www.happistar8.net/
301 Moved Permanently 0 B IP
ASN #209242 Cloudflare London, LLC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: www.happistar8.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Sun, 19 Mar 2023 13:11:38 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Sun, 19 Mar 2023 14:11:38 GMT
Location: https://www.happistar8.net/
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=h0F%2FOFpm5WEtxaGYxJnzz6qUsM8m9S%2FurFumlnWpAU6AV6pFswH5w3SrVwjOUHou8Jhb22aJSrswkX1oxPmaX6lhzG6Y9u%2Fu5KXRYu%2BA1H3CO1zHZTQtp%2F8wm4wq%2BWkwZ7cak%2Bw%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7aa5f6648d8db500-OSL
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 443a700f85619f4fd8a548421c5c23e2
a58764a07feafb2bb4b340c020b5104c55b35195
0bc80613f3d493ea081bf5672ab76f6f33a1dcc0710fe1431de83c46d7e8d31d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0BC80613F3D493EA081BF5672AB76F6F33A1DCC0710FE1431DE83C46D7E8D31D"
Last-Modified: Fri, 17 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10997
Expires: Sun, 19 Mar 2023 16:14:56 GMT
Date: Sun, 19 Mar 2023 13:11:39 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2857be6f18459c7a4a7f00f6cd6076f1
570609086d72a9be57cde7bfefd25663c1035fba
bd8abb8f420d1e31462fca1d6a7caadf1e2bba6fc7db05684b5811e00e84107f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD8ABB8F420D1E31462FCA1D6A7CAADF1E2BBA6FC7DB05684B5811E00E84107F"
Last-Modified: Fri, 17 Mar 2023 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3547
Expires: Sun, 19 Mar 2023 14:10:46 GMT
Date: Sun, 19 Mar 2023 13:11:39 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash bc86ef2a0cee04915bc360f5821adc8f
3658f9028cce204d38f7f48fcfaa2a8e4f54383a
aeecd718d03811322457de4f20828bdba86b277e7e0e328cae9c0a8075638454
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Backoff, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 19 Mar 2023 12:27:05 GMT
content-type: application/json
age: 2674
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 12cdbcb1b0785dc0423386448ac68c9c
08cff6b76fd708f0cef3c5bdb8fc72570c4536bd
bb7622a85d32cbff40abd2995055e03dbac05dd841b9a84d9023a5510d89e534
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BB7622A85D32CBFF40ABD2995055E03DBAC05DD841B9A84D9023A5510D89E534"
Last-Modified: Fri, 17 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5009
Expires: Sun, 19 Mar 2023 14:35:08 GMT
Date: Sun, 19 Mar 2023 13:11:39 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
IP
File type PEM certificate\012- , ASCII text
Hash e7bace7c1e04d44012e37ddffe36e5d5
3ac8d7c0a9d3e3f0b28b2530c7b8d8407b4042c2
6b4f80f2e95b26f6122ea8dcd0ef8d762299be822c69e839fc37581ca2bcb5f2
GET /chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: yOfqBS2ZcoR9UqTR5g2GnPvqT48OtpnbmGQalQCDNz21lVPJJ0R8GhKLaR/+bKpai9KtbTdoplIOSt3m5+8a4g==
x-amz-request-id: H490XS3F6202CDH1
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 19 Mar 2023 12:52:22 GMT
age: 1157
last-modified: Sat, 11 Mar 2023 16:53:15 GMT
etag: "e7bace7c1e04d44012e37ddffe36e5d5"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 19 Mar 2023 13:11:39 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 37cad346bf9c7582600ca9e3cd8f9252
9021fcfa670921097bb9e71b10e07e8ae42443ae
fd83195c6e32d99ad1c76db3d4431ee060bd077ac738f090851138c5a8986340
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 19 Mar 2023 13:11:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 37cad346bf9c7582600ca9e3cd8f9252
9021fcfa670921097bb9e71b10e07e8ae42443ae
fd83195c6e32d99ad1c76db3d4431ee060bd077ac738f090851138c5a8986340
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 19 Mar 2023 13:11:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 37cad346bf9c7582600ca9e3cd8f9252
9021fcfa670921097bb9e71b10e07e8ae42443ae
fd83195c6e32d99ad1c76db3d4431ee060bd077ac738f090851138c5a8986340
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 19 Mar 2023 13:11:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 37cad346bf9c7582600ca9e3cd8f9252
9021fcfa670921097bb9e71b10e07e8ae42443ae
fd83195c6e32d99ad1c76db3d4431ee060bd077ac738f090851138c5a8986340
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 19 Mar 2023 13:11:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ajax.googleapis.com/ajax/libs/angularjs/1.8.0/angular.min.js?v=1.8.0
200 OK 62 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/angularjs/1.8.0/angular.min.js?v=1.8.0
IP
File type ASCII text, with very long lines (647)
Hash c91a9b885a30b49d776b54b3c0297475
97ced80aec9257549b4a20983dcd376a6585d323
65ef89ded398d85ea955fb604b033d8cb4cbe791cbccc88c3bc4f3a612fd06a2
GET /ajax/libs/angularjs/1.8.0/angular.min.js?v=1.8.0 HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 62157
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 16 Mar 2023 18:19:51 GMT
expires: Fri, 15 Mar 2024 18:19:51 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 240708
last-modified: Fri, 05 Jun 2020 18:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ajax.googleapis.com/ajax/libs/angularjs/1.8.0/angular-cookies.min.js?v=1.8.0
200 OK 782 B URL HTTP/2 ajax.googleapis.com/ajax/libs/angularjs/1.8.0/angular-cookies.min.js?v=1.8.0
IP
File type ASCII text, with very long lines (555)
Hash 0142595c6f46d2d480a6734b44f5f6e4
de4fb578e8f866e60e5373e0ade95ea098cb49c8
ebe9b2cc1adb1f4de3f72ec459197fe7d2ac2a16b3271eeeef84c701f52166a2
GET /ajax/libs/angularjs/1.8.0/angular-cookies.min.js?v=1.8.0 HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 782
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 17 Mar 2023 10:18:22 GMT
expires: Sat, 16 Mar 2024 10:18:22 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 183197
last-modified: Fri, 05 Jun 2020 18:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ajax.googleapis.com/ajax/libs/angularjs/1.8.0/angular-route.min.js?v=1.8.0
200 OK 2.6 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/angularjs/1.8.0/angular-route.min.js?v=1.8.0
IP
File type ASCII text, with very long lines (577)
Hash 45cc07ea88d15d1b4fc7ed305833031f
87787403f912e14113a4b5784b2ca5be20518a16
e687279c3924670d08a1dc12767870ded0b9b960eca099f026920eac13a3ddd9
GET /ajax/libs/angularjs/1.8.0/angular-route.min.js?v=1.8.0 HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 2583
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 14 Mar 2023 16:33:27 GMT
expires: Wed, 13 Mar 2024 16:33:27 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 419892
last-modified: Fri, 05 Jun 2020 18:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 37cad346bf9c7582600ca9e3cd8f9252
9021fcfa670921097bb9e71b10e07e8ae42443ae
fd83195c6e32d99ad1c76db3d4431ee060bd077ac738f090851138c5a8986340
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 19 Mar 2023 13:11:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash db7a51fe853d91ea7990bb3c41ba3cb4
f416e7ea87e2ac443e81afac853a3d05071d88e4
a928e7cde6f4fc75660068bfb5e8ac2270f43f8ae58ccb8f4f63a3ca6a376141
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 19 Mar 2023 13:11:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtm.js?id=GTM-P6ZC558
200 OK 82 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-P6ZC558
IP
File type Unicode text, UTF-8 text, with very long lines (47038)
Hash 079e743eaaf03964c6630f6e244613ec
1fe2602bf9f164e9e0a0e7d0069182c309bb6254
f2c55c7b5e4babb6978e20ac6b1f22e9176cddade11257cba1b26cbbf063005d
GET /gtm.js?id=GTM-P6ZC558 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 19 Mar 2023 13:11:39 GMT
expires: Sun, 19 Mar 2023 13:11:39 GMT
cache-control: private, max-age=900
last-modified: Sun, 19 Mar 2023 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 81838
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, ETag, Pragma, Content-Type, Content-Length, Cache-Control, Expires, Backoff, Alert, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 19 Mar 2023 12:14:32 GMT
age: 3427
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js
200 OK 28 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js
IP
File type ASCII text, with very long lines (65447)
Hash d900ca08873ee57d40616d39a44cc0aa
7ab3ac8b1504b7b914a6e94c979b8390bb492f6a
1eea479cc0abe04a0846f41031207f9511f12ffef017a6109d4efb6f5523465b
GET /ajax/libs/jquery/3.6.0/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 19 Mar 2023 13:11:40 GMT
content-type: application/javascript; charset=utf-8
content-length: 27938
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "603e8adc-15d9d"
last-modified: Tue, 02 Mar 2021 18:58:36 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 936021
expires: Fri, 08 Mar 2024 13:11:40 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rMLG1DyWQnCZPxi8KjfetGGUyrvomm0Ie0jXlNfp0wjse%2FBjMVOvOG89FhY1sSwQuAkO3jZQDznMOvKcwDukxf8w%2BsiECvlElBTpxjD9ZE9PSdEwUvgwlZkt2LNGXBiT4zka6HHw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7aa5f66b0f280b69-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
wchat.freshchat.com/js/widget.js
200 OK 21 kB URL HTTP/1.1 wchat.freshchat.com/js/widget.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash eb22130b28f59c00707f60d127245291
1d0a4d83e995fe9c9f3620d72db9a57faf3b3de6
9d2c8f56dabdbfbb65d70d644b874c1150cd4e21be1b5bdb66be181c3e5f0edd
GET /js/widget.js HTTP/1.1
Host: wchat.freshchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 19 Mar 2023 13:11:39 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
server: fwe
last-modified: Mon, 13 Mar 2023 12:19:13 GMT
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: max-age=900, must-revalidate
served-by: 9886
x-server: 9886
content-encoding: gzip
x-envoy-upstream-service-time: 1
x-trace-id: 00-b0a628a617a6cc41c63fb11918cb87d7-ed76c6aee61262c5-00
nel: { "report_to": "nel-endpoint-freshchat", "max_age": 2592000, "include_subdomains": true}
report-to: { "group": "nel-endpoint-freshchat", "max_age": 2592000, "include_subdomains": true, "endpoints": [{"url": "https://edge-admin.us-east-1.freshedge.net/nelreports/freshchat"}]}
x-fw-ratelimiting-managed: false
x-request-id: 1ccd2bb6-0c8c-46ec-b984-9f8491b51d3a
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 70f795f7a73fb087a4b08eebe6e2a970
faaa9283e766256900f3c3e00dee00973e7da2a6
4f7e4813f82f60ebf9c536d9342726307686931df7309a4c367f3b658602efde
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4F7E4813F82F60EBF9C536D9342726307686931DF7309A4C367F3B658602EFDE"
Last-Modified: Fri, 17 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16268
Expires: Sun, 19 Mar 2023 17:42:48 GMT
Date: Sun, 19 Mar 2023 13:11:40 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e6b53ec11ad5edf0aa67b1a82ee37cf0
29ff88bc8101ed20126e865abf729f5967db7dba
bc45b0a198588f54f15e0f17390f8759867229ac9cf8a7da8197843efe994c45
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BC45B0A198588F54F15E0F17390F8759867229AC9CF8A7DA8197843EFE994C45"
Last-Modified: Fri, 17 Mar 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3998
Expires: Sun, 19 Mar 2023 14:18:18 GMT
Date: Sun, 19 Mar 2023 13:11:40 GMT
Connection: keep-alive
cdn.iconvert.network/code/b4b7cabb-7ad3-47b0-a785-8e385e9c7606.js
200 OK 869 B URL HTTP/2 cdn.iconvert.network/code/b4b7cabb-7ad3-47b0-a785-8e385e9c7606.js
IP
File type ASCII text, with very long lines (368)
Hash 9b2ce02ad421310ebc9a7b5333478438
8d88085d63331763ee7fe20f60ac714beafa8874
c50dc0e438e093b18ac8518d77312ab950cd5f17fad4790c2e720b2224d5016c
GET /code/b4b7cabb-7ad3-47b0-a785-8e385e9c7606.js HTTP/1.1
Host: cdn.iconvert.network
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 869
last-modified: Wed, 15 Mar 2023 15:41:57 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Fri, 17 Mar 2023 21:14:04 GMT
cache-control: max-age=172800
etag: "9b2ce02ad421310ebc9a7b5333478438"
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: YaB0oaT_tBFPVBj6DVvXjkxF0Ew4BwJSQQAcAOZK9bvQJIBMsliPoQ==
age: 143857
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
semerviewdistains.com/d/.js?oref=&ourl=https%3A%2F%2Fwww.happistar8.net%2F&opt=&t=1679231512341
400 Bad Request 152 B URL HTTP/2 semerviewdistains.com/d/.js?oref=&ourl=https%3A%2F%2Fwww.happistar8.net%2F&opt=&t=1679231512341
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with no line terminators
Hash d9bacc468aa23334526933389545e120
e26288b4bada404ce340ca72989f9f1193dc649c
0605685efb44dd3decd77517436c575731b61f807247587de67080c579ffa2d4
GET /d/.js?oref=&ourl=https%3A%2F%2Fwww.happistar8.net%2F&opt=&t=1679231512341 HTTP/1.1
Host: semerviewdistains.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 400 Bad Request
server: nginx
date: Sun, 19 Mar 2023 13:11:40 GMT
content-type: text/html
content-length: 152
cache-control: no-store, no-cache, pre-check=0, post-check=0
expires: Thu, 01 Jan 1970 00:00:00 GMT
pragma: no-cache
X-Firefox-Spdy: h2
l2.io/ip.js?var=customIP
200 OK 816 kB IP
ASN #29152 Decknet S.a.r.l.
Size 816 kB (816121 bytes)
Hash 3a15a68e2eceae2453fd845d179d2588
45738c4c792cff67da4ed15cd202dadbd4eb8e08
627ea77246ace4b2385ec5f58c575790cae27702cce75e1248a2dbf467492c71
GET /ip.js?var=customIP HTTP/1.1
Host: l2.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 19 Mar 2023 13:11:40 GMT
Server: Apache/2.4.38 (Debian)
Content-Length: 26
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
res.cloudinary.com/blackbox/image/upload/v1658720055/cs%20widget%20july%202022/telegram.png
200 OK 6.8 kB URL HTTP/2 res.cloudinary.com/blackbox/image/upload/v1658720055/cs%20widget%20july%202022/telegram.png
IP
File type PNG image data, 177 x 177, 8-bit/color RGBA, non-interlaced\012- data
Hash 3dd8441f7382111fe377d19fa1273e40
4ece7208d7f6af5f9f1dd0054efdc4045b7c3d1b
4b39240a18006d973399a34a8b92aaf14df769ff293c8447cff1c5c74f29d361
GET /blackbox/image/upload/v1658720055/cs%20widget%20july%202022/telegram.png HTTP/1.1
Host: res.cloudinary.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/png
etag: "3dd8441f7382111fe377d19fa1273e40"
last-modified: Mon, 25 Jul 2022 03:34:16 GMT
date: Sun, 19 Mar 2023 13:11:40 GMT
strict-transport-security: max-age=604800
cache-control: public, no-transform, immutable, max-age=2592000
server-timing: fastly;dur=105;cpu=104;start=2023-03-19T13:11:40.107Z;desc=hit,rtt;dur=11
server: Cloudinary
timing-allow-origin: *
access-control-allow-origin: *
accept-ranges: bytes
x-content-type-options: nosniff
access-control-expose-headers: Content-Length,ETag,Server-Timing,X-Content-Type-Options
content-length: 6757
X-Firefox-Spdy: h2
res.cloudinary.com/blackbox/image/upload/v1658720055/cs%20widget%20july%202022/ico_chat.png
200 OK 7.1 kB URL HTTP/2 res.cloudinary.com/blackbox/image/upload/v1658720055/cs%20widget%20july%202022/ico_chat.png
IP
File type PNG image data, 177 x 177, 8-bit/color RGBA, non-interlaced\012- data
Hash ceb6e75858b3ef1e6799fdf398c5a827
781b91899f7bd82582433897cd69d99f476dbf4f
290f0cf3655cc4d7b183b7b3c3bdc396e319232fc63586e719f12655a060c304
GET /blackbox/image/upload/v1658720055/cs%20widget%20july%202022/ico_chat.png HTTP/1.1
Host: res.cloudinary.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/png
etag: "ceb6e75858b3ef1e6799fdf398c5a827"
last-modified: Mon, 25 Jul 2022 03:34:17 GMT
date: Sun, 19 Mar 2023 13:11:40 GMT
strict-transport-security: max-age=604800
cache-control: public, no-transform, immutable, max-age=2592000
server-timing: fastly;dur=110;cpu=109;start=2023-03-19T13:11:40.103Z;desc=hit,rtt;dur=11
server: Cloudinary
timing-allow-origin: *
access-control-allow-origin: *
accept-ranges: bytes
x-content-type-options: nosniff
access-control-expose-headers: Content-Length,ETag,Server-Timing,X-Content-Type-Options
content-length: 7075
X-Firefox-Spdy: h2
res.cloudinary.com/blackbox/image/upload/v1658720055/cs%20widget%20july%202022/ico_line.png
200 OK 7.8 kB URL HTTP/2 res.cloudinary.com/blackbox/image/upload/v1658720055/cs%20widget%20july%202022/ico_line.png
IP
File type PNG image data, 177 x 177, 8-bit/color RGBA, non-interlaced\012- data
Hash 19e3e6b922f510accb72079d8f9553e8
49c2ec003739a1ea56765e1f92a05c56bb3ab3f4
d6dcd1cab7c0ee9d58c18e95aa844a0abd684d6bc2556f9d06114e35cc3d563e
GET /blackbox/image/upload/v1658720055/cs%20widget%20july%202022/ico_line.png HTTP/1.1
Host: res.cloudinary.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/png
etag: "19e3e6b922f510accb72079d8f9553e8"
last-modified: Mon, 25 Jul 2022 03:34:16 GMT
date: Sun, 19 Mar 2023 13:11:40 GMT
strict-transport-security: max-age=604800
cache-control: public, no-transform, immutable, max-age=2592000
server-timing: fastly;dur=103;cpu=101;start=2023-03-19T13:11:40.110Z;desc=hit,rtt;dur=11
server: Cloudinary
timing-allow-origin: *
access-control-allow-origin: *
accept-ranges: bytes
x-content-type-options: nosniff
access-control-expose-headers: Content-Length,ETag,Server-Timing,X-Content-Type-Options
content-length: 7819
X-Firefox-Spdy: h2
cdn.seondf.com/js/v4/agent.js
200 OK 108 kB URL HTTP/2 cdn.seondf.com/js/v4/agent.js
IP
File type C source, ASCII text, with very long lines (65536), with no line terminators
Size 108 kB (107773 bytes)
Hash d44496eda5e1d59bfbd37571ba79672d
12fa1af68e1ac5244e4795b120626a2a51999829
cb3d6fa8c670b33ceccf27ee1a4d68e6f227ca39adf21da9aeaf6a3038b25585
GET /js/v4/agent.js HTTP/1.1
Host: cdn.seondf.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 19 Mar 2023 13:11:39 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Tue, 20 Dec 2022 16:00:08 GMT
etag: W/"c34c3067f651e0fea2609171ab7bfec0"
cache-control: max-age=14400
x-amz-version-id: oBwuMALhSWNlluJ4Z9BGO_.GELHIAD3H
x-cache: Miss from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: _ViFSpdlDYf1MFiCm9avM8swf1pTbcW9kNNjfX2pZ7rrkdgl3Nzggw==
cf-cache-status: HIT
age: 2193
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=v0DNoZF3iIcyuFRDyDe2F%2Fwu8Uh06zADoYiww%2BLHkOX10YuVml%2BsrcYRPM%2FIHHiTTDWzIf5AhUmuFaTG4vK8JWBg930kZ8RPJMKgmuMBhBCQW98S7v9zGrLka3orFDPjXQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7aa5f667fd52b4f3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.r2m01.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.r2m01.amazontrust.com/
IP
Hash 6a9d718b873b2f1bbccce530c144daa8
915153d9dbd12c9bb787308988aae57a0718ea59
df63319000b8e2006317aad594a3bf3e19f045b9fe7a5d165100d40372864156
POST / HTTP/1.1
Host: ocsp.r2m01.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sun, 19 Mar 2023 13:11:40 GMT
Etag: "6415b32a-1d7"
Last-Modified: Sun, 19 Mar 2023 12:39:06 GMT
Server: ECAcc (dcb/7339)
X-Cache: Miss from cloudfront
Via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Nie8_YUN0GVNBvK9VPhHBnhk3fJrRBS3JDNiXwq0r4PekfY-j8f_bg==
Age: 1954
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: QawrGoXtILA4JncUAUJzWg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: Wm2CVZ9lE4y1jWf2JOyujHgwCZI=
www.google-analytics.com/analytics.js
200 OK 23 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
Hash 0a1ea3db94e2f0d09592c1d55de02080
7444967ae2b74f6b4ab676e375231005def2b43a
19962319c689a5ee69feceb80d82e12cb847d160fe5801723665ff69ca833675
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Sun, 19 Mar 2023 12:12:29 GMT
expires: Sun, 19 Mar 2023 14:12:29 GMT
cache-control: public, max-age=7200
age: 3551
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
script.hotjar.com/modules.e8a3d1a16d3ae98012cf.js
200 OK 69 kB URL HTTP/2 script.hotjar.com/modules.e8a3d1a16d3ae98012cf.js
IP
File type Unicode text, UTF-8 text, with very long lines (50842)
Hash dcf3a7ce85da1a4b1e561e0ffdaada66
4962d86ef0ad6965f791d0ded4bce07658bd4be2
56e3d41fae7cd8cf239dafbee15237a13c3e8375357ac64c84902b322bf10a48
GET /modules.e8a3d1a16d3ae98012cf.js HTTP/1.1
Host: script.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 68657
date: Fri, 17 Mar 2023 11:28:07 GMT
accept-ranges: bytes
access-control-allow-origin: *
cache-control: max-age=31536000
content-encoding: br
cross-origin-resource-policy: cross-origin
etag: "dcf3a7ce85da1a4b1e561e0ffdaada66"
last-modified: Fri, 17 Mar 2023 11:27:53 GMT
strict-transport-security: max-age=2592000; includeSubDomains
x-content-type-options: nosniff
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: JiptB5JlHunHRnowuJCT_4ap-T3EGWGQNkms9C5fYvGTNSnbidesGA==
age: 179013
X-Firefox-Spdy: h2
region1.google-analytics.com/g/collect?v=2&tid=G-F980XHG3H2>m=45je33f0&_p=346247978&cid=780495973.1679231513&ul=en-us&sr=1280x1024&_s=1&sid=1679231512&sct=1&seg=0&dl=https%3A%2F%2Fwww.happistar8.net%2F&dt=&en=page_view&_fv=1&_nsi=1&_ss=1
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-F980XHG3H2>m=45je33f0&_p=346247978&cid=780495973.1679231513&ul=en-us&sr=1280x1024&_s=1&sid=1679231512&sct=1&seg=0&dl=https%3A%2F%2Fwww.happistar8.net%2F&dt=&en=page_view&_fv=1&_nsi=1&_ss=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-F980XHG3H2>m=45je33f0&_p=346247978&cid=780495973.1679231513&ul=en-us&sr=1280x1024&_s=1&sid=1679231512&sct=1&seg=0&dl=https%3A%2F%2Fwww.happistar8.net%2F&dt=&en=page_view&_fv=1&_nsi=1&_ss=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.happistar8.net
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.happistar8.net
date: Sun, 19 Mar 2023 13:11:40 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.r2m02.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.r2m02.amazontrust.com/
