r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 388f6fea5bafa378266622b72311a6ee
447f102dc12172ce1ba44c5e94e1d7bb49d43372
a597afb4d4f7f3c82f0f2857322226fc69dc92e099bfd0605f7a0cd562be9d21
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A597AFB4D4F7F3C82F0F2857322226FC69DC92E099BFD0605F7A0CD562BE9D21"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9212
Expires: Thu, 08 Dec 2022 10:59:37 GMT
Date: Thu, 08 Dec 2022 08:26:05 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f2acd891dc6eb1f09f57a2b086791781
1e2088306501a61edcca1ade62c4d54f23b3b083
51148fed95cc00d60dc3640350f135b1b2763ff0e3cfbffc40f0948317894be9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "51148FED95CC00D60DC3640350F135B1B2763FF0E3CFBFFC40F0948317894BE9"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20360
Expires: Thu, 08 Dec 2022 14:05:25 GMT
Date: Thu, 08 Dec 2022 08:26:05 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 00e7703bd74975689fc9050356aaca6b
9788fe6a36d6f278e8da329ebc5dd87bcd212317
593bc437ff8a8233516c62613d50220fcb25b9f967ed5fb384c253f0db135103
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "593BC437FF8A8233516C62613D50220FCB25B9F967ED5FB384C253F0DB135103"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6805
Expires: Thu, 08 Dec 2022 10:19:30 GMT
Date: Thu, 08 Dec 2022 08:26:05 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 08 Dec 2022 08:08:11 GMT
content-type: application/json
age: 1074
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
IP
File type PEM certificate\012- , ASCII text
Hash 53341dea33f4f3d9b4966f80589f429a
20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: jTa091aZZfGmfBRs3BI/b8UQCtJX8Z5xxCrsq4n9R9WRc+uWVfQzoOfGyD9ZHbTYkItniheV6kA=
x-amz-request-id: 3QY9HARQ102BXP2M
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 08 Dec 2022 07:47:50 GMT
age: 2295
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 08 Dec 2022 08:26:05 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Retry-After, Cache-Control, Content-Type, Pragma, Backoff, ETag, Expires, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 08 Dec 2022 08:07:55 GMT
age: 1091
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
detroitindustryrocks.com/
302 Found 11 B URL HTTP/1.1 detroitindustryrocks.com/
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type ASCII text, with no line terminators
Hash 32682312d17c7cbf18e73594f5570319
60e22121bdd0bc71cdb2bae2a3aa577006b2eae9
e55fb1a1d731153e943b68844af12dcce8bfac917c98ffdea64c80da0607dd47
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: detroitindustryrocks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 11
date: Thu, 08 Dec 2022 08:26:05 GMT
location: http://r.redirekted.com/redirect?redirect_id=ed83b2c4fcec4b666d92a27cd68fe4c4&request_id=d30e9ad597b6f66543bdb12c2543286a
server: nginx
set-cookie: sid=f5498612-76d1-11ed-bb26-01f298edaf96; path=/; domain=.detroitindustryrocks.com; expires=Tue, 26 Dec 2090 11:40:12 GMT; max-age=2147483647; HttpOnly
ocsp.digicert.com/
200 OK 471 B IP
Hash 053aff7451e55d4269dd9610ab070f3f
b3376256d11d159b0c7280ba1515b78d7d9e12ca
24114ca560fe70d03185bd66985603fd5a03dc310aa9a8ea7a7b3723ed46ce3e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6228
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 08:26:06 GMT
Last-Modified: Thu, 08 Dec 2022 06:42:18 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 471
r.redirekted.com/redirect?redirect_id=ed83b2c4fcec4b666d92a27cd68fe4c4&request_id=d30e9ad597b6f66543bdb12c2543286a
200 OK 774 B URL HTTP/1.1 r.redirekted.com/redirect?redirect_id=ed83b2c4fcec4b666d92a27cd68fe4c4&request_id=d30e9ad597b6f66543bdb12c2543286a
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (303)
Hash 61db0beccc877fd4d3aed2baa4673fa5
d76f0dbc0b137a560353328e0b0a8cf8f741019b
faeaddacc232c09588f882babb579b86d9ac3ec471405cdc338f5634199301f1
GET /redirect?redirect_id=ed83b2c4fcec4b666d92a27cd68fe4c4&request_id=d30e9ad597b6f66543bdb12c2543286a HTTP/1.1
Host: r.redirekted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx/1.21.5
Date: Thu, 08 Dec 2022 08:26:06 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/8.0.14
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: vkzXx9eYR/IfA25YIFSFsg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: kSeQM+BGzEdu4HkvNlMdxBcOzZE=
r.redirekted.com/css/adren.css?n=3412560663
200 OK 243 B URL HTTP/1.1 r.redirekted.com/css/adren.css?n=3412560663
IP
Hash f72acd3fece9f7cf58643616c745b2ea
92bc529a83c5466fbf6b9e702eef1e59644687a1
e2d9fd8b995f146baf54bc35d162d3e8169a5345368058b10a3b3bf4592ed777
GET /css/adren.css?n=3412560663 HTTP/1.1
Host: r.redirekted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://r.redirekted.com/redirect?redirect_id=ed83b2c4fcec4b666d92a27cd68fe4c4&request_id=d30e9ad597b6f66543bdb12c2543286a
HTTP/1.1 200 OK
Server: nginx/1.21.5
Date: Thu, 08 Dec 2022 08:26:06 GMT
Content-Type: text/css
Content-Length: 243
Last-Modified: Sat, 03 Jul 2021 05:46:18 GMT
Connection: keep-alive
ETag: "60dff9aa-f3"
Accept-Ranges: bytes
r.redirekted.com/js/adren.min.js?n=3412560663
200 OK 7.5 kB URL HTTP/1.1 r.redirekted.com/js/adren.min.js?n=3412560663
IP
File type ASCII text, with very long lines (7528), with no line terminators
Hash 9a9ec61d7e275f25fe83f0aa93bd2e41
8a3a23c432b601e9f8f8fe2b61f0fedbc341c9ac
55afe8ae4db5b6ca9ec5a3aca1f3a7b482ca51d0914acd250093f1a9ecbfccec
GET /js/adren.min.js?n=3412560663 HTTP/1.1
Host: r.redirekted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://r.redirekted.com/redirect?redirect_id=ed83b2c4fcec4b666d92a27cd68fe4c4&request_id=d30e9ad597b6f66543bdb12c2543286a
HTTP/1.1 200 OK
Server: nginx/1.21.5
Date: Thu, 08 Dec 2022 08:26:07 GMT
Content-Type: application/javascript
Content-Length: 7528
Last-Modified: Sat, 03 Jul 2021 05:46:18 GMT
Connection: keep-alive
ETag: "60dff9aa-1d68"
Accept-Ranges: bytes
r.redirekted.com/favicon.ico
200 OK 0 B URL HTTP/1.1 r.redirekted.com/favicon.ico
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: r.redirekted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://r.redirekted.com/redirect?redirect_id=ed83b2c4fcec4b666d92a27cd68fe4c4&request_id=d30e9ad597b6f66543bdb12c2543286a
HTTP/1.1 200 OK
Server: nginx/1.21.5
Date: Thu, 08 Dec 2022 08:26:07 GMT
Content-Type: image/x-icon
Content-Length: 0
Last-Modified: Sat, 03 Jul 2021 05:46:18 GMT
Connection: keep-alive
ETag: "60dff9aa-0"
Accept-Ranges: bytes
r.redirekted.com/go?e=04mWWSPXvfRs2MPMdtvVt5KW1bGs-bFL9gwWskKL5kwX7DaFdfRrt13p8cxsmgFB59Gr8RPXajwsm1aB85QssgvC91wXYAvB9gwXuglp8bxXytaLdRzVu5aqe0Gs2k3K59Gr-RPWeLHVyj3K8IPrt13BjSJs7jaCdRTEbAmCaD0ZlgvE0V2VXSFW0AJr-NTC9yFssEmBsS2X7VPM8gGr-03pzNJs7tGF9gGq54aq9kmX7ZFBeZUrX5KW94Gs-VvF8c0XYcvL5WJVyDaF-AUp-DGL9cxZm9SM8gRC-Hmpt9SA_pFC
200 OK 1.8 kB URL HTTP/1.1 r.redirekted.com/go?e=04mWWSPXvfRs2MPMdtvVt5KW1bGs-bFL9gwWskKL5kwX7DaFdfRrt13p8cxsmgFB59Gr8RPXajwsm1aB85QssgvC91wXYAvB9gwXuglp8bxXytaLdRzVu5aqe0Gs2k3K59Gr-RPWeLHVyj3K8IPrt13BjSJs7jaCdRTEbAmCaD0ZlgvE0V2VXSFW0AJr-NTC9yFssEmBsS2X7VPM8gGr-03pzNJs7tGF9gGq54aq9kmX7ZFBeZUrX5KW94Gs-VvF8c0XYcvL5WJVyDaF-AUp-DGL9cxZm9SM8gRC-Hmpt9SA_pFC
IP
File type HTML document, ASCII text, with very long lines (488)
Hash c2e4c4ab825123c7229b3ea3ea8457f7
fd82fc57e6c5637d8a0450f6157b03103792466c
19e907ef3c93aa3887c8f7d39f28214e92338a33ba7fb17844777f352cd35615
GET /go?e=04mWWSPXvfRs2MPMdtvVt5KW1bGs-bFL9gwWskKL5kwX7DaFdfRrt13p8cxsmgFB59Gr8RPXajwsm1aB85QssgvC91wXYAvB9gwXuglp8bxXytaLdRzVu5aqe0Gs2k3K59Gr-RPWeLHVyj3K8IPrt13BjSJs7jaCdRTEbAmCaD0ZlgvE0V2VXSFW0AJr-NTC9yFssEmBsS2X7VPM8gGr-03pzNJs7tGF9gGq54aq9kmX7ZFBeZUrX5KW94Gs-VvF8c0XYcvL5WJVyDaF-AUp-DGL9cxZm9SM8gRC-Hmpt9SA_pFC HTTP/1.1
Host: r.redirekted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://r.redirekted.com/redirect?redirect_id=ed83b2c4fcec4b666d92a27cd68fe4c4&request_id=d30e9ad597b6f66543bdb12c2543286a
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx/1.21.5
Date: Thu, 08 Dec 2022 08:26:07 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/8.0.14
Set-Cookie: uuid=3799106941980482048; expires=Fri, 09-Dec-2022 08:26:07 GMT; Max-Age=86400
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/1.1 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://r.redirekted.com/
HTTP/1.1 200 OK
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Cross-Origin-Resource-Policy: cross-origin
Server: Golfe2
Content-Length: 20039
Date: Thu, 08 Dec 2022 08:23:09 GMT
Expires: Thu, 08 Dec 2022 10:23:09 GMT
Cache-Control: public, max-age=7200
Age: 178
Last-Modified: Tue, 27 Sep 2022 22:01:05 GMT
Content-Type: text/javascript
www.google-analytics.com/collect?v=1&_v=j98&a=2061948465&t=pageview&_s=2&dl=http%3A%2F%2Fr.redirekted.com%2Fgo%3Fe%3D04mWWSPXvfRs2MPMdtvVt5KW1bGs-bFL9gwWskKL5kwX7DaFdfRrt13p8cxsmgFB59Gr8RPXajwsm1aB85QssgvC91wXYAvB9gwXuglp8bxXytaLdRzVu5aqe0Gs2k3K59Gr-RPWeLHVyj3K8IPrt13BjSJs7jaCdRTEbAmCaD0ZlgvE0V2VXSFW0AJr-NTC9yFssEmBsS2X7VPM8gGr-03pzNJs7tGF9gGq54aq9kmX7ZFBeZUrX5KW94Gs-VvF8c0XYcvL5WJVyDaF-AUp-DGL9cxZm9SM8gRC-Hmpt9SA_pFC&ul=en-us&de=UTF-8&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=IEBAAEABAAAAACAAI~&jid=&gjid=&cid=176645076.1670487967&tid=UA-32454353-1&_gid=665637501.1670487967&cd1=oz9lo258n2kesUk8sT5ipz9hsTgfn3k8sUj%3D&z=729437579
200 OK 35 B URL HTTP/1.1 www.google-analytics.com/collect?v=1&_v=j98&a=2061948465&t=pageview&_s=2&dl=http%3A%2F%2Fr.redirekted.com%2Fgo%3Fe%3D04mWWSPXvfRs2MPMdtvVt5KW1bGs-bFL9gwWskKL5kwX7DaFdfRrt13p8cxsmgFB59Gr8RPXajwsm1aB85QssgvC91wXYAvB9gwXuglp8bxXytaLdRzVu5aqe0Gs2k3K59Gr-RPWeLHVyj3K8IPrt13BjSJs7jaCdRTEbAmCaD0ZlgvE0V2VXSFW0AJr-NTC9yFssEmBsS2X7VPM8gGr-03pzNJs7tGF9gGq54aq9kmX7ZFBeZUrX5KW94Gs-VvF8c0XYcvL5WJVyDaF-AUp-DGL9cxZm9SM8gRC-Hmpt9SA_pFC&ul=en-us&de=UTF-8&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=IEBAAEABAAAAACAAI~&jid=&gjid=&cid=176645076.1670487967&tid=UA-32454353-1&_gid=665637501.1670487967&cd1=oz9lo258n2kesUk8sT5ipz9hsTgfn3k8sUj%3D&z=729437579
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /collect?v=1&_v=j98&a=2061948465&t=pageview&_s=2&dl=http%3A%2F%2Fr.redirekted.com%2Fgo%3Fe%3D04mWWSPXvfRs2MPMdtvVt5KW1bGs-bFL9gwWskKL5kwX7DaFdfRrt13p8cxsmgFB59Gr8RPXajwsm1aB85QssgvC91wXYAvB9gwXuglp8bxXytaLdRzVu5aqe0Gs2k3K59Gr-RPWeLHVyj3K8IPrt13BjSJs7jaCdRTEbAmCaD0ZlgvE0V2VXSFW0AJr-NTC9yFssEmBsS2X7VPM8gGr-03pzNJs7tGF9gGq54aq9kmX7ZFBeZUrX5KW94Gs-VvF8c0XYcvL5WJVyDaF-AUp-DGL9cxZm9SM8gRC-Hmpt9SA_pFC&ul=en-us&de=UTF-8&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=IEBAAEABAAAAACAAI~&jid=&gjid=&cid=176645076.1670487967&tid=UA-32454353-1&_gid=665637501.1670487967&cd1=oz9lo258n2kesUk8sT5ipz9hsTgfn3k8sUj%3D&z=729437579 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://r.redirekted.com/
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Pragma: no-cache
X-Content-Type-Options: nosniff
Cross-Origin-Resource-Policy: cross-origin
Server: Golfe2
Content-Length: 35
Date: Wed, 07 Dec 2022 18:57:27 GMT
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Age: 48520
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
Content-Type: image/gif
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 48c90992f0837a58e0a36118a27dae6a
3d238fed35e6d247bddbba92864e6b92e6aed9b6
cacc53ed285e96dcd5ba7609823922a253bc0623999b8716f430632d2c0e7dac
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CACC53ED285E96DCD5BA7609823922A253BC0623999B8716F430632D2C0E7DAC"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7502
Expires: Thu, 08 Dec 2022 10:31:09 GMT
Date: Thu, 08 Dec 2022 08:26:07 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 48c90992f0837a58e0a36118a27dae6a
3d238fed35e6d247bddbba92864e6b92e6aed9b6
cacc53ed285e96dcd5ba7609823922a253bc0623999b8716f430632d2c0e7dac
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CACC53ED285E96DCD5BA7609823922A253BC0623999B8716F430632D2C0E7DAC"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7502
Expires: Thu, 08 Dec 2022 10:31:09 GMT
Date: Thu, 08 Dec 2022 08:26:07 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 48c90992f0837a58e0a36118a27dae6a
3d238fed35e6d247bddbba92864e6b92e6aed9b6
cacc53ed285e96dcd5ba7609823922a253bc0623999b8716f430632d2c0e7dac
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CACC53ED285E96DCD5BA7609823922A253BC0623999B8716F430632D2C0E7DAC"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7502
Expires: Thu, 08 Dec 2022 10:31:09 GMT
Date: Thu, 08 Dec 2022 08:26:07 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 48c90992f0837a58e0a36118a27dae6a
3d238fed35e6d247bddbba92864e6b92e6aed9b6
cacc53ed285e96dcd5ba7609823922a253bc0623999b8716f430632d2c0e7dac
