Overview

URLwww.happistar8.net/
IP 185.162.228.2 (Armenia)
ASN#209242 Cloudflare London, LLC
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Access public lock_open
Report completed2023-03-19 13:11:51 UTC
StatusLoading report..
IDS alerts3
Blocklist alert0
urlquery alerts No alerts detected
Tags None

Domain Summary (50)

Fully Qualifying Domain Name Rank First Seen Last Seen Sent bytes Received bytes IP Comment
www.googletagmanager.com (1) 75 2013-05-22T04:07:37Z 2023-03-26T05:35:01Z 384 82485 142.250.74.168
ocsp.r2m01.amazontrust.com (1) 0 2022-10-12T22:43:53Z 2023-03-26T05:22:59Z 350 968 54.230.80.227
push.services.mozilla.com (1) 2140 2014-10-24T10:27:06Z 2023-03-26T05:10:29Z 606 127 54.187.66.119
event.iconvert.network (2) 0 2019-09-18T11:07:20Z 2023-03-25T13:12:49Z 1024 27741 63.34.92.160
www.cmsbetconstruct.com (10) 378544 2016-09-02T02:48:17Z 2023-03-19T14:11:43Z 4770 3182412 185.162.228.3
snippets.freshchat.com (1) 48668 2018-04-05T12:14:10Z 2023-03-25T15:37:14Z 386 590 54.230.111.68
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03T13:26:46Z 2023-03-26T05:11:12Z 413 5894 34.160.144.191
tags.srv.stackadapt.com (4) 3857 2017-01-29T17:51:17Z 2023-03-26T06:24:16Z 1928 1789 3.219.162.91
assetscdn-wchat.freshchat.com (14) 17351 2018-11-12T08:05:40Z 2023-03-25T19:59:00Z 6028 533086 54.230.111.126
www.recaptcha.net (1) 2060 2012-07-11T16:32:37Z 2023-03-25T14:00:00Z 420 1086 142.250.74.131
googleads.g.doubleclick.net (1) 42 2021-02-20T16:43:32Z 2023-03-26T06:13:32Z 663 2003 142.250.74.98
www.gstatic.com (1) 0 2016-07-26T11:37:06Z 2023-03-26T05:56:25Z 447 165545 142.250.74.35
ocsp.sca1b.amazontrust.com (1) 1015 2017-03-03T16:20:51Z 2019-03-27T05:05:54Z 350 1005 54.230.245.110
wchat.freshchat.com (9) 10639 2017-09-20T09:05:21Z 2023-03-25T19:58:59Z 4790 52932 54.152.199.76
cdn.iconvert.network (1) 0 2020-03-29T05:58:37Z 2023-03-25T11:03:49Z 403 1467 54.230.111.129
4c993dfc-aa0e-4755-a7e3-22a3adb99bab.seals-xcm.certria.com (2) 0 2023-03-19T14:11:44Z 2023-03-19T14:11:44Z 887 54718 54.230.111.23
fc-use1-00-pics-bkt-00.s3.amazonaws.com (1) 32364 2017-09-22T19:13:28Z 2023-03-25T20:14:43Z 634 9211 3.5.25.173
ajax.googleapis.com (3) 12905 2013-08-16T11:51:31Z 2023-03-26T06:17:09Z 1232 68471 142.250.74.170
res.cloudinary.com (4) 2520 2012-10-03T10:31:44Z 2023-03-25T05:44:06Z 1866 142197 151.101.1.137
fonts.googleapis.com (1) 8877 2013-06-10T22:14:26Z 2023-03-26T06:22:54Z 419 58281 142.250.74.106
4ec9ae87-4fa3-435f-aab6-8ecbb4ebeb6c.snippet.antillephone.com (2) 0 2022-07-02T12:56:43Z 2023-03-19T14:11:44Z 893 51239 54.230.111.44
statistics.bcapps.org (9) 603192 2019-02-20T13:29:56Z 2023-03-25T10:56:08Z 3651 31931 185.162.231.249
www.google.no (1) 25607 2016-04-05T21:50:59Z 2023-03-25T18:49:55Z 642 641 142.250.74.163
static.hotjar.com (1) 641 2014-11-01T06:14:27Z 2023-03-26T05:09:01Z 379 624 54.230.111.113
firefox.settings.services.mozilla.com (2) 867 2020-06-04T22:08:41Z 2023-03-25T18:14:26Z 782 2374 35.241.9.150
contile.services.mozilla.com (1) 1114 2021-05-27T20:32:35Z 2023-03-26T05:11:59Z 333 391 34.117.237.239
region1.google-analytics.com (1) 0 2022-03-17T12:26:33Z 2023-03-26T05:15:01Z 632 449 216.239.32.36
r3.o.lencr.org (9) 344 2020-12-02T09:52:13Z 2023-03-25T18:12:03Z 3042 7976 23.36.77.32
ocsp.pki.goog (15) 175 2018-07-01T08:43:07Z 2023-03-26T05:10:41Z 5145 10491 142.250.74.131
semerviewdistains.com (1) 0 2021-09-14T12:06:07Z 2023-03-23T05:15:46Z 433 414 18.195.30.247
cdn.seondf.com (1) 200610 2021-07-27T16:12:20Z 2023-03-26T05:08:46Z 367 108763 188.114.96.1
script.hotjar.com (1) 887 2020-11-05T17:23:46Z 2023-03-26T05:09:02Z 387 69379 54.230.111.44
img-getpocket.cdn.mozilla.net (6) 1631 2018-06-22T01:36:00Z 2023-03-26T05:09:08Z 3245 55459 34.120.237.76
geo-lookup.iconvert.network (1) 0 2020-10-12T08:01:35Z 2023-03-25T11:03:50Z 384 399 54.230.111.95
www.google.com (1) 7 2015-05-10T13:11:19Z 2023-03-25T21:05:45Z 643 641 142.250.74.164
503766172156844.webpush.freshchat.com (2) 0 2022-07-02T12:56:45Z 2023-03-19T14:11:46Z 1033 4719 54.230.111.129
geoapi.bcapps.org (2) 384855 2019-02-02T07:33:13Z 2023-03-22T07:40:03Z 840 586 185.162.230.7
rts-static-prod.freshworksapi.com (1) 11635 2020-04-09T15:03:01Z 2023-03-25T19:59:00Z 386 577 54.230.111.67
cdn.adtrue.com (1) 52823 2016-08-12T08:28:31Z 2023-03-26T06:26:09Z 368 782 104.21.95.131
www.happistar8.net (2) 0 2022-09-25T11:32:40Z 2023-03-20T03:10:44Z 798 1438 185.162.228.2
cdnjs.cloudflare.com (1) 235 2015-04-17T22:46:33Z 2023-03-26T05:09:44Z 395 28976 104.17.24.14
l2.io (1) 163527 2015-06-25T03:31:26Z 2023-03-25T03:53:44Z 362 816323 195.80.159.133
www.google-analytics.com (1) 40 2012-10-03T03:04:21Z 2023-03-26T06:13:06Z 375 23968 142.250.74.78
ocsp.r2m02.amazontrust.com (4) 0 2022-10-12T16:01:39Z 2023-03-26T05:09:33Z 1400 3902 54.230.80.227
ocsp.digicert.com (1) 86 2012-05-21T09:02:23Z 2023-03-26T05:18:47Z 341 799 192.229.221.95
www.facebook.com (1) 99 2012-05-21T02:23:41Z 2021-02-04T00:31:35Z 421 349 31.13.72.36
eu-swarm-ws-re.deimosphobos.net (3) 0 2021-09-05T18:06:46Z 2023-03-19T14:11:42Z 1585 1690 185.162.228.4
cmsbetconstruct.com (62) 405599 2016-04-14T14:46:14Z 2023-03-25T10:56:06Z 29844 3500346 185.162.228.3
fonts.gstatic.com (2) 0 2014-09-09T02:40:21Z 2023-03-25T22:19:37Z 960 32562 216.58.207.227
qvdt3feo.com (1) 0 2022-05-17T08:56:36Z 2023-03-26T06:24:17Z 360 777 44.194.94.225

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
Timestamp Severity Source IP Destination IP Alert
2023-03-19 13:11:52 UTC medium Client IP Internal IP ET POLICY Observed IP Lookup Domain (l2 .io in DNS Lookup) 
2023-03-19 13:11:52 UTC medium Client IP Internal IP ET POLICY Observed IP Lookup Domain (l2 .io in DNS Lookup) 
2023-03-19 13:11:52 UTC medium Client IP  195.80.159.133 ET POLICY Observed IP Lookup Domain (l2 .io in TLS SNI) 

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
 No alerts detected

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected

ThreatFox
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 185.162.228.2
Date UQ / IDS / BL URL IP
2023-05-28 16:20:01 UTC 0 - 9 - 0 m.happistar.com/ 185.162.228.2
2023-05-10 11:47:58 UTC 0 - 14 - 0 promo.vbet.ua/vip-wheel?utm_campaign=x&utm_so (...) 185.162.228.2
2023-05-08 13:57:56 UTC 7 - 9 - 0 m.happistar.com/ 185.162.228.2
2023-05-08 11:32:00 UTC 0 - 14 - 0 promo.vbet.ua/vip-wheel?utm_campaign=x&utm_so (...) 185.162.228.2
2023-04-09 13:08:42 UTC 0 - 3 - 0 www.happistar.com/ 185.162.228.2


Last 5 reports on ASN: Cloudflare London, LLC
Date UQ / IDS / BL URL IP
2023-06-06 23:38:58 UTC 0 - 7 - 0 5wzgtq8dpk.com/ch/?btag=668718_68729E68C3DE4B (...) 45.8.107.137
2023-06-06 23:37:20 UTC 0 - 7 - 0 5wzgtq8dpk.com/ch/?btag=668718_F790EDBAEC4A4B (...) 45.8.107.137
2023-06-06 23:35:20 UTC 0 - 7 - 0 m.wazamba.com/ch/?btag=668718_8D0004F1C041481 (...) 45.8.107.169
2023-06-06 22:28:51 UTC 0 - 7 - 0 email.tracers.com/e3t/Ctc/T9+113/cLZPH04/VX7t (...) 199.60.103.31
2023-06-06 21:10:01 UTC 0 - 2 - 0 info.fitsolutions.biz/hs-fs/hubfs/FitCybersec (...) 199.60.103.28


Last 3 reports on domain: happistar8.net
Date UQ / IDS / BL URL IP
2023-03-22 06:40:12 UTC 0 - 3 - 0 www.happistar8.net/ 185.162.228.2
2023-03-22 06:40:14 UTC 0 - 9 - 0 m.happistar8.net/ 185.162.228.2
2023-03-19 13:11:51 UTC 0 - 3 - 0 www.happistar8.net/ 185.162.228.2


Last 1 reports with similar screenshot
Date UQ / IDS / BL URL IP
2023-03-22 06:40:12 UTC 0 - 3 - 0 www.happistar8.net/ 185.162.228.2

JavaScript

Executed Scripts (51)