IP
Hash 3193449c2d4ee184d8ad94c02e41f2e5
93708bf47f6ab7003b120e5982237d13dfa62fad
6919fa8891a50897e7fbd607210d76ca26b41ff02ec5cbf33b2b474aa000a0f5
POST / HTTP/1.1
Host: ocsp.r2m02.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=96400
Date: Sun, 19 Mar 2023 13:11:40 GMT
Etag: "6415c859-1d7"
Expires: Mon, 20 Mar 2023 15:58:20 GMT
Last-Modified: Sat, 18 Mar 2023 14:19:05 GMT
Server: ECAcc (nya/78BE)
X-Cache: Miss from cloudfront
Via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: oD4ABLxB3Uk9KmwA313OQrjr-lVcuHv_7W8PLlvyOduHeJbi3gLI-w==
Age: 5955
tags.srv.stackadapt.com/events.js
301 Moved Permanently 65 B URL HTTP/1.1 tags.srv.stackadapt.com/events.js
IP
File type HTML document, ASCII text
Hash f80e89783ec551e69632712d99fd2224
a760361995b52b09f655a2bb469d7dd464619692
c052ddf9a69031b36e27713dfc2ca1d3494de9e0436c5bb35d17d92dac2c61bd
GET /events.js HTTP/1.1
Host: tags.srv.stackadapt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=utf-8
Date: Sun, 19 Mar 2023 13:11:41 GMT
Location: https://qvdt3feo.com/events.js
Content-Length: 65
Connection: keep-alive
ocsp.r2m02.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.r2m02.amazontrust.com/
IP
Hash 171e0f0d031bf10a630e71b86228a76c
274b3d1d0d57bfdff426a8fc05dcff63f3e6001d
8bdc237705f706b36457c4b55c72d372e9330411ce374888fff7d2e899ea0f5c
POST / HTTP/1.1
Host: ocsp.r2m02.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=89240
Date: Sun, 19 Mar 2023 13:11:41 GMT
Etag: "6415aab8-1d7"
Expires: Mon, 20 Mar 2023 13:59:01 GMT
Last-Modified: Sat, 18 Mar 2023 12:12:40 GMT
Server: ECAcc (nya/7946)
X-Cache: Miss from cloudfront
Via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: on8vEQ5V44VWIVlmcG3KlGOfOH6etodgjh_oo68sgBEPxLkcKu_-QQ==
Age: 6381
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash de95776582936b8e129e876cf6d80fa8
0233251e1cf0123f1260d980d7c8ef92718723f9
49c07da2ab4ebd66bd166bf0e20dd084b38973cd40c79f85eb283d15a1ccac36
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "49C07DA2AB4EBD66BD166BF0E20DD084B38973CD40C79F85EB283D15A1CCAC36"
Last-Modified: Sun, 19 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4005
Expires: Sun, 19 Mar 2023 14:18:26 GMT
Date: Sun, 19 Mar 2023 13:11:41 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash de95776582936b8e129e876cf6d80fa8
0233251e1cf0123f1260d980d7c8ef92718723f9
49c07da2ab4ebd66bd166bf0e20dd084b38973cd40c79f85eb283d15a1ccac36
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "49C07DA2AB4EBD66BD166BF0E20DD084B38973CD40C79F85EB283D15A1CCAC36"
Last-Modified: Sun, 19 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4005
Expires: Sun, 19 Mar 2023 14:18:26 GMT
Date: Sun, 19 Mar 2023 13:11:41 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash de95776582936b8e129e876cf6d80fa8
0233251e1cf0123f1260d980d7c8ef92718723f9
49c07da2ab4ebd66bd166bf0e20dd084b38973cd40c79f85eb283d15a1ccac36
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "49C07DA2AB4EBD66BD166BF0E20DD084B38973CD40C79F85EB283D15A1CCAC36"
Last-Modified: Sun, 19 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4005
Expires: Sun, 19 Mar 2023 14:18:26 GMT
Date: Sun, 19 Mar 2023 13:11:41 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash de95776582936b8e129e876cf6d80fa8
0233251e1cf0123f1260d980d7c8ef92718723f9
49c07da2ab4ebd66bd166bf0e20dd084b38973cd40c79f85eb283d15a1ccac36
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "49C07DA2AB4EBD66BD166BF0E20DD084B38973CD40C79F85EB283D15A1CCAC36"
Last-Modified: Sun, 19 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4005
Expires: Sun, 19 Mar 2023 14:18:26 GMT
Date: Sun, 19 Mar 2023 13:11:41 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae7f77f1-adab-464f-87e7-4a15dcd322ba.jpeg
200 OK 6.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae7f77f1-adab-464f-87e7-4a15dcd322ba.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c70e6317e3ccd8783db05f712ab8b319
ae05abedca84094ff077fdfb6b5ea0e6148a086b
9d3edfaeab32dfa522cd0eac659b93eb561b33a91149428e7a5d7ec84431bb72
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae7f77f1-adab-464f-87e7-4a15dcd322ba.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6265
x-amzn-requestid: a40c18f5-e26f-48d0-982a-ebfc9fa92b9f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: B_wYuEa7IAMFneQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64162dd1-42b70f637dc3b2d222d98f9b;Sampled=0
x-amzn-remapped-date: Sat, 18 Mar 2023 21:32:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: UI-PcxN2YSytmygeVp4WBCSbtLH9egiAhP5vyJI7xN7iN1QAe1mqEA==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 5c7981a979abd51ba7e5ca7d464fd048.cloudfront.net (CloudFront), 1.1 google
date: Sat, 18 Mar 2023 21:44:34 GMT
age: 55627
etag: "ae05abedca84094ff077fdfb6b5ea0e6148a086b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F31bc1b3b-b0cb-4b7c-838d-1436ec0b5d1f.jpeg
200 OK 5.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F31bc1b3b-b0cb-4b7c-838d-1436ec0b5d1f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 112dc4229d7cc2555230f8912cab9b69
a86af7d423edecc3b38a9144cffb08c97a48a9e2
82a06f06649ba1ac81f3d910167131ff66d13e0878e801c7b3beec958e39e51e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F31bc1b3b-b0cb-4b7c-838d-1436ec0b5d1f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5182
x-amzn-requestid: f45565ee-eabc-4ad8-a99d-741db58f9a78
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Bp512FkBIAMFa2A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-640d7025-16e023e3220f7a1b657ccd9c;Sampled=0
x-amzn-remapped-date: Sun, 12 Mar 2023 06:24:37 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: PxMiQOj8NdN08ku_t4YAp1eGvKhDKGuTBAH4d_rH7IyOpiwQMhkmmA==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 cca7d60248a961ff8fc8c5640024b652.cloudfront.net (CloudFront), 1.1 google
date: Sat, 18 Mar 2023 22:03:47 GMT
age: 54474
etag: "a86af7d423edecc3b38a9144cffb08c97a48a9e2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3f28ddee-c5ae-4106-9ce2-9c8042cd4b69.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3f28ddee-c5ae-4106-9ce2-9c8042cd4b69.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 05370e6d7505b4529eea9e993f98e1fe
83339f33716c03c3ea995a323bb040b50f5b7edc
563d0b70a19778405fd332ca5172840a6103cd363771108e172b1b1815303abf
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3f28ddee-c5ae-4106-9ce2-9c8042cd4b69.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11204
x-amzn-requestid: d84b9e32-9fea-45ce-87ef-508caff41b62
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: B8eTFG8GIAMFWmg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6414ddad-29cab07f73030a1145e941b6;Sampled=0
x-amzn-remapped-date: Fri, 17 Mar 2023 21:37:49 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: Xc_DEaSdASRg6uVEg6mNX7nLpGayEeELirucyulKL55Iv-ZRrYFLHA==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 3236f234d59c0fda99b416088c283260.cloudfront.net (CloudFront), 1.1 google
date: Sat, 18 Mar 2023 23:21:39 GMT
age: 49802
etag: "83339f33716c03c3ea995a323bb040b50f5b7edc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8afa2cdb-a5f3-4c78-a2ab-132c8b752b4b.png
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8afa2cdb-a5f3-4c78-a2ab-132c8b752b4b.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 78453ba98b72eff3879ef163b59c86ed
80519bb3726ee1f9f211344cd433cefaed3a7f2e
61adfeff11af9583355ac7d1500e8a8d97357b2846f151f2421001994fb06655
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8afa2cdb-a5f3-4c78-a2ab-132c8b752b4b.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10338
x-amzn-requestid: 9f880b5b-056c-44bb-a811-36ea27c232aa
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BvSgFGENoAMFuVw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-640f9799-2318d444248f7610300c658f;Sampled=0
x-amzn-remapped-date: Mon, 13 Mar 2023 21:37:29 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: K19FG80YIBs-7NnPFJQEodETe4DpifB_BA2FpyYtB0W-sXXjNlLKxw==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 21618d080c6bfbcd465fc55a167a8c1a.cloudfront.net (CloudFront), 1.1 google
date: Sun, 19 Mar 2023 07:04:47 GMT
age: 22014
etag: "80519bb3726ee1f9f211344cd433cefaed3a7f2e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe323f22e-6800-4578-a34f-a8fa940499e0.jpeg
200 OK 8.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe323f22e-6800-4578-a34f-a8fa940499e0.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6645ef8b7e2b10326cc1cb7c76f82769
cc7b05fa466c6ecd6c8a0e0d6ccc96ecbd59aced
1076fa495f0b7cc23922f64cc6a6f596de9a6f08ea7549eef785d804db0be7fc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe323f22e-6800-4578-a34f-a8fa940499e0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8189
x-amzn-requestid: 3815c61d-6d05-4794-bd9a-d417d1270527
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: B_wqgGsdIAMFi6g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64162e42-6af86b2a21b89d38559ca754;Sampled=0
x-amzn-remapped-date: Sat, 18 Mar 2023 21:33:54 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: n-Dbnb07Rsh0y_T4UW0VQSyRcV96MehdMiFlhdUtcrCiqZVL5ZVJxg==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 5c7981a979abd51ba7e5ca7d464fd048.cloudfront.net (CloudFront), 1.1 google
date: Sat, 18 Mar 2023 22:14:54 GMT
age: 53807
etag: "cc7b05fa466c6ecd6c8a0e0d6ccc96ecbd59aced"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F948af7b9-8b3e-4159-bdaa-f68fedcc3497.jpeg
200 OK 7.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F948af7b9-8b3e-4159-bdaa-f68fedcc3497.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 790ee76f4db86cd0cc555f6d7beada2c
fea1a6b2a38be6a09e086def71f521cc88509a0f
f7641b9e414006ee96daa82fd9d6aa1463d47c0388a9f3b289c563af76a3d2ef
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F948af7b9-8b3e-4159-bdaa-f68fedcc3497.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7930
x-amzn-requestid: 276e0768-3943-40ba-9d6c-4f13ab08da51
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: B_wqXFwvoAMF1zA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64162e42-6f9e6903248d187d5d4a8544;Sampled=0
x-amzn-remapped-date: Sat, 18 Mar 2023 21:33:54 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: ZMNiK-tkkiBb_emHsrzLhJleK98OCtNZNGO-9DMMAbHyqfPB-2kAMg==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 f958a3846d80a3925f664b320dfad9c8.cloudfront.net (CloudFront), 1.1 google
date: Sat, 18 Mar 2023 21:48:16 GMT
age: 55405
etag: "fea1a6b2a38be6a09e086def71f521cc88509a0f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
tags.srv.stackadapt.com/sa.css
200 OK 27 B URL HTTP/1.1 tags.srv.stackadapt.com/sa.css
IP
Hash 83f5ba33314db5f218488a5a51da1455
87a21689afa235c4c65437334085be4bf5cca170
3f100e5e6ff270dadb43b44878f0118a2389dee0d844acc102b5179d70a824dc
GET /sa.css HTTP/1.1
Host: tags.srv.stackadapt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Cache-Control: only-if-cached, no-transform, private, max-age=7776000
Content-Type: text/css
Date: Sun, 19 Mar 2023 13:11:41 GMT
Content-Length: 27
Connection: keep-alive
geo-lookup.iconvert.network/?callback=_jsonp_0
200 OK 23 B URL HTTP/2 geo-lookup.iconvert.network/?callback=_jsonp_0
IP
File type ASCII text, with no line terminators
Hash 77a2b27581b0e6f8e1866d12a9fb3460
0d6912f1aabf2f9f191883767a565846b6b23387
892b6da823563cbd0865b33fd6f805e495769f555aa11679fa72c82e56abe9fd
GET /?callback=_jsonp_0 HTTP/1.1
Host: geo-lookup.iconvert.network
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 23
x-amz-bucket-region: us-east-1
date: Sun, 19 Mar 2023 13:11:40 GMT
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 5SpmnGp_Uwd3GgegrBhg8JcIhkgW2WCbBYcztFsYIuVUg8sNBW08Sw==
X-Firefox-Spdy: h2
ocsp.r2m02.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.r2m02.amazontrust.com/
IP
Hash e7e2b353c2e271b4922d081c31e3c322
8d7252e395e0d6fee4bceda61d5d72592beda8c5
d1ec6f1b2f4db2190869c81882c41f74c2dc625a35321f26a72bc314a17eb173
POST / HTTP/1.1
Host: ocsp.r2m02.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sun, 19 Mar 2023 13:11:41 GMT
Last-Modified: Sun, 19 Mar 2023 11:46:31 GMT
Server: ECAcc (nya/7993)
X-Cache: Miss from cloudfront
Via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 1Mqv9nLgU22bigLvj30L-elkG2E-VtFQ2cg37JTavUwRubspR7HWaw==
Age: 5110
ocsp.r2m02.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.r2m02.amazontrust.com/
IP
Hash e7e2b353c2e271b4922d081c31e3c322
8d7252e395e0d6fee4bceda61d5d72592beda8c5
d1ec6f1b2f4db2190869c81882c41f74c2dc625a35321f26a72bc314a17eb173
POST / HTTP/1.1
Host: ocsp.r2m02.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sun, 19 Mar 2023 13:11:41 GMT
Last-Modified: Sun, 19 Mar 2023 12:13:33 GMT
Server: ECAcc (bsa/EB2E)
X-Cache: Miss from cloudfront
Via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: bXww7FU9I7P8bN5foDHLVlX-uzoi8EdmW_Ewp5RKIJja0HteVes3wg==
Age: 3488
tags.srv.stackadapt.com/sa.jpeg
200 OK 651 B URL HTTP/1.1 tags.srv.stackadapt.com/sa.jpeg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1x1, components 3\012- data
Hash 0b6210218f2608415c19884e4ea72c72
8ae1b352cf6bbc3cf54dce2b0695d471d63d886d
7a5fe50309c83dc6a3f5052674b5f7b670bec290712daf79ae6620975507e577
GET /sa.jpeg HTTP/1.1
Host: tags.srv.stackadapt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.happistar8.net/
Origin: https://www.happistar8.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Cache-Control: only-if-cached, no-transform, private, max-age=7776000
Content-Type: image/jpeg
Date: Sun, 19 Mar 2023 13:11:41 GMT
Content-Length: 651
Connection: keep-alive
event.iconvert.network/com.snowplowanalytics.snowplow/tp2
200 OK 27 kB URL HTTP/2 event.iconvert.network/com.snowplowanalytics.snowplow/tp2
IP
File type gzip compressed data, from Unix\012- data
Hash a1ade6f31c0b3797538b6add54e194a2
bcff8448d642fe2410eacf97b5a8cf373053b683
6eba1f576e370aa0bf5b4cf78d4b2b22949d6edcb9a3a508d76ea8b996d2255a
OPTIONS /com.snowplowanalytics.snowplow/tp2 HTTP/1.1
Host: event.iconvert.network
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.happistar8.net/
Origin: https://www.happistar8.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 19 Mar 2023 13:11:42 GMT
content-length: 0
access-control-allow-origin: https://www.happistar8.net
access-control-allow-credentials: true
access-control-allow-headers: Content-Type
access-control-max-age: 5
server: akka-http/10.0.9
X-Firefox-Spdy: h2
event.iconvert.network/com.snowplowanalytics.snowplow/tp2
200 OK 2 B URL HTTP/2 event.iconvert.network/com.snowplowanalytics.snowplow/tp2
IP
File type ASCII text, with no line terminators
Hash 444bcb3a3fcf8389296c49467f27e1d6
7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1
Host: event.iconvert.network
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
Content-Length: 568
Origin: https://www.happistar8.net
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 19 Mar 2023 13:11:42 GMT
content-type: text/plain; charset=UTF-8
content-length: 2
set-cookie: sp=ca5aa34c-9843-4235-b70f-ab8828bab2fd; Expires=Mon, 18 Mar 2024 13:11:42 GMT; Path=/
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA"
access-control-allow-origin: https://www.happistar8.net
access-control-allow-credentials: true
server: akka-http/10.0.9
X-Firefox-Spdy: h2
tags.srv.stackadapt.com/saq_pxl?uid=ul7Y3H07ahBrTpjMaDhdjw&is_js=true&landing_url=https%3A%2F%2Fwww.happistar8.net%2F&t=&tip=XYT0qCO_tplYV1MxFmzroDrn7S1AP1kLhIOyYbIUVH8&host=https://www.happistar8.net&sa-user-id-v2=s%253ASv_g99LRXvhf-jx7OsNOaltaKpo.vKGdarGDDylK3CgBb4ic4Nw3I0tJwKdnD8LWhkzn3r8&sa-user-id=s%253A0-4affe0f7-d2d1-5ef8-5ffa-3c7b3ac34e6a.Sxx%252BM%252BlpsbrHzyB2Rf0exT1zgnbpRn4%252B3xh6qnlECdE
200 OK 94 B URL HTTP/1.1 tags.srv.stackadapt.com/saq_pxl?uid=ul7Y3H07ahBrTpjMaDhdjw&is_js=true&landing_url=https%3A%2F%2Fwww.happistar8.net%2F&t=&tip=XYT0qCO_tplYV1MxFmzroDrn7S1AP1kLhIOyYbIUVH8&host=https://www.happistar8.net&sa-user-id-v2=s%253ASv_g99LRXvhf-jx7OsNOaltaKpo.vKGdarGDDylK3CgBb4ic4Nw3I0tJwKdnD8LWhkzn3r8&sa-user-id=s%253A0-4affe0f7-d2d1-5ef8-5ffa-3c7b3ac34e6a.Sxx%252BM%252BlpsbrHzyB2Rf0exT1zgnbpRn4%252B3xh6qnlECdE
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 2d12c1129f6ff37622d03db4a2a5949e
bc44653c4a06e671ce423600755fed86fad8ec24
078f3dd88e751c3c421b2007e1cb27bcb65a95daf278bd25de81ba7b2bf3c4e4
GET /saq_pxl?uid=ul7Y3H07ahBrTpjMaDhdjw&is_js=true&landing_url=https%3A%2F%2Fwww.happistar8.net%2F&t=&tip=XYT0qCO_tplYV1MxFmzroDrn7S1AP1kLhIOyYbIUVH8&host=https://www.happistar8.net&sa-user-id-v2=s%253ASv_g99LRXvhf-jx7OsNOaltaKpo.vKGdarGDDylK3CgBb4ic4Nw3I0tJwKdnD8LWhkzn3r8&sa-user-id=s%253A0-4affe0f7-d2d1-5ef8-5ffa-3c7b3ac34e6a.Sxx%252BM%252BlpsbrHzyB2Rf0exT1zgnbpRn4%252B3xh6qnlECdE HTTP/1.1
Host: tags.srv.stackadapt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.happistar8.net
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: https://www.happistar8.net
Content-Type: text/plain; charset=utf-8
Date: Sun, 19 Mar 2023 13:11:42 GMT
Content-Length: 94
Connection: keep-alive
res.cloudinary.com/blackbox/raw/upload/v1646033793/fonts/NotoSans-Regular.woff2
200 OK 118 kB URL HTTP/2 res.cloudinary.com/blackbox/raw/upload/v1646033793/fonts/NotoSans-Regular.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 117948, version 1.0\012- data
Size 118 kB (117948 bytes)
Hash e50c34178d20d5fa4ab3c1f6c67901a9
655dcb4d829e2bc75e9a7cf8a2aa08f6a4513634
5b43a0c0c7874410cd01de2ec8684785b550295350f5d92901f4c9090f1ab019
GET /blackbox/raw/upload/v1646033793/fonts/NotoSans-Regular.woff2 HTTP/1.1
Host: res.cloudinary.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.happistar8.net
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-disposition: attachment; filename="NotoSans-Regular.woff2"
content-type: application/octet-stream
etag: "e50c34178d20d5fa4ab3c1f6c67901a9"
last-modified: Mon, 28 Feb 2022 07:36:34 GMT
date: Sun, 19 Mar 2023 13:11:42 GMT
strict-transport-security: max-age=604800
cache-control: public, no-transform, immutable, max-age=2592000
server-timing: fastly;dur=385;cpu=195;start=2023-03-19T13:11:42.022Z;desc=miss,rtt;dur=9,cloudinary;dur=97;start=2023-03-19T13:11:42.264Z
server: Cloudinary
timing-allow-origin: *
access-control-allow-origin: *
accept-ranges: bytes
access-control-expose-headers: Content-Length,Content-Disposition,ETag,Server-Timing
content-length: 117948
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 14632d58f00907c27bb986ee95790c8f
b16eeaee45cf727e5e17588887c4030645e05c49
682c43f278df56045a30928216563e4686d1dbc7523f5312b5c2bbf26394f698
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3819
Cache-Control: max-age=141035
Content-Type: application/ocsp-response
Date: Sun, 19 Mar 2023 13:11:42 GMT
Etag: "64167f0e-1d7"
Expires: Tue, 21 Mar 2023 04:22:17 GMT
Last-Modified: Sun, 19 Mar 2023 03:18:38 GMT
Server: ECAcc (ska/F73A)
X-Cache: HIT
Content-Length: 471
www.facebook.com/tr?id=1677021112574000&ev=PageView&noscript=1
200 OK 0 B URL HTTP/2 www.facebook.com/tr?id=1677021112574000&ev=PageView&noscript=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr?id=1677021112574000&ev=PageView&noscript=1 HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Sun, 19 Mar 2023 13:11:42 GMT
X-Firefox-Spdy: h2
wchat.freshchat.com/widget/config_iframe.html?host=https://wchat.freshchat.com&token=519b4315-2f72-4655-a0dd-8ee6f3b800ed&origin=https://www.happistar8.net
200 OK 362 B URL HTTP/1.1 wchat.freshchat.com/widget/config_iframe.html?host=https://wchat.freshchat.com&token=519b4315-2f72-4655-a0dd-8ee6f3b800ed&origin=https://www.happistar8.net
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 3ac453172e6fdcbb79853573af142482
720faff74171d2b936ca252c3a862d2ef34513c9
449fcf3693a59e7b76ad269511a47518a49f994b74e521441a92e5dc193f3928
GET /widget/config_iframe.html?host=https://wchat.freshchat.com&token=519b4315-2f72-4655-a0dd-8ee6f3b800ed&origin=https://www.happistar8.net HTTP/1.1
Host: wchat.freshchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 19 Mar 2023 13:11:42 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
server: fwe
last-modified: Mon, 13 Mar 2023 12:19:13 GMT
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: no-cache, no-store, must-revalidate, pre-check=0, post-check=0
served-by: 9886
x-server: 9886
content-security-policy: style-src 'unsafe-inline' *; font-src 'self' * data:; img-src 'self' * data:; connect-src 'self' *; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.freshchat.com https://*.freshworksapi.com; child-src 'self' * blob:; media-src 'self' https://*.freshchat.com; manifest-src 'self' https://*.freshchat.com; default-src 'none';
content-encoding: gzip
x-envoy-upstream-service-time: 0
x-trace-id: 00-beb1b8d4dcd026cf6d5e0ce3532a1b40-bf40ef6d6bdac698-00
nel: { "report_to": "nel-endpoint-freshchat", "max_age": 2592000, "include_subdomains": true}
report-to: { "group": "nel-endpoint-freshchat", "max_age": 2592000, "include_subdomains": true, "endpoints": [{"url": "https://edge-admin.us-east-1.freshedge.net/nelreports/freshchat"}]}
x-fw-ratelimiting-managed: false
x-request-id: baf314e0-8490-4dc1-9003-86ece0c037d8
fonts.googleapis.com/css2?family=Noto+Sans+JP:wght@100&display=swap
