o--H0MdwimspArplFiLjmCRpKrHbWi9D60kqSyMxTzyQ2HD2NWE-yFjd7_sd5ai-bkRu06zmycRVVfuL1wnQ
x-goog-generation: 1679319457854933
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 10486
content-encoding: gzip
x-goog-hash: crc32c=9WzLlw==, md5=EaSwpDJYZvVgCy9t7DXluw==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 10486
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Mon, 20 Mar 2023 13:49:09 GMT
expires: Mon, 17 Apr 2023 13:49:09 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Mon, 20 Mar 2023 13:37:37 GMT
etag: "11a4b0a4325866f5600b2f6dec35e5bb"
content-type: application/javascript
vary: Origin
age: 330908
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fced2b6fc-bd10-4ea8-bf1d-03a29da081f6.jpeg
200 OK 8.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fced2b6fc-bd10-4ea8-bf1d-03a29da081f6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 09021529f311448e284f6b65ef322bf9
f9aecb6f69fb068c5b2bb660d21338ab6cff3ae9
2bc6b1fd474101cbbc6100f2afab3973552ff71d3fd73e9970efd6c67e71cd38
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fced2b6fc-bd10-4ea8-bf1d-03a29da081f6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8001
x-amzn-requestid: c128e071-673c-4e31-96a8-049a6eb48660
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CQQjsHlXIAMFX3g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641cc7b0-3efff85e1cdbe08118fe7dce;Sampled=0
x-amzn-remapped-date: Thu, 23 Mar 2023 21:42:08 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: t-lqKBTduo9OZniqXSzzvxHu2XzsQIn0CsboARa7nwcIuHA63Ir0UA==
via: 1.1 288c777a01e22425da9494dad7a69734.cloudfront.net (CloudFront), 1.1 34f8ef0e4c880df0650a814412a26ea6.cloudfront.net (CloudFront), 1.1 google
date: Thu, 23 Mar 2023 22:14:01 GMT
age: 41416
etag: "f9aecb6f69fb068c5b2bb660d21338ab6cff3ae9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.app~493df0b3.3ef8250703f4bedda7c6.chunk.js?e=p
200 OK 29 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.app~493df0b3.3ef8250703f4bedda7c6.chunk.js?e=p
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 94b08fef11c74dafa8a4d19677187a0d
15cfc636cf37f1fdbc35732dec75ceea4d1bc47e
8baff4f90b4cc56bc9e57a98007967ed5e33a71e3df0bd3cf539984d5f680ea9
GET /fulcrum/v4/master/dynamic/mobile.app~493df0b3.3ef8250703f4bedda7c6.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdvqVq0Cn_hNK2PA7nWQFhOYdy5DWS6T5EGsD_dRtjxnlE7xT5XrzHHEwcKCUNtYnpN9I8S_8qv74MckWSkzlZ3L8Q
x-goog-generation: 1679397624204915
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 29188
content-encoding: gzip
x-goog-hash: crc32c=LOW93g==, md5=lLCP7xHHTa+opNGWdxh6DQ==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 29188
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Tue, 21 Mar 2023 11:26:46 GMT
expires: Tue, 18 Apr 2023 11:26:46 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Tue, 21 Mar 2023 11:20:24 GMT
etag: "94b08fef11c74dafa8a4d19677187a0d"
content-type: application/javascript
vary: Origin
age: 253051
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4aa66443-f7a3-4c3f-9601-88479f0d3377.jpeg
200 OK 8.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4aa66443-f7a3-4c3f-9601-88479f0d3377.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 16968f32674c676d865a1a1abc045cba
40cdf5ecb6b5d368e6ffd0c7bc1de3a6d13e70e2
22419b3ebddc3fba458ef919a6241542c93314be1e09c17d0eb0c6575b72f7b6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4aa66443-f7a3-4c3f-9601-88479f0d3377.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8526
x-amzn-requestid: f94c33e6-3139-4242-b558-d48f4c3df59a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CQPu6F6EIAMF3OQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641cc65f-60e85e784b4bbea405990940;Sampled=0
x-amzn-remapped-date: Thu, 23 Mar 2023 21:36:31 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Miss from cloudfront
x-amz-cf-id: N4GMc0IIhJeaRdew2ZNSj3I7a_CLXYLutmgCNPL41PEUfMJdcq1w1Q==
via: 1.1 ee6ea1e4552345de209d26f9ffb35d4a.cloudfront.net (CloudFront), 1.1 4d8620b80ebe37d366388e117039aa8e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 23 Mar 2023 22:37:38 GMT
etag: "40cdf5ecb6b5d368e6ffd0c7bc1de3a6d13e70e2"
content-type: image/jpeg
age: 39999
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.vendors~app~80e93ec1.35cf46730125732d2b96.chunk.js?e=p
200 OK 22 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.vendors~app~80e93ec1.35cf46730125732d2b96.chunk.js?e=p
IP
File type Unicode text, UTF-8 text, with very long lines (29073), with LF, NEL line terminators
Hash a26e858f8405dd5f75a4b505ddab8f4d
2733ba67293abe032d9e55fd4e958669eca77652
fcdcf74338d953612f27c0a6403055c84deee9bb3934151ba0be07104a4e9a2a
GET /fulcrum/v4/master/dynamic/mobile.vendors~app~80e93ec1.35cf46730125732d2b96.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdssA6xVLFH2HIyVKpeLy1ubOvKkzGI0-Rgwon12hCD8bx3gWH1LxIq392A4A6_pZATsALmww9cS9GhPnLilwhOnYg
x-goog-generation: 1679319458217981
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 22129
content-encoding: gzip
x-goog-hash: crc32c=QBfshg==, md5=om6Fj4QF3V91pLUF3auPTQ==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 22129
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Mon, 20 Mar 2023 13:49:09 GMT
expires: Mon, 17 Apr 2023 13:49:09 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Mon, 20 Mar 2023 13:37:38 GMT
etag: "a26e858f8405dd5f75a4b505ddab8f4d"
content-type: application/javascript
vary: Origin
age: 330908
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.vendors~app~91835fe9.09ddead3790fa70c1cfc.chunk.js?e=p
200 OK 7.7 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.vendors~app~91835fe9.09ddead3790fa70c1cfc.chunk.js?e=p
IP
File type ASCII text, with very long lines (25581), with no line terminators
Hash c60ca5be3f9fb98943a4e4c128a333b4
234593de5bab63518cf4256b7d8bd00cd7d0a886
2bdf4468478042fccea4e35abb47b83b0d33babe9a7c42b19fde9cd9970019bb
GET /fulcrum/v4/master/dynamic/mobile.vendors~app~91835fe9.09ddead3790fa70c1cfc.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdvmd3SpN790VSjuBxocgHTRoYInwa5vOWBd2QwVu-EdgCYmHuMsAg6ADbJhmsyxdNGntvPMOHck9edlsgB_vKQn2A
x-goog-generation: 1678110251797275
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 7708
content-encoding: gzip
x-goog-hash: crc32c=sMuFAQ==, md5=xgylvj+fuYlDpOTBKKMztA==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 7708
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Mon, 20 Mar 2023 13:49:09 GMT
expires: Mon, 17 Apr 2023 13:49:09 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Mon, 06 Mar 2023 13:44:11 GMT
etag: "c60ca5be3f9fb98943a4e4c128a333b4"
content-type: application/javascript
vary: Origin
age: 330908
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.DocumentTitle~344174d7.3d36547536b86e624035.chunk.js?e=p
200 OK 1.0 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.DocumentTitle~344174d7.3d36547536b86e624035.chunk.js?e=p
IP
File type ASCII text, with very long lines (1675)
Hash ffe696ae5564fe898d96f91ee9c7ef64
54159c5f87cf8a18e0210c92ef2ce220f34d592d
142f831b8ff180d366e342613194eb5bcee88a4789cc83c028f5da1ba3033090
GET /fulcrum/v4/master/dynamic/mobile.DocumentTitle~344174d7.3d36547536b86e624035.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycduQW3E0rsuZXYzujXyaiIg-bFzcl9HU2Gahm9dWZl8ykUjDIpE_56J-64rjHJ7FoPj_cEktxCXlh_qpScXnbg32JEs7YrOJ
x-goog-generation: 1677830925349888
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 1046
content-encoding: gzip
x-goog-hash: crc32c=rffksg==, md5=/+aWrlVk/omNlvke6cfvZA==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 1046
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Mon, 20 Mar 2023 13:49:30 GMT
expires: Mon, 17 Apr 2023 13:49:30 GMT
cache-control: public, max-age=2419200,no-transform
age: 330887
last-modified: Fri, 03 Mar 2023 08:08:45 GMT
etag: "ffe696ae5564fe898d96f91ee9c7ef64"
content-type: application/javascript
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.FlowChecker~493df0b3.8aa6d1bc734f3e92266d.chunk.js?e=p
200 OK 12 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.FlowChecker~493df0b3.8aa6d1bc734f3e92266d.chunk.js?e=p
IP
File type ASCII text, with very long lines (52572)
Hash b28d033548226cdcd4f8305870299d2e
736b9979acf08aa7da32a61cf66dbea1faa2ccde
d0bb553f8c6cb202dd644123754d5557b466c17c8ac1db13f770885183216b38
GET /fulcrum/v4/master/dynamic/mobile.FlowChecker~493df0b3.8aa6d1bc734f3e92266d.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdtmmUZhELtIqcVSdXtuz2OpJHxBQllhCCXw0WdMu3_zzWX-9n8plJm6U1CtzDhfcVuRrgLwzuI5-tKhunETNRlLow
x-goog-generation: 1679319455641034
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 12493
content-encoding: gzip
x-goog-hash: crc32c=3ZUjLw==, md5=so0DNUgibNzU+DBYcCmdLg==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 12493
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Mon, 20 Mar 2023 13:49:09 GMT
expires: Mon, 17 Apr 2023 13:49:09 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Mon, 20 Mar 2023 13:37:35 GMT
etag: "b28d033548226cdcd4f8305870299d2e"
content-type: application/javascript
vary: Origin
age: 330908
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.vendors~AutoWithdrawalModal~BankID~BankingVerification~BottomBarScreen~CasinoCategory~CasinoSearch~D~de24fdcb.2a4e15ae254de67a2bce.chunk.js?e=p
200 OK 13 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.vendors~AutoWithdrawalModal~BankID~BankingVerification~BottomBarScreen~CasinoCategory~CasinoSearch~D~de24fdcb.2a4e15ae254de67a2bce.chunk.js?e=p
IP
File type ASCII text, with very long lines (46540), with no line terminators
Hash 98bec23958aa5686aa3d05131386de68
0d92c5b82b3a8bf827b1a9df6ec4602806246ab5
32f1bac8f3e2cd93a4cfdeb0754053eda8f332976b614d976f3f3cb886cef7c0
GET /fulcrum/v4/master/dynamic/mobile.vendors~AutoWithdrawalModal~BankID~BankingVerification~BottomBarScreen~CasinoCategory~CasinoSearch~D~de24fdcb.2a4e15ae254de67a2bce.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycduOeHYgs1h4eI9WYXgxifeZ8tEwD26e2HVKbK1b1ubiK853JLa__f_3uMzjUXVCpP8nkdXlvLNZl03l7d1ZCHQP
x-goog-generation: 1678352180055847
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 12832
content-encoding: gzip
x-goog-hash: crc32c=5thwyg==, md5=mL7COViqVoaqPQUTE4beaA==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 12832
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Thu, 09 Mar 2023 09:03:24 GMT
expires: Thu, 06 Apr 2023 09:03:24 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Thu, 09 Mar 2023 08:56:20 GMT
etag: "98bec23958aa5686aa3d05131386de68"
content-type: application/javascript
vary: Origin
age: 1298453
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.ROWBanner~bfe0ed74.0446bb98668232c5d3be.chunk.css?e=p
200 OK 855 B URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.ROWBanner~bfe0ed74.0446bb98668232c5d3be.chunk.css?e=p
IP
File type ASCII text, with very long lines (2056)
Hash 4a16c5f59bea1f27ee21dbcff3c5a4c0
1a5ccf49d4297fe14b0586c5302a0c7666dfd89b
270812d18857fefd0d504acb0e07180ddd0bb6be0760ff6276551565bdde8da2
GET /fulcrum/v4/master/dynamic/mobile.ROWBanner~bfe0ed74.0446bb98668232c5d3be.chunk.css?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdtCr_Mp984x7gnSRUKig-bkyldVVVokxt1zVCPOsJ8maFnhHK6GE0Isi4vNm6GCN5KNNh9TcnTqu23UWqr8urBgdKzUh18J
x-goog-generation: 1675167093709299
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 855
content-encoding: gzip
x-goog-hash: crc32c=GXWvqw==, md5=ShbF9ZvqHyfuIdvP88WkwA==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 855
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Mon, 20 Mar 2023 13:38:48 GMT
expires: Mon, 17 Apr 2023 13:38:48 GMT
cache-control: public, max-age=2419200,no-transform
age: 331529
last-modified: Tue, 31 Jan 2023 12:11:33 GMT
etag: "4a16c5f59bea1f27ee21dbcff3c5a4c0"
content-type: text/css
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.BankID~BankingVerification~DEVerification~Deposit~FlowChecker~GameScreen~KYCCheck~LoginScreen~LostPa~952074d0.668ab8139a75f9daeca6.chunk.js?e=p
200 OK 18 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.BankID~BankingVerification~DEVerification~Deposit~FlowChecker~GameScreen~KYCCheck~LoginScreen~LostPa~952074d0.668ab8139a75f9daeca6.chunk.js?e=p
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 90db37acfd80713224037f6e76214a1e
f50f19353f26e8bd1435dd5f3f37cf65752787a7
acbaced50bba0a020d22b2cad719599df1d1567bbdbd175f7645a88fa1acfbe9
GET /fulcrum/v4/master/dynamic/mobile.BankID~BankingVerification~DEVerification~Deposit~FlowChecker~GameScreen~KYCCheck~LoginScreen~LostPa~952074d0.668ab8139a75f9daeca6.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdtNa6uMcNkD_8R2f6Xj48tTOqjJEfCP19NZjXFnDm1tay6QbGRHGsxuknzSBHZup1fKha9rrdG3JwWwSYrtDPavWw
x-goog-generation: 1679319454836655
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 17474
content-encoding: gzip
x-goog-hash: crc32c=xPpYbQ==, md5=kNs3rP2AcTIkA39udiFKHg==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 17474
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Mon, 20 Mar 2023 13:49:09 GMT
expires: Mon, 17 Apr 2023 13:49:09 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Mon, 20 Mar 2023 13:37:34 GMT
etag: "90db37acfd80713224037f6e76214a1e"
content-type: application/javascript
vary: Origin
age: 330908
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.vendors~AndroidAppScreen~BankID~BonusInfoScreen~BonusTermsScreen~CampaignScreen~CasinoScreen~CommonC~3e8f83d7.63b6466f9924924a7958.chunk.js?e=p
200 OK 4.1 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.vendors~AndroidAppScreen~BankID~BonusInfoScreen~BonusTermsScreen~CampaignScreen~CasinoScreen~CommonC~3e8f83d7.63b6466f9924924a7958.chunk.js?e=p
IP
File type ASCII text, with very long lines (10428), with no line terminators
Hash 034fb7858a5ff59950bed208d714703c
dbdf9db8043cfd589c440a34c9d2f3529357268a
451479595a7b8d04375c3ae655734c7995f9dc4bc934e2ea27c3513f24ca8c0f
GET /fulcrum/v4/master/dynamic/mobile.vendors~AndroidAppScreen~BankID~BonusInfoScreen~BonusTermsScreen~CampaignScreen~CasinoScreen~CommonC~3e8f83d7.63b6466f9924924a7958.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycduRbVvbwPd0NcQVg88RfZZ-tyAkue4dSea2Kg4guqKsgqUaaGHoFlXCSMdS347rFIMuJdwMqnG4sxcW5IaU4FXftHY1CHeB
x-goog-generation: 1678352179906155
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 4149
content-encoding: gzip
x-goog-hash: crc32c=etO6Vw==, md5=A0+3hYpf9ZlQvtII1xRwPA==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 4149
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Sat, 18 Mar 2023 20:13:16 GMT
expires: Sat, 15 Apr 2023 20:13:16 GMT
cache-control: public, max-age=2419200,no-transform
age: 480661
last-modified: Thu, 09 Mar 2023 08:56:19 GMT
etag: "034fb7858a5ff59950bed208d714703c"
content-type: application/javascript
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.AndroidAppScreen~BankID~BlogPostScreen~BlogPostsScreen~BonusInfoScreen~BonusTermsScreen~CampaignList~c348699f.3db54c25f1c72b548e67.chunk.js?e=p
200 OK 18 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.AndroidAppScreen~BankID~BlogPostScreen~BlogPostsScreen~BonusInfoScreen~BonusTermsScreen~CampaignList~c348699f.3db54c25f1c72b548e67.chunk.js?e=p
IP
File type Unicode text, UTF-8 text, with very long lines (65521), with no line terminators
Hash e7a24433e3ed22c7cce5f73ed23a4a62
6005cc31c4b6c238b072c38ba5a28cd0db9520ea
7c248eb47292ebaafe61ab376b3924d76bc26f16c8a07fa0e65c888852fac842
GET /fulcrum/v4/master/dynamic/mobile.AndroidAppScreen~BankID~BlogPostScreen~BlogPostsScreen~BonusInfoScreen~BonusTermsScreen~CampaignList~c348699f.3db54c25f1c72b548e67.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdvqnBXHLwJSCrY4l8xJATl13neqpp-hQ0hEShjzLUoNHHWOgDf41X8lni1dxIsIaRNy4l-JkPDlyQSYZ_TE8ukngJ_VWDiF
x-goog-generation: 1679397623450937
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 18280
content-encoding: gzip
x-goog-hash: crc32c=mhiJwQ==, md5=56JEM+PtIsfM5fc+0jpKYg==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 18280
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Tue, 21 Mar 2023 11:26:46 GMT
expires: Tue, 18 Apr 2023 11:26:46 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Tue, 21 Mar 2023 11:20:23 GMT
etag: "e7a24433e3ed22c7cce5f73ed23a4a62"
content-type: application/javascript
vary: Origin
age: 253051
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.r2m01.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.r2m01.amazontrust.com/
IP
Hash e92de597b27c29f6a02bdde57f7976f0
f0bc3437854fd4df25f8fa7d0f39e758c56fff62
0e4b730d949a89562dcbf42812a88d012b9f01eb8f46b1a24b9a9b87507e6f4b
POST / HTTP/1.1
Host: ocsp.r2m01.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Fri, 24 Mar 2023 09:44:17 GMT
Last-Modified: Fri, 24 Mar 2023 08:47:10 GMT
Server: ECAcc (nya/1C5C)
X-Cache: Miss from cloudfront
Via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 1GcoFi8f23jT1bHug0cxGnGLO4rDaDeX9MUJwfLxcQNIu5Db5G-KXw==
Age: 3427
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.AndroidAppScreen~BankID~BonusInfoScreen~BonusTermsScreen~CampaignScreen~CasinoScreen~CommonContentSc~2f699297.593f8e3dfcf9b212ccf4.chunk.js?e=p
200 OK 6.1 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.AndroidAppScreen~BankID~BonusInfoScreen~BonusTermsScreen~CampaignScreen~CasinoScreen~CommonContentSc~2f699297.593f8e3dfcf9b212ccf4.chunk.js?e=p
IP
File type ASCII text, with very long lines (20694)
Hash 56c51dcdf38601c9f50ebfcbd0f8cd00
ef3ea5ec445feabe6d25a756db1e08254fa38b6c
c771a178b0c2b892d288c3f3a21bb406f555a12d09e04bde023b5ae4c0aaf1ce
GET /fulcrum/v4/master/dynamic/mobile.AndroidAppScreen~BankID~BonusInfoScreen~BonusTermsScreen~CampaignScreen~CasinoScreen~CommonContentSc~2f699297.593f8e3dfcf9b212ccf4.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdsvN-nQQi9oSLb5PX99k66NVwjg1Qrb_T5a7fAcNZwxEwj0OYi8FBO6LxNTIpnqdsjfNmcm2gSXTDickqYz8vkhmA
x-goog-generation: 1679319454718583
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 6131
content-encoding: gzip
x-goog-hash: crc32c=LWYM0w==, md5=VsUdzfOGAcn1Dr/L0PjNAA==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 6131
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Mon, 20 Mar 2023 13:49:09 GMT
expires: Mon, 17 Apr 2023 13:49:09 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Mon, 20 Mar 2023 13:37:34 GMT
etag: "56c51dcdf38601c9f50ebfcbd0f8cd00"
content-type: application/javascript
vary: Origin
age: 330908
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.CasinoCategory~CasinoScreen~index~bfe0ed74.1a857ce452e1e0b19eaf.chunk.js?e=p
200 OK 18 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.CasinoCategory~CasinoScreen~index~bfe0ed74.1a857ce452e1e0b19eaf.chunk.js?e=p
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 3b33bf637d9211a8f99fec0a95a1b7c0
ac7a962319fa441baf425d8d86b63c1d9be276c7
c215393ce86003c78373a5f27cd06e2cb4d29e523ee72c071f446bef281f8edb
GET /fulcrum/v4/master/dynamic/mobile.CasinoCategory~CasinoScreen~index~bfe0ed74.1a857ce452e1e0b19eaf.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdvmSpaTKzeyZHPJfH2jfrVaNmsn-NZ7EPWKIkSxgGaUh1ZGL2rE9HR9cSKdgs4g12QEeFvtRF97A1C2Db7z2kEnBI7MfAfs
x-goog-generation: 1679319455220831
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 18008
content-encoding: gzip
x-goog-hash: crc32c=VQA4Xw==, md5=OzO/Y32SEaj5n+wKlaG3wA==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 18008
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Mon, 20 Mar 2023 13:49:09 GMT
