GET /c0623fdc-b554-4ca2-8abc-d378c75c2f28 HTTP/1.1
Host: track.buller-matuma.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
|
search
 18.195.128.171
HTTP/1.1 302
Server: nginx
Date: Mon, 28 Nov 2022 21:57:48 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: https://69.winprizes169.digital/wheeles/mxbluebaff3n2.html?city=Oslo&model=Desktop&brand=Desktop&isp=Blix%20Group%20AS &cep=rE5UjtuDNBLPISagVMTI7A8Fs8CbLLDF2jHVkXKD2qHvF8LghOSIU7EO1-WI2MLJ8hdizH0wtdVXbSGUefAAZ__XR8NnZSRPWDJu_0UPAOzQZDcOEj7T272xKdeloCjYcKUFNywiOgbuV1PFHiIrJ1NWYPPjst17kQsYE_qDqBXfGKo7JJ4y3ydGNAk0GwACDv7KeovdH73hdA-xjGS6l5NYg7mGk1QOezDxTMp1sIsnj1iWmdMYTU5E06twleBBjCSLmCKHyxUrXqIRaJsuQOtPyjPU3JTXjpp1MiyiNakqAMf628GDPqAEC7g2xzTfrHGHF-VyaFkj-PZO_vJmC70kyytXx-dJrFdRldVEILAFa2GKOhUtftbgTUKZdDmj&lptoken=165d695f677844776874
Pragma: no-cache
Set-Cookie: c0623fdc-b554-4ca2-8abc-d378c75c2f28-v4=cKDzIhJM_WcROUHU-E5BxyBKl9qDoQjrS9TvSTqBOY4; Max-Age=86400; Expires=Tue, 29-Nov-2022 21:57:48 GMT; Domain=track.buller-matuma.com; Path=/; HttpOnly
cep-v4=KF_X7LfYN-j3k_KPE9wC4ig415dgJswNzsGsLtIKu8oQLWxosztVuGYOlVOzFGMBnsXRrZs49-ll3Q4aRgtTOPnQ0k11bgYKMUqqfgQZY1zo1dU9Djnf1JheBgjx_7vnS1_wlGf6wlxf4p6b6BHMMgP7-IOkUH_cjtUve9WlIkcKeG9MLD-XpXzMemXvIA-w9hpYhGjUuJ5mIIBqpAKmvL_0j1wnylybkQ9qrXpkI3-OWW6VmOtk1kzK--h9dTzeknE4QWlm500UJ1Ps5_2mAREBnkhuTSUidXwsjUBUTE69fgbpX5pjoFanWdeIXm-t6AIpyFW8eHE7J_Lg7eL92s3cbsTAOp3MzPs5xU3UHZh7KXcaqnFfJdEj19Y5BFn3; Max-Age=86400; Expires=Tue, 29-Nov-2022 21:57:48 GMT; Domain=track.buller-matuma.com; Path=/; HttpOnly
|
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
search
 23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Server: nginx
Content-Length: 503
ETag: "72937C756D3FEEAE6D04A6F445398B0436BDF559F8C7437E3A3233263943900E"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9065
Expires: Tue, 29 Nov 2022 00:28:53 GMT
Date: Mon, 28 Nov 2022 21:57:48 GMT
Connection: keep-alive
|
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
search
 93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Accept-Ranges: bytes
Age: 3761
Cache-Control: max-age=135374
Date: Mon, 28 Nov 2022 21:57:48 GMT
Etag: "63848df9-1d7"
Expires: Wed, 30 Nov 2022 11:34:02 GMT
Last-Modified: Mon, 28 Nov 2022 10:31:21 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 471
|
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
search
23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Server: nginx
Content-Length: 503
ETag: "4FD46B0B6A2EA24F5CE175985A3933C04B4C01BD3E32BEE2E50A61A65EEF7AF4"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12708
Expires: Tue, 29 Nov 2022 01:29:36 GMT
Date: Mon, 28 Nov 2022 21:57:48 GMT
Connection: keep-alive
|
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
|
search
 34.102.187.140
HTTP/2 200 OK
content-type: application/json
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Type, Backoff, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 28 Nov 2022 21:19:33 GMT
cache-control: public,max-age=3600
age: 2295
alt-svc: clear
X-Firefox-Spdy: h2
|
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
|
search
34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
x-amz-id-2: n07WaqCPmdwB6sm7urvtgsI2qkme81DL4jtOmcLQ9u9SK0PFbzF2vl7ry6LcMnvt3BpsNGO1fAk=
x-amz-request-id: ADRRHB7C4NTBVRX5
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 28 Nov 2022 21:42:14 GMT
age: 934
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
|
search
34.117.237.239
HTTP/2 200 OK
content-type: application/json
server: nginx
