POST /mon HTTP/1.1
Host: obseu.youseasky.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1897
Origin: https://intranet.9tickets.com
DNT: 1
Connection: keep-alive
Referer: https://intranet.9tickets.com/
Cookie: cg_uuid=761288c81872da2aa423dca4707ca129
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://intranet.9tickets.com
content-type: application/json
date: Mon, 04 Aug 2025 06:13:45 GMT
content-length: 0
X-Firefox-Spdy: h2

GET /adsense/domains/caf.js?abp=1&adsdeli=true HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intranet.9tickets.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
date: Mon, 04 Aug 2025 06:13:39 GMT
expires: Mon, 04 Aug 2025 06:13:39 GMT
cache-control: private, max-age=3600
etag: "14366980809755569390"
x-content-type-options: nosniff
link: <https://syndicatedsearch.goog>; rel="preconnect"
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET /ct?id=80705&url=https%3A%2F%2Fintranet.9tickets.com%2F&sf=0&tpi=&ch=AdsDeli%20-%20domain%20-%20landingpage&uvid=b2bffee9eaa624f67562ea0fc06e98ff41a595a5&tsf=0&tsfmi=&tsfu=&cb=1754288020169&hl=2&op=0&ag=637386554&rand=6359101997157777915161786102526995592902122762160097111808169718228052182927154602285118&fs=1280x1024&fst=1280x1024&np=win32&nv=&ref=&ss=1280x1024&nc=0&at=&di=W1siZWYiLDQxNTNdLFsiYWJuY2giLDE5XSxbLTMsIltcImludGVybmFsLXBkZi12aWV3ZXJcIixcImludGVybmFsLXBkZi12aWV3ZXJcIixcImludGVybmFsLXBkZi12aWV3ZXJcIixcImludGVybmFsLXBkZi12aWV3ZXJcIixcImludGVybmFsLXBkZi12aWV3ZXJcIl0iXSxbLTcsIi0iXSxbLTEsIkxpbnV4IHg4Nl82NCJdLFstNSwiLSJdLFstNDAsIjM3Il0sWy00NSwiNzUyLDAsMCw3MTksMCwwLDc2MSwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwIl0sWy03NCwiLSJdLFstMTYsIjAiXSxbLTI0LCJbXSJdLFstNDYsIjAiXSxbLTUyLCItIl0sWy02NywiLSJdLFstMjYsIi0iXSxbLTI5LCItIl0sWy01NSwiMCJdLFstMTEsIntcInRcIjpcIlwiLFwibVwiOltcImRlc2NyaXB0aW9uXCJdfSJdLFstMzUsIlsxNzU0Mjg4MDE5NTkwLDBdIl0sWy01NCwie1wiaFwiOltcIjMyOTk3Mjg0NTJcIixcIjgyMjgyMzExOVwiLFwiXzNcIixcIjI2MzkyMjI0NjhcIl0sXCJkXCI6W10sXCJiXCI6W1wiXzBcIixcIjI2NDYwMzg4MlwiXSxcInNcIjoxfSJdLFstNjQsIi0iXSxbLTczLCJFaFE9Il0sWy0xMiwiXCIxXCIiXSxbLTIzLCIrIl0sWy0yNywiLSJdLFstMzAsIltcInZcIiwwXSJdLFstMzksIltcIjIwMTAwMTAxXCIsMixcIkdlY2tvXCIsXCJOZXRzY2FwZVwiLFwiTW96aWxsYVwiLFwiMjAxODEwMDEwMDAwMDBcIixudWxsLGZhbHNlLG51bGwsZmFsc2UsbnVsbCw1LHRydWUsZmFsc2UsbnVsbCwwLGZhbHNlLGZhbHNlLGZhbHNlLGZhbHNlXSJdLFstNTksIi0iXSxbLTY5LCJXaW4zMnx8fDQ4fC18LSJdLFstNzIsIkV4VT0iXSxbLTksIi0iXSxbLTE3LCI0OCJdLFstMzYsIltcIjUvNFwiLFwiNS80XCJdIl0sWy0zOCwiaSwtMSwtMSwyOCwwLDEsMCw1NywxMTQsNzIsLTEsMCwsNjEyLDEwMzQsMTAzNCJdLFstNjUsIi0iXSxbLTcxLCJhMDEwMDEwMTEwMDEwMDEwMTAwMDEwMTAwMTEwMTEwMDAwMDAxMCJdLFstMTUsIi0iXSxbLTE5LCJbMCwwLDAsMCwwLDAsMSwyNCwyNCxcIi1cIiwxMjgwLDEwMjQsMTI4MCwxMDI0LDEyODAsMTAyNCwxMjgwLDEwMjQsMCwwLDAsMCxcIi1cIixcIi1cIiwxMjgwLDEwMjQsbnVsbF0iXSxbLTIxLCItIl0sWy0yMiwiW1wiblwiLFwiblwiXSJdLFstMjUsIi0iXSxbLTI4LCJlbi1VUyxlbiJdLFstMzcsIi0iXSxbLTQ0LCIwLDUsMCw1Il0sWy00NywiVVRDLGVuLVVTLGxhdG4sZ3JlZ29yeSJdLFstNjAsIi0iXSxbLTYzLCItIl0sWy02LCJ7XCJ3XCI6W1wiMFwiLFwidGNibG9ja1wiLFwic2VhcmNoYm94QmxvY2tcIixcImdldFhNTGh0dHBcIixcImFqYXhRdWVyeVwiLFwiYWpheEJhY2tmaWxsXCIsXCJsb2FkRmVlZFwiLFwieG1sSHR0cFwiLFwibHNcIixcImdldExvYWRGZWVkQXJndW1lbnRzXCIsXCJfX2N0Y2dfY3RfODA3MDVfZXhlY1wiLFwiTm90aWZ5UGFpbnRFdmVudFwiLFwiZ29vZ2xlTkRUX1wiLFwiZ29vZ2xlQWx0TG9hZGVyXCIsXCJnb29nbGVcIixcIl9fc2FzQ29va2llXCJdLFwiblwiOltdLFwiZFwiOltdfSJdLFstMTAsIi0iXSxbLTE0LCItIl0sWy01MCwiLSJdLFstNTMsIjAwMSJdLFstNTcsIlMzbFJUVTFKU2dNV0ZseE1WbHNYUUZaTVNseFlTbEpBRjFwV1ZCWktRVWtXVUJZTEN3MWZBUXdLQ1F0WVdBdGJEMXhhQ2dsWVdGb0FXQUVNWFZnTFdsdGZBQmRUU2dNSUF3OE1DUWtLRlE0SUFCWk5GMXhCU1ZaTFRVb1dCWGxSVFUxSlNnTVdGbHhNVmxzWFFGWk1TbHhZU2xKQUYxcFdWQlpLUVVrV1VCWUxDdzFmQVF3S0NRdFlXQXRiRDF4YUNnbFlXRm9BV0FFTVhWZ0xXbHRmQUJkVFNnTUlBdzhNQ0FBQUZVcGNUVzFRVkZ4V1RFMFpVVmhYWFZWY1N4TU9DQUFXVFJkY1FVbFdTMDFLRmdWNVVVMU5TVW9ERmhaY1RGWmJGMEJXVEVwY1dFcFNRQmRhVmxRV1NrRkpGbEFXQ3dzTlh3RU1DZ2tMV0ZnTFd3OWNXZz09Il0sWy0yLCIxMyxJc045bkduV2JBWUFJeE5mUWFPcUdFMENGQVFzY0cwMEluaE9iWUJBS1lVT3pRTzZFWDAyMEltR0xjdTYydXJkUC9jMmQycE5tVlpBd2YzLy84ejc5R3JIYTFXdTNPbVhQUHZlIl0sWy04LCItIl0sWzEyLCJ7XCJjdHhcIjpcIndlYmdsXCIsXCJ2XCI6XCJtZXNhXCIsXCJyXCI6XCJsbHZtcGlwZVwiLFwic2x2XCI6XCJ3ZWJnbCBnbHNsIGVzIDEuMFwiLFwiZ3ZlclwiOlwid2ViZ2wgMS4wXCIsXCJndmVuXCI6XCJtb3ppbGxhXCIsXCJiZW5cIjoxMzEsXCJ3Z2xcIjoxLFwiZ3JlblwiOlwibGx2bXBpcGVcIixcInNlZlwiOjQ5NDE5NTA0MyxcInNlY1wiOlwiXCJ9Il0sWy0xMywiLSJdLFstMzEsImZhbHNlIl0sWy0zNCwiLSJdLFstNDEsIi0iXSxbLTQ4LCJbXCItXCIsXCItXCIsXCItXCIsXCItXCIsXCItXCJdIl0sWy01OCwiLSJdLFstNjIsIjU4Il0sWyJibmNoIiw3NjldLFstNjYsIi0iXSxbLTcwLCItIl0sWy00LCItIl0sWy0xOCwiWzEsMCwwLDBdIl0sWy0zMiwiMCJdLFstMzMsIi0iXSxbLTQ5LCItIl0sWy01MSwiLSJdLFstMjAsIi0iXSxbLTQyLCI4ODMzOTkwMTYiXSxbLTQzLCIwMDAwMDAwMTAwMDAwMDAwMDAxMTEwMDEwMDAwMDEwMDAwMDAwMDAwMCJdLFstNTYsImxhbmRzY2FwZS1wcmltYXJ5Il0sWy02MSwiLSJdLFstNjgsIi0iXSxbImRkYiIsIjAsMTMsMCwwLDAsNiwwLDAsMCwwLDAsMCwxLDAsMSwwLDAsMCwwLDAsMCwwLDAsMSwwLDAsMCwxLDAsMCwwLDEsMCwwLDEsMiwwLDAsMSwwLDAsMCwxLDQsNDgsMCwyNSwwLDEsMCwwLDAsMSwyLDAsMCwwLDIsMCwwLDAsMSwwLDAsMCwwLDAsMCwyLDEsMSwxLDEsMCJdLFsiY2IiLCIwLDAsMCwwLDEsMCwwLDAsMSw0LDM3LDAsMTU5LDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwxMiwwLDAsMCwxLDAsMCwwLDEsMCwwLDAsMCwwLDAsMCwxLDEsMCwyLDEsMCwwLDAsMCwwLDAsMCwwLDEsMCwwLDEsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCw0LDAsMSwwLDEsMCJdXQ%3D%3D&dep=0&pre=0&sdd=&cri=vpmqNHP0FB&pto=1433&ver=65&gac=-&mei=&ap=&fe=1&duid=1.1754288020.qDKObcP9WGKE0qCH&suid=1.1754288020.nNbgfGLZ2GnuaBWj&tuid=1.1754288020.5QG4XX0xIjEBmXzL&fbc=-&gtm=-&it=11%2C451%2C88&fbcl=-&gacl=-&gacsd=-&rtic=-&rtict=-&bgc=-&spa=1&urid=0&ab=&sck=-&io=aGA2Og%3D%3D HTTP/1.1
Host: obseu.youseasky.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intranet.9tickets.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
content-encoding: gzip
content-type: text/javascript
date: Mon, 04 Aug 2025 06:13:40 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
set-cookie: cg_uuid=761288c81872da2aa423dca4707ca129; Max-Age=29030400; Path=/; Expires=Mon, 06 Jul 2026 06:13:40 GMT; HttpOnly; Secure; SameSite=None
timing-allow-origin: https://intranet.9tickets.com
content-length: 1279
X-Firefox-Spdy: h2

