inoradde.com/4254940/
200 OK 923 B IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (481)
Hash 2375c739cb3e6886fff64a848922f0f0
a0a44cbf2ffdb62cc22c1700f0201358849e1483
e801b47bdfb4d1a46e750a0f8d49be3f7d47137ba018d7c538fe0e610111ef88
Analyzer Verdict Alert quad9 Sinkholed
GET /4254940/ HTTP/1.1
Host: inoradde.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 21:21:01 GMT
Content-Type: text/html; charset=utf8
Transfer-Encoding: chunked
Connection: keep-alive
X-Trace-Id: eb1e826b8c2edc1602d0ec46d1b315ca
Link: <https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://my.rtmark.net>; rel="preconnect dns-prefetch", <https://voices-kerence.com>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://diromalxx.com>; rel="preconnect dns-prefetch"
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding
Access-Control-Max-Age: 86400
Pragma: no-cache
Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0
Expires: Tue, 11 Jan 1994 10:00:00 GMT
Set-Cookie: OAID=bd54b7ae0a3d40dcb42fcb35e4fe7668; expires=Sun, 26 Nov 2023 21:21:01 GMT; path=/
oaidts=1669497661; expires=Sun, 26 Nov 2023 21:21:01 GMT; path=/
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
Timing-Allow-Origin: *, *
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7c60904d097cde276e4e5632cef1b9f1
4f805026462589345d85e8df2d18eafba6237504
12af026999398f4976749e320667d43da3f99b7a2e8254aca7a410a964a106aa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "12AF026999398F4976749E320667D43DA3F99B7A2E8254ACA7A410A964A106AA"
Last-Modified: Thu, 24 Nov 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2735
Expires: Sat, 26 Nov 2022 22:06:36 GMT
Date: Sat, 26 Nov 2022 21:21:01 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 15b59d5e62caedb4bec3ba6724906c1e
960f801e608a56fdd11449f4face29f62cad2b21
8c72a45737c2eeddf328b0ed3236f3243551d904e94ec9dd7254972ebfb9229e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5546
Cache-Control: max-age=139353
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 21:21:01 GMT
Etag: "6381eaec-1d7"
Expires: Mon, 28 Nov 2022 12:03:34 GMT
Last-Modified: Sat, 26 Nov 2022 10:31:08 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 71f9c681a82440fd55e76c780a20e55d
3147768cfbcdd06e0c6e69684292e68e99917a80
5ea71ce6dd9e927f9bb3f97f59cc1ac7dc25a949024815965b29bc5835614786
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5EA71CE6DD9E927F9BB3F97F59CC1AC7DC25A949024815965B29BC5835614786"
Last-Modified: Sat, 26 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3412
Expires: Sat, 26 Nov 2022 22:17:53 GMT
Date: Sat, 26 Nov 2022 21:21:01 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 567df7db606cf5d0871aa5bc9311b6da
4263faac7cbab2fcaf6661911dcad5091c06be17
e9650e1fdc46fc8678708ddcc37ab369c7a6d50489a004be896f20c7a3a644b0
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 26 Nov 2022 21:17:33 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 208
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: fIBhuyXLgVbhU1KsgMTqjOWcDxydreEXGgVQ4QT9NajcHYvbG+67zl5qFkFpVsCl5n86yHyN4GXcOj326m93fw==
x-amz-request-id: XNDXMXRARGG9J04R
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 26 Nov 2022 20:44:22 GMT
age: 2199
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 21:21:01 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
voices-kerence.com/26df10eb-34ec-4879-9dd6-7903ddd1b3d9?zoneid=4254940&bannerid=15819990&browser=firefox&os=windows&user_activity=high&zone_type={zone_type}&campaignid=6347981&useragent=Mozilla/5.0%20(Windows%20NT%2010.0;%20Win64;%20x64;%20rv:105.0)%20Gecko/20100101%20Firefox/105.0&language=en&connectiontype=broadband&cost=0.003150&visitor_id=620480762168480689&rdk=rk1
302 Found 0 B URL HTTP/2 voices-kerence.com/26df10eb-34ec-4879-9dd6-7903ddd1b3d9?zoneid=4254940&bannerid=15819990&browser=firefox&os=windows&user_activity=high&zone_type={zone_type}&campaignid=6347981&useragent=Mozilla/5.0%20(Windows%20NT%2010.0;%20Win64;%20x64;%20rv:105.0)%20Gecko/20100101%20Firefox/105.0&language=en&connectiontype=broadband&cost=0.003150&visitor_id=620480762168480689&rdk=rk1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /26df10eb-34ec-4879-9dd6-7903ddd1b3d9?zoneid=4254940&bannerid=15819990&browser=firefox&os=windows&user_activity=high&zone_type={zone_type}&campaignid=6347981&useragent=Mozilla/5.0%20(Windows%20NT%2010.0;%20Win64;%20x64;%20rv:105.0)%20Gecko/20100101%20Firefox/105.0&language=en&connectiontype=broadband&cost=0.003150&visitor_id=620480762168480689&rdk=rk1 HTTP/1.1
Host: voices-kerence.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Sat, 26 Nov 2022 21:21:01 GMT
content-length: 0
cache-control: no-store, no-cache, pre-check=0, post-check=0
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://rbn-bc-7s.lptrak.com/redirect.aspx?pid=1360468&lpid=16823&bid=9057&clickid=wj3mdoajo2k0ploki2dbr40e
pragma: no-cache
set-cookie: 26df10eb-34ec-4879-9dd6-7903ddd1b3d9-v4=0TfDAOTlhT87fK-kiGVyYLAgiwuew2cVzxrgC_8OkIc; Max-Age=86400; Expires=Sun, 27-Nov-2022 21:21:01 GMT; Domain=voices-kerence.com; Path=/; Secure; HttpOnly;SameSite=None
cc-v4=OE1uTZA0AGErlXIuE7sE%2FPQnHxBubjWvJRBkwkES6SvFE3UPeV%2FqS%2F%2BQspFhowth5FEmtYR7LU8MMDcNh%2BI%2FSgyzw%2F%2BZYlPwWXzUnxrU3zEKRgoLkIr4VJJgOFONdev%2BE3rP%2BH%2FLorLROAjXRu%2F38A%3D%3D; Max-Age=31536000; Expires=Sun, 26-Nov-2023 21:21:01 GMT; Domain=voices-kerence.com; Path=/; Secure; HttpOnly;SameSite=None
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e413346bdf4cea48847886fc7871e4d8
5d89ec3ae90ebf5069321bfc6fb0abeff77db028
85398a907af9d7c7041b28ec00595c5056ee3ecb51d9f09e4e75b6bfa0859d84
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "85398A907AF9D7C7041B28EC00595C5056EE3ECB51D9F09E4E75B6BFA0859D84"
Last-Modified: Sat, 26 Nov 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6158
Expires: Sat, 26 Nov 2022 23:03:39 GMT
Date: Sat, 26 Nov 2022 21:21:01 GMT
Connection: keep-alive
inoradde.com/favicon.ico
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /favicon.ico HTTP/1.1
Host: inoradde.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Cookie: OAID=bd54b7ae0a3d40dcb42fcb35e4fe7668; oaidts=1669497661
HTTP/1.1 204 No Content
Server: nginx
Date: Sat, 26 Nov 2022 21:21:01 GMT
Connection: keep-alive
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Pragma: public
Cache-Control: max-age=315360000, public, must-revalidate, proxy-revalidate
my.rtmark.net/img.gif?f=merge&userId=bd54b7ae0a3d40dcb42fcb35e4fe7668
200 OK 43 B URL HTTP/2 my.rtmark.net/img.gif?f=merge&userId=bd54b7ae0a3d40dcb42fcb35e4fe7668
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
POST /img.gif?f=merge&userId=bd54b7ae0a3d40dcb42fcb35e4fe7668 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 21:21:01 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: null
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=bd54b7ae0a3d40dcb42fcb35e4fe7668; expires=Sun, 26 Nov 2023 21:21:01 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
rbn-bc-7s.lptrak.com/redirect.aspx?pid=1360468&lpid=16823&bid=9057&clickid=wj3mdoajo2k0ploki2dbr40e
307 Temporary Redirect 0 B URL HTTP/2 rbn-bc-7s.lptrak.com/redirect.aspx?pid=1360468&lpid=16823&bid=9057&clickid=wj3mdoajo2k0ploki2dbr40e
IP
ASN #20940 Akamai International B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /redirect.aspx?pid=1360468&lpid=16823&bid=9057&clickid=wj3mdoajo2k0ploki2dbr40e HTTP/1.1
Host: rbn-bc-7s.lptrak.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 307 Temporary Redirect
content-type: text/html
content-length: 0
location: https://rbnwc.lpmediastorage.com/no/?btag=658915_11B172E10FE64BAD9D2C8BC783293BE8&clickid=wj3mdoajo2k0ploki2dbr40e&MSID=1360468&BID=9057
p3p: CP="This is not a P3P policy! It is used to bypass IEs problematic handling of cookies"
x-aspnet-version: 4.0.30319
request-context: appId=cid-v1:83ffbda4-9458-475e-90ec-4427cfb5c3b0
access-control-expose-headers: Request-Context
expires: Sat, 26 Nov 2022 21:21:02 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Sat, 26 Nov 2022 21:21:02 GMT
set-cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a1360468%2c%22BID%22%3a9057%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1669497662020)%5c%2f%22%2c%22CookieTag%22%3a%2290571360468451240919C202211262121%22%7d%5d; SameSite=None;; domain=.lptrak.com; expires=Fri, 31-Dec-9999 23:59:59 GMT; path=/; secure
NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%22546707926%7c1%22%7d%5d; domain=.lptrak.com; expires=Mon, 26-Nov-3021 21:21:02 GMT; path=/; secure; SameSite=Strict
server-timing: cdn-cache; desc=MISS, edge; dur=20, origin; dur=58
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash 0dd2ab4a8da213b50f12b85fe0c9ffd0
ef029708563ea7aa599dcc783e5271d91e7a3f05
1c0e99e9763327de28b7565708d6b96beafb51edd590d90da7f200ab803102d1
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6313
Cache-Control: max-age=156316
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 21:21:02 GMT
Etag: "63822a31-116"
Expires: Mon, 28 Nov 2022 16:46:18 GMT
Last-Modified: Sat, 26 Nov 2022 15:01:05 GMT
Server: ECS (amb/6BA5)
X-Cache: HIT
Content-Length: 278
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: ETag, Content-Type, Content-Length, Last-Modified, Alert, Backoff, Pragma, Expires, Retry-After, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 26 Nov 2022 21:08:54 GMT
cache-control: public,max-age=3600
age: 728
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash d3df71aab146eefc49acb608796aab63
8401892995193919376dfcd798b09c8261579454
a616c1e54e896576601e6107c1814adbebf35364d8ed807cdd89ac36b8200c88
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2163
Cache-Control: max-age=130912
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 21:21:02 GMT
Etag: "6381d72b-1d7"
Expires: Mon, 28 Nov 2022 09:42:54 GMT
Last-Modified: Sat, 26 Nov 2022 09:06:51 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Ba6LZ4gsFzzcE627R+/jQQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: sGUTuZ8mtIhyEEo6gmlCOTcFjU0=
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 619fa0039b94697fc8a5bd24f57e8aa2
53a366391a51d625029cc6d32fb4e8b6060990fd
dff604305831a0399aa44b2fac806e43512afa846569ba6e5685eca6495d9fa5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 21:21:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