date: Mon, 28 Nov 2022 21:57:49 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
GET /wheeles/img/landers/prizewheel-fb/notification.png HTTP/1.1
Host: 69.winprizes169.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://69.winprizes169.digital/wheeles/mxbluebaff3n2.html?city=Oslo&model=Desktop&brand=Desktop&isp=Blix%20Group%20AS%20&cep=rE5UjtuDNBLPISagVMTI7A8Fs8CbLLDF2jHVkXKD2qHvF8LghOSIU7EO1-WI2MLJ8hdizH0wtdVXbSGUefAAZ__XR8NnZSRPWDJu_0UPAOzQZDcOEj7T272xKdeloCjYcKUFNywiOgbuV1PFHiIrJ1NWYPPjst17kQsYE_qDqBXfGKo7JJ4y3ydGNAk0GwACDv7KeovdH73hdA-xjGS6l5NYg7mGk1QOezDxTMp1sIsnj1iWmdMYTU5E06twleBBjCSLmCKHyxUrXqIRaJsuQOtPyjPU3JTXjpp1MiyiNakqAMf628GDPqAEC7g2xzTfrHGHF-VyaFkj-PZO_vJmC70kyytXx-dJrFdRldVEILAFa2GKOhUtftbgTUKZdDmj&lptoken=165d695f677844776874
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
|
search
 217.69.14.8
HTTP/2 200 OK
content-type: image/png
server: nginx
date: Mon, 28 Nov 2022 21:57:49 GMT
content-length: 449
last-modified: Mon, 09 May 2022 04:39:50 GMT
etag: "1c1-5de8ccc7b570d"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
GET /wheeles/img/landers/prizewheel-fb/prizewheel_spinner.jpg HTTP/1.1
Host: 69.winprizes169.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://69.winprizes169.digital/wheeles/mxbluebaff3n2.html?city=Oslo&model=Desktop&brand=Desktop&isp=Blix%20Group%20AS%20&cep=rE5UjtuDNBLPISagVMTI7A8Fs8CbLLDF2jHVkXKD2qHvF8LghOSIU7EO1-WI2MLJ8hdizH0wtdVXbSGUefAAZ__XR8NnZSRPWDJu_0UPAOzQZDcOEj7T272xKdeloCjYcKUFNywiOgbuV1PFHiIrJ1NWYPPjst17kQsYE_qDqBXfGKo7JJ4y3ydGNAk0GwACDv7KeovdH73hdA-xjGS6l5NYg7mGk1QOezDxTMp1sIsnj1iWmdMYTU5E06twleBBjCSLmCKHyxUrXqIRaJsuQOtPyjPU3JTXjpp1MiyiNakqAMf628GDPqAEC7g2xzTfrHGHF-VyaFkj-PZO_vJmC70kyytXx-dJrFdRldVEILAFa2GKOhUtftbgTUKZdDmj&lptoken=165d695f677844776874
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
|
search
217.69.14.8
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
date: Mon, 28 Nov 2022 21:57:49 GMT
content-length: 32496
last-modified: Mon, 09 May 2022 04:39:50 GMT
etag: "7ef0-5de8ccc7701ac"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
GET /wheeles/img/prizes/iphone-12-pro-max/default@0.5x.png HTTP/1.1
Host: 69.winprizes169.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://69.winprizes169.digital/wheeles/mxbluebaff3n2.html?city=Oslo&model=Desktop&brand=Desktop&isp=Blix%20Group%20AS%20&cep=rE5UjtuDNBLPISagVMTI7A8Fs8CbLLDF2jHVkXKD2qHvF8LghOSIU7EO1-WI2MLJ8hdizH0wtdVXbSGUefAAZ__XR8NnZSRPWDJu_0UPAOzQZDcOEj7T272xKdeloCjYcKUFNywiOgbuV1PFHiIrJ1NWYPPjst17kQsYE_qDqBXfGKo7JJ4y3ydGNAk0GwACDv7KeovdH73hdA-xjGS6l5NYg7mGk1QOezDxTMp1sIsnj1iWmdMYTU5E06twleBBjCSLmCKHyxUrXqIRaJsuQOtPyjPU3JTXjpp1MiyiNakqAMf628GDPqAEC7g2xzTfrHGHF-VyaFkj-PZO_vJmC70kyytXx-dJrFdRldVEILAFa2GKOhUtftbgTUKZdDmj&lptoken=165d695f677844776874
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
|
search
217.69.14.8
HTTP/2 200 OK
content-type: image/png
server: nginx
date: Mon, 28 Nov 2022 21:57:49 GMT
content-length: 35519
last-modified: Mon, 09 May 2022 04:39:56 GMT
etag: "8abf-5de8cccd1f2fc"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
GET /wheeles/img/landers/prizewheel-fb/loader.gif HTTP/1.1
Host: 69.winprizes169.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://69.winprizes169.digital/wheeles/mxbluebaff3n2.html?city=Oslo&model=Desktop&brand=Desktop&isp=Blix%20Group%20AS%20&cep=rE5UjtuDNBLPISagVMTI7A8Fs8CbLLDF2jHVkXKD2qHvF8LghOSIU7EO1-WI2MLJ8hdizH0wtdVXbSGUefAAZ__XR8NnZSRPWDJu_0UPAOzQZDcOEj7T272xKdeloCjYcKUFNywiOgbuV1PFHiIrJ1NWYPPjst17kQsYE_qDqBXfGKo7JJ4y3ydGNAk0GwACDv7KeovdH73hdA-xjGS6l5NYg7mGk1QOezDxTMp1sIsnj1iWmdMYTU5E06twleBBjCSLmCKHyxUrXqIRaJsuQOtPyjPU3JTXjpp1MiyiNakqAMf628GDPqAEC7g2xzTfrHGHF-VyaFkj-PZO_vJmC70kyytXx-dJrFdRldVEILAFa2GKOhUtftbgTUKZdDmj&lptoken=165d695f677844776874