Executed Evals (5)
#1 JavaScript::Eval (size: 22) - SHA256: 15f9eaa0da090c05589797c3a55d7ee16cf1400cba5c613f92bbaf20b21e8fc3
0,
function(t) {
    nB(t, 1)
}
#2 JavaScript::Eval (size: 15606) - SHA256: bd5b0142ba97c2a7779ab45c3e066dd82958b7dd7e14681a31dbbf86bd6e61ed
/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */
(function() {
    var y = function(C) {
            return C
        },
        n = function(C, t) {
            if (C = (t = M.trustedTypes, null), !t || !t.createPolicy) return C;
            try {
                C = t.createPolicy("bg", {
                    createHTML: y,
                    createScript: y,
                    createScriptURL: y
                })
            } catch (F) {
                M.console && M.console.error(F.message)
            }
            return C
        },
        M = this || self;
    (0, eval)(function(C, t) {
        return (t = n()) && 1 === C.eval(t.createScript("1")) ? function(F) {
            return t.createScript(F)
        } : function(F) {
            return "" + F
        }
    }(M)(Array(7824 * Math.random() | 0).join("\n") + '(function(){var CB=function(C,F,y){if(3==C.length){for(y=0;3>y;y++)F[y]+=C[y];for(y=(C=[13,8,13,12,16,5,3,10,15],0);9>y;y++)F[3](F,y%3,C[y])}},FV=function(C,F,y,M){function m(){}return{invoke:(M=t8(C,(y=void 0,function(t){m&&(F&&X(F),y=t,m(),m=void 0)}),!!F)[0],function(t,n,H,Y){function O(){y(function(Q){X(function(){t(Q)})},H)}if(!n)return n=M(H),t&&t(n),n;y?O():(Y=m,m=function(){Y(),X(O)})})}},yz=function(C,F,y,M,m){for(y=(m=y[2]|0,y[3]|0),M=0;16>M;M++)F=F>>>8|F<<24,F+=C|0,F^=m+755,C=C<<3|C>>>29,C^=F,y=y>>>8|y<<24,y+=m|0,m=m<<3|m>>>29,y^=M+755,m^=y;return[C>>>24&255,C>>>16&255,C>>>8&255,C>>>0&255,F>>>24&255,F>>>16&255,F>>>8&255,F>>>0&255]},e=function(C){return C.X?MB(C.s,C):J(8,C,true)},f=this||self,nB=function(C,F,y,M){for(M=(y=T(C),0);0<F;F--)M=M<<8|e(C);k(y,C,M)},g=function(C,F,y,M,m,t){if(F.G==F)for(t=G(C,F),405==C?(C=function(n,H,Y,O,Q){if(t.u_!=(Y=(H=t.length,(H|0)-4>>3),Y)){O=(Q=(Y<<3)-4,[0,0,m[1],(t.u_=Y,m[2])]);try{t.XF=yz(Hd(t,Q),Hd(t,(Q|0)+4),O)}catch(u){throw u;}}t.push(t.XF[H&7]^n)},m=G(411,F)):C=function(n){t.push(n)},M&&C(M&255),F=y.length,M=0;M<F;M++)C(y[M])},me=function(C,F){return(F=e(C),F&128)&&(F=F&127|e(C)<<7),F},P=function(C,F,y){y[k(F,C,y),YY]=2796},J8=function(C,F,y,M,m){if(y=F[0],y==b)C.I=25,C.K(F);else if(y==V){m=F[1];try{M=C.A||C.K(F)}catch(t){E(t,C),M=C.A}m(M)}else if(y==Oj)C.K(F);else if(y==U)C.K(F);else if(y==XV){try{for(M=0;M<C.C.length;M++)try{m=C.C[M],m[0][m[1]](m[2])}catch(t){}}catch(t){}(0,F[1])(function(t,n){C.V(t,true,n)},(C.C=[],function(t){(l(C,(t=!C.l.length,[ir])),t)&&w(true,false,C)}))}else{if(y==D)return M=F[2],k(272,C,F[6]),k(14,C,M),C.K(F);y==ir?(C.g=null,C.O=[],C.L=[]):y==YY&&"loading"===f.document.readyState&&(C.h=function(t,n){function H(){n||(n=true,t())}(f.document.addEventListener("DOMContentLoaded",H,(n=false,I)),f).addEventListener("load",H,I)})}},t8=function(C,F,y,M){return(M=R[C.substring(0,3)+"_"])?M(C.substring(3),F,y):Qz(F,C)},ur=function(C,F,y,M){(y=(M=T(F),T(F)),g)(y,F,z(G(M,F),C))},fB=function(C,F){if(F=null,C=f.trustedTypes,!C||!C.createPolicy)return F;try{F=C.createPolicy("bg",{createHTML:sj,createScript:sj,createScriptURL:sj})}catch(y){f.console&&f.console.error(y.message)}return F},sj=function(C){return C},vd=function(C,F,y){return C.V(function(M){y=M},false,F),y},Hd=function(C,F){return C[F]<<24|C[(F|0)+1]<<16|C[(F|0)+2]<<8|C[(F|0)+3]},c=function(C,F,y,M,m,t,n,H,Y){if(((t=(n=(m=(Y=(F||M.j++,0<M.S&&M.o&&M.yF&&1>=M.Y&&!M.X)&&!M.h&&(!F||1<M.H-y)&&0==document.hidden,H=4==M.j)||Y?M.F():M.v,m)-M.v,n)>>14,M.P)&&(M.P^=t*(n<<2)),M.U+=t,M).G=t||M.G,H||Y)M.j=0,M.v=m;if(!Y||m-M.D<M.S-(C?255:F?5:2))return false;return M.h=(k(267,(C=(M.H=y,G(F?459:267,M)),M),M.Z),M.l.push([Oj,C,F?y+1:y]),X),true},pB=function(C,F,y){if((F=typeof C,"object")==F)if(C){if(C instanceof Array)return"array";if(C instanceof Object)return F;if(y=Object.prototype.toString.call(C),"[object Window]"==y)return"object";if("[object Array]"==y||"number"==typeof C.length&&"undefined"!=typeof C.splice&&"undefined"!=typeof C.propertyIsEnumerable&&!C.propertyIsEnumerable("splice"))return"array";if("[object Function]"==y||"undefined"!=typeof C.call&&"undefined"!=typeof C.propertyIsEnumerable&&!C.propertyIsEnumerable("call"))return"function"}else return"null";else if("function"==F&&"undefined"==typeof C.call)return"object";return F},r=function(C,F,y,M,m,t){if(!y.N){if(3<(F=G((C=(0==(m=void 0,F&&F[0]===d&&(m=F[2],C=F[1],F=void 0),M=G(320,y),M.length)&&(t=G(459,y)>>3,M.push(C,t>>8&255,t&255),void 0!=m&&M.push(m&255)),""),F&&(F.message&&(C+=F.message),F.stack&&(C+=":"+F.stack)),344),y),F)){(m=(C=(F-=(C=C.slice(0,(F|0)-3),C.length|0)+3,Tw(C)),y.G),y).G=y;try{g(405,y,z(C.length,2).concat(C),9)}finally{y.G=m}}k(344,y,F)}},xY=function(C,F){(F.nz.push(F.g.slice()),F).g[267]=void 0,k(267,F,C)},l=function(C,F){C.l.splice(0,0,F)},I={passive:true,capture:true},Tw=function(C,F,y,M,m){for(M=y=(C=C.replace(/\\r\\n/g,"\\n"),m=[],0);M<C.length;M++)F=C.charCodeAt(M),128>F?m[y++]=F:(2048>F?m[y++]=F>>6|192:(55296==(F&64512)&&M+1<C.length&&56320==(C.charCodeAt(M+1)&64512)?(F=65536+((F&1023)<<10)+(C.charCodeAt(++M)&1023),m[y++]=F>>18|240,m[y++]=F>>12&63|128):m[y++]=F>>12|224,m[y++]=F>>6&63|128),m[y++]=F&63|128);return m},k=function(C,F,y){if(267==C||459==C)F.g[C]?F.g[C].concat(y):F.g[C]=KB(F,y);else{if(F.N&&221!=C)return;494==C||405==C||184==C||320==C||411==C?F.g[C]||(F.g[C]=kY(C,86,y,F)):F.g[C]=kY(C,137,y,F)}221==C&&(F.P=J(32,F,false),F.i=void 0)},kY=function(C,F,y,M,m,t,n,H){return(m=h[y=[91,77,-53,-4,(H=F&7,-67),89,y,(t=Gw,51),82,-10],M.u](M.Gt),m[M.u]=function(Y){H+=6+(n=Y,7*F),H&=7},m).concat=function(Y){return(Y=(n=(Y=(Y=C%16+1,-Y*n+62*n*n+y[H+35&7]*C*Y+(t()|0)*Y-4774*C*n+1*C*C*Y- -3286*n+H-62*C*C*n),void 0),y[Y]),y)[(H+13&7)+(F&2)]=Y,y[H+(F&2)]=77,Y},m},R,ZM=function(C,F,y,M){return G(14,(k(267,(gb(F,(M=G(267,F),F.O&&M<F.Z?(k(267,F,F.Z),xY(C,F)):k(267,F,C),y)),F),M),F))},z=function(C,F,y,M){for(y=(M=(F|0)-1,[]);0<=M;M--)y[(F|0)-1-(M|0)]=C>>8*M&255;return y},Qz=function(C,F){return[(C(function(y){y(F)}),function(){return F})]},Pd=function(C,F,y,M,m,t){function n(){if(C.G==C){if(C.g){var H=[D,y,M,void 0,m,t,arguments];if(2==F)var Y=w(false,false,(l(C,H),C));else if(1==F){var O=!C.l.length;(l(C,H),O)&&w(false,false,C)}else Y=J8(C,H);return Y}m&&t&&m.removeEventListener(t,n,I)}}return n},br=function(C,F,y,M){try{M=C[((F|0)+2)%3],C[F]=(C[F]|0)-(C[((F|0)+1)%3]|0)-(M|0)^(1==F?M<<y:M>>>y)}catch(m){throw m;}},Vz=function(C,F){return h[F](h.prototype,{prototype:C,replace:C,floor:C,length:C,pop:C,splice:C,parent:C,document:C,call:C,propertyIsEnumerable:C,stack:C,console:C})},SB=function(C,F,y,M,m){for(m=(C.pz=(C.i_=(C.ao=$Y,C)[V],Bd),C.Gt=Vz({get:function(){return this.concat()}},C.u),C.Z$=h[C.u](C.Gt,{value:{value:{}}}),M=0,[]);322>M;M++)m[M]=String.fromCharCode(M);(l(C,((P(C,(P(C,176,(k(208,(P((P(C,(P(C,(k(376,(P(C,((P(C,(P(C,440,(P(C,(P(C,(P(C,(C.vk=(k(211,(k(5,(P(C,292,(k(405,C,(k(494,C,[160,(P((P(C,169,(k(411,C,[0,0,(k(188,C,(P(C,(P(C,(P(C,178,(((P(C,(P(C,356,(P(C,(P(C,217,(P(C,378,(k(344,C,(C.D$=(P(C,92,(k(320,C,(k(14,C,(k(184,(P(C,427,(k(459,(k(267,C,(C.FF=(C.b_=0,C.X=(C.v=0,C.g=[],C.h=null,M=window.performance||{},C.H=8001,C.W=0,C.yF=false,((C.i=void 0,C).P=void 0,C.l_=(C.Z=0,function(t){this.G=t}),C.J=void 0,(C.L=[],C).A=void 0,C.Y=(C.o=false,C.G=C,C.nz=[],C.s=void 0,0),C.U=(C.O=(C.I=25,C.j=void 0,[]),1),C).C=(C.D=0,[]),void 0),(C.l=[],C.N=false,C).S=0,M.timeOrigin)||(M.timing||{}).navigationStart||0,0)),C),0),function(t,n,H){k((n=(H=T(t),T)(t),n),t,""+G(H,t))})),C),[]),{})),[])),function(t,n){n=T(t),t=G(n,t.G),t[0].removeEventListener(t[1],t[2],I)})),0),2048)),function(t,n,H,Y){k((n=(Y=T(t),H=T(t),T)(t),n),t,G(Y,t)||G(H,t))})),function(t){nB(t,4)})),C.Kz=0,240),function(t,n,H,Y){(n=G((Y=(H=T((Y=T(t),t)),G)(Y,t),H),t),k)(H,t,n+Y)}),function(t,n,H,Y,O,Q,u,K,p,S,x,v){function L(Z,B){for(;n<Z;)H|=e(t)<<n,n+=8;return H>>=(B=H&(1<<Z)-(n-=Z,1),Z),B}for(v=(x=p=(S=((H=n=(O=T(t),0),L(3))|0)+1,u=L(5),0),[]);p<u;p++)Y=L(1),v.push(Y),x+=Y?0:1;for(K=(x=(p=((x|0)-1).toString(2).length,0),[]);x<u;x++)v[x]||(K[x]=L(p));for(p=0;p<u;p++)v[p]&&(K[p]=T(t));for(Q=[];S--;)Q.push(G(T(t),t));P(t,O,function(Z,B,eB,a,N){for(N=(eB=[],[]),B=0;B<u;B++){if(a=K[B],!v[B]){for(;a>=N.length;)N.push(T(Z));a=N[a]}eB.push(a)}Z.s=KB(Z,(Z.X=KB(Z,Q.slice()),eB))})})),142),function(t,n,H,Y,O){(O=T((H=(n=T(t),T(t)),t)),t.G==t)&&(H=G(H,t),Y=G(n,t),O=G(O,t),Y[H]=O,221==n&&(t.i=void 0,2==H&&(t.P=J(32,t,false),t.i=void 0)))}),P)(C,407,function(t,n,H,Y){!c(false,true,n,t)&&(n=Uj(t),H=n.rF,Y=n.R,t.G==t||Y==t.l_&&H==t)&&(k(n.gF,t,Y.apply(H,n.T)),t.v=t.F())}),P)(C,342,function(t,n,H,Y,O){(Y=(n=(n=(H=(O=T(t),T(t)),T)(t),Y=T(t),G)(n,t),H=G(H,t),G)(Y,t),k)(O,t,Pd(t,Y,H,n))}),function(t,n,H,Y,O,Q){if(!c(true,true,n,t)){if("object"==(t=(O=G((Q=G((n=(O=(n=(Q=T(t),T(t)),H=T(t),T(t)),G(n,t)),Q),t),O),t),G)(H,t),pB)(Q)){for(Y in H=[],Q)H.push(Y);Q=H}for(H=(Y=(t=0<t?t:1,0),Q).length;Y<H;Y+=t)n(Q.slice(Y,(Y|0)+(t|0)),O)}})),386),function(t,n,H,Y){k((n=(H=e((Y=T(t),t)),T(t)),n),t,G(Y,t)>>>H)}),314),function(t){ur(1,t)}),P(C,238,function(t){ur(4,t)}),0)),0)]),function(t,n,H,Y){k((H=(n=G((Y=T((n=(H=T(t),T(t)),t)),n),t),G(H,t)),Y),t,H[n])})),C),332,function(t){lr(t,3)}),0),0]),q(4))),function(t,n,H,Y){n=G((H=(n=T(t),H=T(t),Y=T(t),G(H,t)),n),t),k(Y,t,n in H|0)})),C),C),C),f),0),437),function(t,n,H){0!=G((n=T(t),H=T(t),H=G(H,t),n),t)&&k(267,t,H)}),337),function(t){lr(t,4)}),157),function(t,n,H,Y,O,Q,u){for(Q=(H=(Y=(O=T(t),me)(t),u="",G(113,t)),H.length),n=0;Y--;)n=((n|0)+(me(t)|0))%Q,u+=m[H[n]];k(O,t,u)}),function(){})),147),function(t,n,H,Y){if(n=t.nz.pop()){for(H=e(t);0<H;H--)Y=T(t),n[Y]=t.g[Y];t.g=(n[n[320]=t.g[320],344]=t.g[344],n)}else k(267,t,t.Z)}),P)(C,339,function(t,n,H,Y,O){for(H=(n=(O=(Y=T(t),me(t)),0),[]);n<O;n++)H.push(e(t));k(Y,t,H)}),357),function(t,n,H){c(false,true,n,t)||(n=T(t),H=T(t),k(H,t,function(Y){return eval(Y)}(Ej(G(n,t.G)))))}),C),643),454),function(t,n){(n=G(T(t),t),xY)(n,t.G)}),408),function(t,n,H){k((n=(n=G((H=(n=T(t),T(t)),n),t),pB(n)),H),t,n)}),C),224,function(t,n,H,Y){Y=(n=(H=T((n=(Y=T(t),T(t)),t)),G(n,t)),G)(Y,t)==n,k(H,t,+Y)}),C),0),function(t,n,H,Y,O,Q){c(false,true,n,t)||(Q=Uj(t.G),n=Q.rF,O=Q.T,Y=Q.R,Q=Q.gF,H=O.length,n=0==H?new n[Y]:1==H?new n[Y](O[0]):2==H?new n[Y](O[0],O[1]):3==H?new n[Y](O[0],O[1],O[2]):4==H?new n[Y](O[0],O[1],O[2],O[3]):2(),k(Q,t,n))})),287),function(t,n,H,Y,O){0!==(H=(Y=(O=(n=(H=(Y=T(t),T(t)),T)(t),T(t)),G(Y,t.G)),O=G(O,t),G(H,t)),n=G(n,t),Y)&&(n=Pd(t,1,n,O,Y,H),Y.addEventListener(H,n,I),k(208,t,[Y,H,n]))}),l(C,[YY]),l)(C,[U,F]),[XV,y])),w)(true,true,C)},W,lr=function(C,F,y,M,m){((m=(y=(m=T((M=F&3,F&=4,C)),T)(C),G(m,C)),F)&&(m=Tw(""+m)),M&&g(y,C,z(m.length,2)),g)(y,C,m)},Uj=function(C,F,y,M,m,t){for(t=(M=((F=T((m=C[LB]||{},C)),m.gF=T(C),m).T=[],C.G==C?(e(C)|0)-1:1),y=T(C),0);t<M;t++)m.T.push(T(C));for(m.rF=G(y,C),m.R=G(F,C);M--;)m.T[M]=G(m.T[M],C);return m},G=function(C,F){if(F=F.g[C],void 0===F)throw[d,30,C];if(F.value)return F.create();return F.create(1*C*C+77*C+-53),F.prototype},T=function(C,F){if(C.X)return MB(C.s,C);return(F=J(8,C,true),F&128)&&(F^=128,C=J(2,C,true),F=(F<<2)+(C|0)),F},E=function(C,F){F.A=((F.A?F.A+"~":"E:")+C.message+":"+C.stack).slice(0,2048)},A=function(C,F,y){y=this;try{SB(this,F,C)}catch(M){E(M,this),C(function(m){m(y.A)})}},J=function(C,F,y,M,m,t,n,H,Y,O,Q,u,K,p){if((Y=G(267,F),Y)>=F.Z)throw[d,31];for(H=(Q=(n=(u=0,C),F.i_.length),Y);0<n;)t=H>>3,K=F.O[t],m=H%8,O=8-(m|0),O=O<n?O:n,y&&(M=F,M.i!=H>>6&&(M.i=H>>6,p=G(221,M),M.J=yz(M.P,M.i,[0,0,p[1],p[2]])),K^=F.J[t&Q]),H+=O,u|=(K>>8-(m|0)-(O|0)&(1<<O)-1)<<(n|0)-(O|0),n-=O;return k(267,F,(Y|(y=u,0))+(C|0)),y},MB=function(C,F){return(C=C.create().shift(),F.X).create().length||F.s.create().length||(F.X=void 0,F.s=void 0),C},X=f.requestIdleCallback?function(C){requestIdleCallback(function(){C()},{timeout:4})}:f.setImmediate?function(C){setImmediate(C)}:function(C){setTimeout(C,0)},w=function(C,F,y,M,m,t){if(y.l.length){y.yF=(y.o=(y.o&&0(),true),C);try{t=y.F(),y.v=t,y.j=0,y.D=t,m=wb(C,y),M=y.F()-y.D,y.W+=M,M<(F?0:10)||0>=y.I--||(M=Math.floor(M),y.L.push(254>=M?M:254))}finally{y.o=false}return m}},DM=function(C,F){F.push(C[0]<<24|C[1]<<16|C[2]<<8|C[3]),F.push(C[4]<<24|C[5]<<16|C[6]<<8|C[7]),F.push(C[8]<<24|C[9]<<16|C[10]<<8|C[11])},gb=function(C,F,y,M,m,t){if(!C.A){C.Y++;try{for(t=(y=0,void 0),M=C.Z;--F;)try{if((m=void 0,C).X)t=MB(C.X,C);else{if(y=G(267,C),y>=M)break;t=(m=(k(459,C,y),T)(C),G(m,C))}c(false,false,(t&&t[ir]&2048?t(C,F):r(0,[d,21,m],C),F),C)}catch(n){G(376,C)?r(22,n,C):k(376,C,n)}if(!F){if(C.EG){gb(C,(C.Y--,148005666396));return}r(0,[d,33],C)}}catch(n){try{r(22,n,C)}catch(H){E(H,C)}}C.Y--}},q=function(C,F){for(F=[];C--;)F.push(255*Math.random()|0);return F},wb=function(C,F,y,M){for(;F.l.length;){M=(F.h=null,F.l.pop());try{y=J8(F,M)}catch(m){E(m,F)}if(C&&F.h){C=F.h,C(function(){w(true,true,F)});break}}return y},KB=function(C,F,y){return(y=h[C.u](C.Z$),y)[C.u]=function(){return F},y.concat=function(M){F=M},y},LB=String.fromCharCode(105,110,116,101,103,67,104,101,99,107,66,121,112,97,115,115),b=[],D=[],XV=((A.prototype.B=(A.prototype.oo=void 0,"toString"),A).prototype.YT=void 0,[]),V=[],Oj=(A.prototype.EG=false,[]),YY=[],ir=[],d={},U=[],h=((((DM,function(){})(q),function(){})(br),function(){})(CB),d).constructor,Gw=((((((W=A.prototype,A.prototype.u="create",W.V=function(C,F,y,M,m){if((y="array"===pB(y)?y:[y],this).A)C(this.A);else try{M=!this.l.length,m=[],l(this,[b,m,y]),l(this,[V,C,m]),F&&!M||w(F,true,this)}catch(t){E(t,this),C(this.A)}},W).sG=function(C,F,y,M,m){for(m=M=0;M<C.length;M++)m+=C.charCodeAt(M),m+=m<<10,m^=m>>6;return M=(C=(m+=m<<3,m^=m>>11,m+(m<<15))>>>0,new Number(C&(1<<F)-1)),M[0]=(C>>>F)%y,M},W).dF=0,W).F=(window.performance||{}).now?function(){return this.FF+window.performance.now()}:function(){return+new Date},W).Tt=function(){return Math.floor(this.W+(this.F()-this.D))},W).OG=function(C,F,y,M,m,t){for(t=(M=y=0,[]);M<C.length;M++)for(y+=F,m=m<<F|C[M];7<y;)y-=8,t.push(m>>y&255);return t},void 0);((W.mk=function(C,F,y){return C^((F=(F^=F<<13,F^=F>>17,(F^F<<5)&y))||(F=1),F)},W.AD=function(){return Math.floor(this.F())},A).prototype.K=function(C,F){return F=(Gw=function(){return C==F?-53:10},C={},{}),function(y,M,m,t,n,H,Y,O,Q,u,K,p,S,x,v){p=C,C=F;try{if(x=y[0],x==U){n=y[1];try{for(u=atob((M=H=0,n)),v=[];M<u.length;M++)K=u.charCodeAt(M),255<K&&(v[H++]=K&255,K>>=8),v[H++]=K;k(221,this,(this.Z=(this.O=v,this).O.length<<3,[0,0,0]))}catch(L){r(17,L,this);return}gb(this,8001)}else if(x==b)y[1].push(G(184,this).length,G(494,this).length,G(405,this).length,G(344,this)),k(14,this,y[2]),this.g[232]&&ZM(G(232,this),this,8001);else{if(x==V){Y=(S=z((H=y[2],G(494,this).length|0)+2,2),this.G),this.G=this;try{m=G(320,this),0<m.length&&g(494,this,z(m.length,2).concat(m),10),g(494,this,z(this.U,1),109),g(494,this,z(this[V].length,1)),u=0,u+=G(188,this)&2047,u-=(G(494,this).length|0)+5,O=G(405,this),4<O.length&&(u-=(O.length|0)+3),0<u&&g(494,this,z(u,2).concat(q(u)),15),4<O.length&&g(494,this,z(O.length,2).concat(O),156)}finally{this.G=Y}if(Q=(v=q(2).concat(G(494,this)),v[1]=v[0]^6,v[3]=v[1]^S[0],v[4]=v[1]^S[1],this.QF(v)))Q="!"+Q;else for(Q="",u=0;u<v.length;u++)t=v[u][this.B](16),1==t.length&&(t="0"+t),Q+=t;return k(344,this,(G(405,(G(((M=Q,G(184,this)).length=H.shift(),494),this).length=H.shift(),this)).length=H.shift(),H.shift())),M}if(x==Oj)ZM(y[1],this,y[2]);else if(x==D)return ZM(y[1],this,8001)}}finally{C=p}}}(),A).prototype.Pk=0;var Bd,$Y=((A.prototype.QF=function(C,F,y,M){if(F=window.btoa){for(y=(M="",0);y<C.length;y+=8192)M+=String.fromCharCode.apply(null,C.slice(y,y+8192));C=F(M).replace(/\\+/g,"-").replace(/\\//g,"_").replace(/=/g,"")}else C=void 0;return C},A.prototype[XV]=[0,0,1,1,0,1,1],A).prototype.tD=0,/./),Is=U.pop.bind(A.prototype[b]),Ej=function(C,F){return(F=fB())&&1===C.eval(F.createScript("1"))?function(y){return F.createScript(y)}:function(y){return""+y}}((($Y[A.prototype.B]=Is,Bd=Vz({get:Is},A.prototype.u),A.prototype).hD=void 0,f));(R=f.botguard||(f.botguard={}),40<R.m||(R.m=41,R.bg=FV,R.a=t8),R).Vxh_=function(C,F,y){return[(y=new A(F,C),function(M){return vd(y,M)})]};}).call(this);'));
}).call(this);
#3 JavaScript::Eval (size: 22833) - SHA256: 8936417bb8349f8e61e34948c8e0814f5ab7d9bd0763ddb3df2fb9424c334543
(function() {
    var CB = function(C, F, y) {
            if (3 == C.length) {
                for (y = 0; 3 > y; y++) F[y] += C[y];
                for (y = (C = [13, 8, 13, 12, 16, 5, 3, 10, 15], 0); 9 > y; y++) F[3](F, y % 3, C[y])
            }
        },
        FV = function(C, F, y, M) {
            function m() {}
            return {
                invoke: (M = t8(C, (y = void 0, function(t) {
                    m && (F && X(F), y = t, m(), m = void 0)
                }), !!F)[0], function(t, n, H, Y) {
                    function O() {
                        y(function(Q) {
                            X(function() {
                                t(Q)
                            })
                        }, H)
                    }
                    if (!n) return n = M(H), t && t(n), n;
                    y ? O() : (Y = m, m = function() {
                        Y(), X(O)
                    })
                })
            }
        },
        yz = function(C, F, y, M, m) {
            for (y = (m = y[2] | 0, y[3] | 0), M = 0; 16 > M; M++) F = F >>> 8 | F << 24, F += C | 0, F ^= m + 755, C = C << 3 | C >>> 29, C ^= F, y = y >>> 8 | y << 24, y += m | 0, m = m << 3 | m >>> 29, y ^= M + 755, m ^= y;
            return [C >>> 24 & 255, C >>> 16 & 255, C >>> 8 & 255, C >>> 0 & 255, F >>> 24 & 255, F >>> 16 & 255, F >>> 8 & 255, F >>> 0 & 255]
        },
        e = function(C) {
            return C.X ? MB(C.s, C) : J(8, C, true)
        },
        f = this || self,
        nB = function(C, F, y, M) {
            for (M = (y = T(C), 0); 0 < F; F--) M = M << 8 | e(C);
            k(y, C, M)
        },
        g = function(C, F, y, M, m, t) {
            if (F.G == F)
                for (t = G(C, F), 405 == C ? (C = function(n, H, Y, O, Q) {
                        if (t.u_ != (Y = (H = t.length, (H | 0) - 4 >> 3), Y)) {
                            O = (Q = (Y << 3) - 4, [0, 0, m[1], (t.u_ = Y, m[2])]);
                            try {
                                t.XF = yz(Hd(t, Q), Hd(t, (Q | 0) + 4), O)
                            } catch (u) {
                                throw u;
                            }
                        }
                        t.push(t.XF[H & 7] ^ n)
                    }, m = G(411, F)) : C = function(n) {
                        t.push(n)
                    }, M && C(M & 255), F = y.length, M = 0; M < F; M++) C(y[M])
        },
        me = function(C, F) {
            return (F = e(C), F & 128) && (F = F & 127 | e(C) << 7), F
        },
        P = function(C, F, y) {
            y[k(F, C, y), YY] = 2796
        },
        J8 = function(C, F, y, M, m) {
            if (y = F[0], y == b) C.I = 25, C.K(F);
            else if (y == V) {
                m = F[1];
                try {
                    M = C.A || C.K(F)
                } catch (t) {
                    E(t, C), M = C.A
                }
                m(M)
            } else if (y == Oj) C.K(F);
            else if (y == U) C.K(F);
            else if (y == XV) {
                try {
                    for (M = 0; M < C.C.length; M++) try {
                        m = C.C[M], m[0][m[1]](m[2])
                    } catch (t) {}
                } catch (t) {}(0, F[1])(function(t, n) {
                    C.V(t, true, n)
                }, (C.C = [], function(t) {
                    (l(C, (t = !C.l.length, [ir])), t) && w(true, false, C)
                }))
            } else {
                if (y == D) return M = F[2], k(272, C, F[6]), k(14, C, M), C.K(F);
                y == ir ? (C.g = null, C.O = [], C.L = []) : y == YY && "loading" === f.document.readyState && (C.h = function(t, n) {
                    function H() {
                        n || (n = true, t())
                    }(f.document.addEventListener("DOMContentLoaded", H, (n = false, I)), f).addEventListener("load", H, I)
                })
            }
        },
        t8 = function(C, F, y, M) {
            return (M = R[C.substring(0, 3) + "_"]) ? M(C.substring(3), F, y) : Qz(F, C)
        },
        ur = function(C, F, y, M) {
            (y = (M = T(F), T(F)), g)(y, F, z(G(M, F), C))
        },
        fB = function(C, F) {
            if (F = null, C = f.trustedTypes, !C || !C.createPolicy) return F;
            try {
                F = C.createPolicy("bg", {
                    createHTML: sj,
                    createScript: sj,
                    createScriptURL: sj
                })
            } catch (y) {
                f.console && f.console.error(y.message)
            }
            return F
        },
        sj = function(C) {
            return C
        },
        vd = function(C, F, y) {
            return C.V(function(M) {
                y = M
            }, false, F), y
        },
        Hd = function(C, F) {
            return C[F] << 24 | C[(F | 0) + 1] << 16 | C[(F | 0) + 2] << 8 | C[(F | 0) + 3]
        },
        c = function(C, F, y, M, m, t, n, H, Y) {
            if (((t = (n = (m = (Y = (F || M.j++, 0 < M.S && M.o && M.yF && 1 >= M.Y && !M.X) && !M.h && (!F || 1 < M.H - y) && 0 == document.hidden, H = 4 == M.j) || Y ? M.F() : M.v, m) - M.v, n) >> 14, M.P) && (M.P ^= t * (n << 2)), M.U += t, M).G = t || M.G, H || Y) M.j = 0, M.v = m;
            if (!Y || m - M.D < M.S - (C ? 255 : F ? 5 : 2)) return false;
            return M.h = (k(267, (C = (M.H = y, G(F ? 459 : 267, M)), M), M.Z), M.l.push([Oj, C, F ? y + 1 : y]), X), true
        },
        pB = function(C, F, y) {
            if ((F = typeof C, "object") == F)
                if (C) {
                    if (C instanceof Array) return "array";
                    if (C instanceof Object) return F;
                    if (y = Object.prototype.toString.call(C), "[object Window]" == y) return "object";
