www.finrivy.bond/HG-Ohbb~dYSg_11ac6865/C/
302 Found 264 B URL User Request GET HTTP/1.1 www.finrivy.bond/HG-Ohbb~dYSg_11ac6865/C/
IP
ASN #14061 DIGITALOCEAN-ASN
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 6bde070324e6cd641e671936df23aa3b
34752aa157c4311aa57234d4cd90a1d048aa27f7
4aafcf6f1bc814f7b68e41e3a9702aaac617ee484feb9a3574042a22cd00657a
GET /HG-Ohbb~dYSg_11ac6865/C/ HTTP/1.1
Host: www.finrivy.bond
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Date: Thu, 30 Nov 2023 17:18:58 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.4.16
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0
Location: https://www.dynabizss.com/2BLX7MXD7/3KRKTD9/?sub1=GI&sub2=ROBO&sub3=HTML
Content-Length: 264
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
ocsp.starfieldtech.com/
2.1 kB IP
Hash 57e1cf145fdb39681e9382c6b45f4c55
056404b2dd36481899d0b77e5889bf51e0b1e56f
7e271bb1fd331decd7e68263960b18f02dfd35cf3d3833e3a61b0841bf4bae39
POST / HTTP/1.1
Host: ocsp.starfieldtech.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Thu, 30 Nov 2023 17:18:58 GMT
Content-Type: application/ocsp-response
Content-Length: 2149
Connection: keep-alive
X-Sucuri-ID: 19036
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Thu, 30 Nov 2023 09:42:16 GMT
Expires: Fri, 01 Dec 2023 09:42:16 GMT
ETag: "056404b2dd36481899d0b77e5889bf51e0b1e56f"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
www.dynabizss.com/2BLX7MXD7/3KRKTD9/?sub1=GI&sub2=ROBO&sub3=HTML
302 Found 241 B URL User Request GET HTTP/2 www.dynabizss.com/2BLX7MXD7/3KRKTD9/?sub1=GI&sub2=ROBO&sub3=HTML
IP
Certificate IssuerStarfield Technologies, Inc.
Subject4682track.com
Fingerprint8A:13:F1:6C:D1:D1:E7:7B:1F:93:BD:D8:CA:7F:FB:29:7B:54:54:F2
ValidityWed, 04 Oct 2023 18:34:03 GMT - Sun, 29 Sep 2024 12:21:24 GMT
File type HTML document, ASCII text
Hash 25c69b6ac2b1194b9d8209a83f6d92fd
382c36eb5180544d31f354b4319c157cfeeb91c9
963b2db7ea6bb1184f54bb24845a96144435a68cc6b6fb6e271954e4a7576af5
GET /2BLX7MXD7/3KRKTD9/?sub1=GI&sub2=ROBO&sub3=HTML HTTP/1.1
Host: www.dynabizss.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Thu, 30 Nov 2023 17:18:58 GMT
content-type: text/html; charset=utf-8
content-length: 241
accept-ch: Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Model
location: https://www.dynabizss.com/2BLX7MXD7/D42TT/?__rpt=0&__po=1468&__ptid=be748ac337624bcaa844257273a00205&__rpa=1&__rc=1&sub1=GI&sub2=ROBO&sub3=HTML&sub4=&sub5=&source_id=&__pcd=9
set-cookie: uniqueClick_3KRKTD9=22f2e493-67ee-4b78-a7aa-58ba51673473:1701364738; Path=/; Expires=Fri, 01 Dec 2023 17:18:58 GMT; Secure; SameSite=None
vary: Origin
x-eflow-request-id: 02ef09ff-a06b-4fd0-acc6-50bfd18a11eb
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.starfieldtech.com/
2.1 kB IP
Hash 57e1cf145fdb39681e9382c6b45f4c55
056404b2dd36481899d0b77e5889bf51e0b1e56f
7e271bb1fd331decd7e68263960b18f02dfd35cf3d3833e3a61b0841bf4bae39
POST / HTTP/1.1
Host: ocsp.starfieldtech.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Thu, 30 Nov 2023 17:18:58 GMT
Content-Type: application/ocsp-response
Content-Length: 2149
Connection: keep-alive
X-Sucuri-ID: 19036
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Thu, 30 Nov 2023 09:42:16 GMT
Expires: Fri, 01 Dec 2023 09:42:16 GMT
ETag: "056404b2dd36481899d0b77e5889bf51e0b1e56f"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
www.dynabizss.com/2BLX7MXD7/D42TT/?__rpt=0&__po=1468&__ptid=be748ac337624bcaa844257273a00205&__rpa=1&__rc=1&sub1=GI&sub2=ROBO&sub3=HTML&sub4=&sub5=&source_id=&__pcd=9
302 Found 116 B URL User Request GET HTTP/2 www.dynabizss.com/2BLX7MXD7/D42TT/?__rpt=0&__po=1468&__ptid=be748ac337624bcaa844257273a00205&__rpa=1&__rc=1&sub1=GI&sub2=ROBO&sub3=HTML&sub4=&sub5=&source_id=&__pcd=9
IP
Certificate IssuerStarfield Technologies, Inc.
Subject4682track.com
Fingerprint8A:13:F1:6C:D1:D1:E7:7B:1F:93:BD:D8:CA:7F:FB:29:7B:54:54:F2
ValidityWed, 04 Oct 2023 18:34:03 GMT - Sun, 29 Sep 2024 12:21:24 GMT
File type HTML document, ASCII text
Hash 3ebcea20f3710cc587ff207eee8f9386
76108bbd35d3d203febd22bd9d9711b2560172ed
a40cadf1134af31141182e69867137e76ee6867ac8a9c8aeefe44842cc4dfd03
GET /2BLX7MXD7/D42TT/?__rpt=0&__po=1468&__ptid=be748ac337624bcaa844257273a00205&__rpa=1&__rc=1&sub1=GI&sub2=ROBO&sub3=HTML&sub4=&sub5=&source_id=&__pcd=9 HTTP/1.1
Host: www.dynabizss.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: uniqueClick_3KRKTD9=22f2e493-67ee-4b78-a7aa-58ba51673473:1701364738
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx
date: Thu, 30 Nov 2023 17:18:58 GMT
content-type: text/html; charset=utf-8
content-length: 116
accept-ch: Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Model
location: https://6w1.sharedlinkconnect.com/?s1=650010&s2=8589e634fbfe42fbb5b9d3a0b5b815d0&s3=8
set-cookie: uniqueClick_D42TT=457f559a-868d-4ac9-8eef-db0b95ba24ec:1701364738; Path=/; Expires=Fri, 01 Dec 2023 17:18:58 GMT; Secure; SameSite=None
transaction_id=8589e634fbfe42fbb5b9d3a0b5b815d0; Path=/; Expires=Wed, 28 Feb 2024 17:18:58 GMT; Secure; SameSite=None
vary: Origin
x-eflow-request-id: 8088fd06-2b65-4e1b-a955-71211ea96df0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
6w1.sharedlinkconnect.com/?s1=650010&s2=8589e634fbfe42fbb5b9d3a0b5b815d0&s3=8
302 Found 285 B URL User Request GET HTTP/2 6w1.sharedlinkconnect.com/?s1=650010&s2=8589e634fbfe42fbb5b9d3a0b5b815d0&s3=8
IP
ASN #61317 Ipxo Uk Limited
Certificate IssuerLet's Encrypt
Subjectsharedlinkconnect.com
Fingerprint57:B3:26:AD:E4:4A:64:C3:A9:DE:E1:D3:D9:E7:FF:5E:13:0B:DA:1F
ValiditySun, 05 Nov 2023 22:52:59 GMT - Sat, 03 Feb 2024 22:52:58 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash b86bc4b80716efaf0ac9cf53c2f749d9
8a96954a44ec0a0620b138e035178e360181a591
2ac7e9173f9fb705618c5be2f85dd2dc87eae575f871075fe9f0f77d5ee0a166
GET /?s1=650010&s2=8589e634fbfe42fbb5b9d3a0b5b815d0&s3=8 HTTP/1.1
Host: 6w1.sharedlinkconnect.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Thu, 30 Nov 2023 17:19:01 GMT
content-type: text/html; charset=UTF-8
content-length: 285
cache-control: no-cache, private
location: https://6w1.readyspinsconnected.com/o/L1VFHTSC/8dde2b94-8fa4-11ee-908c-6507ee7ece75/8de6f4a4-8fa4-11ee-9efd-0ddc9c5fa6ee
x-redir: true
set-cookie: yredir_session=eyJpdiI6IjNvSlhROS9tZ2pvb2hKdlcrYTBMTXc9PSIsInZhbHVlIjoiRytQZE0wUW1IUnB1bEJGODJ0cFE4cWhqQnZ1emUzNGpXcUJjRWV3RWtTYTRPU1FqZnEvV3NwMjdOYzJyTG1TZ1pnTjlER3NGbnhBUVBXUXBndk5BT0h4OW0vbjRTd0ZBRjNQV2hEYzdrVFpSVEF2R3hOa0c2bHNGdU1ycDNvaGsiLCJtYWMiOiI0OWQzM2I5MjY2ZWQ0NDMzOWI4Y2Y2YjE5ZDUxMGEyNzY4OTg3ZjY0ZjJjZGViOTI3ZGE4ZTVjZDBlZGFiODkwIiwidGFnIjoiIn0%3D; expires=Thu, 30-Nov-2023 19:19:01 GMT; path=/; httponly; samesite=lax
