| gryphiaastroid.com/?a=2040&c=112954&s1={var1}&s2={clickid} |  15.197.214.180 | 302 Found | 0 B |
URL User Request GET HTTP/2gryphiaastroid.com/?a=2040&c=112954&s1={var1}&s2={clickid} IP15.197.214.180:443
CertificateIssuerAmazon Subjectgryphiaastroid.com Fingerprint99:39:16:67:B8:96:C2:D7:26:C5:3C:74:F0:D0:A1:5F:30:1A:A1:8B ValidityTue, 29 Aug 2023 00:00:00 GMT - Thu, 26 Sep 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /?a=2040&c=112954&s1={var1}&s2={clickid} HTTP/1.1
Host: gryphiaastroid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Wed, 01 May 2024 13:05:09 GMT
content-length: 0
location: https://cybermeetme2.com/?utm_campaign=n30CDtGmuM&s2=%7Bclickid%7D&aid=2040&s1=%7Bvar1%7D&s3=&s4=
server: nginx
set-cookie: pt30=6062b83089764a09b169087cebbb7ac7; Max-Age=2592000; Expires=Fri, 31 May 2024 13:05:09 GMT; Domain=gryphiaastroid.com; Path=/; Secure; HttpOnly; SameSite=None
ptc=6062b83089764a09b169087cebbb7ac7; Max-Age=157680000; Expires=Mon, 30 Apr 2029 13:05:09 GMT; Domain=gryphiaastroid.com; Path=/; Secure; HttpOnly; SameSite=None
ptbs=6062b83089764a09b169087cebbb7ac7; Domain=gryphiaastroid.com; Path=/; Secure; HttpOnly; SameSite=None
ptr=pt716653c1dc6c4e1da65fb9cdd2cbc21a; Max-Age=157680000; Expires=Mon, 30 Apr 2029 13:05:09 GMT; Domain=gryphiaastroid.com; Path=/; Secure; HttpOnly; SameSite=None
X-Firefox-Spdy: h2
|
|
| cybermeetme2.com/?utm_campaign=n30CDtGmuM&s2=%7Bclickid%7D&aid=2040&s1=%7Bvar1%7D&s3=&s4= |  188.166.38.225 | 302 Found | 0 B |
URL User Request GET HTTP/2cybermeetme2.com/?utm_campaign=n30CDtGmuM&s2=%7Bclickid%7D&aid=2040&s1=%7Bvar1%7D&s3=&s4= IP188.166.38.225:443 ASN#14061 DIGITALOCEAN-ASN
CertificateIssuerLet's Encrypt Subjectcybermeetme2.com FingerprintEA:10:95:7E:57:3E:57:B5:79:B4:36:9D:18:15:16:3C:27:43:C3:19 ValidityFri, 15 Mar 2024 11:05:26 GMT - Thu, 13 Jun 2024 11:05:25 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?utm_campaign=n30CDtGmuM&s2=%7Bclickid%7D&aid=2040&s1=%7Bvar1%7D&s3=&s4= HTTP/1.1
Host: cybermeetme2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
location: https://trackeruptimes.com/?c=72994&s1=%7Bvar1%7D&s5=ZEU-348ae79f-84ff-4100-9737-30dc871845b4&s2=%7Bclickid%7D&s3=&s4=&a=2040
referrer-policy: no-referrer
server: nginx/1.15.7
set-cookie: sess-2dbe9c0896cf69471e4cb07941a3a69e=MTcxNDU2ODcxMHxLangxQzVPU0x4QjZVY3E4bFI2OUV1OHpqMHVrR1dtOGFlNDV3R1BaQjkyYTZFajh5UGVFTm9ZPXxEmmX94b92Q2P92lZH3sEMrTvlw8TzcYgUu2Y8ON0Ygw==; Max-Age=31536000; HttpOnly
content-length: 0
date: Wed, 01 May 2024 13:05:10 GMT
X-Firefox-Spdy: h2
|
|
| trackeruptimes.com/?c=72994&s1=%7Bvar1%7D&s5=ZEU-348ae79f-84ff-4100-9737-30dc871845b4&s2=%7Bclickid%7D&s3=&s4=&a=2040 | 54.173.106.225 | 302 Found | 213 B |
URL User Request GET HTTP/1.1trackeruptimes.com/?c=72994&s1=%7Bvar1%7D&s5=ZEU-348ae79f-84ff-4100-9737-30dc871845b4&s2=%7Bclickid%7D&s3=&s4=&a=2040 IP54.173.106.225:443
CertificateIssuerGlobalSign nv-sa Subject*.trackeruptimes.com Fingerprint1C:14:FD:D0:50:2F:E9:BD:CE:D2:CD:11:57:C3:71:03:78:87:0E:87 ValiditySun, 01 Oct 2023 01:36:11 GMT - Fri, 01 Nov 2024 01:36:10 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash0235947715396f5bc45b3120d8447b55 d2bb9e5619bb23c37cad3c5992022983289d1abe 66e495390e8549e966f47241f0510356c2182314514c85c92c763757f4c0587e
GET /?c=72994&s1=%7Bvar1%7D&s5=ZEU-348ae79f-84ff-4100-9737-30dc871845b4&s2=%7Bclickid%7D&s3=&s4=&a=2040 HTTP/1.1
Host: trackeruptimes.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Cache-Control: private
Content-Length: 213
Content-Type: text/html; charset=utf-8
Date: Wed, 01 May 2024 13:05:10 GMT
Location: https://www.hyggeligtreff.com/landing5?cat=milf&pi=2040&pt1=3817092883&pe=%7bvar1%7d
P3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: sid=WvvAkq7x1yWJHXHAghIABed3TfIDUQ20tLKrS925MZke2F7+4kixfg==; domain=.trackeruptimes.com; path=/; HttpOnly
trk=G8k1PrmDAuKajeUPaB+Q8Od3TfIDUQ20tLKrS925MZke2F7+4kixfg==; domain=.trackeruptimes.com; expires=Fri, 01-May-2026 13:05:10 GMT; path=/; HttpOnly
c21618=WvvAkq7x1yXTPNNiTfkut1edYnMLAgqUYTx+KZGVl173ascr6DxRcg==; domain=.trackeruptimes.com; expires=Fri, 31-May-2024 13:05:10 GMT; path=/; HttpOnly
Connection: close
|
|
| www.hyggeligtreff.com/img/logo.png | 35.227.204.77 | 200 OK | 10 kB |
URL GET HTTP/3www.hyggeligtreff.com/img/logo.png IP35.227.204.77:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.hyggeligtreff.com/landing5?cat=milf&pi=2040&pt1=3817092883&pe=%7bvar1%7d CertificateIssuerGoogle Trust Services LLC Subjecthyggeligtreff.com Fingerprint30:AD:9D:93:9E:F8:B6:66:1D:A6:80:F0:B5:36:4E:DC:7E:75:8B:D7 ValidityFri, 22 Mar 2024 21:42:59 GMT - Thu, 20 Jun 2024 22:37:12 GMT
File typePNG image data, 300 x 100, 8-bit/color RGBA, non-interlaced Hashc91961cae35a52b7287b69ea8c16b553 7a3d1fb228052b2e547f553c54213650beb8321c 6508fad6e5e405a25071061d6f3c8dcd3c4befc81312156cf6c2e85d849a8a0f
GET /img/logo.png HTTP/1.1
Host: www.hyggeligtreff.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.hyggeligtreff.com/landing5?cat=milf&pi=2040&pt1=3817092883&pe=%7bvar1%7d
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 01 May 2024 13:05:11 GMT
server: Apache/2.4.58 (Ubuntu)
vary: X-Forwarded-Proto
last-modified: Wed, 01 May 2024 12:24:37 GMT
etag: "2803-6176391e7a25c"
accept-ranges: bytes
content-length: 10243
x-ua-compatible: IE=edge,chrome=1
content-type: image/png
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.hyggeligtreff.com/landers/images/loader/loading.gif | 35.227.204.77 | 200 OK | 2.9 kB |
URL GET HTTP/3www.hyggeligtreff.com/landers/images/loader/loading.gif IP35.227.204.77:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.hyggeligtreff.com/landing5?cat=milf&pi=2040&pt1=3817092883&pe=%7bvar1%7d CertificateIssuerGoogle Trust Services LLC Subjecthyggeligtreff.com Fingerprint30:AD:9D:93:9E:F8:B6:66:1D:A6:80:F0:B5:36:4E:DC:7E:75:8B:D7 ValidityFri, 22 Mar 2024 21:42:59 GMT - Thu, 20 Jun 2024 22:37:12 GMT
File typeGIF image data, version 89a, 128 x 15 Hash62b08454087f1ef8b27bd2bcda330537 cac1914632f4c859f6176a84078f1017bad069f8 06f91f1bc360e7c486515b416a564445652e40585f94f2d089239b981d6421f6
GET /landers/images/loader/loading.gif HTTP/1.1
Host: www.hyggeligtreff.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.hyggeligtreff.com/landing5?cat=milf&pi=2040&pt1=3817092883&pe=%7bvar1%7d
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 01 May 2024 13:05:11 GMT
server: nginx/1.14.2
content-type: image/gif
content-length: 2892
last-modified: Wed, 01 May 2024 07:23:41 GMT
etag: "6631edfd-b4c"
x-cacheable: YES
cache-control: max-age=300
xkey: lander
x-varnish: 17670183
age: 0
x-cache: MISS
accept-ranges: bytes
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000, h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
via: 1.1 varnish (Varnish/6.0), 1.1 google, 1.1 google
|
|
| www.hyggeligtreff.com/landers/js/ad-provider.js | 35.227.204.77 | 200 OK | 512 B |
URL GET HTTP/3www.hyggeligtreff.com/landers/js/ad-provider.js IP35.227.204.77:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.hyggeligtreff.com/landing5?cat=milf&pi=2040&pt1=3817092883&pe=%7bvar1%7d CertificateIssuerGoogle Trust Services LLC Subjecthyggeligtreff.com Fingerprint30:AD:9D:93:9E:F8:B6:66:1D:A6:80:F0:B5:36:4E:DC:7E:75:8B:D7 ValidityFri, 22 Mar 2024 21:42:59 GMT - Thu, 20 Jun 2024 22:37:12 GMT
