wlkwiff.adsrv.eacdn.com/C.ashx?btag=a_1148b_86c_&affid=284&siteid=1148&adid=86&c=&cb=170163777537&vml_pid=p726d3df
302 Found 269 B URL User Request GET HTTP/1.1 wlkwiff.adsrv.eacdn.com/C.ashx?btag=a_1148b_86c_&affid=284&siteid=1148&adid=86&c=&cb=170163777537&vml_pid=p726d3df
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerDigiCert Inc
Subject*.adsrv.eacdn.com
Fingerprint33:C5:88:5A:87:74:08:01:84:C1:33:4B:68:A9:56:EE:56:1C:FD:6F
ValidityMon, 17 Jul 2023 00:00:00 GMT - Wed, 14 Aug 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash c970f61069a8389ccfa974d8a4a6eee6
5284b916fb8d4c621f5e7fc82a17d39ca927014f
dc8e4a62f36e20d19fdd4577d974271be3cdcd18e1a90dc1e2ec673272e27842
GET /C.ashx?btag=a_1148b_86c_&affid=284&siteid=1148&adid=86&c=&cb=170163777537&vml_pid=p726d3df HTTP/1.1
Host: wlkwiff.adsrv.eacdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Cache-Control: private
Content-Type: text/html; charset=utf-8
Location: //wlkwiff.adsrv.eacdn.com/C.ashx?btag=a_1148b_86c_&affid=284&siteid=1148&adid=86&c=&cb=170163777537&vml_pid=p726d3df&AutoR=1
Server: Microsoft-IIS/10.0
X-AspNetMvc-Version: 5.2
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
X-AspNet-Version: 4.0.30319
Set-Cookie: CEK=a; expires=Fri, 31-Dec-9999 23:59:59 GMT; path=/; SameSite=None; Secure
X-Powered-By: ASP.NET
X-XSS-Protection: 1; mode=block
Date: Sun, 03 Dec 2023 21:10:26 GMT
Content-Length: 269
Vary: Accept-Encoding
wlkwiff.adsrv.eacdn.com/C.ashx?btag=a_1148b_86c_&affid=284&siteid=1148&adid=86&c=&cb=170163777537&vml_pid=p726d3df&AutoR=1
302 Found 204 B URL User Request GET HTTP/1.1 wlkwiff.adsrv.eacdn.com/C.ashx?btag=a_1148b_86c_&affid=284&siteid=1148&adid=86&c=&cb=170163777537&vml_pid=p726d3df&AutoR=1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerDigiCert Inc
Subject*.adsrv.eacdn.com
Fingerprint33:C5:88:5A:87:74:08:01:84:C1:33:4B:68:A9:56:EE:56:1C:FD:6F
ValidityMon, 17 Jul 2023 00:00:00 GMT - Wed, 14 Aug 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 9ec8b3b6d62b5b89fab5d2b289c54ad6
41213022ce01afd7ee7329ecb8a4dd548ff3a806
15e49c001223fa957fab0f9e1d83f1daaa4a0a122436512597f453e858f11683
GET /C.ashx?btag=a_1148b_86c_&affid=284&siteid=1148&adid=86&c=&cb=170163777537&vml_pid=p726d3df&AutoR=1 HTTP/1.1
Host: wlkwiff.adsrv.eacdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: CEK=a
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Cache-Control: private
Content-Type: text/html; charset=utf-8
Location: http://welcome.kwiffcasino.com/?btag=a_1148b_86c_&affid=284&source=IncomeAccess
Server: Microsoft-IIS/10.0
X-AspNetMvc-Version: 5.2
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
X-AspNet-Version: 4.0.30319
Set-Cookie: XYZ=3&1&148&&&&0&1&&bd8a2c14-290a-417d-833d-3026a3a5c851&&a_1148b_86&; expires=Sat, 02-Mar-2024 21:10:27 GMT; path=/; SameSite=None; Secure
A_86=a=86&r=0&fv=0&lv=0&vc=0&fc=20231203&lc=20231203091027&cc=1; expires=Sat, 02-Mar-2024 21:10:27 GMT; path=/; SameSite=None; Secure
PM_2=id=dcb7ab78-c593-43ca-9226-6d19acf18e39&c=&s=1148&ad=86&md=0&pm=2&d=20231203211027&ip=1532635802&r=0&ref=&RedirectParams=btag%3Da_1148b_86c_%26affid%3D284%26source%3DIncomeAccess&cip=OTEuOTAuNDIuMTU0; expires=Sat, 02-Mar-2024 21:10:27 GMT; path=/; SameSite=None; Secure
CEK=a; expires=Fri, 31-Dec-9999 23:59:59 GMT; path=/; SameSite=None; Secure
X-Powered-By: ASP.NET
X-XSS-Protection: 1; mode=block
Date: Sun, 03 Dec 2023 21:10:26 GMT
Content-Length: 204
Vary: Accept-Encoding
welcome.kwiffcasino.com/?btag=a_1148b_86c_&affid=284&source=IncomeAccess
301 Moved Permanently 167 B URL User Request GET HTTP/1.1 welcome.kwiffcasino.com/?btag=a_1148b_86c_&affid=284&source=IncomeAccess
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /?btag=a_1148b_86c_&affid=284&source=IncomeAccess HTTP/1.1
Host: welcome.kwiffcasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sun, 03 Dec 2023 21:10:27 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://welcome.kwiffcasino.com/?btag=a_1148b_86c_&affid=284&source=IncomeAccess
X-Cache: Redirect from cloudfront
Via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: hM2T8__xFsUamGuYLuMxlBEoA7wdlIqtoUHEQTTBnhwmL-1c15ro4A==
welcome.kwiffcasino.com/?btag=a_1148b_86c_&affid=284&source=IncomeAccess
301 Moved Permanently 1.8 kB URL User Request GET HTTP/1.1 welcome.kwiffcasino.com/?btag=a_1148b_86c_&affid=284&source=IncomeAccess
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1778), with no line terminators
Hash 674fa632ec55e9fb92dfdcb3cdb9af93
c27b86539dbd024d049aa98b8c938bc4dee1eabd
f9a0049db950ed94f947417fdc6da1c00d284adaeeedeedcd3b4bf13fdbc89d3
GET /?btag=a_1148b_86c_&affid=284&source=IncomeAccess HTTP/1.1
Host: welcome.kwiffcasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-length: 1778
last-modified: Fri, 06 Oct 2023 09:42:04 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Sun, 03 Dec 2023 03:46:27 GMT
etag: "674fa632ec55e9fb92dfdcb3cdb9af93"
x-cache: Hit from cloudfront
via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: huUyZkIHfzRjDrlQz3oMtk9iz2RI-cy8VH6dQqYYvWi6YdbpoqvRUw==
age: 62641
X-Firefox-Spdy: h2
welcome.kwiffcasino.com/static/css/main.1ca413ca.css
200 OK 18 kB URL GET HTTP/2 welcome.kwiffcasino.com/static/css/main.1ca413ca.css
IP
Requested by https://welcome.kwiffcasino.com/?btag=a_1148b_86c_&affid=284&source=IncomeAccess
Certificate IssuerAmazon
Subjectwelcome.kwiffcasino.com
Fingerprint12:BC:BB:63:8B:55:8E:88:DB:DA:5F:B6:9C:9C:E2:37:51:B0:FA:A1
ValidityMon, 20 Feb 2023 00:00:00 GMT - Wed, 20 Mar 2024 23:59:59 GMT
File type ASCII text, with very long lines (17218), with CRLF, LF line terminators
Hash 6292dc143bc44c8dff633e218c77b9ca
e3feb3aae3586e66f7db3cb539ab651942515404
746d7a78e5e7005f47cf56b6ba4772bb31fb3a002d398d509e92d634ad1e90a3
GET /static/css/main.1ca413ca.css HTTP/1.1
Host: welcome.kwiffcasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://welcome.kwiffcasino.com/?btag=a_1148b_86c_&affid=284&source=IncomeAccess
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 17497
date: Sun, 03 Dec 2023 08:17:19 GMT
last-modified: Fri, 06 Oct 2023 09:42:04 GMT
etag: "6292dc143bc44c8dff633e218c77b9ca"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: ibpuv3Q8O7BumHp-ODCpGR-ng7XfvBTZp_ZzoJsi-eoRYwVDVU9_Zg==
age: 46389
X-Firefox-Spdy: h2
welcome.kwiffcasino.com/static/js/main.e9a0d2e3.js
200 OK 858 kB URL GET HTTP/2 welcome.kwiffcasino.com/static/js/main.e9a0d2e3.js
IP
Requested by https://welcome.kwiffcasino.com/?btag=a_1148b_86c_&affid=284&source=IncomeAccess
Certificate IssuerAmazon
Subjectwelcome.kwiffcasino.com
Fingerprint12:BC:BB:63:8B:55:8E:88:DB:DA:5F:B6:9C:9C:E2:37:51:B0:FA:A1
ValidityMon, 20 Feb 2023 00:00:00 GMT - Wed, 20 Mar 2024 23:59:59 GMT
File type ASCII text, with very long lines (65465)
Size 858 kB (858286 bytes)
Hash 1c33c806de26dd3526c3ce8f9c5d3c57
78e8362d46d07367110226257c14e5e212756d6e
dbc8c6dce38abdeeaf6a6e9882d4d4dbdec2f0a7db33bf9eb03068c2f15007ed
GET /static/js/main.e9a0d2e3.js HTTP/1.1
Host: welcome.kwiffcasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://welcome.kwiffcasino.com/?btag=a_1148b_86c_&affid=284&source=IncomeAccess
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
content-length: 858286
last-modified: Fri, 06 Oct 2023 09:42:04 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Sun, 03 Dec 2023 05:36:55 GMT
etag: "1c33c806de26dd3526c3ce8f9c5d3c57"
x-cache: Hit from cloudfront
via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: BhiZLRIYnSVtjkOQdaALbUtb9yxmu_hZTHaVuunn279QzfKMuqsa7Q==
age: 56013
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-NPBSFDR
200 OK 94 kB URL GET HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-NPBSFDR
IP
Requested by https://welcome.kwiffcasino.com/?btag=a_1148b_86c_&affid=284&source=IncomeAccess
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (26699)
Hash aa2b7ebbd238cc4910c4c18926c71120
3db971975758d1218917d3265bf550142d2ff412
94b3c22f2cc3b6217f2d0a00eb7201689a41dcbf2978847ac4638d4286fafe07
GET /gtm.js?id=GTM-NPBSFDR HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://welcome.kwiffcasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 03 Dec 2023 21:10:27 GMT
expires: Sun, 03 Dec 2023 21:10:27 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 93919
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-X8YX9EK90W&l=dataLayer&cx=c
200 OK 85 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=G-X8YX9EK90W&l=dataLayer&cx=c
IP
Requested by https://welcome.kwiffcasino.com/?btag=a_1148b_86c_&affid=284&source=IncomeAccess
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (7881)
Hash 0715da8e01ceacb1b6c81192b417ebca
7d6e6eb2f13b09a91cc74d258db3260ef9c37535
2acb125de453e8d18d50c0fb68be8ff8affa1b1899e33d38c6cc50e24eae13c9
GET /gtag/js?id=G-X8YX9EK90W&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://welcome.kwiffcasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 03 Dec 2023 21:10:28 GMT
expires: Sun, 03 Dec 2023 21:10:28 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 84868
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.googletagmanager.com/gtag/js?id=G-2XMKD9FRSH&l=dataLayer&cx=c