rbnwc.lpmediastorage.com/492.1669191633059.js
200 OK 5.3 kB URL HTTP/2 rbnwc.lpmediastorage.com/492.1669191633059.js
IP
File type ASCII text, with very long lines (14252), with no line terminators
Hash 2f772c17cee7c15f2e6086ea3a82dcf6
cd69954e7843a69ed7d9e79514aeb64361e3a29d
e54fc37d2d1564b7796c2bf620592080bd5f8bb762c9ea53e6d0638ca8083100
GET /492.1669191633059.js HTTP/1.1
Host: rbnwc.lpmediastorage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/no/?btag=658915_11B172E10FE64BAD9D2C8BC783293BE8&clickid=wj3mdoajo2k0ploki2dbr40e&MSID=1360468&BID=9057
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 21:21:03 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"637dd7ff-37ac"
last-modified: Wed, 23 Nov 2022 08:21:19 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 455
expires: Sun, 27 Nov 2022 01:21:03 GMT
cache-control: public, max-age=14400
server: cloudflare
cf-ray: 7705abeb9bc9fac0-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash 9a414ea815fd2afd8aec0b164f9bc4be
47774ebd7acc4f2074560a12ea0b63a4e8a4a9e9
0f0bbf4aa40b597c538daa3882b86a4608379e8f813f569accfda566ba956577
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3799
Cache-Control: max-age=150185
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 21:21:03 GMT
Etag: "63821c11-118"
Expires: Mon, 28 Nov 2022 15:04:08 GMT
Last-Modified: Sat, 26 Nov 2022 14:00:49 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 280
fonts.googleapis.com/css2?family=Roboto:wght@400;500;700;900&display=swap
200 OK 1.2 kB URL HTTP/2 fonts.googleapis.com/css2?family=Roboto:wght@400;500;700;900&display=swap
IP
Hash 0d19043ef502e933ccb07407d35e3ca9
518fce0d14e84a05d8b3c7d2da0c7857f6d211d3
7b7f8d456115e714c6ffadefd5d20bdd5a1fc18064523a7517533a808035a30f
GET /css2?family=Roboto:wght@400;500;700;900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 26 Nov 2022 21:21:03 GMT
date: Sat, 26 Nov 2022 21:21:03 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
joxi.imgsrcdata.com/content-svg/flags/rabona/no.png
200 OK 458 B URL HTTP/2 joxi.imgsrcdata.com/content-svg/flags/rabona/no.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 89664d0e7347a301ed802a8a5447aaa5
dadd728bfa87ca30d63a0bd7743f8e9515bcb5c5
db9c1226ffcc0e3e469b8e9242c389ed32e69ab218918ad6879cbc8140279f28
GET /content-svg/flags/rabona/no.png HTTP/1.1
Host: joxi.imgsrcdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 21:21:03 GMT
content-type: image/webp
content-length: 458
access-control-allow-origin: *
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=823
content-disposition: inline; filename="no.webp"
etag: "60102d17-337"
last-modified: Tue, 26 Jan 2021 14:54:15 GMT
vary: Accept
cf-cache-status: HIT
age: 342619
accept-ranges: bytes
server: cloudflare
cf-ray: 7705abed7886b4ff-OSL
X-Firefox-Spdy: h2
joxi.imgsrcdata.com/landings/rabona/web_components/images/world-cup-prizes/prize_champions-league_2x.png
200 OK 31 kB URL HTTP/2 joxi.imgsrcdata.com/landings/rabona/web_components/images/world-cup-prizes/prize_champions-league_2x.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 2b5870e66cb3abbeccbe7db8021297b1
a0ff1ad6f14af2ea2fd45dfe221c366b0d8d7775
ea2bde9f9a3768859d584c6b948ae9d1f4e492382e496c564abf95ba3018e6a7
GET /landings/rabona/web_components/images/world-cup-prizes/prize_champions-league_2x.png HTTP/1.1
Host: joxi.imgsrcdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 21:21:03 GMT
content-type: image/webp
content-length: 31170
access-control-allow-origin: *
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=34923
content-disposition: inline; filename="prize_champions-league_2x.webp"
etag: "6357d318-886b"
last-modified: Tue, 25 Oct 2022 12:14:16 GMT
vary: Accept
cf-cache-status: HIT
age: 723029
accept-ranges: bytes
server: cloudflare
cf-ray: 7705abed98aab4ff-OSL
X-Firefox-Spdy: h2
joxi.imgsrcdata.com/landings/rabona/web_components/images/world-cup-prizes/prize_holidays_2x.png
200 OK 24 kB URL HTTP/2 joxi.imgsrcdata.com/landings/rabona/web_components/images/world-cup-prizes/prize_holidays_2x.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 208c02c90f77e71efcb51f01ded20311
93e27e93b19fc20415294b4e91c6a6969833a3f7
bdddc61dab64a211198a836fc2d6655321018f527e91055172b173fa2bee3e94
GET /landings/rabona/web_components/images/world-cup-prizes/prize_holidays_2x.png HTTP/1.1
Host: joxi.imgsrcdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 21:21:03 GMT
content-type: image/webp
content-length: 24224
access-control-allow-origin: *
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=26094
content-disposition: inline; filename="prize_holidays_2x.webp"
etag: "6357d318-65ee"
last-modified: Tue, 25 Oct 2022 12:14:16 GMT
vary: Accept
cf-cache-status: HIT
age: 718277
accept-ranges: bytes
server: cloudflare
cf-ray: 7705abed98bdb4ff-OSL
X-Firefox-Spdy: h2
rbnwc.lpmediastorage.com/lang.1669191633059.js
200 OK 31 kB URL HTTP/2 rbnwc.lpmediastorage.com/lang.1669191633059.js
IP
File type ASCII text, with very long lines (2998), with no line terminators
Hash 5c2ebd8206d7fa3dcec8542953cd86b4
bb4d01c863771aa72a17f27d61ab29213064e52b
ed1ced93e4b3c2352c7f6063c7bb1daad44f8219fa3efc721bd4131bc39651c7
GET /lang.1669191633059.js HTTP/1.1
Host: rbnwc.lpmediastorage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/no/?btag=658915_11B172E10FE64BAD9D2C8BC783293BE8&clickid=wj3mdoajo2k0ploki2dbr40e&MSID=1360468&BID=9057
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 21:21:03 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"637dd7ff-bb6"
last-modified: Wed, 23 Nov 2022 08:21:19 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 455
expires: Sun, 27 Nov 2022 01:21:03 GMT
cache-control: public, max-age=14400
server: cloudflare
cf-ray: 7705abeb9bcafac0-OSL
content-encoding: br
X-Firefox-Spdy: h2
joxi.imgsrcdata.com/landings/rabona/web_components/images/world-cup-prizes/prize_bitcoit_2x.png
200 OK 176 kB URL HTTP/2 joxi.imgsrcdata.com/landings/rabona/web_components/images/world-cup-prizes/prize_bitcoit_2x.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Size 176 kB (176184 bytes)
Hash cd333055936f7bd7159902a6d84599a3
ad4f31e4964e87cf0ad605563d9b31d4a7385431
7d9f8d01dc69da1f6d063558a714c3a26b02e068a42c76c078e3e1bc40dae164
GET /landings/rabona/web_components/images/world-cup-prizes/prize_bitcoit_2x.png HTTP/1.1
Host: joxi.imgsrcdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 21:21:03 GMT
content-type: image/webp
content-length: 176184
access-control-allow-origin: *
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=189285
content-disposition: inline; filename="prize_bitcoit_2x.webp"
etag: "6357d318-2e365"
last-modified: Tue, 25 Oct 2022 12:14:16 GMT
vary: Accept
cf-cache-status: HIT
age: 723029
accept-ranges: bytes
server: cloudflare
cf-ray: 7705abed98bfb4ff-OSL
X-Firefox-Spdy: h2
rbnwc.lpmediastorage.com/942.1669191633059.js
200 OK 357 kB URL HTTP/2 rbnwc.lpmediastorage.com/942.1669191633059.js
IP
File type Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Size 357 kB (357258 bytes)
Hash ec65a62fabc545a4845543a4112771e3
50b80e69153e473abf15e4cbbb0a235170858bd8
a1186feb04ba4b13f89140cb580b1a35b9fcb39b1ab1f039fd218aec5c115ea9
GET /942.1669191633059.js HTTP/1.1
Host: rbnwc.lpmediastorage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/no/?btag=658915_11B172E10FE64BAD9D2C8BC783293BE8&clickid=wj3mdoajo2k0ploki2dbr40e&MSID=1360468&BID=9057
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 21:21:03 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=424564
etag: W/"637dd7ff-67a74"
last-modified: Wed, 23 Nov 2022 08:21:19 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 455
expires: Sun, 27 Nov 2022 01:21:03 GMT
cache-control: public, max-age=14400
server: cloudflare
cf-ray: 7705abeb9bcbfac0-OSL
content-encoding: br
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto+Condensed:400,400i,700&display=swap
200 OK 18 kB URL HTTP/2 fonts.googleapis.com/css?family=Roboto+Condensed:400,400i,700&display=swap
IP
Hash 0efbde78ed43e3555e34f2d7e35a9e3c
96b2e3d592d92e9ca1ea408e42b63df17f39cd5f
76701dabaac17d7375bf5511dfbcb1c6a22ed530e059ac5211040801395cc701
GET /css?family=Roboto+Condensed:400,400i,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 26 Nov 2022 21:21:03 GMT
date: Sat, 26 Nov 2022 21:21:03 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
joxi.imgsrcdata.com/landings/rabona/web_components/bg/world-cup-landing/offer_bg.png
200 OK 364 kB URL HTTP/2 joxi.imgsrcdata.com/landings/rabona/web_components/bg/world-cup-landing/offer_bg.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Size 364 kB (363844 bytes)
Hash 2f40d7ff017e57aebb72a41a54069669
85eb63ee1c8447059e68d32be2524a76bd7db83a
143a981873ee828840e10ed944af31149a0f72a76e7dbaceda6ab67dab5dbfa0
GET /landings/rabona/web_components/bg/world-cup-landing/offer_bg.png HTTP/1.1
Host: joxi.imgsrcdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 21:21:03 GMT
content-type: image/webp
content-length: 363844
access-control-allow-origin: *
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=387867
content-disposition: inline; filename="offer_bg.webp"
etag: "6357d31d-5eb1b"
last-modified: Tue, 25 Oct 2022 12:14:21 GMT
vary: Accept
cf-cache-status: HIT
age: 723029
accept-ranges: bytes
server: cloudflare
cf-ray: 7705abeda8cfb4ff-OSL
X-Firefox-Spdy: h2
joxi.imgsrcdata.com/landings/rabona/web_components/images/world-cup-prizes/prize_official-shirts_2x.webp
200 OK 30 kB URL HTTP/2 joxi.imgsrcdata.com/landings/rabona/web_components/images/world-cup-prizes/prize_official-shirts_2x.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash b334a21c602eab15a2497f6ca0c5814e
246f5bd92aac1f6fceaa936da05747348f99a946
c343dab054ae1fdecddee80f147d2ef2663ea1166ae27dacdbd066b883aa83a7
GET /landings/rabona/web_components/images/world-cup-prizes/prize_official-shirts_2x.webp HTTP/1.1
Host: joxi.imgsrcdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 21:21:03 GMT
content-type: image/webp
content-length: 29558
last-modified: Tue, 25 Oct 2022 12:14:21 GMT
etag: "6357d31d-7376"
access-control-allow-origin: *
cf-cache-status: HIT
age: 723029
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7705abee298fb4ff-OSL
X-Firefox-Spdy: h2
joxi.imgsrcdata.com/landings/rabona/web_components/images/world-cup-prizes/prize_holidays_2x.webp
