trk.back-trak.com/t/OTk5XzM4NDc/
302 Found 0 B URL HTTP/1.1 trk.back-trak.com/t/OTk5XzM4NDc/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
GET /t/OTk5XzM4NDc/ HTTP/1.1
Host: trk.back-trak.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Server: nginx
Date: Sun, 04 Dec 2022 09:10:49 GMT
Content-Type: text/html
Content-Length: 0
X-Err: TARGETING_FAILED
Location: http://go.24t7.me/5098/5007/?clickid=638c6419a2b4b6034739e353&pub=999&sub_pub_id=622b44ecec84b244100b338b
X-Rt: 6
Via: 1.1 google
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cfec3d7283a9b66d2be426ce54d210f3
808c1feb1ba918951d1928c1f6bfc0c253262774
1bad6c06aa3e88dcbc125fc98a6cb753eb2b18d2c8dd61da21d12209aeeda3f9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1BAD6C06AA3E88DCBC125FC98A6CB753EB2B18D2C8DD61DA21D12209AEEDA3F9"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5292
Expires: Sun, 04 Dec 2022 10:39:02 GMT
Date: Sun, 04 Dec 2022 09:10:50 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 67e9370f1bf3e4946a01f346eeae8966
aaab391d1134302d718de7a0d5edbedf884633e6
27a8654fb14db88d4b2bb3b45c1b197fc498cd94143d4a68687742fa48a41358
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6530
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 09:10:50 GMT
Last-Modified: Sun, 04 Dec 2022 07:22:00 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1ea206ac3c440825741687351f8c6e4e
2f38dafd8c43dcce2411a0590bc5c02cd6286735
7d7232c8c91bcd18161ba2c9d23e3bff159604e058bd5b3fc1c7fcbcd03a7ee3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7D7232C8C91BCD18161BA2C9D23E3BFF159604E058BD5B3FC1C7FCBCD03A7EE3"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13062
Expires: Sun, 04 Dec 2022 12:48:32 GMT
Date: Sun, 04 Dec 2022 09:10:50 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Type, Backoff, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 04 Dec 2022 08:20:05 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 3045
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 9aYeyQ4JPzGTxQARwl7xv+BdsNQPRnximtrlP0KyBF3tp5HMMvAImnSV74pw8kZEmFav0ZRBdus=
x-amz-request-id: SHPNZ73294ZJKCWR
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 04 Dec 2022 08:46:54 GMT
age: 1436
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 09:10:50 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
go.24t7.me/5098/5007/?clickid=638c6419a2b4b6034739e353&pub=999&sub_pub_id=622b44ecec84b244100b338b
302 0 B URL HTTP/1.1 go.24t7.me/5098/5007/?clickid=638c6419a2b4b6034739e353&pub=999&sub_pub_id=622b44ecec84b244100b338b
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /5098/5007/?clickid=638c6419a2b4b6034739e353&pub=999&sub_pub_id=622b44ecec84b244100b338b HTTP/1.1
Host: go.24t7.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302
Date: Sun, 04 Dec 2022 09:10:49 GMT
Server: Apache/2.4.38 (Debian)
Vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers
Location: https://clixscale.g2afse.com/sl?id=5e319888bf7f144ffae31a23&pid=12
Content-Length: 0
Via: 1.1 google
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Pragma, Last-Modified, ETag, Alert, Expires, Retry-After, Cache-Control, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 04 Dec 2022 08:11:19 GMT
cache-control: public,max-age=3600
age: 3571
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash a151c326c67e1abb747847c1427db76f
80885d30ef8ba867bf33c40b861976958a27493a
de2b573ee1c8af980e593352e0c331b2595f62bd4499300ace30821d20814760
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6517
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 09:10:50 GMT
Last-Modified: Sun, 04 Dec 2022 07:22:13 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 313 B IP
Hash d7b46f166173caf52e9d059c1727de1f
88347a94aca0846e7be7af76840b5337659dd27f
5f146b3872fbafcbb266d28e275945e23c75976a333c29bd0b77b8909c1a192e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=139115
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 09:10:50 GMT
Etag: "638be085-139"
Expires: Mon, 05 Dec 2022 23:49:27 GMT
Last-Modified: Sat, 03 Dec 2022 23:49:25 GMT
Server: nginx
Content-Length: 313
clixscale.g2afse.com/sl?id=5e319888bf7f144ffae31a23&pid=12
302 Found 0 B URL HTTP/2 clixscale.g2afse.com/sl?id=5e319888bf7f144ffae31a23&pid=12
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sl?id=5e319888bf7f144ffae31a23&pid=12 HTTP/1.1
Host: clixscale.g2afse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
server: nginx
date: Sun, 04 Dec 2022 09:10:51 GMT
content-length: 0
location: http://clixscale.g2afse.com/sl?id=61000f54f2be9af3ca25e29e&pid=20
x-adjust-use-original-forwarded-for: 1
access-control-allow-origin: *
X-Firefox-Spdy: h2
clixscale.g2afse.com/sl?id=61000f54f2be9af3ca25e29e&pid=20
302 Moved Temporarily 138 B URL HTTP/1.1 clixscale.g2afse.com/sl?id=61000f54f2be9af3ca25e29e&pid=20
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash aff950cab4c0265e21d401db15f1026d
f03e18461817f7a6546c8bf8fa8d686d7e30aca0
753e0dd54f28c4f7009b9c0b18a68aed175416bd8b7d134858264586eaac56f0
GET /sl?id=61000f54f2be9af3ca25e29e&pid=20 HTTP/1.1
Host: clixscale.g2afse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Sun, 04 Dec 2022 09:10:51 GMT
Content-Type: text/html
Content-Length: 138
Connection: keep-alive
Location: https://clixscale.g2afse.com/sl?id=61000f54f2be9af3ca25e29e&pid=20
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 0/hvHuMLlnQpOpv+QiUoNw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: TFz7WRtsmQ3VSlpl+UVzoL0jbK4=
clixscale.g2afse.com/sl?id=61000f54f2be9af3ca25e29e&pid=20
302 Found 0 B URL HTTP/2 clixscale.g2afse.com/sl?id=61000f54f2be9af3ca25e29e&pid=20
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sl?id=61000f54f2be9af3ca25e29e&pid=20 HTTP/1.1
Host: clixscale.g2afse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 302 Found
server: nginx
date: Sun, 04 Dec 2022 09:10:51 GMT
content-length: 0
location: https://f71b8a57.givemeprof.com/rc/fb2f2075b3?affclick=638c641b8d822600018f6ffd&pubid=_
x-adjust-use-original-forwarded-for: 1
set-cookie: afclick=638c641b8d822600018f6ffd; expires=Mon, 04 Dec 2023 09:10:51 GMT; secure; SameSite=None
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash baf353736a1897ef780df88ee3bdc143
75faf5282ce4eb12a6d88292e4c938cca947b5f7
2b49f237d2467763dd97268d4a27185e32b7709e59df1fe2e0c28792fc077727
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=138362
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 09:10:51 GMT
Etag: "638bdd95-117"
Expires: Mon, 05 Dec 2022 23:36:53 GMT
Last-Modified: Sat, 03 Dec 2022 23:36:53 GMT
Server: nginx
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash 4e02fd98239ad29b23f887cfb72ef895
9b508b66fcabf3d61695c3b105d5a4acafc3bf2b
f5355360e4a7adc4c0e8415bd1763dc4c482d94e3a8bb8d97a030b5bbf94050f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3916
Cache-Control: max-age=164968
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 09:10:51 GMT
Etag: "638c3637-117"
Expires: Tue, 06 Dec 2022 07:00:19 GMT
Last-Modified: Sun, 04 Dec 2022 05:55:03 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash 4e02fd98239ad29b23f887cfb72ef895
9b508b66fcabf3d61695c3b105d5a4acafc3bf2b
f5355360e4a7adc4c0e8415bd1763dc4c482d94e3a8bb8d97a030b5bbf94050f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3916
Cache-Control: max-age=164968
