rouva-v.vuodatus.net/lue/2008/11/muutama-koristeltu-pipari
301 Moved Permanently 274 B URL HTTP/1.1 rouva-v.vuodatus.net/lue/2008/11/muutama-koristeltu-pipari
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash aa1d8da079d8a3d2cc889d85cccd2ed5
9c27235d404119a62ae84ab4de8bb938f05cc6b8
8b63aaab017ccf617bb721d544eb919763a310b75b0ab074614604b7f1636c56
GET /lue/2008/11/muutama-koristeltu-pipari HTTP/1.1
Host: rouva-v.vuodatus.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Thu, 24 Nov 2022 17:18:22 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://rouva-v.vuodatus.net/lue/2008/11/muutama-koristeltu-pipari
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PRVa5i9M7g%2BSq8oz%2BVWF1CqnHXiFstpB2JFU83jUMh3liXrXBVdVA%2BbkJyEnkBPW1UKO5R66NW23hnQq9UfA5ETiOdwtCN%2FRP55efpTTGDNanqS7DC3htFDTj3UjdWngGY69C9n6"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 76f3cdb1299ab505-OSL
alt-svc: h2=":443"; ma=60
ocsp.digicert.com/
200 OK 471 B IP
Hash af40a2fcf8debb90c3608002da6c907a
3c75d6c0b557a3bd8d5db50155b8d896e852c145
555617a51ee3077552545a29a3baf0b43e8a82367e4c08110ee480ebedc8b523
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2238
Cache-Control: max-age=150606
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 17:18:23 GMT
Etag: "637f47ef-1d7"
Expires: Sat, 26 Nov 2022 11:08:29 GMT
Last-Modified: Thu, 24 Nov 2022 10:31:11 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a9f1d4d98705c281fed3b60343463200
db6f8aa98d2eda4e5473b116a222c3055568bb78
164d11173045b569cafb32e300e4c1ec6d6ab177fd34d0414cc40c541268779f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "164D11173045B569CAFB32E300E4C1EC6D6AB177FD34D0414CC40C541268779F"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13486
Expires: Thu, 24 Nov 2022 21:03:09 GMT
Date: Thu, 24 Nov 2022 17:18:23 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 260e9998c20d831b66f1029c8f47aac9
716d630f647c54dc69a7f9c63a6cac294b3df7f7
c9951a909f354174f0075a01c01c3c3aa6960983040e328bfbbbea81aeb405c2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C9951A909F354174F0075A01C01C3C3AA6960983040E328BFBBBEA81AEB405C2"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2392
Expires: Thu, 24 Nov 2022 17:58:15 GMT
Date: Thu, 24 Nov 2022 17:18:23 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 4d7e4eed097b9c4e5d509419f1cfc85a
290bb3d428a7c6330e2e3d73a952b16f820896c8
0dc9ca0f57af15adcd416035e92794711434e3d53a1feff21d8481d6d500986c
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Content-Length, Alert, Backoff, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 24 Nov 2022 16:18:58 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 3565
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: s+lALpjtyYWNK9GORqCf1eyXJ5qGHIkVbBc4LEnXj7EPY9WAzSYmFwwkTgI0m84tGaScUyrdOH/cp0kR1zA3zQ==
x-amz-request-id: 9MA4SWXCVGWNDMN2
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 24 Nov 2022 16:40:28 GMT
age: 2275
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 344 B IP
ASN #20940 Akamai International B.V.
Hash ac9962a0971d6874f0544f132bb472fe
740f6f5b628ed19ce5241b66e8b803164f9a601e
f5c43515fee2f1f4748b03d0fce09c8847f969b45f825eeb29187acb55aeb701
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "F5C43515FEE2F1F4748B03D0FCE09C8847F969B45F825EEB29187ACB55AEB701"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17598
Expires: Thu, 24 Nov 2022 22:11:41 GMT
Date: Thu, 24 Nov 2022 17:18:23 GMT
Connection: keep-alive
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 17:18:23 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Cache-Control, ETag, Pragma, Expires, Backoff, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 24 Nov 2022 17:11:11 GMT
cache-control: public,max-age=3600
age: 432
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash fb6949e7abaa473393f7c604691de14f
599681bba3947709baa603bbae2dd7afd04059a4
36c5165526ea9d34de14d36655ed494d0cffaa11ca3271ee47824ac11246ba13
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6223
Cache-Control: max-age=149529
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 17:18:23 GMT
Etag: "637f3429-1d7"
Expires: Sat, 26 Nov 2022 10:50:32 GMT
Last-Modified: Thu, 24 Nov 2022 09:06:49 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: aP6gNZO2m4UsHmmYVH21GA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: DxdjoEgP9T5C6C+l5ak1+7kTSk4=
s7.addthis.com/js/300/addthis_widget.js