File typeASCII text, with very long lines (979) Hashacd920e8f5657057e8003b79905c5266 cd96548060dbbc3f715cb81c3810d893eedec260 38b34bce7e5ad8268f51a16a6633c17923130b2fac9eeb6ceaca6beb50990681
GET /landers/js/ad-provider.js HTTP/1.1
Host: www.hyggeligtreff.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.hyggeligtreff.com/landing5?cat=milf&pi=2040&pt1=3817092883&pe=%7bvar1%7d
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 01 May 2024 13:02:15 GMT
server: nginx/1.14.2
content-type: application/javascript
last-modified: Wed, 01 May 2024 07:23:53 GMT
etag: "6631ee09-3fb-gzip"
x-cacheable: YES
cache-control: max-age=300
xkey: lander
x-varnish: 6944728 17958408
age: 0
x-cache: HIT
accept-ranges: bytes
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000, h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
vary: Accept-Encoding
content-encoding: gzip
content-length: 512
via: 1.1 varnish (Varnish/6.0), 1.1 google, 1.1 google
|
|
| www.hyggeligtreff.com/landers/images/general/google-logo.svg | 35.227.204.77 | 200 OK | 688 B |
URL GET HTTP/3www.hyggeligtreff.com/landers/images/general/google-logo.svg IP35.227.204.77:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.hyggeligtreff.com/landing5?cat=milf&pi=2040&pt1=3817092883&pe=%7bvar1%7d CertificateIssuerGoogle Trust Services LLC Subjecthyggeligtreff.com Fingerprint30:AD:9D:93:9E:F8:B6:66:1D:A6:80:F0:B5:36:4E:DC:7E:75:8B:D7 ValidityFri, 22 Mar 2024 21:42:59 GMT - Thu, 20 Jun 2024 22:37:12 GMT
File typeSVG Scalable Vector Graphics image Hash686f8efa6e3e28e96d1c08399e8d353d 4524589b0dceefb6ae6389f36634441df69152d5 0cf576a5dab9315daac7ffe29d29ed585e0ff9850e59408d0f25f38dc1da037b
GET /landers/images/general/google-logo.svg HTTP/1.1
Host: www.hyggeligtreff.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.hyggeligtreff.com/landing5?cat=milf&pi=2040&pt1=3817092883&pe=%7bvar1%7d
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 01 May 2024 13:05:11 GMT
server: nginx/1.14.2
content-type: image/svg+xml
content-length: 688
last-modified: Wed, 01 May 2024 07:23:40 GMT
etag: "6631edfc-2b0"
x-cacheable: YES
cache-control: max-age=300
xkey: lander
x-varnish: 1307884
age: 0
x-cache: MISS
accept-ranges: bytes
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000, h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
via: 1.1 varnish (Varnish/6.0), 1.1 google, 1.1 google
|
|
| www.hyggeligtreff.com/favicon/apple-touch-icon-180x180.png | 35.227.204.77 | 404 Not Found | 283 B |
URL GET HTTP/3www.hyggeligtreff.com/favicon/apple-touch-icon-180x180.png IP35.227.204.77:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.hyggeligtreff.com/landing5?cat=milf&pi=2040&pt1=3817092883&pe=%7bvar1%7d CertificateIssuerGoogle Trust Services LLC Subjecthyggeligtreff.com Fingerprint30:AD:9D:93:9E:F8:B6:66:1D:A6:80:F0:B5:36:4E:DC:7E:75:8B:D7 ValidityFri, 22 Mar 2024 21:42:59 GMT - Thu, 20 Jun 2024 22:37:12 GMT
File typeHTML document, ASCII text Hash7d1e2a84d4d15ff9c6f4dca78e59bb83 e775a67adfef7676b82afef744683d505148ee4f efae031d5c649af57403a6c1faeccbe531ab399194ba1843a05f45879d103787
GET /favicon/apple-touch-icon-180x180.png HTTP/1.1
Host: www.hyggeligtreff.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.hyggeligtreff.com/landing5?cat=milf&pi=2040&pt1=3817092883&pe=%7bvar1%7d
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
date: Wed, 01 May 2024 13:05:11 GMT
server: Apache/2.4.58 (Ubuntu)
content-length: 283
content-type: text/html; charset=iso-8859-1
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.hyggeligtreff.com/favicon/favicon.ico | 35.227.204.77 | 404 Not Found | 283 B |
URL GET HTTP/3www.hyggeligtreff.com/favicon/favicon.ico IP35.227.204.77:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.hyggeligtreff.com/landing5?cat=milf&pi=2040&pt1=3817092883&pe=%7bvar1%7d CertificateIssuerGoogle Trust Services LLC Subjecthyggeligtreff.com Fingerprint30:AD:9D:93:9E:F8:B6:66:1D:A6:80:F0:B5:36:4E:DC:7E:75:8B:D7 ValidityFri, 22 Mar 2024 21:42:59 GMT - Thu, 20 Jun 2024 22:37:12 GMT
File typeHTML document, ASCII text Hash7d1e2a84d4d15ff9c6f4dca78e59bb83 e775a67adfef7676b82afef744683d505148ee4f efae031d5c649af57403a6c1faeccbe531ab399194ba1843a05f45879d103787
GET /favicon/favicon.ico HTTP/1.1
Host: www.hyggeligtreff.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.hyggeligtreff.com/landing5?cat=milf&pi=2040&pt1=3817092883&pe=%7bvar1%7d
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
date: Wed, 01 May 2024 13:05:11 GMT
server: Apache/2.4.58 (Ubuntu)
content-length: 283
content-type: text/html; charset=iso-8859-1
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.hyggeligtreff.com/landers/js/vendor.js | 35.227.204.77 | 200 OK | 249 kB |
URL GET HTTP/3www.hyggeligtreff.com/landers/js/vendor.js IP35.227.204.77:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.hyggeligtreff.com/landing5?cat=milf&pi=2040&pt1=3817092883&pe=%7bvar1%7d CertificateIssuerGoogle Trust Services LLC Subjecthyggeligtreff.com Fingerprint30:AD:9D:93:9E:F8:B6:66:1D:A6:80:F0:B5:36:4E:DC:7E:75:8B:D7 ValidityFri, 22 Mar 2024 21:42:59 GMT - Thu, 20 Jun 2024 22:37:12 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (60065) Size249 kB (249344 bytes) Hashe973dae6c9351b89a432541e0b7bafe7 4347c27a2be0db5bc76c4db9a3c2ed0d65481566 c2cf08ef78dc8bce4e25c606169c4dae275552a431c191e3c6210b32b055aec1
GET /landers/js/vendor.js HTTP/1.1
Host: www.hyggeligtreff.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.hyggeligtreff.com/landing5?cat=milf&pi=2040&pt1=3817092883&pe=%7bvar1%7d
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 01 May 2024 13:05:11 GMT
server: nginx/1.14.2
content-type: application/javascript
last-modified: Wed, 01 May 2024 07:23:53 GMT
etag: W/"6631ee09-1e2ae"
content-encoding: gzip
x-cacheable: YES
cache-control: max-age=300
xkey: lander
vary: Accept-Encoding
x-varnish: 9851514
age: 0
x-cache: MISS
accept-ranges: bytes
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000, h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
via: 1.1 varnish (Varnish/6.0), 1.1 google, 1.1 google
|
|
| www.hyggeligtreff.com/landers/media-registry.js | 35.227.204.77 | 200 OK | 8.8 kB |
URL GET HTTP/3www.hyggeligtreff.com/landers/media-registry.js IP35.227.204.77:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.hyggeligtreff.com/landing5?cat=milf&pi=2040&pt1=3817092883&pe=%7bvar1%7d CertificateIssuerGoogle Trust Services LLC Subjecthyggeligtreff.com Fingerprint30:AD:9D:93:9E:F8:B6:66:1D:A6:80:F0:B5:36:4E:DC:7E:75:8B:D7 ValidityFri, 22 Mar 2024 21:42:59 GMT - Thu, 20 Jun 2024 22:37:12 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hash7db515478934022835aa54960924e1e9 108c8d1fcf00efbc2fb81cb7ac12563ac1dcc370 12d97cd754643b6f1554ffa21d1c569554fcb17eb9477724ffff5288137b8c30
GET /landers/media-registry.js HTTP/1.1
Host: www.hyggeligtreff.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.hyggeligtreff.com/landing5?cat=milf&pi=2040&pt1=3817092883&pe=%7bvar1%7d
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 01 May 2024 12:10:45 GMT
server: nginx/1.14.2
x-goog-generation: 1714550492636347
