t.y1h1.com/visit/5d282e030142b6000661240f?type=lpKeyError_Type_1&srcTrafficSource=Redirect&srcCampaign=0_AutoSmartlink&srcPub={sub1}&srcOffer=Smartlink_Mainstream_RandomPub&exid=1701617951-wjNilL
172.67.129.176 274 B URL t.y1h1.com/visit/5d282e030142b6000661240f?type=lpKeyError_Type_1&srcTrafficSource=Redirect&srcCampaign=0_AutoSmartlink&srcPub={sub1}&srcOffer=Smartlink_Mainstream_RandomPub&exid=1701617951-wjNilL
IP 172.67.129.176:0
File type HTML document text\012- HTML document, ASCII text, with no line terminators
Hash 5c1529349d10260f33c88ac9c1ba47f5
6e76c326d492b82af4fe9043b2208fab7deb010c
43743bd3dfa7b88193d8da610e7e4f1dddd841b114851701c1112f318aa8e215
GET /visit/5d282e030142b6000661240f?type=lpKeyError_Type_1&srcTrafficSource=Redirect&srcCampaign=0_AutoSmartlink&srcPub={sub1}&srcOffer=Smartlink_Mainstream_RandomPub&exid=1701617951-wjNilL HTTP/1.1
Host: t.y1h1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 07 Dec 2023 09:16:22 GMT
content-length: 274
refresh: 0;URL=https://t.y1h1.com/visit/61e55f98081ec20007c7f606?exid=1701940582-rUBqxN&srcTrafficSource=Redirect&srcCampaign=0_Redirect&srcPub=%7Bsub1%7D&type=Cloak
set-cookie: vid=1701940582-rUBqxN; Path=/; Domain=y1h1.com; Max-Age=604800; Expires=Thu, 14 Dec 2023 09:16:22 GMT; Secure; HttpOnly; SameSite=None
lv_5d282e030142b6000661240f=1701940582-rUBqxN; Path=/; Domain=y1h1.com; Max-Age=3600; Expires=Thu, 07 Dec 2023 10:16:22 GMT; Secure; HttpOnly; SameSite=None
vn_5d282e030142b6000661240f=1; Path=/; Domain=y1h1.com; Max-Age=3600; Expires=Thu, 07 Dec 2023 10:16:22 GMT; Secure; HttpOnly; SameSite=None
accept-ch: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Reduced
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=02wpdPgaABFlLYozcThJF7FTGTuKdsOrXQVv8R93qhcmXeyrzyemR4YhaNss9Ac7oP309KTElT%2BwNasIG0mZdKEjO5vH4JgeFPKdUqM%2BnXQIquKUdpBta3aCzQeQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 831bab5e7e8056a9-OSL
X-Firefox-Spdy: h2
t.y1h1.com/visit/61e55f98081ec20007c7f606?exid=1701940582-rUBqxN&srcTrafficSource=Redirect&srcCampaign=0_Redirect&srcPub=%7Bsub1%7D&type=Cloak
172.67.129.176 418 B URL t.y1h1.com/visit/61e55f98081ec20007c7f606?exid=1701940582-rUBqxN&srcTrafficSource=Redirect&srcCampaign=0_Redirect&srcPub=%7Bsub1%7D&type=Cloak
IP 172.67.129.176:0
File type HTML document text\012- HTML document, ASCII text, with very long lines (418), with no line terminators
Hash c6df7e854b47258b4720a8ba4adc0e31
1baae50d3f06486afdde9a75c12a69da1c8eaad7
c7ed16de44dff81d228329630537380c7ed788305d3f4d9575733b975f062ad5
GET /visit/61e55f98081ec20007c7f606?exid=1701940582-rUBqxN&srcTrafficSource=Redirect&srcCampaign=0_Redirect&srcPub=%7Bsub1%7D&type=Cloak HTTP/1.1
Host: t.y1h1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: vid=1701940582-rUBqxN; lv_5d282e030142b6000661240f=1701940582-rUBqxN; vn_5d282e030142b6000661240f=1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 07 Dec 2023 09:16:22 GMT
content-length: 418
refresh: 0;URL=https://gifts4393.giftforyou.top/sweeps/ww/giftcard2/index_en-us.php?vid=1701940582-rBtNeM&utm_medium=%7Bsub1%7D&utm_source=Redirect&utm_campaign=0_AutoSmartlink&utm_content=Smartlink_RandomPub&isp=Blix+Group+AS&city=Oslo&br=0&sp=1&iw=False&checked=0&trans=1&ipp=0&lpkey=17f5015a94ca112d82&ck=2
set-cookie: vid=1701940582-rBtNeM; Path=/; Domain=y1h1.com; Max-Age=604800; Expires=Thu, 14 Dec 2023 09:16:22 GMT; Secure; HttpOnly; SameSite=None
lv_61e55f98081ec20007c7f606=1701940582-rBtNeM; Path=/; Domain=y1h1.com; Max-Age=3600; Expires=Thu, 07 Dec 2023 10:16:22 GMT; Secure; HttpOnly; SameSite=None
vn_61e55f98081ec20007c7f606=1; Path=/; Domain=y1h1.com; Max-Age=3600; Expires=Thu, 07 Dec 2023 10:16:22 GMT; Secure; HttpOnly; SameSite=None
accept-ch: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Reduced
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dmAgUbq9KNRliiKXggFIi%2FjIp2OuqEK1PNIls%2F%2B6QnwV1YhzIp2vmYXFUo%2B9ATFMjo%2FF3YQQkGcvcEK2Z0KAhL700UUgjESD6kA5ppWK7fp6u0T5NW12tHZyyU9x"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 831bab61da1256a9-OSL
X-Firefox-Spdy: h2
gifts4393.giftforyou.top/sweeps/ww/giftcard2/menu_2x.png
172.67.212.81200 OK 15 kB URL GET HTTP/2 gifts4393.giftforyou.top/sweeps/ww/giftcard2/menu_2x.png
IP 172.67.212.81:443
Requested by https://gifts4393.giftforyou.top/sweeps/ww/giftcard2/index_en-us.php?vid=1701940582-rBtNeM&utm_medium=%7Bsub1%7D&utm_source=Redirect&utm_campaign=0_AutoSmartlink&utm_content=Smartlink_RandomPub&isp=Blix+Group+AS&city=Oslo&br=0&sp=1&iw=False&checked=0&trans=1&ipp=0&lpkey=17f5015a94ca112d82&ck=2
Certificate IssuerCloudflare, Inc.
Subjectgiftforyou.top
Fingerprint18:25:82:EE:0B:BF:44:15:C8:A5:8E:CE:31:40:54:56:76:E5:2F:20
ValidityTue, 18 Jul 2023 00:00:00 GMT - Tue, 16 Jul 2024 23:59:59 GMT
File type PNG image data, 60 x 60, 8-bit gray+alpha, non-interlaced\012- data
Hash 8714f78a15df3b8769c66518ad411404
4f1c074c4f7cd824c4e0a7a06a4f36838ec57bc7
c1d04143995e571804cca18baa14b05794545f77171d6697abde9ac432db57f1
GET /sweeps/ww/giftcard2/menu_2x.png HTTP/1.1
Host: gifts4393.giftforyou.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 07 Dec 2023 09:16:23 GMT
content-type: image/png
content-length: 15194
last-modified: Sat, 28 Aug 2021 10:59:12 GMT
etag: "612a1700-3b5a"
expires: Sat, 06 Jan 2024 09:16:23 GMT
cache-control: max-age=2592000
accept-ch: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Reduced
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iXVq26lcgvQxwF9A%2FJ0LHP6aBOs7Sr5pbJhnSgOe7RE9rGriN8AxCIW0X2GHykFQo8swQeGmpyGGBcQVjNKViJ%2FhSR8ViuFS0WL137W24WEBO45rlizqe%2FQ2pFrk8c1xUHIRTd82pc1w0S0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831bab649e2b5694-OSL
X-Firefox-Spdy: h2
gifts4393.giftforyou.top/sweeps/ww/giftcard2/like_user_1.jpg
172.67.212.81200 OK 1.3 kB URL GET HTTP/2 gifts4393.giftforyou.top/sweeps/ww/giftcard2/like_user_1.jpg
IP 172.67.212.81:443
Requested by https://gifts4393.giftforyou.top/sweeps/ww/giftcard2/index_en-us.php?vid=1701940582-rBtNeM&utm_medium=%7Bsub1%7D&utm_source=Redirect&utm_campaign=0_AutoSmartlink&utm_content=Smartlink_RandomPub&isp=Blix+Group+AS&city=Oslo&br=0&sp=1&iw=False&checked=0&trans=1&ipp=0&lpkey=17f5015a94ca112d82&ck=2
Certificate IssuerCloudflare, Inc.
Subjectgiftforyou.top
Fingerprint18:25:82:EE:0B:BF:44:15:C8:A5:8E:CE:31:40:54:56:76:E5:2F:20
ValidityTue, 18 Jul 2023 00:00:00 GMT - Tue, 16 Jul 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Hash 2aa0d43e70d60d76ac4bdff139f8c7cb
d7e3433297ad90f5d99249aee29b645265c9f3eb
e7c85bfa7ba6d75dd0de72e51da2e185351ced82b32090ab35395766ef4849fa
GET /sweeps/ww/giftcard2/like_user_1.jpg HTTP/1.1
Host: gifts4393.giftforyou.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 07 Dec 2023 09:16:23 GMT
content-type: image/jpeg
content-length: 1293
last-modified: Sat, 28 Aug 2021 10:59:12 GMT
etag: "612a1700-50d"
expires: Sat, 06 Jan 2024 09:16:23 GMT
cache-control: max-age=2592000
accept-ch: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Reduced
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=oVnPShpMKYNuwwd5DN8G7dnXA7MvMONqtUiomlbFy4Z3Ov0orVwKynCdTCIb4an4NDHXcUiC5Yot%2FIyzyZIu674f9dE9LnZqzlYoFeixMRUwf4EBIRcNTjMowSBVRSI05%2FNxqWdlC%2Fbxa3w%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831bab64be605694-OSL
X-Firefox-Spdy: h2
gifts4393.giftforyou.top/sweeps/ww/giftcard2/loading.gif
172.67.212.81200 OK 5.1 kB URL GET HTTP/2 gifts4393.giftforyou.top/sweeps/ww/giftcard2/loading.gif
IP 172.67.212.81:443
Requested by https://gifts4393.giftforyou.top/sweeps/ww/giftcard2/index_en-us.php?vid=1701940582-rBtNeM&utm_medium=%7Bsub1%7D&utm_source=Redirect&utm_campaign=0_AutoSmartlink&utm_content=Smartlink_RandomPub&isp=Blix+Group+AS&city=Oslo&br=0&sp=1&iw=False&checked=0&trans=1&ipp=0&lpkey=17f5015a94ca112d82&ck=2
Certificate IssuerCloudflare, Inc.
Subjectgiftforyou.top
Fingerprint18:25:82:EE:0B:BF:44:15:C8:A5:8E:CE:31:40:54:56:76:E5:2F:20
ValidityTue, 18 Jul 2023 00:00:00 GMT - Tue, 16 Jul 2024 23:59:59 GMT
File type GIF image data, version 89a, 50 x 50\012- data
Hash f4f031edfb2f37765dab11b35eafd026
1901e655edaaf84a56454516189adfa72c1630a4
835f56bb96eb76384dc480bc6c866efb1980d4a36ad42fbc82e46d9167542050
GET /sweeps/ww/giftcard2/loading.gif HTTP/1.1
Host: gifts4393.giftforyou.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 07 Dec 2023 09:16:23 GMT
content-type: image/gif
content-length: 5139
last-modified: Sat, 28 Aug 2021 10:59:12 GMT
etag: "612a1700-1413"
expires: Sat, 06 Jan 2024 09:16:23 GMT
cache-control: max-age=2592000
accept-ch: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Reduced
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7N9zYlxMWEfMnuxrAZ4zUG3mTnVVRd%2FRFaXAH4tRldIqB5Oo%2BGwGw4qZKIMUusBZOcq4osuZo%2BZ490r9j92KPpIhC4B7%2FGoFHqtcrCTmTWTHZpybdlhcz%2FZXQ6nnlil2Mimkl83WeZnvw2g%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831bab64be585694-OSL
X-Firefox-Spdy: h2
gifts4393.giftforyou.top/sweeps/ww/giftcard2/like_user_2.jpg
172.67.212.81200 OK 1.2 kB URL GET HTTP/2 gifts4393.giftforyou.top/sweeps/ww/giftcard2/like_user_2.jpg
IP 172.67.212.81:443
Requested by https://gifts4393.giftforyou.top/sweeps/ww/giftcard2/index_en-us.php?vid=1701940582-rBtNeM&utm_medium=%7Bsub1%7D&utm_source=Redirect&utm_campaign=0_AutoSmartlink&utm_content=Smartlink_RandomPub&isp=Blix+Group+AS&city=Oslo&br=0&sp=1&iw=False&checked=0&trans=1&ipp=0&lpkey=17f5015a94ca112d82&ck=2
Certificate IssuerCloudflare, Inc.
Subjectgiftforyou.top
Fingerprint18:25:82:EE:0B:BF:44:15:C8:A5:8E:CE:31:40:54:56:76:E5:2F:20
ValidityTue, 18 Jul 2023 00:00:00 GMT - Tue, 16 Jul 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Hash f9299c2023539a8f27a6e1b12ed260e5
046baf9bcd1bbdf9d51ca63e3899ea2e7f5de0b2
ba0c57dd9fbd100462ac62c8c8b3156caf1283d250fb56ee8ce5b0f53e575ccd
GET /sweeps/ww/giftcard2/like_user_2.jpg HTTP/1.1
Host: gifts4393.giftforyou.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 07 Dec 2023 09:16:23 GMT
content-type: image/jpeg
content-length: 1216
last-modified: Sat, 28 Aug 2021 10:59:12 GMT
etag: "612a1700-4c0"
expires: Sat, 06 Jan 2024 09:16:23 GMT
cache-control: max-age=2592000
accept-ch: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Reduced
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=otGGW48FbuYc17eM1Tc1zi0x16w%2BG14IoR8pc1p7aYwOksjVjuT872PHXx3%2FZeKmc39acJQAmfEMA8y8iKNTVIHiRSraIeS933rW7IILHNkf3K1jz%2BkLKDqNrj%2BwxkvNitjVY73MOSRAIGk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831bab64ce625694-OSL
X-Firefox-Spdy: h2
gifts4393.giftforyou.top/sweeps/ww/giftcard2/prize1.png
172.67.212.81200 OK 8.2 kB URL GET HTTP/2 gifts4393.giftforyou.top/sweeps/ww/giftcard2/prize1.png
IP 172.67.212.81:443
Requested by https://gifts4393.giftforyou.top/sweeps/ww/giftcard2/index_en-us.php?vid=1701940582-rBtNeM&utm_medium=%7Bsub1%7D&utm_source=Redirect&utm_campaign=0_AutoSmartlink&utm_content=Smartlink_RandomPub&isp=Blix+Group+AS&city=Oslo&br=0&sp=1&iw=False&checked=0&trans=1&ipp=0&lpkey=17f5015a94ca112d82&ck=2
Certificate IssuerCloudflare, Inc.