expires: Mon, 17 Apr 2023 13:49:09 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Mon, 20 Mar 2023 13:37:35 GMT
etag: "3b33bf637d9211a8f99fec0a95a1b7c0"
content-type: application/javascript
vary: Origin
age: 330908
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.CasinoCategory~CasinoScreen~bfe0ed74.2ea6bae722b5bac073e3.chunk.js?e=p
200 OK 7.7 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.CasinoCategory~CasinoScreen~bfe0ed74.2ea6bae722b5bac073e3.chunk.js?e=p
IP
File type Unicode text, UTF-8 text, with very long lines (25734)
Hash f5f19f5706c9b29e7210a209249f4527
53f5fc72f32c9fe2e5b013b8cf3fd78650c7df6b
ce702af4dfb1f2aa8f53c339f16c425af07e00e58422e426f0f036da562addb2
GET /fulcrum/v4/master/dynamic/mobile.CasinoCategory~CasinoScreen~bfe0ed74.2ea6bae722b5bac073e3.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdvxhpvQfdMhgg4KO8nG0D9Q-n5vOFQyiWRZUiGCwmyW88InPp03H10VfQXmmhc0m1xSNlE-Ok7CXm8vz8Tl9ur8Ng
x-goog-generation: 1679319455201063
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 7656
content-encoding: gzip
x-goog-hash: crc32c=R59JRQ==, md5=9fGfVwbJsp5yEKIJJJ9FJw==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 7656
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Mon, 20 Mar 2023 13:49:09 GMT
expires: Mon, 17 Apr 2023 13:49:09 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Mon, 20 Mar 2023 13:37:35 GMT
etag: "f5f19f5706c9b29e7210a209249f4527"
content-type: application/javascript
vary: Origin
age: 330908
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.Icons-OPL~6f2a7a41.7b72b6cdb2bf8f5140f8.chunk.js?e=p
200 OK 9.5 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.Icons-OPL~6f2a7a41.7b72b6cdb2bf8f5140f8.chunk.js?e=p
IP
File type ASCII text, with very long lines (30076)
Hash 1156f4fad27d406d46d5b5e3c6331e81
35e633f6e5cb7a10420114376041940dc09cb42c
aaf63bff654d336497a80a2d39cb3cee78127cc8987d6251e3cf42c889475db2
GET /fulcrum/v4/master/dynamic/mobile.Icons-OPL~6f2a7a41.7b72b6cdb2bf8f5140f8.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdtWU9OVjriMVbaAnbvknerPdwyW3I7AuuUfXu_4YF-BH5jo6OCNPxXd_kISwiX8NCu9rAc5FChr7wZ8ueyatYX3gg
x-goog-generation: 1679319455951637
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 9510
content-encoding: gzip
x-goog-hash: crc32c=KGhFig==, md5=EVb0+tJ9QG1G1bXjxjMegQ==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 9510
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Mon, 20 Mar 2023 13:49:09 GMT
expires: Mon, 17 Apr 2023 13:49:09 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Mon, 20 Mar 2023 13:37:35 GMT
etag: "1156f4fad27d406d46d5b5e3c6331e81"
content-type: application/javascript
vary: Origin
age: 330908
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.vendors~app~b60d9e2a.3d2bdf46f651ee8189c8.chunk.js?e=p
200 OK 40 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.vendors~app~b60d9e2a.3d2bdf46f651ee8189c8.chunk.js?e=p
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 062c83a071fb1d1b523a03c23f0f7c57
8deecd3d90cb874fddc422429ffbf73e1e1f7366
eab5050961de1c0d75a036542eba7c1241d7477cdf6125fadb6952521d386148
GET /fulcrum/v4/master/dynamic/mobile.vendors~app~b60d9e2a.3d2bdf46f651ee8189c8.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdtxhsUIr7rZqfiaegYX60KQ6J5apJd6aplhy6IwnwLNHh5hM-FAw1wRIbVX6CCMbtPdVTFH0vauvPVKWe1VdwEUOHBLxZ3V
x-goog-generation: 1678110251970553
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 39936
content-encoding: gzip
x-goog-hash: crc32c=Qbs0EQ==, md5=BiyDoHH7HRtSOgPCPw98Vw==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 39936
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Mon, 20 Mar 2023 13:49:09 GMT
expires: Mon, 17 Apr 2023 13:49:09 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Mon, 06 Mar 2023 13:44:11 GMT
etag: "062c83a071fb1d1b523a03c23f0f7c57"
content-type: application/javascript
vary: Origin
age: 330908
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.vendors~BankID~BankingVerification~DEVerification~Deposit~FlowChecker~GameScreen~KYCCheck~LoginScree~046c31a5.ccdcf2e38deb471471d3.chunk.js?e=p
200 OK 42 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.vendors~BankID~BankingVerification~DEVerification~Deposit~FlowChecker~GameScreen~KYCCheck~LoginScree~046c31a5.ccdcf2e38deb471471d3.chunk.js?e=p
IP
File type Unicode text, UTF-8 text, with very long lines (48219)
Hash b776d9c74541e589aefb8e9ef622eaa9
459da10597470e59b864e8316eb4178f02817dd3
b96d2cee7d94911d9eb8d8532186a847389ed9ac5f7e05728d0bb88dd2980b92
GET /fulcrum/v4/master/dynamic/mobile.vendors~BankID~BankingVerification~DEVerification~Deposit~FlowChecker~GameScreen~KYCCheck~LoginScree~046c31a5.ccdcf2e38deb471471d3.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdsOARJ6WezIq3DW7snlUTQrg4MXS5jZyAZ4N-6WRvq1yaNmSwfOdJlvCJdM36oIqV_2cBW_U-tlslukYWJLhrDqgao_BDK4
x-goog-generation: 1678352180219024
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 41814
content-encoding: gzip
x-goog-hash: crc32c=4t5asw==, md5=t3bZx0VB5Ymu+46e9iLqqQ==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 41814
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Thu, 09 Mar 2023 09:03:24 GMT
expires: Thu, 06 Apr 2023 09:03:24 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Thu, 09 Mar 2023 08:56:20 GMT
etag: "b776d9c74541e589aefb8e9ef622eaa9"
content-type: application/javascript
vary: Origin
age: 1298453
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.FlowChecker~493df0b3.2a66ee60dd6219bafc56.chunk.css?e=p
200 OK 1.7 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.FlowChecker~493df0b3.2a66ee60dd6219bafc56.chunk.css?e=p
IP
File type ASCII text, with very long lines (1298)
Hash 7543b46c3dd3ee59e5532d971f2b5d5f
5d396f145a7e9b9b47fd7802b6d01613ae711f8f
14f434e87de14ce624414e3378b544ae3e4d6fc8ba68eae3623c73dd1c8e2bd6
GET /fulcrum/v4/master/dynamic/mobile.FlowChecker~493df0b3.2a66ee60dd6219bafc56.chunk.css?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdudhmuudtwyHfjnp5JGNZ9invu1-h2cE6gEapgNqVHezAYYCD8K1rB7IU9jrCaF6zvf_sDWemzucwH7O8ktP2Jbnw
x-goog-generation: 1672760598499902
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 1738
content-encoding: gzip
x-goog-hash: crc32c=xhs6+w==, md5=dUO0bD3T7lnlUy2XHytdXw==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 1738
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Thu, 16 Mar 2023 17:42:13 GMT
expires: Thu, 13 Apr 2023 17:42:13 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Tue, 03 Jan 2023 15:43:18 GMT
etag: "7543b46c3dd3ee59e5532d971f2b5d5f"
content-type: text/css
vary: Origin
age: 662524
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.ROWBanner~bfe0ed74.3f713ab51fced2ff5219.chunk.js?e=p
200 OK 1.5 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.ROWBanner~bfe0ed74.3f713ab51fced2ff5219.chunk.js?e=p
IP
File type ASCII text, with very long lines (3281)
Hash bda3ef1475eec4244fb6acb3b9b72ad7
506c57aad7bbfdf453c9790755fc1315b00f1405
9683b31cb8a11f88fa2dbc300564b1af7c9f8ebaf0bc79be5baaa71cfb29293e
GET /fulcrum/v4/master/dynamic/mobile.ROWBanner~bfe0ed74.3f713ab51fced2ff5219.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdvu-ZQhGSJWZh0y-CmWAgFtNGjhZtNsCeZi-7lMiilw7Q7Uf4EqSAXsRvn4q85oLYNnxkrogU1Cm5DMLw2Pumpxng
x-goog-generation: 1679319456678585
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 1504
content-encoding: gzip
x-goog-hash: crc32c=3r+5xw==, md5=vaPvFHXuxCRPtqyzubcq1w==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 1504
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Mon, 20 Mar 2023 13:49:09 GMT
expires: Mon, 17 Apr 2023 13:49:09 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Mon, 20 Mar 2023 13:37:36 GMT
etag: "bda3ef1475eec4244fb6acb3b9b72ad7"
content-type: application/javascript
vary: Origin
age: 330908
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.Snackbar~9765a08b.bbb624b4c6a00e9ac79e.chunk.css?e=p
200 OK 465 B URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.Snackbar~9765a08b.bbb624b4c6a00e9ac79e.chunk.css?e=p
IP
File type ASCII text, with very long lines (631)
Hash 99c084dd92a699e13251da924e9724c9
e005575addfea39ef22d6949f9c3dc92fb859389
20fa74d03ed880ed3615b72143b64547ed3ab72665e256e84b07157556903ec0
GET /fulcrum/v4/master/dynamic/mobile.Snackbar~9765a08b.bbb624b4c6a00e9ac79e.chunk.css?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdsChHb1AYvd66UPoIj4eAQl3XxPxdHJSq7oU5njMVmeMBaCXibaVdpnHsaTV7rFzF_WRCwzmJp0DpCPjyjhlozn
x-goog-generation: 1647331609164951
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 465
content-encoding: gzip
x-goog-hash: crc32c=wV6JEQ==, md5=mcCE3ZKmmeEyUdqSTpckyQ==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 465
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Tue, 07 Mar 2023 14:07:21 GMT
expires: Tue, 04 Apr 2023 14:07:21 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Tue, 15 Mar 2022 08:06:49 GMT
etag: "99c084dd92a699e13251da924e9724c9"
content-type: text/css
vary: Origin
age: 1453016
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.CasinoCategory~CasinoScreen~index~bfe0ed74.0f6e4495cbb73572edbb.chunk.css?e=p
200 OK 5.2 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.CasinoCategory~CasinoScreen~index~bfe0ed74.0f6e4495cbb73572edbb.chunk.css?e=p
IP
File type ASCII text, with very long lines (6231)
Hash 8b9b0ae2fab964d855a9558c1cd838b1
80f8bd1914b4ba0ed608a83dfc003316bcc1656c
40ccb339b7bc4a757ca1e9ec6141655a163616f6b21feac8df67b475282fcf38
GET /fulcrum/v4/master/dynamic/mobile.CasinoCategory~CasinoScreen~index~bfe0ed74.0f6e4495cbb73572edbb.chunk.css?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdscbjWNPxff2l8_oO9FJu8fGg0sHa4ZtPyFC-jF9kBojQPzb0rWdhVGJMCTQZYavUVApi0OH8k-nbmZUZsSXZ69LQ
x-goog-generation: 1677074271617531
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 5245
content-encoding: gzip
x-goog-hash: crc32c=Z2j94A==, md5=i5sK4vq5ZNhVqVWMHNg4sQ==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 5245
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Wed, 22 Mar 2023 14:04:16 GMT
expires: Wed, 19 Apr 2023 14:04:16 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Wed, 22 Feb 2023 13:57:51 GMT
etag: "8b9b0ae2fab964d855a9558c1cd838b1"
content-type: text/css
vary: Origin
age: 157201
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.BottomBarScreen~493df0b3.e958e2aa63ca71e9fd66.chunk.css?e=p
200 OK 3.6 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.BottomBarScreen~493df0b3.e958e2aa63ca71e9fd66.chunk.css?e=p
IP
File type ASCII text, with very long lines (3276)
Hash 0c23bfbb885e4854ad3495f33980c757
b42253a3bd0daaaf2883b5cbb869293901cdeb5d
af1ccdaecd8a72d508427585a33868d92ded31dcd3bc157ae2bcabfbab66e352
GET /fulcrum/v4/master/dynamic/mobile.BottomBarScreen~493df0b3.e958e2aa63ca71e9fd66.chunk.css?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdv2tp2w6B9gnKZOTT5bLAbJAiS5kcIfwrqkb_Afnh2Qwg8X4R2BQjyPIfuZtFrWX1h7oXm0q578xg69SfpGIkE9CK0SWO5g
x-goog-generation: 1675848827338713
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 3576
content-encoding: gzip
x-goog-hash: crc32c=IDop1w==, md5=DCO/u4heSFStNJXzOYDHVw==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 3576
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Mon, 20 Mar 2023 13:46:27 GMT
expires: Mon, 17 Apr 2023 13:46:27 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Wed, 08 Feb 2023 09:33:47 GMT
etag: "0c23bfbb885e4854ad3495f33980c757"
content-type: text/css
vary: Origin
age: 331070
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.AndroidAppScreen~BankID~BlogPostScreen~BlogPostsScreen~BonusInfoScreen~BonusTermsScreen~CampaignList~c348699f.2917c0a34e0ebcd5a444.chunk.css?e=p
200 OK 1.8 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.AndroidAppScreen~BankID~BlogPostScreen~BlogPostsScreen~BonusInfoScreen~BonusTermsScreen~CampaignList~c348699f.2917c0a34e0ebcd5a444.chunk.css?e=p
IP
File type ASCII text, with very long lines (5542)
Hash b7e0b86d61599fdf56470fd8286ae263
4097e6f41066046323350280f0c771c98cc56ed0
01299f8d985176c8043fea42559777c49fc8f68e2eced618be59e4700e451196
GET /fulcrum/v4/master/dynamic/mobile.AndroidAppScreen~BankID~BlogPostScreen~BlogPostsScreen~BonusInfoScreen~BonusTermsScreen~CampaignList~c348699f.2917c0a34e0ebcd5a444.chunk.css?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdskWHcHFPLwoXXcvGhj4G5XHNu0G27oq5k4PpQLw_jlVwbzt1UXx5nLn9dkp8qfqvSY1THszlULhNdqAfygVgJVlDZ0GfL7
x-goog-generation: 1679397624653306
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 1758
content-encoding: gzip
x-goog-hash: crc32c=eRr6Rw==, md5=t+C4bWFZn99WRw/YKGriYw==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 1758
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Tue, 21 Mar 2023 11:26:46 GMT
expires: Tue, 18 Apr 2023 11:26:46 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Tue, 21 Mar 2023 11:20:24 GMT
etag: "b7e0b86d61599fdf56470fd8286ae263"
content-type: text/css
vary: Origin
age: 253051
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash dd5380daefecc523858637dcbdda1cf3
0ec5910f57d8ab84179a5d0687e6b16d2cacfb1a
e58977b0dceb06edf2a7c752aa433c71b3bca571e814a7a83bbddc75d4428c0f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 24 Mar 2023 09:44:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.app~1152e2e7.522d0956fb70f2081280.chunk.js?e=p
200 OK 22 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.app~1152e2e7.522d0956fb70f2081280.chunk.js?e=p
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 2a61fb8cb5defd5997432a82b801fa66
30fed9790034f0da07b5699dd06997f73d213cd9
0baa29edc77b785064b6e64f1bbf7b88c6e0565c8e73beaae4391b808ddc102d
GET /fulcrum/v4/master/dynamic/mobile.app~1152e2e7.522d0956fb70f2081280.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdsdTDUu4DbwMOIfJnn8_zou95KBUpZR4hVyn8qnv7XDdoTS1WLQlcaJHj5SWby4dYXUWMk-zBFdJK8IioF8a3ejUwKK2uOC
x-goog-generation: 1679319457876990
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 21960
content-encoding: gzip
x-goog-hash: crc32c=m8uhRw==, md5=KmH7jLXe/VmXQyqCuAH6Zg==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 21960
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Mon, 20 Mar 2023 13:49:09 GMT
expires: Mon, 17 Apr 2023 13:49:09 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Mon, 20 Mar 2023 13:37:37 GMT
etag: "2a61fb8cb5defd5997432a82b801fa66"
content-type: application/javascript
vary: Origin
age: 330908
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.app~6ae16c75.fd00b08ecfd070a1f5f7.chunk.js?e=p
200 OK 18 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.app~6ae16c75.fd00b08ecfd070a1f5f7.chunk.js?e=p
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 48971eca241f478cdf90cf81a207b89e
d4030a176b874adfa776d88adaaa03fe6394c77e
6cd2f34c0eace28dbc3844a3f9660bf35daf5e2e2e5cf84eac9b7398d7d32ca6
GET /fulcrum/v4/master/dynamic/mobile.app~6ae16c75.fd00b08ecfd070a1f5f7.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdtQIe1e9zQCAveNo-klxirei1c6SCcCypGwyj-tZyRtsOGNkj0iwIEV2561oSVhA2bvUrNkke_J2LeIm_cplbju_g
x-goog-generation: 1679319458086402
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 18367
content-encoding: gzip
x-goog-hash: crc32c=Aik7ww==, md5=SJceyiQfR4zfkM+Boge4ng==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 18367
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Mon, 20 Mar 2023 13:49:09 GMT
expires: Mon, 17 Apr 2023 13:49:09 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Mon, 20 Mar 2023 13:37:38 GMT
etag: "48971eca241f478cdf90cf81a207b89e"
content-type: application/javascript
vary: Origin
age: 330908
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.app~65914263.95eea1a7b870a67baa6e.chunk.js?e=p
200 OK 11 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.app~65914263.95eea1a7b870a67baa6e.chunk.js?e=p
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash b34fbb781d5db5e701cd634df484ed43
cc261d193da5d80f39289c23392eb6de1a36a161
a7d780fe977146c0a8903745cfa48fcd1661cbe5eda79b73973f60f7d075a832
GET /fulcrum/v4/master/dynamic/mobile.app~65914263.95eea1a7b870a67baa6e.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdvrTmiGmAJ4XKDMUZ4aeNUSG-ZXiUo1K6mBKpclMWyU_9Ek6t8YpWlz6MC5gxmnnrLavKICc4M2MREsIYIT9Krv0WwRAjU9
x-goog-generation: 1679319457943663
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 10741
content-encoding: gzip
x-goog-hash: crc32c=O4TtKA==, md5=s0+7eB1dtecBzWNN9ITtQw==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 10741
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Mon, 20 Mar 2023 13:49:09 GMT
expires: Mon, 17 Apr 2023 13:49:09 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Mon, 20 Mar 2023 13:37:37 GMT
etag: "b34fbb781d5db5e701cd634df484ed43"
content-type: application/javascript
vary: Origin
age: 330908
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.ZendeskHelpCenter~9c9801fa.2445b73ae99d4e8d0b1a.chunk.js?e=p
200 OK 6.8 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.ZendeskHelpCenter~9c9801fa.2445b73ae99d4e8d0b1a.chunk.js?e=p
IP
File type ASCII text, with very long lines (22670)
Hash 70755c7cd4a7d863f3acdaf92438673b
a12d1dff9528a1cbf1c6005979d1272edf306bed
51aae0b2cee90506082ae2bd0d96e7e4c5fe3b681e9ce4ec1284c4e76ec8eb51
GET /fulcrum/v4/master/dynamic/mobile.ZendeskHelpCenter~9c9801fa.2445b73ae99d4e8d0b1a.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdt8atZmYoEyi2N46yR8TzGUioDTnI6Mm1NkHP2OGXzgliw4IXsA6ZdZ6ofyGhv9eHoZ_Lkdbxyp-fPMKaqK4tkHUg
x-goog-generation: 1679319457690423
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 6767
content-encoding: gzip
x-goog-hash: crc32c=8MzcdQ==, md5=cHVcfNSn2GPzrNr5JDhnOw==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 6767
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Mon, 20 Mar 2023 13:49:09 GMT
expires: Mon, 17 Apr 2023 13:49:09 GMT
cache-control: public, max-age=2419200,no-transform
age: 330908
last-modified: Mon, 20 Mar 2023 13:37:37 GMT
etag: "70755c7cd4a7d863f3acdaf92438673b"
content-type: application/javascript
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.AuthorizationBar~faa51968.fa954b1b3aa0b64761c0.chunk.js?e=p
200 OK 5.9 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.AuthorizationBar~faa51968.fa954b1b3aa0b64761c0.chunk.js?e=p
IP
File type ASCII text, with very long lines (26510)
Hash 78d6e5bf25326ea814973269c4bd673a
539c0a77d6326f1ea8a60e8d4834bd8a28586d7f
9d071a55154540b448882ec07f2a45c72c0907c7ab1e3b8e3b58c5b7dd52bf1a
GET /fulcrum/v4/master/dynamic/mobile.AuthorizationBar~faa51968.fa954b1b3aa0b64761c0.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdv83ARbL4GpWSTGqPL10pUQq6RYSHyDIeWki8rwwsE7U9VKfu4c8Mq7YITaPw3t-yZrI-HJA252715P9gToEvjrSNGpOBHM
x-goog-generation: 1678352175993116
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 5872
content-encoding: gzip
x-goog-hash: crc32c=DGSuhg==, md5=eNblvyUybqgUlzJpxL1nOg==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 5872
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Thu, 09 Mar 2023 09:03:27 GMT
expires: Thu, 06 Apr 2023 09:03:27 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Thu, 09 Mar 2023 08:56:16 GMT
etag: "78d6e5bf25326ea814973269c4bd673a"
content-type: application/javascript
vary: Origin
age: 1298450
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.DepositLogos~ef512817.1c9a48f7fd4319f61e6b.chunk.js?e=p
200 OK 638 B URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.DepositLogos~ef512817.1c9a48f7fd4319f61e6b.chunk.js?e=p
IP
File type ASCII text, with very long lines (911)