GET /tracker/tc_imp.gif?e=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&cri=vpmqNHP0FB&ts=518&cb=1754288020687 HTTP/1.1
Host: obseu.youseasky.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intranet.9tickets.com/
Cookie: cg_uuid=761288c81872da2aa423dca4707ca129
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
date: Mon, 04 Aug 2025 06:13:40 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
content-length: 43
X-Firefox-Spdy: h2

GET /afs/gen_204?client=dp-teaminternet04_3ph&output=uds_ads_only&zx=9p7h84v23gsk&cd_fexp=72717108&aqid=k0-QaNKULduExdwPqKOa4AQ&psid=5837883959&pbt=bs&adbx=375&adby=169&adbh=498&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet04_3ph&errv=788436323&csala=7%7C0%7C294%7C99%7C133&lle=0&ifv=1&hpt=1 HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intranet.9tickets.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-CLgdM_Oys9E8QZABzB7TcQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
permissions-policy: unload=()
date: Mon, 04 Aug 2025 06:13:41 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

GET /afs/gen_204?client=dp-teaminternet04_3ph&output=uds_ads_only&zx=yr8aajhux1lk&cd_fexp=72717108&aqid=k0-QaNKULduExdwPqKOa4AQ&psid=5837883959&pbt=bv&adbx=375&adby=169&adbh=498&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet04_3ph&errv=788436323&csala=7%7C0%7C294%7C99%7C133&lle=0&ifv=1&hpt=1 HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intranet.9tickets.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-Cn5-hzCaSCrnGxglGM8pZg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
permissions-policy: unload=()
date: Mon, 04 Aug 2025 06:13:41 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

POST /mon HTTP/1.1
Host: obseu.youseasky.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1897
Origin: https://intranet.9tickets.com
DNT: 1
Connection: keep-alive
Referer: https://intranet.9tickets.com/
Cookie: cg_uuid=761288c81872da2aa423dca4707ca129
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://intranet.9tickets.com
content-type: application/json
date: Mon, 04 Aug 2025 06:13:43 GMT
content-length: 0
X-Firefox-Spdy: h2

GET / HTTP/1.1
Host: intranet.9tickets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
accept-ch-lifetime: 30
alt-svc: h3=":8443"; ma=2592000
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Mon, 04 Aug 2025 06:13:38 GMT
vary: Accept-Encoding
via: 1.1 Caddy, 0.0 Caddy
x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_Sqq/0KdZGUwZtTpw6pbTFNYQnIjyZh9TsgGxqebEEXkM/fLQiK7c8pnWvWl31m1YOoDqQi4nj5/R+PETd3CvhQ==
x-buckets: bucket003,bucket077
x-domain: 9tickets.com
x-language: norwegian
x-pcrew-blocked-reason: hosting network
x-pcrew-ip-organization: Blix Solutions
x-subdomain: intranet
x-template: tpl_CleanPeppermintBlack_twoclick
X-Firefox-Spdy: h2

GET /munin/a/ls?t=68904f92&token=b2bffee9eaa624f67562ea0fc06e98ff41a595a5 HTTP/1.1
Host: intranet.9tickets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intranet.9tickets.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 201 Created
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-origin: *
access-control-max-age: 86400
alt-svc: h3=":8443"; ma=2592000
date: Mon, 04 Aug 2025 06:13:39 GMT
server: Caddy
via: 1.1 Caddy
x-log-success: 68904f933549ea8cf4fe8333
content-length: 0
X-Firefox-Spdy: h2

GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1
Host: d38psrni17bvxu.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intranet.9tickets.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/png
content-length: 11375
server: nginx
date: Mon, 04 Aug 2025 05:29:31 GMT
accept-ranges: bytes
last-modified: Thu, 21 Mar 2024 11:48:11 GMT
etag: "czzekhpxmtxd8rz"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 42b1b4c2d68cc43ab5019609cede1d92.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P2
x-amz-cf-id: oSTjzdaQFLMQPkTwGsZEWbiXMNDonmkFaxMlpNjTF79nNqLo8A2Rxw==
age: 2648
X-Firefox-Spdy: h2

GET /favicon.ico HTTP/1.1
Host: intranet.9tickets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intranet.9tickets.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
alt-svc: h3=":8443"; ma=2592000
content-type: image/vnd.microsoft.icon
date: Mon, 04 Aug 2025 06:13:39 GMT
etag: "dbq3yx0sj1pj0"
last-modified: Thu, 31 Jul 2025 08:47:31 GMT
server: Caddy
vary: Accept-Encoding
via: 1.1 Caddy
content-length: 0
X-Firefox-Spdy: h2