Subjectgiftforyou.top
Fingerprint18:25:82:EE:0B:BF:44:15:C8:A5:8E:CE:31:40:54:56:76:E5:2F:20
ValidityTue, 18 Jul 2023 00:00:00 GMT - Tue, 16 Jul 2024 23:59:59 GMT
File type PNG image data, 86 x 96, 8-bit/color RGBA, non-interlaced\012- data
Hash 6290cff800ceb96ee20d5a19d0664880
ec920e4a2ecb24a6efec0dd55dd72f636c198d29
d110d7d2f6ea28a3f3e757b7d73f88d9f8d5b2974cb46b4c19e9bed9afc7d5e6
GET /sweeps/ww/giftcard2/prize1.png HTTP/1.1
Host: gifts4393.giftforyou.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 07 Dec 2023 09:16:23 GMT
content-type: image/png
content-length: 8215
last-modified: Sat, 28 Aug 2021 10:59:12 GMT
etag: "612a1700-2017"
expires: Sat, 06 Jan 2024 09:16:23 GMT
cache-control: max-age=2592000
accept-ch: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Reduced
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=St0nOpEPviMIKmnEzBSb6WYE625BQC%2BErSuhZdjlmYyDzKXSxANNQawiP%2FP%2BKQnYzo9ioxbzW6Xs6SuZPEl6EAZZXMjBjTEmmc1yJVUxJhLgMfVKzMUvRwZuTauCBG87aMEHN%2FAmh2%2FuCm8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831bab64be5d5694-OSL
X-Firefox-Spdy: h2
gifts4393.giftforyou.top/sweeps/ww/giftcard2/7.jpg
172.67.212.81200 OK 2.1 kB URL GET HTTP/2 gifts4393.giftforyou.top/sweeps/ww/giftcard2/7.jpg
IP 172.67.212.81:443
Requested by https://gifts4393.giftforyou.top/sweeps/ww/giftcard2/index_en-us.php?vid=1701940582-rBtNeM&utm_medium=%7Bsub1%7D&utm_source=Redirect&utm_campaign=0_AutoSmartlink&utm_content=Smartlink_RandomPub&isp=Blix+Group+AS&city=Oslo&br=0&sp=1&iw=False&checked=0&trans=1&ipp=0&lpkey=17f5015a94ca112d82&ck=2
Certificate IssuerCloudflare, Inc.
Subjectgiftforyou.top
Fingerprint18:25:82:EE:0B:BF:44:15:C8:A5:8E:CE:31:40:54:56:76:E5:2F:20
ValidityTue, 18 Jul 2023 00:00:00 GMT - Tue, 16 Jul 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 50x50, components 3\012- data
Hash 3641990a28227bb5ed59021aff1d14e3
e6897de78a1019809f344f738a8ce2e757e10cef
8d7dc01c529864b54f1d3e7bffb73649056cea39a1907daadc18254e139c2cd6
GET /sweeps/ww/giftcard2/7.jpg HTTP/1.1
Host: gifts4393.giftforyou.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 07 Dec 2023 09:16:23 GMT
content-type: image/jpeg
content-length: 2095
last-modified: Sat, 28 Aug 2021 10:59:12 GMT
etag: "612a1700-82f"
expires: Sat, 06 Jan 2024 09:16:23 GMT
cache-control: max-age=2592000
accept-ch: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Reduced
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aQ3LuBvFh5KPXf3Y3wXixNibU8WhRznIRDAyQP7rgyJbISqU18kRsf%2F7vaTxVSb6W%2BmerDOuIe%2FxapzlYGTRohj3XolU2Z7m6lMwSY%2Ftkc9QdmcyEDiSJb9W8VOJiue1nWKVhA9lHlUQEnY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831bab64ce645694-OSL
X-Firefox-Spdy: h2
gifts4393.giftforyou.top/sweeps/ww/giftcard2/gift.png
172.67.212.81200 OK 4.1 kB URL GET HTTP/2 gifts4393.giftforyou.top/sweeps/ww/giftcard2/gift.png
IP 172.67.212.81:443
Requested by https://gifts4393.giftforyou.top/sweeps/ww/giftcard2/index_en-us.php?vid=1701940582-rBtNeM&utm_medium=%7Bsub1%7D&utm_source=Redirect&utm_campaign=0_AutoSmartlink&utm_content=Smartlink_RandomPub&isp=Blix+Group+AS&city=Oslo&br=0&sp=1&iw=False&checked=0&trans=1&ipp=0&lpkey=17f5015a94ca112d82&ck=2
Certificate IssuerCloudflare, Inc.
Subjectgiftforyou.top
Fingerprint18:25:82:EE:0B:BF:44:15:C8:A5:8E:CE:31:40:54:56:76:E5:2F:20
ValidityTue, 18 Jul 2023 00:00:00 GMT - Tue, 16 Jul 2024 23:59:59 GMT
File type PNG image data, 84 x 94, 8-bit/color RGBA, non-interlaced\012- data
Hash 9c8a99f8106a7e0c99be0e2333301537
ff30510621a4e58a72b2adaf5270fed28c944307
4fda556b7901692f8165abb1f7eea0a42f5fc54d0d2b257e8daf5a30b0b8c9c3
GET /sweeps/ww/giftcard2/gift.png HTTP/1.1
Host: gifts4393.giftforyou.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 07 Dec 2023 09:16:23 GMT
content-type: image/png
content-length: 4051
last-modified: Sat, 28 Aug 2021 10:59:12 GMT
etag: "612a1700-fd3"
expires: Sat, 06 Jan 2024 09:16:23 GMT
cache-control: max-age=2592000
accept-ch: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Reduced
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=r9ftZb0Eak8OqB%2B848sm4uBBQ2IDh%2BEpkeMQ6yyz8Pto3GAy3vpjOmSITfjnNr4pBjcds%2FrbUhiVQ0S2G0%2FJYnFktYhdOo1U%2FmK0aGHJNMlnCMyahkZcXUNvJJ6lWp2aM6dmq7t%2FBrkvSmY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831bab64be5c5694-OSL
X-Firefox-Spdy: h2
gifts4393.giftforyou.top/sweeps/ww/giftcard2/prize2.png
172.67.212.81200 OK 7.3 kB URL GET HTTP/2 gifts4393.giftforyou.top/sweeps/ww/giftcard2/prize2.png
IP 172.67.212.81:443
Requested by https://gifts4393.giftforyou.top/sweeps/ww/giftcard2/index_en-us.php?vid=1701940582-rBtNeM&utm_medium=%7Bsub1%7D&utm_source=Redirect&utm_campaign=0_AutoSmartlink&utm_content=Smartlink_RandomPub&isp=Blix+Group+AS&city=Oslo&br=0&sp=1&iw=False&checked=0&trans=1&ipp=0&lpkey=17f5015a94ca112d82&ck=2
Certificate IssuerCloudflare, Inc.
Subjectgiftforyou.top
Fingerprint18:25:82:EE:0B:BF:44:15:C8:A5:8E:CE:31:40:54:56:76:E5:2F:20
ValidityTue, 18 Jul 2023 00:00:00 GMT - Tue, 16 Jul 2024 23:59:59 GMT
File type PNG image data, 83 x 94, 8-bit/color RGBA, non-interlaced\012- data
Hash d1fea41e41e0b65df696294be795b34f
46f37e9ac56617cf366adddf2ed2389b5b6dae0d
3d89d40b25c079be8baa42705fcd9c35933b6fd1456c66e849c3fdf37aa3856f
GET /sweeps/ww/giftcard2/prize2.png HTTP/1.1
Host: gifts4393.giftforyou.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 07 Dec 2023 09:16:23 GMT
content-type: image/png
content-length: 7264
last-modified: Sat, 28 Aug 2021 10:59:12 GMT
etag: "612a1700-1c60"
expires: Sat, 06 Jan 2024 09:16:23 GMT
cache-control: max-age=2592000
accept-ch: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Reduced
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ur57ojsnP6zskcl8DQnPS0Jvm6pVKaOrponUrkk6lWQmWCnYZ1vPUeJ%2BOrfTt0fNvfy6%2FI5lccrBYUzICTwSnWSQC3ikyu9UrXUD3ovTlzKMYWL665lxt0JDbMh16tpAd86%2FBRre2mLrw%2FQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831bab64be5e5694-OSL
X-Firefox-Spdy: h2
gifts4393.giftforyou.top/sweeps/ww/giftcard2/3.jpg
172.67.212.81200 OK 1.6 kB URL GET HTTP/2 gifts4393.giftforyou.top/sweeps/ww/giftcard2/3.jpg
IP 172.67.212.81:443
Requested by https://gifts4393.giftforyou.top/sweeps/ww/giftcard2/index_en-us.php?vid=1701940582-rBtNeM&utm_medium=%7Bsub1%7D&utm_source=Redirect&utm_campaign=0_AutoSmartlink&utm_content=Smartlink_RandomPub&isp=Blix+Group+AS&city=Oslo&br=0&sp=1&iw=False&checked=0&trans=1&ipp=0&lpkey=17f5015a94ca112d82&ck=2
Certificate IssuerCloudflare, Inc.
Subjectgiftforyou.top
Fingerprint18:25:82:EE:0B:BF:44:15:C8:A5:8E:CE:31:40:54:56:76:E5:2F:20
ValidityTue, 18 Jul 2023 00:00:00 GMT - Tue, 16 Jul 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 50x50, components 3\012- data
Hash 8f52afa9e7a247acf53632fdfd62aa21
45fa6dc2c4bc5f134bcc59bd1b80214daac8f84b
58db8ee68cc5c89b372646ed7c7ac68588fcf2635452a831470e6a572bc49842
GET /sweeps/ww/giftcard2/3.jpg HTTP/1.1
Host: gifts4393.giftforyou.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 07 Dec 2023 09:16:23 GMT
content-type: image/jpeg
content-length: 1648
last-modified: Sat, 28 Aug 2021 10:59:12 GMT
etag: "612a1700-670"
expires: Sat, 06 Jan 2024 09:16:23 GMT
cache-control: max-age=2592000
accept-ch: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Reduced
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TLOjtxjxOoDgyrecwAUI5wO7VpmPrBw9nNocHfxpPoGMRM3LoC0PJTwerpP5Qk0DyVLy%2FZuk5n5ygHkwAvYr1cNAt%2BHQAsQxINQrhle4v6IP%2Bkq74pGwhDzqpSrTM%2BjsNCss40%2F2k0%2FI5zk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831bab64ce755694-OSL
X-Firefox-Spdy: h2
gifts4393.giftforyou.top/sweeps/ww/giftcard2/2.jpg
172.67.212.81200 OK 2.2 kB URL GET HTTP/2 gifts4393.giftforyou.top/sweeps/ww/giftcard2/2.jpg
IP 172.67.212.81:443
Requested by https://gifts4393.giftforyou.top/sweeps/ww/giftcard2/index_en-us.php?vid=1701940582-rBtNeM&utm_medium=%7Bsub1%7D&utm_source=Redirect&utm_campaign=0_AutoSmartlink&utm_content=Smartlink_RandomPub&isp=Blix+Group+AS&city=Oslo&br=0&sp=1&iw=False&checked=0&trans=1&ipp=0&lpkey=17f5015a94ca112d82&ck=2
Certificate IssuerCloudflare, Inc.
Subjectgiftforyou.top
Fingerprint18:25:82:EE:0B:BF:44:15:C8:A5:8E:CE:31:40:54:56:76:E5:2F:20
ValidityTue, 18 Jul 2023 00:00:00 GMT - Tue, 16 Jul 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 50x50, components 3\012- data
Hash 7af1c5ea7c34e1748aa8e4ac65d26256
506ccb8359f870d196643c85c38a8739e044b78b
afa0d114beef551ec69b8a3bf82f292729b7e8930f022a83bd68bec11e5fe474
GET /sweeps/ww/giftcard2/2.jpg HTTP/1.1
Host: gifts4393.giftforyou.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 07 Dec 2023 09:16:23 GMT
content-type: image/jpeg
content-length: 2182
last-modified: Sat, 28 Aug 2021 10:59:12 GMT
etag: "612a1700-886"
expires: Sat, 06 Jan 2024 09:16:23 GMT
cache-control: max-age=2592000
accept-ch: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Reduced
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NYSwS9W4i1Ro6GEtBTF2HwE8uEINL2ClkC4Yqg%2F3udIb8tQsMbtOx0bfc8mIwT2GpzUbtQE2Dc52KtKpThnt3aiO6B3QKbuvgxSM%2FY%2BRhpkVPHFHuxDi%2FnVIxcTyp1VB8ZpJJgwvhbBRNKE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831bab64ce735694-OSL
X-Firefox-Spdy: h2
rs.y1h1.com/recaptcha.css
104.21.1.180200 OK 28 B URL GET HTTP/2 rs.y1h1.com/recaptcha.css
IP 104.21.1.180:443
Requested by https://gifts4393.giftforyou.top/sweeps/ww/giftcard2/index_en-us.php?vid=1701940582-rBtNeM&utm_medium=%7Bsub1%7D&utm_source=Redirect&utm_campaign=0_AutoSmartlink&utm_content=Smartlink_RandomPub&isp=Blix+Group+AS&city=Oslo&br=0&sp=1&iw=False&checked=0&trans=1&ipp=0&lpkey=17f5015a94ca112d82&ck=2
Certificate IssuerCloudflare, Inc.
Subjecty1h1.com
FingerprintCF:8A:ED:DF:BB:57:09:E6:84:5E:C8:B0:2F:BE:C2:A8:51:32:58:F8
ValiditySun, 02 Apr 2023 00:00:00 GMT - Mon, 01 Apr 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 8f48e083a831bd16da0aada175478aaa
df342632e700b5453c189d3129a1e7c5a27598c6
ec8e585ab06e164d11e99adcf9b18d3074de0ece7c922fc6cc99d86fad4d9ea7
GET /recaptcha.css HTTP/1.1
Host: rs.y1h1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 07 Dec 2023 09:16:23 GMT
content-type: text/css
content-length: 28
accept-ch: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Reduced
cache-control: max-age=43200
cf-bgj: minify
cf-polished: origSize=31
etag: "5dc0edfb-1f"
expires: Thu, 07 Dec 2023 20:09:59 GMT
last-modified: Tue, 05 Nov 2019 03:35:23 GMT
cf-cache-status: HIT
age: 3984
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hs541McvQwVmt3%2FtA%2BSAUOc1g1mqwpH36%2F%2B6s4TlnusnM4Zi8BJhu86kSBcfMPKH2Oc%2F9XZf3xtobqrjaScRYm4%2B0OKR%2FKxrvl0sy8lT4DFtRzIcwAyCAE4BIdf5hQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831bab652eb45684-OSL
X-Firefox-Spdy: h2
gifts4393.giftforyou.top/sweeps/ww/giftcard2/4.jpg
172.67.212.81200 OK 1.8 kB URL GET HTTP/2 gifts4393.giftforyou.top/sweeps/ww/giftcard2/4.jpg
IP 172.67.212.81:443
Requested by https://gifts4393.giftforyou.top/sweeps/ww/giftcard2/index_en-us.php?vid=1701940582-rBtNeM&utm_medium=%7Bsub1%7D&utm_source=Redirect&utm_campaign=0_AutoSmartlink&utm_content=Smartlink_RandomPub&isp=Blix+Group+AS&city=Oslo&br=0&sp=1&iw=False&checked=0&trans=1&ipp=0&lpkey=17f5015a94ca112d82&ck=2
Certificate IssuerCloudflare, Inc.