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 09:10:51 GMT
Etag: "638c3637-117"
Expires: Tue, 06 Dec 2022 07:00:19 GMT
Last-Modified: Sun, 04 Dec 2022 05:55:03 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 279
f71b8a57.givemeprof.com/rc/fb2f2075b3?affclick=638c641b8d822600018f6ffd&pubid=_
200 OK 765 B URL HTTP/2 f71b8a57.givemeprof.com/rc/fb2f2075b3?affclick=638c641b8d822600018f6ffd&pubid=_
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 4b2d8e8e6481d754ddf2b9a15c7210ff
980d3f21ccd8a8decf53dcb2b03ed1da26cda636
bccac0cb37d2fbcb46ab82e9155d5e9b5325793117488bfb87db42549bc323ea
GET /rc/fb2f2075b3?affclick=638c641b8d822600018f6ffd&pubid=_ HTTP/1.1
Host: f71b8a57.givemeprof.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Sun, 04 Dec 2022 09:10:51 GMT
content-type: text/html; charset=utf-8
set-cookie: AWSALB=+zR8J+VPyV0dDALWf6lIW7+kguhk40XSeNwVzWDs0YrAPCg4IqPCzk+g56Jzy7fN8cT3VWaCEFPsHLXrtIrNZ+8vZhBc4i7XM2biDi6FrxieKmtti4l/xW1arfvh; Expires=Sun, 11 Dec 2022 09:10:51 GMT; Path=/
AWSALBCORS=+zR8J+VPyV0dDALWf6lIW7+kguhk40XSeNwVzWDs0YrAPCg4IqPCzk+g56Jzy7fN8cT3VWaCEFPsHLXrtIrNZ+8vZhBc4i7XM2biDi6FrxieKmtti4l/xW1arfvh; Expires=Sun, 11 Dec 2022 09:10:51 GMT; Path=/; SameSite=None
vary: Accept-Encoding, Accept-Language, Cookie
content-language: en
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WU0K64vRqPLqHgwIlSsPFS5VBGO%2FGX2q1DWzMPWq%2BvwXFW1%2F3IC7HBuh2jaNWMSIOmO9OV9K5F7SRyXXzbP2d1dmnZFkPlhXq8ouJhzr56CHApqnYmjWitecar%2BALP8x%2BhsRPq5jX24bBw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7743694c989bb527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7020
Expires: Sun, 04 Dec 2022 11:07:52 GMT
Date: Sun, 04 Dec 2022 09:10:52 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7020
Expires: Sun, 04 Dec 2022 11:07:52 GMT
Date: Sun, 04 Dec 2022 09:10:52 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7020
Expires: Sun, 04 Dec 2022 11:07:52 GMT
Date: Sun, 04 Dec 2022 09:10:52 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7020
Expires: Sun, 04 Dec 2022 11:07:52 GMT
Date: Sun, 04 Dec 2022 09:10:52 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F19c9bb39-be15-49f9-aad9-2cc511601111.jpeg
200 OK 9.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F19c9bb39-be15-49f9-aad9-2cc511601111.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a6e7b32ac999cf3c899a234c621fa91a
fc5d4f3163ebb9faf85968cbb1d194e8e68418be
f12db3aed126006fee00649aba0b3eaae900de200b85b9523866a90b5494f18e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F19c9bb39-be15-49f9-aad9-2cc511601111.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8989
x-amzn-requestid: abce0b01-f70c-42ad-b242-5a24735fe4c2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cltl4Gk2oAMFSWQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc2f2-1cccffff5199dffe70264a95;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:43:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: PFl7VUrzRkMFNnTiIw_cbGCyrEFn43eUSlZfT0nUhUmjjyXT7JfjMA==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 21:50:01 GMT
age: 40851
etag: "fc5d4f3163ebb9faf85968cbb1d194e8e68418be"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F757562c1-a4bf-4a51-bf99-64f3a0d51840.jpeg
200 OK 8.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F757562c1-a4bf-4a51-bf99-64f3a0d51840.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2c37ed587ee5e3fbdc8cab86ef1345f9
364a32a224b2cacc26b138d57a8945c191e537b1
3c66654da4670e0d5ec87afb6c62f0a420d90875c57b280710f2592269a9303e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F757562c1-a4bf-4a51-bf99-64f3a0d51840.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8285
x-amzn-requestid: 882c673f-4e3f-4f84-a51d-bbac56f716eb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: clsAAEWUoAMFWuA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc066-3a2c571d6272b3493ec2a1c5;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:32:22 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: DX2amuyEjkaWng9x7x8TknBMeXzYPSW7pimxhVkcwOPPPbKrX0beQQ==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 21:50:24 GMT
etag: "364a32a224b2cacc26b138d57a8945c191e537b1"
content-type: image/jpeg
age: 40828
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbe8e3477-9245-4318-82d9-b30607246872.jpeg
200 OK 6.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbe8e3477-9245-4318-82d9-b30607246872.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 89e5fc40e9e626a035abde2964ba0959
e800712e4f8d9589670d8ee3a744ac0aedf7b6e3
64a41309871b71682370e2b2f3735ac70039802fff4e1e46013f5aa1f15b4084
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbe8e3477-9245-4318-82d9-b30607246872.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6901
x-amzn-requestid: 5dd4545b-c48a-4fa2-8aa5-c7d0a5efeafe
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: clsByFqCoAMF4CA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc071-6b96e54876cde366748564d6;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:32:33 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: sOtbi4sBuEPzvS_l6X_w5S5BeHb1DROkFmpNDTlvo57kUVeYN6ra3A==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 556b99c6be8d7078b9f067347c62df6a.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 21:42:39 GMT
age: 41293
etag: "e800712e4f8d9589670d8ee3a744ac0aedf7b6e3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f00caab-057c-4cc2-a163-fd0bb4d0b5f7.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f00caab-057c-4cc2-a163-fd0bb4d0b5f7.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1521243a6fc065bb631bfbde22886fa2
527220e4e8cd1065ce05fcd0694d0d703d817e2e
b83ebf768bbfb34f49d5467f3dfb43ceb3ca3d30d3454e6f37db9aef72d7689a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f00caab-057c-4cc2-a163-fd0bb4d0b5f7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11482
x-amzn-requestid: d1db05ab-bd5d-4ad4-96b4-8f439152e435
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: clssNEeAoAMFh_g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc181-0221c53842a2f5ef071e8071;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:37:05 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: UZ5kblxfN8fkp55YeSpUA55GzDxZgsLpFZrYTsdJBihf53HLCN0hTA==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 36810aa1793ee589dc8c194860296078.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 22:17:35 GMT
age: 39197
etag: "527220e4e8cd1065ce05fcd0694d0d703d817e2e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d571e0e-b14e-436b-8156-2e49aad75d4f.png
200 OK 16 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d571e0e-b14e-436b-8156-2e49aad75d4f.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 14dcca2a9c4792d835ee709bcd947402
1d702df3a64258628f4124eafd580695f2d350af
da01dcd8fef7c50bdb6f7a8a6a4955694092f479df3dba72f7fa69d7280d07b2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d571e0e-b14e-436b-8156-2e49aad75d4f.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 16143
x-amzn-requestid: dc86fad4-4e53-42c9-9b0a-5e4d2cfcd087
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cdGyLGqmoAMFnaA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638851a7-0ea324b31e8c6578098b8ab9;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 07:03:03 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: KHd4ajJWl-8TDH5HGbkuJXI4NL6I83IwSUBKzfq85cxpyRH_LGl6OA==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 05:55:20 GMT