Hash 45478458113ac32761b88caeddc7cb8d
8eb121eff04a6169693372320d5baf72679716b7
a0074bf1855e4facce4883ced495d26b2a0bb26f10f6568f07171d1e4af2bbbe
GET /fulcrum/v4/master/dynamic/mobile.DepositLogos~ef512817.1c9a48f7fd4319f61e6b.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdvvCViS6zmGSEWtih8I9tCDeLHCQy9Z-gVrcpgdframTRdanVcJBFvd6vz-bbaNyHGDc3dirTNJ1dLB05YPzeeX_w
x-goog-generation: 1679319455383703
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 638
content-encoding: gzip
x-goog-hash: crc32c=1RBMvQ==, md5=RUeEWBE6wydhuIyu3cfLjQ==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 638
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Mon, 20 Mar 2023 13:50:08 GMT
expires: Mon, 17 Apr 2023 13:50:08 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Mon, 20 Mar 2023 13:37:35 GMT
etag: "45478458113ac32761b88caeddc7cb8d"
content-type: application/javascript
vary: Origin
age: 330849
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.vendors~CasinoCategory~CasinoScreen~9b1fde68.a9e7c39286349e3c8b9b.chunk.js?e=p
200 OK 6.4 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.vendors~CasinoCategory~CasinoScreen~9b1fde68.a9e7c39286349e3c8b9b.chunk.js?e=p
IP
File type ASCII text, with very long lines (13972)
Hash b790aa79e68a58b70d18df8a45aac11f
400f3aa04a0eb1f26403f41dba65de81591a5d75
0408b3c96867519c8b23e4539bf3c6b68c0c87271db3ed8f0b2c8752e4078791
GET /fulcrum/v4/master/dynamic/mobile.vendors~CasinoCategory~CasinoScreen~9b1fde68.a9e7c39286349e3c8b9b.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdsjDDWzVrO376SH14_QdyiHzWWRVO6PiaiWnMU9Cg7UAelV6AGaWLUgAHQ5YEAF0rLmOcbeqiJa79a8oMGIh6B_
x-goog-generation: 1678352180101387
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 6393
content-encoding: gzip
x-goog-hash: crc32c=YhSHiA==, md5=t5CqeeaKWLcNGN+KRarBHw==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 6393
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Thu, 09 Mar 2023 09:03:27 GMT
expires: Thu, 06 Apr 2023 09:03:27 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Thu, 09 Mar 2023 08:56:20 GMT
etag: "b790aa79e68a58b70d18df8a45aac11f"
content-type: application/javascript
vary: Origin
age: 1298450
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 20 Mar 2023 14:12:20 GMT
expires: Tue, 19 Mar 2024 14:12:20 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
age: 329517
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.AuthorizationBar~faa51968.96d7b9660bac924e9e28.chunk.css?e=p
200 OK 825 B URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.AuthorizationBar~faa51968.96d7b9660bac924e9e28.chunk.css?e=p
IP
File type ASCII text, with very long lines (862)
Hash fd587e74839b1c5b1633eb0dc71cdbb3
4112fb16194b143a25e6944fa47c324db0efc7c0
05181e87f506d22c56e19cb8bacf26d7c5bea740cc1b5024a098a311d2a7f9b4
GET /fulcrum/v4/master/dynamic/mobile.AuthorizationBar~faa51968.96d7b9660bac924e9e28.chunk.css?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdtLZzz0EJ4t0ahoGm2WMT6UczZwIZfzCO8DrBnwdptjlN4j8p9siK_L2u0652QOZzeWsllMVX-xroXT-chLlmLw
x-goog-generation: 1669118795773812
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 825
content-encoding: gzip
x-goog-hash: crc32c=4EUfsA==, md5=/Vh+dIObHFsWM+sNxxzbsw==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 825
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Tue, 07 Mar 2023 15:21:28 GMT
expires: Tue, 04 Apr 2023 15:21:28 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Tue, 22 Nov 2022 12:06:35 GMT
etag: "fd587e74839b1c5b1633eb0dc71cdbb3"
content-type: text/css
vary: Origin
age: 1448569
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.BottomBarScreen~493df0b3.b516e392cabbdf0455e3.chunk.js?e=p
200 OK 20 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.BottomBarScreen~493df0b3.b516e392cabbdf0455e3.chunk.js?e=p
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 32e13469f323cbef23e9980f8abc1cac
f7bc5271088224dba598abfe5215ba2983a6806f
7ffddb5004b23d6e6f38d577a2e3b30a85d05ec3c9e291ce8b93179fe919136b
GET /fulcrum/v4/master/dynamic/mobile.BottomBarScreen~493df0b3.b516e392cabbdf0455e3.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdtxo0KDE8NCMRrGUlEFGA0qRpnPBV107Zbyw3hqapNvm0Ix9Wmu-zq9lDkvtGMU9uYh2_ZoX-snwbYIMQtUa4k89Q
x-goog-generation: 1679319455203269
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 19538
content-encoding: gzip
x-goog-hash: crc32c=HuXZOQ==, md5=MuE0afMjy+8j6ZgPirwcrA==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 19538
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Mon, 20 Mar 2023 13:49:09 GMT
expires: Mon, 17 Apr 2023 13:49:09 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Mon, 20 Mar 2023 13:37:35 GMT
etag: "32e13469f323cbef23e9980f8abc1cac"
content-type: application/javascript
vary: Origin
age: 330908
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.app~1152e2e7.5cd7900ef7305c3b577a.chunk.css?e=p
200 OK 1.8 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.app~1152e2e7.5cd7900ef7305c3b577a.chunk.css?e=p
IP
File type ASCII text, with very long lines (2702)
Hash f1039f1cbc13b117771efc6feb6e319d
1a88ecd24b55c5a67e2db6618c97aa39c6b27544
43a95af276c4707c9ad293286a1ff29444c6a5cd42c63c05032ced072c1d1a0a
GET /fulcrum/v4/master/dynamic/mobile.app~1152e2e7.5cd7900ef7305c3b577a.chunk.css?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycdtr4496QoEdf4yfJEmeRyI4P_mKdm9doSMI5eCy6wAXop7MkZ4jRTHnuLYVMK16IiFKFnD9pTEuFDP0EvtonURsAQ
x-goog-generation: 1678963675432023
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 1810
content-encoding: gzip
x-goog-hash: crc32c=nVa5Eg==, md5=8QOfHLwTsRd3Hvxv624xnQ==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 1810
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Thu, 16 Mar 2023 11:15:04 GMT
expires: Thu, 13 Apr 2023 11:15:04 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Thu, 16 Mar 2023 10:47:55 GMT
etag: "f1039f1cbc13b117771efc6feb6e319d"
content-type: text/css
vary: Origin
age: 685753
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.app~521067a8.89f65db9ae423b9197b1.chunk.css?e=p
200 OK 283 B URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.app~521067a8.89f65db9ae423b9197b1.chunk.css?e=p
IP
Hash 327122b5334eeb33cd79c886dd49beb3
e58dfacbb2db54d6652889e2dad8ce19f2d2fe2f
9df65c43857dea61bc65232b1e3fd20a82475f77563d3999ac0a9b9ed6d90f38
GET /fulcrum/v4/master/dynamic/mobile.app~521067a8.89f65db9ae423b9197b1.chunk.css?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycdvMj6fVRiStNQlTVB1X5wZ56K8eEBQ_-Vv3DFVBjsWn8KThvLIj4fABxJWnq4I9ai2FeV8uZnxHX03anooBskE_Qou9b_gv
x-goog-generation: 1663591116440358
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 283
content-encoding: gzip
x-goog-hash: crc32c=uA/axQ==, md5=MnEitTNO6zPNeciG3Um+sw==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 283
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Tue, 07 Mar 2023 13:50:10 GMT
expires: Tue, 04 Apr 2023 13:50:10 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Mon, 19 Sep 2022 12:38:36 GMT
etag: "327122b5334eeb33cd79c886dd49beb3"
content-type: text/css
vary: Origin
age: 1454047
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.app~bfe0ed74.f5afd94bdac610591557.chunk.css?e=p
200 OK 585 B URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.app~bfe0ed74.f5afd94bdac610591557.chunk.css?e=p
IP
File type ASCII text, with very long lines (1286)
Hash 27c4a2615df59ed93991f6b354671dd6
0e0d88a402dc646af5a4c199145ac8a422d2d448
a98cad2dd71c709b26875e33ae112f368fac45aa666664ba7c94fc2e7a2b9df5
GET /fulcrum/v4/master/dynamic/mobile.app~bfe0ed74.f5afd94bdac610591557.chunk.css?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycduH0Ti26_JSHxyNFpY9L0KKG6fqs1cbEV_b2ysFon_NQj8Z-JtrW7SD49dNM1K5IxdVvwfyKpflNwKKWZaCOvbfDxoyftAk
x-goog-generation: 1666691230328646
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 585
content-encoding: gzip
x-goog-hash: crc32c=K8QcbA==, md5=J8SiYV31ntk5kfazVGcd1g==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 585
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Tue, 07 Mar 2023 13:54:34 GMT
expires: Tue, 04 Apr 2023 13:54:34 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Tue, 25 Oct 2022 09:47:10 GMT
etag: "27c4a2615df59ed93991f6b354671dd6"
content-type: text/css
vary: Origin
age: 1453783
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.app~9675856e.dd984e891c8a0e00c45b.chunk.css?e=p
200 OK 2.1 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.app~9675856e.dd984e891c8a0e00c45b.chunk.css?e=p
IP
File type ASCII text, with very long lines (2605)
Hash 8bf6d4e9191247f34f49910ff4bce36c
083cc5e954c1cadc64847b769796b4f783194a8d
a26135400ddfc9dcb572f5cee188ef7cd5faf61bbb851a25b74738bc12cc0477
GET /fulcrum/v4/master/dynamic/mobile.app~9675856e.dd984e891c8a0e00c45b.chunk.css?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycdvjztx5afy95G1t-gEDqbGL5scnYEWqgvepjmo1bPrNuS5bss1yKdXBSVUYRU5O5NFrzwU3LJvX37ZMnLHo0_RuUA
x-goog-generation: 1670506834487828
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 2102
content-encoding: gzip
x-goog-hash: crc32c=xSTuIQ==, md5=i/bU6RkSR/NPSZEP9LzjbA==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 2102
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Mon, 20 Mar 2023 14:07:24 GMT
expires: Mon, 17 Apr 2023 14:07:24 GMT
cache-control: public, max-age=2419200,no-transform
age: 329813
last-modified: Thu, 08 Dec 2022 13:40:34 GMT
etag: "8bf6d4e9191247f34f49910ff4bce36c"
content-type: text/css
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.app~748942c6.64ddd5236a515f7652b0.chunk.css?e=p
200 OK 1.7 kB URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.app~748942c6.64ddd5236a515f7652b0.chunk.css?e=p
IP
File type ASCII text, with very long lines (1772)
Hash 07ccdcb3ce4c5f2862e0e60b739520d9
e90961c07533bab39457aa62e6fe8decf671469c
6ad0f911505b8af66ecf58b2db7aba96c5c5b63f911eeb1707cdde9fc392d2ce
GET /fulcrum/v4/master/dynamic/mobile.app~748942c6.64ddd5236a515f7652b0.chunk.css?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycdsTHIE5aXITLF4EHKe5mLLiecWlcReKri-4glYIp7EwDGu7ZHyfAmWaa48SC9cEHakDjroyw1n3Hs3-YKoGTlalCTDEOIP9
x-goog-generation: 1677830929722049
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 1661
content-encoding: gzip
x-goog-hash: crc32c=kXUuBA==, md5=B8zcs85MXyhi4OYLc5Ug2Q==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 1661
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Wed, 22 Mar 2023 22:29:07 GMT
expires: Wed, 19 Apr 2023 22:29:07 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Fri, 03 Mar 2023 08:08:49 GMT
etag: "07ccdcb3ce4c5f2862e0e60b739520d9"
content-type: text/css
vary: Origin
age: 126910
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.CasinoCategory~CasinoScreen~bfe0ed74.6588734231c0db63fedc.chunk.css?e=p
200 OK 471 B URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.CasinoCategory~CasinoScreen~bfe0ed74.6588734231c0db63fedc.chunk.css?e=p
IP
Hash dd5380daefecc523858637dcbdda1cf3
0ec5910f57d8ab84179a5d0687e6b16d2cacfb1a
e58977b0dceb06edf2a7c752aa433c71b3bca571e814a7a83bbddc75d4428c0f
GET /fulcrum/v4/master/dynamic/mobile.CasinoCategory~CasinoScreen~bfe0ed74.6588734231c0db63fedc.chunk.css?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdtRw06tyGTDNTkoalcmYsipg9ypAx-vy1ZD3-cGsfCJ0feLaNSxHmcwETpRUnJ0Y9g3UuBy13d5bngb69IJYl0s2CirClEQ
x-goog-generation: 1675777180828778
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 2142
content-encoding: gzip
x-goog-hash: crc32c=A9Rvmg==, md5=Vsr7zW4UaWzw3prB9dnCEA==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 2142
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Tue, 07 Mar 2023 14:31:47 GMT
expires: Tue, 04 Apr 2023 14:31:47 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Tue, 07 Feb 2023 13:39:40 GMT
etag: "56cafbcd6e14696cf0de9ac1f5d9c210"
content-type: text/css
vary: Origin
age: 1451550
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
372fc806295528bc5fbf-83c638ca2a0b52c62d893afeac24561e.ssl.cf3.rackcdn.com/Generic_HalfHeader_600x117_D86343_MM_052022.jpg
200 OK 73 kB URL HTTP/1.1 372fc806295528bc5fbf-83c638ca2a0b52c62d893afeac24561e.ssl.cf3.rackcdn.com/Generic_HalfHeader_600x117_D86343_MM_052022.jpg
IP
File type JPEG image data, progressive, precision 8, 600x117, components 3\012- data
Hash de1f1cd99653a801fd50db8b282f8066
318747ed8b21a923bc8e16ccdd8c9fb8a119c1ab
153a26d32316cb2e39e2e34434443afd53f4c99a2b59bc3914603df8824d1d9c
GET /Generic_HalfHeader_600x117_D86343_MM_052022.jpg HTTP/1.1
Host: 372fc806295528bc5fbf-83c638ca2a0b52c62d893afeac24561e.ssl.cf3.rackcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Last-Modified: Tue, 27 Sep 2022 08:24:00 GMT
ETag: de1f1cd99653a801fd50db8b282f8066
X-Trans-Id: tx9d4ab1476a8f4d04a3531-00641980c2lon3
Content-Length: 72558
Accept-Ranges: bytes
X-Timestamp: 1664267039.98832
Content-Type: image/jpeg
Cache-Control: public, max-age=83521
Expires: Sat, 25 Mar 2023 08:56:18 GMT
Date: Fri, 24 Mar 2023 09:44:17 GMT
Connection: keep-alive
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15920, version 1.0\012- data
Hash 3a44e06eb954b96aa043227f3534189d
23cef6993ddb2b2979e8e7647fc3763694e2ba7d
b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e
GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 22 Mar 2023 18:05:11 GMT
expires: Thu, 21 Mar 2024 18:05:11 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:45 GMT
content-type: font/woff2
age: 142746
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/robotoslab/v24/BngbUXZYTXPIvIBgJJSb6s3BzlRRfKOFbvjoa4Omb2Rj.woff2
200 OK 13 kB URL HTTP/2 fonts.gstatic.com/s/robotoslab/v24/BngbUXZYTXPIvIBgJJSb6s3BzlRRfKOFbvjoa4Omb2Rj.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 12820, version 1.0\012- data
Hash 5c02543fd50416d417c4fde1410008d5
82803a4554e56c2247c2ce50e9a0a3c77b5e0730
084c044e1a353a41a04f9c923b418d582f8e8d3a1996053c8e4912a57d158799
GET /s/robotoslab/v24/BngbUXZYTXPIvIBgJJSb6s3BzlRRfKOFbvjoa4Omb2Rj.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 12820
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 22 Mar 2023 18:05:11 GMT
expires: Thu, 21 Mar 2024 18:05:11 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 11 Jul 2022 19:15:07 GMT
content-type: font/woff2
age: 142746
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 22 Mar 2023 18:05:11 GMT
expires: Thu, 21 Mar 2024 18:05:11 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
age: 142746
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15752, version 1.0\012- data
Hash b20371a6daf29d4a1f2e85dbbf40fb20
0355a01c1ccb45cb728e7e07c41c8ebf456f70bb
7e262106f82cc52663e403f5b73795bbeab9ca0630c33c03579354fbcd4fae1e
GET /s/roboto/v30/KFOlCnqEu92Fr1MmYUtfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15752
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 22 Mar 2023 18:05:11 GMT
expires: Thu, 21 Mar 2024 18:05:11 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:56 GMT
content-type: font/woff2
age: 142747
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.leovegas.com/_Incapsula_Resource?SWKMTFSR=1&e=0.019412496792212575
200 OK 1 B URL HTTP/2 www.leovegas.com/_Incapsula_Resource?SWKMTFSR=1&e=0.019412496792212575
IP
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
GET /_Incapsula_Resource?SWKMTFSR=1&e=0.019412496792212575 HTTP/1.1
Host: www.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.leovegas.com/en-no/?btag=667909_2632B01AD09A4321A7E14C7458431DFF&c=w1o8260c7a2dnpgn21uncig4&pid=3747044&bid=14983
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a3747044%2c%22BID%22%3a14983%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1679651056107)%5c%2f%22%2c%22CookieTag%22%3a%22149833747044451240919C2023324944%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%222861626257%7c1%22%7d%5d; leo-essentials=%7B%22cid%22%3A%2227dff399-a733-4fab-93d1-5a6120b795fa%22%7D; visid_incap_846569=DXjdECU4SLq8a14LzWFWhe9wHWQAAAAAQUIPAAAAAADejACT5oXvHiuqjsPhar1O; nlbi_846569=9UVTZ2oxnUYFcFQiTJV9qQAAAAAL+ziJ9s5gHTP7VoF/uMkL; incap_ses_720_846569=zn7xB0q17XR3KsVDGPX9Ce9wHWQAAAAAELRSLEKVBeZ7DRlICzWMdw==; leobtag=667909_2632B01AD09A4321A7E14C7458431DFF; leonrpid=3747044; leonrbid=14983; leonrmeta=[{"value":"w1o8260c7a2dnpgn21uncig4","key":"c"}]; ___utmvc=op2MmKK9bpPWvzAM9tnhAVKqFPWvIEYgGdFXncaqKrDPR5+fVHbjfyjdCsQtwPUWGbVbB9Q1eDE9D0KirGUkCMn/vKwVaVxqx/Vj2UKQ61eOn7a3AqxQxGsWq1qhL87zm0ujk9BIYIc1K0HSKN6SAz//07ElqWFqi01+HFAMKCUX9BWXhwn/veQEtkhkfBifD9PtnlM+K5w3rOM/7Q3nQavcrTMneMTxVL+JhyfhLj1Sx8WghQO/+KQAtHEPAW6AtrSpdex7TJxBOX0wlfBYZQdHMWeB0UsPI1r6TKt7Xdy1KMzogcTTJuIiLXVE3ONfbtELt98TnYb1gwkSD28g3QbzvIziVyMkcH890js2lMG9L7lJaL75Xu61IetAERGlfDZ5F61LAcHpiC8XozZDNlQApzwp6A0D3SZCmyrl3hZYj8hezoRlUZ/K0V8qtdlbtVwBRRs6yHjRZmDYtTh5aBCwPAaP6Sx1UlOCJkTVmRwy0WMb+LQIiBWDqawVzPMmRbxDlLY8B5cghzOBMUEu90jrWf+aVh2bMMNWKQaGUj4X+avi9hQyluwB4nV2iDTdn65qhIS82Tz+jR1WCC8l+zMd5qAfzHoYKZ+7qiXkKxZUpqCEhw7nJefMvuLS1BZKEt1yv5G8LPlpmN0qQCvwSi0TsUYVrTA/qGEcheFtk3YIjNbzCJWd7CALEsyikods7bmqTatZDp6amDIR5ZnUmBjBJrS0sYHpFaVq7RwbIeLR+t2JVfb9HjVWbnrapTFMuEZl+HRlwCEzzzLZP11wFG42acxYZT6ZO6srZ5EyS82gKLv7iTfBcAczhN/hrV2tkaD4xsz3E9PSpgO2QrZSbVhfoAZtB8DjI/oYTOxF4Wxxuq7IyQ48ZwuTS4NnuPBGyXGQfBxEKaeExpWHNm0jzQuDXFTS0L31BXIExcQ2i/8D1qRtyUuf16Mtp5jgWNVeBYA8YFPQDVgZHhJwoDxeLCPi7WpPUyOGO/W6jwRkUrX3CAAp1EU8Bvyi4DCPKDE3JGAbUp8iRzS0v20JfAxKaNw3rgHl+yqscN2NP+JsdMzFbWLhJWDLLJ9HHCtgZ+epPfum5XULOOsX5jUR44Yis1vcyJynz7J6aoAxyqoLTHLBMszuYmgADZMy9/KkNAQVus7rDgDyEJzSR6B2LXu1J7VYkPGz6IIcMC4zEh6Zx3fys5coAS7UYB8GHh5ubMPKhkDD/M6IyJkxe7hZ6xudP9RcGBVtcQh4jjn0RfiyvDIaUYNFQzfzOMo7OPapcAvJ2u+v4Y922jjX62XFFvX4AZsM8ZnIl8vEZBm/cp214+IZY6FqCPOGFVm04FtxPgjigCEQXytX+iFq5AWNb7Wx7GOUNU0wZgxqgoQTLM6nYgcrgJkmqEHUacpn16cLghRb/pnRN/GGnwj9irYJjE4O09X2krGp3aimILAE+5CfwZy/ldVMnLG0tXbHRcXxBDd0mzw4ptaOx90iAoAYZj83dqwSoZp6USpBumOE3X1V62dD+3OmYcdO6NvFBQzoM3j0Um0vhZNkwuzvBuAns+rL3c0YtMw8w4wJJbjNUOjO185nzGRVH4yNGEQEIv1BKaqKWuCRVgAwjpRLwGN1uwtrIuLbJXZxT5AsNPG9Z9hTGRP0V85E/U+rjxd2pqNgioGJK7NSmOL3mB2z7aXTffwQ8QD/C10J65iQxbzFUefipSOnWdUx6X2PDAEE7+J9vpYY++vIQFZ/xO0A4MlLMb1PJyrTNiM0r0ZzNCtQEIsBOOfDZYbo0xDef7iRNKXWQZcsKKodZJ0vd7O0onZsX05iqhc/uX4gQfjlN6a/E6qXPuHnh5qbJE4QU+qNNmlxNmDVSFfPwIkWEL800EmlAnuzVPaDLfZ+7KfQOWzSFcPCsF4VwLuO7OIlBe/KWTjLarD3Hku+vK+w8npDx+uMimxhkMCwUlJy+RuDm+uboByXjACV9zxxr8LwrTaq84p5dUo12abwFdXIZzNNkxnXjjnRCERRRoqM8M6XIkpkBWtVnLF4iB+mKbr+cNyDuEtKLDZ6msZTXrFZ2x8UoSD/FsOPJuKLJcmaZmtvrXl8cQPny1Di9gj88hRSJgsBG9GXsvpKFVKMPprKc4HjjVbxRXQQS/GYE6K1fcjn3fUDRVDN2yoXo3AZSrTOAguORI7sAVz4B5M1zNUgZUBgFM7g1ntzVtVuYOd9xHlUsZ+DqqCKmI+iAx8ZAlxniNJu+nf6q3PFTw6meel7U7tffkVvSvt5v36VM0igxNQ76j+ds2aH72PTg+aoOQMULPB1RZe3St8OzmpdjtQ9uPZpgdaBJ3t/PpowhBkyDPvuPWsHRqCcqdjZZMw6IMFCo3+akg9dw8mXINERG4pKx9lTAiKuBMcUmxccp/T8pXoRbYym+1wX23kPKkR7mfwkw8+2X02soGgW8LC9CVzEwQREhNYIR9Oe4vbLNORdS/M/9lH9dpHK6x9YKU9Vly4x088W0Pmmh+76zkMxgsJJwu9CUVBVr/Dh2IwNsTypHx0LusoaobeI/u9b8NqCSYu1KxZTgaJZmhCRYZPLBzdqMBqMl4RqLzIMK/53xxjFlFEhroOtGzd1bEpQU5x1JfBrWvHp1M+DuZ4lU4QyAte6bjxannhmVJCf1IbfI0398gIDaxWe+i89MgkR9JyJGHzCpt0yn5VMh8o8IScr5Sl+OatPwx+3F/uptBgHAZzJpyxkaWdlc3Q9MTg1MjExLHM9YTU4ZDg4ODI5Mjk2NWNhNTljOWI5OTg5ODU5OTZhOWY5YTcyODA3OTgzNzM4OGE4ODNhMTgxYTE2ODgxOTZhYmE2NzU5ZDdlODBhZjcyNmY=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: no-cache, no-store
content-type: text/plain
x-robots-tag: noindex
content-length: 1
strict-transport-security: max-age=63072000
X-Firefox-Spdy: h2
www.leovegas.com/static/fulcrum/favicon.ico
200 OK 6.8 kB URL HTTP/2 www.leovegas.com/static/fulcrum/favicon.ico
IP