200 OK 86 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=G-2XMKD9FRSH&l=dataLayer&cx=c
IP
Requested by https://welcome.kwiffcasino.com/?btag=a_1148b_86c_&affid=284&source=IncomeAccess
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (3034)
Hash 4d082cf1b3880b450df6c73ae78bad9c
adb4e39166311eaac94c7f195be02c6e85346a64
4ef603c063f7004d7dd3e8b47a1f2a6b5c7260b5435e5c0a4a6c11bee765a1a1
GET /gtag/js?id=G-2XMKD9FRSH&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://welcome.kwiffcasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 03 Dec 2023 21:10:28 GMT
expires: Sun, 03 Dec 2023 21:10:28 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 86195
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.googletagmanager.com/gtag/js?id=G-0XX95P00DD&l=dataLayer&cx=c
200 OK 93 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=G-0XX95P00DD&l=dataLayer&cx=c
IP
Requested by https://welcome.kwiffcasino.com/?btag=a_1148b_86c_&affid=284&source=IncomeAccess
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (5955)
Hash f994c524d2a725b1c04a9e089fb3ccef
e0dac4771160dc49909d94466eba4af78a3a3cbe
635c006f3faa3577f9dd1fcfa5ec87e851d39111e4b7b8b4dabcf0b4f4f2dbee
GET /gtag/js?id=G-0XX95P00DD&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://welcome.kwiffcasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 03 Dec 2023 21:10:28 GMT
expires: Sun, 03 Dec 2023 21:10:28 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 93075
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
sc-static.net/scevent.min.js
200 OK 17 kB URL GET HTTP/2 sc-static.net/scevent.min.js
IP
Requested by https://welcome.kwiffcasino.com/?btag=a_1148b_86c_&affid=284&source=IncomeAccess
Certificate IssuerAmazon
Subjectsc-static.net
Fingerprint87:A3:D4:61:E0:AE:FC:1D:D3:A2:D8:C4:87:CE:9B:A2:FA:36:32:AC
ValidityFri, 20 Jan 2023 00:00:00 GMT - Sun, 18 Feb 2024 23:59:59 GMT
File type ASCII text, with very long lines (40498)
Hash 0c5ca3b2685af721c44d235c9cf6835e
1bc3c30506a3f5f17ac40f1b72e7bdb3f46ded05
e607ddf3b38a4a01f5ad05f8eb21a0c3708ee0b74325279ac3f9f6f58d217681
GET /scevent.min.js HTTP/1.1
Host: sc-static.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://welcome.kwiffcasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
content-length: 17230
server: CloudFront
date: Sun, 03 Dec 2023 21:10:28 GMT
access-control-allow-headers: Content-Type
access-control-allow-origin: *
content-encoding: gzip
cache-control: private, s-maxage=0, max-age=600
set-cookie: X-AB=undefined;max-age=86400;expires=Mon, 04 Dec 2023 21:10:28 GMT;Path=/scevent.min.js;Secure;SameSite=None
x-cache: Miss from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: HPDpZcj9Prg44FB2RAMybpNG9efHD2mRgMCxTIjZhR5-CDohE6rE6Q==
X-Firefox-Spdy: h2
src.webpu.sh/hx13gyPsI_9EiuNZsgHv1y6_JJYt9ezQ/sdk.js
200 OK 23 kB URL GET HTTP/1.1 src.webpu.sh/hx13gyPsI_9EiuNZsgHv1y6_JJYt9ezQ/sdk.js
IP
Requested by https://welcome.kwiffcasino.com/?btag=a_1148b_86c_&affid=284&source=IncomeAccess
Certificate IssuerLet's Encrypt
Subjectwebpu.sh
Fingerprint11:73:9E:22:9E:F8:B5:7D:B0:F9:F0:9E:43:FC:D9:4A:60:7E:EA:FA
ValidityMon, 23 Oct 2023 23:10:36 GMT - Sun, 21 Jan 2024 23:10:35 GMT
File type ASCII text, with very long lines (59135)
Hash fe0e6fd53d7d36f77e674eb7d6b4af70
1839b60db8ba9789b0ed430f81d549f64559290c
bc81d678fb3d94b9040d25d673ff1b3d82240885ca44d0d8ba1172f54cbd1a16
GET /hx13gyPsI_9EiuNZsgHv1y6_JJYt9ezQ/sdk.js HTTP/1.1
Host: src.webpu.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://welcome.kwiffcasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 03 Dec 2023 21:10:28 GMT
Content-Type: text/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
x-amz-id-2: c5hgyVuM33ebZpH3iJZxSY53DcPYHInKH1ssBMKNngrFvasW5jdl/0/amRmge+4+wLHLrzA9gvY=
x-amz-request-id: XVA009B8WXV7AB31
Last-Modified: Mon, 20 Mar 2023 13:08:36 GMT
ETag: W/"fe0e6fd53d7d36f77e674eb7d6b4af70"
x-amz-server-side-encryption: AES256
Cache-Control: max-age=21600
Strict-Transport-Security: max-age=31536000; includeSubDomains
Content-Encoding: gzip
fonts.googleapis.com/icon?family=Material+Icons
200 OK 18 kB URL GET HTTP/2 fonts.googleapis.com/icon?family=Material+Icons
IP
Requested by https://welcome.kwiffcasino.com/?btag=a_1148b_86c_&affid=284&source=IncomeAccess
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type gzip compressed data, max compression\012- data
Hash fb0cdc52316cbf52ea1f60bc33c5e253
0d3b202072f1291ba292463cb95bb3c7c5d820d6
bf2341b79c42746f1fd426a3c2d397b34d9e2fc413983475e895ae7853c5f863
GET /icon?family=Material+Icons HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://welcome.kwiffcasino.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 03 Dec 2023 21:10:27 GMT
date: Sun, 03 Dec 2023 21:10:27 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
welcome.kwiffcasino.com/tab-icon.ico
200 OK 109 kB URL GET HTTP/2 welcome.kwiffcasino.com/tab-icon.ico
IP
Requested by https://welcome.kwiffcasino.com/?btag=a_1148b_86c_&affid=284&source=IncomeAccess
Certificate IssuerAmazon
Subjectwelcome.kwiffcasino.com
Fingerprint12:BC:BB:63:8B:55:8E:88:DB:DA:5F:B6:9C:9C:E2:37:51:B0:FA:A1
ValidityMon, 20 Feb 2023 00:00:00 GMT - Wed, 20 Mar 2024 23:59:59 GMT
File type MS Windows icon resource - 6 icons, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, -128x-128, 32 bits/pixel\012- data
Size 109 kB (108671 bytes)
Hash a6dc167e6b0a5978d777092b6ce28769
743952db1b90abcb3e215d7debd3a51e0b74c7b8
143093fb4785e513ddaeb0c933c92d9619b1c5d411b7ad46fecaac8759f58127
GET /tab-icon.ico HTTP/1.1
Host: welcome.kwiffcasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://welcome.kwiffcasino.com/?btag=a_1148b_86c_&affid=284&source=IncomeAccess
Cookie: _gcl_au=1.1.1777060208.1701637833; _ga_X8YX9EK90W=GS1.1.1701637833.1.1.1701637833.60.0.0; _ga=GA1.1.1609983025.1701637834; _ga_2XMKD9FRSH=GS1.1.1701637833.1.0.1701637833.0.0.0; _ga_0XX95P00DD=GS1.1.1701637833.1.0.1701637833.0.0.0; _scid=2da23350-15b0-4d98-9d0a-0339d6093d77; _scid_r=2da23350-15b0-4d98-9d0a-0339d6093d77
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/vnd.microsoft.icon
content-length: 108671
last-modified: Fri, 06 Oct 2023 09:42:04 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Sun, 03 Dec 2023 16:45:57 GMT
etag: "a6dc167e6b0a5978d777092b6ce28769"
x-cache: Hit from cloudfront
via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: dV_t3Rd5arRvsK3hoOMp00vJTg6tTRzSXtSvvq-q1YtTGU_nhvoiEw==
age: 15872
X-Firefox-Spdy: h2
welcome.kwiffcasino.com/static/media/kwiffLogo.24434c43880429bfd95af37bc98339df.svg
200 OK 1.8 kB URL GET HTTP/2 welcome.kwiffcasino.com/static/media/kwiffLogo.24434c43880429bfd95af37bc98339df.svg
IP
Requested by https://welcome.kwiffcasino.com/?btag=a_1148b_86c_&affid=284&source=IncomeAccess
Certificate IssuerAmazon
Subjectwelcome.kwiffcasino.com
Fingerprint12:BC:BB:63:8B:55:8E:88:DB:DA:5F:B6:9C:9C:E2:37:51:B0:FA:A1
ValidityMon, 20 Feb 2023 00:00:00 GMT - Wed, 20 Mar 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1114)
Hash e69eb9a87873fabcb56158990773902a
f9a7e9225621a6369e5d9c6048ebf22ac98cfb40
b17cddc342a8775e0e17c291d8e4523532ea142da82964476d09c84b661d15c6
GET /static/media/kwiffLogo.24434c43880429bfd95af37bc98339df.svg HTTP/1.1
Host: welcome.kwiffcasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://welcome.kwiffcasino.com/?btag=a_1148b_86c_&affid=284&source=IncomeAccess
Cookie: _gcl_au=1.1.1777060208.1701637833; _ga_X8YX9EK90W=GS1.1.1701637833.1.1.1701637833.60.0.0; _ga=GA1.1.1609983025.1701637834; _ga_2XMKD9FRSH=GS1.1.1701637833.1.0.1701637833.0.0.0; _ga_0XX95P00DD=GS1.1.1701637833.1.0.1701637833.0.0.0; _scid=2da23350-15b0-4d98-9d0a-0339d6093d77; _scid_r=2da23350-15b0-4d98-9d0a-0339d6093d77
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 1804
last-modified: Fri, 06 Oct 2023 09:42:04 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Sun, 03 Dec 2023 13:23:40 GMT
etag: "e69eb9a87873fabcb56158990773902a"
x-cache: Hit from cloudfront
via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: uZeiqS-SXCrmR7pKHNrNPTqdOOF29VtmoG4swsrHAciQ6JdGM2Swbg==
age: 28009
X-Firefox-Spdy: h2
www.google.com/pagead/1p-conversion/11323737666/?random=1701637833532&cv=11&fst=1701637833532&bg=ffffff&guid=ON&async=1>m=45He3bt0v830875538&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&u_w=1280&u_h=1024&url=https%3A%2F%2Fwelcome.kwiffcasino.com%2F%3Fbtag%3Da_1148b_86c_%26affid%3D284%26source%3DIncomeAccess&label=tDi-CKyF894YEMKMypcq&hn=www.google.com&frm=0&tiba=Supercharged%20sports%20betting%20%7C%20Casino%20%7C%20kwiff&value=0&bttype=purchase&auid=1777060208.1701637833&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4
302 Found 63 B URL GET HTTP/2 www.google.com/pagead/1p-conversion/11323737666/?random=1701637833532&cv=11&fst=1701637833532&bg=ffffff&guid=ON&async=1>m=45He3bt0v830875538&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&u_w=1280&u_h=1024&url=https%3A%2F%2Fwelcome.kwiffcasino.com%2F%3Fbtag%3Da_1148b_86c_%26affid%3D284%26source%3DIncomeAccess&label=tDi-CKyF894YEMKMypcq&hn=www.google.com&frm=0&tiba=Supercharged%20sports%20betting%20%7C%20Casino%20%7C%20kwiff&value=0&bttype=purchase&auid=1777060208.1701637833&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4