Subjectgiftforyou.top
Fingerprint18:25:82:EE:0B:BF:44:15:C8:A5:8E:CE:31:40:54:56:76:E5:2F:20
ValidityTue, 18 Jul 2023 00:00:00 GMT - Tue, 16 Jul 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 50x50, components 3\012- data
Hash 59389d99986c2c273716a3a8318d137a
fb4182ad157fd847a0e454263fb1ce981751ae8e
a76e62e7aa1c08feb38cc3203ec6ae986bb5bfdf1820dd42b256061fa2a0990f
GET /sweeps/ww/giftcard2/4.jpg HTTP/1.1
Host: gifts4393.giftforyou.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 07 Dec 2023 09:16:23 GMT
content-type: image/jpeg
content-length: 1803
last-modified: Sat, 28 Aug 2021 10:59:12 GMT
etag: "612a1700-70b"
expires: Sat, 06 Jan 2024 09:16:23 GMT
cache-control: max-age=2592000
accept-ch: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Reduced
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=drn4UVcY5h2HqRLxun%2BUy1ZzRMnJ%2FVOHbm6QLB3zfuNxc%2BF1Kw8e5wdyfn%2BwFBtukCZRckjUCLlJ8gC%2FULIt1lIs9w8oG5k7MzzjHzsQOACLarmPb2kHa2bX6CisSok73VjiqbrOY7SU0EI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831bab64ce765694-OSL
X-Firefox-Spdy: h2
gifts4393.giftforyou.top/sweeps/ww/giftcard2/6.jpg
172.67.212.81200 OK 1.5 kB URL GET HTTP/2 gifts4393.giftforyou.top/sweeps/ww/giftcard2/6.jpg
IP 172.67.212.81:443
Requested by https://gifts4393.giftforyou.top/sweeps/ww/giftcard2/index_en-us.php?vid=1701940582-rBtNeM&utm_medium=%7Bsub1%7D&utm_source=Redirect&utm_campaign=0_AutoSmartlink&utm_content=Smartlink_RandomPub&isp=Blix+Group+AS&city=Oslo&br=0&sp=1&iw=False&checked=0&trans=1&ipp=0&lpkey=17f5015a94ca112d82&ck=2
Certificate IssuerCloudflare, Inc.
Subjectgiftforyou.top
Fingerprint18:25:82:EE:0B:BF:44:15:C8:A5:8E:CE:31:40:54:56:76:E5:2F:20
ValidityTue, 18 Jul 2023 00:00:00 GMT - Tue, 16 Jul 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 50x50, components 3\012- data
Hash 5cc7c7967e306b120f82fd0db3b457f6
db91fe10bd961a81c0cd0862c5f4836a50e44dd6
5f49dbcc11d1704c3f66ea256fc589c602cee87fea1f10d2d24181aeaf30ec14
GET /sweeps/ww/giftcard2/6.jpg HTTP/1.1
Host: gifts4393.giftforyou.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 07 Dec 2023 09:16:23 GMT
content-type: image/jpeg
content-length: 1495
last-modified: Sat, 28 Aug 2021 10:59:12 GMT
etag: "612a1700-5d7"
expires: Sat, 06 Jan 2024 09:16:23 GMT
cache-control: max-age=2592000
accept-ch: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Reduced
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=p%2BhLurCQNv6jHSxgTKO8vUxM1dpDlqYEDwGCsOWrmc3GHF3rfJ%2FMpGPVxqQwHmptV%2FeOqh5lDnA89gQ5c9GBf5Ru4z%2F%2BFjIpWIV%2FlINl6Yo83DHtzLdE4EsFpgIIxwi9qBAGLai9YBhln0I%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831bab64eeac5694-OSL
X-Firefox-Spdy: h2
gifts4393.giftforyou.top/sweeps/ww/giftcard2/1.jpg
172.67.212.81200 OK 1.9 kB URL GET HTTP/2 gifts4393.giftforyou.top/sweeps/ww/giftcard2/1.jpg
IP 172.67.212.81:443
Requested by https://gifts4393.giftforyou.top/sweeps/ww/giftcard2/index_en-us.php?vid=1701940582-rBtNeM&utm_medium=%7Bsub1%7D&utm_source=Redirect&utm_campaign=0_AutoSmartlink&utm_content=Smartlink_RandomPub&isp=Blix+Group+AS&city=Oslo&br=0&sp=1&iw=False&checked=0&trans=1&ipp=0&lpkey=17f5015a94ca112d82&ck=2
Certificate IssuerCloudflare, Inc.
Subjectgiftforyou.top
Fingerprint18:25:82:EE:0B:BF:44:15:C8:A5:8E:CE:31:40:54:56:76:E5:2F:20
ValidityTue, 18 Jul 2023 00:00:00 GMT - Tue, 16 Jul 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 50x50, components 3\012- data
Hash 7c4c03a240fbd38d376111329cb3399c
429f149a2f076040c32d328f89b2099308835d70
1ad68d21bdc5d7616e0ea09fda1fe683ac7ff548e3afa35680de2614dfbee051
GET /sweeps/ww/giftcard2/1.jpg HTTP/1.1
Host: gifts4393.giftforyou.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 07 Dec 2023 09:16:23 GMT
content-type: image/jpeg
content-length: 1863
last-modified: Sat, 28 Aug 2021 10:59:12 GMT
etag: "612a1700-747"
expires: Sat, 06 Jan 2024 09:16:23 GMT
cache-control: max-age=2592000
accept-ch: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Reduced
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AmEwL1xXtEMcuHoyr5cufIWuRM9Kvgm8NPxU6kxTQ143Lvdo7Q56bDdWNkQ3Iz6TI9xvEsi95tIbLD67BeqYWe4HQQRUkhuXTb9sFWIy1SNF%2Fh1mVYV6p8iarLylaxyzRuuRQVrADtTKshU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831bab64ff015694-OSL
X-Firefox-Spdy: h2
gifts4393.giftforyou.top/sweeps/ww/giftcard2/8.jpg
172.67.212.81200 OK 1.6 kB URL GET HTTP/2 gifts4393.giftforyou.top/sweeps/ww/giftcard2/8.jpg
IP 172.67.212.81:443
Requested by https://gifts4393.giftforyou.top/sweeps/ww/giftcard2/index_en-us.php?vid=1701940582-rBtNeM&utm_medium=%7Bsub1%7D&utm_source=Redirect&utm_campaign=0_AutoSmartlink&utm_content=Smartlink_RandomPub&isp=Blix+Group+AS&city=Oslo&br=0&sp=1&iw=False&checked=0&trans=1&ipp=0&lpkey=17f5015a94ca112d82&ck=2
Certificate IssuerCloudflare, Inc.
Subjectgiftforyou.top
Fingerprint18:25:82:EE:0B:BF:44:15:C8:A5:8E:CE:31:40:54:56:76:E5:2F:20
ValidityTue, 18 Jul 2023 00:00:00 GMT - Tue, 16 Jul 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 50x50, components 3\012- data
Hash c31e3d6f2d5d38af20fee54b89568db4
38570ab4bd66cf8421877b46486b106beb925787
49194aa4fbfb6dfbeaa47328bd1a721e96c80e7d78cb8a6a15febb7a59d1c9e9
GET /sweeps/ww/giftcard2/8.jpg HTTP/1.1
Host: gifts4393.giftforyou.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 07 Dec 2023 09:16:23 GMT
content-type: image/jpeg
content-length: 1561
last-modified: Sat, 28 Aug 2021 10:59:12 GMT
etag: "612a1700-619"
expires: Sat, 06 Jan 2024 09:16:23 GMT
cache-control: max-age=2592000
accept-ch: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Reduced
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=C%2BBAU0xyeadNbWMfwx5lLzq89XE7CVMUi51I1CqRgN2fnLDk8oBjYhPb%2B%2F9WUGUdsAA6qrSCc5mVIcml%2B%2BaoWt96TY5dc%2BMdXPje0nNQ%2BXhFiVnm0GKUGvmfZBSudG6Zyu8opZncvcNsqYo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831bab650f105694-OSL
X-Firefox-Spdy: h2
gifts4393.giftforyou.top/sweeps/ww/giftcard2/clip_footer_3.png
172.67.212.81200 OK 2.5 kB URL GET HTTP/2 gifts4393.giftforyou.top/sweeps/ww/giftcard2/clip_footer_3.png
IP 172.67.212.81:443
Requested by https://gifts4393.giftforyou.top/sweeps/ww/giftcard2/index_en-us.php?vid=1701940582-rBtNeM&utm_medium=%7Bsub1%7D&utm_source=Redirect&utm_campaign=0_AutoSmartlink&utm_content=Smartlink_RandomPub&isp=Blix+Group+AS&city=Oslo&br=0&sp=1&iw=False&checked=0&trans=1&ipp=0&lpkey=17f5015a94ca112d82&ck=2
Certificate IssuerCloudflare, Inc.
Subjectgiftforyou.top
Fingerprint18:25:82:EE:0B:BF:44:15:C8:A5:8E:CE:31:40:54:56:76:E5:2F:20
ValidityTue, 18 Jul 2023 00:00:00 GMT - Tue, 16 Jul 2024 23:59:59 GMT
File type PNG image data, 52 x 59, 8-bit colormap, non-interlaced\012- data
Hash e1b626392882cc25b4d891afaa68afd4
454d7abdbc2548d04feb95436ea0ab4126b4f00b
ef3b8785199a0a640150a9d9ceb9b7cff2b118ee377ce36317d4a3e716bd944f
GET /sweeps/ww/giftcard2/clip_footer_3.png HTTP/1.1
Host: gifts4393.giftforyou.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 07 Dec 2023 09:16:23 GMT
content-type: image/png
content-length: 2460
last-modified: Sat, 28 Aug 2021 10:59:12 GMT
etag: "612a1700-99c"
expires: Sat, 06 Jan 2024 09:16:23 GMT
cache-control: max-age=2592000
accept-ch: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Reduced
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=O5CFsj1Sm1epT%2BGHNZfldIqHJdA0NCCkfW%2FLx22SJeLLVTgMgcLqDH1OgepQDqztwPrM1MISKg2QrJKtl2GpiRujaUexhAyOYpyLdhwQAVBiF924%2FFmU4KAchnl%2BOPcf0z4iB8%2BAAxzpu0k%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831bab650f125694-OSL
X-Firefox-Spdy: h2
gifts4393.giftforyou.top/sweeps/ww/giftcard2/footer_right.png
172.67.212.81200 OK 6.8 kB URL GET HTTP/2 gifts4393.giftforyou.top/sweeps/ww/giftcard2/footer_right.png
IP 172.67.212.81:443
Requested by https://gifts4393.giftforyou.top/sweeps/ww/giftcard2/index_en-us.php?vid=1701940582-rBtNeM&utm_medium=%7Bsub1%7D&utm_source=Redirect&utm_campaign=0_AutoSmartlink&utm_content=Smartlink_RandomPub&isp=Blix+Group+AS&city=Oslo&br=0&sp=1&iw=False&checked=0&trans=1&ipp=0&lpkey=17f5015a94ca112d82&ck=2
Certificate IssuerCloudflare, Inc.
Subjectgiftforyou.top
Fingerprint18:25:82:EE:0B:BF:44:15:C8:A5:8E:CE:31:40:54:56:76:E5:2F:20
ValidityTue, 18 Jul 2023 00:00:00 GMT - Tue, 16 Jul 2024 23:59:59 GMT
File type PNG image data, 300 x 118, 8-bit/color RGB, non-interlaced\012- data
Hash ed8f956b5be34d80b8b6320dc43741ab
8448e9bcc591804bc820944e6cc073cf363d005a
1f69493b3c8fa89a0f217632374effe57b80d981d1726604e1283b9d3663abd0
GET /sweeps/ww/giftcard2/footer_right.png HTTP/1.1
Host: gifts4393.giftforyou.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 07 Dec 2023 09:16:23 GMT
content-type: image/png
content-length: 6825
last-modified: Sat, 28 Aug 2021 10:59:12 GMT
etag: "612a1700-1aa9"
expires: Sat, 06 Jan 2024 09:16:23 GMT
cache-control: max-age=2592000
accept-ch: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Reduced
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qZH%2B3zq0t8wsjg4syy8fOL4aKQIi3r0JF1XEHNGr%2FZdc31JwQl5GM4eLRhh89JOcCvIW%2Fgi6dbUT6rK7oH%2FPZmKgc11CFerUaqf4K8zaoPJvET421LxSlAn2AqiNQIrK1oAiOZTMLg%2FMZs8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831bab650f1f5694-OSL
X-Firefox-Spdy: h2
gifts4393.giftforyou.top/sweeps/ww/giftcard2/pw_ix2.png
172.67.212.81200 OK 74 kB URL GET HTTP/2 gifts4393.giftforyou.top/sweeps/ww/giftcard2/pw_ix2.png
IP 172.67.212.81:443
Requested by https://gifts4393.giftforyou.top/sweeps/ww/giftcard2/index_en-us.php?vid=1701940582-rBtNeM&utm_medium=%7Bsub1%7D&utm_source=Redirect&utm_campaign=0_AutoSmartlink&utm_content=Smartlink_RandomPub&isp=Blix+Group+AS&city=Oslo&br=0&sp=1&iw=False&checked=0&trans=1&ipp=0&lpkey=17f5015a94ca112d82&ck=2
Certificate IssuerCloudflare, Inc.
Subjectgiftforyou.top
Fingerprint18:25:82:EE:0B:BF:44:15:C8:A5:8E:CE:31:40:54:56:76:E5:2F:20
ValidityTue, 18 Jul 2023 00:00:00 GMT - Tue, 16 Jul 2024 23:59:59 GMT
File type PNG image data, 501 x 501, 8-bit/color RGBA, non-interlaced\012- data
Hash b9df5f56ef0c73de5d98acb6463a5663
935ed05378fd9461d074079f43d53187423138ff
5265aaacece3998b6363becfdd7e2a32eb53fb0a292e618701c2dc56a2405f93
GET /sweeps/ww/giftcard2/pw_ix2.png HTTP/1.1
Host: gifts4393.giftforyou.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 07 Dec 2023 09:16:23 GMT
content-type: image/png
content-length: 74474
last-modified: Sat, 28 Aug 2021 10:59:12 GMT
etag: "612a1700-122ea"
expires: Sat, 06 Jan 2024 09:16:23 GMT
cache-control: max-age=2592000
accept-ch: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Reduced
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Wssuf4BML49cJcpyk5lJQTkhpO%2BRIgEEbxNs01tfzDjFwvhBvwTTZ76uzPmMzIE7XGRbCgbAeYL6fIzZAcsXv5txEoPh%2FoRUIupYzv1FZ6JXmUt2%2BzR0jb%2Fq62DmE1WsHdNqyrumJjDkSxo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831bab64be5a5694-OSL
X-Firefox-Spdy: h2
gifts4393.giftforyou.top/sweeps/ww/giftcard2/whatsapp-official-logo-png-download.png
172.67.212.81200 OK 218 kB URL GET HTTP/2 gifts4393.giftforyou.top/sweeps/ww/giftcard2/whatsapp-official-logo-png-download.png
IP 172.67.212.81:443
Requested by https://gifts4393.giftforyou.top/sweeps/ww/giftcard2/index_en-us.php?vid=1701940582-rBtNeM&utm_medium=%7Bsub1%7D&utm_source=Redirect&utm_campaign=0_AutoSmartlink&utm_content=Smartlink_RandomPub&isp=Blix+Group+AS&city=Oslo&br=0&sp=1&iw=False&checked=0&trans=1&ipp=0&lpkey=17f5015a94ca112d82&ck=2
Certificate IssuerCloudflare, Inc.
