| ocsp.r2m02.amazontrust.com/ |  54.230.80.227 | | 471 B |
URL ocsp.r2m02.amazontrust.com/ IP54.230.80.227:0
Hash2305dcf55a4c67db78f3163611a600c4 0ac38b92b171168148b8f60734c9fe8ebfbcdedd 1f301b2d691eb1acab7790625c472adc62bdd31ced6695663c4c84ab31ecf1c2
POST / HTTP/1.1
Host: ocsp.r2m02.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Sat, 23 Sep 2023 20:03:59 GMT
Last-Modified: Sat, 23 Sep 2023 19:33:03 GMT
Server: ECAcc (ska/F6A0)
X-Cache: Miss from cloudfront
Via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: TnbuYIFSdRu-zDi0VX_RyLlbPbUvwnV-bUFPr0LoFL0gYwCjupgy-g==
Age: 1856
|
|
| joinlanders.com/src/click33/css/style.css |  163.171.129.207 | 200 OK | 6.2 kB |
URL GET HTTP/2joinlanders.com/src/click33/css/style.css IP163.171.129.207:443 ASN#54994 QUANTILNETWORKS
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc CertificateIssuerGlobalSign nv-sa Subject*.joinlanders.com Fingerprint08:E1:3C:E4:1B:71:26:35:DB:14:D7:31:BD:07:43:98:7B:1A:01:F1 ValidityMon, 03 Apr 2023 16:01:30 GMT - Sat, 04 May 2024 16:01:29 GMT
Hash13ca2e4e1ee77c4564345e47e721cdde 8d500e90dfb4daf4efc64a800467192193e203e5 536a4e6e33bfc9562c5e1e185e3b69523460c8b37f3741d2e62dc94478acf125
GET /src/click33/css/style.css HTTP/1.1
Host: joinlanders.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc
Cookie: ldata=%7B%22program%22%3A%22EPC%22%2C%22propigate_defaults%22%3A%5B%5D%2C%22resolved_inputs%22%3A%7B%22pgm%22%3A%2263%22%2C%22wlid%22%3Anull%2C%22ofid%22%3A%221066%22%2C%22a_aid%22%3A%22epc68396%22%2C%22a_sid%22%3A%222110%22%2C%22a_bid%22%3A%22g129%22%7D%2C%22hub_uri%22%3A%22joinfinish.com%22%2C%22iframe_uri%22%3A%22joinfinish.com%5C%2Fsignup%22%2C%22geoip_uri%22%3A%22geoip.joinfinish.com%22%2C%22google_id%22%3A%22%22%2C%22geo_data%22%3A%7B%22city%22%3A%22Dilling%22%2C%22region_code%22%3A%2230%22%2C%22region_name%22%3A%22Viken%22%2C%22country_code%22%3A%22NO%22%2C%22country%22%3A%22Norway%22%2C%22postal_code%22%3A%221570%22%2C%22continent_code%22%3A%22EU%22%2C%22continent%22%3A%22Europe%22%2C%22latitude%22%3A59.3890999999999991132426657713949680328369140625%2C%22longitude%22%3A10.6760000000000001563194018672220408916473388671875%7D%7D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 23 Sep 2023 20:04:00 GMT
content-type: text/css
content-length: 6219
server: PWS/8.3.1.0.8
last-modified: Wed, 20 Jul 2022 17:57:10 GMT
etag: "62d841f6-184b"
accept-ranges: bytes
age: 11348
via: 1.1 PSygldLON4ev13:8 (W), 1.1 PSygldLON2hl59:3 (W)
x-px: ht PSygldLON2hl59LHR
x-ws-request-id: 650f44b0_PSygldLON2hl59_48362-65303
X-Firefox-Spdy: h2
|
|
| joinlanders.com/common/js/iframeResizer/iframeResizer.min.js | 163.171.129.207 | 200 OK | 12 kB |
URL GET HTTP/2joinlanders.com/common/js/iframeResizer/iframeResizer.min.js IP163.171.129.207:443 ASN#54994 QUANTILNETWORKS
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc CertificateIssuerGlobalSign nv-sa Subject*.joinlanders.com Fingerprint08:E1:3C:E4:1B:71:26:35:DB:14:D7:31:BD:07:43:98:7B:1A:01:F1 ValidityMon, 03 Apr 2023 16:01:30 GMT - Sat, 04 May 2024 16:01:29 GMT
File typeASCII text, with very long lines (11471) Hashf6fb142b95a0163be52282ef8b1f4b9a 271ffc93a6b6ef177b6418b6c0d1fb28624e9fb5 35a59efb7049b51b061c5b4a00d2cb1a648a047a3406d55e500f3d6349052d33
GET /common/js/iframeResizer/iframeResizer.min.js HTTP/1.1
Host: joinlanders.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc
Cookie: ldata=%7B%22program%22%3A%22EPC%22%2C%22propigate_defaults%22%3A%5B%5D%2C%22resolved_inputs%22%3A%7B%22pgm%22%3A%2263%22%2C%22wlid%22%3Anull%2C%22ofid%22%3A%221066%22%2C%22a_aid%22%3A%22epc68396%22%2C%22a_sid%22%3A%222110%22%2C%22a_bid%22%3A%22g129%22%7D%2C%22hub_uri%22%3A%22joinfinish.com%22%2C%22iframe_uri%22%3A%22joinfinish.com%5C%2Fsignup%22%2C%22geoip_uri%22%3A%22geoip.joinfinish.com%22%2C%22google_id%22%3A%22%22%2C%22geo_data%22%3A%7B%22city%22%3A%22Dilling%22%2C%22region_code%22%3A%2230%22%2C%22region_name%22%3A%22Viken%22%2C%22country_code%22%3A%22NO%22%2C%22country%22%3A%22Norway%22%2C%22postal_code%22%3A%221570%22%2C%22continent_code%22%3A%22EU%22%2C%22continent%22%3A%22Europe%22%2C%22latitude%22%3A59.3890999999999991132426657713949680328369140625%2C%22longitude%22%3A10.6760000000000001563194018672220408916473388671875%7D%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 23 Sep 2023 20:04:00 GMT
content-type: application/javascript
content-length: 11799
server: PWS/8.3.1.0.8
last-modified: Fri, 03 Sep 2021 18:04:58 GMT
etag: "613263ca-2e17"
accept-ranges: bytes
age: 14857
via: 1.1 PSygldLON4ev13:7 (W), 1.1 PS-LHR-01q9k95:5 (W)
x-px: ht PS-LHR-01q9k95LHR
x-ws-request-id: 650f44b0_PSygldLON2hl59_48362-65305
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | | 471 B |
IP142.250.74.131:0
Hash8fe5097b12ddbaa7731f5c6d445db349 b1d9718a7e3ead4ad6c08b3c888129ddf9ba52af 3133a3d91f11eeb170b6a3149b7cceb04228b72a222187bcc374f1fbbdbf4bd3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 23 Sep 2023 20:04:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| code.jquery.com/jquery-3.6.0.min.js | 151.101.194.137 | 200 OK | 31 kB |
URL GET HTTP/2code.jquery.com/jquery-3.6.0.min.js IP151.101.194.137:443
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc CertificateIssuerSectigo Limited Subject*.jquery.com FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT
File typeASCII text, with very long lines (65447) Hash8fb8fee4fcc3cc86ff6c724154c49c42 b82d238d4e31fdf618bae8ac11a6c812c03dd0d4 ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e
GET /jquery-3.6.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://joinlanders.com
DNT: 1
Connection: keep-alive
Referer: https://joinlanders.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-15d9d"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 23 Sep 2023 20:04:00 GMT
age: 261340
x-served-by: cache-lga21931-LGA, cache-bma1671-BMA
x-cache: HIT, HIT
x-cache-hits: 30, 71473
x-timer: S1695499441.939559,VS0,VE0
vary: Accept-Encoding
content-length: 30875
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | | 471 B |
IP142.250.74.131:0
Hash8fe5097b12ddbaa7731f5c6d445db349 b1d9718a7e3ead4ad6c08b3c888129ddf9ba52af 3133a3d91f11eeb170b6a3149b7cceb04228b72a222187bcc374f1fbbdbf4bd3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 23 Sep 2023 20:04:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | | 471 B |
IP142.250.74.131:0
Hash2a9cb3694beef11368f7284821163a4d 32d723fad91ccd0c154e5d7e489266cfe596aa61 08cd4f8a916cab4a520c51bd519209ebe87f4898f10d1f1c968bce537c4d3916
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 23 Sep 2023 20:04:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| fonts.gstatic.com/s/anton/v25/1Ptgg87LROyAm3Kz-C8.woff2 | 216.58.207.227 | 200 OK | 19 kB |
URL GET HTTP/2fonts.gstatic.com/s/anton/v25/1Ptgg87LROyAm3Kz-C8.woff2 IP216.58.207.227:443
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint3D:35:56:30:C0:0F:0C:7F:20:BA:7D:A8:48:DB:24:1B:15:F5:48:27 ValidityMon, 04 Sep 2023 08:23:09 GMT - Mon, 27 Nov 2023 08:23:08 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 18796, version 1.0\012- data Hasha2675f0a46717d18588f16531f72674d adfe4d6f18d4522b73ef6853ea2084570855f87c f9ad420bf51c2930fc2a49d44209d202cb18acb2d8b82853a01023e69eab6885
GET /s/anton/v25/1Ptgg87LROyAm3Kz-C8.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://joinlanders.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18796
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 22 Sep 2023 15:38:50 GMT
expires: Sat, 21 Sep 2024 15:38:50 GMT
cache-control: public, max-age=31536000
age: 102311
last-modified: Thu, 24 Aug 2023 20:21:17 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | | 471 B |
IP142.250.74.131:0
Hash2a9cb3694beef11368f7284821163a4d 32d723fad91ccd0c154e5d7e489266cfe596aa61 08cd4f8a916cab4a520c51bd519209ebe87f4898f10d1f1c968bce537c4d3916
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 23 Sep 2023 20:04:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2 | 216.58.207.227 | 200 OK | 7.8 kB |
URL GET HTTP/2fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2 IP216.58.207.227:443
Requested byhttps://pcwnyb.com/28723d75f083187/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc&lang=en&epcCID=DaWa21Q3F0N0reGekat9v3WaG3QbFdlcP&rtid=12368791401 CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint3D:35:56:30:C0:0F:0C:7F:20:BA:7D:A8:48:DB:24:1B:15:F5:48:27 ValidityMon, 04 Sep 2023 08:23:09 GMT - Mon, 27 Nov 2023 08:23:08 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 7840, version 1.0\012- data Hash8d91ec1ca2d8b56640a47117e313a3e9 a9e9bafe64666f4595051a0e895b47a5fa39e67e 78bc3aa78faec288bbb3bf26c9a0fa4eb67b1e69da94a17233c5cab60525efdb
GET /s/poppins/v20/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://joinlanders.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7840
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 21 Sep 2023 15:08:24 GMT
expires: Fri, 20 Sep 2024 15:08:24 GMT
cache-control: public, max-age=31536000
age: 190537
last-modified: Wed, 27 Apr 2022 16:51:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | | 471 B |
IP142.250.74.131:0
Hash2a9cb3694beef11368f7284821163a4d 32d723fad91ccd0c154e5d7e489266cfe596aa61 08cd4f8a916cab4a520c51bd519209ebe87f4898f10d1f1c968bce537c4d3916
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 23 Sep 2023 20:04:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| static.cdn.co.no/videos/cl/gg/c33/img/dsk/bgp1.jpg | 163.171.129.207 | 200 OK | 10 kB |
URL GET HTTP/1.1static.cdn.co.no/videos/cl/gg/c33/img/dsk/bgp1.jpg IP163.171.129.207:443 ASN#54994 QUANTILNETWORKS
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc CertificateIssuerLet's Encrypt Subjectstatic.cdn.co.no Fingerprint43:41:07:76:E5:7A:2F:C3:49:81:23:6C:BA:15:34:A6:9E:87:21:B6 ValidityFri, 01 Sep 2023 15:15:14 GMT - Thu, 30 Nov 2023 15:15:13 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 700x394, components 3\012- data Hash5ee023bc8f8cc62233efa133b6545437 fcac7de56928df272daf4efed7fc9a0730d185e9 eda00d5a98749856978bb9ecd96e345070eda7e7f3fc5a4d4a2aaa9188f7f94a
GET /videos/cl/gg/c33/img/dsk/bgp1.jpg HTTP/1.1
Host: static.cdn.co.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://joinlanders.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 20:04:01 GMT
Content-Type: image/jpeg;charset=UTF-8
Content-Length: 10196
Connection: keep-alive
Server: PWS/8.3.1.0.8
Accept-Ranges: bytes
ETag: "FvysfeVpKN8nLa9O_tf8mgcw0YXp"
Last-Modified: Mon, 06 Jun 2022 13:36:52 GMT
X-Reqid: 205024922427321820220607230749Ti9eTmKp
Age: 61491
Via: 1.1 PSygldLON2mb11:10 (W), 1.1 PSygldLON2hl59:10 (W)
X-Px: ht PSygldLON2hl59LHR
X-Ws-Request-Id: 650f44b1_PSygldLON2hl59_48488-3855
|
|
| static.cdn.co.no/videos/cl/gg/c33/img/en_load.png | 163.171.129.207 | 200 OK | 3.8 kB |
URL GET HTTP/1.1static.cdn.co.no/videos/cl/gg/c33/img/en_load.png IP163.171.129.207:443 ASN#54994 QUANTILNETWORKS
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc CertificateIssuerLet's Encrypt Subjectstatic.cdn.co.no Fingerprint43:41:07:76:E5:7A:2F:C3:49:81:23:6C:BA:15:34:A6:9E:87:21:B6 ValidityFri, 01 Sep 2023 15:15:14 GMT - Thu, 30 Nov 2023 15:15:13 GMT
File typePNG image data, 195 x 71, 8-bit colormap, non-interlaced\012- data Hash130609ec850ba7b836df26cb21403ba9 964ca84794cb504678f5d2719947f743ba250b56 f3c59f785d91ef28594d9d21ee53dbb1cf440060f0bdd37803f6a167c2eb7b6e
GET /videos/cl/gg/c33/img/en_load.png HTTP/1.1
Host: static.cdn.co.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://joinlanders.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 20:04:01 GMT
Content-Type: image/png;charset=UTF-8
Content-Length: 3847
Connection: keep-alive
Server: PWS/8.3.1.0.8