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 122245
x-goog-hash: crc32c=3xOWCg==, md5=fbUVR4k0Aig1qlSWCSTh6Q==
x-goog-storage-class: STANDARD
accept-ranges: bytes
access-control-allow-origin: *
x-guploader-uploadid: ABPtcPrjhxKTKs5UqwAhtrvMfyjjYjPVp5Zsk0W8vd1PIh0U3lc80l-uPOPvimo7wOOZHVXXQ4s
last-modified: Wed, 01 May 2024 08:01:32 GMT
etag: "7db515478934022835aa54960924e1e9-gzip"
content-type: application/javascript
age: 3266
cache-control: public,max-age=3600
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000, h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
vary: Accept-Encoding
content-encoding: gzip
content-length: 8780
via: 1.1 google, 1.1 google
|
|
| www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js | 142.250.74.99 | 200 OK | 206 kB |
URL GET HTTP/2www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js IP142.250.74.99:443
Requested byhttps://www.hyggeligtreff.com/landing5?cat=milf&pi=2040&pt1=3817092883&pe=%7bvar1%7d CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint93:EC:35:60:8A:5B:23:EA:C0:36:D7:AE:03:0C:C3:77:17:5A:20:33 ValidityMon, 08 Apr 2024 07:31:57 GMT - Mon, 01 Jul 2024 07:31:56 GMT
File typeJavaScript source, ASCII text, with very long lines (631) Size206 kB (205803 bytes) Hashe2e79d6b927169d9e0e57e3baecc0993 1299473950b2999ba0b7f39bd5e4a60eafd1819d 231336ed913a5ebd4445b85486e053caf2b81cab91318241375f3f7a245b6c6b
GET /recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.hyggeligtreff.com
DNT: 1
Connection: keep-alive
Referer: https://www.hyggeligtreff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 205803
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 06:07:40 GMT
expires: Sat, 26 Apr 2025 06:07:40 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 22 Apr 2024 21:03:35 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 457051
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.hyggeligtreff.com/landers/translations/nb-no2.json | 35.227.204.77 | 200 OK | 218 kB |
URL GET HTTP/3www.hyggeligtreff.com/landers/translations/nb-no2.json IP35.227.204.77:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.hyggeligtreff.com/landing5?cat=milf&pi=2040&pt1=3817092883&pe=%7bvar1%7d CertificateIssuerGoogle Trust Services LLC Subjecthyggeligtreff.com Fingerprint30:AD:9D:93:9E:F8:B6:66:1D:A6:80:F0:B5:36:4E:DC:7E:75:8B:D7 ValidityFri, 22 Mar 2024 21:42:59 GMT - Thu, 20 Jun 2024 22:37:12 GMT
Size218 kB (218064 bytes) Hash03b5a86609e5b54a54f2d4aa9c4de6be 2b28f57afd7505c6b4daa22867970c84396dd642 459139ce69de1a12b7372c8ca54b3f68a0d6b3a24c499849f3daa892fdc25183
GET /landers/translations/nb-no2.json HTTP/1.1
Host: www.hyggeligtreff.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.hyggeligtreff.com/landing5?cat=milf&pi=2040&pt1=3817092883&pe=%7bvar1%7d
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 01 May 2024 11:06:14 GMT
server: nginx/1.14.2
content-length: 218064
x-guploader-uploadid: ABPtcPqdDNw6UWS8ddYYPKR9vQ0k39g68aL9M3sv1ug2FKrDa61ewrIIOtzufqXHI2ZVwUS_tVg
x-goog-generation: 1712825875375555
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 218064
x-goog-hash: crc32c=ezkWSA==, md5=A7WoZgnltUpU8tSqnE3mvg==
x-goog-storage-class: STANDARD
accept-ranges: bytes
access-control-allow-origin: *
age: 7138
last-modified: Thu, 11 Apr 2024 08:57:55 GMT
etag: "03b5a86609e5b54a54f2d4aa9c4de6be"
content-type: application/json
cache-control: public,max-age=3600
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000, h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
via: 1.1 google, 1.1 google
|
|
| samlesamtykke.com/cc.js?wId=17p4ymRMihyxluI8BueDwj&domain=hyggeligtreff.com&languageCode=nb&languageTerritory=NO&sessionId=69fb2ac5997c4d1da6acee52d5d89cce |  35.195.163.35 | 200 OK | 14 kB |
URL GET HTTP/2samlesamtykke.com/cc.js?wId=17p4ymRMihyxluI8BueDwj&domain=hyggeligtreff.com&languageCode=nb&languageTerritory=NO&sessionId=69fb2ac5997c4d1da6acee52d5d89cce IP35.195.163.35:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.hyggeligtreff.com/landing5?cat=milf&pi=2040&pt1=3817092883&pe=%7bvar1%7d CertificateIssuerLet's Encrypt Subjectsamlesamtykke.com FingerprintBC:52:E4:6C:A2:17:85:C6:FD:90:28:C0:D4:FD:54:2C:22:B2:16:C4 ValiditySat, 27 Apr 2024 20:10:54 GMT - Fri, 26 Jul 2024 20:10:53 GMT
File typeJavaScript source, ASCII text Hashfda60c10495e3970b387b9d4951a68fd e97f7c9a97f91b14682545983f9eb98f525d9989 218333cfc4ebfeb7e7a7a529d0d50eca62f3c22e40bf39eca222bb536cd8f2e3
GET /cc.js?wId=17p4ymRMihyxluI8BueDwj&domain=hyggeligtreff.com&languageCode=nb&languageTerritory=NO&sessionId=69fb2ac5997c4d1da6acee52d5d89cce HTTP/1.1
Host: samlesamtykke.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.hyggeligtreff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.10.3 (Ubuntu)
date: Wed, 01 May 2024 13:05:12 GMT
content-type: application/javascript
content-length: 14208
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=63072000;
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| www.hyggeligtreff.com/landers/webfonts/fa-solid-900.woff2 | 35.227.204.77 | 200 OK | 92 kB |
URL GET HTTP/3www.hyggeligtreff.com/landers/webfonts/fa-solid-900.woff2 IP35.227.204.77:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.hyggeligtreff.com/landing5?cat=milf&pi=2040&pt1=3817092883&pe=%7bvar1%7d CertificateIssuerGoogle Trust Services LLC Subjecthyggeligtreff.com Fingerprint30:AD:9D:93:9E:F8:B6:66:1D:A6:80:F0:B5:36:4E:DC:7E:75:8B:D7 ValidityFri, 22 Mar 2024 21:42:59 GMT - Thu, 20 Jun 2024 22:37:12 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 91792, version 1.0 Hash6897be186b147b75c308c29eb0782f14 4190cab3384f7769ffb33f277cc20be68eb32c18 a238cffffbfea4c2868fca1b142a3a9690574537a38c857dbe309ec27b033eb3
GET /landers/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: www.hyggeligtreff.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://www.hyggeligtreff.com/landers/css/fontawesome-all.min.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 01 May 2024 13:02:16 GMT
server: nginx/1.14.2
content-type: application/octet-stream
content-length: 91792
last-modified: Wed, 01 May 2024 07:23:42 GMT
etag: "6631edfe-16690"
x-cacheable: YES
cache-control: max-age=300
xkey: lander
x-varnish: 17730217 17577456
age: 0
x-cache: HIT
accept-ranges: bytes
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000, h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
via: 1.1 varnish (Varnish/6.0), 1.1 google, 1.1 google
|
|
| www.google.com/recaptcha/enterprise.js?render=6Lc2aYkcAAAAANp1JsXLqbWbhNIDzi_7RBy95c-s | 142.250.74.132 | 200 OK | 73 kB |
URL GET HTTP/2www.google.com/recaptcha/enterprise.js?render=6Lc2aYkcAAAAANp1JsXLqbWbhNIDzi_7RBy95c-s IP142.250.74.132:443
Requested byhttps://www.hyggeligtreff.com/landing5?cat=milf&pi=2040&pt1=3817092883&pe=%7bvar1%7d CertificateIssuerGoogle Trust Services LLC Subjectwww.google.com FingerprintF3:75:C9:48:E6:A5:11:C7:87:C8:8D:9A:C4:16:F8:09:4E:88:7C:5A ValidityMon, 08 Apr 2024 07:33:48 GMT - Mon, 01 Jul 2024 07:33:47 GMT
Hashe5e93c6dc7c37b2301018104bb992475 157a0f5136342628184961357c03d2e2d299ff37 b9bfcb0a614de3a84fcd07ce109fd9af1cc4d2fdcf0ac9e47b9730aa759329db