200 OK 116 kB URL HTTP/2 s7.addthis.com/js/300/addthis_widget.js
IP
File type ASCII text, with very long lines (54602)
Size 116 kB (116388 bytes)
Hash fef08c9f8bacc1b0eed3950dbe7d0f87
e9a3b98cad1e2d58eab1e2cbaa51cb979dc45075
55b3d5b3acd46444cc1844a676c75ba25209ce371065791cd4fbdc9da60aea34
GET /js/300/addthis_widget.js HTTP/1.1
Host: s7.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rouva-v.vuodatus.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.15.8
last-modified: Mon, 26 Oct 2020 18:11:48 GMT
etag: "5f971164-5834c"
cache-control: public, max-age=600
strict-transport-security: max-age=15724800; includeSubDomains
content-type: application/javascript
content-encoding: gzip
content-length: 116388
date: Thu, 24 Nov 2022 17:18:24 GMT
vary: Accept-Encoding
x-distribution: 99
x-host: s7.addthis.com
X-Firefox-Spdy: h2
www.cakecraftworld.co.uk/images/logo.gif
301 Moved Permanently 0 B URL HTTP/1.1 www.cakecraftworld.co.uk/images/logo.gif
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/logo.gif HTTP/1.1
Host: www.cakecraftworld.co.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 301 Moved Permanently
Date: Thu, 24 Nov 2022 17:18:24 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Thu, 24 Nov 2022 18:18:24 GMT
Location: https://www.cakecraftworld.co.uk/images/logo.gif
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5%2FMJjaSQaGMV3R5bjukGfc7hBjK8KH1kinnSta26im0EIdD73YxIgWrVevJDvStdlhb1qKYnnOfrvrDL447g2oa1ZRCgkQfbOuhCX71UZb9ldYoJmsQwdt6UxSjbcquGo2nKPXUGOaPHJqo%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Server: cloudflare
CF-RAY: 76f3cdbc2889fab4-OSL
alt-svc: h2=":443"; ma=60
www.daous.com/cgi-bin/Count.cgi?dd=D&df=annika@hurveli.com
301 Moved Permanently 162 B URL HTTP/1.1 www.daous.com/cgi-bin/Count.cgi?dd=D&df=annika@hurveli.com
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
Analyzer Verdict Alert quad9 Sinkholed
GET /cgi-bin/Count.cgi?dd=D&df=annika@hurveli.com HTTP/1.1
Host: www.daous.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Thu, 24 Nov 2022 17:18:24 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://www.daous.com/cgi-bin/Count.cgi?dd=D&df=annika@hurveli.com
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash dd0dd96ca622aa07354fabdd0da767bf
a29eaa02a81dabed2c12be20a89d65a5a0417524
6a670e9031ec8c94bdc91c47a2d6a4ca2bd95fe032fec28888a8e6d7dc163cb4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 17:18:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
mediaserver-virtual-1.vuodatus.net/g/7256/1009449.jpg
200 OK 17 kB URL HTTP/1.1 mediaserver-virtual-1.vuodatus.net/g/7256/1009449.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 85", baseline, precision 8, 369x264, components 3\012- data
Hash abc0f32da171d156ad6aac3deb3b90a6
161d2b037ed796aeaed7c96a092a9c661d55fb7f
705b4b838395a2ab9a3f07c6dfe8d92edf8b46ec77cb0cafb9c4b970729e2257
GET /g/7256/1009449.jpg HTTP/1.1
Host: mediaserver-virtual-1.vuodatus.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 17:18:24 GMT
Content-Type: image/jpeg
Content-Length: 17393
Connection: keep-alive
Cf-Bgj: h2pri
ETag: "43f1-462ce3cd1a580"
Last-Modified: Fri, 13 Feb 2009 15:10:30 GMT
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UnieJwu98ansD%2Fj5ksA4DOFT0gwzbD6mEvxlGodZvp8CXyswzaiWlKMmDBlJncrMo881kONH5yuEHG2YZHG1PCwpq5p8aT0hgUWm14UZTmzxvaPQjoe5zVP%2BhCt7AaxqZ485OvoO9AYgPYk0T4iIU34QUpI%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76f3cdbc2acf0b31-OSL
alt-svc: h2=":443"; ma=60
vuodatus.net/bundles/vuodatuscore/images/logo.png
200 OK 3.0 kB URL HTTP/2 vuodatus.net/bundles/vuodatuscore/images/logo.png
IP
File type PNG image data, 155 x 30, 8-bit/color RGB, non-interlaced\012- data
Hash 5c14977fbe47e923af5c2d3128bf2c2b
01040bd6b324063c59690780b1f3f74f6503f33a
0d6676890fc7a7189d93169d9556349398fc90d24270090a0e153d9a2eb01201
GET /bundles/vuodatuscore/images/logo.png HTTP/1.1
Host: vuodatus.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rouva-v.vuodatus.net/css/compressed.css?ts=2016-09-28-lts
Connection: keep-alive
Cookie: _SESS=629695270637fa75fa2b42
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 17:18:24 GMT
content-type: image/png
content-length: 3006
last-modified: Thu, 25 Jul 2019 06:00:41 GMT
etag: "bbe-58e7b2545b440"
cache-control: public, max-age=31536000
expires: Tue, 17 Oct 2023 06:17:08 GMT
referrer-policy: no-referrer-when-downgrade
pragma: public
cf-cache-status: HIT
