rouonixon.com/4/3714661/
139.45.197.238200 OK 8.6 kB IP 139.45.197.238:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (12966)
Hash 23440c9f595f5f10f227949f3314d15b
8d8bbd2ed948acba288bbfd77efcef249d7415c8
6de6b54138f1d1e871c47f347b6f92528cbd09b041a6c331829d8c27140e37d1
Analyzer Verdict Alert fortinet Phishing
GET /4/3714661/ HTTP/1.1
Host: rouonixon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 10 Dec 2022 10:21:45 GMT
Content-Type: text/html; charset=utf8
Transfer-Encoding: chunked
Connection: keep-alive
X-Trace-Id: 82db48458ab00c0374ee03f162001f75
Link: <https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://my.rtmark.net>; rel="preconnect dns-prefetch"
Access-Control-Allow-Credentials: true
Access-Control-Max-Age: 86400
Timing-Allow-Origin: *
Set-Cookie: OAID=dee5768ab2ca4e7cac99bcbdf2e9a16a; expires=Sun, 10 Dec 2023 10:21:45 GMT; path=/
oaidts=1670667705; expires=Sun, 10 Dec 2023 10:21:45 GMT; path=/
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
Pragma: no-cache, no-cache
Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
Expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Methods: GET, POST, OPTIONS, POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, Accept, Content-Type, Content-Length, Accept-Encoding
Content-Encoding: gzip
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 430f1651125c14bfa4924aa1f1a392e9
304141c5fe7ac8b370a67912b2592f9622de9600
315d77a9956f34b1615e38f5f1971dd05146980f8a36b35a8108d47ebba7e8e5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "315D77A9956F34B1615E38F5F1971DD05146980F8A36B35A8108D47EBBA7E8E5"
Last-Modified: Sat, 10 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4208
Expires: Sat, 10 Dec 2022 11:31:53 GMT
Date: Sat, 10 Dec 2022 10:21:45 GMT
Connection: keep-alive
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 43ad67f241ee3692a9c9c1da080dae58
6a024f7d71eeee257edc91ba9273416f634aaae5
636635b57f9e6d2ad9b1b949298ee7d3b5b7e251a63516ff68bfb1eceded5688
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "636635B57F9E6D2AD9B1B949298EE7D3B5B7E251A63516FF68BFB1ECEDED5688"
Last-Modified: Sat, 10 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6688
Expires: Sat, 10 Dec 2022 12:13:13 GMT
Date: Sat, 10 Dec 2022 10:21:45 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Backoff, Content-Length, Content-Type, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 10 Dec 2022 10:08:23 GMT
content-type: application/json
age: 802
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 4ee537977be9c03702f8ffe0025bf1fe
21637881c4aa34c4add703f8bff4eff573159f45
4819229fd8f502a0c68c80bd7409e104c1b4d1a98ca8a6cd9deba629b1511aea
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4819229FD8F502A0C68C80BD7409E104C1B4D1A98CA8A6CD9DEBA629B1511AEA"
Last-Modified: Thu, 08 Dec 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11892
Expires: Sat, 10 Dec 2022 13:39:57 GMT
Date: Sat, 10 Dec 2022 10:21:45 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 53341dea33f4f3d9b4966f80589f429a
20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: BdYwJVSpSD3DPxPXSrQpD47ZhzP/x9lRUwBFmffnLvyoHS2pE407rvotMNiZHAMeng1JNERHct8=
x-amz-request-id: RG6Z4AR5HA22Q3SC
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 10 Dec 2022 09:48:44 GMT
age: 1981
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 10 Dec 2022 10:21:45 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 417cf1a73f4cbb9e80daf56f9dd3e50d
22fff3ba1d3ae105be5e69624d589981ba5041f5
342190aea99b9d5d77b76d2d623ae45562d9ff17984924c2ee57ed1f95bb9f4c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "342190AEA99B9D5D77B76D2D623AE45562D9FF17984924C2EE57ED1F95BB9F4C"
Last-Modified: Sat, 10 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8135
Expires: Sat, 10 Dec 2022 12:37:21 GMT
Date: Sat, 10 Dec 2022 10:21:46 GMT
Connection: keep-alive
my.rtmark.net/img.gif?f=merge&userId=dee5768ab2ca4e7cac99bcbdf2e9a16a
139.45.195.8200 OK 43 B URL HTTP/2 my.rtmark.net/img.gif?f=merge&userId=dee5768ab2ca4e7cac99bcbdf2e9a16a
IP 139.45.195.8:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /img.gif?f=merge&userId=dee5768ab2ca4e7cac99bcbdf2e9a16a HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://rouonixon.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 10 Dec 2022 10:21:46 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=dee5768ab2ca4e7cac99bcbdf2e9a16a; expires=Sun, 10 Dec 2023 10:21:46 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
rouonixon.com/?z=3714661&syncedCookie=true&rhd=false
139.45.197.238302 Found 0 B URL HTTP/1.1 rouonixon.com/?z=3714661&syncedCookie=true&rhd=false
IP 139.45.197.238:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /?z=3714661&syncedCookie=true&rhd=false HTTP/1.1
Host: rouonixon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
Content-Length: 443
Origin: http://rouonixon.com
Connection: keep-alive
Referer: http://rouonixon.com/afu.php?zoneid=3714661&var=3714661&rid=XLy92dzVdP3OnhMMAA_B4w%3D%3D&rhd=false
Cookie: OAID=dee5768ab2ca4e7cac99bcbdf2e9a16a; oaidts=1670667705
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Server: nginx
Date: Sat, 10 Dec 2022 10:21:46 GMT
Content-Length: 0
Connection: keep-alive
X-Trace-Id: 6dcfbfcfbc27e22b7556cdd5bd49e6ca
Link: <https://voices-kerence.com>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://diromalxx.com>; rel="preconnect dns-prefetch"
Referrer-Policy: no-referrer
Location: https://voices-kerence.com/26df10eb-34ec-4879-9dd6-7903ddd1b3d9?zoneid=3714661&bannerid=15819990&browser=firefox&os=windows&user_activity=high&zone_type={zone_type}&campaignid=6347981&useragent=Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0&language=en&connectiontype=broadband&cost=0.001816&visitor_id=625388288907419719&rdk=rk3
Access-Control-Allow-Origin: http://rouonixon.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding
Access-Control-Max-Age: 86400
Pragma: no-cache
Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0
Expires: Tue, 11 Jan 1994 10:00:00 GMT
Set-Cookie: OAID=dee5768ab2ca4e7cac99bcbdf2e9a16a; expires=Sun, 10 Dec 2023 10:21:46 GMT; path=/
oaidts=1670667705; expires=Sun, 10 Dec 2023 10:21:46 GMT; path=/
syncedCookie=true; expires=Sat, 17 Dec 2022 10:21:46 GMT; path=/
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
Timing-Allow-Origin: *, *
ocsp.sectigo.com/
172.64.155.188200 OK 472 B IP 172.64.155.188:0
Hash 8db5e5fdd6de1be318e1e2eb919fb0e7
8258c78d87a302be368193b851b55c8e32107c82
143d463b64c5b6772aa9f446e7ea1bb201fe8ce57b25779a6c99dd416a660c7f
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 10 Dec 2022 10:21:46 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Thu, 08 Dec 2022 16:52:37 GMT
Expires: Thu, 15 Dec 2022 16:52:36 GMT
Etag: "8258c78d87a302be368193b851b55c8e32107c82"
Cache-Control: max-age=454849,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7775416b09c10b61-OSL
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Cache-Control, Backoff, Content-Length, Content-Type, Last-Modified, ETag, Expires, Retry-After, Pragma
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 10 Dec 2022 10:07:55 GMT
age: 831
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
voices-kerence.com/26df10eb-34ec-4879-9dd6-7903ddd1b3d9?zoneid=3714661&bannerid=15819990&browser=firefox&os=windows&user_activity=high&zone_type={zone_type}&campaignid=6347981&useragent=Mozilla/5.0%20(Windows%20NT%2010.0;%20Win64;%20x64;%20rv:105.0)%20Gecko/20100101%20Firefox/105.0&language=en&connectiontype=broadband&cost=0.001816&visitor_id=625388288907419719&rdk=rk3
18.193.209.105302 Found 0 B URL HTTP/2 voices-kerence.com/26df10eb-34ec-4879-9dd6-7903ddd1b3d9?zoneid=3714661&bannerid=15819990&browser=firefox&os=windows&user_activity=high&zone_type={zone_type}&campaignid=6347981&useragent=Mozilla/5.0%20(Windows%20NT%2010.0;%20Win64;%20x64;%20rv:105.0)%20Gecko/20100101%20Firefox/105.0&language=en&connectiontype=broadband&cost=0.001816&visitor_id=625388288907419719&rdk=rk3
IP 18.193.209.105:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /26df10eb-34ec-4879-9dd6-7903ddd1b3d9?zoneid=3714661&bannerid=15819990&browser=firefox&os=windows&user_activity=high&zone_type={zone_type}&campaignid=6347981&useragent=Mozilla/5.0%20(Windows%20NT%2010.0;%20Win64;%20x64;%20rv:105.0)%20Gecko/20100101%20Firefox/105.0&language=en&connectiontype=broadband&cost=0.001816&visitor_id=625388288907419719&rdk=rk3 HTTP/1.1
Host: voices-kerence.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Sat, 10 Dec 2022 10:21:46 GMT
content-length: 0
cache-control: no-store, no-cache, pre-check=0, post-check=0
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://rbn-bc-7s.lptrak.com/redirect.aspx?pid=1360468&lpid=16823&bid=9057&clickid=weutpmdbnd8ucq2livddunc2
pragma: no-cache
set-cookie: 26df10eb-34ec-4879-9dd6-7903ddd1b3d9-v4=T1ZPV2-ahMQJ6QI2DKFehbNh8RPoBPlFJ7qlpR0rjOE; Max-Age=86400; Expires=Sun, 11-Dec-2022 10:21:46 GMT; Domain=voices-kerence.com; Path=/; Secure; HttpOnly;SameSite=None
cc-v4=G407atqbNVRopHCNZWk8%2BXR1hI5xjFQEjkFJP9GHSmdpymbd16w8jeto9Z6UoUNAZoSsbcH6Q%2BBgIbKowxOzlSYJ3Rzs35w7Au28MFm88Xxn1OfyzVOw44obb0MSy1Pnj67hpZEtejLJ%2F1QrR5OmpQ%3D%3D; Max-Age=31536000; Expires=Sun, 10-Dec-2023 10:21:46 GMT; Domain=voices-kerence.com; Path=/; Secure; HttpOnly;SameSite=None
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 44d4574b46375a2d215ae74bc5eae610
5257ed3edeb56231a9bee921671bb2e0c566000e
923454b28e4fa10085df809768a75c2d9f58f104afa016c06ccca7a26479073b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1159
Cache-Control: max-age=169463
Content-Type: application/ocsp-response
Date: Sat, 10 Dec 2022 10:21:46 GMT
Etag: "63944c2a-1d7"
Expires: Mon, 12 Dec 2022 09:26:09 GMT
Last-Modified: Sat, 10 Dec 2022 09:06:50 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
rbn-bc-7s.lptrak.com/redirect.aspx?pid=1360468&lpid=16823&bid=9057&clickid=weutpmdbnd8ucq2livddunc2
23.36.79.24307 Temporary Redirect 0 B URL HTTP/2 rbn-bc-7s.lptrak.com/redirect.aspx?pid=1360468&lpid=16823&bid=9057&clickid=weutpmdbnd8ucq2livddunc2
IP 23.36.79.24:0
ASN #20940 Akamai International B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /redirect.aspx?pid=1360468&lpid=16823&bid=9057&clickid=weutpmdbnd8ucq2livddunc2 HTTP/1.1
Host: rbn-bc-7s.lptrak.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 307 Temporary Redirect
content-type: text/html
content-length: 0
location: https://rbnwc.lpmediastorage.com/no/?btag=658915_F00F071BB7554EAC8A89EDC84467F329&clickid=weutpmdbnd8ucq2livddunc2&MSID=1360468&BID=9057
p3p: CP="This is not a P3P policy! It is used to bypass IEs problematic handling of cookies"
x-aspnet-version: 4.0.30319
request-context: appId=cid-v1:83ffbda4-9458-475e-90ec-4427cfb5c3b0
