| joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n/ |  163.171.129.207 | 200 OK | 89 kB |
URL User Request GET HTTP/2joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n/ IP163.171.129.207:443 ASN#54994 QUANTILNETWORKS
CertificateIssuerGlobalSign nv-sa Subject*.joinlanders.com Fingerprint08:E1:3C:E4:1B:71:26:35:DB:14:D7:31:BD:07:43:98:7B:1A:01:F1 ValidityMon, 03 Apr 2023 16:01:30 GMT - Sat, 04 May 2024 16:01:29 GMT
File typeHTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (6676) Hashce9721d2e807086765e3282c36bcea0e 08d6ec0db07c201b317f779f298ed04dbafa777d 3178d4722691e86ab0d39c018c9afff88ef9d922d39e9304f6846651c0fb2df6
GET /src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n/ HTTP/1.1
Host: joinlanders.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 18 Sep 2023 07:22:43 GMT
content-type: text/html; charset=UTF-8
server: PWS/8.3.1.0.8
cache-control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
pragma: no-cache
expires: 0
set-cookie: ldata=%7B%22program%22%3A%22EPC%22%2C%22propigate_defaults%22%3A%5B%5D%2C%22resolved_inputs%22%3A%7B%22pgm%22%3A%2263%22%2C%22wlid%22%3Anull%2C%22ofid%22%3A%221066%22%2C%22a_aid%22%3A%22epc69623%22%2C%22a_sid%22%3A%2213095u%22%2C%22a_bid%22%3A%22g129%22%7D%2C%22hub_uri%22%3A%22joinfinish.com%22%2C%22iframe_uri%22%3A%22joinfinish.com%5C%2Fsignup%22%2C%22geoip_uri%22%3A%22geoip.joinfinish.com%22%2C%22google_id%22%3A%22%22%2C%22geo_data%22%3A%7B%22city%22%3A%22Dilling%22%2C%22region_code%22%3A%2230%22%2C%22region_name%22%3A%22Viken%22%2C%22country_code%22%3A%22NO%22%2C%22country%22%3A%22Norway%22%2C%22postal_code%22%3A%221570%22%2C%22continent_code%22%3A%22EU%22%2C%22continent%22%3A%22Europe%22%2C%22latitude%22%3A59.3890999999999991132426657713949680328369140625%2C%22longitude%22%3A10.6760000000000001563194018672220408916473388671875%7D%7D; path=/
via: 1.1 PSygldLON4ax12:5 (W), 1.1 PS-LHR-01q9k95:8 (W)
x-px: ms PS-LHR-01q9k95LHR,ms PSygldLON4ax12LHR(origin)
x-ws-request-id: 6507fac3_PSygldLON2hl59_29496-57333
X-Firefox-Spdy: h2
|
|
| joinlanders.com/common/js/iframeResizer/iframeResizer.min.js | 163.171.129.207 | 200 OK | 12 kB |
URL GET HTTP/2joinlanders.com/common/js/iframeResizer/iframeResizer.min.js IP163.171.129.207:443 ASN#54994 QUANTILNETWORKS
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n/ CertificateIssuerGlobalSign nv-sa Subject*.joinlanders.com Fingerprint08:E1:3C:E4:1B:71:26:35:DB:14:D7:31:BD:07:43:98:7B:1A:01:F1 ValidityMon, 03 Apr 2023 16:01:30 GMT - Sat, 04 May 2024 16:01:29 GMT
File typeASCII text, with very long lines (11471) Hashf6fb142b95a0163be52282ef8b1f4b9a 271ffc93a6b6ef177b6418b6c0d1fb28624e9fb5 35a59efb7049b51b061c5b4a00d2cb1a648a047a3406d55e500f3d6349052d33
GET /common/js/iframeResizer/iframeResizer.min.js HTTP/1.1
Host: joinlanders.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n/
Cookie: ldata=%7B%22program%22%3A%22EPC%22%2C%22propigate_defaults%22%3A%5B%5D%2C%22resolved_inputs%22%3A%7B%22pgm%22%3A%2263%22%2C%22wlid%22%3Anull%2C%22ofid%22%3A%221066%22%2C%22a_aid%22%3A%22epc69623%22%2C%22a_sid%22%3A%2213095u%22%2C%22a_bid%22%3A%22g129%22%7D%2C%22hub_uri%22%3A%22joinfinish.com%22%2C%22iframe_uri%22%3A%22joinfinish.com%5C%2Fsignup%22%2C%22geoip_uri%22%3A%22geoip.joinfinish.com%22%2C%22google_id%22%3A%22%22%2C%22geo_data%22%3A%7B%22city%22%3A%22Dilling%22%2C%22region_code%22%3A%2230%22%2C%22region_name%22%3A%22Viken%22%2C%22country_code%22%3A%22NO%22%2C%22country%22%3A%22Norway%22%2C%22postal_code%22%3A%221570%22%2C%22continent_code%22%3A%22EU%22%2C%22continent%22%3A%22Europe%22%2C%22latitude%22%3A59.3890999999999991132426657713949680328369140625%2C%22longitude%22%3A10.6760000000000001563194018672220408916473388671875%7D%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 18 Sep 2023 07:22:44 GMT
content-type: application/javascript
content-length: 11799
server: PWS/8.3.1.0.8
last-modified: Fri, 03 Sep 2021 18:04:58 GMT
etag: "613263ca-2e17"
accept-ranges: bytes
age: 55879
via: 1.1 PSygldLON4ev13:7 (W), 1.1 PS-LHR-01q9k95:5 (W)
x-px: ht PS-LHR-01q9k95LHR
x-ws-request-id: 6507fac4_PSygldLON2hl59_29496-57360
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 |  142.250.74.131 | | 471 B |
IP142.250.74.131:0
Hashff33d3de59a166777a4beda54587e4e2 a77ea03d8bf2cb71319cb8bb98ceb9c97a3cb2f8 52cac5b4492606a61a686f2f1a6bccd02af5ac3e6c1ce5986ab284eae8dd8ba6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 18 Sep 2023 07:22:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| code.jquery.com/jquery-3.6.0.min.js | 151.101.66.137 | 200 OK | 31 kB |
URL GET HTTP/2code.jquery.com/jquery-3.6.0.min.js IP151.101.66.137:443
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n/ CertificateIssuerSectigo Limited Subject*.jquery.com FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT
File typeASCII text, with very long lines (65447) Hash8fb8fee4fcc3cc86ff6c724154c49c42 b82d238d4e31fdf618bae8ac11a6c812c03dd0d4 ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e
GET /jquery-3.6.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://joinlanders.com
DNT: 1
Connection: keep-alive
Referer: https://joinlanders.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-15d9d"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Mon, 18 Sep 2023 07:22:44 GMT
age: 117968
x-served-by: cache-lga21931-LGA, cache-bma1649-BMA
x-cache: HIT, HIT
x-cache-hits: 9, 27300
x-timer: S1695021764.288442,VS0,VE0
vary: Accept-Encoding
content-length: 30875
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | | 471 B |
IP142.250.74.131:0
Hashff33d3de59a166777a4beda54587e4e2 a77ea03d8bf2cb71319cb8bb98ceb9c97a3cb2f8 52cac5b4492606a61a686f2f1a6bccd02af5ac3e6c1ce5986ab284eae8dd8ba6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 18 Sep 2023 07:22:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | | 472 B |
IP142.250.74.131:0
Hashd281fce2707e4d03af467ca854f83111 b0c50454ec97b8dd15e1a1e15a6b203be9d4b6b9 78236e6ecac2a39afdfb01ec9cd2580b5fc0482757836cf13df046a8dea9b22b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 18 Sep 2023 07:22:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | | 472 B |
IP142.250.74.131:0
Hashd281fce2707e4d03af467ca854f83111 b0c50454ec97b8dd15e1a1e15a6b203be9d4b6b9 78236e6ecac2a39afdfb01ec9cd2580b5fc0482757836cf13df046a8dea9b22b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 18 Sep 2023 07:22:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| fonts.gstatic.com/s/anton/v25/1Ptgg87LROyAm3Kz-C8.woff2 | 216.58.211.3 | 200 OK | 19 kB |
URL GET HTTP/2fonts.gstatic.com/s/anton/v25/1Ptgg87LROyAm3Kz-C8.woff2 IP216.58.211.3:443
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintAB:14:67:80:B6:91:41:34:54:E4:AE:2E:71:65:B4:8E:65:B2:D2:2D ValidityMon, 14 Aug 2023 08:22:45 GMT - Mon, 06 Nov 2023 08:22:44 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 18796, version 1.0\012- data Hasha2675f0a46717d18588f16531f72674d adfe4d6f18d4522b73ef6853ea2084570855f87c f9ad420bf51c2930fc2a49d44209d202cb18acb2d8b82853a01023e69eab6885
GET /s/anton/v25/1Ptgg87LROyAm3Kz-C8.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://joinlanders.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18796
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 15 Sep 2023 15:38:50 GMT
expires: Sat, 14 Sep 2024 15:38:50 GMT
cache-control: public, max-age=31536000
age: 229434
last-modified: Thu, 24 Aug 2023 20:21:17 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2 | 216.58.211.3 | 200 OK | 7.8 kB |
URL GET HTTP/2fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2 IP216.58.211.3:443
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintAB:14:67:80:B6:91:41:34:54:E4:AE:2E:71:65:B4:8E:65:B2:D2:2D ValidityMon, 14 Aug 2023 08:22:45 GMT - Mon, 06 Nov 2023 08:22:44 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 7840, version 1.0\012- data Hash8d91ec1ca2d8b56640a47117e313a3e9 a9e9bafe64666f4595051a0e895b47a5fa39e67e 78bc3aa78faec288bbb3bf26c9a0fa4eb67b1e69da94a17233c5cab60525efdb
GET /s/poppins/v20/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://joinlanders.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7840
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 14 Sep 2023 15:08:24 GMT
expires: Fri, 13 Sep 2024 15:08:24 GMT
cache-control: public, max-age=31536000
age: 317660
last-modified: Wed, 27 Apr 2022 16:51:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | | 472 B |
IP142.250.74.131:0
Hashd281fce2707e4d03af467ca854f83111 b0c50454ec97b8dd15e1a1e15a6b203be9d4b6b9 78236e6ecac2a39afdfb01ec9cd2580b5fc0482757836cf13df046a8dea9b22b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 18 Sep 2023 07:22:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| static.cdn.co.no/videos/cl/gg/c33/media/snd.mp3 | 163.171.129.207 | 206 Partial Content | 11 kB |
URL GET HTTP/1.1static.cdn.co.no/videos/cl/gg/c33/media/snd.mp3 IP163.171.129.207:443 ASN#54994 QUANTILNETWORKS
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n/ CertificateIssuerLet's Encrypt Subjectstatic.cdn.co.no Fingerprint43:41:07:76:E5:7A:2F:C3:49:81:23:6C:BA:15:34:A6:9E:87:21:B6 ValidityFri, 01 Sep 2023 15:15:14 GMT - Thu, 30 Nov 2023 15:15:13 GMT
File typeAudio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, JntStereo\012- data Hash06bedb23315dcad66426bcd9f6caa137 df7bd253f1764fa1471e5e542e138eb80f96f82d 113ecd3a9c1be56fcdb6b5ccee199b5e5d0f8bc777fbda5b0f697e24d8186d1e
GET /videos/cl/gg/c33/media/snd.mp3 HTTP/1.1
Host: static.cdn.co.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://joinlanders.com/
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 206 Partial Content
Date: Mon, 18 Sep 2023 07:22:44 GMT
Content-Type: audio/mp3;charset=UTF-8
Content-Length: 10643
Connection: keep-alive
Server: PWS/8.3.1.0.8
Accept-Ranges: bytes
ETag: "Ft970lPxdk-hRx5eVC4TjrgPlvgt"
Last-Modified: Mon, 06 Jun 2022 13:35:17 GMT
X-Reqid: 205024922427327420221229141330OhpUCoIF
Content-Range: bytes 0-10642/10643
Age: 54637
Via: 1.1 PSygldLON4zd14:6 (W), 1.1 PSygldLON2hl59:19 (W)
X-Px: ht PSygldLON2hl59LHR
X-Ws-Request-Id: 6507fac4_PSygldLON2hl59_28778-44456
|
|
| static.cdn.co.no/videos/cl/gg/c33/img/en_load.png | 163.171.129.207 | 200 OK | 3.8 kB |
URL GET HTTP/1.1static.cdn.co.no/videos/cl/gg/c33/img/en_load.png IP163.171.129.207:443 ASN#54994 QUANTILNETWORKS
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n/ CertificateIssuerLet's Encrypt Subjectstatic.cdn.co.no Fingerprint43:41:07:76:E5:7A:2F:C3:49:81:23:6C:BA:15:34:A6:9E:87:21:B6 ValidityFri, 01 Sep 2023 15:15:14 GMT - Thu, 30 Nov 2023 15:15:13 GMT
File typePNG image data, 195 x 71, 8-bit colormap, non-interlaced\012- data Hash130609ec850ba7b836df26cb21403ba9 964ca84794cb504678f5d2719947f743ba250b56 f3c59f785d91ef28594d9d21ee53dbb1cf440060f0bdd37803f6a167c2eb7b6e
GET /videos/cl/gg/c33/img/en_load.png HTTP/1.1
Host: static.cdn.co.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://joinlanders.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 18 Sep 2023 07:22:44 GMT
Content-Type: image/png;charset=UTF-8
Content-Length: 3847
Connection: keep-alive
Server: PWS/8.3.1.0.8
Accept-Ranges: bytes
ETag: "FpZMqEeUy1BGePXScZlH90O6JQtW"
Last-Modified: Mon, 18 Jul 2022 15:16:39 GMT
X-Reqid: 205024922427214120230628201900WzVtmIKf
Age: 54638
Via: 1.1 PS-FRA-01E6z147:6 (W), 1.1 PSygldLON2hl59:0 (W)
X-Px: ht PSygldLON2hl59LHR
X-Ws-Request-Id: 6507fac4_PSygldLON2hl59_28641-53360
|
|
| static.cdn.co.no/videos/cl/gg/c33/img/dsk/bgp1.jpg | 163.171.129.207 | 200 OK | 10 kB |
URL GET HTTP/1.1static.cdn.co.no/videos/cl/gg/c33/img/dsk/bgp1.jpg IP163.171.129.207:443 ASN#54994 QUANTILNETWORKS