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CACC53ED285E96DCD5BA7609823922A253BC0623999B8716F430632D2C0E7DAC"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7502
Expires: Thu, 08 Dec 2022 10:31:09 GMT
Date: Thu, 08 Dec 2022 08:26:07 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9367069b-64ab-4e4d-b8c9-fa115e0681a9.jpeg
200 OK 3.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9367069b-64ab-4e4d-b8c9-fa115e0681a9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash bdf4703f3372054a7aadce1cb0e11bd0
84d060f66accd412503d52c385ee47cb35795c07
c5853b653ee328e567e2456be12450e04c1704ed64fb6234f008532e4b6c8363
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9367069b-64ab-4e4d-b8c9-fa115e0681a9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3744
x-amzn-requestid: 73eab74b-e50c-46d1-adde-3ef85fb772f6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cvlj7FDiIAMFmsQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638fb618-70ffb1925e3a9ef6081d1cd1;Sampled=0
x-amzn-remapped-date: Tue, 06 Dec 2022 21:37:28 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: mNqZM4645fF2zaqXJgT68q_xIbg2tvE1KaqK1P2LzC307rl4OTZ33Q==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 36810aa1793ee589dc8c194860296078.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 21:58:04 GMT
age: 37683
etag: "84d060f66accd412503d52c385ee47cb35795c07"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0d27bcd3-7b4f-4d99-8f0d-b7b98bfaa8d7.jpeg
200 OK 5.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0d27bcd3-7b4f-4d99-8f0d-b7b98bfaa8d7.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ce35df4fe4f77c950e40dc44b311bab4
aadf97d040e3577599581e892ee20f88d191bf91
f9c4cfc384213f77c0bbb252f3d6fbc22be60e1ecc158eece857d5050c8ced3c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0d27bcd3-7b4f-4d99-8f0d-b7b98bfaa8d7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5620
x-amzn-requestid: fadda084-c7fc-4ec0-bad0-27e97b8349d6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cy4gHGIMIAMFy_g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6391079a-5dc824963fe82ab927205128;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 21:37:30 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: MWB80hrfUMDjexNsySVGMXtm6Wva4t1gkJXaesFKRaGSkFS1r1zIrw==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 22:13:24 GMT
age: 36763
etag: "aadf97d040e3577599581e892ee20f88d191bf91"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5382e616-602f-4e00-bed7-d95c66a5000d.jpeg
200 OK 5.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5382e616-602f-4e00-bed7-d95c66a5000d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 43fdc85bfd574fa803f0bcdc216ef622
27f558d5cdc150a50f080c054423500666b63d74
fafd2a81cddacdb4e5fd7c9963a784e6e56d06ac98f0bd4124fd74fa3ba015e0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5382e616-602f-4e00-bed7-d95c66a5000d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5245
x-amzn-requestid: 9770ebcd-fb1e-4b81-bb87-1e98ef024741
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cy-E8HugoAMFsKw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63911085-54eb7a48323113d52329abf5;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 22:15:33 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: d2DHUS5fGT4uoPPdjDXmHUOQVF93ULtO4zSHRmrx7KMu3lO0y0K9ag==
via: 1.1 0005a84c2971ff4f5bbb79e7ebc622a8.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 22:24:13 GMT
age: 36114
etag: "27f558d5cdc150a50f080c054423500666b63d74"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F51f870bb-e67d-4a93-bab0-cf574561a496.jpeg
200 OK 8.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F51f870bb-e67d-4a93-bab0-cf574561a496.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f4cbd333b74ebe10e77c1bdf1fec0269
bbcfa6a3ae98d5e3f4ffd3b0d6ee6934c7ca33a8
7c868974824cef2f1a08c4500d10490fbaa8515984391b822c70a5009ad8c225
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F51f870bb-e67d-4a93-bab0-cf574561a496.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8438
x-amzn-requestid: 79861560-2468-4c0a-afd8-800d1e6d6814
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cy4A5EbzIAMF9Rg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639106d2-0b1efe0b006b8b0b2f69870b;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 21:34:10 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: OInz4Evmbh2Z4PL2ogGsw6iOF9I-u-KhBhAsHHiA46CuHcqHo2Z34A==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 22:13:07 GMT
age: 36780
etag: "bbcfa6a3ae98d5e3f4ffd3b0d6ee6934c7ca33a8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9519925e-95b7-4e66-b317-84c1708c7f84.jpeg
200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9519925e-95b7-4e66-b317-84c1708c7f84.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b87d6543345f73653ed4a49b37d7c959
c4f26846b8b72293368ff16915d49297cf12bbb9
aee6aa42e4b5b83b81f74801ff8f0039fc6d38036f42ee81875813c856cf5eef
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9519925e-95b7-4e66-b317-84c1708c7f84.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8659
x-amzn-requestid: 6f420d07-65d5-4bb2-9f1f-e56025de497b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: czFSYFArIAMF46w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63911c0f-0a295e5c48228d5806b4f107;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 23:04:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: TSh1BNzzIPhWCfYEiqvQJckSPAyhHobe-HK6msEVeEJ1ruX-_rMSSA==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 23:35:32 GMT
age: 31835
etag: "c4f26846b8b72293368ff16915d49297cf12bbb9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 48c90992f0837a58e0a36118a27dae6a
3d238fed35e6d247bddbba92864e6b92e6aed9b6
cacc53ed285e96dcd5ba7609823922a253bc0623999b8716f430632d2c0e7dac
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CACC53ED285E96DCD5BA7609823922A253BC0623999B8716F430632D2C0E7DAC"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7502
Expires: Thu, 08 Dec 2022 10:31:09 GMT
Date: Thu, 08 Dec 2022 08:26:07 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8a21d707-1bf7-4b7f-a23b-7e8f38dd40c5.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8a21d707-1bf7-4b7f-a23b-7e8f38dd40c5.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3d44d17585c9a536c8da0e75ed90d175
9dc35d0f6b251004bc1ddc83aea9ee71c95aedd1
6d14a5b5c43b39244434560a83a2bfea6604a4d072943b6147293b7adfd1b7b7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8a21d707-1bf7-4b7f-a23b-7e8f38dd40c5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10164
x-amzn-requestid: a0cb7259-0a07-44f5-91cd-e96b8d9c9cac
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cnAPOGSnoAMFUUQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638c472e-799b6ee425e29fb70ff7e4ea;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 07:07:26 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 5Q2LRCrEYVZz_KldQARUQ26O1mv0G7rMAPQXGkBzUnERF-WjtZPMJA==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 12:11:17 GMT
age: 72891
etag: "9dc35d0f6b251004bc1ddc83aea9ee71c95aedd1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
status.thawte.com/
200 OK 471 B IP
Hash f437354ecc5a7ed438a7f57777b4603f
d536ee1dd1b839c73a66167a5ae0f88ae224a376
664897437b7288ad9311bef5a1ac68633b094fd3848480f1d51cdc4cf964dee5
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6189
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 08:26:08 GMT
Last-Modified: Thu, 08 Dec 2022 06:43:00 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471
no-go.kelkoogroup.net/ctl/go/offersearchGo?.ts=1670429232018&.sig=WV5heZ4j5khw_c3Nxh9.QO1ISRE-&affiliationId=96965866&comId=100528087&country=no&offerId=d948f71862ff52546b9375ae831c2d8a&service=37&tokenId=35e025c3-2943-4e2d-874f-eaee491f9fab&wait=true&addedParams=true&custom1=j3BvtxsmImMeL3WsEwCbSHA21wEep3WYImq5ETA-t2BlVTsTcFLbI0A0EJV3ZUCWg3B8t0r7VvF7gQqt13qVyRsmOUL-AUpX1aV&custom2=jKWjuHsyt3L8AUBvqwqSExZvyxEmVJrUAQB
200 OK 31 kB URL HTTP/1.1 no-go.kelkoogroup.net/ctl/go/offersearchGo?.ts=1670429232018&.sig=WV5heZ4j5khw_c3Nxh9.QO1ISRE-&affiliationId=96965866&comId=100528087&country=no&offerId=d948f71862ff52546b9375ae831c2d8a&service=37&tokenId=35e025c3-2943-4e2d-874f-eaee491f9fab&wait=true&addedParams=true&custom1=j3BvtxsmImMeL3WsEwCbSHA21wEep3WYImq5ETA-t2BlVTsTcFLbI0A0EJV3ZUCWg3B8t0r7VvF7gQqt13qVyRsmOUL-AUpX1aV&custom2=jKWjuHsyt3L8AUBvqwqSExZvyxEmVJrUAQB
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (13002)
Hash 5ec7af9fb68c4817c00ef2f9fd2d6767
cbda2f0203fe715bc5be01a916afbc868a487cbf
5ebd06f3ce5fdbd56f73764d8355234793ee34e84fcd5506a83593ffe8f3ab8b
GET /ctl/go/offersearchGo?.ts=1670429232018&.sig=WV5heZ4j5khw_c3Nxh9.QO1ISRE-&affiliationId=96965866&comId=100528087&country=no&offerId=d948f71862ff52546b9375ae831c2d8a&service=37&tokenId=35e025c3-2943-4e2d-874f-eaee491f9fab&wait=true&addedParams=true&custom1=j3BvtxsmImMeL3WsEwCbSHA21wEep3WYImq5ETA-t2BlVTsTcFLbI0A0EJV3ZUCWg3B8t0r7VvF7gQqt13qVyRsmOUL-AUpX1aV&custom2=jKWjuHsyt3L8AUBvqwqSExZvyxEmVJrUAQB HTTP/1.1
Host: no-go.kelkoogroup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://r.redirekted.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Thu, 08 Dec 2022 08:26:08 GMT
leadId: dc1-kls-prod-ls-02.prod.dc1.kelkoo.net_1670487968818_287633
clickId: 107698149_1670487968810_765547
country: no
Accept-CH: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory
X-DataDome: protected
Request-Time: PT0.020479S
X-Robots-Tag: noindex,nofollow
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: DENY
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: master-only
Content-Type: text/html; charset=UTF-8
Content-Length: 30761
Set-Cookie: datadome=0PpOUqJ1EysP9WVw~6xzk47bx7lfMcTahBtKgl-v4gFJBtVgpcCj9HG4ix8sBz6zN8EQQViMBaazUr0Orw7zffuyCP2WwpKxZlZ0w1td-YLIF3M32fhsZvN6pU5WpgIJ; Max-Age=31536000; Expires=Fri, 08 Dec 2023 08:26:08 GMT; SameSite=Lax; Path=/; Domain=.kelkoogroup.net; Secure
kelkooID=a4c6295-184f0d78c2a-3ef0e; Max-Age=31536000; Expires=Fri, 08 Dec 2023 08:26:08 GMT; SameSite=None; Path=/; Domain=kelkoogroup.net; Secure; HTTPOnly
P3P: CP="Anything"
ApacheTracking: localhost
Keep-Alive: timeout=40, max=71
Connection: Keep-Alive
no-go.kelkoogroup.net/assets/images/p.png?country=no&k=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&leadId=dc1-kls-prod-ls-02.prod.dc1.kelkoo.net_1670487968818_287633&clickId=107698149_1670487968810_765547
200 OK 68 B URL HTTP/1.1 no-go.kelkoogroup.net/assets/images/p.png?country=no&k=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&leadId=dc1-kls-prod-ls-02.prod.dc1.kelkoo.net_1670487968818_287633&clickId=107698149_1670487968810_765547
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced\012- data
Hash 91e42db1c66c0b276abf6234dc50b2eb
c1986af3c26609b8b7d8933f99c51c1a89e9ea6b
63ef318d96b5d0d0ceba6e04a4e622b1158335cdc67c49e27839132c6f655058
GET /assets/images/p.png?country=no&k=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&leadId=dc1-kls-prod-ls-02.prod.dc1.kelkoo.net_1670487968818_287633&clickId=107698149_1670487968810_765547 HTTP/1.1
Host: no-go.kelkoogroup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no-go.kelkoogroup.net/ctl/go/offersearchGo?.ts=1670429232018&.sig=WV5heZ4j5khw_c3Nxh9.QO1ISRE-&affiliationId=96965866&comId=100528087&country=no&offerId=d948f71862ff52546b9375ae831c2d8a&service=37&tokenId=35e025c3-2943-4e2d-874f-eaee491f9fab&wait=true&addedParams=true&custom1=j3BvtxsmImMeL3WsEwCbSHA21wEep3WYImq5ETA-t2BlVTsTcFLbI0A0EJV3ZUCWg3B8t0r7VvF7gQqt13qVyRsmOUL-AUpX1aV&custom2=jKWjuHsyt3L8AUBvqwqSExZvyxEmVJrUAQB
Connection: keep-alive
Cookie: datadome=0PpOUqJ1EysP9WVw~6xzk47bx7lfMcTahBtKgl-v4gFJBtVgpcCj9HG4ix8sBz6zN8EQQViMBaazUr0Orw7zffuyCP2WwpKxZlZ0w1td-YLIF3M32fhsZvN6pU5WpgIJ; kelkooID=a4c6295-184f0d78c2a-3ef0e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 08 Dec 2022 08:26:08 GMT
Request-Time: PT0.001701S
X-Robots-Tag: noindex,nofollow
Cache-Control: private, must-revalidate
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: DENY
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: master-only
Content-Type: image/png
Content-Length: 68
P3P: CP="Anything"
ApacheTracking: localhost
Keep-Alive: timeout=40, max=99
Connection: Keep-Alive