200 OK 58 kB URL HTTP/2 fonts.googleapis.com/css2?family=Noto+Sans+JP:wght@100&display=swap
IP
Hash b1dd1a911afe67a9b7f456b9d080ca77
da1a3afbb0b652039bdada3796f9b0e315ab9c2d
226a3d3fd759fbebc1bfaa856e621228f9a0f5001c22a7f052f802fb543e51f6
GET /css2?family=Noto+Sans+JP:wght@100&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 19 Mar 2023 13:11:41 GMT
date: Sun, 19 Mar 2023 13:11:41 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
eu-swarm-ws-re.deimosphobos.net/
101 Switching Protocols 0 B URL HTTP/1.1 eu-swarm-ws-re.deimosphobos.net/
IP
ASN #209242 Cloudflare London, LLC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: eu-swarm-ws-re.deimosphobos.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://www.happistar8.net
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: uPyGEb+rnsWd+o12rNMg7Q==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Sun, 19 Mar 2023 13:11:42 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 67ADPDxnpWXoyzWS9bh73hDd2vU=
Sec-Websocket-Extensions: permessage-deflate; server_no_context_takeover; client_no_context_takeover
Via: 1.1 google
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7aa5f67b9ec3b4f1-OSL
cmsbetconstruct.com/content/images/payments/custom/1876513/12087.png?2023-03-17%2017:13:33
200 OK 5.7 kB URL HTTP/2 cmsbetconstruct.com/content/images/payments/custom/1876513/12087.png?2023-03-17%2017:13:33
IP
ASN #209242 Cloudflare London, LLC
File type PNG image data, 318 x 113, 8-bit/color RGBA, non-interlaced\012- data
Hash 57d3e43d0e13a3a614bb02a7dd546063
9a618b4099de854ce0e9740d5f56f95a724e09d8
5cd255b0c22072f4d809151b07a6dff3db9a3d6725949d8073acc9428001a864
GET /content/images/payments/custom/1876513/12087.png?2023-03-17%2017:13:33 HTTP/1.1
Host: cmsbetconstruct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 19 Mar 2023 13:11:43 GMT
content-type: image/png
content-length: 5660
last-modified: Tue, 28 Feb 2023 00:45:31 GMT
etag: "63fd4eab-161c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67dbaadb4ee-OSL
X-Firefox-Spdy: h2
cmsbetconstruct.com/json?base_host=www.goldblue-1876513.com&ssl=1&lang=eng&json=get_page&slug=homepage-backgrounds-eng&children=1&country=NO&exclude=author,excerpt,comments,comment_status,comment_count,tags,attachments
200 OK 10 kB URL HTTP/2 cmsbetconstruct.com/json?base_host=www.goldblue-1876513.com&ssl=1&lang=eng&json=get_page&slug=homepage-backgrounds-eng&children=1&country=NO&exclude=author,excerpt,comments,comment_status,comment_count,tags,attachments
IP
ASN #209242 Cloudflare London, LLC
File type JSON data\012- , ASCII text, with very long lines (1002), with no line terminators
Hash f9496c1ce89e9fbeba4decdc4a8493d2
66ffd7fc7e96adec76170da0c217e7cd070cb262
954ef7b500bc41bfc986c9fae944909dd6562225cd8359b06f29fcdc37f57146
GET /json?base_host=www.goldblue-1876513.com&ssl=1&lang=eng&json=get_page&slug=homepage-backgrounds-eng&children=1&country=NO&exclude=author,excerpt,comments,comment_status,comment_count,tags,attachments HTTP/1.1
Host: cmsbetconstruct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.happistar8.net
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 19 Mar 2023 13:11:42 GMT
content-type: application/json
expires: Sun, 19 Mar 2023 13:26:42 GMT
cache-control: max-age=900
x-frame-options: SAMEORIGIN
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 1000
access-control-allow-headers: X-Requested-With, Content-Type, Origin, Authorization, Accept, Client-Security-Token, Accept-Encoding, Content-Key-Case, Access-Token, Accept-Response
access-control-allow-methods: POST, GET, PUT, PATCH, DELETE, OPTIONS
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67c081fb4ee-OSL
content-encoding: br
X-Firefox-Spdy: h2
cmsbetconstruct.com/content/images/payments/custom/1876513/8336.png?2023-03-17%2017:13:33
200 OK 3.2 kB URL HTTP/2 cmsbetconstruct.com/content/images/payments/custom/1876513/8336.png?2023-03-17%2017:13:33
IP
ASN #209242 Cloudflare London, LLC
File type PNG image data, 318 x 113, 8-bit colormap, non-interlaced\012- data
Hash b455fc8ae5ddac3f20f036d36ccf1e64
acdaed72a76f629502a9dc7c3016dd728db34374
a22b7034ffba5deba0e075310780b0f64c052d4a766f02950e230538fedb305b
GET /content/images/payments/custom/1876513/8336.png?2023-03-17%2017:13:33 HTTP/1.1
Host: cmsbetconstruct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 19 Mar 2023 13:11:43 GMT
content-type: image/png
content-length: 3188
last-modified: Fri, 14 Oct 2022 12:24:24 GMT
etag: "634954f8-c74"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67deb08b4ee-OSL
X-Firefox-Spdy: h2
cmsbetconstruct.com/content/images/payments/custom/1876513/11446.png?2023-03-17%2017:13:33
200 OK 11 kB URL HTTP/2 cmsbetconstruct.com/content/images/payments/custom/1876513/11446.png?2023-03-17%2017:13:33
IP
ASN #209242 Cloudflare London, LLC
File type PNG image data, 318 x 118, 8-bit/color RGBA, non-interlaced\012- data
Hash 6fefe7d925dd3cd5db15dcd56de3c109
219ad600ca4e862ea4ba10506a0429df5c40e962
5b11fc8a402d3d4e58ba729d7d0e5cc52c901f3ec64ecf75637d992b3777f65c
GET /content/images/payments/custom/1876513/11446.png?2023-03-17%2017:13:33 HTTP/1.1
Host: cmsbetconstruct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 19 Mar 2023 13:11:43 GMT
content-type: image/png
content-length: 11439
last-modified: Thu, 16 Feb 2023 00:49:44 GMT
etag: "63ed7da8-2caf"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67deb17b4ee-OSL
X-Firefox-Spdy: h2
cmsbetconstruct.com/content/images/payments/custom/1876513/7148.png?2023-03-17%2017:13:33
200 OK 11 kB URL HTTP/2 cmsbetconstruct.com/content/images/payments/custom/1876513/7148.png?2023-03-17%2017:13:33
IP
ASN #209242 Cloudflare London, LLC
File type PNG image data, 318 x 113, 8-bit/color RGBA, non-interlaced\012- data
Hash 94fab9632a0d46b8c1f8c2e8b5d8f1d0
f73a1d53ed3e62bc2a425f034dbca1fb7e82df55
cf1e9d29c086e53098aa7a78d61f477ad6f6fd43e7b300e81f0f974692abdf68
GET /content/images/payments/custom/1876513/7148.png?2023-03-17%2017:13:33 HTTP/1.1
Host: cmsbetconstruct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 19 Mar 2023 13:11:43 GMT
content-type: image/png
content-length: 10883
last-modified: Wed, 09 Nov 2022 19:54:26 GMT
etag: "636c0572-2a83"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67dbabab4ee-OSL
X-Firefox-Spdy: h2
cmsbetconstruct.com/content/images/payments/custom/1876513/2268.png?2023-03-17%2017:13:33
200 OK 2.7 kB URL HTTP/2 cmsbetconstruct.com/content/images/payments/custom/1876513/2268.png?2023-03-17%2017:13:33
IP
ASN #209242 Cloudflare London, LLC
File type PNG image data, 318 x 113, 8-bit colormap, non-interlaced\012- data
Hash 26023fc1bf78f651dc49fae12c6d87bb
9ef326279179a1e21d5b65e8d7ac6c159c796f1b
8486a39eb87109068164eac468aa03e0f933abdae3d3c9f184adea5f29b68219
GET /content/images/payments/custom/1876513/2268.png?2023-03-17%2017:13:33 HTTP/1.1
Host: cmsbetconstruct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 19 Mar 2023 13:11:43 GMT
content-type: image/png
content-length: 2686
last-modified: Fri, 14 Oct 2022 12:26:59 GMT
etag: "63495593-a7e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67dcad5b4ee-OSL
X-Firefox-Spdy: h2
cmsbetconstruct.com/content/images/payments/custom/1876513/48.png?2023-03-17%2017:13:33
200 OK 3.2 kB URL HTTP/2 cmsbetconstruct.com/content/images/payments/custom/1876513/48.png?2023-03-17%2017:13:33
IP
ASN #209242 Cloudflare London, LLC
File type PNG image data, 318 x 113, 8-bit colormap, non-interlaced\012- data
Hash de0f1ef089aa38d0a3dd87a4416a6191
7b74117ff2422f49b8ce96e8940fdcfd44df4b71
5c70723b41250981e3186bc4b82bff4ffa9d4b6dcde54026812232242453625f
GET /content/images/payments/custom/1876513/48.png?2023-03-17%2017:13:33 HTTP/1.1
Host: cmsbetconstruct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 19 Mar 2023 13:11:43 GMT
content-type: image/png
content-length: 3218
last-modified: Fri, 14 Oct 2022 12:23:03 GMT
etag: "634954a7-c92"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67dcacbb4ee-OSL
X-Firefox-Spdy: h2
cmsbetconstruct.com/content/images/payments/custom/1876513/10756.png?2023-03-17%2017:13:33
200 OK 5.7 kB URL HTTP/2 cmsbetconstruct.com/content/images/payments/custom/1876513/10756.png?2023-03-17%2017:13:33
IP
ASN #209242 Cloudflare London, LLC
File type PNG image data, 318 x 113, 8-bit/color RGBA, non-interlaced\012- data
Hash 57d3e43d0e13a3a614bb02a7dd546063
9a618b4099de854ce0e9740d5f56f95a724e09d8
5cd255b0c22072f4d809151b07a6dff3db9a3d6725949d8073acc9428001a864
GET /content/images/payments/custom/1876513/10756.png?2023-03-17%2017:13:33 HTTP/1.1
Host: cmsbetconstruct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 19 Mar 2023 13:11:43 GMT
content-type: image/png
content-length: 5660
last-modified: Fri, 10 Feb 2023 03:28:47 GMT
etag: "63e5b9ef-161c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67dbac0b4ee-OSL
X-Firefox-Spdy: h2
cmsbetconstruct.com/content/images/payments/custom/1876513/12003.png?2023-03-17%2017:13:33
200 OK 10 kB URL HTTP/2 cmsbetconstruct.com/content/images/payments/custom/1876513/12003.png?2023-03-17%2017:13:33
IP
ASN #209242 Cloudflare London, LLC
File type PNG image data, 318 x 113, 8-bit/color RGBA, non-interlaced\012- data
Hash 95722f737681b6389cc4034a01e6c5d8
b76832988772f90e434cd37529e90ead4f04f4ac
c053f99531583b7b09ceeb77cca378ead9d42092dd74b41c4f773bbc109bc137
GET /content/images/payments/custom/1876513/12003.png?2023-03-17%2017:13:33 HTTP/1.1
Host: cmsbetconstruct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 19 Mar 2023 13:11:43 GMT
content-type: image/png
content-length: 10319
last-modified: Thu, 02 Feb 2023 09:52:40 GMT
etag: "63db87e8-284f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67dcad3b4ee-OSL
X-Firefox-Spdy: h2
cmsbetconstruct.com/content/images/payments/custom/1876513/8992.png?2023-03-17%2017:13:33
200 OK 4.6 kB URL HTTP/2 cmsbetconstruct.com/content/images/payments/custom/1876513/8992.png?2023-03-17%2017:13:33
IP
ASN #209242 Cloudflare London, LLC
File type PNG image data, 318 x 113, 8-bit colormap, non-interlaced\012- data
Hash eda7f1960f46b5ee0e8f91d22e73fee8
9055a8f5c45d3baa4a31298298c66e24fe51eadf
b4f17a42e5a815069acdd6263b4746637e8f8fee75c7ed643754d4fd0c86b8d7
GET /content/images/payments/custom/1876513/8992.png?2023-03-17%2017:13:33 HTTP/1.1
Host: cmsbetconstruct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 19 Mar 2023 13:11:43 GMT
content-type: image/png
content-length: 4648
last-modified: Fri, 14 Oct 2022 12:40:20 GMT
etag: "634958b4-1228"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67ddadcb4ee-OSL
X-Firefox-Spdy: h2
cmsbetconstruct.com/content/images/payments/custom/1876513/900.png?2023-03-17%2017:13:33
200 OK 13 kB URL HTTP/2 cmsbetconstruct.com/content/images/payments/custom/1876513/900.png?2023-03-17%2017:13:33
IP
ASN #209242 Cloudflare London, LLC
File type GIF image data, version 89a, 318 x 113\012- data
Hash 5696f64a115f15e47feb847e5125e01e
0fe1ece7be5ef4522048af4e17a8bb725cac5a6d
d4700f6eb0b50788982636aabc33c6dd2911d4430f80a93d4f74648c886757b0
GET /content/images/payments/custom/1876513/900.png?2023-03-17%2017:13:33 HTTP/1.1
Host: cmsbetconstruct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 19 Mar 2023 13:11:43 GMT
content-type: image/png
content-length: 13236
last-modified: Mon, 14 Nov 2022 12:48:24 GMT
etag: "63723918-33b4"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67ddadeb4ee-OSL
X-Firefox-Spdy: h2
cmsbetconstruct.com/content/images/payments/custom/1876513/5340.png?2023-03-17%2017:13:33
200 OK 6.1 kB URL HTTP/2 cmsbetconstruct.com/content/images/payments/custom/1876513/5340.png?2023-03-17%2017:13:33
IP
ASN #209242 Cloudflare London, LLC
File type GIF image data, version 89a, 318 x 113\012- data
Hash 272033251f9bd4c235ec87adc59f2c9f
789bc8b31f4919f2e40d17bf01c3f041f794e883
2223f02ad9b6f24750ce57ff7bdc438407e74164a31b708a9f04ab4f22e0aa85
GET /content/images/payments/custom/1876513/5340.png?2023-03-17%2017:13:33 HTTP/1.1
Host: cmsbetconstruct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 19 Mar 2023 13:11:43 GMT
content-type: image/png
content-length: 6104
last-modified: Mon, 14 Nov 2022 12:51:13 GMT
etag: "637239c1-17d8"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67dfb43b4ee-OSL
X-Firefox-Spdy: h2
cmsbetconstruct.com/content/images/payments/custom/1876513/9333.png?2023-03-17%2017:13:33
200 OK 2.0 kB URL HTTP/2 cmsbetconstruct.com/content/images/payments/custom/1876513/9333.png?2023-03-17%2017:13:33
IP
ASN #209242 Cloudflare London, LLC
File type PNG image data, 318 x 113, 8-bit colormap, non-interlaced\012- data
Hash 9ebc9a820be66e21a25ee526c8509c97
04d633525b93a9b54b8520bb0f0aa8b6e102d87f
fb6f3cbb17263fb31f03f8d22e807a8577c18a8fe0b1a80dec119bbdcee29b51
GET /content/images/payments/custom/1876513/9333.png?2023-03-17%2017:13:33 HTTP/1.1
Host: cmsbetconstruct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 19 Mar 2023 13:11:43 GMT
content-type: image/png
content-length: 2003
last-modified: Fri, 14 Oct 2022 12:34:44 GMT
etag: "63495764-7d3"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67ddae5b4ee-OSL
X-Firefox-Spdy: h2
cmsbetconstruct.com/content/images/payments/custom/1876513/9308.png?2023-03-17%2017:13:33
200 OK 1.1 kB URL HTTP/2 cmsbetconstruct.com/content/images/payments/custom/1876513/9308.png?2023-03-17%2017:13:33
IP
ASN #209242 Cloudflare London, LLC
File type PNG image data, 146 x 42, 8-bit colormap, non-interlaced\012- data
Hash d1427643559f3dcaed4325d3bafd0223
2ba0b811debbc13074beeb640adb1ee0a3238002
d55ac1043fc224426d34073cf8ea480cf0d058f552876499484749787de01422
GET /content/images/payments/custom/1876513/9308.png?2023-03-17%2017:13:33 HTTP/1.1
Host: cmsbetconstruct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 19 Mar 2023 13:11:43 GMT
content-type: image/png
content-length: 1122
last-modified: Thu, 30 Jun 2022 09:44:47 GMT
etag: "62bd708f-462"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67e1b6fb4ee-OSL
X-Firefox-Spdy: h2
cmsbetconstruct.com/content/images/payments/custom/1876513/11447.png?2023-03-17%2017:13:33
200 OK 5.0 kB URL HTTP/2 cmsbetconstruct.com/content/images/payments/custom/1876513/11447.png?2023-03-17%2017:13:33
IP
ASN #209242 Cloudflare London, LLC
File type PNG image data, 318 x 113, 8-bit/color RGBA, non-interlaced\012- data
Hash 0228010e1e54f947aabd6c27fe6594ca
75704da62eedabbd6f29db38e1db7be7c377bff2
054f3f3863e5c7c93cc7076026ee8e14843467810db94db304f8b9c07851e07b
GET /content/images/payments/custom/1876513/11447.png?2023-03-17%2017:13:33 HTTP/1.1
Host: cmsbetconstruct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 19 Mar 2023 13:11:43 GMT
content-type: image/png
content-length: 5036
last-modified: Tue, 08 Nov 2022 09:06:35 GMT
etag: "636a1c1b-13ac"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67deb1ab4ee-OSL
X-Firefox-Spdy: h2
cmsbetconstruct.com/content/images/payments/custom/1876513/11888.png?2023-03-17%2017:13:33
200 OK 10 kB URL HTTP/2 cmsbetconstruct.com/content/images/payments/custom/1876513/11888.png?2023-03-17%2017:13:33
IP
ASN #209242 Cloudflare London, LLC
File type PNG image data, 318 x 113, 8-bit colormap, non-interlaced\012- data
Hash 422e01c3a74151acc4acfb194346095a
bc7265f01ee549e9ceaa4f701c0c9b88a6bfe153
3ecea094d511da8170215f8cec203715032f0b147610f6acdf95045d3a7788fa
GET /content/images/payments/custom/1876513/11888.png?2023-03-17%2017:13:33 HTTP/1.1
Host: cmsbetconstruct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 19 Mar 2023 13:11:43 GMT
content-type: image/png
content-length: 10250
last-modified: Thu, 26 Jan 2023 12:03:42 GMT
etag: "63d26c1e-280a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67e1b83b4ee-OSL
X-Firefox-Spdy: h2
cmsbetconstruct.com/content/images/payments/custom/1876513/11448.png?2023-03-17%2017:13:33
200 OK 7.9 kB URL HTTP/2 cmsbetconstruct.com/content/images/payments/custom/1876513/11448.png?2023-03-17%2017:13:33
IP
ASN #209242 Cloudflare London, LLC
File type GIF image data, version 89a, 318 x 113\012- data
Hash 194bd8438725dffbd3cad9b048eb24ea
f9ed406e1b1830fad1a384816bcee069fbc5caf2
e8d13fcbde1b94807ed56ef35cf7f16cb32baba4144f7a46685240ea117a1b83
GET /content/images/payments/custom/1876513/11448.png?2023-03-17%2017:13:33 HTTP/1.1
Host: cmsbetconstruct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 19 Mar 2023 13:11:43 GMT
content-type: image/png
content-length: 7900
last-modified: Fri, 11 Nov 2022 04:46:44 GMT
etag: "636dd3b4-1edc"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67deb20b4ee-OSL
X-Firefox-Spdy: h2
cmsbetconstruct.com/content/images/payments/custom/1876513/9399.png?2023-03-17%2017:13:33
200 OK 5.9 kB URL HTTP/2 cmsbetconstruct.com/content/images/payments/custom/1876513/9399.png?2023-03-17%2017:13:33
IP
ASN #209242 Cloudflare London, LLC
File type PNG image data, 318 x 113, 8-bit colormap, non-interlaced\012- data
Hash 5891f7b4f1182b1bc1d271dbf8ee7fbb
f5968fa6fefcd5132071ffe910b7642432776aa6
95d93717098b8098e64b3ac9bf383a72ce62078c011defe9ae0ee45715ee5000
GET /content/images/payments/custom/1876513/9399.png?2023-03-17%2017:13:33 HTTP/1.1
Host: cmsbetconstruct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 19 Mar 2023 13:11:43 GMT
content-type: image/png
content-length: 5890
last-modified: Fri, 14 Oct 2022 12:40:40 GMT
etag: "634958c8-1702"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67deb03b4ee-OSL
X-Firefox-Spdy: h2
cmsbetconstruct.com/skins/goldblue-1876513.cms.betconstruct.com/images/imageInsteadPayments.png?v=2023-03-17%2017:13:33
200 OK 35 kB URL HTTP/2 cmsbetconstruct.com/skins/goldblue-1876513.cms.betconstruct.com/images/imageInsteadPayments.png?v=2023-03-17%2017:13:33
IP
ASN #209242 Cloudflare London, LLC
File type PNG image data, 940 x 265, 8-bit/color RGBA, non-interlaced\012- data
Hash 00e4a84c6f0fefe57a9595302d0c41e2
559d1f578ba3f0074587efbd4cea80c6c2b5061a
1b953a039ab224aa42aa9caa00ed201f16d746db5eb93e6e6fc0b6bbf7e7bdc1
GET /skins/goldblue-1876513.cms.betconstruct.com/images/imageInsteadPayments.png?v=2023-03-17%2017:13:33 HTTP/1.1
Host: cmsbetconstruct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 19 Mar 2023 13:11:43 GMT
content-type: image/png
content-length: 34927
last-modified: Wed, 24 Nov 2021 06:11:51 GMT
etag: "619dd7a7-886f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7aa5f67d9a90b4ee-OSL
X-Firefox-Spdy: h2
cmsbetconstruct.com/content/images/payments/custom/1876513/9756.png?2023-03-17%2017:13:33
200 OK 5.6 kB URL HTTP/2 cmsbetconstruct.com/content/images/payments/custom/1876513/9756.png?2023-03-17%2017:13:33
IP
ASN #209242 Cloudflare London, LLC
File type PNG image data, 318 x 113, 8-bit colormap, non-interlaced\012- data
Hash 32f61a7903af7e8423b5e685848366fc
296e5101bf3a83723288a697d545847baa2c6418
180378f3ee6cf29b64a285fc353d4def77c1bb37ea383fdc2e522615b846cf8d
GET /content/images/payments/custom/1876513/9756.png?2023-03-17%2017:13:33 HTTP/1.1
Host: cmsbetconstruct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 19 Mar 2023 13:11:43 GMT
content-type: image/png
content-length: 5635
last-modified: Sat, 22 Oct 2022 17:36:07 GMT
etag: "63542a07-1603"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67e0b47b4ee-OSL
X-Firefox-Spdy: h2
cmsbetconstruct.com/content/images/payments/custom/1876513/5341.png?2023-03-17%2017:13:33
200 OK 10 kB URL HTTP/2 cmsbetconstruct.com/content/images/payments/custom/1876513/5341.png?2023-03-17%2017:13:33
IP
ASN #209242 Cloudflare London, LLC
File type GIF image data, version 89a, 318 x 115\012- data
Hash 4843956bc8c6c22485de4880c5ea19e5
97ec1a0ebec8ee1ad47201fe56f9baa8f1a32637
bced5076e617334433683fde7c345c73994a5705a6cd1afa1ff922da3cb37c7c
GET /content/images/payments/custom/1876513/5341.png?2023-03-17%2017:13:33 HTTP/1.1
Host: cmsbetconstruct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 19 Mar 2023 13:11:43 GMT
content-type: image/png
content-length: 10465
last-modified: Mon, 14 Nov 2022 13:18:40 GMT
etag: "63724030-28e1"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67e0b48b4ee-OSL
X-Firefox-Spdy: h2
cmsbetconstruct.com/content/images/payments/custom/1876513/9005.png?2023-03-17%2017:13:33
200 OK 5.6 kB URL HTTP/2 cmsbetconstruct.com/content/images/payments/custom/1876513/9005.png?2023-03-17%2017:13:33
IP
ASN #209242 Cloudflare London, LLC
File type PNG image data, 318 x 111, 8-bit/color RGBA, non-interlaced\012- data
Hash 531e1067dd501ce5e8fdd810117a727d
a381f2fa96855b86e5dc8eca32c8d5c78eb1d13e
624fd34b05b7961c1234fe1b808632a78f45cabb9037acc52cf1847a7457b9bd
GET /content/images/payments/custom/1876513/9005.png?2023-03-17%2017:13:33 HTTP/1.1
Host: cmsbetconstruct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 19 Mar 2023 13:11:43 GMT
content-type: image/png
content-length: 5591
last-modified: Tue, 13 Dec 2022 13:33:52 GMT
etag: "63987f40-15d7"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67e0b4eb4ee-OSL
X-Firefox-Spdy: h2
cmsbetconstruct.com/content/images/payments/custom/1876513/11571.png?2023-03-17%2017:13:33
200 OK 6.4 kB URL HTTP/2 cmsbetconstruct.com/content/images/payments/custom/1876513/11571.png?2023-03-17%2017:13:33
IP
ASN #209242 Cloudflare London, LLC