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n/ CertificateIssuerLet's Encrypt Subjectstatic.cdn.co.no Fingerprint43:41:07:76:E5:7A:2F:C3:49:81:23:6C:BA:15:34:A6:9E:87:21:B6 ValidityFri, 01 Sep 2023 15:15:14 GMT - Thu, 30 Nov 2023 15:15:13 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 700x394, components 3\012- data Hash5ee023bc8f8cc62233efa133b6545437 fcac7de56928df272daf4efed7fc9a0730d185e9 eda00d5a98749856978bb9ecd96e345070eda7e7f3fc5a4d4a2aaa9188f7f94a
GET /videos/cl/gg/c33/img/dsk/bgp1.jpg HTTP/1.1
Host: static.cdn.co.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://joinlanders.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 18 Sep 2023 07:22:44 GMT
Content-Type: image/jpeg;charset=UTF-8
Content-Length: 10196
Connection: keep-alive
Server: PWS/8.3.1.0.8
Accept-Ranges: bytes
ETag: "FvysfeVpKN8nLa9O_tf8mgcw0YXp"
Last-Modified: Mon, 06 Jun 2022 13:36:52 GMT
X-Reqid: 205024922427321820220607230749Ti9eTmKp
Age: 26626
Via: 1.1 PSygldLON2mb11:10 (W), 1.1 PSygldLON2hl59:10 (W)
X-Px: ht PSygldLON2hl59LHR
X-Ws-Request-Id: 6507fac4_PSygldLON2hl59_28455-47394
|
|
| static.cdn.co.no/videos/cl/gg/c33/img/anicon11.png | 163.171.129.207 | 200 OK | 7.5 kB |
URL GET HTTP/1.1static.cdn.co.no/videos/cl/gg/c33/img/anicon11.png IP163.171.129.207:443 ASN#54994 QUANTILNETWORKS
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n/ CertificateIssuerLet's Encrypt Subjectstatic.cdn.co.no Fingerprint43:41:07:76:E5:7A:2F:C3:49:81:23:6C:BA:15:34:A6:9E:87:21:B6 ValidityFri, 01 Sep 2023 15:15:14 GMT - Thu, 30 Nov 2023 15:15:13 GMT
File typePNG image data, 100 x 90, 8-bit/color RGBA, non-interlaced\012- data Hash3aae2030f6161901dd2086dd796fa8b1 12a844337a5cebfc29f5bb73f800789fbeacd49b daf50ec63fa5867a6727353c88c3ceaca6262adb8d08602c26e17b157518c14c
GET /videos/cl/gg/c33/img/anicon11.png HTTP/1.1
Host: static.cdn.co.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://joinlanders.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 18 Sep 2023 07:22:44 GMT
Content-Type: image/png;charset=UTF-8
Content-Length: 7477
Connection: keep-alive
Server: PWS/8.3.1.0.8
Accept-Ranges: bytes
ETag: "FhKoRDN6XOv8KfW7c_gAeJ--rNSb"
Last-Modified: Mon, 06 Jun 2022 13:32:51 GMT
X-Reqid: 205024922427319620230304145316Ce4kZRLC
Age: 54638
Via: 1.1 PSygldLON4ax12:0 (W), 1.1 PSygldLON2hl59:1 (W)
X-Px: ht PSygldLON2hl59LHR
X-Ws-Request-Id: 6507fac4_PSygldLON2hl59_29733-41834
|
|
| static.cdn.co.no/videos/cl/gg/c33/img/arrw.png | 163.171.129.207 | 200 OK | 778 B |
URL GET HTTP/1.1static.cdn.co.no/videos/cl/gg/c33/img/arrw.png IP163.171.129.207:443 ASN#54994 QUANTILNETWORKS
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n/ CertificateIssuerLet's Encrypt Subjectstatic.cdn.co.no Fingerprint43:41:07:76:E5:7A:2F:C3:49:81:23:6C:BA:15:34:A6:9E:87:21:B6 ValidityFri, 01 Sep 2023 15:15:14 GMT - Thu, 30 Nov 2023 15:15:13 GMT
File typePNG image data, 23 x 32, 8-bit colormap, non-interlaced\012- data Hash2eab9ba0ad5871a0420346118f44bd05 5fbd567f5022c4d78ae654748cccd22e967241ea 49f782572e552b2998dd7784e94653ee5baaa555e23089d01b4b1c35364e4a97
GET /videos/cl/gg/c33/img/arrw.png HTTP/1.1
Host: static.cdn.co.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://joinlanders.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 18 Sep 2023 07:22:44 GMT
Content-Type: image/png;charset=UTF-8
Content-Length: 778
Connection: keep-alive
Server: PWS/8.3.1.0.8
Accept-Ranges: bytes
ETag: "Fl-9Vn9QIsTXiuZUdIzM0i6WckHq"
Last-Modified: Mon, 06 Jun 2022 13:32:53 GMT
X-Reqid: 205024922427213020230628202109az3gthvX
Age: 54638
Via: 1.1 PSygldLON4ax12:8 (W), 1.1 PSygldLON2kt55:13 (W)
X-Px: ht PSygldLON2kt55LHR
X-Ws-Request-Id: 6507fac4_PSygldLON2hl59_28778-44459
|
|
| static.cdn.co.no/videos/cl/gg/c33/img/anicon21.png | 163.171.129.207 | 200 OK | 2.6 kB |
URL GET HTTP/1.1static.cdn.co.no/videos/cl/gg/c33/img/anicon21.png IP163.171.129.207:443 ASN#54994 QUANTILNETWORKS
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n/ CertificateIssuerLet's Encrypt Subjectstatic.cdn.co.no Fingerprint43:41:07:76:E5:7A:2F:C3:49:81:23:6C:BA:15:34:A6:9E:87:21:B6 ValidityFri, 01 Sep 2023 15:15:14 GMT - Thu, 30 Nov 2023 15:15:13 GMT
File typePNG image data, 100 x 99, 8-bit colormap, non-interlaced\012- data Hash65ff4bedabf2644614685f40a2d76ab0 ee47ce6e0bd3d0b9331edae6a5cfe8312269c2b6 add7d389cc98b486494647c7b1a83783845995f28f4b746b034ae95f2693bf04
GET /videos/cl/gg/c33/img/anicon21.png HTTP/1.1
Host: static.cdn.co.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://joinlanders.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 18 Sep 2023 07:22:44 GMT
Content-Type: image/png;charset=UTF-8
Content-Length: 2608
Connection: keep-alive
Server: PWS/8.3.1.0.8
Accept-Ranges: bytes
ETag: "Fu5Hzm4L09C5Mx7a5qXP6DEiacK2"
Last-Modified: Mon, 06 Jun 2022 13:32:53 GMT
X-Reqid: 205024922427215120230628201758PJN1NPcT
Age: 54638
Via: 1.1 PSygldLON4ax12:5 (W), 1.1 PSygldLON2hl59:5 (W)
X-Px: ht PSygldLON2hl59LHR
X-Ws-Request-Id: 6507fac4_PSygldLON2hl59_28455-47395
|
|
| static.cdn.co.no/videos/cl/gg/c33/img/pointer.png | 163.171.129.207 | 200 OK | 3.8 kB |
URL GET HTTP/1.1static.cdn.co.no/videos/cl/gg/c33/img/pointer.png IP163.171.129.207:443 ASN#54994 QUANTILNETWORKS
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n/ CertificateIssuerLet's Encrypt Subjectstatic.cdn.co.no Fingerprint43:41:07:76:E5:7A:2F:C3:49:81:23:6C:BA:15:34:A6:9E:87:21:B6 ValidityFri, 01 Sep 2023 15:15:14 GMT - Thu, 30 Nov 2023 15:15:13 GMT
File typePNG image data, 32 x 29, 8-bit/color RGBA, non-interlaced\012- data Hash99f0ee95ccdbd0f3be1a8ca2795e563e 70e6e906918863c154a4ffe0f836d12b96d035aa 09a96807fc746932d21bf63ca57a6bf3ce2e9faa5db5b6cbe2d5eef38cd55416
GET /videos/cl/gg/c33/img/pointer.png HTTP/1.1
Host: static.cdn.co.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://joinlanders.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 18 Sep 2023 07:22:44 GMT
Content-Type: image/png;charset=UTF-8
Content-Length: 3773
Connection: keep-alive
Server: PWS/8.3.1.0.8
Accept-Ranges: bytes
ETag: "FnDm6QaRiGPBVKT_4Pg20SuW0DWq"
Last-Modified: Mon, 06 Jun 2022 13:32:52 GMT
X-Reqid: 205024922427326020220622155335v9pAgBZW
Age: 54638
Via: 1.1 PSygldLON2ii12:9 (W), 1.1 PSygldLON2ew56:14 (W)
X-Px: ht PSygldLON2ew56LHR
X-Ws-Request-Id: 6507fac4_PSygldLON2hl59_28641-53363
|
|
| static.cdn.co.no/videos/cl/gg/c33/img/dsk/bg.png | 163.171.129.207 | 200 OK | 81 kB |
URL GET HTTP/1.1static.cdn.co.no/videos/cl/gg/c33/img/dsk/bg.png IP163.171.129.207:443 ASN#54994 QUANTILNETWORKS
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n/ CertificateIssuerLet's Encrypt Subjectstatic.cdn.co.no Fingerprint43:41:07:76:E5:7A:2F:C3:49:81:23:6C:BA:15:34:A6:9E:87:21:B6 ValidityFri, 01 Sep 2023 15:15:14 GMT - Thu, 30 Nov 2023 15:15:13 GMT
File typePNG image data, 1913 x 1275, 8-bit colormap, non-interlaced\012- data Hasheb901aef88870c9e5343daf6e2fa21ef b098f8dbf834d477b7dd34128a1672fb2ca5dc10 ca68d5fd06e5a6354fb46c5791de95d95ce9227df7d6da3069b55b32c590c40d
GET /videos/cl/gg/c33/img/dsk/bg.png HTTP/1.1
Host: static.cdn.co.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://joinlanders.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 18 Sep 2023 07:22:44 GMT
Content-Type: image/png;charset=UTF-8
Content-Length: 81390
Connection: keep-alive
Server: PWS/8.3.1.0.8
Accept-Ranges: bytes
ETag: "FrCY-Nv4NNR3t900EooWcvsspdwQ"
Last-Modified: Mon, 06 Jun 2022 13:36:52 GMT
X-Reqid: 205024922427226020230628202512YXRTE5AV
Age: 74048
Via: 1.1 PSygldLON4ev13:10 (W), 1.1 PS-LHR-01q9k95:0 (W)
X-Px: ht PS-LHR-01q9k95LHR
X-Ws-Request-Id: 6507fac4_PSygldLON2hl59_28439-32161
|
|
| static.cdn.co.no/videos/cl/gg/c33/img/anicon31.png | 163.171.129.207 | 200 OK | 13 kB |
URL GET HTTP/1.1static.cdn.co.no/videos/cl/gg/c33/img/anicon31.png IP163.171.129.207:443 ASN#54994 QUANTILNETWORKS
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n/ CertificateIssuerLet's Encrypt Subjectstatic.cdn.co.no Fingerprint43:41:07:76:E5:7A:2F:C3:49:81:23:6C:BA:15:34:A6:9E:87:21:B6 ValidityFri, 01 Sep 2023 15:15:14 GMT - Thu, 30 Nov 2023 15:15:13 GMT
File typePNG image data, 100 x 92, 8-bit/color RGBA, non-interlaced\012- data Hash41fcf5d8f47d9c52c1d021e3619afe43 4e3113e01258b1dbace06660a37a54801a04a0c0 fa3e600cbd5263a585075503c69669877006040a8c9a032897db9e0fe0f6451a
GET /videos/cl/gg/c33/img/anicon31.png HTTP/1.1
Host: static.cdn.co.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://joinlanders.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 18 Sep 2023 07:22:44 GMT
Content-Type: image/png;charset=UTF-8
Content-Length: 13014
Connection: keep-alive
Server: PWS/8.3.1.0.8
Accept-Ranges: bytes
ETag: "Fk4xE-ASWLHbrOBmYKN6VIAaBKDA"
Last-Modified: Mon, 06 Jun 2022 13:32:53 GMT
X-Reqid: 205024922427318520220607110427M9z88yLh
Age: 54638
Via: 1.1 PSygldLON4ax12:5 (W), 1.1 PSygldLON2kt55:14 (W)
X-Px: ht PSygldLON2kt55LHR
X-Ws-Request-Id: 6507fac4_PSygldLON2hl59_29733-41836
|
|
| static.cdn.co.no/videos/cl/gg/c33/img/opt1.jpg | 163.171.129.207 | 200 OK | 13 kB |
URL GET HTTP/1.1static.cdn.co.no/videos/cl/gg/c33/img/opt1.jpg IP163.171.129.207:443 ASN#54994 QUANTILNETWORKS
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n/ CertificateIssuerLet's Encrypt Subjectstatic.cdn.co.no Fingerprint43:41:07:76:E5:7A:2F:C3:49:81:23:6C:BA:15:34:A6:9E:87:21:B6 ValidityFri, 01 Sep 2023 15:15:14 GMT - Thu, 30 Nov 2023 15:15:13 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 200x350, components 3\012- data Hash0a15412e6a65b5a780e495bd9585c198 8c3d9c37176e13deab697de5db656be2454310aa 1749e53d28a7b94bf1b24658805c35844dd18928bbfacc7bb87811dba332ffde
GET /videos/cl/gg/c33/img/opt1.jpg HTTP/1.1
Host: static.cdn.co.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://joinlanders.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 18 Sep 2023 07:22:44 GMT
Content-Type: image/jpeg;charset=UTF-8
Content-Length: 12899
Connection: keep-alive
Server: PWS/8.3.1.0.8
Accept-Ranges: bytes
ETag: "Fow9nDcXbhPeq2l95dtla-JFQxCq"
Last-Modified: Mon, 06 Jun 2022 13:32:52 GMT
X-Reqid: 205024922427215720230628201745hIy13kdH
Age: 54638
Via: 1.1 PS-FRA-018SR149:4 (W), 1.1 PS-LHR-01q9k95:15 (W)
X-Px: ht PS-LHR-01q9k95LHR
X-Ws-Request-Id: 6507fac4_PSygldLON2hl59_28778-44462
|
|
| static.cdn.co.no/videos/cl/gg/c33/img/opt2.jpg | 163.171.129.207 | 200 OK | 16 kB |
URL GET HTTP/1.1static.cdn.co.no/videos/cl/gg/c33/img/opt2.jpg IP163.171.129.207:443 ASN#54994 QUANTILNETWORKS
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n/ CertificateIssuerLet's Encrypt Subjectstatic.cdn.co.no Fingerprint43:41:07:76:E5:7A:2F:C3:49:81:23:6C:BA:15:34:A6:9E:87:21:B6 ValidityFri, 01 Sep 2023 15:15:14 GMT - Thu, 30 Nov 2023 15:15:13 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 200x350, components 3\012- data Hashd05c3b54434e62f161b586633314a5b7 5d6dea1480594b919482def04e68c71182367747 f7d7bea8be93931814d379479048a3544fadda60f03a8fe3ac96b1ae6d8f0e04
GET /videos/cl/gg/c33/img/opt2.jpg HTTP/1.1
Host: static.cdn.co.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://joinlanders.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 18 Sep 2023 07:22:44 GMT
Content-Type: image/jpeg;charset=UTF-8
Content-Length: 16453
Connection: keep-alive
Server: PWS/8.3.1.0.8
Accept-Ranges: bytes
ETag: "Fl1t6hSAWUuRlILe8E5oxxGCNndH"
Last-Modified: Mon, 06 Jun 2022 13:32:52 GMT
X-Reqid: 205024922427218520230628202109NV9gHT1z
Age: 54637
Via: 1.1 PSygldLON4ax12:9 (W), 1.1 PSygldLON2kt55:1 (W)
X-Px: ht PSygldLON2kt55LHR
X-Ws-Request-Id: 6507fac4_PSygldLON2hl59_28455-47396
|
|