age: 3322876
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6JhZrf6B1Qi6SrYXAQVtcmvQG1mX%2FocLTGlRDWGbigIxWjLEkynkvPf4onjAIWrXYBbdkpOW0FqKjM2nXmsGO08lKb9TC78D%2F1ALSXRUzZXl9sIqWI1j%2Bk5SWLEVHA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76f3cdbcb96bfac0-OSL
X-Firefox-Spdy: h2
vuodatus.net/bundles/vuodatuscore/images/search.png
200 OK 1.1 kB URL HTTP/2 vuodatus.net/bundles/vuodatuscore/images/search.png
IP
File type PNG image data, 25 x 25, 8-bit/color RGB, non-interlaced\012- data
Hash d4c6300deebfe48060b4c32121132dc6
026f2a6ec4be3a67d4b853dfc23b4d66c0356b9a
977cbcc9d2e224d510635d3ed9bf19802290d9809e63d7a94afa1a2dfc00a060
GET /bundles/vuodatuscore/images/search.png HTTP/1.1
Host: vuodatus.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rouva-v.vuodatus.net/css/compressed.css?ts=2016-09-28-lts
Connection: keep-alive
Cookie: _SESS=629695270637fa75fa2b42
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 17:18:24 GMT
content-type: image/png
content-length: 1147
last-modified: Thu, 25 Jul 2019 06:00:41 GMT
etag: "47b-58e7b2545b440"
cache-control: public, max-age=31536000
expires: Tue, 17 Oct 2023 06:20:06 GMT
referrer-policy: no-referrer-when-downgrade
pragma: public
cf-cache-status: HIT
age: 3322698
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6NAD5FgZ6YvJl7ZwImarz62HpzmFuWOIzzm82TA7h8q%2BHCp6vkzqDl%2BqAXlWbhPXRZdoYi3uX58kYKnAJJNPf%2FGJQmSSKoO%2BMdtv%2FoKlmHBEAP7dHSa2IXG%2Bm%2B6%2Fyw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76f3cdbcb973fac0-OSL
X-Firefox-Spdy: h2
vuodatus.net/bundles/vuodatuscore/images/icon-comment.png
200 OK 631 B URL HTTP/2 vuodatus.net/bundles/vuodatuscore/images/icon-comment.png
IP
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash 760a34683fe27647e7a1397412b9790e
00d7833c9a662e0bf3804c98335e89203b78fde1
55b2435d18798ec7d8ae85f7dc8c4779ec472af3ecd83f8b17d49fe1f08eeb78
GET /bundles/vuodatuscore/images/icon-comment.png HTTP/1.1
Host: vuodatus.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rouva-v.vuodatus.net/css/compressed.css?ts=2016-09-28-lts
Connection: keep-alive
Cookie: _SESS=629695270637fa75fa2b42
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 17:18:24 GMT
content-type: image/png
content-length: 631
last-modified: Thu, 25 Jul 2019 06:00:41 GMT
etag: "277-58e7b2545b440"
cache-control: public, max-age=31536000
expires: Tue, 17 Oct 2023 06:17:08 GMT
referrer-policy: no-referrer-when-downgrade
pragma: public
cf-cache-status: HIT
age: 3322876
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=e5ph6ZzdCU0pdmFDFDnukQr5V9UE3OygmlXEc1XO%2BoP2KKH582S%2FrsVkXt4IgxbNBDg%2B9ly%2BnzfqUo0AboUJZafesytvP132wOvwnIjlQWAZSQKNlYrsVNu6s1Ri2Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76f3cdbcb975fac0-OSL
X-Firefox-Spdy: h2
vuodatus.net/bundles/vuodatuscore/images/ajax-loader.gif
200 OK 10 kB URL HTTP/2 vuodatus.net/bundles/vuodatuscore/images/ajax-loader.gif
IP
File type GIF image data, version 89a, 32 x 32\012- data
Hash 40f0d560d83422aa45371acae9a2938a
f3abd685b3eb12ca498f08464fb675e07044308e
f54c95a6cc2c4579140c965d936ef00586208e69a75cd0c24afeffc3eab27ff1
GET /bundles/vuodatuscore/images/ajax-loader.gif HTTP/1.1
Host: vuodatus.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rouva-v.vuodatus.net/css/compressed.css?ts=2016-09-28-lts
Connection: keep-alive
Cookie: _SESS=629695270637fa75fa2b42
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 17:18:24 GMT
content-type: image/gif
content-length: 10273
last-modified: Thu, 25 Jul 2019 06:00:41 GMT
etag: "2821-58e7b2545b440"
cache-control: public, max-age=31536000
expires: Fri, 24 Nov 2023 05:31:53 GMT
referrer-policy: no-referrer-when-downgrade
pragma: public
cf-cache-status: HIT
age: 42391
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0Ognzb01%2FkiknPXD8D8%2Bsf4atDCEkQ5OjFuneBar3gxZkkyUqzFmw3nHEm80QpY6aWxNp4rN7K6g3U3zO39nQBX%2B%2BHd4CUWd43xXhUP%2FTz2nxmmXmMoTaQXVh2Di4g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76f3cdbcb977fac0-OSL
X-Firefox-Spdy: h2
rouva-v.vuodatus.net/bundles/vuodatuscore/images/tekstilogo.png
200 OK 1.7 kB URL HTTP/2 rouva-v.vuodatus.net/bundles/vuodatuscore/images/tekstilogo.png
IP
File type PNG image data, 112 x 13, 8-bit/color RGBA, non-interlaced\012- data
Hash 7c83fab28b43a7843d20d54bea7ac087
e3f6191724f2af7a6fb9023fe939a38e3e095dbd
9eb2b88230bd8fa966a390cf0d018ab1d4f9a20215dbaadf789e241977cc23ab
GET /bundles/vuodatuscore/images/tekstilogo.png HTTP/1.1