server: swoole-http-server
content-encoding: br
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
6w1.readyspinsconnected.com/o/L1VFHTSC/8dde2b94-8fa4-11ee-908c-6507ee7ece75/8de6f4a4-8fa4-11ee-9efd-0ddc9c5fa6ee
302 Found 304 B URL User Request GET HTTP/2 6w1.readyspinsconnected.com/o/L1VFHTSC/8dde2b94-8fa4-11ee-908c-6507ee7ece75/8de6f4a4-8fa4-11ee-9efd-0ddc9c5fa6ee
IP
ASN #61317 Ipxo Uk Limited
Certificate IssuerLet's Encrypt
Subjectreadyspinsconnected.com
FingerprintEE:1E:8F:55:03:CE:BF:17:AF:D6:3D:AD:3F:13:B6:61:79:05:4D:B1
ValiditySun, 05 Nov 2023 13:32:31 GMT - Sat, 03 Feb 2024 13:32:30 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (309)
Hash 32110bef253ec3a3dc07e7a646e83a57
99896dca7081c43d4c936fe6e6bfd9f4edaad550
1659595de1647a2d3da1944790616d9e348042276f67a457029087e030500fe2
GET /o/L1VFHTSC/8dde2b94-8fa4-11ee-908c-6507ee7ece75/8de6f4a4-8fa4-11ee-9efd-0ddc9c5fa6ee HTTP/1.1
Host: 6w1.readyspinsconnected.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Thu, 30 Nov 2023 17:19:02 GMT
content-type: text/html; charset=UTF-8
content-length: 304
cache-control: no-cache, private
location: https://c.tilttrk.com/?a=5622&c=863&E=TtqGvAvetqA%3d&s2=85287__15704ff106c&s4=8e950760-8fa4-11ee-97c9-1be6bb284c5a&
x-redir: true
set-cookie: yredir_session=eyJpdiI6IkYxelJVUmNsMVdtREhqUEFXY1BpOFE9PSIsInZhbHVlIjoiMmFMQUM3SEJFc2NYZnMrcWxPNGgrQ0pIQVZ5cGs3NFBvSGQzREptYW1GbFFieHFrN1hmYU5WWkRZTlpOYW85R2pEWUdGL2lpOUJqR1REdlpBOG1ubnRtcWxWSFlNeFkvb3RiMDE0SkFYdmlZSHZscU54RldINHRhbUlYSG4rLysiLCJtYWMiOiJlMGYyZGZjODkzNGRkYjg0ZmZiNDczZjEzNjgyODZmNjBjNWI0NTBmN2U4MWMzNjRkMTEzYjA1NzVlOWE0NzcwIiwidGFnIjoiIn0%3D; expires=Thu, 30-Nov-2023 19:19:02 GMT; path=/; httponly; samesite=lax
server: swoole-http-server
content-encoding: br
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
ocsp2.globalsign.com/gsalphasha2g2
1.4 kB URL ocsp2.globalsign.com/gsalphasha2g2
IP
Hash fec88ffd5e29d17e9d7ee9e76cd9d91d
af8b709748815cf8a1f8e41a3a33834557bf5420
dd27b3edfbeed611a7fb5dff3ed5fd670c45b66c03d33ea4ef3c4d6eb2d5eeae
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 30 Nov 2023 17:19:02 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Mon, 04 Dec 2023 16:38:20 GMT
ETag: "af8b709748815cf8a1f8e41a3a33834557bf5420"
Last-Modified: Thu, 30 Nov 2023 16:38:21 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: EXPIRED
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 82e4c0ca3d5c0b31-OSL
c.tilttrk.com/?a=5622&c=863&E=TtqGvAvetqA%3d&s2=85287__15704ff106c&s4=8e950760-8fa4-11ee-97c9-1be6bb284c5a&
302 Found 197 B URL User Request GET HTTP/1.1 c.tilttrk.com/?a=5622&c=863&E=TtqGvAvetqA%3d&s2=85287__15704ff106c&s4=8e950760-8fa4-11ee-97c9-1be6bb284c5a&
IP
Certificate IssuerGlobalSign nv-sa
Subject*.tilttrk.com
FingerprintE1:AB:2C:35:A2:31:90:2C:B4:D9:58:E3:3C:64:CB:33:DC:F1:38:9F
ValidityWed, 02 Nov 2022 18:12:42 GMT - Mon, 04 Dec 2023 18:12:41 GMT
File type HTML document, ASCII text
Hash 5bc9058070425efe8184745163a4ba2f
d476826d7ee771d5094b80ef5a667b7ebc815c5f
9e26a9e1858a78f2c573390fd48e603fe5f6caeae8201cc09c271cdf195c153c
GET /?a=5622&c=863&E=TtqGvAvetqA%3d&s2=85287__15704ff106c&s4=8e950760-8fa4-11ee-97c9-1be6bb284c5a& HTTP/1.1
Host: c.tilttrk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Content-Length: 197
Content-Type: text/html; charset=utf-8
Date: Thu, 30 Nov 2023 17:19:03 GMT
Location: https://tracker.tiltwin.com/rotate/194?P=3-clkc81t0299cee4klkeg&A=5622&B=85287__15704ff106c&aff_sub4=8e950760-8fa4-11ee-97c9-1be6bb284c5a&email=&aff_sub2=
Set-Cookie: trk=Pxg8/6FXU8D+CMDK7BxweTyf59y0PQZr5WGnXWjugfjp358GJqB+aGtZVWvRvp8rbUwQ/O6wUe8=; Domain=.tilttrk.com; Expires=Sat, 29 Nov 2025 17:19:03 GMT; HttpOnly; Secure; SameSite=None
sid=Pxg8/6FXU8D+CMDK7Bxwef7wK0GDTHNZ5WGnXWjugfjp358GJqB+aGtZVWvRvp8rylFHuzBNRJA=; Domain=.tilttrk.com; HttpOnly; Secure; SameSite=None
x12=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; Domain=.tilttrk.com; Expires=Sat, 30 Dec 2023 17:19:03 GMT; HttpOnly; Secure; SameSite=None
X-Ckt: clkc81t0299cee4klkeg
X-Ray: clkc81t0299cee4klkcg
Connection: close
code.jquery.com/jquery-3.4.1.min.js
200 OK 31 kB URL GET HTTP/2 code.jquery.com/jquery-3.4.1.min.js
IP
Requested by https://www2.tiltwin.com/no/landing/155/574?A=5622
Certificate IssuerSectigo Limited
Subject*.jquery.com
FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (65451)
Hash 220afd743d9e9643852e31a135a9f3ae
88523924351bac0b5d560fe0c5781e2556e7693d
0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a
GET /jquery-3.4.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www2.tiltwin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-15851"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 30 Nov 2023 17:19:04 GMT
age: 6562543
x-served-by: cache-lga21965-LGA, cache-bma1627-BMA
x-cache: HIT, HIT
x-cache-hits: 9, 468567
x-timer: S1701364744.383427,VS0,VE0
vary: Accept-Encoding
content-length: 30638
X-Firefox-Spdy: h2
stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js
200 OK 15 kB URL GET HTTP/2 stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js
IP
Requested by https://www2.tiltwin.com/no/landing/155/574?A=5622
Certificate IssuerGoogle Trust Services LLC
Subjectbootstrapcdn.com
Fingerprint34:BC:91:5F:B9:EC:32:2C:D9:73:C7:88:C3:6C:FB:77:E7:70:8D:04
ValidityThu, 30 Nov 2023 00:15:17 GMT - Wed, 28 Feb 2024 00:15:16 GMT
File type ASCII text, with very long lines (50450)
Hash eb5fac582a82f296aeb74900b01a2fa3
fffea98e12e63b66693d567315a2f32392b780b0
c5a17d46976d471cf060c5a0e25749a323d6ab20cf0910f40afed81047ba21ef
GET /bootstrap/4.1.1/js/bootstrap.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www2.tiltwin.com
DNT: 1
Connection: keep-alive
Referer: https://www2.tiltwin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 17:19:04 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
last-modified: Mon, 25 Jan 2021 22:04:05 GMT
cdn-cachedat: 08/04/2021 06:22:15
cdn-edgestorageid: 601
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-proxyver: 1.0
cdn-status: 200
cdn-requestid: a489d7110626749fc3a6c1f7738b7b99
cdn-cache: HIT
cf-cache-status: HIT
age: 654773
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 82e4c0d41b8956c5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=UA-144971979-1
200 OK 69 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=UA-144971979-1