| static.cdn.co.no/videos/cl/gg/c33/img/opt3.jpg | 163.171.129.207 | 200 OK | 14 kB |
URL GET HTTP/1.1static.cdn.co.no/videos/cl/gg/c33/img/opt3.jpg IP163.171.129.207:443 ASN#54994 QUANTILNETWORKS
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n/ CertificateIssuerLet's Encrypt Subjectstatic.cdn.co.no Fingerprint43:41:07:76:E5:7A:2F:C3:49:81:23:6C:BA:15:34:A6:9E:87:21:B6 ValidityFri, 01 Sep 2023 15:15:14 GMT - Thu, 30 Nov 2023 15:15:13 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 200x350, components 3\012- data Hash03daad3fa9637181cb2c1bf16212822b d8f383a2222bfae5f83b2eaf19dfdcdedbc2d577 2ad8e80a20b9ecceeefbe7d442e570d080cc492957816e7db50cd45763bb767a
GET /videos/cl/gg/c33/img/opt3.jpg HTTP/1.1
Host: static.cdn.co.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://joinlanders.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 18 Sep 2023 07:22:44 GMT
Content-Type: image/jpeg;charset=UTF-8
Content-Length: 14524
Connection: keep-alive
Server: PWS/8.3.1.0.8
Accept-Ranges: bytes
ETag: "Ftjzg6IiK_rl-Dsurxnf3N7bwtV3"
Last-Modified: Mon, 06 Jun 2022 13:32:52 GMT
X-Reqid: 205024922427215820230628201758rZdOuMf5
Age: 54638
Via: 1.1 PSygldLON4ev13:1 (W), 1.1 PSygldLON2hl59:0 (W)
X-Px: ht PSygldLON2hl59LHR
X-Ws-Request-Id: 6507fac4_PSygldLON2hl59_28641-53367
|
|
| static.cdn.co.no/videos/cl/gg/c33/img/anicon41.png | 163.171.129.207 | 200 OK | 3.8 kB |
URL GET HTTP/1.1static.cdn.co.no/videos/cl/gg/c33/img/anicon41.png IP163.171.129.207:443 ASN#54994 QUANTILNETWORKS
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n/ CertificateIssuerLet's Encrypt Subjectstatic.cdn.co.no Fingerprint43:41:07:76:E5:7A:2F:C3:49:81:23:6C:BA:15:34:A6:9E:87:21:B6 ValidityFri, 01 Sep 2023 15:15:14 GMT - Thu, 30 Nov 2023 15:15:13 GMT
File typePNG image data, 100 x 100, 8-bit colormap, non-interlaced\012- data Hashb4f11f4309d44648dd446c90a158af77 8baf001fd68485d830b7e349d25ef95a1ef35d44 1be1aeb3acdf0a8eca058d0c56a549639c57cc97be1aa12cd70d575bb0322f3c
GET /videos/cl/gg/c33/img/anicon41.png HTTP/1.1
Host: static.cdn.co.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://joinlanders.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 18 Sep 2023 07:22:44 GMT
Content-Type: image/png;charset=UTF-8
Content-Length: 3788
Connection: keep-alive
Server: PWS/8.3.1.0.8
Accept-Ranges: bytes
ETag: "FouvAB_WhIXYMLfjSdJe-Voe811E"
Last-Modified: Mon, 06 Jun 2022 13:32:52 GMT
X-Reqid: 205024922427327420220607110428UDteSdGu
Age: 54638
Via: 1.1 PSygldLON4ev13:10 (W), 1.1 PS-LHR-01q9k95:17 (W)
X-Px: ht PS-LHR-01q9k95LHR
X-Ws-Request-Id: 6507fac4_PSygldLON2hl59_28439-32166
|
|
| static.cdn.co.no/videos/cl/gg/c33/img/opt4.jpg | 163.171.129.207 | 200 OK | 18 kB |
URL GET HTTP/1.1static.cdn.co.no/videos/cl/gg/c33/img/opt4.jpg IP163.171.129.207:443 ASN#54994 QUANTILNETWORKS
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n/ CertificateIssuerLet's Encrypt Subjectstatic.cdn.co.no Fingerprint43:41:07:76:E5:7A:2F:C3:49:81:23:6C:BA:15:34:A6:9E:87:21:B6 ValidityFri, 01 Sep 2023 15:15:14 GMT - Thu, 30 Nov 2023 15:15:13 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 200x350, components 3\012- data Hashc288bc2ac38617391bc7600d89c034ee 803fc0a8b757412fe560f1e18c4586e084ef7455 8d00c726b4f875dc74d4caccc8106d55affd97162e6fc276740831aaff85c25d
GET /videos/cl/gg/c33/img/opt4.jpg HTTP/1.1
Host: static.cdn.co.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://joinlanders.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 18 Sep 2023 07:22:44 GMT
Content-Type: image/jpeg;charset=UTF-8
Content-Length: 18507
Connection: keep-alive
Server: PWS/8.3.1.0.8
Accept-Ranges: bytes
ETag: "FoA_wKi3V0Ev5WDx4YxFhuCE73RV"
Last-Modified: Mon, 06 Jun 2022 13:32:52 GMT
X-Reqid: 205024922427319620220622161234mkPEYtac
Age: 54637
Via: 1.1 PSygldLON2xi13:11 (W), 1.1 PSygldLON2kt55:22 (W)
X-Px: ht PSygldLON2kt55LHR
X-Ws-Request-Id: 6507fac4_PSygldLON2hl59_29733-41837
|
|
| static.cdn.co.no/videos/cl/gg/c33/img/opt5.jpg | 163.171.129.207 | 200 OK | 19 kB |
URL GET HTTP/1.1static.cdn.co.no/videos/cl/gg/c33/img/opt5.jpg IP163.171.129.207:443 ASN#54994 QUANTILNETWORKS
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n/ CertificateIssuerLet's Encrypt Subjectstatic.cdn.co.no Fingerprint43:41:07:76:E5:7A:2F:C3:49:81:23:6C:BA:15:34:A6:9E:87:21:B6 ValidityFri, 01 Sep 2023 15:15:14 GMT - Thu, 30 Nov 2023 15:15:13 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 200x350, components 3\012- data Hash84a919486095a1dda73274b9689d8ac9 7fed0927406b035055f1b2406dd7c9318e41ee3c c76f0735951445500c4cee9f5734940ce2ccc15d03818736b1056aac900a58b4
GET /videos/cl/gg/c33/img/opt5.jpg HTTP/1.1
Host: static.cdn.co.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://joinlanders.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 18 Sep 2023 07:22:44 GMT
Content-Type: image/jpeg;charset=UTF-8
Content-Length: 19298
Connection: keep-alive
Server: PWS/8.3.1.0.8
Accept-Ranges: bytes
ETag: "Fn_tCSdAawNQVfGyQG3XyTGOQe48"
Last-Modified: Mon, 06 Jun 2022 13:32:52 GMT
X-Reqid: 205024922427321020220621162223rybyTXGx
Age: 54637
Via: 1.1 PSygldLON2ii12:8 (W), 1.1 PSygldLON2kt55:5 (W)
X-Px: ht PSygldLON2kt55LHR
X-Ws-Request-Id: 6507fac4_PSygldLON2hl59_28778-44464
|
|
| static.cdn.co.no/videos/cl/gg/c33/img/opt6.jpg | 163.171.129.207 | 200 OK | 18 kB |
URL GET HTTP/1.1static.cdn.co.no/videos/cl/gg/c33/img/opt6.jpg IP163.171.129.207:443 ASN#54994 QUANTILNETWORKS
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n/ CertificateIssuerLet's Encrypt Subjectstatic.cdn.co.no Fingerprint43:41:07:76:E5:7A:2F:C3:49:81:23:6C:BA:15:34:A6:9E:87:21:B6 ValidityFri, 01 Sep 2023 15:15:14 GMT - Thu, 30 Nov 2023 15:15:13 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 200x350, components 3\012- data Hashb433430b081bdcc07a3d23a83dbf244a 4a61211258e294b9a5866cbd3aeb5bdb5ef138d6 a315648b07c9782746eac460c4af0bad1eebc9d3f2dea54daf9fb06e5f98e032
GET /videos/cl/gg/c33/img/opt6.jpg HTTP/1.1
Host: static.cdn.co.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://joinlanders.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 18 Sep 2023 07:22:44 GMT
Content-Type: image/jpeg;charset=UTF-8
Content-Length: 18074
Connection: keep-alive
Server: PWS/8.3.1.0.8
Accept-Ranges: bytes
ETag: "FkphIRJY4pS5pYZsvTrrW9te8TjW"
Last-Modified: Mon, 06 Jun 2022 13:32:52 GMT
X-Reqid: 2050249224272185202306281143042LAhIlCt
Age: 54637
Via: 1.1 kf160:7 (W), 1.1 PSygldLON2kt55:22 (W)
X-Px: ht PSygldLON2kt55LHR
X-Ws-Request-Id: 6507fac4_PSygldLON2hl59_28455-47398
|
|
| static.cdn.co.no/videos/cl/gg/c33/img/anicon51.png | 163.171.129.207 | 200 OK | 4.2 kB |
URL GET HTTP/1.1static.cdn.co.no/videos/cl/gg/c33/img/anicon51.png IP163.171.129.207:443 ASN#54994 QUANTILNETWORKS
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n/ CertificateIssuerLet's Encrypt Subjectstatic.cdn.co.no Fingerprint43:41:07:76:E5:7A:2F:C3:49:81:23:6C:BA:15:34:A6:9E:87:21:B6 ValidityFri, 01 Sep 2023 15:15:14 GMT - Thu, 30 Nov 2023 15:15:13 GMT
File typePNG image data, 100 x 220, 8-bit colormap, non-interlaced\012- data Hash5a4056e2ed2c216f9673c726fbd3e25c 88b8593aa98b8b92b71ba2f6ca51911ea898d8dc 8b7e8e415a6771d669cd461cae53c88cc35912945f0fc3471bc629f78e06c3d4
GET /videos/cl/gg/c33/img/anicon51.png HTTP/1.1
Host: static.cdn.co.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://joinlanders.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 18 Sep 2023 07:22:44 GMT
Content-Type: image/png;charset=UTF-8
Content-Length: 4172
Connection: keep-alive
Server: PWS/8.3.1.0.8
Accept-Ranges: bytes
ETag: "Foi4WTqpi4uStxui9spRkR6omNjc"
Last-Modified: Mon, 06 Jun 2022 13:38:18 GMT
X-Reqid: 20502492242732182022060711042821BZkveR
Age: 54637
Via: 1.1 PSygldLON4ev13:1 (W), 1.1 PSygldLON2hl59:20 (W)
X-Px: ht PSygldLON2hl59LHR
X-Ws-Request-Id: 6507fac4_PSygldLON2hl59_28641-53370
|
|
| static.cdn.co.no/videos/cl/gg/c33/img/opt7.jpg | 163.171.129.207 | 200 OK | 14 kB |
URL GET HTTP/1.1static.cdn.co.no/videos/cl/gg/c33/img/opt7.jpg IP163.171.129.207:443 ASN#54994 QUANTILNETWORKS
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n/ CertificateIssuerLet's Encrypt Subjectstatic.cdn.co.no Fingerprint43:41:07:76:E5:7A:2F:C3:49:81:23:6C:BA:15:34:A6:9E:87:21:B6 ValidityFri, 01 Sep 2023 15:15:14 GMT - Thu, 30 Nov 2023 15:15:13 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 200x350, components 3\012- data Hash2aa59b58e5684684a27be9d286a226cd dbf951e65a6f130ef15c1d51258c7c4d79d67999 e29d9ca8c3071de8baa1471cfa222cd6e8bd9cdac182897e626eb147f832b0c2
GET /videos/cl/gg/c33/img/opt7.jpg HTTP/1.1
Host: static.cdn.co.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://joinlanders.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 18 Sep 2023 07:22:44 GMT
Content-Type: image/jpeg;charset=UTF-8
Content-Length: 13820
Connection: keep-alive
Server: PWS/8.3.1.0.8
Accept-Ranges: bytes
ETag: "Ftv5UeZabxMO8VwdUSWMfE151nmZ"
Last-Modified: Mon, 06 Jun 2022 13:38:12 GMT
X-Reqid: 2050249224273260202206221300287pNRufXp
Age: 54637
Via: 1.1 PSygldLON2xi13:11 (W), 1.1 PSygldLON2hl59:13 (W)
X-Px: ht PSygldLON2hl59LHR
X-Ws-Request-Id: 6507fac4_PSygldLON2hl59_28439-32172
|
|
| static.cdn.co.no/videos/cl/gg/c33/img/opt8.jpg | 163.171.129.207 | 200 OK | 14 kB |
URL GET HTTP/1.1static.cdn.co.no/videos/cl/gg/c33/img/opt8.jpg IP163.171.129.207:443 ASN#54994 QUANTILNETWORKS
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n/ CertificateIssuerLet's Encrypt Subjectstatic.cdn.co.no Fingerprint43:41:07:76:E5:7A:2F:C3:49:81:23:6C:BA:15:34:A6:9E:87:21:B6 ValidityFri, 01 Sep 2023 15:15:14 GMT - Thu, 30 Nov 2023 15:15:13 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 200x350, components 3\012- data Hash4c5dac5837621bdd12b7274f66759acf 7b079ccc0cfd2ce20a31c37049e1cc2e7cf19c0f 56130ff703373ccbad99f95e3859953b551815af708334dbc747081cb00e1cb3
GET /videos/cl/gg/c33/img/opt8.jpg HTTP/1.1
Host: static.cdn.co.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://joinlanders.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 18 Sep 2023 07:22:44 GMT
Content-Type: image/jpeg;charset=UTF-8
Content-Length: 13807
Connection: keep-alive
Server: PWS/8.3.1.0.8
Accept-Ranges: bytes
ETag: "FnsHnMwM_SziCjHDcEnhzC588ZwP"
Last-Modified: Mon, 06 Jun 2022 13:32:52 GMT
X-Reqid: 2050249224273184202206071104292I34ryC6
Age: 54637
Via: 1.1 PSygldLON4ev13:3 (W), 1.1 PSygldLON2hl59:2 (W)
X-Px: ht PSygldLON2hl59LHR
X-Ws-Request-Id: 6507fac4_PSygldLON2hl59_29733-41841
|
|
| static.cdn.co.no/videos/cl/gg/c33/img/opt9.jpg | 163.171.129.207 | 200 OK | 15 kB |
URL GET HTTP/1.1static.cdn.co.no/videos/cl/gg/c33/img/opt9.jpg IP163.171.129.207:443 ASN#54994 QUANTILNETWORKS
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n/ CertificateIssuerLet's Encrypt Subjectstatic.cdn.co.no Fingerprint43:41:07:76:E5:7A:2F:C3:49:81:23:6C:BA:15:34:A6:9E:87:21:B6 ValidityFri, 01 Sep 2023 15:15:14 GMT - Thu, 30 Nov 2023 15:15:13 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 200x350, components 3\012- data Hashebe522233af6db34eb4dd4e7dc87de0f b025b9f02ca72bb06d03f6fbaa4b73271f407103 ac5301cd1ae80c6c5c2cac7f0a06deacd85e38ae586ed84d957f03e5c6d94f83
GET /videos/cl/gg/c33/img/opt9.jpg HTTP/1.1
Host: static.cdn.co.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://joinlanders.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 18 Sep 2023 07:22:44 GMT
Content-Type: image/jpeg;charset=UTF-8
Content-Length: 14809
Connection: keep-alive
Server: PWS/8.3.1.0.8
Accept-Ranges: bytes
ETag: "FrAlufAspyuwbQP2-6pLcycfQHED"
Last-Modified: Mon, 06 Jun 2022 13:32:51 GMT
X-Reqid: 205024922427318520220607110429LIlYVBzc
Age: 54637
