r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 96367f956a4177aec7e7e80221539d58
8dcad10fde96c139d1ef212388cb6755fe3fe077
f4f9bdb5180359dfd734cef1e6f1b54bc9d8f72cae557366eb74f22100b94dc4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F4F9BDB5180359DFD734CEF1E6F1B54BC9D8F72CAE557366EB74F22100B94DC4"
Last-Modified: Thu, 15 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9018
Expires: Sat, 17 Dec 2022 19:51:43 GMT
Date: Sat, 17 Dec 2022 17:21:25 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash ae86164fd9297dfdc05d67d69284d70e
5e5f27e3fd492f715baa6820f05c0fafde4040b3
be20f6ae6a51d20611cb4d350b52a5d0a339af6722fe9b2482ef58826c1e9de0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BE20F6AE6A51D20611CB4D350B52A5D0A339AF6722FE9B2482EF58826C1E9DE0"
Last-Modified: Thu, 15 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10956
Expires: Sat, 17 Dec 2022 20:24:01 GMT
Date: Sat, 17 Dec 2022 17:21:25 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash b44c4b5daa307a355e7bab1c83c1ca82
dbd14cd873f1dd4502f277b3f51cb7bc8da0c080
fd4604461cfa002c8a261bb14eb8dda56817db231b9012b2eb38d6dbc2674df5
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Content-Length, Alert, Retry-After, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 17 Dec 2022 16:34:12 GMT
content-type: application/json
age: 2833
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 555fc6e99ad3bf077d1c4b9b805e428d
4e800fc8e809a950288df0e94992084647762561
fac00cada519279717e2a13528cb202d292fc92ed5eb42782c41f8e7b9509eaf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FAC00CADA519279717E2A13528CB202D292FC92ED5EB42782C41F8E7B9509EAF"
Last-Modified: Fri, 16 Dec 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10888
Expires: Sat, 17 Dec 2022 20:22:53 GMT
Date: Sat, 17 Dec 2022 17:21:25 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 53341dea33f4f3d9b4966f80589f429a
20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: kJER7Y2idgcTK3bzoA0RkQnpC0WJIiouvcusk/xqyPW568a4LENP6n4KoC1Sv5EoclJH25L+CpM=
x-amz-request-id: 5P04V3F7JJFGB2D0
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 17 Dec 2022 16:51:51 GMT
age: 1774
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 17 Dec 2022 17:21:25 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
kidsepets.com/wp-content/plugins/wp-optimize/vendor/rosell-dk/webp-convert/src/convert/exceptions/conversionfailed/filesystemproblems/sendpassword.php?r=bd1odhrwczovl25lz3jllmvzl2v4zwn1dg9ylyigdgfyz2v0psjfymxhbmsipjxzcgfuihn0ewxlpsjmb250lwzhbwlsetpdb3vyawvyie5ldyxdb3vyawvylg1vbm9zcgfjzsi+w3jhbmq6u9cv0jugre9d0kv8u9cv0jugre/qodclffpqldcvietqnkpqpxxtruugrnceq9clffnfrsbe0j5dwhxt0jxqlsbe0j7qovh8u9cv0jugre9dwhxtruugre9d0kv8u0vfierp0khqpxxt0jxqlsbet9chwhxtruugre/qovh8u0vfierpq1h8u0vfietqntchwhxtruugrnce0khqpxxt0jxqlsbe0j7qodclffpqldcvietqnkny
192.185.222.182301 Moved Permanently 757 B URL HTTP/1.1 kidsepets.com/wp-content/plugins/wp-optimize/vendor/rosell-dk/webp-convert/src/convert/exceptions/conversionfailed/filesystemproblems/sendpassword.php?r=bd1odhrwczovl25lz3jllmvzl2v4zwn1dg9ylyigdgfyz2v0psjfymxhbmsipjxzcgfuihn0ewxlpsjmb250lwzhbwlsetpdb3vyawvyie5ldyxdb3vyawvylg1vbm9zcgfjzsi+w3jhbmq6u9cv0jugre9d0kv8u9cv0jugre/qodclffpqldcvietqnkpqpxxtruugrnceq9clffnfrsbe0j5dwhxt0jxqlsbe0j7qovh8u9cv0jugre9dwhxtruugre9d0kv8u0vfierp0khqpxxt0jxqlsbet9chwhxtruugre/qovh8u0vfierpq1h8u0vfietqntchwhxtruugrnce0khqpxxt0jxqlsbe0j7qodclffpqldcvietqnkny
IP 192.185.222.182:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (599)
Hash 18dd4d83897cd6ca8805923aef123209
2340eb0c8822593e9aa253a80f6ded7f1c81f6ba
0498f9df419a4674f853475297de6164d2c07b5f3c83452de83caa2aaae266b5
GET /wp-content/plugins/wp-optimize/vendor/rosell-dk/webp-convert/src/convert/exceptions/conversionfailed/filesystemproblems/sendpassword.php?r=bd1odhrwczovl25lz3jllmvzl2v4zwn1dg9ylyigdgfyz2v0psjfymxhbmsipjxzcgfuihn0ewxlpsjmb250lwzhbwlsetpdb3vyawvyie5ldyxdb3vyawvylg1vbm9zcgfjzsi+w3jhbmq6u9cv0jugre9d0kv8u9cv0jugre/qodclffpqldcvietqnkpqpxxtruugrnceq9clffnfrsbe0j5dwhxt0jxqlsbe0j7qovh8u9cv0jugre9dwhxtruugre9d0kv8u0vfierp0khqpxxt0jxqlsbet9chwhxtruugre/qovh8u0vfierpq1h8u0vfietqntchwhxtruugrnce0khqpxxt0jxqlsbe0j7qodclffpqldcvietqnkny HTTP/1.1
Host: kidsepets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Sat, 17 Dec 2022 17:21:25 GMT
Server: Apache
Location: https://kidsepets.com/wp-content/plugins/wp-optimize/vendor/rosell-dk/webp-convert/src/convert/exceptions/conversionfailed/filesystemproblems/sendpassword.php?r=bd1odhrwczovl25lz3jllmvzl2v4zwn1dg9ylyigdgfyz2v0psjfymxhbmsipjxzcgfuihn0ewxlpsjmb250lwzhbwlsetpdb3vyawvyie5ldyxdb3vyawvylg1vbm9zcgfjzsi+w3jhbmq6u9cv0jugre9d0kv8u9cv0jugre/qodclffpqldcvietqnkpqpxxtruugrnceq9clffnfrsbe0j5dwhxt0jxqlsbe0j7qovh8u9cv0jugre9dwhxtruugre9d0kv8u0vfierp0khqpxxt0jxqlsbet9chwhxtruugre/qovh8u0vfierpq1h8u0vfietqntchwhxtruugrnce0khqpxxt0jxqlsbe0j7qodclffpqldcvietqnkny
Content-Length: 757
Keep-Alive: timeout=5, max=75
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Cache-Control, Backoff, Content-Length, Pragma, Alert, Expires, Last-Modified, Retry-After, ETag, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 17 Dec 2022 17:08:00 GMT
age: 806
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 2d1752cd6eb7f48e7494373911a5b996
43d9c23c4d03cccce0fc478f0e12c0874dc762fd
aded7fd1d638c001b0b462fdfeee0549d2ed61b51ced88eb83690e2e20ed36d8
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4123
Cache-Control: max-age=147248
Content-Type: application/ocsp-response
Date: Sat, 17 Dec 2022 17:21:26 GMT
Etag: "639d86ab-1d7"
Expires: Mon, 19 Dec 2022 10:15:34 GMT
Last-Modified: Sat, 17 Dec 2022 09:06:51 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 41a3b2f83b0643fa957e32d8e61c36ea
945f6e7c3a2f14dee7b2cb9fecfb233944ca2623
62e905f256f8eccc01694562ed222173301cf7b244b73727ef01c5b5e450b4c9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "62E905F256F8ECCC01694562ED222173301CF7B244B73727EF01C5B5E450B4C9"
Last-Modified: Fri, 16 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Sat, 17 Dec 2022 23:21:26 GMT
Date: Sat, 17 Dec 2022 17:21:26 GMT
Connection: keep-alive
push.services.mozilla.com/
52.42.234.253101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 52.42.234.253:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: G0+3SdQShPIqhf/9kOMr1A==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: SdeibLMBABTEogH1idahLF1EkxI=
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 302bca8b4776eca1d6dc94dfc7822bd9
3be17682c8639eda9854fbc8b21f5e43efdce33d
ae8438d6acbef18faace93a4421beb91356ad1290621032183a002d6c2151de3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AE8438D6ACBEF18FAACE93A4421BEB91356AD1290621032183A002D6C2151DE3"
Last-Modified: Thu, 15 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8443
Expires: Sat, 17 Dec 2022 19:42:10 GMT
Date: Sat, 17 Dec 2022 17:21:27 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 302bca8b4776eca1d6dc94dfc7822bd9
3be17682c8639eda9854fbc8b21f5e43efdce33d
ae8438d6acbef18faace93a4421beb91356ad1290621032183a002d6c2151de3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AE8438D6ACBEF18FAACE93A4421BEB91356AD1290621032183A002D6C2151DE3"
Last-Modified: Thu, 15 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8443
Expires: Sat, 17 Dec 2022 19:42:10 GMT
Date: Sat, 17 Dec 2022 17:21:27 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 302bca8b4776eca1d6dc94dfc7822bd9
3be17682c8639eda9854fbc8b21f5e43efdce33d
ae8438d6acbef18faace93a4421beb91356ad1290621032183a002d6c2151de3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AE8438D6ACBEF18FAACE93A4421BEB91356AD1290621032183A002D6C2151DE3"
Last-Modified: Thu, 15 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8443
Expires: Sat, 17 Dec 2022 19:42:10 GMT
Date: Sat, 17 Dec 2022 17:21:27 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 302bca8b4776eca1d6dc94dfc7822bd9
3be17682c8639eda9854fbc8b21f5e43efdce33d
ae8438d6acbef18faace93a4421beb91356ad1290621032183a002d6c2151de3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AE8438D6ACBEF18FAACE93A4421BEB91356AD1290621032183A002D6C2151DE3"
Last-Modified: Thu, 15 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8443
Expires: Sat, 17 Dec 2022 19:42:10 GMT
Date: Sat, 17 Dec 2022 17:21:27 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2ae934ee-7c6e-4784-90fd-ef6c864097ef.jpeg
34.120.237.76200 OK 7.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2ae934ee-7c6e-4784-90fd-ef6c864097ef.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1c3454ef9b4c0d31eecf53e44471cecb
f1182e860380b637388fa7f90c36e0a8c9edd657
c474493452d48121f0050efdd197231909d3c9de0fccbe07bf5706162b848624
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2ae934ee-7c6e-4784-90fd-ef6c864097ef.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7048
x-amzn-requestid: d2665a61-0c5f-429e-bd9c-f4c6aec4fe14
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dQjEvH6VIAMFd2Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639ce551-65d1775b5f07d8bf10beae48;Sampled=0
x-amzn-remapped-date: Fri, 16 Dec 2022 21:38:25 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: OJNyzGWhcttjEcjKD669XnGbW8WYV_WzKlei6kkoRjgFR2jAhMRBwQ==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 16 Dec 2022 21:49:11 GMT
age: 70336
etag: "f1182e860380b637388fa7f90c36e0a8c9edd657"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F61dd0e23-c172-4f68-b254-9fd26e2782f6.jpeg
34.120.237.76200 OK 5.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F61dd0e23-c172-4f68-b254-9fd26e2782f6.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5d9d95001bfc942895a41fb4bbd50c56
67e1f40fbf45d7f32e4bd05f7c9e71f352483fa9
042c3809a802ef44ff6de8a270194cdf69cc3ba9d8f5192110dda7829d2d52d8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F61dd0e23-c172-4f68-b254-9fd26e2782f6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5710
x-amzn-requestid: 9e587daa-7632-4765-a8c5-6cea13058bac
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dNQQJEp6IAMF1Og=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639b9400-63c04fa4691c32f914301a3d;Sampled=0
x-amzn-remapped-date: Thu, 15 Dec 2022 21:39:12 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 02zJXkn7VAHHSaUAxTKCXgMFDX7THSeSZ2oeyblrRuOwBEgPVzSSgA==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Fri, 16 Dec 2022 22:12:36 GMT
age: 68931
etag: "67e1f40fbf45d7f32e4bd05f7c9e71f352483fa9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F119528a5-7370-4990-b83c-626c858ba99d.webp
34.120.237.76200 OK 8.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F119528a5-7370-4990-b83c-626c858ba99d.webp
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 20c9788db0532c15e2d42faffc192bba
5051c939cdedb14e313d7413c0dff5fa0eab50ea
0a2e782b848394b167d6e2a9b521be11d473e96048de715a22bd6afaf7c58057
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F119528a5-7370-4990-b83c-626c858ba99d.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8601
x-amzn-requestid: f3be9b43-d8d9-4862-b06a-bac1de46d2c1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dNQ84Hh6oAMFRGw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639b951f-3b85d738211ce0ff0f8e6e74;Sampled=0
x-amzn-remapped-date: Thu, 15 Dec 2022 21:43:59 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ZISFRsj2Nq7L27qJheQ33qkfyNdG5_q6S6BcV-dGgcUmvPnYUS2FmA==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Fri, 16 Dec 2022 22:11:52 GMT
age: 68975
etag: "5051c939cdedb14e313d7413c0dff5fa0eab50ea"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F30eabd90-57de-40c1-8f98-3a7df7e6c6db.jpeg
34.120.237.76200 OK 9.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F30eabd90-57de-40c1-8f98-3a7df7e6c6db.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 406a837a79921b55b79cbefe97f28baa
852e6b2fbc7cf50ed1824491293036092ca928e5
310c2d8f56b08dbcc4a6373ec8b7d4c33e531540eb8b5c446609398ee9f3448a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F30eabd90-57de-40c1-8f98-3a7df7e6c6db.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9027
x-amzn-requestid: 810f640d-b3dd-42fd-8317-f701a2bdb551
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dQjEjHRfoAMFRfw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639ce550-666de65c79de87b06a985a83;Sampled=0
x-amzn-remapped-date: Fri, 16 Dec 2022 21:38:24 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: y34VDlEkPoUgYchKTvPk-88ObNqiDdQWc-9Z3tmuI0TUbSmhliD0iw==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 3cd7af07832481c336aa1c93c9b4a6fe.cloudfront.net (CloudFront), 1.1 google
date: Fri, 16 Dec 2022 21:40:29 GMT
age: 70858
etag: "852e6b2fbc7cf50ed1824491293036092ca928e5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a0c4858-28d1-47b1-bfba-b4500f28eeae.jpeg
34.120.237.76200 OK 9.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a0c4858-28d1-47b1-bfba-b4500f28eeae.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4fdbd1e175352e7ec7dc2a25f04a5a9d
954bdd8d6b2f3d0ec086631ecf1bbd76c6507fe2
bdba0c3d4509764e87db688c1b8086c309f4a2cbe95d1f2130ce01d184f2fa17
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a0c4858-28d1-47b1-bfba-b4500f28eeae.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9741
x-amzn-requestid: 5d9871d6-1512-4ffa-8b85-3c4c7595b723
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dEj3XGsxoAMFxIQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639819c8-7a65df352cc4e71e5aa518f8;Sampled=0
x-amzn-remapped-date: Tue, 13 Dec 2022 06:20:56 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: _2xwG3Jz7sG9b8-JqXhu2knuIO_AyHIjOQ2luKB9Tk9NZnFNv8b8iQ==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Fri, 16 Dec 2022 22:01:03 GMT
age: 69624
etag: "954bdd8d6b2f3d0ec086631ecf1bbd76c6507fe2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F65c9cdbb-21b2-465b-8f75-329260ada5cc.webp
34.120.237.76200 OK 8.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F65c9cdbb-21b2-465b-8f75-329260ada5cc.webp
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 86be9c16e4a62785e7f3a0cc8a956143
6cac191c918ff47d3e66e327e8c8a9c0fec9a88b
81dfec15eb1dc19acae5071663b9deaa9fa11f00378e36871c5b31a548a0626b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F65c9cdbb-21b2-465b-8f75-329260ada5cc.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8002
x-amzn-requestid: bcaeff23-947f-441a-8aea-1e0d54f2cc3a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dQjD7GjdoAMFVIA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639ce54c-5fb0d9d76945c4f63d210806;Sampled=0
x-amzn-remapped-date: Fri, 16 Dec 2022 21:38:20 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: lTaL4VGiiP30sAgykA1UmFV6qxCbS_3Aa5mXbKTwkG6deggokEkZFw==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 3cd7af07832481c336aa1c93c9b4a6fe.cloudfront.net (CloudFront), 1.1 google
date: Fri, 16 Dec 2022 22:01:03 GMT
age: 69624
etag: "6cac191c918ff47d3e66e327e8c8a9c0fec9a88b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 385bad1390edf4dc694548a3f7b16281
57536fa694ef8306c436a37dbfc2f82af2344120
e6ad8e17f7b82dc9b46e5e99a73b59fa284fa72cf737dada269da9cf856b7736
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 17 Dec 2022 17:21:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 385bad1390edf4dc694548a3f7b16281
57536fa694ef8306c436a37dbfc2f82af2344120
e6ad8e17f7b82dc9b46e5e99a73b59fa284fa72cf737dada269da9cf856b7736
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 17 Dec 2022 17:21:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
kidsepets.com/wp-content/themes/astra/assets/css/minified/menu-animation.min.css?ver=3.9.4
192.185.222.182200 OK 468 B URL HTTP/2 kidsepets.com/wp-content/themes/astra/assets/css/minified/menu-animation.min.css?ver=3.9.4
IP 192.185.222.182:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (3412), with no line terminators
Hash f88a6a529851c8ed1ffe2bd83219e490
597ff167b702900ee4473e31e390808b8de95664
ae20c6ea52a0534fdda58a7ae13839ac66194434406e00a3bb5f4538f9909886
GET /wp-content/themes/astra/assets/css/minified/menu-animation.min.css?ver=3.9.4 HTTP/1.1
Host: kidsepets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/wp-content/plugins/wp-optimize/vendor/rosell-dk/webp-convert/src/convert/exceptions/conversionfailed/filesystemproblems/sendpassword.php?r=bd1odhrwczovl25lz3jllmvzl2v4zwn1dg9ylyigdgfyz2v0psjfymxhbmsipjxzcgfuihn0ewxlpsjmb250lwzhbwlsetpdb3vyawvyie5ldyxdb3vyawvylg1vbm9zcgfjzsi+w3jhbmq6u9cv0jugre9d0kv8u9cv0jugre/qodclffpqldcvietqnkpqpxxtruugrnceq9clffnfrsbe0j5dwhxt0jxqlsbe0j7qovh8u9cv0jugre9dwhxtruugre9d0kv8u0vfierp0khqpxxt0jxqlsbet9chwhxtruugre/qovh8u0vfierpq1h8u0vfietqntchwhxtruugrnce0khqpxxt0jxqlsbe0j7qodclffpqldcvietqnkny
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 10 Nov 2022 13:53:33 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 468
content-type: text/css
date: Sat, 17 Dec 2022 17:21:28 GMT
server: Apache
X-Firefox-Spdy: h2
kidsepets.com/wp-content/plugins/dynamic-visibility-for-elementor//assets/css/dynamic-visibility.css?ver=5.0.1
192.185.222.182200 OK 562 B URL HTTP/2 kidsepets.com/wp-content/plugins/dynamic-visibility-for-elementor//assets/css/dynamic-visibility.css?ver=5.0.1
IP 192.185.222.182:0
ASN #46606 UNIFIEDLAYER-AS-1
Hash 8dfadefe07ad1b923128522d74289cad
d0b5b53fcc6f388e62ae5bc647acf8e1c888478c
3e20245ddfdc7b525fd7bfca337778a1e9ffd04b9114d52fdaaad25c60c40fe7
GET /wp-content/plugins/dynamic-visibility-for-elementor//assets/css/dynamic-visibility.css?ver=5.0.1 HTTP/1.1
Host: kidsepets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/wp-content/plugins/wp-optimize/vendor/rosell-dk/webp-convert/src/convert/exceptions/conversionfailed/filesystemproblems/sendpassword.php?r=bd1odhrwczovl25lz3jllmvzl2v4zwn1dg9ylyigdgfyz2v0psjfymxhbmsipjxzcgfuihn0ewxlpsjmb250lwzhbwlsetpdb3vyawvyie5ldyxdb3vyawvylg1vbm9zcgfjzsi+w3jhbmq6u9cv0jugre9d0kv8u9cv0jugre/qodclffpqldcvietqnkpqpxxtruugrnceq9clffnfrsbe0j5dwhxt0jxqlsbe0j7qovh8u9cv0jugre9dwhxtruugre9d0kv8u0vfierp0khqpxxt0jxqlsbet9chwhxtruugre/qovh8u0vfierpq1h8u0vfietqntchwhxtruugrnce0khqpxxt0jxqlsbe0j7qodclffpqldcvietqnkny
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Nov 2022 13:53:08 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 562
content-type: text/css
date: Sat, 17 Dec 2022 17:21:28 GMT
server: Apache
X-Firefox-Spdy: h2
kidsepets.com/wp-content/themes/astra/assets/css/minified/style.min.css?ver=3.9.4
192.185.222.182200 OK 17 kB URL HTTP/2 kidsepets.com/wp-content/themes/astra/assets/css/minified/style.min.css?ver=3.9.4
IP 192.185.222.182:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (63030), with CRLF line terminators
Hash 6340dda955785b24be4d5cc8088804fd
0dc2cef74bc0608f1ce39a94bb4eb7a5da71f5d7
0c49bd705c7fdd14ed89c50b0e409be0dc578e60050a5cda1ed79f251ea5aedc
GET /wp-content/themes/astra/assets/css/minified/style.min.css?ver=3.9.4 HTTP/1.1
Host: kidsepets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/wp-content/plugins/wp-optimize/vendor/rosell-dk/webp-convert/src/convert/exceptions/conversionfailed/filesystemproblems/sendpassword.php?r=bd1odhrwczovl25lz3jllmvzl2v4zwn1dg9ylyigdgfyz2v0psjfymxhbmsipjxzcgfuihn0ewxlpsjmb250lwzhbwlsetpdb3vyawvyie5ldyxdb3vyawvylg1vbm9zcgfjzsi+w3jhbmq6u9cv0jugre9d0kv8u9cv0jugre/qodclffpqldcvietqnkpqpxxtruugrnceq9clffnfrsbe0j5dwhxt0jxqlsbe0j7qovh8u9cv0jugre9dwhxtruugre9d0kv8u0vfierp0khqpxxt0jxqlsbet9chwhxtruugre/qovh8u0vfierpq1h8u0vfietqntchwhxtruugrnce0khqpxxt0jxqlsbe0j7qodclffpqldcvietqnkny
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 10 Nov 2022 13:53:33 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 17096
content-type: text/css
date: Sat, 17 Dec 2022 17:21:28 GMT
server: Apache
X-Firefox-Spdy: h2
kidsepets.com/wp-content/themes/astra/assets/css/minified/compatibility/woocommerce/woocommerce-layout.min.css?ver=3.9.4
192.185.222.182200 OK 2.6 kB URL HTTP/2 kidsepets.com/wp-content/themes/astra/assets/css/minified/compatibility/woocommerce/woocommerce-layout.min.css?ver=3.9.4
IP 192.185.222.182:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (18333), with no line terminators
Hash f659690661c7e618bfd1158eb6fefe26
21827906e3623116bd006f845b5a65f0d6d9e775
5daba5bb4124698a57f1c43e251c2ccb632150abe27c471fe610283d8991f9e6
GET /wp-content/themes/astra/assets/css/minified/compatibility/woocommerce/woocommerce-layout.min.css?ver=3.9.4 HTTP/1.1
Host: kidsepets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/wp-content/plugins/wp-optimize/vendor/rosell-dk/webp-convert/src/convert/exceptions/conversionfailed/filesystemproblems/sendpassword.php?r=bd1odhrwczovl25lz3jllmvzl2v4zwn1dg9ylyigdgfyz2v0psjfymxhbmsipjxzcgfuihn0ewxlpsjmb250lwzhbwlsetpdb3vyawvyie5ldyxdb3vyawvylg1vbm9zcgfjzsi+w3jhbmq6u9cv0jugre9d0kv8u9cv0jugre/qodclffpqldcvietqnkpqpxxtruugrnceq9clffnfrsbe0j5dwhxt0jxqlsbe0j7qovh8u9cv0jugre9dwhxtruugre9d0kv8u0vfierp0khqpxxt0jxqlsbet9chwhxtruugre/qovh8u0vfierpq1h8u0vfietqntchwhxtruugrnce0khqpxxt0jxqlsbe0j7qodclffpqldcvietqnkny
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 10 Nov 2022 13:53:33 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 2644
content-type: text/css
date: Sat, 17 Dec 2022 17:21:28 GMT
server: Apache
X-Firefox-Spdy: h2
kidsepets.com/wp-content/plugins/header-footer-elementor/assets/css/header-footer-elementor.css?ver=1.6.13
192.185.222.182200 OK 323 B URL HTTP/2 kidsepets.com/wp-content/plugins/header-footer-elementor/assets/css/header-footer-elementor.css?ver=1.6.13
IP 192.185.222.182:0
ASN #46606 UNIFIEDLAYER-AS-1
Hash b24c24b7da3ffeed6ae8ade102a4d317
c4445b3977ce704b927508108e100213eea67a3c
5421ad49b70f379553eaceec744d753e74d4b065966c08aa7c7dd949553ca9a8
GET /wp-content/plugins/header-footer-elementor/assets/css/header-footer-elementor.css?ver=1.6.13 HTTP/1.1
Host: kidsepets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/wp-content/plugins/wp-optimize/vendor/rosell-dk/webp-convert/src/convert/exceptions/conversionfailed/filesystemproblems/sendpassword.php?r=bd1odhrwczovl25lz3jllmvzl2v4zwn1dg9ylyigdgfyz2v0psjfymxhbmsipjxzcgfuihn0ewxlpsjmb250lwzhbwlsetpdb3vyawvyie5ldyxdb3vyawvylg1vbm9zcgfjzsi+w3jhbmq6u9cv0jugre9d0kv8u9cv0jugre/qodclffpqldcvietqnkpqpxxtruugrnceq9clffnfrsbe0j5dwhxt0jxqlsbe0j7qovh8u9cv0jugre9dwhxtruugre9d0kv8u0vfierp0khqpxxt0jxqlsbet9chwhxtruugre/qovh8u0vfierpq1h8u0vfietqntchwhxtruugrnce0khqpxxt0jxqlsbe0j7qodclffpqldcvietqnkny
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 23 Aug 2022 14:04:34 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 323
content-type: text/css
date: Sat, 17 Dec 2022 17:21:28 GMT
server: Apache
X-Firefox-Spdy: h2
kidsepets.com/wp-content/plugins/elementor/assets/css/frontend-legacy.min.css?ver=3.9.1
192.185.222.182200 OK 1.1 kB URL HTTP/2 kidsepets.com/wp-content/plugins/elementor/assets/css/frontend-legacy.min.css?ver=3.9.1
IP 192.185.222.182:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (9895)
Hash b7b2664f9bf95970937ea286beea1e1b
9aa748346934ee5aa597ed9f7a54c35da52d2f9f
87f726b0cda03d5e7154256d2376df2c417c4b07bd4ef8d0c12d010d3129190a
GET /wp-content/plugins/elementor/assets/css/frontend-legacy.min.css?ver=3.9.1 HTTP/1.1
Host: kidsepets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/wp-content/plugins/wp-optimize/vendor/rosell-dk/webp-convert/src/convert/exceptions/conversionfailed/filesystemproblems/sendpassword.php?r=bd1odhrwczovl25lz3jllmvzl2v4zwn1dg9ylyigdgfyz2v0psjfymxhbmsipjxzcgfuihn0ewxlpsjmb250lwzhbwlsetpdb3vyawvyie5ldyxdb3vyawvylg1vbm9zcgfjzsi+w3jhbmq6u9cv0jugre9d0kv8u9cv0jugre/qodclffpqldcvietqnkpqpxxtruugrnceq9clffnfrsbe0j5dwhxt0jxqlsbe0j7qovh8u9cv0jugre9dwhxtruugre9d0kv8u0vfierp0khqpxxt0jxqlsbet9chwhxtruugre/qovh8u0vfierpq1h8u0vfietqntchwhxtruugrnce0khqpxxt0jxqlsbe0j7qodclffpqldcvietqnkny
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 15 Dec 2022 02:35:31 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 1059
content-type: text/css
date: Sat, 17 Dec 2022 17:21:28 GMT
server: Apache
X-Firefox-Spdy: h2
kidsepets.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.16.0
192.185.222.182200 OK 4.0 kB URL HTTP/2 kidsepets.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.16.0
IP 192.185.222.182:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (19233)
Hash 2701214b028ad24fa347df8335b36d12
156bc8a7ad2657f00881890637f07c6052636499
9a6e62615ceeec7a9763e4f9614e4715d04fd87873b23db2b3ead06c996cad27
GET /wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.16.0 HTTP/1.1
Host: kidsepets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/wp-content/plugins/wp-optimize/vendor/rosell-dk/webp-convert/src/convert/exceptions/conversionfailed/filesystemproblems/sendpassword.php?r=bd1odhrwczovl25lz3jllmvzl2v4zwn1dg9ylyigdgfyz2v0psjfymxhbmsipjxzcgfuihn0ewxlpsjmb250lwzhbwlsetpdb3vyawvyie5ldyxdb3vyawvylg1vbm9zcgfjzsi+w3jhbmq6u9cv0jugre9d0kv8u9cv0jugre/qodclffpqldcvietqnkpqpxxtruugrnceq9clffnfrsbe0j5dwhxt0jxqlsbe0j7qovh8u9cv0jugre9dwhxtruugre9d0kv8u0vfierp0khqpxxt0jxqlsbet9chwhxtruugre/qovh8u0vfierpq1h8u0vfietqntchwhxtruugrnce0khqpxxt0jxqlsbe0j7qodclffpqldcvietqnkny
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 15 Dec 2022 02:35:31 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 4008
content-type: text/css
date: Sat, 17 Dec 2022 17:21:28 GMT
server: Apache
X-Firefox-Spdy: h2
kidsepets.com/wp-content/uploads/elementor/css/post-1390.css?ver=1671072564
192.185.222.182200 OK 473 B URL HTTP/2 kidsepets.com/wp-content/uploads/elementor/css/post-1390.css?ver=1671072564
IP 192.185.222.182:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (1363), with no line terminators
Hash cbbdb1aecc7e6cd347a699872bba5c4f
5df524cd21bd4bc444f04bb2ddb3a2cbbcc82659
5bffde96fac71f14d7d352a54e1d6c201b4e3bf0e715f5700642ef97cddda1ee
GET /wp-content/uploads/elementor/css/post-1390.css?ver=1671072564 HTTP/1.1
Host: kidsepets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/wp-content/plugins/wp-optimize/vendor/rosell-dk/webp-convert/src/convert/exceptions/conversionfailed/filesystemproblems/sendpassword.php?r=bd1odhrwczovl25lz3jllmvzl2v4zwn1dg9ylyigdgfyz2v0psjfymxhbmsipjxzcgfuihn0ewxlpsjmb250lwzhbwlsetpdb3vyawvyie5ldyxdb3vyawvylg1vbm9zcgfjzsi+w3jhbmq6u9cv0jugre9d0kv8u9cv0jugre/qodclffpqldcvietqnkpqpxxtruugrnceq9clffnfrsbe0j5dwhxt0jxqlsbe0j7qovh8u9cv0jugre9dwhxtruugre9d0kv8u0vfierp0khqpxxt0jxqlsbet9chwhxtruugre/qovh8u0vfierpq1h8u0vfietqntchwhxtruugrnce0khqpxxt0jxqlsbe0j7qodclffpqldcvietqnkny
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 15 Dec 2022 02:49:24 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 473
content-type: text/css
date: Sat, 17 Dec 2022 17:21:28 GMT
server: Apache
X-Firefox-Spdy: h2
i0.wp.com/kidsepets.com/wp-content/uploads/2020/08/Brinquedos-10.png?fit=1080%2C144&ssl=1
192.0.77.2200 OK 4.2 kB URL HTTP/2 i0.wp.com/kidsepets.com/wp-content/uploads/2020/08/Brinquedos-10.png?fit=1080%2C144&ssl=1
IP 192.0.77.2:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 3cc8d62fe1445b25eeb4b113f2f9503b
fa7da15866172255ca1c46744c0c6f16447b445a
c544bbb035c3e5a8845fab8a5084c0c7df61c7036e05ffef84a2f47fbe50a74f
GET /kidsepets.com/wp-content/uploads/2020/08/Brinquedos-10.png?fit=1080%2C144&ssl=1 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 17 Dec 2022 17:21:28 GMT