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
|
search
217.69.14.8
HTTP/2 200 OK
content-type: image/gif
server: nginx
date: Mon, 28 Nov 2022 21:57:49 GMT
content-length: 5083
last-modified: Mon, 09 May 2022 04:39:49 GMT
etag: "13db-5de8ccc6a112a"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
GET /wheeles/img/landers/prizewheel-fb/prizewheel_static.png HTTP/1.1
Host: 69.winprizes169.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://69.winprizes169.digital/wheeles/mxbluebaff3n2.html?city=Oslo&model=Desktop&brand=Desktop&isp=Blix%20Group%20AS%20&cep=rE5UjtuDNBLPISagVMTI7A8Fs8CbLLDF2jHVkXKD2qHvF8LghOSIU7EO1-WI2MLJ8hdizH0wtdVXbSGUefAAZ__XR8NnZSRPWDJu_0UPAOzQZDcOEj7T272xKdeloCjYcKUFNywiOgbuV1PFHiIrJ1NWYPPjst17kQsYE_qDqBXfGKo7JJ4y3ydGNAk0GwACDv7KeovdH73hdA-xjGS6l5NYg7mGk1QOezDxTMp1sIsnj1iWmdMYTU5E06twleBBjCSLmCKHyxUrXqIRaJsuQOtPyjPU3JTXjpp1MiyiNakqAMf628GDPqAEC7g2xzTfrHGHF-VyaFkj-PZO_vJmC70kyytXx-dJrFdRldVEILAFa2GKOhUtftbgTUKZdDmj&lptoken=165d695f677844776874
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
|
search
217.69.14.8
HTTP/2 200 OK
content-type: image/png
server: nginx
date: Mon, 28 Nov 2022 21:57:49 GMT
content-length: 3370
last-modified: Mon, 09 May 2022 04:39:51 GMT
etag: "d2a-5de8ccc84bd4f"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
GET /wheeles/js/landers/prizewheel-fb/app.js?id=da05cdf35760d77e97e5 HTTP/1.1
Host: 69.winprizes169.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://69.winprizes169.digital/wheeles/mxbluebaff3n2.html?city=Oslo&model=Desktop&brand=Desktop&isp=Blix%20Group%20AS%20&cep=rE5UjtuDNBLPISagVMTI7A8Fs8CbLLDF2jHVkXKD2qHvF8LghOSIU7EO1-WI2MLJ8hdizH0wtdVXbSGUefAAZ__XR8NnZSRPWDJu_0UPAOzQZDcOEj7T272xKdeloCjYcKUFNywiOgbuV1PFHiIrJ1NWYPPjst17kQsYE_qDqBXfGKo7JJ4y3ydGNAk0GwACDv7KeovdH73hdA-xjGS6l5NYg7mGk1QOezDxTMp1sIsnj1iWmdMYTU5E06twleBBjCSLmCKHyxUrXqIRaJsuQOtPyjPU3JTXjpp1MiyiNakqAMf628GDPqAEC7g2xzTfrHGHF-VyaFkj-PZO_vJmC70kyytXx-dJrFdRldVEILAFa2GKOhUtftbgTUKZdDmj&lptoken=165d695f677844776874
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
|
search
217.69.14.8
HTTP/2 200 OK
content-type: application/javascript
server: nginx
date: Mon, 28 Nov 2022 21:57:49 GMT
vary: Accept-Encoding
last-modified: Mon, 09 May 2022 04:40:02 GMT
etag: W/"24ab5-5de8ccd29f64c"
content-encoding: br
X-Firefox-Spdy: h2
|
GET /wheeles/img/profiles/south-east-asian/male/3@0.25x.jpg HTTP/1.1
Host: 69.winprizes169.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://69.winprizes169.digital/wheeles/mxbluebaff3n2.html?city=Oslo&model=Desktop&brand=Desktop&isp=Blix%20Group%20AS%20&cep=rE5UjtuDNBLPISagVMTI7A8Fs8CbLLDF2jHVkXKD2qHvF8LghOSIU7EO1-WI2MLJ8hdizH0wtdVXbSGUefAAZ__XR8NnZSRPWDJu_0UPAOzQZDcOEj7T272xKdeloCjYcKUFNywiOgbuV1PFHiIrJ1NWYPPjst17kQsYE_qDqBXfGKo7JJ4y3ydGNAk0GwACDv7KeovdH73hdA-xjGS6l5NYg7mGk1QOezDxTMp1sIsnj1iWmdMYTU5E06twleBBjCSLmCKHyxUrXqIRaJsuQOtPyjPU3JTXjpp1MiyiNakqAMf628GDPqAEC7g2xzTfrHGHF-VyaFkj-PZO_vJmC70kyytXx-dJrFdRldVEILAFa2GKOhUtftbgTUKZdDmj&lptoken=165d695f677844776874
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
|
search
217.69.14.8
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
date: Mon, 28 Nov 2022 21:57:49 GMT
content-length: 2766
last-modified: Mon, 09 May 2022 04:40:09 GMT