GET /recaptcha/enterprise.js?render=6Lc2aYkcAAAAANp1JsXLqbWbhNIDzi_7RBy95c-s HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.hyggeligtreff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
expires: Wed, 01 May 2024 13:05:11 GMT
date: Wed, 01 May 2024 13:05:11 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.hyggeligtreff.com/landers/images/landing005/milf/default/slide03.jpg?geo=no | 35.227.204.77 | 200 OK | 125 kB |
URL GET HTTP/3www.hyggeligtreff.com/landers/images/landing005/milf/default/slide03.jpg?geo=no IP35.227.204.77:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.hyggeligtreff.com/landing5?cat=milf&pi=2040&pt1=3817092883&pe=%7bvar1%7d CertificateIssuerGoogle Trust Services LLC Subjecthyggeligtreff.com Fingerprint30:AD:9D:93:9E:F8:B6:66:1D:A6:80:F0:B5:36:4E:DC:7E:75:8B:D7 ValidityFri, 22 Mar 2024 21:42:59 GMT - Thu, 20 Jun 2024 22:37:12 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1080, components 3 Size125 kB (125004 bytes) Hashe2d67c936e084960b9d055626c130dd3 e33cbe452c7b97f625a3dc3d4e713872e8f496b1 a53f1a88620987ee66801ac78009bece3a98871f098f6478abff91b805d7f481
GET /landers/images/landing005/milf/default/slide03.jpg?geo=no HTTP/1.1
Host: www.hyggeligtreff.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.hyggeligtreff.com/landing5?cat=milf&pi=2040&pt1=3817092883&pe=%7bvar1%7d
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 01 May 2024 13:05:12 GMT
server: nginx/1.14.2
content-type: image/jpeg
content-length: 125004
last-modified: Wed, 01 May 2024 07:23:40 GMT
etag: "6631edfc-1e84c"
x-cacheable: YES
cache-control: max-age=300
xkey: lander
x-varnish: 1944203
age: 0
x-cache: MISS
accept-ranges: bytes
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000, h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
via: 1.1 varnish (Varnish/6.0), 1.1 google, 1.1 google
|
|
| www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css | 142.250.74.99 | 200 OK | 25 kB |
URL GET HTTP/3www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css IP142.250.74.99:443
Requested byhttps://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Lc2aYkcAAAAANp1JsXLqbWbhNIDzi_7RBy95c-s&co=aHR0cHM6Ly93d3cuaHlnZ2VsaWd0cmVmZi5jb206NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=upi0r9jghb2 CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint93:EC:35:60:8A:5B:23:EA:C0:36:D7:AE:03:0C:C3:77:17:5A:20:33 ValidityMon, 08 Apr 2024 07:31:57 GMT - Mon, 01 Jul 2024 07:31:56 GMT
File typeASCII text, with very long lines (56412), with no line terminators Hash2c00b9f417b688224937053cd0c284a5 17b4c18ebc129055dd25f214c3f11e03e9df2d82 1e754b107428162c65a26d399b66db3daaea09616bf8620d9de4bc689ce48eed
GET /recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 24617
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 06:04:29 GMT
expires: Sat, 26 Apr 2025 06:04:29 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 22 Apr 2024 21:03:35 GMT
content-type: text/css
vary: Accept-Encoding
age: 457243
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js | 142.250.74.99 | 200 OK | 206 kB |
URL GET HTTP/2www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js IP142.250.74.99:443
Requested byhttps://www.hyggeligtreff.com/landing5?cat=milf&pi=2040&pt1=3817092883&pe=%7bvar1%7d CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint93:EC:35:60:8A:5B:23:EA:C0:36:D7:AE:03:0C:C3:77:17:5A:20:33 ValidityMon, 08 Apr 2024 07:31:57 GMT - Mon, 01 Jul 2024 07:31:56 GMT
File typeJavaScript source, ASCII text, with very long lines (631) Size206 kB (205803 bytes) Hashe2e79d6b927169d9e0e57e3baecc0993 1299473950b2999ba0b7f39bd5e4a60eafd1819d 231336ed913a5ebd4445b85486e053caf2b81cab91318241375f3f7a245b6c6b
GET /recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 205803
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 06:07:40 GMT
expires: Sat, 26 Apr 2025 06:07:40 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 22 Apr 2024 21:03:35 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 457052
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Lc2aYkcAAAAANp1JsXLqbWbhNIDzi_7RBy95c-s&co=aHR0cHM6Ly93d3cuaHlnZ2VsaWd0cmVmZi5jb206NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=upi0r9jghb2 | 142.250.74.132 | 200 OK | 122 kB |
URL GET HTTP/3www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Lc2aYkcAAAAANp1JsXLqbWbhNIDzi_7RBy95c-s&co=aHR0cHM6Ly93d3cuaHlnZ2VsaWd0cmVmZi5jb206NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=upi0r9jghb2 IP142.250.74.132:443
Requested byhttps://www.hyggeligtreff.com/landing5?cat=milf&pi=2040&pt1=3817092883&pe=%7bvar1%7d CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint01:16:A3:AE:CA:C9:AC:ED:3A:C9:AA:75:BE:C2:51:EF:65:CE:23:E1 ValidityMon, 08 Apr 2024 06:34:56 GMT - Mon, 01 Jul 2024 06:34:55 GMT
Size122 kB (122394 bytes) Hash01dc5a80a0d9ce5b69fbdae90c849ab2 cd9a05b5372c9d296d9431fa6f06c1593f93d70c 545f690b8a4fb5af0371d8cd43bc0aecf7182fe39cb35fe6e48fa281667837fd
GET /recaptcha/enterprise/anchor?ar=1&k=6Lc2aYkcAAAAANp1JsXLqbWbhNIDzi_7RBy95c-s&co=aHR0cHM6Ly93d3cuaHlnZ2VsaWd0cmVmZi5jb206NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=upi0r9jghb2 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.hyggeligtreff.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/html; charset=utf-8
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 01 May 2024 13:05:12 GMT
content-security-policy: script-src 'nonce-V_6IVGCbTFuVedKogBIhjQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.google.com/recaptcha/enterprise/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m | 142.250.74.132 | 200 OK | 206 kB |
URL GET HTTP/3www.google.com/recaptcha/enterprise/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m IP142.250.74.132:443
Requested byhttps://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Lc2aYkcAAAAANp1JsXLqbWbhNIDzi_7RBy95c-s&co=aHR0cHM6Ly93d3cuaHlnZ2VsaWd0cmVmZi5jb206NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=upi0r9jghb2 CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint01:16:A3:AE:CA:C9:AC:ED:3A:C9:AA:75:BE:C2:51:EF:65:CE:23:E1 ValidityMon, 08 Apr 2024 06:34:56 GMT - Mon, 01 Jul 2024 06:34:55 GMT
File typeJavaScript source, ASCII text, with very long lines (631) Size206 kB (205913 bytes) Hashe4eb924eec164dfe5fb43e5d8e6b2a2f 582bad0eac6440aa49632ca1e24d7a52a89d7d92 428ed37cf336160c986f3c470a345bd9790e95d119cfb794767637df59eb3a59
GET /recaptcha/enterprise/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Lc2aYkcAAAAANp1JsXLqbWbhNIDzi_7RBy95c-s&co=aHR0cHM6Ly93d3cuaHlnZ2VsaWd0cmVmZi5jb206NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=upi0r9jghb2
Sec-Fetch-Dest: worker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript; charset=utf-8
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
expires: Wed, 01 May 2024 13:05:12 GMT
date: Wed, 01 May 2024 13:05:12 GMT
cache-control: private, max-age=300
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 | 216.58.207.227 | 200 OK | 15 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 IP216.58.207.227:443