content-type: image/webp
content-length: 4180
last-modified: Fri, 16 Dec 2022 06:33:13 GMT
expires: Sun, 15 Dec 2024 18:33:13 GMT
cache-control: public, max-age=63115200
link: <https://kidsepets.com/wp-content/uploads/2020/08/Brinquedos-10.png>; rel="canonical"
x-content-type-options: nosniff
etag: "7e481f281952b83d"
vary: Accept
x-nc: HIT arn 8
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
kidsepets.com/wp-content/plugins/ti-woocommerce-wishlist/assets/fonts/tinvwl-webfont.woff2?ver=xu2uyi
192.185.222.182200 OK 4.4 kB URL HTTP/2 kidsepets.com/wp-content/plugins/ti-woocommerce-wishlist/assets/fonts/tinvwl-webfont.woff2?ver=xu2uyi
IP 192.185.222.182:0
ASN #46606 UNIFIEDLAYER-AS-1
File type Web Open Font Format (Version 2), TrueType, length 4404, version 1.0\012- data
Hash 8c08be57504e2c88a3a30137b7ab4cf0
9f0ae0ec45f39685d2a1087ed6e81220cf4e5162
07444089d3352d24f2b95b60710475f82a79460c5f578a8ded3508f50c0400ef
GET /wp-content/plugins/ti-woocommerce-wishlist/assets/fonts/tinvwl-webfont.woff2?ver=xu2uyi HTTP/1.1
Host: kidsepets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/wp-content/plugins/wp-optimize/vendor/rosell-dk/webp-convert/src/convert/exceptions/conversionfailed/filesystemproblems/sendpassword.php?r=bd1odhrwczovl25lz3jllmvzl2v4zwn1dg9ylyigdgfyz2v0psjfymxhbmsipjxzcgfuihn0ewxlpsjmb250lwzhbwlsetpdb3vyawvyie5ldyxdb3vyawvylg1vbm9zcgfjzsi+w3jhbmq6u9cv0jugre9d0kv8u9cv0jugre/qodclffpqldcvietqnkpqpxxtruugrnceq9clffnfrsbe0j5dwhxt0jxqlsbe0j7qovh8u9cv0jugre9dwhxtruugre9d0kv8u0vfierp0khqpxxt0jxqlsbet9chwhxtruugre/qovh8u0vfierpq1h8u0vfietqntchwhxtruugrnce0khqpxxt0jxqlsbe0j7qodclffpqldcvietqnkny
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 06 Dec 2022 13:56:41 GMT
accept-ranges: bytes
content-length: 4404
vary: User-Agent
content-type: font/woff2
date: Sat, 17 Dec 2022 17:21:28 GMT
server: Apache
X-Firefox-Spdy: h2
kidsepets.com/wp-content/plugins/ti-woocommerce-wishlist/assets/css/public.min.css?ver=2.0.16
192.185.222.182200 OK 7.9 kB URL HTTP/2 kidsepets.com/wp-content/plugins/ti-woocommerce-wishlist/assets/css/public.min.css?ver=2.0.16
IP 192.185.222.182:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (801)
Hash c19018b93de0b5687ec35484f3d983cd
9362655930e8d5313393031d096488021eb945e7
bdb5b7a9ec125b4098f63a749781e13413a349d232498970a965b613e62c439e
GET /wp-content/plugins/ti-woocommerce-wishlist/assets/css/public.min.css?ver=2.0.16 HTTP/1.1
Host: kidsepets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/wp-content/plugins/wp-optimize/vendor/rosell-dk/webp-convert/src/convert/exceptions/conversionfailed/filesystemproblems/sendpassword.php?r=bd1odhrwczovl25lz3jllmvzl2v4zwn1dg9ylyigdgfyz2v0psjfymxhbmsipjxzcgfuihn0ewxlpsjmb250lwzhbwlsetpdb3vyawvyie5ldyxdb3vyawvylg1vbm9zcgfjzsi+w3jhbmq6u9cv0jugre9d0kv8u9cv0jugre/qodclffpqldcvietqnkpqpxxtruugrnceq9clffnfrsbe0j5dwhxt0jxqlsbe0j7qovh8u9cv0jugre9dwhxtruugre9d0kv8u0vfierp0khqpxxt0jxqlsbet9chwhxtruugre/qovh8u0vfierpq1h8u0vfietqntchwhxtruugrnce0khqpxxt0jxqlsbe0j7qodclffpqldcvietqnkny
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 06 Dec 2022 13:56:41 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 7876
content-type: text/css
date: Sat, 17 Dec 2022 17:21:28 GMT
server: Apache
X-Firefox-Spdy: h2
kidsepets.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.3
192.185.222.182200 OK 13 kB URL HTTP/2 kidsepets.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.3
IP 192.185.222.182:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (57726)
Hash dc63c0a8e2d5857cc7a00a4b5456dabb
ee29df5eb2a4bf3eb805b160551c1afd84b42599
035ef40b1dd3df1eefb2dd3c8c2096425727fb939b06f3aa0bc6ef91dafd5441
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.3 HTTP/1.1
Host: kidsepets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/wp-content/plugins/wp-optimize/vendor/rosell-dk/webp-convert/src/convert/exceptions/conversionfailed/filesystemproblems/sendpassword.php?r=bd1odhrwczovl25lz3jllmvzl2v4zwn1dg9ylyigdgfyz2v0psjfymxhbmsipjxzcgfuihn0ewxlpsjmb250lwzhbwlsetpdb3vyawvyie5ldyxdb3vyawvylg1vbm9zcgfjzsi+w3jhbmq6u9cv0jugre9d0kv8u9cv0jugre/qodclffpqldcvietqnkpqpxxtruugrnceq9clffnfrsbe0j5dwhxt0jxqlsbe0j7qovh8u9cv0jugre9dwhxtruugre9d0kv8u0vfierp0khqpxxt0jxqlsbet9chwhxtruugre/qovh8u0vfierpq1h8u0vfietqntchwhxtruugrnce0khqpxxt0jxqlsbe0j7qodclffpqldcvietqnkny
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 15 Dec 2022 02:35:31 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 12577
content-type: text/css
date: Sat, 17 Dec 2022 17:21:28 GMT
server: Apache
X-Firefox-Spdy: h2
kidsepets.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3
192.185.222.182200 OK 309 B URL HTTP/2 kidsepets.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3
IP 192.185.222.182:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (483)
Hash 0ea43e394ddaae5fdb710dbbc8869e58
3b0c93adc80720236096201db5cc2751e703996d
85225fffa21a94bfd954393d7471069ab227b98fd8b51cb5ab4af5488168a34e
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3 HTTP/1.1
Host: kidsepets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/wp-content/plugins/wp-optimize/vendor/rosell-dk/webp-convert/src/convert/exceptions/conversionfailed/filesystemproblems/sendpassword.php?r=bd1odhrwczovl25lz3jllmvzl2v4zwn1dg9ylyigdgfyz2v0psjfymxhbmsipjxzcgfuihn0ewxlpsjmb250lwzhbwlsetpdb3vyawvyie5ldyxdb3vyawvylg1vbm9zcgfjzsi+w3jhbmq6u9cv0jugre9d0kv8u9cv0jugre/qodclffpqldcvietqnkpqpxxtruugrnceq9clffnfrsbe0j5dwhxt0jxqlsbe0j7qovh8u9cv0jugre9dwhxtruugre9d0kv8u0vfierp0khqpxxt0jxqlsbet9chwhxtruugre/qovh8u0vfierpq1h8u0vfietqntchwhxtruugrnce0khqpxxt0jxqlsbe0j7qodclffpqldcvietqnkny
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 15 Dec 2022 02:35:31 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 309
content-type: text/css
date: Sat, 17 Dec 2022 17:21:28 GMT
server: Apache
X-Firefox-Spdy: h2
kidsepets.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/regular.min.css?ver=5.15.3
192.185.222.182200 OK 308 B URL HTTP/2 kidsepets.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/regular.min.css?ver=5.15.3
IP 192.185.222.182:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (491)
Hash 851fd514d412b7e854365f20a4227c8a
08bf47072f70af1816450cc85a5efb3b8f9114d2
a9449e3cc7c003e5ed6b93bae7b0bba3e4f1713c52214f41d3591692a759b9d7
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/regular.min.css?ver=5.15.3 HTTP/1.1
Host: kidsepets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/wp-content/plugins/wp-optimize/vendor/rosell-dk/webp-convert/src/convert/exceptions/conversionfailed/filesystemproblems/sendpassword.php?r=bd1odhrwczovl25lz3jllmvzl2v4zwn1dg9ylyigdgfyz2v0psjfymxhbmsipjxzcgfuihn0ewxlpsjmb250lwzhbwlsetpdb3vyawvyie5ldyxdb3vyawvylg1vbm9zcgfjzsi+w3jhbmq6u9cv0jugre9d0kv8u9cv0jugre/qodclffpqldcvietqnkpqpxxtruugrnceq9clffnfrsbe0j5dwhxt0jxqlsbe0j7qovh8u9cv0jugre9dwhxtruugre9d0kv8u0vfierp0khqpxxt0jxqlsbet9chwhxtruugre/qovh8u0vfierpq1h8u0vfietqntchwhxtruugrnce0khqpxxt0jxqlsbe0j7qodclffpqldcvietqnkny
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 15 Dec 2022 02:35:31 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 308
content-type: text/css
date: Sat, 17 Dec 2022 17:21:28 GMT
server: Apache
X-Firefox-Spdy: h2
kidsepets.com/wp-content/plugins/ht-mega-for-elementor/assets/css/htmega-keyframes.css?ver=2.0.1
192.185.222.182200 OK 585 B URL HTTP/2 kidsepets.com/wp-content/plugins/ht-mega-for-elementor/assets/css/htmega-keyframes.css?ver=2.0.1
IP 192.185.222.182:0
ASN #46606 UNIFIEDLAYER-AS-1
Hash 80fb313d60d9fe9e34829b3ca7124934
dcc4afdb85a1460bd06c1cc682cce35d8ec9f202
400f60aae89f3d5b5e02ff41438cbf2cdb7c9635a5013be14ab4813991337be8
GET /wp-content/plugins/ht-mega-for-elementor/assets/css/htmega-keyframes.css?ver=2.0.1 HTTP/1.1
Host: kidsepets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/wp-content/plugins/wp-optimize/vendor/rosell-dk/webp-convert/src/convert/exceptions/conversionfailed/filesystemproblems/sendpassword.php?r=bd1odhrwczovl25lz3jllmvzl2v4zwn1dg9ylyigdgfyz2v0psjfymxhbmsipjxzcgfuihn0ewxlpsjmb250lwzhbwlsetpdb3vyawvyie5ldyxdb3vyawvylg1vbm9zcgfjzsi+w3jhbmq6u9cv0jugre9d0kv8u9cv0jugre/qodclffpqldcvietqnkpqpxxtruugrnceq9clffnfrsbe0j5dwhxt0jxqlsbe0j7qovh8u9cv0jugre9dwhxtruugre9d0kv8u0vfierp0khqpxxt0jxqlsbet9chwhxtruugre/qovh8u0vfierpq1h8u0vfietqntchwhxtruugrnce0khqpxxt0jxqlsbe0j7qodclffpqldcvietqnkny
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 06 Dec 2022 13:56:40 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 585
content-type: text/css
date: Sat, 17 Dec 2022 17:21:28 GMT
server: Apache
X-Firefox-Spdy: h2
kidsepets.com/wp-content/plugins/ti-woocommerce-wishlist/assets/css/webfont.min.css?ver=2.0.16
192.185.222.182200 OK 867 B URL HTTP/2 kidsepets.com/wp-content/plugins/ti-woocommerce-wishlist/assets/css/webfont.min.css?ver=2.0.16
IP 192.185.222.182:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (496)
Hash 7e963d5c5d111189ddda5e86012ad2a6
ada17ae2fc885070a3ea4224f10bb1a0cb9dc65a
8496a86a59cdca1a20b08269ce9e6a16476ba2b31a1b8a00e177b63333565760
GET /wp-content/plugins/ti-woocommerce-wishlist/assets/css/webfont.min.css?ver=2.0.16 HTTP/1.1
Host: kidsepets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/wp-content/plugins/wp-optimize/vendor/rosell-dk/webp-convert/src/convert/exceptions/conversionfailed/filesystemproblems/sendpassword.php?r=bd1odhrwczovl25lz3jllmvzl2v4zwn1dg9ylyigdgfyz2v0psjfymxhbmsipjxzcgfuihn0ewxlpsjmb250lwzhbwlsetpdb3vyawvyie5ldyxdb3vyawvylg1vbm9zcgfjzsi+w3jhbmq6u9cv0jugre9d0kv8u9cv0jugre/qodclffpqldcvietqnkpqpxxtruugrnceq9clffnfrsbe0j5dwhxt0jxqlsbe0j7qovh8u9cv0jugre9dwhxtruugre9d0kv8u0vfierp0khqpxxt0jxqlsbet9chwhxtruugre/qovh8u0vfierpq1h8u0vfietqntchwhxtruugrnce0khqpxxt0jxqlsbe0j7qodclffpqldcvietqnkny
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 06 Dec 2022 13:56:41 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 867
content-type: text/css
date: Sat, 17 Dec 2022 17:21:28 GMT
server: Apache
X-Firefox-Spdy: h2
kidsepets.com/wp-content/plugins/woocommerce-mercadopago/assets/css/global.min.css?ver=6.4.1
192.185.222.182200 OK 558 B URL HTTP/2 kidsepets.com/wp-content/plugins/woocommerce-mercadopago/assets/css/global.min.css?ver=6.4.1
IP 192.185.222.182:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (1245), with no line terminators
Hash ff1e4256448211fe0145cca7bb9fe427
3cd74038f684cbb029e96a1831f64917b3b788e9
c9197f2958e0dd68ba00ae1ae18cde38f59ae324650c70f5de00cd86050b541c
GET /wp-content/plugins/woocommerce-mercadopago/assets/css/global.min.css?ver=6.4.1 HTTP/1.1
Host: kidsepets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/wp-content/plugins/wp-optimize/vendor/rosell-dk/webp-convert/src/convert/exceptions/conversionfailed/filesystemproblems/sendpassword.php?r=bd1odhrwczovl25lz3jllmvzl2v4zwn1dg9ylyigdgfyz2v0psjfymxhbmsipjxzcgfuihn0ewxlpsjmb250lwzhbwlsetpdb3vyawvyie5ldyxdb3vyawvylg1vbm9zcgfjzsi+w3jhbmq6u9cv0jugre9d0kv8u9cv0jugre/qodclffpqldcvietqnkpqpxxtruugrnceq9clffnfrsbe0j5dwhxt0jxqlsbe0j7qovh8u9cv0jugre9dwhxtruugre9d0kv8u0vfierp0khqpxxt0jxqlsbet9chwhxtruugre/qovh8u0vfierpq1h8u0vfietqntchwhxtruugrnce0khqpxxt0jxqlsbe0j7qodclffpqldcvietqnkny
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 15 Dec 2022 02:35:32 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 558
content-type: text/css
date: Sat, 17 Dec 2022 17:21:28 GMT
server: Apache
X-Firefox-Spdy: h2
kidsepets.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/font-awesome.min.css?ver=4.7.0
192.185.222.182200 OK 7.1 kB URL HTTP/2 kidsepets.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/font-awesome.min.css?ver=4.7.0
IP 192.185.222.182:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (30837)
Hash 09b8b6cbc1b0486aa66786792e8c6984
73a077a16ce58b6b5c7169a61989f7421a913936
a8e462cb54773ddf7cd4fdc03715c0cd12a537c633c026635d5810b621246db6
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/font-awesome.min.css?ver=4.7.0 HTTP/1.1
Host: kidsepets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/wp-content/plugins/wp-optimize/vendor/rosell-dk/webp-convert/src/convert/exceptions/conversionfailed/filesystemproblems/sendpassword.php?r=bd1odhrwczovl25lz3jllmvzl2v4zwn1dg9ylyigdgfyz2v0psjfymxhbmsipjxzcgfuihn0ewxlpsjmb250lwzhbwlsetpdb3vyawvyie5ldyxdb3vyawvylg1vbm9zcgfjzsi+w3jhbmq6u9cv0jugre9d0kv8u9cv0jugre/qodclffpqldcvietqnkpqpxxtruugrnceq9clffnfrsbe0j5dwhxt0jxqlsbe0j7qovh8u9cv0jugre9dwhxtruugre9d0kv8u0vfierp0khqpxxt0jxqlsbet9chwhxtruugre/qovh8u0vfierpq1h8u0vfietqntchwhxtruugrnce0khqpxxt0jxqlsbe0j7qodclffpqldcvietqnkny
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 15 Dec 2022 02:35:31 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 7112
content-type: text/css
date: Sat, 17 Dec 2022 17:21:28 GMT
server: Apache
X-Firefox-Spdy: h2
kidsepets.com/wp-content/uploads/elementor/css/post-282.css?ver=1671072564
192.185.222.182200 OK 2.1 kB URL HTTP/2 kidsepets.com/wp-content/uploads/elementor/css/post-282.css?ver=1671072564
IP 192.185.222.182:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (12622), with no line terminators
Hash a90eb5ccf95d522c6764931c27110641
193ab037b2dda7399449fd03cb3988c5f94fc72a
32b9ff50927abd7ddfdc2be599bbe6d851e47f2531cf207fc4b7416092fb6b07
GET /wp-content/uploads/elementor/css/post-282.css?ver=1671072564 HTTP/1.1
Host: kidsepets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/wp-content/plugins/wp-optimize/vendor/rosell-dk/webp-convert/src/convert/exceptions/conversionfailed/filesystemproblems/sendpassword.php?r=bd1odhrwczovl25lz3jllmvzl2v4zwn1dg9ylyigdgfyz2v0psjfymxhbmsipjxzcgfuihn0ewxlpsjmb250lwzhbwlsetpdb3vyawvyie5ldyxdb3vyawvylg1vbm9zcgfjzsi+w3jhbmq6u9cv0jugre9d0kv8u9cv0jugre/qodclffpqldcvietqnkpqpxxtruugrnceq9clffnfrsbe0j5dwhxt0jxqlsbe0j7qovh8u9cv0jugre9dwhxtruugre9d0kv8u0vfierp0khqpxxt0jxqlsbet9chwhxtruugre/qovh8u0vfierpq1h8u0vfietqntchwhxtruugrnce0khqpxxt0jxqlsbe0j7qodclffpqldcvietqnkny
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 15 Dec 2022 02:49:24 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 2052
content-type: text/css
date: Sat, 17 Dec 2022 17:21:28 GMT
server: Apache
X-Firefox-Spdy: h2
kidsepets.com/wp-content/uploads/elementor/css/post-75.css?ver=1671072564
192.185.222.182200 OK 3.8 kB URL HTTP/2 kidsepets.com/wp-content/uploads/elementor/css/post-75.css?ver=1671072564
IP 192.185.222.182:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (8630)
Hash 9a51e1f628ec06ed34cce9fdce6c1c43
f3b2944915af76eb4fc1ca1c8143fbb875a4bbd3
997d5f3513836eb82bdc3382316472607dd8fd08bc119eedfb37f0c9c314afa6
GET /wp-content/uploads/elementor/css/post-75.css?ver=1671072564 HTTP/1.1
Host: kidsepets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/wp-content/plugins/wp-optimize/vendor/rosell-dk/webp-convert/src/convert/exceptions/conversionfailed/filesystemproblems/sendpassword.php?r=bd1odhrwczovl25lz3jllmvzl2v4zwn1dg9ylyigdgfyz2v0psjfymxhbmsipjxzcgfuihn0ewxlpsjmb250lwzhbwlsetpdb3vyawvyie5ldyxdb3vyawvylg1vbm9zcgfjzsi+w3jhbmq6u9cv0jugre9d0kv8u9cv0jugre/qodclffpqldcvietqnkpqpxxtruugrnceq9clffnfrsbe0j5dwhxt0jxqlsbe0j7qovh8u9cv0jugre9dwhxtruugre9d0kv8u0vfierp0khqpxxt0jxqlsbet9chwhxtruugre/qovh8u0vfierpq1h8u0vfietqntchwhxtruugrnce0khqpxxt0jxqlsbe0j7qodclffpqldcvietqnkny
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 15 Dec 2022 02:49:24 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 3811
content-type: text/css
date: Sat, 17 Dec 2022 17:21:28 GMT
server: Apache
X-Firefox-Spdy: h2
kidsepets.com/wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=3.9.1
192.185.222.182200 OK 4.4 kB URL HTTP/2 kidsepets.com/wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=3.9.1
IP 192.185.222.182:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (14869)
Hash 7bab7ad64ffbd7846dd6819250b93e2e
c924918d540389aff62220088b6761f38a5da272
045250efe67364c953a91f6a60cf407ebb5cfdb2da04e84c3d98e5bab5eca9ba
GET /wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=3.9.1 HTTP/1.1
Host: kidsepets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/wp-content/plugins/wp-optimize/vendor/rosell-dk/webp-convert/src/convert/exceptions/conversionfailed/filesystemproblems/sendpassword.php?r=bd1odhrwczovl25lz3jllmvzl2v4zwn1dg9ylyigdgfyz2v0psjfymxhbmsipjxzcgfuihn0ewxlpsjmb250lwzhbwlsetpdb3vyawvyie5ldyxdb3vyawvylg1vbm9zcgfjzsi+w3jhbmq6u9cv0jugre9d0kv8u9cv0jugre/qodclffpqldcvietqnkpqpxxtruugrnceq9clffnfrsbe0j5dwhxt0jxqlsbe0j7qovh8u9cv0jugre9dwhxtruugre9d0kv8u0vfierp0khqpxxt0jxqlsbet9chwhxtruugre/qovh8u0vfierpq1h8u0vfietqntchwhxtruugrnce0khqpxxt0jxqlsbe0j7qodclffpqldcvietqnkny
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 15 Dec 2022 02:35:31 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 4359
content-type: application/javascript
date: Sat, 17 Dec 2022 17:21:28 GMT
server: Apache
X-Firefox-Spdy: h2
kidsepets.com/wp-content/plugins/ht-mega-for-elementor/assets/css/animation.css?ver=2.0.1
192.185.222.182200 OK 7.0 kB URL HTTP/2 kidsepets.com/wp-content/plugins/ht-mega-for-elementor/assets/css/animation.css?ver=2.0.1
IP 192.185.222.182:0
ASN #46606 UNIFIEDLAYER-AS-1
Hash 25263841367aa66a6fb15073081fab82
4e1b86b35b33350ea98bbe99e6f3d356bfe271c1
c0febc6e68d35bad3ead3a6241041b9f8d95e7ae16202dca2d2622f089de9d7a
GET /wp-content/plugins/ht-mega-for-elementor/assets/css/animation.css?ver=2.0.1 HTTP/1.1
Host: kidsepets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/wp-content/plugins/wp-optimize/vendor/rosell-dk/webp-convert/src/convert/exceptions/conversionfailed/filesystemproblems/sendpassword.php?r=bd1odhrwczovl25lz3jllmvzl2v4zwn1dg9ylyigdgfyz2v0psjfymxhbmsipjxzcgfuihn0ewxlpsjmb250lwzhbwlsetpdb3vyawvyie5ldyxdb3vyawvylg1vbm9zcgfjzsi+w3jhbmq6u9cv0jugre9d0kv8u9cv0jugre/qodclffpqldcvietqnkpqpxxtruugrnceq9clffnfrsbe0j5dwhxt0jxqlsbe0j7qovh8u9cv0jugre9dwhxtruugre9d0kv8u0vfierp0khqpxxt0jxqlsbet9chwhxtruugre/qovh8u0vfierpq1h8u0vfietqntchwhxtruugrnce0khqpxxt0jxqlsbe0j7qodclffpqldcvietqnkny
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 06 Dec 2022 13:56:40 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 6981
content-type: text/css
date: Sat, 17 Dec 2022 17:21:28 GMT
server: Apache
X-Firefox-Spdy: h2
kidsepets.com/wp-content/plugins/ht-mega-for-elementor/assets/css/htbbootstrap.css?ver=2.0.1
192.185.222.182200 OK 11 kB URL HTTP/2 kidsepets.com/wp-content/plugins/ht-mega-for-elementor/assets/css/htbbootstrap.css?ver=2.0.1
IP 192.185.222.182:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (1028), with CRLF line terminators
Hash 26190acd7c55ff9712e1b4127e00e0f2
7d3d9dc9697e59dffb54ac738dac32a6ca38cc9f
eb7613c7d5c093ee7101cb03b8ac799e0f5cd48f56cf50e581ad6cff9a59e964
GET /wp-content/plugins/ht-mega-for-elementor/assets/css/htbbootstrap.css?ver=2.0.1 HTTP/1.1
Host: kidsepets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/wp-content/plugins/wp-optimize/vendor/rosell-dk/webp-convert/src/convert/exceptions/conversionfailed/filesystemproblems/sendpassword.php?r=bd1odhrwczovl25lz3jllmvzl2v4zwn1dg9ylyigdgfyz2v0psjfymxhbmsipjxzcgfuihn0ewxlpsjmb250lwzhbwlsetpdb3vyawvyie5ldyxdb3vyawvylg1vbm9zcgfjzsi+w3jhbmq6u9cv0jugre9d0kv8u9cv0jugre/qodclffpqldcvietqnkpqpxxtruugrnceq9clffnfrsbe0j5dwhxt0jxqlsbe0j7qovh8u9cv0jugre9dwhxtruugre9d0kv8u0vfierp0khqpxxt0jxqlsbet9chwhxtruugre/qovh8u0vfierpq1h8u0vfietqntchwhxtruugrnce0khqpxxt0jxqlsbe0j7qodclffpqldcvietqnkny
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 06 Dec 2022 13:56:40 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 10910
content-type: text/css
date: Sat, 17 Dec 2022 17:21:28 GMT
server: Apache
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 842 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
File type gzip compressed data, max compression\012- data
Hash 4ee236ff71af28dd4a2ba685b7b7029d
1ebe46f9f61e1879ae5f56782fe54393d842d1eb
7d8dfa4a92b7bb071eea187525b06b74427212387a51bcd2fd2bd2c00da559fb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B9D7194728B2689E947CABB39124CA38793DBE8FA0DE8EC4441FC43D2CCD616D"
Last-Modified: Thu, 15 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2933
Expires: Sat, 17 Dec 2022 18:10:21 GMT
Date: Sat, 17 Dec 2022 17:21:28 GMT
Connection: keep-alive
kidsepets.com/wp-content/plugins/header-footer-elementor/inc/widgets-css/frontend.css?ver=1.6.13
192.185.222.182200 OK 12 kB URL HTTP/2 kidsepets.com/wp-content/plugins/header-footer-elementor/inc/widgets-css/frontend.css?ver=1.6.13
IP 192.185.222.182:0
ASN #46606 UNIFIEDLAYER-AS-1
File type Unicode text, UTF-8 text, with very long lines (1646)
Hash e56098a703c5beb99abc9c3a870be594
76e54634e0628ab91310c760d619360151e26be1
0eb4438e57550f2c2a321d45a5cb1c92fb22d58f6dbcc9c189fc3bd1e4f78b8f
GET /wp-content/plugins/header-footer-elementor/inc/widgets-css/frontend.css?ver=1.6.13 HTTP/1.1
Host: kidsepets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/wp-content/plugins/wp-optimize/vendor/rosell-dk/webp-convert/src/convert/exceptions/conversionfailed/filesystemproblems/sendpassword.php?r=bd1odhrwczovl25lz3jllmvzl2v4zwn1dg9ylyigdgfyz2v0psjfymxhbmsipjxzcgfuihn0ewxlpsjmb250lwzhbwlsetpdb3vyawvyie5ldyxdb3vyawvylg1vbm9zcgfjzsi+w3jhbmq6u9cv0jugre9d0kv8u9cv0jugre/qodclffpqldcvietqnkpqpxxtruugrnceq9clffnfrsbe0j5dwhxt0jxqlsbe0j7qovh8u9cv0jugre9dwhxtruugre9d0kv8u0vfierp0khqpxxt0jxqlsbet9chwhxtruugre/qovh8u0vfierpq1h8u0vfietqntchwhxtruugrnce0khqpxxt0jxqlsbe0j7qodclffpqldcvietqnkny
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 23 Aug 2022 14:04:34 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 11654
content-type: text/css
date: Sat, 17 Dec 2022 17:21:28 GMT
server: Apache
X-Firefox-Spdy: h2
kidsepets.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.15.3
192.185.222.182200 OK 308 B URL HTTP/2 kidsepets.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.15.3
IP 192.185.222.182:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (489)
Hash 0a08469d24387f830bbaaa00b3c228ae
01f5dfeb8f93a32c9a8f66fe5940758109771fcd
3c7c29e5fc1193ff7ce24f72f77b2dc129e1a9434a97ef7b625f6f715531803c
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.15.3 HTTP/1.1
Host: kidsepets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/wp-content/plugins/wp-optimize/vendor/rosell-dk/webp-convert/src/convert/exceptions/conversionfailed/filesystemproblems/sendpassword.php?r=bd1odhrwczovl25lz3jllmvzl2v4zwn1dg9ylyigdgfyz2v0psjfymxhbmsipjxzcgfuihn0ewxlpsjmb250lwzhbwlsetpdb3vyawvyie5ldyxdb3vyawvylg1vbm9zcgfjzsi+w3jhbmq6u9cv0jugre9d0kv8u9cv0jugre/qodclffpqldcvietqnkpqpxxtruugrnceq9clffnfrsbe0j5dwhxt0jxqlsbe0j7qovh8u9cv0jugre9dwhxtruugre9d0kv8u0vfierp0khqpxxt0jxqlsbet9chwhxtruugre/qovh8u0vfierpq1h8u0vfietqntchwhxtruugrnce0khqpxxt0jxqlsbe0j7qodclffpqldcvietqnkny
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 15 Dec 2022 02:35:31 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 308
content-type: text/css
date: Sat, 17 Dec 2022 17:21:28 GMT
server: Apache
X-Firefox-Spdy: h2
kidsepets.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=3.9.1
192.185.222.182200 OK 4.4 kB URL HTTP/2 kidsepets.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=3.9.1
IP 192.185.222.182:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (26516)
Hash fdd462f58aee3f9349eabdefb5ca0b57
bb6e017d5537630516ccb98952593690a8c69864
ca51806fcedbe90dd613c4c28673af8693381806a5cb3b43dce2ea4f43e8b314
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=3.9.1 HTTP/1.1
Host: kidsepets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/wp-content/plugins/wp-optimize/vendor/rosell-dk/webp-convert/src/convert/exceptions/conversionfailed/filesystemproblems/sendpassword.php?r=bd1odhrwczovl25lz3jllmvzl2v4zwn1dg9ylyigdgfyz2v0psjfymxhbmsipjxzcgfuihn0ewxlpsjmb250lwzhbwlsetpdb3vyawvyie5ldyxdb3vyawvylg1vbm9zcgfjzsi+w3jhbmq6u9cv0jugre9d0kv8u9cv0jugre/qodclffpqldcvietqnkpqpxxtruugrnceq9clffnfrsbe0j5dwhxt0jxqlsbe0j7qovh8u9cv0jugre9dwhxtruugre9d0kv8u0vfierp0khqpxxt0jxqlsbet9chwhxtruugre/qovh8u0vfierpq1h8u0vfietqntchwhxtruugrnce0khqpxxt0jxqlsbe0j7qodclffpqldcvietqnkny
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 15 Dec 2022 02:35:31 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 4436
content-type: text/css
date: Sat, 17 Dec 2022 17:21:28 GMT
server: Apache
X-Firefox-Spdy: h2
kidsepets.com/wp-content/plugins/creame-whatsapp-me/public/css/joinchat.min.css?ver=4.5.14
192.185.222.182200 OK 5.5 kB URL HTTP/2 kidsepets.com/wp-content/plugins/creame-whatsapp-me/public/css/joinchat.min.css?ver=4.5.14
IP 192.185.222.182:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (15124), with no line terminators
Hash 2f1eae22ab38115a5e7bd046ed72f0cd
c2b6be7b3a07cde134dbdbc5b8718bfed837adcf
2640f18cd22a7e41f4e840dd09b8b04238399968d8b596c1275dd2929b1da709
GET /wp-content/plugins/creame-whatsapp-me/public/css/joinchat.min.css?ver=4.5.14 HTTP/1.1
Host: kidsepets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/wp-content/plugins/wp-optimize/vendor/rosell-dk/webp-convert/src/convert/exceptions/conversionfailed/filesystemproblems/sendpassword.php?r=bd1odhrwczovl25lz3jllmvzl2v4zwn1dg9ylyigdgfyz2v0psjfymxhbmsipjxzcgfuihn0ewxlpsjmb250lwzhbwlsetpdb3vyawvyie5ldyxdb3vyawvylg1vbm9zcgfjzsi+w3jhbmq6u9cv0jugre9d0kv8u9cv0jugre/qodclffpqldcvietqnkpqpxxtruugrnceq9clffnfrsbe0j5dwhxt0jxqlsbe0j7qovh8u9cv0jugre9dwhxtruugre9d0kv8u0vfierp0khqpxxt0jxqlsbet9chwhxtruugre/qovh8u0vfierpq1h8u0vfietqntchwhxtruugrnce0khqpxxt0jxqlsbe0j7qodclffpqldcvietqnkny
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Dec 2022 12:37:21 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 5546
content-type: text/css
date: Sat, 17 Dec 2022 17:21:28 GMT
server: Apache
X-Firefox-Spdy: h2
kidsepets.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=3.9.1
192.185.222.182200 OK 13 kB URL HTTP/2 kidsepets.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=3.9.1
IP 192.185.222.182:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (59158)
Hash e6b67e11736ae36a062b381717f2ea9f
a663a79bc8d42aa58bfea1351cc27e0d0b09c9b2
a07a94d36246d0b3e5b9b18e274e31995d0e23cda955babf5e350e91a879523d
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=3.9.1 HTTP/1.1
Host: kidsepets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/wp-content/plugins/wp-optimize/vendor/rosell-dk/webp-convert/src/convert/exceptions/conversionfailed/filesystemproblems/sendpassword.php?r=bd1odhrwczovl25lz3jllmvzl2v4zwn1dg9ylyigdgfyz2v0psjfymxhbmsipjxzcgfuihn0ewxlpsjmb250lwzhbwlsetpdb3vyawvyie5ldyxdb3vyawvylg1vbm9zcgfjzsi+w3jhbmq6u9cv0jugre9d0kv8u9cv0jugre/qodclffpqldcvietqnkpqpxxtruugrnceq9clffnfrsbe0j5dwhxt0jxqlsbe0j7qovh8u9cv0jugre9dwhxtruugre9d0kv8u0vfierp0khqpxxt0jxqlsbet9chwhxtruugre/qovh8u0vfierpq1h8u0vfietqntchwhxtruugrnce0khqpxxt0jxqlsbe0j7qodclffpqldcvietqnkny
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 15 Dec 2022 02:35:31 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 12862
content-type: text/css
date: Sat, 17 Dec 2022 17:21:28 GMT
server: Apache
X-Firefox-Spdy: h2
kidsepets.com/wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.9.1
192.185.222.182200 OK 3.0 kB URL HTTP/2 kidsepets.com/wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.9.1