File type GIF image data, version 89a, 150 x 150\012- data
Hash 418ff4b244d85f77bd2cf0a5c7fd96fa
f2bee0ef1aba1f204ed123d8672c39993856af58
b1f471fc936b79915b74b4e8b90f56eaddbc010a1cc94db6f04f2800a0c79dd4
GET /content/images/payments/custom/1876513/11571.png?2023-03-17%2017:13:33 HTTP/1.1
Host: cmsbetconstruct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 19 Mar 2023 13:11:43 GMT
content-type: image/png
content-length: 6436
last-modified: Tue, 14 Feb 2023 00:29:03 GMT
etag: "63ead5cf-1924"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67e0b4fb4ee-OSL
X-Firefox-Spdy: h2
cmsbetconstruct.com/content/images/payments/custom/1876513/12097.png?2023-03-17%2017:13:33
200 OK 6.6 kB URL HTTP/2 cmsbetconstruct.com/content/images/payments/custom/1876513/12097.png?2023-03-17%2017:13:33
IP
ASN #209242 Cloudflare London, LLC
File type PNG image data, 318 x 113, 8-bit colormap, non-interlaced\012- data
Hash a80a7eab178a901ddb3af657ccdecb29
815b1350936ca0f0860353906a9513b5ae790f82
d7475a6e85edd76444d7a2f1d85eb0dc154104fa482fe43b593248992e43c527
GET /content/images/payments/custom/1876513/12097.png?2023-03-17%2017:13:33 HTTP/1.1
Host: cmsbetconstruct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 19 Mar 2023 13:11:43 GMT
content-type: image/png
content-length: 6591
last-modified: Fri, 10 Feb 2023 07:06:29 GMT
etag: "63e5ecf5-19bf"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67e1b65b4ee-OSL
X-Firefox-Spdy: h2
cmsbetconstruct.com/content/images/payments/custom/1876513/11449.png?2023-03-17%2017:13:33
200 OK 5.6 kB URL HTTP/2 cmsbetconstruct.com/content/images/payments/custom/1876513/11449.png?2023-03-17%2017:13:33
IP
ASN #209242 Cloudflare London, LLC
File type PNG image data, 318 x 113, 8-bit colormap, non-interlaced\012- data
Hash 32f61a7903af7e8423b5e685848366fc
296e5101bf3a83723288a697d545847baa2c6418
180378f3ee6cf29b64a285fc353d4def77c1bb37ea383fdc2e522615b846cf8d
GET /content/images/payments/custom/1876513/11449.png?2023-03-17%2017:13:33 HTTP/1.1
Host: cmsbetconstruct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 19 Mar 2023 13:11:43 GMT
content-type: image/png
content-length: 5635
last-modified: Tue, 08 Nov 2022 09:08:49 GMT
etag: "636a1ca1-1603"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67dfb42b4ee-OSL
X-Firefox-Spdy: h2
cmsbetconstruct.com/content/images/payments/custom/1876513/445.png?2023-03-17%2017:13:33
200 OK 14 kB URL HTTP/2 cmsbetconstruct.com/content/images/payments/custom/1876513/445.png?2023-03-17%2017:13:33
IP
ASN #209242 Cloudflare London, LLC
File type GIF image data, version 89a, 318 x 115\012- data
Hash 45169226a24bc4f4ea5b9d61265d8cce
ef99378eebd72a1230055c3ed2ddc4297c04e11b
c19d797a31db31401200f139d0665100dd2ed53b0495647ac8a2b0ff96a589a9
GET /content/images/payments/custom/1876513/445.png?2023-03-17%2017:13:33 HTTP/1.1
Host: cmsbetconstruct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 19 Mar 2023 13:11:43 GMT
content-type: image/png
content-length: 14411
last-modified: Mon, 14 Nov 2022 13:10:16 GMT
etag: "63723e38-384b"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67ddae8b4ee-OSL
X-Firefox-Spdy: h2
cmsbetconstruct.com/content/images/payments/custom/1876513/11820.png?2023-03-17%2017:13:33
200 OK 5.6 kB URL HTTP/2 cmsbetconstruct.com/content/images/payments/custom/1876513/11820.png?2023-03-17%2017:13:33
IP
ASN #209242 Cloudflare London, LLC
File type PNG image data, 318 x 113, 8-bit colormap, non-interlaced\012- data
Hash 8b357acc464df96d802e8188fef1851f
92158d86335a38a8d5662a889629a34e36197878
cfc54a1af3186adb914b67fb2fda15c176560f36c68a98458ded8ced90c2b8ed
GET /content/images/payments/custom/1876513/11820.png?2023-03-17%2017:13:33 HTTP/1.1
Host: cmsbetconstruct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 19 Mar 2023 13:11:43 GMT
content-type: image/png
content-length: 5558
last-modified: Mon, 12 Dec 2022 08:29:58 GMT
etag: "6396e686-15b6"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67e1b6ab4ee-OSL
X-Firefox-Spdy: h2
cmsbetconstruct.com/content/images/payments/custom/1876513/12554.png?2023-03-17%2017:13:33
200 OK 9.3 kB URL HTTP/2 cmsbetconstruct.com/content/images/payments/custom/1876513/12554.png?2023-03-17%2017:13:33
IP
ASN #209242 Cloudflare London, LLC
File type PNG image data, 318 x 113, 8-bit/color RGBA, non-interlaced\012- data
Hash 9eac456116105998c3849f40ea09ec67
65e250c1e8331c5bf03569ddc623ee0ad105fb90
3c98580681389c15a3a3cc1a12d82f1639480298dde32dd1f71b0a47ae80e0bd
GET /content/images/payments/custom/1876513/12554.png?2023-03-17%2017:13:33 HTTP/1.1
Host: cmsbetconstruct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 19 Mar 2023 13:11:43 GMT
content-type: image/png
content-length: 9282
last-modified: Tue, 28 Feb 2023 09:28:02 GMT
etag: "63fdc922-2442"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67e0b54b4ee-OSL
X-Firefox-Spdy: h2
cmsbetconstruct.com/content/images/payments/custom/1876513/12090.png?2023-03-17%2017:13:33
200 OK 4.7 kB URL HTTP/2 cmsbetconstruct.com/content/images/payments/custom/1876513/12090.png?2023-03-17%2017:13:33
IP
ASN #209242 Cloudflare London, LLC
File type PNG image data, 318 x 113, 8-bit colormap, non-interlaced\012- data
Hash 5a4420e29e11d106172fb24cf100de02
eb13065cc3bd4c94377e5e5336cf1cb5066ff0d4
45189b4eb78fecfe37da0b1f66537ca36f24c2cf9d77aac1d545ca67749335bb
GET /content/images/payments/custom/1876513/12090.png?2023-03-17%2017:13:33 HTTP/1.1
Host: cmsbetconstruct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 19 Mar 2023 13:11:43 GMT
content-type: image/png
content-length: 4652
last-modified: Thu, 12 Jan 2023 06:33:34 GMT
etag: "63bfa9be-122c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67e1b72b4ee-OSL
X-Firefox-Spdy: h2
cmsbetconstruct.com/content/images/payments/custom/1876513/11692.png?2023-03-17%2017:13:33
200 OK 6.4 kB URL HTTP/2 cmsbetconstruct.com/content/images/payments/custom/1876513/11692.png?2023-03-17%2017:13:33
IP
ASN #209242 Cloudflare London, LLC
File type GIF image data, version 89a, 150 x 150\012- data
Hash 418ff4b244d85f77bd2cf0a5c7fd96fa
f2bee0ef1aba1f204ed123d8672c39993856af58
b1f471fc936b79915b74b4e8b90f56eaddbc010a1cc94db6f04f2800a0c79dd4
GET /content/images/payments/custom/1876513/11692.png?2023-03-17%2017:13:33 HTTP/1.1
Host: cmsbetconstruct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 19 Mar 2023 13:11:43 GMT
content-type: image/png
content-length: 6436
last-modified: Thu, 24 Nov 2022 09:09:07 GMT
etag: "637f34b3-1924"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67e1b82b4ee-OSL
X-Firefox-Spdy: h2
cmsbetconstruct.com/content/images/payments/custom/1876513/11761.png?2023-03-17%2017:13:33
200 OK 6.8 kB URL HTTP/2 cmsbetconstruct.com/content/images/payments/custom/1876513/11761.png?2023-03-17%2017:13:33
IP
ASN #209242 Cloudflare London, LLC
File type PNG image data, 318 x 113, 8-bit colormap, non-interlaced\012- data
Hash 2a03c2f14d7d9e46953f67344c0c320e
08910abe37dd262a332b7d5ca6dbbf2b9bd0b3e4
858ae514eadd2ee0c89454811b7751b7cd69938d8c80f400fc75cc3a4297f319
GET /content/images/payments/custom/1876513/11761.png?2023-03-17%2017:13:33 HTTP/1.1
Host: cmsbetconstruct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 19 Mar 2023 13:11:43 GMT
content-type: image/png
content-length: 6844
last-modified: Fri, 27 Jan 2023 02:34:34 GMT
etag: "63d3383a-1abc"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67e1b81b4ee-OSL
X-Firefox-Spdy: h2
cmsbetconstruct.com/content/images/payments/custom/1876513/10178.png?2023-03-17%2017:13:33
200 OK 2.5 kB URL HTTP/2 cmsbetconstruct.com/content/images/payments/custom/1876513/10178.png?2023-03-17%2017:13:33
IP
ASN #209242 Cloudflare London, LLC
File type PNG image data, 318 x 113, 8-bit colormap, non-interlaced\012- data
Hash b527befee93e6dc72afb2568fe464e7e
886d13c27a5fc5de62bba7d1e0627ba4bb889f9e
a10e02cf44eed932145bee0898aaff6184b0ac7b6ac0f4ba906d9c4a671189ce
GET /content/images/payments/custom/1876513/10178.png?2023-03-17%2017:13:33 HTTP/1.1
Host: cmsbetconstruct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 19 Mar 2023 13:11:43 GMT
content-type: image/png
content-length: 2475
last-modified: Fri, 14 Oct 2022 13:31:34 GMT
etag: "634964b6-9ab"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67e1b61b4ee-OSL
X-Firefox-Spdy: h2
cmsbetconstruct.com/content/images/payments/custom/1876513/10586.png?2023-03-17%2017:13:33
200 OK 5.7 kB URL HTTP/2 cmsbetconstruct.com/content/images/payments/custom/1876513/10586.png?2023-03-17%2017:13:33
IP
ASN #209242 Cloudflare London, LLC
File type PNG image data, 318 x 113, 8-bit colormap, non-interlaced\012- data
Hash 80ba1efee9d1d7526f5540c03b4f2f34
7ee1bdc39e5027c35419f6d1642ff4ad71c9ecda
2578ab91f41df1a2d7910a32dc25f412c990bcced986eec9883c341027f69757
GET /content/images/payments/custom/1876513/10586.png?2023-03-17%2017:13:33 HTTP/1.1
Host: cmsbetconstruct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 19 Mar 2023 13:11:43 GMT
content-type: image/png
content-length: 5722
last-modified: Fri, 14 Oct 2022 13:32:52 GMT
etag: "63496504-165a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67e1b71b4ee-OSL
X-Firefox-Spdy: h2
cmsbetconstruct.com/content/images/payments/custom/1876513/11762.png?2023-03-17%2017:13:33
200 OK 4.6 kB URL HTTP/2 cmsbetconstruct.com/content/images/payments/custom/1876513/11762.png?2023-03-17%2017:13:33
IP
ASN #209242 Cloudflare London, LLC
File type PNG image data, 318 x 113, 8-bit colormap, non-interlaced\012- data
Hash 906abf9eb0df0ec0aa6f023906eefd44
d8ed1cca4a726297615dc820e0646acb6228e716
38d5eafafc37028c5edb96b0501b4391cce54104c616f5400f87267a50671d48
GET /content/images/payments/custom/1876513/11762.png?2023-03-17%2017:13:33 HTTP/1.1
Host: cmsbetconstruct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 19 Mar 2023 13:11:43 GMT
content-type: image/png
content-length: 4597
last-modified: Thu, 12 Jan 2023 06:33:19 GMT
etag: "63bfa9af-11f5"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67e1b67b4ee-OSL
X-Firefox-Spdy: h2
cmsbetconstruct.com/content/images/payments/custom/1876513/10547.png?2023-03-17%2017:13:33
200 OK 4.4 kB URL HTTP/2 cmsbetconstruct.com/content/images/payments/custom/1876513/10547.png?2023-03-17%2017:13:33
IP
ASN #209242 Cloudflare London, LLC
File type PNG image data, 318 x 113, 8-bit colormap, non-interlaced\012- data
Hash 70efdd250cd637fcf6abd7f2a573fe8f
7e6301bcc3b2bcd88962ec3b3de1092d1bd7c7ba
f843a3f234fdef868db0052429e051e2bedcb2a9bde405473225d22a1dfb28f0
GET /content/images/payments/custom/1876513/10547.png?2023-03-17%2017:13:33 HTTP/1.1
Host: cmsbetconstruct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 19 Mar 2023 13:11:43 GMT
content-type: image/png
content-length: 4434
last-modified: Fri, 14 Oct 2022 13:34:52 GMT
etag: "6349657c-1152"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67e2b8fb4ee-OSL
X-Firefox-Spdy: h2
cmsbetconstruct.com/content/images/payments/custom/1876513/10067.png?2023-03-17%2017:13:33
200 OK 5.2 kB URL HTTP/2 cmsbetconstruct.com/content/images/payments/custom/1876513/10067.png?2023-03-17%2017:13:33
IP
ASN #209242 Cloudflare London, LLC
File type PNG image data, 318 x 113, 8-bit colormap, non-interlaced\012- data
Hash 81404ff1662fb5c8ed5e080701677053
e87c9c19b379d82a982908136c70236adb604d9f
b2d498f1bbd1d45e9f40ffd250e709c704221d096258f90297d0c5fedf22dc10
GET /content/images/payments/custom/1876513/10067.png?2023-03-17%2017:13:33 HTTP/1.1
Host: cmsbetconstruct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 19 Mar 2023 13:11:43 GMT
content-type: image/png
content-length: 5198
last-modified: Fri, 14 Oct 2022 12:18:34 GMT
etag: "6349539a-144e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67e2b8ab4ee-OSL
X-Firefox-Spdy: h2
cmsbetconstruct.com/content/images/payments/custom/1876513/10574.png?2023-03-17%2017:13:33
200 OK 3.8 kB URL HTTP/2 cmsbetconstruct.com/content/images/payments/custom/1876513/10574.png?2023-03-17%2017:13:33
IP
ASN #209242 Cloudflare London, LLC
File type PNG image data, 318 x 113, 8-bit colormap, non-interlaced\012- data
Hash b983b08a03f9773e832f63192b39b9e0
a779bc93fb601bcb61b5691575fa5dc59fb23856
6c1715716d2324620c22f9c7c944117ebca144d63fb673d1b50f4120110a4ee5
GET /content/images/payments/custom/1876513/10574.png?2023-03-17%2017:13:33 HTTP/1.1
Host: cmsbetconstruct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 19 Mar 2023 13:11:43 GMT
content-type: image/png
content-length: 3838
last-modified: Fri, 14 Oct 2022 12:41:50 GMT
etag: "6349590e-efe"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67e2b8cb4ee-OSL
X-Firefox-Spdy: h2
cmsbetconstruct.com/content/images/payments/custom/1876513/899.png?2023-03-17%2017:13:33
200 OK 15 kB URL HTTP/2 cmsbetconstruct.com/content/images/payments/custom/1876513/899.png?2023-03-17%2017:13:33
IP
ASN #209242 Cloudflare London, LLC
File type GIF image data, version 89a, 318 x 113\012- data
Hash f8b1a6323841508eea1a22a43a164f4a
17845959d841e44d10d0463a246274174c655115
9f2099a9f8e7026985016d145016f1bc8658fac0e74af8f8e5349b1957eca49e
GET /content/images/payments/custom/1876513/899.png?2023-03-17%2017:13:33 HTTP/1.1
Host: cmsbetconstruct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 19 Mar 2023 13:11:43 GMT
content-type: image/png
content-length: 15397
last-modified: Mon, 14 Nov 2022 12:49:02 GMT
etag: "6372393e-3c25"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67deb10b4ee-OSL
X-Firefox-Spdy: h2
cmsbetconstruct.com/content/images/payments/custom/1876513/9006.png?2023-03-17%2017:13:33
200 OK 16 kB URL HTTP/2 cmsbetconstruct.com/content/images/payments/custom/1876513/9006.png?2023-03-17%2017:13:33
IP
ASN #209242 Cloudflare London, LLC
File type PNG image data, 195 x 179, 8-bit/color RGBA, non-interlaced\012- data
Hash 7d7c62750cc6305f77e34f6e59c47818
ef5b3d08d69b42505ccf5a0d297dcf0210f2c929
96a1dc398a8bdf14c3d4632765dc3656ad64911692795a68d2d96564201dba11
GET /content/images/payments/custom/1876513/9006.png?2023-03-17%2017:13:33 HTTP/1.1
Host: cmsbetconstruct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 19 Mar 2023 13:11:43 GMT
content-type: image/png
content-length: 15963
last-modified: Tue, 08 Nov 2022 14:22:42 GMT
etag: "636a6632-3e5b"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67e0b4bb4ee-OSL
X-Firefox-Spdy: h2
cmsbetconstruct.com/content/images/payments/custom/1876513/12086.png?2023-03-17%2017:13:33
200 OK 71 kB URL HTTP/2 cmsbetconstruct.com/content/images/payments/custom/1876513/12086.png?2023-03-17%2017:13:33
IP
ASN #209242 Cloudflare London, LLC
File type PNG image data, 856 x 291, 8-bit/color RGBA, non-interlaced\012- data
Hash 6f4942192c5cf8e7b90d41c11008c479
22e774ee60026c49f7d98b78010b45fa13f0cc9e
de781173222ea719a92c2eec2016fc02588cb6be8e61523bdd52f6f9ce4c5198
GET /content/images/payments/custom/1876513/12086.png?2023-03-17%2017:13:33 HTTP/1.1
Host: cmsbetconstruct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 19 Mar 2023 13:11:43 GMT
content-type: image/png
content-length: 70614
last-modified: Thu, 09 Feb 2023 02:27:26 GMT
etag: "63e45a0e-113d6"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67dbab4b4ee-OSL
X-Firefox-Spdy: h2
cmsbetconstruct.com/content/images/payments/custom/1876513/11956.png?2023-03-17%2017:13:33
200 OK 16 kB URL HTTP/2 cmsbetconstruct.com/content/images/payments/custom/1876513/11956.png?2023-03-17%2017:13:33
IP
ASN #209242 Cloudflare London, LLC
File type PNG image data, 195 x 179, 8-bit/color RGBA, non-interlaced\012- data
Hash 7d7c62750cc6305f77e34f6e59c47818
ef5b3d08d69b42505ccf5a0d297dcf0210f2c929
96a1dc398a8bdf14c3d4632765dc3656ad64911692795a68d2d96564201dba11
GET /content/images/payments/custom/1876513/11956.png?2023-03-17%2017:13:33 HTTP/1.1
Host: cmsbetconstruct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 19 Mar 2023 13:11:43 GMT
content-type: image/png
content-length: 15963
last-modified: Mon, 23 Jan 2023 09:39:10 GMT
etag: "63ce55be-3e5b"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67e0b52b4ee-OSL
X-Firefox-Spdy: h2
cmsbetconstruct.com/content/images/payments/custom/1876513/6139.png?2023-03-17%2017:13:33
200 OK 100 kB URL HTTP/2 cmsbetconstruct.com/content/images/payments/custom/1876513/6139.png?2023-03-17%2017:13:33
IP
ASN #209242 Cloudflare London, LLC
File type PNG image data, 4550 x 1200, 8-bit/color RGBA, non-interlaced\012- data
Hash e8efb1b8035f4aa21426c5b5d422b684
38de820d574055fb59306d3fef1a7ef6526577c0
29bce48810229684a8b7c50f2c6c817927b8f1e5f285e6f6708b3f212fc2b834
GET /content/images/payments/custom/1876513/6139.png?2023-03-17%2017:13:33 HTTP/1.1
Host: cmsbetconstruct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 19 Mar 2023 13:11:43 GMT
content-type: image/png
content-length: 99876
last-modified: Wed, 15 Feb 2023 11:10:56 GMT
etag: "63ecbdc0-18624"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67dbab7b4ee-OSL
X-Firefox-Spdy: h2
cmsbetconstruct.com/json?base_host=www.goldblue-1876513.com&ssl=1&lang=eng&json=get_popup&country=NO&exclude=author,excerpt,comments,comment_status,comment_count,tags,attachments
200 OK 314 kB URL HTTP/2 cmsbetconstruct.com/json?base_host=www.goldblue-1876513.com&ssl=1&lang=eng&json=get_popup&country=NO&exclude=author,excerpt,comments,comment_status,comment_count,tags,attachments
IP
ASN #209242 Cloudflare London, LLC
File type JSON data\012- HTML document, ASCII text, with very long lines (1023), with no line terminators
Size 314 kB (314327 bytes)
Hash b33aceb99f21403379bcffea9b57d59f
00356265a3de90a0f68183d6805bc886c3954fbf
d911b2fe8ca2f38ea391dd7eeb37cd6148d80f018c6aaad323d4ff9724097a55
GET /json?base_host=www.goldblue-1876513.com&ssl=1&lang=eng&json=get_popup&country=NO&exclude=author,excerpt,comments,comment_status,comment_count,tags,attachments HTTP/1.1
Host: cmsbetconstruct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.happistar8.net
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 19 Mar 2023 13:11:42 GMT
content-type: application/json
expires: Sun, 19 Mar 2023 13:26:42 GMT
cache-control: max-age=900
x-frame-options: SAMEORIGIN
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 1000
access-control-allow-headers: X-Requested-With, Content-Type, Origin, Authorization, Accept, Client-Security-Token, Accept-Encoding, Content-Key-Case, Access-Token, Accept-Response
access-control-allow-methods: POST, GET, PUT, PATCH, DELETE, OPTIONS
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67c0810b4ee-OSL
content-encoding: br
X-Firefox-Spdy: h2
cmsbetconstruct.com/content/images/payments/custom/1876513/10074.png?2023-03-17%2017:13:33
200 OK 16 kB URL HTTP/2 cmsbetconstruct.com/content/images/payments/custom/1876513/10074.png?2023-03-17%2017:13:33
IP
ASN #209242 Cloudflare London, LLC
File type PNG image data, 318 x 113, 8-bit/color RGBA, non-interlaced\012- data
Hash cc3b76da3895220588c299910ad969b1
c0c35efb161badd0f4ef750d764fa3ccedccb863
999379d8c09d87652147bd83565f88b8b533845621db322e8bac3f671748b294
GET /content/images/payments/custom/1876513/10074.png?2023-03-17%2017:13:33 HTTP/1.1
Host: cmsbetconstruct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 19 Mar 2023 13:11:43 GMT
content-type: image/png
content-length: 16361
last-modified: Wed, 02 Nov 2022 04:59:38 GMT
etag: "6361f93a-3fe9"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67e1b85b4ee-OSL
X-Firefox-Spdy: h2
cmsbetconstruct.com/content/images/1ea02d5e49db9e201662161568cae4e8_1876513_media.png
200 OK 339 kB URL HTTP/2 cmsbetconstruct.com/content/images/1ea02d5e49db9e201662161568cae4e8_1876513_media.png
IP
ASN #209242 Cloudflare London, LLC
File type PNG image data, 1920 x 972, 8-bit/color RGB, non-interlaced\012- data
Size 339 kB (339383 bytes)
Hash df68a58a839759548faa77040a9a96d1
41a97b57b09d66ccb7eff9a10f45542318de541b
934a425432637ee65d4e8c6c472ca244a77af91d1c8580118bd67d1880bf6b85
GET /content/images/1ea02d5e49db9e201662161568cae4e8_1876513_media.png HTTP/1.1
Host: cmsbetconstruct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 19 Mar 2023 13:11:43 GMT
content-type: image/png
content-length: 339383
last-modified: Wed, 11 Aug 2021 04:44:39 GMT
etag: "611355b7-52db7"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7aa5f6809ee3b4ee-OSL
X-Firefox-Spdy: h2
cmsbetconstruct.com/json?base_host=www.goldblue-1876513.com&ssl=1&lang=eng&json=widgets/get_sidebar&sidebar_id=homepage-additional-banner-eng&country=NO
200 OK 465 kB URL HTTP/2 cmsbetconstruct.com/json?base_host=www.goldblue-1876513.com&ssl=1&lang=eng&json=widgets/get_sidebar&sidebar_id=homepage-additional-banner-eng&country=NO
IP
ASN #209242 Cloudflare London, LLC
File type JSON data\012- , ASCII text, with no line terminators
Size 465 kB (464811 bytes)
Hash 8b5102cea52a6a88a12d47d986ccb15e
7c50437e113844bc3c6299336fb435c252fe467c
201d683774091bf1b81d5b7b037078a61e9322e9f6e6ec425f4e2d5038adbf16
GET /json?base_host=www.goldblue-1876513.com&ssl=1&lang=eng&json=widgets/get_sidebar&sidebar_id=homepage-additional-banner-eng&country=NO HTTP/1.1
Host: cmsbetconstruct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.happistar8.net
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 19 Mar 2023 13:11:43 GMT
content-type: application/json