200 OK 27 kB URL HTTP/2 joxi.imgsrcdata.com/landings/rabona/web_components/images/world-cup-prizes/prize_holidays_2x.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 4b715beb3b07e6ef7121e75e6eb17841
559f56493de681788e9177bcc93025b67d326cb5
653154cc70106fe67893c78971dd479512080eb38bdfa35e394c21f8ffb77b19
GET /landings/rabona/web_components/images/world-cup-prizes/prize_holidays_2x.webp HTTP/1.1
Host: joxi.imgsrcdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 21:21:03 GMT
content-type: image/webp
content-length: 26798
last-modified: Tue, 25 Oct 2022 12:14:21 GMT
etag: "6357d31d-68ae"
access-control-allow-origin: *
cf-cache-status: HIT
age: 723029
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7705abee198cb4ff-OSL
X-Firefox-Spdy: h2
joxi.imgsrcdata.com/landings/rabona/web_components/images/world-cup-prizes/prize_champions-league_2x.webp
200 OK 45 kB URL HTTP/2 joxi.imgsrcdata.com/landings/rabona/web_components/images/world-cup-prizes/prize_champions-league_2x.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 56b4cdef4512497f7e54c28ec6a648e6
b9acaeb583debe36cd5f5555e4a2bf5bf452c36b
32a336fb039d5e08ec954a9ba9e808e977a688fe283483745cec532ac50b49ce
GET /landings/rabona/web_components/images/world-cup-prizes/prize_champions-league_2x.webp HTTP/1.1
Host: joxi.imgsrcdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 21:21:03 GMT
content-type: image/webp
content-length: 44816
last-modified: Tue, 25 Oct 2022 12:14:16 GMT
etag: "6357d318-af10"
access-control-allow-origin: *
cf-cache-status: HIT
age: 723029
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7705abee1989b4ff-OSL
X-Firefox-Spdy: h2
joxi.imgsrcdata.com/landings/rabona/web_components/images/world-cup-prizes/prize_bitcoit_2x.webp
200 OK 188 kB URL HTTP/2 joxi.imgsrcdata.com/landings/rabona/web_components/images/world-cup-prizes/prize_bitcoit_2x.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Size 188 kB (188138 bytes)
Hash fb32d198244f858d040d39097f390e83
da9beb8b020f3c3ae8a6576d6b7e8f9b5c1751e1
2fa83cad0ab5404b29c9736a1e19ce6c529dcd1f2884ed819c8ab73bfa3c97fb
GET /landings/rabona/web_components/images/world-cup-prizes/prize_bitcoit_2x.webp HTTP/1.1
Host: joxi.imgsrcdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 21:21:03 GMT
content-type: image/webp
content-length: 188138
last-modified: Tue, 25 Oct 2022 12:14:21 GMT
etag: "6357d31d-2deea"
access-control-allow-origin: *
cf-cache-status: HIT
age: 723029
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7705abee198eb4ff-OSL
X-Firefox-Spdy: h2
joxi.imgsrcdata.com/landings/rabona/web_components/images/world-cup-prizes/prize_iphone-rabona_2x.webp
200 OK 17 kB URL HTTP/2 joxi.imgsrcdata.com/landings/rabona/web_components/images/world-cup-prizes/prize_iphone-rabona_2x.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash b78e3a413988d60fd6966556f291857a
25bf1c21b48a26e0adc50b4f0c2792d99539e6df
3ed5e7c864dc2b08549fde9df2f526a3c00b223515083e97843a19c125d63770
GET /landings/rabona/web_components/images/world-cup-prizes/prize_iphone-rabona_2x.webp HTTP/1.1
Host: joxi.imgsrcdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 21:21:03 GMT
content-type: image/webp
content-length: 16698
last-modified: Tue, 25 Oct 2022 12:14:21 GMT
etag: "6357d31d-413a"
access-control-allow-origin: *
cf-cache-status: HIT
age: 723029
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7705abee2992b4ff-OSL
X-Firefox-Spdy: h2
joxi.imgsrcdata.com/landings/rabona/web_components/bg/world-cup-landing/offer_bg.avif
200 OK 382 kB URL HTTP/2 joxi.imgsrcdata.com/landings/rabona/web_components/bg/world-cup-landing/offer_bg.avif
IP
File type ISO Media, AVIF Image\012- data
Size 382 kB (382139 bytes)
Hash 2b3c4044f4585347634b3ae11e03e6d4
8fdb7ea564e06de5353352514d8d694f36d270d8
7bdcd9fc0b5fa6b2e935b64f753544187cf4f36337d2631e5dc28b929728f12a
GET /landings/rabona/web_components/bg/world-cup-landing/offer_bg.avif HTTP/1.1
Host: joxi.imgsrcdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 21:21:03 GMT
content-type: application/octet-stream
content-length: 382139
last-modified: Tue, 25 Oct 2022 12:14:16 GMT
etag: "6357d318-5d4bb"
access-control-allow-origin: *
cf-cache-status: HIT
age: 723029
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7705abee299ab4ff-OSL
X-Firefox-Spdy: h2
joxi.imgsrcdata.com/landings/rabona/web_components/decor/world-cup-landing/decor_under-main-banner.png
200 OK 324 kB URL HTTP/2 joxi.imgsrcdata.com/landings/rabona/web_components/decor/world-cup-landing/decor_under-main-banner.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Size 324 kB (323484 bytes)
Hash bfebd07818ed68b63c66825c7467a5f5
6bba5424e27e69358f09b987f5b6852a293a9589
9c7641676b6af62758d6932818c8e2a627b31b5b2f75d585735bccb8da86a947
GET /landings/rabona/web_components/decor/world-cup-landing/decor_under-main-banner.png HTTP/1.1
Host: joxi.imgsrcdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 21:21:03 GMT
content-type: image/webp
content-length: 323484
access-control-allow-origin: *
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=371796
content-disposition: inline; filename="decor_under-main-banner.webp"
etag: "6357d318-5ac54"
last-modified: Tue, 25 Oct 2022 12:14:16 GMT
vary: Accept
cf-cache-status: HIT
age: 723029
accept-ranges: bytes
server: cloudflare
cf-ray: 7705abeeba8cb4ff-OSL
X-Firefox-Spdy: h2
joxi.imgsrcdata.com/landings/rabona/web_components/bg/world-cup-landing/terms-and-conditions_bg.png?v=2
200 OK 151 kB URL HTTP/2 joxi.imgsrcdata.com/landings/rabona/web_components/bg/world-cup-landing/terms-and-conditions_bg.png?v=2
IP
File type RIFF (little-endian) data, Web/P image\012- data
Size 151 kB (151084 bytes)
Hash 0cede8a54c6f699ae1b333176161d1f3
d7a36333a3e20a14aafe32f78bc95e246dc0a9ec
f7c9b6e537232cd21ef92da3a1e69d29736ec50443526342edcd0fd20ad13c95
GET /landings/rabona/web_components/bg/world-cup-landing/terms-and-conditions_bg.png?v=2 HTTP/1.1
Host: joxi.imgsrcdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 21:21:03 GMT
content-type: image/webp
content-length: 151084
access-control-allow-origin: *
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=155608
content-disposition: inline; filename="terms-and-conditions_bg.webp"
etag: "636b7e9c-25fd8"
last-modified: Wed, 09 Nov 2022 10:19:08 GMT
vary: Accept
cf-cache-status: HIT
age: 723028
accept-ranges: bytes
server: cloudflare
cf-ray: 7705abeeba96b4ff-OSL
X-Firefox-Spdy: h2
rbnwc.lpmediastorage.com/no/api/v2/game-events-feed/feed?category=worldcup&count=100
200 OK 2.3 kB URL HTTP/2 rbnwc.lpmediastorage.com/no/api/v2/game-events-feed/feed?category=worldcup&count=100
IP
File type JSON data\012- , ASCII text, with very long lines (14950), with no line terminators
Hash 47202aedca8b7ff44910724247741dc7
feab611cfc25815611784402cc2164c7958bae77
2bd6306a1dc90ec8bb74a98ffb263b1c0292f8dbe0fb15dc54a6b50715552044
GET /no/api/v2/game-events-feed/feed?category=worldcup&count=100 HTTP/1.1
Host: rbnwc.lpmediastorage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/no/?btag=658915_11B172E10FE64BAD9D2C8BC783293BE8&clickid=wj3mdoajo2k0ploki2dbr40e&MSID=1360468&BID=9057
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 21:21:03 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=14400
vary: Accept-Encoding
access-control-expose-headers: X-Device-Type,X-Device-Name
request-id: feapi-60ef7859-5424-4946-9bde-4fcd64c0899b
x-device-name: Other
x-device-type: desktop
x-xss-protection: 1; mode=block
x-cache-status: MISS
last-modified: Sat, 26 Nov 2022 21:13:20 GMT
cf-cache-status: HIT
age: 455
expires: Sun, 27 Nov 2022 01:21:03 GMT
server: cloudflare
cf-ray: 7705abee5daffac0-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b05606331c6f88a724d9e404e62974e4
72176bc6b618fbbe567b5746ed54e14d381a9815
7179b3d4ee227d9bf6d768a5fb1a9499f285d5949d21893c9a6997da8ea7b026
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 21:21:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
rbnwc.lpmediastorage.com/no/api/v2/icon/list?category=landing-licenses&count=100
200 OK 2.2 MB URL HTTP/2 rbnwc.lpmediastorage.com/no/api/v2/icon/list?category=landing-licenses&count=100
IP
File type JSON data\012- , ASCII text, with very long lines (792), with no line terminators
Size 2.2 MB (2235849 bytes)
Hash 1b99c393e12aba9eab547ac79226131b
38954232f94cb8d3ce94a920feb773e5c1b402bd
6d9a6221f4082d633d7c48058c454a30df1b68062f044d7cecee53d6540e8109
GET /no/api/v2/icon/list?category=landing-licenses&count=100 HTTP/1.1
Host: rbnwc.lpmediastorage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/no/?btag=658915_11B172E10FE64BAD9D2C8BC783293BE8&clickid=wj3mdoajo2k0ploki2dbr40e&MSID=1360468&BID=9057
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 21:21:03 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=14400
vary: Accept-Encoding
access-control-expose-headers: X-Device-Type,X-Device-Name
request-id: feapi-5e40eeb3-0b51-4459-b548-7d0232914e17
x-device-name: Other
x-device-type: desktop
x-xss-protection: 1; mode=block
x-cache-status: MISS
last-modified: Sat, 26 Nov 2022 21:04:11 GMT
cf-cache-status: HIT
age: 319
expires: Sun, 27 Nov 2022 01:21:03 GMT
server: cloudflare
cf-ray: 7705abee6dbafac0-OSL
content-encoding: br
X-Firefox-Spdy: h2
joxi.imgsrcdata.com/landings/rabona/video/world-cup/wc-animation_breakpoint-768.webm?v=3
206 Partial Content 1.0 MB URL HTTP/2 joxi.imgsrcdata.com/landings/rabona/video/world-cup/wc-animation_breakpoint-768.webm?v=3
IP
File type WebM\012- EBML file, creator webmB\20\012- data
Size 1.0 MB (1042931 bytes)
Hash b9d849ccc4ddff99e688503b22f68af1
2db79684b6ac3cf70aabfb007ad7bc2c40fa0d72
34d4a7e4870c3aeca65d3e465a9ab52e6d8a2595172666d1c0dd9717d10b4a67
GET /landings/rabona/video/world-cup/wc-animation_breakpoint-768.webm?v=3 HTTP/1.1
Host: joxi.imgsrcdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 206 Partial Content
date: Sat, 26 Nov 2022 21:21:03 GMT
content-type: video/webm
content-length: 1042931
last-modified: Wed, 09 Nov 2022 13:43:19 GMT
etag: "636bae77-fe9f3"
access-control-allow-origin: *
cf-cache-status: HIT
age: 723028
content-range: bytes 0-1042930/1042931
server: cloudflare
cf-ray: 7705abef9c27b4ff-OSL
X-Firefox-Spdy: h2
joxi.imgsrcdata.com/landings/rabona/video/world-cup/wc-animation_breakpoint-1280.webm?v=3