                    if ("[object Array]" == y || "number" == typeof C.length && "undefined" != typeof C.splice && "undefined" != typeof C.propertyIsEnumerable && !C.propertyIsEnumerable("splice")) return "array";
                    if ("[object Function]" == y || "undefined" != typeof C.call && "undefined" != typeof C.propertyIsEnumerable && !C.propertyIsEnumerable("call")) return "function"
                } else return "null";
            else if ("function" == F && "undefined" == typeof C.call) return "object";
            return F
        },
        r = function(C, F, y, M, m, t) {
            if (!y.N) {
                if (3 < (F = G((C = (0 == (m = void 0, F && F[0] === d && (m = F[2], C = F[1], F = void 0), M = G(320, y), M.length) && (t = G(459, y) >> 3, M.push(C, t >> 8 & 255, t & 255), void 0 != m && M.push(m & 255)), ""), F && (F.message && (C += F.message), F.stack && (C += ":" + F.stack)), 344), y), F)) {
                    (m = (C = (F -= (C = C.slice(0, (F | 0) - 3), C.length | 0) + 3, Tw(C)), y.G), y).G = y;
                    try {
                        g(405, y, z(C.length, 2).concat(C), 9)
                    } finally {
                        y.G = m
                    }
                }
                k(344, y, F)
            }
        },
        xY = function(C, F) {
            (F.nz.push(F.g.slice()), F).g[267] = void 0, k(267, F, C)
        },
        l = function(C, F) {
            C.l.splice(0, 0, F)
        },
        I = {
            passive: true,
            capture: true
        },
        Tw = function(C, F, y, M, m) {
            for (M = y = (C = C.replace(/\r\n/g, "\n"), m = [], 0); M < C.length; M++) F = C.charCodeAt(M), 128 > F ? m[y++] = F : (2048 > F ? m[y++] = F >> 6 | 192 : (55296 == (F & 64512) && M + 1 < C.length && 56320 == (C.charCodeAt(M + 1) & 64512) ? (F = 65536 + ((F & 1023) << 10) + (C.charCodeAt(++M) & 1023), m[y++] = F >> 18 | 240, m[y++] = F >> 12 & 63 | 128) : m[y++] = F >> 12 | 224, m[y++] = F >> 6 & 63 | 128), m[y++] = F & 63 | 128);
            return m
        },
        k = function(C, F, y) {
            if (267 == C || 459 == C) F.g[C] ? F.g[C].concat(y) : F.g[C] = KB(F, y);
            else {
                if (F.N && 221 != C) return;
                494 == C || 405 == C || 184 == C || 320 == C || 411 == C ? F.g[C] || (F.g[C] = kY(C, 86, y, F)) : F.g[C] = kY(C, 137, y, F)
            }
            221 == C && (F.P = J(32, F, false), F.i = void 0)
        },
        kY = function(C, F, y, M, m, t, n, H) {
            return (m = h[y = [91, 77, -53, -4, (H = F & 7, -67), 89, y, (t = Gw, 51), 82, -10], M.u](M.Gt), m[M.u] = function(Y) {
                H += 6 + (n = Y, 7 * F), H &= 7
            }, m).concat = function(Y) {
                return (Y = (n = (Y = (Y = C % 16 + 1, -Y * n + 62 * n * n + y[H + 35 & 7] * C * Y + (t() | 0) * Y - 4774 * C * n + 1 * C * C * Y - -3286 * n + H - 62 * C * C * n), void 0), y[Y]), y)[(H + 13 & 7) + (F & 2)] = Y, y[H + (F & 2)] = 77, Y
            }, m
        },
        R, ZM = function(C, F, y, M) {
            return G(14, (k(267, (gb(F, (M = G(267, F), F.O && M < F.Z ? (k(267, F, F.Z), xY(C, F)) : k(267, F, C), y)), F), M), F))
        },
        z = function(C, F, y, M) {
            for (y = (M = (F | 0) - 1, []); 0 <= M; M--) y[(F | 0) - 1 - (M | 0)] = C >> 8 * M & 255;
            return y
        },
        Qz = function(C, F) {
            return [(C(function(y) {
                y(F)
            }), function() {
                return F
            })]
        },
        Pd = function(C, F, y, M, m, t) {
            function n() {
                if (C.G == C) {
                    if (C.g) {
                        var H = [D, y, M, void 0, m, t, arguments];
                        if (2 == F) var Y = w(false, false, (l(C, H), C));
                        else if (1 == F) {
                            var O = !C.l.length;
                            (l(C, H), O) && w(false, false, C)
                        } else Y = J8(C, H);
                        return Y
                    }
                    m && t && m.removeEventListener(t, n, I)
                }
            }
            return n
        },
        br = function(C, F, y, M) {
            try {
                M = C[((F | 0) + 2) % 3], C[F] = (C[F] | 0) - (C[((F | 0) + 1) % 3] | 0) - (M | 0) ^ (1 == F ? M << y : M >>> y)
            } catch (m) {
                throw m;
            }
        },
        Vz = function(C, F) {
            return h[F](h.prototype, {
                prototype: C,
                replace: C,
                floor: C,
                length: C,
                pop: C,
                splice: C,
                parent: C,
                document: C,
                call: C,
                propertyIsEnumerable: C,
                stack: C,
                console: C
            })
        },
        SB = function(C, F, y, M, m) {
            for (m = (C.pz = (C.i_ = (C.ao = $Y, C)[V], Bd), C.Gt = Vz({get: function() {
                        return this.concat()
                    }
                }, C.u), C.Z$ = h[C.u](C.Gt, {
                    value: {
                        value: {}
                    }
                }), M = 0, []); 322 > M; M++) m[M] = String.fromCharCode(M);
            (l(C, ((P(C, (P(C, 176, (k(208, (P((P(C, (P(C, (k(376, (P(C, ((P(C, (P(C, 440, (P(C, (P(C, (P(C, (C.vk = (k(211, (k(5, (P(C, 292, (k(405, C, (k(494, C, [160, (P((P(C, 169, (k(411, C, [0, 0, (k(188, C, (P(C, (P(C, (P(C, 178, (((P(C, (P(C, 356, (P(C, (P(C, 217, (P(C, 378, (k(344, C, (C.D$ = (P(C, 92, (k(320, C, (k(14, C, (k(184, (P(C, 427, (k(459, (k(267, C, (C.FF = (C.b_ = 0, C.X = (C.v = 0, C.g = [], C.h = null, M = window.performance || {}, C.H = 8001, C.W = 0, C.yF = false, ((C.i = void 0, C).P = void 0, C.l_ = (C.Z = 0, function(t) {
                this.G = t
            }), C.J = void 0, (C.L = [], C).A = void 0, C.Y = (C.o = false, C.G = C, C.nz = [], C.s = void 0, 0), C.U = (C.O = (C.I = 25, C.j = void 0, []), 1), C).C = (C.D = 0, []), void 0), (C.l = [], C.N = false, C).S = 0, M.timeOrigin) || (M.timing || {}).navigationStart || 0, 0)), C), 0), function(t, n, H) {
                k((n = (H = T(t), T)(t), n), t, "" + G(H, t))
            })), C), []), {})), [])), function(t, n) {
                n = T(t), t = G(n, t.G), t[0].removeEventListener(t[1], t[2], I)
            })), 0), 2048)), function(t, n, H, Y) {
                k((n = (Y = T(t), H = T(t), T)(t), n), t, G(Y, t) || G(H, t))
            })), function(t) {
                nB(t, 4)
            })), C.Kz = 0, 240), function(t, n, H, Y) {
                (n = G((Y = (H = T((Y = T(t), t)), G)(Y, t), H), t), k)(H, t, n + Y)
            }), function(t, n, H, Y, O, Q, u, K, p, S, x, v) {
                function L(Z, B) {
                    for (; n < Z;) H |= e(t) << n, n += 8;
                    return H >>= (B = H & (1 << Z) - (n -= Z, 1), Z), B
                }
                for (v = (x = p = (S = ((H = n = (O = T(t), 0), L(3)) | 0) + 1, u = L(5), 0), []); p < u; p++) Y = L(1), v.push(Y), x += Y ? 0 : 1;
                for (K = (x = (p = ((x | 0) - 1).toString(2).length, 0), []); x < u; x++) v[x] || (K[x] = L(p));
                for (p = 0; p < u; p++) v[p] && (K[p] = T(t));
                for (Q = []; S--;) Q.push(G(T(t), t));
                P(t, O, function(Z, B, eB, a, N) {
                    for (N = (eB = [], []), B = 0; B < u; B++) {
                        if (a = K[B], !v[B]) {
                            for (; a >= N.length;) N.push(T(Z));
                            a = N[a]
                        }
                        eB.push(a)
                    }
                    Z.s = KB(Z, (Z.X = KB(Z, Q.slice()), eB))
                })
            })), 142), function(t, n, H, Y, O) {
                (O = T((H = (n = T(t), T(t)), t)), t.G == t) && (H = G(H, t), Y = G(n, t), O = G(O, t), Y[H] = O, 221 == n && (t.i = void 0, 2 == H && (t.P = J(32, t, false), t.i = void 0)))
            }), P)(C, 407, function(t, n, H, Y) {
                !c(false, true, n, t) && (n = Uj(t), H = n.rF, Y = n.R, t.G == t || Y == t.l_ && H == t) && (k(n.gF, t, Y.apply(H, n.T)), t.v = t.F())
            }), P)(C, 342, function(t, n, H, Y, O) {
                (Y = (n = (n = (H = (O = T(t), T(t)), T)(t), Y = T(t), G)(n, t), H = G(H, t), G)(Y, t), k)(O, t, Pd(t, Y, H, n))
            }), function(t, n, H, Y, O, Q) {
                if (!c(true, true, n, t)) {
                    if ("object" == (t = (O = G((Q = G((n = (O = (n = (Q = T(t), T(t)), H = T(t), T(t)), G(n, t)), Q), t), O), t), G)(H, t), pB)(Q)) {
                        for (Y in H = [], Q) H.push(Y);
                        Q = H
                    }
                    for (H = (Y = (t = 0 < t ? t : 1, 0), Q).length; Y < H; Y += t) n(Q.slice(Y, (Y | 0) + (t | 0)), O)
                }
            })), 386), function(t, n, H, Y) {
                k((n = (H = e((Y = T(t), t)), T(t)), n), t, G(Y, t) >>> H)
            }), 314), function(t) {
                ur(1, t)
            }), P(C, 238, function(t) {
                ur(4, t)
            }), 0)), 0)]), function(t, n, H, Y) {
                k((H = (n = G((Y = T((n = (H = T(t), T(t)), t)), n), t), G(H, t)), Y), t, H[n])
            })), C), 332, function(t) {
                lr(t, 3)
            }), 0), 0]), q(4))), function(t, n, H, Y) {
                n = G((H = (n = T(t), H = T(t), Y = T(t), G(H, t)), n), t), k(Y, t, n in H | 0)
            })), C), C), C), f), 0), 437), function(t, n, H) {
                0 != G((n = T(t), H = T(t), H = G(H, t), n), t) && k(267, t, H)
            }), 337), function(t) {
                lr(t, 4)
            }), 157), function(t, n, H, Y, O, Q, u) {
                for (Q = (H = (Y = (O = T(t), me)(t), u = "", G(113, t)), H.length), n = 0; Y--;) n = ((n | 0) + (me(t) | 0)) % Q, u += m[H[n]];
                k(O, t, u)
            }), function() {})), 147), function(t, n, H, Y) {
                if (n = t.nz.pop()) {
                    for (H = e(t); 0 < H; H--) Y = T(t), n[Y] = t.g[Y];
                    t.g = (n[n[320] = t.g[320], 344] = t.g[344], n)
                } else k(267, t, t.Z)
            }), P)(C, 339, function(t, n, H, Y, O) {
                for (H = (n = (O = (Y = T(t), me(t)), 0), []); n < O; n++) H.push(e(t));
                k(Y, t, H)
            }), 357), function(t, n, H) {
                c(false, true, n, t) || (n = T(t), H = T(t), k(H, t, function(Y) {
                    return eval(Y)
                }(Ej(G(n, t.G)))))
            }), C), 643), 454), function(t, n) {
                (n = G(T(t), t), xY)(n, t.G)
            }), 408), function(t, n, H) {
                k((n = (n = G((H = (n = T(t), T(t)), n), t), pB(n)), H), t, n)
            }), C), 224, function(t, n, H, Y) {
                Y = (n = (H = T((n = (Y = T(t), T(t)), t)), G(n, t)), G)(Y, t) == n, k(H, t, +Y)
            }), C), 0), function(t, n, H, Y, O, Q) {
                c(false, true, n, t) || (Q = Uj(t.G), n = Q.rF, O = Q.T, Y = Q.R, Q = Q.gF, H = O.length, n = 0 == H ? new n[Y] : 1 == H ? new n[Y](O[0]) : 2 == H ? new n[Y](O[0], O[1]) : 3 == H ? new n[Y](O[0], O[1], O[2]) : 4 == H ? new n[Y](O[0], O[1], O[2], O[3]) : 2(), k(Q, t, n))
            })), 287), function(t, n, H, Y, O) {
                0 !== (H = (Y = (O = (n = (H = (Y = T(t), T(t)), T)(t), T(t)), G(Y, t.G)), O = G(O, t), G(H, t)), n = G(n, t), Y) && (n = Pd(t, 1, n, O, Y, H), Y.addEventListener(H, n, I), k(208, t, [Y, H, n]))
            }), l(C, [YY]), l)(C, [U, F]), [XV, y])), w)(true, true, C)
        },
        W, lr = function(C, F, y, M, m) {
            ((m = (y = (m = T((M = F & 3, F &= 4, C)), T)(C), G(m, C)), F) && (m = Tw("" + m)), M && g(y, C, z(m.length, 2)), g)(y, C, m)
        },
        Uj = function(C, F, y, M, m, t) {
            for (t = (M = ((F = T((m = C[LB] || {}, C)), m.gF = T(C), m).T = [], C.G == C ? (e(C) | 0) - 1 : 1), y = T(C), 0); t < M; t++) m.T.push(T(C));
            for (m.rF = G(y, C), m.R = G(F, C); M--;) m.T[M] = G(m.T[M], C);
            return m
        },
        G = function(C, F) {
            if (F = F.g[C], void 0 === F) throw [d, 30, C];
            if (F.value) return F.create();
            return F.create(1 * C * C + 77 * C + -53), F.prototype
        },
        T = function(C, F) {
            if (C.X) return MB(C.s, C);
            return (F = J(8, C, true), F & 128) && (F ^= 128, C = J(2, C, true), F = (F << 2) + (C | 0)), F
        },
        E = function(C, F) {
            F.A = ((F.A ? F.A + "~" : "E:") + C.message + ":" + C.stack).slice(0, 2048)
        },
        A = function(C, F, y) {
            y = this;
            try {
                SB(this, F, C)
            } catch (M) {
                E(M, this), C(function(m) {
                    m(y.A)
                })
            }
        },
        J = function(C, F, y, M, m, t, n, H, Y, O, Q, u, K, p) {
            if ((Y = G(267, F), Y) >= F.Z) throw [d, 31];
            for (H = (Q = (n = (u = 0, C), F.i_.length), Y); 0 < n;) t = H >> 3, K = F.O[t], m = H % 8, O = 8 - (m | 0), O = O < n ? O : n, y && (M = F, M.i != H >> 6 && (M.i = H >> 6, p = G(221, M), M.J = yz(M.P, M.i, [0, 0, p[1], p[2]])), K ^= F.J[t & Q]), H += O, u |= (K >> 8 - (m | 0) - (O | 0) & (1 << O) - 1) << (n | 0) - (O | 0), n -= O;
            return k(267, F, (Y | (y = u, 0)) + (C | 0)), y
        },
        MB = function(C, F) {
            return (C = C.create().shift(), F.X).create().length || F.s.create().length || (F.X = void 0, F.s = void 0), C
        },
        X = f.requestIdleCallback ? function(C) {
            requestIdleCallback(function() {
                C()
            }, {
                timeout: 4
            })
        } : f.setImmediate ? function(C) {
            setImmediate(C)
        } : function(C) {
            setTimeout(C, 0)
        },
        w = function(C, F, y, M, m, t) {
            if (y.l.length) {
                y.yF = (y.o = (y.o && 0(), true), C);
                try {
                    t = y.F(), y.v = t, y.j = 0, y.D = t, m = wb(C, y), M = y.F() - y.D, y.W += M, M < (F ? 0 : 10) || 0 >= y.I-- || (M = Math.floor(M), y.L.push(254 >= M ? M : 254))
                } finally {
                    y.o = false
                }
                return m
            }
        },
        DM = function(C, F) {
            F.push(C[0] << 24 | C[1] << 16 | C[2] << 8 | C[3]), F.push(C[4] << 24 | C[5] << 16 | C[6] << 8 | C[7]), F.push(C[8] << 24 | C[9] << 16 | C[10] << 8 | C[11])
        },
        gb = function(C, F, y, M, m, t) {
            if (!C.A) {
                C.Y++;
                try {
                    for (t = (y = 0, void 0), M = C.Z; --F;) try {
                        if ((m = void 0, C).X) t = MB(C.X, C);
                        else {
                            if (y = G(267, C), y >= M) break;
                            t = (m = (k(459, C, y), T)(C), G(m, C))
                        }
                        c(false, false, (t && t[ir] & 2048 ? t(C, F) : r(0, [d, 21, m], C), F), C)
                    } catch (n) {
                        G(376, C) ? r(22, n, C) : k(376, C, n)
                    }
                    if (!F) {
                        if (C.EG) {
                            gb(C, (C.Y--, 148005666396));
                            return
                        }
                        r(0, [d, 33], C)
                    }
                } catch (n) {
                    try {
                        r(22, n, C)
                    } catch (H) {
                        E(H, C)
                    }
                }
                C.Y--
            }
        },
        q = function(C, F) {
            for (F = []; C--;) F.push(255 * Math.random() | 0);
            return F
        },
        wb = function(C, F, y, M) {
            for (; F.l.length;) {
                M = (F.h = null, F.l.pop());
                try {
                    y = J8(F, M)
                } catch (m) {
                    E(m, F)
                }
                if (C && F.h) {
                    C = F.h, C(function() {
                        w(true, true, F)
                    });
                    break
                }
            }
            return y
        },
        KB = function(C, F, y) {
            return (y = h[C.u](C.Z$), y)[C.u] = function() {
                return F
            }, y.concat = function(M) {
                F = M
            }, y
        },
        LB = String.fromCharCode(105, 110, 116, 101, 103, 67, 104, 101, 99, 107, 66, 121, 112, 97, 115, 115),
        b = [],
        D = [],
        XV = ((A.prototype.B = (A.prototype.oo = void 0, "toString"), A).prototype.YT = void 0, []),
        V = [],
        Oj = (A.prototype.EG = false, []),
        YY = [],
        ir = [],
        d = {},
        U = [],
        h = ((((DM, function() {})(q), function() {})(br), function() {})(CB), d).constructor,
        Gw = ((((((W = A.prototype, A.prototype.u = "create", W.V = function(C, F, y, M, m) {
            if ((y = "array" === pB(y) ? y : [y], this).A) C(this.A);
            else try {
                M = !this.l.length, m = [], l(this, [b, m, y]), l(this, [V, C, m]), F && !M || w(F, true, this)
            } catch (t) {
                E(t, this), C(this.A)
            }
        }, W).sG = function(C, F, y, M, m) {
            for (m = M = 0; M < C.length; M++) m += C.charCodeAt(M), m += m << 10, m ^= m >> 6;
            return M = (C = (m += m << 3, m ^= m >> 11, m + (m << 15)) >>> 0, new Number(C & (1 << F) - 1)), M[0] = (C >>> F) % y, M
        }, W).dF = 0, W).F = (window.performance || {}).now ? function() {
            return this.FF + window.performance.now()
        } : function() {
            return +new Date
        }, W).Tt = function() {
            return Math.floor(this.W + (this.F() - this.D))
        }, W).OG = function(C, F, y, M, m, t) {
            for (t = (M = y = 0, []); M < C.length; M++)
                for (y += F, m = m << F | C[M]; 7 < y;) y -= 8, t.push(m >> y & 255);
            return t
        }, void 0);
    ((W.mk = function(C, F, y) {
        return C ^ ((F = (F ^= F << 13, F ^= F >> 17, (F ^ F << 5) & y)) || (F = 1), F)
    }, W.AD = function() {
        return Math.floor(this.F())
    }, A).prototype.K = function(C, F) {
        return F = (Gw = function() {
                return C == F ? -53 : 10
            }, C = {}, {}),
            function(y, M, m, t, n, H, Y, O, Q, u, K, p, S, x, v) {
                p = C, C = F;
                try {
                    if (x = y[0], x == U) {
                        n = y[1];
                        try {
                            for (u = atob((M = H = 0, n)), v = []; M < u.length; M++) K = u.charCodeAt(M), 255 < K && (v[H++] = K & 255, K >>= 8), v[H++] = K;
                            k(221, this, (this.Z = (this.O = v, this).O.length << 3, [0, 0, 0]))
                        } catch (L) {
                            r(17, L, this);
                            return
                        }
                        gb(this, 8001)
                    } else if (x == b) y[1].push(G(184, this).length, G(494, this).length, G(405, this).length, G(344, this)), k(14, this, y[2]), this.g[232] && ZM(G(232, this), this, 8001);
                    else {
                        if (x == V) {
                            Y = (S = z((H = y[2], G(494, this).length | 0) + 2, 2), this.G), this.G = this;
                            try {
                                m = G(320, this), 0 < m.length && g(494, this, z(m.length, 2).concat(m), 10), g(494, this, z(this.U, 1), 109), g(494, this, z(this[V].length, 1)), u = 0, u += G(188, this) & 2047, u -= (G(494, this).length | 0) + 5, O = G(405, this), 4 < O.length && (u -= (O.length | 0) + 3), 0 < u && g(494, this, z(u, 2).concat(q(u)), 15), 4 < O.length && g(494, this, z(O.length, 2).concat(O), 156)
                            } finally {
                                this.G = Y
                            }
                            if (Q = (v = q(2).concat(G(494, this)), v[1] = v[0] ^ 6, v[3] = v[1] ^ S[0], v[4] = v[1] ^ S[1], this.QF(v))) Q = "!" + Q;
                            else
                                for (Q = "", u = 0; u < v.length; u++) t = v[u][this.B](16), 1 == t.length && (t = "0" + t), Q += t;
                            return k(344, this, (G(405, (G(((M = Q, G(184, this)).length = H.shift(), 494), this).length = H.shift(), this)).length = H.shift(), H.shift())), M
                        }
                        if (x == Oj) ZM(y[1], this, y[2]);
                        else if (x == D) return ZM(y[1], this, 8001)
                    }
                } finally {
                    C = p
                }
            }
    }(), A).prototype.Pk = 0;
    var Bd, $Y = ((A.prototype.QF = function(C, F, y, M) {
            if (F = window.btoa) {
                for (y = (M = "", 0); y < C.length; y += 8192) M += String.fromCharCode.apply(null, C.slice(y, y + 8192));
                C = F(M).replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "")
            } else C = void 0;
            return C
        }, A.prototype[XV] = [0, 0, 1, 1, 0, 1, 1], A).prototype.tD = 0, /./),
        Is = U.pop.bind(A.prototype[b]),
        Ej = function(C, F) {
            return (F = fB()) && 1 === C.eval(F.createScript("1")) ? function(y) {
                return F.createScript(y)
            } : function(y) {
                return "" + y
            }
        }((($Y[A.prototype.B] = Is, Bd = Vz({get: Is
        }, A.prototype.u), A.prototype).hD = void 0, f));
    (R = f.botguard || (f.botguard = {}), 40 < R.m || (R.m = 41, R.bg = FV, R.a = t8), R).Vxh_ = function(C, F, y) {
        return [(y = new A(F, C), function(M) {
            return vd(y, M)
        })]
    };
}).call(this);
#4 JavaScript::Eval (size: 64) - SHA256: 20bbfab8b04ecc0249170c051af91e2b73891744e44b047c3cc897b3f65a4583
0,
function(t, n, H) {
    k((H = (n = (H = T(t), T)(t), t.g[H] && G(H, t)), n), t, H)
}
#5 JavaScript::Eval (size: 22) - SHA256: 4d1e473187593d1469eb5822790838606668e2bc8684547ac3a4f6abfa489b01
0,
function(t) {
    nB(t, 2)
}