expires: Sun, 19 Mar 2023 13:26:43 GMT
cache-control: max-age=900
x-frame-options: SAMEORIGIN
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 1000
access-control-allow-headers: X-Requested-With, Content-Type, Origin, Authorization, Accept, Client-Security-Token, Accept-Encoding, Content-Key-Case, Access-Token, Accept-Response
access-control-allow-methods: POST, GET, PUT, PATCH, DELETE, OPTIONS
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f6806e9eb4ee-OSL
content-encoding: br
X-Firefox-Spdy: h2
cmsbetconstruct.com/content/images/376214bc92c95f7c1dd792f44290b6a4_1876513_sidebar.webp
200 OK 97 kB URL HTTP/2 cmsbetconstruct.com/content/images/376214bc92c95f7c1dd792f44290b6a4_1876513_sidebar.webp
IP
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, Web/P image\012- data
Hash 14628ee938d939a0e1c342f6a5e71e5e
75704fb5129400f6ac4a8e0084e66ea9c4546309
b1aab3d0edf3f86c7b7db7478012cf057cd94640866ec3770d42602a420fd2e6
GET /content/images/376214bc92c95f7c1dd792f44290b6a4_1876513_sidebar.webp HTTP/1.1
Host: cmsbetconstruct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 19 Mar 2023 13:11:43 GMT
content-type: image/webp
content-length: 96982
last-modified: Wed, 15 Mar 2023 07:59:56 GMT
etag: "64117afc-17ad6"
expires: Sun, 19 Mar 2023 13:26:43 GMT
cache-control: max-age=900
x-frame-options: SAMEORIGIN
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 1000
access-control-allow-headers: X-Requested-With, Content-Type, Origin, Authorization, Accept, Client-Security-Token, Accept-Encoding, Content-Key-Case, Access-Token, Accept-Response
access-control-allow-methods: POST, GET, PUT, PATCH, DELETE, OPTIONS
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7aa5f6826932b4ee-OSL
X-Firefox-Spdy: h2
cmsbetconstruct.com/json?base_host=www.goldblue-1876513.com&ssl=1&lang=eng&json=widgets/get_sidebar&sidebar_id=bannerSlugs.products-banners-2&country=NO
200 OK 215 kB URL HTTP/2 cmsbetconstruct.com/json?base_host=www.goldblue-1876513.com&ssl=1&lang=eng&json=widgets/get_sidebar&sidebar_id=bannerSlugs.products-banners-2&country=NO
IP
ASN #209242 Cloudflare London, LLC
File type JSON data\012- , ASCII text, with no line terminators
Size 215 kB (214827 bytes)
Hash 3f3e9b193e2e15c1ba3031dbd8e58ff3
dd47d24e150f34791e78719d49027399be339779
3205ced0a9106c93d5fe6321dc28e27fbb7c73227b1c8899c8eaaf08fd7390f8
GET /json?base_host=www.goldblue-1876513.com&ssl=1&lang=eng&json=widgets/get_sidebar&sidebar_id=bannerSlugs.products-banners-2&country=NO HTTP/1.1
Host: cmsbetconstruct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.happistar8.net
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 19 Mar 2023 13:11:43 GMT
content-type: application/json
expires: Sun, 19 Mar 2023 13:26:43 GMT
cache-control: max-age=900
x-frame-options: SAMEORIGIN
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 1000
access-control-allow-headers: X-Requested-With, Content-Type, Origin, Authorization, Accept, Client-Security-Token, Accept-Encoding, Content-Key-Case, Access-Token, Accept-Response
access-control-allow-methods: POST, GET, PUT, PATCH, DELETE, OPTIONS
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f6806e9ab4ee-OSL
content-encoding: br
X-Firefox-Spdy: h2
cmsbetconstruct.com/json?base_host=www.goldblue-1876513.com&ssl=1&lang=eng&json=widgets/get_sidebar&sidebar_id=homepage-banners-bottom-eng&country=NO
200 OK 93 kB URL HTTP/2 cmsbetconstruct.com/json?base_host=www.goldblue-1876513.com&ssl=1&lang=eng&json=widgets/get_sidebar&sidebar_id=homepage-banners-bottom-eng&country=NO
IP
ASN #209242 Cloudflare London, LLC
File type JSON data\012- , ASCII text, with no line terminators
Hash 1e870ddf0449a219cc82bd982a6d6b29
ca098c9264ed7c2281fd33b679837fa62f53b4e9
f94cd6481cd7bb3a73bc05f28f0fd464014c716c0163dbf8357206869083f16d
GET /json?base_host=www.goldblue-1876513.com&ssl=1&lang=eng&json=widgets/get_sidebar&sidebar_id=homepage-banners-bottom-eng&country=NO HTTP/1.1
Host: cmsbetconstruct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.happistar8.net
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 19 Mar 2023 13:11:43 GMT
content-type: application/json
expires: Sun, 19 Mar 2023 13:26:43 GMT
cache-control: max-age=900
x-frame-options: SAMEORIGIN
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 1000
access-control-allow-headers: X-Requested-With, Content-Type, Origin, Authorization, Accept, Client-Security-Token, Accept-Encoding, Content-Key-Case, Access-Token, Accept-Response
access-control-allow-methods: POST, GET, PUT, PATCH, DELETE, OPTIONS
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f6806ea1b4ee-OSL
content-encoding: br
X-Firefox-Spdy: h2
cmsbetconstruct.com/json?base_host=www.goldblue-1876513.com&ssl=1&lang=eng&json=widgets/get_sidebar&sidebar_id=homepage-selected-game-eng&country=NO
200 OK 161 kB URL HTTP/2 cmsbetconstruct.com/json?base_host=www.goldblue-1876513.com&ssl=1&lang=eng&json=widgets/get_sidebar&sidebar_id=homepage-selected-game-eng&country=NO
IP
ASN #209242 Cloudflare London, LLC
File type JSON data\012- , ASCII text, with very long lines (8356), with no line terminators
Size 161 kB (161335 bytes)
Hash 4ae5194500f6f2ddf83c807b1acb3ddc
4a4a50896731dee2efb331a997c6d42154aeaf73
5ebd902db32542dee610e73fc735647fea6008e6395bf12fed6d3dcf5de3068d
GET /json?base_host=www.goldblue-1876513.com&ssl=1&lang=eng&json=widgets/get_sidebar&sidebar_id=homepage-selected-game-eng&country=NO HTTP/1.1
Host: cmsbetconstruct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.happistar8.net
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 19 Mar 2023 13:11:43 GMT
content-type: application/json
expires: Sun, 19 Mar 2023 13:26:43 GMT
cache-control: max-age=900
x-frame-options: SAMEORIGIN
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 1000
access-control-allow-headers: X-Requested-With, Content-Type, Origin, Authorization, Accept, Client-Security-Token, Accept-Encoding, Content-Key-Case, Access-Token, Accept-Response
access-control-allow-methods: POST, GET, PUT, PATCH, DELETE, OPTIONS
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f6807eacb4ee-OSL
content-encoding: br
X-Firefox-Spdy: h2
cmsbetconstruct.com/json?base_host=www.goldblue-1876513.com&ssl=1&lang=eng&json=featured-games&country=NO
200 OK 97 kB URL HTTP/2 cmsbetconstruct.com/json?base_host=www.goldblue-1876513.com&ssl=1&lang=eng&json=featured-games&country=NO
IP
ASN #209242 Cloudflare London, LLC
File type JSON data\012- , ASCII text, with no line terminators
Hash e79d9d2f0dca44137121b63af9dd6815
e264dcff31b3c9dfa840f75a685e6b0a8e1d8af1
48dc02666457a29b1f8d07fbe5d795ab2f823270b17a13394c433b898038b9e4
GET /json?base_host=www.goldblue-1876513.com&ssl=1&lang=eng&json=featured-games&country=NO HTTP/1.1
Host: cmsbetconstruct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.happistar8.net
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 19 Mar 2023 13:11:43 GMT
content-type: application/json
expires: Sun, 19 Mar 2023 13:26:43 GMT
cache-control: max-age=900
x-frame-options: SAMEORIGIN
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 1000
access-control-allow-headers: X-Requested-With, Content-Type, Origin, Authorization, Accept, Client-Security-Token, Accept-Encoding, Content-Key-Case, Access-Token, Accept-Response
access-control-allow-methods: POST, GET, PUT, PATCH, DELETE, OPTIONS
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f6807eafb4ee-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.cmsbetconstruct.com/content/images/casino/icon3/effe0951ca8c904776057350f2ca418c_casinoGameIcon3.jpg
200 OK 33 kB URL HTTP/2 www.cmsbetconstruct.com/content/images/casino/icon3/effe0951ca8c904776057350f2ca418c_casinoGameIcon3.jpg
IP
ASN #209242 Cloudflare London, LLC
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 440x310, components 3\012- data
Hash 52dcfb66a7c13f9cef288fdbe67083d9
7bebf86575c435181368269889df8ca2221c7244
431b31aec8b6ffd5c2e90a4e37136645257adfd3014012d44bb6c34827e24c43
GET /content/images/casino/icon3/effe0951ca8c904776057350f2ca418c_casinoGameIcon3.jpg HTTP/1.1
Host: www.cmsbetconstruct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 19 Mar 2023 13:11:43 GMT
content-type: image/jpeg
content-length: 32699
cache-control: max-age=315360000, public
cf-bgj: imgq:100,h2pri
cf-polished: origSize=33122, status=webp_bigger
etag: "636b79c1-8162"
expires: Thu, 31 Dec 2037 23:55:55 GMT
last-modified: Wed, 09 Nov 2022 09:58:25 GMT
cf-cache-status: HIT
age: 8146065
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7aa5f6837b12b4ee-OSL
X-Firefox-Spdy: h2
cmsbetconstruct.com/content/images/payments/default/12718.png?2023-03-17%2017:13:33
404 Not Found 108 kB URL HTTP/2 cmsbetconstruct.com/content/images/payments/default/12718.png?2023-03-17%2017:13:33
IP
ASN #209242 Cloudflare London, LLC
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Size 108 kB (108147 bytes)
Hash 16fd27ebcb40e6a3dd49ee3352604750
537fb7d71470627514dd14602951449ee2c5754f
6143c8ad0c81ddff7f008e5a62fc4c721aba856998a5405a2f6b14a488739ede
GET /content/images/payments/default/12718.png?2023-03-17%2017:13:33 HTTP/1.1
Host: cmsbetconstruct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
date: Sun, 19 Mar 2023 13:11:43 GMT
content-type: text/html
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67e0b5db4ee-OSL
content-encoding: br
X-Firefox-Spdy: h2
cmsbetconstruct.com/json?base_host=www.goldblue-1876513.com&ssl=1&lang=eng&json=widgets/get_sidebar&sidebar_id=countdown-banner-eng&country=NO
200 OK 128 kB URL HTTP/2 cmsbetconstruct.com/json?base_host=www.goldblue-1876513.com&ssl=1&lang=eng&json=widgets/get_sidebar&sidebar_id=countdown-banner-eng&country=NO
IP
ASN #209242 Cloudflare London, LLC
File type JSON data\012- , ASCII text, with no line terminators
Size 128 kB (127941 bytes)
Hash eae53e62b27e586a254c640006908f67
32bf33cd0a2e76372cfed7ae789d740e51cb6e0a
10d3a48e25a4c00f60a114033d5c7bf35d8ae73298498f92581cb6dfbed005c0
GET /json?base_host=www.goldblue-1876513.com&ssl=1&lang=eng&json=widgets/get_sidebar&sidebar_id=countdown-banner-eng&country=NO HTTP/1.1
Host: cmsbetconstruct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.happistar8.net
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 19 Mar 2023 13:11:43 GMT
content-type: application/json
expires: Sun, 19 Mar 2023 13:26:43 GMT
cache-control: max-age=900
x-frame-options: SAMEORIGIN
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 1000
access-control-allow-headers: X-Requested-With, Content-Type, Origin, Authorization, Accept, Client-Security-Token, Accept-Encoding, Content-Key-Case, Access-Token, Accept-Response
access-control-allow-methods: POST, GET, PUT, PATCH, DELETE, OPTIONS
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f6807ea3b4ee-OSL
content-encoding: br
X-Firefox-Spdy: h2
cmsbetconstruct.com/content/images/payments/default/12643.png?2023-03-17%2017:13:33
404 Not Found 135 kB URL HTTP/2 cmsbetconstruct.com/content/images/payments/default/12643.png?2023-03-17%2017:13:33
IP
ASN #209242 Cloudflare London, LLC
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Size 135 kB (134806 bytes)
Hash f4fdc311742bbad16915195170093acd
0080c21f8b5372b99593b7b19e5b1f0e34c4bed2
6026e6494bab1d433b9070c4fd6c27a05c335aeaf6f9fb1ac0c7f5d343917863
GET /content/images/payments/default/12643.png?2023-03-17%2017:13:33 HTTP/1.1
Host: cmsbetconstruct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
date: Sun, 19 Mar 2023 13:11:43 GMT
content-type: text/html
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67e0b5bb4ee-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.cmsbetconstruct.com/content/images/casino/icon3/88a439def369e19ed6b1a4234a71c8ad_casinoGameIcon3.jpg
200 OK 32 kB URL HTTP/2 www.cmsbetconstruct.com/content/images/casino/icon3/88a439def369e19ed6b1a4234a71c8ad_casinoGameIcon3.jpg
IP
ASN #209242 Cloudflare London, LLC
File type JPEG image data, progressive, precision 8, 440x310, components 3\012- data
Hash 39a5f5a6ccae0cefd34f9bf7cd99fe84
4f1d21904f63157510ba91db43741b33240b62bf
fec10f9ea43a8c0be1e686cc689721c90e3921c03c5471c08e19ca47e225a877
GET /content/images/casino/icon3/88a439def369e19ed6b1a4234a71c8ad_casinoGameIcon3.jpg HTTP/1.1
Host: www.cmsbetconstruct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 19 Mar 2023 13:11:43 GMT
content-type: image/jpeg
content-length: 31747
last-modified: Tue, 24 Jan 2023 12:19:10 GMT
etag: "63cfccbe-7c03"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7aa5f6835adbb4ee-OSL
X-Firefox-Spdy: h2
cmsbetconstruct.com/content/images/payments/default/12644.png?2023-03-17%2017:13:33
404 Not Found 31 kB URL HTTP/2 cmsbetconstruct.com/content/images/payments/default/12644.png?2023-03-17%2017:13:33
IP
ASN #209242 Cloudflare London, LLC
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 7e67d449ef256fc920972b4704e1f3a2
9cef5a1955ccb06b292f1d5145be68c75ae8a8c6
6f179f2b2d21858dc0413597e42546e43eb037727aec264c43878e3f32d1432a
GET /content/images/payments/default/12644.png?2023-03-17%2017:13:33 HTTP/1.1
Host: cmsbetconstruct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
date: Sun, 19 Mar 2023 13:11:43 GMT
content-type: text/html
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67e0b57b4ee-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.cmsbetconstruct.com/content/images/casino/icon3/84685aee25b43fa6608de19ecd80ecc0_casinoGameIcon3.jpg
200 OK 25 kB URL HTTP/2 www.cmsbetconstruct.com/content/images/casino/icon3/84685aee25b43fa6608de19ecd80ecc0_casinoGameIcon3.jpg
IP
ASN #209242 Cloudflare London, LLC
File type JPEG image data, progressive, precision 8, 440x310, components 3\012- data
Hash c33ac461cd9b495e00bb36e16657fbb2
d8c48650ee199188db228f974b9e7314a01ca445
67a699499349809e42cdc4fb2bd73be041a494d961e7cf16fa29bc561d4ee4a1
GET /content/images/casino/icon3/84685aee25b43fa6608de19ecd80ecc0_casinoGameIcon3.jpg HTTP/1.1
Host: www.cmsbetconstruct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 19 Mar 2023 13:11:43 GMT
content-type: image/jpeg
content-length: 24635
last-modified: Fri, 05 Aug 2022 08:56:01 GMT
etag: "62ecdb21-603b"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7aa5f6836af1b4ee-OSL
X-Firefox-Spdy: h2
www.cmsbetconstruct.com/content/images/casino/icon3/496c1401aa43f90efb949df4d857647f_casinoGameIcon3.gif
200 OK 676 kB URL HTTP/2 www.cmsbetconstruct.com/content/images/casino/icon3/496c1401aa43f90efb949df4d857647f_casinoGameIcon3.gif
IP
ASN #209242 Cloudflare London, LLC
File type GIF image data, version 89a, 440 x 310\012- data
Size 676 kB (675798 bytes)
Hash 5b849d6e17a68775d2d283f7f42a3fec
f626ae6b35d0a89878670a61fb190201af9aa407
694917eca181402feb9b0757e599266b737fb9b7a4209f2570cb4be15efbd840
GET /content/images/casino/icon3/496c1401aa43f90efb949df4d857647f_casinoGameIcon3.gif HTTP/1.1
Host: www.cmsbetconstruct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 19 Mar 2023 13:11:43 GMT
content-type: image/gif
content-length: 675798
last-modified: Thu, 04 Nov 2021 07:15:01 GMT
etag: "61838875-a4fd6"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7aa5f682a999b4ee-OSL
X-Firefox-Spdy: h2
www.cmsbetconstruct.com/content/images/casino/icon3/b60cf5d19d4064f53b94659a9668eea0_casinoGameIcon3.jpg
200 OK 32 kB URL HTTP/2 www.cmsbetconstruct.com/content/images/casino/icon3/b60cf5d19d4064f53b94659a9668eea0_casinoGameIcon3.jpg
IP
ASN #209242 Cloudflare London, LLC
File type JPEG image data, progressive, precision 8, 440x310, components 3\012- data
Hash 73dcc82d564553f9ce05a5e9045d16b6
1a50f9df3a92e2a9e11dac4aa2912017b5e1c07a
a4663787ba719cb1f3310fa2e10e21679bc90b702090985bbe6254cbe3a29fc8
GET /content/images/casino/icon3/b60cf5d19d4064f53b94659a9668eea0_casinoGameIcon3.jpg HTTP/1.1
Host: www.cmsbetconstruct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 19 Mar 2023 13:11:44 GMT
content-type: image/jpeg
content-length: 31924
last-modified: Fri, 28 Oct 2022 11:26:29 GMT
etag: "635bbc65-7cb4"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7aa5f6836aeeb4ee-OSL
X-Firefox-Spdy: h2
www.cmsbetconstruct.com/content/images/casino/icon3/bced6e887638977d75da101904d75bea_casinoGameIcon3.png
200 OK 303 kB URL HTTP/2 www.cmsbetconstruct.com/content/images/casino/icon3/bced6e887638977d75da101904d75bea_casinoGameIcon3.png
IP
ASN #209242 Cloudflare London, LLC
File type PNG image data, 440 x 310, 8-bit/color RGBA, non-interlaced\012- data
Size 303 kB (303297 bytes)
Hash c296245816d8024f3ea3360d212b1330
fb6dd93ddd771ec94bb8e767dc9803e135790ea5
5adcf80910f468046cdf3f6fb5bb5fc4bb435a52e25412b84c78ddc8c998c80e
GET /content/images/casino/icon3/bced6e887638977d75da101904d75bea_casinoGameIcon3.png HTTP/1.1
Host: www.cmsbetconstruct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 19 Mar 2023 13:11:43 GMT
content-type: image/png
content-length: 303297
last-modified: Thu, 27 Aug 2020 20:07:37 GMT
etag: "5f481289-4a0c1"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7aa5f682a98ab4ee-OSL
X-Firefox-Spdy: h2
www.cmsbetconstruct.com/content/images/casino/icon3/e3bc4efa9bc5d0be5a29474c74bbe3e4_casinoGameIcon3.gif
200 OK 818 kB URL HTTP/2 www.cmsbetconstruct.com/content/images/casino/icon3/e3bc4efa9bc5d0be5a29474c74bbe3e4_casinoGameIcon3.gif
IP
ASN #209242 Cloudflare London, LLC
File type GIF image data, version 89a, 440 x 310\012- data
Size 818 kB (817789 bytes)
Hash e4eac42f714269bf352d0430c1c458bb
7c78b848dac7270b0ccf5bac5c8092967995ccbd
bceca66debeca45ddab9e8c58ed327d398b08d5291d4aec229c76acba5bccaa8
GET /content/images/casino/icon3/e3bc4efa9bc5d0be5a29474c74bbe3e4_casinoGameIcon3.gif HTTP/1.1
Host: www.cmsbetconstruct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 19 Mar 2023 13:11:43 GMT
content-type: image/gif
content-length: 817789
last-modified: Mon, 13 Sep 2021 09:59:42 GMT
etag: "613f210e-c7a7d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7aa5f682a987b4ee-OSL
X-Firefox-Spdy: h2
www.cmsbetconstruct.com/content/images/casino/icon3/980c47b3cade3c554848c1ac01036a7c_casinoGameIcon3.png
200 OK 184 kB URL HTTP/2 www.cmsbetconstruct.com/content/images/casino/icon3/980c47b3cade3c554848c1ac01036a7c_casinoGameIcon3.png
IP
ASN #209242 Cloudflare London, LLC
File type PNG image data, 440 x 310, 8-bit/color RGBA, non-interlaced\012- data
Size 184 kB (183903 bytes)
Hash 2d3f43f5f52c7192d38fc7104757a5d1
731914d50e312e5bdaedda450cb5471a72e42245
cc6751e5d797b1563b12f1151f9f3a42c6e6d80da3f1ebba68353c4b13a3e089
GET /content/images/casino/icon3/980c47b3cade3c554848c1ac01036a7c_casinoGameIcon3.png HTTP/1.1
Host: www.cmsbetconstruct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 19 Mar 2023 13:11:44 GMT
content-type: image/png
content-length: 183903
last-modified: Wed, 24 Feb 2021 07:14:37 GMT
etag: "6035fcdd-2ce5f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7aa5f6833a9ab4ee-OSL
X-Firefox-Spdy: h2
www.cmsbetconstruct.com/content/images/casino/icon3/85bb441d69e8be1ec91d943f2ec5bea3_casinoGameIcon3.gif
200 OK 829 kB URL HTTP/2 www.cmsbetconstruct.com/content/images/casino/icon3/85bb441d69e8be1ec91d943f2ec5bea3_casinoGameIcon3.gif
IP
ASN #209242 Cloudflare London, LLC
File type GIF image data, version 89a, 440 x 310\012- data
Size 829 kB (828877 bytes)
Hash 18e8843e0afb62d158778f30f9ac45ab
65b73177bd847526b9276f1c60a65c7d45df6512
cf2bfa02fbb25a58436b36ad520255383137ad09e6d5c0ef4069d594bfc0d10e
GET /content/images/casino/icon3/85bb441d69e8be1ec91d943f2ec5bea3_casinoGameIcon3.gif HTTP/1.1
Host: www.cmsbetconstruct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 19 Mar 2023 13:11:43 GMT
content-type: image/gif
content-length: 828877
last-modified: Mon, 04 Jul 2022 06:37:29 GMT
etag: "62c28aa9-ca5cd"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7aa5f682a991b4ee-OSL
X-Firefox-Spdy: h2
cmsbetconstruct.com/json?base_host=www.goldblue-1876513.com&ssl=1&lang=eng&json=widgets/get_sidebar&sidebar_id=homepage-banners-right-eng&country=NO
200 OK 232 kB URL HTTP/2 cmsbetconstruct.com/json?base_host=www.goldblue-1876513.com&ssl=1&lang=eng&json=widgets/get_sidebar&sidebar_id=homepage-banners-right-eng&country=NO
IP
ASN #209242 Cloudflare London, LLC
File type JSON data\012- , ASCII text, with very long lines (1137), with no line terminators
Size 232 kB (232027 bytes)
Hash 90c8e9e6c7a6e444aea31eda47f6c77b
1e34b9d1d9405297cf5890841bfc2ab254accec6
57a2f8b5a4edf972124df66ed529d380c899a726fdbc47d0f488c37f38b9ebe0
GET /json?base_host=www.goldblue-1876513.com&ssl=1&lang=eng&json=widgets/get_sidebar&sidebar_id=homepage-banners-right-eng&country=NO HTTP/1.1
Host: cmsbetconstruct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.happistar8.net
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 19 Mar 2023 13:11:43 GMT
content-type: application/json
expires: Sun, 19 Mar 2023 13:26:43 GMT
cache-control: max-age=900
x-frame-options: SAMEORIGIN
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 1000
access-control-allow-headers: X-Requested-With, Content-Type, Origin, Authorization, Accept, Client-Security-Token, Accept-Encoding, Content-Key-Case, Access-Token, Accept-Response
access-control-allow-methods: POST, GET, PUT, PATCH, DELETE, OPTIONS