GET /ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff HTTP/1.1
Host: afs.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://syndicatedsearch.goog/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 270
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 03 Aug 2025 11:59:49 GMT
expires: Mon, 04 Aug 2025 10:59:49 GMT
cache-control: public, max-age=82800
age: 65631
last-modified: Thu, 20 Jul 2023 22:48:00 GMT
content-type: image/svg+xml
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

POST /mon HTTP/1.1
Host: obseu.youseasky.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1900
Origin: https://intranet.9tickets.com
DNT: 1
Connection: keep-alive
Referer: https://intranet.9tickets.com/
Cookie: cg_uuid=761288c81872da2aa423dca4707ca129
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://intranet.9tickets.com
content-type: application/json
date: Mon, 04 Aug 2025 06:13:55 GMT
content-length: 0
X-Firefox-Spdy: h2

GET /sxp/i/224f85302aa2b6ec30aac9a85da2cbf9.js HTTP/1.1
Host: euob.youseasky.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intranet.9tickets.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
content-length: 42496
content-encoding: gzip
server: Caddy
date: Mon, 04 Aug 2025 05:27:42 GMT
cache-control: max-age=43200
expires: Mon, 04 Aug 2025 17:27:38 GMT
etag: "1c463-a58KpXdeaJHjsjAtkPOrxOllwUk"
vary: accept-encoding
x-cache: Hit from cloudfront
via: 1.1 53019ee090f087ca6c6fa860098bcd80.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P2
x-amz-cf-id: nnmeec4uiuxgp9dhBDLyYsK01E3WuC3X5dZrwxO9_cYH_nbltNxeLA==
age: 2761
X-Firefox-Spdy: h2

GET /afs/ads?adtest=off&psid=5837883959&pcsa=false&channel=000001%2Cbucket003%2Cbucket077&client=dp-teaminternet04_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fintranet.9tickets.com%2F%3Fts%3DeyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.T0VL6Ui0GuDqhlExotIFZcMTgnBihF4FtXU_7KfCAxJBICmVcDfq-g.nXDgxFKXwPphKjcDRkwsvQ.wmqxWjp436UKQ8bps-EAjDF4Kc7veBC_gRSjaHmf9pitlgGfCY5Pkx6Hp-HXil8AYQA_kOh1qUudFV7W7H_kayGtLSAYgmFPKn_syasaOidmMR-fAOEoC2W3_GkTeodsQuw_e7DIVapMuWNXAL0_q5OnKugBOzJMk1-svmSiyijdyuGRYw4oApQt3Gk2pC-_UFtU8NaFY6kDffiGOtayaWQj222KiEEoCZkntSVTWFd_iSmGL8qDlK4YtikT0vc9vKWGD0kOqxBsxcShVidw67U2g5TqFmWKF95ycc3jWdOwtnk7ZPv1cG6RmqR-40CkIO-QIYbJ1TM0dS_g2NNIbUNvu71m2WFhe35tkNH9_VKFS_Cw8ks5KVDaAgc-inqt2QqwbdJrNlxpPPByNLY3LCgfsnqBsCRoHdJ7_vs00NJaWs1YL3XsabovZdhGaLjxXtmyV5Zdg-qerVNn7Dn40P5nc-VJ7IVuoJSmW04KRG77DDLRQEbW9uX3CCc3Bm638A5rNYjZUjlDAknGe_dpN6_AASa89Ibd1GaWZNvavAbEDqwXUU0b7w4o7u5YXaRedxwz-tiMjxtFTyLkYS2DYjUYkxvY9gNHGaeITOqq5NiUjDrcoX2YuMcwTrDKpEvs96Gm5hJ-HtQ2Nej-SqZT9g.eRDbAFnwW5j_sqfaaSMr3w&max_radlink_len=40&type=3&swp=as-drid-2398813393673728&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301431%2C17301433%2C17301436%2C17301548%2C17301266%2C72717108&format=r3%7Cs&nocache=1361754288019621&num=0&output=afd_ads&domain_name=intranet.9tickets.com&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1754288019622&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=797&frm=0&uio=--&cont=tc&drt=0&jsid=caf&jsv=788436323&rurl=https%3A%2F%2Fintranet.9tickets.com%2F HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intranet.9tickets.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/html; charset=UTF-8
content-disposition: inline
date: Mon, 04 Aug 2025 06:13:39 GMT
expires: Mon, 04 Aug 2025 06:13:39 GMT
cache-control: private, max-age=3600
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-rHh1X172XTkgPXB_UdkYvQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
accept-ch: Downlink, RTT
content-encoding: br
server: gws
content-length: 3496
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET /adsense/domains/caf.js?pac=0 HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://syndicatedsearch.goog/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
date: Mon, 04 Aug 2025 06:13:39 GMT
expires: Mon, 04 Aug 2025 06:13:39 GMT
cache-control: private, max-age=3600
etag: "1710142477429985744"
x-content-type-options: nosniff
link: <https://syndicatedsearch.goog>; rel="preconnect"
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