IP
Requested by https://welcome.kwiffcasino.com/?btag=a_1148b_86c_&affid=284&source=IncomeAccess
Certificate IssuerGoogle Trust Services LLC
Subjectwww.google.com
FingerprintB0:8E:97:10:7E:30:90:F6:42:A1:32:63:5C:78:27:D3:A8:F1:05:D1
ValidityMon, 23 Oct 2023 11:24:57 GMT - Mon, 15 Jan 2024 11:24:56 GMT
File type ASCII text, with no line terminators
Hash ad8b6f08655797587cdec719a94efe59
182adf5a140796f81e930649d05654dbf22fd5b7
77d5fe96defd6c8c1e3b0466b4827cf83dc7e5c727a10177e115d25132fa86f6
GET /pagead/1p-conversion/11323737666/?random=1701637833532&cv=11&fst=1701637833532&bg=ffffff&guid=ON&async=1>m=45He3bt0v830875538&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&u_w=1280&u_h=1024&url=https%3A%2F%2Fwelcome.kwiffcasino.com%2F%3Fbtag%3Da_1148b_86c_%26affid%3D284%26source%3DIncomeAccess&label=tDi-CKyF894YEMKMypcq&hn=www.google.com&frm=0&tiba=Supercharged%20sports%20betting%20%7C%20Casino%20%7C%20kwiff&value=0&bttype=purchase&auid=1777060208.1701637833&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://welcome.kwiffcasino.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 03 Dec 2023 21:10:28 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
location: https://www.google.no/pagead/1p-conversion/11323737666/?random=1701637833532&cv=11&fst=1701637833532&bg=ffffff&guid=ON&async=1>m=45He3bt0v830875538&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&u_w=1280&u_h=1024&url=https%3A%2F%2Fwelcome.kwiffcasino.com%2F%3Fbtag%3Da_1148b_86c_%26affid%3D284%26source%3DIncomeAccess&label=tDi-CKyF894YEMKMypcq&hn=www.google.com&frm=0&tiba=Supercharged%20sports%20betting%20%7C%20Casino%20%7C%20kwiff&value=0&bttype=purchase&auid=1777060208.1701637833&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y
content-type: text/javascript; charset=UTF-8
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 63
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-X8YX9EK90W&cid=1609983025.1701637834>m=45je3bt0v886413280z8830875538&aip=1&dma=1&dma_cps=sypham&gcd=11l1l1l1l1&z=496870526
200 OK 42 B URL GET HTTP/2 www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-X8YX9EK90W&cid=1609983025.1701637834>m=45je3bt0v886413280z8830875538&aip=1&dma=1&dma_cps=sypham&gcd=11l1l1l1l1&z=496870526
IP
Requested by https://welcome.kwiffcasino.com/?btag=a_1148b_86c_&affid=284&source=IncomeAccess
Certificate IssuerGoogle Trust Services LLC
Subject*.google.no
Fingerprint6E:E4:BC:4A:67:5E:46:6A:B3:E4:CA:61:A7:C0:97:AB:14:F0:34:32
ValidityMon, 23 Oct 2023 11:27:27 GMT - Mon, 15 Jan 2024 11:27:26 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-X8YX9EK90W&cid=1609983025.1701637834>m=45je3bt0v886413280z8830875538&aip=1&dma=1&dma_cps=sypham&gcd=11l1l1l1l1&z=496870526 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://welcome.kwiffcasino.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 03 Dec 2023 21:10:28 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
welcome.kwiffcasino.com/static/media/Gambling-Commission.8c866a14bc70f4983157.png
200 OK 28 kB URL GET HTTP/2 welcome.kwiffcasino.com/static/media/Gambling-Commission.8c866a14bc70f4983157.png
IP
Requested by https://welcome.kwiffcasino.com/?btag=a_1148b_86c_&affid=284&source=IncomeAccess
Certificate IssuerAmazon
Subjectwelcome.kwiffcasino.com
Fingerprint12:BC:BB:63:8B:55:8E:88:DB:DA:5F:B6:9C:9C:E2:37:51:B0:FA:A1
ValidityMon, 20 Feb 2023 00:00:00 GMT - Wed, 20 Mar 2024 23:59:59 GMT
File type PNG image data, 2504 x 676, 8-bit/color RGBA, non-interlaced\012- data
Hash b6272bb0d4433858d2c0b37e8e1e4fe8
6e114c51d0759060b26000227ff2874a1eef4897
9c23f093357db03138b129eae0bfe36ad95988ebcfab457e2ae7b205485e8f79
GET /static/media/Gambling-Commission.8c866a14bc70f4983157.png HTTP/1.1
Host: welcome.kwiffcasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://welcome.kwiffcasino.com/?btag=a_1148b_86c_&affid=284&source=IncomeAccess
Cookie: _gcl_au=1.1.1777060208.1701637833; _ga_X8YX9EK90W=GS1.1.1701637833.1.1.1701637833.60.0.0; _ga=GA1.1.1609983025.1701637834; _ga_2XMKD9FRSH=GS1.1.1701637833.1.0.1701637833.0.0.0; _ga_0XX95P00DD=GS1.1.1701637833.1.0.1701637833.0.0.0; _scid=2da23350-15b0-4d98-9d0a-0339d6093d77; _scid_r=2da23350-15b0-4d98-9d0a-0339d6093d77
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 28346
date: Sun, 03 Dec 2023 08:17:20 GMT
last-modified: Fri, 06 Oct 2023 09:42:04 GMT
etag: "b6272bb0d4433858d2c0b37e8e1e4fe8"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: -ksoghGOaghjodFq52R_aN7JvlYJvZr4WaCrLYFQ9FCOZ6HSzveggA==
age: 46389
X-Firefox-Spdy: h2
welcome.kwiffcasino.com/static/media/GamCare.28c1a963243ce6119eec3d3fe76b8b0c.svg
200 OK 2.9 kB URL GET HTTP/2 welcome.kwiffcasino.com/static/media/GamCare.28c1a963243ce6119eec3d3fe76b8b0c.svg
IP
Requested by https://welcome.kwiffcasino.com/?btag=a_1148b_86c_&affid=284&source=IncomeAccess
Certificate IssuerAmazon
Subjectwelcome.kwiffcasino.com
Fingerprint12:BC:BB:63:8B:55:8E:88:DB:DA:5F:B6:9C:9C:E2:37:51:B0:FA:A1
ValidityMon, 20 Feb 2023 00:00:00 GMT - Wed, 20 Mar 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash f3d749bc91a43f1b4c08c10a6194dfa5
1716ea2950def71b8058b4090d7e58a56d52da73
066e5bb21e85f65f42178124e8a7965269d375fcc58f47adaf6f91ed6b4de0c3
GET /static/media/GamCare.28c1a963243ce6119eec3d3fe76b8b0c.svg HTTP/1.1
Host: welcome.kwiffcasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://welcome.kwiffcasino.com/?btag=a_1148b_86c_&affid=284&source=IncomeAccess
Cookie: _gcl_au=1.1.1777060208.1701637833; _ga_X8YX9EK90W=GS1.1.1701637833.1.1.1701637833.60.0.0; _ga=GA1.1.1609983025.1701637834; _ga_2XMKD9FRSH=GS1.1.1701637833.1.0.1701637833.0.0.0; _ga_0XX95P00DD=GS1.1.1701637833.1.0.1701637833.0.0.0; _scid=2da23350-15b0-4d98-9d0a-0339d6093d77; _scid_r=2da23350-15b0-4d98-9d0a-0339d6093d77
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 2919
last-modified: Fri, 06 Oct 2023 09:42:04 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Sun, 03 Dec 2023 03:46:29 GMT
etag: "f3d749bc91a43f1b4c08c10a6194dfa5"
x-cache: Hit from cloudfront
via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: B7eLTZMaxGpfh6_Lyml64KsB8lDH_sC248ARGPYdcwXuS_cDFwjepw==
age: 62640
X-Firefox-Spdy: h2
welcome.kwiffcasino.com/static/media/MasterCard.5b8b8b96980824c8612b.png
200 OK 18 kB URL GET HTTP/2 welcome.kwiffcasino.com/static/media/MasterCard.5b8b8b96980824c8612b.png
IP
Requested by https://welcome.kwiffcasino.com/?btag=a_1148b_86c_&affid=284&source=IncomeAccess
Certificate IssuerAmazon
Subjectwelcome.kwiffcasino.com
Fingerprint12:BC:BB:63:8B:55:8E:88:DB:DA:5F:B6:9C:9C:E2:37:51:B0:FA:A1
ValidityMon, 20 Feb 2023 00:00:00 GMT - Wed, 20 Mar 2024 23:59:59 GMT
File type PNG image data, 1711 x 300, 8-bit/color RGBA, non-interlaced\012- data
Hash 106edb82e741b319f172342754f259e8
cc48849b9edf5082cca759a080e244f9e1ba36d7
39cad70e00ff0387f56bb290f45eb84f0fd666d80d36b1b1d40ca09015557a2a
GET /static/media/MasterCard.5b8b8b96980824c8612b.png HTTP/1.1
Host: welcome.kwiffcasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://welcome.kwiffcasino.com/?btag=a_1148b_86c_&affid=284&source=IncomeAccess
Cookie: _gcl_au=1.1.1777060208.1701637833; _ga_X8YX9EK90W=GS1.1.1701637833.1.1.1701637833.60.0.0; _ga=GA1.1.1609983025.1701637834; _ga_2XMKD9FRSH=GS1.1.1701637833.1.0.1701637833.0.0.0; _ga_0XX95P00DD=GS1.1.1701637833.1.0.1701637833.0.0.0; _scid=2da23350-15b0-4d98-9d0a-0339d6093d77; _scid_r=2da23350-15b0-4d98-9d0a-0339d6093d77
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 18203
date: Sun, 03 Dec 2023 02:41:56 GMT
last-modified: Fri, 06 Oct 2023 09:42:04 GMT
etag: "106edb82e741b319f172342754f259e8"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: B4mYzys2XTBAlINuKklac6qwd6cLteyjO_8MZTWraTQFNW8tFEDytA==
age: 66512
X-Firefox-Spdy: h2
welcome.kwiffcasino.com/static/media/BeGambleAware.62fe0ba104ddd5d360ab.png
200 OK 32 kB URL GET HTTP/2 welcome.kwiffcasino.com/static/media/BeGambleAware.62fe0ba104ddd5d360ab.png
IP
Requested by https://welcome.kwiffcasino.com/?btag=a_1148b_86c_&affid=284&source=IncomeAccess
Certificate IssuerAmazon
Subjectwelcome.kwiffcasino.com
Fingerprint12:BC:BB:63:8B:55:8E:88:DB:DA:5F:B6:9C:9C:E2:37:51:B0:FA:A1
ValidityMon, 20 Feb 2023 00:00:00 GMT - Wed, 20 Mar 2024 23:59:59 GMT
File type PNG image data, 2504 x 329, 8-bit gray+alpha, non-interlaced\012- data
Hash 0366a90bb94c08939df9ec9b4df45a6a
304a8c430adadab2e3c5a6836827eba295fd7986
956bbdccaaeeecccd9ff298d32fe4fc7ea95eca98fceab13ea6409e0c1b939be
GET /static/media/BeGambleAware.62fe0ba104ddd5d360ab.png HTTP/1.1
Host: welcome.kwiffcasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://welcome.kwiffcasino.com/?btag=a_1148b_86c_&affid=284&source=IncomeAccess
Cookie: _gcl_au=1.1.1777060208.1701637833; _ga_X8YX9EK90W=GS1.1.1701637833.1.1.1701637833.60.0.0; _ga=GA1.1.1609983025.1701637834; _ga_2XMKD9FRSH=GS1.1.1701637833.1.0.1701637833.0.0.0; _ga_0XX95P00DD=GS1.1.1701637833.1.0.1701637833.0.0.0; _scid=2da23350-15b0-4d98-9d0a-0339d6093d77; _scid_r=2da23350-15b0-4d98-9d0a-0339d6093d77