Accept-Ranges: bytes
ETag: "FpZMqEeUy1BGePXScZlH90O6JQtW"
Last-Modified: Mon, 18 Jul 2022 15:16:39 GMT
X-Reqid: 205024922427214120230628201900WzVtmIKf
Age: 13515
Via: 1.1 PS-FRA-01E6z147:6 (W), 1.1 PSygldLON2hl59:0 (W)
X-Px: ht PSygldLON2hl59LHR
X-Ws-Request-Id: 650f44b1_PSygldLON2hl59_46326-12551
|
|
| static.cdn.co.no/videos/cl/gg/c33/img/anicon11.png | 163.171.129.207 | 200 OK | 7.5 kB |
URL GET HTTP/1.1static.cdn.co.no/videos/cl/gg/c33/img/anicon11.png IP163.171.129.207:443 ASN#54994 QUANTILNETWORKS
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc CertificateIssuerLet's Encrypt Subjectstatic.cdn.co.no Fingerprint43:41:07:76:E5:7A:2F:C3:49:81:23:6C:BA:15:34:A6:9E:87:21:B6 ValidityFri, 01 Sep 2023 15:15:14 GMT - Thu, 30 Nov 2023 15:15:13 GMT
File typePNG image data, 100 x 90, 8-bit/color RGBA, non-interlaced\012- data Hash3aae2030f6161901dd2086dd796fa8b1 12a844337a5cebfc29f5bb73f800789fbeacd49b daf50ec63fa5867a6727353c88c3ceaca6262adb8d08602c26e17b157518c14c
GET /videos/cl/gg/c33/img/anicon11.png HTTP/1.1
Host: static.cdn.co.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://joinlanders.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 20:04:01 GMT
Content-Type: image/png;charset=UTF-8
Content-Length: 7477
Connection: keep-alive
Server: PWS/8.3.1.0.8
Accept-Ranges: bytes
ETag: "FhKoRDN6XOv8KfW7c_gAeJ--rNSb"
Last-Modified: Mon, 06 Jun 2022 13:32:51 GMT
X-Reqid: 205024922427319620230304145316Ce4kZRLC
Age: 13514
Via: 1.1 PSygldLON4ax12:0 (W), 1.1 PSygldLON2hl59:1 (W)
X-Px: ht PSygldLON2hl59LHR
X-Ws-Request-Id: 650f44b1_PSygldLON2hl59_46416-20425
|
|
| bestlnd.com/ep.php/JK-prmagms:76318/68396:2110.283b0ydgm15qddz9bc | 35.161.149.27 | 302 Found | 11 kB |
URL User Request GET HTTP/2bestlnd.com/ep.php/JK-prmagms:76318/68396:2110.283b0ydgm15qddz9bc IP35.161.149.27:443
CertificateIssuerAmazon Subjectfirstlnd.com FingerprintC2:31:F7:32:02:DF:6A:34:F9:25:A1:C0:95:73:C5:49:82:1A:56:BF ValidityWed, 03 May 2023 00:00:00 GMT - Fri, 31 May 2024 23:59:59 GMT
File typeAudio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, JntStereo\012- data Hash06bedb23315dcad66426bcd9f6caa137 df7bd253f1764fa1471e5e542e138eb80f96f82d 113ecd3a9c1be56fcdb6b5ccee199b5e5d0f8bc777fbda5b0f697e24d8186d1e
GET /ep.php/JK-prmagms:76318/68396:2110.283b0ydgm15qddz9bc HTTP/1.1
Host: bestlnd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Sat, 23 Sep 2023 20:03:59 GMT
content-type: text/html; charset=UTF-8
location: https://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc
set-cookie: AWSALB=vUI8Rwf9UifDlhB7NZXdpZ6ybIcNkqX2eYf6X2BsKKm+dm5bM4pDW19TqeKOCAX5PeCFNetzrjTvZmqqBk9PJQU44FIz270xCfjQFiGO+c5podWmi4wYZL/GQORQ; Expires=Sat, 30 Sep 2023 20:03:59 GMT; Path=/
AWSALBCORS=vUI8Rwf9UifDlhB7NZXdpZ6ybIcNkqX2eYf6X2BsKKm+dm5bM4pDW19TqeKOCAX5PeCFNetzrjTvZmqqBk9PJQU44FIz270xCfjQFiGO+c5podWmi4wYZL/GQORQ; Expires=Sat, 30 Sep 2023 20:03:59 GMT; Path=/; SameSite=None; Secure
vip_id=68396.47666-324687; expires=Tue, 26-Sep-2023 20:03:59 GMT; Max-Age=259200; path=/
server: Apache
X-Firefox-Spdy: h2
|
|
| static.cdn.co.no/videos/cl/gg/c33/img/arrw.png | 163.171.129.207 | 200 OK | 778 B |
URL GET HTTP/1.1static.cdn.co.no/videos/cl/gg/c33/img/arrw.png IP163.171.129.207:443 ASN#54994 QUANTILNETWORKS
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc CertificateIssuerLet's Encrypt Subjectstatic.cdn.co.no Fingerprint43:41:07:76:E5:7A:2F:C3:49:81:23:6C:BA:15:34:A6:9E:87:21:B6 ValidityFri, 01 Sep 2023 15:15:14 GMT - Thu, 30 Nov 2023 15:15:13 GMT
File typePNG image data, 23 x 32, 8-bit colormap, non-interlaced\012- data Hash2eab9ba0ad5871a0420346118f44bd05 5fbd567f5022c4d78ae654748cccd22e967241ea 49f782572e552b2998dd7784e94653ee5baaa555e23089d01b4b1c35364e4a97
GET /videos/cl/gg/c33/img/arrw.png HTTP/1.1
Host: static.cdn.co.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://joinlanders.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 20:04:01 GMT
Content-Type: image/png;charset=UTF-8
Content-Length: 778
Connection: keep-alive
Server: PWS/8.3.1.0.8
Accept-Ranges: bytes
ETag: "Fl-9Vn9QIsTXiuZUdIzM0i6WckHq"
Last-Modified: Mon, 06 Jun 2022 13:32:53 GMT
X-Reqid: 205024922427213020230628202109az3gthvX
Age: 13514
Via: 1.1 PSygldLON4ax12:8 (W), 1.1 PSygldLON2kt55:13 (W)
X-Px: ht PSygldLON2kt55LHR
X-Ws-Request-Id: 650f44b1_PSygldLON2hl59_48488-3856
|
|
| static.cdn.co.no/videos/cl/gg/c33/img/pointer.png | 163.171.129.207 | 200 OK | 3.8 kB |
URL GET HTTP/1.1static.cdn.co.no/videos/cl/gg/c33/img/pointer.png IP163.171.129.207:443 ASN#54994 QUANTILNETWORKS
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc CertificateIssuerLet's Encrypt Subjectstatic.cdn.co.no Fingerprint43:41:07:76:E5:7A:2F:C3:49:81:23:6C:BA:15:34:A6:9E:87:21:B6 ValidityFri, 01 Sep 2023 15:15:14 GMT - Thu, 30 Nov 2023 15:15:13 GMT
File typePNG image data, 32 x 29, 8-bit/color RGBA, non-interlaced\012- data Hash99f0ee95ccdbd0f3be1a8ca2795e563e 70e6e906918863c154a4ffe0f836d12b96d035aa 09a96807fc746932d21bf63ca57a6bf3ce2e9faa5db5b6cbe2d5eef38cd55416
GET /videos/cl/gg/c33/img/pointer.png HTTP/1.1
Host: static.cdn.co.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://joinlanders.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 20:04:01 GMT
Content-Type: image/png;charset=UTF-8
Content-Length: 3773
Connection: keep-alive
Server: PWS/8.3.1.0.8
Accept-Ranges: bytes
ETag: "FnDm6QaRiGPBVKT_4Pg20SuW0DWq"
Last-Modified: Mon, 06 Jun 2022 13:32:52 GMT
X-Reqid: 205024922427326020220622155335v9pAgBZW
Age: 13514
Via: 1.1 PSygldLON2ii12:9 (W), 1.1 PSygldLON2ew56:14 (W)
X-Px: ht PSygldLON2ew56LHR
X-Ws-Request-Id: 650f44b1_PSygldLON2hl59_46326-12556
|
|
| static.cdn.co.no/videos/cl/gg/c33/img/trphyP.png | 163.171.129.207 | 200 OK | 9.8 kB |
URL GET HTTP/1.1static.cdn.co.no/videos/cl/gg/c33/img/trphyP.png IP163.171.129.207:443 ASN#54994 QUANTILNETWORKS
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc CertificateIssuerLet's Encrypt Subjectstatic.cdn.co.no Fingerprint43:41:07:76:E5:7A:2F:C3:49:81:23:6C:BA:15:34:A6:9E:87:21:B6 ValidityFri, 01 Sep 2023 15:15:14 GMT - Thu, 30 Nov 2023 15:15:13 GMT
File typePNG image data, 100 x 86, 8-bit/color RGBA, non-interlaced\012- data Hash978d3aab8644d6ba5838378ae122cbc3 9c88667d41552a1cc514593750320aecf4506a7d 0c8a5176fcf53a239742e4a01a8472e24c0a1f1e71cd87c670edd6b78c906cf0
GET /videos/cl/gg/c33/img/trphyP.png HTTP/1.1
Host: static.cdn.co.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://joinlanders.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 20:04:01 GMT
Content-Type: image/png;charset=UTF-8
Content-Length: 9791
Connection: keep-alive
Server: PWS/8.3.1.0.8
Accept-Ranges: bytes
ETag: "FpyIZn1BVSocxRRZN1AyCuz0UGp9"
Last-Modified: Mon, 06 Jun 2022 13:32:53 GMT
X-Reqid: 205024922427219620230628201744wErDroFy
Age: 13514
Via: 1.1 PS-FRA-01E6z147:6 (W), 1.1 PS-LHR-01q9k95:17 (W)
X-Px: ht PS-LHR-01q9k95LHR
X-Ws-Request-Id: 650f44b1_PSygldLON2hl59_46416-20428
|
|
| static.cdn.co.no/videos/cl/gg/c33/img/heartP.png | 163.171.129.207 | 200 OK | 10 kB |
URL GET HTTP/1.1static.cdn.co.no/videos/cl/gg/c33/img/heartP.png IP163.171.129.207:443 ASN#54994 QUANTILNETWORKS
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc CertificateIssuerLet's Encrypt Subjectstatic.cdn.co.no Fingerprint43:41:07:76:E5:7A:2F:C3:49:81:23:6C:BA:15:34:A6:9E:87:21:B6 ValidityFri, 01 Sep 2023 15:15:14 GMT - Thu, 30 Nov 2023 15:15:13 GMT
File typePNG image data, 100 x 93, 8-bit/color RGBA, non-interlaced\012- data Hash23a94294b0456edd7aa542bf2e04ff85 44ff227f1861da70eaf500922079ce70ebe5af34 a4a3f147e514ab8d0a416d3091b6eed3e0e4e2f1f58010f48c7d74daa47ef583
GET /videos/cl/gg/c33/img/heartP.png HTTP/1.1
Host: static.cdn.co.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://joinlanders.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 20:04:01 GMT
Content-Type: image/png;charset=UTF-8
Content-Length: 10098
Connection: keep-alive
Server: PWS/8.3.1.0.8
Accept-Ranges: bytes
ETag: "FkT_In8YYdpw6vUAkiB5znDr5a80"
Last-Modified: Mon, 06 Jun 2022 13:32:53 GMT
X-Reqid: 2050249224272185202306282021099UELaUoh
Age: 45287
Via: 1.1 kf148:7 (W), 1.1 PSygldLON2kt55:9 (W)
X-Px: ht PSygldLON2kt55LHR
X-Ws-Request-Id: 650f44b1_PSygldLON2hl59_46114-2556
|
|
| static.cdn.co.no/videos/cl/gg/c33/img/dsk/bg.png | 163.171.129.207 | 200 OK | 81 kB |
URL GET HTTP/1.1static.cdn.co.no/videos/cl/gg/c33/img/dsk/bg.png IP163.171.129.207:443 ASN#54994 QUANTILNETWORKS
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc CertificateIssuerLet's Encrypt Subjectstatic.cdn.co.no Fingerprint43:41:07:76:E5:7A:2F:C3:49:81:23:6C:BA:15:34:A6:9E:87:21:B6 ValidityFri, 01 Sep 2023 15:15:14 GMT - Thu, 30 Nov 2023 15:15:13 GMT
File typePNG image data, 1913 x 1275, 8-bit colormap, non-interlaced\012- data Hasheb901aef88870c9e5343daf6e2fa21ef b098f8dbf834d477b7dd34128a1672fb2ca5dc10 ca68d5fd06e5a6354fb46c5791de95d95ce9227df7d6da3069b55b32c590c40d
GET /videos/cl/gg/c33/img/dsk/bg.png HTTP/1.1
Host: static.cdn.co.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://joinlanders.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 20:04:01 GMT
Content-Type: image/png;charset=UTF-8
Content-Length: 81390
Connection: keep-alive
Server: PWS/8.3.1.0.8
Accept-Ranges: bytes
ETag: "FrCY-Nv4NNR3t900EooWcvsspdwQ"
Last-Modified: Mon, 06 Jun 2022 13:36:52 GMT
X-Reqid: 205024922427226020230628202512YXRTE5AV
Age: 19618
Via: 1.1 PSygldLON4ev13:10 (W), 1.1 PS-LHR-01q9k95:0 (W)
X-Px: ht PS-LHR-01q9k95LHR
X-Ws-Request-Id: 650f44b1_PSygldLON2hl59_46130-32840
|
|
| static.cdn.co.no/videos/cl/gg/c33/img/presentP.png | 163.171.129.207 | 200 OK | 14 kB |
URL GET HTTP/1.1static.cdn.co.no/videos/cl/gg/c33/img/presentP.png IP163.171.129.207:443 ASN#54994 QUANTILNETWORKS
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc CertificateIssuerLet's Encrypt Subjectstatic.cdn.co.no Fingerprint43:41:07:76:E5:7A:2F:C3:49:81:23:6C:BA:15:34:A6:9E:87:21:B6 ValidityFri, 01 Sep 2023 15:15:14 GMT - Thu, 30 Nov 2023 15:15:13 GMT
File typePNG image data, 100 x 119, 8-bit/color RGBA, non-interlaced\012- data Hashea5f2eda50addd4f7e9029e4a79587d1 a82950c31fb4860410c82e64141e1fd363f507b4 1a49e789eb676b05f175ebdf00d25209c21d6e07680c14d57a932a01c7ce908f
GET /videos/cl/gg/c33/img/presentP.png HTTP/1.1
Host: static.cdn.co.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://joinlanders.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 20:04:01 GMT
Content-Type: image/png;charset=UTF-8
Content-Length: 13941
Connection: keep-alive
Server: PWS/8.3.1.0.8
Accept-Ranges: bytes
ETag: "FqgpUMMftIYEEMguZBQeH9Nj9Qe0"
Last-Modified: Mon, 06 Jun 2022 13:32:52 GMT
X-Reqid: 2050249224272274202306282017456lItX9FD
Age: 13514
Via: 1.1 PS-FRA-01E6z147:7 (W), 1.1 PS-LHR-01q9k95:3 (W)
X-Px: ht PS-LHR-01q9k95LHR
X-Ws-Request-Id: 650f44b1_PSygldLON2hl59_48488-3860
|
|
| static.cdn.co.no/videos/cl/gg/c33/img/anicon21.png | 163.171.129.207 | 200 OK | 2.6 kB |
URL GET HTTP/1.1static.cdn.co.no/videos/cl/gg/c33/img/anicon21.png IP163.171.129.207:443 ASN#54994 QUANTILNETWORKS
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc CertificateIssuerLet's Encrypt Subjectstatic.cdn.co.no Fingerprint43:41:07:76:E5:7A:2F:C3:49:81:23:6C:BA:15:34:A6:9E:87:21:B6 ValidityFri, 01 Sep 2023 15:15:14 GMT - Thu, 30 Nov 2023 15:15:13 GMT
File typePNG image data, 100 x 99, 8-bit colormap, non-interlaced\012- data Hash65ff4bedabf2644614685f40a2d76ab0 ee47ce6e0bd3d0b9331edae6a5cfe8312269c2b6 add7d389cc98b486494647c7b1a83783845995f28f4b746b034ae95f2693bf04
GET /videos/cl/gg/c33/img/anicon21.png HTTP/1.1
Host: static.cdn.co.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://joinlanders.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 20:04:01 GMT
