| u14288651.ct.sendgrid.net/ls/click?upn=u001.u4ORWdl7pDxPGKIoU01l2dEwcbxzKGybb-2Bqbj9Z9z3NQh3Hq1rxcT54lf9eN8qxWL7E7KycCt-2BvXpMKVJ7oNQr4KiRNOqx-2BTKeHLUpGbUZ4-3DRZqj_5OOxTcJtQ1F0AGWxzbhLCmlOFL8-2Fa1VkE0i7YHLY-2FIJ19hXw4CgG6Cv2fJ-2F69iwIw6hSw-2BSXFGmcXBbVThViHJ8gAqIi8-2BGFiJP8OY7u2JNccfcSprtrnWqJMHZniXaBHQvImCoCpppiB-2Bg25iubLl-2FQ7k1wQ5SbiJFku81vrnKf-2BIUxt6XYSkDFQIP8Embco0UKho79wnKDINTJrMCiEt6cz9TqqU4qMqwtjcuZ1rHxGJTLZsaFhFcIV7ZSMg1aaQCyD4jnI6Eo0PSM65lK2g93nBIknJWSQW2IOQ5i4IHunE2GAuI-2Fs22kMvm8SDzB0bk2xTS8uMku976Euzcavv75s6fJZX9rTPjjhcrbNe5Hrcm18dkAWOzPhuABCsKz3qIIlxaZHhnBNAQ0IG8sLmdfD4cgFQPqj9hObtHn8NydMi7yX-2FrjC3kMBNoY3I97kd6Nt9CJxeXMUVR4XhE79DI9MXOAU580QWnYXYTRCKN-2BNMSejjlb-2BdneggYh6IHHx3QWpwyGNTsYRQxKwC-2BSMnI7l-2FbdzEYm2VYQTZ6up7S2I1VvBMmBvfGXOa9lw2xYI35-2BGK-2B6nEFFBbSrLJ5BpLcURm3Ad7z-2Fe37fJfGdSdmZ10z452jQUIJEAK2Z8ln6pS57qMbFMfIp7aCwHWyIiI0E67-2B874N6jKqnTUSfIV08ThfpJ7lRpfloNlCa9qHUWSH6fkMYTTQUwIMNDZ-2BX-2BrChPLa3QDuCA5WBlxT906yulXadqgKx4QebAOuqxoujkIvOInMMc-2BgzpryRqWN9y80ArcVh2iFfQTY3wlVBpzoRF1VbkPuEWJvrijEg4bPPqCyPh5ockPVruQCQ0a0gv7G0LojTCSlLR5TGqJPrHM-2BHhtudXflPVRW-2B70pIHpB829-2FuX8FfnxDaHqLu1ulm2QwkqbS4xpxXJjMY-2B0aVks81dVM-2FMaM6FEFXrdSPdGtC-2FnYKz9g5ifKAA0iD-2B-2FKcVQ-3D-3D | 167.89.115.147 | | 81 B |
URL u14288651.ct.sendgrid.net/ls/click?upn=u001.u4ORWdl7pDxPGKIoU01l2dEwcbxzKGybb-2Bqbj9Z9z3NQh3Hq1rxcT54lf9eN8qxWL7E7KycCt-2BvXpMKVJ7oNQr4KiRNOqx-2BTKeHLUpGbUZ4-3DRZqj_5OOxTcJtQ1F0AGWxzbhLCmlOFL8-2Fa1VkE0i7YHLY-2FIJ19hXw4CgG6Cv2fJ-2F69iwIw6hSw-2BSXFGmcXBbVThViHJ8gAqIi8-2BGFiJP8OY7u2JNccfcSprtrnWqJMHZniXaBHQvImCoCpppiB-2Bg25iubLl-2FQ7k1wQ5SbiJFku81vrnKf-2BIUxt6XYSkDFQIP8Embco0UKho79wnKDINTJrMCiEt6cz9TqqU4qMqwtjcuZ1rHxGJTLZsaFhFcIV7ZSMg1aaQCyD4jnI6Eo0PSM65lK2g93nBIknJWSQW2IOQ5i4IHunE2GAuI-2Fs22kMvm8SDzB0bk2xTS8uMku976Euzcavv75s6fJZX9rTPjjhcrbNe5Hrcm18dkAWOzPhuABCsKz3qIIlxaZHhnBNAQ0IG8sLmdfD4cgFQPqj9hObtHn8NydMi7yX-2FrjC3kMBNoY3I97kd6Nt9CJxeXMUVR4XhE79DI9MXOAU580QWnYXYTRCKN-2BNMSejjlb-2BdneggYh6IHHx3QWpwyGNTsYRQxKwC-2BSMnI7l-2FbdzEYm2VYQTZ6up7S2I1VvBMmBvfGXOa9lw2xYI35-2BGK-2B6nEFFBbSrLJ5BpLcURm3Ad7z-2Fe37fJfGdSdmZ10z452jQUIJEAK2Z8ln6pS57qMbFMfIp7aCwHWyIiI0E67-2B874N6jKqnTUSfIV08ThfpJ7lRpfloNlCa9qHUWSH6fkMYTTQUwIMNDZ-2BX-2BrChPLa3QDuCA5WBlxT906yulXadqgKx4QebAOuqxoujkIvOInMMc-2BgzpryRqWN9y80ArcVh2iFfQTY3wlVBpzoRF1VbkPuEWJvrijEg4bPPqCyPh5ockPVruQCQ0a0gv7G0LojTCSlLR5TGqJPrHM-2BHhtudXflPVRW-2B70pIHpB829-2FuX8FfnxDaHqLu1ulm2QwkqbS4xpxXJjMY-2B0aVks81dVM-2FMaM6FEFXrdSPdGtC-2FnYKz9g5ifKAA0iD-2B-2FKcVQ-3D-3D IP167.89.115.147:0
File typeHTML document, ASCII text Hash888070883abd030effc998a7d22fa981 1594dbf9145050cd10f1f1526301ca7766dd0b4c 1b62084ec6290104f25a88bd27b4fdb6967a4e35779c7af2573a7668adee9097
GET /ls/click?upn=u001.u4ORWdl7pDxPGKIoU01l2dEwcbxzKGybb-2Bqbj9Z9z3NQh3Hq1rxcT54lf9eN8qxWL7E7KycCt-2BvXpMKVJ7oNQr4KiRNOqx-2BTKeHLUpGbUZ4-3DRZqj_5OOxTcJtQ1F0AGWxzbhLCmlOFL8-2Fa1VkE0i7YHLY-2FIJ19hXw4CgG6Cv2fJ-2F69iwIw6hSw-2BSXFGmcXBbVThViHJ8gAqIi8-2BGFiJP8OY7u2JNccfcSprtrnWqJMHZniXaBHQvImCoCpppiB-2Bg25iubLl-2FQ7k1wQ5SbiJFku81vrnKf-2BIUxt6XYSkDFQIP8Embco0UKho79wnKDINTJrMCiEt6cz9TqqU4qMqwtjcuZ1rHxGJTLZsaFhFcIV7ZSMg1aaQCyD4jnI6Eo0PSM65lK2g93nBIknJWSQW2IOQ5i4IHunE2GAuI-2Fs22kMvm8SDzB0bk2xTS8uMku976Euzcavv75s6fJZX9rTPjjhcrbNe5Hrcm18dkAWOzPhuABCsKz3qIIlxaZHhnBNAQ0IG8sLmdfD4cgFQPqj9hObtHn8NydMi7yX-2FrjC3kMBNoY3I97kd6Nt9CJxeXMUVR4XhE79DI9MXOAU580QWnYXYTRCKN-2BNMSejjlb-2BdneggYh6IHHx3QWpwyGNTsYRQxKwC-2BSMnI7l-2FbdzEYm2VYQTZ6up7S2I1VvBMmBvfGXOa9lw2xYI35-2BGK-2B6nEFFBbSrLJ5BpLcURm3Ad7z-2Fe37fJfGdSdmZ10z452jQUIJEAK2Z8ln6pS57qMbFMfIp7aCwHWyIiI0E67-2B874N6jKqnTUSfIV08ThfpJ7lRpfloNlCa9qHUWSH6fkMYTTQUwIMNDZ-2BX-2BrChPLa3QDuCA5WBlxT906yulXadqgKx4QebAOuqxoujkIvOInMMc-2BgzpryRqWN9y80ArcVh2iFfQTY3wlVBpzoRF1VbkPuEWJvrijEg4bPPqCyPh5ockPVruQCQ0a0gv7G0LojTCSlLR5TGqJPrHM-2BHhtudXflPVRW-2B70pIHpB829-2FuX8FfnxDaHqLu1ulm2QwkqbS4xpxXJjMY-2B0aVks81dVM-2FMaM6FEFXrdSPdGtC-2FnYKz9g5ifKAA0iD-2B-2FKcVQ-3D-3D HTTP/1.1
Host: u14288651.ct.sendgrid.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Tue, 23 Apr 2024 11:13:17 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 81
Connection: keep-alive
Location: http://plyctrl.com/urls/fairgoprincess/?subid1=ZFGAU230414
X-Robots-Tag: noindex, nofollow
|
|
| plyctrl.com/urls/fairgoprincess/?subid1=ZFGAU230414 | 167.172.36.139 | | 250 B |
URL plyctrl.com/urls/fairgoprincess/?subid1=ZFGAU230414 IP167.172.36.139:0 ASN#14061 DIGITALOCEAN-ASN
File typeHTML document, ASCII text Hash5f701af4cb9454066b986ec6d7ce396d fd3baa1e8cf74df7dfca4c35fe3802fc8f98aea6 69536697447c448b8fcb97bd476bb7bb151ac864fdb22b35bced88f3ba78a1ef
GET /urls/fairgoprincess/?subid1=ZFGAU230414 HTTP/1.1
Host: plyctrl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 23 Apr 2024 11:13:17 GMT
Server: Apache/2.4.41 (Ubuntu)
Link: <http://plyctrl.com/wp-json/>; rel="https://api.w.org/", <http://plyctrl.com/wp-json/wp/v2/urls/923>; rel="alternate"; type="application/json", <http://plyctrl.com/?p=923>; rel=shortlink
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 250
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
|
|
| www.fairgocasino.com/templates/fairgo_landingpages/images/fairgo/bg_landing.jpg | 172.67.163.146 | 200 OK | 30 kB |
URL GET HTTP/3www.fairgocasino.com/templates/fairgo_landingpages/images/fairgo/bg_landing.jpg IP172.67.163.146:443
Requested byhttps://www.fairgocasino.com/landing-pages/princess-warrior?laffid=5080<rackingid=191743772 CertificateIssuerLet's Encrypt Subjectfairgocasino.com Fingerprint4E:65:27:E8:E9:57:8A:BB:B1:F7:9D:C7:03:EB:4D:82:6F:61:28:29 ValidityThu, 07 Mar 2024 23:32:35 GMT - Wed, 05 Jun 2024 23:32:34 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x534, components 3 Hash7e363d58f07bcaa1bd24342460ccd94a f30d9b373e7b71a8ac433aa5b119a3b05cd93449 a63294ca639b3a415b6a9e4b5abd20775282bef2497d5855ccfad34a92d9fedf
GET /templates/fairgo_landingpages/images/fairgo/bg_landing.jpg HTTP/1.1
Host: www.fairgocasino.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.fairgocasino.com/landing-pages/princess-warrior?laffid=5080<rackingid=191743772
Cookie: 8d717cfbbaa65a4db03c27c8a5e3a0af=3vplc2dgeegfb09vat49k3o2hq
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 23 Apr 2024 11:13:21 GMT