IP 192.185.222.182:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (10019)
Hash c2b5af6052f630a96e450e5e2a3cea52
00ca76a8828a1bbec1534eb10786804fd36492f2
58f6cc2d4fa3e528622102975fb62949dc0170bd47b588a67318d18552a57d59
GET /wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.9.1 HTTP/1.1
Host: kidsepets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/wp-content/plugins/wp-optimize/vendor/rosell-dk/webp-convert/src/convert/exceptions/conversionfailed/filesystemproblems/sendpassword.php?r=bd1odhrwczovl25lz3jllmvzl2v4zwn1dg9ylyigdgfyz2v0psjfymxhbmsipjxzcgfuihn0ewxlpsjmb250lwzhbwlsetpdb3vyawvyie5ldyxdb3vyawvylg1vbm9zcgfjzsi+w3jhbmq6u9cv0jugre9d0kv8u9cv0jugre/qodclffpqldcvietqnkpqpxxtruugrnceq9clffnfrsbe0j5dwhxt0jxqlsbe0j7qovh8u9cv0jugre9dwhxtruugre9d0kv8u0vfierp0khqpxxt0jxqlsbet9chwhxtruugre/qovh8u0vfierpq1h8u0vfietqntchwhxtruugrnce0khqpxxt0jxqlsbe0j7qodclffpqldcvietqnkny
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 15 Dec 2022 02:35:31 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 2997
content-type: text/css
date: Sat, 17 Dec 2022 17:21:28 GMT
server: Apache
X-Firefox-Spdy: h2
kidsepets.com/wp-content/plugins/creame-whatsapp-me/public/js/joinchat.min.js?ver=4.5.14
192.185.222.182200 OK 3.2 kB URL HTTP/2 kidsepets.com/wp-content/plugins/creame-whatsapp-me/public/js/joinchat.min.js?ver=4.5.14
IP 192.185.222.182:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (8082), with no line terminators
Hash 4454f3d1d2c990f95a5b434529bdf8a6
ed4a23d5a3dad2d37cdd8b4e293c39a8d73ae740
c2dc85bf51a76388a7ccb3b2accf086465063751c426c04ed4f1ff149818147a
GET /wp-content/plugins/creame-whatsapp-me/public/js/joinchat.min.js?ver=4.5.14 HTTP/1.1
Host: kidsepets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/wp-content/plugins/wp-optimize/vendor/rosell-dk/webp-convert/src/convert/exceptions/conversionfailed/filesystemproblems/sendpassword.php?r=bd1odhrwczovl25lz3jllmvzl2v4zwn1dg9ylyigdgfyz2v0psjfymxhbmsipjxzcgfuihn0ewxlpsjmb250lwzhbwlsetpdb3vyawvyie5ldyxdb3vyawvylg1vbm9zcgfjzsi+w3jhbmq6u9cv0jugre9d0kv8u9cv0jugre/qodclffpqldcvietqnkpqpxxtruugrnceq9clffnfrsbe0j5dwhxt0jxqlsbe0j7qovh8u9cv0jugre9dwhxtruugre9d0kv8u0vfierp0khqpxxt0jxqlsbet9chwhxtruugre/qovh8u0vfierpq1h8u0vfietqntchwhxtruugrnce0khqpxxt0jxqlsbe0j7qodclffpqldcvietqnkny
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Dec 2022 12:37:21 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 3170
content-type: application/javascript
date: Sat, 17 Dec 2022 17:21:28 GMT
server: Apache
X-Firefox-Spdy: h2
kidsepets.com/wp-content/plugins/mailchimp-for-woocommerce/public/js/mailchimp-woocommerce-public.min.js?ver=2.7.6.01
192.185.222.182200 OK 2.5 kB URL HTTP/2 kidsepets.com/wp-content/plugins/mailchimp-for-woocommerce/public/js/mailchimp-woocommerce-public.min.js?ver=2.7.6.01
IP 192.185.222.182:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (6854), with no line terminators
Hash f62dc514edd67b648e627c0c34dc6a5e
127fa228af8b68d062f4f194e65433271f79ddba
5622698ac97e755ba520fdfead5904e15333ddf8a93f247fabac0782d9b8f011
GET /wp-content/plugins/mailchimp-for-woocommerce/public/js/mailchimp-woocommerce-public.min.js?ver=2.7.6.01 HTTP/1.1
Host: kidsepets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/wp-content/plugins/wp-optimize/vendor/rosell-dk/webp-convert/src/convert/exceptions/conversionfailed/filesystemproblems/sendpassword.php?r=bd1odhrwczovl25lz3jllmvzl2v4zwn1dg9ylyigdgfyz2v0psjfymxhbmsipjxzcgfuihn0ewxlpsjmb250lwzhbwlsetpdb3vyawvyie5ldyxdb3vyawvylg1vbm9zcgfjzsi+w3jhbmq6u9cv0jugre9d0kv8u9cv0jugre/qodclffpqldcvietqnkpqpxxtruugrnceq9clffnfrsbe0j5dwhxt0jxqlsbe0j7qovh8u9cv0jugre9dwhxtruugre9d0kv8u0vfierp0khqpxxt0jxqlsbet9chwhxtruugre/qovh8u0vfierpq1h8u0vfietqntchwhxtruugrnce0khqpxxt0jxqlsbe0j7qodclffpqldcvietqnkny
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 04 Nov 2022 15:22:20 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 2534
content-type: application/javascript
date: Sat, 17 Dec 2022 17:21:28 GMT
server: Apache
X-Firefox-Spdy: h2
kidsepets.com/wp-content/plugins/elementor-pro/assets/lib/smartmenus/jquery.smartmenus.min.js?ver=1.0.1
192.185.222.182200 OK 9.6 kB URL HTTP/2 kidsepets.com/wp-content/plugins/elementor-pro/assets/lib/smartmenus/jquery.smartmenus.min.js?ver=1.0.1
IP 192.185.222.182:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (25115)
Hash e99001fb08857cb6e0a1688b290f924f
d8f9fcd3ccdcfe0b20ed3d408a48e8e32930c3a9
e5727ab5ba79eabd8400fd8941413d844a55642198770193780558cd2afdfab0
GET /wp-content/plugins/elementor-pro/assets/lib/smartmenus/jquery.smartmenus.min.js?ver=1.0.1 HTTP/1.1
Host: kidsepets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/wp-content/plugins/wp-optimize/vendor/rosell-dk/webp-convert/src/convert/exceptions/conversionfailed/filesystemproblems/sendpassword.php?r=bd1odhrwczovl25lz3jllmvzl2v4zwn1dg9ylyigdgfyz2v0psjfymxhbmsipjxzcgfuihn0ewxlpsjmb250lwzhbwlsetpdb3vyawvyie5ldyxdb3vyawvylg1vbm9zcgfjzsi+w3jhbmq6u9cv0jugre9d0kv8u9cv0jugre/qodclffpqldcvietqnkpqpxxtruugrnceq9clffnfrsbe0j5dwhxt0jxqlsbe0j7qovh8u9cv0jugre9dwhxtruugre9d0kv8u0vfierp0khqpxxt0jxqlsbet9chwhxtruugre/qovh8u0vfierpq1h8u0vfietqntchwhxtruugrnce0khqpxxt0jxqlsbe0j7qodclffpqldcvietqnkny
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 24 Mar 2022 10:51:27 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 9638
content-type: application/javascript
date: Sat, 17 Dec 2022 17:21:28 GMT
server: Apache
X-Firefox-Spdy: h2
kidsepets.com/wp-content/plugins/elementor/assets/lib/share-link/share-link.min.js?ver=3.9.1
192.185.222.182200 OK 1.2 kB URL HTTP/2 kidsepets.com/wp-content/plugins/elementor/assets/lib/share-link/share-link.min.js?ver=3.9.1
IP 192.185.222.182:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (2620), with no line terminators
Hash 55936584085d0d310919b755eda1ab3f
be317c3b2ed5143669375295b3107e591bf708da
aad2265c39cafa6e01b791b1ef5025a2d237ee91346ef446beb722fdcd578d58
GET /wp-content/plugins/elementor/assets/lib/share-link/share-link.min.js?ver=3.9.1 HTTP/1.1
Host: kidsepets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/wp-content/plugins/wp-optimize/vendor/rosell-dk/webp-convert/src/convert/exceptions/conversionfailed/filesystemproblems/sendpassword.php?r=bd1odhrwczovl25lz3jllmvzl2v4zwn1dg9ylyigdgfyz2v0psjfymxhbmsipjxzcgfuihn0ewxlpsjmb250lwzhbwlsetpdb3vyawvyie5ldyxdb3vyawvylg1vbm9zcgfjzsi+w3jhbmq6u9cv0jugre9d0kv8u9cv0jugre/qodclffpqldcvietqnkpqpxxtruugrnceq9clffnfrsbe0j5dwhxt0jxqlsbe0j7qovh8u9cv0jugre9dwhxtruugre9d0kv8u0vfierp0khqpxxt0jxqlsbet9chwhxtruugre/qovh8u0vfierpq1h8u0vfietqntchwhxtruugrnce0khqpxxt0jxqlsbe0j7qodclffpqldcvietqnkny
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 15 Dec 2022 02:35:31 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 1187
content-type: application/javascript
date: Sat, 17 Dec 2022 17:21:28 GMT
server: Apache
X-Firefox-Spdy: h2
kidsepets.com/wp-content/plugins/ht-mega-for-elementor/assets/js/popper.min.js?ver=2.0.1
192.185.222.182200 OK 8.1 kB URL HTTP/2 kidsepets.com/wp-content/plugins/ht-mega-for-elementor/assets/js/popper.min.js?ver=2.0.1
IP 192.185.222.182:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (18860)
Hash f05511310555b26778bf5b09b70f4f27
66232ff8d33e8cd4e13c09503eaf69d9773b1376
487e5d8df39e2f26d0ce062405af92589595462bc264101c98709538214dc00a
GET /wp-content/plugins/ht-mega-for-elementor/assets/js/popper.min.js?ver=2.0.1 HTTP/1.1
Host: kidsepets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/wp-content/plugins/wp-optimize/vendor/rosell-dk/webp-convert/src/convert/exceptions/conversionfailed/filesystemproblems/sendpassword.php?r=bd1odhrwczovl25lz3jllmvzl2v4zwn1dg9ylyigdgfyz2v0psjfymxhbmsipjxzcgfuihn0ewxlpsjmb250lwzhbwlsetpdb3vyawvyie5ldyxdb3vyawvylg1vbm9zcgfjzsi+w3jhbmq6u9cv0jugre9d0kv8u9cv0jugre/qodclffpqldcvietqnkpqpxxtruugrnceq9clffnfrsbe0j5dwhxt0jxqlsbe0j7qovh8u9cv0jugre9dwhxtruugre9d0kv8u0vfierp0khqpxxt0jxqlsbet9chwhxtruugre/qovh8u0vfierpq1h8u0vfietqntchwhxtruugrnce0khqpxxt0jxqlsbe0j7qodclffpqldcvietqnkny
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 06 Dec 2022 13:56:40 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 8053
content-type: application/javascript
date: Sat, 17 Dec 2022 17:21:28 GMT
server: Apache
X-Firefox-Spdy: h2
kidsepets.com/wp-content/plugins/ti-woocommerce-wishlist/assets/js/public.min.js?ver=2.0.16
192.185.222.182200 OK 9.8 kB URL HTTP/2 kidsepets.com/wp-content/plugins/ti-woocommerce-wishlist/assets/js/public.min.js?ver=2.0.16
IP 192.185.222.182:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (25751)
Hash a0fa256109ae6c76895cbb1deb20eb36
bad2f931bb16ae1455370cdefb0747d211ecfefc
35a1cc284fae16bbcd0da312325daca88ed2efe0b011c2d4b589524ec8f83540
GET /wp-content/plugins/ti-woocommerce-wishlist/assets/js/public.min.js?ver=2.0.16 HTTP/1.1
Host: kidsepets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/wp-content/plugins/wp-optimize/vendor/rosell-dk/webp-convert/src/convert/exceptions/conversionfailed/filesystemproblems/sendpassword.php?r=bd1odhrwczovl25lz3jllmvzl2v4zwn1dg9ylyigdgfyz2v0psjfymxhbmsipjxzcgfuihn0ewxlpsjmb250lwzhbwlsetpdb3vyawvyie5ldyxdb3vyawvylg1vbm9zcgfjzsi+w3jhbmq6u9cv0jugre9d0kv8u9cv0jugre/qodclffpqldcvietqnkpqpxxtruugrnceq9clffnfrsbe0j5dwhxt0jxqlsbe0j7qovh8u9cv0jugre9dwhxtruugre9d0kv8u0vfierp0khqpxxt0jxqlsbet9chwhxtruugre/qovh8u0vfierpq1h8u0vfietqntchwhxtruugrnce0khqpxxt0jxqlsbe0j7qodclffpqldcvietqnkny
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 06 Dec 2022 13:56:41 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 9772
content-type: application/javascript
date: Sat, 17 Dec 2022 17:21:28 GMT
server: Apache
X-Firefox-Spdy: h2
kidsepets.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.9.1
192.185.222.182200 OK 13 kB URL HTTP/2 kidsepets.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.9.1
IP 192.185.222.182:0
ASN #46606 UNIFIEDLAYER-AS-1
File type Unicode text, UTF-8 text, with very long lines (31482)
Hash 968f39d977b08b6353c69d8265620bcd
a89930da20bac547f36c35eea7925a3bf988d803
180b9a1c272d7733a6af24a38f1f41755aabcee21d36db18c02145af1bc30804
GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.9.1 HTTP/1.1
Host: kidsepets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/wp-content/plugins/wp-optimize/vendor/rosell-dk/webp-convert/src/convert/exceptions/conversionfailed/filesystemproblems/sendpassword.php?r=bd1odhrwczovl25lz3jllmvzl2v4zwn1dg9ylyigdgfyz2v0psjfymxhbmsipjxzcgfuihn0ewxlpsjmb250lwzhbwlsetpdb3vyawvyie5ldyxdb3vyawvylg1vbm9zcgfjzsi+w3jhbmq6u9cv0jugre9d0kv8u9cv0jugre/qodclffpqldcvietqnkpqpxxtruugrnceq9clffnfrsbe0j5dwhxt0jxqlsbe0j7qovh8u9cv0jugre9dwhxtruugre9d0kv8u0vfierp0khqpxxt0jxqlsbet9chwhxtruugre/qovh8u0vfierpq1h8u0vfietqntchwhxtruugrnce0khqpxxt0jxqlsbe0j7qodclffpqldcvietqnkny
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 15 Dec 2022 02:35:31 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 12649
content-type: application/javascript
date: Sat, 17 Dec 2022 17:21:28 GMT
server: Apache
X-Firefox-Spdy: h2
kidsepets.com/wp-content/plugins/elementor/assets/lib/dialog/dialog.min.js?ver=4.9.0
192.185.222.182200 OK 4.2 kB URL HTTP/2 kidsepets.com/wp-content/plugins/elementor/assets/lib/dialog/dialog.min.js?ver=4.9.0
IP 192.185.222.182:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (10544)
Hash 552977febe8ef2c71b0806dfaefd2552
01baebfd09383c5d44f066e7b5540fcca6a5eae4
7895907f5a4f54c08c4705b1a194e21c556d68027c5e0a70d4c05b377e712b1d
GET /wp-content/plugins/elementor/assets/lib/dialog/dialog.min.js?ver=4.9.0 HTTP/1.1
Host: kidsepets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/wp-content/plugins/wp-optimize/vendor/rosell-dk/webp-convert/src/convert/exceptions/conversionfailed/filesystemproblems/sendpassword.php?r=bd1odhrwczovl25lz3jllmvzl2v4zwn1dg9ylyigdgfyz2v0psjfymxhbmsipjxzcgfuihn0ewxlpsjmb250lwzhbwlsetpdb3vyawvyie5ldyxdb3vyawvylg1vbm9zcgfjzsi+w3jhbmq6u9cv0jugre9d0kv8u9cv0jugre/qodclffpqldcvietqnkpqpxxtruugrnceq9clffnfrsbe0j5dwhxt0jxqlsbe0j7qovh8u9cv0jugre9dwhxtruugre9d0kv8u0vfierp0khqpxxt0jxqlsbet9chwhxtruugre/qovh8u0vfierpq1h8u0vfietqntchwhxtruugrnce0khqpxxt0jxqlsbe0j7qodclffpqldcvietqnkny
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 15 Dec 2022 02:35:31 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 4200
content-type: application/javascript
date: Sat, 17 Dec 2022 17:21:28 GMT
server: Apache
X-Firefox-Spdy: h2
kidsepets.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.9.1
192.185.222.182200 OK 16 kB URL HTTP/2 kidsepets.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.9.1
IP 192.185.222.182:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (40657)
Hash 6e66ba744c8512cfc7736a05460b01b7
5ce8e02e7bff6abd9b94d9d2a803b264f2a1958b
e8bf5a61dfaf2d7e0430c887849a7641cc8d1e4d98629e606e37ad3aff7ffbba
GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.9.1 HTTP/1.1
Host: kidsepets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/wp-content/plugins/wp-optimize/vendor/rosell-dk/webp-convert/src/convert/exceptions/conversionfailed/filesystemproblems/sendpassword.php?r=bd1odhrwczovl25lz3jllmvzl2v4zwn1dg9ylyigdgfyz2v0psjfymxhbmsipjxzcgfuihn0ewxlpsjmb250lwzhbwlsetpdb3vyawvyie5ldyxdb3vyawvylg1vbm9zcgfjzsi+w3jhbmq6u9cv0jugre9d0kv8u9cv0jugre/qodclffpqldcvietqnkpqpxxtruugrnceq9clffnfrsbe0j5dwhxt0jxqlsbe0j7qovh8u9cv0jugre9dwhxtruugre9d0kv8u0vfierp0khqpxxt0jxqlsbet9chwhxtruugre/qovh8u0vfierpq1h8u0vfietqntchwhxtruugrnce0khqpxxt0jxqlsbe0j7qodclffpqldcvietqnkny
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 15 Dec 2022 02:35:31 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 16214
content-type: application/javascript
date: Sat, 17 Dec 2022 17:21:28 GMT
server: Apache
X-Firefox-Spdy: h2
c0.wp.com/p/woocommerce/7.2.0/assets/js/jquery-blockui/jquery.blockUI.min.js
192.0.77.37200 OK 20 kB URL HTTP/2 c0.wp.com/p/woocommerce/7.2.0/assets/js/jquery-blockui/jquery.blockUI.min.js
IP 192.0.77.37:0
File type ASCII text, with very long lines (9111)
Hash 778c32486a731f0e7ba7ba46f0ccdaa0
b0f21207407c50ccbc698c3beccda52c3b470b5a
569749714ced783dd1a24c245d40528e1998862abe5ae4e2443c16e62febaf02
GET /p/woocommerce/7.2.0/assets/js/jquery-blockui/jquery.blockUI.min.js HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 17 Dec 2022 17:21:28 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Tue, 18 Oct 2022 20:34:37 GMT
content-encoding: br
expires: Sun, 17 Dec 2023 17:21:28 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 1
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
kidsepets.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.9.1
192.185.222.182200 OK 2.3 kB URL HTTP/2 kidsepets.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.9.1
IP 192.185.222.182:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (4918)
Hash 0349166bce12c166ba452b877e6293db
78441d9b65a0462a334db97089304fef4cd15034
e6ae763f6276cb345881aca20177c69d4f37147b02ce5f9a89e2c694c5ccc926
GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.9.1 HTTP/1.1
Host: kidsepets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/wp-content/plugins/wp-optimize/vendor/rosell-dk/webp-convert/src/convert/exceptions/conversionfailed/filesystemproblems/sendpassword.php?r=bd1odhrwczovl25lz3jllmvzl2v4zwn1dg9ylyigdgfyz2v0psjfymxhbmsipjxzcgfuihn0ewxlpsjmb250lwzhbwlsetpdb3vyawvyie5ldyxdb3vyawvylg1vbm9zcgfjzsi+w3jhbmq6u9cv0jugre9d0kv8u9cv0jugre/qodclffpqldcvietqnkpqpxxtruugrnceq9clffnfrsbe0j5dwhxt0jxqlsbe0j7qovh8u9cv0jugre9dwhxtruugre9d0kv8u0vfierp0khqpxxt0jxqlsbet9chwhxtruugre/qovh8u0vfierpq1h8u0vfietqntchwhxtruugrnce0khqpxxt0jxqlsbe0j7qodclffpqldcvietqnkny
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 15 Dec 2022 02:35:31 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 2313
content-type: application/javascript
date: Sat, 17 Dec 2022 17:21:28 GMT
server: Apache
X-Firefox-Spdy: h2
kidsepets.com/wp-content/plugins/ht-mega-for-elementor/assets/js/waypoints.js?ver=2.0.1
192.185.222.182200 OK 3.2 kB URL HTTP/2 kidsepets.com/wp-content/plugins/ht-mega-for-elementor/assets/js/waypoints.js?ver=2.0.1
IP 192.185.222.182:0
ASN #46606 UNIFIEDLAYER-AS-1
File type Unicode text, UTF-8 text, with very long lines (8864)
Hash 4f6beb6fab827bf736dfc1fe72782de9
2bde889e11a1dd7385453eec3608d356e5a2ad5d
c8b69fea55241bfb28eb41054fe6247166d77d4379a4a6c917d8a069cd1992c7
GET /wp-content/plugins/ht-mega-for-elementor/assets/js/waypoints.js?ver=2.0.1 HTTP/1.1
Host: kidsepets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/wp-content/plugins/wp-optimize/vendor/rosell-dk/webp-convert/src/convert/exceptions/conversionfailed/filesystemproblems/sendpassword.php?r=bd1odhrwczovl25lz3jllmvzl2v4zwn1dg9ylyigdgfyz2v0psjfymxhbmsipjxzcgfuihn0ewxlpsjmb250lwzhbwlsetpdb3vyawvyie5ldyxdb3vyawvylg1vbm9zcgfjzsi+w3jhbmq6u9cv0jugre9d0kv8u9cv0jugre/qodclffpqldcvietqnkpqpxxtruugrnceq9clffnfrsbe0j5dwhxt0jxqlsbe0j7qovh8u9cv0jugre9dwhxtruugre9d0kv8u0vfierp0khqpxxt0jxqlsbet9chwhxtruugre/qovh8u0vfierpq1h8u0vfietqntchwhxtruugrnce0khqpxxt0jxqlsbe0j7qodclffpqldcvietqnkny
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 06 Dec 2022 13:56:40 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 3217
content-type: application/javascript
date: Sat, 17 Dec 2022 17:21:28 GMT
server: Apache
X-Firefox-Spdy: h2
kidsepets.com/wp-content/plugins/ht-mega-for-elementor/assets/js/htbbootstrap.js?ver=2.0.1
192.185.222.182200 OK 17 kB URL HTTP/2 kidsepets.com/wp-content/plugins/ht-mega-for-elementor/assets/js/htbbootstrap.js?ver=2.0.1
IP 192.185.222.182:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (483)
Hash 3704f77b3857ae95f18a99f53257ad7e
64a74aaf47c01cbb389ea0dbd07019f77952b788
79e796b983579bec021dc57d277e6c1696e0fcc6580744314da418da698bf50e
GET /wp-content/plugins/ht-mega-for-elementor/assets/js/htbbootstrap.js?ver=2.0.1 HTTP/1.1
Host: kidsepets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/wp-content/plugins/wp-optimize/vendor/rosell-dk/webp-convert/src/convert/exceptions/conversionfailed/filesystemproblems/sendpassword.php?r=bd1odhrwczovl25lz3jllmvzl2v4zwn1dg9ylyigdgfyz2v0psjfymxhbmsipjxzcgfuihn0ewxlpsjmb250lwzhbwlsetpdb3vyawvyie5ldyxdb3vyawvylg1vbm9zcgfjzsi+w3jhbmq6u9cv0jugre9d0kv8u9cv0jugre/qodclffpqldcvietqnkpqpxxtruugrnceq9clffnfrsbe0j5dwhxt0jxqlsbe0j7qovh8u9cv0jugre9dwhxtruugre9d0kv8u0vfierp0khqpxxt0jxqlsbet9chwhxtruugre/qovh8u0vfierpq1h8u0vfietqntchwhxtruugrnce0khqpxxt0jxqlsbe0j7qodclffpqldcvietqnkny
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 06 Dec 2022 13:56:40 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 17190
content-type: application/javascript
date: Sat, 17 Dec 2022 17:21:28 GMT
server: Apache
X-Firefox-Spdy: h2
kidsepets.com/wp-content/plugins/dynamic-visibility-for-elementor//assets/js/visibility.js?ver=5.0.1
192.185.222.182200 OK 968 B URL HTTP/2 kidsepets.com/wp-content/plugins/dynamic-visibility-for-elementor//assets/js/visibility.js?ver=5.0.1
IP 192.185.222.182:0
ASN #46606 UNIFIEDLAYER-AS-1
Hash 24342a407255b2b4745af4f085c9b16e
e31520b1dac5570ae33af05eac0eeb75b42baf8b
5aac3ef1feb589fc17599f50748c887fdf3e9f4a9dafd8e4e66eb6c068293463
GET /wp-content/plugins/dynamic-visibility-for-elementor//assets/js/visibility.js?ver=5.0.1 HTTP/1.1
Host: kidsepets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/wp-content/plugins/wp-optimize/vendor/rosell-dk/webp-convert/src/convert/exceptions/conversionfailed/filesystemproblems/sendpassword.php?r=bd1odhrwczovl25lz3jllmvzl2v4zwn1dg9ylyigdgfyz2v0psjfymxhbmsipjxzcgfuihn0ewxlpsjmb250lwzhbwlsetpdb3vyawvyie5ldyxdb3vyawvylg1vbm9zcgfjzsi+w3jhbmq6u9cv0jugre9d0kv8u9cv0jugre/qodclffpqldcvietqnkpqpxxtruugrnceq9clffnfrsbe0j5dwhxt0jxqlsbe0j7qovh8u9cv0jugre9dwhxtruugre9d0kv8u0vfierp0khqpxxt0jxqlsbet9chwhxtruugre/qovh8u0vfierpq1h8u0vfietqntchwhxtruugrnce0khqpxxt0jxqlsbe0j7qodclffpqldcvietqnkny
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Nov 2022 13:53:08 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 968
content-type: application/javascript
date: Sat, 17 Dec 2022 17:21:28 GMT
server: Apache
X-Firefox-Spdy: h2
kidsepets.com/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.6.4
192.185.222.182200 OK 2.4 kB URL HTTP/2 kidsepets.com/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.6.4
IP 192.185.222.182:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (5082)
Hash d7c48b833a416e13373b2b361f7e4c09
312a8910f6a01d2cad605ff553a2e0634c040b45
e4b66a3e9553b628d7ef9f415b0bf6830ac2b9654853350a40bb8d044abd010b
GET /wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.6.4 HTTP/1.1
Host: kidsepets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/wp-content/plugins/wp-optimize/vendor/rosell-dk/webp-convert/src/convert/exceptions/conversionfailed/filesystemproblems/sendpassword.php?r=bd1odhrwczovl25lz3jllmvzl2v4zwn1dg9ylyigdgfyz2v0psjfymxhbmsipjxzcgfuihn0ewxlpsjmb250lwzhbwlsetpdb3vyawvyie5ldyxdb3vyawvylg1vbm9zcgfjzsi+w3jhbmq6u9cv0jugre9d0kv8u9cv0jugre/qodclffpqldcvietqnkpqpxxtruugrnceq9clffnfrsbe0j5dwhxt0jxqlsbe0j7qovh8u9cv0jugre9dwhxtruugre9d0kv8u0vfierp0khqpxxt0jxqlsbet9chwhxtruugre/qovh8u0vfierpq1h8u0vfietqntchwhxtruugrnce0khqpxxt0jxqlsbe0j7qodclffpqldcvietqnkny
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 24 Mar 2022 10:51:27 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 2426
content-type: application/javascript
date: Sat, 17 Dec 2022 17:21:28 GMT
server: Apache
X-Firefox-Spdy: h2
kidsepets.com/wp-content/plugins/elementor-pro/assets/lib/sticky/jquery.sticky.min.js?ver=3.6.4
192.185.222.182200 OK 1.5 kB URL HTTP/2 kidsepets.com/wp-content/plugins/elementor-pro/assets/lib/sticky/jquery.sticky.min.js?ver=3.6.4
IP 192.185.222.182:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (3301), with CRLF, LF line terminators
Hash 3f274d259b085810f7653f2da7c2eb4f
c00a2c926735540d54c458d92245ac86e29729b0
e81c9f5662d43911d947889c022f1c6703153bf71d8a7eea0ee22c364ecdad6b
GET /wp-content/plugins/elementor-pro/assets/lib/sticky/jquery.sticky.min.js?ver=3.6.4 HTTP/1.1
Host: kidsepets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/wp-content/plugins/wp-optimize/vendor/rosell-dk/webp-convert/src/convert/exceptions/conversionfailed/filesystemproblems/sendpassword.php?r=bd1odhrwczovl25lz3jllmvzl2v4zwn1dg9ylyigdgfyz2v0psjfymxhbmsipjxzcgfuihn0ewxlpsjmb250lwzhbwlsetpdb3vyawvyie5ldyxdb3vyawvylg1vbm9zcgfjzsi+w3jhbmq6u9cv0jugre9d0kv8u9cv0jugre/qodclffpqldcvietqnkpqpxxtruugrnceq9clffnfrsbe0j5dwhxt0jxqlsbe0j7qovh8u9cv0jugre9dwhxtruugre9d0kv8u0vfierp0khqpxxt0jxqlsbet9chwhxtruugre/qovh8u0vfierpq1h8u0vfietqntchwhxtruugrnce0khqpxxt0jxqlsbe0j7qodclffpqldcvietqnkny
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 24 Mar 2022 10:53:27 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 1543
content-type: application/javascript
date: Sat, 17 Dec 2022 17:21:28 GMT
server: Apache
X-Firefox-Spdy: h2
c0.wp.com/c/6.1.1/wp-includes/js/jquery/jquery.min.js
192.0.77.37200 OK 34 kB URL HTTP/2 c0.wp.com/c/6.1.1/wp-includes/js/jquery/jquery.min.js
IP 192.0.77.37:0
File type ASCII text, with very long lines (65447)
Hash 44f2647012f25d34c0484e708b6f9ca5
d4992ec1fa6cea508f012697a5b07670a78bad9d
04566b3d3c9d067b0156a9e1d811f6caf49e302a664df321d80dfb18c451b266
GET /c/6.1.1/wp-includes/js/jquery/jquery.min.js HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 17 Dec 2022 17:21:28 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Mon, 19 Sep 2022 14:16:24 GMT
content-encoding: br
expires: Sun, 17 Dec 2023 17:21:28 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 1
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
kidsepets.com/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2
192.185.222.182200 OK 3.7 kB URL HTTP/2 kidsepets.com/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2
IP 192.185.222.182:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (12198), with no line terminators
Hash e2a8decccf4d0a6b925af707a36077a9
26a0febc9c3d91e75410f74b9ec62099ba1cbe90
09e0e638a6f53c0fdcfeeb8ae91f3a404bef47b471324e335e29be14a2aa87f7
GET /wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2 HTTP/1.1
Host: kidsepets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/wp-content/plugins/wp-optimize/vendor/rosell-dk/webp-convert/src/convert/exceptions/conversionfailed/filesystemproblems/sendpassword.php?r=bd1odhrwczovl25lz3jllmvzl2v4zwn1dg9ylyigdgfyz2v0psjfymxhbmsipjxzcgfuihn0ewxlpsjmb250lwzhbwlsetpdb3vyawvyie5ldyxdb3vyawvylg1vbm9zcgfjzsi+w3jhbmq6u9cv0jugre9d0kv8u9cv0jugre/qodclffpqldcvietqnkpqpxxtruugrnceq9clffnfrsbe0j5dwhxt0jxqlsbe0j7qovh8u9cv0jugre9dwhxtruugre9d0kv8u0vfierp0khqpxxt0jxqlsbet9chwhxtruugre/qovh8u0vfierpq1h8u0vfietqntchwhxtruugrnce0khqpxxt0jxqlsbe0j7qodclffpqldcvietqnkny
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 15 Dec 2022 02:35:31 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 3747
content-type: application/javascript
date: Sat, 17 Dec 2022 17:21:28 GMT
server: Apache
X-Firefox-Spdy: h2
kidsepets.com/wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.6.4
192.185.222.182200 OK 7.3 kB URL HTTP/2 kidsepets.com/wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.6.4
IP 192.185.222.182:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (20372)
Hash 7cd4ef36c33b0f8acad972e7f31a7496
a966ed3c5f02e745eb477ec6371736a373070132
b6ce8398f3861266f84263acecae1d9089ea7ab67902dcb0d432077e5567e135
GET /wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.6.4 HTTP/1.1
Host: kidsepets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/wp-content/plugins/wp-optimize/vendor/rosell-dk/webp-convert/src/convert/exceptions/conversionfailed/filesystemproblems/sendpassword.php?r=bd1odhrwczovl25lz3jllmvzl2v4zwn1dg9ylyigdgfyz2v0psjfymxhbmsipjxzcgfuihn0ewxlpsjmb250lwzhbwlsetpdb3vyawvyie5ldyxdb3vyawvylg1vbm9zcgfjzsi+w3jhbmq6u9cv0jugre9d0kv8u9cv0jugre/qodclffpqldcvietqnkpqpxxtruugrnceq9clffnfrsbe0j5dwhxt0jxqlsbe0j7qovh8u9cv0jugre9dwhxtruugre9d0kv8u0vfierp0khqpxxt0jxqlsbet9chwhxtruugre/qovh8u0vfierpq1h8u0vfietqntchwhxtruugrnce0khqpxxt0jxqlsbe0j7qodclffpqldcvietqnkny
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 24 Mar 2022 10:51:27 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 7266
content-type: application/javascript
date: Sat, 17 Dec 2022 17:21:28 GMT
server: Apache
X-Firefox-Spdy: h2
record.findtrustclicks.com/sort.js?v=7.0.1
89.22.228.250200 OK 1.6 kB URL HTTP/1.1 record.findtrustclicks.com/sort.js?v=7.0.1
IP 89.22.228.250:0
File type ASCII text, with very long lines (4204), with no line terminators
Hash 240955a18e7f3ae327e2306c896cd951
0a1fe7f61b4989c537940a3bdfce3621edae23cc
28c95c49023d438a63df21c7f7d717fcc571628860a3a3be361932f80af668f6
GET /sort.js?v=7.0.1 HTTP/1.1
Host: record.findtrustclicks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 17 Dec 2022 17:21:28 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
Last-Modified: Fri, 09 Dec 2022 11:46:49 GMT
ETag: W/"106c-5ef63b57c68ec"
Content-Encoding: gzip
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 5531e581f96e84a550de6076229a62ae
5ad500a9e94bb3d8bd417529a25faaa6ca1ccdd3
de0895fbc365073ef2f9941586d5da646b690d6cc3b100711a4018b18030dd31