no-go.kelkoogroup.net/fp?country=no&k=612f7a9541cd6ea61eb554c0e4cff437567c460be4e08eedd0acaaa15d56e972cf801665d9b7ef1c4ff4cedd4096c9e614e43d27faa9cb5e8639962d25beb76efd755377072656735ec1e06b133f6ba88ceba4f863e397e96df7225291043f68ed32f7d86af4183ac4bcabc3cc0f40946e6b8d69aaef8b21f0cb190763c653f11aa8fbea027ad592551d9fce515fc527df1e692a2b2b71a7a810154310a40f24208d0303f48f50c7dfd85b0afc882903d01cd384f343f765174f5578c176f07227e546cc448e513cebb8c8882278e1e40187131f8bbd3238dc0c07712874777429c6abb776c646aceb49eb1b9cc0e3d7213b3caac838831cabf52b6fdd069ce9ebbd95ddc2b73f2e9556a487b314f4098b21512ea38e1d596f1db34794481eae4a3a130b927951c99e4bb37bb4f0bf76c22c9c82146fec68a9a1a4e567124d406975813fb53ea3cf&leadId=dc1-kls-prod-ls-02.prod.dc1.kelkoo.net_1670487968818_287633&clickId=107698149_1670487968810_765547
200 OK 0 B URL HTTP/1.1 no-go.kelkoogroup.net/fp?country=no&k=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&leadId=dc1-kls-prod-ls-02.prod.dc1.kelkoo.net_1670487968818_287633&clickId=107698149_1670487968810_765547
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /fp?country=no&k=612f7a9541cd6ea61eb554c0e4cff437567c460be4e08eedd0acaaa15d56e972cf801665d9b7ef1c4ff4cedd4096c9e614e43d27faa9cb5e8639962d25beb76efd755377072656735ec1e06b133f6ba88ceba4f863e397e96df7225291043f68ed32f7d86af4183ac4bcabc3cc0f40946e6b8d69aaef8b21f0cb190763c653f11aa8fbea027ad592551d9fce515fc527df1e692a2b2b71a7a810154310a40f24208d0303f48f50c7dfd85b0afc882903d01cd384f343f765174f5578c176f07227e546cc448e513cebb8c8882278e1e40187131f8bbd3238dc0c07712874777429c6abb776c646aceb49eb1b9cc0e3d7213b3caac838831cabf52b6fdd069ce9ebbd95ddc2b73f2e9556a487b314f4098b21512ea38e1d596f1db34794481eae4a3a130b927951c99e4bb37bb4f0bf76c22c9c82146fec68a9a1a4e567124d406975813fb53ea3cf&leadId=dc1-kls-prod-ls-02.prod.dc1.kelkoo.net_1670487968818_287633&clickId=107698149_1670487968810_765547 HTTP/1.1
Host: no-go.kelkoogroup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no-go.kelkoogroup.net/ctl/go/offersearchGo?.ts=1670429232018&.sig=WV5heZ4j5khw_c3Nxh9.QO1ISRE-&affiliationId=96965866&comId=100528087&country=no&offerId=d948f71862ff52546b9375ae831c2d8a&service=37&tokenId=35e025c3-2943-4e2d-874f-eaee491f9fab&wait=true&addedParams=true&custom1=j3BvtxsmImMeL3WsEwCbSHA21wEep3WYImq5ETA-t2BlVTsTcFLbI0A0EJV3ZUCWg3B8t0r7VvF7gQqt13qVyRsmOUL-AUpX1aV&custom2=jKWjuHsyt3L8AUBvqwqSExZvyxEmVJrUAQB
Content-Type: text/plain;charset=utf-8
Content-Length: 536
Origin: https://no-go.kelkoogroup.net
Connection: keep-alive
Cookie: datadome=0PpOUqJ1EysP9WVw~6xzk47bx7lfMcTahBtKgl-v4gFJBtVgpcCj9HG4ix8sBz6zN8EQQViMBaazUr0Orw7zffuyCP2WwpKxZlZ0w1td-YLIF3M32fhsZvN6pU5WpgIJ; kelkooID=a4c6295-184f0d78c2a-3ef0e; _ga=GA1.2.870804216.1670487968; _gid=GA1.2.1692790154.1670487968
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 08 Dec 2022 08:26:08 GMT
Request-Time: PT0.003089S
X-Robots-Tag: noindex,nofollow
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: DENY
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: master-only
Content-Type: text/plain; charset=UTF-8
Content-Length: 0
P3P: CP="Anything"
ApacheTracking: localhost
Keep-Alive: timeout=40, max=93
Connection: Keep-Alive
no-go.kelkoogroup.net/redirect?country=no&k=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&leadId=dc1-kls-prod-ls-02.prod.dc1.kelkoo.net_1670487968818_287633&clickId=107698149_1670487968810_765547&url=https%3A%2F%2Fkampanje.happigames.nu%2Fthesims4-sale-2022%2F%3Fkk%3Da4c6295-184f0d78c2a-3ef0e%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DEA%2BGames%2BThe%2BSims%2B4%2B%2528Pc%252Fmac%2529&initiator=timeout
303 See Other 0 B URL HTTP/1.1 no-go.kelkoogroup.net/redirect?country=no&k=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&leadId=dc1-kls-prod-ls-02.prod.dc1.kelkoo.net_1670487968818_287633&clickId=107698149_1670487968810_765547&url=https%3A%2F%2Fkampanje.happigames.nu%2Fthesims4-sale-2022%2F%3Fkk%3Da4c6295-184f0d78c2a-3ef0e%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DEA%2BGames%2BThe%2BSims%2B4%2B%2528Pc%252Fmac%2529&initiator=timeout
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /redirect?country=no&k=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&leadId=dc1-kls-prod-ls-02.prod.dc1.kelkoo.net_1670487968818_287633&clickId=107698149_1670487968810_765547&url=https%3A%2F%2Fkampanje.happigames.nu%2Fthesims4-sale-2022%2F%3Fkk%3Da4c6295-184f0d78c2a-3ef0e%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DEA%2BGames%2BThe%2BSims%2B4%2B%2528Pc%252Fmac%2529&initiator=timeout HTTP/1.1
Host: no-go.kelkoogroup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no-go.kelkoogroup.net/ctl/go/offersearchGo?.ts=1670429232018&.sig=WV5heZ4j5khw_c3Nxh9.QO1ISRE-&affiliationId=96965866&comId=100528087&country=no&offerId=d948f71862ff52546b9375ae831c2d8a&service=37&tokenId=35e025c3-2943-4e2d-874f-eaee491f9fab&wait=true&addedParams=true&custom1=j3BvtxsmImMeL3WsEwCbSHA21wEep3WYImq5ETA-t2BlVTsTcFLbI0A0EJV3ZUCWg3B8t0r7VvF7gQqt13qVyRsmOUL-AUpX1aV&custom2=jKWjuHsyt3L8AUBvqwqSExZvyxEmVJrUAQB
Connection: keep-alive
Cookie: datadome=0PpOUqJ1EysP9WVw~6xzk47bx7lfMcTahBtKgl-v4gFJBtVgpcCj9HG4ix8sBz6zN8EQQViMBaazUr0Orw7zffuyCP2WwpKxZlZ0w1td-YLIF3M32fhsZvN6pU5WpgIJ; kelkooID=a4c6295-184f0d78c2a-3ef0e; _ga=GA1.2.870804216.1670487968; _gid=GA1.2.1692790154.1670487968
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
HTTP/1.1 303 See Other
Date: Thu, 08 Dec 2022 08:26:09 GMT
leadId: dc1-kls-prod-ls-02.prod.dc1.kelkoo.net_1670487968818_287633
clickId: 107698149_1670487968810_765547
country: no
Location: https://kampanje.happigames.nu/thesims4-sale-2022/?kk=a4c6295-184f0d78c2a-3ef0e&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=EA+Games+The+Sims+4+%28Pc%2Fmac%29
Accept-CH: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory
X-DataDome: protected
Request-Time: PT0.018767S
X-Robots-Tag: noindex,nofollow
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: DENY
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: master-only
Content-Length: 0
Set-Cookie: datadome=i9ky4S0ey5K1Gg-~l1bHwMkYYZ7Eem58wjUBEFjkEyAivL3y2bpN0Aqz3sv9gkemA467uz8Qxa5NZrV-tiKh7-c1IBGvIXvmoR74VmxjE7pqL6nhXf3WF3ax5B0B7VI; Max-Age=31536000; Expires=Fri, 08 Dec 2023 08:26:09 GMT; SameSite=Lax; Path=/; Domain=.kelkoogroup.net; Secure
P3P: CP="Anything"
ApacheTracking: localhost
Keep-Alive: timeout=40, max=95
Connection: Keep-Alive
Content-Type: text/plain
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c7a5f887bbc7d30b9cfe15163c3d8ddb
21d65790a1d10a06d198b54218365aa474126e1c
2a2e7930f967d947cc5293c95221913e24596773577bbf56ff402db6236bbda1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 08:26:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google-analytics.com/collect?v=1&_v=j96&t=pageview&_s=1&dl=https%3A%2F%2Fno-go.kelkoogroup.net%2Fctl%2Fgo%2FoffersearchGo%3F.ts%3D1670429232018%26.sig%3DWV5heZ4j5khw_c3Nxh9.QO1ISRE-%26affiliationId%3D96965866%26comId%3D100528087%26country%3Dno%26offerId%3Dd948f71862ff52546b9375ae831c2d8a%26service%3D37%26tokenId%3D35e025c3-2943-4e2d-874f-eaee491f9fab%26wait%3Dtrue%26addedParams%3Dtrue%26custom1%3Dj3BvtxsmImMeL3WsEwCbSHA21wEep3WYImq5ETA-t2BlVTsTcFLbI0A0EJV3ZUCWg3B8t0r7VvF7gQqt13qVyRsmOUL-AUpX1aV%26custom2%3DjKWjuHsyt3L8AUBvqwqSExZvyxEmVJrUAQB&dr=http%3A%2F%2Fr.redirekted.com%2F&dp=%2F96965866%7C100528087%7C&ul=en-us&de=UTF-8&dt=Du%20sendes%20videre%20til%20HappiGames.nu&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=QACAAAABAAAAAC~&cid=870804216.1670487968&tid=UA-168544891-6&_gid=1692790154.1670487968&_r=1&cd1=96965866&cd2=dc1-kls-prod-ls-02.prod.dc1.kelkoo.net_1670487968818_287633&cd3=100528087&cd4=a4c6295-184f0d78c2a-3ef0e&cd5=&cd6=96965866%7C100528087%7C&z=763104975
200 OK 35 B URL HTTP/2 www.google-analytics.com/collect?v=1&_v=j96&t=pageview&_s=1&dl=https%3A%2F%2Fno-go.kelkoogroup.net%2Fctl%2Fgo%2FoffersearchGo%3F.ts%3D1670429232018%26.sig%3DWV5heZ4j5khw_c3Nxh9.QO1ISRE-%26affiliationId%3D96965866%26comId%3D100528087%26country%3Dno%26offerId%3Dd948f71862ff52546b9375ae831c2d8a%26service%3D37%26tokenId%3D35e025c3-2943-4e2d-874f-eaee491f9fab%26wait%3Dtrue%26addedParams%3Dtrue%26custom1%3Dj3BvtxsmImMeL3WsEwCbSHA21wEep3WYImq5ETA-t2BlVTsTcFLbI0A0EJV3ZUCWg3B8t0r7VvF7gQqt13qVyRsmOUL-AUpX1aV%26custom2%3DjKWjuHsyt3L8AUBvqwqSExZvyxEmVJrUAQB&dr=http%3A%2F%2Fr.redirekted.com%2F&dp=%2F96965866%7C100528087%7C&ul=en-us&de=UTF-8&dt=Du%20sendes%20videre%20til%20HappiGames.nu&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=QACAAAABAAAAAC~&cid=870804216.1670487968&tid=UA-168544891-6&_gid=1692790154.1670487968&_r=1&cd1=96965866&cd2=dc1-kls-prod-ls-02.prod.dc1.kelkoo.net_1670487968818_287633&cd3=100528087&cd4=a4c6295-184f0d78c2a-3ef0e&cd5=&cd6=96965866%7C100528087%7C&z=763104975
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
POST /collect?v=1&_v=j96&t=pageview&_s=1&dl=https%3A%2F%2Fno-go.kelkoogroup.net%2Fctl%2Fgo%2FoffersearchGo%3F.ts%3D1670429232018%26.sig%3DWV5heZ4j5khw_c3Nxh9.QO1ISRE-%26affiliationId%3D96965866%26comId%3D100528087%26country%3Dno%26offerId%3Dd948f71862ff52546b9375ae831c2d8a%26service%3D37%26tokenId%3D35e025c3-2943-4e2d-874f-eaee491f9fab%26wait%3Dtrue%26addedParams%3Dtrue%26custom1%3Dj3BvtxsmImMeL3WsEwCbSHA21wEep3WYImq5ETA-t2BlVTsTcFLbI0A0EJV3ZUCWg3B8t0r7VvF7gQqt13qVyRsmOUL-AUpX1aV%26custom2%3DjKWjuHsyt3L8AUBvqwqSExZvyxEmVJrUAQB&dr=http%3A%2F%2Fr.redirekted.com%2F&dp=%2F96965866%7C100528087%7C&ul=en-us&de=UTF-8&dt=Du%20sendes%20videre%20til%20HappiGames.nu&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=QACAAAABAAAAAC~&cid=870804216.1670487968&tid=UA-168544891-6&_gid=1692790154.1670487968&_r=1&cd1=96965866&cd2=dc1-kls-prod-ls-02.prod.dc1.kelkoo.net_1670487968818_287633&cd3=100528087&cd4=a4c6295-184f0d78c2a-3ef0e&cd5=&cd6=96965866%7C100528087%7C&z=763104975 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://no-go.kelkoogroup.net
Connection: keep-alive
Referer: https://no-go.kelkoogroup.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 200 OK
access-control-allow-origin: https://no-go.kelkoogroup.net
date: Thu, 08 Dec 2022 08:26:09 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
x-content-type-options: nosniff
access-control-allow-credentials: true
content-type: image/gif
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 35
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 0c89743226644fddacbe5d50c110b950
b343ae9eb9047cf764b518083d612ffd3652b209
1bf675bb6e12e913a98cd8849c1af9a0c50b0bb8bfa670c86419b41782e06e47
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 08:26:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5edee7e61e829b7671285c7bc06ab31d
143fd0a6f198cbbcec9ac84bb051fb170c8858e1
a2eeecbfbd7eb3a600abbd443fe57c79d3de031e567943e6c9376648af306c77
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A2EEECBFBD7EB3A600ABBD443FE57C79D3DE031E567943E6C9376648AF306C77"
Last-Modified: Wed, 07 Dec 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Thu, 08 Dec 2022 14:26:10 GMT
Date: Thu, 08 Dec 2022 08:26:10 GMT
Connection: keep-alive
kampanje.happigames.nu/thesims4-sale-2022/?kk=a4c6295-184f0d78c2a-3ef0e&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=EA+Games+The+Sims+4+%28Pc%2Fmac%29
200 OK 13 kB URL HTTP/1.1 kampanje.happigames.nu/thesims4-sale-2022/?kk=a4c6295-184f0d78c2a-3ef0e&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=EA+Games+The+Sims+4+%28Pc%2Fmac%29
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (13294)
Hash 3cb2bd2b526eeb3172863106cea295d6
a9f07eab9378ffb521b4b7478950c7a31df9620f
85652e3911865af3600d3944c6f754584c8dd3fc3a9ede7865f02fb8b29b841f
GET /thesims4-sale-2022/?kk=a4c6295-184f0d78c2a-3ef0e&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=EA+Games+The+Sims+4+%28Pc%2Fmac%29 HTTP/1.1
Host: kampanje.happigames.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no-go.kelkoogroup.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Thu, 08 Dec 2022 08:26:10 GMT
content-type: text/html; charset=utf-8
content-length: 13439
set-cookie: ubvs=d5f8d8d6-65a2-4e62-bad2-60b91911c710; Max-Age=15552000; Path=/; SameSite=Lax
ubvt=d5f8d8d6-65a2-4e62-bad2-60b91911c710; Max-Age=259200; Domain=happigames.nu; Path=/; SameSite=Lax
ubpv=a%2Cb2eb397b-4f8e-475c-99e5-f25d3215e24e; Max-Age=15897600; Path=/thesims4-sale-2022/; SameSite=Lax
content-location: https://kampanje.happigames.nu/thesims4-sale-2022/
etag: "a:d5f8d8d665a24e62bad260b91911c710"
link: <https://kampanje.happigames.nu/thesims4-sale-2022/>; rel="canonical"
x-unbounce-pageid: b2eb397b-4f8e-475c-99e5-f25d3215e24e
x-unbounce-variant: a
x-unbounce-visitorid: d5f8d8d6-65a2-4e62-bad2-60b91911c710
content-encoding: gzip
x-proxy-backend: page-server
connection: close
s.kk-resources.com/leadtag.js
200 OK 2.6 kB URL HTTP/1.1 s.kk-resources.com/leadtag.js
IP
File type C source, ASCII text, with very long lines (6910)
Hash b9c7aa9898d0e7b5d8dfa27c81eda1ac
3e22a4f4ac1fd469128de60e1a80433513242071
980531f0a81016e3a7a4c3fa56f75e7b791f1f4c09296992221bd766b91a53a0