content-type: image/jpeg
content-length: 29658
cache-control: max-age=2678400
last-modified: Mon, 08 Jan 2024 23:18:20 GMT
etag: W/"06baf78842da1:0"
x-content-type-options: nosniff
cf-cache-status: HIT
age: 1084999
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DQ6F%2FjEY7PXzihEuL4fjkrCzdrYGsMBGXZGuYGoX2eKtXrvhzm2gYyYwmgmglgZP0nabXsFkzd7cB9ngUZAsOJp2UOe7wLKkBh9Z2JAV%2FLTYeSX%2BXPxpiX8NH3sAI2UEX%2BlJ74s%2FVA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878d6c7bcb6856ae-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.fairgocasino.com/templates/fairgo_landingpages/images/fairgo/logo.png | 172.67.163.146 | 200 OK | 3.8 kB |
URL GET HTTP/3www.fairgocasino.com/templates/fairgo_landingpages/images/fairgo/logo.png IP172.67.163.146:443
Requested byhttps://www.fairgocasino.com/landing-pages/princess-warrior?laffid=5080<rackingid=191743772 CertificateIssuerLet's Encrypt Subjectfairgocasino.com Fingerprint4E:65:27:E8:E9:57:8A:BB:B1:F7:9D:C7:03:EB:4D:82:6F:61:28:29 ValidityThu, 07 Mar 2024 23:32:35 GMT - Wed, 05 Jun 2024 23:32:34 GMT
File typePNG image data, 169 x 106, 8-bit colormap, non-interlaced Hashc56b03d8c0c3a891b5e5b5ae7552e068 1916825b22864f67e8cf76633f90314871abda8c 6796fe8f82db1ad3e0465eb117a926bbd6d0348a18bc43f315dcb9b39d354bb0
GET /templates/fairgo_landingpages/images/fairgo/logo.png HTTP/1.1
Host: www.fairgocasino.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.fairgocasino.com/landing-pages/princess-warrior?laffid=5080<rackingid=191743772
Cookie: 8d717cfbbaa65a4db03c27c8a5e3a0af=3vplc2dgeegfb09vat49k3o2hq
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 23 Apr 2024 11:13:21 GMT
content-type: image/png
content-length: 3843
cache-control: max-age=2678400
last-modified: Mon, 08 Jan 2024 23:18:20 GMT
etag: W/"06baf78842da1:0"
x-content-type-options: nosniff
cf-cache-status: HIT
age: 1084999
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZJzeBOp%2FggXKI3cU1OeN1aLfn48t66jZyNNkALM2pVV9nal3o9yrIFlb17pu7gZ2scpTtsL2OnZUDYxYZ99lKDUrFU1lpR2kCoMIEENGchTFLlVooy0LX%2BIwOfEHs5XDBkIPNfFzUA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878d6c7bcb7056ae-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.fairgocasino.com/templates/fairgo_landingpages/images/fairgo/bullet.png | 172.67.163.146 | 200 OK | 1.4 kB |
URL GET HTTP/3www.fairgocasino.com/templates/fairgo_landingpages/images/fairgo/bullet.png IP172.67.163.146:443
Requested byhttps://www.fairgocasino.com/landing-pages/princess-warrior?laffid=5080<rackingid=191743772 CertificateIssuerLet's Encrypt Subjectfairgocasino.com Fingerprint4E:65:27:E8:E9:57:8A:BB:B1:F7:9D:C7:03:EB:4D:82:6F:61:28:29 ValidityThu, 07 Mar 2024 23:32:35 GMT - Wed, 05 Jun 2024 23:32:34 GMT
File typePNG image data, 29 x 23, 8-bit/color RGBA, non-interlaced Hash16ca7cc3718c0b246db90e87bba5e826 bc347880b504cd5d7572fa9e6b65ee9861002857 c41870104db3d307d152fadcfde303b21775f792986c25d6221c74398d5ee46d
GET /templates/fairgo_landingpages/images/fairgo/bullet.png HTTP/1.1
Host: www.fairgocasino.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.fairgocasino.com/landing-pages/princess-warrior?laffid=5080<rackingid=191743772
Cookie: 8d717cfbbaa65a4db03c27c8a5e3a0af=3vplc2dgeegfb09vat49k3o2hq
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 23 Apr 2024 11:13:21 GMT
content-type: image/png
content-length: 1384
cache-control: max-age=2678400
last-modified: Mon, 08 Jan 2024 23:18:20 GMT
etag: "06baf78842da1:0"
x-content-type-options: nosniff
cf-cache-status: HIT
age: 1092908
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Y6wkw6JfQYi%2BDvSTiJVkRXMgSzwhTRBGd19XlCKZQbjUApCNtHijzBHQY7JNN99cTpCR9%2BwZpjE0hvN6Aap29rflN4ajND3TKfTbvyuVur%2BP2gExV5ZPYg9kS7wbDf5q6p1CKoQSfA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878d6c7bcb6c56ae-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.fairgocasino.com/images/Affiliate/FG-Background_New_502.jpg | 172.67.163.146 | 200 OK | 39 kB |
URL GET HTTP/3www.fairgocasino.com/images/Affiliate/FG-Background_New_502.jpg IP172.67.163.146:443
Requested byhttps://www.fairgocasino.com/landing-pages/princess-warrior?laffid=5080<rackingid=191743772 CertificateIssuerLet's Encrypt Subjectfairgocasino.com Fingerprint4E:65:27:E8:E9:57:8A:BB:B1:F7:9D:C7:03:EB:4D:82:6F:61:28:29 ValidityThu, 07 Mar 2024 23:32:35 GMT - Wed, 05 Jun 2024 23:32:34 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x534, components 3 Hashe5739ad1c4fc14779b2e0f1f51767a2f 3889976de5790b7324664a9fb8262c6ee53588ef 8a651ed93580da1a786680d2788c26f0ac930f38cbe96fbb91dd0b99dc214868
GET /images/Affiliate/FG-Background_New_502.jpg HTTP/1.1
Host: www.fairgocasino.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.fairgocasino.com/landing-pages/princess-warrior?laffid=5080<rackingid=191743772
Cookie: 8d717cfbbaa65a4db03c27c8a5e3a0af=3vplc2dgeegfb09vat49k3o2hq
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 23 Apr 2024 11:13:21 GMT
content-type: image/jpeg
content-length: 38552
cache-control: max-age=86400
last-modified: Mon, 17 Dec 2018 16:02:24 GMT
etag: "b5beb9e62196d41:0"
x-content-type-options: nosniff
cf-cache-status: HIT
age: 24266
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=peiwz8Xn%2FtjI%2FNr3qR%2B%2BI0xVnLeyxP73eGplb%2FLzfr%2Fu%2F96CyJLuemfqBEdhEMrG3iU7FuFCcqShVTOYzx9ZVbuy8Wc1JFsgXcuvE8%2FqaCM3CsFt32VL181eX2bLq7i6QEtnp44iTA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878d6c7bcb7156ae-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.fairgocasino.com/images/payments/visa-logo.png | 172.67.163.146 | 200 OK | 1.5 kB |
URL GET HTTP/3www.fairgocasino.com/images/payments/visa-logo.png IP172.67.163.146:443
Requested byhttps://www.fairgocasino.com/landing-pages/princess-warrior?laffid=5080<rackingid=191743772 CertificateIssuerLet's Encrypt Subjectfairgocasino.com Fingerprint4E:65:27:E8:E9:57:8A:BB:B1:F7:9D:C7:03:EB:4D:82:6F:61:28:29 ValidityThu, 07 Mar 2024 23:32:35 GMT - Wed, 05 Jun 2024 23:32:34 GMT
File typePNG image data, 60 x 60, 8-bit colormap, non-interlaced Hash4a9ffe04f7916d0a488ab3c14e04fd1f 9a44296ebfd6001c7d0d6854c21d3ab507da6390 cbdbeb3c3672029b12e8194f9b11ac479e912fc427e8010b5c734fc347acc1e2
GET /images/payments/visa-logo.png HTTP/1.1