206 Partial Content 1.7 MB URL HTTP/2 joxi.imgsrcdata.com/landings/rabona/video/world-cup/wc-animation_breakpoint-1280.webm?v=3
IP
File type WebM\012- EBML file, creator webmB\20\012- data
Size 1.7 MB (1651357 bytes)
Hash 5460627cbccc6ed993a0de5ef799d4b9
385e50136075f6bede3b784d4c6afce95fabf1d6
262619667c85f999279f6c5ed815fbae640f70ee9092b89360f1e0cf8e22aa01
GET /landings/rabona/video/world-cup/wc-animation_breakpoint-1280.webm?v=3 HTTP/1.1
Host: joxi.imgsrcdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 206 Partial Content
date: Sat, 26 Nov 2022 21:21:03 GMT
content-type: video/webm
content-length: 1651357
last-modified: Wed, 09 Nov 2022 13:43:14 GMT
etag: "636bae72-19329d"
access-control-allow-origin: *
cf-cache-status: HIT
age: 723029
content-range: bytes 0-1651356/1651357
server: cloudflare
cf-ray: 7705abef9c23b4ff-OSL
X-Firefox-Spdy: h2
joxi.imgsrcdata.com/landings/rabona/video/world-cup/wc-animation_breakpoint-414-360.webm?v=3
206 Partial Content 756 kB URL HTTP/2 joxi.imgsrcdata.com/landings/rabona/video/world-cup/wc-animation_breakpoint-414-360.webm?v=3
IP
File type WebM\012- EBML file, creator webmB\20\012- data
Size 756 kB (755529 bytes)
Hash 1128fbc6daaae24fe30316a6ca11bf77
99cc50e9b5dbee694b8f5eb172824300221fa221
46b3bb54d40a80df33a8e98a7f3308619d8ef4753a56ce1bace9a2ca115921f4
GET /landings/rabona/video/world-cup/wc-animation_breakpoint-414-360.webm?v=3 HTTP/1.1
Host: joxi.imgsrcdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 206 Partial Content
date: Sat, 26 Nov 2022 21:21:03 GMT
content-type: video/webm
content-length: 755529
last-modified: Wed, 09 Nov 2022 13:43:19 GMT
etag: "636bae77-b8749"
access-control-allow-origin: *
cf-cache-status: HIT
age: 612321
content-range: bytes 0-755528/755529
server: cloudflare
cf-ray: 7705abefcc71b4ff-OSL
X-Firefox-Spdy: h2
rbnwc.lpmediastorage.com/no/api/v2/icon/list?category=footer-payments&count=100
200 OK 17 kB URL HTTP/2 rbnwc.lpmediastorage.com/no/api/v2/icon/list?category=footer-payments&count=100
IP
File type JSON data\012- , ASCII text, with very long lines (6152), with no line terminators
Hash 0490e5c4a7bf123c062ede8b294dd24e
609657cd0bb69dd5abf05c0f38db6d48b0d6f82f
0f66b5ad9d74ef34f6442039e626713bcbee2e0ca6cf2f7b24da0c5bacdcb23b
GET /no/api/v2/icon/list?category=footer-payments&count=100 HTTP/1.1
Host: rbnwc.lpmediastorage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/no/?btag=658915_11B172E10FE64BAD9D2C8BC783293BE8&clickid=wj3mdoajo2k0ploki2dbr40e&MSID=1360468&BID=9057
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 21:21:03 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=14400
vary: Accept-Encoding
access-control-expose-headers: X-Device-Type,X-Device-Name
request-id: feapi-6c5c781f-e771-49cf-ad5f-4cf74eb0a222
x-device-name: Other
x-device-type: desktop
x-xss-protection: 1; mode=block
x-cache-status: MISS
last-modified: Sat, 26 Nov 2022 21:13:20 GMT
cf-cache-status: HIT
age: 455
expires: Sun, 27 Nov 2022 01:21:03 GMT
server: cloudflare
cf-ray: 7705abee6db7fac0-OSL
content-encoding: br
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://rbnwc.lpmediastorage.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 19:34:08 GMT
expires: Thu, 23 Nov 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 265615
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/robotocondensed/v25/ieVi2ZhZI2eCN5jzbjEETS9weq8-32meGCQYbw.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/robotocondensed/v25/ieVi2ZhZI2eCN5jzbjEETS9weq8-32meGCQYbw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15660, version 1.0\012- data
Hash d7b0b953a50fddaa88089b5b787cf719
2f85bc568b27659a3d6452f58f9fd7678450326d
e79c1c1a140e6afb861074c70392db54cc65a06050de2a69162ab94eb95b0516
GET /s/robotocondensed/v25/ieVi2ZhZI2eCN5jzbjEETS9weq8-32meGCQYbw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://rbnwc.lpmediastorage.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15660
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 22 Nov 2022 22:17:43 GMT
expires: Wed, 22 Nov 2023 22:17:43 GMT
cache-control: public, max-age=31536000
age: 342200
last-modified: Tue, 19 Apr 2022 18:42:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
rbnwc.lpmediastorage.com/no/api/v2/page/item/rbnwc-info-page-promo
200 OK 17 kB URL HTTP/2 rbnwc.lpmediastorage.com/no/api/v2/page/item/rbnwc-info-page-promo
IP
File type JSON data\012- HTML document, Unicode text, UTF-8 text, with very long lines (4605), with no line terminators
Hash ad171e1b1595c3480fbbdc5662f6fd98
21fdbd4bb4867bdf393f804d6c925df82f7cc39f
b17571d3b875fb20ee7458d46549f00fb1fbbe603421fff732bdd88ac08bc827
GET /no/api/v2/page/item/rbnwc-info-page-promo HTTP/1.1
Host: rbnwc.lpmediastorage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/no/?btag=658915_11B172E10FE64BAD9D2C8BC783293BE8&clickid=wj3mdoajo2k0ploki2dbr40e&MSID=1360468&BID=9057
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 21:21:03 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=14400
vary: Accept-Encoding
access-control-expose-headers: X-Device-Type,X-Device-Name
request-id: feapi-abeb7975-6fe9-407b-827c-f84b7dd42c86
x-device-name: Other
x-device-type: desktop
x-xss-protection: 1; mode=block
x-cache-status: MISS
last-modified: Sat, 26 Nov 2022 21:13:20 GMT
cf-cache-status: HIT
age: 455
expires: Sun, 27 Nov 2022 01:21:03 GMT
server: cloudflare
cf-ray: 7705abee5db2fac0-OSL
content-encoding: br
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://rbnwc.lpmediastorage.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 18:53:49 GMT
expires: Thu, 23 Nov 2023 18:53:49 GMT
cache-control: public, max-age=31536000
age: 268034
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/robotocondensed/v25/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/robotocondensed/v25/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15700, version 1.0\012- data
Hash 3d7f7413fca69bff4d231ebdc50aaab0
cb18e7943b6a8a0e3672d7242197c19a226b92e8
6b4fac99c39b9ee2693d87a2508d0c7d4b4859072966616bd1f6e18c5b2f9d36
GET /s/robotocondensed/v25/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://rbnwc.lpmediastorage.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15700
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 18:51:51 GMT
expires: Thu, 23 Nov 2023 18:51:51 GMT
cache-control: public, max-age=31536000
age: 268152
last-modified: Tue, 19 Apr 2022 18:51:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19748
Expires: Sun, 27 Nov 2022 02:50:12 GMT
Date: Sat, 26 Nov 2022 21:21:04 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19748
Expires: Sun, 27 Nov 2022 02:50:12 GMT
Date: Sat, 26 Nov 2022 21:21:04 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b05606331c6f88a724d9e404e62974e4
72176bc6b618fbbe567b5746ed54e14d381a9815
7179b3d4ee227d9bf6d768a5fb1a9499f285d5949d21893c9a6997da8ea7b026
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 21:21:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
joxi.imgsrcdata.com/landings/rabona/web_components/steps/world-cup/wcstep_icon-1_default.svg
200 OK 140 kB URL HTTP/2 joxi.imgsrcdata.com/landings/rabona/web_components/steps/world-cup/wcstep_icon-1_default.svg
IP
Size 140 kB (139807 bytes)
Hash c3bda21fc2fe8a3691fecd79d54d4f14
02e62a5c2fbb3a93bad61c13b4a9f4b074238705
b32f163bfaeca8f5b86f2a0de3694165c45bf10da7f338bbb5922e4c1166ebaa
GET /landings/rabona/web_components/steps/world-cup/wcstep_icon-1_default.svg HTTP/1.1
Host: joxi.imgsrcdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 21:21:03 GMT
content-type: image/svg+xml
last-modified: Wed, 09 Nov 2022 13:43:14 GMT
etag: W/"636bae72-44f"
access-control-allow-origin: *
cf-cache-status: HIT
age: 723029
vary: Accept-Encoding
server: cloudflare
cf-ray: 7705abeeeb01b4ff-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19748
Expires: Sun, 27 Nov 2022 02:50:12 GMT
Date: Sat, 26 Nov 2022 21:21:04 GMT
Connection: keep-alive
rbnwc.lpmediastorage.com/no/api/v2/page/item/rbnwc-info-page-tournament
200 OK 6.2 kB URL HTTP/2 rbnwc.lpmediastorage.com/no/api/v2/page/item/rbnwc-info-page-tournament
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (10867), with no line terminators
Hash e14a0d1b90b24011943a99c27280e32e
d2bcf1f3477f861bd12cbff16e39e23b319aa3d6
2b96113cf5e4b58c1b915cfd8de4144fbdd35e9cd51dbe6076774b150271ab46
GET /no/api/v2/page/item/rbnwc-info-page-tournament HTTP/1.1
Host: rbnwc.lpmediastorage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/no/?btag=658915_11B172E10FE64BAD9D2C8BC783293BE8&clickid=wj3mdoajo2k0ploki2dbr40e&MSID=1360468&BID=9057
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 21:21:03 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=14400
vary: Accept-Encoding
access-control-expose-headers: X-Device-Type,X-Device-Name
request-id: feapi-49f0b05b-0022-487a-b078-ccc613aabcad
x-device-name: Other
x-device-type: desktop
x-xss-protection: 1; mode=block
x-cache-status: MISS
last-modified: Sat, 26 Nov 2022 21:13:20 GMT
cf-cache-status: HIT
age: 455
expires: Sun, 27 Nov 2022 01:21:03 GMT
server: cloudflare
cf-ray: 7705abee5db0fac0-OSL
content-encoding: br
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf04cc9f-ee4b-42fd-914f-cd86b9dc30eb.jpeg
200 OK 3.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf04cc9f-ee4b-42fd-914f-cd86b9dc30eb.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a783df85f30f9c555f9df6b99f61744d
61f9bed607e81606be78285596acdc5e0e4f4994
19db42201d0fa059f680d890ede6683c04e893e6308a2256d0203f826a7f34de
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf04cc9f-ee4b-42fd-914f-cd86b9dc30eb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3502
x-amzn-requestid: ca3f2610-e03c-48a7-abb3-fbbab76f63d2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cCvYUHO5IAMFqDA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637dc5ce-7e36137711dc4668278c1c94;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 07:03:42 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: QS3ZKYetcm87GNwSr34eRPF2d4r8ppwf3fT19aV-u84f7ObX4bU8wQ==
via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 07:13:26 GMT
age: 50858
etag: "61f9bed607e81606be78285596acdc5e0e4f4994"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
joxi.imgsrcdata.com/landings/rabona/web_components/steps/world-cup/wcstep_icon-2_default.svg