Executed Writes (0)


HTTP Transactions (197)


Request Response
                                        
                                            GET / HTTP/1.1 
Host: www.happistar8.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                        
                                             185.162.228.2
HTTP/1.1 301 Moved Permanently
                                            
Date: Sun, 19 Mar 2023 13:11:38 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Sun, 19 Mar 2023 14:11:38 GMT
Location: https://www.happistar8.net/
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=h0F%2FOFpm5WEtxaGYxJnzz6qUsM8m9S%2FurFumlnWpAU6AV6pFswH5w3SrVwjOUHou8Jhb22aJSrswkX1oxPmaX6lhzG6Y9u%2Fu5KXRYu%2BA1H3CO1zHZTQtp%2F8wm4wq%2BWkwZ7cak%2Bw%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7aa5f6648d8db500-OSL
alt-svc: h2=":443"; ma=60

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "0BC80613F3D493EA081BF5672AB76F6F33A1DCC0710FE1431DE83C46D7E8D31D"
Last-Modified: Fri, 17 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10997
Expires: Sun, 19 Mar 2023 16:14:56 GMT
Date: Sun, 19 Mar 2023 13:11:39 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "BD8ABB8F420D1E31462FCA1D6A7CAADF1E2BBA6FC7DB05684B5811E00E84107F"
Last-Modified: Fri, 17 Mar 2023 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3547
Expires: Sun, 19 Mar 2023 14:10:46 GMT
Date: Sun, 19 Mar 2023 13:11:39 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Backoff, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 19 Mar 2023 12:27:05 GMT
age: 2674
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    bc86ef2a0cee04915bc360f5821adc8f
Sha1:   3658f9028cce204d38f7f48fcfaa2a8e4f54383a
Sha256: aeecd718d03811322457de4f20828bdba86b277e7e0e328cae9c0a8075638454
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "BB7622A85D32CBFF40ABD2995055E03DBAC05DD841B9A84D9023A5510D89E534"
Last-Modified: Fri, 17 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5009
Expires: Sun, 19 Mar 2023 14:35:08 GMT
Date: Sun, 19 Mar 2023 13:11:39 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                            
x-amz-id-2: yOfqBS2ZcoR9UqTR5g2GnPvqT48OtpnbmGQalQCDNz21lVPJJ0R8GhKLaR/+bKpai9KtbTdoplIOSt3m5+8a4g==
x-amz-request-id: H490XS3F6202CDH1
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 19 Mar 2023 12:52:22 GMT
age: 1157
last-modified: Sat, 11 Mar 2023 16:53:15 GMT
etag: "e7bace7c1e04d44012e37ddffe36e5d5"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    e7bace7c1e04d44012e37ddffe36e5d5
Sha1:   3ac8d7c0a9d3e3f0b28b2530c7b8d8407b4042c2
Sha256: 6b4f80f2e95b26f6122ea8dcd0ef8d762299be822c69e839fc37581ca2bcb5f2
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                            
server: nginx
date: Sun, 19 Mar 2023 13:11:39 GMT
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Sun, 19 Mar 2023 13:11:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Sun, 19 Mar 2023 13:11:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Sun, 19 Mar 2023 13:11:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Sun, 19 Mar 2023 13:11:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /ajax/libs/angularjs/1.8.0/angular.min.js?v=1.8.0 HTTP/1.1 
Host: ajax.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.170
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                            
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 62157
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 16 Mar 2023 18:19:51 GMT
expires: Fri, 15 Mar 2024 18:19:51 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 240708
last-modified: Fri, 05 Jun 2020 18:15:00 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (647)
Size:   62157
Md5:    c91a9b885a30b49d776b54b3c0297475
Sha1:   97ced80aec9257549b4a20983dcd376a6585d323
Sha256: 65ef89ded398d85ea955fb604b033d8cb4cbe791cbccc88c3bc4f3a612fd06a2
                                        
                                            GET /ajax/libs/angularjs/1.8.0/angular-cookies.min.js?v=1.8.0 HTTP/1.1 
Host: ajax.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.170
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                            
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 782
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 17 Mar 2023 10:18:22 GMT
expires: Sat, 16 Mar 2024 10:18:22 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 183197
last-modified: Fri, 05 Jun 2020 18:15:00 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (555)
Size:   782
Md5:    0142595c6f46d2d480a6734b44f5f6e4
Sha1:   de4fb578e8f866e60e5373e0ade95ea098cb49c8
Sha256: ebe9b2cc1adb1f4de3f72ec459197fe7d2ac2a16b3271eeeef84c701f52166a2
                                        
                                            GET /ajax/libs/angularjs/1.8.0/angular-route.min.js?v=1.8.0 HTTP/1.1 
Host: ajax.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.170
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                            
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 2583
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 14 Mar 2023 16:33:27 GMT
expires: Wed, 13 Mar 2024 16:33:27 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 419892
last-modified: Fri, 05 Jun 2020 18:15:00 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (577)
Size:   2583
Md5:    45cc07ea88d15d1b4fc7ed305833031f
Sha1:   87787403f912e14113a4b5784b2ca5be20518a16
Sha256: e687279c3924670d08a1dc12767870ded0b9b960eca099f026920eac13a3ddd9
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Sun, 19 Mar 2023 13:11:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Sun, 19 Mar 2023 13:11:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /gtm.js?id=GTM-P6ZC558 HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.168
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                            
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 19 Mar 2023 13:11:39 GMT
expires: Sun, 19 Mar 2023 13:11:39 GMT
cache-control: private, max-age=900
last-modified: Sun, 19 Mar 2023 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 81838
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (47038)
Size:   81838
Md5:    079e743eaaf03964c6630f6e244613ec
Sha1:   1fe2602bf9f164e9e0a0e7d0069182c309bb6254
Sha256: f2c55c7b5e4babb6978e20ac6b1f22e9176cddade11257cba1b26cbbf063005d
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Retry-After, ETag, Pragma, Content-Type, Content-Length, Cache-Control, Expires, Backoff, Alert, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 19 Mar 2023 12:14:32 GMT
age: 3427
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            GET /ajax/libs/jquery/3.6.0/jquery.min.js HTTP/1.1 
Host: cdnjs.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             104.17.24.14
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
date: Sun, 19 Mar 2023 13:11:40 GMT
content-length: 27938
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "603e8adc-15d9d"
last-modified: Tue, 02 Mar 2021 18:58:36 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 936021
expires: Fri, 08 Mar 2024 13:11:40 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rMLG1DyWQnCZPxi8KjfetGGUyrvomm0Ie0jXlNfp0wjse%2FBjMVOvOG89FhY1sSwQuAkO3jZQDznMOvKcwDukxf8w%2BsiECvlElBTpxjD9ZE9PSdEwUvgwlZkt2LNGXBiT4zka6HHw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7aa5f66b0f280b69-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65447)
Size:   27938
Md5:    d900ca08873ee57d40616d39a44cc0aa
Sha1:   7ab3ac8b1504b7b914a6e94c979b8390bb492f6a
Sha256: 1eea479cc0abe04a0846f41031207f9511f12ffef017a6109d4efb6f5523465b
                                        
                                            GET /js/widget.js HTTP/1.1 
Host: wchat.freshchat.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             54.152.199.76
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Date: Sun, 19 Mar 2023 13:11:39 GMT
Transfer-Encoding: chunked
Connection: keep-alive
server: fwe
last-modified: Mon, 13 Mar 2023 12:19:13 GMT
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: max-age=900, must-revalidate
served-by: 9886
x-server: 9886
content-encoding: gzip
x-envoy-upstream-service-time: 1
x-trace-id: 00-b0a628a617a6cc41c63fb11918cb87d7-ed76c6aee61262c5-00
nel: { "report_to": "nel-endpoint-freshchat", "max_age": 2592000, "include_subdomains": true}
report-to: { "group": "nel-endpoint-freshchat", "max_age": 2592000, "include_subdomains": true, "endpoints": [{"url": "https://edge-admin.us-east-1.freshedge.net/nelreports/freshchat"}]}
x-fw-ratelimiting-managed: false
x-request-id: 1ccd2bb6-0c8c-46ec-b984-9f8491b51d3a


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   20581
Md5:    eb22130b28f59c00707f60d127245291
Sha1:   1d0a4d83e995fe9c9f3620d72db9a57faf3b3de6
Sha256: 9d2c8f56dabdbfbb65d70d644b874c1150cd4e21be1b5bdb66be181c3e5f0edd
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "4F7E4813F82F60EBF9C536D9342726307686931DF7309A4C367F3B658602EFDE"
Last-Modified: Fri, 17 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16268
Expires: Sun, 19 Mar 2023 17:42:48 GMT
Date: Sun, 19 Mar 2023 13:11:40 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "BC45B0A198588F54F15E0F17390F8759867229AC9CF8A7DA8197843EFE994C45"
Last-Modified: Fri, 17 Mar 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3998
Expires: Sun, 19 Mar 2023 14:18:18 GMT
Date: Sun, 19 Mar 2023 13:11:40 GMT
Connection: keep-alive

                                        
                                            GET /code/b4b7cabb-7ad3-47b0-a785-8e385e9c7606.js HTTP/1.1 
Host: cdn.iconvert.network
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             54.230.111.129
HTTP/2 200 OK
content-type: application/javascript
                                            
content-length: 869
last-modified: Wed, 15 Mar 2023 15:41:57 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Fri, 17 Mar 2023 21:14:04 GMT
cache-control: max-age=172800
etag: "9b2ce02ad421310ebc9a7b5333478438"
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: YaB0oaT_tBFPVBj6DVvXjkxF0Ew4BwJSQQAcAOZK9bvQJIBMsliPoQ==
age: 143857
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (368)
Size:   869
Md5:    9b2ce02ad421310ebc9a7b5333478438
Sha1:   8d88085d63331763ee7fe20f60ac714beafa8874
Sha256: c50dc0e438e093b18ac8518d77312ab950cd5f17fad4790c2e720b2224d5016c
                                        
                                            GET /d/.js?oref=&ourl=https%3A%2F%2Fwww.happistar8.net%2F&opt=&t=1679231512341 HTTP/1.1 
Host: semerviewdistains.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             18.195.30.247
HTTP/2 400 Bad Request
content-type: text/html
                                            
server: nginx
date: Sun, 19 Mar 2023 13:11:40 GMT
content-length: 152
cache-control: no-store, no-cache, pre-check=0, post-check=0
expires: Thu, 01 Jan 1970 00:00:00 GMT
pragma: no-cache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with no line terminators
Size:   152
Md5:    d9bacc468aa23334526933389545e120
Sha1:   e26288b4bada404ce340ca72989f9f1193dc649c
Sha256: 0605685efb44dd3decd77517436c575731b61f807247587de67080c579ffa2d4
                                        
                                            GET /ip.js?var=customIP HTTP/1.1 
Host: l2.io
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             195.80.159.133
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                            
Date: Sun, 19 Mar 2023 13:11:40 GMT
Server: Apache/2.4.38 (Debian)
Content-Length: 26
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  data
Size:   816121
Md5:    3a15a68e2eceae2453fd845d179d2588
Sha1:   45738c4c792cff67da4ed15cd202dadbd4eb8e08
Sha256: 627ea77246ace4b2385ec5f58c575790cae27702cce75e1248a2dbf467492c71
                                        
                                            GET /blackbox/image/upload/v1658720055/cs%20widget%20july%202022/telegram.png HTTP/1.1 
Host: res.cloudinary.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             151.101.1.137
HTTP/2 200 OK
content-type: image/png
                                            
etag: "3dd8441f7382111fe377d19fa1273e40"
last-modified: Mon, 25 Jul 2022 03:34:16 GMT
date: Sun, 19 Mar 2023 13:11:40 GMT
strict-transport-security: max-age=604800
cache-control: public, no-transform, immutable, max-age=2592000
server-timing: fastly;dur=105;cpu=104;start=2023-03-19T13:11:40.107Z;desc=hit,rtt;dur=11
server: Cloudinary
timing-allow-origin: *
access-control-allow-origin: *
accept-ranges: bytes
x-content-type-options: nosniff
access-control-expose-headers: Content-Length,ETag,Server-Timing,X-Content-Type-Options
content-length: 6757
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 177 x 177, 8-bit/color RGBA, non-interlaced\012- data
Size:   6757
Md5:    3dd8441f7382111fe377d19fa1273e40
Sha1:   4ece7208d7f6af5f9f1dd0054efdc4045b7c3d1b
Sha256: 4b39240a18006d973399a34a8b92aaf14df769ff293c8447cff1c5c74f29d361
                                        
                                            GET /blackbox/image/upload/v1658720055/cs%20widget%20july%202022/ico_chat.png HTTP/1.1 
Host: res.cloudinary.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             151.101.1.137
HTTP/2 200 OK
content-type: image/png
                                            
etag: "ceb6e75858b3ef1e6799fdf398c5a827"
last-modified: Mon, 25 Jul 2022 03:34:17 GMT
date: Sun, 19 Mar 2023 13:11:40 GMT
strict-transport-security: max-age=604800
cache-control: public, no-transform, immutable, max-age=2592000
server-timing: fastly;dur=110;cpu=109;start=2023-03-19T13:11:40.103Z;desc=hit,rtt;dur=11
server: Cloudinary
timing-allow-origin: *
access-control-allow-origin: *
accept-ranges: bytes
x-content-type-options: nosniff
access-control-expose-headers: Content-Length,ETag,Server-Timing,X-Content-Type-Options
content-length: 7075
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 177 x 177, 8-bit/color RGBA, non-interlaced\012- data
Size:   7075
Md5:    ceb6e75858b3ef1e6799fdf398c5a827
Sha1:   781b91899f7bd82582433897cd69d99f476dbf4f
Sha256: 290f0cf3655cc4d7b183b7b3c3bdc396e319232fc63586e719f12655a060c304
                                        
                                            GET /blackbox/image/upload/v1658720055/cs%20widget%20july%202022/ico_line.png HTTP/1.1 
Host: res.cloudinary.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             151.101.1.137
HTTP/2 200 OK
content-type: image/png
                                            
etag: "19e3e6b922f510accb72079d8f9553e8"
last-modified: Mon, 25 Jul 2022 03:34:16 GMT
date: Sun, 19 Mar 2023 13:11:40 GMT
strict-transport-security: max-age=604800
cache-control: public, no-transform, immutable, max-age=2592000
server-timing: fastly;dur=103;cpu=101;start=2023-03-19T13:11:40.110Z;desc=hit,rtt;dur=11
server: Cloudinary
timing-allow-origin: *
access-control-allow-origin: *
accept-ranges: bytes
x-content-type-options: nosniff
access-control-expose-headers: Content-Length,ETag,Server-Timing,X-Content-Type-Options
content-length: 7819
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 177 x 177, 8-bit/color RGBA, non-interlaced\012- data
Size:   7819
Md5:    19e3e6b922f510accb72079d8f9553e8
Sha1:   49c2ec003739a1ea56765e1f92a05c56bb3ab3f4
Sha256: d6dcd1cab7c0ee9d58c18e95aa844a0abd684d6bc2556f9d06114e35cc3d563e
                                        
                                            GET /js/v4/agent.js HTTP/1.1 
Host: cdn.seondf.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             188.114.96.1
HTTP/2 200 OK
content-type: application/javascript
                                            
date: Sun, 19 Mar 2023 13:11:39 GMT
vary: Accept-Encoding
last-modified: Tue, 20 Dec 2022 16:00:08 GMT
etag: W/"c34c3067f651e0fea2609171ab7bfec0"
cache-control: max-age=14400
x-amz-version-id: oBwuMALhSWNlluJ4Z9BGO_.GELHIAD3H
x-cache: Miss from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: _ViFSpdlDYf1MFiCm9avM8swf1pTbcW9kNNjfX2pZ7rrkdgl3Nzggw==
cf-cache-status: HIT
age: 2193
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=v0DNoZF3iIcyuFRDyDe2F%2Fwu8Uh06zADoYiww%2BLHkOX10YuVml%2BsrcYRPM%2FIHHiTTDWzIf5AhUmuFaTG4vK8JWBg930kZ8RPJMKgmuMBhBCQW98S7v9zGrLka3orFDPjXQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7aa5f667fd52b4f3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  C source, ASCII text, with very long lines (65536), with no line terminators
Size:   107773
Md5:    d44496eda5e1d59bfbd37571ba79672d
Sha1:   12fa1af68e1ac5244e4795b120626a2a51999829
Sha256: cb3d6fa8c670b33ceccf27ee1a4d68e6f227ca39adf21da9aeaf6a3038b25585
                                        
                                            POST / HTTP/1.1 
Host: ocsp.r2m01.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             54.230.80.227
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sun, 19 Mar 2023 13:11:40 GMT
Etag: "6415b32a-1d7"
Last-Modified: Sun, 19 Mar 2023 12:39:06 GMT
Server: ECAcc (dcb/7339)
X-Cache: Miss from cloudfront
Via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Nie8_YUN0GVNBvK9VPhHBnhk3fJrRBS3JDNiXwq0r4PekfY-j8f_bg==
Age: 1954

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: QawrGoXtILA4JncUAUJzWg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                        
                                             54.187.66.119
HTTP/1.1 101 Switching Protocols
                                            
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: Wm2CVZ9lE4y1jWf2JOyujHgwCZI=

                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.78
HTTP/2 200 OK
content-type: text/javascript
                                            
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Sun, 19 Mar 2023 12:12:29 GMT
expires: Sun, 19 Mar 2023 14:12:29 GMT
cache-control: public, max-age=7200
age: 3551
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   23438
Md5:    0a1ea3db94e2f0d09592c1d55de02080
Sha1:   7444967ae2b74f6b4ab676e375231005def2b43a
Sha256: 19962319c689a5ee69feceb80d82e12cb847d160fe5801723665ff69ca833675
                                        
                                            GET /modules.e8a3d1a16d3ae98012cf.js HTTP/1.1 
Host: script.hotjar.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             54.230.111.44
HTTP/2 200 OK
content-type: application/javascript
                                            
content-length: 68657
date: Fri, 17 Mar 2023 11:28:07 GMT
accept-ranges: bytes
access-control-allow-origin: *
cache-control: max-age=31536000
content-encoding: br
cross-origin-resource-policy: cross-origin
etag: "dcf3a7ce85da1a4b1e561e0ffdaada66"
last-modified: Fri, 17 Mar 2023 11:27:53 GMT
strict-transport-security: max-age=2592000; includeSubDomains
x-content-type-options: nosniff
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: JiptB5JlHunHRnowuJCT_4ap-T3EGWGQNkms9C5fYvGTNSnbidesGA==
age: 179013
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (50842)
Size:   68657
Md5:    dcf3a7ce85da1a4b1e561e0ffdaada66
Sha1:   4962d86ef0ad6965f791d0ded4bce07658bd4be2
Sha256: 56e3d41fae7cd8cf239dafbee15237a13c3e8375357ac64c84902b322bf10a48
                                        
                                            POST /g/collect?v=2&tid=G-F980XHG3H2&gtm=45je33f0&_p=346247978&cid=780495973.1679231513&ul=en-us&sr=1280x1024&_s=1&sid=1679231512&sct=1&seg=0&dl=https%3A%2F%2Fwww.happistar8.net%2F&dt=&en=page_view&_fv=1&_nsi=1&_ss=1 HTTP/1.1 
Host: region1.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.happistar8.net
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0

                                        
                                             216.239.32.36
HTTP/2 204 No Content
content-type: text/plain
                                            
access-control-allow-origin: https://www.happistar8.net
date: Sun, 19 Mar 2023 13:11:40 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

                                        
                                            POST / HTTP/1.1 
Host: ocsp.r2m02.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             54.230.80.227
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=96400
Date: Sun, 19 Mar 2023 13:11:40 GMT
Etag: "6415c859-1d7"
Expires: Mon, 20 Mar 2023 15:58:20 GMT
Last-Modified: Sat, 18 Mar 2023 14:19:05 GMT
Server: ECAcc (nya/78BE)
X-Cache: Miss from cloudfront
Via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: oD4ABLxB3Uk9KmwA313OQrjr-lVcuHv_7W8PLlvyOduHeJbi3gLI-w==
Age: 5955

                                        
                                            GET /events.js HTTP/1.1 
Host: tags.srv.stackadapt.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             3.219.162.91
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=utf-8
                                            
Date: Sun, 19 Mar 2023 13:11:41 GMT
Location: https://qvdt3feo.com/events.js
Content-Length: 65
Connection: keep-alive


--- Additional Info ---
Magic:  HTML document, ASCII text
Size:   65
Md5:    f80e89783ec551e69632712d99fd2224
Sha1:   a760361995b52b09f655a2bb469d7dd464619692
Sha256: c052ddf9a69031b36e27713dfc2ca1d3494de9e0436c5bb35d17d92dac2c61bd
                                        
                                            POST / HTTP/1.1 
Host: ocsp.r2m02.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             54.230.80.227
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=89240
Date: Sun, 19 Mar 2023 13:11:41 GMT
Etag: "6415aab8-1d7"
Expires: Mon, 20 Mar 2023 13:59:01 GMT
Last-Modified: Sat, 18 Mar 2023 12:12:40 GMT
Server: ECAcc (nya/7946)
X-Cache: Miss from cloudfront
Via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: on8vEQ5V44VWIVlmcG3KlGOfOH6etodgjh_oo68sgBEPxLkcKu_-QQ==
Age: 6381