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 31997
last-modified: Fri, 06 Oct 2023 09:42:04 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Sun, 03 Dec 2023 06:48:28 GMT
etag: "0366a90bb94c08939df9ec9b4df45a6a"
x-cache: Hit from cloudfront
via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: tU7eiFliz8zzOYNLpChDuR2w8M7QnQmvJQ_K7F8_FiVni7-1XSBExg==
age: 51721
X-Firefox-Spdy: h2
welcome.kwiffcasino.com/static/media/UnderAge18.7c57158d6f37b6d13afa8f2267467c59.svg
200 OK 1.3 kB URL GET HTTP/2 welcome.kwiffcasino.com/static/media/UnderAge18.7c57158d6f37b6d13afa8f2267467c59.svg
IP
Requested by https://welcome.kwiffcasino.com/?btag=a_1148b_86c_&affid=284&source=IncomeAccess
Certificate IssuerAmazon
Subjectwelcome.kwiffcasino.com
Fingerprint12:BC:BB:63:8B:55:8E:88:DB:DA:5F:B6:9C:9C:E2:37:51:B0:FA:A1
ValidityMon, 20 Feb 2023 00:00:00 GMT - Wed, 20 Mar 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 83ab6a011f8c66667ad9bfdd74aa857b
f95e788c9dbd7b22cb581855963ca4f7728aabab
2a94cd35c6ced0ef8556910c368b6dc6d550ad480c4f96aca35f58ed269f6cd0
GET /static/media/UnderAge18.7c57158d6f37b6d13afa8f2267467c59.svg HTTP/1.1
Host: welcome.kwiffcasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://welcome.kwiffcasino.com/?btag=a_1148b_86c_&affid=284&source=IncomeAccess
Cookie: _gcl_au=1.1.1777060208.1701637833; _ga_X8YX9EK90W=GS1.1.1701637833.1.1.1701637833.60.0.0; _ga=GA1.1.1609983025.1701637834; _ga_2XMKD9FRSH=GS1.1.1701637833.1.0.1701637833.0.0.0; _ga_0XX95P00DD=GS1.1.1701637833.1.0.1701637833.0.0.0; _scid=2da23350-15b0-4d98-9d0a-0339d6093d77; _scid_r=2da23350-15b0-4d98-9d0a-0339d6093d77
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 1268
last-modified: Fri, 06 Oct 2023 09:42:04 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Sun, 03 Dec 2023 05:36:55 GMT
etag: "83ab6a011f8c66667ad9bfdd74aa857b"
x-cache: Hit from cloudfront
via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: _7AQKdcC6-Q4ELjaK4YRWoCUrJ-egHUbzbjq7eWe0UIei3dUAElm3g==
age: 56014
X-Firefox-Spdy: h2
welcome.kwiffcasino.com/static/media/Netent.e1cbdf748a9ed17a67ac.png
200 OK 28 kB URL GET HTTP/2 welcome.kwiffcasino.com/static/media/Netent.e1cbdf748a9ed17a67ac.png
IP
Requested by https://welcome.kwiffcasino.com/?btag=a_1148b_86c_&affid=284&source=IncomeAccess
Certificate IssuerAmazon
Subjectwelcome.kwiffcasino.com
Fingerprint12:BC:BB:63:8B:55:8E:88:DB:DA:5F:B6:9C:9C:E2:37:51:B0:FA:A1
ValidityMon, 20 Feb 2023 00:00:00 GMT - Wed, 20 Mar 2024 23:59:59 GMT
File type PNG image data, 1600 x 1600, 8-bit/color RGBA, non-interlaced\012- data
Hash 26136326ce038367cae822f6904888f6
8c6966674156595a19c4ba9ac6f5f6ab3fb7512a
561bdb02c54f6e9a41027c4678fa6fa90654c0435f07c388fbe12148effeb9f3
GET /static/media/Netent.e1cbdf748a9ed17a67ac.png HTTP/1.1
Host: welcome.kwiffcasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://welcome.kwiffcasino.com/?btag=a_1148b_86c_&affid=284&source=IncomeAccess
Cookie: _gcl_au=1.1.1777060208.1701637833; _ga_X8YX9EK90W=GS1.1.1701637833.1.1.1701637833.60.0.0; _ga=GA1.1.1609983025.1701637834; _ga_2XMKD9FRSH=GS1.1.1701637833.1.0.1701637833.0.0.0; _ga_0XX95P00DD=GS1.1.1701637833.1.0.1701637833.0.0.0; _scid=2da23350-15b0-4d98-9d0a-0339d6093d77; _scid_r=2da23350-15b0-4d98-9d0a-0339d6093d77
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 28477
date: Sun, 03 Dec 2023 08:17:20 GMT
last-modified: Fri, 06 Oct 2023 09:42:04 GMT
etag: "26136326ce038367cae822f6904888f6"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 2O7p6SJa4CAnsoBv00dtL_C-q08it_sH1ji5T_I7mMZ1YvFW5v84hA==
age: 46389
X-Firefox-Spdy: h2
welcome.kwiffcasino.com/static/media/Ecogra.b46e0a2c42a2c4ad3cf8.png
200 OK 12 kB URL GET HTTP/2 welcome.kwiffcasino.com/static/media/Ecogra.b46e0a2c42a2c4ad3cf8.png
IP
Requested by https://welcome.kwiffcasino.com/?btag=a_1148b_86c_&affid=284&source=IncomeAccess
Certificate IssuerAmazon
Subjectwelcome.kwiffcasino.com
Fingerprint12:BC:BB:63:8B:55:8E:88:DB:DA:5F:B6:9C:9C:E2:37:51:B0:FA:A1
ValidityMon, 20 Feb 2023 00:00:00 GMT - Wed, 20 Mar 2024 23:59:59 GMT
File type PNG image data, 200 x 59, 8-bit/color RGBA, interlaced\012- data
Hash 29737c9cbc94dda27b22310042c3fb16
211a1180b11bb6acb78d1b55337bb6c9a58e0805
d19328de8bfbed9dcc8028c62525349ec8162c1a80756e27bdaef7fad1cc6947
GET /static/media/Ecogra.b46e0a2c42a2c4ad3cf8.png HTTP/1.1
Host: welcome.kwiffcasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://welcome.kwiffcasino.com/?btag=a_1148b_86c_&affid=284&source=IncomeAccess
Cookie: _gcl_au=1.1.1777060208.1701637833; _ga_X8YX9EK90W=GS1.1.1701637833.1.1.1701637833.60.0.0; _ga=GA1.1.1609983025.1701637834; _ga_2XMKD9FRSH=GS1.1.1701637833.1.0.1701637833.0.0.0; _ga_0XX95P00DD=GS1.1.1701637833.1.0.1701637833.0.0.0; _scid=2da23350-15b0-4d98-9d0a-0339d6093d77; _scid_r=2da23350-15b0-4d98-9d0a-0339d6093d77
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 11620
last-modified: Fri, 06 Oct 2023 09:42:04 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Sun, 03 Dec 2023 13:23:40 GMT
etag: "29737c9cbc94dda27b22310042c3fb16"
x-cache: Hit from cloudfront
via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: mwaEBzNTqr1VzWH7P9v8s90oxqF4CSwCQkOuxAT3Gbf6JO75jca2Ow==
age: 28009
X-Firefox-Spdy: h2
welcome.kwiffcasino.com/static/media/PlayNGo.0b212c097a814fb8a45c.png
200 OK 58 kB URL GET HTTP/2 welcome.kwiffcasino.com/static/media/PlayNGo.0b212c097a814fb8a45c.png
IP
Requested by https://welcome.kwiffcasino.com/?btag=a_1148b_86c_&affid=284&source=IncomeAccess
Certificate IssuerAmazon
Subjectwelcome.kwiffcasino.com
Fingerprint12:BC:BB:63:8B:55:8E:88:DB:DA:5F:B6:9C:9C:E2:37:51:B0:FA:A1
ValidityMon, 20 Feb 2023 00:00:00 GMT - Wed, 20 Mar 2024 23:59:59 GMT
File type PNG image data, 2504 x 696, 8-bit/color RGBA, non-interlaced\012- data
Hash 9f00ad65455a388b33d4f05ccce66347
71582379201e0d06bf1afce781a63b422b6b5a20
0a7ba4163a0a572d9a08324442390ea066942ee442935f2a865c0e1fcad0b25e
GET /static/media/PlayNGo.0b212c097a814fb8a45c.png HTTP/1.1
Host: welcome.kwiffcasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://welcome.kwiffcasino.com/?btag=a_1148b_86c_&affid=284&source=IncomeAccess
Cookie: _gcl_au=1.1.1777060208.1701637833; _ga_X8YX9EK90W=GS1.1.1701637833.1.1.1701637833.60.0.0; _ga=GA1.1.1609983025.1701637834; _ga_2XMKD9FRSH=GS1.1.1701637833.1.0.1701637833.0.0.0; _ga_0XX95P00DD=GS1.1.1701637833.1.0.1701637833.0.0.0; _scid=2da23350-15b0-4d98-9d0a-0339d6093d77; _scid_r=2da23350-15b0-4d98-9d0a-0339d6093d77
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 57936
last-modified: Fri, 06 Oct 2023 09:42:04 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Sun, 03 Dec 2023 13:23:40 GMT
etag: "9f00ad65455a388b33d4f05ccce66347"
x-cache: Hit from cloudfront
via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: yIEdhW8knRnSzEb4ruYF_eZzwqBtCJT7wDLL97Zf1iRCWFMUaFtuPw==
age: 28009
X-Firefox-Spdy: h2
welcome.kwiffcasino.com/static/media/EvoGaming.b6b351c5912a18cc7656.png
200 OK 29 kB URL GET HTTP/2 welcome.kwiffcasino.com/static/media/EvoGaming.b6b351c5912a18cc7656.png
IP
Requested by https://welcome.kwiffcasino.com/?btag=a_1148b_86c_&affid=284&source=IncomeAccess
Certificate IssuerAmazon
Subjectwelcome.kwiffcasino.com
Fingerprint12:BC:BB:63:8B:55:8E:88:DB:DA:5F:B6:9C:9C:E2:37:51:B0:FA:A1
ValidityMon, 20 Feb 2023 00:00:00 GMT - Wed, 20 Mar 2024 23:59:59 GMT
File type PNG image data, 2504 x 305, 8-bit/color RGBA, non-interlaced\012- data
Hash e002b8344e7e7d043440d6e637f3581e
24c144b6f7568e887112bfc27fb9aae5149ba9a2
1bbef182c46ffdc91db90a951d3d43bd2e03d9ec55231e422a6b16b2e2e5bf4f
GET /static/media/EvoGaming.b6b351c5912a18cc7656.png HTTP/1.1
Host: welcome.kwiffcasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://welcome.kwiffcasino.com/?btag=a_1148b_86c_&affid=284&source=IncomeAccess
Cookie: _gcl_au=1.1.1777060208.1701637833; _ga_X8YX9EK90W=GS1.1.1701637833.1.1.1701637833.60.0.0; _ga=GA1.1.1609983025.1701637834; _ga_2XMKD9FRSH=GS1.1.1701637833.1.0.1701637833.0.0.0; _ga_0XX95P00DD=GS1.1.1701637833.1.0.1701637833.0.0.0; _scid=2da23350-15b0-4d98-9d0a-0339d6093d77; _scid_r=2da23350-15b0-4d98-9d0a-0339d6093d77
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 29085
last-modified: Fri, 06 Oct 2023 09:42:04 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Sun, 03 Dec 2023 13:23:40 GMT
etag: "e002b8344e7e7d043440d6e637f3581e"
x-cache: Hit from cloudfront
via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: bg2HT9armk2Up0-dCim41CCmmukhVIo2Z0D2RYxQRktYTV-NkvVtOg==
age: 28009
X-Firefox-Spdy: h2
welcome.kwiffcasino.com/static/media/Safecharge.39216bcaedbc1a64bbdf.png
200 OK 22 kB URL GET HTTP/2 welcome.kwiffcasino.com/static/media/Safecharge.39216bcaedbc1a64bbdf.png
IP
Requested by https://welcome.kwiffcasino.com/?btag=a_1148b_86c_&affid=284&source=IncomeAccess
Certificate IssuerAmazon
Subjectwelcome.kwiffcasino.com
Fingerprint12:BC:BB:63:8B:55:8E:88:DB:DA:5F:B6:9C:9C:E2:37:51:B0:FA:A1
ValidityMon, 20 Feb 2023 00:00:00 GMT - Wed, 20 Mar 2024 23:59:59 GMT