File type MS Windows icon resource - 1 icon, -106x-106, 32 bits/pixel\012- data
Hash 53438ecc6f90cf975c2cedaa7d07ba34
dfd5818a6e5dab0db9f6f2205323d191cea86be0
bba3673649c31b21e3f29faba5db5865d5f38d6e13a78cba4f50a251266d0147
GET /static/fulcrum/favicon.ico HTTP/1.1
Host: www.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.leovegas.com/en-no/?btag=667909_2632B01AD09A4321A7E14C7458431DFF&c=w1o8260c7a2dnpgn21uncig4&pid=3747044&bid=14983
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a3747044%2c%22BID%22%3a14983%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1679651056107)%5c%2f%22%2c%22CookieTag%22%3a%22149833747044451240919C2023324944%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%222861626257%7c1%22%7d%5d; leo-essentials=%7B%22cid%22%3A%2227dff399-a733-4fab-93d1-5a6120b795fa%22%7D; visid_incap_846569=DXjdECU4SLq8a14LzWFWhe9wHWQAAAAAQUIPAAAAAADejACT5oXvHiuqjsPhar1O; nlbi_846569=9UVTZ2oxnUYFcFQiTJV9qQAAAAAL+ziJ9s5gHTP7VoF/uMkL; incap_ses_720_846569=zn7xB0q17XR3KsVDGPX9Ce9wHWQAAAAAELRSLEKVBeZ7DRlICzWMdw==; leobtag=667909_2632B01AD09A4321A7E14C7458431DFF; leonrpid=3747044; leonrbid=14983; leonrmeta=[{"value":"w1o8260c7a2dnpgn21uncig4","key":"c"}]; ___utmvc=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
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
etag: "7543516c"
last-modified: Wed, 22 Mar 2023 10:06:27 GMT
content-type: image/vnd.microsoft.icon
content-length: 6767
content-encoding: gzip
cache-control: max-age=3593, public
expires: Fri, 24 Mar 2023 10:44:10 GMT
date: Fri, 24 Mar 2023 09:44:17 GMT
set-cookie: ___utmvc=a; Max-Age=0; path=/; expires=Mon, 20 Mar 2023 22:52:01 GMT
strict-transport-security: max-age=63072000
x-cdn: Imperva
x-iinfo: 5-8964098-0 0CNN RT(1679651055403 2154) q(0 -1 -1 -1) r(0 -1)
X-Firefox-Spdy: h2
www.leovegas.com/static/fulcrum/apple-touch-icon.png
200 OK 21 kB URL HTTP/2 www.leovegas.com/static/fulcrum/apple-touch-icon.png
IP
File type PNG image data, 192 x 192, 8-bit colormap, non-interlaced\012- data
Hash f9a35c0fdecb2ee483d7badb5e03dd5b
6b9e2d23f188021f914eb2f58ce74d4753afd996
5137e8fe669f23cfe46ec272e9621157210a5e4b3f985520d22ed65f37ad3e0b
GET /static/fulcrum/apple-touch-icon.png HTTP/1.1
Host: www.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.leovegas.com/en-no/?btag=667909_2632B01AD09A4321A7E14C7458431DFF&c=w1o8260c7a2dnpgn21uncig4&pid=3747044&bid=14983
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a3747044%2c%22BID%22%3a14983%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1679651056107)%5c%2f%22%2c%22CookieTag%22%3a%22149833747044451240919C2023324944%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%222861626257%7c1%22%7d%5d; leo-essentials=%7B%22cid%22%3A%2227dff399-a733-4fab-93d1-5a6120b795fa%22%7D; visid_incap_846569=DXjdECU4SLq8a14LzWFWhe9wHWQAAAAAQUIPAAAAAADejACT5oXvHiuqjsPhar1O; nlbi_846569=9UVTZ2oxnUYFcFQiTJV9qQAAAAAL+ziJ9s5gHTP7VoF/uMkL; incap_ses_720_846569=zn7xB0q17XR3KsVDGPX9Ce9wHWQAAAAAELRSLEKVBeZ7DRlICzWMdw==; leobtag=667909_2632B01AD09A4321A7E14C7458431DFF; leonrpid=3747044; leonrbid=14983; leonrmeta=[{"value":"w1o8260c7a2dnpgn21uncig4","key":"c"}]; ___utmvc=op2MmKK9bpPWvzAM9tnhAVKqFPWvIEYgGdFXncaqKrDPR5+fVHbjfyjdCsQtwPUWGbVbB9Q1eDE9D0KirGUkCMn/vKwVaVxqx/Vj2UKQ61eOn7a3AqxQxGsWq1qhL87zm0ujk9BIYIc1K0HSKN6SAz//07ElqWFqi01+HFAMKCUX9BWXhwn/veQEtkhkfBifD9PtnlM+K5w3rOM/7Q3nQavcrTMneMTxVL+JhyfhLj1Sx8WghQO/+KQAtHEPAW6AtrSpdex7TJxBOX0wlfBYZQdHMWeB0UsPI1r6TKt7Xdy1KMzogcTTJuIiLXVE3ONfbtELt98TnYb1gwkSD28g3QbzvIziVyMkcH890js2lMG9L7lJaL75Xu61IetAERGlfDZ5F61LAcHpiC8XozZDNlQApzwp6A0D3SZCmyrl3hZYj8hezoRlUZ/K0V8qtdlbtVwBRRs6yHjRZmDYtTh5aBCwPAaP6Sx1UlOCJkTVmRwy0WMb+LQIiBWDqawVzPMmRbxDlLY8B5cghzOBMUEu90jrWf+aVh2bMMNWKQaGUj4X+avi9hQyluwB4nV2iDTdn65qhIS82Tz+jR1WCC8l+zMd5qAfzHoYKZ+7qiXkKxZUpqCEhw7nJefMvuLS1BZKEt1yv5G8LPlpmN0qQCvwSi0TsUYVrTA/qGEcheFtk3YIjNbzCJWd7CALEsyikods7bmqTatZDp6amDIR5ZnUmBjBJrS0sYHpFaVq7RwbIeLR+t2JVfb9HjVWbnrapTFMuEZl+HRlwCEzzzLZP11wFG42acxYZT6ZO6srZ5EyS82gKLv7iTfBcAczhN/hrV2tkaD4xsz3E9PSpgO2QrZSbVhfoAZtB8DjI/oYTOxF4Wxxuq7IyQ48ZwuTS4NnuPBGyXGQfBxEKaeExpWHNm0jzQuDXFTS0L31BXIExcQ2i/8D1qRtyUuf16Mtp5jgWNVeBYA8YFPQDVgZHhJwoDxeLCPi7WpPUyOGO/W6jwRkUrX3CAAp1EU8Bvyi4DCPKDE3JGAbUp8iRzS0v20JfAxKaNw3rgHl+yqscN2NP+JsdMzFbWLhJWDLLJ9HHCtgZ+epPfum5XULOOsX5jUR44Yis1vcyJynz7J6aoAxyqoLTHLBMszuYmgADZMy9/KkNAQVus7rDgDyEJzSR6B2LXu1J7VYkPGz6IIcMC4zEh6Zx3fys5coAS7UYB8GHh5ubMPKhkDD/M6IyJkxe7hZ6xudP9RcGBVtcQh4jjn0RfiyvDIaUYNFQzfzOMo7OPapcAvJ2u+v4Y922jjX62XFFvX4AZsM8ZnIl8vEZBm/cp214+IZY6FqCPOGFVm04FtxPgjigCEQXytX+iFq5AWNb7Wx7GOUNU0wZgxqgoQTLM6nYgcrgJkmqEHUacpn16cLghRb/pnRN/GGnwj9irYJjE4O09X2krGp3aimILAE+5CfwZy/ldVMnLG0tXbHRcXxBDd0mzw4ptaOx90iAoAYZj83dqwSoZp6USpBumOE3X1V62dD+3OmYcdO6NvFBQzoM3j0Um0vhZNkwuzvBuAns+rL3c0YtMw8w4wJJbjNUOjO185nzGRVH4yNGEQEIv1BKaqKWuCRVgAwjpRLwGN1uwtrIuLbJXZxT5AsNPG9Z9hTGRP0V85E/U+rjxd2pqNgioGJK7NSmOL3mB2z7aXTffwQ8QD/C10J65iQxbzFUefipSOnWdUx6X2PDAEE7+J9vpYY++vIQFZ/xO0A4MlLMb1PJyrTNiM0r0ZzNCtQEIsBOOfDZYbo0xDef7iRNKXWQZcsKKodZJ0vd7O0onZsX05iqhc/uX4gQfjlN6a/E6qXPuHnh5qbJE4QU+qNNmlxNmDVSFfPwIkWEL800EmlAnuzVPaDLfZ+7KfQOWzSFcPCsF4VwLuO7OIlBe/KWTjLarD3Hku+vK+w8npDx+uMimxhkMCwUlJy+RuDm+uboByXjACV9zxxr8LwrTaq84p5dUo12abwFdXIZzNNkxnXjjnRCERRRoqM8M6XIkpkBWtVnLF4iB+mKbr+cNyDuEtKLDZ6msZTXrFZ2x8UoSD/FsOPJuKLJcmaZmtvrXl8cQPny1Di9gj88hRSJgsBG9GXsvpKFVKMPprKc4HjjVbxRXQQS/GYE6K1fcjn3fUDRVDN2yoXo3AZSrTOAguORI7sAVz4B5M1zNUgZUBgFM7g1ntzVtVuYOd9xHlUsZ+DqqCKmI+iAx8ZAlxniNJu+nf6q3PFTw6meel7U7tffkVvSvt5v36VM0igxNQ76j+ds2aH72PTg+aoOQMULPB1RZe3St8OzmpdjtQ9uPZpgdaBJ3t/PpowhBkyDPvuPWsHRqCcqdjZZMw6IMFCo3+akg9dw8mXINERG4pKx9lTAiKuBMcUmxccp/T8pXoRbYym+1wX23kPKkR7mfwkw8+2X02soGgW8LC9CVzEwQREhNYIR9Oe4vbLNORdS/M/9lH9dpHK6x9YKU9Vly4x088W0Pmmh+76zkMxgsJJwu9CUVBVr/Dh2IwNsTypHx0LusoaobeI/u9b8NqCSYu1KxZTgaJZmhCRYZPLBzdqMBqMl4RqLzIMK/53xxjFlFEhroOtGzd1bEpQU5x1JfBrWvHp1M+DuZ4lU4QyAte6bjxannhmVJCf1IbfI0398gIDaxWe+i89MgkR9JyJGHzCpt0yn5VMh8o8IScr5Sl+OatPwx+3F/uptBgHAZzJpyxkaWdlc3Q9MTg1MjExLHM9YTU4ZDg4ODI5Mjk2NWNhNTljOWI5OTg5ODU5OTZhOWY5YTcyODA3OTgzNzM4OGE4ODNhMTgxYTE2ODgxOTZhYmE2NzU5ZDdlODBhZjcyNmY=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
etag: "87ff2fdf"
last-modified: Wed, 22 Mar 2023 10:06:27 GMT
content-type: image/png
content-length: 21096
content-encoding: gzip
cache-control: max-age=2702, public
expires: Fri, 24 Mar 2023 10:29:19 GMT
date: Fri, 24 Mar 2023 09:44:17 GMT
set-cookie: ___utmvc=a; Max-Age=0; path=/; expires=Mon, 20 Mar 2023 22:52:01 GMT
strict-transport-security: max-age=63072000
x-cdn: Imperva
x-iinfo: 5-8964098-0 0CNN RT(1679651055403 2160) q(0 -1 -1 -1) r(0 -1)
X-Firefox-Spdy: h2
www.leovegas.com/stream?relay
101 Switching Protocols 0 B URL HTTP/1.1 www.leovegas.com/stream?relay
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /stream?relay HTTP/1.1
Host: www.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://www.leovegas.com
Sec-WebSocket-Protocol: graphql-ws
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: s95XbpyGWQncUmCe22DmJw==
Connection: keep-alive, Upgrade
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a3747044%2c%22BID%22%3a14983%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1679651056107)%5c%2f%22%2c%22CookieTag%22%3a%22149833747044451240919C2023324944%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%222861626257%7c1%22%7d%5d; leo-essentials=%7B%22cid%22%3A%2227dff399-a733-4fab-93d1-5a6120b795fa%22%7D; visid_incap_846569=DXjdECU4SLq8a14LzWFWhe9wHWQAAAAAQUIPAAAAAADejACT5oXvHiuqjsPhar1O; nlbi_846569=9UVTZ2oxnUYFcFQiTJV9qQAAAAAL+ziJ9s5gHTP7VoF/uMkL; incap_ses_720_846569=zn7xB0q17XR3KsVDGPX9Ce9wHWQAAAAAELRSLEKVBeZ7DRlICzWMdw==; leobtag=667909_2632B01AD09A4321A7E14C7458431DFF; leonrpid=3747044; leonrbid=14983; leonrmeta=[{"value":"w1o8260c7a2dnpgn21uncig4","key":"c"}]; ___utmvc=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
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Server: nginx
Date: Fri, 24 Mar 2023 09:44:18 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: nW8jrZOUFZYGCCuqAhxwCBwMIy0=
Sec-WebSocket-Protocol: graphql-ws
Via: 1.1 google
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
Set-Cookie: ___utmvc=a; Max-Age=0; path=/; expires=Mon, 20 Mar 2023 22:52:01 GMT
Strict-Transport-Security: max-age=63072000
X-CDN: Imperva
X-Iinfo: 12-5787527-5786631 PNNy RT(1679651057551 14) q(0 0 0 -1) r(1 1) U11
ocsp.digicert.com/
200 OK 471 B IP
Hash 6393b79bf0ac1e95524b8542e7360644
46f9ac2866a3446f37842ee8d183c8a274723222
2e62d45108204c52df0b7a645a4d944c165875bd3232c98dc2da21b659a67afd
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4452
Cache-Control: max-age=123503
Content-Type: application/ocsp-response
Date: Fri, 24 Mar 2023 09:44:18 GMT
Etag: "641c9efd-1d7"
Expires: Sat, 25 Mar 2023 20:02:41 GMT
Last-Modified: Thu, 23 Mar 2023 18:48:29 GMT
Server: ECAcc (ska/F757)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash 6393b79bf0ac1e95524b8542e7360644
46f9ac2866a3446f37842ee8d183c8a274723222
2e62d45108204c52df0b7a645a4d944c165875bd3232c98dc2da21b659a67afd
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4454
Cache-Control: max-age=123505
Content-Type: application/ocsp-response
Date: Fri, 24 Mar 2023 09:44:18 GMT
Etag: "641c9efd-1d7"
Expires: Sat, 25 Mar 2023 20:02:43 GMT
Last-Modified: Thu, 23 Mar 2023 18:48:29 GMT
Server: ECAcc (ska/F756)
X-Cache: HIT
Content-Length: 471
track.adform.net/serving/cookie/?adfaction=getjs;adfcookname=uid
200 OK 180 B URL HTTP/2 track.adform.net/serving/cookie/?adfaction=getjs;adfcookname=uid
IP
File type ASCII text, with no line terminators
Hash 2255005e68a8880fe8846b0ce53772ad
36ba75259314950e35818b9d871b02b09dab56ce
28df773657a07be0bbc8ab226c401438dacd6a9bc8662f38f0a69252c0089fc5
GET /serving/cookie/?adfaction=getjs;adfcookname=uid HTTP/1.1
Host: track.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 24 Mar 2023 09:44:18 GMT
content-type: text/javascript; charset=utf-8
content-length: 180
cache-control: no-cache, no-store, must-revalidate, no-transform
pragma: no-cache
content-encoding: gzip
expires: -1
vary: Accept-Encoding
access-control-allow-origin: *
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
app.launchdarkly.com/sdk/goals/5b9627a39619fd15611a390c
200 OK 23 B URL HTTP/2 app.launchdarkly.com/sdk/goals/5b9627a39619fd15611a390c
IP
Hash f0d79988b7772c003d04a28bd7417a62
58423a999eec2997bcfffb247e9ecd3dfd0abf44
30e6fa98fb48c2b132824d1ac5e2243c0be9e9082ff32598d34d7687ca7f6c7f
OPTIONS /sdk/goals/5b9627a39619fd15611a390c HTTP/1.1
Host: app.launchdarkly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-launchdarkly-user-agent
Referer: https://www.leovegas.com/
Origin: https://www.leovegas.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-headers: Accept,Content-Type,Content-Length,Accept-Encoding,Authorization,X-Requested-With,X-LD-Private,X-LD-AccountId,X-LD-EnvId,X-LD-PrjId,X-LaunchDarkly-Event-Schema,X-LaunchDarkly-User-Agent,X-LaunchDarkly-Wrapper,LD-API-Version,X-LaunchDarkly-Tags
access-control-allow-methods: GET, OPTIONS, HEAD
access-control-allow-origin: *
access-control-max-age: 3600
allow: GET, OPTIONS, HEAD
content-encoding: gzip
ld-region: us-east-1
strict-transport-security: max-age=31536000
accept-ranges: bytes
date: Fri, 24 Mar 2023 09:44:18 GMT
via: 1.1 varnish
x-served-by: cache-bma1682-BMA
x-cache: HIT
x-cache-hits: 25
x-timer: S1679651059.728274,VS0,VE0
vary: Accept-Encoding
age: 0
content-length: 23
X-Firefox-Spdy: h2
app.launchdarkly.com/sdk/goals/5b9627a39619fd15611a390c
200 OK 26 B URL HTTP/2 app.launchdarkly.com/sdk/goals/5b9627a39619fd15611a390c
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 4895d253dd2c6acdb944f2bd7579cc89
9befc050756e1ec3b4b99e2579c0b86132f642a3
261feae8b4d06341989808887b33303dfb972c7566e389dbd8e1c1ea9b096a13
GET /sdk/goals/5b9627a39619fd15611a390c HTTP/1.1
Host: app.launchdarkly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-LaunchDarkly-User-Agent: JSClient/2.24.2
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
access-control-allow-headers: Accept,Content-Type,Content-Length,Accept-Encoding,Authorization,X-Requested-With,X-LD-Private,X-LD-AccountId,X-LD-EnvId,X-LD-PrjId,X-LaunchDarkly-Event-Schema,X-LaunchDarkly-User-Agent,X-LaunchDarkly-Wrapper,LD-API-Version,X-LaunchDarkly-Tags
access-control-allow-methods: GET, OPTIONS, HEAD
access-control-allow-origin: *
access-control-max-age: 300
cache-control: max-age=0
content-encoding: gzip
content-md5: d751713988987e9331980363e24189ce
etag: "d751713988987e9331980363e24189ce"
ld-region: us-east-1
strict-transport-security: max-age=31536000
accept-ranges: bytes
date: Fri, 24 Mar 2023 09:44:18 GMT
via: 1.1 varnish
x-served-by: cache-bma1682-BMA
x-cache: HIT
x-cache-hits: 10
x-timer: S1679651059.738089,VS0,VE0
vary: Accept-Encoding
age: 0
content-length: 26
X-Firefox-Spdy: h2
app.launchdarkly.com/sdk/evalx/5b9627a39619fd15611a390c/users/eyJrZXkiOiIyN2RmZjM5OS1hNzMzLTRmYWItOTNkMS01YTYxMjBiNzk1ZmEiLCJjb3VudHJ5IjoiTk8iLCJhbm9ueW1vdXMiOnRydWUsImN1c3RvbSI6eyJjbGllbnRJZCI6ImFub255bW91cyIsImNvbnRleHRDb3VudHJ5IjoiTk8iLCJjb250ZXh0TGljZW5zZSI6Ik1HQSIsImN1cnJlbmN5IjoiIiwibGFuZ3VhZ2UiOiJFTiIsImxpY2Vuc2UiOiJNR0EiLCJtYXJrZXQiOiJOTyIsInBsYXRmb3JtVHlwZSI6Im1vYmlsZSIsInBsYXllcklkIjoiIiwicmVhbEtleSI6IjI3ZGZmMzk5LWE3MzMtNGZhYi05M2QxLTVhNjEyMGI3OTVmYSIsInVuaXF1ZUlkIjoiMjdkZmYzOTktYTczMy00ZmFiLTkzZDEtNWE2MTIwYjc5NWZhIn19?withReasons=true
200 OK 23 B URL HTTP/2 app.launchdarkly.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?withReasons=true
IP
Hash f0d79988b7772c003d04a28bd7417a62
58423a999eec2997bcfffb247e9ecd3dfd0abf44
30e6fa98fb48c2b132824d1ac5e2243c0be9e9082ff32598d34d7687ca7f6c7f
OPTIONS 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?withReasons=true HTTP/1.1
Host: app.launchdarkly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-launchdarkly-user-agent
Referer: https://www.leovegas.com/
Origin: https://www.leovegas.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-headers: Accept,Content-Type,Content-Length,Accept-Encoding,Authorization,X-Requested-With,X-LD-Private,X-LD-AccountId,X-LD-EnvId,X-LD-PrjId,X-LaunchDarkly-Event-Schema,X-LaunchDarkly-User-Agent,X-LaunchDarkly-Wrapper,LD-API-Version,X-LaunchDarkly-Tags
access-control-allow-methods: GET, OPTIONS, HEAD
access-control-allow-origin: *
access-control-max-age: 3600
allow: GET, OPTIONS, HEAD
content-encoding: gzip
ld-region: us-east-1
strict-transport-security: max-age=31536000
accept-ranges: bytes
date: Fri, 24 Mar 2023 09:44:18 GMT
via: 1.1 varnish
x-served-by: cache-bma1682-BMA
x-cache: HIT
x-cache-hits: 143
x-timer: S1679651059.880569,VS0,VE0
vary: Accept-Encoding
age: 0
content-length: 23
X-Firefox-Spdy: h2
app.launchdarkly.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?withReasons=true
200 OK 23 B URL HTTP/2 app.launchdarkly.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?withReasons=true
IP
Hash f0d79988b7772c003d04a28bd7417a62
58423a999eec2997bcfffb247e9ecd3dfd0abf44
30e6fa98fb48c2b132824d1ac5e2243c0be9e9082ff32598d34d7687ca7f6c7f
OPTIONS /sdk/evalx/5b9627a39619fd15611a390c/users/eyJrZXkiOiIyN2RmZjM5OS1hNzMzLTRmYWItOTNkMS01YTYxMjBiNzk1ZmEiLCJjb3VudHJ5IjoiTk8iLCJhbm9ueW1vdXMiOnRydWUsImN1c3RvbSI6eyJjbGllbnRJZCI6ImFub255bW91cyIsImNvbnRleHRDb3VudHJ5IjoiTk8iLCJjb250ZXh0TGljZW5zZSI6Ik1HQSIsImN1cnJlbmN5IjoiRVVSIiwibGFuZ3VhZ2UiOiJFTiIsImxpY2Vuc2UiOiJNR0EiLCJtYXJrZXQiOiJOTyIsInBsYXRmb3JtVHlwZSI6Im1vYmlsZSIsInBsYXllcklkIjoiIiwicmVhbEtleSI6IjI3ZGZmMzk5LWE3MzMtNGZhYi05M2QxLTVhNjEyMGI3OTVmYSIsInVuaXF1ZUlkIjoiMjdkZmYzOTktYTczMy00ZmFiLTkzZDEtNWE2MTIwYjc5NWZhIn19?withReasons=true HTTP/1.1
Host: app.launchdarkly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-launchdarkly-user-agent
Referer: https://www.leovegas.com/
Origin: https://www.leovegas.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-headers: Accept,Content-Type,Content-Length,Accept-Encoding,Authorization,X-Requested-With,X-LD-Private,X-LD-AccountId,X-LD-EnvId,X-LD-PrjId,X-LaunchDarkly-Event-Schema,X-LaunchDarkly-User-Agent,X-LaunchDarkly-Wrapper,LD-API-Version,X-LaunchDarkly-Tags
access-control-allow-methods: GET, OPTIONS, HEAD
access-control-allow-origin: *
access-control-max-age: 3600
allow: GET, OPTIONS, HEAD
content-encoding: gzip
ld-region: us-east-1
strict-transport-security: max-age=31536000
accept-ranges: bytes
date: Fri, 24 Mar 2023 09:44:18 GMT
via: 1.1 varnish
x-served-by: cache-bma1682-BMA
x-cache: HIT
x-cache-hits: 144
x-timer: S1679651059.887568,VS0,VE0
vary: Accept-Encoding
age: 0
content-length: 23
X-Firefox-Spdy: h2
app.launchdarkly.com/sdk/evalx/5b9627a39619fd15611a390c/users/eyJrZXkiOiIyN2RmZjM5OS1hNzMzLTRmYWItOTNkMS01YTYxMjBiNzk1ZmEiLCJjb3VudHJ5IjoiTk8iLCJhbm9ueW1vdXMiOnRydWUsImN1c3RvbSI6eyJjbGllbnRJZCI6ImFub255bW91cyIsImNvbnRleHRDb3VudHJ5IjoiTk8iLCJjb250ZXh0TGljZW5zZSI6Ik1HQSIsImN1cnJlbmN5IjoiIiwibGFuZ3VhZ2UiOiJFTiIsImxpY2Vuc2UiOiJNR0EiLCJtYXJrZXQiOiJOTyIsInBsYXRmb3JtVHlwZSI6Im1vYmlsZSIsInBsYXllcklkIjoiIiwicmVhbEtleSI6IjI3ZGZmMzk5LWE3MzMtNGZhYi05M2QxLTVhNjEyMGI3OTVmYSIsInVuaXF1ZUlkIjoiMjdkZmYzOTktYTczMy00ZmFiLTkzZDEtNWE2MTIwYjc5NWZhIn19?withReasons=true
200 OK 3.7 kB URL HTTP/2 app.launchdarkly.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?withReasons=true
IP
File type JSON data\012- , ASCII text, with very long lines (24939), with no line terminators
Hash 0852d4b3ba81f7b2101e409a54d15644
2e9ad0b27af4cb58d3e30df3e058db15609897c1
d6a275aa48efbd76dab16e5e93bc9e6367e4d2c577b3c502bd3e6a93f88fdf15
GET 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?withReasons=true HTTP/1.1
Host: app.launchdarkly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-LaunchDarkly-User-Agent: JSClient/2.24.2
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
cache-control: max-age=0
etag: "5504dbb"
access-control-allow-origin: *
access-control-max-age: 3600
access-control-allow-methods: OPTIONS, GET
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization, X-Requested-With, X-LD-Private, X-LD-AccountId, X-LD-EnvId, X-LD-PrjId, X-LaunchDarkly-Event-Schema, X-LaunchDarkly-User-Agent, X-LaunchDarkly-Wrapper, Ld-Api-Version
content-encoding: gzip
accept-ranges: bytes
date: Fri, 24 Mar 2023 09:44:18 GMT
via: 1.1 varnish
x-served-by: cache-bma1644-BMA, cache-bma1682-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1679651059.891689,VS0,VE55
vary: Authorization, Accept-Encoding
age: 0
content-length: 3665
X-Firefox-Spdy: h2
app.launchdarkly.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?withReasons=true
200 OK 3.7 kB URL HTTP/2 app.launchdarkly.com/sdk/evalx/5b9627a39619fd15611a390c/users/eyJrZXkiOiIyN2RmZjM5OS1hNzMzLTRmYWItOTNkMS01YTYxMjBiNzk1ZmEiLCJjb3VudHJ5IjoiTk8iLCJhbm9ueW1vdXMiOnRydWUsImN1c3RvbSI6eyJjbGllbnRJZCI6ImFub255bW91cyIsImNvbnRleHRDb3VudHJ5IjoiTk8iLCJjb250ZXh0TGljZW5zZSI6Ik1HQSIsImN1cnJlbmN5IjoiRVVSIiwibGFuZ3VhZ2UiOiJFTiIsImxpY2Vuc2UiOiJNR0EiLCJtYXJrZXQiOiJOTyIsInBsYXRmb3JtVHlwZSI6Im1vYmlsZSIsInBsYXllcklkIjoiIiwicmVhbEtleSI6IjI3ZGZmMzk5LWE3MzMtNGZhYi05M2QxLTVhNjEyMGI3OTVmYSIsInVuaXF1ZUlkIjoiMjdkZmYzOTktYTczMy00ZmFiLTkzZDEtNWE2MTIwYjc5NWZhIn19?withReasons=true
IP
File type JSON data\012- , ASCII text, with very long lines (24939), with no line terminators
Hash 0852d4b3ba81f7b2101e409a54d15644
2e9ad0b27af4cb58d3e30df3e058db15609897c1
d6a275aa48efbd76dab16e5e93bc9e6367e4d2c577b3c502bd3e6a93f88fdf15
GET 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?withReasons=true HTTP/1.1
Host: app.launchdarkly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-LaunchDarkly-User-Agent: JSClient/2.24.2
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