etag: "ace-5de8ccd9affe0"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
GET /wheeles/img/profiles/south-east-asian/male/10@0.25x.jpg HTTP/1.1
Host: 69.winprizes169.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://69.winprizes169.digital/wheeles/mxbluebaff3n2.html?city=Oslo&model=Desktop&brand=Desktop&isp=Blix%20Group%20AS%20&cep=rE5UjtuDNBLPISagVMTI7A8Fs8CbLLDF2jHVkXKD2qHvF8LghOSIU7EO1-WI2MLJ8hdizH0wtdVXbSGUefAAZ__XR8NnZSRPWDJu_0UPAOzQZDcOEj7T272xKdeloCjYcKUFNywiOgbuV1PFHiIrJ1NWYPPjst17kQsYE_qDqBXfGKo7JJ4y3ydGNAk0GwACDv7KeovdH73hdA-xjGS6l5NYg7mGk1QOezDxTMp1sIsnj1iWmdMYTU5E06twleBBjCSLmCKHyxUrXqIRaJsuQOtPyjPU3JTXjpp1MiyiNakqAMf628GDPqAEC7g2xzTfrHGHF-VyaFkj-PZO_vJmC70kyytXx-dJrFdRldVEILAFa2GKOhUtftbgTUKZdDmj&lptoken=165d695f677844776874
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
|
search
217.69.14.8
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
date: Mon, 28 Nov 2022 21:57:49 GMT
content-length: 2499
last-modified: Mon, 09 May 2022 04:40:08 GMT
etag: "9c3-5de8ccd8d05bd"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
GET /wheeles/img/profiles/south-east-asian/male/9@0.25x.jpg HTTP/1.1
Host: 69.winprizes169.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://69.winprizes169.digital/wheeles/mxbluebaff3n2.html?city=Oslo&model=Desktop&brand=Desktop&isp=Blix%20Group%20AS%20&cep=rE5UjtuDNBLPISagVMTI7A8Fs8CbLLDF2jHVkXKD2qHvF8LghOSIU7EO1-WI2MLJ8hdizH0wtdVXbSGUefAAZ__XR8NnZSRPWDJu_0UPAOzQZDcOEj7T272xKdeloCjYcKUFNywiOgbuV1PFHiIrJ1NWYPPjst17kQsYE_qDqBXfGKo7JJ4y3ydGNAk0GwACDv7KeovdH73hdA-xjGS6l5NYg7mGk1QOezDxTMp1sIsnj1iWmdMYTU5E06twleBBjCSLmCKHyxUrXqIRaJsuQOtPyjPU3JTXjpp1MiyiNakqAMf628GDPqAEC7g2xzTfrHGHF-VyaFkj-PZO_vJmC70kyytXx-dJrFdRldVEILAFa2GKOhUtftbgTUKZdDmj&lptoken=165d695f677844776874
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
|
search
217.69.14.8
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
date: Mon, 28 Nov 2022 21:57:49 GMT
content-length: 2789
last-modified: Mon, 09 May 2022 04:40:09 GMT
etag: "ae5-5de8ccd9affe0"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
GET /wheeles/img/profiles/south-east-asian/female/6@0.25x.jpg HTTP/1.1
Host: 69.winprizes169.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://69.winprizes169.digital/wheeles/mxbluebaff3n2.html?city=Oslo&model=Desktop&brand=Desktop&isp=Blix%20Group%20AS%20&cep=rE5UjtuDNBLPISagVMTI7A8Fs8CbLLDF2jHVkXKD2qHvF8LghOSIU7EO1-WI2MLJ8hdizH0wtdVXbSGUefAAZ__XR8NnZSRPWDJu_0UPAOzQZDcOEj7T272xKdeloCjYcKUFNywiOgbuV1PFHiIrJ1NWYPPjst17kQsYE_qDqBXfGKo7JJ4y3ydGNAk0GwACDv7KeovdH73hdA-xjGS6l5NYg7mGk1QOezDxTMp1sIsnj1iWmdMYTU5E06twleBBjCSLmCKHyxUrXqIRaJsuQOtPyjPU3JTXjpp1MiyiNakqAMf628GDPqAEC7g2xzTfrHGHF-VyaFkj-PZO_vJmC70kyytXx-dJrFdRldVEILAFa2GKOhUtftbgTUKZdDmj&lptoken=165d695f677844776874
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
|
search
217.69.14.8
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
date: Mon, 28 Nov 2022 21:57:49 GMT
content-length: 2356
last-modified: Mon, 09 May 2022 04:40:04 GMT
etag: "934-5de8ccd4e85b2"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
GET /wheeles/js/app.js?id=0601d5f2aaa1656cef1f HTTP/1.1
Host: 69.winprizes169.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://69.winprizes169.digital/wheeles/mxbluebaff3n2.html?city=Oslo&model=Desktop&brand=Desktop&isp=Blix%20Group%20AS%20&cep=rE5UjtuDNBLPISagVMTI7A8Fs8CbLLDF2jHVkXKD2qHvF8LghOSIU7EO1-WI2MLJ8hdizH0wtdVXbSGUefAAZ__XR8NnZSRPWDJu_0UPAOzQZDcOEj7T272xKdeloCjYcKUFNywiOgbuV1PFHiIrJ1NWYPPjst17kQsYE_qDqBXfGKo7JJ4y3ydGNAk0GwACDv7KeovdH73hdA-xjGS6l5NYg7mGk1QOezDxTMp1sIsnj1iWmdMYTU5E06twleBBjCSLmCKHyxUrXqIRaJsuQOtPyjPU3JTXjpp1MiyiNakqAMf628GDPqAEC7g2xzTfrHGHF-VyaFkj-PZO_vJmC70kyytXx-dJrFdRldVEILAFa2GKOhUtftbgTUKZdDmj&lptoken=165d695f677844776874