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "49C07DA2AB4EBD66BD166BF0E20DD084B38973CD40C79F85EB283D15A1CCAC36"
Last-Modified: Sun, 19 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4005
Expires: Sun, 19 Mar 2023 14:18:26 GMT
Date: Sun, 19 Mar 2023 13:11:41 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "49C07DA2AB4EBD66BD166BF0E20DD084B38973CD40C79F85EB283D15A1CCAC36"
Last-Modified: Sun, 19 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4005
Expires: Sun, 19 Mar 2023 14:18:26 GMT
Date: Sun, 19 Mar 2023 13:11:41 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "49C07DA2AB4EBD66BD166BF0E20DD084B38973CD40C79F85EB283D15A1CCAC36"
Last-Modified: Sun, 19 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4005
Expires: Sun, 19 Mar 2023 14:18:26 GMT
Date: Sun, 19 Mar 2023 13:11:41 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "49C07DA2AB4EBD66BD166BF0E20DD084B38973CD40C79F85EB283D15A1CCAC36"
Last-Modified: Sun, 19 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4005
Expires: Sun, 19 Mar 2023 14:18:26 GMT
Date: Sun, 19 Mar 2023 13:11:41 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae7f77f1-adab-464f-87e7-4a15dcd322ba.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 6265
x-amzn-requestid: a40c18f5-e26f-48d0-982a-ebfc9fa92b9f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: B_wYuEa7IAMFneQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64162dd1-42b70f637dc3b2d222d98f9b;Sampled=0
x-amzn-remapped-date: Sat, 18 Mar 2023 21:32:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: UI-PcxN2YSytmygeVp4WBCSbtLH9egiAhP5vyJI7xN7iN1QAe1mqEA==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 5c7981a979abd51ba7e5ca7d464fd048.cloudfront.net (CloudFront), 1.1 google
date: Sat, 18 Mar 2023 21:44:34 GMT
age: 55627
etag: "ae05abedca84094ff077fdfb6b5ea0e6148a086b"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6265
Md5:    c70e6317e3ccd8783db05f712ab8b319
Sha1:   ae05abedca84094ff077fdfb6b5ea0e6148a086b
Sha256: 9d3edfaeab32dfa522cd0eac659b93eb561b33a91149428e7a5d7ec84431bb72
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F31bc1b3b-b0cb-4b7c-838d-1436ec0b5d1f.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 5182
x-amzn-requestid: f45565ee-eabc-4ad8-a99d-741db58f9a78
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Bp512FkBIAMFa2A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-640d7025-16e023e3220f7a1b657ccd9c;Sampled=0
x-amzn-remapped-date: Sun, 12 Mar 2023 06:24:37 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: PxMiQOj8NdN08ku_t4YAp1eGvKhDKGuTBAH4d_rH7IyOpiwQMhkmmA==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 cca7d60248a961ff8fc8c5640024b652.cloudfront.net (CloudFront), 1.1 google
date: Sat, 18 Mar 2023 22:03:47 GMT
age: 54474
etag: "a86af7d423edecc3b38a9144cffb08c97a48a9e2"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5182
Md5:    112dc4229d7cc2555230f8912cab9b69
Sha1:   a86af7d423edecc3b38a9144cffb08c97a48a9e2
Sha256: 82a06f06649ba1ac81f3d910167131ff66d13e0878e801c7b3beec958e39e51e
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3f28ddee-c5ae-4106-9ce2-9c8042cd4b69.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 11204
x-amzn-requestid: d84b9e32-9fea-45ce-87ef-508caff41b62
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: B8eTFG8GIAMFWmg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6414ddad-29cab07f73030a1145e941b6;Sampled=0
x-amzn-remapped-date: Fri, 17 Mar 2023 21:37:49 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: Xc_DEaSdASRg6uVEg6mNX7nLpGayEeELirucyulKL55Iv-ZRrYFLHA==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 3236f234d59c0fda99b416088c283260.cloudfront.net (CloudFront), 1.1 google
date: Sat, 18 Mar 2023 23:21:39 GMT
age: 49802
etag: "83339f33716c03c3ea995a323bb040b50f5b7edc"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   11204
Md5:    05370e6d7505b4529eea9e993f98e1fe
Sha1:   83339f33716c03c3ea995a323bb040b50f5b7edc
Sha256: 563d0b70a19778405fd332ca5172840a6103cd363771108e172b1b1815303abf
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8afa2cdb-a5f3-4c78-a2ab-132c8b752b4b.png HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 10338
x-amzn-requestid: 9f880b5b-056c-44bb-a811-36ea27c232aa
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BvSgFGENoAMFuVw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-640f9799-2318d444248f7610300c658f;Sampled=0
x-amzn-remapped-date: Mon, 13 Mar 2023 21:37:29 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: K19FG80YIBs-7NnPFJQEodETe4DpifB_BA2FpyYtB0W-sXXjNlLKxw==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 21618d080c6bfbcd465fc55a167a8c1a.cloudfront.net (CloudFront), 1.1 google
date: Sun, 19 Mar 2023 07:04:47 GMT
age: 22014
etag: "80519bb3726ee1f9f211344cd433cefaed3a7f2e"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10338
Md5:    78453ba98b72eff3879ef163b59c86ed
Sha1:   80519bb3726ee1f9f211344cd433cefaed3a7f2e
Sha256: 61adfeff11af9583355ac7d1500e8a8d97357b2846f151f2421001994fb06655
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe323f22e-6800-4578-a34f-a8fa940499e0.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 8189
x-amzn-requestid: 3815c61d-6d05-4794-bd9a-d417d1270527
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: B_wqgGsdIAMFi6g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64162e42-6af86b2a21b89d38559ca754;Sampled=0
x-amzn-remapped-date: Sat, 18 Mar 2023 21:33:54 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: n-Dbnb07Rsh0y_T4UW0VQSyRcV96MehdMiFlhdUtcrCiqZVL5ZVJxg==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 5c7981a979abd51ba7e5ca7d464fd048.cloudfront.net (CloudFront), 1.1 google
date: Sat, 18 Mar 2023 22:14:54 GMT
age: 53807
etag: "cc7b05fa466c6ecd6c8a0e0d6ccc96ecbd59aced"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8189
Md5:    6645ef8b7e2b10326cc1cb7c76f82769
Sha1:   cc7b05fa466c6ecd6c8a0e0d6ccc96ecbd59aced
Sha256: 1076fa495f0b7cc23922f64cc6a6f596de9a6f08ea7549eef785d804db0be7fc
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F948af7b9-8b3e-4159-bdaa-f68fedcc3497.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 7930
x-amzn-requestid: 276e0768-3943-40ba-9d6c-4f13ab08da51
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: B_wqXFwvoAMF1zA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64162e42-6f9e6903248d187d5d4a8544;Sampled=0
x-amzn-remapped-date: Sat, 18 Mar 2023 21:33:54 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: ZMNiK-tkkiBb_emHsrzLhJleK98OCtNZNGO-9DMMAbHyqfPB-2kAMg==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 f958a3846d80a3925f664b320dfad9c8.cloudfront.net (CloudFront), 1.1 google
date: Sat, 18 Mar 2023 21:48:16 GMT
age: 55405
etag: "fea1a6b2a38be6a09e086def71f521cc88509a0f"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7930
Md5:    790ee76f4db86cd0cc555f6d7beada2c
Sha1:   fea1a6b2a38be6a09e086def71f521cc88509a0f
Sha256: f7641b9e414006ee96daa82fd9d6aa1463d47c0388a9f3b289c563af76a3d2ef
                                        
                                            GET /sa.css HTTP/1.1 
Host: tags.srv.stackadapt.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             3.219.162.91
HTTP/1.1 200 OK
Content-Type: text/css
                                            
Access-Control-Allow-Origin: *
Cache-Control: only-if-cached, no-transform, private, max-age=7776000
Date: Sun, 19 Mar 2023 13:11:41 GMT
Content-Length: 27
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text
Size:   27
Md5:    83f5ba33314db5f218488a5a51da1455
Sha1:   87a21689afa235c4c65437334085be4bf5cca170
Sha256: 3f100e5e6ff270dadb43b44878f0118a2389dee0d844acc102b5179d70a824dc
                                        
                                            GET /?callback=_jsonp_0 HTTP/1.1 
Host: geo-lookup.iconvert.network
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             54.230.111.95
HTTP/2 200 OK
content-type: application/javascript
                                            
content-length: 23
x-amz-bucket-region: us-east-1
date: Sun, 19 Mar 2023 13:11:40 GMT
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 5SpmnGp_Uwd3GgegrBhg8JcIhkgW2WCbBYcztFsYIuVUg8sNBW08Sw==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   23
Md5:    77a2b27581b0e6f8e1866d12a9fb3460
Sha1:   0d6912f1aabf2f9f191883767a565846b6b23387
Sha256: 892b6da823563cbd0865b33fd6f805e495769f555aa11679fa72c82e56abe9fd
                                        
                                            POST / HTTP/1.1 
Host: ocsp.r2m02.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             54.230.80.227
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sun, 19 Mar 2023 13:11:41 GMT
Last-Modified: Sun, 19 Mar 2023 11:46:31 GMT
Server: ECAcc (nya/7993)
X-Cache: Miss from cloudfront
Via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 1Mqv9nLgU22bigLvj30L-elkG2E-VtFQ2cg37JTavUwRubspR7HWaw==
Age: 5110

                                        
                                            POST / HTTP/1.1 
Host: ocsp.r2m02.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             54.230.80.227
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sun, 19 Mar 2023 13:11:41 GMT
Last-Modified: Sun, 19 Mar 2023 12:13:33 GMT
Server: ECAcc (bsa/EB2E)
X-Cache: Miss from cloudfront
Via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: bXww7FU9I7P8bN5foDHLVlX-uzoi8EdmW_Ewp5RKIJja0HteVes3wg==
Age: 3488

                                        
                                            GET /sa.jpeg HTTP/1.1 
Host: tags.srv.stackadapt.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.happistar8.net/
Origin: https://www.happistar8.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             3.219.162.91
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                            
Access-Control-Allow-Origin: *
Cache-Control: only-if-cached, no-transform, private, max-age=7776000
Date: Sun, 19 Mar 2023 13:11:41 GMT
Content-Length: 651
Connection: keep-alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1x1, components 3\012- data
Size:   651
Md5:    0b6210218f2608415c19884e4ea72c72
Sha1:   8ae1b352cf6bbc3cf54dce2b0695d471d63d886d
Sha256: 7a5fe50309c83dc6a3f5052674b5f7b670bec290712daf79ae6620975507e577
                                        
                                            OPTIONS /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 
Host: event.iconvert.network
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.happistar8.net/
Origin: https://www.happistar8.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             63.34.92.160
HTTP/2 200 OK
                                            
date: Sun, 19 Mar 2023 13:11:42 GMT
content-length: 0
access-control-allow-origin: https://www.happistar8.net
access-control-allow-credentials: true
access-control-allow-headers: Content-Type
access-control-max-age: 5
server: akka-http/10.0.9
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  gzip compressed data, from Unix\012- data
Size:   27022
Md5:    a1ade6f31c0b3797538b6add54e194a2
Sha1:   bcff8448d642fe2410eacf97b5a8cf373053b683
Sha256: 6eba1f576e370aa0bf5b4cf78d4b2b22949d6edcb9a3a508d76ea8b996d2255a
                                        
                                            POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 
Host: event.iconvert.network
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
Content-Length: 568
Origin: https://www.happistar8.net
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             63.34.92.160
HTTP/2 200 OK
content-type: text/plain; charset=UTF-8
                                            
date: Sun, 19 Mar 2023 13:11:42 GMT
content-length: 2
set-cookie: sp=ca5aa34c-9843-4235-b70f-ab8828bab2fd; Expires=Mon, 18 Mar 2024 13:11:42 GMT; Path=/
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA"
access-control-allow-origin: https://www.happistar8.net
access-control-allow-credentials: true
server: akka-http/10.0.9
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   2
Md5:    444bcb3a3fcf8389296c49467f27e1d6
Sha1:   7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
Sha256: 2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
                                        
                                            GET /saq_pxl?uid=ul7Y3H07ahBrTpjMaDhdjw&is_js=true&landing_url=https%3A%2F%2Fwww.happistar8.net%2F&t=&tip=XYT0qCO_tplYV1MxFmzroDrn7S1AP1kLhIOyYbIUVH8&host=https://www.happistar8.net&sa-user-id-v2=s%253ASv_g99LRXvhf-jx7OsNOaltaKpo.vKGdarGDDylK3CgBb4ic4Nw3I0tJwKdnD8LWhkzn3r8&sa-user-id=s%253A0-4affe0f7-d2d1-5ef8-5ffa-3c7b3ac34e6a.Sxx%252BM%252BlpsbrHzyB2Rf0exT1zgnbpRn4%252B3xh6qnlECdE HTTP/1.1 
Host: tags.srv.stackadapt.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.happistar8.net
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             3.219.162.91
HTTP/1.1 200 OK
Content-Type: text/plain; charset=utf-8
                                            
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: https://www.happistar8.net
Date: Sun, 19 Mar 2023 13:11:42 GMT
Content-Length: 94
Connection: keep-alive


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   94
Md5:    2d12c1129f6ff37622d03db4a2a5949e
Sha1:   bc44653c4a06e671ce423600755fed86fad8ec24
Sha256: 078f3dd88e751c3c421b2007e1cb27bcb65a95daf278bd25de81ba7b2bf3c4e4
                                        
                                            GET /blackbox/raw/upload/v1646033793/fonts/NotoSans-Regular.woff2 HTTP/1.1 
Host: res.cloudinary.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.happistar8.net
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             151.101.1.137
HTTP/2 200 OK
content-type: application/octet-stream
                                            
content-disposition: attachment; filename="NotoSans-Regular.woff2"
etag: "e50c34178d20d5fa4ab3c1f6c67901a9"
last-modified: Mon, 28 Feb 2022 07:36:34 GMT
date: Sun, 19 Mar 2023 13:11:42 GMT
strict-transport-security: max-age=604800
cache-control: public, no-transform, immutable, max-age=2592000
server-timing: fastly;dur=385;cpu=195;start=2023-03-19T13:11:42.022Z;desc=miss,rtt;dur=9,cloudinary;dur=97;start=2023-03-19T13:11:42.264Z
server: Cloudinary
timing-allow-origin: *
access-control-allow-origin: *
accept-ranges: bytes
access-control-expose-headers: Content-Length,Content-Disposition,ETag,Server-Timing
content-length: 117948
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 117948, version 1.0\012- data
Size:   117948
Md5:    e50c34178d20d5fa4ab3c1f6c67901a9
Sha1:   655dcb4d829e2bc75e9a7cf8a2aa08f6a4513634
Sha256: 5b43a0c0c7874410cd01de2ec8684785b550295350f5d92901f4c9090f1ab019
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             192.229.221.95
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 3819
Cache-Control: max-age=141035
Date: Sun, 19 Mar 2023 13:11:42 GMT
Etag: "64167f0e-1d7"
Expires: Tue, 21 Mar 2023 04:22:17 GMT
Last-Modified: Sun, 19 Mar 2023 03:18:38 GMT
Server: ECAcc (ska/F73A)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /tr?id=1677021112574000&ev=PageView&noscript=1 HTTP/1.1 
Host: www.facebook.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             31.13.72.36
HTTP/2 200 OK
content-type: text/plain
                                            
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Sun, 19 Mar 2023 13:11:42 GMT
X-Firefox-Spdy: h2

                                        
                                            GET /widget/config_iframe.html?host=https://wchat.freshchat.com&token=519b4315-2f72-4655-a0dd-8ee6f3b800ed&origin=https://www.happistar8.net HTTP/1.1 
Host: wchat.freshchat.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                        
                                             54.152.199.76
HTTP/1.1 200 OK
Content-Type: text/html
                                            
Date: Sun, 19 Mar 2023 13:11:42 GMT
Transfer-Encoding: chunked
Connection: keep-alive
server: fwe
last-modified: Mon, 13 Mar 2023 12:19:13 GMT
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: no-cache, no-store, must-revalidate, pre-check=0, post-check=0
served-by: 9886
x-server: 9886
content-security-policy: style-src 'unsafe-inline' *; font-src 'self' * data:; img-src 'self' * data:; connect-src 'self' *; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.freshchat.com https://*.freshworksapi.com; child-src 'self' * blob:; media-src 'self' https://*.freshchat.com; manifest-src 'self' https://*.freshchat.com; default-src 'none';
content-encoding: gzip
x-envoy-upstream-service-time: 0
x-trace-id: 00-beb1b8d4dcd026cf6d5e0ce3532a1b40-bf40ef6d6bdac698-00
nel: { "report_to": "nel-endpoint-freshchat", "max_age": 2592000, "include_subdomains": true}
report-to: { "group": "nel-endpoint-freshchat", "max_age": 2592000, "include_subdomains": true, "endpoints": [{"url": "https://edge-admin.us-east-1.freshedge.net/nelreports/freshchat"}]}
x-fw-ratelimiting-managed: false
x-request-id: baf314e0-8490-4dc1-9003-86ece0c037d8


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   362
Md5:    3ac453172e6fdcbb79853573af142482
Sha1:   720faff74171d2b936ca252c3a862d2ef34513c9
Sha256: 449fcf3693a59e7b76ad269511a47518a49f994b74e521441a92e5dc193f3928
                                        
                                            GET /css2?family=Noto+Sans+JP:wght@100&display=swap HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.106
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                            
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 19 Mar 2023 13:11:41 GMT
date: Sun, 19 Mar 2023 13:11:41 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   57651
Md5:    b1dd1a911afe67a9b7f456b9d080ca77
Sha1:   da1a3afbb0b652039bdada3796f9b0e315ab9c2d
Sha256: 226a3d3fd759fbebc1bfaa856e621228f9a0f5001c22a7f052f802fb543e51f6
                                        
                                            GET / HTTP/1.1 
Host: eu-swarm-ws-re.deimosphobos.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://www.happistar8.net
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: uPyGEb+rnsWd+o12rNMg7Q==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                        
                                             185.162.228.4
HTTP/1.1 101 Switching Protocols
                                            
Date: Sun, 19 Mar 2023 13:11:42 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 67ADPDxnpWXoyzWS9bh73hDd2vU=
Sec-Websocket-Extensions: permessage-deflate; server_no_context_takeover; client_no_context_takeover
Via: 1.1 google
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7aa5f67b9ec3b4f1-OSL

                                        
                                            GET /content/images/payments/custom/1876513/12087.png?2023-03-17%2017:13:33 HTTP/1.1 
Host: cmsbetconstruct.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             185.162.228.3
HTTP/2 200 OK
content-type: image/png
                                            
date: Sun, 19 Mar 2023 13:11:43 GMT
content-length: 5660
last-modified: Tue, 28 Feb 2023 00:45:31 GMT
etag: "63fd4eab-161c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67dbaadb4ee-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 318 x 113, 8-bit/color RGBA, non-interlaced\012- data
Size:   5660
Md5:    57d3e43d0e13a3a614bb02a7dd546063
Sha1:   9a618b4099de854ce0e9740d5f56f95a724e09d8
Sha256: 5cd255b0c22072f4d809151b07a6dff3db9a3d6725949d8073acc9428001a864
                                        
                                            GET /json?base_host=www.goldblue-1876513.com&ssl=1&lang=eng&json=get_page&slug=homepage-backgrounds-eng&children=1&country=NO&exclude=author,excerpt,comments,comment_status,comment_count,tags,attachments HTTP/1.1 
Host: cmsbetconstruct.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.happistar8.net
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             185.162.228.3
HTTP/2 200 OK
content-type: application/json
                                            
date: Sun, 19 Mar 2023 13:11:42 GMT
expires: Sun, 19 Mar 2023 13:26:42 GMT
cache-control: max-age=900
x-frame-options: SAMEORIGIN
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 1000
access-control-allow-headers: X-Requested-With, Content-Type, Origin, Authorization, Accept, Client-Security-Token, Accept-Encoding, Content-Key-Case, Access-Token, Accept-Response
access-control-allow-methods: POST, GET, PUT, PATCH, DELETE, OPTIONS
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67c081fb4ee-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (1002), with no line terminators
Size:   10396
Md5:    f9496c1ce89e9fbeba4decdc4a8493d2
Sha1:   66ffd7fc7e96adec76170da0c217e7cd070cb262
Sha256: 954ef7b500bc41bfc986c9fae944909dd6562225cd8359b06f29fcdc37f57146
                                        
                                            GET /content/images/payments/custom/1876513/8336.png?2023-03-17%2017:13:33 HTTP/1.1 
Host: cmsbetconstruct.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             185.162.228.3
HTTP/2 200 OK
content-type: image/png
                                            
date: Sun, 19 Mar 2023 13:11:43 GMT
content-length: 3188
last-modified: Fri, 14 Oct 2022 12:24:24 GMT
etag: "634954f8-c74"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67deb08b4ee-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 318 x 113, 8-bit colormap, non-interlaced\012- data
Size:   3188
Md5:    b455fc8ae5ddac3f20f036d36ccf1e64
Sha1:   acdaed72a76f629502a9dc7c3016dd728db34374
Sha256: a22b7034ffba5deba0e075310780b0f64c052d4a766f02950e230538fedb305b
                                        
                                            GET /content/images/payments/custom/1876513/11446.png?2023-03-17%2017:13:33 HTTP/1.1 
Host: cmsbetconstruct.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             185.162.228.3
HTTP/2 200 OK
content-type: image/png
                                            
date: Sun, 19 Mar 2023 13:11:43 GMT
content-length: 11439
last-modified: Thu, 16 Feb 2023 00:49:44 GMT
etag: "63ed7da8-2caf"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67deb17b4ee-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 318 x 118, 8-bit/color RGBA, non-interlaced\012- data
Size:   11439
Md5:    6fefe7d925dd3cd5db15dcd56de3c109
Sha1:   219ad600ca4e862ea4ba10506a0429df5c40e962
Sha256: 5b11fc8a402d3d4e58ba729d7d0e5cc52c901f3ec64ecf75637d992b3777f65c
                                        