Requested byhttps://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Lc2aYkcAAAAANp1JsXLqbWbhNIDzi_7RBy95c-s&co=aHR0cHM6Ly93d3cuaHlnZ2VsaWd0cmVmZi5jb206NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=upi0r9jghb2 CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint93:EC:35:60:8A:5B:23:EA:C0:36:D7:AE:03:0C:C3:77:17:5A:20:33 ValidityMon, 08 Apr 2024 07:31:57 GMT - Mon, 01 Jul 2024 07:31:56 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15344, version 1.0 Hash5d4aeb4e5f5ef754e307d7ffaef688bd 06db651cdf354c64a7383ea9c77024ef4fb4cef8 3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 06:01:56 GMT
expires: Sat, 26 Apr 2025 06:01:56 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
age: 457396
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 IP216.58.207.227:443
Requested byhttps://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Lc2aYkcAAAAANp1JsXLqbWbhNIDzi_7RBy95c-s&co=aHR0cHM6Ly93d3cuaHlnZ2VsaWd0cmVmZi5jb206NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=upi0r9jghb2 CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint93:EC:35:60:8A:5B:23:EA:C0:36:D7:AE:03:0C:C3:77:17:5A:20:33 ValidityMon, 08 Apr 2024 07:31:57 GMT - Mon, 01 Jul 2024 07:31:56 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15552, version 1.0 Hash285467176f7fe6bb6a9c6873b3dad2cc ea04e4ff5142ddd69307c183def721a160e0a64e 5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 17:25:07 GMT
expires: Fri, 25 Apr 2025 17:25:07 GMT
cache-control: public, max-age=31536000
age: 502805
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.gstatic.com/recaptcha/api2/logo_48.png | 142.250.74.99 | 200 OK | 2.2 kB |
URL GET HTTP/3www.gstatic.com/recaptcha/api2/logo_48.png IP142.250.74.99:443
Requested byhttps://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Lc2aYkcAAAAANp1JsXLqbWbhNIDzi_7RBy95c-s&co=aHR0cHM6Ly93d3cuaHlnZ2VsaWd0cmVmZi5jb206NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=upi0r9jghb2 CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint93:EC:35:60:8A:5B:23:EA:C0:36:D7:AE:03:0C:C3:77:17:5A:20:33 ValidityMon, 08 Apr 2024 07:31:57 GMT - Mon, 01 Jul 2024 07:31:56 GMT
File typePNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced Hashef9941290c50cd3866e2ba6b793f010d 4736508c795667dcea21f8d864233031223b7832 1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a
GET /recaptcha/api2/logo_48.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 2228
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 17:35:26 GMT
expires: Thu, 02 May 2024 17:35:26 GMT
cache-control: public, max-age=604800
age: 502186
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.google.com/js/bg/Dahk90Fxhr1MEtfyZ-6_j6N-qVuiwfy-NjSFsUln5nQ.js | 142.250.74.132 | 200 OK | 7.5 kB |
URL GET HTTP/3www.google.com/js/bg/Dahk90Fxhr1MEtfyZ-6_j6N-qVuiwfy-NjSFsUln5nQ.js IP142.250.74.132:443
Requested byhttps://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Lc2aYkcAAAAANp1JsXLqbWbhNIDzi_7RBy95c-s&co=aHR0cHM6Ly93d3cuaHlnZ2VsaWd0cmVmZi5jb206NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=upi0r9jghb2 CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint01:16:A3:AE:CA:C9:AC:ED:3A:C9:AA:75:BE:C2:51:EF:65:CE:23:E1 ValidityMon, 08 Apr 2024 06:34:56 GMT - Mon, 01 Jul 2024 06:34:55 GMT
File typeJavaScript source, ASCII text, with very long lines (17658) Hash5bc0a82a24abe097e6f6c1098bef9591 2da9f4ad273be56e0bfbefc24209cdeba5f9f270 0da864f7417186bd4c12d7f267eebf8fa37ea95ba2c1fcbe363485b14967e674
GET /js/bg/Dahk90Fxhr1MEtfyZ-6_j6N-qVuiwfy-NjSFsUln5nQ.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Lc2aYkcAAAAANp1JsXLqbWbhNIDzi_7RBy95c-s&co=aHR0cHM6Ly93d3cuaHlnZ2VsaWd0cmVmZi5jb206NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=upi0r9jghb2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 7465
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 05:51:19 GMT
expires: Sat, 26 Apr 2025 05:51:19 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 23 Apr 2024 17:30:00 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 458033
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| samlesamtykke.com/cc.css | 35.195.163.35 | 200 OK | 3.9 kB |
IP35.195.163.35:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.hyggeligtreff.com/landing5?cat=milf&pi=2040&pt1=3817092883&pe=%7bvar1%7d CertificateIssuerLet's Encrypt Subjectsamlesamtykke.com FingerprintBC:52:E4:6C:A2:17:85:C6:FD:90:28:C0:D4:FD:54:2C:22:B2:16:C4 ValiditySat, 27 Apr 2024 20:10:54 GMT - Fri, 26 Jul 2024 20:10:53 GMT
File typeassembler source, ASCII text Hashddb6776d9e0b9844c9f57355d7492805 da918eb4fefa9d625e5858496c2c4a20ad893619 9ec88cf72960048a40791a943e5dee85f910c00e9a3732339888b075de11bc34
GET /cc.css HTTP/1.1
Host: samlesamtykke.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.hyggeligtreff.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.10.3 (Ubuntu)
date: Wed, 01 May 2024 13:05:13 GMT
content-type: text/css
content-length: 3892
last-modified: Thu, 15 Oct 2020 08:07:25 GMT
etag: "6073-5b1b123761e40-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=63072000;
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| api.samlesamtykke.com/consent/collector | 35.195.163.35 | 200 OK | 0 B |
URL POST HTTP/2api.samlesamtykke.com/consent/collector IP35.195.163.35:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.hyggeligtreff.com/landing5?cat=milf&pi=2040&pt1=3817092883&pe=%7bvar1%7d CertificateIssuerLet's Encrypt Subjectsamlesamtykke.com FingerprintBC:52:E4:6C:A2:17:85:C6:FD:90:28:C0:D4:FD:54:2C:22:B2:16:C4 ValiditySat, 27 Apr 2024 20:10:54 GMT - Fri, 26 Jul 2024 20:10:53 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /consent/collector HTTP/1.1
Host: api.samlesamtykke.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.hyggeligtreff.com/
Origin: https://www.hyggeligtreff.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.10.3 (Ubuntu)
date: Wed, 01 May 2024 13:05:13 GMT
content-type: application/vnd.api+json
content-length: 0
access-control-allow-origin: https://www.hyggeligtreff.com
access-control-allow-credentials: true
access-control-allow-methods: POST
access-control-allow-headers: content-type
strict-transport-security: max-age=63072000;
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| api.samlesamtykke.com/consent/collector | 35.195.163.35 | 200 OK | 4.7 kB |
URL POST HTTP/2api.samlesamtykke.com/consent/collector IP35.195.163.35:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.hyggeligtreff.com/landing5?cat=milf&pi=2040&pt1=3817092883&pe=%7bvar1%7d CertificateIssuerLet's Encrypt Subjectsamlesamtykke.com FingerprintBC:52:E4:6C:A2:17:85:C6:FD:90:28:C0:D4:FD:54:2C:22:B2:16:C4 ValiditySat, 27 Apr 2024 20:10:54 GMT - Fri, 26 Jul 2024 20:10:53 GMT
Hash13bbcc190c7fe76c7489b08aad14656a dd5575dcc8445b489de95101d875e78fd08352d7 5847944aba0d237b9d758ec732dccbcba519a27441fc11418c0f610f7b4298a4
POST /consent/collector HTTP/1.1
Host: api.samlesamtykke.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 169
Origin: https://www.hyggeligtreff.com
DNT: 1
Connection: keep-alive
Referer: https://www.hyggeligtreff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.10.3 (Ubuntu)
date: Wed, 01 May 2024 13:05:13 GMT
content-type: application/vnd.api+json
content-length: 4661
access-control-allow-origin: https://www.hyggeligtreff.com
access-control-allow-credentials: true
strict-transport-security: max-age=63072000;