access-control-expose-headers: Request-Context
expires: Sat, 10 Dec 2022 10:21:46 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Sat, 10 Dec 2022 10:21:46 GMT
set-cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a1360468%2c%22BID%22%3a9057%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1670667706737)%5c%2f%22%2c%22CookieTag%22%3a%2290571360468451240919C202212101021%22%7d%5d; SameSite=None;; domain=.lptrak.com; expires=Fri, 31-Dec-9999 23:59:59 GMT; path=/; secure
NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%22556501182%7c1%22%7d%5d; domain=.lptrak.com; expires=Mon, 10-Dec-3021 10:21:46 GMT; path=/; secure; SameSite=Strict
server-timing: cdn-cache; desc=MISS, edge; dur=40, origin; dur=42
X-Firefox-Spdy: h2
push.services.mozilla.com/
54.189.35.180101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 54.189.35.180:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Qv/54t4kVjKrccFSQrUDGQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: Ct10vMSmRzuon5Pxi0LoIBWMOUQ=
ocsp.digicert.com/
93.184.220.29200 OK 280 B IP 93.184.220.29:0
Hash a1ac1afffb72109e389d9ef3d5cfa149
f0e693c288c3f51157a6e285af4cdf442a8d33d5
ba2377fa568b24693ffa229f2f39e469e02f2bd0387f31025b6b88067e78ebb4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=103158
Content-Type: application/ocsp-response
Date: Sat, 10 Dec 2022 10:21:46 GMT
Etag: "63934db0-118"
Expires: Sun, 11 Dec 2022 15:01:04 GMT
Last-Modified: Fri, 09 Dec 2022 15:01:04 GMT
Server: nginx
Content-Length: 280
rbnwc.lpmediastorage.com/492.1670409425862.js
172.64.151.151200 OK 5.3 kB URL HTTP/2 rbnwc.lpmediastorage.com/492.1670409425862.js
IP 172.64.151.151:0
File type ASCII text, with very long lines (14252), with no line terminators
Hash ea4a557a8dde4c007dbdd2a8838a4af1
c6fd128d624417b5548ffce32cf8e09bd083561f
3aed3765a46b42d97308d330b0638ab305c525a40a987426fac1307660da35aa
GET /492.1670409425862.js HTTP/1.1
Host: rbnwc.lpmediastorage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/no/?btag=658915_F00F071BB7554EAC8A89EDC84467F329&clickid=weutpmdbnd8ucq2livddunc2&MSID=1360468&BID=9057
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Dec 2022 10:21:47 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"63906cfd-37ac"
last-modified: Wed, 07 Dec 2022 10:37:49 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 592
expires: Sat, 10 Dec 2022 14:21:47 GMT
cache-control: public, max-age=14400
server: cloudflare
cf-ray: 777541715a720b39-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash edac2b4e678c48b1fc3be3a06793bfcb
23f1f41a2194536d77a2497d7255b13747fd9af0
e6b36b71f3633bd9d2b80043967f9579820f0ef1d5f66e5c401806de13cbe2a1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 10 Dec 2022 10:21:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
rbnwc.lpmediastorage.com/942.1670409425862.js
172.64.151.151200 OK 139 kB URL HTTP/2 rbnwc.lpmediastorage.com/942.1670409425862.js
IP 172.64.151.151:0
File type Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Size 139 kB (139224 bytes)
Hash 940a6b09f976b6bec3788ab560b70baa
621ef51356341c9ba21450965a97c340efafbca5
5c9ac3821783a8fc1aaa9cad83e6265957e10865b6d39d759b0435b07737b1d7
GET /942.1670409425862.js HTTP/1.1
Host: rbnwc.lpmediastorage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/no/?btag=658915_F00F071BB7554EAC8A89EDC84467F329&clickid=weutpmdbnd8ucq2livddunc2&MSID=1360468&BID=9057
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Dec 2022 10:21:47 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=424034
etag: W/"63906cfd-67862"
last-modified: Wed, 07 Dec 2022 10:37:49 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 592
expires: Sat, 10 Dec 2022 14:21:47 GMT
cache-control: public, max-age=14400
server: cloudflare
cf-ray: 777541715a780b39-OSL
content-encoding: br
X-Firefox-Spdy: h2
rbnwc.lpmediastorage.com/no/?btag=658915_F00F071BB7554EAC8A89EDC84467F329&clickid=weutpmdbnd8ucq2livddunc2&MSID=1360468&BID=9057
172.64.151.151200 OK 6.7 kB URL HTTP/2 rbnwc.lpmediastorage.com/no/?btag=658915_F00F071BB7554EAC8A89EDC84467F329&clickid=weutpmdbnd8ucq2livddunc2&MSID=1360468&BID=9057
IP 172.64.151.151:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (699)
Hash c215bc11dbdf8aee23facd2d4ed1daaa
b8018b936c8841948fdccfaa8b364219f0bade75
baaea5aa084cb3d548e68d9f02021d7de48f095bebf7a9d3844f7415f0c24ba2
GET /no/?btag=658915_F00F071BB7554EAC8A89EDC84467F329&clickid=weutpmdbnd8ucq2livddunc2&MSID=1360468&BID=9057 HTTP/1.1
Host: rbnwc.lpmediastorage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 10 Dec 2022 10:21:47 GMT
content-type: text/html
last-modified: Wed, 07 Dec 2022 10:37:49 GMT
vary: Accept-Encoding
cf-cache-status: MISS
expires: Sat, 10 Dec 2022 14:21:47 GMT
cache-control: public, max-age=14400
server: cloudflare
cf-ray: 7775417079c40b39-OSL
content-encoding: br
X-Firefox-Spdy: h2
rbnwc.lpmediastorage.com/sprite.1670409425862.css
172.64.151.151200 OK 2.0 kB URL HTTP/2 rbnwc.lpmediastorage.com/sprite.1670409425862.css
IP 172.64.151.151:0
File type ASCII text, with very long lines (5055), with no line terminators
Hash 51a71f46fbeb9debabe06e5eadffa73a
0e515a51f34bc9945769fc62cc2349e2330c95fb
059a76bac4914c2586ca46caf3c9dd8328dc1ee8efadbae0e891f53051a1a9a4
GET /sprite.1670409425862.css HTTP/1.1
Host: rbnwc.lpmediastorage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/no/?btag=658915_F00F071BB7554EAC8A89EDC84467F329&clickid=weutpmdbnd8ucq2livddunc2&MSID=1360468&BID=9057
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Dec 2022 10:21:47 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=5063
etag: W/"63906cfd-13c7"
last-modified: Wed, 07 Dec 2022 10:37:49 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 592
expires: Sat, 10 Dec 2022 14:21:47 GMT
cache-control: public, max-age=14400
server: cloudflare
cf-ray: 777541715a7c0b39-OSL
content-encoding: br
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Roboto:wght@400;500;700;900&display=swap
142.250.74.74200 OK 794 B URL HTTP/2 fonts.googleapis.com/css2?family=Roboto:wght@400;500;700;900&display=swap
IP 142.250.74.74:0
Hash 9d29e73915728867651d9e70648bec44
5736be3ad588545082745e60fb37d21a1b16e4ca
2db968632790b9b4ee65157872326c8bf8150c89a4afb61682d0c5cd4e636f23
GET /css2?family=Roboto:wght@400;500;700;900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 10 Dec 2022 10:21:47 GMT
date: Sat, 10 Dec 2022 10:21:47 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto+Condensed:400,400i,700&display=swap
142.250.74.74200 OK 41 kB URL HTTP/2 fonts.googleapis.com/css?family=Roboto+Condensed:400,400i,700&display=swap
IP 142.250.74.74:0
Hash d5d68f4466341735b22be285db31c403
416c97da338f2c158aba4565eccbac4980cc9855
29c678f699383d6e3fdcca0f49faa5488f87f0f4594a8cf4d821b6af19361892
GET /css?family=Roboto+Condensed:400,400i,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 10 Dec 2022 10:21:47 GMT
date: Sat, 10 Dec 2022 10:21:47 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
joxi.imgsrcdata.com/content-svg/flags/rabona/no.png
104.16.152.45200 OK 458 B URL HTTP/2 joxi.imgsrcdata.com/content-svg/flags/rabona/no.png
IP 104.16.152.45:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 89664d0e7347a301ed802a8a5447aaa5
dadd728bfa87ca30d63a0bd7743f8e9515bcb5c5
db9c1226ffcc0e3e469b8e9242c389ed32e69ab218918ad6879cbc8140279f28
GET /content-svg/flags/rabona/no.png HTTP/1.1
Host: joxi.imgsrcdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Dec 2022 10:21:47 GMT
content-type: image/webp
content-length: 458
access-control-allow-origin: *
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=823
content-disposition: inline; filename="no.webp"
etag: "60102d17-337"
last-modified: Tue, 26 Jan 2021 14:54:15 GMT
vary: Accept
cf-cache-status: HIT
age: 1512663
accept-ranges: bytes
server: cloudflare
cf-ray: 77754172aa0fb50b-OSL
X-Firefox-Spdy: h2
joxi.imgsrcdata.com/landings/rabona/preloader.svg
104.16.152.45200 OK 1.4 kB URL HTTP/2 joxi.imgsrcdata.com/landings/rabona/preloader.svg
IP 104.16.152.45:0
Hash 11935a02135b1c471610ebe2995255cf
4a547d86a2007cdbb85eaf175d46bbeef8737a41
abd3a5ee0eea852e82f1537ee00bd8a0e7497b75ace14392773d153d3ad355d4
GET /landings/rabona/preloader.svg HTTP/1.1
Host: joxi.imgsrcdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 10 Dec 2022 10:21:47 GMT
content-type: image/svg+xml
last-modified: Fri, 11 Mar 2022 15:53:11 GMT
etag: W/"622b7067-1013"
access-control-allow-origin: *
cf-cache-status: HIT
age: 2146314
vary: Accept-Encoding
server: cloudflare
cf-ray: 7775417259b0b50b-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
rbnwc.lpmediastorage.com/lang.1670409425862.js
172.64.151.151200 OK 33 kB URL HTTP/2 rbnwc.lpmediastorage.com/lang.1670409425862.js
IP 172.64.151.151:0
File type ASCII text, with very long lines (3003), with no line terminators
Hash ed297cd936f247bc81b85b06b3b66120
da664f5d7ac46d11c4758dcc32077dcbe4d608be
c97a133bbaaf5a9393959ba4349f1a24bb3a1be34e5dfcc56cfced95b338d4fe
GET /lang.1670409425862.js HTTP/1.1
Host: rbnwc.lpmediastorage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/no/?btag=658915_F00F071BB7554EAC8A89EDC84467F329&clickid=weutpmdbnd8ucq2livddunc2&MSID=1360468&BID=9057
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Dec 2022 10:21:47 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"63906cfd-bbb"
last-modified: Wed, 07 Dec 2022 10:37:49 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 592
expires: Sat, 10 Dec 2022 14:21:47 GMT
cache-control: public, max-age=14400
server: cloudflare
cf-ray: 777541715a730b39-OSL
content-encoding: br
X-Firefox-Spdy: h2
joxi.imgsrcdata.com/landings/rabona/web_components/images/world-cup-prizes/prize_holidays_2x.png
104.16.152.45200 OK 24 kB URL HTTP/2 joxi.imgsrcdata.com/landings/rabona/web_components/images/world-cup-prizes/prize_holidays_2x.png
IP 104.16.152.45:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 208c02c90f77e71efcb51f01ded20311
93e27e93b19fc20415294b4e91c6a6969833a3f7
bdddc61dab64a211198a836fc2d6655321018f527e91055172b173fa2bee3e94
GET /landings/rabona/web_components/images/world-cup-prizes/prize_holidays_2x.png HTTP/1.1
Host: joxi.imgsrcdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Dec 2022 10:21:47 GMT
content-type: image/webp
content-length: 24224
access-control-allow-origin: *
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=26094
content-disposition: inline; filename="prize_holidays_2x.webp"
etag: "6357d318-65ee"
last-modified: Tue, 25 Oct 2022 12:14:16 GMT
vary: Accept
cf-cache-status: HIT
age: 1888321
accept-ranges: bytes
server: cloudflare
cf-ray: 77754172ca2fb50b-OSL
X-Firefox-Spdy: h2
joxi.imgsrcdata.com/landings/rabona/web_components/images/world-cup-prizes/prize_official-shirts_2x.png