GET /leadtag.js HTTP/1.1
Host: s.kk-resources.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kampanje.happigames.nu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
Content-Length: 2595
Connection: keep-alive
X-Gravitee-Transaction-Id: 81e5e047-8d84-4d6c-a5e0-478d841d6c2e
X-Gravitee-Request-Id: 81e5e047-8d84-4d6c-a5e0-478d841d6c2e
ETag: "01eb894c46b26432f1c6dc225e35b2f1bfc24a0c"
Request-Time: 8
Accept-Ranges: bytes
Cache-Control: public, max-age=3600
Last-Modified: Tue, 12 Jul 2022 13:48:05 GMT
Content-Encoding: gzip
Date: Thu, 08 Dec 2022 08:01:38 GMT
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: HJWxohbU5_MvmkgkExUigZBEYlX5x2NQWMVP_jgMjAC40I6fy65uQw==
Age: 1472
builder-assets.unbounce.com/published-css/main-7b78720.z.css
200 OK 2.9 kB URL HTTP/2 builder-assets.unbounce.com/published-css/main-7b78720.z.css
IP
File type ASCII text, with very long lines (15017)
Hash 3d27e56a34e34b278ab5e182cbc3b587
b871dae022b6537150e18df2bbf266caaa013fdc
3646920461d3a5dd11dfb46a1d063bee0eaad079e9d3e9341942f24f3688401f
GET /published-css/main-7b78720.z.css HTTP/1.1
Host: builder-assets.unbounce.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kampanje.happigames.nu/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css
content-length: 2902
date: Mon, 05 Dec 2022 01:58:05 GMT
last-modified: Wed, 23 Nov 2022 23:24:30 GMT
etag: "3d27e56a34e34b278ab5e182cbc3b587"
cache-control: max-age=31536000
content-encoding: gzip
x-amz-version-id: F0XZlkUrGu6OlrfKzU_C7UXh1V6i6hug
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: K5gwaKEiU3_em3Ma4uCVWjbrfxw5luR-B8K9JjfKr64p88LTJ2AQAQ==
age: 282486
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a938af990a97b9856e1174d11c72cbf7
b57716fd0ea9a1e9e0a0595ff593f939560c0abf
6ab769333b231097d077edfbc1c3fc9560de5ae9bfeb5b8360dea8b7fadbcb44
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 08:26:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c7a5f887bbc7d30b9cfe15163c3d8ddb
21d65790a1d10a06d198b54218365aa474126e1c
2a2e7930f967d947cc5293c95221913e24596773577bbf56ff402db6236bbda1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 08:26:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b5c27a4ab37c6c8203d281ea09fa3e4a
0c36ba3df7510a76b2062ad1584e564592a45035
4eac9570f12e3959c4944baf4f232cd994291cd1dfe334ffc93ac4737972bdb9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 08:26:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtm.js?id=GTM-NFLKFFL
200 OK 58 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-NFLKFFL
IP
File type ASCII text, with very long lines (3827)
Hash b612c62f2e3f39bf351310c3bba268af
216bae176a4a1a6a9ebe50720bdfa5a18e1eb2d3
5e20d8b8e322400b4721c789d849708eee21b0a579502eaea7b2320c5d49acd4
GET /gtm.js?id=GTM-NFLKFFL HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kampanje.happigames.nu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 08 Dec 2022 08:26:10 GMT
expires: Thu, 08 Dec 2022 08:26:10 GMT
cache-control: private, max-age=900
last-modified: Thu, 08 Dec 2022 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 58094
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
i.ytimg.com/vi/z00mK3Pxc8w/hqdefault.jpg
404 Not Found 1.1 kB URL HTTP/2 i.ytimg.com/vi/z00mK3Pxc8w/hqdefault.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x90, components 3\012- data
Hash e2ddfee11ae7edcae257da47f3a78a70
6e902fa6302eb30cd204579bca6a59b37233e262
20e9aab22032d85684d7d916a1013f7c577a132a5b10ea3fd3578e8d0b28a711
GET /vi/z00mK3Pxc8w/hqdefault.jpg HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kampanje.happigames.nu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
vary: Origin
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: image/jpeg
date: Thu, 08 Dec 2022 08:26:10 GMT
expires: Thu, 08 Dec 2022 08:26:40 GMT
cache-control: public, max-age=30
x-content-type-options: nosniff
server: sffe
content-length: 1097
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c7a5f887bbc7d30b9cfe15163c3d8ddb
21d65790a1d10a06d198b54218365aa474126e1c
2a2e7930f967d947cc5293c95221913e24596773577bbf56ff402db6236bbda1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 08:26:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b5c27a4ab37c6c8203d281ea09fa3e4a
0c36ba3df7510a76b2062ad1584e564592a45035
4eac9570f12e3959c4944baf4f232cd994291cd1dfe334ffc93ac4737972bdb9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 08:26:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
status.thawte.com/
200 OK 471 B IP
Hash f437354ecc5a7ed438a7f57777b4603f
d536ee1dd1b839c73a66167a5ae0f88ae224a376
664897437b7288ad9311bef5a1ac68633b094fd3848480f1d51cdc4cf964dee5
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6192
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 08:26:11 GMT
Last-Modified: Thu, 08 Dec 2022 06:43:00 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471
s.kelkoogroup.net/k.gif
200 OK 0 B IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /k.gif HTTP/1.1
Host: s.kelkoogroup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: etag
Referer: https://kampanje.happigames.nu/
Origin: https://kampanje.happigames.nu
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
X-Gravitee-Transaction-Id: c95f611b-f667-4e10-9f61-1bf6674e100f
X-Gravitee-Request-Id: c95f611b-f667-4e10-9f61-1bf6674e100f
Vary: Origin
Access-Control-Max-Age: 3600
Access-Control-Allow-Origin: https://kampanje.happigames.nu
Access-Control-Allow-Headers: etag
Access-Control-Allow-Methods: GET
Access-Control-Allow-Credentials: true
Date: Thu, 08 Dec 2022 08:26:11 GMT
content-length: 0
www.youtube.com/s/player/72d3c60a/www-player.css
200 OK 50 kB URL HTTP/2 www.youtube.com/s/player/72d3c60a/www-player.css
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 5a5b8eb5d8a3df4b72089b611a5e7deb
9eb088fd709aba51fcc2261764df57ddb6df1498
3e06a6dbf24b719e85dac71b46a939a516c246dee204817e5aee68f580b83406
GET /s/player/72d3c60a/www-player.css HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/embed/z00mK3Pxc8w?mute=1&rel=0&loop=0&modestbranding=1&showinfo=0&controls=0&iv_load_policy=3&autohide=1&autoplay=0&disablekb=1&fs=0&html5=1&enablejsapi=1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 49862
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 Dec 2022 19:36:17 GMT
expires: Thu, 07 Dec 2023 19:36:17 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 07 Dec 2022 01:17:24 GMT
content-type: text/css
age: 46194
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
status.thawte.com/
200 OK 471 B IP
Hash f437354ecc5a7ed438a7f57777b4603f
d536ee1dd1b839c73a66167a5ae0f88ae224a376
664897437b7288ad9311bef5a1ac68633b094fd3848480f1d51cdc4cf964dee5
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4122
Cache-Control: max-age=123193
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 08:26:11 GMT
Etag: "6390cdc2-1d7"
Expires: Fri, 09 Dec 2022 18:39:24 GMT
Last-Modified: Wed, 07 Dec 2022 17:30:42 GMT
Server: ECS (amb/6B79)
X-Cache: HIT
Content-Length: 471
analytics.tiktok.com/i18n/pixel/events.js?sdkid=CC6VVPBC77U6DSA10O7G&lib=ttq
200 OK 1.3 kB URL HTTP/2 analytics.tiktok.com/i18n/pixel/events.js?sdkid=CC6VVPBC77U6DSA10O7G&lib=ttq
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (2672)
Hash d46132437a87c4861d33127d8e42d3b7
fd735c73bfa7525db19c6cd0646308a425c42bd9
dca353464d614d50dbe74bd96971c9d2008b426ca4f5a25f14b27ab6d8bf15bf
GET /i18n/pixel/events.js?sdkid=CC6VVPBC77U6DSA10O7G&lib=ttq HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kampanje.happigames.nu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
x-tt-logid: 202212080826119B1FA19EDC260D6B1EDE
x-tt-trace-host: 016eabbbec2a80a817c88fdee8d986cf60b9bb176d45c32855e78e06e921aa21328c36e7c2464eda9bc0a291362ac84763d024bfd77447a8d8cbe8c2c99541e96e1c54615611f1918c476a30d5f17cf9dc830eae8684153fa3c9f4319bb60cab33
content-encoding: gzip
content-length: 1315
x-origin-response-time: 15,66.198.8.121
x-akamai-request-id: b5dd3105.f6efb36
expires: Thu, 08 Dec 2022 08:26:11 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Thu, 08 Dec 2022 08:26:11 GMT
x-cache: TCP_MISS from a23-36-79-13.deploy.akamaitechnologies.com (AkamaiGHost/10.10.2-45048955) (-)
vary: Accept-Encoding
set-cookie: _ttp=2IcjsOjh2byqqMv9kkKMexzIznG; Path=/; Domain=tiktok.com; Max-Age=33696000; Secure; SameSite=None
x-cache-remote: TCP_MISS from a66-198-8-121.deploy.akamaitechnologies.com (AkamaiGHost/10.10.2-45048955) (-)
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: cdn-cache; desc=MISS, edge; dur=100, origin; dur=15, inner; dur=13
x-parent-response-time: 114,23.36.79.13
X-Firefox-Spdy: h2
www.youtube.com/s/player/72d3c60a/www-embed-player.vflset/www-embed-player.js
200 OK 99 kB URL HTTP/2 www.youtube.com/s/player/72d3c60a/www-embed-player.vflset/www-embed-player.js
IP
File type ASCII text, with very long lines (679)
Hash 6278b7402fc83e24ebf6989d8de59b43
cb4217da0314cbbad9a59cd9a4c5c9791c5cf2c8
ab52b872c1360673bf1bde1a98e1cf7b9c8bc351bd07651d338f444db827b995
GET /s/player/72d3c60a/www-embed-player.vflset/www-embed-player.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/embed/z00mK3Pxc8w?mute=1&rel=0&loop=0&modestbranding=1&showinfo=0&controls=0&iv_load_policy=3&autohide=1&autoplay=0&disablekb=1&fs=0&html5=1&enablejsapi=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 99392
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 Dec 2022 19:36:17 GMT
expires: Thu, 07 Dec 2023 19:36:17 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 07 Dec 2022 01:17:24 GMT
content-type: text/javascript
age: 46194
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.youtube.com/s/player/72d3c60a/fetch-polyfill.vflset/fetch-polyfill.js
200 OK 2.8 kB URL HTTP/2 www.youtube.com/s/player/72d3c60a/fetch-polyfill.vflset/fetch-polyfill.js
IP
File type Algol 68 source text\012- Pascal source, ASCII text, with very long lines (555)
Hash 80fe2d229007996c8397073b00755dc7
121f82c77bcf2a297a1085e3b092415c463fcafe
033dfa8941482c82d4f1aaa4a9172fb379b9e46a02d5b36297c5476bbbfdea2c
GET /s/player/72d3c60a/fetch-polyfill.vflset/fetch-polyfill.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/embed/z00mK3Pxc8w?mute=1&rel=0&loop=0&modestbranding=1&showinfo=0&controls=0&iv_load_policy=3&autohide=1&autoplay=0&disablekb=1&fs=0&html5=1&enablejsapi=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 2786
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 Dec 2022 19:36:17 GMT
expires: Thu, 07 Dec 2023 19:36:17 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 07 Dec 2022 01:17:24 GMT
content-type: text/javascript
age: 46194
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a938af990a97b9856e1174d11c72cbf7
b57716fd0ea9a1e9e0a0595ff593f939560c0abf
6ab769333b231097d077edfbc1c3fc9560de5ae9bfeb5b8360dea8b7fadbcb44
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 08:26:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.youtube.com/s/player/72d3c60a/player_ias.vflset/en_US/base.js
200 OK 595 kB URL HTTP/2 www.youtube.com/s/player/72d3c60a/player_ias.vflset/en_US/base.js
IP
File type ASCII text, with very long lines (517)
Size 595 kB (594772 bytes)
Hash 7f5d760069d9cecea0d8dc1acfcabb2b
6acdef1e7fbbafbfbec0012a891af004b02fcb94
338bc6bd2e9aa2fccbe6a5d1a288af6d172aec6b3da3a30ddee4a9d68dc07240
GET /s/player/72d3c60a/player_ias.vflset/en_US/base.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/embed/z00mK3Pxc8w?mute=1&rel=0&loop=0&modestbranding=1&showinfo=0&controls=0&iv_load_policy=3&autohide=1&autoplay=0&disablekb=1&fs=0&html5=1&enablejsapi=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding, Origin
content-encoding: br
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 594772
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 Dec 2022 19:36:17 GMT
expires: Thu, 07 Dec 2023 19:36:17 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 07 Dec 2022 01:17:24 GMT
content-type: text/javascript
age: 46194
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
analytics.tiktok.com/i18n/pixel/static/main.MTk2NTc4NGU0MA.js
200 OK 66 kB URL HTTP/2 analytics.tiktok.com/i18n/pixel/static/main.MTk2NTc4NGU0MA.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (21716)
Hash 751a8b838d6cf3cf4750f43188712786
07495015f7764ae79a9cdb42e24d37fea6264a9a
bc10e27de63aa54b7ff83e0421b88c6a802692aa432b218f6f8a05428622bc78
GET /i18n/pixel/static/main.MTk2NTc4NGU0MA.js HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kampanje.happigames.nu/
Cookie: _ttp=2IcjsOjh2byqqMv9kkKMexzIznG
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