Host: rouva-v.vuodatus.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rouva-v.vuodatus.net/css/compressed.css?ts=2016-09-28-lts
Connection: keep-alive
Cookie: _SESS=629695270637fa75fa2b42
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 17:18:24 GMT
content-type: image/png
content-length: 1660
last-modified: Thu, 25 Jul 2019 06:00:41 GMT
etag: "67c-58e7b2545b440"
cache-control: public, max-age=31536000
expires: Tue, 21 Nov 2023 16:31:13 GMT
referrer-policy: no-referrer-when-downgrade
pragma: public
cf-cache-status: HIT
age: 262031
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MQzPEYPHzpy5Rc%2FcBwIIHRNSamk08X6XxUEHAfI37vtE6uelH%2BSiZRDtLJE0Axm2p7rkSnJQyXqh8YHSg6ZxYUx1FzbeJE8qNP7vIJ6yy68JqoiaKVfmKW3J4akPWjGu2FLpIc4e"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76f3cdbcb97cfac0-OSL
X-Firefox-Spdy: h2
rouva-v.vuodatus.net/bundles/vuodatuscore/css/fonts.css?ts=2016-09-28-lts
200 OK 44 kB URL HTTP/2 rouva-v.vuodatus.net/bundles/vuodatuscore/css/fonts.css?ts=2016-09-28-lts
IP
File type ASCII text, with very long lines (3698), with no line terminators
Hash 87cc3a1dcb0841dcd38535e9b666d69e
8448f2d4b3953abfffcf31d0b12302938295d8f8
1727e37fddadc2b12dfcb824abde980f40a6a495649042626be2170525433cfc
GET /bundles/vuodatuscore/css/fonts.css?ts=2016-09-28-lts HTTP/1.1
Host: rouva-v.vuodatus.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rouva-v.vuodatus.net/lue/2008/11/muutama-koristeltu-pipari
Connection: keep-alive
Cookie: _SESS=629695270637fa75fa2b42
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 17:18:24 GMT
content-type: text/css
cache-control: public, max-age=31536000
cf-bgj: minify
cf-polished: origSize=4329
etag: W/"10e9-58e7b2545b440-gzip"
expires: Fri, 24 Nov 2023 08:16:41 GMT
last-modified: Thu, 25 Jul 2019 06:00:41 GMT
pragma: public
referrer-policy: no-referrer-when-downgrade
vary: Accept-Encoding
cf-cache-status: HIT
age: 32503
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pr9YiXrUq0w1IyWzwTuwrQDpfGayI2ysq1NEXQ6Jd1SvZcaoXeTsiSO%2FVD%2FdRDyBSYJDKeCxkXUgM2N2ZAjPazjAx1DGbzR%2Bm1eim7s2ebpSjq1v9c4tZNGBr3oBtH9UN0cWiDpT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f3cdb96dc3fac0-OSL
content-encoding: br
X-Firefox-Spdy: h2
mediaserver-2.vuodatus.net/g/52331/2105224.jpg
200 OK 11 kB URL HTTP/1.1 mediaserver-2.vuodatus.net/g/52331/2105224.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 85", baseline, precision 8, 448x336, components 3\012- data
Hash 354f2b5c539f2b6b603de803153bdf47
f529d66b274e6c0d036a7d5232f652c0cc7529ff
93fe335920acae87e83c3dfe05c21b3bc769004e567d1feed1d0b4d1b9f4fe1c
GET /g/52331/2105224.jpg HTTP/1.1
Host: mediaserver-2.vuodatus.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 17:18:24 GMT
Content-Type: image/jpeg
Content-Length: 11414
Connection: keep-alive
Last-Modified: Sun, 30 Nov 2008 09:12:35 GMT
ETag: "2c96-45ce47eb606c0"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mDj1LZseQJeOCv%2FNTmVXMTG8Et8PyeCzXowExNL4ySmrAvAruSULqiBmMU9bQ8%2F83jsW9mYx21yIB9Qi34Xm5MwiPmA3qeb8cuFebnxfUMLWrPUhR4M%2FKeby5rJqaVB4CNtrGbnCoo9oIFDi"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76f3cdbc2ea8b51d-OSL
alt-svc: h2=":443"; ma=60
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash dd0dd96ca622aa07354fabdd0da767bf
a29eaa02a81dabed2c12be20a89d65a5a0417524
6a670e9031ec8c94bdc91c47a2d6a4ca2bd95fe032fec28888a8e6d7dc163cb4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 17:18:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
mediaserver-2.vuodatus.net/g/52331/2105223.jpg
200 OK 31 kB URL HTTP/1.1 mediaserver-2.vuodatus.net/g/52331/2105223.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 85", baseline, precision 8, 336x448, components 3\012- data
Hash 2d40e6a5bbe8fc92795f834bf97e09aa
270733d7dd96512833784cfef4b6d35f8c4002d0
8fcdf21780cbe00a3cd08bd0b019b78a87ab5fed696e358de79f4da8c2602e6e
GET /g/52331/2105223.jpg HTTP/1.1
Host: mediaserver-2.vuodatus.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 17:18:24 GMT
Content-Type: image/jpeg
Content-Length: 31433
Connection: keep-alive
Last-Modified: Sun, 30 Nov 2008 09:12:22 GMT
ETag: "7ac9-45ce47defa980"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zp1qVNoNxDijyDjWG6uydlYfJzM5LUpkOCAQn%2Fbc8qwktQVg2XlxCkfZe9QvopkFXGB%2FrNjYtIulH7MHEn9dQzFtFpcsfeCP9NWWIlHbHHyroe6gqTig3%2FS%2Fv8p%2BJNvDuh%2B9iDT%2BM5z4UcHC"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76f3cdbc283eb518-OSL