Host: www.fairgocasino.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.fairgocasino.com/landing-pages/princess-warrior?laffid=5080<rackingid=191743772
Cookie: 8d717cfbbaa65a4db03c27c8a5e3a0af=3vplc2dgeegfb09vat49k3o2hq
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 23 Apr 2024 11:13:21 GMT
content-type: image/png
content-length: 1529
cache-control: max-age=86400
last-modified: Mon, 17 Dec 2018 16:02:23 GMT
etag: "47bccce52196d41:0"
x-content-type-options: nosniff
cf-cache-status: HIT
age: 24266
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=T6vkQKGpWHvWEtpCu5x4Jos2Pp0GWojXd6ZwAwNC%2BmUEJt1oZh5O%2BoI3FMjtNFvDvkDJhmyBmN%2FlqtAWPuMvxJP5O0E4UZhbDyKED4hPasC5ls6nBLN7B9JGpXw%2Fh91%2FjinFhoUgRw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878d6c7bdb7b56ae-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.fairgocasino.com/images/payments/mastercard-logo.png | 172.67.163.146 | 200 OK | 1.7 kB |
URL GET HTTP/3www.fairgocasino.com/images/payments/mastercard-logo.png IP172.67.163.146:443
Requested byhttps://www.fairgocasino.com/landing-pages/princess-warrior?laffid=5080<rackingid=191743772 CertificateIssuerLet's Encrypt Subjectfairgocasino.com Fingerprint4E:65:27:E8:E9:57:8A:BB:B1:F7:9D:C7:03:EB:4D:82:6F:61:28:29 ValidityThu, 07 Mar 2024 23:32:35 GMT - Wed, 05 Jun 2024 23:32:34 GMT
File typePNG image data, 60 x 60, 8-bit colormap, non-interlaced Hash97b2a34c75a4a27616a9bc96b18f04d6 08ee1f4af6fe65266f4aefa2477211f6afd870cb f9aee1e50294a50b60e6ef10c693c9c2db1b45b2f465c4e7559abd8204175162
GET /images/payments/mastercard-logo.png HTTP/1.1
Host: www.fairgocasino.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.fairgocasino.com/landing-pages/princess-warrior?laffid=5080<rackingid=191743772
Cookie: 8d717cfbbaa65a4db03c27c8a5e3a0af=3vplc2dgeegfb09vat49k3o2hq
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 23 Apr 2024 11:13:21 GMT
content-type: image/png
content-length: 1718
cache-control: max-age=86400
last-modified: Mon, 17 Dec 2018 16:02:23 GMT
etag: "47bccce52196d41:0"
x-content-type-options: nosniff
cf-cache-status: HIT
age: 24266
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZRwF8nNGt0MAU6z0kjID04LM1LiFBJTPZM6mPYoV2NhvW5LEJLF2n0i9vXF1q3UnkGUsGRcjTGO0%2BDNSEQw0w9RATO4d1ksGBVXRuwa6LeValcaxSsMsQv5pDHvZSw3hgRigKZ4X9Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878d6c7bdb7c56ae-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.fairgocasino.com/images/payments/american-express.png | 172.67.163.146 | 200 OK | 1.4 kB |
URL GET HTTP/3www.fairgocasino.com/images/payments/american-express.png IP172.67.163.146:443
Requested byhttps://www.fairgocasino.com/landing-pages/princess-warrior?laffid=5080<rackingid=191743772 CertificateIssuerLet's Encrypt Subjectfairgocasino.com Fingerprint4E:65:27:E8:E9:57:8A:BB:B1:F7:9D:C7:03:EB:4D:82:6F:61:28:29 ValidityThu, 07 Mar 2024 23:32:35 GMT - Wed, 05 Jun 2024 23:32:34 GMT
File typePNG image data, 60 x 60, 8-bit colormap, non-interlaced Hashfbc783adc70ae09c0c4c2b2f3b2612a0 76c337ee0e8d0e69805ad95dbfd595bee990266b fb516f162b25c32b5328aa9ec3a9b63a32ec9951d1c7fd9a11bdff74a923ebff
GET /images/payments/american-express.png HTTP/1.1
Host: www.fairgocasino.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.fairgocasino.com/landing-pages/princess-warrior?laffid=5080<rackingid=191743772
Cookie: 8d717cfbbaa65a4db03c27c8a5e3a0af=3vplc2dgeegfb09vat49k3o2hq
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 23 Apr 2024 11:13:21 GMT
content-type: image/png
content-length: 1435
cache-control: max-age=86400
last-modified: Mon, 17 Dec 2018 16:02:23 GMT
etag: "7ff7c7e52196d41:0"
x-content-type-options: nosniff
cf-cache-status: HIT
age: 24266
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qGwM91Ep9xOUSm4Z9n2eXAZ33w5toGgifV3sX1KRg0VpdgheiDzid1OJPsbjEzoiVO1ITTdezG1rYgcjB0XwEXoSeynWg9qN0eTFwcv9wF5vJaucgMvgYvLw4pfpygzHG14EVs5wCA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878d6c7bdb7f56ae-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.fairgocasino.com/images/payments/bankwire.png | 172.67.163.146 | 200 OK | 1.3 kB |
URL GET HTTP/3www.fairgocasino.com/images/payments/bankwire.png IP172.67.163.146:443
Requested byhttps://www.fairgocasino.com/landing-pages/princess-warrior?laffid=5080<rackingid=191743772 CertificateIssuerLet's Encrypt Subjectfairgocasino.com Fingerprint4E:65:27:E8:E9:57:8A:BB:B1:F7:9D:C7:03:EB:4D:82:6F:61:28:29 ValidityThu, 07 Mar 2024 23:32:35 GMT - Wed, 05 Jun 2024 23:32:34 GMT
File typePNG image data, 60 x 60, 8-bit colormap, non-interlaced Hash1b84fd82f3f4bbbcf141bb208bdd60b6 ac25d9c5cca4a0628126aa8045b0a515b46af305 f92a08454f7b57f9a707a9caf853525abf032c3dd71b077eb93ef46e47d7ed5e
GET /images/payments/bankwire.png HTTP/1.1
Host: www.fairgocasino.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.fairgocasino.com/landing-pages/princess-warrior?laffid=5080<rackingid=191743772
Cookie: 8d717cfbbaa65a4db03c27c8a5e3a0af=3vplc2dgeegfb09vat49k3o2hq
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 23 Apr 2024 11:13:21 GMT
content-type: image/png
content-length: 1323
cache-control: max-age=86400
last-modified: Mon, 17 Dec 2018 16:02:23 GMT
etag: "e459cae52196d41:0"
x-content-type-options: nosniff
cf-cache-status: HIT
age: 24266
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=X7Z%2BLTOXZixsN81ozAFrdng5%2FlsfEm7ff6iKmwWeB%2FM0Ah2S71SwSJqyznXcevy646qcKC7hzTQSApbKUhSwPeTe6uwv72hA1uKYHSM8Y3udGdO1ZaZoKr%2B39V5cfJLBCafvIvUzKA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878d6c7beb8d56ae-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.fairgocasino.com/images/Affiliate/Neosurf_Footer.png | 172.67.163.146 | 200 OK | 1.2 kB |
URL GET HTTP/3www.fairgocasino.com/images/Affiliate/Neosurf_Footer.png IP172.67.163.146:443
Requested byhttps://www.fairgocasino.com/landing-pages/princess-warrior?laffid=5080<rackingid=191743772 CertificateIssuerLet's Encrypt Subjectfairgocasino.com Fingerprint4E:65:27:E8:E9:57:8A:BB:B1:F7:9D:C7:03:EB:4D:82:6F:61:28:29 ValidityThu, 07 Mar 2024 23:32:35 GMT - Wed, 05 Jun 2024 23:32:34 GMT