cache-control: max-age=0
etag: "5504dbb"
access-control-allow-origin: *
access-control-max-age: 3600
access-control-allow-methods: OPTIONS, GET
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization, X-Requested-With, X-LD-Private, X-LD-AccountId, X-LD-EnvId, X-LD-PrjId, X-LaunchDarkly-Event-Schema, X-LaunchDarkly-User-Agent, X-LaunchDarkly-Wrapper, Ld-Api-Version
content-encoding: gzip
accept-ranges: bytes
date: Fri, 24 Mar 2023 09:44:18 GMT
via: 1.1 varnish
x-served-by: cache-bma1628-BMA, cache-bma1682-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1679651059.901549,VS0,VE52
vary: Authorization, Accept-Encoding
age: 0
content-length: 3665
X-Firefox-Spdy: h2
www.leovegas.com/getMeta
200 OK 5.4 kB IP
Hash 0918183e651575acbfa62ad3a16076e7
38db72c7e161e1afafc106ed0f45430f8b20fe8f
7008e6f473ec85d06449f5c7f2c0aa3f03c14c60899a3e46a0c312934e06e95f
GET /getMeta HTTP/1.1
Host: www.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.leovegas.com/en-no/?btag=667909_2632B01AD09A4321A7E14C7458431DFF&c=w1o8260c7a2dnpgn21uncig4&pid=3747044&bid=14983
Connection: keep-alive
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a3747044%2c%22BID%22%3a14983%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1679651056107)%5c%2f%22%2c%22CookieTag%22%3a%22149833747044451240919C2023324944%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%222861626257%7c1%22%7d%5d; leo-essentials=%7B%22cid%22%3A%2227dff399-a733-4fab-93d1-5a6120b795fa%22%7D; visid_incap_846569=DXjdECU4SLq8a14LzWFWhe9wHWQAAAAAQUIPAAAAAADejACT5oXvHiuqjsPhar1O; nlbi_846569=9UVTZ2oxnUYFcFQiTJV9qQAAAAAL+ziJ9s5gHTP7VoF/uMkL; incap_ses_720_846569=zn7xB0q17XR3KsVDGPX9Ce9wHWQAAAAAELRSLEKVBeZ7DRlICzWMdw==; leobtag=667909_2632B01AD09A4321A7E14C7458431DFF; leonrpid=3747044; leonrbid=14983; leonrmeta=[{"value":"w1o8260c7a2dnpgn21uncig4","key":"c"}]
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 24 Mar 2023 09:44:18 GMT
content-type: application/json; charset=utf-8
content-encoding: gzip
strict-transport-security: max-age=63072000;
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy: frame-ancestors 'self' *.leovegas.com *.casinomodule.com *.yggdrasilgaming.com *.evolutiongaming.com *.gameassists.co.uk *.gameassists.dk *.rgsgames.com *.wagerworks.com *.adform.com *.livetables.io *.regily.com *.casinoalternativen.com *.onlinecasinobonus24.xyz *.livetableshu.com webcache.googleusercontent.com
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
x-cdn: Imperva
x-iinfo: 5-8964098-8964198 PNNy RT(1679651055403 2711) q(0 0 0 -1) r(0 0) U12
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash af767a0f38aa932dc23106c403e9b5f3
5a5662e147f43d1561ba78517738f6be86eb2cde
359fea0fbdd5740a613795d4491c534ebf14e2ffb55edf78c80dc0dde78c42e4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 24 Mar 2023 09:44:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/r/collect?v=1&aip=1&t=dc&_r=3&tid=UA-25600410-6&cid=83193180.1679651069&jid=1972834177&_gid=502695507.1679651069&gjid=100016470&_v=j99&z=1973506504
302 Found 365 B URL HTTP/2 stats.g.doubleclick.net/r/collect?v=1&aip=1&t=dc&_r=3&tid=UA-25600410-6&cid=83193180.1679651069&jid=1972834177&_gid=502695507.1679651069&gjid=100016470&_v=j99&z=1973506504
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 19a47bb7ee421733e6508785052ce8e2
c4a982c98a1bf3c1b363a89c27a2b762bda7a81d
a87760c1a177c2866b28b99a0ffc002aded9c4d82363d1ed0da521ea03426565
GET /r/collect?v=1&aip=1&t=dc&_r=3&tid=UA-25600410-6&cid=83193180.1679651069&jid=1972834177&_gid=502695507.1679651069&gjid=100016470&_v=j99&z=1973506504 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Referer: https://www.leovegas.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: https://www.google.com/ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-25600410-6&cid=83193180.1679651069&jid=1972834177&_v=j99&z=1973506504
access-control-allow-origin: null
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Fri, 24 Mar 2023 09:44:19 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
server: Golfe2
content-length: 365
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash af767a0f38aa932dc23106c403e9b5f3
5a5662e147f43d1561ba78517738f6be86eb2cde
359fea0fbdd5740a613795d4491c534ebf14e2ffb55edf78c80dc0dde78c42e4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 24 Mar 2023 09:44:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.r2m02.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.r2m02.amazontrust.com/
IP
Hash bd8094658345752130fe70666a853e71
d9836e489664576f261f23204c3263846b371c6a
0b85cc8184573772722084aa849e2770fd47fa46160e7371ce8c3e8e144738f3
POST / HTTP/1.1
Host: ocsp.r2m02.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=164126
Date: Fri, 24 Mar 2023 09:44:19 GMT
Etag: "641d3c88-1d7"
Expires: Sun, 26 Mar 2023 07:19:45 GMT
Last-Modified: Fri, 24 Mar 2023 06:00:40 GMT
Server: ECAcc (nya/7970)
X-Cache: Miss from cloudfront
Via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 405jOH90g0LPngRRMvulX1ik88DpTUMEVzA4_o0g6Q1TrMC1S-EDTA==
Age: 4745
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a37ccb2b0d2b6bd75ea76a9535478b74
282cdfc85b1bc6e7b8741fb82ea37844ba831a53
6f9eded96973ad739947a784fddd57298bd3bc8abb3d71eff5c5492826cf254a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 24 Mar 2023 09:44:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-25600410-6&cid=83193180.1679651069&jid=1972834177&_v=j99&z=1973506504
302 Found 0 B URL HTTP/2 www.google.com/ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-25600410-6&cid=83193180.1679651069&jid=1972834177&_v=j99&z=1973506504
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-25600410-6&cid=83193180.1679651069&jid=1972834177&_v=j99&z=1973506504 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Referer: https://www.leovegas.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 24 Mar 2023 09:44:19 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
location: https://www.google.no/ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-25600410-6&cid=83193180.1679651069&jid=1972834177&_v=j99&z=1973506504&slf_rd=1&random=3370359406
access-control-allow-origin: null
access-control-allow-credentials: true
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c1bec9941c82e2a75f433a9989ff131d
f362aafde39e53e6c85aed88514e7d9272d8b099
693fe25761b15b3f663bb491a3cad382f1bb0a60083375b6aec21af2fdddb58e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 24 Mar 2023 09:44:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a6cad75209fdd6f267646b8382348c4b
35d993c683277cba55a4a86e15afa0c378d9a1d8
f3490031d4088f3580570dd096c1daf3780b76da85039fa904a35a9f0d6298be
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 24 Mar 2023 09:44:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-25600410-6&cid=83193180.1679651069&jid=1972834177&_v=j99&z=1973506504&slf_rd=1&random=3370359406
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-25600410-6&cid=83193180.1679651069&jid=1972834177&_v=j99&z=1973506504&slf_rd=1&random=3370359406
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-25600410-6&cid=83193180.1679651069&jid=1972834177&_v=j99&z=1973506504&slf_rd=1&random=3370359406 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Referer: https://www.leovegas.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 24 Mar 2023 09:44:19 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
access-control-allow-origin: null
access-control-allow-credentials: true
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a6cad75209fdd6f267646b8382348c4b
35d993c683277cba55a4a86e15afa0c378d9a1d8
f3490031d4088f3580570dd096c1daf3780b76da85039fa904a35a9f0d6298be
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 24 Mar 2023 09:44:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
track.adform.net/Serving/TrackPoint/?CC=1&pm=497538&ADFPageName=LeoVegas%7C%2Fcasino&ADFdivider=%7C&ord=249383515844&ADFtpmode=2&loc=https%3A%2F%2Fwww.leovegas.com%2Fen-no%2F%3Fbtag%3D667909_2632B01AD09A4321A7E14C7458431DFF%26c%3Dw1o8260c7a2dnpgn21uncig4%26pid%3D3747044%26bid%3D14983&Set1=en-US%7Cen-US%7C1280x1024%7C24
200 OK 807 B URL HTTP/2 track.adform.net/Serving/TrackPoint/?CC=1&pm=497538&ADFPageName=LeoVegas%7C%2Fcasino&ADFdivider=%7C&ord=249383515844&ADFtpmode=2&loc=https%3A%2F%2Fwww.leovegas.com%2Fen-no%2F%3Fbtag%3D667909_2632B01AD09A4321A7E14C7458431DFF%26c%3Dw1o8260c7a2dnpgn21uncig4%26pid%3D3747044%26bid%3D14983&Set1=en-US%7Cen-US%7C1280x1024%7C24
IP
File type HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash f0da786ff6e7dc83bad7cce4050622f5
0a35be0f1d1836a6e363964341d8fbd1ac44228c
ccbb42b43cfe0f068bc0314b09f3e6eb225a35fc0b06ecc3aacc15eda75ddf38
GET /Serving/TrackPoint/?CC=1&pm=497538&ADFPageName=LeoVegas%7C%2Fcasino&ADFdivider=%7C&ord=249383515844&ADFtpmode=2&loc=https%3A%2F%2Fwww.leovegas.com%2Fen-no%2F%3Fbtag%3D667909_2632B01AD09A4321A7E14C7458431DFF%26c%3Dw1o8260c7a2dnpgn21uncig4%26pid%3D3747044%26bid%3D14983&Set1=en-US%7Cen-US%7C1280x1024%7C24 HTTP/1.1
Host: track.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.leovegas.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 24 Mar 2023 09:44:19 GMT
content-type: text/javascript; charset=utf-8
content-length: 807
cache-control: no-cache, no-store, must-revalidate, no-transform
pragma: no-cache
content-encoding: gzip
expires: -1
vary: Accept-Encoding
access-control-allow-origin: *
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
track.adform.net/Serving/TrackPoint/?CC=1&pm=497538&ADFPageName=Sc_Ret&ADFdivider=%7C&ord=878851852694&ADFtpmode=2&loc=https%3A%2F%2Fwww.leovegas.com%2Fen-no%2F%3Fbtag%3D667909_2632B01AD09A4321A7E14C7458431DFF%26c%3Dw1o8260c7a2dnpgn21uncig4%26pid%3D3747044%26bid%3D14983&Set1=en-US%7Cen-US%7C1280x1024%7C24
200 OK 573 B URL HTTP/2 track.adform.net/Serving/TrackPoint/?CC=1&pm=497538&ADFPageName=Sc_Ret&ADFdivider=%7C&ord=878851852694&ADFtpmode=2&loc=https%3A%2F%2Fwww.leovegas.com%2Fen-no%2F%3Fbtag%3D667909_2632B01AD09A4321A7E14C7458431DFF%26c%3Dw1o8260c7a2dnpgn21uncig4%26pid%3D3747044%26bid%3D14983&Set1=en-US%7Cen-US%7C1280x1024%7C24
IP
File type HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 351c7a7421a138541018da39debee3ae
87f9afbf9bb4b440bc0eb139bd84c959c1cb5f2b
447c85044229bb6282b1cb85d1b0ff7344a36d34ece1d71ca1478272d27a0c86
GET /Serving/TrackPoint/?CC=1&pm=497538&ADFPageName=Sc_Ret&ADFdivider=%7C&ord=878851852694&ADFtpmode=2&loc=https%3A%2F%2Fwww.leovegas.com%2Fen-no%2F%3Fbtag%3D667909_2632B01AD09A4321A7E14C7458431DFF%26c%3Dw1o8260c7a2dnpgn21uncig4%26pid%3D3747044%26bid%3D14983&Set1=en-US%7Cen-US%7C1280x1024%7C24 HTTP/1.1
Host: track.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.leovegas.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 24 Mar 2023 09:44:19 GMT
content-type: text/javascript; charset=utf-8
content-length: 573
cache-control: no-cache, no-store, must-revalidate, no-transform
pragma: no-cache
content-encoding: gzip
expires: -1
vary: Accept-Encoding
access-control-allow-origin: *
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
dmp.adform.net/serving/cookie/match?party=1140&cid=&uid=-5932061713061764574
302 Found 0 B URL HTTP/2 dmp.adform.net/serving/cookie/match?party=1140&cid=&uid=-5932061713061764574
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /serving/cookie/match?party=1140&cid=&uid=-5932061713061764574 HTTP/1.1
Host: dmp.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Fri, 24 Mar 2023 09:44:20 GMT
content-length: 0
location: https://dmp.adform.net/serving/cookie/match?CC=1&party=1140&cid=&uid=-5932061713061764574
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: GET
access-control-allow-origin: *
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
set-cookie: C=1; expires=Mon, 24 Apr 2023 09:44:20 GMT; domain=adform.net; path=/
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
www.leovegas.com/mobile.sw.js?e=p
200 OK 11 kB URL HTTP/2 www.leovegas.com/mobile.sw.js?e=p
IP
File type ASCII text, with very long lines (34776)
Hash 63cfb578e4b806f79f1c531d81ab3ca6
f8ec0faadea7b5871dc3461c0de77576691ba2fd
4744b20160952080d1ce9cfcfb21afb16305b4d86a4e008035ea14ae1e7e9cb9
GET /mobile.sw.js?e=p HTTP/1.1
Host: www.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Service-Worker: script
Connection: keep-alive
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a3747044%2c%22BID%22%3a14983%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1679651056107)%5c%2f%22%2c%22CookieTag%22%3a%22149833747044451240919C2023324944%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%222861626257%7c1%22%7d%5d; leo-essentials=%7B%22cid%22%3A%2227dff399-a733-4fab-93d1-5a6120b795fa%22%7D; visid_incap_846569=DXjdECU4SLq8a14LzWFWhe9wHWQAAAAAQUIPAAAAAADejACT5oXvHiuqjsPhar1O; nlbi_846569=9UVTZ2oxnUYFcFQiTJV9qQAAAAAL+ziJ9s5gHTP7VoF/uMkL; incap_ses_720_846569=zn7xB0q17XR3KsVDGPX9Ce9wHWQAAAAAELRSLEKVBeZ7DRlICzWMdw==; leobtag=667909_2632B01AD09A4321A7E14C7458431DFF; leonrpid=3747044; leonrbid=14983; leonrmeta=[{"value":"w1o8260c7a2dnpgn21uncig4","key":"c"}]; _ga=GA1.1.83193180.1679651069; _gid=GA1.2.502695507.1679651069; _gat_leo=1; leo_previous_page=https://www.leovegas.com/en-no/?btag=667909_2632B01AD09A4321A7E14C7458431DFF&c=w1o8260c7a2dnpgn21uncig4&pid=3747044&bid=14983; _ga_R99CHBN90V=GS1.1.1679651070.1.1.1679651070.60.0.0
Sec-Fetch-Dest: serviceworker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 22 Mar 2023 10:09:45 GMT
content-type: application/javascript
content-length: 10707
content-encoding: gzip
cache-control: max-age=3552, public
expires: Fri, 24 Mar 2023 10:43:31 GMT
date: Fri, 24 Mar 2023 09:44:19 GMT
strict-transport-security: max-age=63072000
x-cdn: Imperva
x-iinfo: 5-8964098-0 0CNN RT(1679651055403 3920) q(0 -1 -1 -1) r(0 -1)
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 727 B IP
Hash 72e954969f367fc337fd0cb1e24307b1
f2594a6247a926b05996ae549ba7310d020e7761
6f21b9580ad3dab2840bec014a1c62626a61ad4aea722dc6dc5daaef42349b06
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6123
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 24 Mar 2023 09:44:20 GMT
Last-Modified: Fri, 24 Mar 2023 08:02:18 GMT
Server: ECAcc (ska/F73A)
X-Cache: HIT
Content-Length: 727
ocsp.r2m01.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.r2m01.amazontrust.com/
IP
Hash 5e8704a12f07410f765f73bae0a091a5
d92791a047258ff29137c7ed15159ce50319a105
06d8004898d29a0ff0bce70ccca275a34b8c87cedc8dd90458fe82869308f91d
POST / HTTP/1.1
Host: ocsp.r2m01.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=93243
Date: Fri, 24 Mar 2023 09:44:20 GMT
Etag: "641c279d-1d7"
Expires: Sat, 25 Mar 2023 11:38:23 GMT
Last-Modified: Thu, 23 Mar 2023 10:19:09 GMT
Server: ECAcc (nya/7993)
X-Cache: Miss from cloudfront
Via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: G3EUI1aNcq86kqpLQvyHFUZI_9v36UGZtD9wJbUSmmlLJ0su3unNPg==
Age: 4754
ocsp.r2m01.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.r2m01.amazontrust.com/
IP
Hash 5e8704a12f07410f765f73bae0a091a5
d92791a047258ff29137c7ed15159ce50319a105
06d8004898d29a0ff0bce70ccca275a34b8c87cedc8dd90458fe82869308f91d
POST / HTTP/1.1
Host: ocsp.r2m01.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=91247
Date: Fri, 24 Mar 2023 09:44:20 GMT
Etag: "641c279d-1d7"
Expires: Sat, 25 Mar 2023 11:05:07 GMT
Last-Modified: Thu, 23 Mar 2023 10:19:09 GMT
Server: ECAcc (bsa/EA9A)
X-Cache: Miss from cloudfront
Via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: R_WcVUlXrbAMQksobJ1JUc2y5IMVESqO_Y93lCIdJBJi7TAWI-UQLw==
Age: 2758
events.launchdarkly.com/events/diagnostic/5b9627a39619fd15611a390c
204 No Content 0 B URL HTTP/2 events.launchdarkly.com/events/diagnostic/5b9627a39619fd15611a390c
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /events/diagnostic/5b9627a39619fd15611a390c HTTP/1.1
Host: events.launchdarkly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-launchdarkly-user-agent
Referer: https://www.leovegas.com/
Origin: https://www.leovegas.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Fri, 24 Mar 2023 09:44:20 GMT
access-control-allow-headers: Accept,Content-Type,Content-Length,Accept-Encoding,X-LaunchDarkly-Event-Schema,X-LaunchDarkly-User-Agent,X-LaunchDarkly-Payload-ID,X-LaunchDarkly-Wrapper,X-LaunchDarkly-Tags
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Date
access-control-max-age: 300
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 9729c913e387cc5cc54e05625f5cbea6
4ace3c47b9999658bc7018e940df5c72b3942f17
19946517f8ed1a0931cca69ad96b334031d2aabd31425c16a2bcac0b1e346239
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 24 Mar 2023 09:44:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
usage.trackjs.com/usage.gif?token=c7755ba8906e4776818012e627c020ba&correlationId=b7801fea-e6e2-4b0b-879b-d18ef8b9b530&application=fulcrum-mobile&x=7fd6cad2-cc29-41d7-9ece-270f77ecd449&
200 OK 43 B URL HTTP/1.1 usage.trackjs.com/usage.gif?token=c7755ba8906e4776818012e627c020ba&correlationId=b7801fea-e6e2-4b0b-879b-d18ef8b9b530&application=fulcrum-mobile&x=7fd6cad2-cc29-41d7-9ece-270f77ecd449&
IP
ASN #14061 DIGITALOCEAN-ASN
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /usage.gif?token=c7755ba8906e4776818012e627c020ba&correlationId=b7801fea-e6e2-4b0b-879b-d18ef8b9b530&application=fulcrum-mobile&x=7fd6cad2-cc29-41d7-9ece-270f77ecd449& HTTP/1.1
Host: usage.trackjs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 24 Mar 2023 09:44:20 GMT
Content-Type: image/gif
Content-Length: 43
Last-Modified: Mon, 28 Sep 1970 06:00:00 GMT
Connection: keep-alive
ocsp.pki.goog/s/gts1d4/E1c_Kpl_syM
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/E1c_Kpl_syM
IP
Hash 2d39940671474792d944bd57942c3ea0
d3ae6ff8eb533140467b008b23005323132f6027
ab9c5f6211edd83c476ee8774f297bda8172a216cc490b03d928322c12839b7b
POST /s/gts1d4/E1c_Kpl_syM HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 24 Mar 2023 09:44:20 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tgtag.io/tg.js?pid=tg-g-002415-002
200 OK 32 kB URL HTTP/2 tgtag.io/tg.js?pid=tg-g-002415-002
IP
File type Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Hash 4c66aa306a70777aff929a9feb617c0b
a49d86c14a56772188b9c70241903f670ffa4f96
45a9ac978ff4c4129f708f4ce497cebf8c8cb9e1d6b0529beedac020970d3f8b
GET /tg.js?pid=tg-g-002415-002 HTTP/1.1
Host: tgtag.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycduJWTsNbbWQkrTB7e4aIUfKELopk6mBR-0jPiSiAQ_6rCtNaxfQ8gIQutuoRh-M0E8M7L0LD0_IYYo4Rowppqe88w
x-goog-generation: 1678364290895724
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 32088
content-encoding: gzip
x-goog-hash: crc32c=i1Dhig==, md5=TGaqMGpwd3r/kpqf62F8Cw==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 32088
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Access-Control-Allow-Origin
server: UploadServer
date: Thu, 23 Mar 2023 11:59:27 GMT
expires: Fri, 24 Mar 2023 11:59:27 GMT
cache-control: public, no-transform, max-age=86400, s-maxage=86400
age: 78293
last-modified: Thu, 09 Mar 2023 12:18:10 GMT
etag: "4c66aa306a70777aff929a9feb617c0b"
content-type: application/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
9915903.fls.doubleclick.net/activityi;src=9915903;type=pagev0;cat=pagev0;ord=1679651070611.7bzqak1p;gtm=45Fe33m0;auiddc=432605381.1679651071;u4=%2F;~oref=https%3A%2F%2Fwww.leovegas.com%2Fen-no%2F%3Fbtag%3D667909_2632B01AD09A4321A7E14C7458431DFF%26c%3Dw1o8260c7a2dnpgn21uncig4%26pid%3D3747044%26bid%3D14983?