IP
Requested by https://www2.tiltwin.com/no/landing/155/574?A=5622
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (4179)
Hash f5933a449f8818e79a3fbaa6fb2d8e44
cc88ca6ba72f32f500ebcb62f8cc6a7683266e9a
83c84f39b3e9d553006675f6205f56a9754f77fe6880f422b01a1f83229520e3
GET /gtag/js?id=UA-144971979-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www2.tiltwin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 30 Nov 2023 17:19:04 GMT
expires: Thu, 30 Nov 2023 17:19:04 GMT
cache-control: private, max-age=900
last-modified: Thu, 30 Nov 2023 15:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 68566
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-N43BLYJLJR&l=dataLayer&cx=c
200 OK 81 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=G-N43BLYJLJR&l=dataLayer&cx=c
IP
Requested by https://www2.tiltwin.com/no/landing/155/574?A=5622
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (5955)
Hash 0c537cec52624c01bd3e22c303036b9a
df437a78768ba06679f937c72fa2a6187757cff3
f95110d641b2c5c94614031456e3428c52e0e9f951cc668fa0f4fe423d87871b
GET /gtag/js?id=G-N43BLYJLJR&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www2.tiltwin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 30 Nov 2023 17:19:04 GMT
expires: Thu, 30 Nov 2023 17:19:04 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 80902
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
d2i5a4y6yksdm0.cloudfront.net/js/email.js
200 OK 4.0 kB URL GET HTTP/2 d2i5a4y6yksdm0.cloudfront.net/js/email.js
IP
Requested by https://www2.tiltwin.com/no/landing/155/574?A=5622
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash 31fd36fab8c3c5b6bd2e7259c55041cf
fd0cc7180dcc9d2b858802a83c399a0ce322cca3
f49b09cd138365f2c23c2d092f386b3859a4982a3b2afd06889ab4f5b31a8262
GET /js/email.js HTTP/1.1
Host: d2i5a4y6yksdm0.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www2.tiltwin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
server: nginx/1.14.0 (Ubuntu)
last-modified: Wed, 01 Apr 2020 16:25:34 GMT
x-cache-status: MISS
content-encoding: gzip
date: Thu, 30 Nov 2023 08:12:23 GMT
etag: W/"5e84c07e-1dec"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 1DT8VdHdc6s35F7J1X75C2Bz91-rQ7682TYFJWTi_1ug7-8YrfBcpw==
age: 32801
X-Firefox-Spdy: h2
d2i5a4y6yksdm0.cloudfront.net/js/lp/574/createjs-2015.11.26.min.js
200 OK 72 kB URL GET HTTP/2 d2i5a4y6yksdm0.cloudfront.net/js/lp/574/createjs-2015.11.26.min.js
IP
Requested by https://www2.tiltwin.com/no/landing/155/574?A=5622
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash 18665a93cb20e17ec35eeffbe1b567f0
82d8dfbec825115b58fc49419d0850d85c3547ff
aa88cbc4f9795bdaf823a906cdbb987c8fdcb95074088b557f430a9e52da50e9
GET /js/lp/574/createjs-2015.11.26.min.js HTTP/1.1
Host: d2i5a4y6yksdm0.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www2.tiltwin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
server: nginx/1.14.0 (Ubuntu)
last-modified: Tue, 06 Apr 2021 22:27:11 GMT
x-cache-status: MISS
content-encoding: gzip
date: Wed, 29 Nov 2023 22:23:57 GMT
etag: W/"606ce03f-4d0d1"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: s2FvL2IGVuN5ujX5cP6IeLsMqZHqmMO4reMoGsMO5vc_UZsKG9N0pw==
age: 68107
X-Firefox-Spdy: h2
d2i5a4y6yksdm0.cloudfront.net/images/arrow-up.png
200 OK 1.8 kB URL GET HTTP/2 d2i5a4y6yksdm0.cloudfront.net/images/arrow-up.png
IP
Requested by https://www2.tiltwin.com/no/landing/155/574?A=5622
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type PNG image data, 30 x 15, 8-bit/color RGBA, non-interlaced\012- data
Hash 7be70e54560a27609532935253b1e0b5
d78ebcbed3d2e898f2d113842109b9f36218eaad
ecae0dc020262a5fcbf7d216c27cb4ab482807311e25312e5d812183472bf398
GET /images/arrow-up.png HTTP/1.1
Host: d2i5a4y6yksdm0.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www2.tiltwin.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 1756
server: nginx/1.14.0 (Ubuntu)
last-modified: Thu, 12 Jul 2018 16:49:11 GMT
x-cache-status: MISS
accept-ranges: bytes
date: Thu, 30 Nov 2023 09:49:33 GMT
etag: "5b478687-6dc"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: UIV6rgoH-IoTtCuVVam-TWRLo9O4fEFyXUfOMpPRaqUc141wREmMZA==
age: 26971
X-Firefox-Spdy: h2
d2i5a4y6yksdm0.cloudfront.net/images/lp/574/book.jpg
200 OK 9.4 kB URL GET HTTP/2 d2i5a4y6yksdm0.cloudfront.net/images/lp/574/book.jpg
IP
Requested by https://www2.tiltwin.com/no/landing/155/574?A=5622
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 93x93, components 3\012- data
Hash 87071c18d0bdb052205b5817bca6320d
0a897b1f97015db6ff2c5ada197f5756da20aa7c
ccf7a96e395a62a1a5801bbd26903faa6bb6607d1c7150181388276ee05f6b19
GET /images/lp/574/book.jpg HTTP/1.1
Host: d2i5a4y6yksdm0.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d2i5a4y6yksdm0.cloudfront.net/css/lp/574/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 9415
server: nginx/1.14.0 (Ubuntu)
last-modified: Wed, 05 Aug 2020 12:12:47 GMT
x-cache-status: MISS
accept-ranges: bytes
date: Wed, 29 Nov 2023 22:14:52 GMT
etag: "5f2aa23f-24c7"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 5xtCfnlpo3fDJxNBnovd0LX_1D9DWgA9REDDjF32s0jab1PLfzuBCQ==
age: 68651
X-Firefox-Spdy: h2
d2i5a4y6yksdm0.cloudfront.net/images/lp/574/bg-desk.jpg
200 OK 314 kB URL GET HTTP/2 d2i5a4y6yksdm0.cloudfront.net/images/lp/574/bg-desk.jpg
IP
Requested by https://www2.tiltwin.com/no/landing/155/574?A=5622
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1110, components 3\012- data
Size 314 kB (313736 bytes)
Hash 529071eccd64ba89295ec3a429e9cbc7
95aecfa453faff357642a6f4dbbaba0b59b23ca9
28e773a2b073bffa1ed1fbe947b653655ff36b5cec094aa3d69a73b18eea940a
GET /images/lp/574/bg-desk.jpg HTTP/1.1
Host: d2i5a4y6yksdm0.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d2i5a4y6yksdm0.cloudfront.net/css/lp/574/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 313736
server: nginx/1.14.0 (Ubuntu)
date: Wed, 29 Nov 2023 18:02:29 GMT
last-modified: Wed, 05 Aug 2020 12:10:43 GMT
etag: "5f2aa1c3-4c988"
x-cache-status: MISS
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: g-SFb89a43qyNrdTo6_0GH7dZVwoZxoUMDR3K4H1iok0GDQu3PSQMA==
age: 83795
X-Firefox-Spdy: h2
d2i5a4y6yksdm0.cloudfront.net/images/arrow-down.png
200 OK 1.8 kB URL GET HTTP/2 d2i5a4y6yksdm0.cloudfront.net/images/arrow-down.png
IP
Requested by https://www2.tiltwin.com/no/landing/155/574?A=5622
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type PNG image data, 30 x 15, 8-bit/color RGBA, non-interlaced\012- data