Content-Type: image/png;charset=UTF-8
Content-Length: 2608
Connection: keep-alive
Server: PWS/8.3.1.0.8
Accept-Ranges: bytes
ETag: "Fu5Hzm4L09C5Mx7a5qXP6DEiacK2"
Last-Modified: Mon, 06 Jun 2022 13:32:53 GMT
X-Reqid: 205024922427215120230628201758PJN1NPcT
Age: 13514
Via: 1.1 PSygldLON4ax12:5 (W), 1.1 PSygldLON2hl59:5 (W)
X-Px: ht PSygldLON2hl59LHR
X-Ws-Request-Id: 650f44b1_PSygldLON2hl59_46326-12557
|
|
| static.cdn.co.no/videos/cl/gg/c33/img/opt1.jpg | 163.171.129.207 | 200 OK | 13 kB |
URL GET HTTP/1.1static.cdn.co.no/videos/cl/gg/c33/img/opt1.jpg IP163.171.129.207:443 ASN#54994 QUANTILNETWORKS
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc CertificateIssuerLet's Encrypt Subjectstatic.cdn.co.no Fingerprint43:41:07:76:E5:7A:2F:C3:49:81:23:6C:BA:15:34:A6:9E:87:21:B6 ValidityFri, 01 Sep 2023 15:15:14 GMT - Thu, 30 Nov 2023 15:15:13 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 200x350, components 3\012- data Hash0a15412e6a65b5a780e495bd9585c198 8c3d9c37176e13deab697de5db656be2454310aa 1749e53d28a7b94bf1b24658805c35844dd18928bbfacc7bb87811dba332ffde
GET /videos/cl/gg/c33/img/opt1.jpg HTTP/1.1
Host: static.cdn.co.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://joinlanders.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 20:04:01 GMT
Content-Type: image/jpeg;charset=UTF-8
Content-Length: 12899
Connection: keep-alive
Server: PWS/8.3.1.0.8
Accept-Ranges: bytes
ETag: "Fow9nDcXbhPeq2l95dtla-JFQxCq"
Last-Modified: Mon, 06 Jun 2022 13:32:52 GMT
X-Reqid: 205024922427215720230628201745hIy13kdH
Age: 13513
Via: 1.1 PS-FRA-018SR149:4 (W), 1.1 PS-LHR-01q9k95:15 (W)
X-Px: ht PS-LHR-01q9k95LHR
X-Ws-Request-Id: 650f44b1_PSygldLON2hl59_46114-2559
|
|
| static.cdn.co.no/videos/cl/gg/c33/img/anicon31.png | 163.171.129.207 | 200 OK | 13 kB |
URL GET HTTP/1.1static.cdn.co.no/videos/cl/gg/c33/img/anicon31.png IP163.171.129.207:443 ASN#54994 QUANTILNETWORKS
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc CertificateIssuerLet's Encrypt Subjectstatic.cdn.co.no Fingerprint43:41:07:76:E5:7A:2F:C3:49:81:23:6C:BA:15:34:A6:9E:87:21:B6 ValidityFri, 01 Sep 2023 15:15:14 GMT - Thu, 30 Nov 2023 15:15:13 GMT
File typePNG image data, 100 x 92, 8-bit/color RGBA, non-interlaced\012- data Hash41fcf5d8f47d9c52c1d021e3619afe43 4e3113e01258b1dbace06660a37a54801a04a0c0 fa3e600cbd5263a585075503c69669877006040a8c9a032897db9e0fe0f6451a
GET /videos/cl/gg/c33/img/anicon31.png HTTP/1.1
Host: static.cdn.co.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://joinlanders.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 20:04:01 GMT
Content-Type: image/png;charset=UTF-8
Content-Length: 13014
Connection: keep-alive
Server: PWS/8.3.1.0.8
Accept-Ranges: bytes
ETag: "Fk4xE-ASWLHbrOBmYKN6VIAaBKDA"
Last-Modified: Mon, 06 Jun 2022 13:32:53 GMT
X-Reqid: 205024922427318520220607110427M9z88yLh
Age: 13513
Via: 1.1 PSygldLON4ax12:5 (W), 1.1 PSygldLON2kt55:14 (W)
X-Px: ht PSygldLON2kt55LHR
X-Ws-Request-Id: 650f44b1_PSygldLON2hl59_46416-20430
|
|
| static.cdn.co.no/videos/cl/gg/c33/img/opt2.jpg | 163.171.129.207 | 200 OK | 16 kB |
URL GET HTTP/1.1static.cdn.co.no/videos/cl/gg/c33/img/opt2.jpg IP163.171.129.207:443 ASN#54994 QUANTILNETWORKS
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc CertificateIssuerLet's Encrypt Subjectstatic.cdn.co.no Fingerprint43:41:07:76:E5:7A:2F:C3:49:81:23:6C:BA:15:34:A6:9E:87:21:B6 ValidityFri, 01 Sep 2023 15:15:14 GMT - Thu, 30 Nov 2023 15:15:13 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 200x350, components 3\012- data Hashd05c3b54434e62f161b586633314a5b7 5d6dea1480594b919482def04e68c71182367747 f7d7bea8be93931814d379479048a3544fadda60f03a8fe3ac96b1ae6d8f0e04
GET /videos/cl/gg/c33/img/opt2.jpg HTTP/1.1
Host: static.cdn.co.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://joinlanders.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 20:04:01 GMT
Content-Type: image/jpeg;charset=UTF-8
Content-Length: 16453
Connection: keep-alive
Server: PWS/8.3.1.0.8
Accept-Ranges: bytes
ETag: "Fl1t6hSAWUuRlILe8E5oxxGCNndH"
Last-Modified: Mon, 06 Jun 2022 13:32:52 GMT
X-Reqid: 205024922427218520230628202109NV9gHT1z
Age: 13513
Via: 1.1 PSygldLON4ax12:9 (W), 1.1 PSygldLON2kt55:1 (W)
X-Px: ht PSygldLON2kt55LHR
X-Ws-Request-Id: 650f44b1_PSygldLON2hl59_46130-32842
|
|
| static.cdn.co.no/videos/cl/gg/c33/img/opt3.jpg | 163.171.129.207 | 200 OK | 14 kB |
URL GET HTTP/1.1static.cdn.co.no/videos/cl/gg/c33/img/opt3.jpg IP163.171.129.207:443 ASN#54994 QUANTILNETWORKS
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc CertificateIssuerLet's Encrypt Subjectstatic.cdn.co.no Fingerprint43:41:07:76:E5:7A:2F:C3:49:81:23:6C:BA:15:34:A6:9E:87:21:B6 ValidityFri, 01 Sep 2023 15:15:14 GMT - Thu, 30 Nov 2023 15:15:13 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 200x350, components 3\012- data Hash03daad3fa9637181cb2c1bf16212822b d8f383a2222bfae5f83b2eaf19dfdcdedbc2d577 2ad8e80a20b9ecceeefbe7d442e570d080cc492957816e7db50cd45763bb767a
GET /videos/cl/gg/c33/img/opt3.jpg HTTP/1.1
Host: static.cdn.co.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://joinlanders.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 20:04:01 GMT
Content-Type: image/jpeg;charset=UTF-8
Content-Length: 14524
Connection: keep-alive
Server: PWS/8.3.1.0.8
Accept-Ranges: bytes
ETag: "Ftjzg6IiK_rl-Dsurxnf3N7bwtV3"
Last-Modified: Mon, 06 Jun 2022 13:32:52 GMT
X-Reqid: 205024922427215820230628201758rZdOuMf5
Age: 13513
Via: 1.1 PSygldLON4ev13:1 (W), 1.1 PSygldLON2hl59:0 (W)
X-Px: ht PSygldLON2hl59LHR
X-Ws-Request-Id: 650f44b1_PSygldLON2hl59_48488-3863
|
|
| static.cdn.co.no/videos/cl/gg/c33/img/anicon41.png | 163.171.129.207 | 200 OK | 3.8 kB |
URL GET HTTP/1.1static.cdn.co.no/videos/cl/gg/c33/img/anicon41.png IP163.171.129.207:443 ASN#54994 QUANTILNETWORKS
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc CertificateIssuerLet's Encrypt Subjectstatic.cdn.co.no Fingerprint43:41:07:76:E5:7A:2F:C3:49:81:23:6C:BA:15:34:A6:9E:87:21:B6 ValidityFri, 01 Sep 2023 15:15:14 GMT - Thu, 30 Nov 2023 15:15:13 GMT
File typePNG image data, 100 x 100, 8-bit colormap, non-interlaced\012- data Hashb4f11f4309d44648dd446c90a158af77 8baf001fd68485d830b7e349d25ef95a1ef35d44 1be1aeb3acdf0a8eca058d0c56a549639c57cc97be1aa12cd70d575bb0322f3c
GET /videos/cl/gg/c33/img/anicon41.png HTTP/1.1
Host: static.cdn.co.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://joinlanders.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 20:04:01 GMT
Content-Type: image/png;charset=UTF-8
Content-Length: 3788
Connection: keep-alive
Server: PWS/8.3.1.0.8
Accept-Ranges: bytes
ETag: "FouvAB_WhIXYMLfjSdJe-Voe811E"
Last-Modified: Mon, 06 Jun 2022 13:32:52 GMT
X-Reqid: 205024922427327420220607110428UDteSdGu
Age: 13512
Via: 1.1 PSygldLON4ev13:10 (W), 1.1 PS-LHR-01q9k95:17 (W)
X-Px: ht PS-LHR-01q9k95LHR
X-Ws-Request-Id: 650f44b1_PSygldLON2hl59_46326-12559
|
|
| static.cdn.co.no/videos/cl/gg/c33/img/opt4.jpg | 163.171.129.207 | 200 OK | 18 kB |
URL GET HTTP/1.1static.cdn.co.no/videos/cl/gg/c33/img/opt4.jpg IP163.171.129.207:443 ASN#54994 QUANTILNETWORKS
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc CertificateIssuerLet's Encrypt Subjectstatic.cdn.co.no Fingerprint43:41:07:76:E5:7A:2F:C3:49:81:23:6C:BA:15:34:A6:9E:87:21:B6 ValidityFri, 01 Sep 2023 15:15:14 GMT - Thu, 30 Nov 2023 15:15:13 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 200x350, components 3\012- data Hashc288bc2ac38617391bc7600d89c034ee 803fc0a8b757412fe560f1e18c4586e084ef7455 8d00c726b4f875dc74d4caccc8106d55affd97162e6fc276740831aaff85c25d
GET /videos/cl/gg/c33/img/opt4.jpg HTTP/1.1
Host: static.cdn.co.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://joinlanders.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 20:04:01 GMT
Content-Type: image/jpeg;charset=UTF-8
Content-Length: 18507
Connection: keep-alive
Server: PWS/8.3.1.0.8
Accept-Ranges: bytes
ETag: "FoA_wKi3V0Ev5WDx4YxFhuCE73RV"
Last-Modified: Mon, 06 Jun 2022 13:32:52 GMT
X-Reqid: 205024922427319620220622161234mkPEYtac
Age: 13512
Via: 1.1 PSygldLON2xi13:11 (W), 1.1 PSygldLON2kt55:22 (W)
X-Px: ht PSygldLON2kt55LHR
X-Ws-Request-Id: 650f44b1_PSygldLON2hl59_46114-2562
|
|
| static.cdn.co.no/videos/cl/gg/c33/media/dsk/bg1.mp4 | 163.171.129.207 | 206 Partial Content | 386 kB |
URL GET HTTP/1.1static.cdn.co.no/videos/cl/gg/c33/media/dsk/bg1.mp4 IP163.171.129.207:443 ASN#54994 QUANTILNETWORKS
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc CertificateIssuerLet's Encrypt Subjectstatic.cdn.co.no Fingerprint43:41:07:76:E5:7A:2F:C3:49:81:23:6C:BA:15:34:A6:9E:87:21:B6 ValidityFri, 01 Sep 2023 15:15:14 GMT - Thu, 30 Nov 2023 15:15:13 GMT
File typeISO Media, MP4 v2 [ISO 14496-14]\012- data Size386 kB (386197 bytes) Hash825f31c797072b720fa62de8aafaf042 9fa073a99c1d9f6a660037d89e649bfe1e5b87c5 74b83ceb8124e0a2ed10912a8822e55627c6b67b8b6f1345f0df9ec018be74c1
GET /videos/cl/gg/c33/media/dsk/bg1.mp4 HTTP/1.1
Host: static.cdn.co.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://joinlanders.com/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 206 Partial Content
Date: Sat, 23 Sep 2023 20:04:01 GMT
Content-Type: video/mp4;charset=UTF-8
Content-Length: 386197
Connection: keep-alive
Server: PWS/8.3.1.0.8
Accept-Ranges: bytes
ETag: "Fp-gc6mcHZ9qZgA32J5km_4eW4fF"
Last-Modified: Mon, 06 Jun 2022 13:35:20 GMT
X-Reqid: 205024922427215920230628202110aZ8INKFW
Content-Range: bytes 0-386196/386197
Age: 61490
Via: 1.1 PSygldLON4zd14:8 (W), 1.1 PSygldLON2ew56:0 (W)
X-Px: ht PSygldLON2ew56LHR
X-Ws-Request-Id: 650f44b1_PSygldLON2hl59_46114-2553
|
|
| static.cdn.co.no/videos/cl/gg/c33/img/opt5.jpg | 163.171.129.207 | 200 OK | 19 kB |
URL GET HTTP/1.1static.cdn.co.no/videos/cl/gg/c33/img/opt5.jpg IP163.171.129.207:443 ASN#54994 QUANTILNETWORKS
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc CertificateIssuerLet's Encrypt Subjectstatic.cdn.co.no Fingerprint43:41:07:76:E5:7A:2F:C3:49:81:23:6C:BA:15:34:A6:9E:87:21:B6 ValidityFri, 01 Sep 2023 15:15:14 GMT - Thu, 30 Nov 2023 15:15:13 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 200x350, components 3\012- data Hash84a919486095a1dda73274b9689d8ac9 7fed0927406b035055f1b2406dd7c9318e41ee3c c76f0735951445500c4cee9f5734940ce2ccc15d03818736b1056aac900a58b4
GET /videos/cl/gg/c33/img/opt5.jpg HTTP/1.1
Host: static.cdn.co.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://joinlanders.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 20:04:01 GMT
Content-Type: image/jpeg;charset=UTF-8
Content-Length: 19298
Connection: keep-alive
Server: PWS/8.3.1.0.8
Accept-Ranges: bytes
ETag: "Fn_tCSdAawNQVfGyQG3XyTGOQe48"
Last-Modified: Mon, 06 Jun 2022 13:32:52 GMT
X-Reqid: 205024922427321020220621162223rybyTXGx
Age: 13512
Via: 1.1 PSygldLON2ii12:8 (W), 1.1 PSygldLON2kt55:5 (W)
X-Px: ht PSygldLON2kt55LHR
X-Ws-Request-Id: 650f44b1_PSygldLON2hl59_46416-20435
|
|
| static.cdn.co.no/videos/cl/gg/c33/img/opt6.jpg | 163.171.129.207 | 200 OK | 18 kB |
URL GET HTTP/1.1static.cdn.co.no/videos/cl/gg/c33/img/opt6.jpg IP163.171.129.207:443 ASN#54994 QUANTILNETWORKS
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc CertificateIssuerLet's Encrypt Subjectstatic.cdn.co.no Fingerprint43:41:07:76:E5:7A:2F:C3:49:81:23:6C:BA:15:34:A6:9E:87:21:B6 ValidityFri, 01 Sep 2023 15:15:14 GMT - Thu, 30 Nov 2023 15:15:13 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 200x350, components 3\012- data Hashb433430b081bdcc07a3d23a83dbf244a 4a61211258e294b9a5866cbd3aeb5bdb5ef138d6 a315648b07c9782746eac460c4af0bad1eebc9d3f2dea54daf9fb06e5f98e032
GET /videos/cl/gg/c33/img/opt6.jpg HTTP/1.1