alt-svc: h2=":443"; ma=60
s7.addthis.com/static/sh.f48a1a04fe8dbf021b4cda1d.html
200 OK 26 kB URL HTTP/2 s7.addthis.com/static/sh.f48a1a04fe8dbf021b4cda1d.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (63757)
Hash 707317ccaabe08d32d1bd781754e6871
bb82dcd3e044c960e0861c2ce878f5504e628f78
d0a164ece41c61aec26517fb645646f5ba91f72ea5448eff1ee6c393b7c53051
GET /static/sh.f48a1a04fe8dbf021b4cda1d.html HTTP/1.1
Host: s7.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rouva-v.vuodatus.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.15.8
content-type: text/html
last-modified: Mon, 26 Oct 2020 18:11:48 GMT
etag: W/"5f971164-11adc"
timing-allow-origin: *
cache-control: public, max-age=86313600
p3p: CP="NON ADM OUR DEV IND COM STA"
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
content-length: 26421
date: Thu, 24 Nov 2022 17:18:24 GMT
vary: Accept-Encoding
x-host: s7.addthis.com
X-Firefox-Spdy: h2
mediaserver-2.vuodatus.net/g/52331/2105220.jpg
200 OK 44 kB URL HTTP/1.1 mediaserver-2.vuodatus.net/g/52331/2105220.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 85", baseline, precision 8, 448x336, components 3\012- data
Hash e5a064f6507295d8bd670b337cf5391e
eb5c84aa809ea15d9456ad2be4e67257f4912e83
92f0fd2437c3dd8e118385e814121acac08547ae69b3b33ba317e21021be386f
GET /g/52331/2105220.jpg HTTP/1.1
Host: mediaserver-2.vuodatus.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 17:18:24 GMT
Content-Type: image/jpeg
Content-Length: 43703
Connection: keep-alive
Last-Modified: Sun, 30 Nov 2008 09:11:50 GMT
ETag: "aab7-45ce47c076180"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AfVLVzucSNh4UNMZInk6xqXTYPjJp8xkspspo%2FqLSQleqQq1w%2Fp8K6LWE%2B9CBA3qi%2BBOC5Serpz0KROmr%2BbztPYmSmET1XCGcEAUjjEqCCpYqn%2FkgUncR80Nv4EsInKnVWYLRdcPcJtAVcbo"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76f3cdbc2917fab8-OSL
alt-svc: h2=":443"; ma=60
www.neoworx.net/neocounter/neocounter2/neoworx_tracker_img.php?registered_id=50511&counter_id=50511
301 Moved Permanently 230 B URL HTTP/1.1 www.neoworx.net/neocounter/neocounter2/neoworx_tracker_img.php?registered_id=50511&counter_id=50511
IP
ASN #32133 AS-TING-BACKBONE
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 5d50f73a78719c45b81a3ab31b34baed
ee3381599f32329ac6450a4d4013424f5354ea03
30f5cc514a962644208967eed32ca5654ece64e79dca07ed0245694d310044f1
GET /neocounter/neocounter2/neoworx_tracker_img.php?registered_id=50511&counter_id=50511 HTTP/1.1
Host: www.neoworx.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 301 Moved Permanently
Date: Thu, 24 Nov 2022 17:18:24 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://www.tonyadams.com/neocounter/neocounter2/neoworx_tracker_img.php?registered_id=50511&counter_id=50511
Server: Redirector/1.0
Cache-Control: private
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6848d6ce641c0a45fbd21651e413efc8
1747a060ed980fb3b99939d39303eea28a993271
d1f599afc1b874476a3475b83cbba7f140941fadaccd78f65577016ef1130b65
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D1F599AFC1B874476A3475B83CBBA7F140941FADACCD78F65577016EF1130B65"
Last-Modified: Wed, 23 Nov 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17068
Expires: Thu, 24 Nov 2022 22:02:52 GMT
Date: Thu, 24 Nov 2022 17:18:24 GMT
Connection: keep-alive
visitanalytics.userreport.com/hit?t=USRur-core-nomedia&accountId=b90a712b-e8be-40ea-9cff-08d418fc7654&rnd=xscbk7y3mp&dsu=1.af9f369304f4899f.6738ac7d-9187-46a9-a563-ff3366838b40.1.1423.24ae33a4943c81ee&med=https%3A%2F%2Frouva-v.vuodatus.net%2Flue%2F2008%2F11%2Fmuutama-koristeltu-pipari
200 OK 43 B URL HTTP/2 visitanalytics.userreport.com/hit?t=USRur-core-nomedia&accountId=b90a712b-e8be-40ea-9cff-08d418fc7654&rnd=xscbk7y3mp&dsu=1.af9f369304f4899f.6738ac7d-9187-46a9-a563-ff3366838b40.1.1423.24ae33a4943c81ee&med=https%3A%2F%2Frouva-v.vuodatus.net%2Flue%2F2008%2F11%2Fmuutama-koristeltu-pipari
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hit?t=USRur-core-nomedia&accountId=b90a712b-e8be-40ea-9cff-08d418fc7654&rnd=xscbk7y3mp&dsu=1.af9f369304f4899f.6738ac7d-9187-46a9-a563-ff3366838b40.1.1423.24ae33a4943c81ee&med=https%3A%2F%2Frouva-v.vuodatus.net%2Flue%2F2008%2F11%2Fmuutama-koristeltu-pipari HTTP/1.1
Host: visitanalytics.userreport.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rouva-v.vuodatus.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