age: 11732
etag: "1d702df3a64258628f4124eafd580695f2d350af"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df54ea7-8915-4ac7-af2b-6a71ce14dbf4.webp
200 OK 5.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df54ea7-8915-4ac7-af2b-6a71ce14dbf4.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 43309032a892c486f9985ef520df696e
36f4682ca6a33ff80ee02129c77e6f27e996ede0
24225ff504f30405d9ec3feb2555c738fcca0d6b265f285aa9c73a64c78a496e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df54ea7-8915-4ac7-af2b-6a71ce14dbf4.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5681
x-amzn-requestid: 8f0d66b8-d532-48d9-9a29-74540cd6ab3a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cltXnEotIAMFqkA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc296-27349a376ff819ab63b04a81;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:41:42 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: vNP2rQwmWTntetjJyjonO8N_YOBqvQuZUm42BWX7c1GoX7jASOIpCg==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 21:49:42 GMT
age: 40870
etag: "36f4682ca6a33ff80ee02129c77e6f27e996ede0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp2.globalsign.com/gsalphasha2g2
200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP
Hash e02d49ef4ed741b3e5008c208a4804af
c3449aab8faa114d70e479f6b0651bece2f79d67
0dd11645784261be12eb5a86b123dc6c2ada5bd3baafe0bc9f200853bf8f5c0f
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 09:10:52 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Thu, 08 Dec 2022 08:11:35 GMT
ETag: "c3449aab8faa114d70e479f6b0651bece2f79d67"
Last-Modified: Sun, 04 Dec 2022 08:11:36 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: EXPIRED
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 774369506c7ab517-OSL
c.tilttrk.com/?a=6025&c=863&E=h5jPt0yM5xE%3D&s2=c4fc043d&s4=pub4a86e01147594bb7899003e2f1ca2b3c
302 Found 186 B URL HTTP/1.1 c.tilttrk.com/?a=6025&c=863&E=h5jPt0yM5xE%3D&s2=c4fc043d&s4=pub4a86e01147594bb7899003e2f1ca2b3c
IP
File type HTML document, ASCII text
Hash 9d88848f350b15dde040b07c91344cdb
ad19fc7b22efad1e1607621e30af26123234d746
bb56f260b01920dffcd2d0a91109a8040bee94e6cbede4c3e96ce3ed3612c6bb
GET /?a=6025&c=863&E=h5jPt0yM5xE%3D&s2=c4fc043d&s4=pub4a86e01147594bb7899003e2f1ca2b3c HTTP/1.1
Host: c.tilttrk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://f71b8a57.givemeprof.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Content-Length: 186
Content-Type: text/html; charset=utf-8
Date: Sun, 04 Dec 2022 09:10:52 GMT
Location: https://tracker.tiltwin.com/rotate/194?P=3-ce66872okujs0n44hjlg&A=6025&B=c4fc043d&aff_sub4=pub4a86e01147594bb7899003e2f1ca2b3c&email=&aff_sub2=
Set-Cookie: trk=cjfOjMlzQwLxYB4FzkIEoz47zI9ZYeylGVaC1B3riqwKm1pNFrhDyxUFmpaNiZylbUwQ/O6wUe8=; Domain=.tilttrk.com; Expires=Tue, 03 Dec 2024 09:10:52 GMT; HttpOnly; Secure; SameSite=None
sid=cjfOjMlzQwLxYB4FzkIEo8HQHdjQQKrTGVaC1B3riqwKm1pNFrhDyxUFmpaNiZylylFHuzBNRJA=; Domain=.tilttrk.com; HttpOnly; Secure; SameSite=None
x12=b+jHs4/fKLlb4Cqj7U1IfqhHoDJKfW1lzLvm+JgEO7RFgeBlwg7Ytqn+Zp1Xk4mj/2oYI8d4je99VR7m7G9BbElfIvNOBPP0ZNAKnZf+oEG912YsvmUrlZHlJ151yKoKOYubhug+ZWs134du0wE0lFAGSAokefowBDp0+Pz7No6zDlS+kvOy3nVfeduvpHLrOcwXXl05HjuUlt+pir+xrIxNMx//imD+QuqSWhYR9TdDYBRlCKjDpxCIWqNsptcqv0Aj921cQl43xb9nwlab/qEWQgqsu9OKDpEOwBcVEDBTD3/XA7FE9KxkVXIz5LxN7ggBTpcaV9W4kDGiviNytL63DS3hSoJKRJdlYzMByC/lo9HibD9XfV3GWSC/4jkGMXJZ0FlOmCaryNsDd12KSI9e89PDEBGqjq1Ptd9+7xYWVy4LvVvdKBlnza2EfDi7IAQyE3+wyL+Kag/Os8lxz4VM+/SebeqUwPQkiBUrRNbRXyJMrKYXjjbCBhToCsQDBVs7n2Fndo+QpgKstnNEHh2cR1PyOYmtEB8g9NORK106oAG+4k0lP8JnsOUfvlu90L4ol6WIq7ZqvTvj7003CFeC1WZ+u0pvjt1/Atg9284ZOLpH17+fjnvZ9h2Gp/2WK0tnL+8eKfg2mG7XUq+Qk+uzrTogBz4FlNp5IWE2JELg2W+y0tPO3XvZ9h2Gp/2WA10Ohz9GIEE=; Domain=.tilttrk.com; Expires=Tue, 03 Jan 2023 09:10:52 GMT; HttpOnly; Secure; SameSite=None
X-Ckt: ce66872okujs0n44hjlg
X-Ray: ce66872okujs0n44hjjg
Connection: close
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b6b69b690c7863f0c94a8d20483311a8
3d72661ad59d20222fce3fdc08f20416102d25b9
49abb1333f3c43d132f2b5adfd39eb1e543ee170032bc0413dbc6ba23000156d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "49ABB1333F3C43D132F2B5ADFD39EB1E543EE170032BC0413DBC6BA23000156D"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13912
Expires: Sun, 04 Dec 2022 13:02:44 GMT
Date: Sun, 04 Dec 2022 09:10:52 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 91473724e67bd5f0f93730baab5725a8
483a498436447f2679172631388dff7b14e21272
601e5d0ec60264e9079676e6f3dbed9e4a63de041ee6e390985847da1e60910b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "601E5D0EC60264E9079676E6F3DBED9E4A63DE041EE6E390985847DA1E60910B"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14814
Expires: Sun, 04 Dec 2022 13:17:47 GMT
Date: Sun, 04 Dec 2022 09:10:53 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 280 B IP
Hash 1a56736cf1f02c2242946ca0170c2c3a
a47ca5cfc4667a1466875542da0de22f64862f86
0fdd7486e01858e490d7c08343c7a861c5fe856fc0debc08df0541ccc89f80b1
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6382
Cache-Control: max-age=171415
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 09:10:53 GMT
Etag: "638c45c6-118"
Expires: Tue, 06 Dec 2022 08:47:48 GMT
Last-Modified: Sun, 04 Dec 2022 07:01:26 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 280
ocsp.digicert.com/
200 OK 280 B IP
Hash 1a56736cf1f02c2242946ca0170c2c3a
a47ca5cfc4667a1466875542da0de22f64862f86
0fdd7486e01858e490d7c08343c7a861c5fe856fc0debc08df0541ccc89f80b1
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6388
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 09:10:53 GMT
Last-Modified: Sun, 04 Dec 2022 07:24:25 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 280
code.jquery.com/jquery-3.4.1.min.js
200 OK 31 kB URL HTTP/2 code.jquery.com/jquery-3.4.1.min.js
IP
File type ASCII text, with very long lines (65451)
Hash 9abb42735168ac9e960b770179b642aa
11475bf8c7244af7a820108b7762e7a3f95aa52c
df53c09a6546b3d23dc0b2d0d92c39808c5663a75f4bf1f8d035fd11b7c81243
GET /jquery-3.4.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www2.tiltwin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 09:10:53 GMT
content-encoding: gzip
content-length: 30638
content-type: application/javascript; charset=utf-8
last-modified: Fri, 20 Aug 2021 17:47:53 GMT
accept-ranges: bytes
server: nginx
etag: W/"611feac9-15851"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1670145053.dop009.sk1.t,1670145053.cds255.sk1.hn,1670145053.cds201.sk1.c
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3c4319f54a5675ee9acda96c58f97ac6
210ea86db1836d430b321d59b4bd1b016c914f22
cb20ad3ec895ed3a2ae9b1a90dda6b7cc174d8851f3a15ba054a435746cbdc65
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 09:10:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 280 B IP
Hash 83975132d2ae0d78fd7bb27da6c5d1d6
32469c305581201b2011d2e7ee6c04b09e2b2114
590de385ca683dd3c614912d6b506a14aea72baa4321d20afecf324cf701af96
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6198
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 09:10:53 GMT
Etag: "638b3bdd-118"
Last-Modified: Sun, 04 Dec 2022 07:27:35 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 280