200 OK 190 kB URL HTTP/2 joxi.imgsrcdata.com/landings/rabona/web_components/steps/world-cup/wcstep_icon-2_default.svg
IP
Size 190 kB (189918 bytes)
Hash 56b2421826aaa16629c61cf956bcf46a
2170cd906a21eca7c0fab61eee6ded8af550b780
38e8af8d50068558e550760e4b933d42c3e520175f1873b298dce9fa88559ff3
GET /landings/rabona/web_components/steps/world-cup/wcstep_icon-2_default.svg HTTP/1.1
Host: joxi.imgsrcdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 21:21:03 GMT
content-type: image/svg+xml
last-modified: Wed, 09 Nov 2022 13:43:19 GMT
etag: W/"636bae77-a5f"
access-control-allow-origin: *
cf-cache-status: HIT
age: 723029
vary: Accept-Encoding
server: cloudflare
cf-ray: 7705abeefb12b4ff-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f5318cc-4728-4160-afd1-9d20b79b7de9.jpeg
200 OK 9.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f5318cc-4728-4160-afd1-9d20b79b7de9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3b1c6878914466cfece680fa7cb73502
47fac81a2dd809df5c42ca1362f71d553572d2b1
6458883dfa2bdfd483e92e5f847a229508ef00ce1dbd11f49eec369d0bd3160a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f5318cc-4728-4160-afd1-9d20b79b7de9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9914
x-amzn-requestid: 4db4ed29-20b4-4ca7-8835-2463d0989d5b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLVVFHQYIAMFc4Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638135b9-613da006118724124e345b29;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:38:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 7cJmhEGkKqLUQUMqGuYtWBeu_1nlEUAxgTMy4ABekPJYrJP95wE6Jg==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 21:59:05 GMT
age: 84119
etag: "47fac81a2dd809df5c42ca1362f71d553572d2b1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa2f841c6-d0f5-4b9b-9f04-4eee5f479227.jpeg
200 OK 9.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa2f841c6-d0f5-4b9b-9f04-4eee5f479227.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a0064a575afa520aa6c112249e7b195a
7387cf7c1f6fae78ce7df10271a0fd2504c71382
37876de2a100c65b70bfd199c8405f3ec282c45786ab08744c64592dc16b0353
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa2f841c6-d0f5-4b9b-9f04-4eee5f479227.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9718
x-amzn-requestid: 1b621759-18a2-491a-b44e-f23540e4228c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLVC5FLbIAMFzFQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63813545-78dec425016dc2746242a6c7;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:36:05 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: zWdyq64XfAJTwN2HPvv__Q2wm597cilWEJACu8vIDwKUGixYTdUL_g==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 21:53:21 GMT
age: 84463
etag: "7387cf7c1f6fae78ce7df10271a0fd2504c71382"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
joxi.imgsrcdata.com/landings/rabona/web_components/steps/world-cup/wcstep_icon-3_default.svg
200 OK 18 kB URL HTTP/2 joxi.imgsrcdata.com/landings/rabona/web_components/steps/world-cup/wcstep_icon-3_default.svg
IP
Hash 377fa5b6df8e6b38ed23de99bc36caf1
1f250a1c70a75bc8104a750cbfd5f69ef32cbed2
3ab97b2cdadf5e588b6d3254ce5fcb531eae07155fa5d09e069ec92810079fe8
GET /landings/rabona/web_components/steps/world-cup/wcstep_icon-3_default.svg HTTP/1.1
Host: joxi.imgsrcdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 21:21:03 GMT
content-type: image/svg+xml
last-modified: Wed, 09 Nov 2022 13:43:14 GMT
etag: W/"636bae72-f1a"
access-control-allow-origin: *
cf-cache-status: HIT
age: 723029
vary: Accept-Encoding
server: cloudflare
cf-ray: 7705abeefb16b4ff-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
rbnwc.lpmediastorage.com/no/api/v2/lang/translation
200 OK 38 kB URL HTTP/2 rbnwc.lpmediastorage.com/no/api/v2/lang/translation
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (64899), with no line terminators
Hash 166355f3735ad904e56d3d5d8e527920
ba1763f79202c36bea97963d01045c9e7873e45c
f01930c2f8d83acda050f3e986a08486d072efe61b0dc69958644a8b42e9dbbb
GET /no/api/v2/lang/translation HTTP/1.1
Host: rbnwc.lpmediastorage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/no/?btag=658915_11B172E10FE64BAD9D2C8BC783293BE8&clickid=wj3mdoajo2k0ploki2dbr40e&MSID=1360468&BID=9057
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 21:21:03 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=14400
vary: Accept-Encoding
access-control-expose-headers: X-Device-Type,X-Device-Name
request-id: feapi-53f01a01-54cd-41c3-b859-9b3f51eb7cad
x-device-name: Other
x-device-type: desktop
x-xss-protection: 1; mode=block
x-cache-status: MISS
last-modified: Sat, 26 Nov 2022 21:13:20 GMT
cf-cache-status: HIT
age: 455
expires: Sun, 27 Nov 2022 01:21:03 GMT
server: cloudflare
cf-ray: 7705abee3d98fac0-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash 45d3829581c890b944f2c7e10e56d881
c330786685c2871172d201b734b6684becc19906
b073e8f48efbe5a4dd90205ffbfc02d02bdc06b5263f7776e549a72c7d5ca79a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1635
Cache-Control: max-age=89364
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 21:21:04 GMT
Etag: "638136f1-118"
Expires: Sun, 27 Nov 2022 22:10:28 GMT
Last-Modified: Fri, 25 Nov 2022 21:43:13 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 280
rbnwc.lpmediastorage.com/sprite.1669191633059.css
200 OK 7.2 kB URL HTTP/2 rbnwc.lpmediastorage.com/sprite.1669191633059.css
IP
File type ASCII text, with very long lines (5055), with no line terminators
Hash fbda3fc1b3f7c6f8c4e4bf069fc8586c
0556eb20692b9cd09ea99472384a351f516ec8cb
e06a4cd513f427c111c78532cf6b74d3d656720d63f2ffdecaaf2a62ab259252
GET /sprite.1669191633059.css HTTP/1.1
Host: rbnwc.lpmediastorage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/no/?btag=658915_11B172E10FE64BAD9D2C8BC783293BE8&clickid=wj3mdoajo2k0ploki2dbr40e&MSID=1360468&BID=9057
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 21:21:03 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=5063
etag: W/"637dd7ff-13c7"
last-modified: Wed, 23 Nov 2022 08:21:19 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 455
expires: Sun, 27 Nov 2022 01:21:03 GMT
cache-control: public, max-age=14400
server: cloudflare
cf-ray: 7705abebabd3fac0-OSL
content-encoding: br
X-Firefox-Spdy: h2
rabona.com/dimg/team/1643980747480_senegal.png
200 OK 3.4 kB URL HTTP/2 rabona.com/dimg/team/1643980747480_senegal.png
IP
ASN #209242 Cloudflare London, LLC
File type PNG image data, 800 x 533, 8-bit colormap, non-interlaced\012- data
Hash 9ba943420d8e4526171502f6a18fdf33
22b45e3a20c8fd228d38ccd92d7cb1075f34e559
ee1fb94a325d477b4fc58c93578acee4e496db605677dd4dc43ce18ac81e3acb
GET /dimg/team/1643980747480_senegal.png HTTP/1.1
Host: rabona.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 21:21:04 GMT
content-type: image/png
content-length: 3432
cf-bgj: imgq:85,h2pri
cf-polished: status=not_needed
content-security-policy: block-all-mixed-content
etag: "9ba943420d8e4526171502f6a18fdf33"
last-modified: Fri, 04 Feb 2022 13:19:07 GMT
vary: Origin, Accept-Encoding
x-amz-request-id: 1701B83DF1D361AA
x-conv-cache-status: HIT
x-front-cache-status: HIT
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 1406819
accept-ranges: bytes
server: cloudflare
cf-ray: 7705abf3ba8e1c0a-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
rabona.com/dimg/team/1669401279135_flagoftunisia.svg.png
200 OK 62 kB URL HTTP/2 rabona.com/dimg/team/1669401279135_flagoftunisia.svg.png
IP
ASN #209242 Cloudflare London, LLC
File type PNG image data, 2560 x 1707, 8-bit/color RGB, non-interlaced\012- data
Hash daf66d5070c570b200260ff1db911b26
a8a8eb9e0d6287216290d2c1b2f14abb9a394694
cf5dbfc0fee120aeca579e1c52158d980899aacb3016d5d8aa892cd6cabad2e8
GET /dimg/team/1669401279135_flagoftunisia.svg.png HTTP/1.1
Host: rabona.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 21:21:04 GMT
content-type: image/png
content-length: 61818
cf-bgj: imgq:85,h2pri
cf-polished: origSize=62053, status=vary_header_present
content-security-policy: block-all-mixed-content
etag: "fff80b663b71b53a88f114d1ea46807b"
last-modified: Fri, 25 Nov 2022 18:34:39 GMT
vary: Origin, Accept-Encoding
x-amz-request-id: 172AEFFC8709A317
x-conv-cache-status: HIT
x-front-cache-status: HIT
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 86982
accept-ranges: bytes
server: cloudflare
cf-ray: 7705abf3ba981c0a-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash 45d3829581c890b944f2c7e10e56d881
c330786685c2871172d201b734b6684becc19906
b073e8f48efbe5a4dd90205ffbfc02d02bdc06b5263f7776e549a72c7d5ca79a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1635
Cache-Control: max-age=89364
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 21:21:04 GMT
Etag: "638136f1-118"
Expires: Sun, 27 Nov 2022 22:10:28 GMT
Last-Modified: Fri, 25 Nov 2022 21:43:13 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 280
ocsp.digicert.com/
200 OK 280 B IP
Hash 45d3829581c890b944f2c7e10e56d881
c330786685c2871172d201b734b6684becc19906
b073e8f48efbe5a4dd90205ffbfc02d02bdc06b5263f7776e549a72c7d5ca79a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1635
Cache-Control: max-age=89364
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 21:21:04 GMT
Etag: "638136f1-118"
Expires: Sun, 27 Nov 2022 22:10:28 GMT
Last-Modified: Fri, 25 Nov 2022 21:43:13 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 280
ocsp.digicert.com/
200 OK 280 B IP
Hash 45d3829581c890b944f2c7e10e56d881
c330786685c2871172d201b734b6684becc19906
b073e8f48efbe5a4dd90205ffbfc02d02bdc06b5263f7776e549a72c7d5ca79a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1039
Cache-Control: max-age=88768
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 21:21:04 GMT
Etag: "638136f1-118"
Expires: Sun, 27 Nov 2022 22:00:32 GMT
Last-Modified: Fri, 25 Nov 2022 21:43:13 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 280
rabona.com/dimg/team/1633594561146_ecuador2.svg
200 OK 100 kB URL HTTP/2 rabona.com/dimg/team/1633594561146_ecuador2.svg
IP
ASN #209242 Cloudflare London, LLC
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document, ASCII text, with very long lines (5435), with CRLF line terminators
Hash 86ad9e408349b2d7cb550cf2268e594e
a063faf4b9391e696b567e3cee0526f8c6c55472
622d328c2de77c4adbb92ff10613249ccbfc33edca39ed342d4c871923403c0f
GET /dimg/team/1633594561146_ecuador2.svg HTTP/1.1