File type PNG image data, 1667 x 317, 8-bit gray+alpha, non-interlaced\012- data
Hash 63114a20ebfa64b8bf5cb1d1f39930d3
639acf09261d0547efb0b0e60dec5a655f18a73b
8b9fd67a4da023fb358bf4baf63c7810bb10b4338a24c0e28983f800680d7ae7
GET /static/media/Safecharge.39216bcaedbc1a64bbdf.png HTTP/1.1
Host: welcome.kwiffcasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://welcome.kwiffcasino.com/?btag=a_1148b_86c_&affid=284&source=IncomeAccess
Cookie: _gcl_au=1.1.1777060208.1701637833; _ga_X8YX9EK90W=GS1.1.1701637833.1.1.1701637833.60.0.0; _ga=GA1.1.1609983025.1701637834; _ga_2XMKD9FRSH=GS1.1.1701637833.1.0.1701637833.0.0.0; _ga_0XX95P00DD=GS1.1.1701637833.1.0.1701637833.0.0.0; _scid=2da23350-15b0-4d98-9d0a-0339d6093d77; _scid_r=2da23350-15b0-4d98-9d0a-0339d6093d77
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 21874
date: Sun, 03 Dec 2023 02:41:56 GMT
last-modified: Fri, 06 Oct 2023 09:42:04 GMT
etag: "63114a20ebfa64b8bf5cb1d1f39930d3"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: OTFP97qDvA_pVuJStA8bWotHtsDLF2NL6OgM49WMlYbkj5nSReo6lw==
age: 66513
X-Firefox-Spdy: h2
welcome.kwiffcasino.com/static/media/Instagram.aaf0e2dfab70a2023b85.png
200 OK 20 kB URL GET HTTP/2 welcome.kwiffcasino.com/static/media/Instagram.aaf0e2dfab70a2023b85.png
IP
Requested by https://welcome.kwiffcasino.com/?btag=a_1148b_86c_&affid=284&source=IncomeAccess
Certificate IssuerAmazon
Subjectwelcome.kwiffcasino.com
Fingerprint12:BC:BB:63:8B:55:8E:88:DB:DA:5F:B6:9C:9C:E2:37:51:B0:FA:A1
ValidityMon, 20 Feb 2023 00:00:00 GMT - Wed, 20 Mar 2024 23:59:59 GMT
File type PNG image data, 810 x 810, 8-bit/color RGBA, non-interlaced\012- data
Hash f1f0945bd5f56cb5e369f14f9872abfe
b4ff13f9a5bade41e8007dc7cbdfd6499247a947
a71e293690e73499ed4a3853faf862d3d29cb3222138de7e7c52f2dba8fc9aa6
GET /static/media/Instagram.aaf0e2dfab70a2023b85.png HTTP/1.1
Host: welcome.kwiffcasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://welcome.kwiffcasino.com/?btag=a_1148b_86c_&affid=284&source=IncomeAccess
Cookie: _gcl_au=1.1.1777060208.1701637833; _ga_X8YX9EK90W=GS1.1.1701637833.1.1.1701637833.60.0.0; _ga=GA1.1.1609983025.1701637834; _ga_2XMKD9FRSH=GS1.1.1701637833.1.0.1701637833.0.0.0; _ga_0XX95P00DD=GS1.1.1701637833.1.0.1701637833.0.0.0; _scid=2da23350-15b0-4d98-9d0a-0339d6093d77; _scid_r=2da23350-15b0-4d98-9d0a-0339d6093d77
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 20361
last-modified: Fri, 06 Oct 2023 09:42:04 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Sun, 03 Dec 2023 13:23:40 GMT
etag: "f1f0945bd5f56cb5e369f14f9872abfe"
x-cache: Hit from cloudfront
via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: ZyS1dLJ8DshIyOXvvDmYdQqhZaEKFI5tJJlobF1sh5JadiKADiZnoQ==
age: 28009
X-Firefox-Spdy: h2
welcome.kwiffcasino.com/static/media/Facebook.437fb6a1efffad3a19e4.png
200 OK 13 kB URL GET HTTP/2 welcome.kwiffcasino.com/static/media/Facebook.437fb6a1efffad3a19e4.png
IP
Requested by https://welcome.kwiffcasino.com/?btag=a_1148b_86c_&affid=284&source=IncomeAccess
Certificate IssuerAmazon
Subjectwelcome.kwiffcasino.com
Fingerprint12:BC:BB:63:8B:55:8E:88:DB:DA:5F:B6:9C:9C:E2:37:51:B0:FA:A1
ValidityMon, 20 Feb 2023 00:00:00 GMT - Wed, 20 Mar 2024 23:59:59 GMT
File type PNG image data, 810 x 810, 8-bit/color RGBA, non-interlaced\012- data
Hash 76a7234e18e647c77aac232525cbb8a2
ef5e10e613f90d8dc15e9c72b4b97da9b7b35552
9a306084ef6118f43519b9a8bb75bf57e1eebf3cb77410a820eac48b1cdbc15f
GET /static/media/Facebook.437fb6a1efffad3a19e4.png HTTP/1.1
Host: welcome.kwiffcasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://welcome.kwiffcasino.com/?btag=a_1148b_86c_&affid=284&source=IncomeAccess
Cookie: _gcl_au=1.1.1777060208.1701637833; _ga_X8YX9EK90W=GS1.1.1701637833.1.1.1701637833.60.0.0; _ga=GA1.1.1609983025.1701637834; _ga_2XMKD9FRSH=GS1.1.1701637833.1.0.1701637833.0.0.0; _ga_0XX95P00DD=GS1.1.1701637833.1.0.1701637833.0.0.0; _scid=2da23350-15b0-4d98-9d0a-0339d6093d77; _scid_r=2da23350-15b0-4d98-9d0a-0339d6093d77
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 12749
last-modified: Fri, 06 Oct 2023 09:42:04 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Sun, 03 Dec 2023 14:09:46 GMT
etag: "76a7234e18e647c77aac232525cbb8a2"
x-cache: Hit from cloudfront
via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: WeRhykXDchDFG7yyzq_my5Uf13MDjXZslA8kJ9m5M-jaWiGpngyDLg==
age: 25243
X-Firefox-Spdy: h2
welcome.kwiffcasino.com/static/media/Twitter.422a1bdec49509dd7f31.png
200 OK 21 kB URL GET HTTP/2 welcome.kwiffcasino.com/static/media/Twitter.422a1bdec49509dd7f31.png
IP
Requested by https://welcome.kwiffcasino.com/?btag=a_1148b_86c_&affid=284&source=IncomeAccess
Certificate IssuerAmazon
Subjectwelcome.kwiffcasino.com
Fingerprint12:BC:BB:63:8B:55:8E:88:DB:DA:5F:B6:9C:9C:E2:37:51:B0:FA:A1
ValidityMon, 20 Feb 2023 00:00:00 GMT - Wed, 20 Mar 2024 23:59:59 GMT
File type PNG image data, 810 x 810, 8-bit/color RGBA, non-interlaced\012- data
Hash 1db6236526cd9e587c7b42884b0da8b0
cd4084909fc54dcfb2da0e46a6b177e1030a59a7
5fe7042fdf152f2f5e631318edecd6122f51ebdf77b08645b8ac47f9b7c6bfb5
GET /static/media/Twitter.422a1bdec49509dd7f31.png HTTP/1.1
Host: welcome.kwiffcasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://welcome.kwiffcasino.com/?btag=a_1148b_86c_&affid=284&source=IncomeAccess
Cookie: _gcl_au=1.1.1777060208.1701637833; _ga_X8YX9EK90W=GS1.1.1701637833.1.1.1701637833.60.0.0; _ga=GA1.1.1609983025.1701637834; _ga_2XMKD9FRSH=GS1.1.1701637833.1.0.1701637833.0.0.0; _ga_0XX95P00DD=GS1.1.1701637833.1.0.1701637833.0.0.0; _scid=2da23350-15b0-4d98-9d0a-0339d6093d77; _scid_r=2da23350-15b0-4d98-9d0a-0339d6093d77
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 20978
last-modified: Fri, 06 Oct 2023 09:42:04 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Sun, 03 Dec 2023 03:46:30 GMT
etag: "1db6236526cd9e587c7b42884b0da8b0"
x-cache: Hit from cloudfront
via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: S7m2pupfRjVJkWRj_ELSos6Zw7CdlB9KJGImA9BxQX_VTYzQoIS1sw==
age: 62639
X-Firefox-Spdy: h2
welcome.kwiffcasino.com/static/media/Yggdrasil.8c3b1350fa8a426dee2a.png
200 OK 183 kB URL GET HTTP/2 welcome.kwiffcasino.com/static/media/Yggdrasil.8c3b1350fa8a426dee2a.png
IP
Requested by https://welcome.kwiffcasino.com/?btag=a_1148b_86c_&affid=284&source=IncomeAccess
Certificate IssuerAmazon
Subjectwelcome.kwiffcasino.com
Fingerprint12:BC:BB:63:8B:55:8E:88:DB:DA:5F:B6:9C:9C:E2:37:51:B0:FA:A1
ValidityMon, 20 Feb 2023 00:00:00 GMT - Wed, 20 Mar 2024 23:59:59 GMT
File type PNG image data, 6917 x 2590, 8-bit/color RGBA, non-interlaced\012- data
Size 183 kB (182550 bytes)
Hash 1c7e13395271fa2ad70f7863a71f73e9
5d2351f7bed1dde45fb30788d60723d01c5749ee
0fa38bbd8ec50d35a8603c99d730d4e0adba2c4fff958af30140cc7fab205518
GET /static/media/Yggdrasil.8c3b1350fa8a426dee2a.png HTTP/1.1
Host: welcome.kwiffcasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://welcome.kwiffcasino.com/?btag=a_1148b_86c_&affid=284&source=IncomeAccess
Cookie: _gcl_au=1.1.1777060208.1701637833; _ga_X8YX9EK90W=GS1.1.1701637833.1.1.1701637833.60.0.0; _ga=GA1.1.1609983025.1701637834; _ga_2XMKD9FRSH=GS1.1.1701637833.1.0.1701637833.0.0.0; _ga_0XX95P00DD=GS1.1.1701637833.1.0.1701637833.0.0.0; _scid=2da23350-15b0-4d98-9d0a-0339d6093d77; _scid_r=2da23350-15b0-4d98-9d0a-0339d6093d77
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 182550
date: Sun, 03 Dec 2023 08:17:20 GMT
last-modified: Fri, 06 Oct 2023 09:42:04 GMT
etag: "1c7e13395271fa2ad70f7863a71f73e9"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: ZYUOWN2n1FNosDtrd7V_j9YR9ovpBN1hbJdYI71cTnBR2F5ijzD3Ag==
age: 46389
X-Firefox-Spdy: h2
welcome.kwiffcasino.com/static/media/Youtube.10ceb24722723d49b504.png
200 OK 15 kB URL GET HTTP/2 welcome.kwiffcasino.com/static/media/Youtube.10ceb24722723d49b504.png
IP
Requested by https://welcome.kwiffcasino.com/?btag=a_1148b_86c_&affid=284&source=IncomeAccess
Certificate IssuerAmazon
Subjectwelcome.kwiffcasino.com
Fingerprint12:BC:BB:63:8B:55:8E:88:DB:DA:5F:B6:9C:9C:E2:37:51:B0:FA:A1
ValidityMon, 20 Feb 2023 00:00:00 GMT - Wed, 20 Mar 2024 23:59:59 GMT
File type PNG image data, 810 x 810, 8-bit/color RGBA, non-interlaced\012- data
Hash 14d41f90ff2017ed77e26f9f75ef07c8
a6e5213fbdce9d63b4568536d8d80d29071b5e64
732916ceb11ec8cd3c1ecde7cab2a313f1af34d98ce704046d5360ec88807de0
GET /static/media/Youtube.10ceb24722723d49b504.png HTTP/1.1
Host: welcome.kwiffcasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://welcome.kwiffcasino.com/?btag=a_1148b_86c_&affid=284&source=IncomeAccess
Cookie: _gcl_au=1.1.1777060208.1701637833; _ga_X8YX9EK90W=GS1.1.1701637833.1.1.1701637833.60.0.0; _ga=GA1.1.1609983025.1701637834; _ga_2XMKD9FRSH=GS1.1.1701637833.1.0.1701637833.0.0.0; _ga_0XX95P00DD=GS1.1.1701637833.1.0.1701637833.0.0.0; _scid=2da23350-15b0-4d98-9d0a-0339d6093d77; _scid_r=2da23350-15b0-4d98-9d0a-0339d6093d77
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 14861
last-modified: Fri, 06 Oct 2023 09:42:04 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Sun, 03 Dec 2023 06:48:28 GMT