www.googletagmanager.com/gtag/js?id=UA-144971979-1
200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-144971979-1
IP
File type ASCII text, with very long lines (1921)
Hash eac63bab185db803766936bdaf4836d2
d93a3180963046177a4454ff43d90252aa207dfa
9672fc84771e1448fdcf72909db6ca1c24846e08a5662aeb12e088a8d92ed808
GET /gtag/js?id=UA-144971979-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www2.tiltwin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 04 Dec 2022 09:10:53 GMT
expires: Sun, 04 Dec 2022 09:10:53 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43635
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash 1a56736cf1f02c2242946ca0170c2c3a
a47ca5cfc4667a1466875542da0de22f64862f86
0fdd7486e01858e490d7c08343c7a861c5fe856fc0debc08df0541ccc89f80b1
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6388
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 09:10:53 GMT
Last-Modified: Sun, 04 Dec 2022 07:24:25 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 280
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3c4319f54a5675ee9acda96c58f97ac6
210ea86db1836d430b321d59b4bd1b016c914f22
cb20ad3ec895ed3a2ae9b1a90dda6b7cc174d8851f3a15ba054a435746cbdc65
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 09:10:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 280 B IP
Hash 83975132d2ae0d78fd7bb27da6c5d1d6
32469c305581201b2011d2e7ee6c04b09e2b2114
590de385ca683dd3c614912d6b506a14aea72baa4321d20afecf324cf701af96
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6198
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 09:10:53 GMT
Etag: "638b3bdd-118"
Last-Modified: Sun, 04 Dec 2022 07:27:35 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 280
d2i5a4y6yksdm0.cloudfront.net/images/footer-icons/begamble.png
200 OK 10 kB URL HTTP/2 d2i5a4y6yksdm0.cloudfront.net/images/footer-icons/begamble.png
IP
File type PNG image data, 473 x 62, 8-bit/color RGBA, non-interlaced\012- data
Hash 4fd78d077e73978bca5af09bd9d76365
f157bdf0be60a2fbb09f52252e353711d83fde4b
bdaa2b7f6eec96c7620ee7d1821fe7b328a7d7dcbade888a0986d3aeb7755ab6
GET /images/footer-icons/begamble.png HTTP/1.1
Host: d2i5a4y6yksdm0.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www2.tiltwin.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 10295
server: nginx/1.14.0 (Ubuntu)
last-modified: Mon, 04 Jan 2021 17:51:23 GMT
x-cache-status: MISS
accept-ranges: bytes
date: Sun, 04 Dec 2022 02:24:33 GMT
etag: "5ff3559b-2837"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 7nr4oiz1X67L765UV_fJxYF2rN3hT0mMUpC-5MKZ8onVKMdSLIeZtg==
age: 24760
X-Firefox-Spdy: h2
d2i5a4y6yksdm0.cloudfront.net/images/arrow-up.png
200 OK 1.8 kB URL HTTP/2 d2i5a4y6yksdm0.cloudfront.net/images/arrow-up.png
IP
File type PNG image data, 30 x 15, 8-bit/color RGBA, non-interlaced\012- data
Hash 7be70e54560a27609532935253b1e0b5
d78ebcbed3d2e898f2d113842109b9f36218eaad
ecae0dc020262a5fcbf7d216c27cb4ab482807311e25312e5d812183472bf398
GET /images/arrow-up.png HTTP/1.1
Host: d2i5a4y6yksdm0.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www2.tiltwin.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 1756
server: nginx/1.14.0 (Ubuntu)
last-modified: Thu, 12 Jul 2018 16:49:11 GMT
x-cache-status: MISS
accept-ranges: bytes
date: Sun, 04 Dec 2022 02:58:33 GMT
etag: "5b478687-6dc"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: R81ZLqIjQ9v9H4f1o0bbhXBjRLhxgPCM1RxrSTD8G5LQQri68twBlQ==
age: 22359
X-Firefox-Spdy: h2
d2i5a4y6yksdm0.cloudfront.net/images/footer-icons/gambling-therapy.png
200 OK 4.9 kB URL HTTP/2 d2i5a4y6yksdm0.cloudfront.net/images/footer-icons/gambling-therapy.png
IP
File type PNG image data, 110 x 45, 8-bit/color RGBA, non-interlaced\012- data
Hash a07cbc8e2901b2c1dcadc9da971b8e22
5e08e02995d5716e8a9910f939d785e200c1a10c
8769471d2891f9151996faf46dab47fc14bf45f5a0e1cb253ba542d4cee57fcd
GET /images/footer-icons/gambling-therapy.png HTTP/1.1
Host: d2i5a4y6yksdm0.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www2.tiltwin.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 4900
server: nginx/1.14.0 (Ubuntu)
last-modified: Sun, 28 Apr 2019 00:57:47 GMT
x-cache-status: MISS
accept-ranges: bytes
date: Sun, 04 Dec 2022 01:10:37 GMT
etag: "5cc4fa8b-1324"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: vot7IJavTj2b23DOT3yPuCLisXoh0p0fUPjX6sHMuUDqlmKMImgRGA==
age: 29415
X-Firefox-Spdy: h2
www2.tiltwin.com/no/landing/fonts/IntroBold.ttf
404 Not Found 2.2 kB URL HTTP/2 www2.tiltwin.com/no/landing/fonts/IntroBold.ttf
IP
Hash 2a9423c23676dd4a90f14b6eb0b741a4
a385c6d3b0cdd72beccdb50efe639911f24df5f4
02e51a9ad70f1a5dee2349920a26aa77c8b519030ed90b60755d821efde4c70d
GET /no/landing/fonts/IntroBold.ttf HTTP/1.1
Host: www2.tiltwin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www2.tiltwin.com/no/landing/157/574?A=6025
Cookie: tracking_data=%7B%22P%22%3A%223-ce66872okujs0n44hjlg%22%2C%22A%22%3A%226025%22%2C%22B%22%3A%22c4fc043d%22%2C%22aff_sub4%22%3A%22pub4a86e01147594bb7899003e2f1ca2b3c%22%2C%22email%22%3Anull%2C%22aff_sub2%22%3Anull%2C%22market%22%3A%22no%22%2C%22path%22%3A%22landing%5C%2F157%5C%2F574%22%2C%22country%22%3A%22NO%22%2C%22page%22%3A%22157%22%2C%22template%22%3A%22574%22%2C%22clickin_ip%22%3A%2291.90.42.154%22%2C%22token%22%3A%22lb958qg6%22%7D; tw_session=eyJpdiI6InlnNVUrQ003emxQczB5XC9ZSVB1bFZ3PT0iLCJ2YWx1ZSI6IkhcL1lvNnh0d1JGUDBcL2R3RmpmdkkwVXM5N2ZiZHo2M2NudG8rMXNhVkJqNzhTM3NUQldJNUF2MEgwRHJxOXRQWiIsIm1hYyI6ImZlNWE0OWZhZmZiY2E2YzAxZjJiNjI5MzViMzJkNjUxMjRjNzg5MjJkYWY4Y2QwNDllYzBlMjNjMmRjMDViNDMifQ%3D%3D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx/1.14.0 (Ubuntu)
date: Sun, 04 Dec 2022 09:10:53 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache, private
pragma: no-cache
expires: -1
content-encoding: gzip
X-Firefox-Spdy: h2
d2i5a4y6yksdm0.cloudfront.net/images/arrow-down.png
200 OK 1.8 kB URL HTTP/2 d2i5a4y6yksdm0.cloudfront.net/images/arrow-down.png
IP
File type PNG image data, 30 x 15, 8-bit/color RGBA, non-interlaced\012- data
Hash f2ec75bcfd4ef971fdf9f94bfae939d4
1da4a74612c91011c70b6dec60415b0913356115
2eb6cad7d97dcb417abf1b893dd46385405504196983a251909f40c9965d71d0
GET /images/arrow-down.png HTTP/1.1
Host: d2i5a4y6yksdm0.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www2.tiltwin.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 1757
server: nginx/1.14.0 (Ubuntu)
last-modified: Thu, 12 Jul 2018 16:49:11 GMT
x-cache-status: MISS
accept-ranges: bytes
date: Sat, 03 Dec 2022 22:45:23 GMT
etag: "5b478687-6dd"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 6qPcogQUKYsrg3nG_xq0GRqkka10iQ7fNcbElMQjOeuU-BRnGkcDCg==
age: 38812
X-Firefox-Spdy: h2
d2i5a4y6yksdm0.cloudfront.net/images/lp/574/hint-bg.jpg
200 OK 15 kB URL HTTP/2 d2i5a4y6yksdm0.cloudfront.net/images/lp/574/hint-bg.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 729x104, components 3\012- data
Hash 0a888847143630d0d32d6a1c07bbd420
7680e65b7e67d78a092dbef31e532e9a2f4612f3
5fa3072f292f8edafb050ded6c7e139c3ebac45fdce1633e8a83dda02a638370
GET /images/lp/574/hint-bg.jpg HTTP/1.1
Host: d2i5a4y6yksdm0.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://d2i5a4y6yksdm0.cloudfront.net/css/lp/574/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 14725
server: nginx/1.14.0 (Ubuntu)
last-modified: Wed, 05 Aug 2020 12:12:54 GMT