                                            GET /content/images/payments/custom/1876513/7148.png?2023-03-17%2017:13:33 HTTP/1.1 
Host: cmsbetconstruct.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             185.162.228.3
HTTP/2 200 OK
content-type: image/png
                                            
date: Sun, 19 Mar 2023 13:11:43 GMT
content-length: 10883
last-modified: Wed, 09 Nov 2022 19:54:26 GMT
etag: "636c0572-2a83"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67dbabab4ee-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 318 x 113, 8-bit/color RGBA, non-interlaced\012- data
Size:   10883
Md5:    94fab9632a0d46b8c1f8c2e8b5d8f1d0
Sha1:   f73a1d53ed3e62bc2a425f034dbca1fb7e82df55
Sha256: cf1e9d29c086e53098aa7a78d61f477ad6f6fd43e7b300e81f0f974692abdf68
                                        
                                            GET /content/images/payments/custom/1876513/2268.png?2023-03-17%2017:13:33 HTTP/1.1 
Host: cmsbetconstruct.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             185.162.228.3
HTTP/2 200 OK
content-type: image/png
                                            
date: Sun, 19 Mar 2023 13:11:43 GMT
content-length: 2686
last-modified: Fri, 14 Oct 2022 12:26:59 GMT
etag: "63495593-a7e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67dcad5b4ee-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 318 x 113, 8-bit colormap, non-interlaced\012- data
Size:   2686
Md5:    26023fc1bf78f651dc49fae12c6d87bb
Sha1:   9ef326279179a1e21d5b65e8d7ac6c159c796f1b
Sha256: 8486a39eb87109068164eac468aa03e0f933abdae3d3c9f184adea5f29b68219
                                        
                                            GET /content/images/payments/custom/1876513/48.png?2023-03-17%2017:13:33 HTTP/1.1 
Host: cmsbetconstruct.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             185.162.228.3
HTTP/2 200 OK
content-type: image/png
                                            
date: Sun, 19 Mar 2023 13:11:43 GMT
content-length: 3218
last-modified: Fri, 14 Oct 2022 12:23:03 GMT
etag: "634954a7-c92"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67dcacbb4ee-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 318 x 113, 8-bit colormap, non-interlaced\012- data
Size:   3218
Md5:    de0f1ef089aa38d0a3dd87a4416a6191
Sha1:   7b74117ff2422f49b8ce96e8940fdcfd44df4b71
Sha256: 5c70723b41250981e3186bc4b82bff4ffa9d4b6dcde54026812232242453625f
                                        
                                            GET /content/images/payments/custom/1876513/10756.png?2023-03-17%2017:13:33 HTTP/1.1 
Host: cmsbetconstruct.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             185.162.228.3
HTTP/2 200 OK
content-type: image/png
                                            
date: Sun, 19 Mar 2023 13:11:43 GMT
content-length: 5660
last-modified: Fri, 10 Feb 2023 03:28:47 GMT
etag: "63e5b9ef-161c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67dbac0b4ee-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 318 x 113, 8-bit/color RGBA, non-interlaced\012- data
Size:   5660
Md5:    57d3e43d0e13a3a614bb02a7dd546063
Sha1:   9a618b4099de854ce0e9740d5f56f95a724e09d8
Sha256: 5cd255b0c22072f4d809151b07a6dff3db9a3d6725949d8073acc9428001a864
                                        
                                            GET /content/images/payments/custom/1876513/12003.png?2023-03-17%2017:13:33 HTTP/1.1 
Host: cmsbetconstruct.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             185.162.228.3
HTTP/2 200 OK
content-type: image/png
                                            
date: Sun, 19 Mar 2023 13:11:43 GMT
content-length: 10319
last-modified: Thu, 02 Feb 2023 09:52:40 GMT
etag: "63db87e8-284f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67dcad3b4ee-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 318 x 113, 8-bit/color RGBA, non-interlaced\012- data
Size:   10319
Md5:    95722f737681b6389cc4034a01e6c5d8
Sha1:   b76832988772f90e434cd37529e90ead4f04f4ac
Sha256: c053f99531583b7b09ceeb77cca378ead9d42092dd74b41c4f773bbc109bc137
                                        
                                            GET /content/images/payments/custom/1876513/8992.png?2023-03-17%2017:13:33 HTTP/1.1 
Host: cmsbetconstruct.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             185.162.228.3
HTTP/2 200 OK
content-type: image/png
                                            
date: Sun, 19 Mar 2023 13:11:43 GMT
content-length: 4648
last-modified: Fri, 14 Oct 2022 12:40:20 GMT
etag: "634958b4-1228"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67ddadcb4ee-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 318 x 113, 8-bit colormap, non-interlaced\012- data
Size:   4648
Md5:    eda7f1960f46b5ee0e8f91d22e73fee8
Sha1:   9055a8f5c45d3baa4a31298298c66e24fe51eadf
Sha256: b4f17a42e5a815069acdd6263b4746637e8f8fee75c7ed643754d4fd0c86b8d7
                                        
                                            GET /content/images/payments/custom/1876513/900.png?2023-03-17%2017:13:33 HTTP/1.1 
Host: cmsbetconstruct.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             185.162.228.3
HTTP/2 200 OK
content-type: image/png
                                            
date: Sun, 19 Mar 2023 13:11:43 GMT
content-length: 13236
last-modified: Mon, 14 Nov 2022 12:48:24 GMT
etag: "63723918-33b4"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67ddadeb4ee-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 318 x 113\012- data
Size:   13236
Md5:    5696f64a115f15e47feb847e5125e01e
Sha1:   0fe1ece7be5ef4522048af4e17a8bb725cac5a6d
Sha256: d4700f6eb0b50788982636aabc33c6dd2911d4430f80a93d4f74648c886757b0
                                        
                                            GET /content/images/payments/custom/1876513/5340.png?2023-03-17%2017:13:33 HTTP/1.1 
Host: cmsbetconstruct.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             185.162.228.3
HTTP/2 200 OK
content-type: image/png
                                            
date: Sun, 19 Mar 2023 13:11:43 GMT
content-length: 6104
last-modified: Mon, 14 Nov 2022 12:51:13 GMT
etag: "637239c1-17d8"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67dfb43b4ee-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 318 x 113\012- data
Size:   6104
Md5:    272033251f9bd4c235ec87adc59f2c9f
Sha1:   789bc8b31f4919f2e40d17bf01c3f041f794e883
Sha256: 2223f02ad9b6f24750ce57ff7bdc438407e74164a31b708a9f04ab4f22e0aa85
                                        
                                            GET /content/images/payments/custom/1876513/9333.png?2023-03-17%2017:13:33 HTTP/1.1 
Host: cmsbetconstruct.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             185.162.228.3
HTTP/2 200 OK
content-type: image/png
                                            
date: Sun, 19 Mar 2023 13:11:43 GMT
content-length: 2003
last-modified: Fri, 14 Oct 2022 12:34:44 GMT
etag: "63495764-7d3"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67ddae5b4ee-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 318 x 113, 8-bit colormap, non-interlaced\012- data
Size:   2003
Md5:    9ebc9a820be66e21a25ee526c8509c97
Sha1:   04d633525b93a9b54b8520bb0f0aa8b6e102d87f
Sha256: fb6f3cbb17263fb31f03f8d22e807a8577c18a8fe0b1a80dec119bbdcee29b51
                                        
                                            GET /content/images/payments/custom/1876513/9308.png?2023-03-17%2017:13:33 HTTP/1.1 
Host: cmsbetconstruct.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             185.162.228.3
HTTP/2 200 OK
content-type: image/png
                                            
date: Sun, 19 Mar 2023 13:11:43 GMT
content-length: 1122
last-modified: Thu, 30 Jun 2022 09:44:47 GMT
etag: "62bd708f-462"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67e1b6fb4ee-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 146 x 42, 8-bit colormap, non-interlaced\012- data
Size:   1122
Md5:    d1427643559f3dcaed4325d3bafd0223
Sha1:   2ba0b811debbc13074beeb640adb1ee0a3238002
Sha256: d55ac1043fc224426d34073cf8ea480cf0d058f552876499484749787de01422
                                        
                                            GET /content/images/payments/custom/1876513/11447.png?2023-03-17%2017:13:33 HTTP/1.1 
Host: cmsbetconstruct.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             185.162.228.3
HTTP/2 200 OK
content-type: image/png
                                            
date: Sun, 19 Mar 2023 13:11:43 GMT
content-length: 5036
last-modified: Tue, 08 Nov 2022 09:06:35 GMT
etag: "636a1c1b-13ac"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67deb1ab4ee-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 318 x 113, 8-bit/color RGBA, non-interlaced\012- data
Size:   5036
Md5:    0228010e1e54f947aabd6c27fe6594ca
Sha1:   75704da62eedabbd6f29db38e1db7be7c377bff2
Sha256: 054f3f3863e5c7c93cc7076026ee8e14843467810db94db304f8b9c07851e07b
                                        
                                            GET /content/images/payments/custom/1876513/11888.png?2023-03-17%2017:13:33 HTTP/1.1 
Host: cmsbetconstruct.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             185.162.228.3
HTTP/2 200 OK
content-type: image/png
                                            
date: Sun, 19 Mar 2023 13:11:43 GMT
content-length: 10250
last-modified: Thu, 26 Jan 2023 12:03:42 GMT
etag: "63d26c1e-280a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67e1b83b4ee-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 318 x 113, 8-bit colormap, non-interlaced\012- data
Size:   10250
Md5:    422e01c3a74151acc4acfb194346095a
Sha1:   bc7265f01ee549e9ceaa4f701c0c9b88a6bfe153
Sha256: 3ecea094d511da8170215f8cec203715032f0b147610f6acdf95045d3a7788fa
                                        
                                            GET /content/images/payments/custom/1876513/11448.png?2023-03-17%2017:13:33 HTTP/1.1 
Host: cmsbetconstruct.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             185.162.228.3
HTTP/2 200 OK
content-type: image/png
                                            
date: Sun, 19 Mar 2023 13:11:43 GMT
content-length: 7900
last-modified: Fri, 11 Nov 2022 04:46:44 GMT
etag: "636dd3b4-1edc"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67deb20b4ee-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 318 x 113\012- data
Size:   7900
Md5:    194bd8438725dffbd3cad9b048eb24ea
Sha1:   f9ed406e1b1830fad1a384816bcee069fbc5caf2
Sha256: e8d13fcbde1b94807ed56ef35cf7f16cb32baba4144f7a46685240ea117a1b83
                                        
                                            GET /content/images/payments/custom/1876513/9399.png?2023-03-17%2017:13:33 HTTP/1.1 
Host: cmsbetconstruct.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             185.162.228.3
HTTP/2 200 OK
content-type: image/png
                                            
date: Sun, 19 Mar 2023 13:11:43 GMT
content-length: 5890
last-modified: Fri, 14 Oct 2022 12:40:40 GMT
etag: "634958c8-1702"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67deb03b4ee-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 318 x 113, 8-bit colormap, non-interlaced\012- data
Size:   5890
Md5:    5891f7b4f1182b1bc1d271dbf8ee7fbb
Sha1:   f5968fa6fefcd5132071ffe910b7642432776aa6
Sha256: 95d93717098b8098e64b3ac9bf383a72ce62078c011defe9ae0ee45715ee5000
                                        
                                            GET /skins/goldblue-1876513.cms.betconstruct.com/images/imageInsteadPayments.png?v=2023-03-17%2017:13:33 HTTP/1.1 
Host: cmsbetconstruct.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             185.162.228.3
HTTP/2 200 OK
content-type: image/png
                                            
date: Sun, 19 Mar 2023 13:11:43 GMT
content-length: 34927
last-modified: Wed, 24 Nov 2021 06:11:51 GMT
etag: "619dd7a7-886f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7aa5f67d9a90b4ee-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 940 x 265, 8-bit/color RGBA, non-interlaced\012- data
Size:   34927
Md5:    00e4a84c6f0fefe57a9595302d0c41e2
Sha1:   559d1f578ba3f0074587efbd4cea80c6c2b5061a
Sha256: 1b953a039ab224aa42aa9caa00ed201f16d746db5eb93e6e6fc0b6bbf7e7bdc1
                                        
                                            GET /content/images/payments/custom/1876513/9756.png?2023-03-17%2017:13:33 HTTP/1.1 
Host: cmsbetconstruct.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             185.162.228.3
HTTP/2 200 OK
content-type: image/png
                                            
date: Sun, 19 Mar 2023 13:11:43 GMT
content-length: 5635
last-modified: Sat, 22 Oct 2022 17:36:07 GMT
etag: "63542a07-1603"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67e0b47b4ee-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 318 x 113, 8-bit colormap, non-interlaced\012- data
Size:   5635
Md5:    32f61a7903af7e8423b5e685848366fc
Sha1:   296e5101bf3a83723288a697d545847baa2c6418
Sha256: 180378f3ee6cf29b64a285fc353d4def77c1bb37ea383fdc2e522615b846cf8d
                                        
                                            GET /content/images/payments/custom/1876513/5341.png?2023-03-17%2017:13:33 HTTP/1.1 
Host: cmsbetconstruct.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             185.162.228.3
HTTP/2 200 OK
content-type: image/png
                                            
date: Sun, 19 Mar 2023 13:11:43 GMT
content-length: 10465
last-modified: Mon, 14 Nov 2022 13:18:40 GMT
etag: "63724030-28e1"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67e0b48b4ee-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 318 x 115\012- data
Size:   10465
Md5:    4843956bc8c6c22485de4880c5ea19e5
Sha1:   97ec1a0ebec8ee1ad47201fe56f9baa8f1a32637
Sha256: bced5076e617334433683fde7c345c73994a5705a6cd1afa1ff922da3cb37c7c
                                        
                                            GET /content/images/payments/custom/1876513/9005.png?2023-03-17%2017:13:33 HTTP/1.1 
Host: cmsbetconstruct.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             185.162.228.3
HTTP/2 200 OK
content-type: image/png
                                            
date: Sun, 19 Mar 2023 13:11:43 GMT
content-length: 5591
last-modified: Tue, 13 Dec 2022 13:33:52 GMT
etag: "63987f40-15d7"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67e0b4eb4ee-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 318 x 111, 8-bit/color RGBA, non-interlaced\012- data
Size:   5591
Md5:    531e1067dd501ce5e8fdd810117a727d
Sha1:   a381f2fa96855b86e5dc8eca32c8d5c78eb1d13e
Sha256: 624fd34b05b7961c1234fe1b808632a78f45cabb9037acc52cf1847a7457b9bd
                                        
                                            GET /content/images/payments/custom/1876513/11571.png?2023-03-17%2017:13:33 HTTP/1.1 
Host: cmsbetconstruct.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             185.162.228.3
HTTP/2 200 OK
content-type: image/png
                                            
date: Sun, 19 Mar 2023 13:11:43 GMT
content-length: 6436
last-modified: Tue, 14 Feb 2023 00:29:03 GMT
etag: "63ead5cf-1924"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67e0b4fb4ee-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 150 x 150\012- data
Size:   6436
Md5:    418ff4b244d85f77bd2cf0a5c7fd96fa
Sha1:   f2bee0ef1aba1f204ed123d8672c39993856af58
Sha256: b1f471fc936b79915b74b4e8b90f56eaddbc010a1cc94db6f04f2800a0c79dd4
                                        
                                            GET /content/images/payments/custom/1876513/12097.png?2023-03-17%2017:13:33 HTTP/1.1 
Host: cmsbetconstruct.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             185.162.228.3
HTTP/2 200 OK
content-type: image/png
                                            
date: Sun, 19 Mar 2023 13:11:43 GMT
content-length: 6591
last-modified: Fri, 10 Feb 2023 07:06:29 GMT
etag: "63e5ecf5-19bf"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67e1b65b4ee-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 318 x 113, 8-bit colormap, non-interlaced\012- data
Size:   6591
Md5:    a80a7eab178a901ddb3af657ccdecb29
Sha1:   815b1350936ca0f0860353906a9513b5ae790f82
Sha256: d7475a6e85edd76444d7a2f1d85eb0dc154104fa482fe43b593248992e43c527
                                        
                                            GET /content/images/payments/custom/1876513/11449.png?2023-03-17%2017:13:33 HTTP/1.1 
Host: cmsbetconstruct.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             185.162.228.3
HTTP/2 200 OK
content-type: image/png
                                            
date: Sun, 19 Mar 2023 13:11:43 GMT
content-length: 5635
last-modified: Tue, 08 Nov 2022 09:08:49 GMT
etag: "636a1ca1-1603"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67dfb42b4ee-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 318 x 113, 8-bit colormap, non-interlaced\012- data
Size:   5635
Md5:    32f61a7903af7e8423b5e685848366fc
Sha1:   296e5101bf3a83723288a697d545847baa2c6418
Sha256: 180378f3ee6cf29b64a285fc353d4def77c1bb37ea383fdc2e522615b846cf8d
                                        
                                            GET /content/images/payments/custom/1876513/445.png?2023-03-17%2017:13:33 HTTP/1.1 
Host: cmsbetconstruct.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             185.162.228.3
HTTP/2 200 OK
content-type: image/png
                                            
date: Sun, 19 Mar 2023 13:11:43 GMT
content-length: 14411
last-modified: Mon, 14 Nov 2022 13:10:16 GMT
etag: "63723e38-384b"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67ddae8b4ee-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 318 x 115\012- data
Size:   14411
Md5:    45169226a24bc4f4ea5b9d61265d8cce
Sha1:   ef99378eebd72a1230055c3ed2ddc4297c04e11b
Sha256: c19d797a31db31401200f139d0665100dd2ed53b0495647ac8a2b0ff96a589a9
                                        
                                            GET /content/images/payments/custom/1876513/11820.png?2023-03-17%2017:13:33 HTTP/1.1 
Host: cmsbetconstruct.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             185.162.228.3
HTTP/2 200 OK
content-type: image/png
                                            
date: Sun, 19 Mar 2023 13:11:43 GMT
content-length: 5558
last-modified: Mon, 12 Dec 2022 08:29:58 GMT
etag: "6396e686-15b6"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67e1b6ab4ee-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 318 x 113, 8-bit colormap, non-interlaced\012- data
Size:   5558
Md5:    8b357acc464df96d802e8188fef1851f
Sha1:   92158d86335a38a8d5662a889629a34e36197878
Sha256: cfc54a1af3186adb914b67fb2fda15c176560f36c68a98458ded8ced90c2b8ed
                                        
                                            GET /content/images/payments/custom/1876513/12554.png?2023-03-17%2017:13:33 HTTP/1.1 
Host: cmsbetconstruct.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             185.162.228.3
HTTP/2 200 OK
content-type: image/png
                                            
date: Sun, 19 Mar 2023 13:11:43 GMT
content-length: 9282
last-modified: Tue, 28 Feb 2023 09:28:02 GMT
etag: "63fdc922-2442"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67e0b54b4ee-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 318 x 113, 8-bit/color RGBA, non-interlaced\012- data
Size:   9282
Md5:    9eac456116105998c3849f40ea09ec67
Sha1:   65e250c1e8331c5bf03569ddc623ee0ad105fb90
Sha256: 3c98580681389c15a3a3cc1a12d82f1639480298dde32dd1f71b0a47ae80e0bd
                                        
                                            GET /content/images/payments/custom/1876513/12090.png?2023-03-17%2017:13:33 HTTP/1.1 
Host: cmsbetconstruct.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             185.162.228.3
HTTP/2 200 OK
content-type: image/png
                                            
date: Sun, 19 Mar 2023 13:11:43 GMT
content-length: 4652
last-modified: Thu, 12 Jan 2023 06:33:34 GMT
etag: "63bfa9be-122c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67e1b72b4ee-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 318 x 113, 8-bit colormap, non-interlaced\012- data
Size:   4652
Md5:    5a4420e29e11d106172fb24cf100de02
Sha1:   eb13065cc3bd4c94377e5e5336cf1cb5066ff0d4
Sha256: 45189b4eb78fecfe37da0b1f66537ca36f24c2cf9d77aac1d545ca67749335bb
                                        
                                            GET /content/images/payments/custom/1876513/11692.png?2023-03-17%2017:13:33 HTTP/1.1 
Host: cmsbetconstruct.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             185.162.228.3
HTTP/2 200 OK
content-type: image/png
                                            
date: Sun, 19 Mar 2023 13:11:43 GMT
content-length: 6436
last-modified: Thu, 24 Nov 2022 09:09:07 GMT
etag: "637f34b3-1924"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67e1b82b4ee-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 150 x 150\012- data
Size:   6436
Md5:    418ff4b244d85f77bd2cf0a5c7fd96fa
Sha1:   f2bee0ef1aba1f204ed123d8672c39993856af58
Sha256: b1f471fc936b79915b74b4e8b90f56eaddbc010a1cc94db6f04f2800a0c79dd4
                                        
                                            GET /content/images/payments/custom/1876513/11761.png?2023-03-17%2017:13:33 HTTP/1.1 
Host: cmsbetconstruct.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             185.162.228.3
HTTP/2 200 OK
content-type: image/png
                                            
date: Sun, 19 Mar 2023 13:11:43 GMT
content-length: 6844
last-modified: Fri, 27 Jan 2023 02:34:34 GMT
etag: "63d3383a-1abc"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67e1b81b4ee-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 318 x 113, 8-bit colormap, non-interlaced\012- data
Size:   6844
Md5:    2a03c2f14d7d9e46953f67344c0c320e
Sha1:   08910abe37dd262a332b7d5ca6dbbf2b9bd0b3e4
Sha256: 858ae514eadd2ee0c89454811b7751b7cd69938d8c80f400fc75cc3a4297f319
                                        
                                            GET /content/images/payments/custom/1876513/10178.png?2023-03-17%2017:13:33 HTTP/1.1 
Host: cmsbetconstruct.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             185.162.228.3
HTTP/2 200 OK
content-type: image/png
                                            
date: Sun, 19 Mar 2023 13:11:43 GMT
content-length: 2475
last-modified: Fri, 14 Oct 2022 13:31:34 GMT
etag: "634964b6-9ab"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67e1b61b4ee-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 318 x 113, 8-bit colormap, non-interlaced\012- data
Size:   2475
Md5:    b527befee93e6dc72afb2568fe464e7e
Sha1:   886d13c27a5fc5de62bba7d1e0627ba4bb889f9e
Sha256: a10e02cf44eed932145bee0898aaff6184b0ac7b6ac0f4ba906d9c4a671189ce
                                        