Subjectgiftforyou.top
Fingerprint18:25:82:EE:0B:BF:44:15:C8:A5:8E:CE:31:40:54:56:76:E5:2F:20
ValidityTue, 18 Jul 2023 00:00:00 GMT - Tue, 16 Jul 2024 23:59:59 GMT
File type PNG image data, 1012 x 1024, 8-bit/color RGBA, non-interlaced\012- data
Size 218 kB (217588 bytes)
Hash 569f0618faf737c699990a7b93e5f5b0
61648e75b7583f5c77a6856d70b0abd1913b830d
2d35027ed66ca224dd911778b3862002ca70e3c5282fbc4dde91136701c71922
GET /sweeps/ww/giftcard2/whatsapp-official-logo-png-download.png HTTP/1.1
Host: gifts4393.giftforyou.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 07 Dec 2023 09:16:23 GMT
content-type: image/png
content-length: 217588
last-modified: Sat, 28 Aug 2021 10:59:12 GMT
etag: "612a1700-351f4"
expires: Sat, 06 Jan 2024 09:16:23 GMT
cache-control: max-age=2592000
accept-ch: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Reduced
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GAZ4tuHa4rKdzDSyFxmuFwJfsr1gcwQIA4LamZzNcfMYquYuvMYpmHx7xz1pwT4QE9jpQAamVDT%2FIn%2BHeyKuG0zGkVwBTO6L8Bqkuk8%2FKH%2B8EVL6v9vbl8gSsyvykC0Ggk4pNGo0kHw2EHw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831bab649e2c5694-OSL
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-37GE99Q100
142.250.74.72200 OK 86 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=G-37GE99Q100
IP 142.250.74.72:443
Requested by https://gifts4393.giftforyou.top/sweeps/ww/giftcard2/index_en-us.php?vid=1701940582-rBtNeM&utm_medium=%7Bsub1%7D&utm_source=Redirect&utm_campaign=0_AutoSmartlink&utm_content=Smartlink_RandomPub&isp=Blix+Group+AS&city=Oslo&br=0&sp=1&iw=False&checked=0&trans=1&ipp=0&lpkey=17f5015a94ca112d82&ck=2
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (3034)
Hash f972475124b9c28628f2ab1c9d1e688b
41358151b67bb817c9fc1b69060826247f09ce0a
e9a141e847147116c6024875ba99a5e0be6cc05f50d16d0bc4aa7446d510e900
GET /gtag/js?id=G-37GE99Q100 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 07 Dec 2023 09:16:23 GMT
expires: Thu, 07 Dec 2023 09:16:23 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 85485
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
gifts4393.giftforyou.top/sweeps/ww/giftcard2/comment_action_2x.png
172.67.212.81200 OK 641 B URL GET HTTP/2 gifts4393.giftforyou.top/sweeps/ww/giftcard2/comment_action_2x.png
IP 172.67.212.81:443
Requested by https://gifts4393.giftforyou.top/sweeps/ww/giftcard2/index_en-us.php?vid=1701940582-rBtNeM&utm_medium=%7Bsub1%7D&utm_source=Redirect&utm_campaign=0_AutoSmartlink&utm_content=Smartlink_RandomPub&isp=Blix+Group+AS&city=Oslo&br=0&sp=1&iw=False&checked=0&trans=1&ipp=0&lpkey=17f5015a94ca112d82&ck=2
Certificate IssuerCloudflare, Inc.
Subjectgiftforyou.top
Fingerprint18:25:82:EE:0B:BF:44:15:C8:A5:8E:CE:31:40:54:56:76:E5:2F:20
ValidityTue, 18 Jul 2023 00:00:00 GMT - Tue, 16 Jul 2024 23:59:59 GMT
File type PNG image data, 24 x 120, 8-bit colormap, non-interlaced\012- data
Hash e9b3872b3e63e19728176d45f0aa6986
b638f89d5d80c4cd65327da973c52f778e30bd55
a3f59e07404f1745bed88a314113a86da376526e7e1e555c99b3e249178c6ba5
GET /sweeps/ww/giftcard2/comment_action_2x.png HTTP/1.1
Host: gifts4393.giftforyou.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gifts4393.giftforyou.top/sweeps/ww/giftcard2/jumostyle.css
Cookie: googtrans=/auto/en-US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 07 Dec 2023 09:16:24 GMT
content-type: image/png
content-length: 641
last-modified: Sat, 28 Aug 2021 10:59:12 GMT
etag: "612a1700-281"
expires: Sat, 06 Jan 2024 09:16:24 GMT
cache-control: max-age=2592000
accept-ch: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Reduced
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MFpGjI4g7lDSd9yYeQ0HcgtmAe7DNFiwaxRMDlEo3sYK5NToV0G0EAlx9U7VCQwq1zrF48FivSWbuDZNFBuREUFHxVCGHinV6DXK8KX1QdVmND9ldkdcnxOiMkGmPjCq3QWqVgowOn7QwHE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831bab6b9e0e5694-OSL
X-Firefox-Spdy: h2
gifts4393.giftforyou.top/sweeps/ww/giftcard2/notify_2x.png
172.67.212.81200 OK 1.2 kB URL GET HTTP/2 gifts4393.giftforyou.top/sweeps/ww/giftcard2/notify_2x.png
IP 172.67.212.81:443
Requested by https://gifts4393.giftforyou.top/sweeps/ww/giftcard2/index_en-us.php?vid=1701940582-rBtNeM&utm_medium=%7Bsub1%7D&utm_source=Redirect&utm_campaign=0_AutoSmartlink&utm_content=Smartlink_RandomPub&isp=Blix+Group+AS&city=Oslo&br=0&sp=1&iw=False&checked=0&trans=1&ipp=0&lpkey=17f5015a94ca112d82&ck=2
Certificate IssuerCloudflare, Inc.
Subjectgiftforyou.top
Fingerprint18:25:82:EE:0B:BF:44:15:C8:A5:8E:CE:31:40:54:56:76:E5:2F:20
ValidityTue, 18 Jul 2023 00:00:00 GMT - Tue, 16 Jul 2024 23:59:59 GMT
File type PNG image data, 56 x 46, 8-bit/color RGBA, non-interlaced\012- data
Hash f13fc2443b52ebc1535d3005ddcccb13
f4f7936ded15daf1b9bc8331e913e7d44d3b0da8
33774a02b8eb284b011ccbcd96e46f10132d50e26ec87491cbb1250dcd1140b2
GET /sweeps/ww/giftcard2/notify_2x.png HTTP/1.1
Host: gifts4393.giftforyou.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gifts4393.giftforyou.top/sweeps/ww/giftcard2/jumostyle.css
Cookie: googtrans=/auto/en-US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 07 Dec 2023 09:16:24 GMT
content-type: image/png
content-length: 1157
last-modified: Sat, 28 Aug 2021 10:59:12 GMT
etag: "612a1700-485"
expires: Sat, 06 Jan 2024 09:16:24 GMT
cache-control: max-age=2592000
accept-ch: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Reduced
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0JxMo2WPK7skkQHLyL1cs64d%2BWeYjOJK2zvx8hrcF4StS8zS5JT565UbZbLoKtpv3YR56BXZBQM53G1w4LOSzGNtXqRmBNxDz8%2BINKAvwoB7fDex%2FANvPqDBL19bTI6xwFT4RZk630Y7ASA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831bab6b9dff5694-OSL
X-Firefox-Spdy: h2
gifts4393.giftforyou.top/sweeps/ww/giftcard2/newmain.js
172.67.212.81200 OK 3.2 kB URL GET HTTP/2 gifts4393.giftforyou.top/sweeps/ww/giftcard2/newmain.js
IP 172.67.212.81:443
Requested by https://gifts4393.giftforyou.top/sweeps/ww/giftcard2/index_en-us.php?vid=1701940582-rBtNeM&utm_medium=%7Bsub1%7D&utm_source=Redirect&utm_campaign=0_AutoSmartlink&utm_content=Smartlink_RandomPub&isp=Blix+Group+AS&city=Oslo&br=0&sp=1&iw=False&checked=0&trans=1&ipp=0&lpkey=17f5015a94ca112d82&ck=2
Certificate IssuerCloudflare, Inc.
Subjectgiftforyou.top
Fingerprint18:25:82:EE:0B:BF:44:15:C8:A5:8E:CE:31:40:54:56:76:E5:2F:20
ValidityTue, 18 Jul 2023 00:00:00 GMT - Tue, 16 Jul 2024 23:59:59 GMT
File type ASCII text, with CRLF line terminators
Hash 3b2681f3ab28a976311d724cd06c72ab
fb5134f8c92a45779c54b44c3e8f3058b895b32c
fd847f161a4f61ba58d0e50146bafb435aa5b9fcd48aa6f2c00434f9f41798d0
GET /sweeps/ww/giftcard2/newmain.js HTTP/1.1
Host: gifts4393.giftforyou.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gifts4393.giftforyou.top/sweeps/ww/giftcard2/index_en-us.php?vid=1701940582-rBtNeM&utm_medium=%7Bsub1%7D&utm_source=Redirect&utm_campaign=0_AutoSmartlink&utm_content=Smartlink_RandomPub&isp=Blix+Group+AS&city=Oslo&br=0&sp=1&iw=False&checked=0&trans=1&ipp=0&lpkey=17f5015a94ca112d82&ck=2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 07 Dec 2023 09:16:23 GMT
content-type: application/javascript
last-modified: Mon, 18 Oct 2021 21:08:10 GMT
vary: Accept-Encoding
etag: W/"616de23a-110b"
expires: Thu, 07 Dec 2023 21:16:23 GMT
cache-control: max-age=43200
accept-ch: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Reduced
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EuisLU%2B%2BOWJ8%2FYR9XquNII18j%2BePLxtvFR5LSyIRfD5IcbSEliwsKn6%2F%2Frk0PrbX9O%2BgV%2FntH5n%2BSXf6D8LYk2Dt2kEG8qWzP3Fu8t%2BKtWBMnFN12cT1OQjLskWWZDEgFLw8JyPysove9zE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 831bab648e1b5694-OSL
content-encoding: br
X-Firefox-Spdy: h2
gifts4393.giftforyou.top/sweeps/ww/giftcard2/spin_prize2.png
172.67.212.81200 OK 20 kB URL GET HTTP/2 gifts4393.giftforyou.top/sweeps/ww/giftcard2/spin_prize2.png
IP 172.67.212.81:443
Requested by https://gifts4393.giftforyou.top/sweeps/ww/giftcard2/index_en-us.php?vid=1701940582-rBtNeM&utm_medium=%7Bsub1%7D&utm_source=Redirect&utm_campaign=0_AutoSmartlink&utm_content=Smartlink_RandomPub&isp=Blix+Group+AS&city=Oslo&br=0&sp=1&iw=False&checked=0&trans=1&ipp=0&lpkey=17f5015a94ca112d82&ck=2
Certificate IssuerCloudflare, Inc.
Subjectgiftforyou.top
Fingerprint18:25:82:EE:0B:BF:44:15:C8:A5:8E:CE:31:40:54:56:76:E5:2F:20
ValidityTue, 18 Jul 2023 00:00:00 GMT - Tue, 16 Jul 2024 23:59:59 GMT
File type PNG image data, 142 x 173, 8-bit/color RGBA, non-interlaced\012- data
Hash 841b7dfad526a441082480272cec4d68
449f96d4797b6fce41dd7a528d37ef6a8915c963
a8d7a8a7438d524a0428090ed9b4a4524cd02b5df2afa35ffeafbe4526fc8be3
GET /sweeps/ww/giftcard2/spin_prize2.png HTTP/1.1
Host: gifts4393.giftforyou.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gifts4393.giftforyou.top/sweeps/ww/giftcard2/jumostyle.css
Cookie: googtrans=/auto/en-US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 07 Dec 2023 09:16:24 GMT
content-type: image/png
content-length: 20274
last-modified: Sat, 28 Aug 2021 10:59:12 GMT
etag: "612a1700-4f32"
expires: Sat, 06 Jan 2024 09:16:24 GMT
cache-control: max-age=2592000
accept-ch: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Reduced
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1gyfhFnhkiqrgvBM8YoV9sSkDqIMD7a%2BA%2F0kJ5s%2B9vboAxqEibAmGtVHeCl5isdrip0Q9McTooFvt5pKU5vLFN9fUXO8aZ6SntkAyNE5MaO4t1fUqB3Lo7b3JD4AvuA6%2BNzmVemZvG4eazc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831bab6b9e085694-OSL
X-Firefox-Spdy: h2
t.y1h1.com/update?eventSub3=view&event3=1
104.21.1.180200 OK 2 B URL GET HTTP/2 t.y1h1.com/update?eventSub3=view&event3=1
IP 104.21.1.180:443
Requested by https://gifts4393.giftforyou.top/sweeps/ww/giftcard2/index_en-us.php?vid=1701940582-rBtNeM&utm_medium=%7Bsub1%7D&utm_source=Redirect&utm_campaign=0_AutoSmartlink&utm_content=Smartlink_RandomPub&isp=Blix+Group+AS&city=Oslo&br=0&sp=1&iw=False&checked=0&trans=1&ipp=0&lpkey=17f5015a94ca112d82&ck=2
Certificate IssuerCloudflare, Inc.
Subjecty1h1.com
FingerprintCF:8A:ED:DF:BB:57:09:E6:84:5E:C8:B0:2F:BE:C2:A8:51:32:58:F8
ValiditySun, 02 Apr 2023 00:00:00 GMT - Mon, 01 Apr 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
GET /update?eventSub3=view&event3=1 HTTP/1.1
Host: t.y1h1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://gifts4393.giftforyou.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 07 Dec 2023 09:16:24 GMT
content-type: text/plain;charset=UTF-8
content-length: 2
access-control-allow-origin: https://gifts4393.giftforyou.top
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
accept-ch: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Reduced
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KB6h9x6vR2qBl4k4leDTLvylxPkpwDZkaG8EeE1KQIPMRuGgZvDs2zoYVmH7xeSnH8HdGAn5wPRp1cuHegiAg3EXE5aV10HtEjhzR0xYjdiEWe7Bi%2BJQdE6vpuOh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 831bab6bdd655684-OSL
X-Firefox-Spdy: h2
gifts4393.giftforyou.top/sweeps/ww/giftcard2/fonts.css
172.67.212.81200 OK 246 kB URL GET HTTP/2 gifts4393.giftforyou.top/sweeps/ww/giftcard2/fonts.css
IP 172.67.212.81:443
Requested by https://gifts4393.giftforyou.top/sweeps/ww/giftcard2/index_en-us.php?vid=1701940582-rBtNeM&utm_medium=%7Bsub1%7D&utm_source=Redirect&utm_campaign=0_AutoSmartlink&utm_content=Smartlink_RandomPub&isp=Blix+Group+AS&city=Oslo&br=0&sp=1&iw=False&checked=0&trans=1&ipp=0&lpkey=17f5015a94ca112d82&ck=2
Certificate IssuerCloudflare, Inc.