File typePNG image data, 60 x 60, 8-bit colormap, non-interlaced Hash41c7f7348078242a0c6c84b410eec21f bb35a5f4f4a046f86190b51fa89b5d18648fcde4 cadf37a37d3726b70718eaae1a9ef5ff0cbe7442ea2ad16a215b58533c65b4cb
GET /images/Affiliate/Neosurf_Footer.png HTTP/1.1
Host: www.fairgocasino.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.fairgocasino.com/landing-pages/princess-warrior?laffid=5080<rackingid=191743772
Cookie: 8d717cfbbaa65a4db03c27c8a5e3a0af=3vplc2dgeegfb09vat49k3o2hq
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 23 Apr 2024 11:13:21 GMT
content-type: image/png
content-length: 1246
cache-control: max-age=86400
last-modified: Mon, 17 Dec 2018 16:02:25 GMT
etag: "bdbec0e62196d41:0"
x-content-type-options: nosniff
cf-cache-status: HIT
age: 24266
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ck5%2BXkGGxo%2F8tQZiGZlccyaIvxFhQJsB8smYvk5fa3mCXMP7yNzkV%2FCJ3DkBUc1dNn4G%2BTAIWBp08TsqoHby2r1TqE4t9cGcn1Lz6q8Tex1RmWVWBWCIcjTnICht4YM14OVo7jYKZw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878d6c7beb8e56ae-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.fairgocasino.com/images/payments/bitcoin.png | 172.67.163.146 | 200 OK | 1.7 kB |
URL GET HTTP/3www.fairgocasino.com/images/payments/bitcoin.png IP172.67.163.146:443
Requested byhttps://www.fairgocasino.com/landing-pages/princess-warrior?laffid=5080<rackingid=191743772 CertificateIssuerLet's Encrypt Subjectfairgocasino.com Fingerprint4E:65:27:E8:E9:57:8A:BB:B1:F7:9D:C7:03:EB:4D:82:6F:61:28:29 ValidityThu, 07 Mar 2024 23:32:35 GMT - Wed, 05 Jun 2024 23:32:34 GMT
File typePNG image data, 60 x 60, 8-bit colormap, non-interlaced Hasheb695d687ee4353fae2a8c14e4ad6896 c0f317abf1eaaa3bb2e308c36a26f602d675bfed d53b88a140e0e2eef690e942f9cc4eb0dde1b6dbd416f03c20ada426b05a32af
GET /images/payments/bitcoin.png HTTP/1.1
Host: www.fairgocasino.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.fairgocasino.com/landing-pages/princess-warrior?laffid=5080<rackingid=191743772
Cookie: 8d717cfbbaa65a4db03c27c8a5e3a0af=3vplc2dgeegfb09vat49k3o2hq
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 23 Apr 2024 11:13:21 GMT
content-type: image/png
content-length: 1721
cache-control: max-age=86400
last-modified: Mon, 17 Dec 2018 16:02:23 GMT
etag: "e459cae52196d41:0"
x-content-type-options: nosniff
cf-cache-status: HIT
age: 24266
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hHEkDS%2BV7Q8TvZhunyUfb0VwOjexV9DMoHtkUnCGknRPbJG%2BnwDg%2FKkRbrHF3tG6JMaf6v1vfCdkREUZ1HCChKUh4uQyDETENnh%2Fo7b2LzGGcjRrv%2FDofvLLUWYvky9T%2FfLdn%2BiyyA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878d6c7beb8a56ae-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.fairgocasino.com/images/payments/Under18.png | 172.67.163.146 | 200 OK | 1.7 kB |
URL GET HTTP/3www.fairgocasino.com/images/payments/Under18.png IP172.67.163.146:443
Requested byhttps://www.fairgocasino.com/landing-pages/princess-warrior?laffid=5080<rackingid=191743772 CertificateIssuerLet's Encrypt Subjectfairgocasino.com Fingerprint4E:65:27:E8:E9:57:8A:BB:B1:F7:9D:C7:03:EB:4D:82:6F:61:28:29 ValidityThu, 07 Mar 2024 23:32:35 GMT - Wed, 05 Jun 2024 23:32:34 GMT
File typePNG image data, 60 x 60, 8-bit colormap, non-interlaced Hash9323ba93786b7f7439cef1b469e8fec4 b68fa30c5f3ba7d883913dec93adf9bf42a9a32f 7b727eab41405d8ddd3c8dc8adc1fcbd9b48e8dad079838bb1e5df2ff705b449
GET /images/payments/Under18.png HTTP/1.1
Host: www.fairgocasino.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.fairgocasino.com/landing-pages/princess-warrior?laffid=5080<rackingid=191743772
Cookie: 8d717cfbbaa65a4db03c27c8a5e3a0af=3vplc2dgeegfb09vat49k3o2hq
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 23 Apr 2024 11:13:21 GMT
content-type: image/png
content-length: 1722
cache-control: max-age=86400
last-modified: Mon, 17 Dec 2018 16:02:23 GMT
etag: "47bccce52196d41:0"
x-content-type-options: nosniff
cf-cache-status: HIT
age: 24266
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TyL1dPmE2Ef%2BjBmrb45M%2Fdni%2FOhdHp6ADcpdbOjxamdSNsgu7%2Bx3r0XVa12CSCCtNUN6oiKufvLFIqJmSZp%2BmAOaXgK79IeTLCZv2HxaA6yv3J7K%2BqJh2gshmHAPaknJ4q%2BrQv9cDA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878d6c7beb9056ae-OSL
alt-svc: h3=":443"; ma=86400
|
|
| fonts.gstatic.com/s/muli/v29/7Auwp_0qiz-afTLGLQ.woff2 | 216.58.207.227 | 200 OK | 33 kB |
URL GET HTTP/2fonts.gstatic.com/s/muli/v29/7Auwp_0qiz-afTLGLQ.woff2 IP216.58.207.227:443
Requested byhttps://www.fairgocasino.com/landing-pages/princess-warrior?laffid=5080<rackingid=191743772 CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 32796, version 1.0 Hashb2a264e3e87b58b54b76483238805a40 169d6f17c82024fe0cfc2d19884a14dae2ec0bdb f68d37d474952b1fbe30def1b69e63e79c46a70263433285783b69ac0107b929
GET /s/muli/v29/7Auwp_0qiz-afTLGLQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.fairgocasino.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 32796
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 16 Apr 2024 19:23:26 GMT
expires: Wed, 16 Apr 2025 19:23:26 GMT
cache-control: public, max-age=31536000
age: 575395
last-modified: Wed, 13 Sep 2023 22:41:22 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/muli/v29/7Auwp_0qiz-afTLGLQ.woff2 | 216.58.207.227 | 200 OK | 33 kB |
URL GET HTTP/2fonts.gstatic.com/s/muli/v29/7Auwp_0qiz-afTLGLQ.woff2 IP216.58.207.227:443
Requested byhttps://www.fairgocasino.com/landing-pages/princess-warrior?laffid=5080<rackingid=191743772 CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 32796, version 1.0 Hashb2a264e3e87b58b54b76483238805a40 169d6f17c82024fe0cfc2d19884a14dae2ec0bdb f68d37d474952b1fbe30def1b69e63e79c46a70263433285783b69ac0107b929
GET /s/muli/v29/7Auwp_0qiz-afTLGLQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.fairgocasino.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 32796
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 16 Apr 2024 19:23:26 GMT
expires: Wed, 16 Apr 2025 19:23:26 GMT
cache-control: public, max-age=31536000
age: 575395
last-modified: Wed, 13 Sep 2023 22:41:22 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.fairgocasino.com/images/Affiliate/fairgo_new_game_princess_warrior_lp_image.png | 172.67.163.146 | 200 OK | 47 kB |
URL GET HTTP/3www.fairgocasino.com/images/Affiliate/fairgo_new_game_princess_warrior_lp_image.png IP172.67.163.146:443