Hash f2ec75bcfd4ef971fdf9f94bfae939d4
1da4a74612c91011c70b6dec60415b0913356115
2eb6cad7d97dcb417abf1b893dd46385405504196983a251909f40c9965d71d0
GET /images/arrow-down.png HTTP/1.1
Host: d2i5a4y6yksdm0.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www2.tiltwin.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 1757
server: nginx/1.14.0 (Ubuntu)
last-modified: Thu, 12 Jul 2018 16:49:11 GMT
x-cache-status: MISS
accept-ranges: bytes
date: Thu, 30 Nov 2023 14:01:56 GMT
etag: "5b478687-6dd"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: oYHvWaIiZAM5dzQuO8HXfKEGSYkVr7tYuK7pH2ScQoyQ7fGg67ew8g==
age: 11828
X-Firefox-Spdy: h2
d2i5a4y6yksdm0.cloudfront.net/images/footer-icons/gambling-therapy.png
200 OK 4.9 kB URL GET HTTP/2 d2i5a4y6yksdm0.cloudfront.net/images/footer-icons/gambling-therapy.png
IP
Requested by https://www2.tiltwin.com/no/landing/155/574?A=5622
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type PNG image data, 110 x 45, 8-bit/color RGBA, non-interlaced\012- data
Hash a07cbc8e2901b2c1dcadc9da971b8e22
5e08e02995d5716e8a9910f939d785e200c1a10c
8769471d2891f9151996faf46dab47fc14bf45f5a0e1cb253ba542d4cee57fcd
GET /images/footer-icons/gambling-therapy.png HTTP/1.1
Host: d2i5a4y6yksdm0.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www2.tiltwin.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 4900
server: nginx/1.14.0 (Ubuntu)
last-modified: Sun, 28 Apr 2019 00:57:47 GMT
x-cache-status: MISS
accept-ranges: bytes
date: Thu, 30 Nov 2023 10:53:39 GMT
etag: "5cc4fa8b-1324"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 3NweeCoYBu30cWtYHFVI2mpMVD3qWWuSNY3Gq2fBF0nbbim5OHWByA==
age: 23125
X-Firefox-Spdy: h2
d2i5a4y6yksdm0.cloudfront.net/favicon.ico
200 OK 0 B URL GET HTTP/2 d2i5a4y6yksdm0.cloudfront.net/favicon.ico
IP
Requested by https://www2.tiltwin.com/no/landing/155/574?A=5622
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: d2i5a4y6yksdm0.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www2.tiltwin.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/x-icon
content-length: 0
server: nginx/1.14.0 (Ubuntu)
last-modified: Sun, 11 Mar 2018 21:25:00 GMT
x-cache-status: HIT
accept-ranges: bytes
date: Thu, 30 Nov 2023 07:17:51 GMT
etag: "5aa59eac-0"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: mWvvoC1Lchia2FUqwMhGytusJrWVdFdAu1JbAkl-ToT17g72YfFFrg==
age: 36073
X-Firefox-Spdy: h2
www2.tiltwin.com/no/landing/fonts/IntroBold.ttf
404 Not Found 15 kB URL GET HTTP/2 www2.tiltwin.com/no/landing/fonts/IntroBold.ttf
IP
Requested by https://www2.tiltwin.com/no/landing/155/574?A=5622
Certificate IssuerLet's Encrypt
Subjectwww2.tiltwin.com
FingerprintB2:78:68:F7:B5:EC:53:5E:46:3C:B0:B9:0B:48:84:B5:A1:3C:54:71
ValidityThu, 12 Oct 2023 04:46:04 GMT - Wed, 10 Jan 2024 04:46:03 GMT
File type gzip compressed data, from Unix\012- data
Hash 5f47dc04fc6fa1c291a5a7a7132e1b8e
6e4211c7a31339b379ed95d23fef3b82fc61729e
8149f2a1b1542b6c96a624f6dc99ad649789456a7ea22efd214b96554cb9a46f
GET /no/landing/fonts/IntroBold.ttf HTTP/1.1
Host: www2.tiltwin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www2.tiltwin.com/no/landing/155/574?A=5622
Cookie: tracking_data=%7B%22P%22%3A%223-clkc81t0299cee4klkeg%22%2C%22A%22%3A%225622%22%2C%22B%22%3A%2285287__15704ff106c%22%2C%22aff_sub4%22%3A%228e950760-8fa4-11ee-97c9-1be6bb284c5a%22%2C%22email%22%3Anull%2C%22aff_sub2%22%3Anull%2C%22market%22%3A%22no%22%2C%22path%22%3A%22landing%5C%2F155%5C%2F574%22%2C%22country%22%3A%22NO%22%2C%22page%22%3A%22155%22%2C%22template%22%3A%22574%22%2C%22clickin_ip%22%3A%2291.90.42.154%22%2C%22token%22%3A%22lplgn1tq%22%2C%22M%22%3A1144%7D; tw_session=eyJpdiI6Ilh2R2R5QitDXC84aXhYOVBCaUZadG9nPT0iLCJ2YWx1ZSI6IkQ0YTZ2bDVQeDF6ZExKcnQrZnFEMkVtb0FrVEZFY3E0TVVRbVphemRNajJpTnAwQTE2OVV0V1k5d1ZEa2J0Sm8iLCJtYWMiOiJmYzk5NjUyZGNjNTk4ZTdlMWMyOWRkNmIyNGRkOGEwNDhhZTRjMmI3N2RkNzRjNjE4NjY1OGM1ZTg3MTVkMzRlIn0%3D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
server: nginx/1.14.0 (Ubuntu)
date: Thu, 30 Nov 2023 17:19:04 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache, private
pragma: no-cache
expires: -1
content-encoding: gzip
X-Firefox-Spdy: h2
d2i5a4y6yksdm0.cloudfront.net/css/lp/574/style.css
200 OK 2.4 kB URL GET HTTP/2 d2i5a4y6yksdm0.cloudfront.net/css/lp/574/style.css
IP
Requested by https://www2.tiltwin.com/no/landing/155/574?A=5622
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
Hash 594457a3387cfef7a5b9295cf5dab10d
9c227f8e2773c9dd430ed2259aac08e6876d1c27
ce525cdbab246d002f2dd20e24f25a92b48e34bf48452dff3aded98dd0856429
GET /css/lp/574/style.css HTTP/1.1
Host: d2i5a4y6yksdm0.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www2.tiltwin.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css
server: nginx/1.14.0 (Ubuntu)
last-modified: Tue, 06 Apr 2021 18:36:43 GMT
x-cache-status: MISS
content-encoding: br
date: Thu, 30 Nov 2023 08:42:22 GMT
etag: W/"606caa3b-23c2"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: O9PPwwDBFExYlWZf47naPq7mnlzpRUW-aiYsfbNUTTSdp7WFsDf6nQ==
age: 31002
X-Firefox-Spdy: h2
d2i5a4y6yksdm0.cloudfront.net/js/js.cookie.js
200 OK 167 kB URL GET HTTP/2 d2i5a4y6yksdm0.cloudfront.net/js/js.cookie.js
IP
Requested by https://www2.tiltwin.com/no/landing/155/574?A=5622
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
Size 167 kB (166823 bytes)
Hash 8ff1c89f24a8ca6f91f77389a0b70449
e15afaaeee3ff47128be726bab45e509b19127c5
6533050afa2e853568cd4b0b8048ed64e94963e38088b226575a7cca8054f4e2
GET /js/js.cookie.js HTTP/1.1
Host: d2i5a4y6yksdm0.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www2.tiltwin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
server: nginx/1.14.0 (Ubuntu)
last-modified: Sun, 13 May 2018 17:24:12 GMT
x-cache-status: HIT
content-encoding: br
date: Thu, 30 Nov 2023 10:42:52 GMT
etag: W/"5af874bc-f2e"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: osQ5Y1PfLwLlZeDhbtW1TUISR3OpBVJQxPRIn2uWAhSaGw7P5Ej-sw==
age: 23772
X-Firefox-Spdy: h2
www2.tiltwin.com/images/lp/574/slot1.png
200 OK 11 kB URL GET HTTP/2 www2.tiltwin.com/images/lp/574/slot1.png
IP
Requested by https://www2.tiltwin.com/no/landing/155/574?A=5622
Certificate IssuerLet's Encrypt
Subjectwww2.tiltwin.com
FingerprintB2:78:68:F7:B5:EC:53:5E:46:3C:B0:B9:0B:48:84:B5:A1:3C:54:71
ValidityThu, 12 Oct 2023 04:46:04 GMT - Wed, 10 Jan 2024 04:46:03 GMT
File type PNG image data, 113 x 124, 8-bit colormap, non-interlaced\012- data
Hash 8f59f7505f06de597a0f749f018cadf2
d2313ce4b83ef4e2578b0c7d54dc25ff310519e7