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
|
search
217.69.14.8
HTTP/2 200 OK
content-type: application/javascript
server: nginx
date: Mon, 28 Nov 2022 21:57:49 GMT
vary: Accept-Encoding
last-modified: Mon, 09 May 2022 04:39:20 GMT
etag: W/"3d1-5de8ccaac343c"
content-encoding: br
X-Firefox-Spdy: h2
|
GET /wheeles/img/profiles/south-east-asian/female/5@0.25x.jpg HTTP/1.1
Host: 69.winprizes169.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://69.winprizes169.digital/wheeles/mxbluebaff3n2.html?city=Oslo&model=Desktop&brand=Desktop&isp=Blix%20Group%20AS%20&cep=rE5UjtuDNBLPISagVMTI7A8Fs8CbLLDF2jHVkXKD2qHvF8LghOSIU7EO1-WI2MLJ8hdizH0wtdVXbSGUefAAZ__XR8NnZSRPWDJu_0UPAOzQZDcOEj7T272xKdeloCjYcKUFNywiOgbuV1PFHiIrJ1NWYPPjst17kQsYE_qDqBXfGKo7JJ4y3ydGNAk0GwACDv7KeovdH73hdA-xjGS6l5NYg7mGk1QOezDxTMp1sIsnj1iWmdMYTU5E06twleBBjCSLmCKHyxUrXqIRaJsuQOtPyjPU3JTXjpp1MiyiNakqAMf628GDPqAEC7g2xzTfrHGHF-VyaFkj-PZO_vJmC70kyytXx-dJrFdRldVEILAFa2GKOhUtftbgTUKZdDmj&lptoken=165d695f677844776874
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
|
search
217.69.14.8
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
date: Mon, 28 Nov 2022 21:57:49 GMT
content-length: 1876
last-modified: Mon, 09 May 2022 04:40:04 GMT
etag: "754-5de8ccd4e85b2"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
GET /wheeles/img/profiles/south-east-asian/female/1@0.25x.jpg HTTP/1.1
Host: 69.winprizes169.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://69.winprizes169.digital/wheeles/mxbluebaff3n2.html?city=Oslo&model=Desktop&brand=Desktop&isp=Blix%20Group%20AS%20&cep=rE5UjtuDNBLPISagVMTI7A8Fs8CbLLDF2jHVkXKD2qHvF8LghOSIU7EO1-WI2MLJ8hdizH0wtdVXbSGUefAAZ__XR8NnZSRPWDJu_0UPAOzQZDcOEj7T272xKdeloCjYcKUFNywiOgbuV1PFHiIrJ1NWYPPjst17kQsYE_qDqBXfGKo7JJ4y3ydGNAk0GwACDv7KeovdH73hdA-xjGS6l5NYg7mGk1QOezDxTMp1sIsnj1iWmdMYTU5E06twleBBjCSLmCKHyxUrXqIRaJsuQOtPyjPU3JTXjpp1MiyiNakqAMf628GDPqAEC7g2xzTfrHGHF-VyaFkj-PZO_vJmC70kyytXx-dJrFdRldVEILAFa2GKOhUtftbgTUKZdDmj&lptoken=165d695f677844776874
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
|
search
217.69.14.8
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
date: Mon, 28 Nov 2022 21:57:49 GMT
content-length: 3262
last-modified: Mon, 09 May 2022 04:40:03 GMT
etag: "cbe-5de8ccd406c50"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
GET /wheeles/img/profiles/south-east-asian/male/2@0.25x.jpg HTTP/1.1
Host: 69.winprizes169.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://69.winprizes169.digital/wheeles/mxbluebaff3n2.html?city=Oslo&model=Desktop&brand=Desktop&isp=Blix%20Group%20AS%20&cep=rE5UjtuDNBLPISagVMTI7A8Fs8CbLLDF2jHVkXKD2qHvF8LghOSIU7EO1-WI2MLJ8hdizH0wtdVXbSGUefAAZ__XR8NnZSRPWDJu_0UPAOzQZDcOEj7T272xKdeloCjYcKUFNywiOgbuV1PFHiIrJ1NWYPPjst17kQsYE_qDqBXfGKo7JJ4y3ydGNAk0GwACDv7KeovdH73hdA-xjGS6l5NYg7mGk1QOezDxTMp1sIsnj1iWmdMYTU5E06twleBBjCSLmCKHyxUrXqIRaJsuQOtPyjPU3JTXjpp1MiyiNakqAMf628GDPqAEC7g2xzTfrHGHF-VyaFkj-PZO_vJmC70kyytXx-dJrFdRldVEILAFa2GKOhUtftbgTUKZdDmj&lptoken=165d695f677844776874
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
|
search
217.69.14.8
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
date: Mon, 28 Nov 2022 21:57:49 GMT
content-length: 2449
last-modified: Mon, 09 May 2022 04:40:08 GMT
etag: "991-5de8ccd8cf61d"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