Host: rabona.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 21:21:04 GMT
content-type: image/svg+xml
content-security-policy: block-all-mixed-content
etag: W/"94317befb597bfc7cbe5a664dbe34afd"
last-modified: Thu, 07 Oct 2021 08:16:01 GMT
vary: Origin, Accept-Encoding
x-amz-request-id: 1700F12C6910986D
x-xss-protection: 1; mode=block
x-conv-cache-status: HIT
x-front-cache-status: MISS
cf-cache-status: HIT
age: 1406819
server: cloudflare
cf-ray: 7705abf3ba8d1c0a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
joxi.imgsrcdata.com/content-svg/payments-footer/rabona/paymsystem_footer_ripple.svg
200 OK 0 B URL HTTP/2 joxi.imgsrcdata.com/content-svg/payments-footer/rabona/paymsystem_footer_ripple.svg
IP
GET /content-svg/payments-footer/rabona/paymsystem_footer_ripple.svg HTTP/1.1
Host: joxi.imgsrcdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 21:21:04 GMT
content-type: image/svg+xml
last-modified: Thu, 02 Dec 2021 12:30:10 GMT
etag: W/"61a8bc52-1a25"
access-control-allow-origin: *
cf-cache-status: HIT
age: 976271
vary: Accept-Encoding
server: cloudflare
cf-ray: 7705abf5ad3eb4ff-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
joxi.imgsrcdata.com/content-svg/payments-footer/rabona/paymsystem_footer_american_express.svg
200 OK 0 B URL HTTP/2 joxi.imgsrcdata.com/content-svg/payments-footer/rabona/paymsystem_footer_american_express.svg
IP
GET /content-svg/payments-footer/rabona/paymsystem_footer_american_express.svg HTTP/1.1
Host: joxi.imgsrcdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 21:21:04 GMT
content-type: image/svg+xml
last-modified: Thu, 02 Dec 2021 12:30:12 GMT
etag: W/"61a8bc54-2dcf"
access-control-allow-origin: *
cf-cache-status: HIT
age: 976271
vary: Accept-Encoding
server: cloudflare
cf-ray: 7705abf5ad3db4ff-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
rabona.com/dimg/team/1668611881437_jp.svg
200 OK 0 B URL HTTP/2 rabona.com/dimg/team/1668611881437_jp.svg
IP
ASN #209242 Cloudflare London, LLC
GET /dimg/team/1668611881437_jp.svg HTTP/1.1
Host: rabona.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 21:21:04 GMT
content-type: image/svg+xml
content-security-policy: block-all-mixed-content
etag: W/"07f5419b045afa9c776cf8431469c972"
last-modified: Wed, 16 Nov 2022 15:18:01 GMT
vary: Origin, Accept-Encoding
x-amz-request-id: 17281C4D30F42CCD
x-xss-protection: 1; mode=block
x-conv-cache-status: HIT
x-front-cache-status: HIT
cf-cache-status: HIT
age: 881983
server: cloudflare
cf-ray: 7705abf3ba8a1c0a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
rbnwc.lpmediastorage.com/no/api/v2/page/item/rbnwc-info-page-prizes
200 OK 0 B URL HTTP/2 rbnwc.lpmediastorage.com/no/api/v2/page/item/rbnwc-info-page-prizes
IP
GET /no/api/v2/page/item/rbnwc-info-page-prizes HTTP/1.1
Host: rbnwc.lpmediastorage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/no/?btag=658915_11B172E10FE64BAD9D2C8BC783293BE8&clickid=wj3mdoajo2k0ploki2dbr40e&MSID=1360468&BID=9057
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 21:21:03 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=14400
vary: Accept-Encoding
access-control-expose-headers: X-Device-Type,X-Device-Name
request-id: feapi-6acee6c8-2abf-4066-8fce-cdfce8a1b1a5
x-device-name: Other
x-device-type: desktop
x-xss-protection: 1; mode=block
x-cache-status: MISS
last-modified: Sat, 26 Nov 2022 21:13:20 GMT
cf-cache-status: HIT
age: 455
expires: Sun, 27 Nov 2022 01:21:03 GMT
server: cloudflare
cf-ray: 7705abee6db4fac0-OSL
content-encoding: br
X-Firefox-Spdy: h2
rabona.com/dimg/team/1668611012743_rs.svg
200 OK 0 B URL HTTP/2 rabona.com/dimg/team/1668611012743_rs.svg
IP
ASN #209242 Cloudflare London, LLC
GET /dimg/team/1668611012743_rs.svg HTTP/1.1
Host: rabona.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 21:21:04 GMT
content-type: image/svg+xml
content-security-policy: block-all-mixed-content
etag: W/"b0d2957d29d1bd475b5c28aa5680d14b"
last-modified: Wed, 16 Nov 2022 15:03:32 GMT
vary: Origin, Accept-Encoding
x-amz-request-id: 17281C4D3023C03B
x-xss-protection: 1; mode=block
x-conv-cache-status: MISS
x-front-cache-status: HIT
cf-cache-status: HIT
age: 881983
server: cloudflare
cf-ray: 7705abf3ba821c0a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
rabona.com/dimg/team/1653981171283_1280pxflagofiran-1.svg
200 OK 0 B URL HTTP/2 rabona.com/dimg/team/1653981171283_1280pxflagofiran-1.svg
IP
ASN #209242 Cloudflare London, LLC
GET /dimg/team/1653981171283_1280pxflagofiran-1.svg HTTP/1.1
Host: rabona.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 21:21:04 GMT
content-type: image/svg+xml
content-security-policy: block-all-mixed-content
etag: W/"4d4609d3ab43f2c54c689a5937df05e2"
last-modified: Tue, 31 May 2022 07:12:51 GMT
vary: Origin, Accept-Encoding
x-amz-request-id: 1701B83DF17555A5
x-xss-protection: 1; mode=block
x-conv-cache-status: HIT
x-front-cache-status: HIT
cf-cache-status: HIT
age: 1082473
server: cloudflare
cf-ray: 7705abf3ba941c0a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
rabona.com/dimg/team/1668611673222_cr.svg
200 OK 0 B URL HTTP/2 rabona.com/dimg/team/1668611673222_cr.svg
IP
ASN #209242 Cloudflare London, LLC
GET /dimg/team/1668611673222_cr.svg HTTP/1.1
Host: rabona.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 26 Nov 2022 21:21:04 GMT
content-type: image/svg+xml
content-security-policy: block-all-mixed-content
etag: W/"d70b83d15bec9f4ee6e32f5a16c23320"
last-modified: Wed, 16 Nov 2022 15:14:33 GMT
vary: Origin, Accept-Encoding
x-amz-request-id: 17281C4D30A0BE75
x-xss-protection: 1; mode=block
x-conv-cache-status: HIT
x-front-cache-status: HIT
cf-cache-status: HIT
age: 881983
server: cloudflare
cf-ray: 7705abf44b231c0a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
joxi.imgsrcdata.com/content-svg/payments-footer/rabona/paymsystem_footer_neosurf.svg
200 OK 0 B URL HTTP/2 joxi.imgsrcdata.com/content-svg/payments-footer/rabona/paymsystem_footer_neosurf.svg
IP
GET /content-svg/payments-footer/rabona/paymsystem_footer_neosurf.svg HTTP/1.1
Host: joxi.imgsrcdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 21:21:04 GMT
content-type: image/svg+xml
last-modified: Tue, 26 Jan 2021 14:54:16 GMT
etag: W/"60102d18-db1"
access-control-allow-origin: *
cf-cache-status: HIT
age: 976271
vary: Accept-Encoding
server: cloudflare
cf-ray: 7705abf57cfab4ff-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
rabona.com/dimg/team/wales.svg
200 OK 0 B URL HTTP/2 rabona.com/dimg/team/wales.svg
IP
ASN #209242 Cloudflare London, LLC
GET /dimg/team/wales.svg HTTP/1.1
Host: rabona.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 21:21:04 GMT
content-type: image/svg+xml
content-security-policy: block-all-mixed-content
etag: W/"d2c365be887ee592c10229e3cef43eff"
last-modified: Mon, 23 Aug 2021 17:59:40 GMT
vary: Origin, Accept-Encoding
x-amz-request-id: 1701232DEA64AFEF
x-xss-protection: 1; mode=block
x-conv-cache-status: HIT
x-front-cache-status: HIT
cf-cache-status: HIT
age: 1082473
server: cloudflare
cf-ray: 7705abf3ba911c0a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
rabona.com/dimg/team/1668611182051_swi.svg
200 OK 0 B URL HTTP/2 rabona.com/dimg/team/1668611182051_swi.svg
IP
ASN #209242 Cloudflare London, LLC
GET /dimg/team/1668611182051_swi.svg HTTP/1.1
Host: rabona.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 21:21:04 GMT
content-type: image/svg+xml
content-security-policy: block-all-mixed-content
etag: W/"7a454e5758bd0fc3967584a913d0ac0e"
last-modified: Wed, 16 Nov 2022 15:06:22 GMT
vary: Origin, Accept-Encoding
x-amz-request-id: 17281C4D310EA455
x-xss-protection: 1; mode=block
x-conv-cache-status: HIT
x-front-cache-status: HIT
cf-cache-status: HIT
age: 881983
server: cloudflare
cf-ray: 7705abf3ba841c0a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
rabona.com/dimg/team/1668611119507_uy.svg
200 OK 0 B URL HTTP/2 rabona.com/dimg/team/1668611119507_uy.svg
IP
ASN #209242 Cloudflare London, LLC
GET /dimg/team/1668611119507_uy.svg HTTP/1.1
Host: rabona.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 21:21:04 GMT
content-type: image/svg+xml
content-security-policy: block-all-mixed-content
etag: W/"8009c4f010b949c65e70b06b2989c09e"
last-modified: Wed, 16 Nov 2022 15:05:19 GMT
vary: Origin, Accept-Encoding
x-amz-request-id: 17281C4D3377B439
x-xss-protection: 1; mode=block
x-conv-cache-status: HIT
x-front-cache-status: HIT
cf-cache-status: HIT
age: 881983
server: cloudflare
cf-ray: 7705abf3ba861c0a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
rabona.com/dimg/team/1668611699912_mo.svg
200 OK 0 B URL HTTP/2 rabona.com/dimg/team/1668611699912_mo.svg
IP
ASN #209242 Cloudflare London, LLC
GET /dimg/team/1668611699912_mo.svg HTTP/1.1
Host: rabona.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 26 Nov 2022 21:21:04 GMT
content-type: image/svg+xml
content-security-policy: block-all-mixed-content
etag: W/"41cae12f02c3c035a6e40bdd2bfbb5bf"
last-modified: Wed, 16 Nov 2022 15:14:59 GMT
vary: Origin, Accept-Encoding
x-amz-request-id: 17281C4D2F79346E
x-xss-protection: 1; mode=block
x-conv-cache-status: HIT
x-front-cache-status: HIT
cf-cache-status: HIT
age: 881983
server: cloudflare
cf-ray: 7705abf44b201c0a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
joxi.imgsrcdata.com/content-svg/payments-footer/rabona/paymsystem_gpay.svg
200 OK 0 B URL HTTP/2 joxi.imgsrcdata.com/content-svg/payments-footer/rabona/paymsystem_gpay.svg
IP
GET /content-svg/payments-footer/rabona/paymsystem_gpay.svg HTTP/1.1
Host: joxi.imgsrcdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 21:21:04 GMT
content-type: image/svg+xml
last-modified: Tue, 28 Sep 2021 07:34:11 GMT
etag: W/"6152c573-d1b"
access-control-allow-origin: *
cf-cache-status: HIT
age: 867187
vary: Accept-Encoding
server: cloudflare
cf-ray: 7705abf5ad36b4ff-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
rbnwc.lpmediastorage.com/favicon.ico
200 OK 0 B URL HTTP/2 rbnwc.lpmediastorage.com/favicon.ico
IP
GET /favicon.ico HTTP/1.1
Host: rbnwc.lpmediastorage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/no/?btag=658915_11B172E10FE64BAD9D2C8BC783293BE8&clickid=wj3mdoajo2k0ploki2dbr40e&MSID=1360468&BID=9057
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 21:21:04 GMT
content-type: image/x-icon
last-modified: Thu, 10 Nov 2022 10:46:09 GMT