34f19d90a2743c0f603ed8aa6ea761bf60de19a187754a3e67f1f8f77d894451
GET /images/lp/574/slot1.png HTTP/1.1
Host: www2.tiltwin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www2.tiltwin.com/no/landing/155/574?A=5622
Cookie: tracking_data=%7B%22P%22%3A%223-clkc81t0299cee4klkeg%22%2C%22A%22%3A%225622%22%2C%22B%22%3A%2285287__15704ff106c%22%2C%22aff_sub4%22%3A%228e950760-8fa4-11ee-97c9-1be6bb284c5a%22%2C%22email%22%3Anull%2C%22aff_sub2%22%3Anull%2C%22market%22%3A%22no%22%2C%22path%22%3A%22landing%5C%2F155%5C%2F574%22%2C%22country%22%3A%22NO%22%2C%22page%22%3A%22155%22%2C%22template%22%3A%22574%22%2C%22clickin_ip%22%3A%2291.90.42.154%22%2C%22token%22%3A%22lplgn1tq%22%2C%22M%22%3A1144%7D; tw_session=eyJpdiI6Ilh2R2R5QitDXC84aXhYOVBCaUZadG9nPT0iLCJ2YWx1ZSI6IkQ0YTZ2bDVQeDF6ZExKcnQrZnFEMkVtb0FrVEZFY3E0TVVRbVphemRNajJpTnAwQTE2OVV0V1k5d1ZEa2J0Sm8iLCJtYWMiOiJmYzk5NjUyZGNjNTk4ZTdlMWMyOWRkNmIyNGRkOGEwNDhhZTRjMmI3N2RkNzRjNjE4NjY1OGM1ZTg3MTVkMzRlIn0%3D; _ga_N43BLYJLJR=GS1.1.1701364749.1.0.1701364749.0.0.0; _ga=GA1.1.437280560.1701364749
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.0 (Ubuntu)
date: Thu, 30 Nov 2023 17:19:05 GMT
content-type: image/png
content-length: 10650
last-modified: Wed, 05 Aug 2020 12:21:33 GMT
etag: "5f2aa44d-299a"
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
www2.tiltwin.com/images/lp/574/slot3.png
200 OK 4.7 kB URL GET HTTP/2 www2.tiltwin.com/images/lp/574/slot3.png
IP
Requested by https://www2.tiltwin.com/no/landing/155/574?A=5622
Certificate IssuerLet's Encrypt
Subjectwww2.tiltwin.com
FingerprintB2:78:68:F7:B5:EC:53:5E:46:3C:B0:B9:0B:48:84:B5:A1:3C:54:71
ValidityThu, 12 Oct 2023 04:46:04 GMT - Wed, 10 Jan 2024 04:46:03 GMT
File type PNG image data, 113 x 124, 8-bit colormap, non-interlaced\012- data
Hash 15984c4890d9295e9d5c344d63cef553
41e4907655f2a67d20a6752bb9a4d63a2dda2e35
e208a6e29f59e3d67c0e58fb7ac2597fa4f85a928501d6d9a085061c87bdb569
GET /images/lp/574/slot3.png HTTP/1.1
Host: www2.tiltwin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www2.tiltwin.com/no/landing/155/574?A=5622
Cookie: tracking_data=%7B%22P%22%3A%223-clkc81t0299cee4klkeg%22%2C%22A%22%3A%225622%22%2C%22B%22%3A%2285287__15704ff106c%22%2C%22aff_sub4%22%3A%228e950760-8fa4-11ee-97c9-1be6bb284c5a%22%2C%22email%22%3Anull%2C%22aff_sub2%22%3Anull%2C%22market%22%3A%22no%22%2C%22path%22%3A%22landing%5C%2F155%5C%2F574%22%2C%22country%22%3A%22NO%22%2C%22page%22%3A%22155%22%2C%22template%22%3A%22574%22%2C%22clickin_ip%22%3A%2291.90.42.154%22%2C%22token%22%3A%22lplgn1tq%22%2C%22M%22%3A1144%7D; tw_session=eyJpdiI6Ilh2R2R5QitDXC84aXhYOVBCaUZadG9nPT0iLCJ2YWx1ZSI6IkQ0YTZ2bDVQeDF6ZExKcnQrZnFEMkVtb0FrVEZFY3E0TVVRbVphemRNajJpTnAwQTE2OVV0V1k5d1ZEa2J0Sm8iLCJtYWMiOiJmYzk5NjUyZGNjNTk4ZTdlMWMyOWRkNmIyNGRkOGEwNDhhZTRjMmI3N2RkNzRjNjE4NjY1OGM1ZTg3MTVkMzRlIn0%3D; _ga_N43BLYJLJR=GS1.1.1701364749.1.0.1701364749.0.0.0; _ga=GA1.1.437280560.1701364749
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.0 (Ubuntu)
date: Thu, 30 Nov 2023 17:19:05 GMT
content-type: image/png
content-length: 4704
last-modified: Wed, 05 Aug 2020 12:21:39 GMT
etag: "5f2aa453-1260"
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
www2.tiltwin.com/images/lp/574/slot4.png
200 OK 6.3 kB URL GET HTTP/2 www2.tiltwin.com/images/lp/574/slot4.png
IP
Requested by https://www2.tiltwin.com/no/landing/155/574?A=5622
Certificate IssuerLet's Encrypt
Subjectwww2.tiltwin.com
FingerprintB2:78:68:F7:B5:EC:53:5E:46:3C:B0:B9:0B:48:84:B5:A1:3C:54:71
ValidityThu, 12 Oct 2023 04:46:04 GMT - Wed, 10 Jan 2024 04:46:03 GMT
File type PNG image data, 113 x 124, 8-bit colormap, non-interlaced\012- data
Hash f6872ffe46353aa6c6e6bbc7dc3d3a94
2ab2aa93c1c3e462d3ae796d0f0f760bb6990a5b
d623f5acfe7ef19bd9b6705ec8737e98975ae0512aa851bdfdbcc76be8ebfc64
GET /images/lp/574/slot4.png HTTP/1.1
Host: www2.tiltwin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www2.tiltwin.com/no/landing/155/574?A=5622
Cookie: tracking_data=%7B%22P%22%3A%223-clkc81t0299cee4klkeg%22%2C%22A%22%3A%225622%22%2C%22B%22%3A%2285287__15704ff106c%22%2C%22aff_sub4%22%3A%228e950760-8fa4-11ee-97c9-1be6bb284c5a%22%2C%22email%22%3Anull%2C%22aff_sub2%22%3Anull%2C%22market%22%3A%22no%22%2C%22path%22%3A%22landing%5C%2F155%5C%2F574%22%2C%22country%22%3A%22NO%22%2C%22page%22%3A%22155%22%2C%22template%22%3A%22574%22%2C%22clickin_ip%22%3A%2291.90.42.154%22%2C%22token%22%3A%22lplgn1tq%22%2C%22M%22%3A1144%7D; tw_session=eyJpdiI6Ilh2R2R5QitDXC84aXhYOVBCaUZadG9nPT0iLCJ2YWx1ZSI6IkQ0YTZ2bDVQeDF6ZExKcnQrZnFEMkVtb0FrVEZFY3E0TVVRbVphemRNajJpTnAwQTE2OVV0V1k5d1ZEa2J0Sm8iLCJtYWMiOiJmYzk5NjUyZGNjNTk4ZTdlMWMyOWRkNmIyNGRkOGEwNDhhZTRjMmI3N2RkNzRjNjE4NjY1OGM1ZTg3MTVkMzRlIn0%3D; _ga_N43BLYJLJR=GS1.1.1701364749.1.0.1701364749.0.0.0; _ga=GA1.1.437280560.1701364749
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.0 (Ubuntu)
date: Thu, 30 Nov 2023 17:19:05 GMT
content-type: image/png
content-length: 6341
last-modified: Wed, 05 Aug 2020 12:21:45 GMT
etag: "5f2aa459-18c5"
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
www2.tiltwin.com/images/lp/574/slot6.png
200 OK 10 kB URL GET HTTP/2 www2.tiltwin.com/images/lp/574/slot6.png
IP
Requested by https://www2.tiltwin.com/no/landing/155/574?A=5622
Certificate IssuerLet's Encrypt
Subjectwww2.tiltwin.com
FingerprintB2:78:68:F7:B5:EC:53:5E:46:3C:B0:B9:0B:48:84:B5:A1:3C:54:71
ValidityThu, 12 Oct 2023 04:46:04 GMT - Wed, 10 Jan 2024 04:46:03 GMT
File type PNG image data, 113 x 124, 8-bit colormap, non-interlaced\012- data
Hash c760356fc69201be743d5b1d207dc2f7
61722969159fad8602e5351713cf71dccb786a33
421dbdcc6d7d1f18600bd10de4809dd745c936c9f22e33c0f8708aee1e3d7816
GET /images/lp/574/slot6.png HTTP/1.1
Host: www2.tiltwin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www2.tiltwin.com/no/landing/155/574?A=5622
Cookie: tracking_data=%7B%22P%22%3A%223-clkc81t0299cee4klkeg%22%2C%22A%22%3A%225622%22%2C%22B%22%3A%2285287__15704ff106c%22%2C%22aff_sub4%22%3A%228e950760-8fa4-11ee-97c9-1be6bb284c5a%22%2C%22email%22%3Anull%2C%22aff_sub2%22%3Anull%2C%22market%22%3A%22no%22%2C%22path%22%3A%22landing%5C%2F155%5C%2F574%22%2C%22country%22%3A%22NO%22%2C%22page%22%3A%22155%22%2C%22template%22%3A%22574%22%2C%22clickin_ip%22%3A%2291.90.42.154%22%2C%22token%22%3A%22lplgn1tq%22%2C%22M%22%3A1144%7D; tw_session=eyJpdiI6Ilh2R2R5QitDXC84aXhYOVBCaUZadG9nPT0iLCJ2YWx1ZSI6IkQ0YTZ2bDVQeDF6ZExKcnQrZnFEMkVtb0FrVEZFY3E0TVVRbVphemRNajJpTnAwQTE2OVV0V1k5d1ZEa2J0Sm8iLCJtYWMiOiJmYzk5NjUyZGNjNTk4ZTdlMWMyOWRkNmIyNGRkOGEwNDhhZTRjMmI3N2RkNzRjNjE4NjY1OGM1ZTg3MTVkMzRlIn0%3D; _ga_N43BLYJLJR=GS1.1.1701364749.1.0.1701364749.0.0.0; _ga=GA1.1.437280560.1701364749