etag: "14d41f90ff2017ed77e26f9f75ef07c8"
x-cache: Hit from cloudfront
via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: LFx24Q8iOJbeusNhhYJfiFEDCv43oviTpjoLQmfVZvlB8XAiBIwMlQ==
age: 51721
X-Firefox-Spdy: h2
welcome.kwiffcasino.com/static/media/MicroGaming.db7f020849b542dd570d.png
200 OK 28 kB URL GET HTTP/2 welcome.kwiffcasino.com/static/media/MicroGaming.db7f020849b542dd570d.png
IP
Requested by https://welcome.kwiffcasino.com/?btag=a_1148b_86c_&affid=284&source=IncomeAccess
Certificate IssuerAmazon
Subjectwelcome.kwiffcasino.com
Fingerprint12:BC:BB:63:8B:55:8E:88:DB:DA:5F:B6:9C:9C:E2:37:51:B0:FA:A1
ValidityMon, 20 Feb 2023 00:00:00 GMT - Wed, 20 Mar 2024 23:59:59 GMT
File type PNG image data, 1850 x 467, 8-bit/color RGBA, non-interlaced\012- data
Hash 332ba7283b513b6fc2dde7fe51427010
c110227a76ed9522ca0f335d47bc24c0fcf67edd
879d3fb2a22d0290f6321c292b3a8e53bcd93714e6e1f20edf7ac4da885c1ea0
GET /static/media/MicroGaming.db7f020849b542dd570d.png HTTP/1.1
Host: welcome.kwiffcasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://welcome.kwiffcasino.com/?btag=a_1148b_86c_&affid=284&source=IncomeAccess
Cookie: _gcl_au=1.1.1777060208.1701637833; _ga_X8YX9EK90W=GS1.1.1701637833.1.1.1701637833.60.0.0; _ga=GA1.1.1609983025.1701637834; _ga_2XMKD9FRSH=GS1.1.1701637833.1.0.1701637833.0.0.0; _ga_0XX95P00DD=GS1.1.1701637833.1.0.1701637833.0.0.0; _scid=2da23350-15b0-4d98-9d0a-0339d6093d77; _scid_r=2da23350-15b0-4d98-9d0a-0339d6093d77
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 27988
last-modified: Fri, 06 Oct 2023 09:42:04 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Sun, 03 Dec 2023 13:23:40 GMT
etag: "332ba7283b513b6fc2dde7fe51427010"
x-cache: Hit from cloudfront
via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: P6jZNxEx1boLUXYzAgaOBlrRKhZegCoMb0aKXow2XQ8ww156utPPeQ==
age: 28009
X-Firefox-Spdy: h2
welcome.kwiffcasino.com/static/media/visuelt_regular.c14ab5481d8a240e0e23.otf
200 OK 117 kB URL GET HTTP/2 welcome.kwiffcasino.com/static/media/visuelt_regular.c14ab5481d8a240e0e23.otf
IP
Requested by https://welcome.kwiffcasino.com/?btag=a_1148b_86c_&affid=284&source=IncomeAccess
Certificate IssuerAmazon
Subjectwelcome.kwiffcasino.com
Fingerprint12:BC:BB:63:8B:55:8E:88:DB:DA:5F:B6:9C:9C:E2:37:51:B0:FA:A1
ValidityMon, 20 Feb 2023 00:00:00 GMT - Wed, 20 Mar 2024 23:59:59 GMT
File type OpenType font data\012- data
Size 117 kB (116784 bytes)
Hash fbf78d1cbec56ef82f262e4b6e569c86
53ebb5aaa8e85714b1ad44302bbfd0dc0f678ab6
b48e4d2002938e95494e41c0efcd5f16738bab3c7619ee2bdb10f1bef1087c58
GET /static/media/visuelt_regular.c14ab5481d8a240e0e23.otf HTTP/1.1
Host: welcome.kwiffcasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://welcome.kwiffcasino.com/static/css/main.1ca413ca.css
Cookie: _gcl_au=1.1.1777060208.1701637833; _ga_X8YX9EK90W=GS1.1.1701637833.1.1.1701637833.60.0.0; _ga=GA1.1.1609983025.1701637834; _ga_2XMKD9FRSH=GS1.1.1701637833.1.0.1701637833.0.0.0; _ga_0XX95P00DD=GS1.1.1701637833.1.0.1701637833.0.0.0; _scid=2da23350-15b0-4d98-9d0a-0339d6093d77; _scid_r=2da23350-15b0-4d98-9d0a-0339d6093d77
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: font/otf
content-length: 116784
last-modified: Fri, 06 Oct 2023 09:42:04 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Sun, 03 Dec 2023 13:23:40 GMT
etag: "fbf78d1cbec56ef82f262e4b6e569c86"
x-cache: Hit from cloudfront
via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: fXtcIZdUZMUydghvn4MG2YcVT5OYTzBfLiQlQchSGWY66kFzcQoScw==
age: 28009
X-Firefox-Spdy: h2
region1.analytics.google.com/g/collect?v=2&tid=G-X8YX9EK90W>m=45je3bt0v886413280z8830875538&_p=1701637833066&_gaz=1&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1609983025.1701637834&ul=en-us&sr=1280x1024&_s=1&sid=1701637833&sct=1&seg=0&dl=https%3A%2F%2Fwelcome.kwiffcasino.com%2F%3Fbtag%3Da_1148b_86c_%26affid%3D284%26source%3DIncomeAccess&dt=Supercharged%20sports%20betting%20%7C%20Casino%20%7C%20kwiff&en=page_view&_fv=1&_nsi=1&_ss=2&ep.userId=%27None%27&up.kwiff_id=%27None%27&tfd=1476
204 No Content 0 B URL POST HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-X8YX9EK90W>m=45je3bt0v886413280z8830875538&_p=1701637833066&_gaz=1&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1609983025.1701637834&ul=en-us&sr=1280x1024&_s=1&sid=1701637833&sct=1&seg=0&dl=https%3A%2F%2Fwelcome.kwiffcasino.com%2F%3Fbtag%3Da_1148b_86c_%26affid%3D284%26source%3DIncomeAccess&dt=Supercharged%20sports%20betting%20%7C%20Casino%20%7C%20kwiff&en=page_view&_fv=1&_nsi=1&_ss=2&ep.userId=%27None%27&up.kwiff_id=%27None%27&tfd=1476
IP
Requested by https://welcome.kwiffcasino.com/?btag=a_1148b_86c_&affid=284&source=IncomeAccess
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-X8YX9EK90W>m=45je3bt0v886413280z8830875538&_p=1701637833066&_gaz=1&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1609983025.1701637834&ul=en-us&sr=1280x1024&_s=1&sid=1701637833&sct=1&seg=0&dl=https%3A%2F%2Fwelcome.kwiffcasino.com%2F%3Fbtag%3Da_1148b_86c_%26affid%3D284%26source%3DIncomeAccess&dt=Supercharged%20sports%20betting%20%7C%20Casino%20%7C%20kwiff&en=page_view&_fv=1&_nsi=1&_ss=2&ep.userId=%27None%27&up.kwiff_id=%27None%27&tfd=1476 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://welcome.kwiffcasino.com
DNT: 1
Connection: keep-alive
Referer: https://welcome.kwiffcasino.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://welcome.kwiffcasino.com
date: Sun, 03 Dec 2023 21:10:28 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.no/pagead/1p-conversion/11323737666/?random=1701637833532&cv=11&fst=1701637833532&bg=ffffff&guid=ON&async=1>m=45He3bt0v830875538&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&u_w=1280&u_h=1024&url=https%3A%2F%2Fwelcome.kwiffcasino.com%2F%3Fbtag%3Da_1148b_86c_%26affid%3D284%26source%3DIncomeAccess&label=tDi-CKyF894YEMKMypcq&hn=www.google.com&frm=0&tiba=Supercharged%20sports%20betting%20%7C%20Casino%20%7C%20kwiff&value=0&bttype=purchase&auid=1777060208.1701637833&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y
200 OK 63 B URL GET HTTP/3 www.google.no/pagead/1p-conversion/11323737666/?random=1701637833532&cv=11&fst=1701637833532&bg=ffffff&guid=ON&async=1>m=45He3bt0v830875538&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&u_w=1280&u_h=1024&url=https%3A%2F%2Fwelcome.kwiffcasino.com%2F%3Fbtag%3Da_1148b_86c_%26affid%3D284%26source%3DIncomeAccess&label=tDi-CKyF894YEMKMypcq&hn=www.google.com&frm=0&tiba=Supercharged%20sports%20betting%20%7C%20Casino%20%7C%20kwiff&value=0&bttype=purchase&auid=1777060208.1701637833&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y
IP
Requested by https://welcome.kwiffcasino.com/?btag=a_1148b_86c_&affid=284&source=IncomeAccess
Certificate IssuerGoogle Trust Services LLC
Subject*.google.no
Fingerprint6E:E4:BC:4A:67:5E:46:6A:B3:E4:CA:61:A7:C0:97:AB:14:F0:34:32
ValidityMon, 23 Oct 2023 11:27:27 GMT - Mon, 15 Jan 2024 11:27:26 GMT
File type ASCII text, with no line terminators
Hash ad8b6f08655797587cdec719a94efe59
182adf5a140796f81e930649d05654dbf22fd5b7
77d5fe96defd6c8c1e3b0466b4827cf83dc7e5c727a10177e115d25132fa86f6
GET /pagead/1p-conversion/11323737666/?random=1701637833532&cv=11&fst=1701637833532&bg=ffffff&guid=ON&async=1>m=45He3bt0v830875538&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&u_w=1280&u_h=1024&url=https%3A%2F%2Fwelcome.kwiffcasino.com%2F%3Fbtag%3Da_1148b_86c_%26affid%3D284%26source%3DIncomeAccess&label=tDi-CKyF894YEMKMypcq&hn=www.google.com&frm=0&tiba=Supercharged%20sports%20betting%20%7C%20Casino%20%7C%20kwiff&value=0&bttype=purchase&auid=1777060208.1701637833&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://welcome.kwiffcasino.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 03 Dec 2023 21:10:29 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: text/javascript; charset=UTF-8
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 63
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
storage.bannernow.com/A6Jnm13Bk9Pyl5vJqNq57DQXKWv4LErMmApKOBQhr8/index.html
3.6 kB URL storage.bannernow.com/A6Jnm13Bk9Pyl5vJqNq57DQXKWv4LErMmApKOBQhr8/index.html
IP
File type gzip compressed data, from Unix\012- data
Hash 5852e9a969ad13ba22d25136b99fd12e
2dd6045960fe54aaac48533c42595f5001872162
2adb458acd1b4e7e73cd10912d77243bda003b4c477b19793a46bdf87dbc6534
GET /A6Jnm13Bk9Pyl5vJqNq57DQXKWv4LErMmApKOBQhr8/index.html HTTP/1.1
Host: storage.bannernow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://storage.bannernow.com/dt/html/dtp_cl14pgu6h001hlno3y96yroug/embed.html?responsive=1&bnTag=
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 03 Dec 2023 21:10:30 GMT
content-type: text/html
x-amz-id-2: 659PG2X7OQwy2G+TR/xKoPysk4fMsqShaWWdPVj/JAvuhPbvkwIRaXOMjSIP0D/bVqm6gMYw1KI=
x-amz-request-id: 55M36395SRFNHX3B
last-modified: Fri, 22 Sep 2023 13:50:08 GMT
x-amz-server-side-encryption: AES256
cache-control: public, max-age=0, s-maxage=1200
cf-cache-status: MISS
vary: Accept-Encoding
server: cloudflare
cf-ray: 82fecbf43d5db517-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