104.16.152.45200 OK 29 kB URL HTTP/2 joxi.imgsrcdata.com/landings/rabona/web_components/images/world-cup-prizes/prize_official-shirts_2x.png
IP 104.16.152.45:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash cae6be3d85d38acc2be64b48d24adbe1
d6ebb829f0071545f45588659fc6f28329ba6fb1
16bc020ebab0600fb88d860b4ee3dd8c27679158443608e9a3b0191d0e14a30f
GET /landings/rabona/web_components/images/world-cup-prizes/prize_official-shirts_2x.png HTTP/1.1
Host: joxi.imgsrcdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Dec 2022 10:21:47 GMT
content-type: image/webp
content-length: 29022
access-control-allow-origin: *
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=33343
content-disposition: inline; filename="prize_official-shirts_2x.webp"
etag: "6357d318-823f"
last-modified: Tue, 25 Oct 2022 12:14:16 GMT
vary: Accept
cf-cache-status: HIT
age: 1888321
accept-ranges: bytes
server: cloudflare
cf-ray: 77754172ca31b50b-OSL
X-Firefox-Spdy: h2
joxi.imgsrcdata.com/landings/rabona/web_components/images/world-cup-prizes/prize_bitcoit_2x.png
104.16.152.45200 OK 176 kB URL HTTP/2 joxi.imgsrcdata.com/landings/rabona/web_components/images/world-cup-prizes/prize_bitcoit_2x.png
IP 104.16.152.45:0
File type RIFF (little-endian) data, Web/P image\012- data
Size 176 kB (176184 bytes)
Hash cd333055936f7bd7159902a6d84599a3
ad4f31e4964e87cf0ad605563d9b31d4a7385431
7d9f8d01dc69da1f6d063558a714c3a26b02e068a42c76c078e3e1bc40dae164
GET /landings/rabona/web_components/images/world-cup-prizes/prize_bitcoit_2x.png HTTP/1.1
Host: joxi.imgsrcdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Dec 2022 10:21:47 GMT
content-type: image/webp
content-length: 176184
access-control-allow-origin: *
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=189285
content-disposition: inline; filename="prize_bitcoit_2x.webp"
etag: "6357d318-2e365"
last-modified: Tue, 25 Oct 2022 12:14:16 GMT
vary: Accept
cf-cache-status: HIT
age: 1893073
accept-ranges: bytes
server: cloudflare
cf-ray: 77754172ca30b50b-OSL
X-Firefox-Spdy: h2
joxi.imgsrcdata.com/landings/rabona/web_components/images/world-cup-prizes/prize_iphone-rabona_2x.png
104.16.152.45200 OK 16 kB URL HTTP/2 joxi.imgsrcdata.com/landings/rabona/web_components/images/world-cup-prizes/prize_iphone-rabona_2x.png
IP 104.16.152.45:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash caf12ae9a05598ce5336e229a1596b0f
2ff509c7d882b8eabae61dde16086edd381912ff
56665623cdf09ccdc2342388bc670420c2dc836de9b2500aa45870a7b74faed0
GET /landings/rabona/web_components/images/world-cup-prizes/prize_iphone-rabona_2x.png HTTP/1.1
Host: joxi.imgsrcdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Dec 2022 10:21:47 GMT
content-type: image/webp
content-length: 16264
access-control-allow-origin: *
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=17720
content-disposition: inline; filename="prize_iphone-rabona_2x.webp"
etag: "6357d31d-4538"
last-modified: Tue, 25 Oct 2022 12:14:21 GMT
vary: Accept
cf-cache-status: HIT
age: 1893073
accept-ranges: bytes
server: cloudflare
cf-ray: 77754172da37b50b-OSL
X-Firefox-Spdy: h2
joxi.imgsrcdata.com/landings/rabona/web_components/decor/world-cup-landing/decor_under-steps.png
104.16.152.45200 OK 219 kB URL HTTP/2 joxi.imgsrcdata.com/landings/rabona/web_components/decor/world-cup-landing/decor_under-steps.png
IP 104.16.152.45:0
File type RIFF (little-endian) data, Web/P image\012- data
Size 219 kB (218568 bytes)
Hash 5a40cfa500a5735b69c40699ac055899
7a832ee76d32993579f067b12354f4913e4b2998
27ccfda9e1fc590b8630c0d3e1f432da93c82ede9378fe2530ba1cce84d1e63f
GET /landings/rabona/web_components/decor/world-cup-landing/decor_under-steps.png HTTP/1.1
Host: joxi.imgsrcdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Dec 2022 10:21:47 GMT
content-type: image/webp
content-length: 218568
access-control-allow-origin: *
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=246593
content-disposition: inline; filename="decor_under-steps.webp"
etag: "6357d318-3c341"
last-modified: Tue, 25 Oct 2022 12:14:16 GMT
vary: Accept
cf-cache-status: HIT
age: 1893073
accept-ranges: bytes
server: cloudflare
cf-ray: 77754172da3db50b-OSL
X-Firefox-Spdy: h2
joxi.imgsrcdata.com/landings/rabona/web_components/bg/world-cup-landing/offer_bg.png
104.16.152.45200 OK 364 kB URL HTTP/2 joxi.imgsrcdata.com/landings/rabona/web_components/bg/world-cup-landing/offer_bg.png
IP 104.16.152.45:0
File type RIFF (little-endian) data, Web/P image\012- data
Size 364 kB (363844 bytes)
Hash 2f40d7ff017e57aebb72a41a54069669
85eb63ee1c8447059e68d32be2524a76bd7db83a
143a981873ee828840e10ed944af31149a0f72a76e7dbaceda6ab67dab5dbfa0
GET /landings/rabona/web_components/bg/world-cup-landing/offer_bg.png HTTP/1.1
Host: joxi.imgsrcdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Dec 2022 10:21:47 GMT
content-type: image/webp
content-length: 363844
access-control-allow-origin: *
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=387867
content-disposition: inline; filename="offer_bg.webp"
etag: "6357d31d-5eb1b"
last-modified: Tue, 25 Oct 2022 12:14:21 GMT
vary: Accept
cf-cache-status: HIT
age: 1893073
accept-ranges: bytes
server: cloudflare
cf-ray: 77754172da48b50b-OSL
X-Firefox-Spdy: h2
joxi.imgsrcdata.com/landings/rabona/web_components/images/world-cup-prizes/prize_champions-league_2x.webp
104.16.152.45200 OK 45 kB URL HTTP/2 joxi.imgsrcdata.com/landings/rabona/web_components/images/world-cup-prizes/prize_champions-league_2x.webp
IP 104.16.152.45:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 56b4cdef4512497f7e54c28ec6a648e6
b9acaeb583debe36cd5f5555e4a2bf5bf452c36b
32a336fb039d5e08ec954a9ba9e808e977a688fe283483745cec532ac50b49ce
GET /landings/rabona/web_components/images/world-cup-prizes/prize_champions-league_2x.webp HTTP/1.1
Host: joxi.imgsrcdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Dec 2022 10:21:47 GMT
content-type: image/webp
content-length: 44816
last-modified: Tue, 25 Oct 2022 12:14:16 GMT
etag: "6357d318-af10"
access-control-allow-origin: *
cf-cache-status: HIT
age: 1893073
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 777541733aa9b50b-OSL
X-Firefox-Spdy: h2
joxi.imgsrcdata.com/landings/rabona/web_components/images/world-cup-prizes/prize_holidays_2x.webp
104.16.152.45200 OK 27 kB URL HTTP/2 joxi.imgsrcdata.com/landings/rabona/web_components/images/world-cup-prizes/prize_holidays_2x.webp
IP 104.16.152.45:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 4b715beb3b07e6ef7121e75e6eb17841
559f56493de681788e9177bcc93025b67d326cb5
653154cc70106fe67893c78971dd479512080eb38bdfa35e394c21f8ffb77b19
GET /landings/rabona/web_components/images/world-cup-prizes/prize_holidays_2x.webp HTTP/1.1
Host: joxi.imgsrcdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Dec 2022 10:21:47 GMT
content-type: image/webp
content-length: 26798
last-modified: Tue, 25 Oct 2022 12:14:21 GMT
etag: "6357d31d-68ae"
access-control-allow-origin: *
cf-cache-status: HIT
age: 1893073
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 777541733ab1b50b-OSL
X-Firefox-Spdy: h2
joxi.imgsrcdata.com/landings/rabona/web_components/images/world-cup-prizes/prize_bitcoit_2x.webp
104.16.152.45200 OK 188 kB URL HTTP/2 joxi.imgsrcdata.com/landings/rabona/web_components/images/world-cup-prizes/prize_bitcoit_2x.webp
IP 104.16.152.45:0
File type RIFF (little-endian) data, Web/P image\012- data
Size 188 kB (188138 bytes)
Hash fb32d198244f858d040d39097f390e83
da9beb8b020f3c3ae8a6576d6b7e8f9b5c1751e1
2fa83cad0ab5404b29c9736a1e19ce6c529dcd1f2884ed819c8ab73bfa3c97fb
GET /landings/rabona/web_components/images/world-cup-prizes/prize_bitcoit_2x.webp HTTP/1.1
Host: joxi.imgsrcdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Dec 2022 10:21:47 GMT
content-type: image/webp
content-length: 188138
last-modified: Tue, 25 Oct 2022 12:14:21 GMT
etag: "6357d31d-2deea"
access-control-allow-origin: *
cf-cache-status: HIT
age: 1893073
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 777541733ab8b50b-OSL
X-Firefox-Spdy: h2
joxi.imgsrcdata.com/landings/rabona/web_components/images/world-cup-prizes/prize_iphone-rabona_2x.webp
104.16.152.45200 OK 17 kB URL HTTP/2 joxi.imgsrcdata.com/landings/rabona/web_components/images/world-cup-prizes/prize_iphone-rabona_2x.webp
IP 104.16.152.45:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash b78e3a413988d60fd6966556f291857a
25bf1c21b48a26e0adc50b4f0c2792d99539e6df
3ed5e7c864dc2b08549fde9df2f526a3c00b223515083e97843a19c125d63770
GET /landings/rabona/web_components/images/world-cup-prizes/prize_iphone-rabona_2x.webp HTTP/1.1
Host: joxi.imgsrcdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Dec 2022 10:21:47 GMT
content-type: image/webp
content-length: 16698
last-modified: Tue, 25 Oct 2022 12:14:21 GMT
etag: "6357d31d-413a"
access-control-allow-origin: *
cf-cache-status: HIT
age: 1893073
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 777541734ac8b50b-OSL
X-Firefox-Spdy: h2
joxi.imgsrcdata.com/landings/rabona/web_components/images/world-cup-prizes/prize_official-shirts_2x.webp
104.16.152.45200 OK 30 kB URL HTTP/2 joxi.imgsrcdata.com/landings/rabona/web_components/images/world-cup-prizes/prize_official-shirts_2x.webp
IP 104.16.152.45:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash b334a21c602eab15a2497f6ca0c5814e
246f5bd92aac1f6fceaa936da05747348f99a946
c343dab054ae1fdecddee80f147d2ef2663ea1166ae27dacdbd066b883aa83a7
GET /landings/rabona/web_components/images/world-cup-prizes/prize_official-shirts_2x.webp HTTP/1.1
Host: joxi.imgsrcdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Dec 2022 10:21:47 GMT
content-type: image/webp
content-length: 29558
last-modified: Tue, 25 Oct 2022 12:14:21 GMT
etag: "6357d31d-7376"
access-control-allow-origin: *
cf-cache-status: HIT
age: 1893073
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 777541734ac7b50b-OSL
X-Firefox-Spdy: h2
joxi.imgsrcdata.com/landings/rabona/web_components/bg/world-cup-landing/offer_bg.avif
104.16.152.45200 OK 382 kB URL HTTP/2 joxi.imgsrcdata.com/landings/rabona/web_components/bg/world-cup-landing/offer_bg.avif
IP 104.16.152.45:0
File type ISO Media, AVIF Image\012- data
Size 382 kB (382139 bytes)
Hash 2b3c4044f4585347634b3ae11e03e6d4
8fdb7ea564e06de5353352514d8d694f36d270d8
7bdcd9fc0b5fa6b2e935b64f753544187cf4f36337d2631e5dc28b929728f12a
GET /landings/rabona/web_components/bg/world-cup-landing/offer_bg.avif HTTP/1.1
Host: joxi.imgsrcdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Dec 2022 10:21:47 GMT
content-type: application/octet-stream
content-length: 382139
last-modified: Tue, 25 Oct 2022 12:14:16 GMT
etag: "6357d318-5d4bb"
access-control-allow-origin: *
cf-cache-status: HIT
age: 1893073
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 777541734adcb50b-OSL
X-Firefox-Spdy: h2