x-tt-logid: 20221206132745F774E1DED7BF563B9CF1
x-tt-trace-host: 017bcdfb1f342efa6ce7e8ef248837e909b29e38c81383d97aa45a1f344cf919c8b12ac2429d2852e5e6f30f93a065ab1c0ed2a074ff6b15568ff46eb0f574cad2bc88525a8832adc38278ffc459b96300
content-encoding: gzip
content-length: 66392
date: Thu, 08 Dec 2022 08:26:11 GMT
x-cache: TCP_MEM_HIT from a23-36-79-13.deploy.akamaitechnologies.com (AkamaiGHost/10.10.2-45048955) (-)
vary: Accept-Encoding
x-tt-trace-tag: id=16;cdn-cache=hit;type=static
server-timing: cdn-cache; desc=HIT, edge; dur=1, inner; dur=3
x-akamai-request-id: f6efdda
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 03 Dec 2022 12:31:58 GMT
expires: Sun, 03 Dec 2023 12:31:58 GMT
cache-control: public, max-age=31536000
age: 417253
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 0e9eef4ed41ef94e9ea175ad243e294e
b6f83e508270413dabe55e2884b5409ca7978e24
0e741ca8d92717128bca7aed937bca43519a8d20a9d3dd8670da656ad51a695e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 08:26:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Dec 2022 21:46:16 GMT
expires: Fri, 01 Dec 2023 21:46:16 GMT
cache-control: public, max-age=31536000
age: 556795
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/kampanje.happigames.nu/thesims4-sale-2022/90b26019-original_1000000000000000000028.png
200 OK 235 kB URL HTTP/2 d9hhrg4mnvzow.cloudfront.net/kampanje.happigames.nu/thesims4-sale-2022/90b26019-original_1000000000000000000028.png
IP
File type PNG image data, 1200 x 900, 8-bit colormap, non-interlaced\012- data
Size 235 kB (234821 bytes)
Hash d63e47182670758999e2621d4165491d
c0fc6649b066f4b3dcc58b3b2581452fceae189f
cf1882062dd0a4a587f32189c051c36d687416d4ea0fe72021634c3b6a1a6004
GET /kampanje.happigames.nu/thesims4-sale-2022/90b26019-original_1000000000000000000028.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kampanje.happigames.nu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/png
content-length: 234821
date: Mon, 03 Oct 2022 14:55:45 GMT
last-modified: Mon, 19 Sep 2022 11:37:34 GMT
etag: "d63e47182670758999e2621d4165491d"
cache-control: max-age=31557600
x-amz-version-id: D3vHkr3ojShcWvjQyxEzYke.ZzXcZ_2R
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: eYnmkJ-ZCjGHIC_9t6ELQKN0PZwU3B0nXH9S6bleDZHmtdL7QAVBIg==
age: 5679027
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/kampanje.happigames.nu/thesims4-sale-2022/9c7ec544-original_11hc0m800000000000001o.jpg
200 OK 85 kB URL HTTP/2 d9hhrg4mnvzow.cloudfront.net/kampanje.happigames.nu/thesims4-sale-2022/9c7ec544-original_11hc0m800000000000001o.jpg
IP
File type JPEG image data, baseline, precision 8, 1920x800, components 3\012- data
Hash e8d0ed562e2e3a1fd28d3cfedbe2cda1
053d2c45257f034ce026f1d54ece8a492b0a5257
a9cbe847e29f4339d39f0c579aa500363ed42ec4f8cfa0430ab3325e5b345362
GET /kampanje.happigames.nu/thesims4-sale-2022/9c7ec544-original_11hc0m800000000000001o.jpg HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kampanje.happigames.nu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/jpeg
content-length: 84735
date: Fri, 19 Aug 2022 12:32:38 GMT
last-modified: Tue, 16 Aug 2022 09:47:29 GMT
etag: "e8d0ed562e2e3a1fd28d3cfedbe2cda1"
cache-control: max-age=31557600
x-amz-version-id: FXXOGNcdCNtoyvBL3se_E1bmCPHcl1La
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: wR-i4uVYb9za9xBesgVswOMHPJLTCy543RRnHjGJDoyDpE-R5NOw2g==
age: 9575614
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/kampanje.happigames.nu/thesims4-sale-2022/6cec050a-baggrund-sims-escape_100000000000000000001o.jpg
200 OK 16 kB URL HTTP/2 d9hhrg4mnvzow.cloudfront.net/kampanje.happigames.nu/thesims4-sale-2022/6cec050a-baggrund-sims-escape_100000000000000000001o.jpg
IP
File type JPEG image data, baseline, precision 8, 1890x1417, components 3\012- data
Hash 019eece16e3d99af65f0ade0ba44fdb4
86fb72419a4a9a716b07f9fed4a8ac007164bb83
5eec2e531807db13126d10205af47d298614275c32caf0aadd0b14017aa91868
GET /kampanje.happigames.nu/thesims4-sale-2022/6cec050a-baggrund-sims-escape_100000000000000000001o.jpg HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kampanje.happigames.nu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/jpeg
content-length: 16350
date: Fri, 19 Aug 2022 08:49:25 GMT
last-modified: Tue, 16 Aug 2022 09:47:29 GMT
etag: "019eece16e3d99af65f0ade0ba44fdb4"
cache-control: max-age=31557600
x-amz-version-id: K9Hy0C4Bd3fV8N107D2jBaM6NS02SonK
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: EDEe5Eeunx0ljUTl4sWM1X3Ok13tj4A2S237xOgIdQMWjktQjCBRxg==
age: 9589007
X-Firefox-Spdy: h2
d34qb8suadcc4g.cloudfront.net/ub.js?1618514269
200 OK 1.9 kB URL HTTP/2 d34qb8suadcc4g.cloudfront.net/ub.js?1618514269
IP
Hash f6420c864830b5860bfaadd47a2bb21b
935d2ed35f43eb0f1aea9b0642df0d7f4770def7
6f36d2d4b4b9df950fd0dd0d57e0eacb7c4217e8086b4ef940cbd6e526930462
GET /ub.js?1618514269 HTTP/1.1
Host: d34qb8suadcc4g.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kampanje.happigames.nu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 1856
date: Tue, 08 Nov 2022 02:05:01 GMT
last-modified: Thu, 15 Apr 2021 19:15:08 GMT
etag: "f6420c864830b5860bfaadd47a2bb21b"
cache-control: max-age=31536000
content-encoding: gzip
x-amz-version-id: bKC28ufbc849z_LglraHgQe9TbPw1SIU
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: JPnCS5kOAMDPv-PVE6NpaXg0nAin-cNVlgMRZ-VTjxEOM-32kI91Bg==
age: 2614871
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/kampanje.happigames.nu/thesims4-sale-2022/a3c80eac-skaermbillede-2020-11-06-kl-00-07-45_1000000000000000000028.png
200 OK 844 B URL HTTP/2 d9hhrg4mnvzow.cloudfront.net/kampanje.happigames.nu/thesims4-sale-2022/a3c80eac-skaermbillede-2020-11-06-kl-00-07-45_1000000000000000000028.png
IP
File type PNG image data, 418 x 248, 8-bit colormap, non-interlaced\012- data
Hash 174d752e533f943f4a9cdf9b3c7c7cb8
2d3c381636053e5ba8a31130f70f45446b8faabc
476beb2de4e4eacd35125c299dbc51c15c2ac0b87eed40f087e9a099f41914ff
GET /kampanje.happigames.nu/thesims4-sale-2022/a3c80eac-skaermbillede-2020-11-06-kl-00-07-45_1000000000000000000028.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kampanje.happigames.nu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/png
content-length: 844
date: Fri, 19 Aug 2022 08:49:25 GMT
last-modified: Tue, 16 Aug 2022 09:47:29 GMT
etag: "174d752e533f943f4a9cdf9b3c7c7cb8"
cache-control: max-age=31557600
x-amz-version-id: b3pW7O00P90r449cqfjfJjw5ewLoH4XK
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 7cyZuG9i_yEBrWJQqS_2CxTJh1xbMEwQAQzlrKyAo5kVcjghoHBu4w==
age: 9589007
X-Firefox-Spdy: h2
kampanje.happigames.nu/favicon.ico
404 Not Found 47 B URL HTTP/1.1 kampanje.happigames.nu/favicon.ico
IP
File type ASCII text, with no line terminators
Hash f9ae9006943e3a67b95ca4c6c733b6d4
9f9e7a7e2602d29e4df8c38df6277ab37fb1b079
cd8b79123a843eee64985a23257e2fab80ef2c4c08427b688ea979671fc1c457
GET /favicon.ico HTTP/1.1
Host: kampanje.happigames.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kampanje.happigames.nu/thesims4-sale-2022/?kk=a4c6295-184f0d78c2a-3ef0e&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=EA+Games+The+Sims+4+%28Pc%2Fmac%29
Cookie: ubvs=d5f8d8d6-65a2-4e62-bad2-60b91911c710; ubvt=d5f8d8d6-65a2-4e62-bad2-60b91911c710; kk_leadtag=true; kelkooId=a4c6295-184f0d78c2a-3ef0e; _gcl_au=1.1.1365569894.1670487970
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 404 Not Found
x-proxy-backend: content-gateway
content-length: 47
content-type: text/plain; charset=UTF-8
connection: close
d9hhrg4mnvzow.cloudfront.net/kampanje.happigames.nu/thesims4-sale-2022/b6897cfa-skaermbillede-2021-09-15-kl-18-23-17_12210n11hc0n10ac000028.png
200 OK 707 kB URL HTTP/2 d9hhrg4mnvzow.cloudfront.net/kampanje.happigames.nu/thesims4-sale-2022/b6897cfa-skaermbillede-2021-09-15-kl-18-23-17_12210n11hc0n10ac000028.png
IP
File type PNG image data, 1920 x 829, 8-bit colormap, non-interlaced\012- data
Size 707 kB (707073 bytes)
Hash 67a1bd8331420fbf01d70fcd41107ea5
47bd1b6c719389296bf6406a09b88df6ae540148
605e90f7bf2cb9cef8b195abe4fc695ba28a97335235f3a0186027e2e807b89d
GET /kampanje.happigames.nu/thesims4-sale-2022/b6897cfa-skaermbillede-2021-09-15-kl-18-23-17_12210n11hc0n10ac000028.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kampanje.happigames.nu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/png
content-length: 707073
date: Fri, 19 Aug 2022 12:32:38 GMT
last-modified: Tue, 16 Aug 2022 09:47:29 GMT
etag: "67a1bd8331420fbf01d70fcd41107ea5"
cache-control: max-age=31557600
x-amz-version-id: NLWU_0yjEVfMFNfIIbVkYBBJ7NIq_6bX
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: uVoe4hOgWAeLIbQOCo7cVDuNBb3VNMGOeIDm8G4VJGR15Po8EHFGtQ==
age: 9575614
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 7d047c6733f9c8d5998cae08d314f084
c23a8dce8a76dd01e22650fc1c19af2bae963008
d13c4f663e010387e21eece93c733faf5f2c3f9ff8ffca7aad99235aa990bea5
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6570
Cache-Control: max-age=160908
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 08:26:11 GMT
Etag: "63915785-1d7"
Expires: Sat, 10 Dec 2022 05:07:59 GMT
Last-Modified: Thu, 08 Dec 2022 03:18:29 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 0e9eef4ed41ef94e9ea175ad243e294e
b6f83e508270413dabe55e2884b5409ca7978e24
0e741ca8d92717128bca7aed937bca43519a8d20a9d3dd8670da656ad51a695e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 08:26:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 8129d4d0ebab3efc528f57883dfb30ba
be557eee6cd854421ec872673041867c73369fa2
ed95fb60948c81a74657e5964798a07145fe91fee47cb270006f62294a5670b1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 08:26:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
analytics.tiktok.com/i18n/pixel/static/identify_7373d.js
200 OK 31 kB URL HTTP/2 analytics.tiktok.com/i18n/pixel/static/identify_7373d.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65536), with no line terminators
Hash 905f25a6763488baff0582a11e6d4650
cbf906634f07d5e983cb8f5f30195d24a219ca41
73bf06623dd0515ca31a2f3c352cf6efce03e0ff7e7bf3ae990a19745787deda
GET /i18n/pixel/static/identify_7373d.js HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kampanje.happigames.nu/
Cookie: _ttp=2IcjsOjh2byqqMv9kkKMexzIznG
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
x-tt-logid: 20221206132745F774E1DED7BF563B9D05
x-tt-trace-host: 017bcdfb1f342efa6ce7e8ef248837e909b29e38c81383d97aa45a1f344cf919c8a599ec6c025c616e50bcaf3d3e28b0e81315201e77a8c36d9dceb999beae4aa6616a7661fd70d5a724b0816ae855e12b
content-encoding: gzip
content-length: 30877
date: Thu, 08 Dec 2022 08:26:11 GMT
x-cache: TCP_MEM_HIT from a23-36-79-13.deploy.akamaitechnologies.com (AkamaiGHost/10.10.2-45048955) (-)
vary: Accept-Encoding
x-tt-trace-tag: id=16;cdn-cache=hit;type=static
server-timing: cdn-cache; desc=HIT, edge; dur=0, inner; dur=3
x-akamai-request-id: f6f01c5
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-YXRQH6EB4X&cid=1977621861.1670487971>m=2oebu0&aip=1&z=1892807466
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-YXRQH6EB4X&cid=1977621861.1670487971>m=2oebu0&aip=1&z=1892807466
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-YXRQH6EB4X&cid=1977621861.1670487971>m=2oebu0&aip=1&z=1892807466 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kampanje.happigames.nu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 08 Dec 2022 08:26:11 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
connect.facebook.net/en_US/fbevents.js
200 OK 27 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
File type ASCII text, with very long lines (64348)
Hash 44ecaa3c2a4929a40141edc4540aaf84
f29a573182333b2500d41bfc389d6c5232dfb348
6589fe14578dedd4df678a909afadd7e5bc7f57c7e3e24518a7f5faac7383396
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kampanje.happigames.nu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: R+d3vOq2djJ6zr34iE4F7MknSL1fogWDK5Vxl549tguqM3yXzl8Zuhmfyv5AYbccBt9BtX/7YxRO2jRti5KG2Q==
content-length: 27340
x-fb-trip-id: 1679558926
date: Thu, 08 Dec 2022 08:26:11 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 7d047c6733f9c8d5998cae08d314f084
c23a8dce8a76dd01e22650fc1c19af2bae963008
d13c4f663e010387e21eece93c733faf5f2c3f9ff8ffca7aad99235aa990bea5
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6570
Cache-Control: max-age=160908
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 08:26:11 GMT
Etag: "63915785-1d7"
Expires: Sat, 10 Dec 2022 05:07:59 GMT
Last-Modified: Thu, 08 Dec 2022 03:18:29 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 8129d4d0ebab3efc528f57883dfb30ba
be557eee6cd854421ec872673041867c73369fa2