Requested byhttps://www.fairgocasino.com/landing-pages/princess-warrior?laffid=5080<rackingid=191743772 CertificateIssuerLet's Encrypt Subjectfairgocasino.com Fingerprint4E:65:27:E8:E9:57:8A:BB:B1:F7:9D:C7:03:EB:4D:82:6F:61:28:29 ValidityThu, 07 Mar 2024 23:32:35 GMT - Wed, 05 Jun 2024 23:32:34 GMT
File typePNG image data, 400 x 400, 8-bit colormap, non-interlaced Hashd184a49a31b333a87aa998c1f20504b3 558d1823e5c3ebfc72a93a5577e33acdec200fe5 9e6a4330764a0eafa132ed809929b08cae26d5665ff89e1b5ed643936d909042
GET /images/Affiliate/fairgo_new_game_princess_warrior_lp_image.png HTTP/1.1
Host: www.fairgocasino.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.fairgocasino.com/landing-pages/princess-warrior?laffid=5080<rackingid=191743772
Cookie: 8d717cfbbaa65a4db03c27c8a5e3a0af=3vplc2dgeegfb09vat49k3o2hq
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 23 Apr 2024 11:13:22 GMT
content-type: image/png
content-length: 46616
cache-control: max-age=86400
last-modified: Wed, 15 Sep 2021 06:02:57 GMT
etag: "5433a55f7a9d71:0"
x-content-type-options: nosniff
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yDa0cHFY%2B9h%2BEar9%2FdgG5rtUEkT4M97LhG1HUjnnzHcouf9vw30iUHe0olDKPrPQEu3gMBEhpfzqugmF5v9OD6U7s7JA%2B%2BXjoc3NvdeFOlWX8aWicjv0l5gV09%2F%2FCYW2MevMeHUvLw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878d6c7bdb7256ae-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.fairgocasino.com/media/com_jchoptimize/cache/css/3c61eba6a12b90c57bb413daff7c55b8e9baaf111edc08bf18a4a1677063fa70.css | 172.67.163.146 | 200 OK | 15 kB |
URL GET HTTP/3www.fairgocasino.com/media/com_jchoptimize/cache/css/3c61eba6a12b90c57bb413daff7c55b8e9baaf111edc08bf18a4a1677063fa70.css IP172.67.163.146:443
Requested byhttps://www.fairgocasino.com/landing-pages/princess-warrior?laffid=5080<rackingid=191743772 CertificateIssuerLet's Encrypt Subjectfairgocasino.com Fingerprint4E:65:27:E8:E9:57:8A:BB:B1:F7:9D:C7:03:EB:4D:82:6F:61:28:29 ValidityThu, 07 Mar 2024 23:32:35 GMT - Wed, 05 Jun 2024 23:32:34 GMT
Hash52c610c6d5864828c2e45dd5c107924f e9d41f9c377ec74bcb41ef078edd4565b14184a6 1720249617991abaeab65c862dd426c3cb188ae19479551f02f48999b312dd7d
GET /media/com_jchoptimize/cache/css/3c61eba6a12b90c57bb413daff7c55b8e9baaf111edc08bf18a4a1677063fa70.css HTTP/1.1
Host: www.fairgocasino.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.fairgocasino.com/landing-pages/princess-warrior?laffid=5080<rackingid=191743772
Cookie: 8d717cfbbaa65a4db03c27c8a5e3a0af=3vplc2dgeegfb09vat49k3o2hq
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 23 Apr 2024 11:13:21 GMT
content-type: text/css
cache-control: no-cache,max-age=2678400
last-modified: Tue, 23 Apr 2024 11:10:56 GMT
etag: W/"05feea6e95da1:0"
vary: Accept-Encoding
x-content-type-options: nosniff
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4%2B3zgrqGiMNU1%2F3eFeF7Ay4TonFN%2BEv4cDeeL1KV146RxZqGFDC%2BgFfu8FV14mPpjKVPclr08FOZNlWUOSIywSdY2xCXo9UzxFj1fPlm%2FnteMS8ztM7sCJ7OVFCIkQKYS4qpIuGTrA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 878d6c7bdb7756ae-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| track.fairgocasino.com/matomo.js | 172.67.163.146 | 200 OK | 52 kB |
URL GET HTTP/3track.fairgocasino.com/matomo.js IP172.67.163.146:443
Requested byhttps://www.fairgocasino.com/landing-pages/princess-warrior?laffid=5080<rackingid=191743772 CertificateIssuerLet's Encrypt Subjectfairgocasino.com Fingerprint4E:65:27:E8:E9:57:8A:BB:B1:F7:9D:C7:03:EB:4D:82:6F:61:28:29 ValidityThu, 07 Mar 2024 23:32:35 GMT - Wed, 05 Jun 2024 23:32:34 GMT
File typeJavaScript source, ASCII text, with very long lines (1601) Hash5d82be6056e2b836d8d1d80def0e5860 e681e1a3160afd78836e24ec57cd142ab61bc0d2 f0107380cd4bc7c73809bca1ddc63fcb15b2e864f4ac94f907308c49cb4f453c
GET /matomo.js HTTP/1.1
Host: track.fairgocasino.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.fairgocasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 23 Apr 2024 11:13:24 GMT
content-type: application/javascript
strict-transport-security: max-age=31556926
last-modified: Tue, 09 Apr 2024 07:47:53 GMT
etag: W/"290a6-615a523b92fe5-gzip"
vary: Accept-Encoding
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3oNNi0WflSZ1IQqX%2B0xjI%2BWnkNKHeV%2FZKy6YLnEFMm3poVSbwxB%2BB9%2FuSsvDWA%2BLr%2B%2FTUKQj31yXehNU3uZhkqXAmk%2BuEm7a3sUYEsbxTURNvF9mf0t6PITAgO3m4WHo0pLof%2FNgcXkZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 878d6c89594656ae-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| cdn.pushalert.co/integrate_fdc641c0686d77a220b47f422b625f05.js | 194.242.11.186 | 200 OK | 55 kB |
URL GET HTTP/2cdn.pushalert.co/integrate_fdc641c0686d77a220b47f422b625f05.js IP194.242.11.186:443 ASN#34989 ServeTheWorld AS
Requested byhttps://www.fairgocasino.com/landing-pages/princess-warrior?laffid=5080<rackingid=191743772 CertificateIssuerSectigo Limited Subject*.pushalert.co Fingerprint39:4D:24:F6:83:C2:80:B5:A7:48:83:F9:CA:A5:C0:8C:86:9C:85:14 ValiditySat, 22 Apr 2023 00:00:00 GMT - Tue, 07 May 2024 23:59:59 GMT
File typeASCII text, with very long lines (568) Hash86317102504519b3198e1b129362fe03 687a2ae2bbaf2aee236080e0f98e7e13a05ae32b 1bf8ab324fd503484048a91b5a431dd44c6294a79c0be6a35e2163004a0b99c3
GET /integrate_fdc641c0686d77a220b47f422b625f05.js HTTP/1.1
Host: cdn.pushalert.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.fairgocasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 23 Apr 2024 11:13:22 GMT
content-type: application/javascript
server: BunnyCDN-NO1-830
cdn-pullzone: 1594972
cdn-uid: 1668653e-62f3-41a8-943a-09aa7358583c
cdn-requestcountrycode: NO
vary: Accept-Encoding, Accept-Encoding
cache-control: public, max-age=8640000
last-modified: Thu, 06 Feb 2020 09:22:13 GMT
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: frame-ancestors 'self';
cdn-proxyver: 1.04
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 03/20/2024 17:05:24
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: 223a6d1841f27db607895f3f3ff36fe7
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.audfairgo.com/landing-pages/princess-warrior?laffid=5080<rackingid=191743772 | 172.67.222.234 | 302 Found | 14 kB |