joxi.imgsrcdata.com/landings/rabona/web_components/decor/world-cup-landing/decor_under-main-banner.png
104.16.152.45200 OK 324 kB URL HTTP/2 joxi.imgsrcdata.com/landings/rabona/web_components/decor/world-cup-landing/decor_under-main-banner.png
IP 104.16.152.45:0
File type RIFF (little-endian) data, Web/P image\012- data
Size 324 kB (323484 bytes)
Hash bfebd07818ed68b63c66825c7467a5f5
6bba5424e27e69358f09b987f5b6852a293a9589
9c7641676b6af62758d6932818c8e2a627b31b5b2f75d585735bccb8da86a947
GET /landings/rabona/web_components/decor/world-cup-landing/decor_under-main-banner.png HTTP/1.1
Host: joxi.imgsrcdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Dec 2022 10:21:47 GMT
content-type: image/webp
content-length: 323484
access-control-allow-origin: *
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=371796
content-disposition: inline; filename="decor_under-main-banner.webp"
etag: "6357d318-5ac54"
last-modified: Tue, 25 Oct 2022 12:14:16 GMT
vary: Accept
cf-cache-status: HIT
age: 1893073
accept-ranges: bytes
server: cloudflare
cf-ray: 77754173fb8eb50b-OSL
X-Firefox-Spdy: h2
joxi.imgsrcdata.com/landings/rabona/web_components/bg/world-cup-landing/terms-and-conditions_bg.png?v=2
104.16.152.45200 OK 151 kB URL HTTP/2 joxi.imgsrcdata.com/landings/rabona/web_components/bg/world-cup-landing/terms-and-conditions_bg.png?v=2
IP 104.16.152.45:0
File type RIFF (little-endian) data, Web/P image\012- data
Size 151 kB (151084 bytes)
Hash 0cede8a54c6f699ae1b333176161d1f3
d7a36333a3e20a14aafe32f78bc95e246dc0a9ec
f7c9b6e537232cd21ef92da3a1e69d29736ec50443526342edcd0fd20ad13c95
GET /landings/rabona/web_components/bg/world-cup-landing/terms-and-conditions_bg.png?v=2 HTTP/1.1
Host: joxi.imgsrcdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Dec 2022 10:21:47 GMT
content-type: image/webp
content-length: 151084
access-control-allow-origin: *
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=155608
content-disposition: inline; filename="terms-and-conditions_bg.webp"
etag: "636b7e9c-25fd8"
last-modified: Wed, 09 Nov 2022 10:19:08 GMT
vary: Accept
cf-cache-status: HIT
age: 1893072
accept-ranges: bytes
server: cloudflare
cf-ray: 77754173fb90b50b-OSL
X-Firefox-Spdy: h2
joxi.imgsrcdata.com/landings/rabona/video/world-cup/wc-animation_breakpoint-414-360.mp4?v=3
104.16.152.45206 Partial Content 608 kB URL HTTP/2 joxi.imgsrcdata.com/landings/rabona/video/world-cup/wc-animation_breakpoint-414-360.mp4?v=3
IP 104.16.152.45:0
File type ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]\012- data
Size 608 kB (608540 bytes)
Hash f246b917c1518b3675002ef5517f7e46
32998b34ba8333305713fe3a2cd4dd585b63b6d0
e5aaa106fc828edbc01a521863194522d43ef744a8769827b005df4904bd3d0c
GET /landings/rabona/video/world-cup/wc-animation_breakpoint-414-360.mp4?v=3 HTTP/1.1
Host: joxi.imgsrcdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 206 Partial Content
date: Sat, 10 Dec 2022 10:21:47 GMT
content-type: video/mp4
content-length: 608540
last-modified: Wed, 09 Nov 2022 13:43:14 GMT
etag: "636bae72-9491c"
access-control-allow-origin: *
cf-cache-status: HIT
age: 1893073
content-range: bytes 0-608539/608540
server: cloudflare
cf-ray: 777541744c44b50b-OSL
X-Firefox-Spdy: h2
joxi.imgsrcdata.com/landings/rabona/web_components/steps/world-cup/wcstep_icon-1_active.svg
104.16.152.45200 OK 974 B URL HTTP/2 joxi.imgsrcdata.com/landings/rabona/web_components/steps/world-cup/wcstep_icon-1_active.svg
IP 104.16.152.45:0
Hash 338bf36c9fa2df884a59571049601bdc
581f8f9bd90a75ae21c3be8db47463b84d854ddf
ab56bdeab4aa0ff2f06821c966098329c5899250c9862611afe58cbb292d5031
GET /landings/rabona/web_components/steps/world-cup/wcstep_icon-1_active.svg HTTP/1.1
Host: joxi.imgsrcdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Dec 2022 10:21:47 GMT
content-type: image/svg+xml
last-modified: Wed, 09 Nov 2022 13:43:19 GMT
etag: W/"636bae77-451"
access-control-allow-origin: *
cf-cache-status: HIT
age: 1893073
vary: Accept-Encoding
server: cloudflare
cf-ray: 777541740ba9b50b-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
joxi.imgsrcdata.com/landings/rabona/video/world-cup/wc-animation_breakpoint-1280.webm?v=3
104.16.152.45206 Partial Content 1.7 MB URL HTTP/2 joxi.imgsrcdata.com/landings/rabona/video/world-cup/wc-animation_breakpoint-1280.webm?v=3
IP 104.16.152.45:0
File type WebM\012- EBML file, creator webmB\20\012- data
Size 1.7 MB (1651357 bytes)
Hash 5460627cbccc6ed993a0de5ef799d4b9
385e50136075f6bede3b784d4c6afce95fabf1d6
262619667c85f999279f6c5ed815fbae640f70ee9092b89360f1e0cf8e22aa01
GET /landings/rabona/video/world-cup/wc-animation_breakpoint-1280.webm?v=3 HTTP/1.1
Host: joxi.imgsrcdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 206 Partial Content
date: Sat, 10 Dec 2022 10:21:47 GMT
content-type: video/webm
content-length: 1651357
last-modified: Wed, 09 Nov 2022 13:43:14 GMT
etag: "636bae72-19329d"
access-control-allow-origin: *
cf-cache-status: HIT
age: 1893073
content-range: bytes 0-1651356/1651357
server: cloudflare
cf-ray: 77754174dcc3b50b-OSL
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash e4f546e102d986faf1029509d599b730
cc045a705fd6758b7b575fde5dfb79facc9c3546
ef492301b2b30e5076f7dffa07973e65e9a200ba9ef4d3568a527d3f973f3349
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 10 Dec 2022 10:21:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
joxi.imgsrcdata.com/landings/rabona/video/world-cup/wc-animation_breakpoint-1280.mp4?v=3
104.16.152.45206 Partial Content 1.1 MB URL HTTP/2 joxi.imgsrcdata.com/landings/rabona/video/world-cup/wc-animation_breakpoint-1280.mp4?v=3
IP 104.16.152.45:0
File type ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]\012- data
Size 1.1 MB (1140775 bytes)
Hash 4b2d00e20e1cbbbf35a02f07ddb70676
fd03faf0a4b941c220bcdfa30bfb8d5352de56f7
2b121b1ba8543313e77454983f575cfc50f0188ab48fce9d9e3e242cb2d28590
GET /landings/rabona/video/world-cup/wc-animation_breakpoint-1280.mp4?v=3 HTTP/1.1
Host: joxi.imgsrcdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 206 Partial Content
date: Sat, 10 Dec 2022 10:21:47 GMT
content-type: video/mp4
content-length: 1551098
last-modified: Wed, 09 Nov 2022 13:43:19 GMT
etag: "636bae77-17aafa"
access-control-allow-origin: *
cf-cache-status: HIT
age: 1893073
content-range: bytes 0-1551097/1551098
server: cloudflare
cf-ray: 777541743c14b50b-OSL
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash e4f546e102d986faf1029509d599b730
cc045a705fd6758b7b575fde5dfb79facc9c3546
ef492301b2b30e5076f7dffa07973e65e9a200ba9ef4d3568a527d3f973f3349
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 10 Dec 2022 10:21:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
rbnwc.lpmediastorage.com/no/api/v2/game-events-feed/feed?category=worldcup&count=100
172.64.151.151200 OK 77 kB URL HTTP/2 rbnwc.lpmediastorage.com/no/api/v2/game-events-feed/feed?category=worldcup&count=100
IP 172.64.151.151:0
File type JSON data\012- , ASCII text, with very long lines (1366), with no line terminators
Hash 449f581a9b2ba34748023c0db3bad235
6841e3b713dcb74ca816a5503ee697a274730448
edb1d388283e6c4cbeddee063c0ea697a01dde64284123162b523b9676608362
GET /no/api/v2/game-events-feed/feed?category=worldcup&count=100 HTTP/1.1
Host: rbnwc.lpmediastorage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/no/?btag=658915_F00F071BB7554EAC8A89EDC84467F329&clickid=weutpmdbnd8ucq2livddunc2&MSID=1360468&BID=9057
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Dec 2022 10:21:47 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=14400
vary: Accept-Encoding
access-control-expose-headers: X-Device-Type,X-Device-Name
request-id: feapi-812897b8-0178-43c5-8b4b-7078a67bbbc5
x-device-name: Other
x-device-type: desktop
x-xss-protection: 1; mode=block
x-cache-status: MISS
last-modified: Sat, 10 Dec 2022 10:01:15 GMT
cf-cache-status: HIT
age: 591
expires: Sat, 10 Dec 2022 14:21:47 GMT
server: cloudflare
cf-ray: 777541737ce80b39-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash e4f546e102d986faf1029509d599b730
cc045a705fd6758b7b575fde5dfb79facc9c3546
ef492301b2b30e5076f7dffa07973e65e9a200ba9ef4d3568a527d3f973f3349
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 10 Dec 2022 10:21:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash e4f546e102d986faf1029509d599b730
cc045a705fd6758b7b575fde5dfb79facc9c3546
ef492301b2b30e5076f7dffa07973e65e9a200ba9ef4d3568a527d3f973f3349
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 10 Dec 2022 10:21:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
rbnwc.lpmediastorage.com/no/api/v2/page/item/rbnwc-info-page-promo
172.64.151.151200 OK 17 kB URL HTTP/2 rbnwc.lpmediastorage.com/no/api/v2/page/item/rbnwc-info-page-promo
IP 172.64.151.151:0
File type JSON data\012- HTML document, Unicode text, UTF-8 text, with very long lines (4635), with no line terminators
Hash 2e667406108a5fe4e0a73bd9b79dd90f
93844f8536f11754f2a323f3d8d2d3b4411cbe0c
e0f9c70da65cd4da4e21e88e3ceacbe79103f233c47623bf6841e353b4018e93
GET /no/api/v2/page/item/rbnwc-info-page-promo HTTP/1.1
Host: rbnwc.lpmediastorage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/no/?btag=658915_F00F071BB7554EAC8A89EDC84467F329&clickid=weutpmdbnd8ucq2livddunc2&MSID=1360468&BID=9057
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Dec 2022 10:21:47 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=14400
vary: Accept-Encoding
access-control-expose-headers: X-Device-Type,X-Device-Name
request-id: feapi-bfb54668-fe96-497c-9f96-7ec614cc2644
x-device-name: Other
x-device-type: desktop
x-xss-protection: 1; mode=block
x-cache-status: MISS
last-modified: Sat, 10 Dec 2022 10:01:15 GMT
cf-cache-status: HIT
age: 591
expires: Sat, 10 Dec 2022 14:21:47 GMT
server: cloudflare
cf-ray: 777541738cf60b39-OSL
content-encoding: br
X-Firefox-Spdy: h2
fonts.gstatic.com/s/robotocondensed/v25/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2
142.250.74.35200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/robotocondensed/v25/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2
IP 142.250.74.35:0
File type Web Open Font Format (Version 2), TrueType, length 15700, version 1.0\012- data
Hash 3d7f7413fca69bff4d231ebdc50aaab0
cb18e7943b6a8a0e3672d7242197c19a226b92e8
6b4fac99c39b9ee2693d87a2508d0c7d4b4859072966616bd1f6e18c5b2f9d36
GET /s/robotocondensed/v25/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://rbnwc.lpmediastorage.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15700
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 06 Dec 2022 15:42:33 GMT
expires: Wed, 06 Dec 2023 15:42:33 GMT
cache-control: public, max-age=31536000
age: 326354
last-modified: Tue, 19 Apr 2022 18:51:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