Host: static.cdn.co.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://joinlanders.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 20:04:01 GMT
Content-Type: image/jpeg;charset=UTF-8
Content-Length: 18074
Connection: keep-alive
Server: PWS/8.3.1.0.8
Accept-Ranges: bytes
ETag: "FkphIRJY4pS5pYZsvTrrW9te8TjW"
Last-Modified: Mon, 06 Jun 2022 13:32:52 GMT
X-Reqid: 2050249224272185202306281143042LAhIlCt
Age: 13511
Via: 1.1 kf160:7 (W), 1.1 PSygldLON2kt55:22 (W)
X-Px: ht PSygldLON2kt55LHR
X-Ws-Request-Id: 650f44b1_PSygldLON2hl59_46130-32845
|
|
| static.cdn.co.no/videos/cl/gg/c33/img/anicon51.png | 163.171.129.207 | 200 OK | 4.2 kB |
URL GET HTTP/1.1static.cdn.co.no/videos/cl/gg/c33/img/anicon51.png IP163.171.129.207:443 ASN#54994 QUANTILNETWORKS
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc CertificateIssuerLet's Encrypt Subjectstatic.cdn.co.no Fingerprint43:41:07:76:E5:7A:2F:C3:49:81:23:6C:BA:15:34:A6:9E:87:21:B6 ValidityFri, 01 Sep 2023 15:15:14 GMT - Thu, 30 Nov 2023 15:15:13 GMT
File typePNG image data, 100 x 220, 8-bit colormap, non-interlaced\012- data Hash5a4056e2ed2c216f9673c726fbd3e25c 88b8593aa98b8b92b71ba2f6ca51911ea898d8dc 8b7e8e415a6771d669cd461cae53c88cc35912945f0fc3471bc629f78e06c3d4
GET /videos/cl/gg/c33/img/anicon51.png HTTP/1.1
Host: static.cdn.co.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://joinlanders.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 20:04:01 GMT
Content-Type: image/png;charset=UTF-8
Content-Length: 4172
Connection: keep-alive
Server: PWS/8.3.1.0.8
Accept-Ranges: bytes
ETag: "Foi4WTqpi4uStxui9spRkR6omNjc"
Last-Modified: Mon, 06 Jun 2022 13:38:18 GMT
X-Reqid: 20502492242732182022060711042821BZkveR
Age: 13512
Via: 1.1 PSygldLON4ev13:1 (W), 1.1 PSygldLON2hl59:20 (W)
X-Px: ht PSygldLON2hl59LHR
X-Ws-Request-Id: 650f44b1_PSygldLON2hl59_48488-3866
|
|
| static.cdn.co.no/videos/cl/gg/c33/img/opt7.jpg | 163.171.129.207 | 200 OK | 14 kB |
URL GET HTTP/1.1static.cdn.co.no/videos/cl/gg/c33/img/opt7.jpg IP163.171.129.207:443 ASN#54994 QUANTILNETWORKS
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc CertificateIssuerLet's Encrypt Subjectstatic.cdn.co.no Fingerprint43:41:07:76:E5:7A:2F:C3:49:81:23:6C:BA:15:34:A6:9E:87:21:B6 ValidityFri, 01 Sep 2023 15:15:14 GMT - Thu, 30 Nov 2023 15:15:13 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 200x350, components 3\012- data Hash2aa59b58e5684684a27be9d286a226cd dbf951e65a6f130ef15c1d51258c7c4d79d67999 e29d9ca8c3071de8baa1471cfa222cd6e8bd9cdac182897e626eb147f832b0c2
GET /videos/cl/gg/c33/img/opt7.jpg HTTP/1.1
Host: static.cdn.co.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://joinlanders.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 20:04:01 GMT
Content-Type: image/jpeg;charset=UTF-8
Content-Length: 13820
Connection: keep-alive
Server: PWS/8.3.1.0.8
Accept-Ranges: bytes
ETag: "Ftv5UeZabxMO8VwdUSWMfE151nmZ"
Last-Modified: Mon, 06 Jun 2022 13:38:12 GMT
X-Reqid: 2050249224273260202206221300287pNRufXp
Age: 13511
Via: 1.1 PSygldLON2xi13:11 (W), 1.1 PSygldLON2hl59:13 (W)
X-Px: ht PSygldLON2hl59LHR
X-Ws-Request-Id: 650f44b1_PSygldLON2hl59_46326-12560
|
|
| static.cdn.co.no/videos/cl/gg/c33/img/opt8.jpg | 163.171.129.207 | 200 OK | 14 kB |
URL GET HTTP/1.1static.cdn.co.no/videos/cl/gg/c33/img/opt8.jpg IP163.171.129.207:443 ASN#54994 QUANTILNETWORKS
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc CertificateIssuerLet's Encrypt Subjectstatic.cdn.co.no Fingerprint43:41:07:76:E5:7A:2F:C3:49:81:23:6C:BA:15:34:A6:9E:87:21:B6 ValidityFri, 01 Sep 2023 15:15:14 GMT - Thu, 30 Nov 2023 15:15:13 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 200x350, components 3\012- data Hash4c5dac5837621bdd12b7274f66759acf 7b079ccc0cfd2ce20a31c37049e1cc2e7cf19c0f 56130ff703373ccbad99f95e3859953b551815af708334dbc747081cb00e1cb3
GET /videos/cl/gg/c33/img/opt8.jpg HTTP/1.1
Host: static.cdn.co.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://joinlanders.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 20:04:01 GMT
Content-Type: image/jpeg;charset=UTF-8
Content-Length: 13807
Connection: keep-alive
Server: PWS/8.3.1.0.8
Accept-Ranges: bytes
ETag: "FnsHnMwM_SziCjHDcEnhzC588ZwP"
Last-Modified: Mon, 06 Jun 2022 13:32:52 GMT
X-Reqid: 2050249224273184202206071104292I34ryC6
Age: 13511
Via: 1.1 PSygldLON4ev13:3 (W), 1.1 PSygldLON2hl59:2 (W)
X-Px: ht PSygldLON2hl59LHR
X-Ws-Request-Id: 650f44b1_PSygldLON2hl59_46114-2569
|
|
| static.cdn.co.no/videos/cl/gg/c33/img/opt9.jpg | 163.171.129.207 | 200 OK | 15 kB |
URL GET HTTP/1.1static.cdn.co.no/videos/cl/gg/c33/img/opt9.jpg IP163.171.129.207:443 ASN#54994 QUANTILNETWORKS
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc CertificateIssuerLet's Encrypt Subjectstatic.cdn.co.no Fingerprint43:41:07:76:E5:7A:2F:C3:49:81:23:6C:BA:15:34:A6:9E:87:21:B6 ValidityFri, 01 Sep 2023 15:15:14 GMT - Thu, 30 Nov 2023 15:15:13 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 200x350, components 3\012- data Hashebe522233af6db34eb4dd4e7dc87de0f b025b9f02ca72bb06d03f6fbaa4b73271f407103 ac5301cd1ae80c6c5c2cac7f0a06deacd85e38ae586ed84d957f03e5c6d94f83
GET /videos/cl/gg/c33/img/opt9.jpg HTTP/1.1
Host: static.cdn.co.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://joinlanders.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 20:04:01 GMT
Content-Type: image/jpeg;charset=UTF-8
Content-Length: 14809
Connection: keep-alive
Server: PWS/8.3.1.0.8
Accept-Ranges: bytes
ETag: "FrAlufAspyuwbQP2-6pLcycfQHED"
Last-Modified: Mon, 06 Jun 2022 13:32:51 GMT
X-Reqid: 205024922427318520220607110429LIlYVBzc
Age: 13510
Via: 1.1 PSygldLON4ax12:10 (W), 1.1 PSygldLON2kt55:6 (W)
X-Px: ht PSygldLON2kt55LHR
X-Ws-Request-Id: 650f44b1_PSygldLON2hl59_46114-2574
|
|
| static.cdn.co.no/videos/cl/gg/c33/img/anicon61.png | 163.171.129.207 | 200 OK | 4.9 kB |
URL GET HTTP/1.1static.cdn.co.no/videos/cl/gg/c33/img/anicon61.png IP163.171.129.207:443 ASN#54994 QUANTILNETWORKS
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc CertificateIssuerLet's Encrypt Subjectstatic.cdn.co.no Fingerprint43:41:07:76:E5:7A:2F:C3:49:81:23:6C:BA:15:34:A6:9E:87:21:B6 ValidityFri, 01 Sep 2023 15:15:14 GMT - Thu, 30 Nov 2023 15:15:13 GMT
File typePNG image data, 100 x 372, 8-bit colormap, non-interlaced\012- data Hash84827dde6c15b340d2d10d115454e7ec d0660e58869559dd2fa87feee244e8662c01a8d8 2877d02c4153a5c2edf32a63d426485b2a43efe5b9dd497a092d263312fdbc0e
GET /videos/cl/gg/c33/img/anicon61.png HTTP/1.1
Host: static.cdn.co.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://joinlanders.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 20:04:01 GMT
Content-Type: image/png;charset=UTF-8
Content-Length: 4909
Connection: keep-alive
Server: PWS/8.3.1.0.8
Accept-Ranges: bytes
ETag: "FtBmDliGlVndL6h_7uJE6GYsAajY"
Last-Modified: Mon, 06 Jun 2022 13:32:51 GMT
X-Reqid: 205024922427326020220622134037KwaIypmw
Age: 13510
Via: 1.1 PSygldLON2ii12:10 (W), 1.1 PS-LHR-01q9k95:2 (W)
X-Px: ht PS-LHR-01q9k95LHR
X-Ws-Request-Id: 650f44b1_PSygldLON2hl59_46416-20437
|
|
| static.cdn.co.no/videos/cl/gg/c33/img/opt12.jpg | 163.171.129.207 | 200 OK | 11 kB |
URL GET HTTP/1.1static.cdn.co.no/videos/cl/gg/c33/img/opt12.jpg IP163.171.129.207:443 ASN#54994 QUANTILNETWORKS
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc CertificateIssuerLet's Encrypt Subjectstatic.cdn.co.no Fingerprint43:41:07:76:E5:7A:2F:C3:49:81:23:6C:BA:15:34:A6:9E:87:21:B6 ValidityFri, 01 Sep 2023 15:15:14 GMT - Thu, 30 Nov 2023 15:15:13 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 200x350, components 3\012- data Hash7fb021a130cd7a33070322da238e3fcd 9e5c733611b3760e5944408b53681cd927a4fee6 d9bebf4ea468b6b1dda630bcf9df05b1f79a26ed1423e4f274500bfce1589a05
GET /videos/cl/gg/c33/img/opt12.jpg HTTP/1.1
Host: static.cdn.co.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://joinlanders.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 20:04:01 GMT
Content-Type: image/jpeg;charset=UTF-8
Content-Length: 11405
Connection: keep-alive
Server: PWS/8.3.1.0.8
Accept-Ranges: bytes
ETag: "Fp5cczYRs3YOWURAi1NoHNknpP7m"
Last-Modified: Mon, 06 Jun 2022 13:32:52 GMT
X-Reqid: 2050249224273272202206071104299YKGhPYS
Age: 13510
Via: 1.1 PSygldLON4ax12:8 (W), 1.1 PSygldLON2hl59:7 (W)
X-Px: ht PSygldLON2hl59LHR
X-Ws-Request-Id: 650f44b1_PSygldLON2hl59_46326-12562
|
|
| static.cdn.co.no/videos/cl/gg/c33/img/opt10.jpg | 163.171.129.207 | 200 OK | 11 kB |
URL GET HTTP/1.1static.cdn.co.no/videos/cl/gg/c33/img/opt10.jpg IP163.171.129.207:443 ASN#54994 QUANTILNETWORKS
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc CertificateIssuerLet's Encrypt Subjectstatic.cdn.co.no Fingerprint43:41:07:76:E5:7A:2F:C3:49:81:23:6C:BA:15:34:A6:9E:87:21:B6 ValidityFri, 01 Sep 2023 15:15:14 GMT - Thu, 30 Nov 2023 15:15:13 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 200x350, components 3\012- data Hash4250567c8859a064f270184829de6e1b a495341845b1229b5245fcfdcf7778645106af18 89d11cd10515df1f9016d4b67ffb292f57525cccdb3f48d39f195ef50c18537d
GET /videos/cl/gg/c33/img/opt10.jpg HTTP/1.1
Host: static.cdn.co.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://joinlanders.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 20:04:01 GMT
Content-Type: image/jpeg;charset=UTF-8
Content-Length: 11299
Connection: keep-alive
Server: PWS/8.3.1.0.8
Accept-Ranges: bytes
ETag: "FqSVNBhFsSKbUkX8_c93eGRRBq8Y"
Last-Modified: Mon, 06 Jun 2022 13:32:52 GMT
X-Reqid: 205024922427227320230628202110ZuUczQKq
Age: 13510
Via: 1.1 PSygldLON4ax12:6 (W), 1.1 PSygldLON2kt55:18 (W)
X-Px: ht PSygldLON2kt55LHR
X-Ws-Request-Id: 650f44b1_PSygldLON2hl59_46130-32851
|
|
| static.cdn.co.no/videos/cl/gg/c33/img/opt11.jpg | 163.171.129.207 | 200 OK | 9.2 kB |
URL GET HTTP/1.1static.cdn.co.no/videos/cl/gg/c33/img/opt11.jpg IP163.171.129.207:443 ASN#54994 QUANTILNETWORKS
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc CertificateIssuerLet's Encrypt Subjectstatic.cdn.co.no Fingerprint43:41:07:76:E5:7A:2F:C3:49:81:23:6C:BA:15:34:A6:9E:87:21:B6 ValidityFri, 01 Sep 2023 15:15:14 GMT - Thu, 30 Nov 2023 15:15:13 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 200x350, components 3\012- data Hashfffa35026afb5b0f211c4592ff2ac048 36e17e772cd8aaa8b65aa27694c601f470fc8fac 455675f08098fffc1bd46944b4009a2aa0482f4b7e89433377da3bc5d2be7e44
GET /videos/cl/gg/c33/img/opt11.jpg HTTP/1.1
Host: static.cdn.co.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://joinlanders.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 20:04:01 GMT
Content-Type: image/jpeg;charset=UTF-8
Content-Length: 9197
Connection: keep-alive
Server: PWS/8.3.1.0.8
Accept-Ranges: bytes
ETag: "Fjbhfncs2KqotlqidpTGAfRw_I-s"
Last-Modified: Mon, 06 Jun 2022 13:32:52 GMT
X-Reqid: 205024922427318420230304130216v9KIf5ng
Age: 13510
Via: 1.1 PSygldLON4zd14:4 (W), 1.1 PSygldLON2kt55:22 (W)
X-Px: ht PSygldLON2kt55LHR
X-Ws-Request-Id: 650f44b1_PSygldLON2hl59_48488-3874
|
|
| static.cdn.co.no/videos/cl/gg/c33/img/anicon12.png | 163.171.129.207 | 200 OK | 7.1 kB |
URL GET HTTP/1.1static.cdn.co.no/videos/cl/gg/c33/img/anicon12.png IP163.171.129.207:443 ASN#54994 QUANTILNETWORKS
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc CertificateIssuerLet's Encrypt Subjectstatic.cdn.co.no Fingerprint43:41:07:76:E5:7A:2F:C3:49:81:23:6C:BA:15:34:A6:9E:87:21:B6 ValidityFri, 01 Sep 2023 15:15:14 GMT - Thu, 30 Nov 2023 15:15:13 GMT
File typePNG image data, 100 x 90, 8-bit/color RGBA, non-interlaced\012- data Hash87522070500d3f423b7b7d83b68bec69 ecd099617093fa92312aeafe10fec5474f5120f3 8d338c95a017b36273e555a6ccbbfbbc22d3396ca438cc01cd1a9452aaac48e8
GET /videos/cl/gg/c33/img/anicon12.png HTTP/1.1
Host: static.cdn.co.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://joinlanders.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 20:04:01 GMT