x-cache-status: MISS
accept-ranges: bytes
date: Sat, 03 Dec 2022 23:43:02 GMT
etag: "5f2aa246-3985"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: XSSXRWddjh3eYy7NFDAXQBOGk2SNaNuth6UI9_dm3gtEnXgXL7tbWQ==
age: 34928
X-Firefox-Spdy: h2
d2i5a4y6yksdm0.cloudfront.net/images/lp/574/book.jpg
200 OK 9.4 kB URL HTTP/2 d2i5a4y6yksdm0.cloudfront.net/images/lp/574/book.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 93x93, components 3\012- data
Hash 87071c18d0bdb052205b5817bca6320d
0a897b1f97015db6ff2c5ada197f5756da20aa7c
ccf7a96e395a62a1a5801bbd26903faa6bb6607d1c7150181388276ee05f6b19
GET /images/lp/574/book.jpg HTTP/1.1
Host: d2i5a4y6yksdm0.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://d2i5a4y6yksdm0.cloudfront.net/css/lp/574/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 9415
server: nginx/1.14.0 (Ubuntu)
last-modified: Wed, 05 Aug 2020 12:12:47 GMT
x-cache-status: HIT
accept-ranges: bytes
date: Sun, 04 Dec 2022 06:38:47 GMT
etag: "5f2aa23f-24c7"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 2MMj9hvV6NV53KVIrZDVlpM32qABc8GkHm0g_aUJGT95qudML-O6JA==
age: 13703
X-Firefox-Spdy: h2
d2i5a4y6yksdm0.cloudfront.net/images/lp/574/bg-desk.jpg
200 OK 314 kB URL HTTP/2 d2i5a4y6yksdm0.cloudfront.net/images/lp/574/bg-desk.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1110, components 3\012- data
Size 314 kB (313736 bytes)
Hash 529071eccd64ba89295ec3a429e9cbc7
95aecfa453faff357642a6f4dbbaba0b59b23ca9
28e773a2b073bffa1ed1fbe947b653655ff36b5cec094aa3d69a73b18eea940a
GET /images/lp/574/bg-desk.jpg HTTP/1.1
Host: d2i5a4y6yksdm0.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://d2i5a4y6yksdm0.cloudfront.net/css/lp/574/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 313736
server: nginx/1.14.0 (Ubuntu)
last-modified: Wed, 05 Aug 2020 12:10:43 GMT
x-cache-status: MISS
accept-ranges: bytes
date: Sun, 04 Dec 2022 04:30:49 GMT
etag: "5f2aa1c3-4c988"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: A-pzKKcppS492_7qQgXNUr7mX6sfk6SetF5ClA804x4eV98Ps94-PQ==
age: 19071
X-Firefox-Spdy: h2
d2i5a4y6yksdm0.cloudfront.net/favicon.ico
200 OK 0 B URL HTTP/2 d2i5a4y6yksdm0.cloudfront.net/favicon.ico
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: d2i5a4y6yksdm0.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www2.tiltwin.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/x-icon
content-length: 0
server: nginx/1.14.0 (Ubuntu)
last-modified: Sun, 11 Mar 2018 21:25:00 GMT
x-cache-status: HIT
accept-ranges: bytes
date: Sun, 04 Dec 2022 02:17:15 GMT
etag: "5aa59eac-0"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: ORvKhQY8RWvQeHm6dPIG2cZZbRHDm4-w3MUOtLVlttGBFcCFgbAyVA==
age: 27801
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www2.tiltwin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Sun, 04 Dec 2022 08:46:55 GMT
expires: Sun, 04 Dec 2022 10:46:55 GMT
cache-control: public, max-age=7200
age: 1438
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www2.tiltwin.com/images/lp/574/btn.png
200 OK 526 B URL HTTP/2 www2.tiltwin.com/images/lp/574/btn.png
IP
File type PNG image data, 464 x 106, 8-bit colormap, non-interlaced\012- data
Hash 64adf8fec30ad9649caa783d6591ce0e
b62a1d90790ffacb19e0317628dde53d284ec8b9
a518a179514e2c1d458a0a652b0fb9203396f149d4ad2e424e083eaba12e4b0d
GET /images/lp/574/btn.png HTTP/1.1
Host: www2.tiltwin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www2.tiltwin.com/no/landing/157/574?A=6025
Cookie: tracking_data=%7B%22P%22%3A%223-ce66872okujs0n44hjlg%22%2C%22A%22%3A%226025%22%2C%22B%22%3A%22c4fc043d%22%2C%22aff_sub4%22%3A%22pub4a86e01147594bb7899003e2f1ca2b3c%22%2C%22email%22%3Anull%2C%22aff_sub2%22%3Anull%2C%22market%22%3A%22no%22%2C%22path%22%3A%22landing%5C%2F157%5C%2F574%22%2C%22country%22%3A%22NO%22%2C%22page%22%3A%22157%22%2C%22template%22%3A%22574%22%2C%22clickin_ip%22%3A%2291.90.42.154%22%2C%22token%22%3A%22lb958qg6%22%7D; tw_session=eyJpdiI6InlnNVUrQ003emxQczB5XC9ZSVB1bFZ3PT0iLCJ2YWx1ZSI6IkhcL1lvNnh0d1JGUDBcL2R3RmpmdkkwVXM5N2ZiZHo2M2NudG8rMXNhVkJqNzhTM3NUQldJNUF2MEgwRHJxOXRQWiIsIm1hYyI6ImZlNWE0OWZhZmZiY2E2YzAxZjJiNjI5MzViMzJkNjUxMjRjNzg5MjJkYWY4Y2QwNDllYzBlMjNjMmRjMDViNDMifQ%3D%3D; _ga=GA1.2.1178946162.1670145051; _gid=GA1.2.1736487591.1670145051; _gat_gtag_UA_144971979_1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.0 (Ubuntu)
date: Sun, 04 Dec 2022 09:10:53 GMT
content-type: image/png
content-length: 526
last-modified: Wed, 05 Aug 2020 12:20:24 GMT
etag: "5f2aa408-20e"
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
www2.tiltwin.com/images/lp/574/osn.png
200 OK 166 kB URL HTTP/2 www2.tiltwin.com/images/lp/574/osn.png
IP
File type PNG image data, 786 x 608, 8-bit colormap, non-interlaced\012- data
Size 166 kB (165485 bytes)
Hash fbafd6c1abbfabd273bf06686d59119a
31ef49086d289c7207e9611b12795e19414cb2d6
45b39e728f642365cf8c94599ecf3002b20c607c07160c7e8e404da8c2041968
GET /images/lp/574/osn.png HTTP/1.1
Host: www2.tiltwin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www2.tiltwin.com/no/landing/157/574?A=6025
Cookie: tracking_data=%7B%22P%22%3A%223-ce66872okujs0n44hjlg%22%2C%22A%22%3A%226025%22%2C%22B%22%3A%22c4fc043d%22%2C%22aff_sub4%22%3A%22pub4a86e01147594bb7899003e2f1ca2b3c%22%2C%22email%22%3Anull%2C%22aff_sub2%22%3Anull%2C%22market%22%3A%22no%22%2C%22path%22%3A%22landing%5C%2F157%5C%2F574%22%2C%22country%22%3A%22NO%22%2C%22page%22%3A%22157%22%2C%22template%22%3A%22574%22%2C%22clickin_ip%22%3A%2291.90.42.154%22%2C%22token%22%3A%22lb958qg6%22%7D; tw_session=eyJpdiI6InlnNVUrQ003emxQczB5XC9ZSVB1bFZ3PT0iLCJ2YWx1ZSI6IkhcL1lvNnh0d1JGUDBcL2R3RmpmdkkwVXM5N2ZiZHo2M2NudG8rMXNhVkJqNzhTM3NUQldJNUF2MEgwRHJxOXRQWiIsIm1hYyI6ImZlNWE0OWZhZmZiY2E2YzAxZjJiNjI5MzViMzJkNjUxMjRjNzg5MjJkYWY4Y2QwNDllYzBlMjNjMmRjMDViNDMifQ%3D%3D; _ga=GA1.2.1178946162.1670145051; _gid=GA1.2.1736487591.1670145051; _gat_gtag_UA_144971979_1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.0 (Ubuntu)
date: Sun, 04 Dec 2022 09:10:53 GMT
content-type: image/png
content-length: 165485
last-modified: Wed, 05 Aug 2020 12:21:28 GMT
etag: "5f2aa448-2866d"
x-cache-status: MISS
accept-ranges: bytes
X-Firefox-Spdy: h2
www2.tiltwin.com/images/lp/574/slot1.png
200 OK 11 kB URL HTTP/2 www2.tiltwin.com/images/lp/574/slot1.png
IP
File type PNG image data, 113 x 124, 8-bit colormap, non-interlaced\012- data
Hash 8f59f7505f06de597a0f749f018cadf2
d2313ce4b83ef4e2578b0c7d54dc25ff310519e7
34f19d90a2743c0f603ed8aa6ea761bf60de19a187754a3e67f1f8f77d894451
GET /images/lp/574/slot1.png HTTP/1.1
Host: www2.tiltwin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www2.tiltwin.com/no/landing/157/574?A=6025
Cookie: tracking_data=%7B%22P%22%3A%223-ce66872okujs0n44hjlg%22%2C%22A%22%3A%226025%22%2C%22B%22%3A%22c4fc043d%22%2C%22aff_sub4%22%3A%22pub4a86e01147594bb7899003e2f1ca2b3c%22%2C%22email%22%3Anull%2C%22aff_sub2%22%3Anull%2C%22market%22%3A%22no%22%2C%22path%22%3A%22landing%5C%2F157%5C%2F574%22%2C%22country%22%3A%22NO%22%2C%22page%22%3A%22157%22%2C%22template%22%3A%22574%22%2C%22clickin_ip%22%3A%2291.90.42.154%22%2C%22token%22%3A%22lb958qg6%22%7D; tw_session=eyJpdiI6InlnNVUrQ003emxQczB5XC9ZSVB1bFZ3PT0iLCJ2YWx1ZSI6IkhcL1lvNnh0d1JGUDBcL2R3RmpmdkkwVXM5N2ZiZHo2M2NudG8rMXNhVkJqNzhTM3NUQldJNUF2MEgwRHJxOXRQWiIsIm1hYyI6ImZlNWE0OWZhZmZiY2E2YzAxZjJiNjI5MzViMzJkNjUxMjRjNzg5MjJkYWY4Y2QwNDllYzBlMjNjMmRjMDViNDMifQ%3D%3D; _ga=GA1.2.1178946162.1670145051; _gid=GA1.2.1736487591.1670145051; _gat_gtag_UA_144971979_1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.0 (Ubuntu)