content-length: 43
last-modified: Thu, 04 Jun 2020 12:03:06 GMT
x-amz-meta-cb-modifiedtime: Tue, 14 Apr 2015 11:43:27 GMT
x-amz-version-id: vrBc0EhGKa8dl_tujGhI9Fe7xKDJ.7QF
accept-ranges: bytes
server: AmazonS3
date: Thu, 24 Nov 2022 03:24:42 GMT
cache-control: no-cache, no-store, must-revalidate
expires: 0
etag: "ad4b0f606e0f8465bc4c4c170b37e1a3"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: pI8XFpOx5DkxRKfqZyumWRf9i0guk29DmTUDK_qAHntro9tZ98Txdw==
age: 50027
X-Firefox-Spdy: h2
img15.glitterfy.com/63/glitterfy101244989D39.gif
200 OK 103 kB URL HTTP/1.1 img15.glitterfy.com/63/glitterfy101244989D39.gif
IP
File type GIF image data, version 89a, 250 x 188\012- data
Size 103 kB (103278 bytes)
Hash ce9fc2951e0a7effeea756d9b1205f80
50821b1f6429ae3102bfcb22fed2e022bc0ef833
be57c0b96aa06f0b7a37fa269c73e7304dd34e9639474e8662fd1ee888daf902
GET /63/glitterfy101244989D39.gif HTTP/1.1
Host: img15.glitterfy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 17:18:24 GMT
Server: Apache
Last-Modified: Tue, 24 Jul 2012 20:19:44 GMT
ETag: "322e0c0-1936e-4c59915470085"
Accept-Ranges: bytes
Content-Length: 103278
Connection: close
Content-Type: image/gif
img34.glitterfy.com/11031/glitterfy-flpbk1081003577134.gif
200 OK 101 kB URL HTTP/1.1 img34.glitterfy.com/11031/glitterfy-flpbk1081003577134.gif
IP
File type GIF image data, version 89a, 250 x 250\012- data
Size 101 kB (100804 bytes)
Hash 2bba50976fcbe50976a1be85f3fec35c
00964169dd82573ade22c7e9b288a276bd883e14
893168ee2309993d9692a6d43458716ef3ecdc10019b54da48c3915f6d99c213
GET /11031/glitterfy-flpbk1081003577134.gif HTTP/1.1
Host: img34.glitterfy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 17:18:24 GMT
Server: Apache
Last-Modified: Tue, 24 Jul 2012 22:35:28 GMT
ETag: "32306c4-189c4-4c59afab17046"
Accept-Ranges: bytes
Content-Length: 100804
Connection: close
Content-Type: image/gif
img10.glitterfy.com/graphics/105/hello_kitty_heart.gif
200 OK 105 kB URL HTTP/1.1 img10.glitterfy.com/graphics/105/hello_kitty_heart.gif
IP
File type GIF image data, version 89a, 250 x 249\012- data
Size 105 kB (104555 bytes)
Hash 663f01c1c762b0623125396e1e89d63d
81c03d1869b19444130c36b604bc2055c9f72ac8
8989fbbca84caadbc3ee8a72832d717a2741c0246a2d06318914341d563f924c
GET /graphics/105/hello_kitty_heart.gif HTTP/1.1
Host: img10.glitterfy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 17:18:24 GMT
Server: Apache
Last-Modified: Sun, 15 Apr 2007 22:24:22 GMT
ETag: "31e846d-1986b-42e2e32c53180"
Accept-Ranges: bytes
Content-Length: 104555
Cache-Control: max-age=2592000
Expires: Sat, 24 Dec 2022 17:18:24 GMT
Connection: close
Content-Type: image/gif
ocsp.digicert.com/
200 OK 279 B IP
Hash 1808c6eef8968a5fb0b5fb8a84e6974e
f4640410a218d142ded79adbd4dd829986cbf08d
ed253f6b11015dc6b5403536ed2243df4412ce1e1fbd44be3fd726a96a84034c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=103333
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 17:18:25 GMT
Etag: "637e9806-117"
Expires: Fri, 25 Nov 2022 22:00:38 GMT
Last-Modified: Wed, 23 Nov 2022 22:00:38 GMT
Server: nginx
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash 1808c6eef8968a5fb0b5fb8a84e6974e
f4640410a218d142ded79adbd4dd829986cbf08d
ed253f6b11015dc6b5403536ed2243df4412ce1e1fbd44be3fd726a96a84034c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1
Cache-Control: max-age=103333
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 17:18:25 GMT
Etag: "637e9806-117"
Expires: Fri, 25 Nov 2022 22:00:38 GMT
Last-Modified: Wed, 23 Nov 2022 22:00:38 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 279
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5702
Expires: Thu, 24 Nov 2022 18:53:27 GMT
Date: Thu, 24 Nov 2022 17:18:25 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5702
Expires: Thu, 24 Nov 2022 18:53:27 GMT
Date: Thu, 24 Nov 2022 17:18:25 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5702
Expires: Thu, 24 Nov 2022 18:53:27 GMT
Date: Thu, 24 Nov 2022 17:18:25 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F433fbaf5-7c54-485b-af70-542e1e788832.webp
200 OK 5.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F433fbaf5-7c54-485b-af70-542e1e788832.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0856fdb55f19f03a1bec38b3d6e0ac77
89accd230fba95fe0049678070817b36ead015fa
17c6e6f9bb8f4261fff2dc2a43ed994986418761624b8afead768e89927594f2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F433fbaf5-7c54-485b-af70-542e1e788832.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5070