ed95fb60948c81a74657e5964798a07145fe91fee47cb270006f62294a5670b1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 08:26:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
analytics.tiktok.com/api/v2/pixel
200 OK 0 B URL HTTP/2 analytics.tiktok.com/api/v2/pixel
IP
ASN #20940 Akamai International B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/v2/pixel HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 937
Origin: https://kampanje.happigames.nu
Connection: keep-alive
Referer: https://kampanje.happigames.nu/
Cookie: _ttp=2IcjsOjh2byqqMv9kkKMexzIznG
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/octet-stream
content-length: 0
access-control-allow-origin: *
x-tt-logid: 20221208082611D7BC60DABF32FC743720
x-tt-trace-host: 016eabbbec2a80a817c88fdee8d986cf60b9bb176d45c32855e78e06e921aa213235d3acaaa6e08cc941ae8cfdca850486803f965b9beea0edb8689c2a53d0f461b09db98996cc4e9c27b2134396f9d32f5f31f3bd399be2a64c91bb703704d210
x-origin-response-time: 17,66.198.8.122
x-akamai-request-id: 79039b0c.f6f01d0
expires: Thu, 08 Dec 2022 08:26:11 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Thu, 08 Dec 2022 08:26:11 GMT
x-cache: TCP_MISS from a23-36-79-13.deploy.akamaitechnologies.com (AkamaiGHost/10.10.2-45048955) (-)
x-cache-remote: TCP_MISS from a66-198-8-122.deploy.akamaitechnologies.com (AkamaiGHost/10.10.2-45048955) (-)
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: cdn-cache; desc=MISS, edge; dur=108, origin; dur=17, inner; dur=15
x-parent-response-time: 121,23.36.79.13
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/kampanje.happigames.nu/thesims4-sale-2022/80705a15-plat-windows-white.svg
200 OK 531 B URL HTTP/2 d9hhrg4mnvzow.cloudfront.net/kampanje.happigames.nu/thesims4-sale-2022/80705a15-plat-windows-white.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document, ASCII text
Hash a05166e1bfde0c830b64dd699b50a9bd
f0a4a4aea368c9c7632df2bb40a98bbd71045049
a384c2120f7be9f7fe861725eb52eb4b4344e5270877de2e33d5e1ca8913fbfe
GET /kampanje.happigames.nu/thesims4-sale-2022/80705a15-plat-windows-white.svg HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kampanje.happigames.nu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 531
date: Fri, 19 Aug 2022 01:36:52 GMT
last-modified: Tue, 16 Aug 2022 09:47:29 GMT
etag: "a05166e1bfde0c830b64dd699b50a9bd"
cache-control: max-age=31557600
x-amz-version-id: GpH_GxfKsP5BbWc7TSL76KE9OPt_94Fs
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 6YM5k8bIYWL5NimqtSV-VAtckSsp0WihLc3TzgcTOVisbxFxIgRtag==
age: 9614960
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/kampanje.happigames.nu/thesims4-sale-2022/7df1d4df-ts4-adaptive-logo-primary-white-7x2-xl-5x2-lg-2x1-md-16x9-sm-xs-png-adapt-crop7x2-1920w_1000000000000000000028.png
200 OK 5.0 kB URL HTTP/2 d9hhrg4mnvzow.cloudfront.net/kampanje.happigames.nu/thesims4-sale-2022/7df1d4df-ts4-adaptive-logo-primary-white-7x2-xl-5x2-lg-2x1-md-16x9-sm-xs-png-adapt-crop7x2-1920w_1000000000000000000028.png
IP
File type PNG image data, 380 x 140, 8-bit colormap, non-interlaced\012- data
Hash 04e57f88efa1cbb6fa07af9a56fc9139
80dece3a96f329998f0bb6c7bed94f94bfe6993b
8b331b7684908ba4ebde4f456ab06a69fd025517659cae6eecb3cfa05958aa1c
GET /kampanje.happigames.nu/thesims4-sale-2022/7df1d4df-ts4-adaptive-logo-primary-white-7x2-xl-5x2-lg-2x1-md-16x9-sm-xs-png-adapt-crop7x2-1920w_1000000000000000000028.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kampanje.happigames.nu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 5008
date: Sat, 15 Oct 2022 10:08:37 GMT
last-modified: Mon, 19 Sep 2022 11:37:34 GMT
etag: "04e57f88efa1cbb6fa07af9a56fc9139"
cache-control: max-age=31557600
x-amz-version-id: hAjWoX0n5nkO5vZaeGuAHOO7XROEP7Fi
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Rmmaa1X9v_-pIHj6YBq2KKHlnYNletQ0cTKg46b_rcbpgWnRsVohbw==
age: 4659455
X-Firefox-Spdy: h2
d34qb8suadcc4g.cloudfront.net/sp-2.14.0.js
200 OK 30 kB URL HTTP/2 d34qb8suadcc4g.cloudfront.net/sp-2.14.0.js
IP
File type ASCII text, with very long lines (64903)
Hash 73de733c308b8b5e44d2a6242dc4bd99
2f43a0cd155124d65ab5ce3574abc5f82b45fcf9
cf4ff4a67675a54e9a9469d967c77fba778ccf839a98119d246012447eb44ea3
GET /sp-2.14.0.js HTTP/1.1
Host: d34qb8suadcc4g.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kampanje.happigames.nu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 30399
date: Thu, 10 Nov 2022 02:56:55 GMT
last-modified: Wed, 04 Nov 2020 01:35:32 GMT
etag: "73de733c308b8b5e44d2a6242dc4bd99"
cache-control: max-age=31536000
content-encoding: gzip
x-amz-version-id: rVTqklA1qqyT_0VdOCY323BKPISR0uej
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: fNRGLLbhcrk3IdwnJq3ExpJZadZYerW_x20nIn6bpDbTjEOaqZ5DJA==
age: 2438957
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/kampanje.happigames.nu/thesims4-sale-2022/83ecb5d1-origin_1000000000000000000028.png
200 OK 1.2 kB URL HTTP/2 d9hhrg4mnvzow.cloudfront.net/kampanje.happigames.nu/thesims4-sale-2022/83ecb5d1-origin_1000000000000000000028.png
IP
File type PNG image data, 173 x 34, 8-bit colormap, non-interlaced\012- data
Hash c85163bcda2e6cece4866d554f01c8fc
0643848ece473b0a0eb8c0e7aa94248258a618d7
d3a4510964428135f950571013eedfdd3af6f6b18b9e829d9e993ef3497e6fd6
GET /kampanje.happigames.nu/thesims4-sale-2022/83ecb5d1-origin_1000000000000000000028.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kampanje.happigames.nu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 1168
date: Sun, 16 Oct 2022 08:41:56 GMT
last-modified: Mon, 19 Sep 2022 11:37:34 GMT
etag: "c85163bcda2e6cece4866d554f01c8fc"
cache-control: max-age=31557600
x-amz-version-id: 3NrliAsTAXjYCXfAPAkkInUhaNs2BA90
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: fTaLs7rjEX-tHPfQL5oHAEGK1lv-GRZp0bI4y1yIMnrjsA5VPi8luA==
age: 4578256
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/kampanje.happigames.nu/thesims4-sale-2022/1cd1d6ec-ico-hot_1000000000000000000028.png
200 OK 609 B URL HTTP/2 d9hhrg4mnvzow.cloudfront.net/kampanje.happigames.nu/thesims4-sale-2022/1cd1d6ec-ico-hot_1000000000000000000028.png
IP
File type PNG image data, 29 x 40, 8-bit colormap, non-interlaced\012- data
Hash dc64a99529530e302ab5bcc0d1f16aa8
4625b09e9a5272bac35d5dca1b22fc13d856c988
18a50af18a255e0bacf754b2f620883447a73b6781cbe6381699c9ee5724c5d9
GET /kampanje.happigames.nu/thesims4-sale-2022/1cd1d6ec-ico-hot_1000000000000000000028.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kampanje.happigames.nu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 609
date: Mon, 14 Nov 2022 06:00:16 GMT
last-modified: Mon, 14 Nov 2022 05:57:58 GMT
etag: "dc64a99529530e302ab5bcc0d1f16aa8"
cache-control: max-age=31557600
x-amz-version-id: P3ZuVD8MS3aOgco_W8xogy3aVIXEIN2u
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: PAyVe4X0swLRDynIe0tdTD-RWs-XZFUylBnOG84uZy9V-V5GJJ6kKQ==
age: 2082356
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/kampanje.happigames.nu/thesims4-sale-2022/3d808a35-happy-games-white_1000000000000000000028.png
200 OK 2.2 kB URL HTTP/2 d9hhrg4mnvzow.cloudfront.net/kampanje.happigames.nu/thesims4-sale-2022/3d808a35-happy-games-white_1000000000000000000028.png
IP
File type PNG image data, 270 x 36, 8-bit colormap, non-interlaced\012- data
Hash 6da194802164db42f17b71893039b12b
7b99e758a32c7d50bba96c3504d921de8956edc9
019a1c378930f59610367b526bbc964ad212ecff92a362539f5afc1a4cd8680e
GET /kampanje.happigames.nu/thesims4-sale-2022/3d808a35-happy-games-white_1000000000000000000028.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kampanje.happigames.nu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 2245
date: Fri, 19 Aug 2022 01:36:53 GMT
last-modified: Tue, 16 Aug 2022 09:47:29 GMT
etag: "6da194802164db42f17b71893039b12b"
cache-control: max-age=31557600
x-amz-version-id: 5Ulj7ksxZC149GD14PwDYArIGvmw3Oy9
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ylKWitPDDxHDjfc5ObGj3fC5Hmb4OP85Ct2Ik9UZo0RqB1pTlN_mgA==
age: 9614959
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/kampanje.happigames.nu/thesims4-sale-2022/35973b6b-new-visa-mastercard-logo_104y01p000000000000028.png
200 OK 2.5 kB URL HTTP/2 d9hhrg4mnvzow.cloudfront.net/kampanje.happigames.nu/thesims4-sale-2022/35973b6b-new-visa-mastercard-logo_104y01p000000000000028.png
IP
File type PNG image data, 178 x 61, 8-bit colormap, non-interlaced\012- data
Hash 14b84e1743cb7615985e137fb6ec1b05
9183cf6aab8f10b9670057424efec2a1493129bd
e63b8978e92c2cbcebfeb8b37ee52a62d196f7224a47e5678908d50c99a577aa
GET /kampanje.happigames.nu/thesims4-sale-2022/35973b6b-new-visa-mastercard-logo_104y01p000000000000028.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kampanje.happigames.nu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 2528
date: Fri, 19 Aug 2022 01:36:53 GMT
last-modified: Tue, 16 Aug 2022 09:47:29 GMT
etag: "14b84e1743cb7615985e137fb6ec1b05"
cache-control: max-age=31557600
x-amz-version-id: 54hgYD7BNsfDaieSbsxu3JtP6Rpd0ebE
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: -_C06wt2ZqLN0Gr2xnMLj6cq8p7PfEiQZg9y4Zr0O7qFxpDi43izKQ==
age: 9614959
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/kampanje.happigames.nu/thesims4-sale-2022/70f301e6-skaermbillede-2020-11-06-kl-20-11-53_104s00w000000000000028.png
200 OK 1.2 kB URL HTTP/2 d9hhrg4mnvzow.cloudfront.net/kampanje.happigames.nu/thesims4-sale-2022/70f301e6-skaermbillede-2020-11-06-kl-20-11-53_104s00w000000000000028.png
IP
File type PNG image data, 172 x 32, 8-bit colormap, non-interlaced\012- data
Hash be8a51bb9da8e6f408f857dd885f9d3b
6beff684874b83fbc55c48c4d11702dc0f70b9c9
01e154b433909fd066ca1629541256ee805bc9f3ff7d17b31a0600ec59a304da
GET /kampanje.happigames.nu/thesims4-sale-2022/70f301e6-skaermbillede-2020-11-06-kl-20-11-53_104s00w000000000000028.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kampanje.happigames.nu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 1156
date: Mon, 07 Nov 2022 23:08:22 GMT
last-modified: Tue, 18 Oct 2022 18:52:38 GMT
etag: "be8a51bb9da8e6f408f857dd885f9d3b"
cache-control: max-age=31557600
x-amz-version-id: DGPr5KJ44sn64YUsapYfA00KuUC6.CID
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: g6X4Ew27UycoLNYo_DbLeXhTkfDhvrlqKpIGoiklgz2JvUmwf2XZsg==
age: 2625470
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/kampanje.happigames.nu/thesims4-sale-2022/72db7103-skaermbillede-2020-11-06-kl-20-11-43_105300z000000000000028.png
200 OK 1.2 kB URL HTTP/2 d9hhrg4mnvzow.cloudfront.net/kampanje.happigames.nu/thesims4-sale-2022/72db7103-skaermbillede-2020-11-06-kl-20-11-43_105300z000000000000028.png
IP
File type PNG image data, 183 x 35, 8-bit colormap, non-interlaced\012- data
Hash fca4ea2262e9b590d149a6c6d980cf81
45718f70db302fb5f8b4fdb75770056140b69e9c
d78f8aaff1d34f0e34762beb9399e98daec099b30743dc6f2097d5a635223add
GET /kampanje.happigames.nu/thesims4-sale-2022/72db7103-skaermbillede-2020-11-06-kl-20-11-43_105300z000000000000028.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kampanje.happigames.nu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 1159
date: Fri, 04 Nov 2022 20:28:12 GMT
last-modified: Tue, 18 Oct 2022 18:52:38 GMT
etag: "fca4ea2262e9b590d149a6c6d980cf81"
cache-control: max-age=31557600
x-amz-version-id: rNcFR_MUtJ1.M3cKJuu3NA4GZaPYyh0t
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: NdNMXvnYJ8KswrBLLjCzFMgR4nkLfSYUxcaa-5r2S1xXM9e6IC2hDA==
age: 2894279
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/kampanje.happigames.nu/thesims4-sale-2022/603898e9-ts4-adaptive-logo-ep-11-light-7x2-xl-5x2-lg-2x1-md-no-png-adapt-crop7x2-1920w_10aw040000000000000028.png
200 OK 8.3 kB URL HTTP/2 d9hhrg4mnvzow.cloudfront.net/kampanje.happigames.nu/thesims4-sale-2022/603898e9-ts4-adaptive-logo-ep-11-light-7x2-xl-5x2-lg-2x1-md-no-png-adapt-crop7x2-1920w_10aw040000000000000028.png
IP
File type PNG image data, 392 x 144, 8-bit colormap, non-interlaced\012- data
Hash aa27d146b5cf9b99f5de1b509f41ce13
c1f333497bb1b1f71e8834491bab4197c532c96d
54bd1f91dc7c70174515150327ec6decb79a1d2c1ad6bb3da7fad4e39682f821
GET /kampanje.happigames.nu/thesims4-sale-2022/603898e9-ts4-adaptive-logo-ep-11-light-7x2-xl-5x2-lg-2x1-md-no-png-adapt-crop7x2-1920w_10aw040000000000000028.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kampanje.happigames.nu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 8253
date: Thu, 06 Oct 2022 22:25:51 GMT
last-modified: Mon, 19 Sep 2022 11:37:34 GMT
etag: "aa27d146b5cf9b99f5de1b509f41ce13"
cache-control: max-age=31557600
x-amz-version-id: 0taBiRg1DSCatCZrRfjo37muC_Ssrgrz
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: TquBpIHITytNtm6yQHvxBzSxRpb4HhoMJC1_GPVE4tCvcUflXI5RDQ==