Subjectgiftforyou.top
Fingerprint18:25:82:EE:0B:BF:44:15:C8:A5:8E:CE:31:40:54:56:76:E5:2F:20
ValidityTue, 18 Jul 2023 00:00:00 GMT - Tue, 16 Jul 2024 23:59:59 GMT
File type ASCII text, with CRLF line terminators
Size 246 kB (245969 bytes)
Hash cb8a2906723d5d7ddb73ce926716500f
60959ca3d1a4a0a3257e6f1f528066110ce84e3e
527e6525d42b193adb2ded825facf1ad1d417020188ee6986f48603fd963a861
GET /sweeps/ww/giftcard2/fonts.css HTTP/1.1
Host: gifts4393.giftforyou.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gifts4393.giftforyou.top/sweeps/ww/giftcard2/index_en-us.php?vid=1701940582-rBtNeM&utm_medium=%7Bsub1%7D&utm_source=Redirect&utm_campaign=0_AutoSmartlink&utm_content=Smartlink_RandomPub&isp=Blix+Group+AS&city=Oslo&br=0&sp=1&iw=False&checked=0&trans=1&ipp=0&lpkey=17f5015a94ca112d82&ck=2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 07 Dec 2023 09:16:23 GMT
content-type: text/css
last-modified: Sat, 28 Aug 2021 10:59:12 GMT
etag: W/"612a1700-11e"
expires: Thu, 07 Dec 2023 21:16:23 GMT
cache-control: max-age=43200
accept-ch: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Reduced
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FsS3LFzotzoszwl1%2BTLm0JIDMt7HsG%2F2X1s2bZVdD2BSfSTEgQE6IYs5n7GrEbNqsAGHB81PFBjVUIg2S6XnyFTqumDZ2cODYvCHtlOZag8SLXwyHh1CQrtBrWF7z5sMf0atEcChmAyeZ9Y%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831bab648e0e5694-OSL
content-encoding: br
X-Firefox-Spdy: h2
gifts4393.giftforyou.top/sweeps/ww/giftcard2/main-bg.png
172.67.212.81200 OK 699 kB URL GET HTTP/2 gifts4393.giftforyou.top/sweeps/ww/giftcard2/main-bg.png
IP 172.67.212.81:443
Requested by https://gifts4393.giftforyou.top/sweeps/ww/giftcard2/index_en-us.php?vid=1701940582-rBtNeM&utm_medium=%7Bsub1%7D&utm_source=Redirect&utm_campaign=0_AutoSmartlink&utm_content=Smartlink_RandomPub&isp=Blix+Group+AS&city=Oslo&br=0&sp=1&iw=False&checked=0&trans=1&ipp=0&lpkey=17f5015a94ca112d82&ck=2
Certificate IssuerCloudflare, Inc.
Subjectgiftforyou.top
Fingerprint18:25:82:EE:0B:BF:44:15:C8:A5:8E:CE:31:40:54:56:76:E5:2F:20
ValidityTue, 18 Jul 2023 00:00:00 GMT - Tue, 16 Jul 2024 23:59:59 GMT
File type PNG image data, 760 x 1396, 8-bit/color RGBA, non-interlaced\012- data
Size 699 kB (698653 bytes)
Hash adbccee0708ae3b7a71d9652fb353299
1eb43728f22ca4adfacab76009e48bcb428e2182
077376ddc9c604e63cb3b7552b415042ea1c9f408ddbe3a571f419bb83cd72bd
GET /sweeps/ww/giftcard2/main-bg.png HTTP/1.1
Host: gifts4393.giftforyou.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gifts4393.giftforyou.top/sweeps/ww/giftcard2/jumostyle.css
Cookie: googtrans=/auto/en-US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 07 Dec 2023 09:16:24 GMT
content-type: image/png
content-length: 698653
last-modified: Sat, 28 Aug 2021 10:59:12 GMT
etag: "612a1700-aa91d"
expires: Sat, 06 Jan 2024 09:16:24 GMT
cache-control: max-age=2592000
accept-ch: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Reduced
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GAyaL5Kh%2FlYAFWwuRoUTNubHnLW%2B7DdNsdy%2BHYiJ3o9pR9JsB2fvAab9VQneEN%2Fgkd8TPodpzht0pq6NWQuLh%2B2YH2%2F%2BPvoVFEsrvwRzzhZdMbLi9biHdTTXPeKNCDPBifo%2BJBewjodKVUg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831bab6b9e045694-OSL
X-Firefox-Spdy: h2
www.google.com/recaptcha/api.js?render=6LcXQ7EUAAAAAEY-1sgLx4eGQQDwXNdzlKssae-Y
142.250.74.100200 OK 1.1 kB URL GET HTTP/2 www.google.com/recaptcha/api.js?render=6LcXQ7EUAAAAAEY-1sgLx4eGQQDwXNdzlKssae-Y
IP 142.250.74.100:443
Requested by https://gifts4393.giftforyou.top/sweeps/ww/giftcard2/index_en-us.php?vid=1701940582-rBtNeM&utm_medium=%7Bsub1%7D&utm_source=Redirect&utm_campaign=0_AutoSmartlink&utm_content=Smartlink_RandomPub&isp=Blix+Group+AS&city=Oslo&br=0&sp=1&iw=False&checked=0&trans=1&ipp=0&lpkey=17f5015a94ca112d82&ck=2
Certificate IssuerGoogle Trust Services LLC
Subjectwww.google.com
FingerprintB0:8E:97:10:7E:30:90:F6:42:A1:32:63:5C:78:27:D3:A8:F1:05:D1
ValidityMon, 23 Oct 2023 11:24:57 GMT - Mon, 15 Jan 2024 11:24:56 GMT
File type gzip compressed data\012- data
Hash c9f1470bc58555a49ef471c54527b0af
cea9383db889be18ca0b274ac285ba09111f374e
b7f6d984e270dfa4ce13f7250bfb88498e0ac8d77e3ebcde1f9173934c496d27
GET /recaptcha/api.js?render=6LcXQ7EUAAAAAEY-1sgLx4eGQQDwXNdzlKssae-Y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
expires: Thu, 07 Dec 2023 09:16:24 GMT
date: Thu, 07 Dec 2023 09:16:24 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
rs.y1h1.com/checkbot.js
104.21.1.180200 OK 4.2 kB IP 104.21.1.180:443
Requested by https://gifts4393.giftforyou.top/sweeps/ww/giftcard2/index_en-us.php?vid=1701940582-rBtNeM&utm_medium=%7Bsub1%7D&utm_source=Redirect&utm_campaign=0_AutoSmartlink&utm_content=Smartlink_RandomPub&isp=Blix+Group+AS&city=Oslo&br=0&sp=1&iw=False&checked=0&trans=1&ipp=0&lpkey=17f5015a94ca112d82&ck=2
Certificate IssuerCloudflare, Inc.
Subjecty1h1.com
FingerprintCF:8A:ED:DF:BB:57:09:E6:84:5E:C8:B0:2F:BE:C2:A8:51:32:58:F8
ValiditySun, 02 Apr 2023 00:00:00 GMT - Mon, 01 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (8175), with no line terminators
Hash ce0c2c4ee0cb0c547667698772dc25b1
7fdc7c61cf11d289c270ebe3c23032667d010e53
b2b11e955ad96caa642a0b963217b7a9e81c66ca8bcf0fe15b8ef0ea0d565d31
GET /checkbot.js HTTP/1.1
Host: rs.y1h1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 07 Dec 2023 09:16:23 GMT
content-type: application/javascript
accept-ch: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Reduced
cache-control: max-age=43200
cf-bgj: minify
etag: W/"6222c2ff-1fef"
expires: Thu, 07 Dec 2023 20:09:59 GMT
last-modified: Sat, 05 Mar 2022 01:55:11 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 3984
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=t8X86c8Ap%2BLUEOB7Tw02i8ZqsMCPHAfcjIRwu8iUoHMPs%2FGP6pd1vE3P80gQG2tK171jnKauG2EyNt5m5sTTy0ZRcuCY6y%2FdbYOmEqzOo5MBx9QYp0pvVkNW0yqfMA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 831bab653ebd5684-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/recaptcha__en.js
142.250.74.35200 OK 191 kB URL GET HTTP/3 www.gstatic.com/recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/recaptcha__en.js
IP 142.250.74.35:443
Requested by https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=-QbJqHfGOUB8nuVRLvzFLVed
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (563)
Size 191 kB (190682 bytes)
Hash 23b9dd721490a4062ba8d01454ef6ba9
efdbb7331585411f7d397dacbf51fd3e95f3031d
4970c7161d03503a3eb5ec49e4190a03445c50cd5a9081714bd13183d2d948a7
GET /recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://gifts4393.giftforyou.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 190682
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 07 Dec 2023 08:47:09 GMT
expires: Fri, 06 Dec 2024 08:47:09 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 14 Nov 2023 05:42:11 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 1756
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.TpYxICw8iG4.L.F4.O/am=AAM/d=0/rs=AN8SPfo47ZI4Pt9KwV-0738jND9vOwmjgQ/m=el_main_css
142.250.74.35200 OK 4.0 kB URL GET HTTP/3 www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.TpYxICw8iG4.L.F4.O/am=AAM/d=0/rs=AN8SPfo47ZI4Pt9KwV-0738jND9vOwmjgQ/m=el_main_css
IP 142.250.74.35:443
Requested by https://gifts4393.giftforyou.top/sweeps/ww/giftcard2/index_en-us.php?vid=1701940582-rBtNeM&utm_medium=%7Bsub1%7D&utm_source=Redirect&utm_campaign=0_AutoSmartlink&utm_content=Smartlink_RandomPub&isp=Blix+Group+AS&city=Oslo&br=0&sp=1&iw=False&checked=0&trans=1&ipp=0&lpkey=17f5015a94ca112d82&ck=2
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (20367), with no line terminators
Hash 72d3a735ccca1027f6b3afba2c93e3a7
67f8eff8d17334c59c28fc1753bf451527c7490d
c8c845f55e2346b89894ce0df8185ee182359e096bf29987d5cf1f8a7391bef1
GET /_/translate_http/_/ss/k=translate_http.tr.TpYxICw8iG4.L.F4.O/am=AAM/d=0/rs=AN8SPfo47ZI4Pt9KwV-0738jND9vOwmjgQ/m=el_main_css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="rosetta"
report-to: {"group":"rosetta","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/rosetta"}]}
content-length: 3960
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 04 Dec 2023 18:39:49 GMT
expires: Tue, 03 Dec 2024 18:39:49 GMT
cache-control: public, max-age=31536000
last-modified: Sat, 15 Jul 2023 01:09:03 GMT
content-type: text/css; charset=UTF-8
vary: Accept-Encoding
age: 225397
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/styles__ltr.css
142.250.74.35200 OK 25 kB URL GET HTTP/3 www.gstatic.com/recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/styles__ltr.css
IP 142.250.74.35:443
Requested by https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcXQ7EUAAAAAEY-1sgLx4eGQQDwXNdzlKssae-Y&co=aHR0cHM6Ly9naWZ0czQzOTMuZ2lmdGZvcnlvdS50b3A6NDQz&hl=en&v=-QbJqHfGOUB8nuVRLvzFLVed&size=invisible&cb=ene5s6sn87yq
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (56398), with no line terminators
Hash eb4bc511f79f7a1573b45f5775b3a99b
d910fb51ad7316aa54f055079374574698e74b35
7859a62e04b0acb06516eb12454de6673883ecfaeaed6c254659bca7cd59c050
GET /recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/styles__ltr.css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 24606
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 07 Dec 2023 08:54:23 GMT
expires: Fri, 06 Dec 2024 08:54:23 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 14 Nov 2023 05:42:11 GMT
content-type: text/css
vary: Accept-Encoding
age: 1323
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/recaptcha__en.js
142.250.74.35200 OK 191 kB URL GET HTTP/3 www.gstatic.com/recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/recaptcha__en.js
IP 142.250.74.35:443
Requested by https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=-QbJqHfGOUB8nuVRLvzFLVed
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (563)
Size 191 kB (190682 bytes)
Hash 23b9dd721490a4062ba8d01454ef6ba9
efdbb7331585411f7d397dacbf51fd3e95f3031d
4970c7161d03503a3eb5ec49e4190a03445c50cd5a9081714bd13183d2d948a7
GET /recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 190682
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 07 Dec 2023 08:47:09 GMT
expires: Fri, 06 Dec 2024 08:47:09 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 14 Nov 2023 05:42:11 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 1757
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
216.58.207.227200 OK 15 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP 216.58.207.227:443
Requested by https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcXQ7EUAAAAAEY-1sgLx4eGQQDwXNdzlKssae-Y&co=aHR0cHM6Ly9naWZ0czQzOTMuZ2lmdGZvcnlvdS50b3A6NDQz&hl=en&v=-QbJqHfGOUB8nuVRLvzFLVed&size=invisible&cb=ene5s6sn87yq
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 05 Dec 2023 07:31:13 GMT
expires: Wed, 04 Dec 2024 07:31:13 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
age: 179114
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.com/recaptcha/api2/webworker.js?hl=en&v=-QbJqHfGOUB8nuVRLvzFLVed
142.250.74.100200 OK 191 kB URL GET HTTP/3 www.google.com/recaptcha/api2/webworker.js?hl=en&v=-QbJqHfGOUB8nuVRLvzFLVed
IP 142.250.74.100:443
Requested by https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcXQ7EUAAAAAEY-1sgLx4eGQQDwXNdzlKssae-Y&co=aHR0cHM6Ly9naWZ0czQzOTMuZ2lmdGZvcnlvdS50b3A6NDQz&hl=en&v=-QbJqHfGOUB8nuVRLvzFLVed&size=invisible&cb=ene5s6sn87yq
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (563)
Size 191 kB (190794 bytes)
Hash 46561da768f0a7b8369ccdc80964ea91
8f43d31955a2a643314958c2f62cf79b6aef7771
51c6f5d8a9d51815464fbf6f3010c767bc7cd3421ef4607f93a2dce22470b659
GET /recaptcha/api2/webworker.js?hl=en&v=-QbJqHfGOUB8nuVRLvzFLVed HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcXQ7EUAAAAAEY-1sgLx4eGQQDwXNdzlKssae-Y&co=aHR0cHM6Ly9naWZ0czQzOTMuZ2lmdGZvcnlvdS50b3A6NDQz&hl=en&v=-QbJqHfGOUB8nuVRLvzFLVed&size=invisible&cb=ene5s6sn87yq
Sec-Fetch-Dest: worker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript; charset=utf-8
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
expires: Thu, 07 Dec 2023 09:16:27 GMT
date: Thu, 07 Dec 2023 09:16:27 GMT
cache-control: private, max-age=300
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/recaptcha/api2/logo_48.png
142.250.74.35200 OK 2.2 kB URL GET HTTP/3 www.gstatic.com/recaptcha/api2/logo_48.png
IP 142.250.74.35:443
Requested by https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcXQ7EUAAAAAEY-1sgLx4eGQQDwXNdzlKssae-Y&co=aHR0cHM6Ly9naWZ0czQzOTMuZ2lmdGZvcnlvdS50b3A6NDQz&hl=en&v=-QbJqHfGOUB8nuVRLvzFLVed&size=invisible&cb=ene5s6sn87yq
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\012- data
Hash ef9941290c50cd3866e2ba6b793f010d
4736508c795667dcea21f8d864233031223b7832
1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a
GET /recaptcha/api2/logo_48.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gstatic.com/recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/styles__ltr.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 2228
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 06 Dec 2023 21:37:43 GMT
expires: Wed, 13 Dec 2023 21:37:43 GMT
cache-control: public, max-age=604800
age: 41924
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.F6iRVDW95aA.O/d=1/exm=el_conf/ed=1/rs=AN8SPfq9pmT7tJkFFvUkid-e-0Wpomm2EQ/m=el_main
142.250.74.10200 OK 82 kB URL GET HTTP/2 translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.F6iRVDW95aA.O/d=1/exm=el_conf/ed=1/rs=AN8SPfq9pmT7tJkFFvUkid-e-0Wpomm2EQ/m=el_main
IP 142.250.74.10:443