URL User Request GET HTTP/2www.audfairgo.com/landing-pages/princess-warrior?laffid=5080<rackingid=191743772 IP172.67.222.234:443
CertificateIssuerGoogle Trust Services LLC Subjectaudfairgo.com FingerprintF6:27:87:58:CC:57:CD:6E:95:19:20:F9:2A:5B:1C:BE:C9:05:76:BE ValidityMon, 18 Mar 2024 05:58:21 GMT - Sun, 16 Jun 2024 05:58:20 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /landing-pages/princess-warrior?laffid=5080<rackingid=191743772 HTTP/1.1
Host: www.audfairgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Tue, 23 Apr 2024 11:13:19 GMT
content-type: text/html; charset=UTF-8
location: https://www.fairgocasino.com/landing-pages/princess-warrior?laffid=5080<rackingid=191743772
x-powered-by: PHP/7.4.5
set-cookie: 8d717cfbbaa65a4db03c27c8a5e3a0af=ga9iu4g4n7dq8u55pck09p1mfg; path=/; HttpOnly
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1URnP%2FTGckh9lgI2ZWXX%2FOE6wZGZpdFDH8XyTEERddhP3izrKS8H2SFFx%2FIJPMxrX%2B21PRLJhjuwi9TyxV46pG4%2Bd35%2BlN%2FytN2tNjElVJ1rjwDcnnUknel3LWyE7TV0PFWROw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 878d6c6d4e150b59-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.fairgocasino.com/landing-pages/princess-warrior?laffid=5080<rackingid=191743772 | 172.67.163.146 | 200 OK | 14 kB |
URL User Request GET HTTP/2www.fairgocasino.com/landing-pages/princess-warrior?laffid=5080<rackingid=191743772 IP172.67.163.146:443
CertificateIssuerLet's Encrypt Subjectfairgocasino.com Fingerprint4E:65:27:E8:E9:57:8A:BB:B1:F7:9D:C7:03:EB:4D:82:6F:61:28:29 ValidityThu, 07 Mar 2024 23:32:35 GMT - Wed, 05 Jun 2024 23:32:34 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /landing-pages/princess-warrior?laffid=5080<rackingid=191743772 HTTP/1.1
Host: www.fairgocasino.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 23 Apr 2024 11:13:21 GMT
content-type: text/html; charset=utf-8
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
expires: Wed, 17 Aug 2005 00:00:00 GMT
last-modified: Tue, 23 Apr 2024 11:13:20 GMT
vary: Accept-Encoding
x-powered-by: PHP/7.4.5
set-cookie: 8d717cfbbaa65a4db03c27c8a5e3a0af=3vplc2dgeegfb09vat49k3o2hq; path=/; HttpOnly
x-content-encoded-by: Joomla
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ua1xn83xb5pAio3OR87dVOwKk7iJq48dyUAShPv7PcUsW1YF52iZx5lz2A%2BPEQAda95BfwmMU%2B4gLt6hX5Cz2Yht%2FsZRqm3wbpi8MPz98reaPGknOb%2BPtXN1Y2cDqbXT1FXCkj7%2FYA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 878d6c729c955696-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| track.fairgocasino.com/js/container_psxaZSyF.js | 172.67.163.146 | 200 OK | 62 kB |
URL GET HTTP/3track.fairgocasino.com/js/container_psxaZSyF.js IP172.67.163.146:443
Requested byhttps://www.fairgocasino.com/landing-pages/princess-warrior?laffid=5080<rackingid=191743772 CertificateIssuerLet's Encrypt Subjectfairgocasino.com Fingerprint4E:65:27:E8:E9:57:8A:BB:B1:F7:9D:C7:03:EB:4D:82:6F:61:28:29 ValidityThu, 07 Mar 2024 23:32:35 GMT - Wed, 05 Jun 2024 23:32:34 GMT
File typeJavaScript source, ASCII text, with very long lines (18867) Hash6cbba3b2caafc2420d954816d4690a30 2295bc57c64566a3d54e1a3292cae01c47a98567 1e2810c78762d28e37bc7dfd47e8a3f9298e0102f70eb43cc97c776fc5743247
GET /js/container_psxaZSyF.js HTTP/1.1
Host: track.fairgocasino.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.fairgocasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 11:13:23 GMT
content-type: application/javascript
strict-transport-security: max-age=31556926
last-modified: Tue, 09 Jan 2024 09:18:51 GMT
etag: W/"f13b-60e7fcd769d54-gzip"
vary: Accept-Encoding
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AOi3J4fanPZIPUKi6FNbaWFGMi8x8ozpbmEYVDTthfplOfjgb%2FzDmT3XCjaB72DDupYxkh0nwJ96naeL7S1Lo7T0hplJ9uOvfQrKwApxfdpQ5%2BH6832nCjzG7Q2KeD34C2xhh0yCSpot"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 878d6c840c2956ae-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.fairgocasino.com/media/com_jchoptimize/cache/js/cb3860272b229ed10d6cbc8fe1d6d6b3a24dd5d453e6c3ceb69bbecef6660adc.js | 172.67.163.146 | 200 OK | 375 kB |
URL GET HTTP/3www.fairgocasino.com/media/com_jchoptimize/cache/js/cb3860272b229ed10d6cbc8fe1d6d6b3a24dd5d453e6c3ceb69bbecef6660adc.js IP172.67.163.146:443
Requested byhttps://www.fairgocasino.com/landing-pages/princess-warrior?laffid=5080<rackingid=191743772 CertificateIssuerLet's Encrypt Subjectfairgocasino.com Fingerprint4E:65:27:E8:E9:57:8A:BB:B1:F7:9D:C7:03:EB:4D:82:6F:61:28:29 ValidityThu, 07 Mar 2024 23:32:35 GMT - Wed, 05 Jun 2024 23:32:34 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size375 kB (375274 bytes) Hash06f58b94abd43d3d460c38554a616ee6 f1e71d388d63b771bc25cf7a157cbc0f89d98cea 4300bed362898e61c54579bbd8db839ad5a72c89a37ad430dec0924520f49afd
GET /media/com_jchoptimize/cache/js/cb3860272b229ed10d6cbc8fe1d6d6b3a24dd5d453e6c3ceb69bbecef6660adc.js HTTP/1.1
Host: www.fairgocasino.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.fairgocasino.com/landing-pages/princess-warrior?laffid=5080<rackingid=191743772
Cookie: 8d717cfbbaa65a4db03c27c8a5e3a0af=3vplc2dgeegfb09vat49k3o2hq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 11:13:22 GMT
content-type: application/javascript
cache-control: no-cache,max-age=2678400
last-modified: Tue, 23 Apr 2024 11:12:32 GMT
etag: W/"010e2226f95da1:0"
vary: Accept-Encoding
x-content-type-options: nosniff
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=N%2BVW3sDQ1Da9q%2FiqYMIvpZC4ZxvBSz9HwVpR%2BWgWHCGW0JAadPG5clrbCG7A%2FpDOPt9AjrMzUJV8YUGaXPs7goRC8qLBEOTPcNm9vzMg2d8gffiX5ju3B1g8f6OT56I0%2BSv3JTtw3Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 878d6c7beb9456ae-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| track.fairgocasino.com/plugins/HeatmapSessionRecording/configs.php?idsite=4&trackerid=a9yghk&url=https%3A%2F%2Fwww.fairgocasino.com%2Flanding-pages%2Fprincess-warrior%3Flaffid%3D5080%26ltrackingid%3D191743772 | 172.67.163.146 | 200 OK | 116 B |
URL GET HTTP/3track.fairgocasino.com/plugins/HeatmapSessionRecording/configs.php?idsite=4&trackerid=a9yghk&url=https%3A%2F%2Fwww.fairgocasino.com%2Flanding-pages%2Fprincess-warrior%3Flaffid%3D5080%26ltrackingid%3D191743772 IP172.67.163.146:443