date: Sun, 04 Dec 2022 09:10:53 GMT
content-type: image/png
content-length: 10650
last-modified: Wed, 05 Aug 2020 12:21:33 GMT
etag: "5f2aa44d-299a"
x-cache-status: MISS
accept-ranges: bytes
X-Firefox-Spdy: h2
www2.tiltwin.com/images/lp/574/slot3.png
200 OK 4.7 kB URL HTTP/2 www2.tiltwin.com/images/lp/574/slot3.png
IP
File type PNG image data, 113 x 124, 8-bit colormap, non-interlaced\012- data
Hash 15984c4890d9295e9d5c344d63cef553
41e4907655f2a67d20a6752bb9a4d63a2dda2e35
e208a6e29f59e3d67c0e58fb7ac2597fa4f85a928501d6d9a085061c87bdb569
GET /images/lp/574/slot3.png HTTP/1.1
Host: www2.tiltwin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www2.tiltwin.com/no/landing/157/574?A=6025
Cookie: tracking_data=%7B%22P%22%3A%223-ce66872okujs0n44hjlg%22%2C%22A%22%3A%226025%22%2C%22B%22%3A%22c4fc043d%22%2C%22aff_sub4%22%3A%22pub4a86e01147594bb7899003e2f1ca2b3c%22%2C%22email%22%3Anull%2C%22aff_sub2%22%3Anull%2C%22market%22%3A%22no%22%2C%22path%22%3A%22landing%5C%2F157%5C%2F574%22%2C%22country%22%3A%22NO%22%2C%22page%22%3A%22157%22%2C%22template%22%3A%22574%22%2C%22clickin_ip%22%3A%2291.90.42.154%22%2C%22token%22%3A%22lb958qg6%22%7D; tw_session=eyJpdiI6InlnNVUrQ003emxQczB5XC9ZSVB1bFZ3PT0iLCJ2YWx1ZSI6IkhcL1lvNnh0d1JGUDBcL2R3RmpmdkkwVXM5N2ZiZHo2M2NudG8rMXNhVkJqNzhTM3NUQldJNUF2MEgwRHJxOXRQWiIsIm1hYyI6ImZlNWE0OWZhZmZiY2E2YzAxZjJiNjI5MzViMzJkNjUxMjRjNzg5MjJkYWY4Y2QwNDllYzBlMjNjMmRjMDViNDMifQ%3D%3D; _ga=GA1.2.1178946162.1670145051; _gid=GA1.2.1736487591.1670145051; _gat_gtag_UA_144971979_1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.0 (Ubuntu)
date: Sun, 04 Dec 2022 09:10:53 GMT
content-type: image/png
content-length: 4704
last-modified: Wed, 05 Aug 2020 12:21:39 GMT
etag: "5f2aa453-1260"
x-cache-status: MISS
accept-ranges: bytes
X-Firefox-Spdy: h2
www2.tiltwin.com/images/lp/574/slot4.png
200 OK 6.3 kB URL HTTP/2 www2.tiltwin.com/images/lp/574/slot4.png
IP
File type PNG image data, 113 x 124, 8-bit colormap, non-interlaced\012- data
Hash f6872ffe46353aa6c6e6bbc7dc3d3a94
2ab2aa93c1c3e462d3ae796d0f0f760bb6990a5b
d623f5acfe7ef19bd9b6705ec8737e98975ae0512aa851bdfdbcc76be8ebfc64
GET /images/lp/574/slot4.png HTTP/1.1
Host: www2.tiltwin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www2.tiltwin.com/no/landing/157/574?A=6025
Cookie: tracking_data=%7B%22P%22%3A%223-ce66872okujs0n44hjlg%22%2C%22A%22%3A%226025%22%2C%22B%22%3A%22c4fc043d%22%2C%22aff_sub4%22%3A%22pub4a86e01147594bb7899003e2f1ca2b3c%22%2C%22email%22%3Anull%2C%22aff_sub2%22%3Anull%2C%22market%22%3A%22no%22%2C%22path%22%3A%22landing%5C%2F157%5C%2F574%22%2C%22country%22%3A%22NO%22%2C%22page%22%3A%22157%22%2C%22template%22%3A%22574%22%2C%22clickin_ip%22%3A%2291.90.42.154%22%2C%22token%22%3A%22lb958qg6%22%7D; tw_session=eyJpdiI6InlnNVUrQ003emxQczB5XC9ZSVB1bFZ3PT0iLCJ2YWx1ZSI6IkhcL1lvNnh0d1JGUDBcL2R3RmpmdkkwVXM5N2ZiZHo2M2NudG8rMXNhVkJqNzhTM3NUQldJNUF2MEgwRHJxOXRQWiIsIm1hYyI6ImZlNWE0OWZhZmZiY2E2YzAxZjJiNjI5MzViMzJkNjUxMjRjNzg5MjJkYWY4Y2QwNDllYzBlMjNjMmRjMDViNDMifQ%3D%3D; _ga=GA1.2.1178946162.1670145051; _gid=GA1.2.1736487591.1670145051; _gat_gtag_UA_144971979_1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.0 (Ubuntu)
date: Sun, 04 Dec 2022 09:10:53 GMT
content-type: image/png
content-length: 6341
last-modified: Wed, 05 Aug 2020 12:21:45 GMT
etag: "5f2aa459-18c5"
x-cache-status: MISS
accept-ranges: bytes
X-Firefox-Spdy: h2
www2.tiltwin.com/images/lp/574/slot6.png
200 OK 10 kB URL HTTP/2 www2.tiltwin.com/images/lp/574/slot6.png
IP
File type PNG image data, 113 x 124, 8-bit colormap, non-interlaced\012- data
Hash c760356fc69201be743d5b1d207dc2f7
61722969159fad8602e5351713cf71dccb786a33
421dbdcc6d7d1f18600bd10de4809dd745c936c9f22e33c0f8708aee1e3d7816
GET /images/lp/574/slot6.png HTTP/1.1
Host: www2.tiltwin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www2.tiltwin.com/no/landing/157/574?A=6025
Cookie: tracking_data=%7B%22P%22%3A%223-ce66872okujs0n44hjlg%22%2C%22A%22%3A%226025%22%2C%22B%22%3A%22c4fc043d%22%2C%22aff_sub4%22%3A%22pub4a86e01147594bb7899003e2f1ca2b3c%22%2C%22email%22%3Anull%2C%22aff_sub2%22%3Anull%2C%22market%22%3A%22no%22%2C%22path%22%3A%22landing%5C%2F157%5C%2F574%22%2C%22country%22%3A%22NO%22%2C%22page%22%3A%22157%22%2C%22template%22%3A%22574%22%2C%22clickin_ip%22%3A%2291.90.42.154%22%2C%22token%22%3A%22lb958qg6%22%7D; tw_session=eyJpdiI6InlnNVUrQ003emxQczB5XC9ZSVB1bFZ3PT0iLCJ2YWx1ZSI6IkhcL1lvNnh0d1JGUDBcL2R3RmpmdkkwVXM5N2ZiZHo2M2NudG8rMXNhVkJqNzhTM3NUQldJNUF2MEgwRHJxOXRQWiIsIm1hYyI6ImZlNWE0OWZhZmZiY2E2YzAxZjJiNjI5MzViMzJkNjUxMjRjNzg5MjJkYWY4Y2QwNDllYzBlMjNjMmRjMDViNDMifQ%3D%3D; _ga=GA1.2.1178946162.1670145051; _gid=GA1.2.1736487591.1670145051; _gat_gtag_UA_144971979_1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.0 (Ubuntu)
date: Sun, 04 Dec 2022 09:10:53 GMT
content-type: image/png
content-length: 10273
last-modified: Wed, 05 Aug 2020 12:21:51 GMT
etag: "5f2aa45f-2821"
x-cache-status: MISS
accept-ranges: bytes
X-Firefox-Spdy: h2
www2.tiltwin.com/images/lp/574/slot7.png
200 OK 6.2 kB URL HTTP/2 www2.tiltwin.com/images/lp/574/slot7.png
IP
File type PNG image data, 113 x 124, 8-bit colormap, non-interlaced\012- data
Hash b88f9e690d35a9139c9ff3797f44c4f6
774423e288b95f597d44806d77cf2755f698e8ae
a6f7ecb186219e6730a1eb242570cb1816e954817d4c830930c19bf297e88198
GET /images/lp/574/slot7.png HTTP/1.1
Host: www2.tiltwin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www2.tiltwin.com/no/landing/157/574?A=6025
Cookie: tracking_data=%7B%22P%22%3A%223-ce66872okujs0n44hjlg%22%2C%22A%22%3A%226025%22%2C%22B%22%3A%22c4fc043d%22%2C%22aff_sub4%22%3A%22pub4a86e01147594bb7899003e2f1ca2b3c%22%2C%22email%22%3Anull%2C%22aff_sub2%22%3Anull%2C%22market%22%3A%22no%22%2C%22path%22%3A%22landing%5C%2F157%5C%2F574%22%2C%22country%22%3A%22NO%22%2C%22page%22%3A%22157%22%2C%22template%22%3A%22574%22%2C%22clickin_ip%22%3A%2291.90.42.154%22%2C%22token%22%3A%22lb958qg6%22%7D; tw_session=eyJpdiI6InlnNVUrQ003emxQczB5XC9ZSVB1bFZ3PT0iLCJ2YWx1ZSI6IkhcL1lvNnh0d1JGUDBcL2R3RmpmdkkwVXM5N2ZiZHo2M2NudG8rMXNhVkJqNzhTM3NUQldJNUF2MEgwRHJxOXRQWiIsIm1hYyI6ImZlNWE0OWZhZmZiY2E2YzAxZjJiNjI5MzViMzJkNjUxMjRjNzg5MjJkYWY4Y2QwNDllYzBlMjNjMmRjMDViNDMifQ%3D%3D; _ga=GA1.2.1178946162.1670145051; _gid=GA1.2.1736487591.1670145051; _gat_gtag_UA_144971979_1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.0 (Ubuntu)
date: Sun, 04 Dec 2022 09:10:53 GMT
content-type: image/png
content-length: 6171
last-modified: Wed, 05 Aug 2020 12:21:59 GMT
etag: "5f2aa467-181b"
x-cache-status: MISS
accept-ranges: bytes
X-Firefox-Spdy: h2
www2.tiltwin.com/images/lp/574/slot9.png
200 OK 7.2 kB URL HTTP/2 www2.tiltwin.com/images/lp/574/slot9.png
IP
File type PNG image data, 113 x 124, 8-bit colormap, non-interlaced\012- data
Hash b4d7ea28ce81068a3c6664e96bb057d5
ebdf73b8e7778a0712896db9d4fae05d12b9b11e
2d19c254dba701820142a0b208ee92df45620acaeef7f396f7ffd96b797a0683
GET /images/lp/574/slot9.png HTTP/1.1
Host: www2.tiltwin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www2.tiltwin.com/no/landing/157/574?A=6025