200 OK 332 B URL HTTP/2 9915903.fls.doubleclick.net/activityi;src=9915903;type=pagev0;cat=pagev0;ord=1679651070611.7bzqak1p;gtm=45Fe33m0;auiddc=432605381.1679651071;u4=%2F;~oref=https%3A%2F%2Fwww.leovegas.com%2Fen-no%2F%3Fbtag%3D667909_2632B01AD09A4321A7E14C7458431DFF%26c%3Dw1o8260c7a2dnpgn21uncig4%26pid%3D3747044%26bid%3D14983?
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (582), with no line terminators
Hash 38cd4ae1c458745185ffa38f54290c60
9208a61c2cdee360d05855e5def5e4f444504166
f34f90928434c3c5844f255deed34a257cc8e2475b561c3998d6651e8d5c265b
GET /activityi;src=9915903;type=pagev0;cat=pagev0;ord=1679651070611.7bzqak1p;gtm=45Fe33m0;auiddc=432605381.1679651071;u4=%2F;~oref=https%3A%2F%2Fwww.leovegas.com%2Fen-no%2F%3Fbtag%3D667909_2632B01AD09A4321A7E14C7458431DFF%26c%3Dw1o8260c7a2dnpgn21uncig4%26pid%3D3747044%26bid%3D14983? HTTP/1.1
Host: 9915903.fls.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.leovegas.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 24 Mar 2023 09:44:20 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
strict-transport-security: max-age=21600
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 332
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 24-Mar-2023 09:59:20 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 9729c913e387cc5cc54e05625f5cbea6
4ace3c47b9999658bc7018e940df5c72b3942f17
19946517f8ed1a0931cca69ad96b334031d2aabd31425c16a2bcac0b1e346239
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 24 Mar 2023 09:44:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/s/gts1d4/E1c_Kpl_syM
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/E1c_Kpl_syM
IP
Hash 2d39940671474792d944bd57942c3ea0
d3ae6ff8eb533140467b008b23005323132f6027
ab9c5f6211edd83c476ee8774f297bda8172a216cc490b03d928322c12839b7b
POST /s/gts1d4/E1c_Kpl_syM HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 24 Mar 2023 09:44:20 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
events.launchdarkly.com/events/diagnostic/5b9627a39619fd15611a390c
202 Accepted 0 B URL HTTP/2 events.launchdarkly.com/events/diagnostic/5b9627a39619fd15611a390c
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /events/diagnostic/5b9627a39619fd15611a390c HTTP/1.1
Host: events.launchdarkly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-LaunchDarkly-User-Agent: JSClient/2.24.2
Content-Length: 797
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 202 Accepted
date: Fri, 24 Mar 2023 09:44:20 GMT
content-type: application/json
content-length: 0
access-control-allow-headers: Accept,Content-Type,Content-Length,Accept-Encoding,X-LaunchDarkly-Event-Schema,X-LaunchDarkly-User-Agent,X-LaunchDarkly-Payload-ID,X-LaunchDarkly-Wrapper,X-LaunchDarkly-Tags
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Date
access-control-max-age: 300
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c1bec9941c82e2a75f433a9989ff131d
f362aafde39e53e6c85aed88514e7d9272d8b099
693fe25761b15b3f663bb491a3cad382f1bb0a60083375b6aec21af2fdddb58e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 24 Mar 2023 09:44:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
adservice.google.com/ddm/fls/i/src=9915903;type=pagev0;cat=pagev0;ord=1679651070611.7bzqak1p;gtm=45Fe33m0;auiddc=432605381.1679651071;u4=%2F;~oref=https%3A%2F%2Fwww.leovegas.com%2Fen-no%2F%3Fbtag%3D667909_2632B01AD09A4321A7E14C7458431DFF%26c%3Dw1o8260c7a2dnpgn21uncig4%26pid%3D3747044%26bid%3D14983
200 OK 333 B URL HTTP/2 adservice.google.com/ddm/fls/i/src=9915903;type=pagev0;cat=pagev0;ord=1679651070611.7bzqak1p;gtm=45Fe33m0;auiddc=432605381.1679651071;u4=%2F;~oref=https%3A%2F%2Fwww.leovegas.com%2Fen-no%2F%3Fbtag%3D667909_2632B01AD09A4321A7E14C7458431DFF%26c%3Dw1o8260c7a2dnpgn21uncig4%26pid%3D3747044%26bid%3D14983
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (581), with no line terminators
Hash 1e8862643a512ba9d26001fb69425c01
a914aee2ce770b22f069d176776f262d33758b22
9a0a1a4da9f44cba63bad436a8ac433e392f01c32475c9dd0154c12a56054d0e
GET /ddm/fls/i/src=9915903;type=pagev0;cat=pagev0;ord=1679651070611.7bzqak1p;gtm=45Fe33m0;auiddc=432605381.1679651071;u4=%2F;~oref=https%3A%2F%2Fwww.leovegas.com%2Fen-no%2F%3Fbtag%3D667909_2632B01AD09A4321A7E14C7458431DFF%26c%3Dw1o8260c7a2dnpgn21uncig4%26pid%3D3747044%26bid%3D14983 HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9915903.fls.doubleclick.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 24 Mar 2023 09:44:20 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 333
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/4hZIA1P-PfE
200 OK 562 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/4hZIA1P-PfE
IP
File type gzip compressed data, from Unix\012- data
Hash eaa491679bbf85f3ac183b4c05a14566
3f9a0e4e6299e3bd0aaecf065255164010f19b4a
5b4c58eb7e6169c94a2d84f1d95d86c93c302d8b4036e271deb6a10ccf5fe8fc
POST /s/gts1d4/4hZIA1P-PfE HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 24 Mar 2023 09:44:20 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.leovegas.com/static/fulcrum/offline.html?e=p
200 OK 12 kB URL HTTP/2 www.leovegas.com/static/fulcrum/offline.html?e=p
IP
Hash 8d9392cfeb4551fe6a39f5e64da90632
e66c5a37cca78b1e04b61e57f7a3434635e3b110
cb7d132a66c1fc8b5e1a77c7029ccf85764490ae2f7246b2a2f37067ed0de4b0
GET /static/fulcrum/offline.html?e=p HTTP/1.1
Host: www.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.leovegas.com/mobile.sw.js?e=p
Connection: keep-alive
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a3747044%2c%22BID%22%3a14983%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1679651056107)%5c%2f%22%2c%22CookieTag%22%3a%22149833747044451240919C2023324944%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%222861626257%7c1%22%7d%5d; leo-essentials=%7B%22cid%22%3A%2227dff399-a733-4fab-93d1-5a6120b795fa%22%7D; visid_incap_846569=DXjdECU4SLq8a14LzWFWhe9wHWQAAAAAQUIPAAAAAADejACT5oXvHiuqjsPhar1O; nlbi_846569=9UVTZ2oxnUYFcFQiTJV9qQAAAAAL+ziJ9s5gHTP7VoF/uMkL; incap_ses_720_846569=zn7xB0q17XR3KsVDGPX9Ce9wHWQAAAAAELRSLEKVBeZ7DRlICzWMdw==; leobtag=667909_2632B01AD09A4321A7E14C7458431DFF; leonrpid=3747044; leonrbid=14983; leonrmeta=[{"value":"w1o8260c7a2dnpgn21uncig4","key":"c"}]; _ga=GA1.1.83193180.1679651069; _gid=GA1.2.502695507.1679651069; _gat_leo=1; leo_previous_page=https://www.leovegas.com/en-no/?btag=667909_2632B01AD09A4321A7E14C7458431DFF&c=w1o8260c7a2dnpgn21uncig4&pid=3747044&bid=14983; _ga_R99CHBN90V=GS1.1.1679651070.1.1.1679651070.60.0.0; FPLC=%2B9VBuly%2BTNrC1b96Q8xDPnCv53ifBeULW4WC0YGmIrg5n%2F3v1RUND7g536BxAZgRmI6bC%2BukQ8Pte60gs1FUPMELeub90miFpuUpnpA%2B1dSomRjGZeKT%2FTTSndvSUA%3D%3D; FPID=FPID2.2.cpzp8KcnpWihSuexgbSw4yErZ9VaBm10Y%2BKZyZc3a34%3D.1679651069
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 24 Mar 2023 09:44:20 GMT
content-type: text/html
content-encoding: gzip
cache-control: public, max-age=3600
last-modified: Wed, 22 Mar 2023 10:09:45 GMT
strict-transport-security: max-age=63072000;
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy: frame-ancestors 'self' *.leovegas.com *.casinomodule.com *.yggdrasilgaming.com *.evolutiongaming.com *.gameassists.co.uk *.gameassists.dk *.rgsgames.com *.wagerworks.com *.adform.com *.livetables.io *.regily.com *.casinoalternativen.com *.onlinecasinobonus24.xyz *.livetableshu.com webcache.googleusercontent.com
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
x-cdn: Imperva
x-iinfo: 5-8964098-8964101 PNNy RT(1679651055403 4139) q(0 0 0 -1) r(0 0) U12
X-Firefox-Spdy: h2
api.trafficguard.ai/tg-g-002415-002/api/v4/client-side/validate/event
200 OK 61 B URL HTTP/2 api.trafficguard.ai/tg-g-002415-002/api/v4/client-side/validate/event
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 1ee7cd02b35c7097455eca23d537d40b
f95ae0ab0201aaef86698c9ac66d680fd4e046a0
18cccf9f3ae615df065ef20111e050bb202254d4cf780c150927f51d00d6bffc
POST /tg-g-002415-002/api/v4/client-side/validate/event HTTP/1.1
Host: api.trafficguard.ai
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded;charset=UTF-8
Content-Length: 2173
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expect-ct: max-age=0, report-uri="https://trafficguard.report-uri.com/r/d/ct/reportOnly"
x-xss-protection: 0
x-content-type-options: nosniff
access-control-allow-origin: https://www.leovegas.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-Requested-With, Access-Control-Allow-Origin, Access-Control-Allow-Credentials
set-cookie: geid=0b01000f-1cab-40b1-a400-01c7641d70f4; Domain=.trafficguard.ai; Path=/; Expires=Sat, 23 Mar 2024 09:44:20 GMT; HttpOnly; Secure; SameSite=None
geid-legacy=0b01000f-1cab-40b1-a400-01c7641d70f4; Domain=.trafficguard.ai; Path=/; Expires=Sat, 23 Mar 2024 09:44:20 GMT; HttpOnly
content-type: application/json; charset=utf-8
content-length: 61
etag: W/"3d-+VrgqwIBqu+GaYyaxm1oD9TgRqA"
date: Fri, 24 Mar 2023 09:44:20 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/4hZIA1P-PfE
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/4hZIA1P-PfE
IP
Hash c9e6bb84f639c5a4149384e338e03675
040e398cb65c7188a57540e21b56a35dec77ee91
5bdbceda35dfcde4762368f4c9364424f2ed3d5619fd6b2dd8f798e34ea652ac
POST /s/gts1d4/4hZIA1P-PfE HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 24 Mar 2023 09:44:20 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.r2m01.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.r2m01.amazontrust.com/
IP
Hash 76caf48500b2e23ec86a529265e1bbd1
abbc7fe06ebdb6debb7135b0466557a68f2e8ad4
2c70695a16ad42342043d1ea5c2454130962215713a8917276203d32d7252097
POST / HTTP/1.1
Host: ocsp.r2m01.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=100066
Date: Fri, 24 Mar 2023 09:44:20 GMT
Etag: "641c4395-1d7"
Expires: Sat, 25 Mar 2023 13:32:06 GMT
Last-Modified: Thu, 23 Mar 2023 12:18:29 GMT
Server: ECAcc (nya/789D)
X-Cache: Miss from cloudfront
Via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: jqLGG971EzJ6h8NlEabjiDzDMW9M70XU0PwpDneH_LYeFMQagleIaw==
Age: 4417
websdk.appsflyer.com/?st=pba&
200 OK 9.6 kB URL HTTP/1.1 websdk.appsflyer.com/?st=pba&
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (21856)
Hash 1214b03c1da1942cfdd2183b216ba3c8
1a46d03ac7bd9bae1b849b610918d1fbe18efe76
ba7e3eba24eaccfae9be9adda9397b5a1692da83bddc9b1e08e2d9700ac271f0
GET /?st=pba& HTTP/1.1
Host: websdk.appsflyer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: M44pSGH6vcjNlP5UaqybVYuuWdAAnTeV9hRgNPOK/tpE3okTq2NYkjNTtxo9PK8D2YrCkCdNTsE=
x-amz-request-id: DAGQS2QYCYYEYGCY
Last-Modified: Thu, 26 Jan 2023 08:01:30 GMT
ETag: "3f70a47c03cc36fb3ee43dea835e4d0d"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/javascript
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=2555
Expires: Fri, 24 Mar 2023 10:26:56 GMT
Date: Fri, 24 Mar 2023 09:44:21 GMT
Content-Length: 9578
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 89447eb689782162ac5e4dca438e65c0
e1e8cde045a5eae9fbf1b20707fb8935b0418598
cfe3261f46a5fbe4f73fd16259b7c96480912874097ffea3b6bcb6149367a615
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4887
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 24 Mar 2023 09:44:21 GMT
Last-Modified: Fri, 24 Mar 2023 08:22:54 GMT
Server: ECAcc (ska/F775)
X-Cache: HIT
Content-Length: 471
connect.facebook.net/en_US/fbevents.js
200 OK 28 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
File type ASCII text, with very long lines (64348)
Hash e5f5bf796d91f271e383cf1ff3ee5af4
70ead02da19095ca752d55e89a48fcdf59d44d33
247f023e282f1556e668df0033858196d682f31f659d1b53ea6dcaeff56c401a
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
report-to: {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/?minimize=0"}],"group":"coep_report"}
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
origin-agent-cluster: ?0
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: mDH6l07vwyxPqV+S98uA9rL+ixy+c3qpoOmR7XwU7qfS+h/NqTJ2vZVM3JRASkw91539ExZZ0cO0+geNwViY2A==
content-length: 27907
x-fb-trip-id: 1679558926
date: Fri, 24 Mar 2023 09:44:21 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 89447eb689782162ac5e4dca438e65c0
e1e8cde045a5eae9fbf1b20707fb8935b0418598
cfe3261f46a5fbe4f73fd16259b7c96480912874097ffea3b6bcb6149367a615
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4887
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 24 Mar 2023 09:44:21 GMT
Last-Modified: Fri, 24 Mar 2023 08:22:54 GMT
Server: ECAcc (ska/F6D2)
X-Cache: HIT
Content-Length: 471
ocsp.r2m02.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.r2m02.amazontrust.com/
IP
Hash cfded0ebff82be4d70def06debd1cc78
d2f5e81ae2bf9037bb8671619deefa5e38728edb
bcfd0f99bd793a4e183fe5c7134c28e0573a125ba6986df54ac9ecfdf3a3e0d0
POST / HTTP/1.1
Host: ocsp.r2m02.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=123590
Date: Fri, 24 Mar 2023 09:44:21 GMT
Etag: "641c9af8-1d7"
Expires: Sat, 25 Mar 2023 20:04:11 GMT
Last-Modified: Thu, 23 Mar 2023 18:31:20 GMT
Server: ECAcc (nya/78BE)
X-Cache: Miss from cloudfront
Via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: qN1HHfntczkwkpeIhVvl1orSL3QqCnRZKwOG35P2p4I-isy4n-u42Q==
Age: 5571
wa.onelink.me/v1/onelink
200 OK 13 B IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 593e8538d63f30de24fbb439dd424870
f838a78077c6d023e0d0bca95f0f335df4b8b468
38bc0f256821a9c0a02a1c0cedf8ff70c211e637ef77ac199de2fe0cf36ba9ec
GET /v1/onelink HTTP/1.1
Host: wa.onelink.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Origin: https://www.leovegas.com
Content-Type: application/json
Date: Fri, 24 Mar 2023 09:44:21 GMT
Content-Length: 13
Connection: keep-alive
ocsp.r2m01.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.r2m01.amazontrust.com/
IP
Hash 7de203dfbcc79531d9d33bab1db7e4e9
b7853f45319ca3a4766e632d225ed363d034ea44
0a849f69934296b9710088488291f42022efff439d11a1f98e843f79c38494f6
POST / HTTP/1.1
Host: ocsp.r2m01.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Fri, 24 Mar 2023 09:44:21 GMT
Last-Modified: Fri, 24 Mar 2023 08:52:33 GMT
Server: ECAcc (bsa/EB26)
X-Cache: Miss from cloudfront
Via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: heTp8rAis6GhHg45ok2_ul0N4b93qA6VSGvX0BK0w25tpeEIa4lAxg==
Age: 3108
wa.appsflyer.com/events?site-id=6d3a3941-6835-4f61-8644-5e8746828ef8
200 OK 76 B URL HTTP/1.1 wa.appsflyer.com/events?site-id=6d3a3941-6835-4f61-8644-5e8746828ef8
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 4fb320a7ab61751994b3155f0b280e86
9891af0a52665fdfec8c6683cae72b819440943b
2c2e9bd46237335f8324f959cbe993fec0ba045486a4b0db6ceb2f15b38bf3d5
POST /events?site-id=6d3a3941-6835-4f61-8644-5e8746828ef8 HTTP/1.1
Host: wa.appsflyer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: text/plain
Content-Length: 1565
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Origin: https://www.leovegas.com
Content-Type: application/json
Date: Fri, 24 Mar 2023 09:44:21 GMT
Set-Cookie: af_id=63e88cad-b691-47df-8c9f-033ac513053d-p; Domain=appsflyer.com; Expires=Sun, 23 Mar 2025 09:44:21 GMT
Content-Length: 76
Connection: keep-alive
sgtm.leovegas.com/gtm.js?id=GTM-PNLF5QG
200 OK 146 kB URL HTTP/2 sgtm.leovegas.com/gtm.js?id=GTM-PNLF5QG
IP
Size 146 kB (146219 bytes)
Hash fa67b908989ce181741bb2d4498ec5bf
e70507363fd04c5ced2385dbf3dec9b2c842118f
9c09235d6aa16da33ab625e0d27ab2127b8c0cb66d72cb1981fe9da4e38f5797
GET /gtm.js?id=GTM-PNLF5QG HTTP/1.1
Host: sgtm.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.leovegas.com/
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a3747044%2c%22BID%22%3a14983%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1679651056107)%5c%2f%22%2c%22CookieTag%22%3a%22149833747044451240919C2023324944%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%222861626257%7c1%22%7d%5d; visid_incap_846569=DXjdECU4SLq8a14LzWFWhe9wHWQAAAAAQUIPAAAAAADejACT5oXvHiuqjsPhar1O; nlbi_846569=9UVTZ2oxnUYFcFQiTJV9qQAAAAAL+ziJ9s5gHTP7VoF/uMkL; incap_ses_720_846569=zn7xB0q17XR3KsVDGPX9Ce9wHWQAAAAAELRSLEKVBeZ7DRlICzWMdw==; leobtag=667909_2632B01AD09A4321A7E14C7458431DFF; leonrpid=3747044; leonrbid=14983; leonrmeta=[{"value":"w1o8260c7a2dnpgn21uncig4","key":"c"}]
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
server: nginx/1.23.3
date: Fri, 24 Mar 2023 09:44:18 GMT
content-type: application/javascript; charset=UTF-8
vary: Accept-Encoding
cache-control: private, max-age=900
expires: Fri, 24 Mar 2023 09:59:01 GMT
last-modified: Fri, 24 Mar 2023 09:00:00 GMT
content-encoding: gzip
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
script.hotjar.com/modules.6af44455668b675aade1.js
200 OK 69 kB URL HTTP/2 script.hotjar.com/modules.6af44455668b675aade1.js
IP
File type Unicode text, UTF-8 text, with very long lines (50842)
Hash 77f3f89a0a86a9ed3647edf2670ebff3
53016e740b30c545ea018af0d2412d1ddf80ad18
c82b9db33bfaa349a2a8bc520787f21f5d2519307404e02df877ddf5cb0bdb30
GET /modules.6af44455668b675aade1.js HTTP/1.1
Host: script.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 69096
date: Thu, 23 Mar 2023 14:31:09 GMT
accept-ranges: bytes
access-control-allow-origin: *
cache-control: max-age=31536000
content-encoding: br
cross-origin-resource-policy: cross-origin
etag: "77f3f89a0a86a9ed3647edf2670ebff3"
last-modified: Thu, 23 Mar 2023 14:31:08 GMT
strict-transport-security: max-age=2592000; includeSubDomains
x-content-type-options: nosniff