age: 5392821
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 07a86cf9d9c8389ebd9c52303c83b27f
fd3524d701bdf111c541b6fc9e038bffcc3b5d6c
de08c944b2cb2671078e452d870757622e286f7214d736ab2c1b1d1c2ab8dcfb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 08:26:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
googleads.g.doubleclick.net/pagead/viewthroughconversion/833441087/?random=1670487971014&cv=11&fst=1670487971014&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fkampanje.happigames.nu%2Fthesims4-sale-2022%2F%3Fkk%3Da4c6295-184f0d78c2a-3ef0e%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DEA%2BGames%2BThe%2BSims%2B4%2B%2528Pc%252Fmac%2529&ref=https%3A%2F%2Fno-go.kelkoogroup.net%2F&auid=868960037.1670487971&data=event%3Dgtag.config&rfmt=3&fmt=4
200 OK 1.0 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/833441087/?random=1670487971014&cv=11&fst=1670487971014&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fkampanje.happigames.nu%2Fthesims4-sale-2022%2F%3Fkk%3Da4c6295-184f0d78c2a-3ef0e%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DEA%2BGames%2BThe%2BSims%2B4%2B%2528Pc%252Fmac%2529&ref=https%3A%2F%2Fno-go.kelkoogroup.net%2F&auid=868960037.1670487971&data=event%3Dgtag.config&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2267), with no line terminators
Hash 42a327b2c618b9176ee7203a62582e54
66be55e7ee17374b33ed9f5b6798cbaaf9680448
ac0defa8314f434445bbc98113f17f383c7369f6dc476dfbee9367a0649b72a9
GET /pagead/viewthroughconversion/833441087/?random=1670487971014&cv=11&fst=1670487971014&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fkampanje.happigames.nu%2Fthesims4-sale-2022%2F%3Fkk%3Da4c6295-184f0d78c2a-3ef0e%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DEA%2BGames%2BThe%2BSims%2B4%2B%2528Pc%252Fmac%2529&ref=https%3A%2F%2Fno-go.kelkoogroup.net%2F&auid=868960037.1670487971&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kampanje.happigames.nu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 08 Dec 2022 08:26:11 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 1005
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Thu, 08-Dec-2022 08:41:11 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.ub-assets.com/css?family=Montserrat:700,regular,300%7CLato:300,regular
200 OK 625 B URL HTTP/2 fonts.ub-assets.com/css?family=Montserrat:700,regular,300%7CLato:300,regular
IP
Hash 15344d96b1110a47d4ecce73c4f0bf5e
9e5d71a8afcf66b886258cd0b0777577d2317d33
bc8ef4fa4a8c450289b0949566b5ecca903709096333d6fadba8e9e3dba76d71
GET /css?family=Montserrat:700,regular,300%7CLato:300,regular HTTP/1.1
Host: fonts.ub-assets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kampanje.happigames.nu/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
content-length: 625
date: Thu, 08 Dec 2022 08:26:11 GMT
x-amzn-requestid: e499f0e1-377f-4189-bd4b-142130ffab8b
x-xss-protection: 0
access-control-allow-origin: *
content-encoding: gzip
strict-transport-security: max-age=31536000
x-frame-options: SAMEORIGIN
timing-allow-origin: *
cross-origin-opener-policy: same-origin-allow-popups
x-amz-apigw-id: c0XhoGHXIAMF67A=
cache-control: private, max-age=86400
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
x-amzn-trace-id: Root=1-63919fa3-5f294f206575062d5cda1595
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: jJerSnwA2nEcFWIltPjE3_B3DF_aJZ8rOcSPQTcNS_uQ7Qo5OQoMBw==
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 07a86cf9d9c8389ebd9c52303c83b27f
fd3524d701bdf111c541b6fc9e038bffcc3b5d6c
de08c944b2cb2671078e452d870757622e286f7214d736ab2c1b1d1c2ab8dcfb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 08:26:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 42bdfac4b74435a3d8add640fc703403
e1a183562d91f7cec147112026b6d9d904533ed1
4366d9c119721babbd7188548e8885917a1c011f1cf828dceef088140e8fe8c0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 08:26:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
d9hhrg4mnvzow.cloudfront.net/kampanje.happigames.nu/thesims4-sale-2022/3d294666-plat-steam-white.svg
200 OK 836 B URL HTTP/2 d9hhrg4mnvzow.cloudfront.net/kampanje.happigames.nu/thesims4-sale-2022/3d294666-plat-steam-white.svg
IP
Hash 1726b0a98566881a812158bac6322451
1589341b22b28dc976c03656bf1982487e1aaa07
5fd1d3fa603e219157c99d7282d89a1e6bdae5eea657b479c3381796847869e9
GET /kampanje.happigames.nu/thesims4-sale-2022/3d294666-plat-steam-white.svg HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kampanje.happigames.nu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
date: Fri, 19 Aug 2022 01:36:52 GMT
last-modified: Tue, 16 Aug 2022 09:47:29 GMT
etag: W/"ffe8d21b00e21f1b37a1daeac83f2024"
cache-control: max-age=31557600
x-amz-version-id: M77.60poHWOYOa7RT.TzLvWi0lzp9jtn
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: UtIM3-DQA0qCP_lzs-Gpm30VwQpxE3MlbbQl2UWtzjMDLWKfcai7zA==
age: 9614960
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 0c89743226644fddacbe5d50c110b950
b343ae9eb9047cf764b518083d612ffd3652b209
1bf675bb6e12e913a98cd8849c1af9a0c50b0bb8bfa670c86419b41782e06e47
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 08:26:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6d7737802f93eeb14503d61c77c137bc
fa6861c298d00f879b9f16af4f05470cecfc80af
6b1b9763bcfaeb92a63ad6020651b3745e8279c634eb3505fc9fa875e772af42
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 08:26:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
region1.analytics.google.com/g/collect?v=2&tid=G-YXRQH6EB4X>m=2oebu0&_p=374768811&_gaz=1&cid=1977621861.1670487971&ul=en-us&sr=1280x1024&_s=1&sid=1670487970&sct=1&seg=0&dl=https%3A%2F%2Fkampanje.happigames.nu%2Fthesims4-sale-2022%2F%3Fkk%3Da4c6295-184f0d78c2a-3ef0e%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DEA%2BGames%2BThe%2BSims%2B4%2B%2528Pc%252Fmac%2529&dr=https%3A%2F%2Fno-go.kelkoogroup.net%2F&dt=&en=page_view&_fv=1&_nsi=1&_ss=1
204 No Content 0 B URL HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-YXRQH6EB4X>m=2oebu0&_p=374768811&_gaz=1&cid=1977621861.1670487971&ul=en-us&sr=1280x1024&_s=1&sid=1670487970&sct=1&seg=0&dl=https%3A%2F%2Fkampanje.happigames.nu%2Fthesims4-sale-2022%2F%3Fkk%3Da4c6295-184f0d78c2a-3ef0e%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DEA%2BGames%2BThe%2BSims%2B4%2B%2528Pc%252Fmac%2529&dr=https%3A%2F%2Fno-go.kelkoogroup.net%2F&dt=&en=page_view&_fv=1&_nsi=1&_ss=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-YXRQH6EB4X>m=2oebu0&_p=374768811&_gaz=1&cid=1977621861.1670487971&ul=en-us&sr=1280x1024&_s=1&sid=1670487970&sct=1&seg=0&dl=https%3A%2F%2Fkampanje.happigames.nu%2Fthesims4-sale-2022%2F%3Fkk%3Da4c6295-184f0d78c2a-3ef0e%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DEA%2BGames%2BThe%2BSims%2B4%2B%2528Pc%252Fmac%2529&dr=https%3A%2F%2Fno-go.kelkoogroup.net%2F&dt=&en=page_view&_fv=1&_nsi=1&_ss=1 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://kampanje.happigames.nu
Connection: keep-alive
Referer: https://kampanje.happigames.nu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://kampanje.happigames.nu
date: Thu, 08 Dec 2022 08:26:12 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/kampanje.happigames.nu/thesims4-sale-2022/709e4c04-happigames.svg
200 OK 3.8 kB URL HTTP/2 d9hhrg4mnvzow.cloudfront.net/kampanje.happigames.nu/thesims4-sale-2022/709e4c04-happigames.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document, ASCII text, with very long lines (4274)
Hash a587da499f8202d8c4c19038f83c0ea3
71637be824ef47293c84188012d9560d97d3408b
47649b4457694fede536e5e75bd7e91777f9a8c7c8f74f83848c4c3df260abf4
GET /kampanje.happigames.nu/thesims4-sale-2022/709e4c04-happigames.svg HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kampanje.happigames.nu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
date: Thu, 06 Oct 2022 22:25:51 GMT
last-modified: Mon, 19 Sep 2022 11:37:34 GMT
etag: W/"ec35ba6c427897040e7c700fb10b7b63"
cache-control: max-age=31557600
x-amz-version-id: uFhDHw6axOqVCVfv_q7yAWdpeA.2Qh5p
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: uDo01Upy5NBy6XjaiXB3Eln88y4oWSx-TuR7_ZE60_J1QFeYN_I9vQ==
age: 5392821
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 8274b291596906eb3779dccb82ec41cb
b2ec554df1fa55e18a4316b76ac617dc626b7598
69129be0a1c2e3d1dfc602aea4ef004ea01b3bfa6c5863bd225843472f1bb7c8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 08:26:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4f48748dc87020a0f1368e6d3bb9a24c
4eeade3f02cc6b02390af43bd5e7d67da4a707e0
7cb746c8d9392ac22b2a06ce10ef0266bebf5a7a09febdafeea27a29fa0bd1a5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 08:26:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 42bdfac4b74435a3d8add640fc703403
e1a183562d91f7cec147112026b6d9d904533ed1
4366d9c119721babbd7188548e8885917a1c011f1cf828dceef088140e8fe8c0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 08:26:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4f48748dc87020a0f1368e6d3bb9a24c
4eeade3f02cc6b02390af43bd5e7d67da4a707e0
7cb746c8d9392ac22b2a06ce10ef0266bebf5a7a09febdafeea27a29fa0bd1a5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 08:26:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/pagead/1p-user-list/833441087/?random=1670487971014&cv=11&fst=1670486400000&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fkampanje.happigames.nu%2Fthesims4-sale-2022%2F%3Fkk%3Da4c6295-184f0d78c2a-3ef0e%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DEA%2BGames%2BThe%2BSims%2B4%2B%2528Pc%252Fmac%2529&ref=https%3A%2F%2Fno-go.kelkoogroup.net%2F&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=2399694822&rmt_tld=0&ipr=y
200 OK 42 B URL HTTP/2 www.google.com/pagead/1p-user-list/833441087/?random=1670487971014&cv=11&fst=1670486400000&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fkampanje.happigames.nu%2Fthesims4-sale-2022%2F%3Fkk%3Da4c6295-184f0d78c2a-3ef0e%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DEA%2BGames%2BThe%2BSims%2B4%2B%2528Pc%252Fmac%2529&ref=https%3A%2F%2Fno-go.kelkoogroup.net%2F&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=2399694822&rmt_tld=0&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/833441087/?random=1670487971014&cv=11&fst=1670486400000&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fkampanje.happigames.nu%2Fthesims4-sale-2022%2F%3Fkk%3Da4c6295-184f0d78c2a-3ef0e%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DEA%2BGames%2BThe%2BSims%2B4%2B%2528Pc%252Fmac%2529&ref=https%3A%2F%2Fno-go.kelkoogroup.net%2F&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=2399694822&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kampanje.happigames.nu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 08 Dec 2022 08:26:12 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 0 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Thu, 08 Dec 2022 08:26:12 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 146 kB URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
File type gzip compressed data, from Unix\012- data
Size 146 kB (145945 bytes)
Hash 283e849dc5cc3de0284bac85bdc32308
2c664a3baa0d8dd42fce72313153fa41dd5b0db5
7b7532541181e7da3a50a753bb1ca97ff5d971f011523f7d24d2f7092cdd91df
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=117620
Date: Thu, 08 Dec 2022 08:26:12 GMT
Etag: "6390b1a3-1d7"
Expires: Fri, 09 Dec 2022 17:06:32 GMT
Last-Modified: Wed, 07 Dec 2022 15:30:43 GMT
Server: ECS (nyb/1D0E)
X-Cache: Miss from cloudfront
Via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: CgjAatt9pDhs_7x2LKX6o0eIe42qkXLslOkdycTxeMEHV0sSzw891Q==
Age: 5749
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6d7737802f93eeb14503d61c77c137bc
fa6861c298d00f879b9f16af4f05470cecfc80af
6b1b9763bcfaeb92a63ad6020651b3745e8279c634eb3505fc9fa875e772af42
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 08:26:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 31 kB URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash 0c2b0826368203c525289e7d8677639a
7c05b269f9d5aea6a8676bb4dc7a82c4122cf832
60996b4923b11f779229905caef4163bb2b55d04e13b56ae3e6a6a7374f07edf
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Thu, 08 Dec 2022 08:26:12 GMT
server: ESF
cache-control: private
content-length: 30749
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4f48748dc87020a0f1368e6d3bb9a24c
4eeade3f02cc6b02390af43bd5e7d67da4a707e0
7cb746c8d9392ac22b2a06ce10ef0266bebf5a7a09febdafeea27a29fa0bd1a5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 08:26:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.ub-assets.com/fonts/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