                                            GET /content/images/payments/custom/1876513/10586.png?2023-03-17%2017:13:33 HTTP/1.1 
Host: cmsbetconstruct.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             185.162.228.3
HTTP/2 200 OK
content-type: image/png
                                            
date: Sun, 19 Mar 2023 13:11:43 GMT
content-length: 5722
last-modified: Fri, 14 Oct 2022 13:32:52 GMT
etag: "63496504-165a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67e1b71b4ee-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 318 x 113, 8-bit colormap, non-interlaced\012- data
Size:   5722
Md5:    80ba1efee9d1d7526f5540c03b4f2f34
Sha1:   7ee1bdc39e5027c35419f6d1642ff4ad71c9ecda
Sha256: 2578ab91f41df1a2d7910a32dc25f412c990bcced986eec9883c341027f69757
                                        
                                            GET /content/images/payments/custom/1876513/11762.png?2023-03-17%2017:13:33 HTTP/1.1 
Host: cmsbetconstruct.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             185.162.228.3
HTTP/2 200 OK
content-type: image/png
                                            
date: Sun, 19 Mar 2023 13:11:43 GMT
content-length: 4597
last-modified: Thu, 12 Jan 2023 06:33:19 GMT
etag: "63bfa9af-11f5"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67e1b67b4ee-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 318 x 113, 8-bit colormap, non-interlaced\012- data
Size:   4597
Md5:    906abf9eb0df0ec0aa6f023906eefd44
Sha1:   d8ed1cca4a726297615dc820e0646acb6228e716
Sha256: 38d5eafafc37028c5edb96b0501b4391cce54104c616f5400f87267a50671d48
                                        
                                            GET /content/images/payments/custom/1876513/10547.png?2023-03-17%2017:13:33 HTTP/1.1 
Host: cmsbetconstruct.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             185.162.228.3
HTTP/2 200 OK
content-type: image/png
                                            
date: Sun, 19 Mar 2023 13:11:43 GMT
content-length: 4434
last-modified: Fri, 14 Oct 2022 13:34:52 GMT
etag: "6349657c-1152"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67e2b8fb4ee-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 318 x 113, 8-bit colormap, non-interlaced\012- data
Size:   4434
Md5:    70efdd250cd637fcf6abd7f2a573fe8f
Sha1:   7e6301bcc3b2bcd88962ec3b3de1092d1bd7c7ba
Sha256: f843a3f234fdef868db0052429e051e2bedcb2a9bde405473225d22a1dfb28f0
                                        
                                            GET /content/images/payments/custom/1876513/10067.png?2023-03-17%2017:13:33 HTTP/1.1 
Host: cmsbetconstruct.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             185.162.228.3
HTTP/2 200 OK
content-type: image/png
                                            
date: Sun, 19 Mar 2023 13:11:43 GMT
content-length: 5198
last-modified: Fri, 14 Oct 2022 12:18:34 GMT
etag: "6349539a-144e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67e2b8ab4ee-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 318 x 113, 8-bit colormap, non-interlaced\012- data
Size:   5198
Md5:    81404ff1662fb5c8ed5e080701677053
Sha1:   e87c9c19b379d82a982908136c70236adb604d9f
Sha256: b2d498f1bbd1d45e9f40ffd250e709c704221d096258f90297d0c5fedf22dc10
                                        
                                            GET /content/images/payments/custom/1876513/10574.png?2023-03-17%2017:13:33 HTTP/1.1 
Host: cmsbetconstruct.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             185.162.228.3
HTTP/2 200 OK
content-type: image/png
                                            
date: Sun, 19 Mar 2023 13:11:43 GMT
content-length: 3838
last-modified: Fri, 14 Oct 2022 12:41:50 GMT
etag: "6349590e-efe"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67e2b8cb4ee-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 318 x 113, 8-bit colormap, non-interlaced\012- data
Size:   3838
Md5:    b983b08a03f9773e832f63192b39b9e0
Sha1:   a779bc93fb601bcb61b5691575fa5dc59fb23856
Sha256: 6c1715716d2324620c22f9c7c944117ebca144d63fb673d1b50f4120110a4ee5
                                        
                                            GET /content/images/payments/custom/1876513/899.png?2023-03-17%2017:13:33 HTTP/1.1 
Host: cmsbetconstruct.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             185.162.228.3
HTTP/2 200 OK
content-type: image/png
                                            
date: Sun, 19 Mar 2023 13:11:43 GMT
content-length: 15397
last-modified: Mon, 14 Nov 2022 12:49:02 GMT
etag: "6372393e-3c25"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67deb10b4ee-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 318 x 113\012- data
Size:   15397
Md5:    f8b1a6323841508eea1a22a43a164f4a
Sha1:   17845959d841e44d10d0463a246274174c655115
Sha256: 9f2099a9f8e7026985016d145016f1bc8658fac0e74af8f8e5349b1957eca49e
                                        
                                            GET /content/images/payments/custom/1876513/9006.png?2023-03-17%2017:13:33 HTTP/1.1 
Host: cmsbetconstruct.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             185.162.228.3
HTTP/2 200 OK
content-type: image/png
                                            
date: Sun, 19 Mar 2023 13:11:43 GMT
content-length: 15963
last-modified: Tue, 08 Nov 2022 14:22:42 GMT
etag: "636a6632-3e5b"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67e0b4bb4ee-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 195 x 179, 8-bit/color RGBA, non-interlaced\012- data
Size:   15963
Md5:    7d7c62750cc6305f77e34f6e59c47818
Sha1:   ef5b3d08d69b42505ccf5a0d297dcf0210f2c929
Sha256: 96a1dc398a8bdf14c3d4632765dc3656ad64911692795a68d2d96564201dba11
                                        
                                            GET /content/images/payments/custom/1876513/12086.png?2023-03-17%2017:13:33 HTTP/1.1 
Host: cmsbetconstruct.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             185.162.228.3
HTTP/2 200 OK
content-type: image/png
                                            
date: Sun, 19 Mar 2023 13:11:43 GMT
content-length: 70614
last-modified: Thu, 09 Feb 2023 02:27:26 GMT
etag: "63e45a0e-113d6"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67dbab4b4ee-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 856 x 291, 8-bit/color RGBA, non-interlaced\012- data
Size:   70614
Md5:    6f4942192c5cf8e7b90d41c11008c479
Sha1:   22e774ee60026c49f7d98b78010b45fa13f0cc9e
Sha256: de781173222ea719a92c2eec2016fc02588cb6be8e61523bdd52f6f9ce4c5198
                                        
                                            GET /content/images/payments/custom/1876513/11956.png?2023-03-17%2017:13:33 HTTP/1.1 
Host: cmsbetconstruct.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             185.162.228.3
HTTP/2 200 OK
content-type: image/png
                                            
date: Sun, 19 Mar 2023 13:11:43 GMT
content-length: 15963
last-modified: Mon, 23 Jan 2023 09:39:10 GMT
etag: "63ce55be-3e5b"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67e0b52b4ee-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 195 x 179, 8-bit/color RGBA, non-interlaced\012- data
Size:   15963
Md5:    7d7c62750cc6305f77e34f6e59c47818
Sha1:   ef5b3d08d69b42505ccf5a0d297dcf0210f2c929
Sha256: 96a1dc398a8bdf14c3d4632765dc3656ad64911692795a68d2d96564201dba11
                                        
                                            GET /content/images/payments/custom/1876513/6139.png?2023-03-17%2017:13:33 HTTP/1.1 
Host: cmsbetconstruct.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             185.162.228.3
HTTP/2 200 OK
content-type: image/png
                                            
date: Sun, 19 Mar 2023 13:11:43 GMT
content-length: 99876
last-modified: Wed, 15 Feb 2023 11:10:56 GMT
etag: "63ecbdc0-18624"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67dbab7b4ee-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 4550 x 1200, 8-bit/color RGBA, non-interlaced\012- data
Size:   99876
Md5:    e8efb1b8035f4aa21426c5b5d422b684
Sha1:   38de820d574055fb59306d3fef1a7ef6526577c0
Sha256: 29bce48810229684a8b7c50f2c6c817927b8f1e5f285e6f6708b3f212fc2b834
                                        
                                            GET /json?base_host=www.goldblue-1876513.com&ssl=1&lang=eng&json=get_popup&country=NO&exclude=author,excerpt,comments,comment_status,comment_count,tags,attachments HTTP/1.1 
Host: cmsbetconstruct.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.happistar8.net
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             185.162.228.3
HTTP/2 200 OK
content-type: application/json
                                            
date: Sun, 19 Mar 2023 13:11:42 GMT
expires: Sun, 19 Mar 2023 13:26:42 GMT
cache-control: max-age=900
x-frame-options: SAMEORIGIN
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 1000
access-control-allow-headers: X-Requested-With, Content-Type, Origin, Authorization, Accept, Client-Security-Token, Accept-Encoding, Content-Key-Case, Access-Token, Accept-Response
access-control-allow-methods: POST, GET, PUT, PATCH, DELETE, OPTIONS
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67c0810b4ee-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- HTML document, ASCII text, with very long lines (1023), with no line terminators
Size:   314327
Md5:    b33aceb99f21403379bcffea9b57d59f
Sha1:   00356265a3de90a0f68183d6805bc886c3954fbf
Sha256: d911b2fe8ca2f38ea391dd7eeb37cd6148d80f018c6aaad323d4ff9724097a55
                                        
                                            GET /content/images/payments/custom/1876513/10074.png?2023-03-17%2017:13:33 HTTP/1.1 
Host: cmsbetconstruct.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             185.162.228.3
HTTP/2 200 OK
content-type: image/png
                                            
date: Sun, 19 Mar 2023 13:11:43 GMT
content-length: 16361
last-modified: Wed, 02 Nov 2022 04:59:38 GMT
etag: "6361f93a-3fe9"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67e1b85b4ee-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 318 x 113, 8-bit/color RGBA, non-interlaced\012- data
Size:   16361
Md5:    cc3b76da3895220588c299910ad969b1
Sha1:   c0c35efb161badd0f4ef750d764fa3ccedccb863
Sha256: 999379d8c09d87652147bd83565f88b8b533845621db322e8bac3f671748b294
                                        
                                            GET /content/images/1ea02d5e49db9e201662161568cae4e8_1876513_media.png HTTP/1.1 
Host: cmsbetconstruct.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             185.162.228.3
HTTP/2 200 OK
content-type: image/png
                                            
date: Sun, 19 Mar 2023 13:11:43 GMT
content-length: 339383
last-modified: Wed, 11 Aug 2021 04:44:39 GMT
etag: "611355b7-52db7"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7aa5f6809ee3b4ee-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 1920 x 972, 8-bit/color RGB, non-interlaced\012- data
Size:   339383
Md5:    df68a58a839759548faa77040a9a96d1
Sha1:   41a97b57b09d66ccb7eff9a10f45542318de541b
Sha256: 934a425432637ee65d4e8c6c472ca244a77af91d1c8580118bd67d1880bf6b85
                                        
                                            GET /json?base_host=www.goldblue-1876513.com&ssl=1&lang=eng&json=widgets/get_sidebar&sidebar_id=homepage-additional-banner-eng&country=NO HTTP/1.1 
Host: cmsbetconstruct.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.happistar8.net
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             185.162.228.3
HTTP/2 200 OK
content-type: application/json
                                            
date: Sun, 19 Mar 2023 13:11:43 GMT
expires: Sun, 19 Mar 2023 13:26:43 GMT
cache-control: max-age=900
x-frame-options: SAMEORIGIN
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 1000
access-control-allow-headers: X-Requested-With, Content-Type, Origin, Authorization, Accept, Client-Security-Token, Accept-Encoding, Content-Key-Case, Access-Token, Accept-Response
access-control-allow-methods: POST, GET, PUT, PATCH, DELETE, OPTIONS
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f6806e9eb4ee-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   464811
Md5:    8b5102cea52a6a88a12d47d986ccb15e
Sha1:   7c50437e113844bc3c6299336fb435c252fe467c
Sha256: 201d683774091bf1b81d5b7b037078a61e9322e9f6e6ec425f4e2d5038adbf16
                                        
                                            GET /content/images/376214bc92c95f7c1dd792f44290b6a4_1876513_sidebar.webp HTTP/1.1 
Host: cmsbetconstruct.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             185.162.228.3
HTTP/2 200 OK
content-type: image/webp
                                            
date: Sun, 19 Mar 2023 13:11:43 GMT
content-length: 96982
last-modified: Wed, 15 Mar 2023 07:59:56 GMT
etag: "64117afc-17ad6"
expires: Sun, 19 Mar 2023 13:26:43 GMT
cache-control: max-age=900
x-frame-options: SAMEORIGIN
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 1000
access-control-allow-headers: X-Requested-With, Content-Type, Origin, Authorization, Accept, Client-Security-Token, Accept-Encoding, Content-Key-Case, Access-Token, Accept-Response
access-control-allow-methods: POST, GET, PUT, PATCH, DELETE, OPTIONS
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7aa5f6826932b4ee-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   96982
Md5:    14628ee938d939a0e1c342f6a5e71e5e
Sha1:   75704fb5129400f6ac4a8e0084e66ea9c4546309
Sha256: b1aab3d0edf3f86c7b7db7478012cf057cd94640866ec3770d42602a420fd2e6
                                        
                                            GET /json?base_host=www.goldblue-1876513.com&ssl=1&lang=eng&json=widgets/get_sidebar&sidebar_id=bannerSlugs.products-banners-2&country=NO HTTP/1.1 
Host: cmsbetconstruct.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.happistar8.net
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             185.162.228.3
HTTP/2 200 OK
content-type: application/json
                                            
date: Sun, 19 Mar 2023 13:11:43 GMT
expires: Sun, 19 Mar 2023 13:26:43 GMT
cache-control: max-age=900
x-frame-options: SAMEORIGIN
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 1000
access-control-allow-headers: X-Requested-With, Content-Type, Origin, Authorization, Accept, Client-Security-Token, Accept-Encoding, Content-Key-Case, Access-Token, Accept-Response
access-control-allow-methods: POST, GET, PUT, PATCH, DELETE, OPTIONS
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f6806e9ab4ee-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   214827
Md5:    3f3e9b193e2e15c1ba3031dbd8e58ff3
Sha1:   dd47d24e150f34791e78719d49027399be339779
Sha256: 3205ced0a9106c93d5fe6321dc28e27fbb7c73227b1c8899c8eaaf08fd7390f8
                                        
                                            GET /json?base_host=www.goldblue-1876513.com&ssl=1&lang=eng&json=widgets/get_sidebar&sidebar_id=homepage-banners-bottom-eng&country=NO HTTP/1.1 
Host: cmsbetconstruct.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.happistar8.net
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             185.162.228.3
HTTP/2 200 OK
content-type: application/json
                                            
date: Sun, 19 Mar 2023 13:11:43 GMT
expires: Sun, 19 Mar 2023 13:26:43 GMT
cache-control: max-age=900
x-frame-options: SAMEORIGIN
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 1000
access-control-allow-headers: X-Requested-With, Content-Type, Origin, Authorization, Accept, Client-Security-Token, Accept-Encoding, Content-Key-Case, Access-Token, Accept-Response
access-control-allow-methods: POST, GET, PUT, PATCH, DELETE, OPTIONS
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f6806ea1b4ee-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   93435
Md5:    1e870ddf0449a219cc82bd982a6d6b29
Sha1:   ca098c9264ed7c2281fd33b679837fa62f53b4e9
Sha256: f94cd6481cd7bb3a73bc05f28f0fd464014c716c0163dbf8357206869083f16d
                                        
                                            GET /json?base_host=www.goldblue-1876513.com&ssl=1&lang=eng&json=widgets/get_sidebar&sidebar_id=homepage-selected-game-eng&country=NO HTTP/1.1 
Host: cmsbetconstruct.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.happistar8.net
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             185.162.228.3
HTTP/2 200 OK
content-type: application/json
                                            
date: Sun, 19 Mar 2023 13:11:43 GMT
expires: Sun, 19 Mar 2023 13:26:43 GMT
cache-control: max-age=900
x-frame-options: SAMEORIGIN
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 1000
access-control-allow-headers: X-Requested-With, Content-Type, Origin, Authorization, Accept, Client-Security-Token, Accept-Encoding, Content-Key-Case, Access-Token, Accept-Response
access-control-allow-methods: POST, GET, PUT, PATCH, DELETE, OPTIONS
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f6807eacb4ee-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (8356), with no line terminators
Size:   161335
Md5:    4ae5194500f6f2ddf83c807b1acb3ddc
Sha1:   4a4a50896731dee2efb331a997c6d42154aeaf73
Sha256: 5ebd902db32542dee610e73fc735647fea6008e6395bf12fed6d3dcf5de3068d
                                        
                                            GET /json?base_host=www.goldblue-1876513.com&ssl=1&lang=eng&json=featured-games&country=NO HTTP/1.1 
Host: cmsbetconstruct.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.happistar8.net
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             185.162.228.3
HTTP/2 200 OK
content-type: application/json
                                            
date: Sun, 19 Mar 2023 13:11:43 GMT
expires: Sun, 19 Mar 2023 13:26:43 GMT
cache-control: max-age=900
x-frame-options: SAMEORIGIN
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 1000
access-control-allow-headers: X-Requested-With, Content-Type, Origin, Authorization, Accept, Client-Security-Token, Accept-Encoding, Content-Key-Case, Access-Token, Accept-Response
access-control-allow-methods: POST, GET, PUT, PATCH, DELETE, OPTIONS
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f6807eafb4ee-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   96887
Md5:    e79d9d2f0dca44137121b63af9dd6815
Sha1:   e264dcff31b3c9dfa840f75a685e6b0a8e1d8af1
Sha256: 48dc02666457a29b1f8d07fbe5d795ab2f823270b17a13394c433b898038b9e4
                                        
                                            GET /content/images/casino/icon3/effe0951ca8c904776057350f2ca418c_casinoGameIcon3.jpg HTTP/1.1 
Host: www.cmsbetconstruct.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             185.162.228.3
HTTP/2 200 OK
content-type: image/jpeg
                                            
date: Sun, 19 Mar 2023 13:11:43 GMT
content-length: 32699
cache-control: max-age=315360000, public
cf-bgj: imgq:100,h2pri
cf-polished: origSize=33122, status=webp_bigger
etag: "636b79c1-8162"
expires: Thu, 31 Dec 2037 23:55:55 GMT
last-modified: Wed, 09 Nov 2022 09:58:25 GMT
cf-cache-status: HIT
age: 8146065
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7aa5f6837b12b4ee-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 440x310, components 3\012- data
Size:   32699
Md5:    52dcfb66a7c13f9cef288fdbe67083d9
Sha1:   7bebf86575c435181368269889df8ca2221c7244
Sha256: 431b31aec8b6ffd5c2e90a4e37136645257adfd3014012d44bb6c34827e24c43
                                        
                                            GET /content/images/payments/default/12718.png?2023-03-17%2017:13:33 HTTP/1.1 
Host: cmsbetconstruct.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             185.162.228.3
HTTP/2 404 Not Found
content-type: text/html
                                            
date: Sun, 19 Mar 2023 13:11:43 GMT
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67e0b5db4ee-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text
Size:   108147
Md5:    16fd27ebcb40e6a3dd49ee3352604750
Sha1:   537fb7d71470627514dd14602951449ee2c5754f
Sha256: 6143c8ad0c81ddff7f008e5a62fc4c721aba856998a5405a2f6b14a488739ede
                                        
                                            GET /json?base_host=www.goldblue-1876513.com&ssl=1&lang=eng&json=widgets/get_sidebar&sidebar_id=countdown-banner-eng&country=NO HTTP/1.1 
Host: cmsbetconstruct.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.happistar8.net
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             185.162.228.3
HTTP/2 200 OK
content-type: application/json
                                            
date: Sun, 19 Mar 2023 13:11:43 GMT
expires: Sun, 19 Mar 2023 13:26:43 GMT
cache-control: max-age=900
x-frame-options: SAMEORIGIN
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 1000
access-control-allow-headers: X-Requested-With, Content-Type, Origin, Authorization, Accept, Client-Security-Token, Accept-Encoding, Content-Key-Case, Access-Token, Accept-Response
access-control-allow-methods: POST, GET, PUT, PATCH, DELETE, OPTIONS
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f6807ea3b4ee-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   127941
Md5:    eae53e62b27e586a254c640006908f67
Sha1:   32bf33cd0a2e76372cfed7ae789d740e51cb6e0a
Sha256: 10d3a48e25a4c00f60a114033d5c7bf35d8ae73298498f92581cb6dfbed005c0
                                        
                                            GET /content/images/payments/default/12643.png?2023-03-17%2017:13:33 HTTP/1.1 
Host: cmsbetconstruct.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             185.162.228.3
HTTP/2 404 Not Found
content-type: text/html
                                            
date: Sun, 19 Mar 2023 13:11:43 GMT
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67e0b5bb4ee-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text
Size:   134806
Md5:    f4fdc311742bbad16915195170093acd
Sha1:   0080c21f8b5372b99593b7b19e5b1f0e34c4bed2
Sha256: 6026e6494bab1d433b9070c4fd6c27a05c335aeaf6f9fb1ac0c7f5d343917863
                                        
                                            GET /content/images/casino/icon3/88a439def369e19ed6b1a4234a71c8ad_casinoGameIcon3.jpg HTTP/1.1 
Host: www.cmsbetconstruct.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             185.162.228.3
HTTP/2 200 OK
content-type: image/jpeg
                                            
date: Sun, 19 Mar 2023 13:11:43 GMT
content-length: 31747
last-modified: Tue, 24 Jan 2023 12:19:10 GMT
etag: "63cfccbe-7c03"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7aa5f6835adbb4ee-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, progressive, precision 8, 440x310, components 3\012- data
Size:   31747
Md5:    39a5f5a6ccae0cefd34f9bf7cd99fe84
Sha1:   4f1d21904f63157510ba91db43741b33240b62bf
Sha256: fec10f9ea43a8c0be1e686cc689721c90e3921c03c5471c08e19ca47e225a877
                                        