Content-Type: image/png;charset=UTF-8
Content-Length: 7130
Connection: keep-alive
Server: PWS/8.3.1.0.8
Accept-Ranges: bytes
ETag: "FuzQmWFwk_qSMSrq_hD-xUdPUSDz"
Last-Modified: Mon, 06 Jun 2022 13:32:51 GMT
X-Reqid: 205024922427319620220630143412PPV6VsyV
Age: 12855
Via: 1.1 PSygldLON4ax12:6 (W), 1.1 PSygldLON2kt55:22 (W)
X-Px: ht PSygldLON2kt55LHR
X-Ws-Request-Id: 650f44b1_PSygldLON2hl59_46114-2576
|
|
| joinlanders.com/src/click33/assets/img/favicon.ico | 163.171.129.207 | 200 OK | 2.5 kB |
URL GET HTTP/2joinlanders.com/src/click33/assets/img/favicon.ico IP163.171.129.207:443 ASN#54994 QUANTILNETWORKS
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc CertificateIssuerGlobalSign nv-sa Subject*.joinlanders.com Fingerprint08:E1:3C:E4:1B:71:26:35:DB:14:D7:31:BD:07:43:98:7B:1A:01:F1 ValidityMon, 03 Apr 2023 16:01:30 GMT - Sat, 04 May 2024 16:01:29 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced\012- data Hash7b239aebcb8c6ef4e0c8c00e65d9c22a 6970c7bf1a46a279851ababecb24b08d228512fe 392183aec807df8b373e3fad5e421f43170ed1feb1310534a0116b2ec8c250b5
GET /src/click33/assets/img/favicon.ico HTTP/1.1
Host: joinlanders.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc
Cookie: ldata=%7B%22program%22%3A%22EPC%22%2C%22propigate_defaults%22%3A%5B%5D%2C%22resolved_inputs%22%3A%7B%22pgm%22%3A%2263%22%2C%22wlid%22%3Anull%2C%22ofid%22%3A%221066%22%2C%22a_aid%22%3A%22epc68396%22%2C%22a_sid%22%3A%222110%22%2C%22a_bid%22%3A%22g129%22%7D%2C%22hub_uri%22%3A%22joinfinish.com%22%2C%22iframe_uri%22%3A%22joinfinish.com%5C%2Fsignup%22%2C%22geoip_uri%22%3A%22geoip.joinfinish.com%22%2C%22google_id%22%3A%22%22%2C%22geo_data%22%3A%7B%22city%22%3A%22Dilling%22%2C%22region_code%22%3A%2230%22%2C%22region_name%22%3A%22Viken%22%2C%22country_code%22%3A%22NO%22%2C%22country%22%3A%22Norway%22%2C%22postal_code%22%3A%221570%22%2C%22continent_code%22%3A%22EU%22%2C%22continent%22%3A%22Europe%22%2C%22latitude%22%3A59.3890999999999991132426657713949680328369140625%2C%22longitude%22%3A10.6760000000000001563194018672220408916473388671875%7D%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 23 Sep 2023 20:04:01 GMT
content-type: image/x-icon
content-length: 2476
server: PWS/8.3.1.0.8
last-modified: Thu, 26 May 2022 13:25:54 GMT
etag: "628f7fe2-9ac"
accept-ranges: bytes
age: 11344
via: 1.1 PSygldLON4ax12:2 (W), 1.1 PSygldLON2kt55:14 (W)
x-px: ht PSygldLON2kt55LHR
x-ws-request-id: 650f44b1_PSygldLON2hl59_48362-65397
X-Firefox-Spdy: h2
|
|
| static.cdn.co.no/videos/cl/gg/c33/img/anicon14.png | 163.171.129.207 | 200 OK | 5.7 kB |
URL GET HTTP/1.1static.cdn.co.no/videos/cl/gg/c33/img/anicon14.png IP163.171.129.207:443 ASN#54994 QUANTILNETWORKS
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc CertificateIssuerLet's Encrypt Subjectstatic.cdn.co.no Fingerprint43:41:07:76:E5:7A:2F:C3:49:81:23:6C:BA:15:34:A6:9E:87:21:B6 ValidityFri, 01 Sep 2023 15:15:14 GMT - Thu, 30 Nov 2023 15:15:13 GMT
File typePNG image data, 100 x 90, 8-bit/color RGBA, non-interlaced\012- data Hashb2dc84cf3f27af4ee65f164a71af8b8d 7378e372c605e110f775f8ab093522daefc86214 a69c28cbf1f62f812e3950bc1be053cd6169fc205d885bc4403540fde41bee35
GET /videos/cl/gg/c33/img/anicon14.png HTTP/1.1
Host: static.cdn.co.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://joinlanders.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 20:04:02 GMT
Content-Type: image/png;charset=UTF-8
Content-Length: 5693
Connection: keep-alive
Server: PWS/8.3.1.0.8
Accept-Ranges: bytes
ETag: "FnN443LGBeEQ93X4qwk1ItrvyGIU"
Last-Modified: Mon, 06 Jun 2022 13:32:51 GMT
X-Reqid: 205024922427318420220607105339Es0fwwhp
Age: 8627
Via: 1.1 PSygldLON4ev13:3 (W), 1.1 PS-LHR-01q9k95:19 (W)
X-Px: ht PS-LHR-01q9k95LHR
X-Ws-Request-Id: 650f44b1_PSygldLON2hl59_46114-2621
|
|
| static.cdn.co.no/videos/cl/gg/c33/img/anicon15.png | 163.171.129.207 | 200 OK | 7.2 kB |
URL GET HTTP/1.1static.cdn.co.no/videos/cl/gg/c33/img/anicon15.png IP163.171.129.207:443 ASN#54994 QUANTILNETWORKS
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc CertificateIssuerLet's Encrypt Subjectstatic.cdn.co.no Fingerprint43:41:07:76:E5:7A:2F:C3:49:81:23:6C:BA:15:34:A6:9E:87:21:B6 ValidityFri, 01 Sep 2023 15:15:14 GMT - Thu, 30 Nov 2023 15:15:13 GMT
File typePNG image data, 100 x 90, 8-bit/color RGBA, non-interlaced\012- data Hash38bd12556f2ab4ffb4f9858525ec0968 40567e2065ab0dde36254ce187a4e3a77fc6d095 e286a52d2cb506a042a6183bb37ee354d119b30fb3d2c33130c15837fc9ec815
GET /videos/cl/gg/c33/img/anicon15.png HTTP/1.1
Host: static.cdn.co.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://joinlanders.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 20:04:02 GMT
Content-Type: image/png;charset=UTF-8
Content-Length: 7156
Connection: keep-alive
Server: PWS/8.3.1.0.8
Accept-Ranges: bytes
ETag: "FkBWfiBlqw3eNiVM4Yek46d_xtCV"
Last-Modified: Mon, 06 Jun 2022 13:32:51 GMT
X-Reqid: 205024922427327320220607102357EJRDmR4V
Age: 2558
Via: 1.1 PSygldLON2mb11:8 (W), 1.1 PS-LHR-01q9k95:12 (W)
X-Px: ht PS-LHR-01q9k95LHR
X-Ws-Request-Id: 650f44b2_PSygldLON2hl59_46114-2625
|
|
| joinfinish.com/signup/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc&lang=en | 207.120.33.45 | 302 Found | 0 B |
URL GET HTTP/2joinfinish.com/signup/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc&lang=en IP207.120.33.45:443
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc CertificateIssuerLet's Encrypt Subjectjoinfinish.com Fingerprint0F:9B:F7:AC:5D:0E:B6:22:35:6D:F6:17:3D:7D:4F:F5:3D:43:7D:AA ValidityWed, 06 Sep 2023 04:44:01 GMT - Tue, 05 Dec 2023 04:44:00 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /signup/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc&lang=en HTTP/1.1
Host: joinfinish.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://joinlanders.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Sat, 23 Sep 2023 20:04:02 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: https://pcwnyb.com/28723d75f083187/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc&lang=en&epcCID=DaWa21Q3F0N0reGekat9v3WaG3QbFdlcP&rtid=12368791401
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: PHPSESSID=ee304a906ede5d6c22e7b9137afb857c; path=/; secure; SameSite=None
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
x-varnish: 67696
age: 0
via: 1.1 varnish-65c66bdb8c-7ffsz (Varnish/7.2)
section-io-cache: Miss
section-io-id: 00c473377f8e05c46b5975a286b8a07c
X-Firefox-Spdy: h2
|
|
| static.cdn.co.no/videos/cl/gg/c33/img/anicon12.png | 163.171.129.207 | 200 OK | 7.1 kB |
URL GET HTTP/1.1static.cdn.co.no/videos/cl/gg/c33/img/anicon12.png IP163.171.129.207:443 ASN#54994 QUANTILNETWORKS
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc CertificateIssuerLet's Encrypt Subjectstatic.cdn.co.no Fingerprint43:41:07:76:E5:7A:2F:C3:49:81:23:6C:BA:15:34:A6:9E:87:21:B6 ValidityFri, 01 Sep 2023 15:15:14 GMT - Thu, 30 Nov 2023 15:15:13 GMT
File typePNG image data, 100 x 90, 8-bit/color RGBA, non-interlaced\012- data Hash87522070500d3f423b7b7d83b68bec69 ecd099617093fa92312aeafe10fec5474f5120f3 8d338c95a017b36273e555a6ccbbfbbc22d3396ca438cc01cd1a9452aaac48e8
GET /videos/cl/gg/c33/img/anicon12.png HTTP/1.1
Host: static.cdn.co.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://joinlanders.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 20:04:02 GMT
Content-Type: image/png;charset=UTF-8
Content-Length: 7130
Connection: keep-alive
Server: PWS/8.3.1.0.8
Accept-Ranges: bytes
ETag: "FuzQmWFwk_qSMSrq_hD-xUdPUSDz"
Last-Modified: Mon, 06 Jun 2022 13:32:51 GMT
X-Reqid: 205024922427319620220630143412PPV6VsyV
Age: 12856
Via: 1.1 PSygldLON4ax12:6 (W), 1.1 PSygldLON2kt55:22 (W)
X-Px: ht PSygldLON2kt55LHR
X-Ws-Request-Id: 650f44b2_PSygldLON2hl59_46114-2636
|
|
| static.cdn.co.no/videos/cl/gg/c33/img/anicon13.png | 163.171.129.207 | 200 OK | 5.7 kB |
URL GET HTTP/1.1static.cdn.co.no/videos/cl/gg/c33/img/anicon13.png IP163.171.129.207:443 ASN#54994 QUANTILNETWORKS
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc CertificateIssuerLet's Encrypt Subjectstatic.cdn.co.no Fingerprint43:41:07:76:E5:7A:2F:C3:49:81:23:6C:BA:15:34:A6:9E:87:21:B6 ValidityFri, 01 Sep 2023 15:15:14 GMT - Thu, 30 Nov 2023 15:15:13 GMT
File typePNG image data, 100 x 90, 8-bit/color RGBA, non-interlaced\012- data Hash4b45c0dd171a7320bf474c973b753827 f187288905e610d5f07d5a9b2ccb79f145157154 02f6a7c9d11a94dbda745e17d7500cf324e2a82a68621ed404d4a1b848dbbd00
GET /videos/cl/gg/c33/img/anicon13.png HTTP/1.1
Host: static.cdn.co.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://joinlanders.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 20:04:02 GMT
Content-Type: image/png;charset=UTF-8
Content-Length: 5696
Connection: keep-alive
Server: PWS/8.3.1.0.8
Accept-Ranges: bytes
ETag: "FvGHKIkF5hDV8H1amyzLefFFFXFU"
Last-Modified: Mon, 06 Jun 2022 13:32:51 GMT
X-Reqid: 205024922427326020220607222331GVYRuotN
Age: 10082
Via: 1.1 PSygldLON2xi13:0 (W), 1.1 PS-LHR-01q9k95:18 (W)
X-Px: ht PS-LHR-01q9k95LHR
X-Ws-Request-Id: 650f44b2_PSygldLON2hl59_46114-2642
|
|
| static.cdn.co.no/videos/cl/gg/c33/img/anicon14.png | 163.171.129.207 | 200 OK | 5.7 kB |
URL GET HTTP/1.1static.cdn.co.no/videos/cl/gg/c33/img/anicon14.png IP163.171.129.207:443 ASN#54994 QUANTILNETWORKS
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc CertificateIssuerLet's Encrypt Subjectstatic.cdn.co.no Fingerprint43:41:07:76:E5:7A:2F:C3:49:81:23:6C:BA:15:34:A6:9E:87:21:B6 ValidityFri, 01 Sep 2023 15:15:14 GMT - Thu, 30 Nov 2023 15:15:13 GMT
File typePNG image data, 100 x 90, 8-bit/color RGBA, non-interlaced\012- data Hashb2dc84cf3f27af4ee65f164a71af8b8d 7378e372c605e110f775f8ab093522daefc86214 a69c28cbf1f62f812e3950bc1be053cd6169fc205d885bc4403540fde41bee35
GET /videos/cl/gg/c33/img/anicon14.png HTTP/1.1
Host: static.cdn.co.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://joinlanders.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 20:04:02 GMT
Content-Type: image/png;charset=UTF-8
Content-Length: 5693
Connection: keep-alive
Server: PWS/8.3.1.0.8
Accept-Ranges: bytes
ETag: "FnN443LGBeEQ93X4qwk1ItrvyGIU"
Last-Modified: Mon, 06 Jun 2022 13:32:51 GMT
X-Reqid: 205024922427318420220607105339Es0fwwhp
Age: 8627
Via: 1.1 PSygldLON4ev13:3 (W), 1.1 PS-LHR-01q9k95:19 (W)
X-Px: ht PS-LHR-01q9k95LHR
X-Ws-Request-Id: 650f44b2_PSygldLON2hl59_46114-2646
|
|
| ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js | 142.250.74.42 | 200 OK | 31 kB |
URL GET HTTP/2ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js IP142.250.74.42:443
Requested byhttps://pcwnyb.com/28723d75f083187/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc&lang=en&epcCID=DaWa21Q3F0N0reGekat9v3WaG3QbFdlcP&rtid=12368791401 CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com FingerprintBE:40:3A:A6:DE:CC:A7:8B:75:43:68:F2:F9:56:63:71:49:61:06:49 ValidityMon, 04 Sep 2023 08:23:18 GMT - Mon, 27 Nov 2023 08:23:17 GMT
File typeASCII text, with very long lines (65451) Hash220afd743d9e9643852e31a135a9f3ae 88523924351bac0b5d560fe0c5781e2556e7693d 0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a
GET /ajax/libs/jquery/3.4.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pcwnyb.com
DNT: 1
Connection: keep-alive
Referer: https://pcwnyb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30774
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 22 Sep 2023 06:02:39 GMT
expires: Sat, 21 Sep 2024 06:02:39 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Mon, 13 May 2019 14:37:17 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 136884
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| pcwnyb.com/common_tpls/compactML/css/epc33g59.css | 207.120.33.10 | 200 OK | 8.0 kB |