Via: 1.1 PSygldLON4ax12:10 (W), 1.1 PSygldLON2kt55:6 (W)
X-Px: ht PSygldLON2kt55LHR
X-Ws-Request-Id: 6507fac4_PSygldLON2hl59_28778-44466
|
|
| static.cdn.co.no/videos/cl/gg/c33/img/opt10.jpg | 163.171.129.207 | 200 OK | 11 kB |
URL GET HTTP/1.1static.cdn.co.no/videos/cl/gg/c33/img/opt10.jpg IP163.171.129.207:443 ASN#54994 QUANTILNETWORKS
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n/ CertificateIssuerLet's Encrypt Subjectstatic.cdn.co.no Fingerprint43:41:07:76:E5:7A:2F:C3:49:81:23:6C:BA:15:34:A6:9E:87:21:B6 ValidityFri, 01 Sep 2023 15:15:14 GMT - Thu, 30 Nov 2023 15:15:13 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 200x350, components 3\012- data Hash4250567c8859a064f270184829de6e1b a495341845b1229b5245fcfdcf7778645106af18 89d11cd10515df1f9016d4b67ffb292f57525cccdb3f48d39f195ef50c18537d
GET /videos/cl/gg/c33/img/opt10.jpg HTTP/1.1
Host: static.cdn.co.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://joinlanders.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 18 Sep 2023 07:22:44 GMT
Content-Type: image/jpeg;charset=UTF-8
Content-Length: 11299
Connection: keep-alive
Server: PWS/8.3.1.0.8
Accept-Ranges: bytes
ETag: "FqSVNBhFsSKbUkX8_c93eGRRBq8Y"
Last-Modified: Mon, 06 Jun 2022 13:32:52 GMT
X-Reqid: 205024922427227320230628202110ZuUczQKq
Age: 54637
Via: 1.1 PSygldLON4ax12:6 (W), 1.1 PSygldLON2kt55:18 (W)
X-Px: ht PSygldLON2kt55LHR
X-Ws-Request-Id: 6507fac4_PSygldLON2hl59_28641-53371
|
|
| static.cdn.co.no/videos/cl/gg/c33/img/anicon61.png | 163.171.129.207 | 200 OK | 4.9 kB |
URL GET HTTP/1.1static.cdn.co.no/videos/cl/gg/c33/img/anicon61.png IP163.171.129.207:443 ASN#54994 QUANTILNETWORKS
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n/ CertificateIssuerLet's Encrypt Subjectstatic.cdn.co.no Fingerprint43:41:07:76:E5:7A:2F:C3:49:81:23:6C:BA:15:34:A6:9E:87:21:B6 ValidityFri, 01 Sep 2023 15:15:14 GMT - Thu, 30 Nov 2023 15:15:13 GMT
File typePNG image data, 100 x 372, 8-bit colormap, non-interlaced\012- data Hash84827dde6c15b340d2d10d115454e7ec d0660e58869559dd2fa87feee244e8662c01a8d8 2877d02c4153a5c2edf32a63d426485b2a43efe5b9dd497a092d263312fdbc0e
GET /videos/cl/gg/c33/img/anicon61.png HTTP/1.1
Host: static.cdn.co.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://joinlanders.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 18 Sep 2023 07:22:44 GMT
Content-Type: image/png;charset=UTF-8
Content-Length: 4909
Connection: keep-alive
Server: PWS/8.3.1.0.8
Accept-Ranges: bytes
ETag: "FtBmDliGlVndL6h_7uJE6GYsAajY"
Last-Modified: Mon, 06 Jun 2022 13:32:51 GMT
X-Reqid: 205024922427326020220622134037KwaIypmw
Age: 54637
Via: 1.1 PSygldLON2ii12:10 (W), 1.1 PS-LHR-01q9k95:2 (W)
X-Px: ht PS-LHR-01q9k95LHR
X-Ws-Request-Id: 6507fac4_PSygldLON2hl59_28455-47400
|
|
| static.cdn.co.no/videos/cl/gg/c33/img/opt11.jpg | 163.171.129.207 | 200 OK | 9.2 kB |
URL GET HTTP/1.1static.cdn.co.no/videos/cl/gg/c33/img/opt11.jpg IP163.171.129.207:443 ASN#54994 QUANTILNETWORKS
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n/ CertificateIssuerLet's Encrypt Subjectstatic.cdn.co.no Fingerprint43:41:07:76:E5:7A:2F:C3:49:81:23:6C:BA:15:34:A6:9E:87:21:B6 ValidityFri, 01 Sep 2023 15:15:14 GMT - Thu, 30 Nov 2023 15:15:13 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 200x350, components 3\012- data Hashfffa35026afb5b0f211c4592ff2ac048 36e17e772cd8aaa8b65aa27694c601f470fc8fac 455675f08098fffc1bd46944b4009a2aa0482f4b7e89433377da3bc5d2be7e44
GET /videos/cl/gg/c33/img/opt11.jpg HTTP/1.1
Host: static.cdn.co.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://joinlanders.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 18 Sep 2023 07:22:44 GMT
Content-Type: image/jpeg;charset=UTF-8
Content-Length: 9197
Connection: keep-alive
Server: PWS/8.3.1.0.8
Accept-Ranges: bytes
ETag: "Fjbhfncs2KqotlqidpTGAfRw_I-s"
Last-Modified: Mon, 06 Jun 2022 13:32:52 GMT
X-Reqid: 205024922427318420230304130216v9KIf5ng
Age: 54637
Via: 1.1 PSygldLON4zd14:4 (W), 1.1 PSygldLON2kt55:22 (W)
X-Px: ht PSygldLON2kt55LHR
X-Ws-Request-Id: 6507fac4_PSygldLON2hl59_28439-32174
|
|
| static.cdn.co.no/videos/cl/gg/c33/media/dsk/bg1.mp4 | 163.171.129.207 | 206 Partial Content | 386 kB |
URL GET HTTP/1.1static.cdn.co.no/videos/cl/gg/c33/media/dsk/bg1.mp4 IP163.171.129.207:443 ASN#54994 QUANTILNETWORKS
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n/ CertificateIssuerLet's Encrypt Subjectstatic.cdn.co.no Fingerprint43:41:07:76:E5:7A:2F:C3:49:81:23:6C:BA:15:34:A6:9E:87:21:B6 ValidityFri, 01 Sep 2023 15:15:14 GMT - Thu, 30 Nov 2023 15:15:13 GMT
File typeISO Media, MP4 v2 [ISO 14496-14]\012- data Size386 kB (386197 bytes) Hash825f31c797072b720fa62de8aafaf042 9fa073a99c1d9f6a660037d89e649bfe1e5b87c5 74b83ceb8124e0a2ed10912a8822e55627c6b67b8b6f1345f0df9ec018be74c1
GET /videos/cl/gg/c33/media/dsk/bg1.mp4 HTTP/1.1
Host: static.cdn.co.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://joinlanders.com/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 206 Partial Content
Date: Mon, 18 Sep 2023 07:22:44 GMT
Content-Type: video/mp4;charset=UTF-8
Content-Length: 386197
Connection: keep-alive
Server: PWS/8.3.1.0.8
Accept-Ranges: bytes
ETag: "Fp-gc6mcHZ9qZgA32J5km_4eW4fF"
Last-Modified: Mon, 06 Jun 2022 13:35:20 GMT
X-Reqid: 205024922427215920230628202110aZ8INKFW
Content-Range: bytes 0-386196/386197
Age: 26626
Via: 1.1 PSygldLON4zd14:8 (W), 1.1 PSygldLON2ew56:0 (W)
X-Px: ht PSygldLON2ew56LHR
X-Ws-Request-Id: 6507fac4_PSygldLON2hl59_28778-44458
|
|
| static.cdn.co.no/videos/cl/gg/c33/img/opt12.jpg | 163.171.129.207 | 200 OK | 11 kB |
URL GET HTTP/1.1static.cdn.co.no/videos/cl/gg/c33/img/opt12.jpg IP163.171.129.207:443 ASN#54994 QUANTILNETWORKS
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n/ CertificateIssuerLet's Encrypt Subjectstatic.cdn.co.no Fingerprint43:41:07:76:E5:7A:2F:C3:49:81:23:6C:BA:15:34:A6:9E:87:21:B6 ValidityFri, 01 Sep 2023 15:15:14 GMT - Thu, 30 Nov 2023 15:15:13 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 200x350, components 3\012- data Hash7fb021a130cd7a33070322da238e3fcd 9e5c733611b3760e5944408b53681cd927a4fee6 d9bebf4ea468b6b1dda630bcf9df05b1f79a26ed1423e4f274500bfce1589a05
GET /videos/cl/gg/c33/img/opt12.jpg HTTP/1.1
Host: static.cdn.co.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://joinlanders.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 18 Sep 2023 07:22:44 GMT
Content-Type: image/jpeg;charset=UTF-8
Content-Length: 11405
Connection: keep-alive
Server: PWS/8.3.1.0.8
Accept-Ranges: bytes
ETag: "Fp5cczYRs3YOWURAi1NoHNknpP7m"
Last-Modified: Mon, 06 Jun 2022 13:32:52 GMT
X-Reqid: 2050249224273272202206071104299YKGhPYS
Age: 54637
Via: 1.1 PSygldLON4ax12:8 (W), 1.1 PSygldLON2hl59:7 (W)
X-Px: ht PSygldLON2hl59LHR
X-Ws-Request-Id: 6507fac4_PSygldLON2hl59_29733-41848
|
|
| static.cdn.co.no/videos/cl/gg/c33/img/trphyP.png | 163.171.129.207 | 200 OK | 9.8 kB |
URL GET HTTP/1.1static.cdn.co.no/videos/cl/gg/c33/img/trphyP.png IP163.171.129.207:443 ASN#54994 QUANTILNETWORKS
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n/ CertificateIssuerLet's Encrypt Subjectstatic.cdn.co.no Fingerprint43:41:07:76:E5:7A:2F:C3:49:81:23:6C:BA:15:34:A6:9E:87:21:B6 ValidityFri, 01 Sep 2023 15:15:14 GMT - Thu, 30 Nov 2023 15:15:13 GMT
File typePNG image data, 100 x 86, 8-bit/color RGBA, non-interlaced\012- data Hash978d3aab8644d6ba5838378ae122cbc3 9c88667d41552a1cc514593750320aecf4506a7d 0c8a5176fcf53a239742e4a01a8472e24c0a1f1e71cd87c670edd6b78c906cf0
GET /videos/cl/gg/c33/img/trphyP.png HTTP/1.1
Host: static.cdn.co.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://joinlanders.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 18 Sep 2023 07:22:44 GMT
Content-Type: image/png;charset=UTF-8
Content-Length: 9791
Connection: keep-alive
Server: PWS/8.3.1.0.8
Accept-Ranges: bytes
ETag: "FpyIZn1BVSocxRRZN1AyCuz0UGp9"
Last-Modified: Mon, 06 Jun 2022 13:32:53 GMT
X-Reqid: 205024922427219620230628201744wErDroFy
Age: 54638
Via: 1.1 PS-FRA-01E6z147:6 (W), 1.1 PS-LHR-01q9k95:17 (W)
X-Px: ht PS-LHR-01q9k95LHR
X-Ws-Request-Id: 6507fac4_PSygldLON2hl59_28778-44470
|
|
| static.cdn.co.no/videos/cl/gg/c33/img/heartP.png | 163.171.129.207 | 200 OK | 10 kB |
URL GET HTTP/1.1static.cdn.co.no/videos/cl/gg/c33/img/heartP.png IP163.171.129.207:443 ASN#54994 QUANTILNETWORKS
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n/ CertificateIssuerLet's Encrypt Subjectstatic.cdn.co.no Fingerprint43:41:07:76:E5:7A:2F:C3:49:81:23:6C:BA:15:34:A6:9E:87:21:B6 ValidityFri, 01 Sep 2023 15:15:14 GMT - Thu, 30 Nov 2023 15:15:13 GMT
File typePNG image data, 100 x 93, 8-bit/color RGBA, non-interlaced\012- data Hash23a94294b0456edd7aa542bf2e04ff85 44ff227f1861da70eaf500922079ce70ebe5af34 a4a3f147e514ab8d0a416d3091b6eed3e0e4e2f1f58010f48c7d74daa47ef583
GET /videos/cl/gg/c33/img/heartP.png HTTP/1.1
Host: static.cdn.co.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://joinlanders.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 18 Sep 2023 07:22:44 GMT
Content-Type: image/png;charset=UTF-8
Content-Length: 10098
Connection: keep-alive
Server: PWS/8.3.1.0.8
Accept-Ranges: bytes
ETag: "FkT_In8YYdpw6vUAkiB5znDr5a80"
Last-Modified: Mon, 06 Jun 2022 13:32:53 GMT
X-Reqid: 2050249224272185202306282021099UELaUoh
Age: 83
Via: 1.1 kf148:7 (W), 1.1 PSygldLON2kt55:9 (W)
X-Px: ht PSygldLON2kt55LHR
X-Ws-Request-Id: 6507fac4_PSygldLON2hl59_28641-53378
|
|
| static.cdn.co.no/videos/cl/gg/c33/img/presentP.png | 163.171.129.207 | 200 OK | 14 kB |
URL GET HTTP/1.1static.cdn.co.no/videos/cl/gg/c33/img/presentP.png IP163.171.129.207:443 ASN#54994 QUANTILNETWORKS
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n/ CertificateIssuerLet's Encrypt Subjectstatic.cdn.co.no Fingerprint43:41:07:76:E5:7A:2F:C3:49:81:23:6C:BA:15:34:A6:9E:87:21:B6 ValidityFri, 01 Sep 2023 15:15:14 GMT - Thu, 30 Nov 2023 15:15:13 GMT
File typePNG image data, 100 x 119, 8-bit/color RGBA, non-interlaced\012- data Hashea5f2eda50addd4f7e9029e4a79587d1 a82950c31fb4860410c82e64141e1fd363f507b4 1a49e789eb676b05f175ebdf00d25209c21d6e07680c14d57a932a01c7ce908f
GET /videos/cl/gg/c33/img/presentP.png HTTP/1.1
Host: static.cdn.co.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://joinlanders.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 18 Sep 2023 07:22:44 GMT
Content-Type: image/png;charset=UTF-8
Content-Length: 13941
Connection: keep-alive
Server: PWS/8.3.1.0.8
Accept-Ranges: bytes
ETag: "FqgpUMMftIYEEMguZBQeH9Nj9Qe0"
Last-Modified: Mon, 06 Jun 2022 13:32:52 GMT
X-Reqid: 2050249224272274202306282017456lItX9FD
Age: 54638
Via: 1.1 PS-FRA-01E6z147:7 (W), 1.1 PS-LHR-01q9k95:3 (W)
X-Px: ht PS-LHR-01q9k95LHR
X-Ws-Request-Id: 6507fac4_PSygldLON2hl59_28455-47405
|
|
| static.cdn.co.no/videos/cl/gg/c33/img/anicon12.png | 163.171.129.207 | 200 OK | 7.1 kB |
URL GET HTTP/1.1static.cdn.co.no/videos/cl/gg/c33/img/anicon12.png IP163.171.129.207:443 ASN#54994 QUANTILNETWORKS
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n/ CertificateIssuerLet's Encrypt Subjectstatic.cdn.co.no Fingerprint43:41:07:76:E5:7A:2F:C3:49:81:23:6C:BA:15:34:A6:9E:87:21:B6 ValidityFri, 01 Sep 2023 15:15:14 GMT - Thu, 30 Nov 2023 15:15:13 GMT
File typePNG image data, 100 x 90, 8-bit/color RGBA, non-interlaced\012- data Hash87522070500d3f423b7b7d83b68bec69 ecd099617093fa92312aeafe10fec5474f5120f3 8d338c95a017b36273e555a6ccbbfbbc22d3396ca438cc01cd1a9452aaac48e8
GET /videos/cl/gg/c33/img/anicon12.png HTTP/1.1
Host: static.cdn.co.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://joinlanders.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 18 Sep 2023 07:22:44 GMT