                                            GET /content/images/payments/default/12644.png?2023-03-17%2017:13:33 HTTP/1.1 
Host: cmsbetconstruct.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             185.162.228.3
HTTP/2 404 Not Found
content-type: text/html
                                            
date: Sun, 19 Mar 2023 13:11:43 GMT
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67e0b57b4ee-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text
Size:   31146
Md5:    7e67d449ef256fc920972b4704e1f3a2
Sha1:   9cef5a1955ccb06b292f1d5145be68c75ae8a8c6
Sha256: 6f179f2b2d21858dc0413597e42546e43eb037727aec264c43878e3f32d1432a
                                        
                                            GET /content/images/casino/icon3/84685aee25b43fa6608de19ecd80ecc0_casinoGameIcon3.jpg HTTP/1.1 
Host: www.cmsbetconstruct.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             185.162.228.3
HTTP/2 200 OK
content-type: image/jpeg
                                            
date: Sun, 19 Mar 2023 13:11:43 GMT
content-length: 24635
last-modified: Fri, 05 Aug 2022 08:56:01 GMT
etag: "62ecdb21-603b"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7aa5f6836af1b4ee-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, progressive, precision 8, 440x310, components 3\012- data
Size:   24635
Md5:    c33ac461cd9b495e00bb36e16657fbb2
Sha1:   d8c48650ee199188db228f974b9e7314a01ca445
Sha256: 67a699499349809e42cdc4fb2bd73be041a494d961e7cf16fa29bc561d4ee4a1
                                        
                                            GET /content/images/casino/icon3/496c1401aa43f90efb949df4d857647f_casinoGameIcon3.gif HTTP/1.1 
Host: www.cmsbetconstruct.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             185.162.228.3
HTTP/2 200 OK
content-type: image/gif
                                            
date: Sun, 19 Mar 2023 13:11:43 GMT
content-length: 675798
last-modified: Thu, 04 Nov 2021 07:15:01 GMT
etag: "61838875-a4fd6"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7aa5f682a999b4ee-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 440 x 310\012- data
Size:   675798
Md5:    5b849d6e17a68775d2d283f7f42a3fec
Sha1:   f626ae6b35d0a89878670a61fb190201af9aa407
Sha256: 694917eca181402feb9b0757e599266b737fb9b7a4209f2570cb4be15efbd840
                                        
                                            GET /content/images/casino/icon3/b60cf5d19d4064f53b94659a9668eea0_casinoGameIcon3.jpg HTTP/1.1 
Host: www.cmsbetconstruct.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             185.162.228.3
HTTP/2 200 OK
content-type: image/jpeg
                                            
date: Sun, 19 Mar 2023 13:11:44 GMT
content-length: 31924
last-modified: Fri, 28 Oct 2022 11:26:29 GMT
etag: "635bbc65-7cb4"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7aa5f6836aeeb4ee-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, progressive, precision 8, 440x310, components 3\012- data
Size:   31924
Md5:    73dcc82d564553f9ce05a5e9045d16b6
Sha1:   1a50f9df3a92e2a9e11dac4aa2912017b5e1c07a
Sha256: a4663787ba719cb1f3310fa2e10e21679bc90b702090985bbe6254cbe3a29fc8
                                        
                                            GET /content/images/casino/icon3/bced6e887638977d75da101904d75bea_casinoGameIcon3.png HTTP/1.1 
Host: www.cmsbetconstruct.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             185.162.228.3
HTTP/2 200 OK
content-type: image/png
                                            
date: Sun, 19 Mar 2023 13:11:43 GMT
content-length: 303297
last-modified: Thu, 27 Aug 2020 20:07:37 GMT
etag: "5f481289-4a0c1"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7aa5f682a98ab4ee-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 440 x 310, 8-bit/color RGBA, non-interlaced\012- data
Size:   303297
Md5:    c296245816d8024f3ea3360d212b1330
Sha1:   fb6dd93ddd771ec94bb8e767dc9803e135790ea5
Sha256: 5adcf80910f468046cdf3f6fb5bb5fc4bb435a52e25412b84c78ddc8c998c80e
                                        
                                            GET /content/images/casino/icon3/e3bc4efa9bc5d0be5a29474c74bbe3e4_casinoGameIcon3.gif HTTP/1.1 
Host: www.cmsbetconstruct.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             185.162.228.3
HTTP/2 200 OK
content-type: image/gif
                                            
date: Sun, 19 Mar 2023 13:11:43 GMT
content-length: 817789
last-modified: Mon, 13 Sep 2021 09:59:42 GMT
etag: "613f210e-c7a7d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7aa5f682a987b4ee-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 440 x 310\012- data
Size:   817789
Md5:    e4eac42f714269bf352d0430c1c458bb
Sha1:   7c78b848dac7270b0ccf5bac5c8092967995ccbd
Sha256: bceca66debeca45ddab9e8c58ed327d398b08d5291d4aec229c76acba5bccaa8
                                        
                                            GET /content/images/casino/icon3/980c47b3cade3c554848c1ac01036a7c_casinoGameIcon3.png HTTP/1.1 
Host: www.cmsbetconstruct.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             185.162.228.3
HTTP/2 200 OK
content-type: image/png
                                            
date: Sun, 19 Mar 2023 13:11:44 GMT
content-length: 183903
last-modified: Wed, 24 Feb 2021 07:14:37 GMT
etag: "6035fcdd-2ce5f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7aa5f6833a9ab4ee-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 440 x 310, 8-bit/color RGBA, non-interlaced\012- data
Size:   183903
Md5:    2d3f43f5f52c7192d38fc7104757a5d1
Sha1:   731914d50e312e5bdaedda450cb5471a72e42245
Sha256: cc6751e5d797b1563b12f1151f9f3a42c6e6d80da3f1ebba68353c4b13a3e089
                                        
                                            GET /content/images/casino/icon3/85bb441d69e8be1ec91d943f2ec5bea3_casinoGameIcon3.gif HTTP/1.1 
Host: www.cmsbetconstruct.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             185.162.228.3
HTTP/2 200 OK
content-type: image/gif
                                            
date: Sun, 19 Mar 2023 13:11:43 GMT
content-length: 828877
last-modified: Mon, 04 Jul 2022 06:37:29 GMT
etag: "62c28aa9-ca5cd"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7aa5f682a991b4ee-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 440 x 310\012- data
Size:   828877
Md5:    18e8843e0afb62d158778f30f9ac45ab
Sha1:   65b73177bd847526b9276f1c60a65c7d45df6512
Sha256: cf2bfa02fbb25a58436b36ad520255383137ad09e6d5c0ef4069d594bfc0d10e
                                        
                                            GET /json?base_host=www.goldblue-1876513.com&ssl=1&lang=eng&json=widgets/get_sidebar&sidebar_id=homepage-banners-right-eng&country=NO HTTP/1.1 
Host: cmsbetconstruct.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.happistar8.net
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             185.162.228.3
HTTP/2 200 OK
content-type: application/json
                                            
date: Sun, 19 Mar 2023 13:11:43 GMT
expires: Sun, 19 Mar 2023 13:26:43 GMT
cache-control: max-age=900
x-frame-options: SAMEORIGIN
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 1000
access-control-allow-headers: X-Requested-With, Content-Type, Origin, Authorization, Accept, Client-Security-Token, Accept-Encoding, Content-Key-Case, Access-Token, Accept-Response
access-control-allow-methods: POST, GET, PUT, PATCH, DELETE, OPTIONS
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f6806e98b4ee-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (1137), with no line terminators
Size:   232027
Md5:    90c8e9e6c7a6e444aea31eda47f6c77b
Sha1:   1e34b9d1d9405297cf5890841bfc2ab254accec6
Sha256: 57a2f8b5a4edf972124df66ed529d380c899a726fdbc47d0f488c37f38b9ebe0
                                        
                                            GET /json?base_host=www.goldblue-1876513.com&ssl=1&lang=eng&json=widgets/get_sidebar&sidebar_id=header-small-banner-eng&country=NO HTTP/1.1 
Host: cmsbetconstruct.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.happistar8.net
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             185.162.228.3
HTTP/2 200 OK
content-type: application/json
                                            
date: Sun, 19 Mar 2023 13:11:43 GMT
expires: Sun, 19 Mar 2023 13:26:43 GMT
cache-control: max-age=900
x-frame-options: SAMEORIGIN
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 1000
access-control-allow-headers: X-Requested-With, Content-Type, Origin, Authorization, Accept, Client-Security-Token, Accept-Encoding, Content-Key-Case, Access-Token, Accept-Response
access-control-allow-methods: POST, GET, PUT, PATCH, DELETE, OPTIONS
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f6807eadb4ee-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   220713
Md5:    10241a0b29d31207a0c8655ca084de53
Sha1:   03d4c20c4303aa52aad680bf5a43b2788f86a099
Sha256: 1f37bf9a5e76958637ff01ca936adc44511005c9a0d5764d5c149550cdd0e821
                                        
                                            GET /content/images/casino/icon3/5862ad95cb3499606cc0661e058ceaaf_casinoGameIcon3.png HTTP/1.1 
Host: www.cmsbetconstruct.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             185.162.228.3
HTTP/2 200 OK
content-type: image/png
                                            
date: Sun, 19 Mar 2023 13:11:44 GMT
content-length: 247751
last-modified: Wed, 24 Feb 2021 07:28:19 GMT
etag: "60360013-3c7c7"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7aa5f6836aebb4ee-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 440 x 310, 8-bit/color RGBA, non-interlaced\012- data
Size:   247751
Md5:    843e1c885dc548afbce3e9ca574ef353
Sha1:   884873465a473e3e5d184fa336f12648d8ea3087
Sha256: 78ab3c041ebd056551f0f94441c270ce2c0fa60ea004d205670f3f32d314cffd
                                        
                                            GET /json?base_host=www.goldblue-1876513.com&ssl=1&lang=eng&json=get_page&slug=help-root-eng&children=1&country=NO&exclude=author,excerpt,comments,comment_status,comment_count,tags,attachments HTTP/1.1 
Host: cmsbetconstruct.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.happistar8.net
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             185.162.228.3
HTTP/2 200 OK
content-type: application/json
                                            
date: Sun, 19 Mar 2023 13:11:42 GMT
expires: Sun, 19 Mar 2023 13:26:42 GMT
cache-control: max-age=900
x-frame-options: SAMEORIGIN
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 1000
access-control-allow-headers: X-Requested-With, Content-Type, Origin, Authorization, Accept, Client-Security-Token, Accept-Encoding, Content-Key-Case, Access-Token, Accept-Response
access-control-allow-methods: POST, GET, PUT, PATCH, DELETE, OPTIONS
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f67c0814b4ee-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Size:   335807
Md5:    3430bd619457eae5f526957a252b6254
Sha1:   0d77a2dcbe1f0ccbdbe18c7d7640717be1d0724c
Sha256: e440db4230804a4f0cd910782694102fcd9747bf156e7ef783927154223dc630
                                        
                                            GET /app/services/app/webchat/519b4315-2f72-4655-a0dd-8ee6f3b800ed/config?domain=aHR0cHM6Ly93d3cuaGFwcGlzdGFyOC5uZXQ= HTTP/1.1 
Host: wchat.freshchat.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://wchat.freshchat.com/widget/config_iframe.html?host=https://wchat.freshchat.com&token=519b4315-2f72-4655-a0dd-8ee6f3b800ed&origin=https://www.happistar8.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin

                                        
                                             54.152.199.76
HTTP/1.1 200 OK
Content-Type: application/json;charset=UTF-8
                                            
Date: Sun, 19 Mar 2023 13:11:44 GMT
Transfer-Encoding: chunked
Connection: keep-alive
server: fwe
access-control-allow-credentials: true
cache-control: no-store
content-security-policy: style-src 'unsafe-inline' *; font-src 'self' * data:; img-src 'self' * data:; connect-src 'self' *; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.freshchat.com https://*.freshworksapi.com; child-src 'self' * blob:; media-src 'self' https://*.freshchat.com; manifest-src 'self' https://*.freshchat.com; default-src 'none';
strict-transport-security: max-age=31536000; includeSubDomains
x-xss-protection: 1; mode=block
x-request-id: b31392e0-ca26-4a4e-9df1-10b4dcac4cf8
content-encoding: gzip
vary: accept-encoding
x-server: 5323
x-envoy-upstream-service-time: 17
x-trace-id: 00-4a94e08a3feeeab6e25a97bfc0d42201-154d3b961a1faf56-00
nel: { "report_to": "nel-endpoint-freshchat", "max_age": 2592000, "include_subdomains": true}
report-to: { "group": "nel-endpoint-freshchat", "max_age": 2592000, "include_subdomains": true, "endpoints": [{"url": "https://edge-admin.us-east-1.freshedge.net/nelreports/freshchat"}]}
x-fw-ratelimiting-managed: true
x-ratelimit-total: 3000
x-ratelimit-remaining: 2999
x-ratelimit-used-currentrequest: 1
x-ratelimit-limit: 3000


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (2891), with no line terminators
Size:   1309
Md5:    0970f88b8463005bd562db57273a2321
Sha1:   ab31c19151bbfed0a55fad9e51c1aea1fc9ddfbd
Sha256: 863aecafe5638568af3cf4a82a1c2784968579ff9eda7f52645188cb81f4321e
                                        
                                            OPTIONS / HTTP/1.1 
Host: eu-swarm-ws-re.deimosphobos.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: swarm-session
Referer: https://www.happistar8.net/
Origin: https://www.happistar8.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             185.162.228.4
HTTP/2 200 OK
                                            
date: Sun, 19 Mar 2023 13:11:44 GMT
content-length: 0
access-control-allow-headers: accept, content-type, swarm-session
access-control-allow-methods: POST, OPTIONS
access-control-allow-origin: *
access-control-max-age: 3600
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f6853d1fb4f1-OSL
X-Firefox-Spdy: h2

                                        
                                            GET /widget/?token=519b4315-2f72-4655-a0dd-8ee6f3b800ed&referrer=aHR0cHM6Ly93d3cuaGFwcGlzdGFyOC5uZXQ=&eagerLoad=true HTTP/1.1 
Host: wchat.freshchat.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                        
                                             54.152.199.76
HTTP/1.1 200 OK
Content-Type: text/html
                                            
Date: Sun, 19 Mar 2023 13:11:44 GMT
Transfer-Encoding: chunked
Connection: keep-alive
server: fwe
last-modified: Mon, 13 Mar 2023 12:19:13 GMT
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: no-cache, no-store, must-revalidate, pre-check=0, post-check=0
served-by: 2601
x-server: 2601
content-security-policy: style-src 'unsafe-inline' *; font-src 'self' * data:; img-src 'self' * data:; connect-src 'self' *; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.freshchat.com https://*.freshworksapi.com; child-src 'self' * blob:; media-src 'self' https://*.freshchat.com; manifest-src 'self' https://*.freshchat.com; default-src 'none';
content-encoding: gzip
x-envoy-upstream-service-time: 0
x-trace-id: 00-d30b5f878aa7002f8da0ac1425c32ce1-8b4162ca447a0621-00
nel: { "report_to": "nel-endpoint-freshchat", "max_age": 2592000, "include_subdomains": true}
report-to: { "group": "nel-endpoint-freshchat", "max_age": 2592000, "include_subdomains": true, "endpoints": [{"url": "https://edge-admin.us-east-1.freshedge.net/nelreports/freshchat"}]}
x-fw-ratelimiting-managed: false
x-request-id: 235fb67a-d070-4994-9a68-67bca2fbaf7a


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2773)
Size:   1649
Md5:    8c6d6b3471ed729a85e990eefb0e86f6
Sha1:   a9ae6019739b4a92028738173c95034a3e905824
Sha256: 17e4aa97999d321aa84dc6f1608a756ea19b72bf357a4a6df084b0f5d34ffae3
                                        
                                            GET /54f396e0-b046-49b1-9cb3-0c69281d7ea9-beacon.png HTTP/1.1 
Host: 4c993dfc-aa0e-4755-a7e3-22a3adb99bab.seals-xcm.certria.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             54.230.111.23
HTTP/2 200 OK
content-type: image/png
                                            
content-length: 68
date: Tue, 14 Mar 2023 08:16:41 GMT
last-modified: Tue, 15 Dec 2020 08:04:53 GMT
etag: "e679fbd466a2d656f194a5da4fa083cd"
cache-control: no-cache, no-store, must-revalidate
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: iiNQgSUqKeVkJ2PjvvJpgbcOXRBGedx4tZNXGdRHJyDYO4rLLGcYrg==
age: 449704
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced\012- data
Size:   68
Md5:    e679fbd466a2d656f194a5da4fa083cd
Sha1:   2aa795c7607aa6ea41313be88f1b7a9c1ab516b3
Sha256: f309b7c03d9cae63a9bedbee6ed655f3dbcdb194132943639344dead5f3b9710
                                        
                                            GET /static/assets/hotline-web.d41d8cd98f00b204e9800998ecf8427e.css HTTP/1.1 
Host: assetscdn-wchat.freshchat.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wchat.freshchat.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

                                        
                                             54.230.111.126
HTTP/2 200 OK
content-type: text/css
                                            
content-length: 0
last-modified: Wed, 01 Mar 2023 18:22:25 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Sun, 19 Mar 2023 13:08:07 GMT
cache-control: max-age=31536000, no-transform, public
expires: Tue, 12 Mar 2024 12:19:14 GMT
etag: "d41d8cd98f00b204e9800998ecf8427e"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: rfPOJw_8fFkIXh6aDDysuY5DFyDuAjWBNcOA3a4TjzPZ99RWjPHjtw==
age: 219
X-Firefox-Spdy: h2

                                        
                                            GET /widget/css/widget.css?t=1679231516627 HTTP/1.1 
Host: wchat.freshchat.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             54.152.199.76
HTTP/1.1 200 OK
Content-Type: text/css
                                            
Date: Sun, 19 Mar 2023 13:11:44 GMT
Transfer-Encoding: chunked
Connection: keep-alive
server: fwe
last-modified: Mon, 13 Mar 2023 12:19:13 GMT
expires: Mon, 18 Mar 2024 13:11:44 GMT
cache-control: max-age=31536000,no-cache, no-store, must-revalidate, pre-check=0, post-check=0,public
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000; includeSubDomains
served-by: 4082
x-server: 4082
content-encoding: gzip
x-envoy-upstream-service-time: 0
x-trace-id: 00-1971fddf3808a446b5e2db08fd384ea6-a638caba020ff38d-00
nel: { "report_to": "nel-endpoint-freshchat", "max_age": 2592000, "include_subdomains": true}
report-to: { "group": "nel-endpoint-freshchat", "max_age": 2592000, "include_subdomains": true, "endpoints": [{"url": "https://edge-admin.us-east-1.freshedge.net/nelreports/freshchat"}]}
x-fw-ratelimiting-managed: false
x-request-id: 2b8af5df-0af7-4643-b7a0-4b9b910781ff


--- Additional Info ---
Magic:  ASCII text, with very long lines (8857)
Size:   1715
Md5:    b5e89ee0ad0cccc7ddc1f3cfad9939d0
Sha1:   04751cd854046b72e25e2428b9ec5fd8c3fa09e0
Sha256: 5f797f013b7f7d86962b0b99977a5990fb3a0e193befaf7e935ab005d6f25b38
                                        
                                            GET /54f396e0-b046-49b1-9cb3-0c69281d7ea9-beacon.png HTTP/1.1 
Host: 4ec9ae87-4fa3-435f-aab6-8ecbb4ebeb6c.snippet.antillephone.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             54.230.111.44
HTTP/2 200 OK
content-type: image/png
                                            
content-length: 68
date: Wed, 15 Mar 2023 08:33:08 GMT
last-modified: Tue, 15 Dec 2020 08:04:53 GMT
etag: "e679fbd466a2d656f194a5da4fa083cd"
cache-control: no-cache, no-store, must-revalidate
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: kJ8azr7f4lMF7qhPRsTm4mBZbwIrD-8Med1glIf_xvzufiJjB9vZqw==
age: 362317
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced\012- data
Size:   68
Md5:    e679fbd466a2d656f194a5da4fa083cd
Sha1:   2aa795c7607aa6ea41313be88f1b7a9c1ab516b3
Sha256: f309b7c03d9cae63a9bedbee6ed655f3dbcdb194132943639344dead5f3b9710
                                        
                                            GET /xcm-seal.js HTTP/1.1 
Host: 4c993dfc-aa0e-4755-a7e3-22a3adb99bab.seals-xcm.certria.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             54.230.111.23
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                            
date: Sun, 19 Mar 2023 13:11:44 GMT
x-powered-by: Express
cache-control: max-age=300
etag: W/"bfe-NuRUmLAea9H5OUYiMq9MhB1YXgk"
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f6858a5530c9-FRA
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: nBzHnU_8YWg3VowfhzpuA0rlXM6LVc9m8rm0G_q0PcowA-Cj32zKmg==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   53571
Md5:    bbdcf84f2a3864a81dba5877a1d01223
Sha1:   fa88005c776b5c01bc2d6406beca53d3ad215d62
Sha256: 8ec9e2ea36371b1777a5a13764aa1f9b489dfe72c4657e21b533d4f1268eee3a
                                        
                                            GET /apg-seal.js HTTP/1.1 
Host: 4ec9ae87-4fa3-435f-aab6-8ecbb4ebeb6c.snippet.antillephone.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happistar8.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             54.230.111.44
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                            
date: Sun, 19 Mar 2023 13:11:44 GMT
x-powered-by: Express
cache-control: max-age=300
etag: W/"ca3-OBcUjDFz9MXi1pvNnYtrIlkZ4GU"
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7aa5f68608abbba9-FRA
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: _zIXwfveT1H6Po7TLfQY5nt-kaIzvdY_Og3h6nsGAZ9cfKn8DLgaDw==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   50092
Md5:    b6cd2e891e69da9288b13d93208a98c0
Sha1:   8a081546e4d8b4767e20a5ac36b2c3bf5177bae4
Sha256: dad1764d84e5148dd5fef66357b627db3a8dfa72d898b8b69b16adec258609b7
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84