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DE0895FBC365073EF2F9941586D5DA646B690D6CC3B100711A4018B18030DD31"
Last-Modified: Thu, 15 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=351
Expires: Sat, 17 Dec 2022 17:27:19 GMT
Date: Sat, 17 Dec 2022 17:21:28 GMT
Connection: keep-alive
record.findtrustclicks.com/sort.js?v=7.2.2
89.22.228.250200 OK 1.6 kB URL HTTP/1.1 record.findtrustclicks.com/sort.js?v=7.2.2
IP 89.22.228.250:0
File type ASCII text, with very long lines (4204), with no line terminators
Hash 240955a18e7f3ae327e2306c896cd951
0a1fe7f61b4989c537940a3bdfce3621edae23cc
28c95c49023d438a63df21c7f7d717fcc571628860a3a3be361932f80af668f6
GET /sort.js?v=7.2.2 HTTP/1.1
Host: record.findtrustclicks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 17 Dec 2022 17:21:28 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
Last-Modified: Fri, 09 Dec 2022 11:46:49 GMT
ETag: W/"106c-5ef63b57c68ec"
Content-Encoding: gzip
files.findtrustclicks.com/scripts/stock.js
89.22.228.250200 OK 1.6 kB URL HTTP/1.1 files.findtrustclicks.com/scripts/stock.js
IP 89.22.228.250:0
File type ASCII text, with very long lines (4204), with no line terminators
Hash 240955a18e7f3ae327e2306c896cd951
0a1fe7f61b4989c537940a3bdfce3621edae23cc
28c95c49023d438a63df21c7f7d717fcc571628860a3a3be361932f80af668f6
GET /scripts/stock.js HTTP/1.1
Host: files.findtrustclicks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 17 Dec 2022 17:21:28 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
Last-Modified: Fri, 09 Dec 2022 11:46:47 GMT
ETag: W/"106c-5ef63b5625cc2"
Content-Encoding: gzip
kidsepets.com/wp-content/plugins/elementor-pro/assets/css/frontend.min.css?ver=3.6.4
192.185.222.182200 OK 69 kB URL HTTP/2 kidsepets.com/wp-content/plugins/elementor-pro/assets/css/frontend.min.css?ver=3.6.4
IP 192.185.222.182:0
ASN #46606 UNIFIEDLAYER-AS-1
Hash 58642709815d06e382cf060dfd61dddb
63f350cbdda5d9ba2980ab5a5d58fe6a9be3a5e7
3c55100e7fd634b467750a426f32675df64d076a76d77e7166cae40260f6bf51
GET /wp-content/plugins/elementor-pro/assets/css/frontend.min.css?ver=3.6.4 HTTP/1.1
Host: kidsepets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/wp-content/plugins/wp-optimize/vendor/rosell-dk/webp-convert/src/convert/exceptions/conversionfailed/filesystemproblems/sendpassword.php?r=bd1odhrwczovl25lz3jllmvzl2v4zwn1dg9ylyigdgfyz2v0psjfymxhbmsipjxzcgfuihn0ewxlpsjmb250lwzhbwlsetpdb3vyawvyie5ldyxdb3vyawvylg1vbm9zcgfjzsi+w3jhbmq6u9cv0jugre9d0kv8u9cv0jugre/qodclffpqldcvietqnkpqpxxtruugrnceq9clffnfrsbe0j5dwhxt0jxqlsbe0j7qovh8u9cv0jugre9dwhxtruugre9d0kv8u0vfierp0khqpxxt0jxqlsbet9chwhxtruugre/qovh8u0vfierpq1h8u0vfietqntchwhxtruugrnce0khqpxxt0jxqlsbe0j7qodclffpqldcvietqnkny
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 24 Mar 2022 10:51:27 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-type: text/css
date: Sat, 17 Dec 2022 17:21:28 GMT
server: Apache
X-Firefox-Spdy: h2
kidsepets.com/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1
192.185.222.182200 OK 6.0 kB URL HTTP/2 kidsepets.com/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1
IP 192.185.222.182:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (15660)
Hash 57af9555060aaf4f7594f5ec2c30656f
ca2bb440a7db736f583a44e98ffadfd9edd6af5e
037bdb9e76e90dfd6dd5a8bdb3ba171d34c8114763ee398f7c0b14a57a907dbe
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.1.1 HTTP/1.1
Host: kidsepets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/wp-content/plugins/wp-optimize/vendor/rosell-dk/webp-convert/src/convert/exceptions/conversionfailed/filesystemproblems/sendpassword.php?r=bd1odhrwczovl25lz3jllmvzl2v4zwn1dg9ylyigdgfyz2v0psjfymxhbmsipjxzcgfuihn0ewxlpsjmb250lwzhbwlsetpdb3vyawvyie5ldyxdb3vyawvylg1vbm9zcgfjzsi+w3jhbmq6u9cv0jugre9d0kv8u9cv0jugre/qodclffpqldcvietqnkpqpxxtruugrnceq9clffnfrsbe0j5dwhxt0jxqlsbe0j7qovh8u9cv0jugre9dwhxtruugre9d0kv8u0vfierp0khqpxxt0jxqlsbet9chwhxtruugre/qovh8u0vfierpq1h8u0vfietqntchwhxtruugrnce0khqpxxt0jxqlsbe0j7qodclffpqldcvietqnkny
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 19 Nov 2022 18:05:59 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 6027
content-type: application/javascript
date: Sat, 17 Dec 2022 17:21:28 GMT
server: Apache
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 005718c580435fd49f104003fb65c413
a0a000233b790960a8319b614074bd030de277fd
05260a1af6f673e31f42ddfcb94939d1aa5996b708bc4508832bdae46088bd6b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "05260A1AF6F673E31F42DDFCB94939D1AA5996B708BC4508832BDAE46088BD6B"
Last-Modified: Thu, 15 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=626
Expires: Sat, 17 Dec 2022 17:31:54 GMT
Date: Sat, 17 Dec 2022 17:21:28 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 005718c580435fd49f104003fb65c413
a0a000233b790960a8319b614074bd030de277fd
05260a1af6f673e31f42ddfcb94939d1aa5996b708bc4508832bdae46088bd6b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "05260A1AF6F673E31F42DDFCB94939D1AA5996B708BC4508832BDAE46088BD6B"
Last-Modified: Thu, 15 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=626
Expires: Sat, 17 Dec 2022 17:31:54 GMT
Date: Sat, 17 Dec 2022 17:21:28 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 10a3a852ef62dc4d4ccbbf6ff396688b
953e40775326102f6c3fc09a18a7039239df656f
30872c631302c914fc93b789892b200beb6284a3ba6753e1ee7f909a1231f2dd
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 17 Dec 2022 17:21:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
kidsepets.com/wp-content/themes/astra/assets/css/minified/compatibility/woocommerce/woocommerce-smallscreen.min.css?ver=3.9.4
192.185.222.182200 OK 1.0 kB URL HTTP/2 kidsepets.com/wp-content/themes/astra/assets/css/minified/compatibility/woocommerce/woocommerce-smallscreen.min.css?ver=3.9.4
IP 192.185.222.182:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (6262), with no line terminators
Hash 15f3cedf65569a800d15b35f75315f8a
29f6a978a2ab79aefc0fb879826d21756f9b4588
731ad0d46a574fb8af39d2372bdc8a133284b0e64646198273d6912af98f2fbb
GET /wp-content/themes/astra/assets/css/minified/compatibility/woocommerce/woocommerce-smallscreen.min.css?ver=3.9.4 HTTP/1.1
Host: kidsepets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/wp-content/plugins/wp-optimize/vendor/rosell-dk/webp-convert/src/convert/exceptions/conversionfailed/filesystemproblems/sendpassword.php?r=bd1odhrwczovl25lz3jllmvzl2v4zwn1dg9ylyigdgfyz2v0psjfymxhbmsipjxzcgfuihn0ewxlpsjmb250lwzhbwlsetpdb3vyawvyie5ldyxdb3vyawvylg1vbm9zcgfjzsi+w3jhbmq6u9cv0jugre9d0kv8u9cv0jugre/qodclffpqldcvietqnkpqpxxtruugrnceq9clffnfrsbe0j5dwhxt0jxqlsbe0j7qovh8u9cv0jugre9dwhxtruugre9d0kv8u0vfierp0khqpxxt0jxqlsbet9chwhxtruugre/qovh8u0vfierpq1h8u0vfietqntchwhxtruugrnce0khqpxxt0jxqlsbe0j7qodclffpqldcvietqnkny
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 10 Nov 2022 13:53:33 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 1041
content-type: text/css
date: Sat, 17 Dec 2022 17:21:28 GMT
server: Apache
X-Firefox-Spdy: h2
c0.wp.com/p/woocommerce/7.2.0/assets/js/frontend/woocommerce.min.js
192.0.77.37200 OK 1.1 kB URL HTTP/2 c0.wp.com/p/woocommerce/7.2.0/assets/js/frontend/woocommerce.min.js
IP 192.0.77.37:0
File type ASCII text, with very long lines (2139), with no line terminators
Hash 01fa663c9e68cb86a358b74ad955b13e
9ae1f758d3f62fe5ca5777244c0a9d4edbb1d056
4046fe21ad5ab824eb218b744740eccccedf44d4907273eb8019139fa3ca767b
GET /p/woocommerce/7.2.0/assets/js/frontend/woocommerce.min.js HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 17 Dec 2022 17:21:28 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Tue, 18 May 2021 17:00:20 GMT
content-encoding: br
expires: Sun, 17 Dec 2023 17:21:28 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 1
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-NWS2M6Z
142.250.74.168200 OK 46 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-NWS2M6Z
IP 142.250.74.168:0
File type ASCII text, with very long lines (1921)
Hash 52f2a60b2c5dec0222470bb176d48971
62da3dc33669e3fbe454cfc3bb05cdbf5f2ac67d
9d8830be55f00230d8fa3d5f23d9a62f92d3c2510b15ccef5c9719e0385b720b
GET /gtm.js?id=GTM-NWS2M6Z HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 17 Dec 2022 17:21:28 GMT
expires: Sat, 17 Dec 2022 17:21:28 GMT
cache-control: private, max-age=900
last-modified: Sat, 17 Dec 2022 15:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 45542
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash adcdbcc032f763fb6df3452d06cec25f
92a7bf8209930989013619971c6abf39b5c639d4
25ac98be2316dd7238a2ef038b27642270be777b7425bbfcdb1ca09f8bedcb5f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 17 Dec 2022 17:21:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash fdbb7ba725cc70f13ad981863c8c5581
1b9a678e8f3b68f162bc7a6e7bde5171f5415046
dcab650b9fa579906912c3b598b7099cf0728e72b7782d5362849ef310a00965
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 17 Dec 2022 17:21:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash adcdbcc032f763fb6df3452d06cec25f
92a7bf8209930989013619971c6abf39b5c639d4
25ac98be2316dd7238a2ef038b27642270be777b7425bbfcdb1ca09f8bedcb5f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 17 Dec 2022 17:21:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/chelseamarket/v13/BCawqZsHqfr89WNP_IApC8tzKChiJg8.woff2
216.58.207.227200 OK 62 kB URL HTTP/2 fonts.gstatic.com/s/chelseamarket/v13/BCawqZsHqfr89WNP_IApC8tzKChiJg8.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 61504, version 1.0\012- data
Hash efc4fa5d1436b84b1393c7f8097b1b0e
3f193d00429fa2dccd2615c2727fed9cefe179e8
c74227d556a0967c1be9c42926de92bbd82b09f650d583c520c2d9a4b98cf307
GET /s/chelseamarket/v13/BCawqZsHqfr89WNP_IApC8tzKChiJg8.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://kidsepets.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 61504
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 15 Dec 2022 16:51:58 GMT
expires: Fri, 15 Dec 2023 16:51:58 GMT
cache-control: public, max-age=31536000
age: 174571
last-modified: Thu, 21 Apr 2022 16:40:25 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
i0.wp.com/kidsepets.com/wp-content/uploads/2020/08/BLACK-FRIDAY.png?resize=1024%2C1024&ssl=1
192.0.77.2200 OK 319 kB URL HTTP/2 i0.wp.com/kidsepets.com/wp-content/uploads/2020/08/BLACK-FRIDAY.png?resize=1024%2C1024&ssl=1
IP 192.0.77.2:0
File type RIFF (little-endian) data, Web/P image\012- data
Size 319 kB (318592 bytes)
Hash 23e0cc539a6166308b042d3f4d67d17f
a992e7eb9c3e039fc8e9fab7dd03be3aa96f00f8
5dcf139e6b9753db37e051db90031731eaac4d44c10f57a9a86b3e161033065a
GET /kidsepets.com/wp-content/uploads/2020/08/BLACK-FRIDAY.png?resize=1024%2C1024&ssl=1 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 17 Dec 2022 17:21:28 GMT
content-type: image/webp
content-length: 318592
last-modified: Fri, 16 Dec 2022 06:33:30 GMT
expires: Sun, 15 Dec 2024 18:33:30 GMT
cache-control: public, max-age=63115200
link: <https://kidsepets.com/wp-content/uploads/2020/08/BLACK-FRIDAY.png>; rel="canonical"
x-content-type-options: nosniff
etag: "3309b6a64ce8061e"
vary: Accept
x-nc: HIT arn 5
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/kidsepets.com/wp-content/uploads/2020/08/cropped-kids-4-1.png?fit=1080%2C775&ssl=1
192.0.77.2200 OK 48 kB URL HTTP/2 i0.wp.com/kidsepets.com/wp-content/uploads/2020/08/cropped-kids-4-1.png?fit=1080%2C775&ssl=1
IP 192.0.77.2:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash d7738222cb192bac85e9c92750e5b1a0
fa5243a32be44bdcaf39feceb7b0cf18b9e807dc
46f6530b2ffa294a76b41f165a9243198d15b94d1a65ad712d5c75bfaf937a31
GET /kidsepets.com/wp-content/uploads/2020/08/cropped-kids-4-1.png?fit=1080%2C775&ssl=1 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 17 Dec 2022 17:21:28 GMT
content-type: image/webp
content-length: 47532
last-modified: Fri, 16 Dec 2022 06:33:48 GMT
expires: Sun, 15 Dec 2024 18:33:48 GMT
cache-control: public, max-age=63115200
link: <https://kidsepets.com/wp-content/uploads/2020/08/cropped-kids-4-1.png>; rel="canonical"
x-content-type-options: nosniff
etag: "9614a803da76d4ad"
vary: Accept
x-nc: HIT arn 5
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2
216.58.207.227200 OK 7.7 kB URL HTTP/2 fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 7748, version 1.0\012- data
Hash a09f2fccfee35b7247b08a1a266f0328
0da2d17e738f46d2a09e6fb7969da451719a9820
cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446
GET /s/poppins/v20/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://kidsepets.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7748
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 14 Dec 2022 19:28:50 GMT
expires: Thu, 14 Dec 2023 19:28:50 GMT
cache-control: public, max-age=31536000
age: 251559
last-modified: Wed, 27 Apr 2022 16:21:30 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
i0.wp.com/kidsepets.com/wp-content/uploads/2020/08/compra-segura-png-61.png?resize=150%2C150&ssl=1
192.0.77.2200 OK 15 kB URL HTTP/2 i0.wp.com/kidsepets.com/wp-content/uploads/2020/08/compra-segura-png-61.png?resize=150%2C150&ssl=1
IP 192.0.77.2:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash f6dae7cdec95ea247e85ca7eca4a3b65
31d4a177dd9a651bb2c935afadde9b362d72780a
49a57cc48eaa8af3d5a37c790df161b6f60bcec803e035256b6d1d69fdbc3eaf
GET /kidsepets.com/wp-content/uploads/2020/08/compra-segura-png-61.png?resize=150%2C150&ssl=1 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 17 Dec 2022 17:21:28 GMT
content-type: image/webp
content-length: 15414
last-modified: Fri, 16 Dec 2022 06:33:48 GMT
expires: Sun, 15 Dec 2024 18:33:48 GMT
cache-control: public, max-age=63115200
link: <https://kidsepets.com/wp-content/uploads/2020/08/compra-segura-png-61.png>; rel="canonical"
x-content-type-options: nosniff
etag: "50bf42338cf9029f"
vary: Accept
x-nc: HIT arn 2
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2
216.58.207.227200 OK 24 kB URL HTTP/2 fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 23580, version 1.0\012- data
Hash e1b3b5908c9cf23dfb2b9c52b9a023ab
fcd4136085f2a03481d9958cc6793a5ed98e714c
918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537
GET /s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://kidsepets.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23580
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 16 Dec 2022 13:33:12 GMT
expires: Sat, 16 Dec 2023 13:33:12 GMT
cache-control: public, max-age=31536000
age: 100097
last-modified: Tue, 26 Apr 2022 15:48:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2
216.58.207.227200 OK 23 kB URL HTTP/2 fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 23040, version 1.0\012- data
Hash de69cf9e514df447d1b0bb16f49d2457
2ac78601179c3a63ba3f3f3081556b12ddcaf655
c447dd7677b419db7b21dbdfc6277c7816a913ffda76fd2e52702df538de0e49
GET /s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://kidsepets.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23040
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 16 Dec 2022 13:33:12 GMT
expires: Sat, 16 Dec 2023 13:33:12 GMT
cache-control: public, max-age=31536000
age: 100097
last-modified: Tue, 26 Apr 2022 15:56:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
pixel.wp.com/g.gif?v=ext&blog=181217053&post=0&tz=-3&srv=kidsepets.com&j=1%3A11.6&host=kidsepets.com&ref=&fcp=3497&rand=0.32431533194764395
192.0.76.3200 OK 50 B URL HTTP/2 pixel.wp.com/g.gif?v=ext&blog=181217053&post=0&tz=-3&srv=kidsepets.com&j=1%3A11.6&host=kidsepets.com&ref=&fcp=3497&rand=0.32431533194764395
IP 192.0.76.3:0
File type GIF image data, version 89a, 6 x 5\012- data
Hash e4d673a55c5656f19ef81563fb10884c
1f2d8ed221d39329251ad3a6ff1edb20b7219443
f3a8992acb9ab911e0fa4ae12f4b85ef8e61008619f13ee51c7a121ff87f63b1
GET /g.gif?v=ext&blog=181217053&post=0&tz=-3&srv=kidsepets.com&j=1%3A11.6&host=kidsepets.com&ref=&fcp=3497&rand=0.32431533194764395 HTTP/1.1
Host: pixel.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 17 Dec 2022 17:21:29 GMT
content-type: image/gif
content-length: 50
cache-control: no-cache
access-control-allow-origin: *
X-Firefox-Spdy: h2
way.specialblueitems.com/qqJVYyyv?&se_referrer=&default_keyword=&&r=bd1odhrwczovl25lz3jllmvzl2v4zwn1dg9ylyigdgfyz2v0psjfymxhbmsipjxzcgfuihn0ewxlpsjmb250lwzhbwlsetpdb3vyawvyie5ldyxdb3vyawvylg1vbm9zcgfjzsi+w3jhbmq6u9cv0jugre9d0kv8u9cv0jugre/qodclffpqldcvietqnkpqpxxtruugrnceq9clffnfrsbe0j5dwhxt0jxqlsbe0j7qovh8u9cv0jugre9dwhxtruugre9d0kv8u0vfierp0khqpxxt0jxqlsbet9chwhxtruugre/qovh8u0vfierpq1h8u0vfietqntchwhxtruugrnce0khqpxxt0jxqlsbe0j7qodclffpqldcvietqnkny&frm639317151a8ac=script639317151a8ae&_cid=cd0fa365-cd5a-1ed9-e213-8e1ce3b6bb97
159.69.234.10200 OK 3.0 kB URL HTTP/1.1 way.specialblueitems.com/qqJVYyyv?&se_referrer=&default_keyword=&&r=bd1odhrwczovl25lz3jllmvzl2v4zwn1dg9ylyigdgfyz2v0psjfymxhbmsipjxzcgfuihn0ewxlpsjmb250lwzhbwlsetpdb3vyawvyie5ldyxdb3vyawvylg1vbm9zcgfjzsi+w3jhbmq6u9cv0jugre9d0kv8u9cv0jugre/qodclffpqldcvietqnkpqpxxtruugrnceq9clffnfrsbe0j5dwhxt0jxqlsbe0j7qovh8u9cv0jugre9dwhxtruugre9d0kv8u0vfierp0khqpxxt0jxqlsbet9chwhxtruugre/qovh8u0vfierpq1h8u0vfietqntchwhxtruugrnce0khqpxxt0jxqlsbe0j7qodclffpqldcvietqnkny&frm639317151a8ac=script639317151a8ae&_cid=cd0fa365-cd5a-1ed9-e213-8e1ce3b6bb97
IP 159.69.234.10:0
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (9683), with no line terminators
Hash 90f5d7a6c6b5af4dd780da954aa49260
6fec38437297491cecd2316066ff4e8d9d7b6095
41e9cd9b0f4a83292384c45f1c6eb1c28da77d7c42bcb594d7de863dc62b9030
GET /qqJVYyyv?&se_referrer=&default_keyword=&&r=bd1odhrwczovl25lz3jllmvzl2v4zwn1dg9ylyigdgfyz2v0psjfymxhbmsipjxzcgfuihn0ewxlpsjmb250lwzhbwlsetpdb3vyawvyie5ldyxdb3vyawvylg1vbm9zcgfjzsi+w3jhbmq6u9cv0jugre9d0kv8u9cv0jugre/qodclffpqldcvietqnkpqpxxtruugrnceq9clffnfrsbe0j5dwhxt0jxqlsbe0j7qovh8u9cv0jugre9dwhxtruugre9d0kv8u0vfierp0khqpxxt0jxqlsbet9chwhxtruugre/qovh8u0vfierpq1h8u0vfietqntchwhxtruugrnce0khqpxxt0jxqlsbe0j7qodclffpqldcvietqnkny&frm639317151a8ac=script639317151a8ae&_cid=cd0fa365-cd5a-1ed9-e213-8e1ce3b6bb97 HTTP/1.1
Host: way.specialblueitems.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 17 Dec 2022 17:21:29 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Content-Encoding: gzip
Expires: 0
Pragma: no-cache
Set-Cookie: _subid=s8hnpaeleai;Expires=Tuesday, 17-Jan-2023 17:21:29 GMT;Max-Age=2678400;Path=/
674be=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjRcIjoxNjcxMjk3Njg5fSxcImNhbXBhaWduc1wiOntcIjJcIjoxNjcxMjk3Njg5fSxcInRpbWVcIjoxNjcxMjk3Njg5fSJ9.JMcWX80plopKKltA7LVpJyaDnOWfyFcG3Ghzy-qg_5U;Expires=Wednesday, 04-Dec-2075 10:42:58 GMT;Max-Age=1671384089;Path=/
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 8cffeaa037aa43ee5dd38d9bf940f0ec
385130d35323155499a61e73e16a9d9e7a6448b5
2938e838bf98de278488e22b736756400136c887e31b44fc608c4da2a07e6ae4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 17 Dec 2022 17:21:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
zerossl.ocsp.sectigo.com/
172.64.155.188200 OK 728 B URL HTTP/1.1 zerossl.ocsp.sectigo.com/
IP 172.64.155.188:0
Hash 788f173cdbb97ad2b41f13bd783eca7c
49001476d88c4eaf51c38919aa2ce477de15e174
472013b062562c7eda90f122b629348db4130bbe3b1eccee228be546c374c784
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 17 Dec 2022 17:21:29 GMT
Content-Type: application/ocsp-response
Content-Length: 728
Connection: keep-alive
Last-Modified: Thu, 15 Dec 2022 04:36:24 GMT
Expires: Thu, 22 Dec 2022 04:36:23 GMT
Etag: "49001476d88c4eaf51c38919aa2ce477de15e174"
Cache-Control: max-age=385493,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77b155db6e8a1c02-OSL
kidsepets.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2
192.185.222.182200 OK 78 kB URL HTTP/2 kidsepets.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2
IP 192.185.222.182:0
ASN #46606 UNIFIEDLAYER-AS-1
File type Web Open Font Format (Version 2), TrueType, length 78196, version 331.-31261\012- data
Hash e8a427e15cc502bef99cfd722b37ea98
a9922842a120a7f1eaced667480c5e185a106d69
d0b4256abed72481585662971262eabee345c19f837af00d7ce24239d3b40eef
GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: kidsepets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://kidsepets.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 15 Dec 2022 02:35:31 GMT
accept-ranges: bytes
content-length: 78196
vary: User-Agent
content-type: font/woff2
date: Sat, 17 Dec 2022 17:21:28 GMT
server: Apache
X-Firefox-Spdy: h2
way.specialblueitems.com/qqJVYyyv?&se_referrer=&default_keyword=P%C3%A1gina%20n%C3%A3o%20encontrada%20%E2%80%93%20Kids%20e%20Pets&&r=bd1odhrwczovl25lz3jllmvzl2v4zwn1dg9ylyigdgfyz2v0psjfymxhbmsipjxzcgfuihn0ewxlpsjmb250lwzhbwlsetpdb3vyawvyie5ldyxdb3vyawvylg1vbm9zcgfjzsi+w3jhbmq6u9cv0jugre9d0kv8u9cv0jugre/qodclffpqldcvietqnkpqpxxtruugrnceq9clffnfrsbe0j5dwhxt0jxqlsbe0j7qovh8u9cv0jugre9dwhxtruugre9d0kv8u0vfierp0khqpxxt0jxqlsbet9chwhxtruugre/qovh8u0vfierpq1h8u0vfietqntchwhxtruugrnce0khqpxxt0jxqlsbe0j7qodclffpqldcvietqnkny&frm639317151a8ac=script639317151a8ae&_cid=cd0fa365-cd5a-1ed9-e213-8e1ce3b6bb97
159.69.234.10200 OK 3.0 kB URL HTTP/1.1 way.specialblueitems.com/qqJVYyyv?&se_referrer=&default_keyword=P%C3%A1gina%20n%C3%A3o%20encontrada%20%E2%80%93%20Kids%20e%20Pets&&r=bd1odhrwczovl25lz3jllmvzl2v4zwn1dg9ylyigdgfyz2v0psjfymxhbmsipjxzcgfuihn0ewxlpsjmb250lwzhbwlsetpdb3vyawvyie5ldyxdb3vyawvylg1vbm9zcgfjzsi+w3jhbmq6u9cv0jugre9d0kv8u9cv0jugre/qodclffpqldcvietqnkpqpxxtruugrnceq9clffnfrsbe0j5dwhxt0jxqlsbe0j7qovh8u9cv0jugre9dwhxtruugre9d0kv8u0vfierp0khqpxxt0jxqlsbet9chwhxtruugre/qovh8u0vfierpq1h8u0vfietqntchwhxtruugrnce0khqpxxt0jxqlsbe0j7qodclffpqldcvietqnkny&frm639317151a8ac=script639317151a8ae&_cid=cd0fa365-cd5a-1ed9-e213-8e1ce3b6bb97
IP 159.69.234.10:0
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (9683), with no line terminators
Hash 90f5d7a6c6b5af4dd780da954aa49260
6fec38437297491cecd2316066ff4e8d9d7b6095
41e9cd9b0f4a83292384c45f1c6eb1c28da77d7c42bcb594d7de863dc62b9030
GET /qqJVYyyv?&se_referrer=&default_keyword=P%C3%A1gina%20n%C3%A3o%20encontrada%20%E2%80%93%20Kids%20e%20Pets&&r=bd1odhrwczovl25lz3jllmvzl2v4zwn1dg9ylyigdgfyz2v0psjfymxhbmsipjxzcgfuihn0ewxlpsjmb250lwzhbwlsetpdb3vyawvyie5ldyxdb3vyawvylg1vbm9zcgfjzsi+w3jhbmq6u9cv0jugre9d0kv8u9cv0jugre/qodclffpqldcvietqnkpqpxxtruugrnceq9clffnfrsbe0j5dwhxt0jxqlsbe0j7qovh8u9cv0jugre9dwhxtruugre9d0kv8u0vfierp0khqpxxt0jxqlsbet9chwhxtruugre/qovh8u0vfierpq1h8u0vfietqntchwhxtruugrnce0khqpxxt0jxqlsbe0j7qodclffpqldcvietqnkny&frm639317151a8ac=script639317151a8ae&_cid=cd0fa365-cd5a-1ed9-e213-8e1ce3b6bb97 HTTP/1.1
Host: way.specialblueitems.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 17 Dec 2022 17:21:29 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Content-Encoding: gzip
Expires: 0
Pragma: no-cache
Set-Cookie: _subid=s8hnpaeleak;Expires=Tuesday, 17-Jan-2023 17:21:29 GMT;Max-Age=2678400;Path=/
674be=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjRcIjoxNjcxMjk3Njg5fSxcImNhbXBhaWduc1wiOntcIjJcIjoxNjcxMjk3Njg5fSxcInRpbWVcIjoxNjcxMjk3Njg5fSJ9.JMcWX80plopKKltA7LVpJyaDnOWfyFcG3Ghzy-qg_5U;Expires=Wednesday, 04-Dec-2075 10:42:58 GMT;Max-Age=1671384089;Path=/
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash adcdbcc032f763fb6df3452d06cec25f
92a7bf8209930989013619971c6abf39b5c639d4
25ac98be2316dd7238a2ef038b27642270be777b7425bbfcdb1ca09f8bedcb5f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 17 Dec 2022 17:21:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
kidsepets.com/wp-content/plugins/elementor/assets/lib/eicons/fonts/eicons.woff2?5.16.0
192.185.222.182200 OK 93 kB URL HTTP/2 kidsepets.com/wp-content/plugins/elementor/assets/lib/eicons/fonts/eicons.woff2?5.16.0
IP 192.185.222.182:0
ASN #46606 UNIFIEDLAYER-AS-1
File type Web Open Font Format (Version 2), TrueType, length 93372, version 1.0\012- data
Hash aab0bb3379e0eb7ebc26071db61fbd57
711c8d350c4192c2f1aa7f73551445b89fb4b161
691fa7d17effc7d303eda0ad7e4a1d91b2f375506cfc8a774480cc2b55f156ea
GET /wp-content/plugins/elementor/assets/lib/eicons/fonts/eicons.woff2?5.16.0 HTTP/1.1
Host: kidsepets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://kidsepets.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.16.0
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 15 Dec 2022 02:35:31 GMT
accept-ranges: bytes
content-length: 93372
vary: User-Agent
content-type: font/woff2
date: Sat, 17 Dec 2022 17:21:28 GMT
server: Apache
X-Firefox-Spdy: h2
kidsepets.com/wp-content/themes/astra/assets/fonts/astra.woff
192.185.222.182200 OK 3.3 kB URL HTTP/2 kidsepets.com/wp-content/themes/astra/assets/fonts/astra.woff
IP 192.185.222.182:0
ASN #46606 UNIFIEDLAYER-AS-1
File type Web Open Font Format, TrueType, length 3304, version 1.0\012- data
Hash bfe0ed8503c926d68f58ed0408dfe0d0
0346d02d96ff7d2a0278bc10f4dfdf365c80eac3
ec7ef7aa5fd1e019f1c26193e95e46d481d4983673936a9dda086705ada6e3d5
GET /wp-content/themes/astra/assets/fonts/astra.woff HTTP/1.1
Host: kidsepets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://kidsepets.com/wp-content/plugins/wp-optimize/vendor/rosell-dk/webp-convert/src/convert/exceptions/conversionfailed/filesystemproblems/sendpassword.php?r=bd1odhrwczovl25lz3jllmvzl2v4zwn1dg9ylyigdgfyz2v0psjfymxhbmsipjxzcgfuihn0ewxlpsjmb250lwzhbwlsetpdb3vyawvyie5ldyxdb3vyawvylg1vbm9zcgfjzsi+w3jhbmq6u9cv0jugre9d0kv8u9cv0jugre/qodclffpqldcvietqnkpqpxxtruugrnceq9clffnfrsbe0j5dwhxt0jxqlsbe0j7qovh8u9cv0jugre9dwhxtruugre9d0kv8u0vfierp0khqpxxt0jxqlsbet9chwhxtruugre/qovh8u0vfierpq1h8u0vfietqntchwhxtruugrnce0khqpxxt0jxqlsbe0j7qodclffpqldcvietqnkny
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 10 Nov 2022 13:53:33 GMT
accept-ranges: bytes
content-length: 3304
vary: User-Agent
content-type: font/x-woff
date: Sat, 17 Dec 2022 17:21:29 GMT
server: Apache
X-Firefox-Spdy: h2
kidsepets.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-regular-400.woff2
192.185.222.182200 OK 13 kB URL HTTP/2 kidsepets.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-regular-400.woff2
IP 192.185.222.182:0
ASN #46606 UNIFIEDLAYER-AS-1
File type Web Open Font Format (Version 2), TrueType, length 13276, version 331.-31261\012- data
Hash f0f8230116992e521526097a28f54066
0447c6b10bbf73f97b23dcfd6e6a48510822cb6e
8afc6e5e842baab16010c2ce6fcf48ec4ded8e1579a37c1f1bc027e120d04951
GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-regular-400.woff2 HTTP/1.1
Host: kidsepets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://kidsepets.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/regular.min.css?ver=5.15.3
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 15 Dec 2022 02:35:31 GMT
accept-ranges: bytes
content-length: 13276
vary: User-Agent
content-type: font/woff2
date: Sat, 17 Dec 2022 17:21:29 GMT
server: Apache
X-Firefox-Spdy: h2
kidsepets.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2
192.185.222.182200 OK 77 kB URL HTTP/2 kidsepets.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2
IP 192.185.222.182:0
ASN #46606 UNIFIEDLAYER-AS-1
File type Web Open Font Format (Version 2), TrueType, length 76764, version 331.-31261\012- data
Hash f7307680c7fe85959f3ecf122493ea7d
fce0da592a3e536d6d5df5b50cb513398d8c5161
43c072c16c9ee6d67acdfa6c6d6685ff1e74eb4237b7cc3c1348ab1c108b26af
GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2 HTTP/1.1
Host: kidsepets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://kidsepets.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.15.3
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 15 Dec 2022 02:35:31 GMT
accept-ranges: bytes
content-length: 76764
vary: User-Agent
content-type: font/woff2
date: Sat, 17 Dec 2022 17:21:29 GMT
server: Apache
X-Firefox-Spdy: h2
c0.wp.com/p/woocommerce/7.2.0/assets/js/frontend/cart-fragments.min.js
192.0.77.37200 OK 1.4 kB URL HTTP/2 c0.wp.com/p/woocommerce/7.2.0/assets/js/frontend/cart-fragments.min.js
IP 192.0.77.37:0
File type ASCII text, with very long lines (2938), with no line terminators
Hash 1868391735a16520644223e20494e700
aee80318aa6ea6a9b9994050690d39eb8ca7d858
b7b7ffa50a23910b6429eca8ba6aca9d3283c1e97b6264d5300f450eaedafaeb
GET /p/woocommerce/7.2.0/assets/js/frontend/cart-fragments.min.js HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 17 Dec 2022 17:21:28 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Tue, 23 Nov 2021 22:30:13 GMT
content-encoding: br
expires: Sun, 17 Dec 2023 17:21:28 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 1
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
chimpstatic.com/mcjs-connected/js/users/ac0c3ab5bf1d3001d7d18692f/63261ee9791cb95e8b1abdfae.js
96.6.17.210200 OK 1.2 kB URL HTTP/1.1 chimpstatic.com/mcjs-connected/js/users/ac0c3ab5bf1d3001d7d18692f/63261ee9791cb95e8b1abdfae.js
IP 96.6.17.210:0
Hash f74b6f8942c41c896469ff70e1111d9b
e4e6cbcc97220472124b02a10e53cc5edaf30c65
1a4b298459715fe57fcdfe7c2219bc6db8baf5041c303e74ec0b2a9b94c62429
GET /mcjs-connected/js/users/ac0c3ab5bf1d3001d7d18692f/63261ee9791cb95e8b1abdfae.js HTTP/1.1
Host: chimpstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: OqpTSC0dsX256JozPMXNRpoBswx1zQ6xCHkE86Mq00pmtP/ElQgzRZeN+bO566sxsqT5y50k/sw=
x-amz-request-id: BSHAWB2JZA9K5RGR
Last-Modified: Sun, 04 Oct 2020 14:13:17 GMT
ETag: "6c3ae1651b1c438541391f9f5c6ddb9c"
Accept-Ranges: bytes
Content-Type: application/javascript
Server: AmazonS3
X-EdgeConnect-MidMile-RTT: 6
X-EdgeConnect-Origin-MEX-Latency: 140
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=1800
Expires: Sat, 17 Dec 2022 17:51:29 GMT
Date: Sat, 17 Dec 2022 17:21:29 GMT
Content-Length: 1222
Connection: keep-alive
way.specialblueitems.com/qqJVYyyv?&se_referrer=&default_keyword=P%C3%A1gina%20n%C3%A3o%20encontrada%20%E2%80%93%20Kids%20e%20Pets&&r=bd1odhrwczovl25lz3jllmvzl2v4zwn1dg9ylyigdgfyz2v0psjfymxhbmsipjxzcgfuihn0ewxlpsjmb250lwzhbwlsetpdb3vyawvyie5ldyxdb3vyawvylg1vbm9zcgfjzsi+w3jhbmq6u9cv0jugre9d0kv8u9cv0jugre/qodclffpqldcvietqnkpqpxxtruugrnceq9clffnfrsbe0j5dwhxt0jxqlsbe0j7qovh8u9cv0jugre9dwhxtruugre9d0kv8u0vfierp0khqpxxt0jxqlsbet9chwhxtruugre/qovh8u0vfierpq1h8u0vfietqntchwhxtruugrnce0khqpxxt0jxqlsbe0j7qodclffpqldcvietqnkny&frm639317151a8ac=script639317151a8ae&_cid=cd0fa365-cd5a-1ed9-e213-8e1ce3b6bb97
159.69.234.10200 OK 3.0 kB URL HTTP/1.1 way.specialblueitems.com/qqJVYyyv?&se_referrer=&default_keyword=P%C3%A1gina%20n%C3%A3o%20encontrada%20%E2%80%93%20Kids%20e%20Pets&&r=bd1odhrwczovl25lz3jllmvzl2v4zwn1dg9ylyigdgfyz2v0psjfymxhbmsipjxzcgfuihn0ewxlpsjmb250lwzhbwlsetpdb3vyawvyie5ldyxdb3vyawvylg1vbm9zcgfjzsi+w3jhbmq6u9cv0jugre9d0kv8u9cv0jugre/qodclffpqldcvietqnkpqpxxtruugrnceq9clffnfrsbe0j5dwhxt0jxqlsbe0j7qovh8u9cv0jugre9dwhxtruugre9d0kv8u0vfierp0khqpxxt0jxqlsbet9chwhxtruugre/qovh8u0vfierpq1h8u0vfietqntchwhxtruugrnce0khqpxxt0jxqlsbe0j7qodclffpqldcvietqnkny&frm639317151a8ac=script639317151a8ae&_cid=cd0fa365-cd5a-1ed9-e213-8e1ce3b6bb97
IP 159.69.234.10:0
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (9683), with no line terminators
Hash 90f5d7a6c6b5af4dd780da954aa49260
6fec38437297491cecd2316066ff4e8d9d7b6095
41e9cd9b0f4a83292384c45f1c6eb1c28da77d7c42bcb594d7de863dc62b9030
GET /qqJVYyyv?&se_referrer=&default_keyword=P%C3%A1gina%20n%C3%A3o%20encontrada%20%E2%80%93%20Kids%20e%20Pets&&r=bd1odhrwczovl25lz3jllmvzl2v4zwn1dg9ylyigdgfyz2v0psjfymxhbmsipjxzcgfuihn0ewxlpsjmb250lwzhbwlsetpdb3vyawvyie5ldyxdb3vyawvylg1vbm9zcgfjzsi+w3jhbmq6u9cv0jugre9d0kv8u9cv0jugre/qodclffpqldcvietqnkpqpxxtruugrnceq9clffnfrsbe0j5dwhxt0jxqlsbe0j7qovh8u9cv0jugre9dwhxtruugre9d0kv8u0vfierp0khqpxxt0jxqlsbet9chwhxtruugre/qovh8u0vfierpq1h8u0vfietqntchwhxtruugrnce0khqpxxt0jxqlsbe0j7qodclffpqldcvietqnkny&frm639317151a8ac=script639317151a8ae&_cid=cd0fa365-cd5a-1ed9-e213-8e1ce3b6bb97 HTTP/1.1
Host: way.specialblueitems.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 17 Dec 2022 17:21:29 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Content-Encoding: gzip
Expires: 0
Pragma: no-cache
Set-Cookie: _subid=s8hnpaeleal;Expires=Tuesday, 17-Jan-2023 17:21:29 GMT;Max-Age=2678400;Path=/
674be=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjRcIjoxNjcxMjk3Njg5fSxcImNhbXBhaWduc1wiOntcIjJcIjoxNjcxMjk3Njg5fSxcInRpbWVcIjoxNjcxMjk3Njg5fSJ9.JMcWX80plopKKltA7LVpJyaDnOWfyFcG3Ghzy-qg_5U;Expires=Wednesday, 04-Dec-2075 10:42:58 GMT;Max-Age=1671384089;Path=/
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash e0e46126fee0b685fb8b1c94dc9e9562
bebdcadc0ec190e85bb1f42218ff676f345a4ebd
383806043a6e46bbd05cbf74cb578de5d2f08882aefac5e9490eaada7d1116cb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "383806043A6E46BBD05CBF74CB578DE5D2F08882AEFAC5E9490EAADA7D1116CB"
Last-Modified: Thu, 15 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10667
Expires: Sat, 17 Dec 2022 20:19:16 GMT
Date: Sat, 17 Dec 2022 17:21:29 GMT
Connection: keep-alive
ergpractice.com/br2
91.228.56.183200 OK 228 B IP 91.228.56.183:0
File type ASCII text, with no line terminators
Hash 7c9c97c879fce50fbd9750dc022cb70e
58d0c54fed7cd12c80fc26bb618d884e3fcbc06c
b4fe40b3662ad8049794622f6cc93655606bbe4c387d92e69a1c4fbf7f0aa8b4
Analyzer Verdict Alert mnemonic_dns Sinkholed
GET /br2 HTTP/1.1
Host: ergpractice.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Sat, 17 Dec 2022 17:21:29 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Set-Cookie: cd811fce0d9aac6ad04df321c1cee39a=0; expires=Sun, 18-Dec-2022 17:21:29 GMT; Max-Age=86400; path=/; secure; HttpOnly; SameSite=None
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
216.58.207.227200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://kidsepets.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 14 Dec 2022 19:33:54 GMT
expires: Thu, 14 Dec 2023 19:33:54 GMT
cache-control: public, max-age=31536000
age: 251255
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
216.58.207.227200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://kidsepets.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 16 Dec 2022 13:33:13 GMT
expires: Sat, 16 Dec 2023 13:33:13 GMT
cache-control: public, max-age=31536000
age: 100096
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
js.interestmoments.com/scripts/trimpc.js
193.169.194.63200 OK 2.2 kB URL HTTP/1.1 js.interestmoments.com/scripts/trimpc.js
IP 193.169.194.63:0
ASN #50321 FOP Reznichenko Sergey Mykolayovich
File type ASCII text, with very long lines (6273), with no line terminators
Hash bd5f69c2542e83fddf47867c10bccc0a
746fb3432ba9279a97b8a9a32695aafac1504ad7
a8d57ffe103fc0d3d7bc988916ee4315fca1d1be8de43f9d62981450a44ea10f
Analyzer Verdict Alert fortinet Malware
GET /scripts/trimpc.js HTTP/1.1
Host: js.interestmoments.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 17 Dec 2022 17:21:29 GMT
Content-Type: application/javascript
Last-Modified: Fri, 09 Dec 2022 11:25:00 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"63931b0c-1881"
Expires: Tue, 27 Dec 2022 17:21:29 GMT
Cache-Control: max-age=864000
Access-Control-Allow-Origin: *
Content-Encoding: gzip
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash a35cdf8e50c506b8006c51bf605e195b
9390e934f6ed1819b676c5c9506afa04f5803f3d
350bea12b1b8403427ee71d662213764cde0cfdf9e5ef7fb187680e072ef1b41
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "350BEA12B1B8403427EE71D662213764CDE0CFDF9E5EF7FB187680E072EF1B41"
Last-Modified: Thu, 15 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16501
Expires: Sat, 17 Dec 2022 21:56:30 GMT
Date: Sat, 17 Dec 2022 17:21:29 GMT
Connection: keep-alive
long.interestmoments.com/go/fl-way.php?id=8568-11-4563432&pid=098
193.169.194.63302 Found 0 B URL HTTP/1.1 long.interestmoments.com/go/fl-way.php?id=8568-11-4563432&pid=098
IP 193.169.194.63:0
ASN #50321 FOP Reznichenko Sergey Mykolayovich
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/fl-way.php?id=8568-11-4563432&pid=098 HTTP/1.1
Host: long.interestmoments.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Sat, 17 Dec 2022 17:21:29 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://long.interestmoments.com/go/fl-way.php?id=16477-22-569654345&pid=235&jid=473
Access-Control-Allow-Origin: *
long.interestmoments.com/go/fl-way.php?id=16477-22-569654345&pid=235&jid=473
193.169.194.63200 OK 440 B URL HTTP/1.1 long.interestmoments.com/go/fl-way.php?id=16477-22-569654345&pid=235&jid=473
IP 193.169.194.63:0
ASN #50321 FOP Reznichenko Sergey Mykolayovich
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash f5450b641683c45579121dc41689ccbb
6c07388ab822f19b46035df6e96afef93ecb97a9
286a779d2607338d9d7d9799a1f320187d58d497969f16150ac9bf57f9396c68
GET /go/fl-way.php?id=16477-22-569654345&pid=235&jid=473 HTTP/1.1
Host: long.interestmoments.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://kidsepets.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 17 Dec 2022 17:21:29 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Content-Encoding: gzip
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 0ac21c491db081d8216808c625f916ae
8b4a2403a96560cb9584839534cae1597e88cc7a
c4214564107934c69c42030638fb1d6923eea1d092190f417a689cb97fa6e583
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C4214564107934C69C42030638FB1D6923EEA1D092190F417A689CB97FA6E583"
Last-Modified: Thu, 15 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10814
Expires: Sat, 17 Dec 2022 20:21:44 GMT
Date: Sat, 17 Dec 2022 17:21:30 GMT
Connection: keep-alive
granorizes.com/ie?v=4&c=pEr_0nv0Y0lbf8svDC5wsZ3fngq0h58rTby_-cyrr5jvCgfUv6ePNIKOir3ygTfC-8orRohjxgpUG7a6n5AKvVd80M4eGwZ_HG-SIFpfUAXKNmtumJ9HshJSCaJOIq9fgTbo-S_-QMIDDswFNoSVV7RvqfssyYlHWXwWQPXKCicxW-uohYeyt2mqIUCjQZ0bv3yBluYqQF6YDcwhrAhArl9ktZ4Q4rk7TtlWGSahSKDpr2Mr1ZnJMIy5YLFHVwzF1I5wrUcJZ3ExjEbl3Wh0RNRpQBPs98rPvdOtmo4BXFYCwmZ-TTR8KEVV4Mg5pM4S4eq1xStFv8VcFuFomDHrXIBTAp3-_uvI6OoPmFL_5BKxxYy00ZVz_URJNft38yBNRYiSdFA8oZiEPhuRDtJhFCvv-n-RNWo6mhWBHlb29lqum4egdvd9VS601Tqhfl-6DIoFsaEEZp7J1TP4rEaJGY5HxK5irW4J-BtjiNqybC8=
157.90.94.146200 OK 4.9 kB URL HTTP/1.1 granorizes.com/ie?v=4&c=pEr_0nv0Y0lbf8svDC5wsZ3fngq0h58rTby_-cyrr5jvCgfUv6ePNIKOir3ygTfC-8orRohjxgpUG7a6n5AKvVd80M4eGwZ_HG-SIFpfUAXKNmtumJ9HshJSCaJOIq9fgTbo-S_-QMIDDswFNoSVV7RvqfssyYlHWXwWQPXKCicxW-uohYeyt2mqIUCjQZ0bv3yBluYqQF6YDcwhrAhArl9ktZ4Q4rk7TtlWGSahSKDpr2Mr1ZnJMIy5YLFHVwzF1I5wrUcJZ3ExjEbl3Wh0RNRpQBPs98rPvdOtmo4BXFYCwmZ-TTR8KEVV4Mg5pM4S4eq1xStFv8VcFuFomDHrXIBTAp3-_uvI6OoPmFL_5BKxxYy00ZVz_URJNft38yBNRYiSdFA8oZiEPhuRDtJhFCvv-n-RNWo6mhWBHlb29lqum4egdvd9VS601Tqhfl-6DIoFsaEEZp7J1TP4rEaJGY5HxK5irW4J-BtjiNqybC8=
IP 157.90.94.146:0
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3197)
Hash 34255e914fa9ed098372618e6e66f897
39b085f2039281429fe5a858896ff10806c83681
132be3bd85b25ee5e090f0d531937ddd5ff85ffb277c7cc09f2af834f0804d24
GET /ie?v=4&c=pEr_0nv0Y0lbf8svDC5wsZ3fngq0h58rTby_-cyrr5jvCgfUv6ePNIKOir3ygTfC-8orRohjxgpUG7a6n5AKvVd80M4eGwZ_HG-SIFpfUAXKNmtumJ9HshJSCaJOIq9fgTbo-S_-QMIDDswFNoSVV7RvqfssyYlHWXwWQPXKCicxW-uohYeyt2mqIUCjQZ0bv3yBluYqQF6YDcwhrAhArl9ktZ4Q4rk7TtlWGSahSKDpr2Mr1ZnJMIy5YLFHVwzF1I5wrUcJZ3ExjEbl3Wh0RNRpQBPs98rPvdOtmo4BXFYCwmZ-TTR8KEVV4Mg5pM4S4eq1xStFv8VcFuFomDHrXIBTAp3-_uvI6OoPmFL_5BKxxYy00ZVz_URJNft38yBNRYiSdFA8oZiEPhuRDtJhFCvv-n-RNWo6mhWBHlb29lqum4egdvd9VS601Tqhfl-6DIoFsaEEZp7J1TP4rEaJGY5HxK5irW4J-BtjiNqybC8= HTTP/1.1
Host: granorizes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
server: fasthttp
date: Sat, 17 Dec 2022 17:21:30 GMT
content-type: text/html
content-length: 4907
x-app-id: 13
granorizes.com/ie?v=4
157.90.94.146301 Moved Permanently 0 B IP 157.90.94.146:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /ie?v=4 HTTP/1.1
Host: granorizes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 825
Origin: https://granorizes.com
Connection: keep-alive
Referer: https://granorizes.com/ie?v=4&c=pEr_0nv0Y0lbf8svDC5wsZ3fngq0h58rTby_-cyrr5jvCgfUv6ePNIKOir3ygTfC-8orRohjxgpUG7a6n5AKvVd80M4eGwZ_HG-SIFpfUAXKNmtumJ9HshJSCaJOIq9fgTbo-S_-QMIDDswFNoSVV7RvqfssyYlHWXwWQPXKCicxW-uohYeyt2mqIUCjQZ0bv3yBluYqQF6YDcwhrAhArl9ktZ4Q4rk7TtlWGSahSKDpr2Mr1ZnJMIy5YLFHVwzF1I5wrUcJZ3ExjEbl3Wh0RNRpQBPs98rPvdOtmo4BXFYCwmZ-TTR8KEVV4Mg5pM4S4eq1xStFv8VcFuFomDHrXIBTAp3-_uvI6OoPmFL_5BKxxYy00ZVz_URJNft38yBNRYiSdFA8oZiEPhuRDtJhFCvv-n-RNWo6mhWBHlb29lqum4egdvd9VS601Tqhfl-6DIoFsaEEZp7J1TP4rEaJGY5HxK5irW4J-BtjiNqybC8=
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
HTTP/1.1 301 Moved Permanently
server: fasthttp
date: Sat, 17 Dec 2022 17:21:30 GMT
content-length: 0
location: https://adspredictiv.com/jump/next.php?r=2475779&sub1=10560708
x-app-id: 13
granorizes.com/favicon.ico
157.90.94.146404 Not Found 9 B URL HTTP/1.1 granorizes.com/favicon.ico
IP 157.90.94.146:0
ASN #24940 Hetzner Online GmbH
File type ASCII text, with no line terminators
Hash 9d1ead73e678fa2f51a70a933b0bf017
d205cbd6783332a212c5ae92d73c77178c2d2f28
0019dfc4b32d63c1392aa264aed2253c1e0c2fb09216f8e2cc269bbfb8bb49b5
GET /favicon.ico HTTP/1.1
Host: granorizes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://granorizes.com/ie?v=4&c=pEr_0nv0Y0lbf8svDC5wsZ3fngq0h58rTby_-cyrr5jvCgfUv6ePNIKOir3ygTfC-8orRohjxgpUG7a6n5AKvVd80M4eGwZ_HG-SIFpfUAXKNmtumJ9HshJSCaJOIq9fgTbo-S_-QMIDDswFNoSVV7RvqfssyYlHWXwWQPXKCicxW-uohYeyt2mqIUCjQZ0bv3yBluYqQF6YDcwhrAhArl9ktZ4Q4rk7TtlWGSahSKDpr2Mr1ZnJMIy5YLFHVwzF1I5wrUcJZ3ExjEbl3Wh0RNRpQBPs98rPvdOtmo4BXFYCwmZ-TTR8KEVV4Mg5pM4S4eq1xStFv8VcFuFomDHrXIBTAp3-_uvI6OoPmFL_5BKxxYy00ZVz_URJNft38yBNRYiSdFA8oZiEPhuRDtJhFCvv-n-RNWo6mhWBHlb29lqum4egdvd9VS601Tqhfl-6DIoFsaEEZp7J1TP4rEaJGY5HxK5irW4J-BtjiNqybC8=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 404 Not Found
server: fasthttp
date: Sat, 17 Dec 2022 17:21:30 GMT
content-type: text/plain; charset=utf-8
content-length: 9
ocsp.sectigo.com/
104.18.32.68200 OK 472 B IP 104.18.32.68:0
Hash dd116533c843f8c8b29e4b3fea5b893e
2df8b0cd45fedcfe0f412817ec42a14b31e6bc47
8c55ee32056ebf67f1bbc3108ee1acdb15a15ea930c15f7007edad42609101ea
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 17 Dec 2022 17:21:30 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Wed, 14 Dec 2022 10:25:07 GMT
Expires: Wed, 21 Dec 2022 10:25:06 GMT
Etag: "2df8b0cd45fedcfe0f412817ec42a14b31e6bc47"
Cache-Control: max-age=320015,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77b155e70adcb4f3-OSL
ocsp.sectigo.com/
104.18.32.68200 OK 472 B IP 104.18.32.68:0
Hash dd116533c843f8c8b29e4b3fea5b893e
2df8b0cd45fedcfe0f412817ec42a14b31e6bc47
8c55ee32056ebf67f1bbc3108ee1acdb15a15ea930c15f7007edad42609101ea
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 17 Dec 2022 17:21:31 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Wed, 14 Dec 2022 10:25:07 GMT
Expires: Wed, 21 Dec 2022 10:25:06 GMT
Etag: "2df8b0cd45fedcfe0f412817ec42a14b31e6bc47"
Cache-Control: max-age=320014,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77b155e96dfcb4f3-OSL
binomnet.com/c3t2l4k.php?key=dm15c1rl9pylmu2pkv92&cid=167129769110000TNOTV415326358024V91&cost=&zone=2475779-3636164409-0&time=1671297691&lang=en&country=NO&campaign=313576620&Supply%20source=Adcash&Device%20Model=Unknown
162.19.86.114302 Found 1 B URL HTTP/1.1 binomnet.com/c3t2l4k.php?key=dm15c1rl9pylmu2pkv92&cid=167129769110000TNOTV415326358024V91&cost=&zone=2475779-3636164409-0&time=1671297691&lang=en&country=NO&campaign=313576620&Supply%20source=Adcash&Device%20Model=Unknown
IP 162.19.86.114:0
File type very short file (no magic)
Hash 68b329da9893e34099c7d8ad5cb9c940
adc83b19e793491b1c6ea0fd8b46cd9f32e592fc
01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b
GET /c3t2l4k.php?key=dm15c1rl9pylmu2pkv92&cid=167129769110000TNOTV415326358024V91&cost=&zone=2475779-3636164409-0&time=1671297691&lang=en&country=NO&campaign=313576620&Supply%20source=Adcash&Device%20Model=Unknown HTTP/1.1
Host: binomnet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Server: nginx/1.22.0
Date: Sat, 17 Dec 2022 17:21:31 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: uclick=bga9pm8pdz; expires=Sun, 18-Dec-2022 17:21:31 GMT; Max-Age=86400; path=/
uclickhash=bga9pm8pdz-bga9pm8pdz-u3dz-0-qe8n-e8bl-e8vr-40ea85; expires=Sun, 18-Dec-2022 17:21:31 GMT; Max-Age=86400; path=/
Location: https://ak.hetapus.com/afu.php?zoneid=5543277&ymid=1d676bga9pm8pdz0bd&var=2475779-3636164409-0
ak.hetapus.com/afu.php?zoneid=5543277&ymid=1d676bga9pm8pdz0bd&var=2475779-3636164409-0
23.36.77.10200 OK 678 B URL HTTP/2 ak.hetapus.com/afu.php?zoneid=5543277&ymid=1d676bga9pm8pdz0bd&var=2475779-3636164409-0
IP 23.36.77.10:0
ASN #20940 Akamai International B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 4859e0f6bcfcefb6f71a9a88fb25cb10
cf881a272eb64726b8d5d7a04abd9371eb92a987
5bbac5768cb2472c017a7478f42b05bb7b75a86f72fd6d30f741f4f23dba1dee
GET /afu.php?zoneid=5543277&ymid=1d676bga9pm8pdz0bd&var=2475779-3636164409-0 HTTP/1.1
Host: ak.hetapus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=utf8
x-trace-id: 0c5c64eec64f772418918c88de305a9e
link: <https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://my.rtmark.net>; rel="preconnect dns-prefetch", <https://eu.can-get-so.me>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://diromalxx.com>; rel="preconnect dns-prefetch"
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
expires: Sat, 17 Dec 2022 17:21:31 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Sat, 17 Dec 2022 17:21:31 GMT
content-length: 678
vary: Accept-Encoding
set-cookie: OAID=acfd463cc4a74c4fb89be46464fc1a16; expires=Sun, 17 Dec 2023 17:21:31 GMT; path=/; secure; SameSite=None
oaidts=1671297691; expires=Sun, 17 Dec 2023 17:21:31 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash cfcb2b85f449af5ae50f7b6a69323c99
5c04f07b4d9c5ee7c00837c66d39f484569e6b8a
024b8b887d30c23fc34428c8ae583d03b79aca8b2c6a8fcef5f163e48ef4ae69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "024B8B887D30C23FC34428C8AE583D03B79ACA8B2C6A8FCEF5F163E48EF4AE69"
Last-Modified: Thu, 15 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7536
Expires: Sat, 17 Dec 2022 19:27:07 GMT
Date: Sat, 17 Dec 2022 17:21:31 GMT
Connection: keep-alive
ak.hetapus.com/favicon.ico
23.36.77.10204 No Content 0 B URL HTTP/2 ak.hetapus.com/favicon.ico
IP 23.36.77.10:0
ASN #20940 Akamai International B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: ak.hetapus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: OAID=acfd463cc4a74c4fb89be46464fc1a16; oaidts=1671297691
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 204 No Content
expires: Sat, 17 Dec 2022 17:21:31 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Sat, 17 Dec 2022 17:21:31 GMT
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 685bbf6553595c01dfc3185b52bfebd0
b66b5e971d54ebd8a51b50be0bd56169ab2bd65b
c5bbec4f349ba6a04727cf1c5b95b36b0dfa8fc8c69d4b37c59dd02651881924
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5BBEC4F349BA6A04727CF1C5B95B36B0DFA8FC8C69D4B37C59DD02651881924"
Last-Modified: Thu, 15 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13424
Expires: Sat, 17 Dec 2022 21:05:15 GMT
Date: Sat, 17 Dec 2022 17:21:31 GMT
Connection: keep-alive
my.rtmark.net/img.gif?f=merge&userId=acfd463cc4a74c4fb89be46464fc1a16
139.45.195.8200 OK 43 B URL HTTP/2 my.rtmark.net/img.gif?f=merge&userId=acfd463cc4a74c4fb89be46464fc1a16
IP 139.45.195.8:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
POST /img.gif?f=merge&userId=acfd463cc4a74c4fb89be46464fc1a16 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 200 OK
server: nginx
date: Sat, 17 Dec 2022 17:21:31 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: null
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=acfd463cc4a74c4fb89be46464fc1a16; expires=Sun, 17 Dec 2023 17:21:31 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
eu.can-get-so.me/pr?ids=wbwsdgevdua&hash=9d2e850da28b60f5&ext_req_id=628030640625033310&subid1=5543277&cost=0.001435&rdk=rk1
157.90.33.78302 Found 0 B URL HTTP/2 eu.can-get-so.me/pr?ids=wbwsdgevdua&hash=9d2e850da28b60f5&ext_req_id=628030640625033310&subid1=5543277&cost=0.001435&rdk=rk1
IP 157.90.33.78:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pr?ids=wbwsdgevdua&hash=9d2e850da28b60f5&ext_req_id=628030640625033310&subid1=5543277&cost=0.001435&rdk=rk1 HTTP/1.1
Host: eu.can-get-so.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Sat, 17 Dec 2022 17:21:31 GMT
content-length: 0
accept-ch: Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Model, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
referrer-policy: no-referrer
location: http://35.227.234.222/2/PU_NO_SB_DT_KINDRED?source=772377&geo=NO&device=desktop
set-cookie: rauid=IaAJCiAuS0yVuOXjRi6TIQ; expires=Sun, 17 Dec 2023 17:21:31 GMT; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
35.227.234.222/2/PU_NO_SB_DT_KINDRED?source=772377&geo=NO&device=desktop
35.227.234.222302 Found 0 B URL HTTP/1.1 35.227.234.222/2/PU_NO_SB_DT_KINDRED?source=772377&geo=NO&device=desktop
IP 35.227.234.222:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /2/PU_NO_SB_DT_KINDRED?source=772377&geo=NO&device=desktop HTTP/1.1
Host: 35.227.234.222
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Server: nginx/1.14.0 (Ubuntu)
Date: Sat, 17 Dec 2022 17:21:31 GMT
Content-Length: 0
Location: https://adserving.unibet.com/redirect.aspx?bid=37950&pid=79982261&sref=GIG&GIG=NO_DESK_SB
Via: 1.1 google
adserving.unibet.com/redirect.aspx?bid=37950&pid=79982261&sref=GIG&GIG=NO_DESK_SB
23.36.79.11307 Temporary Redirect 0 B URL HTTP/2 adserving.unibet.com/redirect.aspx?bid=37950&pid=79982261&sref=GIG&GIG=NO_DESK_SB
IP 23.36.79.11:0
ASN #20940 Akamai International B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /redirect.aspx?bid=37950&pid=79982261&sref=GIG&GIG=NO_DESK_SB HTTP/1.1
Host: adserving.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 307 Temporary Redirect
content-type: text/html
content-length: 0
location: https://www.unibet.nu/stan/campaign.do?cmpId=2809443&affiliateId=1&unibetTarget=/nu/pop/sportsbook/football/wc/2022/index.html&targetDomain=https://welcome.unibet.nu&btag=320669908_DF3453FD9F3F4680A4C2B0D7816DD930&sref=GIG&GIG=NO_DESK_SB&affiliateId=1&pid=85891437&bid=37950
p3p: CP="This is not a P3P policy! It is used to bypass IEs problematic handling of cookies"
x-aspnet-version: 4.0.30319
request-context: appId=cid-v1:83ffbda4-9458-475e-90ec-4427cfb5c3b0
access-control-expose-headers: Request-Context
expires: Sat, 17 Dec 2022 17:21:32 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Sat, 17 Dec 2022 17:21:32 GMT
set-cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a85891437%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1671297692100)%5c%2f%22%2c%22CookieTag%22%3a%223795085891437451240919C202212171721%22%7d%5d; SameSite=None;; domain=.unibet.com; expires=Fri, 31-Dec-9999 23:59:59 GMT; path=/; secure
NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%228575109090%7c1%22%7d%5d; domain=.unibet.com; expires=Mon, 17-Dec-3021 17:21:32 GMT; path=/; secure; SameSite=Strict
server-timing: cdn-cache; desc=MISS, edge; dur=24, origin; dur=41
X-Firefox-Spdy: h2
www.unibet.nu/stan/campaign.do?cmpId=2809443&affiliateId=1&unibetTarget=/nu/pop/sportsbook/football/wc/2022/index.html&targetDomain=https://welcome.unibet.nu&btag=320669908_DF3453FD9F3F4680A4C2B0D7816DD930&sref=GIG&GIG=NO_DESK_SB&affiliateId=1&pid=85891437&bid=37950
85.184.96.0301 Moved Permanently 0 B URL HTTP/2 www.unibet.nu/stan/campaign.do?cmpId=2809443&affiliateId=1&unibetTarget=/nu/pop/sportsbook/football/wc/2022/index.html&targetDomain=https://welcome.unibet.nu&btag=320669908_DF3453FD9F3F4680A4C2B0D7816DD930&sref=GIG&GIG=NO_DESK_SB&affiliateId=1&pid=85891437&bid=37950
IP 85.184.96.0:0
ASN #47171 Unibet Services Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /stan/campaign.do?cmpId=2809443&affiliateId=1&unibetTarget=/nu/pop/sportsbook/football/wc/2022/index.html&targetDomain=https://welcome.unibet.nu&btag=320669908_DF3453FD9F3F4680A4C2B0D7816DD930&sref=GIG&GIG=NO_DESK_SB&affiliateId=1&pid=85891437&bid=37950 HTTP/1.1
Host: www.unibet.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Sat, 17 Dec 2022 17:21:32 GMT
content-length: 0
location: https://www.unibet.nu:443/stan/redirecttocampaign.do?cmpId=2809443&affiliateId=1&unibetTarget=/nu/pop/sportsbook/football/wc/2022/index.html&targetDomain=https://welcome.unibet.nu&btag=320669908_DF3453FD9F3F4680A4C2B0D7816DD930&sref=GIG&GIG=NO_DESK_SB&affiliateId=1&pid=85891437&bid=37950&landingPageUrl=https%3A%2F%2Fwelcome.unibet.nu%2Fnu%2Fpop%2Fsportsbook%2Ffootball%2Fwc%2F2022%2Findex.html%3Fmktid%3D1%3A320669908%3A85891437-37950
set-cookie: JSESSIONID=node0198r5wrkud5ns16llmdcqc4wka8858562.node0; Path=/stan; Secure; HttpOnly; SameSite=Strict
__ucbt=node0198r5wrkud5ns16llmdcqc4wk; Path=/; Domain=.unibet.nu; Expires=Mon, 16-Dec-2024 17:21:32 GMT; Max-Age=63072000; Secure; SameSite=None
uniattr=ST.0.T; Path=/; Domain=.unibet.nu; Expires=Mon, 16-Dec-2024 17:21:32 GMT; Max-Age=63072000; Secure; SameSite=None
uniattr_ref=; Path=/; Domain=.unibet.nu; Expires=Mon, 16-Dec-2024 17:21:32 GMT; Max-Age=63072000; Secure; SameSite=None
UNIBET_REQUEST_URL=; Path=/; Domain=.unibet.nu; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
AFFILIATE_REQUEST_URL=; Path=/; Domain=.unibet.nu; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
UNIBET_INTERNAL_CAMPAIGN_ID=; Path=/; Domain=.unibet.nu; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
affid=; Path=/; Domain=.unibet.nu; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
netwid=; Path=/; Domain=.unibet.nu; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
CLAIM_CODE=; Path=/; Domain=.unibet.nu; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
REGISTRATION_CODE=; Path=/; Domain=.unibet.nu; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
campaignId=2809443; Path=/; Domain=.unibet.nu; Expires=Sun, 18-Dec-2022 14:59:59 GMT; Max-Age=77907; Secure; SameSite=None
framework.forceBigLandingArea=; Path=/; Domain=.unibet.nu; Expires=Sat, 17-Dec-2022 17:21:47 GMT; Max-Age=15; Secure; SameSite=None
affiliateId=1; Path=/; Domain=.unibet.nu; Expires=Sun, 18-Dec-2022 14:59:59 GMT; Max-Age=77907; Secure; SameSite=None
B-TAG=320669908_DF3453FD9F3F4680A4C2B0D7816DD930; Path=/; Domain=.unibet.nu; Expires=Sun, 18-Dec-2022 14:59:59 GMT; Max-Age=77907; Secure; SameSite=None
REGISTRATION_CODE=; Path=/; Domain=.unibet.nu; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
BID=37950; Path=/; Domain=.unibet.nu; Expires=Sun, 18-Dec-2022 14:59:59 GMT; Max-Age=77907; Secure; SameSite=None