Content-Type: image/png;charset=UTF-8
Content-Length: 7130
Connection: keep-alive
Server: PWS/8.3.1.0.8
Accept-Ranges: bytes
ETag: "FuzQmWFwk_qSMSrq_hD-xUdPUSDz"
Last-Modified: Mon, 06 Jun 2022 13:32:51 GMT
X-Reqid: 205024922427319620220630143412PPV6VsyV
Age: 54299
Via: 1.1 PSygldLON4ax12:6 (W), 1.1 PSygldLON2kt55:22 (W)
X-Px: ht PSygldLON2kt55LHR
X-Ws-Request-Id: 6507fac4_PSygldLON2hl59_28439-32180
|
|
| static.cdn.co.no/videos/cl/gg/c33/img/anicon14.png | 163.171.129.207 | | 5.7 kB |
URL GET static.cdn.co.no/videos/cl/gg/c33/img/anicon14.png IP163.171.129.207:0 ASN#54994 QUANTILNETWORKS
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n/ CertificateIssuerLet's Encrypt Subjectstatic.cdn.co.no Fingerprint43:41:07:76:E5:7A:2F:C3:49:81:23:6C:BA:15:34:A6:9E:87:21:B6 ValidityFri, 01 Sep 2023 15:15:14 GMT - Thu, 30 Nov 2023 15:15:13 GMT
File typePNG image data, 100 x 90, 8-bit/color RGBA, non-interlaced\012- data Hashb2dc84cf3f27af4ee65f164a71af8b8d 7378e372c605e110f775f8ab093522daefc86214 a69c28cbf1f62f812e3950bc1be053cd6169fc205d885bc4403540fde41bee35
GET /videos/cl/gg/c33/img/anicon14.png HTTP/1.1
Host: static.cdn.co.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://joinlanders.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 18 Sep 2023 07:22:45 GMT
Content-Type: image/png;charset=UTF-8
Content-Length: 5693
Connection: keep-alive
Server: PWS/8.3.1.0.8
Accept-Ranges: bytes
ETag: "FnN443LGBeEQ93X4qwk1ItrvyGIU"
Last-Modified: Mon, 06 Jun 2022 13:32:51 GMT
X-Reqid: 205024922427318420220607105339Es0fwwhp
Age: 49795
Via: 1.1 PSygldLON4ev13:3 (W), 1.1 PS-LHR-01q9k95:19 (W)
X-Px: ht PS-LHR-01q9k95LHR
X-Ws-Request-Id: 6507fac5_PSygldLON2hl59_28439-32211
|
|
| joinlanders.com/src/click33/assets/img/favicon.ico | 163.171.129.207 | 200 OK | 2.5 kB |
URL GET HTTP/2joinlanders.com/src/click33/assets/img/favicon.ico IP163.171.129.207:443 ASN#54994 QUANTILNETWORKS
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n/ CertificateIssuerGlobalSign nv-sa Subject*.joinlanders.com Fingerprint08:E1:3C:E4:1B:71:26:35:DB:14:D7:31:BD:07:43:98:7B:1A:01:F1 ValidityMon, 03 Apr 2023 16:01:30 GMT - Sat, 04 May 2024 16:01:29 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced\012- data Hash7b239aebcb8c6ef4e0c8c00e65d9c22a 6970c7bf1a46a279851ababecb24b08d228512fe 392183aec807df8b373e3fad5e421f43170ed1feb1310534a0116b2ec8c250b5
GET /src/click33/assets/img/favicon.ico HTTP/1.1
Host: joinlanders.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n/
Cookie: ldata=%7B%22program%22%3A%22EPC%22%2C%22propigate_defaults%22%3A%5B%5D%2C%22resolved_inputs%22%3A%7B%22pgm%22%3A%2263%22%2C%22wlid%22%3Anull%2C%22ofid%22%3A%221066%22%2C%22a_aid%22%3A%22epc69623%22%2C%22a_sid%22%3A%2213095u%22%2C%22a_bid%22%3A%22g129%22%7D%2C%22hub_uri%22%3A%22joinfinish.com%22%2C%22iframe_uri%22%3A%22joinfinish.com%5C%2Fsignup%22%2C%22geoip_uri%22%3A%22geoip.joinfinish.com%22%2C%22google_id%22%3A%22%22%2C%22geo_data%22%3A%7B%22city%22%3A%22Dilling%22%2C%22region_code%22%3A%2230%22%2C%22region_name%22%3A%22Viken%22%2C%22country_code%22%3A%22NO%22%2C%22country%22%3A%22Norway%22%2C%22postal_code%22%3A%221570%22%2C%22continent_code%22%3A%22EU%22%2C%22continent%22%3A%22Europe%22%2C%22latitude%22%3A59.3890999999999991132426657713949680328369140625%2C%22longitude%22%3A10.6760000000000001563194018672220408916473388671875%7D%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 18 Sep 2023 07:22:45 GMT
content-type: image/x-icon
content-length: 2476
server: PWS/8.3.1.0.8
last-modified: Thu, 26 May 2022 13:25:54 GMT
etag: "628f7fe2-9ac"
accept-ranges: bytes
age: 52319
via: 1.1 PSygldLON4ax12:2 (W), 1.1 PSygldLON2kt55:14 (W)
x-px: ht PSygldLON2kt55LHR
x-ws-request-id: 6507fac5_PSygldLON2hl59_29496-57464
X-Firefox-Spdy: h2
|
|
| static.cdn.co.no/videos/cl/gg/c33/img/anicon15.png | 163.171.129.207 | 200 OK | 7.2 kB |
URL GET HTTP/1.1static.cdn.co.no/videos/cl/gg/c33/img/anicon15.png IP163.171.129.207:443 ASN#54994 QUANTILNETWORKS
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n/ CertificateIssuerLet's Encrypt Subjectstatic.cdn.co.no Fingerprint43:41:07:76:E5:7A:2F:C3:49:81:23:6C:BA:15:34:A6:9E:87:21:B6 ValidityFri, 01 Sep 2023 15:15:14 GMT - Thu, 30 Nov 2023 15:15:13 GMT
File typePNG image data, 100 x 90, 8-bit/color RGBA, non-interlaced\012- data Hash38bd12556f2ab4ffb4f9858525ec0968 40567e2065ab0dde36254ce187a4e3a77fc6d095 e286a52d2cb506a042a6183bb37ee354d119b30fb3d2c33130c15837fc9ec815
GET /videos/cl/gg/c33/img/anicon15.png HTTP/1.1
Host: static.cdn.co.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://joinlanders.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 18 Sep 2023 07:22:45 GMT
Content-Type: image/png;charset=UTF-8
Content-Length: 7156
Connection: keep-alive
Server: PWS/8.3.1.0.8
Accept-Ranges: bytes
ETag: "FkBWfiBlqw3eNiVM4Yek46d_xtCV"
Last-Modified: Mon, 06 Jun 2022 13:32:51 GMT
X-Reqid: 205024922427327320220607102357EJRDmR4V
Age: 43957
Via: 1.1 PSygldLON2mb11:8 (W), 1.1 PS-LHR-01q9k95:12 (W)
X-Px: ht PS-LHR-01q9k95LHR
X-Ws-Request-Id: 6507fac5_PSygldLON2hl59_28439-32216
|
|
| joinfinish.com/signup/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n%2F&lang=en | 207.120.33.41 | 302 Found | 0 B |
URL GET HTTP/2joinfinish.com/signup/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n%2F&lang=en IP207.120.33.41:443
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n/ CertificateIssuerLet's Encrypt Subjectjoinfinish.com Fingerprint0F:9B:F7:AC:5D:0E:B6:22:35:6D:F6:17:3D:7D:4F:F5:3D:43:7D:AA ValidityWed, 06 Sep 2023 04:44:01 GMT - Tue, 05 Dec 2023 04:44:00 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /signup/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n%2F&lang=en HTTP/1.1
Host: joinfinish.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://joinlanders.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Mon, 18 Sep 2023 07:22:45 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: https://plyhnf.com/42a5a13384880805/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n%2F&lang=en&epcCID=K7J5U1I6B8icU0S99ce1W0fce3s498B75&rtid=42351103793
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: PHPSESSID=7743886e3622a76e85b0f23b66ff4e72; path=/; secure; SameSite=None
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
x-varnish: 5427922
age: 0
via: 1.1 varnish-65c66bdb8c-bcwfl (Varnish/7.2)
section-io-cache: Miss
section-io-id: 9d48f4ade6a473dbdd64a1963af175bd
X-Firefox-Spdy: h2
|
|
| static.cdn.co.no/videos/cl/gg/c33/img/anicon12.png | 163.171.129.207 | 200 OK | 7.1 kB |
URL GET HTTP/1.1static.cdn.co.no/videos/cl/gg/c33/img/anicon12.png IP163.171.129.207:443 ASN#54994 QUANTILNETWORKS
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n/ CertificateIssuerLet's Encrypt Subjectstatic.cdn.co.no Fingerprint43:41:07:76:E5:7A:2F:C3:49:81:23:6C:BA:15:34:A6:9E:87:21:B6 ValidityFri, 01 Sep 2023 15:15:14 GMT - Thu, 30 Nov 2023 15:15:13 GMT
File typePNG image data, 100 x 90, 8-bit/color RGBA, non-interlaced\012- data Hash87522070500d3f423b7b7d83b68bec69 ecd099617093fa92312aeafe10fec5474f5120f3 8d338c95a017b36273e555a6ccbbfbbc22d3396ca438cc01cd1a9452aaac48e8
GET /videos/cl/gg/c33/img/anicon12.png HTTP/1.1
Host: static.cdn.co.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://joinlanders.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 18 Sep 2023 07:22:45 GMT
Content-Type: image/png;charset=UTF-8
Content-Length: 7130
Connection: keep-alive
Server: PWS/8.3.1.0.8
Accept-Ranges: bytes
ETag: "FuzQmWFwk_qSMSrq_hD-xUdPUSDz"
Last-Modified: Mon, 06 Jun 2022 13:32:51 GMT
X-Reqid: 205024922427319620220630143412PPV6VsyV
Age: 54300
Via: 1.1 PSygldLON4ax12:6 (W), 1.1 PSygldLON2kt55:22 (W)
X-Px: ht PSygldLON2kt55LHR
X-Ws-Request-Id: 6507fac5_PSygldLON2hl59_28439-32233
|
|
| static.cdn.co.no/videos/cl/gg/c33/img/anicon13.png | 163.171.129.207 | 200 OK | 5.7 kB |
URL GET HTTP/1.1static.cdn.co.no/videos/cl/gg/c33/img/anicon13.png IP163.171.129.207:443 ASN#54994 QUANTILNETWORKS
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n/ CertificateIssuerLet's Encrypt Subjectstatic.cdn.co.no Fingerprint43:41:07:76:E5:7A:2F:C3:49:81:23:6C:BA:15:34:A6:9E:87:21:B6 ValidityFri, 01 Sep 2023 15:15:14 GMT - Thu, 30 Nov 2023 15:15:13 GMT
File typePNG image data, 100 x 90, 8-bit/color RGBA, non-interlaced\012- data Hash4b45c0dd171a7320bf474c973b753827 f187288905e610d5f07d5a9b2ccb79f145157154 02f6a7c9d11a94dbda745e17d7500cf324e2a82a68621ed404d4a1b848dbbd00
GET /videos/cl/gg/c33/img/anicon13.png HTTP/1.1
Host: static.cdn.co.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://joinlanders.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 18 Sep 2023 07:22:45 GMT
Content-Type: image/png;charset=UTF-8
Content-Length: 5696
Connection: keep-alive
Server: PWS/8.3.1.0.8
Accept-Ranges: bytes
ETag: "FvGHKIkF5hDV8H1amyzLefFFFXFU"
Last-Modified: Mon, 06 Jun 2022 13:32:51 GMT
X-Reqid: 205024922427326020220607222331GVYRuotN
Age: 52135
Via: 1.1 PSygldLON2xi13:0 (W), 1.1 PS-LHR-01q9k95:18 (W)
X-Px: ht PS-LHR-01q9k95LHR
X-Ws-Request-Id: 6507fac5_PSygldLON2hl59_28439-32238
|
|
| static.cdn.co.no/videos/cl/gg/c33/img/anicon14.png | 163.171.129.207 | | 5.7 kB |
URL GET static.cdn.co.no/videos/cl/gg/c33/img/anicon14.png IP163.171.129.207:0 ASN#54994 QUANTILNETWORKS
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n/ CertificateIssuerLet's Encrypt Subjectstatic.cdn.co.no Fingerprint43:41:07:76:E5:7A:2F:C3:49:81:23:6C:BA:15:34:A6:9E:87:21:B6 ValidityFri, 01 Sep 2023 15:15:14 GMT - Thu, 30 Nov 2023 15:15:13 GMT
File typePNG image data, 100 x 90, 8-bit/color RGBA, non-interlaced\012- data Hashb2dc84cf3f27af4ee65f164a71af8b8d 7378e372c605e110f775f8ab093522daefc86214 a69c28cbf1f62f812e3950bc1be053cd6169fc205d885bc4403540fde41bee35
GET /videos/cl/gg/c33/img/anicon14.png HTTP/1.1
Host: static.cdn.co.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://joinlanders.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 18 Sep 2023 07:22:45 GMT
Content-Type: image/png;charset=UTF-8
Content-Length: 5693
Connection: keep-alive
Server: PWS/8.3.1.0.8
Accept-Ranges: bytes
ETag: "FnN443LGBeEQ93X4qwk1ItrvyGIU"
Last-Modified: Mon, 06 Jun 2022 13:32:51 GMT
X-Reqid: 205024922427318420220607105339Es0fwwhp
Age: 49795
Via: 1.1 PSygldLON4ev13:3 (W), 1.1 PS-LHR-01q9k95:19 (W)
X-Px: ht PS-LHR-01q9k95LHR
X-Ws-Request-Id: 6507fac5_PSygldLON2hl59_28439-32250
|
|
| ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js | 142.250.74.170 | 200 OK | 31 kB |
URL GET HTTP/2ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js IP142.250.74.170:443
Requested byhttps://plyhnf.com/42a5a13384880805/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n%2F&lang=en&epcCID=K7J5U1I6B8icU0S99ce1W0fce3s498B75&rtid=42351103793 CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint09:AB:BF:F5:D0:04:69:59:E1:EA:AC:DA:8B:68:CF:62:94:2E:50:38 ValidityMon, 14 Aug 2023 08:22:09 GMT - Mon, 06 Nov 2023 08:22:08 GMT
File typeASCII text, with very long lines (65451) Hash220afd743d9e9643852e31a135a9f3ae 88523924351bac0b5d560fe0c5781e2556e7693d 0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a
GET /ajax/libs/jquery/3.4.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://plyhnf.com
DNT: 1
Connection: keep-alive
Referer: https://plyhnf.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30774
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 16 Sep 2023 00:56:25 GMT
expires: Sun, 15 Sep 2024 00:56:25 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 195981