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f6806e98b4ee-OSL
content-encoding: br
X-Firefox-Spdy: h2
cmsbetconstruct.com/json?base_host=www.goldblue-1876513.com&ssl=1&lang=eng&json=widgets/get_sidebar&sidebar_id=header-small-banner-eng&country=NO
200 OK 221 kB URL HTTP/2 cmsbetconstruct.com/json?base_host=www.goldblue-1876513.com&ssl=1&lang=eng&json=widgets/get_sidebar&sidebar_id=header-small-banner-eng&country=NO
IP
ASN #209242 Cloudflare London, LLC
File type JSON data\012- , ASCII text, with no line terminators
Size 221 kB (220713 bytes)
Hash 10241a0b29d31207a0c8655ca084de53
03d4c20c4303aa52aad680bf5a43b2788f86a099
1f37bf9a5e76958637ff01ca936adc44511005c9a0d5764d5c149550cdd0e821
GET /json?base_host=www.goldblue-1876513.com&ssl=1&lang=eng&json=widgets/get_sidebar&sidebar_id=header-small-banner-eng&country=NO HTTP/1.1
Host: cmsbetconstruct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.happistar8.net
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 19 Mar 2023 13:11:43 GMT
content-type: application/json
expires: Sun, 19 Mar 2023 13:26:43 GMT
cache-control: max-age=900
x-frame-options: SAMEORIGIN
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 1000
access-control-allow-headers: X-Requested-With, Content-Type, Origin, Authorization, Accept, Client-Security-Token, Accept-Encoding, Content-Key-Case, Access-Token, Accept-Response
access-control-allow-methods: POST, GET, PUT, PATCH, DELETE, OPTIONS
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f6807eadb4ee-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.cmsbetconstruct.com/content/images/casino/icon3/5862ad95cb3499606cc0661e058ceaaf_casinoGameIcon3.png
200 OK 248 kB URL HTTP/2 www.cmsbetconstruct.com/content/images/casino/icon3/5862ad95cb3499606cc0661e058ceaaf_casinoGameIcon3.png
IP
ASN #209242 Cloudflare London, LLC
File type PNG image data, 440 x 310, 8-bit/color RGBA, non-interlaced\012- data
Size 248 kB (247751 bytes)
Hash 843e1c885dc548afbce3e9ca574ef353
884873465a473e3e5d184fa336f12648d8ea3087
78ab3c041ebd056551f0f94441c270ce2c0fa60ea004d205670f3f32d314cffd
GET /content/images/casino/icon3/5862ad95cb3499606cc0661e058ceaaf_casinoGameIcon3.png HTTP/1.1
Host: www.cmsbetconstruct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 19 Mar 2023 13:11:44 GMT
content-type: image/png
content-length: 247751
last-modified: Wed, 24 Feb 2021 07:28:19 GMT
etag: "60360013-3c7c7"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7aa5f6836aebb4ee-OSL
X-Firefox-Spdy: h2
cmsbetconstruct.com/json?base_host=www.goldblue-1876513.com&ssl=1&lang=eng&json=get_page&slug=help-root-eng&children=1&country=NO&exclude=author,excerpt,comments,comment_status,comment_count,tags,attachments
200 OK 336 kB URL HTTP/2 cmsbetconstruct.com/json?base_host=www.goldblue-1876513.com&ssl=1&lang=eng&json=get_page&slug=help-root-eng&children=1&country=NO&exclude=author,excerpt,comments,comment_status,comment_count,tags,attachments
IP
ASN #209242 Cloudflare London, LLC
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Size 336 kB (335807 bytes)
Hash 3430bd619457eae5f526957a252b6254
0d77a2dcbe1f0ccbdbe18c7d7640717be1d0724c
e440db4230804a4f0cd910782694102fcd9747bf156e7ef783927154223dc630
GET /json?base_host=www.goldblue-1876513.com&ssl=1&lang=eng&json=get_page&slug=help-root-eng&children=1&country=NO&exclude=author,excerpt,comments,comment_status,comment_count,tags,attachments HTTP/1.1
Host: cmsbetconstruct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.happistar8.net
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 19 Mar 2023 13:11:42 GMT
content-type: application/json
expires: Sun, 19 Mar 2023 13:26:42 GMT
cache-control: max-age=900
x-frame-options: SAMEORIGIN
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 1000
access-control-allow-headers: X-Requested-With, Content-Type, Origin, Authorization, Accept, Client-Security-Token, Accept-Encoding, Content-Key-Case, Access-Token, Accept-Response
access-control-allow-methods: POST, GET, PUT, PATCH, DELETE, OPTIONS
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67c0814b4ee-OSL
content-encoding: br
X-Firefox-Spdy: h2
wchat.freshchat.com/app/services/app/webchat/519b4315-2f72-4655-a0dd-8ee6f3b800ed/config?domain=aHR0cHM6Ly93d3cuaGFwcGlzdGFyOC5uZXQ=
200 OK 1.3 kB URL HTTP/1.1 wchat.freshchat.com/app/services/app/webchat/519b4315-2f72-4655-a0dd-8ee6f3b800ed/config?domain=aHR0cHM6Ly93d3cuaGFwcGlzdGFyOC5uZXQ=
IP
File type JSON data\012- , ASCII text, with very long lines (2891), with no line terminators
Hash 0970f88b8463005bd562db57273a2321
ab31c19151bbfed0a55fad9e51c1aea1fc9ddfbd
863aecafe5638568af3cf4a82a1c2784968579ff9eda7f52645188cb81f4321e
GET /app/services/app/webchat/519b4315-2f72-4655-a0dd-8ee6f3b800ed/config?domain=aHR0cHM6Ly93d3cuaGFwcGlzdGFyOC5uZXQ= HTTP/1.1
Host: wchat.freshchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://wchat.freshchat.com/widget/config_iframe.html?host=https://wchat.freshchat.com&token=519b4315-2f72-4655-a0dd-8ee6f3b800ed&origin=https://www.happistar8.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 19 Mar 2023 13:11:44 GMT
Content-Type: application/json;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
server: fwe
access-control-allow-credentials: true
cache-control: no-store
content-security-policy: style-src 'unsafe-inline' *; font-src 'self' * data:; img-src 'self' * data:; connect-src 'self' *; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.freshchat.com https://*.freshworksapi.com; child-src 'self' * blob:; media-src 'self' https://*.freshchat.com; manifest-src 'self' https://*.freshchat.com; default-src 'none';
strict-transport-security: max-age=31536000; includeSubDomains
x-xss-protection: 1; mode=block
x-request-id: b31392e0-ca26-4a4e-9df1-10b4dcac4cf8
content-encoding: gzip
vary: accept-encoding
x-server: 5323
x-envoy-upstream-service-time: 17
x-trace-id: 00-4a94e08a3feeeab6e25a97bfc0d42201-154d3b961a1faf56-00
nel: { "report_to": "nel-endpoint-freshchat", "max_age": 2592000, "include_subdomains": true}
report-to: { "group": "nel-endpoint-freshchat", "max_age": 2592000, "include_subdomains": true, "endpoints": [{"url": "https://edge-admin.us-east-1.freshedge.net/nelreports/freshchat"}]}
x-fw-ratelimiting-managed: true
x-ratelimit-total: 3000
x-ratelimit-remaining: 2999
x-ratelimit-used-currentrequest: 1
x-ratelimit-limit: 3000
eu-swarm-ws-re.deimosphobos.net/
200 OK 0 B URL HTTP/2 eu-swarm-ws-re.deimosphobos.net/
IP
ASN #209242 Cloudflare London, LLC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS / HTTP/1.1
Host: eu-swarm-ws-re.deimosphobos.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: swarm-session
Referer: https://www.happistar8.net/
Origin: https://www.happistar8.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 19 Mar 2023 13:11:44 GMT
content-length: 0
access-control-allow-headers: accept, content-type, swarm-session
access-control-allow-methods: POST, OPTIONS
access-control-allow-origin: *
access-control-max-age: 3600
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f6853d1fb4f1-OSL
X-Firefox-Spdy: h2
wchat.freshchat.com/widget/?token=519b4315-2f72-4655-a0dd-8ee6f3b800ed&referrer=aHR0cHM6Ly93d3cuaGFwcGlzdGFyOC5uZXQ=&eagerLoad=true
200 OK 1.6 kB URL HTTP/1.1 wchat.freshchat.com/widget/?token=519b4315-2f72-4655-a0dd-8ee6f3b800ed&referrer=aHR0cHM6Ly93d3cuaGFwcGlzdGFyOC5uZXQ=&eagerLoad=true
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2773)
Hash 8c6d6b3471ed729a85e990eefb0e86f6
a9ae6019739b4a92028738173c95034a3e905824
17e4aa97999d321aa84dc6f1608a756ea19b72bf357a4a6df084b0f5d34ffae3
GET /widget/?token=519b4315-2f72-4655-a0dd-8ee6f3b800ed&referrer=aHR0cHM6Ly93d3cuaGFwcGlzdGFyOC5uZXQ=&eagerLoad=true HTTP/1.1
Host: wchat.freshchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 19 Mar 2023 13:11:44 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
server: fwe
last-modified: Mon, 13 Mar 2023 12:19:13 GMT
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: no-cache, no-store, must-revalidate, pre-check=0, post-check=0
served-by: 2601
x-server: 2601
content-security-policy: style-src 'unsafe-inline' *; font-src 'self' * data:; img-src 'self' * data:; connect-src 'self' *; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.freshchat.com https://*.freshworksapi.com; child-src 'self' * blob:; media-src 'self' https://*.freshchat.com; manifest-src 'self' https://*.freshchat.com; default-src 'none';
content-encoding: gzip
x-envoy-upstream-service-time: 0
x-trace-id: 00-d30b5f878aa7002f8da0ac1425c32ce1-8b4162ca447a0621-00
nel: { "report_to": "nel-endpoint-freshchat", "max_age": 2592000, "include_subdomains": true}
report-to: { "group": "nel-endpoint-freshchat", "max_age": 2592000, "include_subdomains": true, "endpoints": [{"url": "https://edge-admin.us-east-1.freshedge.net/nelreports/freshchat"}]}
x-fw-ratelimiting-managed: false
x-request-id: 235fb67a-d070-4994-9a68-67bca2fbaf7a
4c993dfc-aa0e-4755-a7e3-22a3adb99bab.seals-xcm.certria.com/54f396e0-b046-49b1-9cb3-0c69281d7ea9-beacon.png
200 OK 68 B URL HTTP/2 4c993dfc-aa0e-4755-a7e3-22a3adb99bab.seals-xcm.certria.com/54f396e0-b046-49b1-9cb3-0c69281d7ea9-beacon.png
IP
File type PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced\012- data
Hash e679fbd466a2d656f194a5da4fa083cd
2aa795c7607aa6ea41313be88f1b7a9c1ab516b3
f309b7c03d9cae63a9bedbee6ed655f3dbcdb194132943639344dead5f3b9710
GET /54f396e0-b046-49b1-9cb3-0c69281d7ea9-beacon.png HTTP/1.1
Host: 4c993dfc-aa0e-4755-a7e3-22a3adb99bab.seals-xcm.certria.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 68
date: Tue, 14 Mar 2023 08:16:41 GMT
last-modified: Tue, 15 Dec 2020 08:04:53 GMT
etag: "e679fbd466a2d656f194a5da4fa083cd"
cache-control: no-cache, no-store, must-revalidate
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: iiNQgSUqKeVkJ2PjvvJpgbcOXRBGedx4tZNXGdRHJyDYO4rLLGcYrg==
age: 449704
X-Firefox-Spdy: h2
assetscdn-wchat.freshchat.com/static/assets/hotline-web.d41d8cd98f00b204e9800998ecf8427e.css
200 OK 0 B URL HTTP/2 assetscdn-wchat.freshchat.com/static/assets/hotline-web.d41d8cd98f00b204e9800998ecf8427e.css
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /static/assets/hotline-web.d41d8cd98f00b204e9800998ecf8427e.css HTTP/1.1
Host: assetscdn-wchat.freshchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wchat.freshchat.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: text/css
content-length: 0
last-modified: Wed, 01 Mar 2023 18:22:25 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Sun, 19 Mar 2023 13:08:07 GMT
cache-control: max-age=31536000, no-transform, public
expires: Tue, 12 Mar 2024 12:19:14 GMT
etag: "d41d8cd98f00b204e9800998ecf8427e"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: rfPOJw_8fFkIXh6aDDysuY5DFyDuAjWBNcOA3a4TjzPZ99RWjPHjtw==
age: 219
X-Firefox-Spdy: h2
wchat.freshchat.com/widget/css/widget.css?t=1679231516627
200 OK 1.7 kB URL HTTP/1.1 wchat.freshchat.com/widget/css/widget.css?t=1679231516627
IP
File type ASCII text, with very long lines (8857)
Hash b5e89ee0ad0cccc7ddc1f3cfad9939d0
04751cd854046b72e25e2428b9ec5fd8c3fa09e0
5f797f013b7f7d86962b0b99977a5990fb3a0e193befaf7e935ab005d6f25b38
GET /widget/css/widget.css?t=1679231516627 HTTP/1.1
Host: wchat.freshchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 19 Mar 2023 13:11:44 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
server: fwe
last-modified: Mon, 13 Mar 2023 12:19:13 GMT
expires: Mon, 18 Mar 2024 13:11:44 GMT
cache-control: max-age=31536000,no-cache, no-store, must-revalidate, pre-check=0, post-check=0,public
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000; includeSubDomains
served-by: 4082
x-server: 4082
content-encoding: gzip
x-envoy-upstream-service-time: 0
x-trace-id: 00-1971fddf3808a446b5e2db08fd384ea6-a638caba020ff38d-00
nel: { "report_to": "nel-endpoint-freshchat", "max_age": 2592000, "include_subdomains": true}
report-to: { "group": "nel-endpoint-freshchat", "max_age": 2592000, "include_subdomains": true, "endpoints": [{"url": "https://edge-admin.us-east-1.freshedge.net/nelreports/freshchat"}]}
x-fw-ratelimiting-managed: false
x-request-id: 2b8af5df-0af7-4643-b7a0-4b9b910781ff
4ec9ae87-4fa3-435f-aab6-8ecbb4ebeb6c.snippet.antillephone.com/54f396e0-b046-49b1-9cb3-0c69281d7ea9-beacon.png
200 OK 68 B URL HTTP/2 4ec9ae87-4fa3-435f-aab6-8ecbb4ebeb6c.snippet.antillephone.com/54f396e0-b046-49b1-9cb3-0c69281d7ea9-beacon.png
IP
File type PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced\012- data
Hash e679fbd466a2d656f194a5da4fa083cd
2aa795c7607aa6ea41313be88f1b7a9c1ab516b3
f309b7c03d9cae63a9bedbee6ed655f3dbcdb194132943639344dead5f3b9710
GET /54f396e0-b046-49b1-9cb3-0c69281d7ea9-beacon.png HTTP/1.1
Host: 4ec9ae87-4fa3-435f-aab6-8ecbb4ebeb6c.snippet.antillephone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 68
date: Wed, 15 Mar 2023 08:33:08 GMT
last-modified: Tue, 15 Dec 2020 08:04:53 GMT
etag: "e679fbd466a2d656f194a5da4fa083cd"
cache-control: no-cache, no-store, must-revalidate
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: kJ8azr7f4lMF7qhPRsTm4mBZbwIrD-8Med1glIf_xvzufiJjB9vZqw==
age: 362317
X-Firefox-Spdy: h2
4c993dfc-aa0e-4755-a7e3-22a3adb99bab.seals-xcm.certria.com/xcm-seal.js
200 OK 54 kB URL HTTP/2 4c993dfc-aa0e-4755-a7e3-22a3adb99bab.seals-xcm.certria.com/xcm-seal.js
IP
Hash bbdcf84f2a3864a81dba5877a1d01223
fa88005c776b5c01bc2d6406beca53d3ad215d62
8ec9e2ea36371b1777a5a13764aa1f9b489dfe72c4657e21b533d4f1268eee3a
GET /xcm-seal.js HTTP/1.1
Host: 4c993dfc-aa0e-4755-a7e3-22a3adb99bab.seals-xcm.certria.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
date: Sun, 19 Mar 2023 13:11:44 GMT
x-powered-by: Express
cache-control: max-age=300
etag: W/"bfe-NuRUmLAea9H5OUYiMq9MhB1YXgk"
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f6858a5530c9-FRA
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: nBzHnU_8YWg3VowfhzpuA0rlXM6LVc9m8rm0G_q0PcowA-Cj32zKmg==
X-Firefox-Spdy: h2
4ec9ae87-4fa3-435f-aab6-8ecbb4ebeb6c.snippet.antillephone.com/apg-seal.js
200 OK 50 kB URL HTTP/2 4ec9ae87-4fa3-435f-aab6-8ecbb4ebeb6c.snippet.antillephone.com/apg-seal.js
IP
Hash b6cd2e891e69da9288b13d93208a98c0
8a081546e4d8b4767e20a5ac36b2c3bf5177bae4
dad1764d84e5148dd5fef66357b627db3a8dfa72d898b8b69b16adec258609b7
GET /apg-seal.js HTTP/1.1
Host: 4ec9ae87-4fa3-435f-aab6-8ecbb4ebeb6c.snippet.antillephone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
date: Sun, 19 Mar 2023 13:11:44 GMT
x-powered-by: Express
cache-control: max-age=300
etag: W/"ca3-OBcUjDFz9MXi1pvNnYtrIlkZ4GU"
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f68608abbba9-FRA
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: _zIXwfveT1H6Po7TLfQY5nt-kaIzvdY_Og3h6nsGAZ9cfKn8DLgaDw==
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7c8dfa805163cbe39595d31e72da716e
34a2c4ac208f5f9d77302b67f556203d539388d7
874fcb1c9736686213758fa8009b9569d1d068ccd760461476c37d7e01fcebaa
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 19 Mar 2023 13:11:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 1bb91195ab4a25adcd469ca1038e0385
f87f210f89fbbe14491d3ee62f505d3eb4327b48
d74b1d5a3856dfe5dd586923384c038b2b9b8fe9eba2b86c08b1661bc7ea819c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 19 Mar 2023 13:11:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.recaptcha.net/recaptcha/api.js?render=6Lfrb-8bAAAAAOHgQadtGv6dqnQ5ItCZ1n5RvFkf
200 OK 588 B URL HTTP/2 www.recaptcha.net/recaptcha/api.js?render=6Lfrb-8bAAAAAOHgQadtGv6dqnQ5ItCZ1n5RvFkf
IP
File type ASCII text, with very long lines (887), with no line terminators
Hash d7fd1dc079d3f01410b774f5d9dab282
bf9fd490bc18b27a02a49557924f47d05a0f82d1
98401c503a646a31f79d2735a4d3964844ccddd343f1a7ca28eda5aec44ca35e
GET /recaptcha/api.js?render=6Lfrb-8bAAAAAOHgQadtGv6dqnQ5ItCZ1n5RvFkf HTTP/1.1
Host: www.recaptcha.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Sun, 19 Mar 2023 13:11:44 GMT
date: Sun, 19 Mar 2023 13:11:44 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 588
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/10858087058/?random=1679231516458&cv=11&fst=1679231516458&bg=ffffff&guid=ON&async=1>m=45be33f0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.happistar8.net%2F&tiba=Happistar&auid=1985919800.1679231516&data=event%3Dgtag.config&rfmt=3&fmt=4
200 OK 1.2 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/10858087058/?random=1679231516458&cv=11&fst=1679231516458&bg=ffffff&guid=ON&async=1>m=45be33f0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.happistar8.net%2F&tiba=Happistar&auid=1985919800.1679231516&data=event%3Dgtag.config&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2509), with no line terminators
Hash 9cacba41100c34e3ec9851f513de4a28
f7feb960f6f15cb9a9cd2ac400d031720cdafc8f
bb1eadacae8b2e990be68c0f4fac7213906078247a628a30bf4523768f6d8c81
GET /pagead/viewthroughconversion/10858087058/?random=1679231516458&cv=11&fst=1679231516458&bg=ffffff&guid=ON&async=1>m=45be33f0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.happistar8.net%2F&tiba=Happistar&auid=1985919800.1679231516&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 19 Mar 2023 13:11:44 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 1192
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Sun, 19-Mar-2023 13:26:44 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7c8dfa805163cbe39595d31e72da716e
34a2c4ac208f5f9d77302b67f556203d539388d7
874fcb1c9736686213758fa8009b9569d1d068ccd760461476c37d7e01fcebaa
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 19 Mar 2023 13:11:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 1bb91195ab4a25adcd469ca1038e0385
f87f210f89fbbe14491d3ee62f505d3eb4327b48
d74b1d5a3856dfe5dd586923384c038b2b9b8fe9eba2b86c08b1661bc7ea819c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 19 Mar 2023 13:11:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
statistics.bcapps.org/images/c/b/0/548.png
200 OK 6.4 kB URL HTTP/2 statistics.bcapps.org/images/c/b/0/548.png
IP
ASN #209242 Cloudflare London, LLC
File type PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced\012- data
Hash 7ffa611d18d3d91024173bc362e61657
81c8c4d0ee7f491244416a398e379e6e3657df89
31f98604275b2e79380faf9496449b7122289d0bbb20525087f5adcf3ee89dc8
GET /images/c/b/0/548.png HTTP/1.1
Host: statistics.bcapps.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 19 Mar 2023 13:11:44 GMT
content-type: image/png
content-length: 6377
last-modified: Mon, 14 Sep 2020 07:57:59 GMT
etag: "3b0c0c36c8ad61:0"
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-powered-by: ASP.NET
expires: Tue, 18 Apr 2023 13:11:44 GMT
cache-control: public, max-age=2592000
pragma: public
x-cache: MISS
cf-cache-status: HIT
age: 1175360
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7aa5f6895a9e1c02-OSL
X-Firefox-Spdy: h2
statistics.bcapps.org/images/e/s/0/442.png
200 OK 1.5 kB URL HTTP/2 statistics.bcapps.org/images/e/s/0/442.png
IP
ASN #209242 Cloudflare London, LLC
File type PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Hash 92e5ff15e0ad1f56af93a2b4b7de766b
17727b5ff6b8935e19eb76a2fe9d8cce4aca5b71
9f914bdb202f7dcea314f2d39f70aa36c4d104614adc33e61dd849498a90c17e
GET /images/e/s/0/442.png HTTP/1.1
Host: statistics.bcapps.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 19 Mar 2023 13:11:44 GMT
content-type: image/png
content-length: 1524
last-modified: Tue, 08 May 2018 06:49:29 GMT
etag: "579366b698e6d31:0"
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-powered-by: ASP.NET
expires: Tue, 18 Apr 2023 13:11:44 GMT
cache-control: public, max-age=2592000
pragma: public
x-cache: MISS
cf-cache-status: HIT
age: 150947
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7aa5f6895aa21c02-OSL
X-Firefox-Spdy: h2
statistics.bcapps.org/images/c/b/0/538.png
200 OK 6.7 kB URL HTTP/2 statistics.bcapps.org/images/c/b/0/538.png
IP
ASN #209242 Cloudflare London, LLC
File type PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced\012- data
Hash fd5232a1b6443afa66b95d345e999383
a3c44428265f1e713adb73e23c13d91a4c344ba2
c7a853826c40e727f00fbb7e226fb4d954728ce14eae42856d76216c0c610ccb
GET /images/c/b/0/538.png HTTP/1.1
Host: statistics.bcapps.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 19 Mar 2023 13:11:44 GMT
content-type: image/png
content-length: 6726
last-modified: Wed, 15 Nov 2017 12:10:47 GMT
etag: "4c4b25c5a5ed31:0"
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-powered-by: ASP.NET
expires: Tue, 18 Apr 2023 13:11:44 GMT
cache-control: public, max-age=2592000
pragma: public
x-cache: MISS
cf-cache-status: HIT
age: 827871
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7aa5f6895a9c1c02-OSL
X-Firefox-Spdy: h2
statistics.bcapps.org/images/e/s/0/435.png
200 OK 1.5 kB URL HTTP/2 statistics.bcapps.org/images/e/s/0/435.png
IP
ASN #209242 Cloudflare London, LLC
File type PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Hash c9c487733fa6d2832cc8148336f60b69
6ebcb858b415be04218cef1650572a1417752608
38076052ff77678e8e5fb15a6e1c54e24b550bef73bbd1cf16cd3d400156e208
GET /images/e/s/0/435.png HTTP/1.1
Host: statistics.bcapps.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 19 Mar 2023 13:11:44 GMT