Cookie: tracking_data=%7B%22P%22%3A%223-ce66872okujs0n44hjlg%22%2C%22A%22%3A%226025%22%2C%22B%22%3A%22c4fc043d%22%2C%22aff_sub4%22%3A%22pub4a86e01147594bb7899003e2f1ca2b3c%22%2C%22email%22%3Anull%2C%22aff_sub2%22%3Anull%2C%22market%22%3A%22no%22%2C%22path%22%3A%22landing%5C%2F157%5C%2F574%22%2C%22country%22%3A%22NO%22%2C%22page%22%3A%22157%22%2C%22template%22%3A%22574%22%2C%22clickin_ip%22%3A%2291.90.42.154%22%2C%22token%22%3A%22lb958qg6%22%7D; tw_session=eyJpdiI6InlnNVUrQ003emxQczB5XC9ZSVB1bFZ3PT0iLCJ2YWx1ZSI6IkhcL1lvNnh0d1JGUDBcL2R3RmpmdkkwVXM5N2ZiZHo2M2NudG8rMXNhVkJqNzhTM3NUQldJNUF2MEgwRHJxOXRQWiIsIm1hYyI6ImZlNWE0OWZhZmZiY2E2YzAxZjJiNjI5MzViMzJkNjUxMjRjNzg5MjJkYWY4Y2QwNDllYzBlMjNjMmRjMDViNDMifQ%3D%3D; _ga=GA1.2.1178946162.1670145051; _gid=GA1.2.1736487591.1670145051; _gat_gtag_UA_144971979_1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.0 (Ubuntu)
date: Sun, 04 Dec 2022 09:10:53 GMT
content-type: image/png
content-length: 7165
last-modified: Wed, 05 Aug 2020 12:22:04 GMT
etag: "5f2aa46c-1bfd"
x-cache-status: MISS
accept-ranges: bytes
X-Firefox-Spdy: h2
www2.tiltwin.com/images/lp/574/win_sym.png
200 OK 12 kB URL HTTP/2 www2.tiltwin.com/images/lp/574/win_sym.png
IP
File type PNG image data, 120 x 120, 8-bit colormap, non-interlaced\012- data
Hash 525d8bd6e69df2cac302047536b7037a
ef3510e45c5760c6db37a0b43b8ac07dda5da757
6f3b59cfa1a54fd4790e62f20830d525c4fd0b8ea6e8dd9d214e176b3b1d02ce
GET /images/lp/574/win_sym.png HTTP/1.1
Host: www2.tiltwin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www2.tiltwin.com/no/landing/157/574?A=6025
Cookie: tracking_data=%7B%22P%22%3A%223-ce66872okujs0n44hjlg%22%2C%22A%22%3A%226025%22%2C%22B%22%3A%22c4fc043d%22%2C%22aff_sub4%22%3A%22pub4a86e01147594bb7899003e2f1ca2b3c%22%2C%22email%22%3Anull%2C%22aff_sub2%22%3Anull%2C%22market%22%3A%22no%22%2C%22path%22%3A%22landing%5C%2F157%5C%2F574%22%2C%22country%22%3A%22NO%22%2C%22page%22%3A%22157%22%2C%22template%22%3A%22574%22%2C%22clickin_ip%22%3A%2291.90.42.154%22%2C%22token%22%3A%22lb958qg6%22%7D; tw_session=eyJpdiI6InlnNVUrQ003emxQczB5XC9ZSVB1bFZ3PT0iLCJ2YWx1ZSI6IkhcL1lvNnh0d1JGUDBcL2R3RmpmdkkwVXM5N2ZiZHo2M2NudG8rMXNhVkJqNzhTM3NUQldJNUF2MEgwRHJxOXRQWiIsIm1hYyI6ImZlNWE0OWZhZmZiY2E2YzAxZjJiNjI5MzViMzJkNjUxMjRjNzg5MjJkYWY4Y2QwNDllYzBlMjNjMmRjMDViNDMifQ%3D%3D; _ga=GA1.2.1178946162.1670145051; _gid=GA1.2.1736487591.1670145051; _gat_gtag_UA_144971979_1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.0 (Ubuntu)
date: Sun, 04 Dec 2022 09:10:53 GMT
content-type: image/png
content-length: 11878
last-modified: Wed, 05 Aug 2020 12:22:09 GMT
etag: "5f2aa471-2e66"
x-cache-status: MISS
accept-ranges: bytes
X-Firefox-Spdy: h2
www2.tiltwin.com/images/lp/574/winline.png
200 OK 6.2 kB URL HTTP/2 www2.tiltwin.com/images/lp/574/winline.png
IP
File type PNG image data, 622 x 178, 8-bit colormap, non-interlaced\012- data
Hash b34e98c0e313ed03e192a7af5aef6dc0
83e248a726903fb3740991333564ab320e914486
291dc37728ccc14689e9cd0d509710aebb63d2bb284b7608e7c538f721909fc9
GET /images/lp/574/winline.png HTTP/1.1
Host: www2.tiltwin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www2.tiltwin.com/no/landing/157/574?A=6025
Cookie: tracking_data=%7B%22P%22%3A%223-ce66872okujs0n44hjlg%22%2C%22A%22%3A%226025%22%2C%22B%22%3A%22c4fc043d%22%2C%22aff_sub4%22%3A%22pub4a86e01147594bb7899003e2f1ca2b3c%22%2C%22email%22%3Anull%2C%22aff_sub2%22%3Anull%2C%22market%22%3A%22no%22%2C%22path%22%3A%22landing%5C%2F157%5C%2F574%22%2C%22country%22%3A%22NO%22%2C%22page%22%3A%22157%22%2C%22template%22%3A%22574%22%2C%22clickin_ip%22%3A%2291.90.42.154%22%2C%22token%22%3A%22lb958qg6%22%7D; tw_session=eyJpdiI6InlnNVUrQ003emxQczB5XC9ZSVB1bFZ3PT0iLCJ2YWx1ZSI6IkhcL1lvNnh0d1JGUDBcL2R3RmpmdkkwVXM5N2ZiZHo2M2NudG8rMXNhVkJqNzhTM3NUQldJNUF2MEgwRHJxOXRQWiIsIm1hYyI6ImZlNWE0OWZhZmZiY2E2YzAxZjJiNjI5MzViMzJkNjUxMjRjNzg5MjJkYWY4Y2QwNDllYzBlMjNjMmRjMDViNDMifQ%3D%3D; _ga=GA1.2.1178946162.1670145051; _gid=GA1.2.1736487591.1670145051; _gat_gtag_UA_144971979_1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.0 (Ubuntu)
date: Sun, 04 Dec 2022 09:10:53 GMT
content-type: image/png
content-length: 6182
last-modified: Wed, 05 Aug 2020 12:22:15 GMT
etag: "5f2aa477-1826"
x-cache-status: MISS
accept-ranges: bytes
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F826f887d-ca78-40db-9b7d-6c693667c155.jpeg
200 OK 7.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F826f887d-ca78-40db-9b7d-6c693667c155.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c1a6f4805f59db44f9d3520d88701a58
6a0258e8c97ce09f1723382c8a16d9682b7dc50c
ae120df5e96352c6998c24c69c709dfd2b01a7ff8a7b935d496757fd7661f2f5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F826f887d-ca78-40db-9b7d-6c693667c155.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 7503
x-amzn-requestid: a4120308-c51e-4cff-99c2-90e86018b05d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cgZjCGkVIAMFpsw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6389a2e0-6fdf362a6d32449239476155;Sampled=0
x-amzn-remapped-date: Fri, 02 Dec 2022 07:01:52 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: dy619jlSTwCjwDhGuLmwTMcmuYj1Kg2oLA7xORyAYX8IHWimhNo6pw==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 07:23:21 GMT
age: 6458
etag: "6a0258e8c97ce09f1723382c8a16d9682b7dc50c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
d2i5a4y6yksdm0.cloudfront.net/js/js.cookie.js
200 OK 0 B URL HTTP/2 d2i5a4y6yksdm0.cloudfront.net/js/js.cookie.js
IP
GET /js/js.cookie.js HTTP/1.1
Host: d2i5a4y6yksdm0.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www2.tiltwin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
server: nginx/1.14.0 (Ubuntu)
last-modified: Sun, 13 May 2018 17:24:12 GMT
x-cache-status: MISS
content-encoding: gzip
date: Sun, 04 Dec 2022 06:38:47 GMT
etag: W/"5af874bc-f2e"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Tcdw61v4ahBYhbCEtCNB9EjoyqCP8pRqc5tli0aOVBreTXvxTJzdTg==
age: 14754
X-Firefox-Spdy: h2
cdn.addlnk.com/redirect.css
200 OK 0 B URL HTTP/2 cdn.addlnk.com/redirect.css
IP
GET /redirect.css HTTP/1.1
Host: cdn.addlnk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://f71b8a57.givemeprof.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 09:10:51 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=1680
etag: W/"3ae56d32551602b41f9046c14d1cfde2"
last-modified: Wed, 13 Mar 2019 00:03:12 GMT
x-amz-id-2: hoKGF2DENF0Fxpfk9aX2Txj0orTMbszygnDmGFSC4SoL/4C3WQsM9k4Y5ZmrshXNgXN64qzAUMY=
x-amz-request-id: 9NDC432NBG524RW1
cf-cache-status: HIT
age: 4474
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OuA7dyfCLwtNfphlhzdU%2B2sFxL8BUPpiD2iZST74IIIaQoqGKPKIvv3vw9d2UmeMrDMThI1zJl5BBP9kDRYtjZk3B6YP6e7%2ByK0WjGmBGUSK1C11lbSglWtUfXcNjfd54g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7743694e9a6fb4eb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www2.tiltwin.com/no/landing/157/574?A=6025
200 OK 0 B URL HTTP/2 www2.tiltwin.com/no/landing/157/574?A=6025
IP
GET /no/landing/157/574?A=6025 HTTP/1.1
Host: www2.tiltwin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://f71b8a57.givemeprof.com/
Connection: keep-alive