last-modified: Mon, 13 May 2019 14:37:17 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ajax.aspnetcdn.com/ajax/bootstrap/3.3.7/bootstrap.min.js | 152.199.19.160 | 200 OK | 9.8 kB |
URL GET HTTP/2ajax.aspnetcdn.com/ajax/bootstrap/3.3.7/bootstrap.min.js IP152.199.19.160:443
Requested byhttps://plyhnf.com/42a5a13384880805/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n%2F&lang=en&epcCID=K7J5U1I6B8icU0S99ce1W0fce3s498B75&rtid=42351103793 CertificateIssuerDigiCert Inc Subject*.vo.msecnd.net Fingerprint0E:7D:A8:CD:FE:61:1E:46:97:A3:57:99:70:DA:E0:59:1D:34:04:80 ValidityFri, 05 May 2023 00:00:00 GMT - Sun, 28 Apr 2024 23:59:59 GMT
File typeASCII text, with very long lines (32033) Hash5869c96cc8f19086aee625d670d741f9 430a443d74830fe9be26efca431f448c1b3740f9 53964478a7c634e8dad34ecc303dd8048d00dce4993906de1bacf67f663486ef
GET /ajax/bootstrap/3.3.7/bootstrap.min.js HTTP/1.1
Host: ajax.aspnetcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://plyhnf.com
DNT: 1
Connection: keep-alive
Referer: https://plyhnf.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
age: 5118299
cache-control: public,max-age=31536000
content-type: application/javascript
date: Mon, 18 Sep 2023 07:22:46 GMT
etag: "80bdc1e6cb33d21:0"
last-modified: Mon, 31 Oct 2016 23:09:59 GMT
server: ECAcc (ska/F6C5)
timing-allow-origin: *
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 9839
X-Firefox-Spdy: h2
|
|
| ajax.aspnetcdn.com/ajax/bootstrap/3.3.7/css/bootstrap.min.css | 152.199.19.160 | 200 OK | 20 kB |
URL GET HTTP/2ajax.aspnetcdn.com/ajax/bootstrap/3.3.7/css/bootstrap.min.css IP152.199.19.160:443
Requested byhttps://plyhnf.com/42a5a13384880805/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n%2F&lang=en&epcCID=K7J5U1I6B8icU0S99ce1W0fce3s498B75&rtid=42351103793 CertificateIssuerDigiCert Inc Subject*.vo.msecnd.net Fingerprint0E:7D:A8:CD:FE:61:1E:46:97:A3:57:99:70:DA:E0:59:1D:34:04:80 ValidityFri, 05 May 2023 00:00:00 GMT - Sun, 28 Apr 2024 23:59:59 GMT
File typeASCII text, with very long lines (65371) Hashec3bb52a00e176a7181d454dffaea219 6527d8bf3e1e9368bab8c7b60f56bc01fa3afd68 f75e846cc83bd11432f4b1e21a45f31bc85283d11d372f7b19accd1bf6a2635c
GET /ajax/bootstrap/3.3.7/css/bootstrap.min.css HTTP/1.1
Host: ajax.aspnetcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://plyhnf.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
age: 14208447
cache-control: public,max-age=31536000
content-type: text/css
date: Mon, 18 Sep 2023 07:22:46 GMT
etag: "0e914f2cb33d21:0"
last-modified: Mon, 31 Oct 2016 23:10:18 GMT
server: ECAcc (ska/F740)
timing-allow-origin: *
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 19629
X-Firefox-Spdy: h2
|
|
| plyhnf.com/common_tpls/compactML/css/epc33g59.css | 207.120.33.12 | 200 OK | 8.0 kB |
URL GET HTTP/2plyhnf.com/common_tpls/compactML/css/epc33g59.css IP207.120.33.12:443
Requested byhttps://plyhnf.com/42a5a13384880805/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n%2F&lang=en&epcCID=K7J5U1I6B8icU0S99ce1W0fce3s498B75&rtid=42351103793 CertificateIssuerLet's Encrypt Subjectplyhnf.com Fingerprint5B:99:7F:18:75:D6:11:C4:11:CC:CC:C8:20:6C:D3:51:D8:2F:3C:53 ValidityWed, 06 Sep 2023 04:32:00 GMT - Tue, 05 Dec 2023 04:31:59 GMT
File typeASCII text, with very long lines (45538), with no line terminators Hash6c9e7dbd3982323bdfbd7f1d809a0e4b de13256228fd8b62ae8feb182ec79240595adbc4 e48d1cb2b886875113187447c0e8747c2447d74e14cc2a1175efc5887b866c98
GET /common_tpls/compactML/css/epc33g59.css HTTP/1.1
Host: plyhnf.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://plyhnf.com/42a5a13384880805/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n%2F&lang=en&epcCID=K7J5U1I6B8icU0S99ce1W0fce3s498B75&rtid=42351103793
Cookie: PHPSESSID=534fbffab018749b0eede666d0f6b577
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 18 Sep 2023 07:22:46 GMT
content-type: text/css
content-length: 7957
last-modified: Wed, 25 May 2022 14:22:28 GMT
etag: W/"628e3ba4-b1e2"
content-encoding: gzip
section-io-cache-id: 48c2e45746e7c70f9ce6952a5e92ddd8
vary: Accept-Encoding
x-varnish: 5173344 3146158
age: 553
via: 1.1 varnish-65c66bdb8c-bcwfl (Varnish/7.2)
accept-ranges: bytes
section-io-cache: Hit
section-io-id: d526850623711395ed72315e6c8a6f9d
X-Firefox-Spdy: h2
|
|
| plyhnf.com/common_tpls/images/icons/email.png | 207.120.33.12 | 200 OK | 1.3 kB |
URL GET HTTP/2plyhnf.com/common_tpls/images/icons/email.png IP207.120.33.12:443
Requested byhttps://plyhnf.com/42a5a13384880805/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n%2F&lang=en&epcCID=K7J5U1I6B8icU0S99ce1W0fce3s498B75&rtid=42351103793 CertificateIssuerLet's Encrypt Subjectplyhnf.com Fingerprint5B:99:7F:18:75:D6:11:C4:11:CC:CC:C8:20:6C:D3:51:D8:2F:3C:53 ValidityWed, 06 Sep 2023 04:32:00 GMT - Tue, 05 Dec 2023 04:31:59 GMT
File typePNG image data, 26 x 26, 8-bit/color RGB, non-interlaced\012- data Hasha86d99b9176d82a211cfa29b2f0b353f 62947ddfd87e3a21869818885e4bfa4e55ad0c11 f8e82194c97e2a11a8c77fcd55d1ded51a1943b78eefac8475890f665dc620f1
GET /common_tpls/images/icons/email.png HTTP/1.1
Host: plyhnf.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://plyhnf.com/42a5a13384880805/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n%2F&lang=en&epcCID=K7J5U1I6B8icU0S99ce1W0fce3s498B75&rtid=42351103793
Cookie: PHPSESSID=534fbffab018749b0eede666d0f6b577
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 18 Sep 2023 07:22:46 GMT
content-type: image/png
content-length: 1254
last-modified: Mon, 21 Aug 2017 19:32:05 GMT
etag: "599b3535-4e6"
section-io-cache-id: 8114504e873100d3d01e816653a960f7
x-varnish: 2386840 1798120
age: 7492
via: 1.1 varnish-65c66bdb8c-bcwfl (Varnish/7.2)
accept-ranges: bytes
section-io-cache: Hit
section-io-id: 926c367989c144915f307966810f3095
X-Firefox-Spdy: h2
|
|
| plyhnf.com/common_tpls/images/icons/fname.png | 207.120.33.12 | 200 OK | 1.6 kB |
URL GET HTTP/2plyhnf.com/common_tpls/images/icons/fname.png IP207.120.33.12:443
Requested byhttps://plyhnf.com/42a5a13384880805/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n%2F&lang=en&epcCID=K7J5U1I6B8icU0S99ce1W0fce3s498B75&rtid=42351103793 CertificateIssuerLet's Encrypt Subjectplyhnf.com Fingerprint5B:99:7F:18:75:D6:11:C4:11:CC:CC:C8:20:6C:D3:51:D8:2F:3C:53 ValidityWed, 06 Sep 2023 04:32:00 GMT - Tue, 05 Dec 2023 04:31:59 GMT
File typePNG image data, 26 x 26, 8-bit/color RGBA, non-interlaced\012- data Hash5c846870756544f39604e671d4111b9d 304938c74246e228fa82d8ca40201c3db6098074 d43abf8c5665519a3fe3f7e90298fc17b62e06d8ada1b90a44ea9985a62abb4d
GET /common_tpls/images/icons/fname.png HTTP/1.1
Host: plyhnf.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://plyhnf.com/42a5a13384880805/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n%2F&lang=en&epcCID=K7J5U1I6B8icU0S99ce1W0fce3s498B75&rtid=42351103793
Cookie: PHPSESSID=534fbffab018749b0eede666d0f6b577
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 18 Sep 2023 07:22:46 GMT
content-type: image/png
content-length: 1649
last-modified: Tue, 28 Nov 2017 20:52:02 GMT
etag: "5a1dcc72-671"
section-io-cache-id: 0ab16033c1d2f7256586794dbff7923a
x-varnish: 2386841 3039880
age: 7509
via: 1.1 varnish-65c66bdb8c-bcwfl (Varnish/7.2)
accept-ranges: bytes
section-io-cache: Hit
section-io-id: 6840de0ed64aa4389d0e64bd16c6c4d0
X-Firefox-Spdy: h2
|
|
| plyhnf.com/common_tpls/images/icons/password.png | 207.120.33.12 | 200 OK | 1.5 kB |
URL GET HTTP/2plyhnf.com/common_tpls/images/icons/password.png IP207.120.33.12:443
Requested byhttps://plyhnf.com/42a5a13384880805/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n%2F&lang=en&epcCID=K7J5U1I6B8icU0S99ce1W0fce3s498B75&rtid=42351103793 CertificateIssuerLet's Encrypt Subjectplyhnf.com Fingerprint5B:99:7F:18:75:D6:11:C4:11:CC:CC:C8:20:6C:D3:51:D8:2F:3C:53 ValidityWed, 06 Sep 2023 04:32:00 GMT - Tue, 05 Dec 2023 04:31:59 GMT
File typePNG image data, 26 x 26, 8-bit/color RGB, non-interlaced\012- data Hash6f100f1cdbdce928118ffa4c9293ca5b 6b1a3593e792d4c00187d60560dd03fb42df1156 8c1a6b9e0c63edc7fa86898148dc6493cd56113fabbf85d901f7af4c180fce74
GET /common_tpls/images/icons/password.png HTTP/1.1
Host: plyhnf.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://plyhnf.com/42a5a13384880805/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n%2F&lang=en&epcCID=K7J5U1I6B8icU0S99ce1W0fce3s498B75&rtid=42351103793
Cookie: PHPSESSID=534fbffab018749b0eede666d0f6b577
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 18 Sep 2023 07:22:46 GMT
content-type: image/png
content-length: 1452
last-modified: Tue, 22 Aug 2017 16:34:59 GMT
etag: "599c5d33-5ac"
section-io-cache-id: 7a441c8042ebd0fce9f87b2a5a562f49
x-varnish: 5173346 3040356
age: 7265
via: 1.1 varnish-65c66bdb8c-bcwfl (Varnish/7.2)
accept-ranges: bytes
section-io-cache: Hit
section-io-id: e3690e52135d6d1092a98d719f7e11b2
X-Firefox-Spdy: h2
|
|
| plyhnf.com/common_tpls/images/icons/address.png | 207.120.33.12 | 200 OK | 1.2 kB |
URL GET HTTP/2plyhnf.com/common_tpls/images/icons/address.png IP207.120.33.12:443
Requested byhttps://plyhnf.com/42a5a13384880805/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n%2F&lang=en&epcCID=K7J5U1I6B8icU0S99ce1W0fce3s498B75&rtid=42351103793 CertificateIssuerLet's Encrypt Subjectplyhnf.com Fingerprint5B:99:7F:18:75:D6:11:C4:11:CC:CC:C8:20:6C:D3:51:D8:2F:3C:53 ValidityWed, 06 Sep 2023 04:32:00 GMT - Tue, 05 Dec 2023 04:31:59 GMT
File typePNG image data, 26 x 26, 8-bit/color RGB, non-interlaced\012- data Hashb579e9868402d708e54e1a980166c444 1c58e2890b934c0b1ab057f3ac28bedd2a082d19 67756f8b542c7823bcdba421219c3b8e1ee472748d8c3463534f667271356dfb
GET /common_tpls/images/icons/address.png HTTP/1.1
Host: plyhnf.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://plyhnf.com/42a5a13384880805/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n%2F&lang=en&epcCID=K7J5U1I6B8icU0S99ce1W0fce3s498B75&rtid=42351103793
Cookie: PHPSESSID=534fbffab018749b0eede666d0f6b577
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 18 Sep 2023 07:22:46 GMT
content-type: image/png
content-length: 1167
last-modified: Mon, 21 Aug 2017 19:32:05 GMT
etag: "599b3535-48f"
section-io-cache-id: abfb2a5ccb38c260c96cd041f0b5025c
x-varnish: 5869955 3501201
age: 7321
via: 1.1 varnish-65c66bdb8c-bcwfl (Varnish/7.2)
accept-ranges: bytes
section-io-cache: Hit
section-io-id: 7ee45247c074fe049d2cc75bc7961289
X-Firefox-Spdy: h2
|
|
| kit.fontawesome.com/b314bdf1b3/110588222/kit-upload.css |  104.18.23.52 | 200 OK | 0 B |
URL GET HTTP/2kit.fontawesome.com/b314bdf1b3/110588222/kit-upload.css IP104.18.23.52:443
Requested byhttps://plyhnf.com/42a5a13384880805/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n%2F&lang=en&epcCID=K7J5U1I6B8icU0S99ce1W0fce3s498B75&rtid=42351103793 CertificateIssuerDigiCert Inc Subject*.fontawesome.com Fingerprint6C:69:02:A7:9B:07:84:8E:D0:3D:0A:10:61:8E:01:80:88:37:EF:5E ValidityTue, 22 Nov 2022 00:00:00 GMT - Sat, 23 Dec 2023 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /b314bdf1b3/110588222/kit-upload.css HTTP/1.1
Host: kit.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://plyhnf.com/
Origin: https://plyhnf.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 18 Sep 2023 07:22:46 GMT
content-type: text/css
content-length: 0
access-control-allow-headers: accept, accept-langauge, content-language, content-type, fa-kit-token
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 3000
cache-control: max-age=31556926, public, must-revalidate
etag: 54af53b207eef226d6511e0a88e3038e
strict-transport-security: max-age=31536000; preload
vary: origin, accept-encoding, access-control-request-headers, access-control-request-method
x-request-id: F2SkLKTwHTowkxUe_dri