x-amzn-requestid: d86d95ad-9b78-4047-82e7-04e83a97e330
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cEwViF1GIAMF_PQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637e9423-10809ba1634776171cf79cb8;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 21:44:03 GMT
x-amz-cf-pop: SFO5-P2, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 8rbsN9OVJmneT9ov-Q7V4RB8DP5UWhhn-7cnukHiBpl06zmMM0zJTg==
via: 1.1 0dc4feb22bb4657ce2bb95fd05ec7122.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 21:57:20 GMT
age: 69665
etag: "89accd230fba95fe0049678070817b36ead015fa"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F81517ad5-7c1b-49aa-9ba9-dbfa36fbb071.webp
200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F81517ad5-7c1b-49aa-9ba9-dbfa36fbb071.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 64d79191f005c9876b952c5f948aa0f7
1102dbdcbcabf5c25d17840f8f00d5b55b9b8f0a
00fb36c3d322e8302c5ce202d6d4119d637510cd6f3b63e1347781ec3bb9d7fc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F81517ad5-7c1b-49aa-9ba9-dbfa36fbb071.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 13882
x-amzn-requestid: 9022b0b3-31d5-4149-a969-02514f11b95a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cEvzNHjMoAMFWMg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637e9347-0e8354a02bef623644714e31;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 21:40:23 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ve4q5FDkwMGhPK6ZVVVCZtoBTaGaz43r_PwINzwS5Nx5tcZeQkVIfw==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 21:49:47 GMT
age: 70118
etag: "1102dbdcbcabf5c25d17840f8f00d5b55b9b8f0a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg
200 OK 4.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 841a4b110022a99ddea6f7bf66df0fa1
126771b86638108050cf57c0d12faa27f80f0edb
240fbffc1f9104433297d3ff7afba2d0b58d7f1b13d9a9260a1bad25216665db
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4309
x-amzn-requestid: a22b4d7e-e208-4bda-81c2-d13e6463380e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: blE0hGNioAMF_Tg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6371e81c-1b13846866f56a0e47675e56;Sampled=0
x-amzn-remapped-date: Mon, 14 Nov 2022 07:02:52 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 0sYKpJWi2Tv9Atz3PYXm5j7kmncAOxjcLcK4hgAkJ5b4pNMDmjdB6g==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 28390a4d24ed4fdccd685d99cd06cf4e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 07:14:07 GMT
age: 36258
etag: "126771b86638108050cf57c0d12faa27f80f0edb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca5cb469-21a0-420a-875c-a81635b33f53.jpeg
200 OK 8.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca5cb469-21a0-420a-875c-a81635b33f53.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 92c78302bcce1568eb6a5563100b932c
43d1dec7fc06879988c9c3cadd800cc8145df988
0dda9914306c8e3a7ea75eade8e762652d93907dd6c5a8cc81707d6d8098b60a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca5cb469-21a0-420a-875c-a81635b33f53.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7993
x-amzn-requestid: 9f0ff853-4819-47cd-959d-658401ea5748
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cEvCsG5mIAMFqAQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637e9211-1c48b9223684f2942f8dd42d;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 21:35:13 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 7YSXUV-LZpsI7vciFhuqt1EVr6YRkhxcOgMg8z8bxLcOE01_baf6Gg==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 21:47:06 GMT
etag: "43d1dec7fc06879988c9c3cadd800cc8145df988"
content-type: image/jpeg
age: 70279
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3d85d03d-8fcf-42f4-bada-e7f488f04307.jpeg
200 OK 7.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3d85d03d-8fcf-42f4-bada-e7f488f04307.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b4157f2c5c3c77ce699324ecb08f47c7
a7d9135f9d01ba13c3cdaf8b038c70212f159297
2305f7afee95bb34d9e8dbff571c6b146ba7b694be96e9e925c32d1f41785916
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3d85d03d-8fcf-42f4-bada-e7f488f04307.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7462