|
search
34.102.187.140
HTTP/2 200 OK
content-type: application/json
access-control-allow-origin: *
access-control-expose-headers: Retry-After, ETag, Alert, Expires, Cache-Control, Backoff, Content-Length, Content-Type, Pragma, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 28 Nov 2022 21:11:12 GMT
cache-control: public,max-age=3600
age: 2797
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
alt-svc: clear
X-Firefox-Spdy: h2
|
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
search
93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Accept-Ranges: bytes
Age: 4618
Cache-Control: max-age=131164
Date: Mon, 28 Nov 2022 21:57:49 GMT
Etag: "63847a2f-1d7"
Expires: Wed, 30 Nov 2022 10:23:53 GMT
Last-Modified: Mon, 28 Nov 2022 09:06:55 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 471
|
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
search
23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Server: nginx
Content-Length: 503
ETag: "180446E5FB63F919A316E3D20FBF22438EB35E1A3241B53FD70D43B234521123"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Tue, 29 Nov 2022 03:57:49 GMT
Date: Mon, 28 Nov 2022 21:57:49 GMT
Connection: keep-alive
|
GET /wheeles/css/app.css?id=c588c17324f2be0e0ec9 HTTP/1.1
Host: 69.winprizes169.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://69.winprizes169.digital/wheeles/mxbluebaff3n2.html?city=Oslo&model=Desktop&brand=Desktop&isp=Blix%20Group%20AS%20&cep=rE5UjtuDNBLPISagVMTI7A8Fs8CbLLDF2jHVkXKD2qHvF8LghOSIU7EO1-WI2MLJ8hdizH0wtdVXbSGUefAAZ__XR8NnZSRPWDJu_0UPAOzQZDcOEj7T272xKdeloCjYcKUFNywiOgbuV1PFHiIrJ1NWYPPjst17kQsYE_qDqBXfGKo7JJ4y3ydGNAk0GwACDv7KeovdH73hdA-xjGS6l5NYg7mGk1QOezDxTMp1sIsnj1iWmdMYTU5E06twleBBjCSLmCKHyxUrXqIRaJsuQOtPyjPU3JTXjpp1MiyiNakqAMf628GDPqAEC7g2xzTfrHGHF-VyaFkj-PZO_vJmC70kyytXx-dJrFdRldVEILAFa2GKOhUtftbgTUKZdDmj&lptoken=165d695f677844776874
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
|
search
217.69.14.8
HTTP/2 200 OK
content-type: text/css
server: nginx
date: Mon, 28 Nov 2022 21:57:49 GMT
vary: Accept-Encoding
last-modified: Mon, 09 May 2022 04:39:16 GMT
etag: W/"21-5de8cca6e7f51"
content-encoding: br
X-Firefox-Spdy: h2
|
GET /js/pub.min.js HTTP/1.1
Host: push.winprizes31.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://69.winprizes169.digital/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
|
search
 103.224.182.210
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
Date: Mon, 28 Nov 2022 21:57:50 GMT
Server: Apache/2.4.38 (Debian)
Content-Length: 196
Connection: close
|
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
search
23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Server: nginx
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12068
Expires: Tue, 29 Nov 2022 01:18:59 GMT
Date: Mon, 28 Nov 2022 21:57:51 GMT
Connection: keep-alive
|
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
search
23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Server: nginx
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12068
Expires: Tue, 29 Nov 2022 01:18:59 GMT
Date: Mon, 28 Nov 2022 21:57:51 GMT
Connection: keep-alive
|
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
search
23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Server: nginx
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12068
Expires: Tue, 29 Nov 2022 01:18:59 GMT
Date: Mon, 28 Nov 2022 21:57:51 GMT
Connection: keep-alive
|
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
search