content-type: image/png
content-length: 1459
last-modified: Tue, 17 Sep 2019 04:57:18 GMT
etag: "a389ea61146dd51:0"
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-powered-by: ASP.NET
expires: Tue, 18 Apr 2023 13:11:44 GMT
cache-control: public, max-age=2592000
pragma: public
x-cache: MISS
cf-cache-status: HIT
age: 150947
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7aa5f6895aa11c02-OSL
X-Firefox-Spdy: h2
statistics.bcapps.org/images/c/b/0/541.png
200 OK 5.4 kB URL HTTP/2 statistics.bcapps.org/images/c/b/0/541.png
IP
ASN #209242 Cloudflare London, LLC
File type PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced\012- data
Hash c87858516a82b35dc19661b566840eae
3c5ddc760112995117b56b02cab54d2694102d87
5c2b8edaa71ca93acf91b76a9498102f38db77f0ffde5115c8bdd26b2698c454
GET /images/c/b/0/541.png HTTP/1.1
Host: statistics.bcapps.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 19 Mar 2023 13:11:44 GMT
content-type: image/png
content-length: 5351
last-modified: Sat, 23 May 2020 07:20:00 GMT
etag: "ca9ee91d230d61:0"
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-powered-by: ASP.NET
expires: Tue, 18 Apr 2023 13:11:44 GMT
cache-control: public, max-age=2592000
pragma: public
x-cache: MISS
cf-cache-status: HIT
age: 2473895
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7aa5f6895aa61c02-OSL
X-Firefox-Spdy: h2
statistics.bcapps.org/images/e/s/0/931.png
200 OK 1.6 kB URL HTTP/2 statistics.bcapps.org/images/e/s/0/931.png
IP
ASN #209242 Cloudflare London, LLC
File type PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Hash 747a3de6ed96601b7ceba975d1f27f99
9cab314f1aacbef53ee1d77e7fae0671dff9e05f
385cd93bd49d4dce3af2fd46e28e3196957924fd3f68e1c5a417b67fed5307ca
GET /images/e/s/0/931.png HTTP/1.1
Host: statistics.bcapps.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 19 Mar 2023 13:11:44 GMT
content-type: image/png
content-length: 1594
last-modified: Thu, 03 May 2018 07:03:14 GMT
etag: "c1e12ceace2d31:0"
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-powered-by: ASP.NET
expires: Tue, 18 Apr 2023 13:11:44 GMT
cache-control: public, max-age=2592000
pragma: public
x-cache: MISS
cf-cache-status: HIT
age: 262887
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7aa5f6896aaa1c02-OSL
X-Firefox-Spdy: h2
statistics.bcapps.org/images/e/s/0/488.png
200 OK 870 B URL HTTP/2 statistics.bcapps.org/images/e/s/0/488.png
IP
ASN #209242 Cloudflare London, LLC
File type PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Hash f5511afb415428d77ecc6396f6222ee3
40f9588739d70bc2c4cf57058b5c1b85607ac6dc
9e16de42bbc863e883f37118036d9b1a309e35383d830b51c0f5eb870b41d0dd
GET /images/e/s/0/488.png HTTP/1.1
Host: statistics.bcapps.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 19 Mar 2023 13:11:44 GMT
content-type: image/png
content-length: 870
last-modified: Tue, 17 Sep 2019 06:34:39 GMT
etag: "c11f3efb216dd51:0"
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-powered-by: ASP.NET
expires: Tue, 18 Apr 2023 13:11:44 GMT
cache-control: public, max-age=2592000
pragma: public
x-cache: MISS
cf-cache-status: HIT
age: 43378
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7aa5f6896aad1c02-OSL
X-Firefox-Spdy: h2
statistics.bcapps.org/images/e/s/0/494.png
200 OK 1.4 kB URL HTTP/2 statistics.bcapps.org/images/e/s/0/494.png
IP
ASN #209242 Cloudflare London, LLC
File type PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Hash 55d1f45c2066a00e1376436fa8962d1a
145d4415d252571366fafaa544bd9feaeb2cdeec
4e71167929caa49b9d19205a27b4e8e420fbf5bc9010c1aa984856f744941708
GET /images/e/s/0/494.png HTTP/1.1
Host: statistics.bcapps.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 19 Mar 2023 13:11:44 GMT
content-type: image/png
content-length: 1388
last-modified: Sat, 09 Apr 2016 09:13:34 GMT
etag: "a36181174092d11:0"
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-powered-by: ASP.NET
expires: Tue, 18 Apr 2023 13:11:44 GMT
cache-control: public, max-age=2592000
pragma: public
x-cache: MISS
cf-cache-status: HIT
age: 43378
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7aa5f6897ab81c02-OSL
X-Firefox-Spdy: h2
statistics.bcapps.org/images/e/s/0/387.png
200 OK 1.7 kB URL HTTP/2 statistics.bcapps.org/images/e/s/0/387.png
IP
ASN #209242 Cloudflare London, LLC
File type PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Hash b16f64e207e4368dede3fa6b06ff0e5c
cc79b7af6a799d1c4dab98341c43a96638ae1588
c28f5b69c14fa6cfd0ab8cd0cb5e5c6cfca7442268ad7c90e055104202987b61
GET /images/e/s/0/387.png HTTP/1.1
Host: statistics.bcapps.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 19 Mar 2023 13:11:44 GMT
content-type: image/png
content-length: 1662
last-modified: Wed, 18 Apr 2018 10:38:10 GMT
etag: "e5225c581d7d31:0"
access-control-allow-origin: *
access-control-allow-methods: *
access-control-allow-headers: *
x-powered-by: ASP.NET
expires: Tue, 18 Apr 2023 13:11:44 GMT
cache-control: public, max-age=2592000
pragma: public
x-cache: MISS
cf-cache-status: HIT
age: 717734
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7aa5f6896aa81c02-OSL
X-Firefox-Spdy: h2
assetscdn-wchat.freshchat.com/static/assets/vendor.3474f8e0dcdb6126f26894076afa40d6.js
200 OK 329 kB URL HTTP/2 assetscdn-wchat.freshchat.com/static/assets/vendor.3474f8e0dcdb6126f26894076afa40d6.js
IP
File type Unicode text, UTF-8 text, with very long lines (38260), with NEL line terminators
Size 329 kB (329260 bytes)
Hash e0a079a67ee7b7293d1f269daae3c6b5
eda0abf1a1de6737aa33e89d93a831f290132268
b7e48194e1135ad3d9990763eb2bb1d454f10949d4826f7628896d931c3730f2
GET /static/assets/vendor.3474f8e0dcdb6126f26894076afa40d6.js HTTP/1.1
Host: assetscdn-wchat.freshchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wchat.freshchat.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Wed, 01 Mar 2023 18:22:26 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
date: Sun, 19 Mar 2023 13:10:27 GMT
cache-control: max-age=31536000, no-transform, public
expires: Tue, 12 Mar 2024 12:19:14 GMT
etag: W/"3474f8e0dcdb6126f26894076afa40d6"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: vBIgRmPwv49K4ZzJYxnsE7eBUFYeJiCR2C8m2mF8zT9TllMfLsB3Fg==
age: 78
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 19c14f58184c7e690016123d3ef7a534
2c72fde2182255e717fb88abf38f3d4cdfdefafd
cdac56c85e414c7934436cc5347cdf356ad82b3fbfd2e6bac40a4156382442ad
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 19 Mar 2023 13:11:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
assetscdn-wchat.freshchat.com/static/assets/fd-messaging.c6d8a78282db23d6186b.js
200 OK 129 kB URL HTTP/2 assetscdn-wchat.freshchat.com/static/assets/fd-messaging.c6d8a78282db23d6186b.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Size 129 kB (129326 bytes)
Hash 77d5016aecc14aebe647053686f299f3
c75ebc34bd55cef24289b3b44e20067bb2d5beed
891cedaa929c113bf0e19aeb0d2e2ad410598d88ec247ea3cc62f0322a056855
GET /static/assets/fd-messaging.c6d8a78282db23d6186b.js HTTP/1.1
Host: assetscdn-wchat.freshchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wchat.freshchat.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Mon, 13 Mar 2023 12:19:19 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
date: Sun, 19 Mar 2023 13:09:01 GMT
cache-control: max-age=31536000, no-transform, public
expires: Tue, 12 Mar 2024 12:19:14 GMT
etag: W/"f3646cca5800d76ae6b4389e1536a093"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 7GGq3jwgD6WPx9EaBkcJTfATsvMzkwVKgSS35uxXAVvmv89cX4tJEg==
age: 164
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 73af20327f0f4938b7c375ac8a34466a
e108c5c8cd69ca4d7c3441bc2806e2a44eea6056
d23a6378cdd4c7f9ba0924e4d11fdb96267bdfacd7faa4c060d0a6cd2eefcff5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 19 Mar 2023 13:11:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/pagead/1p-user-list/10858087058/?random=1679231516458&cv=11&fst=1679230800000&bg=ffffff&guid=ON&async=1>m=45be33f0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.happistar8.net%2F&tiba=Happistar&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=2183683034&rmt_tld=0&ipr=y
200 OK 42 B URL HTTP/2 www.google.com/pagead/1p-user-list/10858087058/?random=1679231516458&cv=11&fst=1679230800000&bg=ffffff&guid=ON&async=1>m=45be33f0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.happistar8.net%2F&tiba=Happistar&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=2183683034&rmt_tld=0&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/10858087058/?random=1679231516458&cv=11&fst=1679230800000&bg=ffffff&guid=ON&async=1>m=45be33f0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.happistar8.net%2F&tiba=Happistar&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=2183683034&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 19 Mar 2023 13:11:45 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/10858087058/?random=1679231516458&cv=11&fst=1679230800000&bg=ffffff&guid=ON&async=1>m=45be33f0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.happistar8.net%2F&tiba=Happistar&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=2183683034&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/10858087058/?random=1679231516458&cv=11&fst=1679230800000&bg=ffffff&guid=ON&async=1>m=45be33f0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.happistar8.net%2F&tiba=Happistar&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=2183683034&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/10858087058/?random=1679231516458&cv=11&fst=1679230800000&bg=ffffff&guid=ON&async=1>m=45be33f0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.happistar8.net%2F&tiba=Happistar&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=2183683034&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 19 Mar 2023 13:11:45 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/releases/Trd6gj1dhC_fx0ma_AWHc1me/recaptcha__en.js
200 OK 165 kB URL HTTP/2 www.gstatic.com/recaptcha/releases/Trd6gj1dhC_fx0ma_AWHc1me/recaptcha__en.js
IP
File type ASCII text, with very long lines (576)
Size 165 kB (164678 bytes)
Hash f22f07ee02fbeed3958345c90b52b818
2aa44ea19d580589c06c2170103b4d0505e18cdb
dc1eadf37f70bef92766d0c316d1da7af283b84e5c309a4732d8ed35d7bbfb84
GET /recaptcha/releases/Trd6gj1dhC_fx0ma_AWHc1me/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.happistar8.net
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 164678
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 15 Mar 2023 11:44:52 GMT
expires: Thu, 14 Mar 2024 11:44:52 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 13 Mar 2023 02:02:14 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 350813
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 657e225fbd809f16e51b4997847e5710
28b88c58a006257deb72f43ea236d0a513081847
f37f7d971e2f36b0d260965c8ab09863cffc87cfc3d561c40c3d72c9c207eae5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 19 Mar 2023 13:11:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash fe99fbfafe932798d008a24a9e6083c5
f4525c21f1da0a2c15ae3c36598d0e243bea4f32
7042c657b1b57b5a441341628450ea07042994316089b30653df49a8ded66fe2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 19 Mar 2023 13:11:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 73af20327f0f4938b7c375ac8a34466a
e108c5c8cd69ca4d7c3441bc2806e2a44eea6056
d23a6378cdd4c7f9ba0924e4d11fdb96267bdfacd7faa4c060d0a6cd2eefcff5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 19 Mar 2023 13:11:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
assetscdn-wchat.freshchat.com/static/fd-messaging.cb85b820f0f4dd4950ad.css
200 OK 48 kB URL HTTP/2 assetscdn-wchat.freshchat.com/static/fd-messaging.cb85b820f0f4dd4950ad.css
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 44d2b94bea79bc2b526047d3bbe87449
dfc62745863642aa8ee50526fbf01d65840bb3a8
276a757c26ecffbdf93f322dd94e817bba6e203c0cb000e78316ee409db9a870
GET /static/fd-messaging.cb85b820f0f4dd4950ad.css HTTP/1.1
Host: assetscdn-wchat.freshchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wchat.freshchat.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: text/css
last-modified: Mon, 13 Mar 2023 12:19:21 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
date: Sun, 19 Mar 2023 13:10:37 GMT
cache-control: max-age=31536000, no-transform, public
expires: Tue, 12 Mar 2024 12:19:14 GMT
etag: W/"293027913be8fbe8fa62062a65dfc83b"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 1nMwHzH-HyRZWcBGI6GVijZR3HJg3JAh3vD1WsUwjiegbv9IXrO7dA==
age: 70
X-Firefox-Spdy: h2
assetscdn-wchat.freshchat.com/static/assets/notif.da662fefc5060dabf2859ea199198b14.mp3
206 Partial Content 4.3 kB URL HTTP/2 assetscdn-wchat.freshchat.com/static/assets/notif.da662fefc5060dabf2859ea199198b14.mp3
IP
File type Audio file with ID3 version 2.4.0, contains:\012- MPEG ADTS, layer III, v2, 56 kbps, 22.05 kHz, Monaural\012- data
Hash a529450a7cfb4a60dea41ef294fa90dd
50eb9373dfa8c38ec6aebfa6e2a5f4494871aa37
eb2e3f703cf8ee0156a1d625e053c0968b0dfcff62ea4254ddd8ba9fece3ad32
GET /static/assets/notif.da662fefc5060dabf2859ea199198b14.mp3 HTTP/1.1
Host: assetscdn-wchat.freshchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://wchat.freshchat.com/
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 206 Partial Content
content-type: audio/mpeg
content-length: 4302
last-modified: Wed, 08 Mar 2023 10:48:19 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Sun, 19 Mar 2023 13:09:34 GMT
cache-control: max-age=31536000, no-transform, public
expires: Tue, 12 Mar 2024 12:19:14 GMT
etag: "a529450a7cfb4a60dea41ef294fa90dd"
vary: Accept-Encoding
content-range: bytes 0-4301/4302
x-cache: Hit from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: AVBzYiy1yxWAnyDFNU8BfSqfr_VBNqgBWuUxRB7rvwSyA5bvXpWmCA==
age: 160
X-Firefox-Spdy: h2
wchat.freshchat.com/widget/js/co-browsing.js
200 OK 8.0 kB URL HTTP/1.1 wchat.freshchat.com/widget/js/co-browsing.js
IP
File type ASCII text, with very long lines (27109), with no line terminators
Hash 451e59041c9a97c80376792d2b0a3b17
1dde1364568db32996c36b6e479e21233f2d4901
4a22e8436c72556b1b44b1c5e691127b31f7852261afac57dde7a76f8b9d1ab9
GET /widget/js/co-browsing.js HTTP/1.1
Host: wchat.freshchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 19 Mar 2023 13:11:45 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
server: fwe
last-modified: Mon, 13 Mar 2023 12:19:13 GMT
expires: Mon, 18 Mar 2024 13:11:45 GMT
cache-control: max-age=31536000,no-cache, no-store, must-revalidate, pre-check=0, post-check=0,public
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000; includeSubDomains
served-by: 9886
x-server: 9886
content-encoding: gzip
x-envoy-upstream-service-time: 0
x-trace-id: 00-7128daa117745574e56818709fb0df8d-30c8cca11f225609-00
nel: { "report_to": "nel-endpoint-freshchat", "max_age": 2592000, "include_subdomains": true}
report-to: { "group": "nel-endpoint-freshchat", "max_age": 2592000, "include_subdomains": true, "endpoints": [{"url": "https://edge-admin.us-east-1.freshedge.net/nelreports/freshchat"}]}
x-fw-ratelimiting-managed: false
x-request-id: e9b2e4f1-57e2-455a-bcbf-35aec519a3e5
eu-swarm-ws-re.deimosphobos.net/
200 OK 720 B URL HTTP/2 eu-swarm-ws-re.deimosphobos.net/
IP
ASN #209242 Cloudflare London, LLC
File type JSON data\012- , ASCII text, with very long lines (1596)
Hash b466ea9bed82dccaab915ab88ecf3951
460497cacd2b69b6703b0d877b8a01c50d892c7d
759733d2aef64fee555c8cdeed56c1dd7415049f904983f4278c5b44b888e6eb
POST / HTTP/1.1
Host: eu-swarm-ws-re.deimosphobos.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.happistar8.net/
swarm-session: 003bbd49-6089-4516-40c7-b2c58bf1a809-1
Content-Type: text/plain;charset=UTF-8
Origin: https://www.happistar8.net
Content-Length: 69
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 19 Mar 2023 13:11:44 GMT
content-type: application/json
access-control-allow-origin: *
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f685bdb5b4f1-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.recaptcha.net
Connection: keep-alive
Referer: https://www.recaptcha.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 16 Mar 2023 21:48:03 GMT
expires: Fri, 15 Mar 2024 21:48:03 GMT
cache-control: public, max-age=31536000
age: 228222
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.recaptcha.net
Connection: keep-alive
Referer: https://www.recaptcha.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 16 Mar 2023 17:56:42 GMT
expires: Fri, 15 Mar 2024 17:56:42 GMT
cache-control: public, max-age=31536000
age: 242103
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
wchat.freshchat.com/app/services/app/webchat/519b4315-2f72-4655-a0dd-8ee6f3b800ed/user?siteId=india
200 OK 63 B URL HTTP/1.1 wchat.freshchat.com/app/services/app/webchat/519b4315-2f72-4655-a0dd-8ee6f3b800ed/user?siteId=india
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 986b346dcc5bc15f4f28a5878eb3bd54
0576953cc35e7ddfad56bf9e0ca4c35411c62aea
02a00e3ef645e0351f654665d42b03388e6a73e0ab4f853c8904faecf322b229
GET /app/services/app/webchat/519b4315-2f72-4655-a0dd-8ee6f3b800ed/user?siteId=india HTTP/1.1
Host: wchat.freshchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wchat.freshchat.com/widget/?token=519b4315-2f72-4655-a0dd-8ee6f3b800ed&referrer=aHR0cHM6Ly93d3cuaGFwcGlzdGFyOC5uZXQ=&eagerLoad=true
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 19 Mar 2023 13:11:45 GMT
Content-Type: application/json;charset=UTF-8
Content-Length: 63
Connection: keep-alive
server: fwe
access-control-allow-credentials: true
cache-control: no-store
content-security-policy: style-src 'unsafe-inline' *; font-src 'self' * data:; img-src 'self' * data:; connect-src 'self' *; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.freshchat.com https://*.freshworksapi.com; child-src 'self' * blob:; media-src 'self' https://*.freshchat.com; manifest-src 'self' https://*.freshchat.com; default-src 'none';
strict-transport-security: max-age=31536000; includeSubDomains
x-xss-protection: 1; mode=block
x-request-id: b7a9899e-5a3e-499e-a3c5-cb0216d1c3ea
x-server: 2601
x-envoy-upstream-service-time: 4
x-trace-id: 00-d32a0b5342fc88d905b2d5693fa40110-59870b261e710a4a-00
nel: { "report_to": "nel-endpoint-freshchat", "max_age": 2592000, "include_subdomains": true}
report-to: { "group": "nel-endpoint-freshchat", "max_age": 2592000, "include_subdomains": true, "endpoints": [{"url": "https://edge-admin.us-east-1.freshedge.net/nelreports/freshchat"}]}
x-fw-ratelimiting-managed: true
x-ratelimit-total: 3000
x-ratelimit-remaining: 2998
x-ratelimit-used-currentrequest: 1
x-ratelimit-limit: 3000
wchat.freshchat.com/app/services/app/webchat/519b4315-2f72-4655-a0dd-8ee6f3b800ed/widget_info_v2?locales=en-US,en-US&platform=web
200 OK 8.7 kB URL HTTP/1.1 wchat.freshchat.com/app/services/app/webchat/519b4315-2f72-4655-a0dd-8ee6f3b800ed/widget_info_v2?locales=en-US,en-US&platform=web
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (60377), with no line terminators
Hash 6b6c8401e5af74d8265d4b0bd0236ec5
c22fbe0b00de6172b427476fbd375b2aab65add4
5737c4057c8497bd0193888a4fb8f8d4fdbb5eb786f0e16f654866f2699b70a1
GET /app/services/app/webchat/519b4315-2f72-4655-a0dd-8ee6f3b800ed/widget_info_v2?locales=en-US,en-US&platform=web HTTP/1.1
Host: wchat.freshchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wchat.freshchat.com/widget/?token=519b4315-2f72-4655-a0dd-8ee6f3b800ed&referrer=aHR0cHM6Ly93d3cuaGFwcGlzdGFyOC5uZXQ=&eagerLoad=true
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 19 Mar 2023 13:11:46 GMT
Content-Type: application/json;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
server: fwe
access-control-allow-credentials: true
cache-control: no-store
content-security-policy: style-src 'unsafe-inline' *; font-src 'self' * data:; img-src 'self' * data:; connect-src 'self' *; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.freshchat.com https://*.freshworksapi.com; child-src 'self' * blob:; media-src 'self' https://*.freshchat.com; manifest-src 'self' https://*.freshchat.com; default-src 'none';
strict-transport-security: max-age=31536000; includeSubDomains
x-xss-protection: 1; mode=block
x-request-id: b8154e3b-1338-442f-9339-a1b4eacb49d6
content-encoding: gzip
vary: accept-encoding
x-server: 6714
x-status: EXPIRED
x-envoy-upstream-service-time: 181
x-trace-id: 00-901e2fedaf1473bba0f41180478c652d-fa5f6b7158a54dfe-00
nel: { "report_to": "nel-endpoint-freshchat", "max_age": 2592000, "include_subdomains": true}
report-to: { "group": "nel-endpoint-freshchat", "max_age": 2592000, "include_subdomains": true, "endpoints": [{"url": "https://edge-admin.us-east-1.freshedge.net/nelreports/freshchat"}]}
x-fw-ratelimiting-managed: true
x-ratelimit-total: 3000
x-ratelimit-remaining: 2997
x-ratelimit-used-currentrequest: 1
x-ratelimit-limit: 3000
wchat.freshchat.com/app/services/app/webchat/519b4315-2f72-4655-a0dd-8ee6f3b800ed/user/6cefe1fd-5e3b-411f-b0f8-8471094a4f6a/activity?widgetInfoTraceId=673bee26-f5ce-43e7-8743-ad0c3ab47739
200 OK 17 B URL HTTP/1.1 wchat.freshchat.com/app/services/app/webchat/519b4315-2f72-4655-a0dd-8ee6f3b800ed/user/6cefe1fd-5e3b-411f-b0f8-8471094a4f6a/activity?widgetInfoTraceId=673bee26-f5ce-43e7-8743-ad0c3ab47739