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| api.samlesamtykke.com/consent/loadSegment | 35.195.163.35 | 200 OK | 0 B |
URL OPTIONS HTTP/2api.samlesamtykke.com/consent/loadSegment IP35.195.163.35:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.hyggeligtreff.com/landing5?cat=milf&pi=2040&pt1=3817092883&pe=%7bvar1%7d CertificateIssuerLet's Encrypt Subjectsamlesamtykke.com FingerprintBC:52:E4:6C:A2:17:85:C6:FD:90:28:C0:D4:FD:54:2C:22:B2:16:C4 ValiditySat, 27 Apr 2024 20:10:54 GMT - Fri, 26 Jul 2024 20:10:53 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /consent/loadSegment HTTP/1.1
Host: api.samlesamtykke.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.hyggeligtreff.com/
Origin: https://www.hyggeligtreff.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.10.3 (Ubuntu)
date: Wed, 01 May 2024 13:05:13 GMT
content-type: application/vnd.api+json
content-length: 0
access-control-allow-origin: https://www.hyggeligtreff.com
access-control-allow-credentials: true
access-control-allow-methods: POST
access-control-allow-headers: content-type
strict-transport-security: max-age=63072000;
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| api.samlesamtykke.com/consent/loadSegment | 35.195.163.35 | 200 OK | 371 B |
URL OPTIONS HTTP/2api.samlesamtykke.com/consent/loadSegment IP35.195.163.35:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.hyggeligtreff.com/landing5?cat=milf&pi=2040&pt1=3817092883&pe=%7bvar1%7d CertificateIssuerLet's Encrypt Subjectsamlesamtykke.com FingerprintBC:52:E4:6C:A2:17:85:C6:FD:90:28:C0:D4:FD:54:2C:22:B2:16:C4 ValiditySat, 27 Apr 2024 20:10:54 GMT - Fri, 26 Jul 2024 20:10:53 GMT
Hashaad76f926b6c219e918916e6f25e4129 4823643373db875486f8ac895ea532106e6798d4 0b9d369937e417796e17001b773fd61884a8993ea967ad4841a472e83f83292d
POST /consent/loadSegment HTTP/1.1
Host: api.samlesamtykke.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 224
Origin: https://www.hyggeligtreff.com
DNT: 1
Connection: keep-alive
Referer: https://www.hyggeligtreff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.10.3 (Ubuntu)
date: Wed, 01 May 2024 13:05:13 GMT
content-type: application/vnd.api+json
content-length: 371
access-control-allow-origin: https://www.hyggeligtreff.com
access-control-allow-credentials: true
strict-transport-security: max-age=63072000;
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| api.samlesamtykke.com/consent/loadSegment | 35.195.163.35 | 200 OK | 0 B |
URL OPTIONS HTTP/2api.samlesamtykke.com/consent/loadSegment IP35.195.163.35:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.hyggeligtreff.com/landing5?cat=milf&pi=2040&pt1=3817092883&pe=%7bvar1%7d CertificateIssuerLet's Encrypt Subjectsamlesamtykke.com FingerprintBC:52:E4:6C:A2:17:85:C6:FD:90:28:C0:D4:FD:54:2C:22:B2:16:C4 ValiditySat, 27 Apr 2024 20:10:54 GMT - Fri, 26 Jul 2024 20:10:53 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /consent/loadSegment HTTP/1.1
Host: api.samlesamtykke.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.hyggeligtreff.com/
Origin: https://www.hyggeligtreff.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.10.3 (Ubuntu)
date: Wed, 01 May 2024 13:05:13 GMT
content-type: application/vnd.api+json
content-length: 0
access-control-allow-origin: https://www.hyggeligtreff.com
access-control-allow-credentials: true
access-control-allow-methods: POST
access-control-allow-headers: content-type
strict-transport-security: max-age=63072000;
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| api.samlesamtykke.com/consent/loadSegment | 35.195.163.35 | 200 OK | 354 B |
URL OPTIONS HTTP/2api.samlesamtykke.com/consent/loadSegment IP35.195.163.35:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.hyggeligtreff.com/landing5?cat=milf&pi=2040&pt1=3817092883&pe=%7bvar1%7d CertificateIssuerLet's Encrypt Subjectsamlesamtykke.com FingerprintBC:52:E4:6C:A2:17:85:C6:FD:90:28:C0:D4:FD:54:2C:22:B2:16:C4 ValiditySat, 27 Apr 2024 20:10:54 GMT - Fri, 26 Jul 2024 20:10:53 GMT
Hashf3306f051731bcce1d98a030b8a2d9cf ada4a5bb07ee1872a579a651298774329b036f43 cbbae4d9daeed7c435cb09233298534b86c9c159ff6960ace74e223e460a75c5
POST /consent/loadSegment HTTP/1.1
Host: api.samlesamtykke.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 225
Origin: https://www.hyggeligtreff.com
DNT: 1
Connection: keep-alive
Referer: https://www.hyggeligtreff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.10.3 (Ubuntu)
date: Wed, 01 May 2024 13:05:13 GMT
content-type: application/vnd.api+json
content-length: 354
access-control-allow-origin: https://www.hyggeligtreff.com
access-control-allow-credentials: true
strict-transport-security: max-age=63072000;
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| api.samlesamtykke.com/consent/confirmExplicit | 35.195.163.35 | 200 OK | 0 B |
URL OPTIONS HTTP/2api.samlesamtykke.com/consent/confirmExplicit IP35.195.163.35:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.hyggeligtreff.com/landing5?cat=milf&pi=2040&pt1=3817092883&pe=%7bvar1%7d CertificateIssuerLet's Encrypt Subjectsamlesamtykke.com FingerprintBC:52:E4:6C:A2:17:85:C6:FD:90:28:C0:D4:FD:54:2C:22:B2:16:C4 ValiditySat, 27 Apr 2024 20:10:54 GMT - Fri, 26 Jul 2024 20:10:53 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /consent/confirmExplicit HTTP/1.1
Host: api.samlesamtykke.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.hyggeligtreff.com/
Origin: https://www.hyggeligtreff.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.10.3 (Ubuntu)
date: Wed, 01 May 2024 13:05:13 GMT
content-type: application/vnd.api+json
content-length: 0
access-control-allow-origin: https://www.hyggeligtreff.com
access-control-allow-credentials: true
access-control-allow-methods: POST
access-control-allow-headers: content-type
strict-transport-security: max-age=63072000;
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| api.samlesamtykke.com/consent/confirmExplicit | 35.195.163.35 | 200 OK | 0 B |
URL OPTIONS HTTP/2api.samlesamtykke.com/consent/confirmExplicit IP35.195.163.35:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.hyggeligtreff.com/landing5?cat=milf&pi=2040&pt1=3817092883&pe=%7bvar1%7d CertificateIssuerLet's Encrypt Subjectsamlesamtykke.com FingerprintBC:52:E4:6C:A2:17:85:C6:FD:90:28:C0:D4:FD:54:2C:22:B2:16:C4 ValiditySat, 27 Apr 2024 20:10:54 GMT - Fri, 26 Jul 2024 20:10:53 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /consent/confirmExplicit HTTP/1.1
Host: api.samlesamtykke.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 518
Origin: https://www.hyggeligtreff.com
DNT: 1
Connection: keep-alive
Referer: https://www.hyggeligtreff.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.10.3 (Ubuntu)
date: Wed, 01 May 2024 13:05:13 GMT
content-type: application/vnd.api+json
content-length: 0
access-control-allow-origin: https://www.hyggeligtreff.com
access-control-allow-credentials: true
strict-transport-security: max-age=63072000;
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| www.hyggeligtreff.com/landers/images/landing005/milf/default/slide01.jpg?geo=no | 35.227.204.77 | 200 OK | 86 kB |