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 3bff78035f818b6a3185b0f5f4586410.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: v_4N3N-EjOoUC-2vuSa6uLg3E4XNUigLYyRkNjinybkQ2gALQKzm0A==
age: 69192
X-Firefox-Spdy: h2
track.adform.net/Serving/TrackPoint/?CC=1&pm=497538&ADFPageName=pageview&ADFdivider=%7C&ord=466416986225&ADFtpmode=2&itm=eyJpdG1zIjpbeyJwZ3IiOiJjYXNpbm8ifV19&loc=https%3A%2F%2Fwww.leovegas.com%2Fen-no%2F%3Fbtag%3D667909_2632B01AD09A4321A7E14C7458431DFF%26c%3Dw1o8260c7a2dnpgn21uncig4%26pid%3D3747044%26bid%3D14983&Set1=en-US%7Cen-US%7C1280x1024%7C24
200 OK 701 B URL HTTP/2 track.adform.net/Serving/TrackPoint/?CC=1&pm=497538&ADFPageName=pageview&ADFdivider=%7C&ord=466416986225&ADFtpmode=2&itm=eyJpdG1zIjpbeyJwZ3IiOiJjYXNpbm8ifV19&loc=https%3A%2F%2Fwww.leovegas.com%2Fen-no%2F%3Fbtag%3D667909_2632B01AD09A4321A7E14C7458431DFF%26c%3Dw1o8260c7a2dnpgn21uncig4%26pid%3D3747044%26bid%3D14983&Set1=en-US%7Cen-US%7C1280x1024%7C24
IP
File type HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash ee3d6dc4ff74dc0af805ba9cdc341812
4cee760b391a9c99555c8b21af8ebb8fb1404701
b3a06976769de16535b78d0f363ccffa8e040e436964609f594465ea933ab692
GET /Serving/TrackPoint/?CC=1&pm=497538&ADFPageName=pageview&ADFdivider=%7C&ord=466416986225&ADFtpmode=2&itm=eyJpdG1zIjpbeyJwZ3IiOiJjYXNpbm8ifV19&loc=https%3A%2F%2Fwww.leovegas.com%2Fen-no%2F%3Fbtag%3D667909_2632B01AD09A4321A7E14C7458431DFF%26c%3Dw1o8260c7a2dnpgn21uncig4%26pid%3D3747044%26bid%3D14983&Set1=en-US%7Cen-US%7C1280x1024%7C24 HTTP/1.1
Host: track.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.leovegas.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 24 Mar 2023 09:44:21 GMT
content-type: text/javascript; charset=utf-8
content-length: 701
cache-control: no-cache, no-store, must-revalidate, no-transform
pragma: no-cache
content-encoding: gzip
expires: -1
vary: Accept-Encoding
access-control-allow-origin: *
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 1d3dcf9723865c5e2ed30f84aa78c473
d17e499234c5ffca6691657cda4a476b70158812
0e0a6935498a81269d453b2b2d3f953fa57e4a4bb7f21f0a0862e535f31258fe
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 24 Mar 2023 09:44:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cm.g.doubleclick.net/pixel?google_nid=coveny_limited&google_cm&&google_sc&ckid=6EDD55ED-AFCC-48E4-86589E3865ED08F4&cid=EBE153EE-C698-E7C5-E36E718C2AA5C605&google_ula=6572934421&ula=6572934421&google_hm=NkVERDU1RUQtQUZDQy00OEU0LTg2NTg5RTM4NjVFRDA4RjQ&blueID=f25b285a-6295-4bf4-9a0c-3e4d69d1a71e
302 Found 546 B URL HTTP/2 cm.g.doubleclick.net/pixel?google_nid=coveny_limited&google_cm&&google_sc&ckid=6EDD55ED-AFCC-48E4-86589E3865ED08F4&cid=EBE153EE-C698-E7C5-E36E718C2AA5C605&google_ula=6572934421&ula=6572934421&google_hm=NkVERDU1RUQtQUZDQy00OEU0LTg2NTg5RTM4NjVFRDA4RjQ&blueID=f25b285a-6295-4bf4-9a0c-3e4d69d1a71e
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (369), with CRLF, LF line terminators
Hash aaa29d3fce2e7845d77827c8f8c52181
caed77f10919335798006c45f0be6b077aabf749
bb60ef23da4ca8dbe4ed3954109f81b443272d6d08aa9c850d54a87fb358e86c
GET /pixel?google_nid=coveny_limited&google_cm&&google_sc&ckid=6EDD55ED-AFCC-48E4-86589E3865ED08F4&cid=EBE153EE-C698-E7C5-E36E718C2AA5C605&google_ula=6572934421&ula=6572934421&google_hm=NkVERDU1RUQtQUZDQy00OEU0LTg2NTg5RTM4NjVFRDA4RjQ&blueID=f25b285a-6295-4bf4-9a0c-3e4d69d1a71e HTTP/1.1
Host: cm.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
location: https://cm.g.doubleclick.net/pixel?google_nid=coveny_limited&google_cm=&google_sc=&ckid=6EDD55ED-AFCC-48E4-86589E3865ED08F4&cid=EBE153EE-C698-E7C5-E36E718C2AA5C605&google_ula=6572934421&ula=6572934421&google_hm=NkVERDU1RUQtQUZDQy00OEU0LTg2NTg5RTM4NjVFRDA4RjQ&blueID=f25b285a-6295-4bf4-9a0c-3e4d69d1a71e&google_tc=
date: Fri, 24 Mar 2023 09:44:22 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
server: HTTP server (unknown)
content-length: 546
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 24-Mar-2023 09:59:22 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
events.launchdarkly.com/events/bulk/5b9627a39619fd15611a390c
204 No Content 0 B URL HTTP/2 events.launchdarkly.com/events/bulk/5b9627a39619fd15611a390c
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /events/bulk/5b9627a39619fd15611a390c HTTP/1.1
Host: events.launchdarkly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-launchdarkly-event-schema,x-launchdarkly-payload-id,x-launchdarkly-user-agent
Referer: https://www.leovegas.com/
Origin: https://www.leovegas.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Fri, 24 Mar 2023 09:44:22 GMT
access-control-allow-headers: Accept,Content-Type,Content-Length,Accept-Encoding,X-LaunchDarkly-Event-Schema,X-LaunchDarkly-User-Agent,X-LaunchDarkly-Payload-ID,X-LaunchDarkly-Wrapper,X-LaunchDarkly-Tags
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Date
access-control-max-age: 300
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
event.getblue.io/p/?cId=EBE153EE-C698-E7C5-E36E718C2AA5C605&tName=visit&pId=&revenue=&orderId=&p1=&p2=&p3=&fp=&blueID=f25b285a-6295-4bf4-9a0c-3e4d69d1a71e&v=13072020-1328&nocache=9026146830781.555
200 OK 434 B URL HTTP/2 event.getblue.io/p/?cId=EBE153EE-C698-E7C5-E36E718C2AA5C605&tName=visit&pId=&revenue=&orderId=&p1=&p2=&p3=&fp=&blueID=f25b285a-6295-4bf4-9a0c-3e4d69d1a71e&v=13072020-1328&nocache=9026146830781.555
IP
File type HTML document text\012- HTML document, ASCII text, with very long lines (694)
Hash 621345db930f4a07be3fcbc65332fe67
c7455aeb96c2802824bc2d0e408e5b7b10c8e731
7b108e28a2f63599cb1f1c65e56fd305dabfc73385e90a70b0309d1935f6201d
GET /p/?cId=EBE153EE-C698-E7C5-E36E718C2AA5C605&tName=visit&pId=&revenue=&orderId=&p1=&p2=&p3=&fp=&blueID=f25b285a-6295-4bf4-9a0c-3e4d69d1a71e&v=13072020-1328&nocache=9026146830781.555 HTTP/1.1
Host: event.getblue.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.leovegas.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 24 Mar 2023 09:44:21 GMT
content-type: text/html;charset=UTF-8
tagcontainer-version: 1185-25112022-1130
cache-control: no-cache
set-cookie: ckid=6EDD55ED-AFCC-48E4-86589E3865ED08F4; expires=Sat, 23 Mar 2024 09:44:21 -0000; domain=.getblue.io; path=/; secure; samesite=None
JSESSIONID=4B28639C0345DB7B7259DBD1616F4880; Path=/; HttpOnly
hash=a0c760f96212151011d03a5d1e24d24a99e6856e5c2fa4f6e8756dc234e2de7f060d3816293ccf5c32|EBE153EE-C698-E7C5-E36E718C2AA5C605|6930; expires=Sun, 26 Mar 2023 09:44:21 -0000; domain=.getblue.io; path=/; secure; samesite=None
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
ib.adnxs.com/getuid?https://cms.getblue.io/cm/?src=appnexus&ckid=6EDD55ED-AFCC-48E4-86589E3865ED08F4&cid=EBE153EE-C698-E7C5-E36E718C2AA5C605&blueID=f25b285a-6295-4bf4-9a0c-3e4d69d1a71e&appnexusid=$UID
307 Redirection 0 B URL HTTP/1.1 ib.adnxs.com/getuid?https://cms.getblue.io/cm/?src=appnexus&ckid=6EDD55ED-AFCC-48E4-86589E3865ED08F4&cid=EBE153EE-C698-E7C5-E36E718C2AA5C605&blueID=f25b285a-6295-4bf4-9a0c-3e4d69d1a71e&appnexusid=$UID
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /getuid?https://cms.getblue.io/cm/?src=appnexus&ckid=6EDD55ED-AFCC-48E4-86589E3865ED08F4&cid=EBE153EE-C698-E7C5-E36E718C2AA5C605&blueID=f25b285a-6295-4bf4-9a0c-3e4d69d1a71e&appnexusid=$UID HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Fri, 24 Mar 2023 09:44:22 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
Location: https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%3A%2F%2Fcms.getblue.io%2Fcm%2F%3Fsrc%3Dappnexus%26ckid%3D6EDD55ED-AFCC-48E4-86589E3865ED08F4%26cid%3DEBE153EE-C698-E7C5-E36E718C2AA5C605%26blueID%3Df25b285a-6295-4bf4-9a0c-3e4d69d1a71e%26appnexusid%3D%24UID
AN-X-Request-Uuid: 705725d4-bb49-46bf-bc32-258b41fb98e0
Set-Cookie: uuid2=3123806623204673012; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Jun-2023 09:44:22 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 1006.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
track.adform.net/Serving/TrackPoint/?pm=497538&ADFPageName=pageview&ADFdivider=%7C&ord=466416986225&ADFtpmode=2&itm=eyJpdG1zIjpbeyJwZ3IiOiJjYXNpbm8ifV19&loc=https%3A%2F%2Fwww.leovegas.com%2Fen-no%2F%3Fbtag%3D667909_2632B01AD09A4321A7E14C7458431DFF%26c%3Dw1o8260c7a2dnpgn21uncig4%26pid%3D3747044%26bid%3D14983&Set1=en-US%7Cen-US%7C1280x1024%7C24
302 Found 929 B URL HTTP/2 track.adform.net/Serving/TrackPoint/?pm=497538&ADFPageName=pageview&ADFdivider=%7C&ord=466416986225&ADFtpmode=2&itm=eyJpdG1zIjpbeyJwZ3IiOiJjYXNpbm8ifV19&loc=https%3A%2F%2Fwww.leovegas.com%2Fen-no%2F%3Fbtag%3D667909_2632B01AD09A4321A7E14C7458431DFF%26c%3Dw1o8260c7a2dnpgn21uncig4%26pid%3D3747044%26bid%3D14983&Set1=en-US%7Cen-US%7C1280x1024%7C24
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (434), with CRLF, LF line terminators
Hash 734305a0e0bfcdd427d056d83db33b1b
789053c8e45b8cc393d3b1755e32955274ef7746
f59dd750034eb490d0d18f6c555a8ff8b6d8becf6b3d92fea170c48beaae9a25
GET /Serving/TrackPoint/?pm=497538&ADFPageName=pageview&ADFdivider=%7C&ord=466416986225&ADFtpmode=2&itm=eyJpdG1zIjpbeyJwZ3IiOiJjYXNpbm8ifV19&loc=https%3A%2F%2Fwww.leovegas.com%2Fen-no%2F%3Fbtag%3D667909_2632B01AD09A4321A7E14C7458431DFF%26c%3Dw1o8260c7a2dnpgn21uncig4%26pid%3D3747044%26bid%3D14983&Set1=en-US%7Cen-US%7C1280x1024%7C24 HTTP/1.1
Host: track.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Fri, 24 Mar 2023 09:44:21 GMT
content-type: text/html; charset=utf-8
location: https://track.adform.net/Serving/TrackPoint/?CC=1&pm=497538&ADFPageName=pageview&ADFdivider=%7C&ord=466416986225&ADFtpmode=2&itm=eyJpdG1zIjpbeyJwZ3IiOiJjYXNpbm8ifV19&loc=https%3A%2F%2Fwww.leovegas.com%2Fen-no%2F%3Fbtag%3D667909_2632B01AD09A4321A7E14C7458431DFF%26c%3Dw1o8260c7a2dnpgn21uncig4%26pid%3D3747044%26bid%3D14983&Set1=en-US%7Cen-US%7C1280x1024%7C24
cache-control: no-cache, no-store, must-revalidate, no-transform
pragma: no-cache
expires: -1
access-control-allow-origin: *
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version
set-cookie: C=1; domain=adform.net; expires=Mon, 24-Apr-2023 08:44:21 GMT; path=/
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 1d3dcf9723865c5e2ed30f84aa78c473
d17e499234c5ffca6691657cda4a476b70158812
0e0a6935498a81269d453b2b2d3f953fa57e4a4bb7f21f0a0862e535f31258fe
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 24 Mar 2023 09:44:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%3A%2F%2Fcms.getblue.io%2Fcm%2F%3Fsrc%3Dappnexus%26ckid%3D6EDD55ED-AFCC-48E4-86589E3865ED08F4%26cid%3DEBE153EE-C698-E7C5-E36E718C2AA5C605%26blueID%3Df25b285a-6295-4bf4-9a0c-3e4d69d1a71e%26appnexusid%3D%24UID
302 Found 0 B URL HTTP/1.1 ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%3A%2F%2Fcms.getblue.io%2Fcm%2F%3Fsrc%3Dappnexus%26ckid%3D6EDD55ED-AFCC-48E4-86589E3865ED08F4%26cid%3DEBE153EE-C698-E7C5-E36E718C2AA5C605%26blueID%3Df25b285a-6295-4bf4-9a0c-3e4d69d1a71e%26appnexusid%3D%24UID
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bounce?%2Fgetuid%3Fhttps%3A%2F%2Fcms.getblue.io%2Fcm%2F%3Fsrc%3Dappnexus%26ckid%3D6EDD55ED-AFCC-48E4-86589E3865ED08F4%26cid%3DEBE153EE-C698-E7C5-E36E718C2AA5C605%26blueID%3Df25b285a-6295-4bf4-9a0c-3e4d69d1a71e%26appnexusid%3D%24UID HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.21.3
Date: Fri, 24 Mar 2023 09:44:22 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
Location: https://cms.getblue.io/cm/?src=appnexus&ckid=6EDD55ED-AFCC-48E4-86589E3865ED08F4&cid=EBE153EE-C698-E7C5-E36E718C2AA5C605&blueID=f25b285a-6295-4bf4-9a0c-3e4d69d1a71e&appnexusid=0
AN-X-Request-Uuid: 6765af72-5638-4614-9abb-d41433d2aba6
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 1006.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
ib.adnxs.com/bounce?%2Fsetuid%3Fentity%3D449%26code%3D6EDD55ED-AFCC-48E4-86589E3865ED08F4
200 OK 43 B URL HTTP/1.1 ib.adnxs.com/bounce?%2Fsetuid%3Fentity%3D449%26code%3D6EDD55ED-AFCC-48E4-86589E3865ED08F4
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 592ebefc7104d681d57852665e9ad514
15cdf8df32aa251dd6dd590a60bf9cf74474e7c5
4b5b6b15c6255109e06720cce42a06d3aead8b7874423d9c52cb0303212c25ef
GET /bounce?%2Fsetuid%3Fentity%3D449%26code%3D6EDD55ED-AFCC-48E4-86589E3865ED08F4 HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Fri, 24 Mar 2023 09:44:22 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
AN-X-Request-Uuid: 4b684a7e-2968-407e-b848-9aeca187460f
Set-Cookie: anj=dTM7k!M4.FD>6NRF']wIg2In7sI^bm!]tbPl@/8LQ0[eC=E1TBeTuCZjSE-?h1U:Se8>'rkBBgbdYCxS<Dh?OAPfg+M!g]5!Po6_!*0qZ(SUc*!:1mfe[/zA; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Jun-2023 09:44:22 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 1006.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
widget.getblue.io/event/?cId=EBE153EE-C698-E7C5-E36E718C2AA5C605&tName=visit&pId=&revenue=&orderId=&p1=&p2=e%3Dvp&p3=e%3Ddis&adce=1&dtycbr=87954&fp=&blueID=f25b285a-6295-4bf4-9a0c-3e4d69d1a71e&v=13072020-1328&if=0&nocache=5145893380312.376
200 OK 402 B URL HTTP/2 widget.getblue.io/event/?cId=EBE153EE-C698-E7C5-E36E718C2AA5C605&tName=visit&pId=&revenue=&orderId=&p1=&p2=e%3Dvp&p3=e%3Ddis&adce=1&dtycbr=87954&fp=&blueID=f25b285a-6295-4bf4-9a0c-3e4d69d1a71e&v=13072020-1328&if=0&nocache=5145893380312.376
IP
File type exported SGML document, ASCII text
Hash f73f5c13d3830de39395c94c9fc1d409
4809207cbb65d0af1bc1bdb8dcc9926f84d2ab53
3b1fd83dfc72a94922273b5109502fd18f10956a8430d0b9ae3460fbc5fac8f2
GET /event/?cId=EBE153EE-C698-E7C5-E36E718C2AA5C605&tName=visit&pId=&revenue=&orderId=&p1=&p2=e%3Dvp&p3=e%3Ddis&adce=1&dtycbr=87954&fp=&blueID=f25b285a-6295-4bf4-9a0c-3e4d69d1a71e&v=13072020-1328&if=0&nocache=5145893380312.376 HTTP/1.1
Host: widget.getblue.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 24 Mar 2023 09:44:21 GMT
content-type: text/javascript;charset=UTF-8
content-encoding: gzip
X-Firefox-Spdy: h2
track.adform.net/Serving/TrackPoint/?CC=1&pm=497538&ADFPageName=Sc_Ret&ADFdivider=%7C&ord=62315005948&ADFtpmode=2&loc=https%3A%2F%2Fwww.leovegas.com%2Fen-no%2F%3Fbtag%3D667909_2632B01AD09A4321A7E14C7458431DFF%26c%3Dw1o8260c7a2dnpgn21uncig4%26pid%3D3747044%26bid%3D14983&Set1=en-US%7Cen-US%7C1280x1024%7C24
200 OK 573 B URL HTTP/2 track.adform.net/Serving/TrackPoint/?CC=1&pm=497538&ADFPageName=Sc_Ret&ADFdivider=%7C&ord=62315005948&ADFtpmode=2&loc=https%3A%2F%2Fwww.leovegas.com%2Fen-no%2F%3Fbtag%3D667909_2632B01AD09A4321A7E14C7458431DFF%26c%3Dw1o8260c7a2dnpgn21uncig4%26pid%3D3747044%26bid%3D14983&Set1=en-US%7Cen-US%7C1280x1024%7C24
IP
File type HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 351c7a7421a138541018da39debee3ae
87f9afbf9bb4b440bc0eb139bd84c959c1cb5f2b
447c85044229bb6282b1cb85d1b0ff7344a36d34ece1d71ca1478272d27a0c86
GET /Serving/TrackPoint/?CC=1&pm=497538&ADFPageName=Sc_Ret&ADFdivider=%7C&ord=62315005948&ADFtpmode=2&loc=https%3A%2F%2Fwww.leovegas.com%2Fen-no%2F%3Fbtag%3D667909_2632B01AD09A4321A7E14C7458431DFF%26c%3Dw1o8260c7a2dnpgn21uncig4%26pid%3D3747044%26bid%3D14983&Set1=en-US%7Cen-US%7C1280x1024%7C24 HTTP/1.1
Host: track.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.leovegas.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 24 Mar 2023 09:44:22 GMT
content-type: text/javascript; charset=utf-8
content-length: 573
cache-control: no-cache, no-store, must-revalidate, no-transform
pragma: no-cache
content-encoding: gzip
expires: -1
vary: Accept-Encoding
access-control-allow-origin: *
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
events.launchdarkly.com/events/bulk/5b9627a39619fd15611a390c
202 Accepted 0 B URL HTTP/2 events.launchdarkly.com/events/bulk/5b9627a39619fd15611a390c
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /events/bulk/5b9627a39619fd15611a390c HTTP/1.1
Host: events.launchdarkly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-LaunchDarkly-User-Agent: JSClient/2.24.2
X-LaunchDarkly-Event-Schema: 3
X-LaunchDarkly-Payload-ID: 7a9437f0-ca28-11ed-b22e-43786ebd97bc
Content-Length: 2340
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 202 Accepted
date: Fri, 24 Mar 2023 09:44:22 GMT
content-type: application/json
content-length: 0
access-control-allow-headers: Accept,Content-Type,Content-Length,Accept-Encoding,X-LaunchDarkly-Event-Schema,X-LaunchDarkly-User-Agent,X-LaunchDarkly-Payload-ID,X-LaunchDarkly-Wrapper,X-LaunchDarkly-Tags
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Date
access-control-max-age: 300
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
cms.getblue.io/cm/?src=appnexus&ckid=6EDD55ED-AFCC-48E4-86589E3865ED08F4&cid=EBE153EE-C698-E7C5-E36E718C2AA5C605&blueID=f25b285a-6295-4bf4-9a0c-3e4d69d1a71e&appnexusid=0
200 OK 2 B URL HTTP/2 cms.getblue.io/cm/?src=appnexus&ckid=6EDD55ED-AFCC-48E4-86589E3865ED08F4&cid=EBE153EE-C698-E7C5-E36E718C2AA5C605&blueID=f25b285a-6295-4bf4-9a0c-3e4d69d1a71e&appnexusid=0
IP
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
GET /cm/?src=appnexus&ckid=6EDD55ED-AFCC-48E4-86589E3865ED08F4&cid=EBE153EE-C698-E7C5-E36E718C2AA5C605&blueID=f25b285a-6295-4bf4-9a0c-3e4d69d1a71e&appnexusid=0 HTTP/1.1
Host: cms.getblue.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: ckid=6EDD55ED-AFCC-48E4-86589E3865ED08F4; hash=a0c760f96212151011d03a5d1e24d24a99e6856e5c2fa4f6e8756dc234e2de7f060d3816293ccf5c32|EBE153EE-C698-E7C5-E36E718C2AA5C605|6930
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 24 Mar 2023 09:44:22 GMT
content-type: application/json; charset=utf-8