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5b64e8b89092b2e3dfd448b10700627f
484b3032619fa1acd135d114565b0a5166281c22
f1ea07a1e51a389c8de07120ae5c2e432e9dd8f4fbd6f92489f185b0523a3fd4
PUT /app/services/app/webchat/519b4315-2f72-4655-a0dd-8ee6f3b800ed/user/6cefe1fd-5e3b-411f-b0f8-8471094a4f6a/activity?widgetInfoTraceId=673bee26-f5ce-43e7-8743-ad0c3ab47739 HTTP/1.1
Host: wchat.freshchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://wchat.freshchat.com
Connection: keep-alive
Referer: https://wchat.freshchat.com/widget/?token=519b4315-2f72-4655-a0dd-8ee6f3b800ed&referrer=aHR0cHM6Ly93d3cuaGFwcGlzdGFyOC5uZXQ=&eagerLoad=true
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Content-Length: 0
HTTP/1.1 200 OK
Date: Sun, 19 Mar 2023 13:11:46 GMT
Content-Type: application/json;charset=UTF-8
Content-Length: 17
Connection: keep-alive
server: fwe
access-control-allow-credentials: true
cache-control: no-store
content-security-policy: style-src 'unsafe-inline' *; font-src 'self' * data:; img-src 'self' * data:; connect-src 'self' *; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.freshchat.com https://*.freshworksapi.com; child-src 'self' * blob:; media-src 'self' https://*.freshchat.com; manifest-src 'self' https://*.freshchat.com; default-src 'none';
strict-transport-security: max-age=31536000; includeSubDomains
x-xss-protection: 1; mode=block
x-request-id: 1f49070a-795d-4654-899f-e180e40048a6
x-server: 4082
x-envoy-upstream-service-time: 4
x-trace-id: 00-767e520888ed84c7d687ddcf87c6fd0b-b6b45817460477b4-00
nel: { "report_to": "nel-endpoint-freshchat", "max_age": 2592000, "include_subdomains": true}
report-to: { "group": "nel-endpoint-freshchat", "max_age": 2592000, "include_subdomains": true, "endpoints": [{"url": "https://edge-admin.us-east-1.freshedge.net/nelreports/freshchat"}]}
x-fw-ratelimiting-managed: true
x-ratelimit-total: 3000
x-ratelimit-remaining: 2996
x-ratelimit-used-currentrequest: 1
x-ratelimit-limit: 3000
assetscdn-wchat.freshchat.com/static/assets/chunk.628a675083b43474a40b.js
200 OK 137 B URL HTTP/2 assetscdn-wchat.freshchat.com/static/assets/chunk.628a675083b43474a40b.js
IP
File type ASCII text, with no line terminators
Hash 09f1bb696676dad184d04bb7b3602926
739603a0d6bffca6c07f93f318200110a18b48fe
49c3013edf1418bbf91a918d399e49717da0543a72c2c7a9e6964063dd94dea8
GET /static/assets/chunk.628a675083b43474a40b.js HTTP/1.1
Host: assetscdn-wchat.freshchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wchat.freshchat.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 137
last-modified: Wed, 01 Mar 2023 18:22:24 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Sun, 19 Mar 2023 13:08:44 GMT
cache-control: max-age=31536000, no-transform, public
expires: Tue, 12 Mar 2024 12:19:14 GMT
etag: "09f1bb696676dad184d04bb7b3602926"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: mKxcnW5w4eN4aqcYQxJfi57kyGLoGKvLzVlc905K08MoZrWU4F1JeQ==
age: 185
X-Firefox-Spdy: h2
assetscdn-wchat.freshchat.com/static/assets/chunk.4e61984cd7caacadf98d.js
200 OK 14 kB URL HTTP/2 assetscdn-wchat.freshchat.com/static/assets/chunk.4e61984cd7caacadf98d.js
IP
File type Unicode text, UTF-8 text, with very long lines (60331), with no line terminators
Hash db0ed08b3d42e1dade050787d37a09ae
b9e5212ddb6e7e94208a45240afa22abff4ecb8a
9117a5b5e030b4dd1c47353690173c5102dd5d6b4f8bcb0e56c69a8c63fae91c
GET /static/assets/chunk.4e61984cd7caacadf98d.js HTTP/1.1
Host: assetscdn-wchat.freshchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wchat.freshchat.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Wed, 01 Mar 2023 18:22:24 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
date: Sun, 19 Mar 2023 13:10:30 GMT
cache-control: max-age=31536000, no-transform, public
expires: Tue, 12 Mar 2024 12:19:14 GMT
etag: W/"cf45a9ea1121b6525306192d332d6ef4"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 97fdOxut9wQWVDv30P7dYgfahKmLatPYe6dag9npF1qgM8_dB0vb3A==
age: 79
X-Firefox-Spdy: h2
503766172156844.webpush.freshchat.com/fc_logo.png
200 OK 3.8 kB URL HTTP/2 503766172156844.webpush.freshchat.com/fc_logo.png
IP
File type PNG image data, 117 x 120, 8-bit/color RGBA, non-interlaced\012- data
Hash e87df9f10dcf497ae292dc234200465c
da81fbb140e3bd52685c959d6164a1c80236d048
a963621b4341552ca61590aa02e93b70f189e8050a105c32c0197c3c34b2d114
GET /fc_logo.png HTTP/1.1
Host: 503766172156844.webpush.freshchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://503766172156844.webpush.freshchat.com/index.html?ref=aHR0cHM6Ly93d3cuaGFwcGlzdGFyOC5uZXQ=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 3777
date: Sun, 19 Mar 2023 00:48:35 GMT
last-modified: Thu, 08 Feb 2018 07:54:41 GMT
etag: "e87df9f10dcf497ae292dc234200465c"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: NKn_Z6tTRofflaZGptsfD9KepGDHN7hUhJmGn0dZOSy2slyEya-Zdg==
age: 44592
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 81e649a46cd1edc9ff9807fdef1c26d1
083b8d82ca12cc23c98d6389c3ccac4158777da8
33c4916a4645517a2ee74d377499a941756321f20e75d327c220fba0b78f64a8
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=90678
Date: Sun, 19 Mar 2023 13:11:46 GMT
Etag: "6415b352-1d7"
Expires: Mon, 20 Mar 2023 14:23:04 GMT
Last-Modified: Sat, 18 Mar 2023 12:49:22 GMT
Server: ECAcc (nya/7970)
X-Cache: Miss from cloudfront
Via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: IWT-H1sdZm5DMNF89ionkidTZXSrfSY5_QfwpNhs2lBkr1nZpyvi_w==
Age: 5622
fc-use1-00-pics-bkt-00.s3.amazonaws.com/3d7d1c439a476b3fcbcfa36f8d958e6fd19e6770261b8ebd711581f023079ad3/f_marketingpicFull/u_80a4556f8b992f10742b2cea6d0d824a7776646e3f4c6b0b171e3408a691c1af/img_vcn054ovih_ad46c0b6ac53f63dd819d58e94ab9d146439b2a9fb1fc7270da812d334d9b191.png
200 OK 8.7 kB URL HTTP/1.1 fc-use1-00-pics-bkt-00.s3.amazonaws.com/3d7d1c439a476b3fcbcfa36f8d958e6fd19e6770261b8ebd711581f023079ad3/f_marketingpicFull/u_80a4556f8b992f10742b2cea6d0d824a7776646e3f4c6b0b171e3408a691c1af/img_vcn054ovih_ad46c0b6ac53f63dd819d58e94ab9d146439b2a9fb1fc7270da812d334d9b191.png
IP
File type PNG image data, 256 x 256, 8-bit/color RGB, non-interlaced\012- data
Hash 14c85eb1c980e3d477f7d96523fde1c5
8d82a7a6690f29eb540c73d72da2bc381e5f393e
3a18532d2fccd664bf39c0f4b11fb1ff604c37451d8824b435e2c44623eeb017
GET /3d7d1c439a476b3fcbcfa36f8d958e6fd19e6770261b8ebd711581f023079ad3/f_marketingpicFull/u_80a4556f8b992f10742b2cea6d0d824a7776646e3f4c6b0b171e3408a691c1af/img_vcn054ovih_ad46c0b6ac53f63dd819d58e94ab9d146439b2a9fb1fc7270da812d334d9b191.png HTTP/1.1
Host: fc-use1-00-pics-bkt-00.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wchat.freshchat.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: 2uupCXiP/UgvD4BZ0YRkAVqH03xp2/JPfGYYfOhemODXLajLfmO8RbHJZ55ixt40TytbOUv29hiJYCI4R11DztUaF9xQsyt85iJB7XQfV/M=
x-amz-request-id: PYB06R57N27EDJ68
Date: Sun, 19 Mar 2023 13:11:48 GMT
Last-Modified: Mon, 30 Aug 2021 07:44:38 GMT
ETag: "14c85eb1c980e3d477f7d96523fde1c5"
x-amz-storage-class: REDUCED_REDUNDANCY
x-amz-server-side-encryption: AES256
x-amz-version-id: lzyQAesf3q3Kf2H_8ELfVf9KliAm1Arp
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 8693
cmsbetconstruct.com/content/images/payments/custom/1876513/957.png?2023-03-17%2017:13:33
404 Not Found 0 B URL HTTP/2 cmsbetconstruct.com/content/images/payments/custom/1876513/957.png?2023-03-17%2017:13:33
IP
ASN #209242 Cloudflare London, LLC
GET /content/images/payments/custom/1876513/957.png?2023-03-17%2017:13:33 HTTP/1.1
Host: cmsbetconstruct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
date: Sun, 19 Mar 2023 13:11:43 GMT
content-type: text/html
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67ddaeeb4ee-OSL
content-encoding: br
X-Firefox-Spdy: h2
assetscdn-wchat.freshchat.com/static/assets/3799.js
200 OK 0 B URL HTTP/2 assetscdn-wchat.freshchat.com/static/assets/3799.js
IP
GET /static/assets/3799.js HTTP/1.1
Host: assetscdn-wchat.freshchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wchat.freshchat.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Wed, 01 Mar 2023 18:22:23 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
date: Sun, 19 Mar 2023 13:11:20 GMT
cache-control: max-age=31536000, no-transform, public
expires: Tue, 12 Mar 2024 12:19:14 GMT
etag: W/"8180076189d919f05b9c73b7c659821f"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 5NrhPQsGLy4IrxAGR-X_WdOGLFpjo4cK2Mh1TZvU7cTKg5PKY4G50Q==
age: 27
X-Firefox-Spdy: h2
cmsbetconstruct.com/content/images/payments/default/12645.png?2023-03-17%2017:13:33
404 Not Found 0 B URL HTTP/2 cmsbetconstruct.com/content/images/payments/default/12645.png?2023-03-17%2017:13:33
IP
ASN #209242 Cloudflare London, LLC
GET /content/images/payments/default/12645.png?2023-03-17%2017:13:33 HTTP/1.1
Host: cmsbetconstruct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
date: Sun, 19 Mar 2023 13:11:43 GMT
content-type: text/html
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67e0b59b4ee-OSL
content-encoding: br
X-Firefox-Spdy: h2
assetscdn-wchat.freshchat.com/static/assets/8627.css
200 OK 0 B URL HTTP/2 assetscdn-wchat.freshchat.com/static/assets/8627.css
IP
GET /static/assets/8627.css HTTP/1.1
Host: assetscdn-wchat.freshchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wchat.freshchat.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: text/css
last-modified: Wed, 01 Mar 2023 18:22:23 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
date: Sun, 19 Mar 2023 13:08:26 GMT
cache-control: max-age=31536000, no-transform, public
expires: Tue, 12 Mar 2024 12:19:14 GMT
etag: W/"20f054b8b45ccd177447feada77d0895"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: pbZYgoqo9jKJ2C6QFtLpGWHzJW4vT80IaGHjrNiagsm5y0gWkMEwTg==
age: 201
X-Firefox-Spdy: h2
assetscdn-wchat.freshchat.com/static/assets/vendor.d64d219ca4493f67a3970efc52d51c86.css
200 OK 0 B URL HTTP/2 assetscdn-wchat.freshchat.com/static/assets/vendor.d64d219ca4493f67a3970efc52d51c86.css
IP
GET /static/assets/vendor.d64d219ca4493f67a3970efc52d51c86.css HTTP/1.1
Host: assetscdn-wchat.freshchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wchat.freshchat.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: text/css
last-modified: Wed, 01 Mar 2023 18:22:26 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
date: Sun, 19 Mar 2023 13:09:15 GMT
cache-control: max-age=31536000, no-transform, public
expires: Tue, 12 Mar 2024 12:19:14 GMT
etag: W/"d64d219ca4493f67a3970efc52d51c86"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: UASaQ8WRMMBu0vYWZZTovC0o0efGMVcSQcfhgll4Bwqk3pKPCNwHcg==
age: 151
X-Firefox-Spdy: h2
assetscdn-wchat.freshchat.com/static/assets/chunk.2c1a6cd6879399512d75.js
200 OK 0 B URL HTTP/2 assetscdn-wchat.freshchat.com/static/assets/chunk.2c1a6cd6879399512d75.js
IP
GET /static/assets/chunk.2c1a6cd6879399512d75.js HTTP/1.1
Host: assetscdn-wchat.freshchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wchat.freshchat.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Mon, 13 Mar 2023 12:19:17 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
date: Sun, 19 Mar 2023 13:08:33 GMT
cache-control: max-age=31536000, no-transform, public
expires: Tue, 12 Mar 2024 12:19:14 GMT
etag: W/"04f7a1e380bbd89c19ac93a802a06915"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: qwE2C1kdojMsVNRUYV7Uhcj-1qL-n6wP3JCQzR4ZKVzqulswS-naEQ==
age: 193
X-Firefox-Spdy: h2
geoapi.bcapps.org/?type=json
200 OK 0 B URL HTTP/2 geoapi.bcapps.org/?type=json
IP
ASN #209242 Cloudflare London, LLC
GET /?type=json HTTP/1.1
Host: geoapi.bcapps.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.happistar8.net/
Origin: https://www.happistar8.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 19 Mar 2023 13:11:44 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/7.3.33
access-control-allow-origin: *
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f684c81eb4f9-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
geoapi.bcapps.org/?type=json
200 OK 0 B URL HTTP/2 geoapi.bcapps.org/?type=json
IP
ASN #209242 Cloudflare London, LLC
GET /?type=json HTTP/1.1
Host: geoapi.bcapps.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.happistar8.net
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 19 Mar 2023 13:11:42 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/7.3.33
access-control-allow-origin: *
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f6793857b4f9-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
assetscdn-wchat.freshchat.com/static/assets/chunk.11d90f755164bc5505e0.js
200 OK 0 B URL HTTP/2 assetscdn-wchat.freshchat.com/static/assets/chunk.11d90f755164bc5505e0.js
IP
GET /static/assets/chunk.11d90f755164bc5505e0.js HTTP/1.1
Host: assetscdn-wchat.freshchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wchat.freshchat.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Wed, 01 Mar 2023 18:22:24 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
date: Sun, 19 Mar 2023 13:10:41 GMT
cache-control: max-age=31536000, no-transform, public
expires: Tue, 12 Mar 2024 12:19:14 GMT
etag: W/"123f4c9f2c2093fb886435e7016642c1"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 6QSIvb-XaZA3ZIwm5ylaxOXKAU8FL_J64jSYtNQntphMsUdEUkAzRg==
age: 86
X-Firefox-Spdy: h2
assetscdn-wchat.freshchat.com/static/assets/chunk.860c072a320baf7f5418.css
200 OK 0 B URL HTTP/2 assetscdn-wchat.freshchat.com/static/assets/chunk.860c072a320baf7f5418.css
IP
GET /static/assets/chunk.860c072a320baf7f5418.css HTTP/1.1
Host: assetscdn-wchat.freshchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wchat.freshchat.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: text/css
last-modified: Mon, 13 Mar 2023 12:19:18 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
date: Sun, 19 Mar 2023 13:10:02 GMT
cache-control: max-age=31536000, no-transform, public
expires: Tue, 12 Mar 2024 12:19:14 GMT
etag: W/"293027913be8fbe8fa62062a65dfc83b"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 8MlBEofb9plB47RArg0fCLhwCssEOYZDg7iJJPm_sWUWHt2wisM5Hw==
age: 103
X-Firefox-Spdy: h2
503766172156844.webpush.freshchat.com/index.html?ref=aHR0cHM6Ly93d3cuaGFwcGlzdGFyOC5uZXQ=
200 OK 0 B URL HTTP/2 503766172156844.webpush.freshchat.com/index.html?ref=aHR0cHM6Ly93d3cuaGFwcGlzdGFyOC5uZXQ=
IP
GET /index.html?ref=aHR0cHM6Ly93d3cuaGFwcGlzdGFyOC5uZXQ= HTTP/1.1
Host: 503766172156844.webpush.freshchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html
date: Sun, 19 Mar 2023 13:11:47 GMT
last-modified: Fri, 25 Oct 2019 06:53:38 GMT
etag: W/"4d98f93ebe4eb8cedbbfdb3004920aeb"
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Akm6ybqk-RhknocxTClulsjmZGm8yiylxP349QF71zD6xiNLX9mt-Q==
X-Firefox-Spdy: h2
www.happistar8.net/
200 OK 0 B IP
ASN #209242 Cloudflare London, LLC
GET / HTTP/1.1
Host: www.happistar8.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Sun, 19 Mar 2023 13:11:39 GMT
content-type: text/html; charset=UTF-8
last-modified: Tue, 14 Mar 2023 12:42:11 GMT
vary: Accept-Encoding
expires: Sun, 19 Mar 2023 13:12:39 GMT
cache-control: max-age=60
set-cookie: SERVERID=s2; path=/
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2F4Pgx17C6K%2F%2FJyKhO8t6vsKCYNu8akNYwaecTbrxZC%2BEtsqTVjFeLiGwYCYqs8pBBbcCMPL%2BUa%2B1A3nc1BqQpcOXugmPu8dRzuksHXBc0qxp1Q82x%2BSJbXJno6HU8LyCsAtYx%2FM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7aa5f6667e1ab4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
snippets.freshchat.com/js/fc-pre-chat-form-v2.js
200 OK 0 B URL HTTP/2 snippets.freshchat.com/js/fc-pre-chat-form-v2.js
IP
GET /js/fc-pre-chat-form-v2.js HTTP/1.1
Host: snippets.freshchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Wed, 30 Oct 2019 14:01:49 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: UWrzWkM1Vl1xxtVMSb8eeNESFOI0z7L_
server: AmazonS3
content-encoding: gzip
date: Sun, 19 Mar 2023 13:09:30 GMT
cache-control: max-age=3600
etag: W/"51f673d97978560f5ed573102610961e"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: VVk-EIQUkaryDcYwoICGG9rNYavzupwjo8DtcEOv0vJvyu68S0iKow==
age: 141
X-Firefox-Spdy: h2
assetscdn-wchat.freshchat.com/static/assets/chunk.edcd0d986e5393aa5e0d.js
200 OK 0 B URL HTTP/2 assetscdn-wchat.freshchat.com/static/assets/chunk.edcd0d986e5393aa5e0d.js
IP
GET /static/assets/chunk.edcd0d986e5393aa5e0d.js HTTP/1.1
Host: assetscdn-wchat.freshchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wchat.freshchat.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Mon, 13 Mar 2023 12:19:19 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
date: Sun, 19 Mar 2023 13:11:46 GMT
cache-control: max-age=31536000, no-transform, public
expires: Tue, 12 Mar 2024 12:19:14 GMT
etag: W/"3f025ee74d6fa4216a08f29d75a85b4e"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Pw9CIUtKPkx3TRnxOP_ubgNYT4iKOp4mv0OEOuyo1Q5UbiLmkXC2Kw==
age: 33
X-Firefox-Spdy: h2
cmsbetconstruct.com/content/images/payments/default/8958.png?2023-03-17%2017:13:33
404 Not Found 0 B URL HTTP/2 cmsbetconstruct.com/content/images/payments/default/8958.png?2023-03-17%2017:13:33
IP
ASN #209242 Cloudflare London, LLC
GET /content/images/payments/default/8958.png?2023-03-17%2017:13:33 HTTP/1.1
Host: cmsbetconstruct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
date: Sun, 19 Mar 2023 13:11:43 GMT
content-type: text/html
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67deafeb4ee-OSL
content-encoding: br
X-Firefox-Spdy: h2
static.hotjar.com/c/hotjar-766701.js?sv=7
200 OK 0 B URL HTTP/2 static.hotjar.com/c/hotjar-766701.js?sv=7
IP
GET /c/hotjar-766701.js?sv=7 HTTP/1.1
Host: static.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
date: Sun, 19 Mar 2023 13:11:40 GMT
access-control-allow-origin: *
cache-control: max-age=60
content-encoding: br
cross-origin-resource-policy: cross-origin
etag: W/d4bdd382e80e4cb07fe92ab4aabfb0f9
strict-transport-security: max-age=2592000; includeSubDomains
x-cache-hit: 1
x-content-type-options: nosniff
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: gbr7wBHy5nZDlJgzufWc14Wte9GkojC7A3eW9RGCwdEpIv9zOUQFmg==
X-Firefox-Spdy: h2
qvdt3feo.com/events.js
200 OK 0 B IP
GET /events.js HTTP/1.1
Host: qvdt3feo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.happistar8.net/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 19 Mar 2023 13:11:41 GMT
content-type: text/javascript
access-control-allow-origin: *
cache-control: max-age=5
content-encoding: gzip
set-cookie: sa-user-id=s%3A0-4affe0f7-d2d1-5ef8-5ffa-3c7b3ac34e6a.Sxx%2BM%2BlpsbrHzyB2Rf0exT1zgnbpRn4%2B3xh6qnlECdE; Max-Age=31536000; Secure; SameSite=None
sa-user-id=s%3A0-4affe0f7-d2d1-5ef8-5ffa-3c7b3ac34e6a.Sxx%2BM%2BlpsbrHzyB2Rf0exT1zgnbpRn4%2B3xh6qnlECdE; Max-Age=31536000; Secure; SameSite=None
sa-user-id-v2=s%3ASv_g99LRXvhf-jx7OsNOaltaKpo.vKGdarGDDylK3CgBb4ic4Nw3I0tJwKdnD8LWhkzn3r8; Max-Age=31536000; Secure; SameSite=None
sa-user-id-v2=s%3ASv_g99LRXvhf-jx7OsNOaltaKpo.vKGdarGDDylK3CgBb4ic4Nw3I0tJwKdnD8LWhkzn3r8; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None
X-Firefox-Spdy: h2
rts-static-prod.freshworksapi.com/us/rts-min.js
200 OK 0 B URL HTTP/2 rts-static-prod.freshworksapi.com/us/rts-min.js
IP
GET /us/rts-min.js HTTP/1.1
Host: rts-static-prod.freshworksapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wchat.freshchat.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript
last-modified: Thu, 17 Nov 2022 06:29:55 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: BHs75.bKXbPkSsEMomQcy9Qw2gVgmqdU
server: AmazonS3
content-encoding: gzip
date: Sun, 19 Mar 2023 13:11:45 GMT
cache-control: no-cache
etag: W/"c4bb02a4c6be31fc499881d3abbbc6be"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: zURqpcBbiHfkBlkEm9oYGMZlJgRYrRPxgcg3PUe9LbJO2xnoQug5Nw==
age: 2
X-Firefox-Spdy: h2
cdn.adtrue.com/rtb/px.js?v=1.0
200 OK 0 B URL HTTP/2 cdn.adtrue.com/rtb/px.js?v=1.0
IP
GET /rtb/px.js?v=1.0 HTTP/1.1
Host: cdn.adtrue.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 19 Mar 2023 13:11:40 GMT
content-type: application/javascript
last-modified: Fri, 15 May 2020 04:54:24 GMT
etag: W/"5ebe2080-284"
expires: Wed, 13 Mar 2024 13:11:40 GMT
cache-control: max-age=31104000
access-control-allow-origin: *
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RldViWBKrvXDRu2211fCvVB8ronYkeC3lcXnDzuvOMOhyo28xq74PLtp75Aoiq%2Fl4VQf46CrteXu%2Bv3jYt3KdfJ9bbpBbTHd5R4A1NjeD1LxuI2h7H5GapOQ7iXRqgcAJg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7aa5f66b3f69b4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cmsbetconstruct.com/content/images/payments/custom/1876513/9755.png?2023-03-17%2017:13:33
404 Not Found 0 B URL HTTP/2 cmsbetconstruct.com/content/images/payments/custom/1876513/9755.png?2023-03-17%2017:13:33
IP
ASN #209242 Cloudflare London, LLC
GET /content/images/payments/custom/1876513/9755.png?2023-03-17%2017:13:33 HTTP/1.1
Host: cmsbetconstruct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
date: Sun, 19 Mar 2023 13:11:43 GMT
content-type: text/html
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67dcad8b4ee-OSL
content-encoding: br
X-Firefox-Spdy: h2
185.162.228.2
142.250.74.168
63.34.92.160
23.36.77.32
18.195.30.247
188.114.96.1
104.21.95.131
195.80.159.133
31.13.72.36