Requested byhttps://www.fairgocasino.com/landing-pages/princess-warrior?laffid=5080<rackingid=191743772 CertificateIssuerLet's Encrypt Subjectfairgocasino.com Fingerprint4E:65:27:E8:E9:57:8A:BB:B1:F7:9D:C7:03:EB:4D:82:6F:61:28:29 ValidityThu, 07 Mar 2024 23:32:35 GMT - Wed, 05 Jun 2024 23:32:34 GMT
File typeASCII text, with no line terminators Hash656f2a482d5cae16e01b799cb3380be9 6d4d14535f71846e365716c5b4815ffa31b0c114 5fb7e2c0f7d8c8deed1f515566db9a34e9fc7a3013e586734dc058f51c53257f
GET /plugins/HeatmapSessionRecording/configs.php?idsite=4&trackerid=a9yghk&url=https%3A%2F%2Fwww.fairgocasino.com%2Flanding-pages%2Fprincess-warrior%3Flaffid%3D5080%26ltrackingid%3D191743772 HTTP/1.1
Host: track.fairgocasino.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.fairgocasino.com/
Cookie: _pk_id.4.2599=e4ec12770a9e18d0.1713870804.; _pk_ses.4.2599=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 11:13:25 GMT
content-type: application/javascript
strict-transport-security: max-age=31556926
x-powered-by: PHP/8.1.21
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KeghSbUqOCGbW7iohSksvI4OGkJZUD9nBJ5VK3TgcK8%2BPIkZRxwBTmDa40e1v2pOn5kPaVlFCv7uoxNY2b37XXoyqQtfIMFNzr7SXzIpieKOs3wi0jrwXmxavkikMPpjK3OWwSMclYmO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 878d6c8fcf8a56ae-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| fonts.googleapis.com/css?family=Muli:400,700,800&display=swap | 142.250.74.106 | 200 OK | 3.4 kB |
URL GET HTTP/3fonts.googleapis.com/css?family=Muli:400,700,800&display=swap IP142.250.74.106:443
Requested byhttps://www.fairgocasino.com/landing-pages/princess-warrior?laffid=5080<rackingid=191743772 CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2 ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT
File typeASCII text, with very long lines (3513), with no line terminators Hash4d4e52926732cca91738c2617a9ac121 ccbf01f8eded532dda95213c091aaf2b456876e5 b858d56d119345fcd1d581ba702a7b666bd91ca808b61a37ba46d39e1cf33543
GET /css?family=Muli:400,700,800&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.fairgocasino.com
DNT: 1
Connection: keep-alive
Referer: https://www.fairgocasino.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 23 Apr 2024 11:13:24 GMT
date: Tue, 23 Apr 2024 11:13:24 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.googleapis.com/css?family=Muli:400,700,800&display=swap | 142.250.74.106 | 200 OK | 3.4 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Muli:400,700,800&display=swap IP142.250.74.106:443
Requested byhttps://www.fairgocasino.com/landing-pages/princess-warrior?laffid=5080<rackingid=191743772 CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2 ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT
File typeASCII text, with very long lines (3513), with no line terminators Hash4d4e52926732cca91738c2617a9ac121 ccbf01f8eded532dda95213c091aaf2b456876e5 b858d56d119345fcd1d581ba702a7b666bd91ca808b61a37ba46d39e1cf33543
GET /css?family=Muli:400,700,800&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.fairgocasino.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 23 Apr 2024 11:13:21 GMT
date: Tue, 23 Apr 2024 11:13:21 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| track.fairgocasino.com/matomo.php?action_name=www.fairgocasino.com%2FFair%20Go%20Casino%20%7C%20Princess%20Warrior%20-%20Fair%20Go%20Casino&idsite=4&rec=1&r=243832&h=11&m=13&s=24&url=https%3A%2F%2Fwww.fairgocasino.com%2Flanding-pages%2Fprincess-warrior%3Flaffid%3D5080%26ltrackingid%3D191743772&_id=e4ec12770a9e18d0&_idn=1&send_image=0&_refts=0&pv_id=eRkCSH&pf_net=27&pf_srv=1318&pf_tfr=0&pf_dm1=48&uadata=%7B%7D&pdf=1&qt=0&realp=0&wma=0&fla=0&java=0&ag=0&cookie=1&res=1280x1024 | 172.67.163.146 | 204 No Content | 0 B |
URL POST HTTP/3track.fairgocasino.com/matomo.php?action_name=www.fairgocasino.com%2FFair%20Go%20Casino%20%7C%20Princess%20Warrior%20-%20Fair%20Go%20Casino&idsite=4&rec=1&r=243832&h=11&m=13&s=24&url=https%3A%2F%2Fwww.fairgocasino.com%2Flanding-pages%2Fprincess-warrior%3Flaffid%3D5080%26ltrackingid%3D191743772&_id=e4ec12770a9e18d0&_idn=1&send_image=0&_refts=0&pv_id=eRkCSH&pf_net=27&pf_srv=1318&pf_tfr=0&pf_dm1=48&uadata=%7B%7D&pdf=1&qt=0&realp=0&wma=0&fla=0&java=0&ag=0&cookie=1&res=1280x1024 IP172.67.163.146:443
Requested byhttps://www.fairgocasino.com/landing-pages/princess-warrior?laffid=5080<rackingid=191743772 CertificateIssuerLet's Encrypt Subjectfairgocasino.com Fingerprint4E:65:27:E8:E9:57:8A:BB:B1:F7:9D:C7:03:EB:4D:82:6F:61:28:29 ValidityThu, 07 Mar 2024 23:32:35 GMT - Wed, 05 Jun 2024 23:32:34 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /matomo.php?action_name=www.fairgocasino.com%2FFair%20Go%20Casino%20%7C%20Princess%20Warrior%20-%20Fair%20Go%20Casino&idsite=4&rec=1&r=243832&h=11&m=13&s=24&url=https%3A%2F%2Fwww.fairgocasino.com%2Flanding-pages%2Fprincess-warrior%3Flaffid%3D5080%26ltrackingid%3D191743772&_id=e4ec12770a9e18d0&_idn=1&send_image=0&_refts=0&pv_id=eRkCSH&pf_net=27&pf_srv=1318&pf_tfr=0&pf_dm1=48&uadata=%7B%7D&pdf=1&qt=0&realp=0&wma=0&fla=0&java=0&ag=0&cookie=1&res=1280x1024 HTTP/1.1
Host: track.fairgocasino.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=utf-8
Content-Length: 0
Origin: https://www.fairgocasino.com
DNT: 1
Connection: keep-alive
Referer: https://www.fairgocasino.com/
Cookie: _pk_id.4.2599=e4ec12770a9e18d0.1713870804.; _pk_ses.4.2599=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/3 204 No Content
date: Tue, 23 Apr 2024 11:13:25 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=31556926
x-powered-by: PHP/8.1.21
access-control-allow-origin: https://www.fairgocasino.com
access-control-allow-credentials: true
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NHknfdLJ6MGPhZLS1Q5SBuUbyDreMmG5%2BEQCwMef0%2Bh%2FFCZRQ2BC24z9tkwwp1VzMuotJv2ODMJFNj9%2FX%2BkkdfMOizuoAsUwjf7y9PD8d2yvellu4KIbMybIANGwtHrturbS1tLNONc8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 878d6c8faf6f56ae-OSL
alt-svc: h3=":443"; ma=86400
|
|
| link.totalaffiliating.com/c/476444?p1=ZFGAU230414 | 172.67.168.62 | 301 Moved Permanently | 14 kB |
URL User Request GET HTTP/2link.totalaffiliating.com/c/476444?p1=ZFGAU230414 IP172.67.168.62:443