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.0 (Ubuntu)
date: Thu, 30 Nov 2023 17:19:05 GMT
content-type: image/png
content-length: 10273
last-modified: Wed, 05 Aug 2020 12:21:51 GMT
etag: "5f2aa45f-2821"
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
www2.tiltwin.com/images/lp/574/slot7.png
200 OK 6.2 kB URL GET HTTP/2 www2.tiltwin.com/images/lp/574/slot7.png
IP
Requested by https://www2.tiltwin.com/no/landing/155/574?A=5622
Certificate IssuerLet's Encrypt
Subjectwww2.tiltwin.com
FingerprintB2:78:68:F7:B5:EC:53:5E:46:3C:B0:B9:0B:48:84:B5:A1:3C:54:71
ValidityThu, 12 Oct 2023 04:46:04 GMT - Wed, 10 Jan 2024 04:46:03 GMT
File type PNG image data, 113 x 124, 8-bit colormap, non-interlaced\012- data
Hash b88f9e690d35a9139c9ff3797f44c4f6
774423e288b95f597d44806d77cf2755f698e8ae
a6f7ecb186219e6730a1eb242570cb1816e954817d4c830930c19bf297e88198
GET /images/lp/574/slot7.png HTTP/1.1
Host: www2.tiltwin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www2.tiltwin.com/no/landing/155/574?A=5622
Cookie: tracking_data=%7B%22P%22%3A%223-clkc81t0299cee4klkeg%22%2C%22A%22%3A%225622%22%2C%22B%22%3A%2285287__15704ff106c%22%2C%22aff_sub4%22%3A%228e950760-8fa4-11ee-97c9-1be6bb284c5a%22%2C%22email%22%3Anull%2C%22aff_sub2%22%3Anull%2C%22market%22%3A%22no%22%2C%22path%22%3A%22landing%5C%2F155%5C%2F574%22%2C%22country%22%3A%22NO%22%2C%22page%22%3A%22155%22%2C%22template%22%3A%22574%22%2C%22clickin_ip%22%3A%2291.90.42.154%22%2C%22token%22%3A%22lplgn1tq%22%2C%22M%22%3A1144%7D; tw_session=eyJpdiI6Ilh2R2R5QitDXC84aXhYOVBCaUZadG9nPT0iLCJ2YWx1ZSI6IkQ0YTZ2bDVQeDF6ZExKcnQrZnFEMkVtb0FrVEZFY3E0TVVRbVphemRNajJpTnAwQTE2OVV0V1k5d1ZEa2J0Sm8iLCJtYWMiOiJmYzk5NjUyZGNjNTk4ZTdlMWMyOWRkNmIyNGRkOGEwNDhhZTRjMmI3N2RkNzRjNjE4NjY1OGM1ZTg3MTVkMzRlIn0%3D; _ga_N43BLYJLJR=GS1.1.1701364749.1.0.1701364749.0.0.0; _ga=GA1.1.437280560.1701364749
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.0 (Ubuntu)
date: Thu, 30 Nov 2023 17:19:05 GMT
content-type: image/png
content-length: 6171
last-modified: Wed, 05 Aug 2020 12:21:59 GMT
etag: "5f2aa467-181b"
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
www2.tiltwin.com/images/lp/574/slot9.png
200 OK 7.2 kB URL GET HTTP/2 www2.tiltwin.com/images/lp/574/slot9.png
IP
Requested by https://www2.tiltwin.com/no/landing/155/574?A=5622
Certificate IssuerLet's Encrypt
Subjectwww2.tiltwin.com
FingerprintB2:78:68:F7:B5:EC:53:5E:46:3C:B0:B9:0B:48:84:B5:A1:3C:54:71
ValidityThu, 12 Oct 2023 04:46:04 GMT - Wed, 10 Jan 2024 04:46:03 GMT
File type PNG image data, 113 x 124, 8-bit colormap, non-interlaced\012- data
Hash b4d7ea28ce81068a3c6664e96bb057d5
ebdf73b8e7778a0712896db9d4fae05d12b9b11e
2d19c254dba701820142a0b208ee92df45620acaeef7f396f7ffd96b797a0683
GET /images/lp/574/slot9.png HTTP/1.1
Host: www2.tiltwin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www2.tiltwin.com/no/landing/155/574?A=5622
Cookie: tracking_data=%7B%22P%22%3A%223-clkc81t0299cee4klkeg%22%2C%22A%22%3A%225622%22%2C%22B%22%3A%2285287__15704ff106c%22%2C%22aff_sub4%22%3A%228e950760-8fa4-11ee-97c9-1be6bb284c5a%22%2C%22email%22%3Anull%2C%22aff_sub2%22%3Anull%2C%22market%22%3A%22no%22%2C%22path%22%3A%22landing%5C%2F155%5C%2F574%22%2C%22country%22%3A%22NO%22%2C%22page%22%3A%22155%22%2C%22template%22%3A%22574%22%2C%22clickin_ip%22%3A%2291.90.42.154%22%2C%22token%22%3A%22lplgn1tq%22%2C%22M%22%3A1144%7D; tw_session=eyJpdiI6Ilh2R2R5QitDXC84aXhYOVBCaUZadG9nPT0iLCJ2YWx1ZSI6IkQ0YTZ2bDVQeDF6ZExKcnQrZnFEMkVtb0FrVEZFY3E0TVVRbVphemRNajJpTnAwQTE2OVV0V1k5d1ZEa2J0Sm8iLCJtYWMiOiJmYzk5NjUyZGNjNTk4ZTdlMWMyOWRkNmIyNGRkOGEwNDhhZTRjMmI3N2RkNzRjNjE4NjY1OGM1ZTg3MTVkMzRlIn0%3D; _ga_N43BLYJLJR=GS1.1.1701364749.1.0.1701364749.0.0.0; _ga=GA1.1.437280560.1701364749
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.0 (Ubuntu)
date: Thu, 30 Nov 2023 17:19:05 GMT
content-type: image/png
content-length: 7165
last-modified: Wed, 05 Aug 2020 12:22:04 GMT
etag: "5f2aa46c-1bfd"
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
www2.tiltwin.com/images/lp/574/win_sym.png
200 OK 12 kB URL GET HTTP/2 www2.tiltwin.com/images/lp/574/win_sym.png
IP
Requested by https://www2.tiltwin.com/no/landing/155/574?A=5622
Certificate IssuerLet's Encrypt
Subjectwww2.tiltwin.com
FingerprintB2:78:68:F7:B5:EC:53:5E:46:3C:B0:B9:0B:48:84:B5:A1:3C:54:71
ValidityThu, 12 Oct 2023 04:46:04 GMT - Wed, 10 Jan 2024 04:46:03 GMT
File type PNG image data, 120 x 120, 8-bit colormap, non-interlaced\012- data
Hash 525d8bd6e69df2cac302047536b7037a
ef3510e45c5760c6db37a0b43b8ac07dda5da757
6f3b59cfa1a54fd4790e62f20830d525c4fd0b8ea6e8dd9d214e176b3b1d02ce
GET /images/lp/574/win_sym.png HTTP/1.1
Host: www2.tiltwin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www2.tiltwin.com/no/landing/155/574?A=5622
Cookie: tracking_data=%7B%22P%22%3A%223-clkc81t0299cee4klkeg%22%2C%22A%22%3A%225622%22%2C%22B%22%3A%2285287__15704ff106c%22%2C%22aff_sub4%22%3A%228e950760-8fa4-11ee-97c9-1be6bb284c5a%22%2C%22email%22%3Anull%2C%22aff_sub2%22%3Anull%2C%22market%22%3A%22no%22%2C%22path%22%3A%22landing%5C%2F155%5C%2F574%22%2C%22country%22%3A%22NO%22%2C%22page%22%3A%22155%22%2C%22template%22%3A%22574%22%2C%22clickin_ip%22%3A%2291.90.42.154%22%2C%22token%22%3A%22lplgn1tq%22%2C%22M%22%3A1144%7D; tw_session=eyJpdiI6Ilh2R2R5QitDXC84aXhYOVBCaUZadG9nPT0iLCJ2YWx1ZSI6IkQ0YTZ2bDVQeDF6ZExKcnQrZnFEMkVtb0FrVEZFY3E0TVVRbVphemRNajJpTnAwQTE2OVV0V1k5d1ZEa2J0Sm8iLCJtYWMiOiJmYzk5NjUyZGNjNTk4ZTdlMWMyOWRkNmIyNGRkOGEwNDhhZTRjMmI3N2RkNzRjNjE4NjY1OGM1ZTg3MTVkMzRlIn0%3D; _ga_N43BLYJLJR=GS1.1.1701364749.1.0.1701364749.0.0.0; _ga=GA1.1.437280560.1701364749
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.0 (Ubuntu)
date: Thu, 30 Nov 2023 17:19:05 GMT
content-type: image/png
content-length: 11878
last-modified: Wed, 05 Aug 2020 12:22:09 GMT
etag: "5f2aa471-2e66"
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
www2.tiltwin.com/images/lp/574/winline.png
200 OK 6.2 kB URL GET HTTP/2 www2.tiltwin.com/images/lp/574/winline.png
IP
Requested by https://www2.tiltwin.com/no/landing/155/574?A=5622
Certificate IssuerLet's Encrypt
Subjectwww2.tiltwin.com
FingerprintB2:78:68:F7:B5:EC:53:5E:46:3C:B0:B9:0B:48:84:B5:A1:3C:54:71
ValidityThu, 12 Oct 2023 04:46:04 GMT - Wed, 10 Jan 2024 04:46:03 GMT
File type PNG image data, 622 x 178, 8-bit colormap, non-interlaced\012- data
Hash b34e98c0e313ed03e192a7af5aef6dc0