Requested by https://gifts4393.giftforyou.top/sweeps/ww/giftcard2/index_en-us.php?vid=1701940582-rBtNeM&utm_medium=%7Bsub1%7D&utm_source=Redirect&utm_campaign=0_AutoSmartlink&utm_content=Smartlink_RandomPub&isp=Blix+Group+AS&city=Oslo&br=0&sp=1&iw=False&checked=0&trans=1&ipp=0&lpkey=17f5015a94ca112d82&ck=2
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (2193)
Hash 45498924419212780ef341b346f83f38
407175bd46e2ac2ccd073473131c06da6c8cc9a5
1cb3f0ad4f6b1cc587a2e0d16f7c71a298a67fd445dd9ed2ca370cb831ecc02e
GET /_/translate_http/_/js/k=translate_http.tr.no.F6iRVDW95aA.O/d=1/exm=el_conf/ed=1/rs=AN8SPfq9pmT7tJkFFvUkid-e-0Wpomm2EQ/m=el_main HTTP/1.1
Host: translate.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="rosetta"
report-to: {"group":"rosetta","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/rosetta"}]}
content-length: 81976
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 05 Dec 2023 23:17:48 GMT
expires: Wed, 04 Dec 2024 23:17:48 GMT
cache-control: public, max-age=31536000
last-modified: Sat, 02 Dec 2023 00:18:31 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 122319
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg
216.58.207.227200 OK 3.3 kB URL GET HTTP/3 fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg
IP 216.58.207.227:443
Requested by https://gifts4393.giftforyou.top/sweeps/ww/giftcard2/index_en-us.php?vid=1701940582-rBtNeM&utm_medium=%7Bsub1%7D&utm_source=Redirect&utm_campaign=0_AutoSmartlink&utm_content=Smartlink_RandomPub&isp=Blix+Group+AS&city=Oslo&br=0&sp=1&iw=False&checked=0&trans=1&ipp=0&lpkey=17f5015a94ca112d82&ck=2
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (6225), with no line terminators
Hash 2bd5c073a88b83ed74db88282a56ddfb
d0ebfc376f8c6a44a8d4cd216817dcd7d0c33650
ab5c23a05e39deed14d9d8262b0dce9f024f86105a27196cad37d14a3f516e09
GET /s/i/productlogos/translate/v14/24px.svg HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
content-length: 3340
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 23:23:19 GMT
expires: Fri, 29 Nov 2024 23:23:19 GMT
cache-control: public, max-age=31536000
age: 553989
last-modified: Wed, 20 Apr 2022 14:24:23 GMT
content-type: image/svg+xml
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/images/branding/product/2x/translate_24dp.png
142.250.74.35200 OK 1.8 kB URL GET HTTP/3 www.gstatic.com/images/branding/product/2x/translate_24dp.png
IP 142.250.74.35:443
Requested by https://gifts4393.giftforyou.top/sweeps/ww/giftcard2/index_en-us.php?vid=1701940582-rBtNeM&utm_medium=%7Bsub1%7D&utm_source=Redirect&utm_campaign=0_AutoSmartlink&utm_content=Smartlink_RandomPub&isp=Blix+Group+AS&city=Oslo&br=0&sp=1&iw=False&checked=0&trans=1&ipp=0&lpkey=17f5015a94ca112d82&ck=2
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\012- data
Hash c69c796362406f9e11c7f4bf5bb628da
e489ce95ab56208090868882113d7416abf46775
4dac0026fbfa2615dce30c0af12830863fe885f84387a0147b9e338f548d5d82
GET /images/branding/product/2x/translate_24dp.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.TpYxICw8iG4.L.F4.O/am=AAM/d=0/rs=AN8SPfo47ZI4Pt9KwV-0738jND9vOwmjgQ/m=el_main_css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 1842
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 07 Dec 2023 05:20:13 GMT
expires: Fri, 06 Dec 2024 05:20:13 GMT
cache-control: public, max-age=31536000
age: 14175
last-modified: Thu, 14 Oct 2021 09:08:00 GMT
content-type: image/png
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
216.58.207.227200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP 216.58.207.227:443
Requested by https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcXQ7EUAAAAAEY-1sgLx4eGQQDwXNdzlKssae-Y&co=aHR0cHM6Ly9naWZ0czQzOTMuZ2lmdGZvcnlvdS50b3A6NDQz&hl=en&v=-QbJqHfGOUB8nuVRLvzFLVed&size=invisible&cb=ene5s6sn87yq
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 05 Dec 2023 03:26:41 GMT
expires: Wed, 04 Dec 2024 03:26:41 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
age: 193787
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
translate-pa.googleapis.com/v1/supportedLanguages?client=te&display_language=no&key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4&callback=callback
142.250.74.74 1.4 kB URL translate-pa.googleapis.com/v1/supportedLanguages?client=te&display_language=no&key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4&callback=callback
IP 142.250.74.74:0
Hash a3eefe14b1b4698460d992bd1673a26b
a2fca6ebb00b8bdcca3eda88654d02d2c165b9c4
87514750a90cd70dd22c8673cfa80d804ef55840bd0755950af2118d8d218067
GET /v1/supportedLanguages?client=te&display_language=no&key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4&callback=callback HTTP/1.1
Host: translate-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cross-origin-resource-policy: cross-origin
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
content-type: text/javascript; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Thu, 07 Dec 2023 09:16:28 GMT
server: ESF
cache-control: private
content-length: 1392
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: NID=511=Bgp9EatdbdcWduhAqjBKQ2V-nZ1nWPSYKuLx2db7NMaogP5Xi8ylDnkipKv7Y8tEFSNYcfzfD441mZyTkcq2slDrAl76VCZcWa_uVJrj17ix89M3fFLUkPt3J461qhyMK25Dbk9d3zPS1xVRurdRXZ4BvBNg4K_YvwDtgo3xX88; expires=Fri, 07-Jun-2024 09:16:28 GMT; path=/; domain=.translate-pa.googleapis.com; HttpOnly
CONSENT=PENDING+723; expires=Sat, 06-Dec-2025 09:16:28 GMT; path=/; domain=.googleapis.com; Secure
expires: Thu, 07 Dec 2023 09:16:28 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
translate.googleapis.com/element/log?format=json&hasfast=true&authuser=0
142.250.74.10 0 B URL OPTIONS translate.googleapis.com/element/log?format=json&hasfast=true&authuser=0
IP 142.250.74.10:0
Requested by https://gifts4393.giftforyou.top/sweeps/ww/giftcard2/index_en-us.php?vid=1701940582-rBtNeM&utm_medium=%7Bsub1%7D&utm_source=Redirect&utm_campaign=0_AutoSmartlink&utm_content=Smartlink_RandomPub&isp=Blix+Group+AS&city=Oslo&br=0&sp=1&iw=False&checked=0&trans=1&ipp=0&lpkey=17f5015a94ca112d82&ck=2
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /element/log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: translate.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-encoding,content-type,x-goog-authuser
Origin: https://gifts4393.giftforyou.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
Alt-Used: 0
HTTP/2 200 OK
access-control-allow-origin: https://gifts4393.giftforyou.top
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web,authorization,content-encoding,content-type,x-goog-authuser,origin
content-type: text/plain; charset=UTF-8
date: Thu, 07 Dec 2023 09:16:38 GMT
server: Playlog
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+219; expires=Sat, 06-Dec-2025 09:16:38 GMT; path=/; domain=.googleapis.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Thu, 07 Dec 2023 09:16:38 GMT
cache-control: private
X-Firefox-Spdy: h2
translate.googleapis.com/element/log?format=json&hasfast=true&authuser=0
142.250.74.10 131 B URL OPTIONS translate.googleapis.com/element/log?format=json&hasfast=true&authuser=0
IP 142.250.74.10:0
Requested by https://gifts4393.giftforyou.top/sweeps/ww/giftcard2/index_en-us.php?vid=1701940582-rBtNeM&utm_medium=%7Bsub1%7D&utm_source=Redirect&utm_campaign=0_AutoSmartlink&utm_content=Smartlink_RandomPub&isp=Blix+Group+AS&city=Oslo&br=0&sp=1&iw=False&checked=0&trans=1&ipp=0&lpkey=17f5015a94ca112d82&ck=2
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash ca0b7e866005f6774d284b9f438ebfd2
53644f5ee3640189bdb223473ba6a2d46606c556
502e9680cfa78fa8be779cbf4f1947c8eaa3d43bf8c7464800ec772b2ddea358
POST /element/log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: translate.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-AuthUser: 0
Content-Encoding: gzip
Content-Type: application/binary
Content-Length: 297
Origin: https://gifts4393.giftforyou.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: https://gifts4393.giftforyou.top
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web
content-type: text/plain; charset=UTF-8
content-encoding: gzip
date: Thu, 07 Dec 2023 09:16:38 GMT
server: Playlog
cache-control: private
content-length: 131
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+718; expires=Sat, 06-Dec-2025 09:16:38 GMT; path=/; domain=.googleapis.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Thu, 07 Dec 2023 09:16:38 GMT
rs.y1h1.com/load.js
104.21.1.180200 OK 7.1 kB IP 104.21.1.180:443
Requested by https://gifts4393.giftforyou.top/sweeps/ww/giftcard2/index_en-us.php?vid=1701940582-rBtNeM&utm_medium=%7Bsub1%7D&utm_source=Redirect&utm_campaign=0_AutoSmartlink&utm_content=Smartlink_RandomPub&isp=Blix+Group+AS&city=Oslo&br=0&sp=1&iw=False&checked=0&trans=1&ipp=0&lpkey=17f5015a94ca112d82&ck=2
Certificate IssuerCloudflare, Inc.
Subjecty1h1.com
FingerprintCF:8A:ED:DF:BB:57:09:E6:84:5E:C8:B0:2F:BE:C2:A8:51:32:58:F8
ValiditySun, 02 Apr 2023 00:00:00 GMT - Mon, 01 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (7056), with no line terminators
Hash e2494b9cd7f26ba05e504ab12aacdb89
d3224387f27e022d556f4ecd6b3aac9485bd1362
eda9e1ca8b96059ca3ed3cdd8f1e6822a8ef23604293b1cb914117caa5371d94
GET /load.js HTTP/1.1
Host: rs.y1h1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 07 Dec 2023 09:16:23 GMT
content-type: application/javascript
accept-ch: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Reduced
cache-control: max-age=43200
cf-bgj: minify
etag: W/"6311dce6-1b90"
expires: Thu, 07 Dec 2023 20:09:59 GMT
last-modified: Fri, 02 Sep 2022 10:37:26 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 3984
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DBvOhi88nDDF5XBBDfUeP6CaYHsQODGOXMXVKE443ySutC9F0xrpLmgoKC1Q8nj5VPJERzhTECsn6z1bnc%2BUmv7MAeyAP%2FXz2gv6wBPXQnpk2xhyHTJOhIHUOCe6CA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 831bab652ea55684-OSL
content-encoding: br
X-Firefox-Spdy: h2
gifts4393.giftforyou.top/favicon.ico
172.67.212.81200 OK 68 kB URL GET HTTP/2 gifts4393.giftforyou.top/favicon.ico
IP 172.67.212.81:443
Requested by https://gifts4393.giftforyou.top/sweeps/ww/giftcard2/index_en-us.php?vid=1701940582-rBtNeM&utm_medium=%7Bsub1%7D&utm_source=Redirect&utm_campaign=0_AutoSmartlink&utm_content=Smartlink_RandomPub&isp=Blix+Group+AS&city=Oslo&br=0&sp=1&iw=False&checked=0&trans=1&ipp=0&lpkey=17f5015a94ca112d82&ck=2
Certificate IssuerCloudflare, Inc.
Subjectgiftforyou.top
Fingerprint18:25:82:EE:0B:BF:44:15:C8:A5:8E:CE:31:40:54:56:76:E5:2F:20
ValidityTue, 18 Jul 2023 00:00:00 GMT - Tue, 16 Jul 2024 23:59:59 GMT
File type MS Windows icon resource - 1 icon, -128x-128, 32 bits/pixel\012- data
Hash 5d314e000175f9fec4ab4325ef438be9
4d48298cec69fc284570437dba43e5f14fe99be5
a3e831628af5a26e9a51d53636e42db46d8d2e7c59e7d2845c988baf1ccd18e3
GET /favicon.ico HTTP/1.1
Host: gifts4393.giftforyou.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: _ga_37GE99Q100=GS1.1.1701940590.1.0.1701940590.0.0.0; _ga=GA1.1.1776708668.1701940591
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 07 Dec 2023 09:16:24 GMT
content-type: image/x-icon
last-modified: Mon, 10 Jan 2022 06:10:46 GMT
etag: W/"61dbcde6-1083e"
accept-ch: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Reduced
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KCytuHUneafi%2BiF9twAQ4TWUNh528QxuFSv8lSjwl8WOYgM76Iy41ntV%2Fe12UcbkuEYZyKToBmzAZ%2FRABz7h9IPqb39pY0%2B3s31J5zzOdR3SC%2BYng8a8J%2BSKXHgkkHQqtBHa%2BJ0f1ti2cv0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831bab6d5fab5694-OSL
content-encoding: br
X-Firefox-Spdy: h2
rs.y1h1.com/backbutton.js
104.21.1.180200 OK 4.8 kB URL GET HTTP/2 rs.y1h1.com/backbutton.js
IP 104.21.1.180:443
Requested by https://gifts4393.giftforyou.top/sweeps/ww/giftcard2/index_en-us.php?vid=1701940582-rBtNeM&utm_medium=%7Bsub1%7D&utm_source=Redirect&utm_campaign=0_AutoSmartlink&utm_content=Smartlink_RandomPub&isp=Blix+Group+AS&city=Oslo&br=0&sp=1&iw=False&checked=0&trans=1&ipp=0&lpkey=17f5015a94ca112d82&ck=2
Certificate IssuerCloudflare, Inc.
Subjecty1h1.com
FingerprintCF:8A:ED:DF:BB:57:09:E6:84:5E:C8:B0:2F:BE:C2:A8:51:32:58:F8
ValiditySun, 02 Apr 2023 00:00:00 GMT - Mon, 01 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (4821), with no line terminators
Hash cc74e717b3fb50c15e5e4b50faf55bc9
36fdd2a173f70f53d7f5f4b82d6c89accf6c2bc3
49da637a24a8a355014704c23fa18387f0bd339368153a5e64c90a062b03b795
GET /backbutton.js HTTP/1.1
Host: rs.y1h1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 07 Dec 2023 09:16:23 GMT
content-type: application/javascript
accept-ch: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Reduced
cache-control: max-age=43200
cf-bgj: minify
etag: W/"61d46677-12d0"
expires: Thu, 07 Dec 2023 20:09:59 GMT
last-modified: Tue, 04 Jan 2022 15:23:35 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 3984
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AI3MK5Ug0DFptZHn5CAXijPw7VMoRMjssdfaWQCuraLEkIfdCSA7A4zUsrnBAiMZuCR6o1pFgaLZiSnorNYamsNEpQaIPW84oNQJPiBVH7whc5fo1TBgpMhrtm1xYA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 831bab651ea15684-OSL
content-encoding: br
X-Firefox-Spdy: h2
rs.y1h1.com/trans.css
104.21.1.180200 OK 286 B IP 104.21.1.180:443
Requested by https://gifts4393.giftforyou.top/sweeps/ww/giftcard2/index_en-us.php?vid=1701940582-rBtNeM&utm_medium=%7Bsub1%7D&utm_source=Redirect&utm_campaign=0_AutoSmartlink&utm_content=Smartlink_RandomPub&isp=Blix+Group+AS&city=Oslo&br=0&sp=1&iw=False&checked=0&trans=1&ipp=0&lpkey=17f5015a94ca112d82&ck=2
Certificate IssuerCloudflare, Inc.