CertificateIssuerGoogle Trust Services LLC Subjecttotalaffiliating.com Fingerprint3E:2A:2A:94:F4:3C:7A:21:17:03:EC:9D:45:6F:12:8B:06:99:D2:BE ValiditySun, 17 Mar 2024 02:40:17 GMT - Sat, 15 Jun 2024 02:40:16 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c/476444?p1=ZFGAU230414 HTTP/1.1
Host: link.totalaffiliating.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Tue, 23 Apr 2024 11:13:18 GMT
content-type: text/html; charset=utf-8
location: https://www.audfairgo.com/landing-pages/princess-warrior?laffid=5080<rackingid=191743772
cache-control: no-cache
pragma: no-cache
expires: -1
set-cookie: ASP.NET_SessionId=r5w3opwzyzzfblvwwdggttyr; path=/; HttpOnly
_affix=191426520; expires=Wed, 23-Apr-2025 11:13:18 GMT; path=/
x-frame-options: DENY
content-security-policy: frame-ancestors 'none'
x-aspnet-version: 4.0.30319
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WCwCKx54kPvL9OT82c2eXjmXtNuYaXoS3mUb60xQtB75ZJxPVoD0sOH0%2FsbE1qzKue8et1uWHof3aT6fV6BGJxFydxUlzoVTL%2FEqtGPh06bDn28kh8wWyT%2FzJaEsCYrjVMXBin8gK8kjNJmZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 878d6c690a4a56c3-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.fairgocasino.com/templates/fairgo_landingpages/css/fontawesome/webfonts/fa-regular-400.woff2 | 172.67.163.146 | 200 OK | 15 kB |
URL GET HTTP/3www.fairgocasino.com/templates/fairgo_landingpages/css/fontawesome/webfonts/fa-regular-400.woff2 IP172.67.163.146:443
Requested byhttps://www.fairgocasino.com/landing-pages/princess-warrior?laffid=5080<rackingid=191743772 CertificateIssuerLet's Encrypt Subjectfairgocasino.com Fingerprint4E:65:27:E8:E9:57:8A:BB:B1:F7:9D:C7:03:EB:4D:82:6F:61:28:29 ValidityThu, 07 Mar 2024 23:32:35 GMT - Wed, 05 Jun 2024 23:32:34 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 14952, version 1.0 Hasha3715c6fe264a51f1d9260b447ff46bc 285cf9d32fae400ca979a369d299973307aa3416 1669bec36f12c35a00a2d23cf71b6061c85b8435f5c26445aab338f88dfe6629
GET /templates/fairgo_landingpages/css/fontawesome/webfonts/fa-regular-400.woff2 HTTP/1.1
Host: www.fairgocasino.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://www.fairgocasino.com/media/com_jchoptimize/cache/css/3c61eba6a12b90c57bb413daff7c55b8e9baaf111edc08bf18a4a1677063fa70.css
Cookie: 8d717cfbbaa65a4db03c27c8a5e3a0af=3vplc2dgeegfb09vat49k3o2hq
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 11:13:22 GMT
content-type: application/x-font-woff2
content-length: 14952
cache-control: max-age=2678400
last-modified: Mon, 08 Jan 2024 23:18:20 GMT
etag: "06baf78842da1:0"
x-content-type-options: nosniff
cf-cache-status: HIT
age: 20359
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ToowoTTQjS6OiIVmYza2Er4b%2FYqD8h6pBIG2KFo6RzOXsyoKjz%2BRZYmPxtMvE%2F4JXKUQRUIHFrcGNQd9lpElgCN5ugf%2Bqm%2FPc5N%2BqXFoeCkkCnKLwDDeST%2FqpUiD7Rn4xdJEJgX8Sw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878d6c843c5256ae-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.fairgocasino.com/media/com_jchoptimize/cache/css/3c61eba6a12b90c57bb413daff7c55b878b17b907eb169e9f27a35dcf6989428.css | 172.67.163.146 | 200 OK | 65 kB |
URL GET HTTP/3www.fairgocasino.com/media/com_jchoptimize/cache/css/3c61eba6a12b90c57bb413daff7c55b878b17b907eb169e9f27a35dcf6989428.css IP172.67.163.146:443
Requested byhttps://www.fairgocasino.com/landing-pages/princess-warrior?laffid=5080<rackingid=191743772 CertificateIssuerLet's Encrypt Subjectfairgocasino.com Fingerprint4E:65:27:E8:E9:57:8A:BB:B1:F7:9D:C7:03:EB:4D:82:6F:61:28:29 ValidityThu, 07 Mar 2024 23:32:35 GMT - Wed, 05 Jun 2024 23:32:34 GMT
File typeASCII text, with very long lines (44269) Hashbda6e0bc020a92fbce414580e1e4ffd1 7e51b69d3d14ea4dd4a78af716161053aaade23b d0e4133a9614c64a5be6dba5e0e8b0ed2fe55cc3fd81d75d374b2107eed9ab65
GET /media/com_jchoptimize/cache/css/3c61eba6a12b90c57bb413daff7c55b878b17b907eb169e9f27a35dcf6989428.css HTTP/1.1
Host: www.fairgocasino.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.fairgocasino.com/landing-pages/princess-warrior?laffid=5080<rackingid=191743772
Cookie: 8d717cfbbaa65a4db03c27c8a5e3a0af=3vplc2dgeegfb09vat49k3o2hq
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 11:13:21 GMT
content-type: text/css
cache-control: no-cache,max-age=2678400
last-modified: Tue, 23 Apr 2024 11:12:32 GMT
etag: W/"010e2226f95da1:0"
vary: Accept-Encoding
x-content-type-options: nosniff
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FdILYIPfR66hOwaENwoJGhNjzPNuFL6K7GwiaCNQ5%2B%2BrecDoC25Ah8dzkSWZoC%2BjWR96wPcYswpym6d3ZYPpK8nixkDgkpwBALQgcQ1H1zX4l4ZYmbDAspcK0bXHvglsznHubkq8xw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 878d6c7bdb7856ae-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.fairgocasino.com/favicon.ico | 172.67.163.146 | 200 OK | 3.9 kB |
URL GET HTTP/3www.fairgocasino.com/favicon.ico IP172.67.163.146:443
Requested byhttps://www.fairgocasino.com/landing-pages/princess-warrior?laffid=5080<rackingid=191743772 CertificateIssuerLet's Encrypt Subjectfairgocasino.com Fingerprint4E:65:27:E8:E9:57:8A:BB:B1:F7:9D:C7:03:EB:4D:82:6F:61:28:29 ValidityThu, 07 Mar 2024 23:32:35 GMT - Wed, 05 Jun 2024 23:32:34 GMT
File typePNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced Hash7c7149405f792fc47a1c705a0184fade f26c1acff6a57a0785278d5983dd3e6a59492961 0d1d5e30927fd2e44d6a0ed55bca5326b9f160477f34bc2cc19dcef32a8ab024
GET /favicon.ico HTTP/1.1
Host: www.fairgocasino.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.fairgocasino.com/landing-pages/princess-warrior?laffid=5080<rackingid=191743772
Cookie: 8d717cfbbaa65a4db03c27c8a5e3a0af=3vplc2dgeegfb09vat49k3o2hq
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 11:13:22 GMT
content-type: image/x-icon
cache-control: max-age=2678400
last-modified: Mon, 08 Jan 2024 23:18:18 GMT
etag: W/"0d988f68842da1:0"
x-content-type-options: nosniff
cf-cache-status: HIT
age: 1603376
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3oc8aVm%2F9jkJrxlUsdWkCq7UcJ4iR9F0XSeoUfxhReRjB%2BBIogYRUeEVYxXD%2FVxQkWXbztuu9wLij6N0da9jMlQOBAGhoVzlYCF7vr5M873t4lHQui0TLrEMunttI8kIWNnFsSmcsA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878d6c8209e856ae-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|