content-length: 2
x-powered-by: Express
X-Firefox-Spdy: h2
cms.getblue.io/cm/?src=adx&child=europe&ckid=6EDD55ED-AFCC-48E4-86589E3865ED08F4&cid=EBE153EE-C698-E7C5-E36E718C2AA5C605&ula=6572934421&blueID=f25b285a-6295-4bf4-9a0c-3e4d69d1a71e&google_error=3
200 OK 2 B URL HTTP/2 cms.getblue.io/cm/?src=adx&child=europe&ckid=6EDD55ED-AFCC-48E4-86589E3865ED08F4&cid=EBE153EE-C698-E7C5-E36E718C2AA5C605&ula=6572934421&blueID=f25b285a-6295-4bf4-9a0c-3e4d69d1a71e&google_error=3
IP
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
GET /cm/?src=adx&child=europe&ckid=6EDD55ED-AFCC-48E4-86589E3865ED08F4&cid=EBE153EE-C698-E7C5-E36E718C2AA5C605&ula=6572934421&blueID=f25b285a-6295-4bf4-9a0c-3e4d69d1a71e&google_error=3 HTTP/1.1
Host: cms.getblue.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: ckid=6EDD55ED-AFCC-48E4-86589E3865ED08F4; hash=a0c760f96212151011d03a5d1e24d24a99e6856e5c2fa4f6e8756dc234e2de7f060d3816293ccf5c32|EBE153EE-C698-E7C5-E36E718C2AA5C605|6930
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 24 Mar 2023 09:44:23 GMT
content-type: application/json; charset=utf-8
content-length: 2
x-powered-by: Express
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.CasinoScreen~493df0b3.53b881d16b2bbe3dd406.chunk.js?e=p
200 OK 0 B URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.CasinoScreen~493df0b3.53b881d16b2bbe3dd406.chunk.js?e=p
IP
GET /fulcrum/v4/master/dynamic/mobile.CasinoScreen~493df0b3.53b881d16b2bbe3dd406.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdsdGM1GKgA4tlPulnW_dywQP9K3PzdxGUATfwaE4wykks3jtjEtzp6DKxmA9aGON0SnBrMf96o2ESCRloW-h0K3PQ
x-goog-generation: 1679319455356739
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 40333
content-encoding: gzip
x-goog-hash: crc32c=OjLVoA==, md5=a6uoyg5Cvq45O34EnKbraQ==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 40333
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Mon, 20 Mar 2023 13:49:09 GMT
expires: Mon, 17 Apr 2023 13:49:09 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Mon, 20 Mar 2023 13:37:35 GMT
etag: "6baba8ca0e42beae393b7e049ca6eb69"
content-type: application/javascript
vary: Origin
age: 330908
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
track.adform.net/Serving/TrackPoint/?pm=497538&ADFPageName=LeoVegas%7C%2Fcasino&ADFdivider=%7C&ord=249383515844&ADFtpmode=2&loc=https%3A%2F%2Fwww.leovegas.com%2Fen-no%2F%3Fbtag%3D667909_2632B01AD09A4321A7E14C7458431DFF%26c%3Dw1o8260c7a2dnpgn21uncig4%26pid%3D3747044%26bid%3D14983&Set1=en-US%7Cen-US%7C1280x1024%7C24
302 Found 0 B URL HTTP/2 track.adform.net/Serving/TrackPoint/?pm=497538&ADFPageName=LeoVegas%7C%2Fcasino&ADFdivider=%7C&ord=249383515844&ADFtpmode=2&loc=https%3A%2F%2Fwww.leovegas.com%2Fen-no%2F%3Fbtag%3D667909_2632B01AD09A4321A7E14C7458431DFF%26c%3Dw1o8260c7a2dnpgn21uncig4%26pid%3D3747044%26bid%3D14983&Set1=en-US%7Cen-US%7C1280x1024%7C24
IP
GET /Serving/TrackPoint/?pm=497538&ADFPageName=LeoVegas%7C%2Fcasino&ADFdivider=%7C&ord=249383515844&ADFtpmode=2&loc=https%3A%2F%2Fwww.leovegas.com%2Fen-no%2F%3Fbtag%3D667909_2632B01AD09A4321A7E14C7458431DFF%26c%3Dw1o8260c7a2dnpgn21uncig4%26pid%3D3747044%26bid%3D14983&Set1=en-US%7Cen-US%7C1280x1024%7C24 HTTP/1.1
Host: track.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Fri, 24 Mar 2023 09:44:19 GMT
content-type: text/html; charset=utf-8
location: https://track.adform.net/Serving/TrackPoint/?CC=1&pm=497538&ADFPageName=LeoVegas%7C%2Fcasino&ADFdivider=%7C&ord=249383515844&ADFtpmode=2&loc=https%3A%2F%2Fwww.leovegas.com%2Fen-no%2F%3Fbtag%3D667909_2632B01AD09A4321A7E14C7458431DFF%26c%3Dw1o8260c7a2dnpgn21uncig4%26pid%3D3747044%26bid%3D14983&Set1=en-US%7Cen-US%7C1280x1024%7C24
cache-control: no-cache, no-store, must-revalidate, no-transform
pragma: no-cache
expires: -1
access-control-allow-origin: *
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version
set-cookie: C=1; domain=adform.net; expires=Mon, 24-Apr-2023 08:44:19 GMT; path=/
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
track.adform.net/Serving/TrackPoint/?pm=497538&ADFPageName=Sc_Ret&ADFdivider=%7C&ord=878851852694&ADFtpmode=2&loc=https%3A%2F%2Fwww.leovegas.com%2Fen-no%2F%3Fbtag%3D667909_2632B01AD09A4321A7E14C7458431DFF%26c%3Dw1o8260c7a2dnpgn21uncig4%26pid%3D3747044%26bid%3D14983&Set1=en-US%7Cen-US%7C1280x1024%7C24
302 Found 0 B URL HTTP/2 track.adform.net/Serving/TrackPoint/?pm=497538&ADFPageName=Sc_Ret&ADFdivider=%7C&ord=878851852694&ADFtpmode=2&loc=https%3A%2F%2Fwww.leovegas.com%2Fen-no%2F%3Fbtag%3D667909_2632B01AD09A4321A7E14C7458431DFF%26c%3Dw1o8260c7a2dnpgn21uncig4%26pid%3D3747044%26bid%3D14983&Set1=en-US%7Cen-US%7C1280x1024%7C24
IP
GET /Serving/TrackPoint/?pm=497538&ADFPageName=Sc_Ret&ADFdivider=%7C&ord=878851852694&ADFtpmode=2&loc=https%3A%2F%2Fwww.leovegas.com%2Fen-no%2F%3Fbtag%3D667909_2632B01AD09A4321A7E14C7458431DFF%26c%3Dw1o8260c7a2dnpgn21uncig4%26pid%3D3747044%26bid%3D14983&Set1=en-US%7Cen-US%7C1280x1024%7C24 HTTP/1.1
Host: track.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Fri, 24 Mar 2023 09:44:19 GMT
content-type: text/html; charset=utf-8
location: https://track.adform.net/Serving/TrackPoint/?CC=1&pm=497538&ADFPageName=Sc_Ret&ADFdivider=%7C&ord=878851852694&ADFtpmode=2&loc=https%3A%2F%2Fwww.leovegas.com%2Fen-no%2F%3Fbtag%3D667909_2632B01AD09A4321A7E14C7458431DFF%26c%3Dw1o8260c7a2dnpgn21uncig4%26pid%3D3747044%26bid%3D14983&Set1=en-US%7Cen-US%7C1280x1024%7C24
cache-control: no-cache, no-store, must-revalidate, no-transform
pragma: no-cache
expires: -1
access-control-allow-origin: *
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version
set-cookie: C=1; domain=adform.net; expires=Mon, 24-Apr-2023 08:44:19 GMT; path=/
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
dmp.adform.net/serving/cookie/match?CC=1&party=1140&cid=&uid=-5932061713061764574
200 OK 0 B URL HTTP/2 dmp.adform.net/serving/cookie/match?CC=1&party=1140&cid=&uid=-5932061713061764574
IP
GET /serving/cookie/match?CC=1&party=1140&cid=&uid=-5932061713061764574 HTTP/1.1
Host: dmp.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.leovegas.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 24 Mar 2023 09:44:20 GMT
content-type: image/gif
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: GET
access-control-allow-origin: *
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
www.leovegas.com/nb-no/?btag=667909_2632B01AD09A4321A7E14C7458431DFF&c=w1o8260c7a2dnpgn21uncig4&pid=3747044&bid=14983
302 Found 0 B URL HTTP/2 www.leovegas.com/nb-no/?btag=667909_2632B01AD09A4321A7E14C7458431DFF&c=w1o8260c7a2dnpgn21uncig4&pid=3747044&bid=14983
IP
GET /nb-no/?btag=667909_2632B01AD09A4321A7E14C7458431DFF&c=w1o8260c7a2dnpgn21uncig4&pid=3747044&bid=14983 HTTP/1.1
Host: www.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a3747044%2c%22BID%22%3a14983%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1679651056107)%5c%2f%22%2c%22CookieTag%22%3a%22149833747044451240919C2023324944%22%7d%5d
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Fri, 24 Mar 2023 09:44:16 GMT
content-type: application/json; charset=utf8
content-encoding: gzip
location: /en-no/?btag=667909_2632B01AD09A4321A7E14C7458431DFF&c=w1o8260c7a2dnpgn21uncig4&pid=3747044&bid=14983
strict-transport-security: max-age=63072000;
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy: frame-ancestors 'self' *.leovegas.com *.casinomodule.com *.yggdrasilgaming.com *.evolutiongaming.com *.gameassists.co.uk *.gameassists.dk *.rgsgames.com *.wagerworks.com *.adform.com *.livetables.io *.regily.com *.casinoalternativen.com *.onlinecasinobonus24.xyz *.livetableshu.com webcache.googleusercontent.com
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
set-cookie: leo-essentials=%7B%22cid%22%3A%2227dff399-a733-4fab-93d1-5a6120b795fa%22%7D; Max-Age=31536000; Path=/; Secure
visid_incap_846569=DXjdECU4SLq8a14LzWFWhe9wHWQAAAAAQUIPAAAAAADejACT5oXvHiuqjsPhar1O; expires=Fri, 22 Mar 2024 22:59:40 GMT; HttpOnly; path=/; Domain=.leovegas.com; Secure; SameSite=None
nlbi_846569=9UVTZ2oxnUYFcFQiTJV9qQAAAAAL+ziJ9s5gHTP7VoF/uMkL; path=/; Domain=.leovegas.com; Secure; SameSite=None
incap_ses_720_846569=zn7xB0q17XR3KsVDGPX9Ce9wHWQAAAAAELRSLEKVBeZ7DRlICzWMdw==; path=/; Domain=.leovegas.com; Secure; SameSite=None
x-cdn: Imperva
x-iinfo: 5-8964098-8964101 NNNY CT(1 12 0) RT(1679651055403 42) q(0 0 0 0) r(1 1) U11
X-Firefox-Spdy: h2
cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.vendors~CasinoScreen~MyOffers~Payment~WelcomeOffer~b3c4a2ff.60604200e65ac8f7e4fe.chunk.js?e=p
200 OK 0 B URL HTTP/2 cdn.leovegas.com/fulcrum/v4/master/dynamic/mobile.vendors~CasinoScreen~MyOffers~Payment~WelcomeOffer~b3c4a2ff.60604200e65ac8f7e4fe.chunk.js?e=p
IP
GET /fulcrum/v4/master/dynamic/mobile.vendors~CasinoScreen~MyOffers~Payment~WelcomeOffer~b3c4a2ff.60604200e65ac8f7e4fe.chunk.js?e=p HTTP/1.1
Host: cdn.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.leovegas.com
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdsB2zozz6IixRaJeM-C5ea2O77zIiQqfe4ObJemdpJyR6skeRGgA5YeSyTm_WiVKEvvgRxhuhd0LTAfYJmRL1ej26SO31TN
x-goog-generation: 1679319458087304
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 6712
content-encoding: gzip
x-goog-hash: crc32c=Aqx6ag==, md5=nhpQZ65aRGgVzfV5YacRsQ==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 6712
access-control-allow-origin: https://www.leovegas.com
access-control-expose-headers: Content-Length, Content-Type, Date, Response-Type, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Mon, 20 Mar 2023 13:49:09 GMT
expires: Mon, 17 Apr 2023 13:49:09 GMT
cache-control: public, max-age=2419200,no-transform
last-modified: Mon, 20 Mar 2023 13:37:38 GMT
etag: "9e1a5067ae5a446815cdf57961a711b1"
content-type: application/javascript
vary: Origin
age: 330908
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
static.hotjar.com/c/hotjar-380080.js?sv=7
200 OK 0 B URL HTTP/2 static.hotjar.com/c/hotjar-380080.js?sv=7
IP
GET /c/hotjar-380080.js?sv=7 HTTP/1.1
Host: static.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
date: Fri, 24 Mar 2023 09:43:29 GMT
access-control-allow-origin: *
cache-control: max-age=60
content-encoding: br
cross-origin-resource-policy: cross-origin
etag: W/45d9a6e8a3504731bd3de1dabd6f53af
strict-transport-security: max-age=2592000; includeSubDomains
x-cache-hit: 1
x-content-type-options: nosniff
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 5xJGZ84kBWcqQ-fAXeH2Wq9OgqhiL5wjWQxqk6Fgo2QPX-UU8JrXpg==
age: 52
X-Firefox-Spdy: h2
track.adform.net/serving/scripts/trackpoint/async/
301 Moved Permanently 0 B URL HTTP/2 track.adform.net/serving/scripts/trackpoint/async/
IP
GET /serving/scripts/trackpoint/async/ HTTP/1.1
Host: track.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: nginx
date: Fri, 24 Mar 2023 09:44:18 GMT
content-type: text/html
location: https://s2.adform.net/banners/scripts/st/trackpoint-async.js
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
scripts.prdredir.com/scripts/k_leovegas.js
200 OK 0 B URL HTTP/2 scripts.prdredir.com/scripts/k_leovegas.js
IP
GET /scripts/k_leovegas.js HTTP/1.1
Host: scripts.prdredir.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 24 Mar 2023 09:44:20 GMT
content-type: text/javascript; charset=utf-8
status: 200 OK
cache-control: no-cache
access-control-allow-origin: *
x-request-id: 0c9abcee-d226-4ffa-b8de-e7e3251b97e8
etag: W/"dc15e72bb78bf3e1f68429fb2ffb04e1"
x-runtime: 0.006924
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wQ7NNzYooYtHDZ3lJZQyUVQAzCrT8COx4R8WEZ86%2BHSLQNkyGb94hSyGoa0SACAUJK%2BbqS%2Fz%2FOCEyPLOhNGSq2%2BIh7YHAqU3uwsp6Y2xdhZXz8CBPlm0h%2FNyAz5IXApeLlJfO0cR%2FQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7acdf9981983fac0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.seondf.com/js/v4/agent.js
200 OK 0 B URL HTTP/2 cdn.seondf.com/js/v4/agent.js
IP
GET /js/v4/agent.js HTTP/1.1
Host: cdn.seondf.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 24 Mar 2023 09:44:17 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Tue, 20 Dec 2022 16:00:08 GMT
etag: W/"c34c3067f651e0fea2609171ab7bfec0"
x-amz-server-side-encryption: AES256
cache-control: max-age=14400
x-amz-version-id: oBwuMALhSWNlluJ4Z9BGO_.GELHIAD3H
x-cache: Miss from cloudfront
via: 1.1 4f01f770085624552bc30a98954f963a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 9SYjer0vMAoRdSCWo5iwyu5TLdqeRbq-xBSB-fltdaHaFS8p45bvQw==
cf-cache-status: HIT
age: 546
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=za59fGu21hMhm6TmJuiQxIjhXjTyMuqHQta5G3d%2F69Yi%2FHh0N11RjUnRaNLVmcldcuTWCNsWLr2Yfg%2BjHiSgviddUXpUTfEfddQtyxy0UdNXjKVdNmQ4BjisDjFAyfOnrQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7acdf9830b82b515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.leovegas.com/api?relay
200 OK 0 B URL HTTP/2 www.leovegas.com/api?relay
IP
POST /api?relay HTTP/1.1
Host: www.leovegas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.leovegas.com/en-no/?btag=667909_2632B01AD09A4321A7E14C7458431DFF&c=w1o8260c7a2dnpgn21uncig4&pid=3747044&bid=14983
x-request-id: e8b7536b-86ae-41fc-88f1-926ae8b35e5b
content-type: application/json
x-leo-locale: en-no
Origin: https://www.leovegas.com
Content-Length: 10899
Connection: keep-alive
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a3747044%2c%22BID%22%3a14983%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1679651056107)%5c%2f%22%2c%22CookieTag%22%3a%22149833747044451240919C2023324944%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%222861626257%7c1%22%7d%5d; leo-essentials=%7B%22cid%22%3A%2227dff399-a733-4fab-93d1-5a6120b795fa%22%7D; visid_incap_846569=DXjdECU4SLq8a14LzWFWhe9wHWQAAAAAQUIPAAAAAADejACT5oXvHiuqjsPhar1O; nlbi_846569=9UVTZ2oxnUYFcFQiTJV9qQAAAAAL+ziJ9s5gHTP7VoF/uMkL; incap_ses_720_846569=zn7xB0q17XR3KsVDGPX9Ce9wHWQAAAAAELRSLEKVBeZ7DRlICzWMdw==; leobtag=667909_2632B01AD09A4321A7E14C7458431DFF; leonrpid=3747044; leonrbid=14983; leonrmeta=[{"value":"w1o8260c7a2dnpgn21uncig4","key":"c"}]
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 24 Mar 2023 09:44:19 GMT
content-type: application/json
content-encoding: gzip
strict-transport-security: max-age=63072000;
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy: frame-ancestors 'self' *.leovegas.com *.casinomodule.com *.yggdrasilgaming.com *.evolutiongaming.com *.gameassists.co.uk *.gameassists.dk *.rgsgames.com *.wagerworks.com *.adform.com *.livetables.io *.regily.com *.casinoalternativen.com *.onlinecasinobonus24.xyz *.livetableshu.com webcache.googleusercontent.com
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
x-cdn: Imperva
x-iinfo: 5-8964098-8964101 PNNy RT(1679651055403 2520) q(0 0 0 -1) r(3 3) U6
X-Firefox-Spdy: h2
s2.adform.net/banners/scripts/st/trackpoint-async.js
200 OK 0 B URL HTTP/2 s2.adform.net/banners/scripts/st/trackpoint-async.js
IP
GET /banners/scripts/st/trackpoint-async.js HTTP/1.1
Host: s2.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.leovegas.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 24 Mar 2023 09:44:19 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Tue, 29 Nov 2022 10:23:25 GMT
x-rgw-object-type: Normal
etag: W/"83eb5fafaa212c785f7393188ff817aa"
x-amz-request-id: tx0000062cf0e7d8446165f-006385e0d3-329354d9-default
access-control-allow-origin: *
cache-control: public, max-age=604800
x-cache-status: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
track.adform.net/Serving/TrackPoint/?pm=497538&ADFPageName=Sc_Ret&ADFdivider=%7C&ord=62315005948&ADFtpmode=2&loc=https%3A%2F%2Fwww.leovegas.com%2Fen-no%2F%3Fbtag%3D667909_2632B01AD09A4321A7E14C7458431DFF%26c%3Dw1o8260c7a2dnpgn21uncig4%26pid%3D3747044%26bid%3D14983&Set1=en-US%7Cen-US%7C1280x1024%7C24
302 Found 0 B URL HTTP/2 track.adform.net/Serving/TrackPoint/?pm=497538&ADFPageName=Sc_Ret&ADFdivider=%7C&ord=62315005948&ADFtpmode=2&loc=https%3A%2F%2Fwww.leovegas.com%2Fen-no%2F%3Fbtag%3D667909_2632B01AD09A4321A7E14C7458431DFF%26c%3Dw1o8260c7a2dnpgn21uncig4%26pid%3D3747044%26bid%3D14983&Set1=en-US%7Cen-US%7C1280x1024%7C24
IP
GET /Serving/TrackPoint/?pm=497538&ADFPageName=Sc_Ret&ADFdivider=%7C&ord=62315005948&ADFtpmode=2&loc=https%3A%2F%2Fwww.leovegas.com%2Fen-no%2F%3Fbtag%3D667909_2632B01AD09A4321A7E14C7458431DFF%26c%3Dw1o8260c7a2dnpgn21uncig4%26pid%3D3747044%26bid%3D14983&Set1=en-US%7Cen-US%7C1280x1024%7C24 HTTP/1.1
Host: track.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.leovegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Fri, 24 Mar 2023 09:44:22 GMT
content-type: text/html; charset=utf-8
location: https://track.adform.net/Serving/TrackPoint/?CC=1&pm=497538&ADFPageName=Sc_Ret&ADFdivider=%7C&ord=62315005948&ADFtpmode=2&loc=https%3A%2F%2Fwww.leovegas.com%2Fen-no%2F%3Fbtag%3D667909_2632B01AD09A4321A7E14C7458431DFF%26c%3Dw1o8260c7a2dnpgn21uncig4%26pid%3D3747044%26bid%3D14983&Set1=en-US%7Cen-US%7C1280x1024%7C24
cache-control: no-cache, no-store, must-revalidate, no-transform
pragma: no-cache
expires: -1
access-control-allow-origin: *
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version
set-cookie: C=1; domain=adform.net; expires=Mon, 24-Apr-2023 08:44:22 GMT; path=/
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
173.233.137.44
18.192.108.151
23.38.200.149
138.197.155.84
54.155.146.81
54.207.99.141
104.21.4.89
37.157.6.233
162.19.86.114
139.45.195.8
188.114.97.1