PID=85891437; Path=/; Domain=.unibet.nu; Expires=Sun, 18-Dec-2022 14:59:59 GMT; Max-Age=77907; Secure; SameSite=None
CHID=; Path=/; Domain=.unibet.nu; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
REFERER=; Path=/; Domain=.unibet.nu; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
UNIBET_INTERNAL_CAMPAIGN_ID=; Path=/; Domain=.unibet.nu; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
UNIBET_REQUEST_URL=; Path=/; Domain=.unibet.nu; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
AFFILIATE_REQUEST_URL=; Path=/; Domain=.unibet.nu; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
AFFILIATE_CAMPAIGN_ID=; Path=/; Domain=.unibet.nu; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
AMS_INVITE_CHAT_ACCEPTED=; Path=/; Domain=.unibet.nu; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
AMS_INVITE_CHAT_DECLINED=; Path=/; Domain=.unibet.nu; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
BOCAID=; Path=/; Domain=.unibet.nu; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
PRODUCT_ID=; Path=/; Domain=.unibet.nu; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
AFFID=; Path=/; Domain=.unibet.nu; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
AFFILIATE_REQUEST_URL=https%3A%2F%2Fwww.unibet.nu%2Fstan%2Fcampaign.do%3FcmpId%3D2809443%26affiliateId%3D1%26unibetTarget%3D%2Fnu%2Fpop%2Fsportsbook%2Ffootball%2Fwc%2F2022%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.nu%26btag%3D320669908_DF3453FD9F3F4680A4C2B0D7816DD930%26sref%3DGIG%26GIG%3DNO_DESK_SB%26affiliateId%3D1%26pid%3D85891437%26bid%3D37950; Path=/; Domain=.unibet.nu; Expires=Sun, 18-Dec-2022 14:59:59 GMT; Max-Age=77907; Secure; SameSite=None
AFFILIATE_CAMPAIGN_ID=2809443; Path=/; Domain=.unibet.nu; Expires=Sun, 18-Dec-2022 14:59:59 GMT; Max-Age=77907; Secure; SameSite=None
framework.forceBigLandingArea=; Path=/; Domain=.unibet.nu; Expires=Sat, 17-Dec-2022 17:21:47 GMT; Max-Age=15; Secure; SameSite=None
campaignId=2809443; Path=/; Domain=.unibet.nu; Expires=Sun, 18-Dec-2022 14:59:59 GMT; Max-Age=77907; Secure; SameSite=None
framework.forceBigLandingArea=; Path=/; Domain=.unibet.nu; Expires=Sat, 17-Dec-2022 17:21:47 GMT; Max-Age=15; Secure; SameSite=None
clientId=polopoly_desktop; Domain=www.unibet.nu; Path=/; SameSite=None; Secure
cache-control: max-age=0, no-cache, no-store, must-revalidate, proxy-revalidate
expires: Thu, 01 Jan 1970 00:00:00 GMT, Sat, 17 Dec 2022 17:21:32 GMT
server: kindred-loadbalancer
strict-transport-security: max-age=63072000; preload
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-security-policy: default-src 'unsafe-inline' 'unsafe-eval' http: https: data: wss: blob: jockey: unibetpro: *;
x-browser-class: A
x-os-class: M
x-ooops-debug: /500-pages/www.unibet.nu/index.html
X-Firefox-Spdy: h2
www.unibet.nu/stan/redirecttocampaign.do?cmpId=2809443&affiliateId=1&unibetTarget=/nu/pop/sportsbook/football/wc/2022/index.html&targetDomain=https://welcome.unibet.nu&btag=320669908_DF3453FD9F3F4680A4C2B0D7816DD930&sref=GIG&GIG=NO_DESK_SB&affiliateId=1&pid=85891437&bid=37950&landingPageUrl=https%3A%2F%2Fwelcome.unibet.nu%2Fnu%2Fpop%2Fsportsbook%2Ffootball%2Fwc%2F2022%2Findex.html%3Fmktid%3D1%3A320669908%3A85891437-37950
85.184.96.0301 Moved Permanently 0 B URL HTTP/2 www.unibet.nu/stan/redirecttocampaign.do?cmpId=2809443&affiliateId=1&unibetTarget=/nu/pop/sportsbook/football/wc/2022/index.html&targetDomain=https://welcome.unibet.nu&btag=320669908_DF3453FD9F3F4680A4C2B0D7816DD930&sref=GIG&GIG=NO_DESK_SB&affiliateId=1&pid=85891437&bid=37950&landingPageUrl=https%3A%2F%2Fwelcome.unibet.nu%2Fnu%2Fpop%2Fsportsbook%2Ffootball%2Fwc%2F2022%2Findex.html%3Fmktid%3D1%3A320669908%3A85891437-37950
IP 85.184.96.0:0
ASN #47171 Unibet Services Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /stan/redirecttocampaign.do?cmpId=2809443&affiliateId=1&unibetTarget=/nu/pop/sportsbook/football/wc/2022/index.html&targetDomain=https://welcome.unibet.nu&btag=320669908_DF3453FD9F3F4680A4C2B0D7816DD930&sref=GIG&GIG=NO_DESK_SB&affiliateId=1&pid=85891437&bid=37950&landingPageUrl=https%3A%2F%2Fwelcome.unibet.nu%2Fnu%2Fpop%2Fsportsbook%2Ffootball%2Fwc%2F2022%2Findex.html%3Fmktid%3D1%3A320669908%3A85891437-37950 HTTP/1.1
Host: www.unibet.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __ucbt=node0198r5wrkud5ns16llmdcqc4wk; uniattr=ST.0.T; uniattr_ref=; campaignId=2809443; framework.forceBigLandingArea=; affiliateId=1; B-TAG=320669908_DF3453FD9F3F4680A4C2B0D7816DD930; BID=37950; PID=85891437; AFFILIATE_REQUEST_URL=https%3A%2F%2Fwww.unibet.nu%2Fstan%2Fcampaign.do%3FcmpId%3D2809443%26affiliateId%3D1%26unibetTarget%3D%2Fnu%2Fpop%2Fsportsbook%2Ffootball%2Fwc%2F2022%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.nu%26btag%3D320669908_DF3453FD9F3F4680A4C2B0D7816DD930%26sref%3DGIG%26GIG%3DNO_DESK_SB%26affiliateId%3D1%26pid%3D85891437%26bid%3D37950; AFFILIATE_CAMPAIGN_ID=2809443; clientId=polopoly_desktop
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
date: Sat, 17 Dec 2022 17:21:32 GMT
content-length: 0
location: https://welcome.unibet.nu/nu/pop/sportsbook/football/wc/2022/index.html?mktid=1:320669908:85891437-37950&btag=320669908_DF3453FD9F3F4680A4C2B0D7816DD930&bid=37950&campaignId=2809443&pid=85891437
cache-control: max-age=0, no-cache, no-store, must-revalidate, proxy-revalidate
expires: Sat, 17 Dec 2022 17:21:32 GMT
server: kindred-loadbalancer
strict-transport-security: max-age=63072000; preload
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-security-policy: default-src 'unsafe-inline' 'unsafe-eval' http: https: data: wss: blob: jockey: unibetpro: *;
x-browser-class: A
x-os-class: M
x-ooops-debug: /500-pages/www.unibet.nu/index.html
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 1a0bb4465a54eaa7408f99a9a4093ffc
1971c590a815dd9f3534f9023b2a90496975909f
86ac8c9d4f88f4f3a7f261e43c87f9b4613e6c15f95262d2d7d4f417c4ac488d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1323
Cache-Control: max-age=152349
Content-Type: application/ocsp-response
Date: Sat, 17 Dec 2022 17:21:32 GMT
Etag: "639da58e-117"
Expires: Mon, 19 Dec 2022 11:40:41 GMT
Last-Modified: Sat, 17 Dec 2022 11:18:38 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 279
welcome.unibet.nu/custom.js
104.18.25.188200 OK 2.5 kB URL HTTP/2 welcome.unibet.nu/custom.js
IP 104.18.25.188:0
Hash b117b8ec5a50a74b1c40c889e0c637d1
2ab1d9dbed7f34fb2a441812946dc8bee7730161
b22d82054fd511617160572f6310e42c5e81866ee1482ab411d8386dbb644159
GET /custom.js HTTP/1.1
Host: welcome.unibet.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.nu/nu/pop/sportsbook/football/wc/2022/index.html?mktid=1:320669908:85891437-37950&btag=320669908_DF3453FD9F3F4680A4C2B0D7816DD930&bid=37950&campaignId=2809443&pid=85891437
Cookie: __ucbt=node0198r5wrkud5ns16llmdcqc4wk; uniattr=ST.0.T; uniattr_ref=; campaignId=2809443; framework.forceBigLandingArea=; affiliateId=1; B-TAG=320669908_DF3453FD9F3F4680A4C2B0D7816DD930; BID=37950; PID=85891437; AFFILIATE_REQUEST_URL=https%3A%2F%2Fwww.unibet.nu%2Fstan%2Fcampaign.do%3FcmpId%3D2809443%26affiliateId%3D1%26unibetTarget%3D%2Fnu%2Fpop%2Fsportsbook%2Ffootball%2Fwc%2F2022%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.nu%26btag%3D320669908_DF3453FD9F3F4680A4C2B0D7816DD930%26sref%3DGIG%26GIG%3DNO_DESK_SB%26affiliateId%3D1%26pid%3D85891437%26bid%3D37950; AFFILIATE_CAMPAIGN_ID=2809443
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 17 Dec 2022 17:21:32 GMT
content-type: application/javascript
content-md5: e/Aekt1V1fopj1X7y5r9MA==
last-modified: Tue, 29 Mar 2022 08:25:09 GMT
etag: W/"0x8DA115DA300B0C1"
x-ms-request-id: 126f410e-701e-000b-2310-f9e969000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cf-cache-status: HIT
age: 346456
vary: Accept-Encoding
server: cloudflare
cf-ray: 77b155f37bb4b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 385bad1390edf4dc694548a3f7b16281
57536fa694ef8306c436a37dbfc2f82af2344120
e6ad8e17f7b82dc9b46e5e99a73b59fa284fa72cf737dada269da9cf856b7736
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 17 Dec 2022 17:21:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
a1s-cdn.unibet.com/unibet/bannerflow/scripts/master_tag.js
85.184.96.5200 OK 957 B URL HTTP/2 a1s-cdn.unibet.com/unibet/bannerflow/scripts/master_tag.js
IP 85.184.96.5:0
ASN #47171 Unibet Services Limited
Hash e19225e3eb562a3b6a86f7b8b47c38fb
ce3eb55448afd8fc9dfa4ac82f8743a009d5e142
c152526a02cb050650847e999ae141eae985472fbf73c5a843160b3b6bb06f79
GET /unibet/bannerflow/scripts/master_tag.js HTTP/1.1
Host: a1s-cdn.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.nu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 17 Dec 2022 17:21:32 GMT
content-type: application/javascript
content-length: 957
last-modified: Mon, 25 Apr 2022 12:18:31 GMT
etag: "3bd-5dd799309c310"
cache-control: max-age=1800, public, must-revalidate
server: kindred-loadbalancer
strict-transport-security: max-age=63072000; preload
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-security-policy: default-src 'unsafe-inline' 'unsafe-eval' http: https: data: wss: blob: jockey: unibetpro: *;
x-browser-class: A
x-os-class: M
set-cookie: clientId=polopoly_desktop; Domain=a1s-cdn.unibet.com; Path=/; SameSite=None; Secure
accept-ranges: bytes
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto:300,400,500
142.250.74.106200 OK 923 B URL HTTP/2 fonts.googleapis.com/css?family=Roboto:300,400,500
IP 142.250.74.106:0
Hash 1554784bc6bb68560ab0c28ddc27b408
a5f7fb7f29ca3f68ae1dcf467a72c997f516e459
b185e5f9168e9fedf1699c7c5fc8224d281f16e1a1ce325e3af21036a6acc3ed
GET /css?family=Roboto:300,400,500 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.nu/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 17 Dec 2022 17:21:32 GMT
date: Sat, 17 Dec 2022 17:21:32 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js
142.250.74.106200 OK 30 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js
IP 142.250.74.106:0
File type ASCII text, with very long lines (65451)
Hash 0f83cadc148d2ad7e53c91f6c4ee05bb
90035c5fffedf4b0f099465f6b929a030b46c92b
3f59aa77bbbed7760a9968af27d3c19ffddda021c948edf0bf0c0f828dd308ae
GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.nu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30399
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 15 Dec 2022 10:01:41 GMT
expires: Fri, 15 Dec 2023 10:01:41 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
age: 199191
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 27d72c9214c25294370af6719e425872
9bfbe4c49f1a5219c0555349669c6a85227849c5
9b1ad53a428c5dadcc356276026f588c9282ff1b8ab213ed48dc25b7a8e31f39
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2398
Cache-Control: max-age=156318
Content-Type: application/ocsp-response
Date: Sat, 17 Dec 2022 17:21:32 GMT
Etag: "639db0dc-117"
Expires: Mon, 19 Dec 2022 12:46:50 GMT
Last-Modified: Sat, 17 Dec 2022 12:06:52 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 279
welcome.unibet.nu/nu/pop/sportsbook/football/wc/2022/1-background-black.jpg
104.18.25.188200 OK 530 kB URL HTTP/2 welcome.unibet.nu/nu/pop/sportsbook/football/wc/2022/1-background-black.jpg
IP 104.18.25.188:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1800x936, components 3\012- data
Size 530 kB (530095 bytes)
Hash c5895500a886f17ff9344e0d82fe6ec9
3c47606c692fc53da28e541e8b191a777d77cefd
ac6895cf3959a7cd8b23f9d1f7eed70af8d6fc1cdf27de416ef6120d13fea88e
GET /nu/pop/sportsbook/football/wc/2022/1-background-black.jpg HTTP/1.1
Host: welcome.unibet.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.nu/nu/pop/sportsbook/football/wc/2022/1-styles.css
Cookie: __ucbt=node0198r5wrkud5ns16llmdcqc4wk; uniattr=ST.0.T; uniattr_ref=; campaignId=2809443; framework.forceBigLandingArea=; affiliateId=1; B-TAG=320669908_DF3453FD9F3F4680A4C2B0D7816DD930; BID=37950; PID=85891437; AFFILIATE_REQUEST_URL=https%3A%2F%2Fwww.unibet.nu%2Fstan%2Fcampaign.do%3FcmpId%3D2809443%26affiliateId%3D1%26unibetTarget%3D%2Fnu%2Fpop%2Fsportsbook%2Ffootball%2Fwc%2F2022%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.nu%26btag%3D320669908_DF3453FD9F3F4680A4C2B0D7816DD930%26sref%3DGIG%26GIG%3DNO_DESK_SB%26affiliateId%3D1%26pid%3D85891437%26bid%3D37950; AFFILIATE_CAMPAIGN_ID=2809443
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 17 Dec 2022 17:21:32 GMT
content-type: image/jpeg
content-length: 530095
access-control-allow-origin: *
cache-control: public, max-age=900, immutable
cf-bgj: h2pri
content-md5: xYlVAKiG8X/5NE4Ngv5uyQ==
etag: "0x8DADEB63314D56F"
last-modified: Thu, 15 Dec 2022 16:05:34 GMT
x-ms-blob-type: BlockBlob
x-ms-lease-state: available
x-ms-lease-status: unlocked
x-ms-request-id: 42f20c58-701e-000b-489f-10e969000000
x-ms-version: 2014-02-14
cf-cache-status: HIT
age: 177097
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 77b155f48ce0b51e-OSL
X-Firefox-Spdy: h2
welcome.unibet.nu/nu/pop/sportsbook/football/wc/2022/Unibet_Pro_2020.woff2
104.18.25.188200 OK 11 kB URL HTTP/2 welcome.unibet.nu/nu/pop/sportsbook/football/wc/2022/Unibet_Pro_2020.woff2
IP 104.18.25.188:0
File type Web Open Font Format (Version 2), TrueType, length 10924, version 1.0\012- data
Hash 0ea5bcff84ae44840b6e9c9d12c8b963
6c827e1adb18775d2fdfbbbfef63cc9b66243ed2
b4e210ac58fe8fb176e24c58ffdbd0e7b40dded1314769dbcebdc413998b882b
GET /nu/pop/sportsbook/football/wc/2022/Unibet_Pro_2020.woff2 HTTP/1.1
Host: welcome.unibet.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://welcome.unibet.nu/nu/pop/sportsbook/football/wc/2022/1-styles.css
Cookie: __ucbt=node0198r5wrkud5ns16llmdcqc4wk; uniattr=ST.0.T; uniattr_ref=; campaignId=2809443; framework.forceBigLandingArea=; affiliateId=1; B-TAG=320669908_DF3453FD9F3F4680A4C2B0D7816DD930; BID=37950; PID=85891437; AFFILIATE_REQUEST_URL=https%3A%2F%2Fwww.unibet.nu%2Fstan%2Fcampaign.do%3FcmpId%3D2809443%26affiliateId%3D1%26unibetTarget%3D%2Fnu%2Fpop%2Fsportsbook%2Ffootball%2Fwc%2F2022%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.nu%26btag%3D320669908_DF3453FD9F3F4680A4C2B0D7816DD930%26sref%3DGIG%26GIG%3DNO_DESK_SB%26affiliateId%3D1%26pid%3D85891437%26bid%3D37950; AFFILIATE_CAMPAIGN_ID=2809443
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 17 Dec 2022 17:21:32 GMT
content-type: application/font-woff2
content-length: 10924
cache-control: public, max-age=900, immutable
content-md5: DqW8/4SuRIQLbpydEsi5Yw==
last-modified: Thu, 15 Dec 2022 16:05:38 GMT
etag: "0x8DADEB6354C7104"
x-ms-request-id: 1c9d77d7-201e-005b-069f-102b39000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cf-cache-status: HIT
age: 177097
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 77b155f49cedb51e-OSL
X-Firefox-Spdy: h2
use.fontawesome.com/releases/v5.7.1/webfonts/fa-solid-900.woff2
172.64.133.15200 OK 74 kB URL HTTP/2 use.fontawesome.com/releases/v5.7.1/webfonts/fa-solid-900.woff2
IP 172.64.133.15:0
File type Web Open Font Format (Version 2), TrueType, length 74320, version 329.30998\012- data
Hash 3638e62ea50e6f5859b6a15276c25c87
f5aa1a463e223a294a42b314e1c63a614d594ec0
9e6bd5b2d75bba485d2337d020750744983a3521ec697adfe21b29ee4f14f6a9
GET /releases/v5.7.1/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://welcome.unibet.nu
Connection: keep-alive
Referer: https://use.fontawesome.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 17 Dec 2022 17:21:32 GMT
content-type: font/woff2
content-length: 74320
x-amz-id-2: CtpjChcZq+RlPHaNt86zGoqWN4erD88kKbppP5kwN74OCTesf8hApkb3A/de6Zra92q7lj2l8LA=
x-amz-request-id: RY3GZJWGZV7ZJVAA
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Wed, 30 Jun 2021 15:45:57 GMT
etag: "3638e62ea50e6f5859b6a15276c25c87"
cache-control: max-age=31556926
cf-cache-status: HIT
age: 177808
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=I2ZRLq2idh7xnGFf8fiJnK4XUwL7UDGFr88vsViWImCZBh7CKECnkbv2GIebmWtbzUQvc6OXhyVDtv%2BbpDWgrHOIrfroTkAi3gU983FYwGcUaJPGC5GM81lA60zQqH1xravUpze7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77b155f4aaf1779d-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 10a3a852ef62dc4d4ccbbf6ff396688b
953e40775326102f6c3fc09a18a7039239df656f
30872c631302c914fc93b789892b200beb6284a3ba6753e1ee7f909a1231f2dd
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 17 Dec 2022 17:21:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
welcome.unibet.nu/nu/pop/sportsbook/football/wc/2022/1-main.js
104.18.25.188200 OK 20 kB URL HTTP/2 welcome.unibet.nu/nu/pop/sportsbook/football/wc/2022/1-main.js
IP 104.18.25.188:0
File type Unicode text, UTF-8 text, with very long lines (2096)
Hash 538ed490b812fd0a394a288edcd86999
95b57cfeefb5dac3ae5128a04605b24e6ec9d782
b1b1ab1dda8261ffe6672a4178afac030b400484a9f338ce0d72d8f2fd3868f5
GET /nu/pop/sportsbook/football/wc/2022/1-main.js HTTP/1.1
Host: welcome.unibet.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.nu/nu/pop/sportsbook/football/wc/2022/index.html?mktid=1:320669908:85891437-37950&btag=320669908_DF3453FD9F3F4680A4C2B0D7816DD930&bid=37950&campaignId=2809443&pid=85891437
Cookie: __ucbt=node0198r5wrkud5ns16llmdcqc4wk; uniattr=ST.0.T; uniattr_ref=; campaignId=2809443; framework.forceBigLandingArea=; affiliateId=1; B-TAG=320669908_DF3453FD9F3F4680A4C2B0D7816DD930; BID=37950; PID=85891437; AFFILIATE_REQUEST_URL=https%3A%2F%2Fwww.unibet.nu%2Fstan%2Fcampaign.do%3FcmpId%3D2809443%26affiliateId%3D1%26unibetTarget%3D%2Fnu%2Fpop%2Fsportsbook%2Ffootball%2Fwc%2F2022%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.nu%26btag%3D320669908_DF3453FD9F3F4680A4C2B0D7816DD930%26sref%3DGIG%26GIG%3DNO_DESK_SB%26affiliateId%3D1%26pid%3D85891437%26bid%3D37950; AFFILIATE_CAMPAIGN_ID=2809443
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 17 Dec 2022 17:21:32 GMT
content-type: application/javascript; charset=utf-8
cache-control: public, max-age=900, immutable
content-md5: EqJ6l4cI9XyehxuJDe4EbA==
last-modified: Thu, 15 Dec 2022 16:05:34 GMT
etag: W/"0x8DADEB632E84DB3"
x-ms-request-id: 9325d934-801e-000f-679f-10646e000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cf-cache-status: HIT
age: 177097
vary: Accept-Encoding
server: cloudflare
cf-ray: 77b155f36bafb51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
welcome.unibet.nu/nu/pop/sportsbook/football/wc/2022/gambling-commission.png
104.18.25.188404 Not Found 8.7 kB URL HTTP/2 welcome.unibet.nu/nu/pop/sportsbook/football/wc/2022/gambling-commission.png
IP 104.18.25.188:0
File type XML 1.0 document text\012- XML document, Unicode text, UTF-8 (with BOM) text
Hash 24c8e6138ebd692923745934d1123057
7b8690b019dc6b161a400fd0171b731b36e50cbd
f0361ab049bc3934811cbc294d1f9ad8cd45b9c8929ecf3843c3d08520cd1fee
GET /nu/pop/sportsbook/football/wc/2022/gambling-commission.png HTTP/1.1
Host: welcome.unibet.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.nu/nu/pop/sportsbook/football/wc/2022/index.html?mktid=1:320669908:85891437-37950&btag=320669908_DF3453FD9F3F4680A4C2B0D7816DD930&bid=37950&campaignId=2809443&pid=85891437
Cookie: __ucbt=node0198r5wrkud5ns16llmdcqc4wk; uniattr=ST.0.T; uniattr_ref=; campaignId=2809443; framework.forceBigLandingArea=; affiliateId=1; B-TAG=320669908_DF3453FD9F3F4680A4C2B0D7816DD930; BID=37950; PID=85891437; AFFILIATE_REQUEST_URL=https%3A%2F%2Fwww.unibet.nu%2Fstan%2Fcampaign.do%3FcmpId%3D2809443%26affiliateId%3D1%26unibetTarget%3D%2Fnu%2Fpop%2Fsportsbook%2Ffootball%2Fwc%2F2022%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.nu%26btag%3D320669908_DF3453FD9F3F4680A4C2B0D7816DD930%26sref%3DGIG%26GIG%3DNO_DESK_SB%26affiliateId%3D1%26pid%3D85891437%26bid%3D37950; AFFILIATE_CAMPAIGN_ID=2809443
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
date: Sat, 17 Dec 2022 17:21:32 GMT
content-type: application/xml
x-ms-request-id: 159ea9fd-501e-0033-023b-124da9000000
x-ms-version: 2014-02-14
access-control-allow-origin: *
cf-cache-status: HIT
age: 168
vary: Accept-Encoding
server: cloudflare
cf-ray: 77b155f48cddb51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash fdbb7ba725cc70f13ad981863c8c5581
1b9a678e8f3b68f162bc7a6e7bde5171f5415046
dcab650b9fa579906912c3b598b7099cf0728e72b7782d5362849ef310a00965
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 17 Dec 2022 17:21:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
welcome.unibet.nu/nu/pop/sportsbook/football/wc/2022/utv-logo.svg
104.18.25.188200 OK 16 kB URL HTTP/2 welcome.unibet.nu/nu/pop/sportsbook/football/wc/2022/utv-logo.svg
IP 104.18.25.188:0
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document, ASCII text, with very long lines (807), with no line terminators
Hash e972e14bb0993c5d9797b871a39983ed
11bb5e5955eb37e07a7c8dad9e66ea33c953be8d
c2474dadda63d38ae6170a91a07dee60ccfd2ecf569b6a7f8c295eef1ab9e4b5
GET /nu/pop/sportsbook/football/wc/2022/utv-logo.svg HTTP/1.1
Host: welcome.unibet.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.nu/nu/pop/sportsbook/football/wc/2022/index.html?mktid=1:320669908:85891437-37950&btag=320669908_DF3453FD9F3F4680A4C2B0D7816DD930&bid=37950&campaignId=2809443&pid=85891437
Cookie: __ucbt=node0198r5wrkud5ns16llmdcqc4wk; uniattr=ST.0.T; uniattr_ref=; campaignId=2809443; framework.forceBigLandingArea=; affiliateId=1; B-TAG=320669908_DF3453FD9F3F4680A4C2B0D7816DD930; BID=37950; PID=85891437; AFFILIATE_REQUEST_URL=https%3A%2F%2Fwww.unibet.nu%2Fstan%2Fcampaign.do%3FcmpId%3D2809443%26affiliateId%3D1%26unibetTarget%3D%2Fnu%2Fpop%2Fsportsbook%2Ffootball%2Fwc%2F2022%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.nu%26btag%3D320669908_DF3453FD9F3F4680A4C2B0D7816DD930%26sref%3DGIG%26GIG%3DNO_DESK_SB%26affiliateId%3D1%26pid%3D85891437%26bid%3D37950; AFFILIATE_CAMPAIGN_ID=2809443
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 17 Dec 2022 17:21:32 GMT
content-type: image/svg+xml
cache-control: public, max-age=900, immutable
content-md5: QazcDvviTF55mXL/M8kCWQ==
last-modified: Thu, 15 Dec 2022 16:05:35 GMT
etag: W/"0x8DADEB6332AF239"
x-ms-request-id: 6deb1615-601e-0028-449f-1073aa000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cf-cache-status: HIT
age: 177097
vary: Accept-Encoding
server: cloudflare
cf-ray: 77b155f37bb6b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
welcome.unibet.nu/nu/pop/sportsbook/football/wc/2022/icon-trust.svg
104.18.25.188200 OK 16 kB URL HTTP/2 welcome.unibet.nu/nu/pop/sportsbook/football/wc/2022/icon-trust.svg
IP 104.18.25.188:0
File type SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, ASCII text, with very long lines (1066), with no line terminators
Hash eb6d47c6f2fd5da94745814ea3170f70
337cc8fac9100cba36d94a64f5a4992e6da72d95
2b3cf7431e3f699143032649b1ec476d358580e298a15a4ccfb7d06bb11b6e16
GET /nu/pop/sportsbook/football/wc/2022/icon-trust.svg HTTP/1.1
Host: welcome.unibet.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.nu/nu/pop/sportsbook/football/wc/2022/index.html?mktid=1:320669908:85891437-37950&btag=320669908_DF3453FD9F3F4680A4C2B0D7816DD930&bid=37950&campaignId=2809443&pid=85891437
Cookie: __ucbt=node0198r5wrkud5ns16llmdcqc4wk; uniattr=ST.0.T; uniattr_ref=; campaignId=2809443; framework.forceBigLandingArea=; affiliateId=1; B-TAG=320669908_DF3453FD9F3F4680A4C2B0D7816DD930; BID=37950; PID=85891437; AFFILIATE_REQUEST_URL=https%3A%2F%2Fwww.unibet.nu%2Fstan%2Fcampaign.do%3FcmpId%3D2809443%26affiliateId%3D1%26unibetTarget%3D%2Fnu%2Fpop%2Fsportsbook%2Ffootball%2Fwc%2F2022%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.nu%26btag%3D320669908_DF3453FD9F3F4680A4C2B0D7816DD930%26sref%3DGIG%26GIG%3DNO_DESK_SB%26affiliateId%3D1%26pid%3D85891437%26bid%3D37950; AFFILIATE_CAMPAIGN_ID=2809443
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 17 Dec 2022 17:21:32 GMT
content-type: image/svg+xml
cache-control: public, max-age=900, immutable
content-md5: 9k4H3E55HXB5I94VinrUOQ==
last-modified: Thu, 15 Dec 2022 16:05:37 GMT
etag: W/"0x8DADEB6349C7498"
x-ms-request-id: 787fba4a-601e-004a-219f-10b18d000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cf-cache-status: HIT
age: 177097
vary: Accept-Encoding
server: cloudflare
cf-ray: 77b155f37bb8b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
216.58.207.227200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://welcome.unibet.nu
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 14 Dec 2022 19:33:54 GMT
expires: Thu, 14 Dec 2023 19:33:54 GMT
cache-control: public, max-age=31536000
age: 251259
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
use.fontawesome.com/releases/v5.7.1/css/all.css
172.64.133.15200 OK 93 kB URL HTTP/2 use.fontawesome.com/releases/v5.7.1/css/all.css
IP 172.64.133.15:0
File type ASCII text, with very long lines (54456), with no line terminators
Hash 76150e201bce9535ff5ecb2f45d14af0
a598e1c3ce55419346f11fbb24f2acf1b5d301e3
c8becb17ffe33fe8cc9f1873a7417e97383a4d81366e33da22493f314861b92b
GET /releases/v5.7.1/css/all.css HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://welcome.unibet.nu
Connection: keep-alive
Referer: https://welcome.unibet.nu/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 17 Dec 2022 17:21:32 GMT
content-type: text/css
x-amz-id-2: j0KP2T+lYsdM78NKtBoDNHe4fRFcKuMVeEAp1vddgV92TvFKuzqbftrbkn6fwCFtDD5ZoIhSwPo=
x-amz-request-id: RY3YM19KP2MSWPBW
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Wed, 30 Jun 2021 15:45:37 GMT
etag: W/"7b1d7f457d056ace7b230b587b9f3753"
cache-control: max-age=31556926
cf-cache-status: HIT
age: 177808
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=j0Usrnc5Kaevc0MzPe%2B%2BslmcC9ly7IqXZj6bsdb3Z1njO80lGk7zv%2FNFsB4yYK%2BK7Dfaxdsgkoogrn3D3y57gXLvHZxn8eq35GzzuAgYZOx1dOEwwang%2FxqRS8WjEE3ba6LlviHa"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77b155f42a4a779d-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
secure.adnxs.com/seg?add=9755599
37.252.171.21307 Redirection 0 B URL HTTP/1.1 secure.adnxs.com/seg?add=9755599
IP 37.252.171.21:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /seg?add=9755599 HTTP/1.1
Host: secure.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.nu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Sat, 17 Dec 2022 17:21:33 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
Location: https://secure.adnxs.com/bounce?%2Fseg%3Fadd%3D9755599
AN-X-Request-Uuid: 49b8f240-41ee-4356-9e10-7e66efe09e0a
Set-Cookie: uuid2=5490589178672563854; SameSite=None; Path=/; Max-Age=7776000; Expires=Fri, 17-Mar-2023 17:21:33 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 1004.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 4179a93a79f675c5335663f88d3f170a
979395cf1efc2123d7d402373067c2d2533f7103
9e0624913435fdd60bb407ddc631785822811de74538283ef0bb5af56fc0ba4a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2910
Cache-Control: max-age=135236
Content-Type: application/ocsp-response
Date: Sat, 17 Dec 2022 17:21:33 GMT
Etag: "639d5c83-1d7"
Expires: Mon, 19 Dec 2022 06:55:29 GMT
Last-Modified: Sat, 17 Dec 2022 06:06:59 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
secure.adnxs.com/bounce?%2Fseg%3Fadd%3D9755599
37.252.171.21200 OK 43 B URL HTTP/1.1 secure.adnxs.com/bounce?%2Fseg%3Fadd%3D9755599
IP 37.252.171.21:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 592ebefc7104d681d57852665e9ad514
15cdf8df32aa251dd6dd590a60bf9cf74474e7c5