23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Server: nginx
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12068
Expires: Tue, 29 Nov 2022 01:18:59 GMT
Date: Mon, 28 Nov 2022 21:57:51 GMT
Connection: keep-alive
|
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7faa45dd-b9de-4dae-a2d6-ee678d7d3906.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
|
search
34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
content-length: 9015
x-amzn-requestid: eb4599b5-e88a-47cd-8d1b-5839c4f7593e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cVNnbGLToAMFfxg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63852962-67476fac77c8d1ee36f89ecc;Sampled=0
x-amzn-remapped-date: Mon, 28 Nov 2022 21:34:26 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 09Pb9RMyAoRWXYfw5mxwtpl6fnHwlxDJryR4c-F3rurGKUgo-HYUOg==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 a847181d425b7fc57e81eb3c800bfdf2.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 21:42:03 GMT
age: 948
etag: "c6dfd277cdbd057472e6df6ad1a200f50684d442"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
GET /wheeles/img/fb-like.svg HTTP/1.1
Host: 69.winprizes169.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://69.winprizes169.digital/wheeles/mxbluebaff3n2.html?city=Oslo&model=Desktop&brand=Desktop&isp=Blix%20Group%20AS%20&cep=rE5UjtuDNBLPISagVMTI7A8Fs8CbLLDF2jHVkXKD2qHvF8LghOSIU7EO1-WI2MLJ8hdizH0wtdVXbSGUefAAZ__XR8NnZSRPWDJu_0UPAOzQZDcOEj7T272xKdeloCjYcKUFNywiOgbuV1PFHiIrJ1NWYPPjst17kQsYE_qDqBXfGKo7JJ4y3ydGNAk0GwACDv7KeovdH73hdA-xjGS6l5NYg7mGk1QOezDxTMp1sIsnj1iWmdMYTU5E06twleBBjCSLmCKHyxUrXqIRaJsuQOtPyjPU3JTXjpp1MiyiNakqAMf628GDPqAEC7g2xzTfrHGHF-VyaFkj-PZO_vJmC70kyytXx-dJrFdRldVEILAFa2GKOhUtftbgTUKZdDmj&lptoken=165d695f677844776874
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
|
search
217.69.14.8
HTTP/2 200 OK
content-type: image/svg+xml
server: nginx
date: Mon, 28 Nov 2022 21:57:49 GMT
vary: Accept-Encoding
last-modified: Mon, 09 May 2022 04:39:16 GMT
etag: W/"1213-5de8cca6e7f51"
content-encoding: br
X-Firefox-Spdy: h2
|
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F306bb762-e2a8-4771-9a39-086c46f94b11.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
|
search
34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
content-length: 7549
x-amzn-requestid: bb37235a-8c7d-47fe-abb6-6cc633560165
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cP-7lHmsoAMF9lA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638311e3-1f2a4abc40119f3e026dc393;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 07:29:39 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: -aUqAfyrtMO0hkr2J2lm5SNNFdtaJj-F2dpBULvXjfOV205Ksm0iHw==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 21:42:03 GMT
age: 948
etag: "600859401c885cc2cdd1f199cccc198eb41d6a04"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1c32283b-8309-408e-85df-cad97da6bc80.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
|
search
34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
content-length: 10176
x-amzn-requestid: 768fc69c-e91b-4dd9-8add-63634762b2d0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cMpbgEFOIAMF71A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6381bc49-21756db31c4714af0553f21b;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 07:12:09 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: jS-AS3x8V3XacXRNkU63UJjBxA6unvBer5WcxUYseR5p4eZPK64o2g==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 07:40:08 GMT
age: 51463