Subjecty1h1.com
FingerprintCF:8A:ED:DF:BB:57:09:E6:84:5E:C8:B0:2F:BE:C2:A8:51:32:58:F8
ValiditySun, 02 Apr 2023 00:00:00 GMT - Mon, 01 Apr 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 5fdc97e7bb931fcb50ca74d494783b8d
270701559f936aa963b492c0bb28468512fadfd9
c250897d281e4b8243f74e64681478e80c2def1b1448dd84863e12d39ea86e43
GET /trans.css HTTP/1.1
Host: rs.y1h1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 07 Dec 2023 09:16:23 GMT
content-type: text/css
accept-ch: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Reduced
cache-control: max-age=43200
cf-bgj: minify
cf-polished: origSize=398
etag: W/"63e622b9-18e"
expires: Thu, 07 Dec 2023 20:10:00 GMT
last-modified: Fri, 10 Feb 2023 10:55:53 GMT
cf-cache-status: HIT
age: 3983
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=w9LV0JugonnrEEgmCeoFcnZixfHT9Xe9nKCoEYOuwvWiRtDu%2BZpPzCLMD0brJzFuduJM9%2BwSFjM0Y8r15YjbClItTYGcUvMWZ%2FTsLin%2F15iKAhR3Sc8z9y%2BzunkqIQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831bab665fd75684-OSL
content-encoding: br
X-Firefox-Spdy: h2
gifts4393.giftforyou.top/sweeps/ww/giftcard2/jquery.min.js
172.67.212.81200 OK 86 kB URL GET HTTP/2 gifts4393.giftforyou.top/sweeps/ww/giftcard2/jquery.min.js
IP 172.67.212.81:443
Requested by https://gifts4393.giftforyou.top/sweeps/ww/giftcard2/index_en-us.php?vid=1701940582-rBtNeM&utm_medium=%7Bsub1%7D&utm_source=Redirect&utm_campaign=0_AutoSmartlink&utm_content=Smartlink_RandomPub&isp=Blix+Group+AS&city=Oslo&br=0&sp=1&iw=False&checked=0&trans=1&ipp=0&lpkey=17f5015a94ca112d82&ck=2
Certificate IssuerCloudflare, Inc.
Subjectgiftforyou.top
Fingerprint18:25:82:EE:0B:BF:44:15:C8:A5:8E:CE:31:40:54:56:76:E5:2F:20
ValidityTue, 18 Jul 2023 00:00:00 GMT - Tue, 16 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (32065), with CRLF line terminators
Hash 710458dd559c957714ac4a8e95357eb5
f694238d616f579a0690001f37984af430c19963
b409c14a10b4caad6b54844aa63a5faf748b83eecc2dd0d4fb1d913f8de55365
GET /sweeps/ww/giftcard2/jquery.min.js HTTP/1.1
Host: gifts4393.giftforyou.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gifts4393.giftforyou.top/sweeps/ww/giftcard2/index_en-us.php?vid=1701940582-rBtNeM&utm_medium=%7Bsub1%7D&utm_source=Redirect&utm_campaign=0_AutoSmartlink&utm_content=Smartlink_RandomPub&isp=Blix+Group+AS&city=Oslo&br=0&sp=1&iw=False&checked=0&trans=1&ipp=0&lpkey=17f5015a94ca112d82&ck=2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 07 Dec 2023 09:16:23 GMT
content-type: application/javascript
last-modified: Sat, 28 Aug 2021 10:59:12 GMT
vary: Accept-Encoding
etag: W/"612a1700-14e4e"
expires: Thu, 07 Dec 2023 21:16:23 GMT
cache-control: max-age=43200
accept-ch: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Reduced
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Euo6qsfcbORGZ9b6zCe8Hs7MCkJzjNlz3Qso5LXZOz2XAkJECChgQejGE0UeUgYIzupHPQy2J91Y%2FSGBa6eyzhyeVmyIXH4N4eCr24fsPV7VkybbqzPHZvYFNVj69dIyAbSTlCWH9Z3RKP4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 831bab648e175694-OSL
content-encoding: br
X-Firefox-Spdy: h2
rs.y1h1.com/copy.js
104.21.1.180200 OK 3.8 kB IP 104.21.1.180:443
Requested by https://gifts4393.giftforyou.top/sweeps/ww/giftcard2/index_en-us.php?vid=1701940582-rBtNeM&utm_medium=%7Bsub1%7D&utm_source=Redirect&utm_campaign=0_AutoSmartlink&utm_content=Smartlink_RandomPub&isp=Blix+Group+AS&city=Oslo&br=0&sp=1&iw=False&checked=0&trans=1&ipp=0&lpkey=17f5015a94ca112d82&ck=2
Certificate IssuerCloudflare, Inc.
Subjecty1h1.com
FingerprintCF:8A:ED:DF:BB:57:09:E6:84:5E:C8:B0:2F:BE:C2:A8:51:32:58:F8
ValiditySun, 02 Apr 2023 00:00:00 GMT - Mon, 01 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (3752), with no line terminators
Hash e8b6c2f6a93914adfb6c0ee4e3dfe046
9d261977b498029390d716a9b28290463b9256f5
29daea46fd37a5f226b28e122dbfe919646b40a1aeeb5f3318a12d375bb11b2b
GET /copy.js HTTP/1.1
Host: rs.y1h1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 07 Dec 2023 09:16:23 GMT
content-type: application/javascript
accept-ch: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Reduced
cache-control: max-age=43200
cf-bgj: minify
etag: W/"6308a3c6-ea8"
expires: Thu, 07 Dec 2023 20:09:59 GMT
last-modified: Fri, 26 Aug 2022 10:43:18 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 3984
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FTPkX1T%2By7v9rEhof8CGWvWZuaddUKVvPFdY5yRkw81Qo7GFKSf%2BEe3H6RFDs9QdDgdEq%2F1L4UEc%2FMxvlfuN1omeGIPq0VGgdkouKRNCZlJVQt95rTcwHGuM%2FadhMg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 831bab654ec35684-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.google.com/recaptcha/api2/anchor?ar=1&k=6LcXQ7EUAAAAAEY-1sgLx4eGQQDwXNdzlKssae-Y&co=aHR0cHM6Ly9naWZ0czQzOTMuZ2lmdGZvcnlvdS50b3A6NDQz&hl=en&v=-QbJqHfGOUB8nuVRLvzFLVed&size=invisible&cb=ene5s6sn87yq
142.250.74.100200 OK 62 kB URL GET HTTP/3 www.google.com/recaptcha/api2/anchor?ar=1&k=6LcXQ7EUAAAAAEY-1sgLx4eGQQDwXNdzlKssae-Y&co=aHR0cHM6Ly9naWZ0czQzOTMuZ2lmdGZvcnlvdS50b3A6NDQz&hl=en&v=-QbJqHfGOUB8nuVRLvzFLVed&size=invisible&cb=ene5s6sn87yq
IP 142.250.74.100:443
Requested by https://gifts4393.giftforyou.top/sweeps/ww/giftcard2/index_en-us.php?vid=1701940582-rBtNeM&utm_medium=%7Bsub1%7D&utm_source=Redirect&utm_campaign=0_AutoSmartlink&utm_content=Smartlink_RandomPub&isp=Blix+Group+AS&city=Oslo&br=0&sp=1&iw=False&checked=0&trans=1&ipp=0&lpkey=17f5015a94ca112d82&ck=2
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (53310)
Hash d843f7ce852f9aa5d4d2894768d9cc45
930f07a70634415bc33c1b4e2d7b7fb2485b1ddb
b589b1f334a09f9122948138fe342c871000543bb2ffa74ba175ab073a766f4e
GET /recaptcha/api2/anchor?ar=1&k=6LcXQ7EUAAAAAEY-1sgLx4eGQQDwXNdzlKssae-Y&co=aHR0cHM6Ly9naWZ0czQzOTMuZ2lmdGZvcnlvdS50b3A6NDQz&hl=en&v=-QbJqHfGOUB8nuVRLvzFLVed&size=invisible&cb=ene5s6sn87yq HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/html; charset=utf-8
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 07 Dec 2023 09:16:26 GMT
content-security-policy: script-src 'nonce-oeDEPJ6W4Bfa8h9ngNnDwg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
gifts4393.giftforyou.top/sweeps/ww/giftcard2/index_en-us.php?vid=1701940582-rBtNeM&utm_medium=%7Bsub1%7D&utm_source=Redirect&utm_campaign=0_AutoSmartlink&utm_content=Smartlink_RandomPub&isp=Blix+Group+AS&city=Oslo&br=0&sp=1&iw=False&checked=0&trans=1&ipp=0&lpkey=17f5015a94ca112d82&ck=2
172.67.212.81200 OK 11 kB URL User Request GET HTTP/2 gifts4393.giftforyou.top/sweeps/ww/giftcard2/index_en-us.php?vid=1701940582-rBtNeM&utm_medium=%7Bsub1%7D&utm_source=Redirect&utm_campaign=0_AutoSmartlink&utm_content=Smartlink_RandomPub&isp=Blix+Group+AS&city=Oslo&br=0&sp=1&iw=False&checked=0&trans=1&ipp=0&lpkey=17f5015a94ca112d82&ck=2
IP 172.67.212.81:443
Certificate IssuerCloudflare, Inc.
Subjectgiftforyou.top
Fingerprint18:25:82:EE:0B:BF:44:15:C8:A5:8E:CE:31:40:54:56:76:E5:2F:20
ValidityTue, 18 Jul 2023 00:00:00 GMT - Tue, 16 Jul 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sweeps/ww/giftcard2/index_en-us.php?vid=1701940582-rBtNeM&utm_medium=%7Bsub1%7D&utm_source=Redirect&utm_campaign=0_AutoSmartlink&utm_content=Smartlink_RandomPub&isp=Blix+Group+AS&city=Oslo&br=0&sp=1&iw=False&checked=0&trans=1&ipp=0&lpkey=17f5015a94ca112d82&ck=2 HTTP/1.1
Host: gifts4393.giftforyou.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 07 Dec 2023 09:16:22 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
accept-ch: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Reduced
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xATlxLDwpMg6tqY7lzlitKA4VtZgpBMOd%2F%2FoeWILfy%2FmIuINLJhdr%2Ftv98CtiIMUIAiwj8vhRspzs8bXk5p3z7MN%2BIGm8CLWHO%2F6XUp4W1VUorLEKLYM7GrZh68adXqqcmknALhvKTL2MMQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 831bab62fc885694-OSL
content-encoding: br
X-Firefox-Spdy: h2
gifts4393.giftforyou.top/sweeps/ww/giftcard2/jumostyle.css
172.67.212.81200 OK 18 kB URL GET HTTP/2 gifts4393.giftforyou.top/sweeps/ww/giftcard2/jumostyle.css
IP 172.67.212.81:443
Requested by https://gifts4393.giftforyou.top/sweeps/ww/giftcard2/index_en-us.php?vid=1701940582-rBtNeM&utm_medium=%7Bsub1%7D&utm_source=Redirect&utm_campaign=0_AutoSmartlink&utm_content=Smartlink_RandomPub&isp=Blix+Group+AS&city=Oslo&br=0&sp=1&iw=False&checked=0&trans=1&ipp=0&lpkey=17f5015a94ca112d82&ck=2
Certificate IssuerCloudflare, Inc.
Subjectgiftforyou.top
Fingerprint18:25:82:EE:0B:BF:44:15:C8:A5:8E:CE:31:40:54:56:76:E5:2F:20
ValidityTue, 18 Jul 2023 00:00:00 GMT - Tue, 16 Jul 2024 23:59:59 GMT
File type ASCII text, with CRLF line terminators
Hash b3fb821cfea6bf83b60667cd87946594
35afc2e6e5bdb17f85b7f1f1bee44ae0a76e75ee
f973e0ae72502c046a26df4645ce245b9143963eea72bf7abdcf01523ff47589
GET /sweeps/ww/giftcard2/jumostyle.css HTTP/1.1
Host: gifts4393.giftforyou.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gifts4393.giftforyou.top/sweeps/ww/giftcard2/index_en-us.php?vid=1701940582-rBtNeM&utm_medium=%7Bsub1%7D&utm_source=Redirect&utm_campaign=0_AutoSmartlink&utm_content=Smartlink_RandomPub&isp=Blix+Group+AS&city=Oslo&br=0&sp=1&iw=False&checked=0&trans=1&ipp=0&lpkey=17f5015a94ca112d82&ck=2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 07 Dec 2023 09:16:23 GMT
content-type: text/css
last-modified: Sat, 28 Aug 2021 10:59:12 GMT
vary: Accept-Encoding
etag: W/"612a1700-444b"
expires: Thu, 07 Dec 2023 21:16:23 GMT
cache-control: max-age=43200
accept-ch: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Reduced
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RdM32wMsa7T4j4%2BOmCovsFYbcJgCyXbfSTTMv5xAoD%2FL1K05%2B7Eblbto6ZRHsp7Av3QaYBNLCJ5mygUgY4QxSLuvLz3aEIsdwb8QeCrjGVxdW%2FYsssmwks99f%2FeZ%2F0K8P67SAwYH1yWNcRk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 831bab648e145694-OSL
content-encoding: br
X-Firefox-Spdy: h2
translate.google.com/translate_a/element.js?cb=googleTranslateElementInit
142.250.74.46200 OK 90 kB URL GET HTTP/2 translate.google.com/translate_a/element.js?cb=googleTranslateElementInit
IP 142.250.74.46:443
Requested by https://gifts4393.giftforyou.top/sweeps/ww/giftcard2/index_en-us.php?vid=1701940582-rBtNeM&utm_medium=%7Bsub1%7D&utm_source=Redirect&utm_campaign=0_AutoSmartlink&utm_content=Smartlink_RandomPub&isp=Blix+Group+AS&city=Oslo&br=0&sp=1&iw=False&checked=0&trans=1&ipp=0&lpkey=17f5015a94ca112d82&ck=2
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (2462)
Hash 3801bdb73bdb5f61ccfdda18e721771d
a042e2dfb9009ddcb8ca5254fb4bf8a5949647c0
899684712f063673a04a11fa7e3aafdfdaaaac548a8fd88d18e6f1cba21777a1
GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1
Host: translate.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 07 Dec 2023 09:16:25 GMT
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+193; expires=Sat, 06-Dec-2025 09:16:25 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.com/recaptcha/api2/reload?k=6LcXQ7EUAAAAAEY-1sgLx4eGQQDwXNdzlKssae-Y
142.250.74.100200 OK 36 kB URL POST HTTP/3 www.google.com/recaptcha/api2/reload?k=6LcXQ7EUAAAAAEY-1sgLx4eGQQDwXNdzlKssae-Y
IP 142.250.74.100:443
Requested by https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcXQ7EUAAAAAEY-1sgLx4eGQQDwXNdzlKssae-Y&co=aHR0cHM6Ly9naWZ0czQzOTMuZ2lmdGZvcnlvdS50b3A6NDQz&hl=en&v=-QbJqHfGOUB8nuVRLvzFLVed&size=invisible&cb=ene5s6sn87yq
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (36058)
Hash e86fea97b0cf4c4f44bf80ae108b930d
fcbfc8c13f820627c4a71a5b0688bbf26b861c3f
f27ffbdd0d0ada7ae69c8809763ab13346396976eb0a3df3bcb2b864dc5d537a
POST /recaptcha/api2/reload?k=6LcXQ7EUAAAAAEY-1sgLx4eGQQDwXNdzlKssae-Y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-protobuffer
Content-Length: 8609
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcXQ7EUAAAAAEY-1sgLx4eGQQDwXNdzlKssae-Y&co=aHR0cHM6Ly9naWZ0czQzOTMuZ2lmdGZvcnlvdS50b3A6NDQz&hl=en&v=-QbJqHfGOUB8nuVRLvzFLVed&size=invisible&cb=ene5s6sn87yq
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/json; charset=utf-8
content-encoding: gzip
date: Thu, 07 Dec 2023 09:16:28 GMT
expires: Thu, 07 Dec 2023 09:16:28 GMT
cache-control: private, max-age=0
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
set-cookie: _GRECAPTCHA=09AEovV3djxjSTLHPeM1-Qln7x36qh2HEjSYWUGw2rhSaJOKlJZdJjMNd6mW1wTm1n0XzNr_UpHbIeRNA893D5GoU;Path=/recaptcha;Expires=Tue, 04-Jun-2024 09:16:28 GMT;Secure;HttpOnly;Priority=HIGH;SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
rs.y1h1.com/trans.js
104.21.1.180200 OK 282 B IP 104.21.1.180:443
Requested by https://gifts4393.giftforyou.top/sweeps/ww/giftcard2/index_en-us.php?vid=1701940582-rBtNeM&utm_medium=%7Bsub1%7D&utm_source=Redirect&utm_campaign=0_AutoSmartlink&utm_content=Smartlink_RandomPub&isp=Blix+Group+AS&city=Oslo&br=0&sp=1&iw=False&checked=0&trans=1&ipp=0&lpkey=17f5015a94ca112d82&ck=2
Certificate IssuerCloudflare, Inc.