URL GET HTTP/2pcwnyb.com/common_tpls/compactML/css/epc33g59.css IP207.120.33.10:443
Requested byhttps://pcwnyb.com/28723d75f083187/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc&lang=en&epcCID=DaWa21Q3F0N0reGekat9v3WaG3QbFdlcP&rtid=12368791401 CertificateIssuerLet's Encrypt Subjectpcwnyb.com Fingerprint0B:5A:80:FD:94:FA:80:69:71:D9:3E:68:4D:BC:C5:44:42:E0:A1:33 ValidityThu, 07 Sep 2023 02:07:58 GMT - Wed, 06 Dec 2023 02:07:57 GMT
File typeASCII text, with very long lines (45538), with no line terminators Hash6c9e7dbd3982323bdfbd7f1d809a0e4b de13256228fd8b62ae8feb182ec79240595adbc4 e48d1cb2b886875113187447c0e8747c2447d74e14cc2a1175efc5887b866c98
GET /common_tpls/compactML/css/epc33g59.css HTTP/1.1
Host: pcwnyb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pcwnyb.com/28723d75f083187/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc&lang=en&epcCID=DaWa21Q3F0N0reGekat9v3WaG3QbFdlcP&rtid=12368791401
Cookie: PHPSESSID=f6fbf5135ddd5f68c1587dd90ad43928
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 23 Sep 2023 20:04:03 GMT
content-type: text/css
content-length: 7957
last-modified: Wed, 25 May 2022 14:22:28 GMT
etag: W/"628e3ba4-b1e2"
content-encoding: gzip
section-io-cache-id: b030ad3ceed2acc90fadadd4a19cca51
vary: Accept-Encoding
x-varnish: 1589938 229614
age: 21526
via: 1.1 varnish-65c66bdb8c-wrbtm (Varnish/7.2)
accept-ranges: bytes
section-io-cache: Hit
section-io-id: d762b37e09e7ad36149bc333f378dc03
X-Firefox-Spdy: h2
|
|
| pcwnyb.com/common_tpls/images/icons/email.png | 207.120.33.10 | 200 OK | 1.3 kB |
URL GET HTTP/2pcwnyb.com/common_tpls/images/icons/email.png IP207.120.33.10:443
Requested byhttps://pcwnyb.com/28723d75f083187/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc&lang=en&epcCID=DaWa21Q3F0N0reGekat9v3WaG3QbFdlcP&rtid=12368791401 CertificateIssuerLet's Encrypt Subjectpcwnyb.com Fingerprint0B:5A:80:FD:94:FA:80:69:71:D9:3E:68:4D:BC:C5:44:42:E0:A1:33 ValidityThu, 07 Sep 2023 02:07:58 GMT - Wed, 06 Dec 2023 02:07:57 GMT
File typePNG image data, 26 x 26, 8-bit/color RGB, non-interlaced\012- data Hasha86d99b9176d82a211cfa29b2f0b353f 62947ddfd87e3a21869818885e4bfa4e55ad0c11 f8e82194c97e2a11a8c77fcd55d1ded51a1943b78eefac8475890f665dc620f1
GET /common_tpls/images/icons/email.png HTTP/1.1
Host: pcwnyb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pcwnyb.com/28723d75f083187/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc&lang=en&epcCID=DaWa21Q3F0N0reGekat9v3WaG3QbFdlcP&rtid=12368791401
Cookie: PHPSESSID=f6fbf5135ddd5f68c1587dd90ad43928
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 23 Sep 2023 20:04:03 GMT
content-type: image/png
content-length: 1254
last-modified: Mon, 21 Aug 2017 19:32:05 GMT
etag: "599b3535-4e6"
section-io-cache-id: c0e923af9592bef6e961809d05f93bfd
x-varnish: 278787 3024680
age: 41
via: 1.1 varnish-65c66bdb8c-7ffsz (Varnish/7.2)
accept-ranges: bytes
section-io-cache: Hit
section-io-id: 7a6d24a620b7856addeec2cf9a046f56
X-Firefox-Spdy: h2
|
|
| ajax.aspnetcdn.com/ajax/bootstrap/3.3.7/css/bootstrap.min.css | 152.199.19.160 | 200 OK | 20 kB |
URL GET HTTP/2ajax.aspnetcdn.com/ajax/bootstrap/3.3.7/css/bootstrap.min.css IP152.199.19.160:443
Requested byhttps://pcwnyb.com/28723d75f083187/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc&lang=en&epcCID=DaWa21Q3F0N0reGekat9v3WaG3QbFdlcP&rtid=12368791401 CertificateIssuerDigiCert Inc Subject*.vo.msecnd.net Fingerprint0E:7D:A8:CD:FE:61:1E:46:97:A3:57:99:70:DA:E0:59:1D:34:04:80 ValidityFri, 05 May 2023 00:00:00 GMT - Sun, 28 Apr 2024 23:59:59 GMT
File typeASCII text, with very long lines (65371) Hashec3bb52a00e176a7181d454dffaea219 6527d8bf3e1e9368bab8c7b60f56bc01fa3afd68 f75e846cc83bd11432f4b1e21a45f31bc85283d11d372f7b19accd1bf6a2635c
GET /ajax/bootstrap/3.3.7/css/bootstrap.min.css HTTP/1.1
Host: ajax.aspnetcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pcwnyb.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
age: 14686124
cache-control: public,max-age=31536000
content-type: text/css
date: Sat, 23 Sep 2023 20:04:03 GMT
etag: "0e914f2cb33d21:0"
last-modified: Mon, 31 Oct 2016 23:10:18 GMT
server: ECAcc (ska/F740)
timing-allow-origin: *
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 19629
X-Firefox-Spdy: h2
|
|
| ajax.aspnetcdn.com/ajax/bootstrap/3.3.7/bootstrap.min.js | 152.199.19.160 | 200 OK | 9.8 kB |
URL GET HTTP/2ajax.aspnetcdn.com/ajax/bootstrap/3.3.7/bootstrap.min.js IP152.199.19.160:443
Requested byhttps://pcwnyb.com/28723d75f083187/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc&lang=en&epcCID=DaWa21Q3F0N0reGekat9v3WaG3QbFdlcP&rtid=12368791401 CertificateIssuerDigiCert Inc Subject*.vo.msecnd.net Fingerprint0E:7D:A8:CD:FE:61:1E:46:97:A3:57:99:70:DA:E0:59:1D:34:04:80 ValidityFri, 05 May 2023 00:00:00 GMT - Sun, 28 Apr 2024 23:59:59 GMT
File typeASCII text, with very long lines (32033) Hash5869c96cc8f19086aee625d670d741f9 430a443d74830fe9be26efca431f448c1b3740f9 53964478a7c634e8dad34ecc303dd8048d00dce4993906de1bacf67f663486ef
GET /ajax/bootstrap/3.3.7/bootstrap.min.js HTTP/1.1
Host: ajax.aspnetcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pcwnyb.com
DNT: 1
Connection: keep-alive
Referer: https://pcwnyb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
age: 5595976
cache-control: public,max-age=31536000
content-type: application/javascript
date: Sat, 23 Sep 2023 20:04:03 GMT
etag: "80bdc1e6cb33d21:0"
last-modified: Mon, 31 Oct 2016 23:09:59 GMT
server: ECAcc (ska/F6C5)
timing-allow-origin: *
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 9839
X-Firefox-Spdy: h2
|
|
| pcwnyb.com/common_tpls/images/icons/password.png | 207.120.33.10 | 200 OK | 1.5 kB |
URL GET HTTP/2pcwnyb.com/common_tpls/images/icons/password.png IP207.120.33.10:443
Requested byhttps://pcwnyb.com/28723d75f083187/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc&lang=en&epcCID=DaWa21Q3F0N0reGekat9v3WaG3QbFdlcP&rtid=12368791401 CertificateIssuerLet's Encrypt Subjectpcwnyb.com Fingerprint0B:5A:80:FD:94:FA:80:69:71:D9:3E:68:4D:BC:C5:44:42:E0:A1:33 ValidityThu, 07 Sep 2023 02:07:58 GMT - Wed, 06 Dec 2023 02:07:57 GMT
File typePNG image data, 26 x 26, 8-bit/color RGB, non-interlaced\012- data Hash6f100f1cdbdce928118ffa4c9293ca5b 6b1a3593e792d4c00187d60560dd03fb42df1156 8c1a6b9e0c63edc7fa86898148dc6493cd56113fabbf85d901f7af4c180fce74
GET /common_tpls/images/icons/password.png HTTP/1.1
Host: pcwnyb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pcwnyb.com/28723d75f083187/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc&lang=en&epcCID=DaWa21Q3F0N0reGekat9v3WaG3QbFdlcP&rtid=12368791401
Cookie: PHPSESSID=f6fbf5135ddd5f68c1587dd90ad43928
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 23 Sep 2023 20:04:03 GMT
content-type: image/png
content-length: 1452
last-modified: Tue, 22 Aug 2017 16:34:59 GMT
etag: "599c5d33-5ac"
section-io-cache-id: 613848dab57c1f51c5166337f1da332e
x-varnish: 1589940 688292
age: 21574
via: 1.1 varnish-65c66bdb8c-wrbtm (Varnish/7.2)
accept-ranges: bytes
section-io-cache: Hit
section-io-id: 19b369b63eb814b83b9a747c0567bbee
X-Firefox-Spdy: h2
|
|
| pcwnyb.com/common_tpls/images/icons/fname.png | 207.120.33.10 | 200 OK | 1.6 kB |
URL GET HTTP/2pcwnyb.com/common_tpls/images/icons/fname.png IP207.120.33.10:443
Requested byhttps://pcwnyb.com/28723d75f083187/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc&lang=en&epcCID=DaWa21Q3F0N0reGekat9v3WaG3QbFdlcP&rtid=12368791401 CertificateIssuerLet's Encrypt Subjectpcwnyb.com Fingerprint0B:5A:80:FD:94:FA:80:69:71:D9:3E:68:4D:BC:C5:44:42:E0:A1:33 ValidityThu, 07 Sep 2023 02:07:58 GMT - Wed, 06 Dec 2023 02:07:57 GMT
File typePNG image data, 26 x 26, 8-bit/color RGBA, non-interlaced\012- data Hash5c846870756544f39604e671d4111b9d 304938c74246e228fa82d8ca40201c3db6098074 d43abf8c5665519a3fe3f7e90298fc17b62e06d8ada1b90a44ea9985a62abb4d
GET /common_tpls/images/icons/fname.png HTTP/1.1
Host: pcwnyb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pcwnyb.com/28723d75f083187/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc&lang=en&epcCID=DaWa21Q3F0N0reGekat9v3WaG3QbFdlcP&rtid=12368791401
Cookie: PHPSESSID=f6fbf5135ddd5f68c1587dd90ad43928
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 23 Sep 2023 20:04:03 GMT
content-type: image/png
content-length: 1649
last-modified: Tue, 28 Nov 2017 20:52:02 GMT
etag: "5a1dcc72-671"
section-io-cache-id: 3d9fe2fae4e61dc87590bf88acbf83ca
x-varnish: 278788 5834563
age: 41
via: 1.1 varnish-65c66bdb8c-7ffsz (Varnish/7.2)
accept-ranges: bytes
section-io-cache: Hit
section-io-id: ab892725a0e372131532e9a9da3057a9
X-Firefox-Spdy: h2
|
|
| pcwnyb.com/common_tpls/images/icons/address.png | 207.120.33.10 | 200 OK | 1.2 kB |
URL GET HTTP/2pcwnyb.com/common_tpls/images/icons/address.png IP207.120.33.10:443
Requested byhttps://pcwnyb.com/28723d75f083187/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc&lang=en&epcCID=DaWa21Q3F0N0reGekat9v3WaG3QbFdlcP&rtid=12368791401 CertificateIssuerLet's Encrypt Subjectpcwnyb.com Fingerprint0B:5A:80:FD:94:FA:80:69:71:D9:3E:68:4D:BC:C5:44:42:E0:A1:33 ValidityThu, 07 Sep 2023 02:07:58 GMT - Wed, 06 Dec 2023 02:07:57 GMT
File typePNG image data, 26 x 26, 8-bit/color RGB, non-interlaced\012- data Hashb579e9868402d708e54e1a980166c444 1c58e2890b934c0b1ab057f3ac28bedd2a082d19 67756f8b542c7823bcdba421219c3b8e1ee472748d8c3463534f667271356dfb
GET /common_tpls/images/icons/address.png HTTP/1.1
Host: pcwnyb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pcwnyb.com/28723d75f083187/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc&lang=en&epcCID=DaWa21Q3F0N0reGekat9v3WaG3QbFdlcP&rtid=12368791401
Cookie: PHPSESSID=f6fbf5135ddd5f68c1587dd90ad43928
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 23 Sep 2023 20:04:03 GMT
content-type: image/png
content-length: 1167
last-modified: Mon, 21 Aug 2017 19:32:05 GMT
etag: "599b3535-48f"
section-io-cache-id: 90f2c35b513be56a2d6818bcc0e9dc24
x-varnish: 1589941 1953019
age: 2
via: 1.1 varnish-65c66bdb8c-wrbtm (Varnish/7.2)
accept-ranges: bytes
section-io-cache: Hit
section-io-id: 6f6079ca163cc3171979ce651f7ed197
X-Firefox-Spdy: h2
|
|
| kit.fontawesome.com/b314bdf1b3/110588222/kit-upload.css |  104.18.23.52 | 200 OK | 0 B |
URL GET HTTP/2kit.fontawesome.com/b314bdf1b3/110588222/kit-upload.css IP104.18.23.52:443
Requested byhttps://pcwnyb.com/28723d75f083187/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc&lang=en&epcCID=DaWa21Q3F0N0reGekat9v3WaG3QbFdlcP&rtid=12368791401 CertificateIssuerDigiCert Inc Subject*.fontawesome.com Fingerprint6C:69:02:A7:9B:07:84:8E:D0:3D:0A:10:61:8E:01:80:88:37:EF:5E ValidityTue, 22 Nov 2022 00:00:00 GMT - Sat, 23 Dec 2023 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /b314bdf1b3/110588222/kit-upload.css HTTP/1.1
Host: kit.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pcwnyb.com/
Origin: https://pcwnyb.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 23 Sep 2023 20:04:04 GMT
content-type: text/css
content-length: 0
access-control-allow-headers: accept, accept-langauge, content-language, content-type, fa-kit-token
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 3000
cache-control: max-age=31556926, public, must-revalidate
etag: 54af53b207eef226d6511e0a88e3038e
strict-transport-security: max-age=31536000; preload
vary: origin, accept-encoding, access-control-request-headers, access-control-request-method
x-request-id: F2Sa2U8lfE6WncQOwKGD
cf-cache-status: HIT
age: 2011627
accept-ranges: bytes
server: cloudflare
cf-ray: 80b565057ad6b521-OSL
X-Firefox-Spdy: h2
|
|
| pcwnyb.com/common_tpls/js/iframeResizer.contentWindow.min.js | 207.120.33.10 | 200 OK | 13 kB |