URL GET HTTP/3www.hyggeligtreff.com/landers/images/landing005/milf/default/slide01.jpg?geo=no IP35.227.204.77:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.hyggeligtreff.com/landing5?cat=milf&pi=2040&pt1=3817092883&pe=%7bvar1%7d CertificateIssuerGoogle Trust Services LLC Subjecthyggeligtreff.com Fingerprint30:AD:9D:93:9E:F8:B6:66:1D:A6:80:F0:B5:36:4E:DC:7E:75:8B:D7 ValidityFri, 22 Mar 2024 21:42:59 GMT - Thu, 20 Jun 2024 22:37:12 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1080, components 3 Hash6350abf9ef879c2a8e86b06a458418d8 149db15ceaa7e4dbdc053e4c0a10f22a0f993c28 3550dc96c12cc3f04b0677cedd2bd922f032b2e711741c1d8b95ae5fac8a7496
GET /landers/images/landing005/milf/default/slide01.jpg?geo=no HTTP/1.1
Host: www.hyggeligtreff.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.hyggeligtreff.com/landing5?cat=milf&pi=2040&pt1=3817092883&pe=%7bvar1%7d
DNT: 1
Connection: keep-alive
Cookie: _ga_QXFHHE16V3=GS1.1.1714568712.1.0.1714568712.0.0.0; _ga=GA1.1.1725700563.1714568713
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 01 May 2024 13:05:17 GMT
server: nginx/1.14.2
content-type: image/jpeg
content-length: 86390
last-modified: Wed, 01 May 2024 07:23:40 GMT
etag: "6631edfc-15176"
x-cacheable: YES
cache-control: max-age=300
xkey: lander
x-varnish: 13263739
age: 0
x-cache: MISS
accept-ranges: bytes
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000, h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
via: 1.1 varnish (Varnish/6.0), 1.1 google, 1.1 google
|
|
| www.hyggeligtreff.com/landers/css/fontawesome-all.min.css | 35.227.204.77 | 200 OK | 17 kB |
URL GET HTTP/2www.hyggeligtreff.com/landers/css/fontawesome-all.min.css IP35.227.204.77:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.hyggeligtreff.com/landing5?cat=milf&pi=2040&pt1=3817092883&pe=%7bvar1%7d CertificateIssuerGoogle Trust Services LLC Subjecthyggeligtreff.com Fingerprint30:AD:9D:93:9E:F8:B6:66:1D:A6:80:F0:B5:36:4E:DC:7E:75:8B:D7 ValidityFri, 22 Mar 2024 21:42:59 GMT - Thu, 20 Jun 2024 22:37:12 GMT
File typegzip compressed data, from Unix Hash9cf42b23b5d817f55f967f9433d7f4b8 d55724c8a016be4766d87298cabf1956ed7b98a6 45bec62a8d00a92500f5e2e0cff8568a0582e18d9384a63840597fc59ec4f58c
GET /landers/css/fontawesome-all.min.css HTTP/1.1
Host: www.hyggeligtreff.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.hyggeligtreff.com/landing5?cat=milf&pi=2040&pt1=3817092883&pe=%7bvar1%7d
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 01 May 2024 13:05:11 GMT
server: nginx/1.14.2
content-type: text/css
last-modified: Wed, 01 May 2024 07:23:40 GMT
etag: W/"6631edfc-c970"
content-encoding: gzip
x-cacheable: YES
cache-control: max-age=300
xkey: lander
vary: Accept-Encoding
x-varnish: 13630058
age: 0
x-cache: MISS
accept-ranges: bytes
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000, h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
via: 1.1 varnish (Varnish/6.0), 1.1 google, 1.1 google
X-Firefox-Spdy: h2
|
|
| www.hyggeligtreff.com/landers/images/landing005/milf/default/slide02.jpg?geo=no | 35.227.204.77 | 200 OK | 88 kB |
URL GET HTTP/3www.hyggeligtreff.com/landers/images/landing005/milf/default/slide02.jpg?geo=no IP35.227.204.77:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.hyggeligtreff.com/landing5?cat=milf&pi=2040&pt1=3817092883&pe=%7bvar1%7d CertificateIssuerGoogle Trust Services LLC Subjecthyggeligtreff.com Fingerprint30:AD:9D:93:9E:F8:B6:66:1D:A6:80:F0:B5:36:4E:DC:7E:75:8B:D7 ValidityFri, 22 Mar 2024 21:42:59 GMT - Thu, 20 Jun 2024 22:37:12 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1080, components 3 Hashdef57561a7dc7d1238222f49bd032100 74ecf57fa29e1ac26ef5e06a2c6661afbb5c4eb3 052e56a5eaa8f0cca7727549e65acd4dfed8c4341e765bf5b88c89b8e10e3344
GET /landers/images/landing005/milf/default/slide02.jpg?geo=no HTTP/1.1
Host: www.hyggeligtreff.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.hyggeligtreff.com/landing5?cat=milf&pi=2040&pt1=3817092883&pe=%7bvar1%7d
DNT: 1
Connection: keep-alive
Cookie: _ga_QXFHHE16V3=GS1.1.1714568712.1.0.1714568712.0.0.0; _ga=GA1.1.1725700563.1714568713
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 01 May 2024 13:05:22 GMT
server: nginx/1.14.2
content-type: image/jpeg
content-length: 88055
last-modified: Wed, 01 May 2024 07:23:40 GMT
etag: "6631edfc-157f7"
x-cacheable: YES
cache-control: max-age=300
xkey: lander
x-varnish: 2197310
age: 0
x-cache: MISS
accept-ranges: bytes
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000, h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
via: 1.1 varnish (Varnish/6.0), 1.1 google, 1.1 google
|
|
| www.hyggeligtreff.com/landing5?cat=milf&pi=2040&pt1=3817092883&pe=%7bvar1%7d | 35.227.204.77 | 200 OK | 22 kB |
URL User Request GET HTTP/2www.hyggeligtreff.com/landing5?cat=milf&pi=2040&pt1=3817092883&pe=%7bvar1%7d IP35.227.204.77:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
CertificateIssuerGoogle Trust Services LLC Subjecthyggeligtreff.com Fingerprint30:AD:9D:93:9E:F8:B6:66:1D:A6:80:F0:B5:36:4E:DC:7E:75:8B:D7 ValidityFri, 22 Mar 2024 21:42:59 GMT - Thu, 20 Jun 2024 22:37:12 GMT
File typeHTML document, ASCII text, with very long lines (2091) Hash142097d948bcf7b15e24938cb50d8162 fba374e93d10c8f2561024ed8da8886db034e4e9 94bd7a6e02d891c867ec2ff5cdd913668df95b6d1d08dd00db7676fd69776c0b
GET /landing5?cat=milf&pi=2040&pt1=3817092883&pe=%7bvar1%7d HTTP/1.1
Host: www.hyggeligtreff.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 01 May 2024 13:05:10 GMT
server: nginx/1.14.2
content-type: text/html;charset=UTF-8
x-powered-by: PHP/7.2.34
x-host: hyggeligtreff.com
content-encoding: gzip
x-cacheable: YES
cache-control: max-age=300
xkey: lander
vary: Accept-Encoding
x-varnish: 1529693
age: 0
x-cache: MISS
accept-ranges: bytes
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000, h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
via: 1.1 varnish (Varnish/6.0), 1.1 google, 1.1 google
X-Firefox-Spdy: h2
|
|
| www.google.com/recaptcha/enterprise.js | 142.250.74.132 | 200 OK | 940 B |
URL GET HTTP/2www.google.com/recaptcha/enterprise.js IP142.250.74.132:443
Requested byhttps://www.hyggeligtreff.com/landing5?cat=milf&pi=2040&pt1=3817092883&pe=%7bvar1%7d CertificateIssuerGoogle Trust Services LLC Subjectwww.google.com FingerprintF3:75:C9:48:E6:A5:11:C7:87:C8:8D:9A:C4:16:F8:09:4E:88:7C:5A ValidityMon, 08 Apr 2024 07:33:48 GMT - Mon, 01 Jul 2024 07:33:47 GMT
File typeJavaScript source, ASCII text, with very long lines (940), with no line terminators Hash796b5497d3c16bce195908f13b10fc72 381a26a96cea8cd5a03d2f70599a20b38ddf9d07 2f7e1ee849a9d78c4a8716630dc03be8afd7239c3575a836618487b10aa4dcd6
GET /recaptcha/enterprise.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.hyggeligtreff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
expires: Wed, 01 May 2024 13:05:11 GMT
date: Wed, 01 May 2024 13:05:11 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.hyggeligtreff.com/landers/css/vegas.min.css | 35.227.204.77 | 200 OK | 12 kB |
URL GET HTTP/3www.hyggeligtreff.com/landers/css/vegas.min.css IP35.227.204.77:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.hyggeligtreff.com/landing5?cat=milf&pi=2040&pt1=3817092883&pe=%7bvar1%7d CertificateIssuerGoogle Trust Services LLC Subjecthyggeligtreff.com Fingerprint30:AD:9D:93:9E:F8:B6:66:1D:A6:80:F0:B5:36:4E:DC:7E:75:8B:D7 ValidityFri, 22 Mar 2024 21:42:59 GMT - Thu, 20 Jun 2024 22:37:12 GMT