83e248a726903fb3740991333564ab320e914486
291dc37728ccc14689e9cd0d509710aebb63d2bb284b7608e7c538f721909fc9
GET /images/lp/574/winline.png HTTP/1.1
Host: www2.tiltwin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www2.tiltwin.com/no/landing/155/574?A=5622
Cookie: tracking_data=%7B%22P%22%3A%223-clkc81t0299cee4klkeg%22%2C%22A%22%3A%225622%22%2C%22B%22%3A%2285287__15704ff106c%22%2C%22aff_sub4%22%3A%228e950760-8fa4-11ee-97c9-1be6bb284c5a%22%2C%22email%22%3Anull%2C%22aff_sub2%22%3Anull%2C%22market%22%3A%22no%22%2C%22path%22%3A%22landing%5C%2F155%5C%2F574%22%2C%22country%22%3A%22NO%22%2C%22page%22%3A%22155%22%2C%22template%22%3A%22574%22%2C%22clickin_ip%22%3A%2291.90.42.154%22%2C%22token%22%3A%22lplgn1tq%22%2C%22M%22%3A1144%7D; tw_session=eyJpdiI6Ilh2R2R5QitDXC84aXhYOVBCaUZadG9nPT0iLCJ2YWx1ZSI6IkQ0YTZ2bDVQeDF6ZExKcnQrZnFEMkVtb0FrVEZFY3E0TVVRbVphemRNajJpTnAwQTE2OVV0V1k5d1ZEa2J0Sm8iLCJtYWMiOiJmYzk5NjUyZGNjNTk4ZTdlMWMyOWRkNmIyNGRkOGEwNDhhZTRjMmI3N2RkNzRjNjE4NjY1OGM1ZTg3MTVkMzRlIn0%3D; _ga_N43BLYJLJR=GS1.1.1701364749.1.0.1701364749.0.0.0; _ga=GA1.1.437280560.1701364749
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.0 (Ubuntu)
date: Thu, 30 Nov 2023 17:19:05 GMT
content-type: image/png
content-length: 6182
last-modified: Wed, 05 Aug 2020 12:22:15 GMT
etag: "5f2aa477-1826"
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
www2.tiltwin.com/images/lp/574/btn.png
200 OK 526 B URL GET HTTP/2 www2.tiltwin.com/images/lp/574/btn.png
IP
Requested by https://www2.tiltwin.com/no/landing/155/574?A=5622
Certificate IssuerLet's Encrypt
Subjectwww2.tiltwin.com
FingerprintB2:78:68:F7:B5:EC:53:5E:46:3C:B0:B9:0B:48:84:B5:A1:3C:54:71
ValidityThu, 12 Oct 2023 04:46:04 GMT - Wed, 10 Jan 2024 04:46:03 GMT
File type PNG image data, 464 x 106, 8-bit colormap, non-interlaced\012- data
Hash 64adf8fec30ad9649caa783d6591ce0e
b62a1d90790ffacb19e0317628dde53d284ec8b9
a518a179514e2c1d458a0a652b0fb9203396f149d4ad2e424e083eaba12e4b0d
GET /images/lp/574/btn.png HTTP/1.1
Host: www2.tiltwin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www2.tiltwin.com/no/landing/155/574?A=5622
Cookie: tracking_data=%7B%22P%22%3A%223-clkc81t0299cee4klkeg%22%2C%22A%22%3A%225622%22%2C%22B%22%3A%2285287__15704ff106c%22%2C%22aff_sub4%22%3A%228e950760-8fa4-11ee-97c9-1be6bb284c5a%22%2C%22email%22%3Anull%2C%22aff_sub2%22%3Anull%2C%22market%22%3A%22no%22%2C%22path%22%3A%22landing%5C%2F155%5C%2F574%22%2C%22country%22%3A%22NO%22%2C%22page%22%3A%22155%22%2C%22template%22%3A%22574%22%2C%22clickin_ip%22%3A%2291.90.42.154%22%2C%22token%22%3A%22lplgn1tq%22%2C%22M%22%3A1144%7D; tw_session=eyJpdiI6Ilh2R2R5QitDXC84aXhYOVBCaUZadG9nPT0iLCJ2YWx1ZSI6IkQ0YTZ2bDVQeDF6ZExKcnQrZnFEMkVtb0FrVEZFY3E0TVVRbVphemRNajJpTnAwQTE2OVV0V1k5d1ZEa2J0Sm8iLCJtYWMiOiJmYzk5NjUyZGNjNTk4ZTdlMWMyOWRkNmIyNGRkOGEwNDhhZTRjMmI3N2RkNzRjNjE4NjY1OGM1ZTg3MTVkMzRlIn0%3D; _ga_N43BLYJLJR=GS1.1.1701364749.1.0.1701364749.0.0.0; _ga=GA1.1.437280560.1701364749
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.14.0 (Ubuntu)
date: Thu, 30 Nov 2023 17:19:04 GMT
content-type: image/png
content-length: 526
last-modified: Wed, 05 Aug 2020 12:20:24 GMT
etag: "5f2aa408-20e"
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
d2i5a4y6yksdm0.cloudfront.net/images/footer-icons/only-18.png
200 OK 1.6 kB URL GET HTTP/2 d2i5a4y6yksdm0.cloudfront.net/images/footer-icons/only-18.png
IP
Requested by https://www2.tiltwin.com/no/landing/155/574?A=5622
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type PNG image data, 30 x 35, 8-bit/color RGBA, non-interlaced\012- data
Hash cf04116a79119c523e050702bad75e29
ae2c9c695fbf60205ea06e8a73e7ed54fa534733
a410afd1a0e4ffb9dc6000d922ee4a72d5e48bffd935031cf3b6396adc39387d
GET /images/footer-icons/only-18.png HTTP/1.1
Host: d2i5a4y6yksdm0.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www2.tiltwin.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
content-length: 1589
server: nginx/1.14.0 (Ubuntu)
last-modified: Tue, 27 Mar 2018 12:02:16 GMT
x-cache-status: HIT
accept-ranges: bytes
date: Thu, 30 Nov 2023 10:53:39 GMT
etag: "5aba32c8-635"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 6Xt1R9KZ1p1TEjPThrvw-_wdyFQ1ewm4-8_55wxXGTAp-Z1TDYkQDA==
age: 23125
X-Firefox-Spdy: h2
tracker.tiltwin.com/rotate/194?P=3-clkc81t0299cee4klkeg&A=5622&B=85287__15704ff106c&aff_sub4=8e950760-8fa4-11ee-97c9-1be6bb284c5a&email=&aff_sub2=
302 Found 17 kB URL User Request GET HTTP/2 tracker.tiltwin.com/rotate/194?P=3-clkc81t0299cee4klkeg&A=5622&B=85287__15704ff106c&aff_sub4=8e950760-8fa4-11ee-97c9-1be6bb284c5a&email=&aff_sub2=
IP
Certificate IssuerLet's Encrypt
Subjecttracker.tiltwin.com
Fingerprint6B:62:6D:A7:E8:09:3B:2D:BC:A1:1E:3E:FB:2A:EF:C0:5E:E0:6F:9D
ValidityFri, 13 Oct 2023 09:08:39 GMT - Thu, 11 Jan 2024 09:08:38 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rotate/194?P=3-clkc81t0299cee4klkeg&A=5622&B=85287__15704ff106c&aff_sub4=8e950760-8fa4-11ee-97c9-1be6bb284c5a&email=&aff_sub2= HTTP/1.1
Host: tracker.tiltwin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx/1.14.0 (Ubuntu)
date: Thu, 30 Nov 2023 17:19:03 GMT
content-type: text/html; charset=UTF-8
location: https://www2.tiltwin.com/no/landing/155/574?A=5622
set-cookie: tracking_data=%7B%22P%22%3A%223-clkc81t0299cee4klkeg%22%2C%22A%22%3A%225622%22%2C%22B%22%3A%2285287__15704ff106c%22%2C%22aff_sub4%22%3A%228e950760-8fa4-11ee-97c9-1be6bb284c5a%22%2C%22email%22%3Anull%2C%22aff_sub2%22%3Anull%2C%22market%22%3A%22no%22%2C%22path%22%3A%22landing%5C%2F155%5C%2F574%22%2C%22country%22%3A%22NO%22%2C%22page%22%3A%22155%22%2C%22template%22%3A%22574%22%2C%22clickin_ip%22%3A%2291.90.42.154%22%2C%22token%22%3A%22lplgn1tq%22%2C%22M%22%3A1144%7D; expires=Fri, 01-Dec-2023 17:19:03 GMT; Max-Age=86400; path=/; domain=tiltwin.com
impression_data=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=tiltwin.com
tw_session=eyJpdiI6Ilh2R2R5QitDXC84aXhYOVBCaUZadG9nPT0iLCJ2YWx1ZSI6IkQ0YTZ2bDVQeDF6ZExKcnQrZnFEMkVtb0FrVEZFY3E0TVVRbVphemRNajJpTnAwQTE2OVV0V1k5d1ZEa2J0Sm8iLCJtYWMiOiJmYzk5NjUyZGNjNTk4ZTdlMWMyOWRkNmIyNGRkOGEwNDhhZTRjMmI3N2RkNzRjNjE4NjY1OGM1ZTg3MTVkMzRlIn0%3D; expires=Sat, 09-Dec-2023 01:19:03 GMT; Max-Age=720000; path=/; domain=tiltwin.com
cache-control: private, must-revalidate
pragma: no-cache
expires: -1
X-Firefox-Spdy: h2
use.fontawesome.com/releases/v5.1.0/css/all.css
200 OK 46 kB URL GET HTTP/2 use.fontawesome.com/releases/v5.1.0/css/all.css
IP
Requested by https://www2.tiltwin.com/no/landing/155/574?A=5622
Certificate IssuerCloudflare, Inc.