rbnwc.lpmediastorage.com/no/api/v2/icon/list?category=footer-payments&count=100
172.64.151.151200 OK 17 kB URL HTTP/2 rbnwc.lpmediastorage.com/no/api/v2/icon/list?category=footer-payments&count=100
IP 172.64.151.151:0
File type JSON data\012- , ASCII text, with very long lines (6152), with no line terminators
Hash 892ad4b63048be5ac837b8a6d00877b3
303a83696ea9ec2080037b0981da533f69ac4f00
c8e599cce1d570ffd9401c8b1a4374cd5bc4d4225264a849fc42120660e8b9d9
GET /no/api/v2/icon/list?category=footer-payments&count=100 HTTP/1.1
Host: rbnwc.lpmediastorage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/no/?btag=658915_F00F071BB7554EAC8A89EDC84467F329&clickid=weutpmdbnd8ucq2livddunc2&MSID=1360468&BID=9057
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Dec 2022 10:21:47 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=14400
vary: Accept-Encoding
access-control-expose-headers: X-Device-Type,X-Device-Name
request-id: feapi-56e3ced4-0b8c-49b1-a052-48cac6bfd36c
x-device-name: Other
x-device-type: desktop
x-xss-protection: 1; mode=block
x-cache-status: MISS
last-modified: Sat, 10 Dec 2022 10:01:02 GMT
cf-cache-status: HIT
age: 591
expires: Sat, 10 Dec 2022 14:21:47 GMT
server: cloudflare
cf-ray: 77754173ad100b39-OSL
content-encoding: br
X-Firefox-Spdy: h2
fonts.gstatic.com/s/robotocondensed/v25/ieVi2ZhZI2eCN5jzbjEETS9weq8-32meGCQYbw.woff2
142.250.74.35200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/robotocondensed/v25/ieVi2ZhZI2eCN5jzbjEETS9weq8-32meGCQYbw.woff2
IP 142.250.74.35:0
File type Web Open Font Format (Version 2), TrueType, length 15660, version 1.0\012- data
Hash d7b0b953a50fddaa88089b5b787cf719
2f85bc568b27659a3d6452f58f9fd7678450326d
e79c1c1a140e6afb861074c70392db54cc65a06050de2a69162ab94eb95b0516
GET /s/robotocondensed/v25/ieVi2ZhZI2eCN5jzbjEETS9weq8-32meGCQYbw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://rbnwc.lpmediastorage.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15660
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 06 Dec 2022 22:14:50 GMT
expires: Wed, 06 Dec 2023 22:14:50 GMT
cache-control: public, max-age=31536000
age: 302817
last-modified: Tue, 19 Apr 2022 18:42:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfBBc4.woff2
142.250.74.35200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfBBc4.woff2
IP 142.250.74.35:0
File type Web Open Font Format (Version 2), TrueType, length 15752, version 1.0\012- data
Hash b20371a6daf29d4a1f2e85dbbf40fb20
0355a01c1ccb45cb728e7e07c41c8ebf456f70bb
7e262106f82cc52663e403f5b73795bbeab9ca0630c33c03579354fbcd4fae1e
GET /s/roboto/v30/KFOlCnqEu92Fr1MmYUtfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://rbnwc.lpmediastorage.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15752
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 Dec 2022 19:42:34 GMT
expires: Thu, 07 Dec 2023 19:42:34 GMT
cache-control: public, max-age=31536000
age: 225553
last-modified: Wed, 11 May 2022 19:24:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
rbnwc.lpmediastorage.com/no/api/v2/icon/list?category=landing-licenses&count=100
172.64.151.151200 OK 16 kB URL HTTP/2 rbnwc.lpmediastorage.com/no/api/v2/icon/list?category=landing-licenses&count=100
IP 172.64.151.151:0
File type JSON data\012- , ASCII text, with very long lines (792), with no line terminators
Hash ba19de727712b034c6c2f6aee92014c7
8192863b3723cf26bef34161dff0926cfa1ea3e3
b862beb112a38ddc41576683f54d3ceb6cc0bc5042c9281c8095246baba6d0f0
GET /no/api/v2/icon/list?category=landing-licenses&count=100 HTTP/1.1
Host: rbnwc.lpmediastorage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/no/?btag=658915_F00F071BB7554EAC8A89EDC84467F329&clickid=weutpmdbnd8ucq2livddunc2&MSID=1360468&BID=9057
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Dec 2022 10:21:47 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=14400
vary: Accept-Encoding
access-control-expose-headers: X-Device-Type,X-Device-Name
request-id: feapi-8252433f-6d35-4554-897c-edaee8638e27
x-device-name: Other
x-device-type: desktop
x-xss-protection: 1; mode=block
x-cache-status: MISS
last-modified: Sat, 10 Dec 2022 10:01:15 GMT
cf-cache-status: HIT
age: 591
expires: Sat, 10 Dec 2022 14:21:47 GMT
server: cloudflare
cf-ray: 77754173ad170b39-OSL
content-encoding: br
X-Firefox-Spdy: h2
joxi.imgsrcdata.com/landings/rabona/web_components/steps/world-cup/wcstep_underline_active.svg
104.16.152.45200 OK 629 B URL HTTP/2 joxi.imgsrcdata.com/landings/rabona/web_components/steps/world-cup/wcstep_underline_active.svg
IP 104.16.152.45:0
Hash 4df3f4a632f2ab79f6f97d23faae07e5
03de927f1bdd415990fb8777d9ba30880960fb7c
2fb90484f3bb2c6bc98ebd9f3629289db7c3296b8c99973578c10bbb6495b861
GET /landings/rabona/web_components/steps/world-cup/wcstep_underline_active.svg HTTP/1.1
Host: joxi.imgsrcdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Dec 2022 10:21:47 GMT
content-type: image/svg+xml
last-modified: Wed, 09 Nov 2022 14:45:10 GMT
etag: W/"636bbcf6-a5"
access-control-allow-origin: *
cf-cache-status: HIT
age: 1893073
vary: Accept-Encoding
server: cloudflare
cf-ray: 777541741bc9b50b-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
joxi.imgsrcdata.com/landings/rabona/video/world-cup/wc-animation_breakpoint-414-360.webm?v=3
104.16.152.45206 Partial Content 756 kB URL HTTP/2 joxi.imgsrcdata.com/landings/rabona/video/world-cup/wc-animation_breakpoint-414-360.webm?v=3
IP 104.16.152.45:0
File type WebM\012- EBML file, creator webmB\20\012- data
Size 756 kB (755529 bytes)
Hash 1128fbc6daaae24fe30316a6ca11bf77
99cc50e9b5dbee694b8f5eb172824300221fa221
46b3bb54d40a80df33a8e98a7f3308619d8ef4753a56ce1bace9a2ca115921f4
GET /landings/rabona/video/world-cup/wc-animation_breakpoint-414-360.webm?v=3 HTTP/1.1
Host: joxi.imgsrcdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 206 Partial Content
date: Sat, 10 Dec 2022 10:21:47 GMT
content-type: video/webm
content-length: 755529
last-modified: Wed, 09 Nov 2022 13:43:19 GMT
etag: "636bae77-b8749"
access-control-allow-origin: *
cf-cache-status: HIT
age: 1782365
content-range: bytes 0-755528/755529
server: cloudflare
cf-ray: 77754176cf24b50b-OSL
X-Firefox-Spdy: h2
joxi.imgsrcdata.com/landings/rabona/video/world-cup/wc-animation_breakpoint-2560-1920.webm?v=3
104.16.152.45206 Partial Content 2.2 MB URL HTTP/2 joxi.imgsrcdata.com/landings/rabona/video/world-cup/wc-animation_breakpoint-2560-1920.webm?v=3
IP 104.16.152.45:0
File type WebM\012- EBML file, creator webmB\20\012- data
Size 2.2 MB (2235588 bytes)
Hash c66dc4b10e91273f6ed1eab4a4c4f8ed
e95de947d878f94fc6e822e12fb2de60cf4109aa
9186562b446a8dbb4282ba112d6689e01a4a27d214fcc15c507956e909b84e89
GET /landings/rabona/video/world-cup/wc-animation_breakpoint-2560-1920.webm?v=3 HTTP/1.1
Host: joxi.imgsrcdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 206 Partial Content
date: Sat, 10 Dec 2022 10:21:47 GMT
content-type: video/webm
content-length: 2235588
last-modified: Wed, 09 Nov 2022 13:43:14 GMT
etag: "636bae72-221cc4"
access-control-allow-origin: *
cf-cache-status: HIT
age: 1782365
content-range: bytes 0-2235587/2235588
server: cloudflare
cf-ray: 77754176cf25b50b-OSL
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash d35fcd5d7e74c530535b18d57ed5f587
3b9bf9e02593b63108515f4df7cae57ce62145e7
4bdb744a2d9ac6d051f5192dbf3e00ba1b18208930655e6752fd6ccd118faff0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4BDB744A2D9AC6D051F5192DBF3E00BA1B18208930655E6752FD6CCD118FAFF0"
Last-Modified: Sat, 10 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6425
Expires: Sat, 10 Dec 2022 12:08:53 GMT
Date: Sat, 10 Dec 2022 10:21:48 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 280 B IP 93.184.220.29:0
Hash 99b902085de63673de0208a7f502fb67
5816b236e6206fd6d2820e3805041f801d8275eb
8e73eb788b6647c64323d76af022fec29002258fdc6fd0ecdc62908ae60e2af6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3796
Cache-Control: max-age=131076
Content-Type: application/ocsp-response
Date: Sat, 10 Dec 2022 10:21:48 GMT
Etag: "6393abec-118"
Expires: Sun, 11 Dec 2022 22:46:24 GMT
Last-Modified: Fri, 09 Dec 2022 21:43:08 GMT
Server: ECS (amb/6B72)
X-Cache: HIT
Content-Length: 280
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd0c11050-5c0c-4d59-80cd-f72cf377a852.jpeg
34.120.237.76200 OK 7.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd0c11050-5c0c-4d59-80cd-f72cf377a852.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b1a13d12c326848d5b7adeb2562a35a5
d795c519ea637a213aab1d80daaf44ce5ad19069
f7b99c93b99268e1b2fa438d493cf23cd75a98833710ddd22b5278a76e9f019a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd0c11050-5c0c-4d59-80cd-f72cf377a852.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7919
x-amzn-requestid: 05f49b7c-7c76-4df4-8258-c270078d8fe9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ctl_TH-KoAMFkWg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638ee9fb-1971e1e0359763a96b4d320b;Sampled=0
x-amzn-remapped-date: Tue, 06 Dec 2022 07:06:35 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: BEsmH1BkWu_c_-qHStWD1CT1Lx1AZVcw9tnLcoGZCmnjwFWdtB7BRA==
via: 1.1 d0387b833e3ca8cb748a1296b4b4bf2a.cloudfront.net (CloudFront), 1.1 32c16f33c8f5601364fa8229b0d74dc2.cloudfront.net (CloudFront), 1.1 google
date: Sat, 10 Dec 2022 00:10:12 GMT
age: 36696
etag: "d795c519ea637a213aab1d80daaf44ce5ad19069"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3aa5c262-0114-433f-bea5-d75296b8bcd2.jpeg
34.120.237.76200 OK 9.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3aa5c262-0114-433f-bea5-d75296b8bcd2.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4ccbd106eb57e1a4f6d60408118fe2dd
cc916150425f00b44ede3ec473e3e248afabaf8d
740c62dfdd20f2fb7270ea602825ba7eaad99c4fe5ab8d726072909c6b73c87f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3aa5c262-0114-433f-bea5-d75296b8bcd2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9209
x-amzn-requestid: a740ddf7-5325-4ac1-a694-aaa3d4345fe4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: c5eNUGIroAMFdlQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6393aa55-08856c7b0757108a5c6811c9;Sampled=0
x-amzn-remapped-date: Fri, 09 Dec 2022 21:36:21 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: YUoiKVdDbKhNYwvJrsKp8RbC8Otq3ClQEmIx-HDe4wQYYompXjy2Yw==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Dec 2022 22:04:44 GMT
age: 44224
etag: "cc916150425f00b44ede3ec473e3e248afabaf8d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbc287dc2-d769-4627-972b-c4304963fead.jpeg
34.120.237.76200 OK 3.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbc287dc2-d769-4627-972b-c4304963fead.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a164807db41edd8da259af2cec18b328
99f89631065869ff2f25762feb2f39af108b5ed8