etag: "772d86ad983042a728ee3490630a9cf1134ad0dd"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9082acd6-44fd-454b-b215-451cf6d822a1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
|
search
34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
content-length: 8106
x-amzn-requestid: 73d1b662-99a8-4ad7-95f9-c0b1ebf7c45a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cVNnQEhQoAMFbLA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63852961-64954bc92997c9302e291381;Sampled=0
x-amzn-remapped-date: Mon, 28 Nov 2022 21:34:25 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: sYK4SFsG-No3Bd-CyGIKSWh4sUokwaHa20tc8zvbqUpxkplJOiASIA==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 21:42:03 GMT
age: 948
etag: "b703ea2cc2fcd68e60135ff77d5a5f1b93fac128"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1172c72b-d329-4446-80cb-92b8cf104425.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
|
search
34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
content-length: 3944
x-amzn-requestid: 8a6732c1-72da-4a73-ba51-8533c6a01a9c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cVNmfFgeIAMFjLw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6385295c-0c807d93277bfb7f6b13c2ee;Sampled=0
x-amzn-remapped-date: Mon, 28 Nov 2022 21:34:20 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: XC26NJ0PkNhOsuvMPTd5TlY-oDOGfGoNxzzMANQRlyBWt1XZW_gUfA==
via: 1.1 995664ee945c06fc706b5cb8e0e650dc.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 21:42:03 GMT
age: 948
etag: "5008d7344dd85ae61a598c17e7baf427def3e25d"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
GET /wheeles/mxbluebaff3n2.html?city=Oslo&model=Desktop&brand=Desktop&isp=Blix%20Group%20AS%20&cep=rE5UjtuDNBLPISagVMTI7A8Fs8CbLLDF2jHVkXKD2qHvF8LghOSIU7EO1-WI2MLJ8hdizH0wtdVXbSGUefAAZ__XR8NnZSRPWDJu_0UPAOzQZDcOEj7T272xKdeloCjYcKUFNywiOgbuV1PFHiIrJ1NWYPPjst17kQsYE_qDqBXfGKo7JJ4y3ydGNAk0GwACDv7KeovdH73hdA-xjGS6l5NYg7mGk1QOezDxTMp1sIsnj1iWmdMYTU5E06twleBBjCSLmCKHyxUrXqIRaJsuQOtPyjPU3JTXjpp1MiyiNakqAMf628GDPqAEC7g2xzTfrHGHF-VyaFkj-PZO_vJmC70kyytXx-dJrFdRldVEILAFa2GKOhUtftbgTUKZdDmj&lptoken=165d695f677844776874 HTTP/1.1
Host: 69.winprizes169.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
|
search
217.69.14.8
HTTP/2 200 OK
content-type: text/html
server: nginx
date: Mon, 28 Nov 2022 21:57:49 GMT
vary: Accept-Encoding
last-modified: Wed, 06 Jul 2022 05:17:08 GMT
etag: W/"30c3-5e31c14a21e9e"
content-encoding: br
X-Firefox-Spdy: h2
--- Additional Info ---
|
GET /wheeles/css/landers/prizewheel-fb/app.css?id=cd41123a11e97e0f2444 HTTP/1.1
Host: 69.winprizes169.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://69.winprizes169.digital/wheeles/mxbluebaff3n2.html?city=Oslo&model=Desktop&brand=Desktop&isp=Blix%20Group%20AS%20&cep=rE5UjtuDNBLPISagVMTI7A8Fs8CbLLDF2jHVkXKD2qHvF8LghOSIU7EO1-WI2MLJ8hdizH0wtdVXbSGUefAAZ__XR8NnZSRPWDJu_0UPAOzQZDcOEj7T272xKdeloCjYcKUFNywiOgbuV1PFHiIrJ1NWYPPjst17kQsYE_qDqBXfGKo7JJ4y3ydGNAk0GwACDv7KeovdH73hdA-xjGS6l5NYg7mGk1QOezDxTMp1sIsnj1iWmdMYTU5E06twleBBjCSLmCKHyxUrXqIRaJsuQOtPyjPU3JTXjpp1MiyiNakqAMf628GDPqAEC7g2xzTfrHGHF-VyaFkj-PZO_vJmC70kyytXx-dJrFdRldVEILAFa2GKOhUtftbgTUKZdDmj&lptoken=165d695f677844776874
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
|
search
217.69.14.8
HTTP/2 200 OK
content-type: text/css
server: nginx
date: Mon, 28 Nov 2022 21:57:49 GMT
vary: Accept-Encoding
last-modified: Mon, 09 May 2022 04:39:49 GMT
etag: W/"da7-5de8ccc627fa9"
content-encoding: br
X-Firefox-Spdy: h2
--- Additional Info ---
|