etag: W/"636cd671-3a6"
cf-cache-status: HIT
age: 455
expires: Sun, 27 Nov 2022 01:21:04 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
server: cloudflare
cf-ray: 7705abf18810fac0-OSL
content-encoding: br
X-Firefox-Spdy: h2
rabona.com/dimg/team/1668611167363_cmrn.svg
200 OK 0 B URL HTTP/2 rabona.com/dimg/team/1668611167363_cmrn.svg
IP
ASN #209242 Cloudflare London, LLC
GET /dimg/team/1668611167363_cmrn.svg HTTP/1.1
Host: rabona.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 21:21:04 GMT
content-type: image/svg+xml
content-security-policy: block-all-mixed-content
etag: W/"b7131391313c2a47343e321a396366b6"
last-modified: Wed, 16 Nov 2022 15:06:07 GMT
vary: Origin, Accept-Encoding
x-amz-request-id: 17281C4D30E4A5FB
x-xss-protection: 1; mode=block
x-conv-cache-status: HIT
x-front-cache-status: MISS
cf-cache-status: HIT
age: 881983
server: cloudflare
cf-ray: 7705abf3ba811c0a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
rabona.com/dimg/team/netherlands.svg
200 OK 0 B URL HTTP/2 rabona.com/dimg/team/netherlands.svg
IP
ASN #209242 Cloudflare London, LLC
GET /dimg/team/netherlands.svg HTTP/1.1
Host: rabona.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 21:21:04 GMT
content-type: image/svg+xml
content-security-policy: block-all-mixed-content
etag: W/"e53fc83f569b904b5b883c87a37b5607"
last-modified: Mon, 23 Aug 2021 17:59:40 GMT
vary: Origin, Accept-Encoding
x-amz-request-id: 170135A072BE1B5F
x-xss-protection: 1; mode=block
x-conv-cache-status: HIT
x-front-cache-status: HIT
cf-cache-status: HIT
age: 1406819
server: cloudflare
cf-ray: 7705abf3ba8f1c0a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
rabona.com/dimg/team/1668611031408_br.svg
200 OK 0 B URL HTTP/2 rabona.com/dimg/team/1668611031408_br.svg
IP
ASN #209242 Cloudflare London, LLC
GET /dimg/team/1668611031408_br.svg HTTP/1.1
Host: rabona.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 21:21:04 GMT
content-type: image/svg+xml
content-security-policy: block-all-mixed-content
etag: W/"cec2e1e57c4c996b857c65bef3df0b6a"
last-modified: Wed, 16 Nov 2022 15:03:51 GMT
vary: Origin, Accept-Encoding
x-amz-request-id: 17281C4D30208D22
x-xss-protection: 1; mode=block
x-conv-cache-status: HIT
x-front-cache-status: HIT
cf-cache-status: HIT
age: 881983
server: cloudflare
cf-ray: 7705abf3ba831c0a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
joxi.imgsrcdata.com/content-svg/payments-footer/rabona/paymsystem_footer_JCB.svg
200 OK 0 B URL HTTP/2 joxi.imgsrcdata.com/content-svg/payments-footer/rabona/paymsystem_footer_JCB.svg
IP
GET /content-svg/payments-footer/rabona/paymsystem_footer_JCB.svg HTTP/1.1
Host: joxi.imgsrcdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 21:21:04 GMT
content-type: image/svg+xml
last-modified: Thu, 02 Dec 2021 12:30:12 GMT
etag: W/"61a8bc54-7eb"
access-control-allow-origin: *
cf-cache-status: HIT
age: 867187
vary: Accept-Encoding
server: cloudflare
cf-ray: 7705abf5ad39b4ff-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
joxi.imgsrcdata.com/content-svg/payments-footer/rabona/paymsystem_muchbetter.svg
200 OK 0 B URL HTTP/2 joxi.imgsrcdata.com/content-svg/payments-footer/rabona/paymsystem_muchbetter.svg
IP
GET /content-svg/payments-footer/rabona/paymsystem_muchbetter.svg HTTP/1.1
Host: joxi.imgsrcdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 21:21:04 GMT
content-type: image/svg+xml
last-modified: Tue, 28 Sep 2021 07:34:11 GMT
etag: W/"6152c573-494b"
access-control-allow-origin: *
cf-cache-status: HIT
age: 976271
vary: Accept-Encoding
server: cloudflare
cf-ray: 7705abf5ad37b4ff-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
rabona.com/dimg/team/1668611070661_por.svg
200 OK 0 B URL HTTP/2 rabona.com/dimg/team/1668611070661_por.svg
IP
ASN #209242 Cloudflare London, LLC
GET /dimg/team/1668611070661_por.svg HTTP/1.1
Host: rabona.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 21:21:04 GMT
content-type: image/svg+xml
content-security-policy: block-all-mixed-content
etag: W/"3e907ae18a94e609e4b57f70ece34f35"
last-modified: Wed, 16 Nov 2022 15:04:30 GMT
vary: Origin, Accept-Encoding
x-amz-request-id: 17281C4D3010817B
x-xss-protection: 1; mode=block
x-conv-cache-status: MISS
x-front-cache-status: HIT
cf-cache-status: HIT
age: 881983
server: cloudflare
cf-ray: 7705abf3ba851c0a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
rabona.com/dimg/team/1668611208635_can.svg
200 OK 0 B URL HTTP/2 rabona.com/dimg/team/1668611208635_can.svg
IP
ASN #209242 Cloudflare London, LLC
GET /dimg/team/1668611208635_can.svg HTTP/1.1
Host: rabona.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 26 Nov 2022 21:21:04 GMT
content-type: image/svg+xml
content-security-policy: block-all-mixed-content
etag: W/"342aedf50099e9a223125ac24ba7997d"
last-modified: Wed, 16 Nov 2022 15:06:48 GMT
vary: Origin, Accept-Encoding
x-amz-request-id: 17281C4D31D47FC7
x-xss-protection: 1; mode=block
x-conv-cache-status: MISS
x-front-cache-status: HIT
cf-cache-status: HIT
age: 881983
server: cloudflare
cf-ray: 7705abf3ba9f1c0a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
rabona.com/dimg/team/1668611711325_au.svg
200 OK 0 B URL HTTP/2 rabona.com/dimg/team/1668611711325_au.svg
IP
ASN #209242 Cloudflare London, LLC
GET /dimg/team/1668611711325_au.svg HTTP/1.1
Host: rabona.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 21:21:04 GMT
content-type: image/svg+xml
content-security-policy: block-all-mixed-content
etag: W/"1a50ab86dddf696e092e652181571d7e"
last-modified: Wed, 16 Nov 2022 15:15:11 GMT
vary: Origin, Accept-Encoding
x-amz-request-id: 17281C4D30EE96FA
x-xss-protection: 1; mode=block
x-conv-cache-status: HIT
x-front-cache-status: HIT
cf-cache-status: HIT
age: 881983
server: cloudflare
cf-ray: 7705abf3ba9b1c0a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
rabona.com/dimg/team/1668611337887_bel.svg
200 OK 0 B URL HTTP/2 rabona.com/dimg/team/1668611337887_bel.svg
IP
ASN #209242 Cloudflare London, LLC
GET /dimg/team/1668611337887_bel.svg HTTP/1.1
Host: rabona.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 26 Nov 2022 21:21:04 GMT
content-type: image/svg+xml
content-security-policy: block-all-mixed-content
etag: W/"a8e60e6d6ba2b86740fd5e9a8d5b2bd9"
last-modified: Wed, 16 Nov 2022 15:08:57 GMT
vary: Origin, Accept-Encoding
x-amz-request-id: 17281C4D3008C185
x-xss-protection: 1; mode=block
x-conv-cache-status: HIT
x-front-cache-status: HIT
cf-cache-status: HIT
age: 881983
server: cloudflare
cf-ray: 7705abf43b1e1c0a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
joxi.imgsrcdata.com/content-svg/payments-footer/rabona/paymsystem_footer_mastercard.svg
200 OK 0 B URL HTTP/2 joxi.imgsrcdata.com/content-svg/payments-footer/rabona/paymsystem_footer_mastercard.svg
IP
GET /content-svg/payments-footer/rabona/paymsystem_footer_mastercard.svg HTTP/1.1
Host: joxi.imgsrcdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 21:21:04 GMT
content-type: image/svg+xml
last-modified: Tue, 26 Jan 2021 14:54:11 GMT
etag: W/"60102d13-1b34"
access-control-allow-origin: *
cf-cache-status: HIT
age: 867187
vary: Accept-Encoding
server: cloudflare
cf-ray: 7705abf55cccb4ff-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
joxi.imgsrcdata.com/content-svg/payments-footer/rabona/paymsystem_footer_mifinity.svg
200 OK 0 B URL HTTP/2 joxi.imgsrcdata.com/content-svg/payments-footer/rabona/paymsystem_footer_mifinity.svg
IP
GET /content-svg/payments-footer/rabona/paymsystem_footer_mifinity.svg HTTP/1.1
Host: joxi.imgsrcdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 21:21:04 GMT
content-type: image/svg+xml
last-modified: Tue, 26 Jan 2021 14:54:11 GMT
etag: W/"60102d13-2163"
access-control-allow-origin: *
cf-cache-status: HIT
age: 976271
vary: Accept-Encoding
server: cloudflare
cf-ray: 7705abf5ad2fb4ff-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
joxi.imgsrcdata.com/content-svg/payments-footer/rabona/paymsystem_footer_jeton.svg
200 OK 0 B URL HTTP/2 joxi.imgsrcdata.com/content-svg/payments-footer/rabona/paymsystem_footer_jeton.svg
IP
GET /content-svg/payments-footer/rabona/paymsystem_footer_jeton.svg HTTP/1.1
Host: joxi.imgsrcdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 21:21:04 GMT
content-type: image/svg+xml
last-modified: Thu, 02 Dec 2021 12:30:12 GMT
etag: W/"61a8bc54-154d"
access-control-allow-origin: *
cf-cache-status: HIT
age: 867187
vary: Accept-Encoding
server: cloudflare
cf-ray: 7705abf5ad3ab4ff-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
joxi.imgsrcdata.com/content-svg/payments-footer/rabona/paymsystem_Phonepe.svg
200 OK 0 B URL HTTP/2 joxi.imgsrcdata.com/content-svg/payments-footer/rabona/paymsystem_Phonepe.svg
IP
GET /content-svg/payments-footer/rabona/paymsystem_Phonepe.svg HTTP/1.1
Host: joxi.imgsrcdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 21:21:04 GMT
content-type: image/svg+xml
last-modified: Tue, 28 Sep 2021 07:34:14 GMT
etag: W/"6152c576-1c93"
access-control-allow-origin: *
cf-cache-status: HIT
age: 976271
vary: Accept-Encoding
server: cloudflare
cf-ray: 7705abf5ad35b4ff-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
joxi.imgsrcdata.com/landings/rabona/web_components/steps/world-cup/wcstep_underline_default.svg
200 OK 0 B URL HTTP/2 joxi.imgsrcdata.com/landings/rabona/web_components/steps/world-cup/wcstep_underline_default.svg
IP
GET /landings/rabona/web_components/steps/world-cup/wcstep_underline_default.svg HTTP/1.1
Host: joxi.imgsrcdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 21:21:03 GMT
content-type: image/svg+xml
last-modified: Wed, 09 Nov 2022 14:45:10 GMT
etag: W/"636bbcf6-a5"
access-control-allow-origin: *
cf-cache-status: HIT
age: 723029
vary: Accept-Encoding
server: cloudflare
cf-ray: 7705abeeeb04b4ff-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
rabona.com/dimg/team/1668610639901_us.svg
200 OK 0 B URL HTTP/2 rabona.com/dimg/team/1668610639901_us.svg
IP
ASN #209242 Cloudflare London, LLC
GET /dimg/team/1668610639901_us.svg HTTP/1.1
Host: rabona.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 21:21:04 GMT
content-type: image/svg+xml
content-security-policy: block-all-mixed-content
etag: W/"f9dcba64e77b89ca58c716938ffc16a1"
last-modified: Wed, 16 Nov 2022 14:57:19 GMT
vary: Origin, Accept-Encoding
x-amz-request-id: 17281C4D30EA38F7