URL GET HTTP/2pcwnyb.com/common_tpls/js/iframeResizer.contentWindow.min.js IP207.120.33.10:443
Requested byhttps://pcwnyb.com/28723d75f083187/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc&lang=en&epcCID=DaWa21Q3F0N0reGekat9v3WaG3QbFdlcP&rtid=12368791401 CertificateIssuerLet's Encrypt Subjectpcwnyb.com Fingerprint0B:5A:80:FD:94:FA:80:69:71:D9:3E:68:4D:BC:C5:44:42:E0:A1:33 ValidityThu, 07 Sep 2023 02:07:58 GMT - Wed, 06 Dec 2023 02:07:57 GMT
File typegzip compressed data, from Unix\012- data Hash8281e5eedc9961bd0cb890c2ccefd0ef 34c334cd136652412c2e59092ea40df44e86e349 41ac531bdb208a9b3885a762abb6e4336d55c10de053a09562fc74c98436a21e
GET /common_tpls/js/iframeResizer.contentWindow.min.js HTTP/1.1
Host: pcwnyb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pcwnyb.com/28723d75f083187/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc&lang=en&epcCID=DaWa21Q3F0N0reGekat9v3WaG3QbFdlcP&rtid=12368791401
Cookie: PHPSESSID=f6fbf5135ddd5f68c1587dd90ad43928
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 23 Sep 2023 20:04:03 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Thu, 04 Feb 2016 15:06:03 GMT
etag: W/"56b368db-3445"
section-io-cache-id: b13e7e69226c29f5d2ee3319c83b40b7
x-varnish: 278789 2427094
age: 41
via: 1.1 varnish-65c66bdb8c-7ffsz (Varnish/7.2)
section-io-cache: Hit
content-encoding: gzip
section-io-id: fa4d5bb2c614c887bf73e05770a194c0
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2 | 216.58.207.227 | 200 OK | 7.9 kB |
URL GET HTTP/2fonts.gstatic.com/s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2 IP216.58.207.227:443
Requested byhttps://pcwnyb.com/28723d75f083187/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc&lang=en&epcCID=DaWa21Q3F0N0reGekat9v3WaG3QbFdlcP&rtid=12368791401 CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint3D:35:56:30:C0:0F:0C:7F:20:BA:7D:A8:48:DB:24:1B:15:F5:48:27 ValidityMon, 04 Sep 2023 08:23:09 GMT - Mon, 27 Nov 2023 08:23:08 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 7884, version 1.0\012- data Hash9212f6f9860f9fc6c69b02fedf6db8c3 ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b 7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f
GET /s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pcwnyb.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7884
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 21 Sep 2023 15:18:26 GMT
expires: Fri, 20 Sep 2024 15:18:26 GMT
cache-control: public, max-age=31536000
age: 189938
last-modified: Wed, 27 Apr 2022 17:03:52 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/anton/v23/1Ptgg87LROyAm0K0.ttf | 216.58.207.227 | 200 OK | 64 kB |
URL GET HTTP/2fonts.gstatic.com/s/anton/v23/1Ptgg87LROyAm0K0.ttf IP216.58.207.227:443
Requested byhttps://pcwnyb.com/28723d75f083187/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc&lang=en&epcCID=DaWa21Q3F0N0reGekat9v3WaG3QbFdlcP&rtid=12368791401 CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint3D:35:56:30:C0:0F:0C:7F:20:BA:7D:A8:48:DB:24:1B:15:F5:48:27 ValidityMon, 04 Sep 2023 08:23:09 GMT - Mon, 27 Nov 2023 08:23:08 GMT
File typeTrueType Font data, 17 tables, 1st "GDEF", 8 names, Microsoft, language 0x409\012- data Hash8df96e17091a4fd7f9cdfe0ac1a2209e a3651b13ddfd77fc2a203b847ded929c8dae878a 55185f8a21e8cb264156ca6d04b70c78fc68e587d1645e907ce277a1c93fcc88
GET /s/anton/v23/1Ptgg87LROyAm0K0.ttf HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pcwnyb.com
DNT: 1
Connection: keep-alive
Referer: https://pcwnyb.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 64227
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 21 Sep 2023 15:29:58 GMT
expires: Fri, 20 Sep 2024 15:29:58 GMT
cache-control: public, max-age=31536000
age: 189246
last-modified: Tue, 19 Apr 2022 19:22:01 GMT
content-type: font/ttf
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ka-p.fontawesome.com/releases/v5.15.4/css/pro.min.css?token=b314bdf1b3 | 104.18.23.52 | 200 OK | 54 kB |
URL GET HTTP/2ka-p.fontawesome.com/releases/v5.15.4/css/pro.min.css?token=b314bdf1b3 IP104.18.23.52:443
Requested byhttps://pcwnyb.com/28723d75f083187/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc&lang=en&epcCID=DaWa21Q3F0N0reGekat9v3WaG3QbFdlcP&rtid=12368791401 CertificateIssuerDigiCert Inc Subject*.fontawesome.com Fingerprint6C:69:02:A7:9B:07:84:8E:D0:3D:0A:10:61:8E:01:80:88:37:EF:5E ValidityTue, 22 Nov 2022 00:00:00 GMT - Sat, 23 Dec 2023 23:59:59 GMT
File typeASCII text, with very long lines (65397) Hash486b13730aafe2a39cdaf1666679fa5b aa0f52f048688ada20d921fef78cf15684a25f04 37c65071f378cc9582aabdda3b52979ef901f2925e3f3c3dc597f41eac0f1b6d
GET /releases/v5.15.4/css/pro.min.css?token=b314bdf1b3 HTTP/1.1
Host: ka-p.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pcwnyb.com/
Origin: https://pcwnyb.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 23 Sep 2023 20:04:04 GMT
content-type: text/css
content-length: 54194
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
etag: "610ae215-d3b2"
last-modified: Wed, 04 Aug 2021 18:53:09 GMT
vary: Origin, Accept-Encoding, Access-Control-Request-Headers, Access-Control-Request-Method
cf-cache-status: HIT
age: 2027186
accept-ranges: bytes
server: cloudflare
cf-ray: 80b56505ab0cb521-OSL
X-Firefox-Spdy: h2
|
|
| ka-p.fontawesome.com/releases/v5.15.4/css/pro-v4-font-face.min.css?token=b314bdf1b3 | 104.18.23.52 | 200 OK | 2.6 kB |
URL GET HTTP/2ka-p.fontawesome.com/releases/v5.15.4/css/pro-v4-font-face.min.css?token=b314bdf1b3 IP104.18.23.52:443
Requested byhttps://pcwnyb.com/28723d75f083187/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc&lang=en&epcCID=DaWa21Q3F0N0reGekat9v3WaG3QbFdlcP&rtid=12368791401 CertificateIssuerDigiCert Inc Subject*.fontawesome.com Fingerprint6C:69:02:A7:9B:07:84:8E:D0:3D:0A:10:61:8E:01:80:88:37:EF:5E ValidityTue, 22 Nov 2022 00:00:00 GMT - Sat, 23 Dec 2023 23:59:59 GMT
File typeASCII text, with very long lines (27832) Hash1cb05a2f9541200e1fa0a2cd0abc7663 fdf3292a6db22945eb79e08d847834205b749c6f a8a00b576cc9fad532a52ecdf8024724ddaa83cb0f5ca5d1b1d6eb8841103d60
GET /releases/v5.15.4/css/pro-v4-font-face.min.css?token=b314bdf1b3 HTTP/1.1
Host: ka-p.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pcwnyb.com/
Origin: https://pcwnyb.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 23 Sep 2023 20:04:04 GMT
content-type: text/css
content-length: 2603
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
etag: "610ae215-a2b"
last-modified: Wed, 04 Aug 2021 18:53:09 GMT
vary: Origin, Accept-Encoding, Access-Control-Request-Headers, Access-Control-Request-Method
cf-cache-status: HIT
age: 2027186
accept-ranges: bytes
server: cloudflare
cf-ray: 80b56505ab0ab521-OSL
X-Firefox-Spdy: h2
|
|
| ka-p.fontawesome.com/releases/v5.15.4/css/pro-v4-shims.min.css?token=b314bdf1b3 | 104.18.23.52 | 200 OK | 4.2 kB |
URL GET HTTP/2ka-p.fontawesome.com/releases/v5.15.4/css/pro-v4-shims.min.css?token=b314bdf1b3 IP104.18.23.52:443
Requested byhttps://pcwnyb.com/28723d75f083187/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc&lang=en&epcCID=DaWa21Q3F0N0reGekat9v3WaG3QbFdlcP&rtid=12368791401 CertificateIssuerDigiCert Inc Subject*.fontawesome.com Fingerprint6C:69:02:A7:9B:07:84:8E:D0:3D:0A:10:61:8E:01:80:88:37:EF:5E ValidityTue, 22 Nov 2022 00:00:00 GMT - Sat, 23 Dec 2023 23:59:59 GMT
File typeASCII text, with very long lines (26366) Hash715826d7cea0f100c00238e5e5dc92b4 ea2a076f73ed3826287a726f35ae5e54136f2cee 4245ecca2a4b50d7fd9adc9a965ed1f9b4ec24e9935e34c80efafc0f856d54c6
GET /releases/v5.15.4/css/pro-v4-shims.min.css?token=b314bdf1b3 HTTP/1.1
Host: ka-p.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pcwnyb.com/
Origin: https://pcwnyb.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 23 Sep 2023 20:04:04 GMT
content-type: text/css
content-length: 4194
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
etag: "610ae215-1062"
last-modified: Wed, 04 Aug 2021 18:53:09 GMT
vary: Origin, Accept-Encoding, Access-Control-Request-Headers, Access-Control-Request-Method
cf-cache-status: HIT
age: 1383035
accept-ranges: bytes
server: cloudflare
cf-ray: 80b56505ab0bb521-OSL
X-Firefox-Spdy: h2
|
|
| ka-p.fontawesome.com/releases/v5.15.4/webfonts/pro-fa-solid-900-5.0.0.woff2 | 104.18.23.52 | 200 OK | 20 kB |
URL GET HTTP/2ka-p.fontawesome.com/releases/v5.15.4/webfonts/pro-fa-solid-900-5.0.0.woff2 IP104.18.23.52:443
Requested byhttps://pcwnyb.com/28723d75f083187/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc&lang=en&epcCID=DaWa21Q3F0N0reGekat9v3WaG3QbFdlcP&rtid=12368791401 CertificateIssuerDigiCert Inc Subject*.fontawesome.com Fingerprint6C:69:02:A7:9B:07:84:8E:D0:3D:0A:10:61:8E:01:80:88:37:EF:5E ValidityTue, 22 Nov 2022 00:00:00 GMT - Sat, 23 Dec 2023 23:59:59 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 19784, version 331.-31196\012- data Hashc7682b8035fc1d1672d6455631813794 9e2955e5e55b3073e229c218724406425862d4a1 1b50aa1d36ea249991fb44f8f6ad2aa74fe360df9cc04c564b5edf3b053b739c
GET /releases/v5.15.4/webfonts/pro-fa-solid-900-5.0.0.woff2 HTTP/1.1
Host: ka-p.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pcwnyb.com
DNT: 1
Connection: keep-alive
Referer: https://pcwnyb.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 23 Sep 2023 20:04:04 GMT
content-type: font/woff2
content-length: 19784
access-control-allow-origin: *
cache-control: max-age=31556926
etag: "610ae35f-4d48"
last-modified: Wed, 04 Aug 2021 18:58:39 GMT
vary: Origin, Accept-Encoding, Access-Control-Request-Headers, Access-Control-Request-Method
cf-cache-status: HIT
age: 2009863
accept-ranges: bytes
server: cloudflare
cf-ray: 80b56506ac15b521-OSL
X-Firefox-Spdy: h2
|
|
| pcwnyb.com/acct/trk/?rtid=12368791401 | 207.120.33.10 | 200 OK | 21 B |
URL GET HTTP/2pcwnyb.com/acct/trk/?rtid=12368791401 IP207.120.33.10:443
Requested byhttps://pcwnyb.com/28723d75f083187/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc&lang=en&epcCID=DaWa21Q3F0N0reGekat9v3WaG3QbFdlcP&rtid=12368791401 CertificateIssuerLet's Encrypt Subjectpcwnyb.com Fingerprint0B:5A:80:FD:94:FA:80:69:71:D9:3E:68:4D:BC:C5:44:42:E0:A1:33 ValidityThu, 07 Sep 2023 02:07:58 GMT - Wed, 06 Dec 2023 02:07:57 GMT
File typeJSON data\012- , ASCII text, with no line terminators Hash54b209ebf67e1e02a0f5f5b59e4261f4 c5d252d3fb11d59184f14bb856b3ec5a57ea6bb8 14f42db0babb978565aacb549bc068a63ab81e2af2f8baccf1f89a8468b25f25
GET /acct/trk/?rtid=12368791401 HTTP/1.1
Host: pcwnyb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://pcwnyb.com/28723d75f083187/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc&lang=en&epcCID=DaWa21Q3F0N0reGekat9v3WaG3QbFdlcP&rtid=12368791401
Cookie: PHPSESSID=f6fbf5135ddd5f68c1587dd90ad43928
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 23 Sep 2023 20:04:04 GMT
content-type: text/json;charset=UTF-8
content-length: 21
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
x-varnish: 371323
age: 0
via: 1.1 varnish-65c66bdb8c-wrbtm (Varnish/7.2)
section-io-cache: Miss
section-io-id: bb0fa653474e82724eabe33a1a2bddd3
X-Firefox-Spdy: h2
|
|
| kit.fontawesome.com/b314bdf1b3.js | 104.18.23.52 | 200 OK | 12 kB |
URL GET HTTP/2kit.fontawesome.com/b314bdf1b3.js IP104.18.23.52:443
Requested byhttps://pcwnyb.com/28723d75f083187/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc&lang=en&epcCID=DaWa21Q3F0N0reGekat9v3WaG3QbFdlcP&rtid=12368791401 CertificateIssuerDigiCert Inc Subject*.fontawesome.com Fingerprint6C:69:02:A7:9B:07:84:8E:D0:3D:0A:10:61:8E:01:80:88:37:EF:5E ValidityTue, 22 Nov 2022 00:00:00 GMT - Sat, 23 Dec 2023 23:59:59 GMT
File typeASCII text, with very long lines (11213) Hash4fc6cefe553c0690d16534ebf9d89181 aa7c5a51a88e2dcbdf8b67e8648d35682d19e31f 8f3a8661dafbfffde857c6bbc7abc7c63e929047dfc5e6cc1a805ab8e98dacbb