POST /mon HTTP/1.1
Host: obseu.youseasky.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 2665
Origin: https://intranet.9tickets.com
DNT: 1
Connection: keep-alive
Referer: https://intranet.9tickets.com/
Cookie: cg_uuid=761288c81872da2aa423dca4707ca129
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://intranet.9tickets.com
content-type: application/json
date: Mon, 04 Aug 2025 06:13:41 GMT
content-length: 0
X-Firefox-Spdy: h2

POST /mon HTTP/1.1
Host: obseu.youseasky.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1900
Origin: https://intranet.9tickets.com
DNT: 1
Connection: keep-alive
Referer: https://intranet.9tickets.com/
Cookie: cg_uuid=761288c81872da2aa423dca4707ca129
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://intranet.9tickets.com
content-type: application/json
date: Mon, 04 Aug 2025 06:13:50 GMT
content-length: 0
X-Firefox-Spdy: h2

GET /munin/a/tr/browserjs?domain=9tickets.com&toggle=browserjs&uid=MTc1NDI4ODAxOC45NTg6YjZmNDlhM2Q2MzY0Y2EzM2M5NGFmN2RmNThlMGI3ODJiOWZhMjM4NWNmMDJkZWJkY2VjZDQ2NjhiMGVmNjAxZjo2ODkwNGY5MmU5ZTYx HTTP/1.1
Host: intranet.9tickets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intranet.9tickets.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
accept-ch-lifetime: 30
access-control-allow-origin: *
alt-svc: h3=":8443"; ma=2592000
content-type: text/html; charset=UTF-8
date: Mon, 04 Aug 2025 06:13:39 GMT
via: 1.1 Caddy, 0.0 Caddy
x-custom-track: browserjs
content-length: 0
X-Firefox-Spdy: h2

GET /munin/a/tr/answercheck/yes?domain=9tickets.com&caf=1&toggle=answercheck&answer=yes&uid=MTc1NDI4ODAxOC45NTg6YjZmNDlhM2Q2MzY0Y2EzM2M5NGFmN2RmNThlMGI3ODJiOWZhMjM4NWNmMDJkZWJkY2VjZDQ2NjhiMGVmNjAxZjo2ODkwNGY5MmU5ZTYx HTTP/1.1
Host: intranet.9tickets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intranet.9tickets.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
accept-ch-lifetime: 30
access-control-allow-origin: *
alt-svc: h3=":8443"; ma=2592000
content-type: text/html; charset=UTF-8
date: Mon, 04 Aug 2025 06:13:40 GMT
via: 1.1 Caddy, 0.0 Caddy
x-custom-track: answercheck
content-length: 0
X-Firefox-Spdy: h2

GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1
Host: afs.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://syndicatedsearch.goog/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 174
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 03 Aug 2025 12:11:50 GMT
expires: Mon, 04 Aug 2025 11:11:50 GMT
cache-control: public, max-age=82800
age: 64910
last-modified: Thu, 02 Nov 2023 22:48:00 GMT
content-type: image/svg+xml
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2