stats.bannernow.com/pixel.png?user_id=usr_ckx6bi7h000e7ioo4irnt6n44&banner_id=bnr_cvbw47a3g0kq3wc9bcw8579hc&bannerset_id=fdr_cpvwvlw5tk04hs8jjpohvwmq6&project_id=prj_ckx6bi7k200mcioo4yxj1zgpg&domain=welcome.kwiffcasino.com&tree_id=dt_cl14pgu54000xlno3hw6gvvdu&tree_placeholder_id=dtp_cl14pgu6h001hlno3y96yroug
200 OK 95 B URL GET HTTP/2 stats.bannernow.com/pixel.png?user_id=usr_ckx6bi7h000e7ioo4irnt6n44&banner_id=bnr_cvbw47a3g0kq3wc9bcw8579hc&bannerset_id=fdr_cpvwvlw5tk04hs8jjpohvwmq6&project_id=prj_ckx6bi7k200mcioo4yxj1zgpg&domain=welcome.kwiffcasino.com&tree_id=dt_cl14pgu54000xlno3hw6gvvdu&tree_placeholder_id=dtp_cl14pgu6h001hlno3y96yroug
IP
Requested by https://storage.bannernow.com/A6Jnm13Bk9Pyl5vJqNq57DQXKWv4LErMmApKOBQhr8/index.html#bnTag=&tree_id=dt_cl14pgu54000xlno3hw6gvvdu&tree_placeholder_id=dtp_cl14pgu6h001hlno3y96yroug&responsive=1&domain=welcome.kwiffcasino.com
Certificate IssuerGoogle Trust Services LLC
Subjectstats.bannernow.com
Fingerprint35:51:6A:BB:82:9A:2F:89:D4:F2:40:4D:6D:03:D1:36:52:15:74:F9
ValiditySun, 05 Nov 2023 01:48:04 GMT - Sat, 03 Feb 2024 02:42:39 GMT
File type PNG image data, 1 x 1, 1-bit colormap, non-interlaced\012- data
Hash 9591c410148e6883727c5339fd1c02cd
3442a95fe890ce4769b36b2ecc611b801a54cfb5
cafbd551d674da240212f6c44988757a728b9dc8cbc2a6c8dcf53c0d9159c323
GET /pixel.png?user_id=usr_ckx6bi7h000e7ioo4irnt6n44&banner_id=bnr_cvbw47a3g0kq3wc9bcw8579hc&bannerset_id=fdr_cpvwvlw5tk04hs8jjpohvwmq6&project_id=prj_ckx6bi7k200mcioo4yxj1zgpg&domain=welcome.kwiffcasino.com&tree_id=dt_cl14pgu54000xlno3hw6gvvdu&tree_placeholder_id=dtp_cl14pgu6h001hlno3y96yroug HTTP/1.1
Host: stats.bannernow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://storage.bannernow.com
DNT: 1
Connection: keep-alive
Referer: https://storage.bannernow.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-guploader-uploadid: ABPtcPpz6ezUn9SxiTDjsi8fMw8ra9kwx2YwdF1KV4gUHNgYeRXw2_NeVxNQCIycrxgjLE4qmy3faEQJ0jEFdre6QhnbXj6r1cEv
date: Sun, 03 Dec 2023 21:10:30 GMT
cache-control: no-cache, no-store, must-revalidate
expires: Mon, 02 Dec 2024 21:10:30 GMT
last-modified: Sun, 04 Feb 2018 01:22:19 GMT
etag: "9591c410148e6883727c5339fd1c02cd"
x-goog-generation: 1517707340066543
x-goog-metageneration: 4
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 95
x-goog-meta-pragma: no-cache
x-goog-meta-expires: 0
x-goog-meta-pixel-region: US
content-type: image/png
content-language: en
x-goog-hash: crc32c=vJqQig==, md5=lZHEEBSOaINyfFM5/RwCzQ==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 95
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
icv.bannernow.com/api/images?m=contain&w=2596&h=1132&x=center&y=center&q=100&type=smallest&u=https%3A%2F%2Fstorage.bannernow.com%2FA6Jnm13Bk9Pyl5vJqNq57DQXKWv4LErMmApKOBQhr8%2Fimages%2F9%2Fcadg1czz2nhqhmbmr1loom91z.png
200 OK 779 kB URL GET HTTP/2 icv.bannernow.com/api/images?m=contain&w=2596&h=1132&x=center&y=center&q=100&type=smallest&u=https%3A%2F%2Fstorage.bannernow.com%2FA6Jnm13Bk9Pyl5vJqNq57DQXKWv4LErMmApKOBQhr8%2Fimages%2F9%2Fcadg1czz2nhqhmbmr1loom91z.png
IP
Requested by https://storage.bannernow.com/A6Jnm13Bk9Pyl5vJqNq57DQXKWv4LErMmApKOBQhr8/index.html#bnTag=&tree_id=dt_cl14pgu54000xlno3hw6gvvdu&tree_placeholder_id=dtp_cl14pgu6h001hlno3y96yroug&responsive=1&domain=welcome.kwiffcasino.com
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintD4:2E:43:41:BE:90:55:E5:3A:4A:B8:94:F3:C6:87:E7:18:EF:93:BA
ValidityMon, 17 Apr 2023 00:00:00 GMT - Tue, 16 Apr 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 2000x1125, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size 779 kB (778894 bytes)
Hash 73174f578598d33e69e89a2b5c7da2dc
5b65e60f93c65ad144714731917d600c3db93d56
5afcbeee0e560fe274900a5db5a1e7fca253ff1d781ab515ffc4b5799cf6ef9f
GET /api/images?m=contain&w=2596&h=1132&x=center&y=center&q=100&type=smallest&u=https%3A%2F%2Fstorage.bannernow.com%2FA6Jnm13Bk9Pyl5vJqNq57DQXKWv4LErMmApKOBQhr8%2Fimages%2F9%2Fcadg1czz2nhqhmbmr1loom91z.png HTTP/1.1
Host: icv.bannernow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://storage.bannernow.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 03 Dec 2023 21:10:31 GMT
content-type: image/webp
content-length: 778894
x-amzn-requestid: be8a4901-ca0a-4a40-bc4b-d7666b18ab90
x-thumbnailer-version: 1.3.13
x-amz-apigw-id: PYo_CGssIAMEoqg=
cache-control: public, max-age=31536000
expires: Sun, 17 Jan 2038 19:14:07 GMT
x-amzn-trace-id: Root=1-656ceec6-4a65f9f9385d7d222729ca24;Sampled=0;lineage=d2272c0e:0
x-cache: Miss from cloudfront
via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ftwoUMohiKkjjEyGOSxSjXskn-cn3nOH2flv3lnIZhm6-Mce32ZLNA==
last-modified: Sun, 03 Dec 2023 21:10:31 GMT
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 82fecbf71902b517-OSL
X-Firefox-Spdy: h2
region1.analytics.google.com/g/collect?v=2&tid=G-X8YX9EK90W>m=45je3bt0v886413280z8830875538&_p=1701637833066&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1609983025.1701637834&ul=en-us&sr=1280x1024&_eu=AAAC&_s=2&sid=1701637833&sct=1&seg=1&dl=https%3A%2F%2Fwelcome.kwiffcasino.com%2F%3Fbtag%3Da_1148b_86c_%26affid%3D284%26source%3DIncomeAccess&dt=Supercharged%20sports%20betting%20%7C%20Casino%20%7C%20kwiff&en=page_view&tfd=6487
204 No Content 0 B URL POST HTTP/3 region1.analytics.google.com/g/collect?v=2&tid=G-X8YX9EK90W>m=45je3bt0v886413280z8830875538&_p=1701637833066&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1609983025.1701637834&ul=en-us&sr=1280x1024&_eu=AAAC&_s=2&sid=1701637833&sct=1&seg=1&dl=https%3A%2F%2Fwelcome.kwiffcasino.com%2F%3Fbtag%3Da_1148b_86c_%26affid%3D284%26source%3DIncomeAccess&dt=Supercharged%20sports%20betting%20%7C%20Casino%20%7C%20kwiff&en=page_view&tfd=6487
IP
Requested by https://welcome.kwiffcasino.com/?btag=a_1148b_86c_&affid=284&source=IncomeAccess
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-X8YX9EK90W>m=45je3bt0v886413280z8830875538&_p=1701637833066&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1609983025.1701637834&ul=en-us&sr=1280x1024&_eu=AAAC&_s=2&sid=1701637833&sct=1&seg=1&dl=https%3A%2F%2Fwelcome.kwiffcasino.com%2F%3Fbtag%3Da_1148b_86c_%26affid%3D284%26source%3DIncomeAccess&dt=Supercharged%20sports%20betting%20%7C%20Casino%20%7C%20kwiff&en=page_view&tfd=6487 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://welcome.kwiffcasino.com
DNT: 1
Connection: keep-alive
Referer: https://welcome.kwiffcasino.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/3 204 No Content
access-control-allow-origin: https://welcome.kwiffcasino.com
date: Sun, 03 Dec 2023 21:10:33 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
storage.bannernow.com/resources/lib/bn_1.0.0.min.js
200 OK 87 kB URL GET HTTP/2 storage.bannernow.com/resources/lib/bn_1.0.0.min.js
IP
Requested by https://storage.bannernow.com/A6Jnm13Bk9Pyl5vJqNq57DQXKWv4LErMmApKOBQhr8/index.html#bnTag=&tree_id=dt_cl14pgu54000xlno3hw6gvvdu&tree_placeholder_id=dtp_cl14pgu6h001hlno3y96yroug&responsive=1&domain=welcome.kwiffcasino.com
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintD4:2E:43:41:BE:90:55:E5:3A:4A:B8:94:F3:C6:87:E7:18:EF:93:BA
ValidityMon, 17 Apr 2023 00:00:00 GMT - Tue, 16 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /resources/lib/bn_1.0.0.min.js HTTP/1.1
Host: storage.bannernow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://storage.bannernow.com/A6Jnm13Bk9Pyl5vJqNq57DQXKWv4LErMmApKOBQhr8/index.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 03 Dec 2023 21:10:30 GMT
content-type: application/javascript
x-amz-id-2: w73qZ85oX9NvjBI2EZriymBlh8u+AzFTURX07LHv1v7G0MBcqQ8/FG6f176sEYpliL8eaawjkKU=
x-amz-request-id: TT52SFN6CNFGHHNK
last-modified: Wed, 22 Nov 2023 08:48:51 GMT
etag: W/"571217f5fe9109c43b5275b2523d004c"
x-amz-server-side-encryption: AES256
cache-control: max-age=1200
cf-cache-status: HIT
age: 1076
vary: Accept-Encoding
server: cloudflare
cf-ray: 82fecbf63fe6b517-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
ipapi.co/json/
200 OK 743 B IP
Requested by https://welcome.kwiffcasino.com/?btag=a_1148b_86c_&affid=284&source=IncomeAccess
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint1C:DB:D6:56:6B:17:32:E7:56:AF:64:8D:07:3B:37:96:77:A8:FD:F1
ValiditySun, 16 Apr 2023 00:00:00 GMT - Mon, 15 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (869), with no line terminators
Hash 66396024adc96d9030a9ae0dfdd2a7fd
ca84107ac52c428b36df8b4bc4f2f88e9e678707
05ca12ca27f9e889eaffe362efa363f4ff3249fbc1f06bcac3342e7862f57c4b
GET /json/ HTTP/1.1
Host: ipapi.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://welcome.kwiffcasino.com
DNT: 1
Connection: keep-alive
Referer: https://welcome.kwiffcasino.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 03 Dec 2023 21:10:28 GMT
content-type: application/json
allow: OPTIONS, HEAD, POST, GET, OPTIONS
x-frame-options: DENY
vary: Host, origin
access-control-allow-origin: https://welcome.kwiffcasino.com
x-content-type-options: nosniff
referrer-policy: same-origin
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=octXNO8ZVwbv5%2Bwg4%2FCEU5b%2Bdr4Hw1LFCM01pn8IAJsQuZj%2B8CgV4GnylkK3l7iMxWYnQ07G%2BRkbcyY8DX6CbxRVd3LVT2uIH6uYc9JN15bmLsf7EGsmfxDT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82fecbe9fcee0b59-OSL