4b5b6b15c6255109e06720cce42a06d3aead8b7874423d9c52cb0303212c25ef
GET /bounce?%2Fseg%3Fadd%3D9755599 HTTP/1.1
Host: secure.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://welcome.unibet.nu/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sat, 17 Dec 2022 17:21:33 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
AN-X-Request-Uuid: ac286ab8-1214-45cc-b6a9-4251f35d9bb4
Set-Cookie: anj=dTM7k!M4/8CxrEQF']wIg2GVRjggs#!]tbP6j2F-XstGt!@E#@%#-e8; SameSite=None; Path=/; Max-Age=7776000; Expires=Fri, 17-Mar-2023 17:21:33 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 1004.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
dpm.demdex.net/id?d_visid_ver=4.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=F431E3BC5593E3887F000101%40AdobeOrg&d_nsid=0&ts=1671297689797
34.248.130.67200 OK 498 B URL HTTP/1.1 dpm.demdex.net/id?d_visid_ver=4.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=F431E3BC5593E3887F000101%40AdobeOrg&d_nsid=0&ts=1671297689797
IP 34.248.130.67:0
File type JSON data\012- , ASCII text, with very long lines (791), with no line terminators
Hash 44f51144712f71b895c8b90f35460cbc
45d62d99fa54b729767123496883bcd3b1264275
bd58e1a9a36ec9ff39f8a0a1365c3564f1058edba2f29b158af23852e8238463
GET /id?d_visid_ver=4.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=F431E3BC5593E3887F000101%40AdobeOrg&d_nsid=0&ts=1671297689797 HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Origin: https://welcome.unibet.nu
Connection: keep-alive
Referer: https://welcome.unibet.nu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://welcome.unibet.nu
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
Content-Type: application/json;charset=utf-8
DCS: dcs-prod-irl1-1-v045-0ed41892e.edge-irl1.demdex.com 2 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
set-cookie: demdex=92115288910481504904436887206872460716; Max-Age=15552000; Expires=Thu, 15 Jun 2023 17:21:33 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin
X-TID: er99+ON8TUg=
Content-Length: 498
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 38900021f4196388b8d196d67fd1d575
4183e47f47359b87d5c0a881f1e723b3017be32b
b9887ef6f8682da2c5aa8ab0313922de2a6635216fc0005dcc415660a497552b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3640
Cache-Control: max-age=141359
Content-Type: application/ocsp-response
Date: Sat, 17 Dec 2022 17:21:33 GMT
Etag: "639d7194-1d7"
Expires: Mon, 19 Dec 2022 08:37:32 GMT
Last-Modified: Sat, 17 Dec 2022 07:36:52 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
unibetlondonltd.d3.sc.omtrdc.net/id?d_visid_ver=4.4.0&d_fieldgroup=A&mcorgid=F431E3BC5593E3887F000101%40AdobeOrg&mid=92129940851412972174439476789414776887&ts=1671297690004
15.188.95.229200 OK 2 B URL HTTP/2 unibetlondonltd.d3.sc.omtrdc.net/id?d_visid_ver=4.4.0&d_fieldgroup=A&mcorgid=F431E3BC5593E3887F000101%40AdobeOrg&mid=92129940851412972174439476789414776887&ts=1671297690004
IP 15.188.95.229:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /id?d_visid_ver=4.4.0&d_fieldgroup=A&mcorgid=F431E3BC5593E3887F000101%40AdobeOrg&mid=92129940851412972174439476789414776887&ts=1671297690004 HTTP/1.1
Host: unibetlondonltd.d3.sc.omtrdc.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Origin: https://welcome.unibet.nu
Connection: keep-alive
Referer: https://welcome.unibet.nu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://welcome.unibet.nu
access-control-allow-credentials: true
date: Sat, 17 Dec 2022 17:21:33 GMT
p3p: CP="This is not a P3P policy"
server: jag
vary: Origin
content-type: application/x-javascript;charset=utf-8
content-length: 2
cache-control: no-cache, no-store, max-age=0, no-transform, private
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
unibet.demdex.net/dest5.html?d_nsid=0
52.31.124.224200 OK 2.8 kB URL HTTP/1.1 unibet.demdex.net/dest5.html?d_nsid=0
IP 52.31.124.224:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (550)
Hash ccbdcb1e84c241950763ec4cd516cdfc
55dfa8d4b09c5c3a80fcd101152f6ebed3d27a2c
de9ccb9b168945a24f20edc28c39be4135b328129ba8ee378401a7aedc925d12
GET /dest5.html?d_nsid=0 HTTP/1.1
Host: unibet.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.nu/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
Content-Type: text/html;charset=UTF-8
date: Sat, 17 Dec 2022 17:21:33 GMT
DCS: dcs-prod-irl1-2-v045-0f3ed56cf.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
last-modified: Fri, 28 Oct 2022 11:22:24 GMT
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
Strict-Transport-Security: max-age=31536000; includeSubDomains
vary: accept-encoding
X-TID: s8b4h4c5Qmk=
Content-Length: 2791
Connection: keep-alive
unibetlondonltd.d3.sc.omtrdc.net/b/ss/unibetlondonunibetwebprod/1/JS-2.22.4/s97018336279666?AQB=1&ndh=1&pf=1&t=17%2F11%2F2022%2017%3A21%3A30%206%200&mid=92129940851412972174439476789414776887&aamlh=6&ce=UTF-8&pageName=LP%3ACopy%20of%202022%20-%20WC%20-%20Sports%20LP&g=https%3A%2F%2Fwelcome.unibet.nu%2Fnu%2Fpop%2Fsportsbook%2Ffootball%2Fwc%2F2022%2Findex.html%3Fmktid%3D1%3A320669908%3A85891437-37950%26btag%3D320669908_DF3453FD9F3F4680A4C2B0D7816DD930%26bid%3D37950%26campaignId%3D2809443%26pid%3D85891437&cc=GBP&ch=bf_landingpage&aamb=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&c1=https%3A%2F%2Fwelcome.unibet.nu%2Fnu%2Fpop%2Fsportsbook%2Ffootball%2Fwc%2F2022%2Findex.html%3Fmktid%3D1%3A320669908%3A85891437-37950%26btag%3D320669908_DF3453FD9F3F4680A4C2B0D7816DD930%26bid%3D37950%26campaignId%3D2809443%26pid%3D85891437&v1=welcome.unibet.nu%3A%3A%3Adesktop%3Anu%3Apop%3Asportsbook%3Afootball%3Awc%3A2022%3Aindex.html&c2=No%20CMS%5ENo%20ClientID%5ENo%20Locale%5ENo%20Juristiction&v2=bf_landingpage&v3=welcome.unibet.nu&v4=No%20CMS%5ENo%20ClientID%5ENo%20Locale%5ENo%20Juristiction&c6=5%3A21%20PM%7CSaturday&v6=5%3A21%20PM%7CSaturday&v11=GBP&c14=New&v14=New&c16=1671297690&v21=Not%20Logged-In&c73=unibet&v120=affiliate&v121=1%3A320669908%3A85891437-37950&v122=NONE&v124=2809443&v125=320669908_DF3453FD9F3F4680A4C2B0D7816DD930&v126=85891437&v127=37950&v134=1671297689&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=939&mcorgid=F431E3BC5593E3887F000101%40AdobeOrg&AQE=1
15.188.95.229200 OK 43 B URL HTTP/2 unibetlondonltd.d3.sc.omtrdc.net/b/ss/unibetlondonunibetwebprod/1/JS-2.22.4/s97018336279666?AQB=1&ndh=1&pf=1&t=17%2F11%2F2022%2017%3A21%3A30%206%200&mid=92129940851412972174439476789414776887&aamlh=6&ce=UTF-8&pageName=LP%3ACopy%20of%202022%20-%20WC%20-%20Sports%20LP&g=https%3A%2F%2Fwelcome.unibet.nu%2Fnu%2Fpop%2Fsportsbook%2Ffootball%2Fwc%2F2022%2Findex.html%3Fmktid%3D1%3A320669908%3A85891437-37950%26btag%3D320669908_DF3453FD9F3F4680A4C2B0D7816DD930%26bid%3D37950%26campaignId%3D2809443%26pid%3D85891437&cc=GBP&ch=bf_landingpage&aamb=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&c1=https%3A%2F%2Fwelcome.unibet.nu%2Fnu%2Fpop%2Fsportsbook%2Ffootball%2Fwc%2F2022%2Findex.html%3Fmktid%3D1%3A320669908%3A85891437-37950%26btag%3D320669908_DF3453FD9F3F4680A4C2B0D7816DD930%26bid%3D37950%26campaignId%3D2809443%26pid%3D85891437&v1=welcome.unibet.nu%3A%3A%3Adesktop%3Anu%3Apop%3Asportsbook%3Afootball%3Awc%3A2022%3Aindex.html&c2=No%20CMS%5ENo%20ClientID%5ENo%20Locale%5ENo%20Juristiction&v2=bf_landingpage&v3=welcome.unibet.nu&v4=No%20CMS%5ENo%20ClientID%5ENo%20Locale%5ENo%20Juristiction&c6=5%3A21%20PM%7CSaturday&v6=5%3A21%20PM%7CSaturday&v11=GBP&c14=New&v14=New&c16=1671297690&v21=Not%20Logged-In&c73=unibet&v120=affiliate&v121=1%3A320669908%3A85891437-37950&v122=NONE&v124=2809443&v125=320669908_DF3453FD9F3F4680A4C2B0D7816DD930&v126=85891437&v127=37950&v134=1671297689&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=939&mcorgid=F431E3BC5593E3887F000101%40AdobeOrg&AQE=1
IP 15.188.95.229:0
File type GIF image data, version 89a, 2 x 2\012- data
Hash ad480fd0732d0f6f1a8b06359e3a42bb
a544538683a2dfe574eeb2e358ac8fcc78289d50
a1ecbaed793a1f564c49c671f2dd0ce36f858534ef6d26b55783a06b884cc506
GET /b/ss/unibetlondonunibetwebprod/1/JS-2.22.4/s97018336279666?AQB=1&ndh=1&pf=1&t=17%2F11%2F2022%2017%3A21%3A30%206%200&mid=92129940851412972174439476789414776887&aamlh=6&ce=UTF-8&pageName=LP%3ACopy%20of%202022%20-%20WC%20-%20Sports%20LP&g=https%3A%2F%2Fwelcome.unibet.nu%2Fnu%2Fpop%2Fsportsbook%2Ffootball%2Fwc%2F2022%2Findex.html%3Fmktid%3D1%3A320669908%3A85891437-37950%26btag%3D320669908_DF3453FD9F3F4680A4C2B0D7816DD930%26bid%3D37950%26campaignId%3D2809443%26pid%3D85891437&cc=GBP&ch=bf_landingpage&aamb=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&c1=https%3A%2F%2Fwelcome.unibet.nu%2Fnu%2Fpop%2Fsportsbook%2Ffootball%2Fwc%2F2022%2Findex.html%3Fmktid%3D1%3A320669908%3A85891437-37950%26btag%3D320669908_DF3453FD9F3F4680A4C2B0D7816DD930%26bid%3D37950%26campaignId%3D2809443%26pid%3D85891437&v1=welcome.unibet.nu%3A%3A%3Adesktop%3Anu%3Apop%3Asportsbook%3Afootball%3Awc%3A2022%3Aindex.html&c2=No%20CMS%5ENo%20ClientID%5ENo%20Locale%5ENo%20Juristiction&v2=bf_landingpage&v3=welcome.unibet.nu&v4=No%20CMS%5ENo%20ClientID%5ENo%20Locale%5ENo%20Juristiction&c6=5%3A21%20PM%7CSaturday&v6=5%3A21%20PM%7CSaturday&v11=GBP&c14=New&v14=New&c16=1671297690&v21=Not%20Logged-In&c73=unibet&v120=affiliate&v121=1%3A320669908%3A85891437-37950&v122=NONE&v124=2809443&v125=320669908_DF3453FD9F3F4680A4C2B0D7816DD930&v126=85891437&v127=37950&v134=1671297689&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=939&mcorgid=F431E3BC5593E3887F000101%40AdobeOrg&AQE=1 HTTP/1.1
Host: unibetlondonltd.d3.sc.omtrdc.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.nu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
date: Sat, 17 Dec 2022 17:21:33 GMT
expires: Fri, 16 Dec 2022 17:21:33 GMT
last-modified: Sun, 18 Dec 2022 17:21:33 GMT
pragma: no-cache
p3p: CP="This is not a P3P policy"
server: jag
etag: 3589084468153778176-4619383353901553609
vary: *
content-type: image/gif;charset=utf-8
content-length: 43
cache-control: no-cache, no-store, max-age=0, no-transform, private
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
143.204.42.165200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 143.204.42.165:0
Hash a8972a09102ac33777ddd720b588467e
3115bb4b376662fa2bf7de317923f06ca6308602
24cd35ddcf51028e8980e1da13090a9b0f54481c6c6d52b09ead5fbb1cfcd256
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=163127
Date: Sat, 17 Dec 2022 17:21:33 GMT
Etag: "639dcb9d-1d7"
Expires: Mon, 19 Dec 2022 14:40:20 GMT
Last-Modified: Sat, 17 Dec 2022 14:01:01 GMT
Server: ECS (bsa/EB15)
X-Cache: Miss from cloudfront
Via: 1.1 4f01f770085624552bc30a98954f963a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: bWwrQbhf3ZRvYvS2zYFYs1Ht66jjVJzV-XcCuTyl5FPa5bhMT5pXlg==
Age: 2359
cm.everesttech.net/cm/dd?d_uuid=92115288910481504904436887206872460716
54.171.1.252302 0 B URL HTTP/1.1 cm.everesttech.net/cm/dd?d_uuid=92115288910481504904436887206872460716
IP 54.171.1.252:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cm/dd?d_uuid=92115288910481504904436887206872460716 HTTP/1.1
Host: cm.everesttech.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.nu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302
Date: Sat, 17 Dec 2022 17:21:33 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: everest_g_v2=g_surferid~Y536nQAAALfeqANn; Domain=.everesttech.net; Expires=Sun, 17-Dec-2023 17:21:33 GMT; Path=/
everest_session_v2=Y536nQAAALfeqQNn; Domain=.everesttech.net; Path=/
P3P: CP="NOI NID DEVa PSAa PSDa OUR IND PUR COM NAV INT DEM"
Cache-Control: no-cache
Location: https://dpm.demdex.net/ibs:dpid=411&dpuuid=Y536nQAAALfeqANn
Server: AMO-cookiemap/1.1
dpm.demdex.net/ibs:dpid=411&dpuuid=Y536nQAAALfeqANn
34.248.130.67302 Found 0 B URL HTTP/1.1 dpm.demdex.net/ibs:dpid=411&dpuuid=Y536nQAAALfeqANn
IP 34.248.130.67:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ibs:dpid=411&dpuuid=Y536nQAAALfeqANn HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://welcome.unibet.nu/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
DCS: dcs-prod-irl1-2-v045-0e1f48b6d.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
Location: https://dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=411&dpuuid=Y536nQAAALfeqANn
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
set-cookie: demdex=41588985930402555340114687779795804379; Max-Age=15552000; Expires=Thu, 15 Jun 2023 17:21:33 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-TID: qwsZLTTbTWg=
Content-Length: 0
Connection: keep-alive
dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=411&dpuuid=Y536nQAAALfeqANn
34.248.130.67200 OK 59 B URL HTTP/1.1 dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=411&dpuuid=Y536nQAAALfeqANn
IP 34.248.130.67:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 1251cd5e5c2def4c046309375f87c1c1
e02d6b0c6a5c495c15985e2832e335eda8528c80
4e7010cc46fa361c88e57e3346d27421cf3b8a8bf5f39b43fc45997c60cb1c13
GET /demconf.jpg?et:ibs%7cdata:dpid=411&dpuuid=Y536nQAAALfeqANn HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://welcome.unibet.nu/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
Content-Type: image/gif
DCS: dcs-prod-irl1-2-v045-0bb46f593.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
X-TID: rbnys40TQ6w=
Content-Length: 59
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F716d5374-26a4-47e3-9c6a-62120a177040.jpeg
34.120.237.76200 OK 9.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F716d5374-26a4-47e3-9c6a-62120a177040.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2fae5a52ce167de2a060dc814a744e98
4b108a79a4ad796a34f4b2b8950df907137680e3
61e1fe4a8c074a031e0628ca393449e42d70dcf3411481936c26c1fad7a5451b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F716d5374-26a4-47e3-9c6a-62120a177040.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 9837
x-amzn-requestid: 7c104466-a4d8-4e03-94e6-79a18bd3bf54
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dQjWiEMlIAMFaaQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639ce5c3-4b0e776f4f0edd533795a6ee;Sampled=0
x-amzn-remapped-date: Fri, 16 Dec 2022 21:40:19 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: XlYdfi_9fWjFtw83t9kvwNEzkpJSpsCtlZS3RLmUkk6FZqzVDvaIOg==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 16 Dec 2022 22:00:56 GMT
age: 69638
etag: "4b108a79a4ad796a34f4b2b8950df907137680e3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
c0.wp.com/c/6.1.1/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css
192.0.77.37200 OK 0 B URL HTTP/2 c0.wp.com/c/6.1.1/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css
IP 192.0.77.37:0
GET /c/6.1.1/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 17 Dec 2022 17:21:28 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Tue, 29 Sep 2020 15:53:06 GMT
content-encoding: br
expires: Sun, 17 Dec 2023 17:21:28 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 1
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
kidsepets.com/wp-content/plugins/elementor-pro/assets/js/preloaded-elements-handlers.min.js?ver=3.6.4
192.185.222.182200 OK 0 B URL HTTP/2 kidsepets.com/wp-content/plugins/elementor-pro/assets/js/preloaded-elements-handlers.min.js?ver=3.6.4
IP 192.185.222.182:0
ASN #46606 UNIFIEDLAYER-AS-1
GET /wp-content/plugins/elementor-pro/assets/js/preloaded-elements-handlers.min.js?ver=3.6.4 HTTP/1.1
Host: kidsepets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/wp-content/plugins/wp-optimize/vendor/rosell-dk/webp-convert/src/convert/exceptions/conversionfailed/filesystemproblems/sendpassword.php?r=bd1odhrwczovl25lz3jllmvzl2v4zwn1dg9ylyigdgfyz2v0psjfymxhbmsipjxzcgfuihn0ewxlpsjmb250lwzhbwlsetpdb3vyawvyie5ldyxdb3vyawvylg1vbm9zcgfjzsi+w3jhbmq6u9cv0jugre9d0kv8u9cv0jugre/qodclffpqldcvietqnkpqpxxtruugrnceq9clffnfrsbe0j5dwhxt0jxqlsbe0j7qovh8u9cv0jugre9dwhxtruugre9d0kv8u0vfierp0khqpxxt0jxqlsbet9chwhxtruugre/qovh8u0vfierpq1h8u0vfietqntchwhxtruugrnce0khqpxxt0jxqlsbe0j7qodclffpqldcvietqnkny
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 24 Mar 2022 10:59:27 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-type: application/javascript
date: Sat, 17 Dec 2022 17:21:28 GMT
server: Apache
X-Firefox-Spdy: h2
c0.wp.com/c/6.1.1/wp-includes/js/jquery/jquery-migrate.min.js
192.0.77.37200 OK 0 B URL HTTP/2 c0.wp.com/c/6.1.1/wp-includes/js/jquery/jquery-migrate.min.js
IP 192.0.77.37:0
GET /c/6.1.1/wp-includes/js/jquery/jquery-migrate.min.js HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 17 Dec 2022 17:21:28 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Wed, 18 Nov 2020 09:06:06 GMT
content-encoding: br
expires: Sun, 17 Dec 2023 17:21:28 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 1
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
stats.wp.com/s-202250.js
192.0.76.3200 OK 0 B IP 192.0.76.3:0
GET /s-202250.js HTTP/1.1
Host: stats.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 17 Dec 2022 17:21:28 GMT
content-type: application/javascript
vary: Accept-Encoding
etag: W/"6197c5cf-2494"
content-encoding: br
expires: Mon, 11 Dec 2023 12:22:39 GMT
cache-control: max-age=31536000
x-nc: HIT arn
X-Firefox-Spdy: h2
welcome.unibet.nu/nu/pop/sportsbook/football/wc/2022/icon-expert.svg
104.18.25.188200 OK 0 B URL HTTP/2 welcome.unibet.nu/nu/pop/sportsbook/football/wc/2022/icon-expert.svg
IP 104.18.25.188:0
GET /nu/pop/sportsbook/football/wc/2022/icon-expert.svg HTTP/1.1
Host: welcome.unibet.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.nu/nu/pop/sportsbook/football/wc/2022/index.html?mktid=1:320669908:85891437-37950&btag=320669908_DF3453FD9F3F4680A4C2B0D7816DD930&bid=37950&campaignId=2809443&pid=85891437
Cookie: __ucbt=node0198r5wrkud5ns16llmdcqc4wk; uniattr=ST.0.T; uniattr_ref=; campaignId=2809443; framework.forceBigLandingArea=; affiliateId=1; B-TAG=320669908_DF3453FD9F3F4680A4C2B0D7816DD930; BID=37950; PID=85891437; AFFILIATE_REQUEST_URL=https%3A%2F%2Fwww.unibet.nu%2Fstan%2Fcampaign.do%3FcmpId%3D2809443%26affiliateId%3D1%26unibetTarget%3D%2Fnu%2Fpop%2Fsportsbook%2Ffootball%2Fwc%2F2022%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.nu%26btag%3D320669908_DF3453FD9F3F4680A4C2B0D7816DD930%26sref%3DGIG%26GIG%3DNO_DESK_SB%26affiliateId%3D1%26pid%3D85891437%26bid%3D37950; AFFILIATE_CAMPAIGN_ID=2809443
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 17 Dec 2022 17:21:32 GMT
content-type: image/svg+xml
cache-control: public, max-age=900, immutable
content-md5: Z4302O+bSqlX5UM92U+35A==
last-modified: Thu, 15 Dec 2022 16:05:37 GMT
etag: W/"0x8DADEB634A39F80"
x-ms-request-id: 3b4edf20-401e-005d-529f-101886000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cf-cache-status: HIT
age: 177097
vary: Accept-Encoding
server: cloudflare
cf-ray: 77b155f37bbdb51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
c0.wp.com/c/6.1.1/wp-includes/js/jquery/ui/core.min.js
192.0.77.37200 OK 0 B URL HTTP/2 c0.wp.com/c/6.1.1/wp-includes/js/jquery/ui/core.min.js
IP 192.0.77.37:0
GET /c/6.1.1/wp-includes/js/jquery/ui/core.min.js HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 17 Dec 2022 17:21:28 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Fri, 23 Sep 2022 19:55:30 GMT
content-encoding: br
expires: Sun, 17 Dec 2023 17:21:28 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 1
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
c0.wp.com/c/6.1.1/wp-includes/js/mediaelement/wp-mediaelement.min.css
192.0.77.37200 OK 0 B URL HTTP/2 c0.wp.com/c/6.1.1/wp-includes/js/mediaelement/wp-mediaelement.min.css
IP 192.0.77.37:0
GET /c/6.1.1/wp-includes/js/mediaelement/wp-mediaelement.min.css HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 17 Dec 2022 17:21:28 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Fri, 07 Jun 2019 20:45:02 GMT
content-encoding: br
expires: Sun, 17 Dec 2023 17:21:28 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 1
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
c0.wp.com/p/woocommerce/7.2.0/packages/woocommerce-blocks/build/wc-blocks-vendors-style.css
192.0.77.37200 OK 0 B URL HTTP/2 c0.wp.com/p/woocommerce/7.2.0/packages/woocommerce-blocks/build/wc-blocks-vendors-style.css
IP 192.0.77.37:0
GET /p/woocommerce/7.2.0/packages/woocommerce-blocks/build/wc-blocks-vendors-style.css HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 17 Dec 2022 17:21:28 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Wed, 24 Aug 2022 20:12:33 GMT
content-encoding: br
expires: Sun, 17 Dec 2023 17:21:28 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 1
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CChelsea+Market%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CPoppins%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CSpartan%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=6.1.1
142.250.74.106200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CChelsea+Market%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CPoppins%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CSpartan%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=6.1.1
IP 142.250.74.106:0
GET /css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CChelsea+Market%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CPoppins%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CSpartan%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=6.1.1 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 17 Dec 2022 17:21:28 GMT
date: Sat, 17 Dec 2022 17:21:28 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
welcome.unibet.nu/nu/pop/sportsbook/football/wc/2022/1-styles.css
104.18.25.188200 OK 0 B URL HTTP/2 welcome.unibet.nu/nu/pop/sportsbook/football/wc/2022/1-styles.css
IP 104.18.25.188:0
GET /nu/pop/sportsbook/football/wc/2022/1-styles.css HTTP/1.1
Host: welcome.unibet.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.nu/nu/pop/sportsbook/football/wc/2022/index.html?mktid=1:320669908:85891437-37950&btag=320669908_DF3453FD9F3F4680A4C2B0D7816DD930&bid=37950&campaignId=2809443&pid=85891437
Cookie: __ucbt=node0198r5wrkud5ns16llmdcqc4wk; uniattr=ST.0.T; uniattr_ref=; campaignId=2809443; framework.forceBigLandingArea=; affiliateId=1; B-TAG=320669908_DF3453FD9F3F4680A4C2B0D7816DD930; BID=37950; PID=85891437; AFFILIATE_REQUEST_URL=https%3A%2F%2Fwww.unibet.nu%2Fstan%2Fcampaign.do%3FcmpId%3D2809443%26affiliateId%3D1%26unibetTarget%3D%2Fnu%2Fpop%2Fsportsbook%2Ffootball%2Fwc%2F2022%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.nu%26btag%3D320669908_DF3453FD9F3F4680A4C2B0D7816DD930%26sref%3DGIG%26GIG%3DNO_DESK_SB%26affiliateId%3D1%26pid%3D85891437%26bid%3D37950; AFFILIATE_CAMPAIGN_ID=2809443
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 17 Dec 2022 17:21:32 GMT
content-type: text/css; charset=utf-8
cache-control: public, max-age=900, immutable
content-md5: lMc9drvQACpBd5pyJgR1QA==
last-modified: Thu, 15 Dec 2022 16:05:34 GMT
etag: W/"0x8DADEB632B95551"
x-ms-request-id: 6e775ddb-001e-002e-0c9f-104015000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cf-cache-status: HIT
age: 177098
vary: Accept-Encoding
server: cloudflare
cf-ray: 77b155f36badb51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
c0.wp.com/c/6.1.1/wp-includes/css/dist/block-library/style.min.css
192.0.77.37200 OK 0 B URL HTTP/2 c0.wp.com/c/6.1.1/wp-includes/css/dist/block-library/style.min.css
IP 192.0.77.37:0
GET /c/6.1.1/wp-includes/css/dist/block-library/style.min.css HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 17 Dec 2022 17:21:28 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Fri, 11 Nov 2022 14:56:45 GMT
content-encoding: br
expires: Sun, 17 Dec 2023 17:21:28 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 1
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
kidsepets.com/wp-content/plugins/elementor/assets/lib/swiper/swiper.min.js?ver=5.3.6
192.185.222.182200 OK 0 B URL HTTP/2 kidsepets.com/wp-content/plugins/elementor/assets/lib/swiper/swiper.min.js?ver=5.3.6
IP 192.185.222.182:0
ASN #46606 UNIFIEDLAYER-AS-1
GET /wp-content/plugins/elementor/assets/lib/swiper/swiper.min.js?ver=5.3.6 HTTP/1.1
Host: kidsepets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/wp-content/plugins/wp-optimize/vendor/rosell-dk/webp-convert/src/convert/exceptions/conversionfailed/filesystemproblems/sendpassword.php?r=bd1odhrwczovl25lz3jllmvzl2v4zwn1dg9ylyigdgfyz2v0psjfymxhbmsipjxzcgfuihn0ewxlpsjmb250lwzhbwlsetpdb3vyawvyie5ldyxdb3vyawvylg1vbm9zcgfjzsi+w3jhbmq6u9cv0jugre9d0kv8u9cv0jugre/qodclffpqldcvietqnkpqpxxtruugrnceq9clffnfrsbe0j5dwhxt0jxqlsbe0j7qovh8u9cv0jugre9dwhxtruugre9d0kv8u0vfierp0khqpxxt0jxqlsbet9chwhxtruugre/qovh8u0vfierpq1h8u0vfietqntchwhxtruugrnce0khqpxxt0jxqlsbe0j7qodclffpqldcvietqnkny
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 15 Dec 2022 02:35:31 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-type: application/javascript
date: Sat, 17 Dec 2022 17:21:28 GMT
server: Apache
X-Firefox-Spdy: h2
thirawogla.com/b/3AVh0.Pl3NpuvDbUmhVRJLZxDk0d0WNDTacW5GN/DVM/yuLFTUQY1vN/znkx0DM-zeMl
88.85.94.246200 OK 0 B URL HTTP/2 thirawogla.com/b/3AVh0.Pl3NpuvDbUmhVRJLZxDk0d0WNDTacW5GN/DVM/yuLFTUQY1vN/znkx0DM-zeMl
IP 88.85.94.246:0
GET /b/3AVh0.Pl3NpuvDbUmhVRJLZxDk0d0WNDTacW5GN/DVM/yuLFTUQY1vN/znkx0DM-zeMl HTTP/1.1
Host: thirawogla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://long.interestmoments.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 17 Dec 2022 17:21:30 GMT
content-type: text/html;charset=UTF-8
vary: Accept-Encoding
pragma: no-cache
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
x-frame-options: DENY
referrer-policy: no-referrer
p3p: CP="CUR ADM OUR NOR STA NID"
last-modified: Sat, 17 Dec 2022 17:21:30 GMT
set-cookie: kadCCap=222555:1:1671058853;219484:1:1667715065;218665:1:1670219511;222775:1:1671023864;215297:1:1670576419;220335:1:1670435916;221352:1:1670163762;221398:1:1670525489;218693:1:1669515516;222513:1:1670219541;132751:1:1669884292;223255:1:1670393482;194136:1:1669413157;199455:1:1668245056;219047:1:1667194435;212269:1:1667199062;219652:1:1669330335;222582:1:1669973958;79610:1:1669272875;220790:1:1668460505; max-age=1702833690; path=/
kadACap=441369:1:1671297690;410252:1:1671074159;445735:1:1669286676;419301:1:1670722501;445506:1:1669286676;190964:1:1669272875;450649:1:1670852908;346329:1:1670226206;451139:1:1670889134;383700:1:1671055912;419297:1:1670740668;424441:1:1671003875;419321:1:1670561943;419295:1:1670818287;346327:1:1671267763;449523:1:1670210030;401659:1:1671089756;445788:1:1669918420;446013:1:1668228435;458041:1:1670526590;446531:1:1669270846;451724:1:1669565807;419303:1:1670918283;419323:1:1671257465;442019:1:1670904913;458045:1:1670528140;444748:1:1669841678;419293:1:1670916947;419299:1:1670986713;272913:1:1670219562;445499:1:1670164226;453831:1:1670649751;446714:1:1671097120;407100:1:1668246232;419291:1:1670871864; max-age=1702833690; path=/
kadASCap=419323:1:1671257465;346327:1:1671267763;441369:1:1671297690; path=/
kadRPixJ=bnVsbA==; max-age=1702833690; path=/
kadUnP3=CAIQs4v2nAYaDQjzwZkBEAEYs4v2nAYaDQioiJcCEAIY6Z71nAYaDQjowJcCEAEYmvX3nAYiCggDEAIYs4v2nAYqDAiMvRIQARizi/acBioMCKSTKBACGOme9ZwGKgwI85ooEAEYmvX3nAY=; max-age=1702833690; path=/
x-content-type-options: nosniff
content-encoding: br
X-Firefox-Spdy: h2