GET /b314bdf1b3.js HTTP/1.1
Host: kit.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pcwnyb.com
DNT: 1
Connection: keep-alive
Referer: https://pcwnyb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 23 Sep 2023 20:04:03 GMT
content-type: text/javascript
access-control-allow-headers: accept, accept-langauge, content-language, content-type, fa-kit-token
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 3000
cache-control: max-age=60, public, must-revalidate
strict-transport-security: max-age=31536000; preload
vary: origin, accept-encoding, access-control-request-headers, access-control-request-method
x-request-id: F3a01WJjk7ZX2h4AAVrB
cf-cache-status: REVALIDATED
server: cloudflare
cf-ray: 80b56502a82ab521-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css2?family=Anton&family=Poppins:wght@100;200;300&display=swap | 142.250.74.106 | 200 OK | 4.5 kB |
URL GET HTTP/2fonts.googleapis.com/css2?family=Anton&family=Poppins:wght@100;200;300&display=swap IP142.250.74.106:443
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com FingerprintBE:40:3A:A6:DE:CC:A7:8B:75:43:68:F2:F9:56:63:71:49:61:06:49 ValidityMon, 04 Sep 2023 08:23:18 GMT - Mon, 27 Nov 2023 08:23:17 GMT
File typeASCII text, with very long lines (4622), with no line terminators Hash21424f10d94b482fc38e599160d6326a c1821b0f0926aea1f891a30066140da3a09cbd6b 98016bd70e7d5a1405c8b9b18307f2abf51df4aba3939793de1c8bfda4cdc362
GET /css2?family=Anton&family=Poppins:wght@100;200;300&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://joinlanders.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 23 Sep 2023 20:04:00 GMT
date: Sat, 23 Sep 2023 20:04:00 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| pcwnyb.com/common_tpls/js/form_support.js?v=1101202201 | 207.120.33.10 | 200 OK | 3.8 kB |
URL GET HTTP/2pcwnyb.com/common_tpls/js/form_support.js?v=1101202201 IP207.120.33.10:443
Requested byhttps://pcwnyb.com/28723d75f083187/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc&lang=en&epcCID=DaWa21Q3F0N0reGekat9v3WaG3QbFdlcP&rtid=12368791401 CertificateIssuerLet's Encrypt Subjectpcwnyb.com Fingerprint0B:5A:80:FD:94:FA:80:69:71:D9:3E:68:4D:BC:C5:44:42:E0:A1:33 ValidityThu, 07 Sep 2023 02:07:58 GMT - Wed, 06 Dec 2023 02:07:57 GMT
File typeASCII text, with very long lines (4261), with no line terminators Hashbd72340aa5a6ac08cf9a0fdbd650579c c0550503cbb35b4abcc5618fc78a0cb18c26c89c 783abe18fe8132421d19b383088f95e95a9ee6ac64b85bd2e2b178b481ab2ca4
GET /common_tpls/js/form_support.js?v=1101202201 HTTP/1.1
Host: pcwnyb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pcwnyb.com/28723d75f083187/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc&lang=en&epcCID=DaWa21Q3F0N0reGekat9v3WaG3QbFdlcP&rtid=12368791401
Cookie: PHPSESSID=f6fbf5135ddd5f68c1587dd90ad43928
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 23 Sep 2023 20:04:03 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Fri, 18 Nov 2022 21:23:38 GMT
etag: W/"6377f7da-ed7"
section-io-cache-id: 328786b592fb7e97b121a7d66136d085
x-varnish: 278786 2524354
age: 41
via: 1.1 varnish-65c66bdb8c-7ffsz (Varnish/7.2)
section-io-cache: Hit
content-encoding: gzip
section-io-id: 0d1aac2a99b2aa54729a7a07337a0c9f
X-Firefox-Spdy: h2
|
|
| pcwnyb.com/common_tpls/js/validate_form_v2.js?jsv=33 | 207.120.33.10 | 200 OK | 26 kB |
URL GET HTTP/2pcwnyb.com/common_tpls/js/validate_form_v2.js?jsv=33 IP207.120.33.10:443
Requested byhttps://pcwnyb.com/28723d75f083187/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc&lang=en&epcCID=DaWa21Q3F0N0reGekat9v3WaG3QbFdlcP&rtid=12368791401 CertificateIssuerLet's Encrypt Subjectpcwnyb.com Fingerprint0B:5A:80:FD:94:FA:80:69:71:D9:3E:68:4D:BC:C5:44:42:E0:A1:33 ValidityThu, 07 Sep 2023 02:07:58 GMT - Wed, 06 Dec 2023 02:07:57 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /common_tpls/js/validate_form_v2.js?jsv=33 HTTP/1.1
Host: pcwnyb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pcwnyb.com/28723d75f083187/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc&lang=en&epcCID=DaWa21Q3F0N0reGekat9v3WaG3QbFdlcP&rtid=12368791401
Cookie: PHPSESSID=f6fbf5135ddd5f68c1587dd90ad43928
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 23 Sep 2023 20:04:03 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Mon, 13 Feb 2023 23:40:03 GMT
etag: W/"63eaca53-63ed"
section-io-cache-id: b6e69635668c3ce95f1243ccd87515b6
x-varnish: 1589939 868788
age: 26
via: 1.1 varnish-65c66bdb8c-wrbtm (Varnish/7.2)
section-io-cache: Hit
content-encoding: gzip
section-io-id: 0a8f265fc1d3533791da13d746e2e56c
X-Firefox-Spdy: h2
|
|
| joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc | 163.171.129.207 | 200 OK | 83 kB |
URL User Request GET HTTP/2joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc IP163.171.129.207:443 ASN#54994 QUANTILNETWORKS
CertificateIssuerGlobalSign nv-sa Subject*.joinlanders.com Fingerprint08:E1:3C:E4:1B:71:26:35:DB:14:D7:31:BD:07:43:98:7B:1A:01:F1 ValidityMon, 03 Apr 2023 16:01:30 GMT - Sat, 04 May 2024 16:01:29 GMT
File typeHTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (6676) Hash6284228d4445e7bd5cb2bc1a15e6d450 7a062f36887d8e4a5c6543dfa3fb02e6be383115 ce206bb914c3926f417656af286b9eba25ec81076054a8863458fd0e8390cddb
GET /src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc HTTP/1.1
Host: joinlanders.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 23 Sep 2023 20:04:00 GMT
content-type: text/html; charset=UTF-8
server: PWS/8.3.1.0.8
cache-control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
pragma: no-cache
expires: 0
set-cookie: ldata=%7B%22program%22%3A%22EPC%22%2C%22propigate_defaults%22%3A%5B%5D%2C%22resolved_inputs%22%3A%7B%22pgm%22%3A%2263%22%2C%22wlid%22%3Anull%2C%22ofid%22%3A%221066%22%2C%22a_aid%22%3A%22epc68396%22%2C%22a_sid%22%3A%222110%22%2C%22a_bid%22%3A%22g129%22%7D%2C%22hub_uri%22%3A%22joinfinish.com%22%2C%22iframe_uri%22%3A%22joinfinish.com%5C%2Fsignup%22%2C%22geoip_uri%22%3A%22geoip.joinfinish.com%22%2C%22google_id%22%3A%22%22%2C%22geo_data%22%3A%7B%22city%22%3A%22Dilling%22%2C%22region_code%22%3A%2230%22%2C%22region_name%22%3A%22Viken%22%2C%22country_code%22%3A%22NO%22%2C%22country%22%3A%22Norway%22%2C%22postal_code%22%3A%221570%22%2C%22continent_code%22%3A%22EU%22%2C%22continent%22%3A%22Europe%22%2C%22latitude%22%3A59.3890999999999991132426657713949680328369140625%2C%22longitude%22%3A10.6760000000000001563194018672220408916473388671875%7D%7D; path=/
via: 1.1 PSygldLON4ax12:5 (W), 1.1 PS-LHR-01q9k95:8 (W)
x-px: ms PS-LHR-01q9k95LHR,ms PSygldLON4ax12LHR(origin)
x-ws-request-id: 650f44af_PSygldLON2hl59_48362-65240
X-Firefox-Spdy: h2
|
|
| pcwnyb.com/28723d75f083187/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc&lang=en&epcCID=DaWa21Q3F0N0reGekat9v3WaG3QbFdlcP&rtid=12368791401 | 207.120.33.10 | 200 OK | 30 kB |
URL GET HTTP/2pcwnyb.com/28723d75f083187/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc&lang=en&epcCID=DaWa21Q3F0N0reGekat9v3WaG3QbFdlcP&rtid=12368791401 IP207.120.33.10:443
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc CertificateIssuerLet's Encrypt Subjectpcwnyb.com Fingerprint0B:5A:80:FD:94:FA:80:69:71:D9:3E:68:4D:BC:C5:44:42:E0:A1:33 ValidityThu, 07 Sep 2023 02:07:58 GMT - Wed, 06 Dec 2023 02:07:57 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /28723d75f083187/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc&lang=en&epcCID=DaWa21Q3F0N0reGekat9v3WaG3QbFdlcP&rtid=12368791401 HTTP/1.1
Host: pcwnyb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://joinlanders.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 23 Sep 2023 20:04:03 GMT
content-type: text/html; charset=UTF-8
set-cookie: PHPSESSID=f6fbf5135ddd5f68c1587dd90ad43928; path=/; secure; SameSite=None
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
content-encoding: gzip
vary: Accept-Encoding
x-varnish: 1362912
age: 0
via: 1.1 varnish-65c66bdb8c-wrbtm (Varnish/7.2)
accept-ranges: bytes
section-io-cache: Miss
section-io-id: e42870fc565089accc1ae82eb7488b86
X-Firefox-Spdy: h2
|
|
| static.cdn.co.no/videos/cl/gg/c33/media/snd.mp3 | 163.171.129.207 | 206 Partial Content | 11 kB |
URL GET HTTP/1.1static.cdn.co.no/videos/cl/gg/c33/media/snd.mp3 IP163.171.129.207:443 ASN#54994 QUANTILNETWORKS
Requested byhttps://joinlanders.com/src/click33/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc CertificateIssuerLet's Encrypt Subjectstatic.cdn.co.no Fingerprint43:41:07:76:E5:7A:2F:C3:49:81:23:6C:BA:15:34:A6:9E:87:21:B6 ValidityFri, 01 Sep 2023 15:15:14 GMT - Thu, 30 Nov 2023 15:15:13 GMT
File typeAudio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, JntStereo\012- data Hash06bedb23315dcad66426bcd9f6caa137 df7bd253f1764fa1471e5e542e138eb80f96f82d 113ecd3a9c1be56fcdb6b5ccee199b5e5d0f8bc777fbda5b0f697e24d8186d1e
GET /videos/cl/gg/c33/media/snd.mp3 HTTP/1.1
Host: static.cdn.co.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://joinlanders.com/
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 206 Partial Content
Date: Sat, 23 Sep 2023 20:04:01 GMT
Content-Type: audio/mp3;charset=UTF-8
Content-Length: 10643
Connection: keep-alive
Server: PWS/8.3.1.0.8
Accept-Ranges: bytes
ETag: "Ft970lPxdk-hRx5eVC4TjrgPlvgt"
Last-Modified: Mon, 06 Jun 2022 13:35:17 GMT
X-Reqid: 205024922427327420221229141330OhpUCoIF
Content-Range: bytes 0-10642/10643
Age: 13620
Via: 1.1 PSygldLON4zd14:6 (W), 1.1 PSygldLON2hl59:19 (W)
X-Px: ht PSygldLON2hl59LHR
X-Ws-Request-Id: 650f44b1_PSygldLON2hl59_46114-2554
|
|
| fonts.googleapis.com/icon?family=Material+Icons | 142.250.74.106 | 200 OK | 565 B |
URL GET HTTP/3fonts.googleapis.com/icon?family=Material+Icons IP142.250.74.106:443
Requested byhttps://pcwnyb.com/28723d75f083187/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc&lang=en&epcCID=DaWa21Q3F0N0reGekat9v3WaG3QbFdlcP&rtid=12368791401 CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com FingerprintBE:40:3A:A6:DE:CC:A7:8B:75:43:68:F2:F9:56:63:71:49:61:06:49 ValidityMon, 04 Sep 2023 08:23:18 GMT - Mon, 27 Nov 2023 08:23:17 GMT
File typeASCII text, with very long lines (588), with no line terminators Hashbdcf60bde5544e1017e1f2e60888a9c7 6fb24309b7ff90c1c99d19c0c7a127a16508840e d701601406acfca6bfc0c58b411446e3e0e96c659f35c143355d3dd72c390952
GET /icon?family=Material+Icons HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pcwnyb.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 23 Sep 2023 20:04:03 GMT
date: Sat, 23 Sep 2023 20:04:03 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.googleapis.com/css2?family=Poppins:wght@300;400;600&display=swap | 142.250.74.106 | 200 OK | 3.4 kB |
URL GET HTTP/3fonts.googleapis.com/css2?family=Poppins:wght@300;400;600&display=swap IP142.250.74.106:443
Requested byhttps://pcwnyb.com/28723d75f083187/?epcVIP=63.1066.g129&f_color=ffffff&cts=8&act=epc68396.47666-324687.2110.283b0ydgm15qddz9bc&lang=en&epcCID=DaWa21Q3F0N0reGekat9v3WaG3QbFdlcP&rtid=12368791401 CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com FingerprintBE:40:3A:A6:DE:CC:A7:8B:75:43:68:F2:F9:56:63:71:49:61:06:49 ValidityMon, 04 Sep 2023 08:23:18 GMT - Mon, 27 Nov 2023 08:23:17 GMT
File typeASCII text, with very long lines (3432), with no line terminators Hash10120de20c1d2fa917f6e5d5002038b2 30fbcaf43c8d096506490ce94ab8419a59bbb86b fa5ebaea60aa8df1d4bb7f58bf19072c1b7a70879905bb780e640dcb8628d6bc
GET /css2?family=Poppins:wght@300;400;600&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pcwnyb.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 23 Sep 2023 20:04:03 GMT
date: Sat, 23 Sep 2023 20:04:03 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
54.37.238.86