x-xss-protection: 1; mode=block
x-conv-cache-status: MISS
x-front-cache-status: HIT
cf-cache-status: HIT
age: 881983
server: cloudflare
cf-ray: 7705abf3ba961c0a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
joxi.imgsrcdata.com/content-svg/payments-footer/rabona/paymsystem_footer_sticpay.svg
200 OK 0 B URL HTTP/2 joxi.imgsrcdata.com/content-svg/payments-footer/rabona/paymsystem_footer_sticpay.svg
IP
GET /content-svg/payments-footer/rabona/paymsystem_footer_sticpay.svg HTTP/1.1
Host: joxi.imgsrcdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 21:21:04 GMT
content-type: image/svg+xml
last-modified: Thu, 02 Dec 2021 12:30:10 GMT
etag: W/"61a8bc52-ce8"
access-control-allow-origin: *
cf-cache-status: HIT
age: 976271
vary: Accept-Encoding
server: cloudflare
cf-ray: 7705abf5ad3bb4ff-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
joxi.imgsrcdata.com/content-svg/payments-footer/rabona/paymsystem_footer_neteller.svg
200 OK 0 B URL HTTP/2 joxi.imgsrcdata.com/content-svg/payments-footer/rabona/paymsystem_footer_neteller.svg
IP
GET /content-svg/payments-footer/rabona/paymsystem_footer_neteller.svg HTTP/1.1
Host: joxi.imgsrcdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 21:21:04 GMT
content-type: image/svg+xml
last-modified: Tue, 26 Jan 2021 14:54:16 GMT
etag: W/"60102d18-af8"
access-control-allow-origin: *
cf-cache-status: HIT
age: 976271
vary: Accept-Encoding
server: cloudflare
cf-ray: 7705abf57cfbb4ff-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
rbnwc.lpmediastorage.com/no/?btag=658915_11B172E10FE64BAD9D2C8BC783293BE8&clickid=wj3mdoajo2k0ploki2dbr40e&MSID=1360468&BID=9057
200 OK 0 B URL HTTP/2 rbnwc.lpmediastorage.com/no/?btag=658915_11B172E10FE64BAD9D2C8BC783293BE8&clickid=wj3mdoajo2k0ploki2dbr40e&MSID=1360468&BID=9057
IP
GET /no/?btag=658915_11B172E10FE64BAD9D2C8BC783293BE8&clickid=wj3mdoajo2k0ploki2dbr40e&MSID=1360468&BID=9057 HTTP/1.1
Host: rbnwc.lpmediastorage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 26 Nov 2022 21:21:03 GMT
content-type: text/html
last-modified: Wed, 23 Nov 2022 08:21:19 GMT
vary: Accept-Encoding
cf-cache-status: MISS
expires: Sun, 27 Nov 2022 01:21:03 GMT
cache-control: public, max-age=14400
server: cloudflare
cf-ray: 7705abe43e92fac0-OSL
content-encoding: br
X-Firefox-Spdy: h2
rbnwc.lpmediastorage.com/index.1669191633059.css
200 OK 0 B URL HTTP/2 rbnwc.lpmediastorage.com/index.1669191633059.css
IP
GET /index.1669191633059.css HTTP/1.1
Host: rbnwc.lpmediastorage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/no/?btag=658915_11B172E10FE64BAD9D2C8BC783293BE8&clickid=wj3mdoajo2k0ploki2dbr40e&MSID=1360468&BID=9057
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 21:21:03 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=25491
etag: W/"637dd7ff-6393"
last-modified: Wed, 23 Nov 2022 08:21:19 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 455
expires: Sun, 27 Nov 2022 01:21:03 GMT
cache-control: public, max-age=14400
server: cloudflare
cf-ray: 7705abebabd2fac0-OSL
content-encoding: br
X-Firefox-Spdy: h2
joxi.imgsrcdata.com/landings/rabona/web_components/steps/world-cup/wcstep_icon-1_active.svg
200 OK 0 B URL HTTP/2 joxi.imgsrcdata.com/landings/rabona/web_components/steps/world-cup/wcstep_icon-1_active.svg
IP
GET /landings/rabona/web_components/steps/world-cup/wcstep_icon-1_active.svg HTTP/1.1
Host: joxi.imgsrcdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 21:21:03 GMT
content-type: image/svg+xml
last-modified: Wed, 09 Nov 2022 13:43:19 GMT
etag: W/"636bae77-451"
access-control-allow-origin: *
cf-cache-status: HIT
age: 723029
vary: Accept-Encoding
server: cloudflare
cf-ray: 7705abeeeb05b4ff-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
joxi.imgsrcdata.com/landings/rabona/video/world-cup/wc-animation_breakpoint-2560-1920.mp4?v=3
206 Partial Content 0 B URL HTTP/2 joxi.imgsrcdata.com/landings/rabona/video/world-cup/wc-animation_breakpoint-2560-1920.mp4?v=3
IP
GET /landings/rabona/video/world-cup/wc-animation_breakpoint-2560-1920.mp4?v=3 HTTP/1.1
Host: joxi.imgsrcdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 206 Partial Content
date: Sat, 26 Nov 2022 21:21:03 GMT
content-type: video/mp4
content-length: 1998395
last-modified: Wed, 09 Nov 2022 13:43:14 GMT
etag: "636bae72-1e7e3b"
access-control-allow-origin: *
cf-cache-status: HIT
age: 723029
content-range: bytes 0-1998394/1998395
server: cloudflare
cf-ray: 7705abef2b5ab4ff-OSL
X-Firefox-Spdy: h2
rabona.com/dimg/team/1668611608748_es.svg
200 OK 0 B URL HTTP/2 rabona.com/dimg/team/1668611608748_es.svg
IP
ASN #209242 Cloudflare London, LLC
GET /dimg/team/1668611608748_es.svg HTTP/1.1
Host: rabona.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 26 Nov 2022 21:21:04 GMT
content-type: image/svg+xml
content-security-policy: block-all-mixed-content
etag: W/"49f40b07c136adfa168b1edfc400413c"
last-modified: Wed, 16 Nov 2022 15:13:28 GMT
vary: Origin, Accept-Encoding
x-amz-request-id: 17281C4D3303E9E3
x-xss-protection: 1; mode=block
x-conv-cache-status: HIT
x-front-cache-status: MISS
cf-cache-status: HIT
age: 881983
server: cloudflare
cf-ray: 7705abf3ba801c0a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
rabona.com/dimg/team/1668613878666_cr.svg
200 OK 0 B URL HTTP/2 rabona.com/dimg/team/1668613878666_cr.svg
IP
ASN #209242 Cloudflare London, LLC
GET /dimg/team/1668613878666_cr.svg HTTP/1.1
Host: rabona.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 21:21:04 GMT
content-type: image/svg+xml
content-security-policy: block-all-mixed-content
etag: W/"3eea5c265f7628a6b13c509adf4a1fa1"
last-modified: Wed, 16 Nov 2022 15:51:18 GMT
vary: Origin, Accept-Encoding
x-amz-request-id: 17281C4D331F67DD
x-xss-protection: 1; mode=block
x-conv-cache-status: MISS
x-front-cache-status: HIT
cf-cache-status: HIT
age: 881983
server: cloudflare
cf-ray: 7705abf3ba8b1c0a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
rabona.com/dimg/team/france.svg
200 OK 0 B URL HTTP/2 rabona.com/dimg/team/france.svg
IP
ASN #209242 Cloudflare London, LLC
GET /dimg/team/france.svg HTTP/1.1
Host: rabona.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 21:21:04 GMT
content-type: image/svg+xml
content-security-policy: block-all-mixed-content
etag: W/"2f9befe94ef9076d58b0a2ae38e1a025"
last-modified: Mon, 23 Aug 2021 17:59:39 GMT
vary: Origin, Accept-Encoding
x-amz-request-id: 17011B8BDC34D822
x-xss-protection: 1; mode=block
x-conv-cache-status: HIT
x-front-cache-status: HIT
cf-cache-status: HIT
age: 952472
server: cloudflare
cf-ray: 7705abf3ba9a1c0a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
rabona.com/dimg/team/1653981614751_flagofqatar-1.svg
200 OK 0 B URL HTTP/2 rabona.com/dimg/team/1653981614751_flagofqatar-1.svg
IP
ASN #209242 Cloudflare London, LLC
GET /dimg/team/1653981614751_flagofqatar-1.svg HTTP/1.1
Host: rabona.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 21:21:04 GMT
content-type: image/svg+xml
content-security-policy: block-all-mixed-content
etag: W/"5bb5a068449de059e23908479a70ef42"
last-modified: Tue, 31 May 2022 07:20:14 GMT
vary: Origin, Accept-Encoding
x-amz-request-id: 1701B83DF15CB85F
x-xss-protection: 1; mode=block
x-conv-cache-status: HIT
x-front-cache-status: HIT
cf-cache-status: HIT
age: 957677
server: cloudflare
cf-ray: 7705abf3ba901c0a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
rabona.com/dimg/team/1668611815388_dk.svg
200 OK 0 B URL HTTP/2 rabona.com/dimg/team/1668611815388_dk.svg
IP
ASN #209242 Cloudflare London, LLC
GET /dimg/team/1668611815388_dk.svg HTTP/1.1
Host: rabona.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 21:21:04 GMT
content-type: image/svg+xml
content-security-policy: block-all-mixed-content
etag: W/"2c078b26e453e344b02d028fcbd4a629"
last-modified: Wed, 16 Nov 2022 15:16:55 GMT
vary: Origin, Accept-Encoding
x-amz-request-id: 17281C4D3071F2F5
x-xss-protection: 1; mode=block
x-conv-cache-status: HIT
x-front-cache-status: HIT
cf-cache-status: HIT
age: 881983
server: cloudflare
cf-ray: 7705abf3ba9d1c0a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
rabona.com/dimg/team/1668613854808_eng.svg
200 OK 0 B URL HTTP/2 rabona.com/dimg/team/1668613854808_eng.svg
IP
ASN #209242 Cloudflare London, LLC
GET /dimg/team/1668613854808_eng.svg HTTP/1.1
Host: rabona.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 21:21:04 GMT
content-type: image/svg+xml
content-security-policy: block-all-mixed-content
etag: W/"88faab9969508f016f86cbbc328dbce7"
last-modified: Wed, 16 Nov 2022 15:50:54 GMT
vary: Origin, Accept-Encoding
x-amz-request-id: 17281C4D303758E3
x-xss-protection: 1; mode=block
x-conv-cache-status: HIT
x-front-cache-status: MISS
cf-cache-status: HIT
age: 881983
server: cloudflare
cf-ray: 7705abf3ba931c0a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
rabona.com/dimg/team/1668611653436_de.svg
200 OK 0 B URL HTTP/2 rabona.com/dimg/team/1668611653436_de.svg
IP
ASN #209242 Cloudflare London, LLC
GET /dimg/team/1668611653436_de.svg HTTP/1.1
Host: rabona.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 26 Nov 2022 21:21:04 GMT
content-type: image/svg+xml
content-security-policy: block-all-mixed-content
etag: W/"b5aa958e4ae9e8029a1e03c19514f5bf"
last-modified: Wed, 16 Nov 2022 15:14:13 GMT
vary: Origin, Accept-Encoding
x-amz-request-id: 17281C4D32F8C98D
x-xss-protection: 1; mode=block
x-conv-cache-status: MISS
x-front-cache-status: HIT
cf-cache-status: HIT
age: 881983
server: cloudflare
cf-ray: 7705abf3daac1c0a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
joxi.imgsrcdata.com/content-svg/payments-footer/rabona/paymsystem_footer_giropay.svg
200 OK 0 B URL HTTP/2 joxi.imgsrcdata.com/content-svg/payments-footer/rabona/paymsystem_footer_giropay.svg
IP
GET /content-svg/payments-footer/rabona/paymsystem_footer_giropay.svg HTTP/1.1
Host: joxi.imgsrcdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rbnwc.lpmediastorage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 21:21:04 GMT
content-type: image/svg+xml
last-modified: Fri, 26 Nov 2021 11:39:10 GMT
etag: W/"61a0c75e-e11"
access-control-allow-origin: *
cf-cache-status: HIT
age: 976271
vary: Accept-Encoding
server: cloudflare
cf-ray: 7705abf5ad38b4ff-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
139.45.197.238
23.36.77.32
18.193.209.105
34.160.144.191
104.18.36.105
45.8.106.46