400c635040d3d141ec35237e64380b7cd1ba02016a90e36e8376afc41a14cb0f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbc287dc2-d769-4627-972b-c4304963fead.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3357
x-amzn-requestid: 860c993a-e391-474a-b306-064c0faabc67
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: c5eLwFaSoAMFwfw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6393aa4b-30dcd029382c1d825f2a0791;Sampled=0
x-amzn-remapped-date: Fri, 09 Dec 2022 21:36:11 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: -MI_dPaTXZPndQzYo2R9p-UiDQNyRh76-XU2fhwjXyKiTVRLjNc3fQ==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Dec 2022 22:04:04 GMT
etag: "99f89631065869ff2f25762feb2f39af108b5ed8"
content-type: image/jpeg
age: 44264
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9aa9678b-479f-4894-b9e7-3d05e236f19c.jpeg
34.120.237.76200 OK 8.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9aa9678b-479f-4894-b9e7-3d05e236f19c.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9051770b3587c195bea670f8820e8cfe
abf58087f0e345202da088238daea85d177b431b
f687a10c0ae63699a551977e9a4ec5bc7ba606b1925178d7ed4ec6728889bb2e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9aa9678b-479f-4894-b9e7-3d05e236f19c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8841
x-amzn-requestid: 09b64f8e-60c0-4cf6-a0dc-15e597bd9d85
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: c5eMWH7MIAMFyow=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6393aa4e-3471ee5f5a78b55c424e2c6d;Sampled=0
x-amzn-remapped-date: Fri, 09 Dec 2022 21:36:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: F_FNF6MAvQjqQ9kTGvu8lERPdurC-ZyLWtxQ5Ezs1OBUUmejNwiQ4w==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Dec 2022 22:00:13 GMT
age: 44495
etag: "abf58087f0e345202da088238daea85d177b431b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4acdd84d-55dd-4e5d-bcf3-ab9d63566335.jpeg
34.120.237.76200 OK 7.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4acdd84d-55dd-4e5d-bcf3-ab9d63566335.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a81548132f6f176f60e4fc278114ff84
3f330d6c27242cc3d65b975ab4a1c39b08fb69de
82095572be60a13b933293fa38a956e366a854becc5532dfccbf5893366ab702
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4acdd84d-55dd-4e5d-bcf3-ab9d63566335.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7535
x-amzn-requestid: 9c904976-42b9-40c9-aefa-201f0f84358f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: c5eMUHw7IAMFSng=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6393aa4e-3a601e621f9f31c7509f4e52;Sampled=0
x-amzn-remapped-date: Fri, 09 Dec 2022 21:36:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: lqpcbADJan6TfJwh4c4A0pn6R11QwnLRxtyxQgFLLcCVvyVDMERfRg==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Dec 2022 21:54:09 GMT
age: 44859
etag: "3f330d6c27242cc3d65b975ab4a1c39b08fb69de"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 280 B IP 93.184.220.29:0
Hash 99b902085de63673de0208a7f502fb67
5816b236e6206fd6d2820e3805041f801d8275eb
8e73eb788b6647c64323d76af022fec29002258fdc6fd0ecdc62908ae60e2af6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2361
Cache-Control: max-age=129641
Content-Type: application/ocsp-response
Date: Sat, 10 Dec 2022 10:21:48 GMT
Etag: "6393abec-118"
Expires: Sun, 11 Dec 2022 22:22:29 GMT
Last-Modified: Fri, 09 Dec 2022 21:43:08 GMT
Server: ECS (amb/6B9A)
X-Cache: HIT
Content-Length: 280
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8732123d-ded0-4486-9019-0d87264f6c0e.webp
34.120.237.76200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8732123d-ded0-4486-9019-0d87264f6c0e.webp
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0df452512aae4c4c1f4a2cd263b16dfd
68bac75574641febc463bd0819392dae2da15811
e0a9301c5be849e116f1d98b819c2eb91f73e74d836f3e099f2cd266e8f0bb36
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8732123d-ded0-4486-9019-0d87264f6c0e.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12743
x-amzn-requestid: 6ed8a5f4-45cd-45bd-9820-df450f612c34
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: c5eK4E_-IAMFf3Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6393aa45-31d928fc430577b463a68bd0;Sampled=0
x-amzn-remapped-date: Fri, 09 Dec 2022 21:36:05 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: nD0bWCjTU6LNSsNYCNqT4rt7okG1dmPPWiw4FXSi_uNWpcZnxhZgKw==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 ee8246c5442dace7525c74f6a799bb46.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Dec 2022 22:03:37 GMT
age: 44291
etag: "68bac75574641febc463bd0819392dae2da15811"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 280 B IP 93.184.220.29:0
Hash 99b902085de63673de0208a7f502fb67
5816b236e6206fd6d2820e3805041f801d8275eb
8e73eb788b6647c64323d76af022fec29002258fdc6fd0ecdc62908ae60e2af6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=127280
Content-Type: application/ocsp-response
Date: Sat, 10 Dec 2022 10:21:48 GMT
Etag: "6393abec-118"
Expires: Sun, 11 Dec 2022 21:43:08 GMT
Last-Modified: Fri, 09 Dec 2022 21:43:08 GMT
Server: nginx
Content-Length: 280
ocsp.digicert.com/
93.184.220.29200 OK 280 B IP 93.184.220.29:0
Hash 99b902085de63673de0208a7f502fb67
5816b236e6206fd6d2820e3805041f801d8275eb
8e73eb788b6647c64323d76af022fec29002258fdc6fd0ecdc62908ae60e2af6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3796
Cache-Control: max-age=131076
Content-Type: application/ocsp-response
Date: Sat, 10 Dec 2022 10:21:48 GMT
Etag: "6393abec-118"
Expires: Sun, 11 Dec 2022 22:46:24 GMT
Last-Modified: Fri, 09 Dec 2022 21:43:08 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 280
ocsp.digicert.com/
93.184.220.29200 OK 280 B IP 93.184.220.29:0
Hash 99b902085de63673de0208a7f502fb67
5816b236e6206fd6d2820e3805041f801d8275eb
8e73eb788b6647c64323d76af022fec29002258fdc6fd0ecdc62908ae60e2af6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=127280
Content-Type: application/ocsp-response
Date: Sat, 10 Dec 2022 10:21:48 GMT
Etag: "6393abec-118"
Expires: Sun, 11 Dec 2022 21:43:08 GMT
Last-Modified: Fri, 09 Dec 2022 21:43:08 GMT
Server: nginx
Content-Length: 280
joxi.imgsrcdata.com/content-svg/payments-footer/rabona/paymsystem_footer_visa.svg
104.16.152.45200 OK 2.2 kB URL HTTP/2 joxi.imgsrcdata.com/content-svg/payments-footer/rabona/paymsystem_footer_visa.svg
IP 104.16.152.45:0
Hash a49fe38402647fa19438d2340580a61b
39dfd89c3896961aa50aea55a6a1a6d0f65514bd
9b57720143a325bc8484f4ea43bca6561a35484744c1a89a208f10a603a8dd2c
GET /content-svg/payments-footer/rabona/paymsystem_footer_visa.svg HTTP/1.1
Host: joxi.imgsrcdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Dec 2022 10:21:48 GMT
content-type: image/svg+xml
last-modified: Tue, 26 Jan 2021 14:54:11 GMT
etag: W/"60102d13-e95"
access-control-allow-origin: *
cf-cache-status: HIT
age: 2146315
vary: Accept-Encoding
server: cloudflare
cf-ray: 7775417929b8b50b-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-JGEZXPKPTK&cid=607493550.1670667707>m=2oebu0&aip=1&z=1231596324
142.250.74.163200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-JGEZXPKPTK&cid=607493550.1670667707>m=2oebu0&aip=1&z=1231596324
IP 142.250.74.163:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-JGEZXPKPTK&cid=607493550.1670667707>m=2oebu0&aip=1&z=1231596324 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 10 Dec 2022 10:21:48 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 6c33a1d5d0fc5fe73ec55ac938817ea4
bfc100af7973feb3a7c3501dda66589f08bc6bde
668f1beac80500f1748643c27de6e413b0676a2fa94b0fbb7ef94b1cbab16e50
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 10 Dec 2022 10:21:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
joxi.imgsrcdata.com/content-svg/payments-footer/rabona/paymsystem_footer_banktransfer.svg
104.16.152.45200 OK 9.2 kB URL HTTP/2 joxi.imgsrcdata.com/content-svg/payments-footer/rabona/paymsystem_footer_banktransfer.svg
IP 104.16.152.45:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (6007)
Hash 41863b0b17effaf1efd5ea8b4cdfb833
545053115b05ce7ac84cc6e3fcd1be0ec5ab7c3b
7903e95cd6e1079557e0c989d1406570b89abfdb49a940f9cae4098c7edb60a6
GET /content-svg/payments-footer/rabona/paymsystem_footer_banktransfer.svg HTTP/1.1
Host: joxi.imgsrcdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Dec 2022 10:21:48 GMT
content-type: image/svg+xml
last-modified: Tue, 26 Jan 2021 14:54:11 GMT
etag: W/"60102d13-2efc"
access-control-allow-origin: *
cf-cache-status: HIT
age: 2146315
vary: Accept-Encoding
server: cloudflare
cf-ray: 7775417969ffb50b-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 8105b33e4e3af998e9d016e156205c22
dfa2f5cecd72be8ec63d5f833b82cd993a5ce8b9
4a682a72e5d599d48706927cbc0852df5ac36dbb57747681cc2ee91c719c7ccf
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 10 Dec 2022 10:21:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
joxi.imgsrcdata.com/content-svg/payments-footer/rabona/paymsystem_footer_idebit.svg
104.16.152.45200 OK 3.3 kB URL HTTP/2 joxi.imgsrcdata.com/content-svg/payments-footer/rabona/paymsystem_footer_idebit.svg
IP 104.16.152.45:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (5349)
Hash 0107f9c56a96b2fd2a716c3a131259fb
0969933a95997eb8efb841d5571eef26023ee8aa
bbe1704dc1a8831cfe1202ab654685d3e3dc76239947b739d9db940e122f508a
GET /content-svg/payments-footer/rabona/paymsystem_footer_idebit.svg HTTP/1.1
Host: joxi.imgsrcdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Dec 2022 10:21:48 GMT
content-type: image/svg+xml
last-modified: Tue, 26 Jan 2021 14:54:11 GMT
etag: W/"60102d13-9fb"
access-control-allow-origin: *
cf-cache-status: HIT
age: 2146315
vary: Accept-Encoding
server: cloudflare
cf-ray: 7775417949dcb50b-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 8105b33e4e3af998e9d016e156205c22
dfa2f5cecd72be8ec63d5f833b82cd993a5ce8b9
4a682a72e5d599d48706927cbc0852df5ac36dbb57747681cc2ee91c719c7ccf
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 10 Dec 2022 10:21:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7c3a6c54-dd12-46c8-8acb-7c425ab40af5.jpeg
34.120.237.76200 OK 7.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7c3a6c54-dd12-46c8-8acb-7c425ab40af5.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 052b61a3bd1c839e1f5ce37834cad817
1fbbf8fb328a1406904d6346004e2c89c6ba2419
96dcb266eaec98f6305071598df3b49ca93234e0e8b1c8c9801a1a99d7f5c817
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7c3a6c54-dd12-46c8-8acb-7c425ab40af5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 7811
x-amzn-requestid: dc97f86e-a29c-4139-887a-e775a0327280
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: c5eK4EH_oAMFYqw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6393aa45-3a38086160ac180b3f8cf5d8;Sampled=0