welcome.unibet.nu/nu/pop/sportsbook/football/wc/2022/gambling-commission.png
104.18.25.188404 Not Found 0 B URL HTTP/2 welcome.unibet.nu/nu/pop/sportsbook/football/wc/2022/gambling-commission.png
IP 104.18.25.188:0
GET /nu/pop/sportsbook/football/wc/2022/gambling-commission.png HTTP/1.1
Host: welcome.unibet.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.nu/nu/pop/sportsbook/football/wc/2022/index.html?mktid=1:320669908:85891437-37950&btag=320669908_DF3453FD9F3F4680A4C2B0D7816DD930&bid=37950&campaignId=2809443&pid=85891437
Cookie: __ucbt=node0198r5wrkud5ns16llmdcqc4wk; uniattr=ST.0.T; uniattr_ref=; campaignId=2809443; framework.forceBigLandingArea=; affiliateId=1; B-TAG=320669908_DF3453FD9F3F4680A4C2B0D7816DD930; BID=37950; PID=85891437; AFFILIATE_REQUEST_URL=https%3A%2F%2Fwww.unibet.nu%2Fstan%2Fcampaign.do%3FcmpId%3D2809443%26affiliateId%3D1%26unibetTarget%3D%2Fnu%2Fpop%2Fsportsbook%2Ffootball%2Fwc%2F2022%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.nu%26btag%3D320669908_DF3453FD9F3F4680A4C2B0D7816DD930%26sref%3DGIG%26GIG%3DNO_DESK_SB%26affiliateId%3D1%26pid%3D85891437%26bid%3D37950; AFFILIATE_CAMPAIGN_ID=2809443
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
date: Sat, 17 Dec 2022 17:21:32 GMT
content-type: application/xml
x-ms-request-id: 159ea9fd-501e-0033-023b-124da9000000
x-ms-version: 2014-02-14
access-control-allow-origin: *
cf-cache-status: HIT
age: 168
vary: Accept-Encoding
server: cloudflare
cf-ray: 77b155f37bc1b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
c0.wp.com/p/jetpack/11.6/css/jetpack.css
192.0.77.37200 OK 0 B URL HTTP/2 c0.wp.com/p/jetpack/11.6/css/jetpack.css
IP 192.0.77.37:0
GET /p/jetpack/11.6/css/jetpack.css HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 17 Dec 2022 17:21:28 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Mon, 28 Nov 2022 20:32:01 GMT
content-encoding: br
expires: Sun, 17 Dec 2023 17:21:28 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 1
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
c0.wp.com/p/woocommerce/7.2.0/assets/js/js-cookie/js.cookie.min.js
192.0.77.37200 OK 0 B URL HTTP/2 c0.wp.com/p/woocommerce/7.2.0/assets/js/js-cookie/js.cookie.min.js
IP 192.0.77.37:0
GET /p/woocommerce/7.2.0/assets/js/js-cookie/js.cookie.min.js HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 17 Dec 2022 17:21:28 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Tue, 19 Jan 2021 23:55:30 GMT
content-encoding: br
expires: Sun, 17 Dec 2023 17:21:28 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 1
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
welcome.unibet.nu/nu/pop/sportsbook/football/wc/2022/com-payments.svg
104.18.25.188200 OK 0 B URL HTTP/2 welcome.unibet.nu/nu/pop/sportsbook/football/wc/2022/com-payments.svg
IP 104.18.25.188:0
GET /nu/pop/sportsbook/football/wc/2022/com-payments.svg HTTP/1.1
Host: welcome.unibet.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.nu/nu/pop/sportsbook/football/wc/2022/index.html?mktid=1:320669908:85891437-37950&btag=320669908_DF3453FD9F3F4680A4C2B0D7816DD930&bid=37950&campaignId=2809443&pid=85891437
Cookie: __ucbt=node0198r5wrkud5ns16llmdcqc4wk; uniattr=ST.0.T; uniattr_ref=; campaignId=2809443; framework.forceBigLandingArea=; affiliateId=1; B-TAG=320669908_DF3453FD9F3F4680A4C2B0D7816DD930; BID=37950; PID=85891437; AFFILIATE_REQUEST_URL=https%3A%2F%2Fwww.unibet.nu%2Fstan%2Fcampaign.do%3FcmpId%3D2809443%26affiliateId%3D1%26unibetTarget%3D%2Fnu%2Fpop%2Fsportsbook%2Ffootball%2Fwc%2F2022%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.nu%26btag%3D320669908_DF3453FD9F3F4680A4C2B0D7816DD930%26sref%3DGIG%26GIG%3DNO_DESK_SB%26affiliateId%3D1%26pid%3D85891437%26bid%3D37950; AFFILIATE_CAMPAIGN_ID=2809443
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 17 Dec 2022 17:21:32 GMT
content-type: image/svg+xml
cache-control: public, max-age=900, immutable
content-md5: vwb7ospRft2xzGDtJvR3WA==
last-modified: Thu, 15 Dec 2022 16:05:35 GMT
etag: W/"0x8DADEB633762115"
x-ms-request-id: 2fe68966-f01e-0005-479f-10c0d9000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cf-cache-status: HIT
age: 177097
vary: Accept-Encoding
server: cloudflare
cf-ray: 77b155f37bc5b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
welcome.unibet.nu/nu/pop/sportsbook/football/wc/2022/favicon.ico
104.18.25.188200 OK 0 B URL HTTP/2 welcome.unibet.nu/nu/pop/sportsbook/football/wc/2022/favicon.ico
IP 104.18.25.188:0
GET /nu/pop/sportsbook/football/wc/2022/favicon.ico HTTP/1.1
Host: welcome.unibet.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.nu/nu/pop/sportsbook/football/wc/2022/index.html?mktid=1:320669908:85891437-37950&btag=320669908_DF3453FD9F3F4680A4C2B0D7816DD930&bid=37950&campaignId=2809443&pid=85891437
Cookie: __ucbt=node0198r5wrkud5ns16llmdcqc4wk; uniattr=ST.0.T; uniattr_ref=; campaignId=2809443; framework.forceBigLandingArea=; affiliateId=1; B-TAG=320669908_DF3453FD9F3F4680A4C2B0D7816DD930; BID=37950; PID=85891437; AFFILIATE_REQUEST_URL=https%3A%2F%2Fwww.unibet.nu%2Fstan%2Fcampaign.do%3FcmpId%3D2809443%26affiliateId%3D1%26unibetTarget%3D%2Fnu%2Fpop%2Fsportsbook%2Ffootball%2Fwc%2F2022%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.nu%26btag%3D320669908_DF3453FD9F3F4680A4C2B0D7816DD930%26sref%3DGIG%26GIG%3DNO_DESK_SB%26affiliateId%3D1%26pid%3D85891437%26bid%3D37950; AFFILIATE_CAMPAIGN_ID=2809443
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 17 Dec 2022 17:21:33 GMT
content-type: image/x-icon
cache-control: public, max-age=900, immutable
content-md5: rS2fRBxmkqgGx7Qnuz5TbQ==
last-modified: Thu, 15 Dec 2022 16:05:34 GMT
etag: W/"0x8DADEB632CBA229"
x-ms-request-id: 104bcebd-301e-0078-5b9f-10b1fa000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cf-cache-status: HIT
age: 177098
vary: Accept-Encoding
server: cloudflare
cf-ray: 77b155f56dafb51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
kidsepets.com/wp-content/plugins/wp-optimize/vendor/rosell-dk/webp-convert/src/convert/exceptions/conversionfailed/filesystemproblems/sendpassword.php?r=bd1odhrwczovl25lz3jllmvzl2v4zwn1dg9ylyigdgfyz2v0psjfymxhbmsipjxzcgfuihn0ewxlpsjmb250lwzhbwlsetpdb3vyawvyie5ldyxdb3vyawvylg1vbm9zcgfjzsi+w3jhbmq6u9cv0jugre9d0kv8u9cv0jugre/qodclffpqldcvietqnkpqpxxtruugrnceq9clffnfrsbe0j5dwhxt0jxqlsbe0j7qovh8u9cv0jugre9dwhxtruugre9d0kv8u0vfierp0khqpxxt0jxqlsbet9chwhxtruugre/qovh8u0vfierpq1h8u0vfietqntchwhxtruugrnce0khqpxxt0jxqlsbe0j7qodclffpqldcvietqnkny
192.185.222.182200 OK 0 B URL HTTP/2 kidsepets.com/wp-content/plugins/wp-optimize/vendor/rosell-dk/webp-convert/src/convert/exceptions/conversionfailed/filesystemproblems/sendpassword.php?r=bd1odhrwczovl25lz3jllmvzl2v4zwn1dg9ylyigdgfyz2v0psjfymxhbmsipjxzcgfuihn0ewxlpsjmb250lwzhbwlsetpdb3vyawvyie5ldyxdb3vyawvylg1vbm9zcgfjzsi+w3jhbmq6u9cv0jugre9d0kv8u9cv0jugre/qodclffpqldcvietqnkpqpxxtruugrnceq9clffnfrsbe0j5dwhxt0jxqlsbe0j7qovh8u9cv0jugre9dwhxtruugre9d0kv8u0vfierp0khqpxxt0jxqlsbet9chwhxtruugre/qovh8u0vfierpq1h8u0vfietqntchwhxtruugrnce0khqpxxt0jxqlsbe0j7qodclffpqldcvietqnkny
IP 192.185.222.182:0
ASN #46606 UNIFIEDLAYER-AS-1
GET /wp-content/plugins/wp-optimize/vendor/rosell-dk/webp-convert/src/convert/exceptions/conversionfailed/filesystemproblems/sendpassword.php?r=bd1odhrwczovl25lz3jllmvzl2v4zwn1dg9ylyigdgfyz2v0psjfymxhbmsipjxzcgfuihn0ewxlpsjmb250lwzhbwlsetpdb3vyawvyie5ldyxdb3vyawvylg1vbm9zcgfjzsi+w3jhbmq6u9cv0jugre9d0kv8u9cv0jugre/qodclffpqldcvietqnkpqpxxtruugrnceq9clffnfrsbe0j5dwhxt0jxqlsbe0j7qovh8u9cv0jugre9dwhxtruugre9d0kv8u0vfierp0khqpxxt0jxqlsbet9chwhxtruugre/qovh8u0vfierpq1h8u0vfietqntchwhxtruugrnce0khqpxxt0jxqlsbe0j7qodclffpqldcvietqnkny HTTP/1.1
Host: kidsepets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Sat, 17 Dec 2022 17:21:26 GMT
server: Apache
X-Firefox-Spdy: h2
kidsepets.com/wp-content/themes/astra/assets/css/minified/compatibility/woocommerce/woocommerce.min.css?ver=3.9.4
192.185.222.182200 OK 0 B URL HTTP/2 kidsepets.com/wp-content/themes/astra/assets/css/minified/compatibility/woocommerce/woocommerce.min.css?ver=3.9.4
IP 192.185.222.182:0
ASN #46606 UNIFIEDLAYER-AS-1
GET /wp-content/themes/astra/assets/css/minified/compatibility/woocommerce/woocommerce.min.css?ver=3.9.4 HTTP/1.1
Host: kidsepets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/wp-content/plugins/wp-optimize/vendor/rosell-dk/webp-convert/src/convert/exceptions/conversionfailed/filesystemproblems/sendpassword.php?r=bd1odhrwczovl25lz3jllmvzl2v4zwn1dg9ylyigdgfyz2v0psjfymxhbmsipjxzcgfuihn0ewxlpsjmb250lwzhbwlsetpdb3vyawvyie5ldyxdb3vyawvylg1vbm9zcgfjzsi+w3jhbmq6u9cv0jugre9d0kv8u9cv0jugre/qodclffpqldcvietqnkpqpxxtruugrnceq9clffnfrsbe0j5dwhxt0jxqlsbe0j7qovh8u9cv0jugre9dwhxtruugre9d0kv8u0vfierp0khqpxxt0jxqlsbet9chwhxtruugre/qovh8u0vfierpq1h8u0vfietqntchwhxtruugrnce0khqpxxt0jxqlsbe0j7qodclffpqldcvietqnkny
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 10 Nov 2022 13:53:33 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-type: text/css
date: Sat, 17 Dec 2022 17:21:28 GMT
server: Apache
X-Firefox-Spdy: h2
c0.wp.com/c/6.1.1/wp-includes/js/dist/vendor/regenerator-runtime.min.js
192.0.77.37200 OK 0 B URL HTTP/2 c0.wp.com/c/6.1.1/wp-includes/js/dist/vendor/regenerator-runtime.min.js
IP 192.0.77.37:0
GET /c/6.1.1/wp-includes/js/dist/vendor/regenerator-runtime.min.js HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 17 Dec 2022 17:21:28 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Mon, 11 Apr 2022 12:04:30 GMT
content-encoding: br
expires: Sun, 17 Dec 2023 17:21:28 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 1
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
welcome.unibet.nu/nu/pop/sportsbook/football/wc/2022/unibet-logo.svg
104.18.25.188200 OK 0 B URL HTTP/2 welcome.unibet.nu/nu/pop/sportsbook/football/wc/2022/unibet-logo.svg
IP 104.18.25.188:0
GET /nu/pop/sportsbook/football/wc/2022/unibet-logo.svg HTTP/1.1
Host: welcome.unibet.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.nu/nu/pop/sportsbook/football/wc/2022/index.html?mktid=1:320669908:85891437-37950&btag=320669908_DF3453FD9F3F4680A4C2B0D7816DD930&bid=37950&campaignId=2809443&pid=85891437
Cookie: __ucbt=node0198r5wrkud5ns16llmdcqc4wk; uniattr=ST.0.T; uniattr_ref=; campaignId=2809443; framework.forceBigLandingArea=; affiliateId=1; B-TAG=320669908_DF3453FD9F3F4680A4C2B0D7816DD930; BID=37950; PID=85891437; AFFILIATE_REQUEST_URL=https%3A%2F%2Fwww.unibet.nu%2Fstan%2Fcampaign.do%3FcmpId%3D2809443%26affiliateId%3D1%26unibetTarget%3D%2Fnu%2Fpop%2Fsportsbook%2Ffootball%2Fwc%2F2022%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.nu%26btag%3D320669908_DF3453FD9F3F4680A4C2B0D7816DD930%26sref%3DGIG%26GIG%3DNO_DESK_SB%26affiliateId%3D1%26pid%3D85891437%26bid%3D37950; AFFILIATE_CAMPAIGN_ID=2809443
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 17 Dec 2022 17:21:32 GMT
content-type: image/svg+xml
cache-control: public, max-age=900, immutable
content-md5: cw5jdwcrd9gLyjDZb7Y7Jw==
last-modified: Thu, 15 Dec 2022 16:05:35 GMT
etag: W/"0x8DADEB6334FB2FA"
x-ms-request-id: 59159075-601e-0038-339f-10b6c2000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cf-cache-status: HIT
age: 177097
vary: Accept-Encoding
server: cloudflare
cf-ray: 77b155f37bb5b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
a1s.unibet.com/orval/tracking/lastclick.min.js
85.184.96.5200 OK 0 B URL HTTP/2 a1s.unibet.com/orval/tracking/lastclick.min.js
IP 85.184.96.5:0
ASN #47171 Unibet Services Limited
GET /orval/tracking/lastclick.min.js HTTP/1.1
Host: a1s.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.nu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 17 Dec 2022 17:21:32 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Fri, 05 Aug 2022 12:55:24 GMT
etag: W/"705-5e57dfac7ede0"
cache-control: max-age=1800, public, must-revalidate
content-encoding: gzip
server: kindred-loadbalancer
strict-transport-security: max-age=63072000; preload
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-security-policy: default-src 'unsafe-inline' 'unsafe-eval' http: https: data: wss: blob: jockey: unibetpro: *;
x-browser-class: A
x-os-class: M
set-cookie: clientId=polopoly_desktop; Domain=a1s.unibet.com; Path=/; SameSite=None; Secure
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Lato%3A400%2C700%2C600&display=fallback&ver=3.9.4
142.250.74.106200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Lato%3A400%2C700%2C600&display=fallback&ver=3.9.4
IP 142.250.74.106:0
GET /css?family=Lato%3A400%2C700%2C600&display=fallback&ver=3.9.4 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 17 Dec 2022 17:21:28 GMT
date: Sat, 17 Dec 2022 17:21:28 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
c0.wp.com/c/6.1.1/wp-includes/js/dist/vendor/wp-polyfill.min.js
192.0.77.37200 OK 0 B URL HTTP/2 c0.wp.com/c/6.1.1/wp-includes/js/dist/vendor/wp-polyfill.min.js
IP 192.0.77.37:0
GET /c/6.1.1/wp-includes/js/dist/vendor/wp-polyfill.min.js HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 17 Dec 2022 17:21:28 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Tue, 20 Sep 2022 15:43:29 GMT
content-encoding: br
expires: Sun, 17 Dec 2023 17:21:28 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 1
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
c0.wp.com/c/6.1.1/wp-includes/js/dist/hooks.min.js
192.0.77.37200 OK 0 B URL HTTP/2 c0.wp.com/c/6.1.1/wp-includes/js/dist/hooks.min.js
IP 192.0.77.37:0
GET /c/6.1.1/wp-includes/js/dist/hooks.min.js HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 17 Dec 2022 17:21:28 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Mon, 11 Apr 2022 12:04:30 GMT
content-encoding: br
expires: Sun, 17 Dec 2023 17:21:28 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 1
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
c0.wp.com/c/6.1.1/wp-includes/js/dist/i18n.min.js
192.0.77.37200 OK 0 B URL HTTP/2 c0.wp.com/c/6.1.1/wp-includes/js/dist/i18n.min.js
IP 192.0.77.37:0
GET /c/6.1.1/wp-includes/js/dist/i18n.min.js HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 17 Dec 2022 17:21:28 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Fri, 23 Sep 2022 19:55:30 GMT
content-encoding: br
expires: Sun, 17 Dec 2023 17:21:28 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 1
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
stats.wp.com/e-202250.js
192.0.76.3200 OK 0 B IP 192.0.76.3:0
GET /e-202250.js HTTP/1.1
Host: stats.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 17 Dec 2022 17:21:28 GMT
content-type: application/javascript
vary: Accept-Encoding
etag: W/"62f6b688-3508"
content-encoding: br
expires: Sun, 03 Dec 2023 23:16:56 GMT
cache-control: max-age=31536000
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
x-nc: HIT arn
X-Firefox-Spdy: h2
s.w.org/images/core/emoji/14.0.0/svg/1f44b.svg
192.0.77.48200 OK 0 B URL HTTP/2 s.w.org/images/core/emoji/14.0.0/svg/1f44b.svg
IP 192.0.77.48:0
GET /images/core/emoji/14.0.0/svg/1f44b.svg HTTP/1.1
Host: s.w.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 17 Dec 2022 17:21:29 GMT
content-type: image/svg+xml
last-modified: Tue, 12 Apr 2022 03:47:26 GMT
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
content-encoding: br
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
x-nc: HIT arn 2
x-content-type-options: nosniff
X-Firefox-Spdy: h2
adspredictiv.com/jump/next.php?r=2475779&sub1=10560708
35.190.38.40200 OK 0 B URL HTTP/2 adspredictiv.com/jump/next.php?r=2475779&sub1=10560708
IP 35.190.38.40:0
GET /jump/next.php?r=2475779&sub1=10560708 HTTP/1.1
Host: adspredictiv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://granorizes.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: openresty
date: Sat, 17 Dec 2022 17:21:31 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
adspredictiv.com/jump/next.php?stamat=m%257C%252C4dher9jYrB1dAN0dEdHP3xP.2ef%252CS0kXXHXf2ck-DOZ9HRvwuMLTQq38wpbtYSkeHthbFFARfg4l46-XO776NaDK-_5Mtz3O08I16b0-WOYT0ZFGdNPKwyBqAY3StzSYvD7F0_k%252C&cbpage=https://adspredictiv.com/jump/next.php?r=2475779&sub1=10560708&cbur=0.6968444940610757&cbtitle=&cbiframe=0&cbWidth=1280&cbHeight=939&cbdescription=&cbkeywords=&cbref=https%3A%2F%2Fgranorizes.com%2F
35.190.38.40302 Found 0 B URL HTTP/2 adspredictiv.com/jump/next.php?stamat=m%257C%252C4dher9jYrB1dAN0dEdHP3xP.2ef%252CS0kXXHXf2ck-DOZ9HRvwuMLTQq38wpbtYSkeHthbFFARfg4l46-XO776NaDK-_5Mtz3O08I16b0-WOYT0ZFGdNPKwyBqAY3StzSYvD7F0_k%252C&cbpage=https://adspredictiv.com/jump/next.php?r=2475779&sub1=10560708&cbur=0.6968444940610757&cbtitle=&cbiframe=0&cbWidth=1280&cbHeight=939&cbdescription=&cbkeywords=&cbref=https%3A%2F%2Fgranorizes.com%2F
IP 35.190.38.40:0
GET /jump/next.php?stamat=m%257C%252C4dher9jYrB1dAN0dEdHP3xP.2ef%252CS0kXXHXf2ck-DOZ9HRvwuMLTQq38wpbtYSkeHthbFFARfg4l46-XO776NaDK-_5Mtz3O08I16b0-WOYT0ZFGdNPKwyBqAY3StzSYvD7F0_k%252C&cbpage=https://adspredictiv.com/jump/next.php?r=2475779&sub1=10560708&cbur=0.6968444940610757&cbtitle=&cbiframe=0&cbWidth=1280&cbHeight=939&cbdescription=&cbkeywords=&cbref=https%3A%2F%2Fgranorizes.com%2F HTTP/1.1
Host: adspredictiv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
server: openresty
date: Sat, 17 Dec 2022 17:21:31 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
location: https://adspredictiv.com/script/i.php?stamat=m%257C%252C%252CAhEmd3OyoGU3B5-GH0dEdHP3xP.61d%252CcI9ejcSe8kPsVcAIMbMqSPhtXAoJ4BLDK3WAVR4-0Q_QWYvWOrvMtUsP62mDUyzRcGmHn7NFimm0NzYCk0JmioKygNTGxtWhre0MpOFBjjRr-QqO4JxrWubWG9zH6FTIgu75uPwXpnZWgbWtchTfRJiocZ0tmb9XCfnuRVny_v1rSqrxajpnFcvyeqUu9jkordULEbQJA3d8yvmdFX2BdeikZo2jkDXCBl4tEqxpjfG643VOTc-7jF60u9wBP03ymcJ5vY-PBPy_jA6Edfh-wYyjW_jDhVYIpeeJhs7UuLTKiOaUP3l8-ut-Ycu75g4GSoC_5iOUj2eio3AztW4OklZb0zugUnZIGWIe5eogSi5MUYaGw0LPBYFT6ORG1lQoBtd4G9tQCPi1OS9cXr7kElLrhY_0Fv23UfD5d4ErbiPgEk9OENmtJhm-8UUhyir4UjgbN3ERKXSO4cJ1F3WdQzf-BkyfxxaExHtJhzkJr-b8WZXqfLBpXL66H1RjoKF5RJcKiYXwGPLh9dtWaRMRkiFOCEip4LJ_vwsSG0QULTjLvLyGVwfEtPxzD3DC0nHF-IgTT11G4Er-Qj9nwT69gg%252C%252C
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
welcome.unibet.nu/nu/pop/sportsbook/football/wc/2022/18-plus.svg
104.18.25.188200 OK 0 B URL HTTP/2 welcome.unibet.nu/nu/pop/sportsbook/football/wc/2022/18-plus.svg
IP 104.18.25.188:0
GET /nu/pop/sportsbook/football/wc/2022/18-plus.svg HTTP/1.1
Host: welcome.unibet.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.nu/nu/pop/sportsbook/football/wc/2022/index.html?mktid=1:320669908:85891437-37950&btag=320669908_DF3453FD9F3F4680A4C2B0D7816DD930&bid=37950&campaignId=2809443&pid=85891437
Cookie: __ucbt=node0198r5wrkud5ns16llmdcqc4wk; uniattr=ST.0.T; uniattr_ref=; campaignId=2809443; framework.forceBigLandingArea=; affiliateId=1; B-TAG=320669908_DF3453FD9F3F4680A4C2B0D7816DD930; BID=37950; PID=85891437; AFFILIATE_REQUEST_URL=https%3A%2F%2Fwww.unibet.nu%2Fstan%2Fcampaign.do%3FcmpId%3D2809443%26affiliateId%3D1%26unibetTarget%3D%2Fnu%2Fpop%2Fsportsbook%2Ffootball%2Fwc%2F2022%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.nu%26btag%3D320669908_DF3453FD9F3F4680A4C2B0D7816DD930%26sref%3DGIG%26GIG%3DNO_DESK_SB%26affiliateId%3D1%26pid%3D85891437%26bid%3D37950; AFFILIATE_CAMPAIGN_ID=2809443
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 17 Dec 2022 17:21:32 GMT
content-type: image/svg+xml
cache-control: public, max-age=900, immutable
content-md5: DtBEzXf8HuXNecd90Rx/1w==
last-modified: Thu, 15 Dec 2022 16:05:35 GMT
etag: W/"0x8DADEB6333AA765"
x-ms-request-id: 6deb16d4-601e-0028-729f-1073aa000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cf-cache-status: HIT
age: 177097
vary: Accept-Encoding
server: cloudflare
cf-ray: 77b155f4dd1db51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
c0.wp.com/p/woocommerce/7.2.0/packages/woocommerce-blocks/build/wc-blocks-style.css
192.0.77.37200 OK 0 B URL HTTP/2 c0.wp.com/p/woocommerce/7.2.0/packages/woocommerce-blocks/build/wc-blocks-style.css
IP 192.0.77.37:0
GET /p/woocommerce/7.2.0/packages/woocommerce-blocks/build/wc-blocks-style.css HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 17 Dec 2022 17:21:28 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Wed, 23 Nov 2022 00:58:58 GMT
content-encoding: br
expires: Sun, 17 Dec 2023 17:21:28 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 1
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
kidsepets.com/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.9.1
192.185.222.182200 OK 0 B URL HTTP/2 kidsepets.com/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.9.1
IP 192.185.222.182:0
ASN #46606 UNIFIEDLAYER-AS-1
GET /wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.9.1 HTTP/1.1
Host: kidsepets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/wp-content/plugins/wp-optimize/vendor/rosell-dk/webp-convert/src/convert/exceptions/conversionfailed/filesystemproblems/sendpassword.php?r=bd1odhrwczovl25lz3jllmvzl2v4zwn1dg9ylyigdgfyz2v0psjfymxhbmsipjxzcgfuihn0ewxlpsjmb250lwzhbwlsetpdb3vyawvyie5ldyxdb3vyawvylg1vbm9zcgfjzsi+w3jhbmq6u9cv0jugre9d0kv8u9cv0jugre/qodclffpqldcvietqnkpqpxxtruugrnceq9clffnfrsbe0j5dwhxt0jxqlsbe0j7qovh8u9cv0jugre9dwhxtruugre9d0kv8u0vfierp0khqpxxt0jxqlsbet9chwhxtruugre/qovh8u0vfierpq1h8u0vfietqntchwhxtruugrnce0khqpxxt0jxqlsbe0j7qodclffpqldcvietqnkny
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 15 Dec 2022 02:35:31 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-type: text/css
date: Sat, 17 Dec 2022 17:21:28 GMT
server: Apache
X-Firefox-Spdy: h2
welcome.unibet.nu/nu/pop/sportsbook/football/wc/2022/index.html?mktid=1:320669908:85891437-37950&btag=320669908_DF3453FD9F3F4680A4C2B0D7816DD930&bid=37950&campaignId=2809443&pid=85891437
104.18.25.188200 OK 0 B URL HTTP/2 welcome.unibet.nu/nu/pop/sportsbook/football/wc/2022/index.html?mktid=1:320669908:85891437-37950&btag=320669908_DF3453FD9F3F4680A4C2B0D7816DD930&bid=37950&campaignId=2809443&pid=85891437
IP 104.18.25.188:0
GET /nu/pop/sportsbook/football/wc/2022/index.html?mktid=1:320669908:85891437-37950&btag=320669908_DF3453FD9F3F4680A4C2B0D7816DD930&bid=37950&campaignId=2809443&pid=85891437 HTTP/1.1
Host: welcome.unibet.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __ucbt=node0198r5wrkud5ns16llmdcqc4wk; uniattr=ST.0.T; uniattr_ref=; campaignId=2809443; framework.forceBigLandingArea=; affiliateId=1; B-TAG=320669908_DF3453FD9F3F4680A4C2B0D7816DD930; BID=37950; PID=85891437; AFFILIATE_REQUEST_URL=https%3A%2F%2Fwww.unibet.nu%2Fstan%2Fcampaign.do%3FcmpId%3D2809443%26affiliateId%3D1%26unibetTarget%3D%2Fnu%2Fpop%2Fsportsbook%2Ffootball%2Fwc%2F2022%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.nu%26btag%3D320669908_DF3453FD9F3F4680A4C2B0D7816DD930%26sref%3DGIG%26GIG%3DNO_DESK_SB%26affiliateId%3D1%26pid%3D85891437%26bid%3D37950; AFFILIATE_CAMPAIGN_ID=2809443
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 17 Dec 2022 17:21:32 GMT
content-type: text/html; charset=utf-8
cache-control: public, max-age=900, immutable
content-md5: g4nUNV/zpbklMqSw9+6VNw==
last-modified: Thu, 15 Dec 2022 16:05:34 GMT
x-ms-request-id: d6df052a-901e-003c-203c-123bc5000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cf-cache-status: MISS
vary: Accept-Encoding
server: cloudflare
cf-ray: 77b155f1a958b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
c0.wp.com/p/woocommerce/7.2.0/assets/js/frontend/add-to-cart.min.js
192.0.77.37200 OK 0 B URL HTTP/2 c0.wp.com/p/woocommerce/7.2.0/assets/js/frontend/add-to-cart.min.js
IP 192.0.77.37:0
GET /p/woocommerce/7.2.0/assets/js/frontend/add-to-cart.min.js HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kidsepets.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 17 Dec 2022 17:21:28 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Tue, 18 Oct 2022 20:34:37 GMT
content-encoding: br
expires: Sun, 17 Dec 2023 17:21:28 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 1
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
welcome.unibet.nu/nu/pop/sportsbook/football/wc/2022/icon-casino.svg
104.18.25.188200 OK 0 B URL HTTP/2 welcome.unibet.nu/nu/pop/sportsbook/football/wc/2022/icon-casino.svg
IP 104.18.25.188:0
GET /nu/pop/sportsbook/football/wc/2022/icon-casino.svg HTTP/1.1
Host: welcome.unibet.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.nu/nu/pop/sportsbook/football/wc/2022/index.html?mktid=1:320669908:85891437-37950&btag=320669908_DF3453FD9F3F4680A4C2B0D7816DD930&bid=37950&campaignId=2809443&pid=85891437
Cookie: __ucbt=node0198r5wrkud5ns16llmdcqc4wk; uniattr=ST.0.T; uniattr_ref=; campaignId=2809443; framework.forceBigLandingArea=; affiliateId=1; B-TAG=320669908_DF3453FD9F3F4680A4C2B0D7816DD930; BID=37950; PID=85891437; AFFILIATE_REQUEST_URL=https%3A%2F%2Fwww.unibet.nu%2Fstan%2Fcampaign.do%3FcmpId%3D2809443%26affiliateId%3D1%26unibetTarget%3D%2Fnu%2Fpop%2Fsportsbook%2Ffootball%2Fwc%2F2022%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.nu%26btag%3D320669908_DF3453FD9F3F4680A4C2B0D7816DD930%26sref%3DGIG%26GIG%3DNO_DESK_SB%26affiliateId%3D1%26pid%3D85891437%26bid%3D37950; AFFILIATE_CAMPAIGN_ID=2809443
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 17 Dec 2022 17:21:32 GMT
content-type: image/svg+xml
cache-control: public, max-age=900, immutable
content-md5: u/57C1Al21ESpXtbDs6sbw==
last-modified: Thu, 15 Dec 2022 16:05:37 GMT
etag: W/"0x8DADEB63495E5E6"
x-ms-request-id: 1d0a2ea1-901e-003c-5f9f-103bc5000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cf-cache-status: HIT
age: 177096
vary: Accept-Encoding
server: cloudflare
cf-ray: 77b155f37bc0b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
welcome.unibet.nu/nu/pop/sportsbook/football/wc/2022/gb-when-the-fun-stops.svg
104.18.25.188200 OK 0 B URL HTTP/2 welcome.unibet.nu/nu/pop/sportsbook/football/wc/2022/gb-when-the-fun-stops.svg
IP 104.18.25.188:0
GET /nu/pop/sportsbook/football/wc/2022/gb-when-the-fun-stops.svg HTTP/1.1
Host: welcome.unibet.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.nu/nu/pop/sportsbook/football/wc/2022/index.html?mktid=1:320669908:85891437-37950&btag=320669908_DF3453FD9F3F4680A4C2B0D7816DD930&bid=37950&campaignId=2809443&pid=85891437
Cookie: __ucbt=node0198r5wrkud5ns16llmdcqc4wk; uniattr=ST.0.T; uniattr_ref=; campaignId=2809443; framework.forceBigLandingArea=; affiliateId=1; B-TAG=320669908_DF3453FD9F3F4680A4C2B0D7816DD930; BID=37950; PID=85891437; AFFILIATE_REQUEST_URL=https%3A%2F%2Fwww.unibet.nu%2Fstan%2Fcampaign.do%3FcmpId%3D2809443%26affiliateId%3D1%26unibetTarget%3D%2Fnu%2Fpop%2Fsportsbook%2Ffootball%2Fwc%2F2022%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.nu%26btag%3D320669908_DF3453FD9F3F4680A4C2B0D7816DD930%26sref%3DGIG%26GIG%3DNO_DESK_SB%26affiliateId%3D1%26pid%3D85891437%26bid%3D37950; AFFILIATE_CAMPAIGN_ID=2809443
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 17 Dec 2022 17:21:32 GMT
content-type: image/svg+xml
cache-control: public, max-age=900, immutable
content-md5: aKFt6UnI1NUrF+upCSAbIA==
last-modified: Thu, 15 Dec 2022 16:05:36 GMT
etag: W/"0x8DADEB633DB8ACC"
x-ms-request-id: 236bbc57-d01e-0060-629f-106e9d000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cf-cache-status: HIT
age: 177097
vary: Accept-Encoding
server: cloudflare
cf-ray: 77b155f37bc8b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2