cf-cache-status: HIT
age: 1535577
accept-ranges: bytes
server: cloudflare
cf-ray: 8087d6fa497f1c0e-OSL
X-Firefox-Spdy: h2
|
|
| plyhnf.com/common_tpls/js/form_support.js?v=1101202201 | 207.120.33.12 | 200 OK | 5.6 kB |
URL GET HTTP/2plyhnf.com/common_tpls/js/form_support.js?v=1101202201 IP207.120.33.12:443
Requested byhttps://plyhnf.com/42a5a13384880805/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n%2F&lang=en&epcCID=K7J5U1I6B8icU0S99ce1W0fce3s498B75&rtid=42351103793 CertificateIssuerLet's Encrypt Subjectplyhnf.com Fingerprint5B:99:7F:18:75:D6:11:C4:11:CC:CC:C8:20:6C:D3:51:D8:2F:3C:53 ValidityWed, 06 Sep 2023 04:32:00 GMT - Tue, 05 Dec 2023 04:31:59 GMT
File typeASCII text, with very long lines (26366) Hashb99742a3b31ed83eb6e5beb6f7e36eef 379c9b4d4286b0ffb36dfc4108535a10cc7fad91 286e9054c22dc4de0b7d54e53a7578fb82ea150096537d2e3c7f9c769d5facbe
GET /common_tpls/js/form_support.js?v=1101202201 HTTP/1.1
Host: plyhnf.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://plyhnf.com/42a5a13384880805/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n%2F&lang=en&epcCID=K7J5U1I6B8icU0S99ce1W0fce3s498B75&rtid=42351103793
Cookie: PHPSESSID=534fbffab018749b0eede666d0f6b577
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 18 Sep 2023 07:22:46 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Fri, 18 Nov 2022 21:23:38 GMT
etag: W/"6377f7da-ed7"
section-io-cache-id: ecb47dc595d877d9dfa8d8168a62fcd2
x-varnish: 2386839 5420489
age: 7536
via: 1.1 varnish-65c66bdb8c-bcwfl (Varnish/7.2)
section-io-cache: Hit
content-encoding: gzip
section-io-id: 870f46c469c737d4a0f5070af2f42146
X-Firefox-Spdy: h2
|
|
| ka-p.fontawesome.com/releases/v5.15.4/css/pro-v4-font-face.min.css?token=b314bdf1b3 | 104.18.23.52 | 200 OK | 2.6 kB |
URL GET HTTP/2ka-p.fontawesome.com/releases/v5.15.4/css/pro-v4-font-face.min.css?token=b314bdf1b3 IP104.18.23.52:443
Requested byhttps://plyhnf.com/42a5a13384880805/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n%2F&lang=en&epcCID=K7J5U1I6B8icU0S99ce1W0fce3s498B75&rtid=42351103793 CertificateIssuerDigiCert Inc Subject*.fontawesome.com Fingerprint6C:69:02:A7:9B:07:84:8E:D0:3D:0A:10:61:8E:01:80:88:37:EF:5E ValidityTue, 22 Nov 2022 00:00:00 GMT - Sat, 23 Dec 2023 23:59:59 GMT
File typeASCII text, with very long lines (27832) Hash1cb05a2f9541200e1fa0a2cd0abc7663 fdf3292a6db22945eb79e08d847834205b749c6f a8a00b576cc9fad532a52ecdf8024724ddaa83cb0f5ca5d1b1d6eb8841103d60
GET /releases/v5.15.4/css/pro-v4-font-face.min.css?token=b314bdf1b3 HTTP/1.1
Host: ka-p.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://plyhnf.com/
Origin: https://plyhnf.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 18 Sep 2023 07:22:46 GMT
content-type: text/css
content-length: 2603
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
etag: "610ae215-a2b"
last-modified: Wed, 04 Aug 2021 18:53:09 GMT
vary: Origin, Accept-Encoding, Access-Control-Request-Headers, Access-Control-Request-Method
cf-cache-status: HIT
age: 1535577
accept-ranges: bytes
server: cloudflare
cf-ray: 8087d6fa799c1c0e-OSL
X-Firefox-Spdy: h2
|
|
| ka-p.fontawesome.com/releases/v5.15.4/css/pro.min.css?token=b314bdf1b3 | 104.18.23.52 | 200 OK | 54 kB |
URL GET HTTP/2ka-p.fontawesome.com/releases/v5.15.4/css/pro.min.css?token=b314bdf1b3 IP104.18.23.52:443
Requested byhttps://plyhnf.com/42a5a13384880805/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n%2F&lang=en&epcCID=K7J5U1I6B8icU0S99ce1W0fce3s498B75&rtid=42351103793 CertificateIssuerDigiCert Inc Subject*.fontawesome.com Fingerprint6C:69:02:A7:9B:07:84:8E:D0:3D:0A:10:61:8E:01:80:88:37:EF:5E ValidityTue, 22 Nov 2022 00:00:00 GMT - Sat, 23 Dec 2023 23:59:59 GMT
File typeASCII text, with very long lines (65397) Hash486b13730aafe2a39cdaf1666679fa5b aa0f52f048688ada20d921fef78cf15684a25f04 37c65071f378cc9582aabdda3b52979ef901f2925e3f3c3dc597f41eac0f1b6d
GET /releases/v5.15.4/css/pro.min.css?token=b314bdf1b3 HTTP/1.1
Host: ka-p.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://plyhnf.com/
Origin: https://plyhnf.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 18 Sep 2023 07:22:46 GMT
content-type: text/css
content-length: 54194
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
etag: "610ae215-d3b2"
last-modified: Wed, 04 Aug 2021 18:53:09 GMT
vary: Origin, Accept-Encoding, Access-Control-Request-Headers, Access-Control-Request-Method
cf-cache-status: HIT
age: 1535577
accept-ranges: bytes
server: cloudflare
cf-ray: 8087d6fa799a1c0e-OSL
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2 | 216.58.211.3 | 200 OK | 7.9 kB |
URL GET HTTP/2fonts.gstatic.com/s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2 IP216.58.211.3:443
Requested byhttps://plyhnf.com/42a5a13384880805/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n%2F&lang=en&epcCID=K7J5U1I6B8icU0S99ce1W0fce3s498B75&rtid=42351103793 CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintAB:14:67:80:B6:91:41:34:54:E4:AE:2E:71:65:B4:8E:65:B2:D2:2D ValidityMon, 14 Aug 2023 08:22:45 GMT - Mon, 06 Nov 2023 08:22:44 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 7884, version 1.0\012- data Hash9212f6f9860f9fc6c69b02fedf6db8c3 ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b 7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f
GET /s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://plyhnf.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7884
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 14 Sep 2023 15:18:26 GMT
expires: Fri, 13 Sep 2024 15:18:26 GMT
cache-control: public, max-age=31536000
age: 317060
last-modified: Wed, 27 Apr 2022 17:03:52 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2 | 216.58.211.3 | 200 OK | 7.8 kB |
URL GET HTTP/2fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2 IP216.58.211.3:443
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintAB:14:67:80:B6:91:41:34:54:E4:AE:2E:71:65:B4:8E:65:B2:D2:2D ValidityMon, 14 Aug 2023 08:22:45 GMT - Mon, 06 Nov 2023 08:22:44 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 7840, version 1.0\012- data Hash8d91ec1ca2d8b56640a47117e313a3e9 a9e9bafe64666f4595051a0e895b47a5fa39e67e 78bc3aa78faec288bbb3bf26c9a0fa4eb67b1e69da94a17233c5cab60525efdb
GET /s/poppins/v20/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://plyhnf.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7840
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 14 Sep 2023 15:08:24 GMT
expires: Fri, 13 Sep 2024 15:08:24 GMT
cache-control: public, max-age=31536000
age: 317662
last-modified: Wed, 27 Apr 2022 16:51:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/anton/v23/1Ptgg87LROyAm0K0.ttf | 216.58.211.3 | 200 OK | 64 kB |
URL GET HTTP/3fonts.gstatic.com/s/anton/v23/1Ptgg87LROyAm0K0.ttf IP216.58.211.3:443
Requested byhttps://plyhnf.com/42a5a13384880805/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n%2F&lang=en&epcCID=K7J5U1I6B8icU0S99ce1W0fce3s498B75&rtid=42351103793 CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintAB:14:67:80:B6:91:41:34:54:E4:AE:2E:71:65:B4:8E:65:B2:D2:2D ValidityMon, 14 Aug 2023 08:22:45 GMT - Mon, 06 Nov 2023 08:22:44 GMT
File typeTrueType Font data, 17 tables, 1st "GDEF", 8 names, Microsoft, language 0x409\012- data Hash8df96e17091a4fd7f9cdfe0ac1a2209e a3651b13ddfd77fc2a203b847ded929c8dae878a 55185f8a21e8cb264156ca6d04b70c78fc68e587d1645e907ce277a1c93fcc88
GET /s/anton/v23/1Ptgg87LROyAm0K0.ttf HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://plyhnf.com
DNT: 1
Connection: keep-alive
Referer: https://plyhnf.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 64227
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 14 Sep 2023 15:19:50 GMT
expires: Fri, 13 Sep 2024 15:19:50 GMT
cache-control: public, max-age=31536000
age: 316976
last-modified: Tue, 19 Apr 2022 19:22:01 GMT
content-type: font/ttf
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| ka-p.fontawesome.com/releases/v5.15.4/webfonts/pro-fa-solid-900-5.0.0.woff2 | 104.18.23.52 | 200 OK | 20 kB |
URL GET HTTP/2ka-p.fontawesome.com/releases/v5.15.4/webfonts/pro-fa-solid-900-5.0.0.woff2 IP104.18.23.52:443
Requested byhttps://plyhnf.com/42a5a13384880805/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n%2F&lang=en&epcCID=K7J5U1I6B8icU0S99ce1W0fce3s498B75&rtid=42351103793 CertificateIssuerDigiCert Inc Subject*.fontawesome.com Fingerprint6C:69:02:A7:9B:07:84:8E:D0:3D:0A:10:61:8E:01:80:88:37:EF:5E ValidityTue, 22 Nov 2022 00:00:00 GMT - Sat, 23 Dec 2023 23:59:59 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 19784, version 331.-31196\012- data Hashc7682b8035fc1d1672d6455631813794 9e2955e5e55b3073e229c218724406425862d4a1 1b50aa1d36ea249991fb44f8f6ad2aa74fe360df9cc04c564b5edf3b053b739c
GET /releases/v5.15.4/webfonts/pro-fa-solid-900-5.0.0.woff2 HTTP/1.1
Host: ka-p.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://plyhnf.com
DNT: 1
Connection: keep-alive
Referer: https://plyhnf.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 18 Sep 2023 07:22:46 GMT
content-type: font/woff2
content-length: 19784
access-control-allow-origin: *
cache-control: max-age=31556926
etag: "610ae35f-4d48"
last-modified: Wed, 04 Aug 2021 18:58:39 GMT
vary: Origin, Accept-Encoding, Access-Control-Request-Headers, Access-Control-Request-Method
cf-cache-status: HIT
age: 1535577
accept-ranges: bytes
server: cloudflare
cf-ray: 8087d6fb9a301c0e-OSL
X-Firefox-Spdy: h2
|
|
| plyhnf.com/acct/trk/?rtid=42351103793 | 207.120.33.12 | 200 OK | 21 B |
URL GET HTTP/2plyhnf.com/acct/trk/?rtid=42351103793 IP207.120.33.12:443
Requested byhttps://plyhnf.com/42a5a13384880805/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n%2F&lang=en&epcCID=K7J5U1I6B8icU0S99ce1W0fce3s498B75&rtid=42351103793 CertificateIssuerLet's Encrypt Subjectplyhnf.com Fingerprint5B:99:7F:18:75:D6:11:C4:11:CC:CC:C8:20:6C:D3:51:D8:2F:3C:53 ValidityWed, 06 Sep 2023 04:32:00 GMT - Tue, 05 Dec 2023 04:31:59 GMT
File typeJSON data\012- , ASCII text, with no line terminators Hashc9fa2fdaa9999cc68a70d013c12bd2c0 e6abfb2581b43628579b765744f945911b3b1e73 5ae12a89cc870fdae39eab6c7d8054f59002ca3c65584dfe89b1427390d0cea2
GET /acct/trk/?rtid=42351103793 HTTP/1.1
Host: plyhnf.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://plyhnf.com/42a5a13384880805/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n%2F&lang=en&epcCID=K7J5U1I6B8icU0S99ce1W0fce3s498B75&rtid=42351103793
Cookie: PHPSESSID=534fbffab018749b0eede666d0f6b577
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 18 Sep 2023 07:22:47 GMT
content-type: text/json;charset=UTF-8
content-length: 21
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
x-varnish: 5965105
age: 0
via: 1.1 varnish-65c66bdb8c-bcwfl (Varnish/7.2)
section-io-cache: Miss
section-io-id: 4a7fcd6040cb687102e285596bfebb18
X-Firefox-Spdy: h2
|
|
| ka-p.fontawesome.com/releases/v5.15.4/css/pro-v4-shims.min.css?token=b314bdf1b3 | 104.18.23.52 | 200 OK | 26 kB |
URL GET HTTP/2ka-p.fontawesome.com/releases/v5.15.4/css/pro-v4-shims.min.css?token=b314bdf1b3 IP104.18.23.52:443
Requested byhttps://plyhnf.com/42a5a13384880805/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n%2F&lang=en&epcCID=K7J5U1I6B8icU0S99ce1W0fce3s498B75&rtid=42351103793 CertificateIssuerDigiCert Inc Subject*.fontawesome.com Fingerprint6C:69:02:A7:9B:07:84:8E:D0:3D:0A:10:61:8E:01:80:88:37:EF:5E ValidityTue, 22 Nov 2022 00:00:00 GMT - Sat, 23 Dec 2023 23:59:59 GMT
File typeASCII text, with very long lines (26366) Hash715826d7cea0f100c00238e5e5dc92b4 ea2a076f73ed3826287a726f35ae5e54136f2cee 4245ecca2a4b50d7fd9adc9a965ed1f9b4ec24e9935e34c80efafc0f856d54c6