x-amzn-remapped-date: Fri, 09 Dec 2022 21:36:05 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: TM_0Q_GmJDuXth6JpRvm_JAZXwT-xFZEjzuMeIzfzBu1J5jQ_Tng9A==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Dec 2022 21:53:25 GMT
age: 44909
etag: "1fbbf8fb328a1406904d6346004e2c89c6ba2419"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
joxi.imgsrcdata.com/landings/rabona/video/world-cup/wc-animation_breakpoint-2560-1920.mp4?v=3
104.16.152.45206 Partial Content 0 B URL HTTP/2 joxi.imgsrcdata.com/landings/rabona/video/world-cup/wc-animation_breakpoint-2560-1920.mp4?v=3
IP 104.16.152.45:0
GET /landings/rabona/video/world-cup/wc-animation_breakpoint-2560-1920.mp4?v=3 HTTP/1.1
Host: joxi.imgsrcdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 206 Partial Content
date: Sat, 10 Dec 2022 10:21:47 GMT
content-type: video/mp4
content-length: 1998395
last-modified: Wed, 09 Nov 2022 13:43:14 GMT
etag: "636bae72-1e7e3b"
access-control-allow-origin: *
cf-cache-status: HIT
age: 1893073
content-range: bytes 0-1998394/1998395
server: cloudflare
cf-ray: 777541743c0bb50b-OSL
X-Firefox-Spdy: h2
joxi.imgsrcdata.com/content-svg/payments-footer/rabona/paymsystem_footer_interac.svg
104.16.152.45200 OK 0 B URL HTTP/2 joxi.imgsrcdata.com/content-svg/payments-footer/rabona/paymsystem_footer_interac.svg
IP 104.16.152.45:0
GET /content-svg/payments-footer/rabona/paymsystem_footer_interac.svg HTTP/1.1
Host: joxi.imgsrcdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Dec 2022 10:21:48 GMT
content-type: image/svg+xml
last-modified: Wed, 06 Jul 2022 14:21:26 GMT
etag: W/"62c59a66-32bc"
access-control-allow-origin: *
cf-cache-status: HIT
age: 2146315
vary: Accept-Encoding
server: cloudflare
cf-ray: 7775417939cfb50b-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
joxi.imgsrcdata.com/content-svg/payments-footer/rabona/paymsystem_muchbetter.svg
104.16.152.45200 OK 0 B URL HTTP/2 joxi.imgsrcdata.com/content-svg/payments-footer/rabona/paymsystem_muchbetter.svg
IP 104.16.152.45:0
GET /content-svg/payments-footer/rabona/paymsystem_muchbetter.svg HTTP/1.1
Host: joxi.imgsrcdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Dec 2022 10:21:48 GMT
content-type: image/svg+xml
last-modified: Tue, 28 Sep 2021 07:34:11 GMT
etag: W/"6152c573-494b"
access-control-allow-origin: *
cf-cache-status: HIT
age: 2146315
vary: Accept-Encoding
server: cloudflare
cf-ray: 777541798a26b50b-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
joxi.imgsrcdata.com/content-svg/payments-footer/rabona/paymsystem_gpay.svg
104.16.152.45200 OK 0 B URL HTTP/2 joxi.imgsrcdata.com/content-svg/payments-footer/rabona/paymsystem_gpay.svg
IP 104.16.152.45:0
GET /content-svg/payments-footer/rabona/paymsystem_gpay.svg HTTP/1.1
Host: joxi.imgsrcdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Dec 2022 10:21:48 GMT
content-type: image/svg+xml
last-modified: Tue, 28 Sep 2021 07:34:11 GMT
etag: W/"6152c573-d1b"
access-control-allow-origin: *
cf-cache-status: HIT
age: 2037231
vary: Accept-Encoding
server: cloudflare
cf-ray: 777541797a24b50b-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
joxi.imgsrcdata.com/content-svg/payments-footer/rabona/paymsystem_footer_mifinity.svg
104.16.152.45200 OK 0 B URL HTTP/2 joxi.imgsrcdata.com/content-svg/payments-footer/rabona/paymsystem_footer_mifinity.svg
IP 104.16.152.45:0
GET /content-svg/payments-footer/rabona/paymsystem_footer_mifinity.svg HTTP/1.1
Host: joxi.imgsrcdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Dec 2022 10:21:48 GMT
content-type: image/svg+xml
last-modified: Tue, 26 Jan 2021 14:54:11 GMT
etag: W/"60102d13-2163"
access-control-allow-origin: *
cf-cache-status: HIT
age: 2146315
vary: Accept-Encoding
server: cloudflare
cf-ray: 777541797a0fb50b-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
joxi.imgsrcdata.com/landings/rabona/icons/licenses/license_iso.svg
104.16.152.45200 OK 0 B URL HTTP/2 joxi.imgsrcdata.com/landings/rabona/icons/licenses/license_iso.svg
IP 104.16.152.45:0
GET /landings/rabona/icons/licenses/license_iso.svg HTTP/1.1
Host: joxi.imgsrcdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Dec 2022 10:21:48 GMT
content-type: image/svg+xml
last-modified: Fri, 26 Aug 2022 09:16:15 GMT
etag: W/"63088f5f-6fe4"
access-control-allow-origin: *
cf-cache-status: HIT
age: 1893073
vary: Accept-Encoding
server: cloudflare
cf-ray: 77754179ba58b50b-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
rabona.com/dimg/team/1668611070661_por.svg
45.8.106.46200 OK 0 B URL HTTP/2 rabona.com/dimg/team/1668611070661_por.svg
IP 45.8.106.46:0
ASN #209242 Cloudflare London, LLC
GET /dimg/team/1668611070661_por.svg HTTP/1.1
Host: rabona.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 10 Dec 2022 10:21:48 GMT
content-type: image/svg+xml
content-security-policy: block-all-mixed-content
etag: W/"3e907ae18a94e609e4b57f70ece34f35"
last-modified: Wed, 16 Nov 2022 15:04:30 GMT
vary: Origin, Accept-Encoding
x-amz-request-id: 17281C4D3010817B
x-xss-protection: 1; mode=block
x-conv-cache-status: HIT
x-front-cache-status: HIT
cf-cache-status: HIT
age: 222473
server: cloudflare
cf-ray: 777541781e88b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
joxi.imgsrcdata.com/landings/rabona/video/world-cup/wc-animation_breakpoint-768.mp4?v=3
104.16.152.45206 Partial Content 0 B URL HTTP/2 joxi.imgsrcdata.com/landings/rabona/video/world-cup/wc-animation_breakpoint-768.mp4?v=3
IP 104.16.152.45:0
GET /landings/rabona/video/world-cup/wc-animation_breakpoint-768.mp4?v=3 HTTP/1.1
Host: joxi.imgsrcdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 206 Partial Content
date: Sat, 10 Dec 2022 10:21:47 GMT
content-type: video/mp4
content-length: 864243
last-modified: Wed, 09 Nov 2022 13:43:14 GMT
etag: "636bae72-d2ff3"
access-control-allow-origin: *
cf-cache-status: HIT
age: 1893073
content-range: bytes 0-864242/864243
server: cloudflare
cf-ray: 777541743c19b50b-OSL
X-Firefox-Spdy: h2
joxi.imgsrcdata.com/content-svg/payments-footer/rabona/paymsystem_footer_cartasi.svg
104.16.152.45200 OK 0 B URL HTTP/2 joxi.imgsrcdata.com/content-svg/payments-footer/rabona/paymsystem_footer_cartasi.svg
IP 104.16.152.45:0
GET /content-svg/payments-footer/rabona/paymsystem_footer_cartasi.svg HTTP/1.1
Host: joxi.imgsrcdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Dec 2022 10:21:48 GMT
content-type: image/svg+xml
last-modified: Tue, 26 Jan 2021 14:54:16 GMT
etag: W/"60102d18-2466"
access-control-allow-origin: *
cf-cache-status: HIT
age: 2146315
vary: Accept-Encoding
server: cloudflare
cf-ray: 7775417929c3b50b-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
joxi.imgsrcdata.com/content-svg/payments-footer/rabona/paymsystem_UPI.svg
104.16.152.45200 OK 0 B URL HTTP/2 joxi.imgsrcdata.com/content-svg/payments-footer/rabona/paymsystem_UPI.svg
IP 104.16.152.45:0
GET /content-svg/payments-footer/rabona/paymsystem_UPI.svg HTTP/1.1
Host: joxi.imgsrcdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Dec 2022 10:21:48 GMT
content-type: image/svg+xml
last-modified: Tue, 28 Sep 2021 07:34:14 GMT
etag: W/"6152c576-296a"
access-control-allow-origin: *
cf-cache-status: HIT
age: 2146315
vary: Accept-Encoding
server: cloudflare
cf-ray: 777541797a10b50b-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
joxi.imgsrcdata.com/content-svg/payments-footer/rabona/paymsystem_Phonepe.svg
104.16.152.45200 OK 0 B URL HTTP/2 joxi.imgsrcdata.com/content-svg/payments-footer/rabona/paymsystem_Phonepe.svg
IP 104.16.152.45:0
GET /content-svg/payments-footer/rabona/paymsystem_Phonepe.svg HTTP/1.1
Host: joxi.imgsrcdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Dec 2022 10:21:48 GMT
content-type: image/svg+xml
last-modified: Tue, 28 Sep 2021 07:34:14 GMT
etag: W/"6152c576-1c93"
access-control-allow-origin: *
cf-cache-status: HIT
age: 2146315
vary: Accept-Encoding
server: cloudflare
cf-ray: 777541797a1fb50b-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
joxi.imgsrcdata.com/content-svg/payments-footer/rabona/paymsystem_footer_JCB.svg
104.16.152.45200 OK 0 B URL HTTP/2 joxi.imgsrcdata.com/content-svg/payments-footer/rabona/paymsystem_footer_JCB.svg
IP 104.16.152.45:0
GET /content-svg/payments-footer/rabona/paymsystem_footer_JCB.svg HTTP/1.1
Host: joxi.imgsrcdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Dec 2022 10:21:48 GMT
content-type: image/svg+xml
last-modified: Thu, 02 Dec 2021 12:30:12 GMT
etag: W/"61a8bc54-7eb"
access-control-allow-origin: *
cf-cache-status: HIT
age: 2037231
vary: Accept-Encoding
server: cloudflare
cf-ray: 777541798a2ab50b-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
joxi.imgsrcdata.com/landings/rabona/web_components/steps/world-cup/wcstep_icon-2_active.svg
104.16.152.45200 OK 0 B URL HTTP/2 joxi.imgsrcdata.com/landings/rabona/web_components/steps/world-cup/wcstep_icon-2_active.svg
IP 104.16.152.45:0
GET /landings/rabona/web_components/steps/world-cup/wcstep_icon-2_active.svg HTTP/1.1
Host: joxi.imgsrcdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Dec 2022 10:21:47 GMT
content-type: image/svg+xml
last-modified: Wed, 09 Nov 2022 13:43:19 GMT
etag: W/"636bae77-a61"
access-control-allow-origin: *
cf-cache-status: HIT
age: 1893073
vary: Accept-Encoding
server: cloudflare
cf-ray: 777541741bcbb50b-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
rbnwc.lpmediastorage.com/favicon.ico
172.64.151.151200 OK 0 B URL HTTP/2 rbnwc.lpmediastorage.com/favicon.ico
IP 172.64.151.151:0
GET /favicon.ico HTTP/1.1
Host: rbnwc.lpmediastorage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/no/?btag=658915_F00F071BB7554EAC8A89EDC84467F329&clickid=weutpmdbnd8ucq2livddunc2&MSID=1360468&BID=9057
Cookie: _ga_JGEZXPKPTK=GS1.1.1670667706.1.0.1670667706.60.0.0; _ga=GA1.1.607493550.1670667707
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Dec 2022 10:21:48 GMT
content-type: image/x-icon
last-modified: Thu, 10 Nov 2022 10:46:09 GMT
etag: W/"636cd671-3a6"
cf-cache-status: HIT
age: 247
expires: Sat, 10 Dec 2022 14:21:48 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
server: cloudflare
cf-ray: 77754178f9e30b39-OSL
content-encoding: br
X-Firefox-Spdy: h2
joxi.imgsrcdata.com/content-svg/payments-footer/rabona/paymsystem_bitcoin.svg
104.16.152.45200 OK 0 B URL HTTP/2 joxi.imgsrcdata.com/content-svg/payments-footer/rabona/paymsystem_bitcoin.svg
IP 104.16.152.45:0
GET /content-svg/payments-footer/rabona/paymsystem_bitcoin.svg HTTP/1.1
Host: joxi.imgsrcdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Dec 2022 10:21:48 GMT
content-type: image/svg+xml
last-modified: Wed, 16 Jun 2021 09:33:13 GMT
etag: W/"60c9c559-2085"
access-control-allow-origin: *
cf-cache-status: HIT
age: 2146315
vary: Accept-Encoding
server: cloudflare
cf-ray: 777541796a06b50b-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