content-encoding: br
X-Firefox-Spdy: h2
icv.bannernow.com/api/fonts?font_url=https%3A%2F%2Fstorage.bannernow.com%2Ffonts%2Fcft_ckxj2gyj2000v82sa03y46ebf%2Ffont.woff&font_name=Visuelt%20Medium&font_chars=%EF%BB%BFNew%20CustomrOnly10%25WcBp%E2%82%AC5
200 OK 4.1 kB URL GET HTTP/2 icv.bannernow.com/api/fonts?font_url=https%3A%2F%2Fstorage.bannernow.com%2Ffonts%2Fcft_ckxj2gyj2000v82sa03y46ebf%2Ffont.woff&font_name=Visuelt%20Medium&font_chars=%EF%BB%BFNew%20CustomrOnly10%25WcBp%E2%82%AC5
IP
Requested by https://storage.bannernow.com/A6Jnm13Bk9Pyl5vJqNq57DQXKWv4LErMmApKOBQhr8/index.html#bnTag=&tree_id=dt_cl14pgu54000xlno3hw6gvvdu&tree_placeholder_id=dtp_cl14pgu6h001hlno3y96yroug&responsive=1&domain=welcome.kwiffcasino.com
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintD4:2E:43:41:BE:90:55:E5:3A:4A:B8:94:F3:C6:87:E7:18:EF:93:BA
ValidityMon, 17 Apr 2023 00:00:00 GMT - Tue, 16 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (4059), with no line terminators
Hash 60632a16c8bf77520599f3ead6b2292a
d04773f66661f7df718dccff5d00d7b13a6dc72e
88fc726a15a66a1054b756628c2145f2990c3d30a56487faf47319f23771c698
GET /api/fonts?font_url=https%3A%2F%2Fstorage.bannernow.com%2Ffonts%2Fcft_ckxj2gyj2000v82sa03y46ebf%2Ffont.woff&font_name=Visuelt%20Medium&font_chars=%EF%BB%BFNew%20CustomrOnly10%25WcBp%E2%82%AC5 HTTP/1.1
Host: icv.bannernow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://storage.bannernow.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 03 Dec 2023 21:10:30 GMT
content-type: text/css; charset=utf-8
x-amzn-requestid: edc78c18-150a-417a-85f2-3f6ebb4e1b38
x-amz-apigw-id: PYo_EFwBIAMEiwg=
cache-control: max-age=8400000
x-amzn-trace-id: Root=1-656ceec6-2b2022ac4f48fe651284475f;Sampled=0;lineage=3dd120ed:0
x-cache: Miss from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: DTfwO2IYU0tdUYy2XSgPDoHdQggZUT9pb9yV9zASWUr0twgUD8kCLA==
last-modified: Sun, 03 Dec 2023 21:10:30 GMT
cf-cache-status: MISS
vary: Accept-Encoding
server: cloudflare
cf-ray: 82fecbf718ffb517-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
welcome.kwiffcasino.com/apple-touch-icon.png
200 OK 18 kB URL GET HTTP/2 welcome.kwiffcasino.com/apple-touch-icon.png
IP
Requested by https://welcome.kwiffcasino.com/?btag=a_1148b_86c_&affid=284&source=IncomeAccess
Certificate IssuerAmazon
Subjectwelcome.kwiffcasino.com
Fingerprint12:BC:BB:63:8B:55:8E:88:DB:DA:5F:B6:9C:9C:E2:37:51:B0:FA:A1
ValidityMon, 20 Feb 2023 00:00:00 GMT - Wed, 20 Mar 2024 23:59:59 GMT
File type PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data
Hash 880dd8b8412204b8a85342b565911a64
34412c9d64741083058caa75dc71ebe79d72968c
6d85371b2bedaef1249cda7b7541cbcf02e97f094edd99daacb718cc5970629c
GET /apple-touch-icon.png HTTP/1.1
Host: welcome.kwiffcasino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://welcome.kwiffcasino.com/?btag=a_1148b_86c_&affid=284&source=IncomeAccess
Cookie: _gcl_au=1.1.1777060208.1701637833; _ga_X8YX9EK90W=GS1.1.1701637833.1.1.1701637833.60.0.0; _ga=GA1.1.1609983025.1701637834; _ga_2XMKD9FRSH=GS1.1.1701637833.1.0.1701637833.0.0.0; _ga_0XX95P00DD=GS1.1.1701637833.1.0.1701637833.0.0.0; _scid=2da23350-15b0-4d98-9d0a-0339d6093d77; _scid_r=2da23350-15b0-4d98-9d0a-0339d6093d77
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
content-length: 17680
date: Sun, 03 Dec 2023 03:46:33 GMT
last-modified: Fri, 06 Oct 2023 09:42:04 GMT
etag: "880dd8b8412204b8a85342b565911a64"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: I9RXvIin_cBmMjgwrhCeZ-6RntIaJU7HgE-RICV0hFND84CBH8MoiA==
age: 62636
X-Firefox-Spdy: h2
storage.bannernow.com/dt/html/dtp_cl14pgu6h001hlno3y96yroug/embed.html?responsive=1&bnTag=
200 OK 1.8 kB URL GET HTTP/2 storage.bannernow.com/dt/html/dtp_cl14pgu6h001hlno3y96yroug/embed.html?responsive=1&bnTag=
IP
Requested by https://welcome.kwiffcasino.com/?btag=a_1148b_86c_&affid=284&source=IncomeAccess
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintD4:2E:43:41:BE:90:55:E5:3A:4A:B8:94:F3:C6:87:E7:18:EF:93:BA
ValidityMon, 17 Apr 2023 00:00:00 GMT - Tue, 16 Apr 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1912), with no line terminators
Hash c652fe7f7a80f550044b84049fca530c
3404345acc94f664dbed18a904c0c675e1d480f4
8466c1fa77a4afd55c3c4a2ff97df38aa1d2e1bcf4c24bcba42ad423311f51fe
GET /dt/html/dtp_cl14pgu6h001hlno3y96yroug/embed.html?responsive=1&bnTag= HTTP/1.1
Host: storage.bannernow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://welcome.kwiffcasino.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 03 Dec 2023 21:10:29 GMT
content-type: text/html
x-amz-id-2: KAjaRetJVymM8RxUcdOFOrcrZpeMhLk7HPjprjYnMusGUE/7h7HO7EL0T1ZkrIFHPFitlyNHZmg=
x-amz-request-id: KPNR69S2CCJFVJE0
last-modified: Mon, 13 Nov 2023 07:55:36 GMT
x-amz-server-side-encryption: AES256
cache-control: public, max-age=0, s-maxage=1200
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 82fecbefdf70b517-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
storage.bannernow.com/dt/js/dtp_cl14pgu6h001hlno3y96yroug/embed.js?responsive=1&bnTag=
200 OK 6.0 kB URL GET HTTP/2 storage.bannernow.com/dt/js/dtp_cl14pgu6h001hlno3y96yroug/embed.js?responsive=1&bnTag=
IP
Requested by https://storage.bannernow.com/dt/html/dtp_cl14pgu6h001hlno3y96yroug/embed.html?responsive=1&bnTag=
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintD4:2E:43:41:BE:90:55:E5:3A:4A:B8:94:F3:C6:87:E7:18:EF:93:BA
ValidityMon, 17 Apr 2023 00:00:00 GMT - Tue, 16 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (6179), with no line terminators
Hash 8b0950209d1504ac896adc82fe7f462e
641ace07d14f8ecee627d1eeb650e2b950f4f124
36c7323ce86ccdfe4893aba486c123f0ed8c77cce8d91d082e4acadfa55f89d5
GET /dt/js/dtp_cl14pgu6h001hlno3y96yroug/embed.js?responsive=1&bnTag= HTTP/1.1
Host: storage.bannernow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://storage.bannernow.com/dt/html/dtp_cl14pgu6h001hlno3y96yroug/embed.html?responsive=1&bnTag=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 03 Dec 2023 21:10:29 GMT
content-type: text/plain;charset=UTF-8
vary: Accept-Encoding
server: cloudflare
cf-ray: 82fecbf26ae0b517-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
storage.bannernow.com/resources/lib/tweenmax_1.18.min.js
200 OK 110 kB URL GET HTTP/2 storage.bannernow.com/resources/lib/tweenmax_1.18.min.js
IP
Requested by https://storage.bannernow.com/A6Jnm13Bk9Pyl5vJqNq57DQXKWv4LErMmApKOBQhr8/index.html#bnTag=&tree_id=dt_cl14pgu54000xlno3hw6gvvdu&tree_placeholder_id=dtp_cl14pgu6h001hlno3y96yroug&responsive=1&domain=welcome.kwiffcasino.com
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintD4:2E:43:41:BE:90:55:E5:3A:4A:B8:94:F3:C6:87:E7:18:EF:93:BA
ValidityMon, 17 Apr 2023 00:00:00 GMT - Tue, 16 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (32053)
Size 110 kB (110266 bytes)
Hash 23b0de6da0ee295131e32a500470610c
5b13a8f3b87c1b48ecdd5dc5cf5eed821d127614
97982680a892d29f743ce32b99fb340cc4a186769e56380998145868781f4ebe
GET /resources/lib/tweenmax_1.18.min.js HTTP/1.1
Host: storage.bannernow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://storage.bannernow.com/A6Jnm13Bk9Pyl5vJqNq57DQXKWv4LErMmApKOBQhr8/index.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 03 Dec 2023 21:10:30 GMT
content-type: application/javascript
x-amz-id-2: bi0bZJnUVAIm3FYUm0JHAe1BZebY9YJGMb4EQ+bADH5PmoRMhOIZFB947Vigzeg7aX1na5MO0zI=
x-amz-request-id: EY3WXK0ZSSPM1TK8
last-modified: Thu, 15 Apr 2021 18:30:12 GMT
etag: W/"23b0de6da0ee295131e32a500470610c"
cache-control: max-age=3600
cf-cache-status: HIT
vary: Accept-Encoding
server: cloudflare
cf-ray: 82fecbf64ff4b517-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
storage.bannernow.com/A6Jnm13Bk9Pyl5vJqNq57DQXKWv4LErMmApKOBQhr8/index.html
200 OK 16 kB URL GET HTTP/2 storage.bannernow.com/A6Jnm13Bk9Pyl5vJqNq57DQXKWv4LErMmApKOBQhr8/index.html
IP
Requested by https://storage.bannernow.com/dt/html/dtp_cl14pgu6h001hlno3y96yroug/embed.html?responsive=1&bnTag=
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintD4:2E:43:41:BE:90:55:E5:3A:4A:B8:94:F3:C6:87:E7:18:EF:93:BA
ValidityMon, 17 Apr 2023 00:00:00 GMT - Tue, 16 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /A6Jnm13Bk9Pyl5vJqNq57DQXKWv4LErMmApKOBQhr8/index.html HTTP/1.1
Host: storage.bannernow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://storage.bannernow.com/dt/html/dtp_cl14pgu6h001hlno3y96yroug/embed.html?responsive=1&bnTag=
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 03 Dec 2023 21:10:30 GMT
content-type: text/html
x-amz-id-2: 659PG2X7OQwy2G+TR/xKoPysk4fMsqShaWWdPVj/JAvuhPbvkwIRaXOMjSIP0D/bVqm6gMYw1KI=
x-amz-request-id: 55M36395SRFNHX3B
last-modified: Fri, 22 Sep 2023 13:50:08 GMT
x-amz-server-side-encryption: AES256
cache-control: public, max-age=0, s-maxage=1200
cf-cache-status: MISS
vary: Accept-Encoding
server: cloudflare
cf-ray: 82fecbf43d5db517-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
40.127.232.184
104.18.28.248
172.67.69.226
0.0.0.0