GET /releases/v5.15.4/css/pro-v4-shims.min.css?token=b314bdf1b3 HTTP/1.1
Host: ka-p.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://plyhnf.com/
Origin: https://plyhnf.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 18 Sep 2023 07:22:46 GMT
content-type: text/css
content-length: 4194
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
etag: "610ae215-1062"
last-modified: Wed, 04 Aug 2021 18:53:09 GMT
vary: Origin, Accept-Encoding, Access-Control-Request-Headers, Access-Control-Request-Method
cf-cache-status: HIT
age: 1535577
accept-ranges: bytes
server: cloudflare
cf-ray: 8087d6fa799b1c0e-OSL
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css2?family=Poppins:wght@300;400;600&display=swap | 142.250.74.106 | 200 OK | 3.4 kB |
URL GET HTTP/3fonts.googleapis.com/css2?family=Poppins:wght@300;400;600&display=swap IP142.250.74.106:443
Requested byhttps://plyhnf.com/42a5a13384880805/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n%2F&lang=en&epcCID=K7J5U1I6B8icU0S99ce1W0fce3s498B75&rtid=42351103793 CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint09:AB:BF:F5:D0:04:69:59:E1:EA:AC:DA:8B:68:CF:62:94:2E:50:38 ValidityMon, 14 Aug 2023 08:22:09 GMT - Mon, 06 Nov 2023 08:22:08 GMT
File typeASCII text, with very long lines (3432), with no line terminators Hash10120de20c1d2fa917f6e5d5002038b2 30fbcaf43c8d096506490ce94ab8419a59bbb86b fa5ebaea60aa8df1d4bb7f58bf19072c1b7a70879905bb780e640dcb8628d6bc
GET /css2?family=Poppins:wght@300;400;600&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://plyhnf.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 18 Sep 2023 07:22:46 GMT
date: Mon, 18 Sep 2023 07:22:46 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| plyhnf.com/42a5a13384880805/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n%2F&lang=en&epcCID=K7J5U1I6B8icU0S99ce1W0fce3s498B75&rtid=42351103793 | 207.120.33.12 | 200 OK | 30 kB |
URL GET HTTP/2plyhnf.com/42a5a13384880805/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n%2F&lang=en&epcCID=K7J5U1I6B8icU0S99ce1W0fce3s498B75&rtid=42351103793 IP207.120.33.12:443
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n/ CertificateIssuerLet's Encrypt Subjectplyhnf.com Fingerprint5B:99:7F:18:75:D6:11:C4:11:CC:CC:C8:20:6C:D3:51:D8:2F:3C:53 ValidityWed, 06 Sep 2023 04:32:00 GMT - Tue, 05 Dec 2023 04:31:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /42a5a13384880805/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n%2F&lang=en&epcCID=K7J5U1I6B8icU0S99ce1W0fce3s498B75&rtid=42351103793 HTTP/1.1
Host: plyhnf.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://joinlanders.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 18 Sep 2023 07:22:46 GMT
content-type: text/html; charset=UTF-8
set-cookie: PHPSESSID=534fbffab018749b0eede666d0f6b577; path=/; secure; SameSite=None
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
content-encoding: gzip
vary: Accept-Encoding
x-varnish: 1603537
age: 0
via: 1.1 varnish-65c66bdb8c-bcwfl (Varnish/7.2)
accept-ranges: bytes
section-io-cache: Miss
section-io-id: c1352a10c9d65362b92b4cfc07c3ae97
X-Firefox-Spdy: h2
|
|
| plyhnf.com/common_tpls/js/iframeResizer.contentWindow.min.js | 207.120.33.12 | 200 OK | 13 kB |
URL GET HTTP/2plyhnf.com/common_tpls/js/iframeResizer.contentWindow.min.js IP207.120.33.12:443
Requested byhttps://plyhnf.com/42a5a13384880805/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n%2F&lang=en&epcCID=K7J5U1I6B8icU0S99ce1W0fce3s498B75&rtid=42351103793 CertificateIssuerLet's Encrypt Subjectplyhnf.com Fingerprint5B:99:7F:18:75:D6:11:C4:11:CC:CC:C8:20:6C:D3:51:D8:2F:3C:53 ValidityWed, 06 Sep 2023 04:32:00 GMT - Tue, 05 Dec 2023 04:31:59 GMT
File typeASCII text, with very long lines (12990) Hash2cf9df789476bc39b9906030f639660d de708b4a0fe32f3d77505675eb119b671327a6b4 7d5f5d0fe842536e512b4ca0cac0b48a66577ea091f3a6840365ff6124be034b
GET /common_tpls/js/iframeResizer.contentWindow.min.js HTTP/1.1
Host: plyhnf.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://plyhnf.com/42a5a13384880805/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n%2F&lang=en&epcCID=K7J5U1I6B8icU0S99ce1W0fce3s498B75&rtid=42351103793
Cookie: PHPSESSID=534fbffab018749b0eede666d0f6b577
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 18 Sep 2023 07:22:46 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Thu, 04 Feb 2016 15:06:03 GMT
etag: W/"56b368db-3445"
section-io-cache-id: 7de0a607760bc768dc46f80d42e3356a
x-varnish: 2386842 217153
age: 7531
via: 1.1 varnish-65c66bdb8c-bcwfl (Varnish/7.2)
section-io-cache: Hit
content-encoding: gzip
section-io-id: ad6c996edc69a22cc98bf8f8e66c44ed
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/icon?family=Material+Icons | 142.250.74.106 | 200 OK | 565 B |
URL GET HTTP/3fonts.googleapis.com/icon?family=Material+Icons IP142.250.74.106:443
Requested byhttps://plyhnf.com/42a5a13384880805/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n%2F&lang=en&epcCID=K7J5U1I6B8icU0S99ce1W0fce3s498B75&rtid=42351103793 CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint09:AB:BF:F5:D0:04:69:59:E1:EA:AC:DA:8B:68:CF:62:94:2E:50:38 ValidityMon, 14 Aug 2023 08:22:09 GMT - Mon, 06 Nov 2023 08:22:08 GMT
File typeASCII text, with very long lines (588), with no line terminators Hashbdcf60bde5544e1017e1f2e60888a9c7 6fb24309b7ff90c1c99d19c0c7a127a16508840e d701601406acfca6bfc0c58b411446e3e0e96c659f35c143355d3dd72c390952
GET /icon?family=Material+Icons HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://plyhnf.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 18 Sep 2023 07:22:46 GMT
date: Mon, 18 Sep 2023 07:22:46 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| joinlanders.com/src/click33/css/style.css | 163.171.129.207 | 200 OK | 6.2 kB |
URL GET HTTP/2joinlanders.com/src/click33/css/style.css IP163.171.129.207:443 ASN#54994 QUANTILNETWORKS
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n/ CertificateIssuerGlobalSign nv-sa Subject*.joinlanders.com Fingerprint08:E1:3C:E4:1B:71:26:35:DB:14:D7:31:BD:07:43:98:7B:1A:01:F1 ValidityMon, 03 Apr 2023 16:01:30 GMT - Sat, 04 May 2024 16:01:29 GMT
File typeASCII text, with very long lines (6345), with no line terminators Hash052bc7a2b4ca86afb7bf4fa1752d9981 0d37164995a6acbd21d38480a3a30e91b1bb15a1 99bcf860f50db000ba4ecbed95dabc39025702e4854a66b57f6819d7aac68704
GET /src/click33/css/style.css HTTP/1.1
Host: joinlanders.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n/
Cookie: ldata=%7B%22program%22%3A%22EPC%22%2C%22propigate_defaults%22%3A%5B%5D%2C%22resolved_inputs%22%3A%7B%22pgm%22%3A%2263%22%2C%22wlid%22%3Anull%2C%22ofid%22%3A%221066%22%2C%22a_aid%22%3A%22epc69623%22%2C%22a_sid%22%3A%2213095u%22%2C%22a_bid%22%3A%22g129%22%7D%2C%22hub_uri%22%3A%22joinfinish.com%22%2C%22iframe_uri%22%3A%22joinfinish.com%5C%2Fsignup%22%2C%22geoip_uri%22%3A%22geoip.joinfinish.com%22%2C%22google_id%22%3A%22%22%2C%22geo_data%22%3A%7B%22city%22%3A%22Dilling%22%2C%22region_code%22%3A%2230%22%2C%22region_name%22%3A%22Viken%22%2C%22country_code%22%3A%22NO%22%2C%22country%22%3A%22Norway%22%2C%22postal_code%22%3A%221570%22%2C%22continent_code%22%3A%22EU%22%2C%22continent%22%3A%22Europe%22%2C%22latitude%22%3A59.3890999999999991132426657713949680328369140625%2C%22longitude%22%3A10.6760000000000001563194018672220408916473388671875%7D%7D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 18 Sep 2023 07:22:44 GMT
content-type: text/css
content-length: 6219
server: PWS/8.3.1.0.8
last-modified: Wed, 20 Jul 2022 17:57:10 GMT
etag: "62d841f6-184b"
accept-ranges: bytes
age: 52574
via: 1.1 PSygldLON4ev13:8 (W), 1.1 PSygldLON2hl59:3 (W)
x-px: ht PSygldLON2hl59LHR
x-ws-request-id: 6507fac4_PSygldLON2hl59_29496-57356
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css2?family=Anton&family=Poppins:wght@100;200;300&display=swap | 142.250.74.106 | 200 OK | 4.5 kB |
URL GET HTTP/2fonts.googleapis.com/css2?family=Anton&family=Poppins:wght@100;200;300&display=swap IP142.250.74.106:443
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint09:AB:BF:F5:D0:04:69:59:E1:EA:AC:DA:8B:68:CF:62:94:2E:50:38 ValidityMon, 14 Aug 2023 08:22:09 GMT - Mon, 06 Nov 2023 08:22:08 GMT
File typeASCII text, with very long lines (4622), with no line terminators Hash21424f10d94b482fc38e599160d6326a c1821b0f0926aea1f891a30066140da3a09cbd6b 98016bd70e7d5a1405c8b9b18307f2abf51df4aba3939793de1c8bfda4cdc362
GET /css2?family=Anton&family=Poppins:wght@100;200;300&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://joinlanders.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 18 Sep 2023 07:22:44 GMT
date: Mon, 18 Sep 2023 07:22:44 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| kit.fontawesome.com/b314bdf1b3.js | 104.18.23.52 | 200 OK | 12 kB |
URL GET HTTP/2kit.fontawesome.com/b314bdf1b3.js IP104.18.23.52:443
Requested byhttps://plyhnf.com/42a5a13384880805/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n%2F&lang=en&epcCID=K7J5U1I6B8icU0S99ce1W0fce3s498B75&rtid=42351103793 CertificateIssuerDigiCert Inc Subject*.fontawesome.com Fingerprint6C:69:02:A7:9B:07:84:8E:D0:3D:0A:10:61:8E:01:80:88:37:EF:5E ValidityTue, 22 Nov 2022 00:00:00 GMT - Sat, 23 Dec 2023 23:59:59 GMT
File typeASCII text, with very long lines (11213) Hash4fc6cefe553c0690d16534ebf9d89181 aa7c5a51a88e2dcbdf8b67e8648d35682d19e31f 8f3a8661dafbfffde857c6bbc7abc7c63e929047dfc5e6cc1a805ab8e98dacbb
GET /b314bdf1b3.js HTTP/1.1
Host: kit.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://plyhnf.com
DNT: 1
Connection: keep-alive
Referer: https://plyhnf.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 18 Sep 2023 07:22:46 GMT
content-type: text/javascript
access-control-allow-headers: accept, accept-langauge, content-language, content-type, fa-kit-token
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 3000
cache-control: max-age=60, public, must-revalidate
strict-transport-security: max-age=31536000; preload
vary: origin, accept-encoding, access-control-request-headers, access-control-request-method
x-request-id: F3a0_t1lh0VY4J0AESNh
cf-cache-status: REVALIDATED
server: cloudflare
cf-ray: 8087d6f8784e1c0e-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| plyhnf.com/common_tpls/js/validate_form_v2.js?jsv=33 | 207.120.33.12 | 200 OK | 26 kB |
URL GET HTTP/2plyhnf.com/common_tpls/js/validate_form_v2.js?jsv=33 IP207.120.33.12:443
Requested byhttps://plyhnf.com/42a5a13384880805/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n%2F&lang=en&epcCID=K7J5U1I6B8icU0S99ce1W0fce3s498B75&rtid=42351103793 CertificateIssuerLet's Encrypt Subjectplyhnf.com Fingerprint5B:99:7F:18:75:D6:11:C4:11:CC:CC:C8:20:6C:D3:51:D8:2F:3C:53 ValidityWed, 06 Sep 2023 04:32:00 GMT - Tue, 05 Dec 2023 04:31:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /common_tpls/js/validate_form_v2.js?jsv=33 HTTP/1.1
Host: plyhnf.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://plyhnf.com/42a5a13384880805/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc69623.47660-662490.13095u.wM5MWZxgjZjljMidzNxMGZ8VTOwMTM&eft=n%2F&lang=en&epcCID=K7J5U1I6B8icU0S99ce1W0fce3s498B75&rtid=42351103793
Cookie: PHPSESSID=534fbffab018749b0eede666d0f6b577
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 18 Sep 2023 07:22:46 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Mon, 13 Feb 2023 23:40:03 GMT
etag: W/"63eaca53-63ed"
section-io-cache-id: bdf4815068fae5f62d027d0782efc078
x-varnish: 5173345 2381694
age: 7574
via: 1.1 varnish-65c66bdb8c-bcwfl (Varnish/7.2)
section-io-cache: Hit
content-encoding: gzip
section-io-id: b6855100b601f8ff4a471f700f4d3678
X-Firefox-Spdy: h2
|
|
54.37.238.86