joxi.imgsrcdata.com/content-svg/payments-footer/rabona/paymsystem_footer_ethereum.svg
104.16.152.45200 OK 0 B URL HTTP/2 joxi.imgsrcdata.com/content-svg/payments-footer/rabona/paymsystem_footer_ethereum.svg
IP 104.16.152.45:0
GET /content-svg/payments-footer/rabona/paymsystem_footer_ethereum.svg HTTP/1.1
Host: joxi.imgsrcdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Dec 2022 10:21:48 GMT
content-type: image/svg+xml
last-modified: Tue, 26 Jan 2021 14:54:11 GMT
etag: W/"60102d13-14ee"
access-control-allow-origin: *
cf-cache-status: HIT
age: 2146315
vary: Accept-Encoding
server: cloudflare
cf-ray: 777541796a09b50b-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
joxi.imgsrcdata.com/landings/rabona/web_components/steps/world-cup/wcstep_icon-1_default.svg
104.16.152.45200 OK 0 B URL HTTP/2 joxi.imgsrcdata.com/landings/rabona/web_components/steps/world-cup/wcstep_icon-1_default.svg
IP 104.16.152.45:0
GET /landings/rabona/web_components/steps/world-cup/wcstep_icon-1_default.svg HTTP/1.1
Host: joxi.imgsrcdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Dec 2022 10:21:47 GMT
content-type: image/svg+xml
last-modified: Wed, 09 Nov 2022 13:43:14 GMT
etag: W/"636bae72-44f"
access-control-allow-origin: *
cf-cache-status: HIT
age: 1893073
vary: Accept-Encoding
server: cloudflare
cf-ray: 77754173fb95b50b-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
joxi.imgsrcdata.com/content-svg/payments-footer/rabona/paymsystem_footer_neosurf.svg
104.16.152.45200 OK 0 B URL HTTP/2 joxi.imgsrcdata.com/content-svg/payments-footer/rabona/paymsystem_footer_neosurf.svg
IP 104.16.152.45:0
GET /content-svg/payments-footer/rabona/paymsystem_footer_neosurf.svg HTTP/1.1
Host: joxi.imgsrcdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Dec 2022 10:21:48 GMT
content-type: image/svg+xml
last-modified: Tue, 26 Jan 2021 14:54:16 GMT
etag: W/"60102d18-db1"
access-control-allow-origin: *
cf-cache-status: HIT
age: 2146315
vary: Accept-Encoding
server: cloudflare
cf-ray: 7775417949e0b50b-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
joxi.imgsrcdata.com/landings/rabona/web_components/steps/world-cup/wcstep_icon-3_default.svg
104.16.152.45200 OK 0 B URL HTTP/2 joxi.imgsrcdata.com/landings/rabona/web_components/steps/world-cup/wcstep_icon-3_default.svg
IP 104.16.152.45:0
GET /landings/rabona/web_components/steps/world-cup/wcstep_icon-3_default.svg HTTP/1.1
Host: joxi.imgsrcdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Dec 2022 10:21:47 GMT
content-type: image/svg+xml
last-modified: Wed, 09 Nov 2022 13:43:14 GMT
etag: W/"636bae72-f1a"
access-control-allow-origin: *
cf-cache-status: HIT
age: 1893073
vary: Accept-Encoding
server: cloudflare
cf-ray: 777541742be4b50b-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
rbnwc.lpmediastorage.com/app.1670409425862.js
172.64.151.151200 OK 0 B URL HTTP/2 rbnwc.lpmediastorage.com/app.1670409425862.js
IP 172.64.151.151:0
GET /app.1670409425862.js HTTP/1.1
Host: rbnwc.lpmediastorage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/no/?btag=658915_F00F071BB7554EAC8A89EDC84467F329&clickid=weutpmdbnd8ucq2livddunc2&MSID=1360468&BID=9057
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Dec 2022 10:21:47 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"63906cfd-d093"
last-modified: Wed, 07 Dec 2022 10:37:49 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 592
expires: Sat, 10 Dec 2022 14:21:47 GMT
cache-control: public, max-age=14400
server: cloudflare
cf-ray: 777541715a7a0b39-OSL
content-encoding: br
X-Firefox-Spdy: h2
rbnwc.lpmediastorage.com/no/api/v2/lang/translation
172.64.151.151200 OK 0 B URL HTTP/2 rbnwc.lpmediastorage.com/no/api/v2/lang/translation
IP 172.64.151.151:0
GET /no/api/v2/lang/translation HTTP/1.1
Host: rbnwc.lpmediastorage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/no/?btag=658915_F00F071BB7554EAC8A89EDC84467F329&clickid=weutpmdbnd8ucq2livddunc2&MSID=1360468&BID=9057
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Dec 2022 10:21:47 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=14400
vary: Accept-Encoding
access-control-expose-headers: X-Device-Type,X-Device-Name
request-id: feapi-e1cdc72e-465d-4f49-864c-6547a7a57bda
x-device-name: Other
x-device-type: desktop
x-xss-protection: 1; mode=block
x-cache-status: MISS
last-modified: Sat, 10 Dec 2022 10:01:15 GMT
cf-cache-status: HIT
age: 591
expires: Sat, 10 Dec 2022 14:21:47 GMT
server: cloudflare
cf-ray: 777541734cd10b39-OSL
content-encoding: br
X-Firefox-Spdy: h2
rabona.com/dimg/team/1668611699912_mo.svg
45.8.106.46200 OK 0 B URL HTTP/2 rabona.com/dimg/team/1668611699912_mo.svg
IP 45.8.106.46:0
ASN #209242 Cloudflare London, LLC
GET /dimg/team/1668611699912_mo.svg HTTP/1.1
Host: rabona.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 10 Dec 2022 10:21:48 GMT
content-type: image/svg+xml
content-security-policy: block-all-mixed-content
etag: W/"41cae12f02c3c035a6e40bdd2bfbb5bf"
last-modified: Wed, 16 Nov 2022 15:14:59 GMT
vary: Origin, Accept-Encoding
x-amz-request-id: 17281C4D2F79346E
x-xss-protection: 1; mode=block
x-conv-cache-status: HIT
x-front-cache-status: HIT
cf-cache-status: HIT
age: 222473
server: cloudflare
cf-ray: 777541784ec1b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
rbnwc.lpmediastorage.com/no/api/v2/page/item/rbnwc-info-page-tournament
172.64.151.151200 OK 0 B URL HTTP/2 rbnwc.lpmediastorage.com/no/api/v2/page/item/rbnwc-info-page-tournament
IP 172.64.151.151:0
GET /no/api/v2/page/item/rbnwc-info-page-tournament HTTP/1.1
Host: rbnwc.lpmediastorage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/no/?btag=658915_F00F071BB7554EAC8A89EDC84467F329&clickid=weutpmdbnd8ucq2livddunc2&MSID=1360468&BID=9057
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Dec 2022 10:21:47 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=14400
vary: Accept-Encoding
access-control-expose-headers: X-Device-Type,X-Device-Name
request-id: feapi-dc615458-e1ac-4387-a82d-e0ba1e992ee8
x-device-name: Other
x-device-type: desktop
x-xss-protection: 1; mode=block
x-cache-status: MISS
last-modified: Sat, 10 Dec 2022 10:01:15 GMT
cf-cache-status: HIT
age: 591
expires: Sat, 10 Dec 2022 14:21:47 GMT
server: cloudflare
cf-ray: 777541738cf00b39-OSL
content-encoding: br
X-Firefox-Spdy: h2
joxi.imgsrcdata.com/landings/rabona/web_components/decor/world-cup-landing/decor_shape-under-prizes.svg
104.16.152.45200 OK 0 B URL HTTP/2 joxi.imgsrcdata.com/landings/rabona/web_components/decor/world-cup-landing/decor_shape-under-prizes.svg
IP 104.16.152.45:0
GET /landings/rabona/web_components/decor/world-cup-landing/decor_shape-under-prizes.svg HTTP/1.1
Host: joxi.imgsrcdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Dec 2022 10:21:47 GMT
content-type: image/svg+xml
last-modified: Tue, 25 Oct 2022 12:14:16 GMT
etag: W/"6357d318-412"
access-control-allow-origin: *
cf-cache-status: HIT
age: 1893073
vary: Accept-Encoding
server: cloudflare
cf-ray: 77754172ba22b50b-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
rbnwc.lpmediastorage.com/no/api/v2/page/item/rbnwc-info-page-prizes
172.64.151.151200 OK 0 B URL HTTP/2 rbnwc.lpmediastorage.com/no/api/v2/page/item/rbnwc-info-page-prizes
IP 172.64.151.151:0
GET /no/api/v2/page/item/rbnwc-info-page-prizes HTTP/1.1
Host: rbnwc.lpmediastorage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/no/?btag=658915_F00F071BB7554EAC8A89EDC84467F329&clickid=weutpmdbnd8ucq2livddunc2&MSID=1360468&BID=9057
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Dec 2022 10:21:47 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=14400
vary: Accept-Encoding
access-control-expose-headers: X-Device-Type,X-Device-Name
request-id: feapi-fa002535-c604-4430-9cc9-2f8e9a76486e
x-device-name: Other
x-device-type: desktop
x-xss-protection: 1; mode=block
x-cache-status: MISS
last-modified: Sat, 10 Dec 2022 10:01:16 GMT
cf-cache-status: HIT
age: 591
expires: Sat, 10 Dec 2022 14:21:47 GMT
server: cloudflare
cf-ray: 77754173ad0e0b39-OSL
content-encoding: br
X-Firefox-Spdy: h2
rabona.com/dimg/team/france.svg
45.8.106.46200 OK 0 B URL HTTP/2 rabona.com/dimg/team/france.svg
IP 45.8.106.46:0
ASN #209242 Cloudflare London, LLC
GET /dimg/team/france.svg HTTP/1.1
Host: rabona.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 10 Dec 2022 10:21:48 GMT
content-type: image/svg+xml
content-security-policy: block-all-mixed-content
etag: W/"2f9befe94ef9076d58b0a2ae38e1a025"
last-modified: Mon, 23 Aug 2021 17:59:39 GMT
vary: Origin, Accept-Encoding
x-amz-request-id: 17011B8BDC34D822
x-xss-protection: 1; mode=block
x-conv-cache-status: HIT
x-front-cache-status: HIT
cf-cache-status: HIT
age: 222425
server: cloudflare
cf-ray: 777541784edeb51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
joxi.imgsrcdata.com/content-svg/payments-footer/rabona/paymsystem_postepay.svg
104.16.152.45200 OK 0 B URL HTTP/2 joxi.imgsrcdata.com/content-svg/payments-footer/rabona/paymsystem_postepay.svg
IP 104.16.152.45:0
GET /content-svg/payments-footer/rabona/paymsystem_postepay.svg HTTP/1.1
Host: joxi.imgsrcdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Dec 2022 10:21:48 GMT
content-type: image/svg+xml
last-modified: Tue, 26 Jan 2021 14:54:16 GMT
etag: W/"60102d18-26b7"
access-control-allow-origin: *
cf-cache-status: HIT
age: 2146315
vary: Accept-Encoding
server: cloudflare
cf-ray: 7775417939cab50b-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
joxi.imgsrcdata.com/content-svg/payments-footer/rabona/paymsystem_footer_neteller.svg
104.16.152.45200 OK 0 B URL HTTP/2 joxi.imgsrcdata.com/content-svg/payments-footer/rabona/paymsystem_footer_neteller.svg
IP 104.16.152.45:0
GET /content-svg/payments-footer/rabona/paymsystem_footer_neteller.svg HTTP/1.1
Host: joxi.imgsrcdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Dec 2022 10:21:48 GMT
content-type: image/svg+xml
last-modified: Tue, 26 Jan 2021 14:54:16 GMT
etag: W/"60102d18-af8"
access-control-allow-origin: *
cf-cache-status: HIT
age: 2146315
vary: Accept-Encoding
server: cloudflare
cf-ray: 7775417949e2b50b-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
joxi.imgsrcdata.com/landings/rabona/icons/licenses/license_18age.svg
104.16.152.45200 OK 0 B URL HTTP/2 joxi.imgsrcdata.com/landings/rabona/icons/licenses/license_18age.svg
IP 104.16.152.45:0
GET /landings/rabona/icons/licenses/license_18age.svg HTTP/1.1
Host: joxi.imgsrcdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Dec 2022 10:21:48 GMT
content-type: image/svg+xml
last-modified: Fri, 26 Aug 2022 09:16:15 GMT
etag: W/"63088f5f-668"
access-control-allow-origin: *
cf-cache-status: HIT
age: 1893073
vary: Accept-Encoding
server: cloudflare
cf-ray: 77754179aa54b50b-OSL
content-encoding: gzip
X-Firefox-Spdy: h2