Subjectuse.fontawesome.com
FingerprintCB:BE:6B:C4:5F:DF:18:7A:C3:AD:BF:6C:40:36:18:9F:E2:99:7F:78
ValidityThu, 12 Oct 2023 00:00:00 GMT - Thu, 10 Oct 2024 23:59:59 GMT
File type ASCII text, with very long lines (45507)
Hash 826c57385f3d35cfed5478ba7b1f5c03
20d2d431065fc6b38c1187eda564639527e2428e
ce91e2144ea27f82292ef2c87c5d9e1d0b9994df63836130293865aca18fc550
GET /releases/v5.1.0/css/all.css HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www2.tiltwin.com
DNT: 1
Connection: keep-alive
Referer: https://www2.tiltwin.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 17:19:04 GMT
content-type: text/css
access-control-allow-origin: *
cache-control: max-age=31556926
etag: W/"826c57385f3d35cfed5478ba7b1f5c03"
last-modified: Fri, 22 Sep 2023 01:44:25 GMT
vary: Origin, Accept-Encoding
cf-cache-status: HIT
age: 139465
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sxcrWaYiuLlhP9EzX2zwgTzg0F8qt5LcDwatHxao1JxAYfpKcXgjNSnBB70ZCCcEbL8G039Oc%2FHqghAqwOPcQBxkKBiC7DgIdV45keMkWnUiCWHKiMaG8uhxsVMUU%2FcxBRIv0kVA"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82e4c0d51f8863f4-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
d2i5a4y6yksdm0.cloudfront.net/images/footer-icons/begamble.png
200 OK 10 kB URL GET HTTP/2 d2i5a4y6yksdm0.cloudfront.net/images/footer-icons/begamble.png
IP
Requested by https://www2.tiltwin.com/no/landing/155/574?A=5622
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type PNG image data, 473 x 62, 8-bit/color RGBA, non-interlaced\012- data
Hash 4fd78d077e73978bca5af09bd9d76365
f157bdf0be60a2fbb09f52252e353711d83fde4b
bdaa2b7f6eec96c7620ee7d1821fe7b328a7d7dcbade888a0986d3aeb7755ab6
GET /images/footer-icons/begamble.png HTTP/1.1
Host: d2i5a4y6yksdm0.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www2.tiltwin.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
content-length: 10295
server: nginx/1.14.0 (Ubuntu)
last-modified: Mon, 04 Jan 2021 17:51:23 GMT
x-cache-status: MISS
accept-ranges: bytes
date: Thu, 30 Nov 2023 14:01:56 GMT
etag: "5ff3559b-2837"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: lOZgsQuHaJPRvviABOGELtwL3Vk80DeI_2rvfQ6GRxX-EDsv7dBDYg==
age: 11828
X-Firefox-Spdy: h2
www2.tiltwin.com/no/landing/155/574?A=5622
200 OK 17 kB URL User Request GET HTTP/2 www2.tiltwin.com/no/landing/155/574?A=5622
IP
Certificate IssuerLet's Encrypt
Subjectwww2.tiltwin.com
FingerprintB2:78:68:F7:B5:EC:53:5E:46:3C:B0:B9:0B:48:84:B5:A1:3C:54:71
ValidityThu, 12 Oct 2023 04:46:04 GMT - Wed, 10 Jan 2024 04:46:03 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /no/landing/155/574?A=5622 HTTP/1.1
Host: www2.tiltwin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: tracking_data=%7B%22P%22%3A%223-clkc81t0299cee4klkeg%22%2C%22A%22%3A%225622%22%2C%22B%22%3A%2285287__15704ff106c%22%2C%22aff_sub4%22%3A%228e950760-8fa4-11ee-97c9-1be6bb284c5a%22%2C%22email%22%3Anull%2C%22aff_sub2%22%3Anull%2C%22market%22%3A%22no%22%2C%22path%22%3A%22landing%5C%2F155%5C%2F574%22%2C%22country%22%3A%22NO%22%2C%22page%22%3A%22155%22%2C%22template%22%3A%22574%22%2C%22clickin_ip%22%3A%2291.90.42.154%22%2C%22token%22%3A%22lplgn1tq%22%2C%22M%22%3A1144%7D; tw_session=eyJpdiI6Ilh2R2R5QitDXC84aXhYOVBCaUZadG9nPT0iLCJ2YWx1ZSI6IkQ0YTZ2bDVQeDF6ZExKcnQrZnFEMkVtb0FrVEZFY3E0TVVRbVphemRNajJpTnAwQTE2OVV0V1k5d1ZEa2J0Sm8iLCJtYWMiOiJmYzk5NjUyZGNjNTk4ZTdlMWMyOWRkNmIyNGRkOGEwNDhhZTRjMmI3N2RkNzRjNjE4NjY1OGM1ZTg3MTVkMzRlIn0%3D
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.14.0 (Ubuntu)
date: Thu, 30 Nov 2023 17:19:03 GMT
content-type: text/html; charset=UTF-8
cache-control: private, must-revalidate
pragma: no-cache
expires: -1
x-cache-status: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
www2.tiltwin.com/images/lp/574/osn.png
200 OK 166 kB URL GET HTTP/2 www2.tiltwin.com/images/lp/574/osn.png
IP
Requested by https://www2.tiltwin.com/no/landing/155/574?A=5622
Certificate IssuerLet's Encrypt
Subjectwww2.tiltwin.com
FingerprintB2:78:68:F7:B5:EC:53:5E:46:3C:B0:B9:0B:48:84:B5:A1:3C:54:71
ValidityThu, 12 Oct 2023 04:46:04 GMT - Wed, 10 Jan 2024 04:46:03 GMT
File type PNG image data, 786 x 608, 8-bit colormap, non-interlaced\012- data
Size 166 kB (165485 bytes)
Hash fbafd6c1abbfabd273bf06686d59119a
31ef49086d289c7207e9611b12795e19414cb2d6
45b39e728f642365cf8c94599ecf3002b20c607c07160c7e8e404da8c2041968
GET /images/lp/574/osn.png HTTP/1.1
Host: www2.tiltwin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www2.tiltwin.com/no/landing/155/574?A=5622
Cookie: tracking_data=%7B%22P%22%3A%223-clkc81t0299cee4klkeg%22%2C%22A%22%3A%225622%22%2C%22B%22%3A%2285287__15704ff106c%22%2C%22aff_sub4%22%3A%228e950760-8fa4-11ee-97c9-1be6bb284c5a%22%2C%22email%22%3Anull%2C%22aff_sub2%22%3Anull%2C%22market%22%3A%22no%22%2C%22path%22%3A%22landing%5C%2F155%5C%2F574%22%2C%22country%22%3A%22NO%22%2C%22page%22%3A%22155%22%2C%22template%22%3A%22574%22%2C%22clickin_ip%22%3A%2291.90.42.154%22%2C%22token%22%3A%22lplgn1tq%22%2C%22M%22%3A1144%7D; tw_session=eyJpdiI6Ilh2R2R5QitDXC84aXhYOVBCaUZadG9nPT0iLCJ2YWx1ZSI6IkQ0YTZ2bDVQeDF6ZExKcnQrZnFEMkVtb0FrVEZFY3E0TVVRbVphemRNajJpTnAwQTE2OVV0V1k5d1ZEa2J0Sm8iLCJtYWMiOiJmYzk5NjUyZGNjNTk4ZTdlMWMyOWRkNmIyNGRkOGEwNDhhZTRjMmI3N2RkNzRjNjE4NjY1OGM1ZTg3MTVkMzRlIn0%3D; _ga_N43BLYJLJR=GS1.1.1701364749.1.0.1701364749.0.0.0; _ga=GA1.1.437280560.1701364749
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.14.0 (Ubuntu)
date: Thu, 30 Nov 2023 17:19:05 GMT
content-type: image/png
content-length: 165485
last-modified: Wed, 05 Aug 2020 12:21:28 GMT
etag: "5f2aa448-2866d"
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
d2i5a4y6yksdm0.cloudfront.net/images/lp/574/hint-bg.jpg
200 OK 15 kB URL GET HTTP/2 d2i5a4y6yksdm0.cloudfront.net/images/lp/574/hint-bg.jpg
IP
Requested by https://www2.tiltwin.com/no/landing/155/574?A=5622
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 729x104, components 3\012- data
Hash 0a888847143630d0d32d6a1c07bbd420
7680e65b7e67d78a092dbef31e532e9a2f4612f3
5fa3072f292f8edafb050ded6c7e139c3ebac45fdce1633e8a83dda02a638370
GET /images/lp/574/hint-bg.jpg HTTP/1.1
Host: d2i5a4y6yksdm0.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d2i5a4y6yksdm0.cloudfront.net/css/lp/574/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
content-length: 14725
server: nginx/1.14.0 (Ubuntu)
last-modified: Wed, 05 Aug 2020 12:12:54 GMT
x-cache-status: MISS
accept-ranges: bytes
date: Thu, 30 Nov 2023 14:58:11 GMT
etag: "5f2aa246-3985"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: zMDXIveQIHYIWEQmOI56Yuz1ahJxQlgaJdj2_X5-F2wRYGNb7L0l8Q==
age: 8453
X-Firefox-Spdy: h2
stackpath.bootstrapcdn.com/bootstrap/4.1.1/css/bootstrap.min.css
200 OK 141 kB URL GET HTTP/2 stackpath.bootstrapcdn.com/bootstrap/4.1.1/css/bootstrap.min.css
IP
Requested by https://www2.tiltwin.com/no/landing/155/574?A=5622
Certificate IssuerGoogle Trust Services LLC
Subjectbootstrapcdn.com
Fingerprint34:BC:91:5F:B9:EC:32:2C:D9:73:C7:88:C3:6C:FB:77:E7:70:8D:04
ValidityThu, 30 Nov 2023 00:15:17 GMT - Wed, 28 Feb 2024 00:15:16 GMT
File type ASCII text, with very long lines (65324)
Size 141 kB (140930 bytes)
Hash a7022c6fa83d91db67738d6e3cd3252d
1ae238d0c533b209ea5becf4317e13237ed3d42e
31df1e69ea3aece8a8bae5c08bcb7f5e977cb76f886897b301355359b66a48ec
GET /bootstrap/4.1.1/css/bootstrap.min.css HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www2.tiltwin.com
DNT: 1
Connection: keep-alive
Referer: https://www2.tiltwin.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 17:19:04 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"a7022c6fa83d91db67738d6e3cd3252d"
last-modified: Mon, 25 Jan 2021 22:04:05 GMT
cdn-cachedat: 10/31/2023 18:51:17
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 865
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: aca5977d32a7c477ad5c0c00b1e71129
cdn-cache: HIT
cf-cache-status: HIT
age: 473025
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 82e4c0d41b8256c5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
142.93.255.59
104.18.10.207
18.184.180.82
179.61.143.67
52.215.110.17
0.0.0.0