Cookie: tracking_data=%7B%22P%22%3A%223-ce66872okujs0n44hjlg%22%2C%22A%22%3A%226025%22%2C%22B%22%3A%22c4fc043d%22%2C%22aff_sub4%22%3A%22pub4a86e01147594bb7899003e2f1ca2b3c%22%2C%22email%22%3Anull%2C%22aff_sub2%22%3Anull%2C%22market%22%3A%22no%22%2C%22path%22%3A%22landing%5C%2F157%5C%2F574%22%2C%22country%22%3A%22NO%22%2C%22page%22%3A%22157%22%2C%22template%22%3A%22574%22%2C%22clickin_ip%22%3A%2291.90.42.154%22%2C%22token%22%3A%22lb958qg6%22%7D; tw_session=eyJpdiI6InlnNVUrQ003emxQczB5XC9ZSVB1bFZ3PT0iLCJ2YWx1ZSI6IkhcL1lvNnh0d1JGUDBcL2R3RmpmdkkwVXM5N2ZiZHo2M2NudG8rMXNhVkJqNzhTM3NUQldJNUF2MEgwRHJxOXRQWiIsIm1hYyI6ImZlNWE0OWZhZmZiY2E2YzAxZjJiNjI5MzViMzJkNjUxMjRjNzg5MjJkYWY4Y2QwNDllYzBlMjNjMmRjMDViNDMifQ%3D%3D
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.14.0 (Ubuntu)
date: Sun, 04 Dec 2022 09:10:53 GMT
content-type: text/html; charset=UTF-8
cache-control: private, must-revalidate
pragma: no-cache
expires: -1
x-cache-status: MISS
content-encoding: gzip
X-Firefox-Spdy: h2
stackpath.bootstrapcdn.com/bootstrap/4.1.1/css/bootstrap.min.css
200 OK 0 B URL HTTP/2 stackpath.bootstrapcdn.com/bootstrap/4.1.1/css/bootstrap.min.css
IP
GET /bootstrap/4.1.1/css/bootstrap.min.css HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www2.tiltwin.com
Connection: keep-alive
Referer: https://www2.tiltwin.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 09:10:53 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: SE
cdn-edgestorageid: 601, 617, 617
last-modified: Mon, 25 Jan 2021 22:04:05 GMT
cdn-cachedat: 2021-04-23 06:57:26
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cache-control: public, max-age=31919000
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
cdn-requestid: e08b1cbdcf9cea8e0be781815aa366a4
cdn-cache: HIT
cf-cache-status: HIT
age: 18252952
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7743695678fcb511-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
use.fontawesome.com/releases/v5.1.0/css/all.css
200 OK 0 B URL HTTP/2 use.fontawesome.com/releases/v5.1.0/css/all.css
IP
GET /releases/v5.1.0/css/all.css HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www2.tiltwin.com
Connection: keep-alive
Referer: https://www2.tiltwin.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 09:10:53 GMT
content-type: text/css
x-amz-id-2: iT4qNX9omFnIjOw/0z5EPAXexYWBSXZRc0uVkDhkTg1JnIgoLAJLXIKQWN+Os6NltZ4ILh3MS/U=
x-amz-request-id: KQDH2M2QDD8DS8RZ
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Wed, 30 Jun 2021 15:30:31 GMT
etag: W/"826c57385f3d35cfed5478ba7b1f5c03"
cache-control: max-age=31556926
cf-cache-status: HIT
age: 1368213
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XsXOMLJbNwxxuCV9%2BvCqAkOUqLXLzTqw8xbNzrUECF8MgB%2BHdOBUdyr7ZiHbRYs5MXwc9XzB3UAL6iLvfKVXbYKj%2Bu%2Fs99VyRijdp07Mj1gM%2FM0Vk5mJYhxjwY4h%2Bqau%2FvvGCbTo"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77436956d9f276f9-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
d2i5a4y6yksdm0.cloudfront.net/css/lp/574/style.css
200 OK 0 B URL HTTP/2 d2i5a4y6yksdm0.cloudfront.net/css/lp/574/style.css
IP
GET /css/lp/574/style.css HTTP/1.1
Host: d2i5a4y6yksdm0.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www2.tiltwin.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css
server: nginx/1.14.0 (Ubuntu)
last-modified: Tue, 06 Apr 2021 18:36:43 GMT
x-cache-status: MISS
content-encoding: gzip
date: Sun, 04 Dec 2022 06:50:56 GMT
etag: W/"606caa3b-23c2"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 5Ee9zTfGZ7op-jGxWEXYRZrjnZ-IPOtPBeTOg-bHhN-Pdh827ZB_0g==
age: 8732
X-Firefox-Spdy: h2
d2i5a4y6yksdm0.cloudfront.net/js/email.js
200 OK 0 B URL HTTP/2 d2i5a4y6yksdm0.cloudfront.net/js/email.js
IP
GET /js/email.js HTTP/1.1
Host: d2i5a4y6yksdm0.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www2.tiltwin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
server: nginx/1.14.0 (Ubuntu)
last-modified: Wed, 01 Apr 2020 16:25:34 GMT
x-cache-status: MISS
content-encoding: gzip
date: Sun, 04 Dec 2022 03:51:22 GMT
etag: W/"5e84c07e-1dec"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: pkjb3pEUoCo_H8elm-u6vWrhfVoYTP1XqX5R12c1MIW3kIkjxMWQhg==
age: 19888
X-Firefox-Spdy: h2
d2i5a4y6yksdm0.cloudfront.net/js/lp/574/createjs-2015.11.26.min.js
200 OK 0 B URL HTTP/2 d2i5a4y6yksdm0.cloudfront.net/js/lp/574/createjs-2015.11.26.min.js
IP
GET /js/lp/574/createjs-2015.11.26.min.js HTTP/1.1
Host: d2i5a4y6yksdm0.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www2.tiltwin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
server: nginx/1.14.0 (Ubuntu)
last-modified: Tue, 06 Apr 2021 22:27:11 GMT
x-cache-status: MISS
content-encoding: gzip
date: Sun, 04 Dec 2022 08:21:34 GMT
etag: W/"606ce03f-4d0d1"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: LXEeDfSlA7d-49k3BjCbcWH6rkuE7B9j9tC3K0rA-WrwNFDC8UrVFQ==
age: 3433
X-Firefox-Spdy: h2
tracker.tiltwin.com/rotate/194?P=3-ce66872okujs0n44hjlg&A=6025&B=c4fc043d&aff_sub4=pub4a86e01147594bb7899003e2f1ca2b3c&email=&aff_sub2=
302 Found 0 B URL HTTP/2 tracker.tiltwin.com/rotate/194?P=3-ce66872okujs0n44hjlg&A=6025&B=c4fc043d&aff_sub4=pub4a86e01147594bb7899003e2f1ca2b3c&email=&aff_sub2=
IP
GET /rotate/194?P=3-ce66872okujs0n44hjlg&A=6025&B=c4fc043d&aff_sub4=pub4a86e01147594bb7899003e2f1ca2b3c&email=&aff_sub2= HTTP/1.1
Host: tracker.tiltwin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://f71b8a57.givemeprof.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx/1.14.0 (Ubuntu)
date: Sun, 04 Dec 2022 09:10:52 GMT
content-type: text/html; charset=UTF-8
location: https://www2.tiltwin.com/no/landing/157/574?A=6025
set-cookie: tracking_data=%7B%22P%22%3A%223-ce66872okujs0n44hjlg%22%2C%22A%22%3A%226025%22%2C%22B%22%3A%22c4fc043d%22%2C%22aff_sub4%22%3A%22pub4a86e01147594bb7899003e2f1ca2b3c%22%2C%22email%22%3Anull%2C%22aff_sub2%22%3Anull%2C%22market%22%3A%22no%22%2C%22path%22%3A%22landing%5C%2F157%5C%2F574%22%2C%22country%22%3A%22NO%22%2C%22page%22%3A%22157%22%2C%22template%22%3A%22574%22%2C%22clickin_ip%22%3A%2291.90.42.154%22%2C%22token%22%3A%22lb958qg6%22%7D; expires=Mon, 05-Dec-2022 09:10:52 GMT; Max-Age=86400; path=/; domain=tiltwin.com
impression_data=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=tiltwin.com
tw_session=eyJpdiI6InlnNVUrQ003emxQczB5XC9ZSVB1bFZ3PT0iLCJ2YWx1ZSI6IkhcL1lvNnh0d1JGUDBcL2R3RmpmdkkwVXM5N2ZiZHo2M2NudG8rMXNhVkJqNzhTM3NUQldJNUF2MEgwRHJxOXRQWiIsIm1hYyI6ImZlNWE0OWZhZmZiY2E2YzAxZjJiNjI5MzViMzJkNjUxMjRjNzg5MjJkYWY4Y2QwNDllYzBlMjNjMmRjMDViNDMifQ%3D%3D; expires=Mon, 12-Dec-2022 17:10:52 GMT; Max-Age=720000; path=/; domain=tiltwin.com
cache-control: private, must-revalidate
pragma: no-cache
expires: -1
X-Firefox-Spdy: h2
stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js
200 OK 0 B URL HTTP/2 stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js
IP
GET /bootstrap/4.1.1/js/bootstrap.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www2.tiltwin.com
Connection: keep-alive
Referer: https://www2.tiltwin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 09:10:53 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: SE
cdn-edgestorageid: 601, 617, 617
last-modified: Mon, 25 Jan 2021 22:04:05 GMT
cdn-cachedat: 2021-04-23 06:57:21
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cache-control: public, max-age=31919000
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
cdn-requestid: 1e93abceae33761bd0c8b59514af5e91
cdn-cache: HIT
cf-cache-status: HIT
age: 18252952
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 774369568918b511-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
35.241.7.124
18.184.180.82
23.36.76.226
93.184.220.29
34.147.37.248
104.18.20.226
52.48.239.44