200 OK 31 kB URL HTTP/2 fonts.ub-assets.com/fonts/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 30928, version 1.0\012- data
Hash ac0d2859ea5f8fd6bcb3c305c08ec184
7f6c17e3e592cd8bd346b9cc261d8dd961b8aef7
ae919a7c9f25f0fd97fc18e398ae8e453fcaae487e4a4cb4f896e7fecde4a780
GET /fonts/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1
Host: fonts.ub-assets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://kampanje.happigames.nu
Connection: keep-alive
Referer: https://fonts.ub-assets.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: font/woff2
content-length: 30928
date: Thu, 24 Nov 2022 06:29:39 GMT
x-amzn-requestid: afdf53df-6f24-412c-9cac-8780ac56b18a
last-modified: Mon, 11 Jul 2022 18:57:39 GMT
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
x-xss-protection: 0
access-control-allow-origin: *
x-amzn-remapped-content-length: 30928
timing-allow-origin: *
cross-origin-opener-policy: same-origin; report-to="apps-themes"
x-amz-apigw-id: cF9VIFd4IAMFdMw=
cache-control: public, max-age=31536000
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
x-amzn-trace-id: Root=1-637f0f53-6b8bc5c563f97070571a90a5
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: lGg3N72QHs402_a_XFaiCHeajqrfp5eaz8o92KdW-WJTEeAk90OP3Q==
age: 1216593
X-Firefox-Spdy: h2
fonts.ub-assets.com/fonts/s/lato/v23/S6u9w4BMUTPHh7USSwiPGQ.woff2
200 OK 23 kB URL HTTP/2 fonts.ub-assets.com/fonts/s/lato/v23/S6u9w4BMUTPHh7USSwiPGQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 23236, version 1.0\012- data
Hash 716309aab2bca045f9627f63ad79d0bf
38804233a29aaf975d557fe14e762c627bef76e0
115f6a626ca115d4ad5581b59275327e0e860b30330a52b0f785561332dd2429
GET /fonts/s/lato/v23/S6u9w4BMUTPHh7USSwiPGQ.woff2 HTTP/1.1
Host: fonts.ub-assets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://kampanje.happigames.nu
Connection: keep-alive
Referer: https://fonts.ub-assets.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: font/woff2
content-length: 23236
date: Thu, 24 Nov 2022 07:26:10 GMT
x-amzn-requestid: f808830b-58c0-4877-82c5-9159a6ca7663
last-modified: Tue, 26 Apr 2022 16:04:12 GMT
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
x-xss-protection: 0
access-control-allow-origin: *
x-amzn-remapped-content-length: 23236
timing-allow-origin: *
cross-origin-opener-policy: same-origin; report-to="apps-themes"
x-amz-apigw-id: cGFm_Fj6IAMFjug=
cache-control: public, max-age=31536000
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
x-amzn-trace-id: Root=1-637f1c92-099d7e9c47d7f60a5a2654f3
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: iZh4UmdYRPj5FEDXEQhg9AnczVZZldkb7L1K3LeAyZ-eYGGlHlp5aw==
age: 1213201
X-Firefox-Spdy: h2
fonts.ub-assets.com/fonts/s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2
200 OK 24 kB URL HTTP/2 fonts.ub-assets.com/fonts/s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 23580, version 1.0\012- data
Hash e1b3b5908c9cf23dfb2b9c52b9a023ab
fcd4136085f2a03481d9958cc6793a5ed98e714c
918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537
GET /fonts/s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1
Host: fonts.ub-assets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://kampanje.happigames.nu
Connection: keep-alive
Referer: https://fonts.ub-assets.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: font/woff2
content-length: 23580
date: Thu, 24 Nov 2022 07:26:11 GMT
x-amzn-requestid: 229c539e-f578-4cbe-ad90-4700e38173bb
last-modified: Tue, 26 Apr 2022 15:48:56 GMT
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
x-xss-protection: 0
access-control-allow-origin: *
x-amzn-remapped-content-length: 23580
timing-allow-origin: *
cross-origin-opener-policy: same-origin; report-to="apps-themes"
x-amz-apigw-id: cGFm_F5joAMFxkg=
cache-control: public, max-age=31536000
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
x-amzn-trace-id: Root=1-637f1c92-22753e44241a7b6d6802460c
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: rmnZormh5wRFYymAu4MkGSAc5mJmjH9SshfFNbc3dnCXcNBSFV0Aqg==
age: 1213201
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/kampanje.happigames.nu/thesims4-sale-2022/09ebb907-plat-mac-white.svg
200 OK 615 B URL HTTP/2 d9hhrg4mnvzow.cloudfront.net/kampanje.happigames.nu/thesims4-sale-2022/09ebb907-plat-mac-white.svg
IP
Hash 302fcd1845ba289777d794d24a6dde6f
42ebb3f9fc31ca72c604df2a126c41e560aae49a
03f3a0584b326d615af2211c3053b02b5eb06c0ff748a9c1195506c7c0e940c2
GET /kampanje.happigames.nu/thesims4-sale-2022/09ebb907-plat-mac-white.svg HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kampanje.happigames.nu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
date: Thu, 06 Oct 2022 22:25:51 GMT
last-modified: Mon, 19 Sep 2022 11:37:34 GMT
etag: W/"f228e36ec74944c7fb237b550d00c956"
cache-control: max-age=31557600
x-amz-version-id: k1r04T7YOa56tLXyk2SLL1PVfuNEYCj5
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: qWUVd5S0htkTDzE0BxnfW6v-9OZmHW8v73UdLJBwv3a1JOEdgNezgg==
age: 5392821
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=236105137437893&ev=PageView&dl=https%3A%2F%2Fkampanje.happigames.nu%2Fthesims4-sale-2022%2F%3Fkk%3Da4c6295-184f0d78c2a-3ef0e%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DEA%2BGames%2BThe%2BSims%2B4%2B%2528Pc%252Fmac%2529&rl=https%3A%2F%2Fno-go.kelkoogroup.net%2F&if=false&ts=1670487971716&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=30&fbp=fb.1.1670487971712.447951258&eid=ob3_plugin-set_2f4154c2564e9ed6831a4b29a31ab4c2f1b0e3e1c8b91aec4ad385f33c29008a&it=1670487971110&coo=false&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=236105137437893&ev=PageView&dl=https%3A%2F%2Fkampanje.happigames.nu%2Fthesims4-sale-2022%2F%3Fkk%3Da4c6295-184f0d78c2a-3ef0e%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DEA%2BGames%2BThe%2BSims%2B4%2B%2528Pc%252Fmac%2529&rl=https%3A%2F%2Fno-go.kelkoogroup.net%2F&if=false&ts=1670487971716&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=30&fbp=fb.1.1670487971712.447951258&eid=ob3_plugin-set_2f4154c2564e9ed6831a4b29a31ab4c2f1b0e3e1c8b91aec4ad385f33c29008a&it=1670487971110&coo=false&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=236105137437893&ev=PageView&dl=https%3A%2F%2Fkampanje.happigames.nu%2Fthesims4-sale-2022%2F%3Fkk%3Da4c6295-184f0d78c2a-3ef0e%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DEA%2BGames%2BThe%2BSims%2B4%2B%2528Pc%252Fmac%2529&rl=https%3A%2F%2Fno-go.kelkoogroup.net%2F&if=false&ts=1670487971716&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=30&fbp=fb.1.1670487971712.447951258&eid=ob3_plugin-set_2f4154c2564e9ed6831a4b29a31ab4c2f1b0e3e1c8b91aec4ad385f33c29008a&it=1670487971110&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kampanje.happigames.nu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Thu, 08 Dec 2022 08:26:12 GMT
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 0 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Thu, 08 Dec 2022 08:26:12 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 114 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 4fbe565fafbdec11bd3518b83f49887f
24a1ec69e441e9ded408c7b8e3a022c06693fab6
f1de55fe92667f279d54e700a5a96008dfd2043ad72981b075e184707a5a9e54
POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 1167
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Thu, 08 Dec 2022 08:26:12 GMT
server: ESF
cache-control: private
content-length: 114
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3aea6039f237405a8b4682533c64e9e9
9f180a588845d8863b36507f9c209c906c26cc14
94212bb696acb978ee863116d493b40106f4a7de7de4ec83716c2b4d3f837360
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "94212BB696ACB978EE863116D493B40106F4A7DE7DE4EC83716C2B4D3F837360"
Last-Modified: Wed, 07 Dec 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Thu, 08 Dec 2022 14:26:12 GMT
Date: Thu, 08 Dec 2022 08:26:12 GMT
Connection: keep-alive
dd.kelkoogroup.net/tags.js
200 OK 0 B URL HTTP/2 dd.kelkoogroup.net/tags.js
IP
GET /tags.js HTTP/1.1
Host: dd.kelkoogroup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no-go.kelkoogroup.net/
Connection: keep-alive
Cookie: datadome=0PpOUqJ1EysP9WVw~6xzk47bx7lfMcTahBtKgl-v4gFJBtVgpcCj9HG4ix8sBz6zN8EQQViMBaazUr0Orw7zffuyCP2WwpKxZlZ0w1td-YLIF3M32fhsZvN6pU5WpgIJ; kelkooID=a4c6295-184f0d78c2a-3ef0e
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: text/javascript
content-length: 42664
server: Apache
strict-transport-security: max-age=63072000; includeSubDomains; preload
last-modified: Wed, 07 Dec 2022 10:03:12 GMT
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
via: 1.1 84e2de61192ccb090a6d645d1117e3ea.cloudfront.net (CloudFront), 1.1 58899c559ea4c71daeb5333a74914042.cloudfront.net (CloudFront)
date: Thu, 08 Dec 2022 08:03:35 GMT
cache-control: max-age=3600, public
expires: Thu, 08 Dec 2022 09:03:17 GMT
etag: "32de8-5ef3a07422ee0-gzip"
vary: Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: LHR3-C2, ARN54-C1
x-amz-cf-id: nm0KMsF3MeDxA_iD_45owvokrg9YQ811rH_lzbA8flygZz9TKlcTCg==
age: 1372
X-Firefox-Spdy: h2
www.youtube.com/embed/z00mK3Pxc8w?mute=1&rel=0&loop=0&modestbranding=1&showinfo=0&controls=0&iv_load_policy=3&autohide=1&autoplay=0&disablekb=1&fs=0&html5=1&enablejsapi=1
200 OK 0 B URL HTTP/2 www.youtube.com/embed/z00mK3Pxc8w?mute=1&rel=0&loop=0&modestbranding=1&showinfo=0&controls=0&iv_load_policy=3&autohide=1&autoplay=0&disablekb=1&fs=0&html5=1&enablejsapi=1
IP
GET /embed/z00mK3Pxc8w?mute=1&rel=0&loop=0&modestbranding=1&showinfo=0&controls=0&iv_load_policy=3&autohide=1&autoplay=0&disablekb=1&fs=0&html5=1&enablejsapi=1 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kampanje.happigames.nu/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 08 Dec 2022 08:26:11 GMT
strict-transport-security: max-age=31536000
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
cross-origin-resource-policy: cross-origin
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=GmUAicnZia8; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=TbWlWi-Bsg0; Domain=.youtube.com; Expires=Tue, 06-Jun-2023 08:26:11 GMT; Path=/; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+105; expires=Sat, 07-Dec-2024 08:26:10 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
happigames.nu/events
404 Not Found 0 B IP
ASN #48854 team.blue Denmark A/S
POST /events HTTP/1.1
Host: happigames.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 513
Origin: https://kampanje.happigames.nu
Connection: keep-alive
Referer: https://kampanje.happigames.nu/
Cookie: ubvt=d5f8d8d6-65a2-4e62-bad2-60b91911c710; kk_leadtag=true; kelkooId=a4c6295-184f0d78c2a-3ef0e; _gcl_au=1.1.1365569894.1670487970; _ga_YXRQH6EB4X=GS1.1.1670487970.1.0.1670487970.60.0.0; _ga=GA1.1.1977621861.1670487971; _tt_enable_cookie=1; _ttp=8DkVcQM2LqFds8yWtICkBFib8Yu; kk_au=1.1.868960037.1670487971; _fbp=fb.1.1670487971712.447951258
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 404 Not Found
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: PHPSESSID=90dcb728c4d60f97f987b11e08de1970; path=/; HttpOnly
language=no; expires=Sat, 07-Jan-2023 08:26:12 GMT; Max-Age=2592000; path=/; domain=happigames.nu
currency=NOK; expires=Sat, 07-Jan-2023 08:26:12 GMT; Max-Age=2592000; path=/; domain=happigames.nu
content-security-policy: upgrade-insecure-requests;
x-content-type-options: nosniff
simplycom-server: Apache
content-type: text/html; charset=utf-8
date: Thu, 08 Dec 2022 08:26:12 GMT
server: Apache
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/kampanje.happigames.nu/thesims4-sale-2022/dc13a14a-ts4-featured-image-base-refresh-png-adapt-crop191x100-1200w_10jg0fh000000000000028.png
200 OK 0 B URL HTTP/2 d9hhrg4mnvzow.cloudfront.net/kampanje.happigames.nu/thesims4-sale-2022/dc13a14a-ts4-featured-image-base-refresh-png-adapt-crop191x100-1200w_10jg0fh000000000000028.png
IP
GET /kampanje.happigames.nu/thesims4-sale-2022/dc13a14a-ts4-featured-image-base-refresh-png-adapt-crop191x100-1200w_10jg0fh000000000000028.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kampanje.happigames.nu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 158319
date: Sat, 12 Nov 2022 22:00:23 GMT
last-modified: Tue, 18 Oct 2022 18:52:38 GMT
etag: "3c2a2bd58d60ba888e075d8038ebb0ec"
cache-control: max-age=31557600
x-amz-version-id: 6jVYDI_a5bbDp4IotStjeW7jSEaF.Hx3
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: URRr2NCnnS22KUXpOQFaHxMHVecIoGZ1MhkSJ_fV7Gutj8L5tc4tHw==
age: 2197549
X-Firefox-Spdy: h2
213.227.149.193
34.120.237.76
23.36.77.32
93.184.220.29
185.60.164.26
157.240.200.35
3.126.202.50
0.0.0.0