Subjecty1h1.com
FingerprintCF:8A:ED:DF:BB:57:09:E6:84:5E:C8:B0:2F:BE:C2:A8:51:32:58:F8
ValiditySun, 02 Apr 2023 00:00:00 GMT - Mon, 01 Apr 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 13692cee8fa907e4403534562fe4acad
54af8724f76d6e5516973bb0d5da1ba5e13c6dee
c4a377bf2d0085af95e405ccadda341b324dd834bf5b8dea4dea75d0e666f95b
GET /trans.js HTTP/1.1
Host: rs.y1h1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 07 Dec 2023 09:16:23 GMT
content-type: application/javascript
accept-ch: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Reduced
cache-control: max-age=43200
cf-bgj: minify
cf-polished: origSize=337
etag: W/"60837b56-151"
expires: Thu, 07 Dec 2023 20:10:00 GMT
last-modified: Sat, 24 Apr 2021 01:58:46 GMT
cf-cache-status: HIT
age: 3983
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=i0hDTQJPGd7BZdUoDnc%2BPgrPqneRkRI9XuY2jqv3PVpRWxMllC8Y4fmd7cwmFmtQu3lrYo8VfrxJln%2Fj9MOFeJoyH1%2B0fO2HAb4lSlrY3umQlDXlZXCQHVCj8wq22A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831bab665fdb5684-OSL
content-encoding: br
X-Firefox-Spdy: h2
gifts4393.giftforyou.top/sweeps/ww/giftcard2/SegoeUI.woff
172.67.212.81200 OK 246 kB URL GET HTTP/2 gifts4393.giftforyou.top/sweeps/ww/giftcard2/SegoeUI.woff
IP 172.67.212.81:443
Requested by https://gifts4393.giftforyou.top/sweeps/ww/giftcard2/index_en-us.php?vid=1701940582-rBtNeM&utm_medium=%7Bsub1%7D&utm_source=Redirect&utm_campaign=0_AutoSmartlink&utm_content=Smartlink_RandomPub&isp=Blix+Group+AS&city=Oslo&br=0&sp=1&iw=False&checked=0&trans=1&ipp=0&lpkey=17f5015a94ca112d82&ck=2
Certificate IssuerCloudflare, Inc.
Subjectgiftforyou.top
Fingerprint18:25:82:EE:0B:BF:44:15:C8:A5:8E:CE:31:40:54:56:76:E5:2F:20
ValidityTue, 18 Jul 2023 00:00:00 GMT - Tue, 16 Jul 2024 23:59:59 GMT
File type Web Open Font Format, TrueType, length 245844, version 5.5\012- data
Size 246 kB (245844 bytes)
Hash ee10411f11ca61338f5bcaebefbdf700
4c720d1b7f057aa38a9ac184bc209990778dc651
88c5bf1d6f30b660f9764bd76aa70cdefcb11207fdc77d0d0285d95a0bc135ac
GET /sweeps/ww/giftcard2/SegoeUI.woff HTTP/1.1
Host: gifts4393.giftforyou.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://gifts4393.giftforyou.top/sweeps/ww/giftcard2/fonts.css
Cookie: googtrans=/auto/en-US
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 07 Dec 2023 09:16:24 GMT
content-type: font/woff
content-length: 245844
last-modified: Sat, 28 Aug 2021 10:59:12 GMT
etag: "612a1700-3c054"
accept-ch: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Reduced
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cYo3%2Fawo29GxJfjhW5r%2F511%2BwytQ%2BDKzHAtu049hbhX08H7E7%2BDB3EFRslPi%2Fqu3jhul8PsYoAcQrCwUy%2BhYftn26J1rusexho6tVcuJJ9NLntmyVSaBgydCZZNduUg%2BT6eITiWth%2B8RaKk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831bab6bae1f5694-OSL
X-Firefox-Spdy: h2
rs.y1h1.com/common.js
104.21.1.180200 OK 17 kB IP 104.21.1.180:443
Requested by https://gifts4393.giftforyou.top/sweeps/ww/giftcard2/index_en-us.php?vid=1701940582-rBtNeM&utm_medium=%7Bsub1%7D&utm_source=Redirect&utm_campaign=0_AutoSmartlink&utm_content=Smartlink_RandomPub&isp=Blix+Group+AS&city=Oslo&br=0&sp=1&iw=False&checked=0&trans=1&ipp=0&lpkey=17f5015a94ca112d82&ck=2
Certificate IssuerCloudflare, Inc.
Subjecty1h1.com
FingerprintCF:8A:ED:DF:BB:57:09:E6:84:5E:C8:B0:2F:BE:C2:A8:51:32:58:F8
ValiditySun, 02 Apr 2023 00:00:00 GMT - Mon, 01 Apr 2024 23:59:59 GMT
File type C source, ASCII text, with very long lines (17150), with no line terminators
Hash e82a7475219924f096429f180b359bfb
914006151a4b38056a5ab70a51abfb389bc7b7eb
ecfa449cbb48255f0ece7b436e2015299b9e6adceb9f4df863a9ce36eab71278
GET /common.js HTTP/1.1
Host: rs.y1h1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 07 Dec 2023 09:16:23 GMT
content-type: application/javascript
accept-ch: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Reduced
cache-control: max-age=43200
cf-bgj: minify
etag: W/"6214ae9e-42fe"
expires: Thu, 07 Dec 2023 20:09:59 GMT
last-modified: Tue, 22 Feb 2022 09:36:30 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 3984
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zFcVojM2DZuVdyMRLeKNblcfKgJlrGPrkY7s99HXk73E6qhr%2Ba0eNc2o4bpTz%2F%2FbSH9qUJWsOmTcf4Libucj1Zx56epb8XZp3HUShhalIx%2BBX8KgcQ5X0LWp7RIJrA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 831bab652eaf5684-OSL
content-encoding: br
X-Firefox-Spdy: h2
t.y1h1.com/recaptcha/verify?token=03AFcWeA4P7qOSTvha1v8oTEQiiBnKauTwxIed4Ox9zy5Sniju5ZSZ6gP1wKrM6WSkAo2R36z2hU64jkZsXS82tH_5BIksmMgmRc8h4SOp3scOsrxjVvXgutMIFtrL2n3uTokDLttAoOnc_HKkaL6rSojh7njUv9JoaZlX66sAyW8-qDCPEAGBFH7p725LfaVqv0zJ1yT_VIBgOYYFCIlbcJGS4hZAY3DSFrovrM0mPTqkuWSVBP3WEpPHGHHoLcDSZq8JlxwT8Td-14aX_pFVi5e7RR5b164aJNa2vwLU41yWv4bcVUd3GII_csdBYqPTTRJ9fvmGDP-HUUh0asDnO5odruDPMplSIqz_CAQd_M5Vks8yoFTGzz9t-DGELeeRlzOdYP57YqDL_xMPNNZaXL6fAtiTonLdGCii5IA73Sl1EfB1cQ8If1yXd18LfGweY4xrWBqrlF-KQqztLbHHkT6fGNQNAMWELCIstpfh35YUhB9aaPBHT56fy7IvgS3-MBhBbejiH3XXLpEKP-lIuSSPVo5Ka5QBVQSIcMGEI0pvQYpO82yYPnXlInAnJcOiaOwvOlwxaXiUZHWbgGNf5s0k9bmd_EGmGA&vid=1701940582-rBtNeM&eventSubField=eventSub9&eventField=event9&botScore=0.5
104.21.1.180200 OK 145 B URL GET HTTP/2 t.y1h1.com/recaptcha/verify?token=03AFcWeA4P7qOSTvha1v8oTEQiiBnKauTwxIed4Ox9zy5Sniju5ZSZ6gP1wKrM6WSkAo2R36z2hU64jkZsXS82tH_5BIksmMgmRc8h4SOp3scOsrxjVvXgutMIFtrL2n3uTokDLttAoOnc_HKkaL6rSojh7njUv9JoaZlX66sAyW8-qDCPEAGBFH7p725LfaVqv0zJ1yT_VIBgOYYFCIlbcJGS4hZAY3DSFrovrM0mPTqkuWSVBP3WEpPHGHHoLcDSZq8JlxwT8Td-14aX_pFVi5e7RR5b164aJNa2vwLU41yWv4bcVUd3GII_csdBYqPTTRJ9fvmGDP-HUUh0asDnO5odruDPMplSIqz_CAQd_M5Vks8yoFTGzz9t-DGELeeRlzOdYP57YqDL_xMPNNZaXL6fAtiTonLdGCii5IA73Sl1EfB1cQ8If1yXd18LfGweY4xrWBqrlF-KQqztLbHHkT6fGNQNAMWELCIstpfh35YUhB9aaPBHT56fy7IvgS3-MBhBbejiH3XXLpEKP-lIuSSPVo5Ka5QBVQSIcMGEI0pvQYpO82yYPnXlInAnJcOiaOwvOlwxaXiUZHWbgGNf5s0k9bmd_EGmGA&vid=1701940582-rBtNeM&eventSubField=eventSub9&eventField=event9&botScore=0.5
IP 104.21.1.180:443
Requested by https://gifts4393.giftforyou.top/sweeps/ww/giftcard2/index_en-us.php?vid=1701940582-rBtNeM&utm_medium=%7Bsub1%7D&utm_source=Redirect&utm_campaign=0_AutoSmartlink&utm_content=Smartlink_RandomPub&isp=Blix+Group+AS&city=Oslo&br=0&sp=1&iw=False&checked=0&trans=1&ipp=0&lpkey=17f5015a94ca112d82&ck=2
Certificate IssuerCloudflare, Inc.
Subjecty1h1.com
FingerprintCF:8A:ED:DF:BB:57:09:E6:84:5E:C8:B0:2F:BE:C2:A8:51:32:58:F8
ValiditySun, 02 Apr 2023 00:00:00 GMT - Mon, 01 Apr 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 3ff275d399c31a2640f3a26a88180a88
e4b17038fc219a0b540c62d6f6748905fdc39332
d8fcf587227901be79bdf52029d1d4d5516d24f5d16f051e1ffbe360607d752c
GET /recaptcha/verify?token=03AFcWeA4P7qOSTvha1v8oTEQiiBnKauTwxIed4Ox9zy5Sniju5ZSZ6gP1wKrM6WSkAo2R36z2hU64jkZsXS82tH_5BIksmMgmRc8h4SOp3scOsrxjVvXgutMIFtrL2n3uTokDLttAoOnc_HKkaL6rSojh7njUv9JoaZlX66sAyW8-qDCPEAGBFH7p725LfaVqv0zJ1yT_VIBgOYYFCIlbcJGS4hZAY3DSFrovrM0mPTqkuWSVBP3WEpPHGHHoLcDSZq8JlxwT8Td-14aX_pFVi5e7RR5b164aJNa2vwLU41yWv4bcVUd3GII_csdBYqPTTRJ9fvmGDP-HUUh0asDnO5odruDPMplSIqz_CAQd_M5Vks8yoFTGzz9t-DGELeeRlzOdYP57YqDL_xMPNNZaXL6fAtiTonLdGCii5IA73Sl1EfB1cQ8If1yXd18LfGweY4xrWBqrlF-KQqztLbHHkT6fGNQNAMWELCIstpfh35YUhB9aaPBHT56fy7IvgS3-MBhBbejiH3XXLpEKP-lIuSSPVo5Ka5QBVQSIcMGEI0pvQYpO82yYPnXlInAnJcOiaOwvOlwxaXiUZHWbgGNf5s0k9bmd_EGmGA&vid=1701940582-rBtNeM&eventSubField=eventSub9&eventField=event9&botScore=0.5 HTTP/1.1
Host: t.y1h1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://gifts4393.giftforyou.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 07 Dec 2023 09:16:29 GMT
content-type: text/plain;charset=UTF-8
access-control-allow-origin: https://gifts4393.giftforyou.top
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
accept-ch: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Reduced
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=t%2FvSbvdJkWfC9Ob5atn%2B4K%2FbON4spKU7xiJDf3H3ulzqzqZYx9K0S%2BhQ0B%2B56upKCPwy1cCDQprIsa9NS%2FI1aPP0Pcb4BLfacJ0SSV%2BU%2FHJhWC09Wya6MNARV8VH"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 831bab888e095684-OSL
content-encoding: br
X-Firefox-Spdy: h2
gifts4393.giftforyou.top/sweeps/ww/giftcard2/action_icons_20px_2x.png
172.67.212.81200 OK 1.7 kB URL GET HTTP/2 gifts4393.giftforyou.top/sweeps/ww/giftcard2/action_icons_20px_2x.png
IP 172.67.212.81:443
Requested by https://gifts4393.giftforyou.top/sweeps/ww/giftcard2/index_en-us.php?vid=1701940582-rBtNeM&utm_medium=%7Bsub1%7D&utm_source=Redirect&utm_campaign=0_AutoSmartlink&utm_content=Smartlink_RandomPub&isp=Blix+Group+AS&city=Oslo&br=0&sp=1&iw=False&checked=0&trans=1&ipp=0&lpkey=17f5015a94ca112d82&ck=2
Certificate IssuerCloudflare, Inc.
Subjectgiftforyou.top
Fingerprint18:25:82:EE:0B:BF:44:15:C8:A5:8E:CE:31:40:54:56:76:E5:2F:20
ValidityTue, 18 Jul 2023 00:00:00 GMT - Tue, 16 Jul 2024 23:59:59 GMT
File type PNG image data, 40 x 360, 8-bit colormap, non-interlaced\012- data
Hash b699975b5fe73b087e711a33ff24ee1e
0e33cc5c32a5e7d18440751e3946076664caaf53
4e06866c22bb275c6c4f01265e1f3e9f00fe9face9739f6531371d688a8e7a7e
GET /sweeps/ww/giftcard2/action_icons_20px_2x.png HTTP/1.1
Host: gifts4393.giftforyou.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gifts4393.giftforyou.top/sweeps/ww/giftcard2/jumostyle.css
Cookie: googtrans=/auto/en-US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 07 Dec 2023 09:16:24 GMT
content-type: image/png
content-length: 1726
last-modified: Sat, 28 Aug 2021 10:59:12 GMT
etag: "612a1700-6be"
expires: Sat, 06 Jan 2024 09:16:24 GMT
cache-control: max-age=2592000
accept-ch: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Reduced
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CwXkyjHeray50gRhIGyE%2BQevMzwvm%2F2jTNVC9PM%2FN%2F8Rj%2BZ2Vx7Tf%2BcAoGeYo7EZRntLib2b7t8SC%2F8QG5dafmJo4Xy0TvBG6ypM0l0eLKS6oe0yYdjq4%2FWVcIr%2F0voaeMarUAds6SydXJ0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831bab6b9e0a5694-OSL
X-Firefox-Spdy: h2