Hashb8abc72c16479198c206a456a02f1dca d704f7acb4b8daf00787d4ba4f6e33b26be2a28c a8d530eff57d706b6469ac6bdc3ce13cbfaecc832792ad7a102b19e156632fe1
GET /landers/css/vegas.min.css HTTP/1.1
Host: www.hyggeligtreff.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.hyggeligtreff.com/landing5?cat=milf&pi=2040&pt1=3817092883&pe=%7bvar1%7d
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 01 May 2024 13:05:11 GMT
server: nginx/1.14.2
content-type: text/css
last-modified: Wed, 01 May 2024 07:23:40 GMT
etag: W/"6631edfc-2e20"
content-encoding: gzip
x-cacheable: YES
cache-control: max-age=300
xkey: lander
vary: Accept-Encoding
x-varnish: 17926673
age: 0
x-cache: MISS
accept-ranges: bytes
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000, h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
via: 1.1 varnish (Varnish/6.0), 1.1 google, 1.1 google
|
|
| www.googletagmanager.com/gtm.js?id=GTM-KBRH6NB | 142.250.74.40 | 200 OK | 207 kB |
URL GET HTTP/2www.googletagmanager.com/gtm.js?id=GTM-KBRH6NB IP142.250.74.40:443
Requested byhttps://www.hyggeligtreff.com/landing5?cat=milf&pi=2040&pt1=3817092883&pe=%7bvar1%7d CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintFC:B1:16:E0:D8:F3:2B:F3:AB:33:E5:E1:23:57:F4:48:66:FD:4D:52 ValidityMon, 08 Apr 2024 06:34:55 GMT - Mon, 01 Jul 2024 06:34:54 GMT
File typeJavaScript source, ASCII text, with very long lines (3484) Size207 kB (206982 bytes) Hash7c085d6c1b7fb13ece1d97c64d74778c 37b19a64be54c47193977846f4c7c2d44376ccac 8c700283144e01ff327d914cec61d47dc7d9ba67161a612fd36019c70a650c6d
GET /gtm.js?id=GTM-KBRH6NB HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.hyggeligtreff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 01 May 2024 13:05:12 GMT
expires: Wed, 01 May 2024 13:05:12 GMT
cache-control: private, max-age=900
last-modified: Wed, 01 May 2024 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 72554
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.hyggeligtreff.com/landers/css/theme/pornhub.css | 35.227.204.77 | 200 OK | 16 kB |
URL GET HTTP/2www.hyggeligtreff.com/landers/css/theme/pornhub.css IP35.227.204.77:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.hyggeligtreff.com/landing5?cat=milf&pi=2040&pt1=3817092883&pe=%7bvar1%7d CertificateIssuerGoogle Trust Services LLC Subjecthyggeligtreff.com Fingerprint30:AD:9D:93:9E:F8:B6:66:1D:A6:80:F0:B5:36:4E:DC:7E:75:8B:D7 ValidityFri, 22 Mar 2024 21:42:59 GMT - Thu, 20 Jun 2024 22:37:12 GMT
Hashef94e758d8e5cf5f39dea8566241e6f1 1fbbfd93cc5c8db172980540db0e777ee5553d94 ad05b1b370b466dc95222817e453b0f0efcfb9a9762d1b71d987d1a4a8c8356e
GET /landers/css/theme/pornhub.css HTTP/1.1
Host: www.hyggeligtreff.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.hyggeligtreff.com/landing5?cat=milf&pi=2040&pt1=3817092883&pe=%7bvar1%7d
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 01 May 2024 13:05:11 GMT
server: nginx/1.14.2
content-type: text/css;charset=UTF-8
x-powered-by: PHP/7.2.34
x-host: hyggeligtreff.com
content-encoding: gzip
x-cacheable: YES
cache-control: max-age=300
xkey: lander
vary: Accept-Encoding
x-varnish: 2119518
age: 0
x-cache: MISS
accept-ranges: bytes
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000, h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
via: 1.1 varnish (Varnish/6.0), 1.1 google, 1.1 google
X-Firefox-Spdy: h2
|
|
| www.hyggeligtreff.com/landers/css/landing005.css | 35.227.204.77 | 200 OK | 20 kB |
URL GET HTTP/2www.hyggeligtreff.com/landers/css/landing005.css IP35.227.204.77:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.hyggeligtreff.com/landing5?cat=milf&pi=2040&pt1=3817092883&pe=%7bvar1%7d CertificateIssuerGoogle Trust Services LLC Subjecthyggeligtreff.com Fingerprint30:AD:9D:93:9E:F8:B6:66:1D:A6:80:F0:B5:36:4E:DC:7E:75:8B:D7 ValidityFri, 22 Mar 2024 21:42:59 GMT - Thu, 20 Jun 2024 22:37:12 GMT
Hasha3c09ea165bae00ed7475566a89a7ff0 c07c5ea4bd77e178583e6067a4265804023efaae 269989bd3c970d50ea1b37a17f11ed06300c9a2c8c4592a1503550006d294e8a
GET /landers/css/landing005.css HTTP/1.1
Host: www.hyggeligtreff.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.hyggeligtreff.com/landing5?cat=milf&pi=2040&pt1=3817092883&pe=%7bvar1%7d
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 01 May 2024 13:05:11 GMT
server: nginx/1.14.2
content-type: text/css;charset=UTF-8
x-powered-by: PHP/7.2.34
x-host: hyggeligtreff.com
content-encoding: gzip
x-cacheable: YES
cache-control: max-age=300
xkey: lander
vary: Accept-Encoding
x-varnish: 2180497
age: 0
x-cache: MISS
accept-ranges: bytes
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000, h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
via: 1.1 varnish (Varnish/6.0), 1.1 google, 1.1 google
X-Firefox-Spdy: h2
|
|
| www.hyggeligtreff.com/landers/js/landing005.js | 35.227.204.77 | 200 OK | 74 kB |
URL GET HTTP/3www.hyggeligtreff.com/landers/js/landing005.js IP35.227.204.77:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.hyggeligtreff.com/landing5?cat=milf&pi=2040&pt1=3817092883&pe=%7bvar1%7d CertificateIssuerGoogle Trust Services LLC Subjecthyggeligtreff.com Fingerprint30:AD:9D:93:9E:F8:B6:66:1D:A6:80:F0:B5:36:4E:DC:7E:75:8B:D7 ValidityFri, 22 Mar 2024 21:42:59 GMT - Thu, 20 Jun 2024 22:37:12 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /landers/js/landing005.js HTTP/1.1
Host: www.hyggeligtreff.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.hyggeligtreff.com/landing5?cat=milf&pi=2040&pt1=3817092883&pe=%7bvar1%7d
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 01 May 2024 13:05:11 GMT
server: nginx/1.14.2
content-type: application/javascript
last-modified: Wed, 01 May 2024 07:23:53 GMT
etag: W/"6631ee09-11f65"
content-encoding: gzip
x-cacheable: YES
cache-control: max-age=300
xkey: lander
vary: Accept-Encoding
x-varnish: 1075541
age: 0
x-cache: MISS
accept-ranges: bytes
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000, h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
via: 1.1 varnish (Varnish/6.0), 1.1 google, 1.1 google
|
|
| www.googletagmanager.com/gtag/js?id=G-QXFHHE16V3&l=dataLayer&cx=c | 142.250.74.40 | 200 OK | 276 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/js?id=G-QXFHHE16V3&l=dataLayer&cx=c IP142.250.74.40:443
Requested byhttps://www.hyggeligtreff.com/landing5?cat=milf&pi=2040&pt1=3817092883&pe=%7bvar1%7d CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintFC:B1:16:E0:D8:F3:2B:F3:AB:33:E5:E1:23:57:F4:48:66:FD:4D:52 ValidityMon, 08 Apr 2024 06:34:55 GMT - Mon, 01 Jul 2024 06:34:54 GMT
File typeJavaScript source, ASCII text, with very long lines (5945) Size276 kB (276414 bytes) Hashbfbd1ab2cec174832c3af3fe8524caf1 6a86120bcfc5d74ac6a7a871152090aa5b62f632 ff93bf700085141908615f97d1ba2c51d0a1f69edafe20ad9b77a054d94ae5f0
GET /gtag/js?id=G-QXFHHE16V3&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.hyggeligtreff.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 01 May 2024 13:05:12 GMT
expires: Wed, 01 May 2024 13:05:12 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 94854
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|