x-amzn-requestid: 1f6fb14d-83e0-43d3-9dab-5bc83af1a7c4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cEwV3HV9oAMFs9w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637e9425-634d43db6308e0be596aa5a0;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 21:44:05 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: GW5UTfY7-TwPWTno9z1e21a2cA9fmU7GfHFYWdL-zQvMLxeq-S9Trg==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 22:03:54 GMT
age: 69271
etag: "a7d9135f9d01ba13c3cdaf8b038c70212f159297"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F50d7d834-f80d-4fd9-a728-24643ed00c45.jpeg
200 OK 6.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F50d7d834-f80d-4fd9-a728-24643ed00c45.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d9d93b2a6875d446c3467eb49767eef5
303c571b13b05fcf27ee1159d8fdf6369aaef0a2
2a2345a925e0187979930a7f2de8548957ad9f2baae77364dcb157286e2b3fcf
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F50d7d834-f80d-4fd9-a728-24643ed00c45.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6789
x-amzn-requestid: 4d94ce1b-d18f-43b8-bb4d-e7093f9bea42
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cCvd2G9UIAMFrEg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637dc5f2-64a570135be59b83031811da;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 07:04:18 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: JygkDI7XSvlgurUTot874ZAXlOIqnv4cntMQ55IvHVqw93JBcksZjQ==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 07:15:22 GMT
age: 36183
etag: "303c571b13b05fcf27ee1159d8fdf6369aaef0a2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
cdw-dcl.userreport.com/gs/init/pixel.gif
302 Moved Temporarily 0 B URL HTTP/1.1 cdw-dcl.userreport.com/gs/init/pixel.gif
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /gs/init/pixel.gif HTTP/1.1
Host: cdw-dcl.userreport.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tag.userreport.com/
Cookie: __bpn_uid=270650d0-652b-45cb-b404-4183aa314083; __ur_i=0; __ur_dc=1669310305002; __ur_ttl=1700846305009
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 302 Moved Temporarily
Content-Length: 0
Connection: keep-alive
Cache-Control: s-maxage=0, max-age=0
Date: Thu, 24 Nov 2022 17:18:25 GMT
Location: https://cm.g.doubleclick.net/pixel?google_nid=userreport_ddp&google_cm&google_hm=MDBmNGNmNWMtNTlmMzY3ZTc2ZTE2LTNmNmQ0YmFiMWZhNA==
Server: nginx/1.22.0
X-Cache: Miss from cloudfront
Via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: dKCaRBqxlsfHhPxOvDZGqtyq6K9L2nN0FMtIBVhh0urvxl1y8NNppQ==
ocsp.digicert.com/
200 OK 471 B IP
Hash 2fa86fd73e2f688e908b10595df4f80f
5fc91fbcad83cb0b2475b0b4a0465274497cc866
b66beeaa39b4e2905d823d12a6faa43800b440dbba08c89240d45e85ec560fba
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4770
Cache-Control: max-age=100176
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 17:18:25 GMT
Etag: "637e790f-1d7"
Expires: Fri, 25 Nov 2022 21:08:01 GMT
Last-Modified: Wed, 23 Nov 2022 19:48:31 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f86429279e19a89ba7fae87ba2406b4e
abfa5369a7feb4dfebf13f5eb902c3e860976238
76d03c181e150e7e3a61bfa8489231999fb562f6cb0b382c456b9a37da1106a6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 17:18:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
dmp.adform.net/serving/cookie/match/?party=1001&cid=270650d0-652b-45cb-b404-4183aa314083&Today=20221124
302 Found 0 B URL HTTP/2 dmp.adform.net/serving/cookie/match/?party=1001&cid=270650d0-652b-45cb-b404-4183aa314083&Today=20221124
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /serving/cookie/match/?party=1001&cid=270650d0-652b-45cb-b404-4183aa314083&Today=20221124 HTTP/1.1
Host: dmp.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tag.userreport.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Thu, 24 Nov 2022 17:18:25 GMT
content-length: 0
location: https://dmp.adform.net/serving/cookie/match/?CC=1&party=1001&cid=270650d0-652b-45cb-b404-4183aa314083&Today=20221124
cache-control: no-cache, no-store, must-revalidate, no-transform
pragma: no-cache
expires: -1
set-cookie: C=1; expires=Sat, 24 Dec 2022 17:18:25 GMT; domain=adform.net; path=/
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: GET
access-control-allow-origin: *
access-control-max-age: 86400
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
cm.g.doubleclick.net/pixel?google_nid=userreport_ddp&google_cm&google_hm=MDBmNGNmNWMtNTlmMzY3ZTc2ZTE2LTNmNmQ0YmFiMWZhNA==
302 Found 350 B URL HTTP/2 cm.g.doubleclick.net/pixel?google_nid=userreport_ddp&google_cm&google_hm=MDBmNGNmNWMtNTlmMzY3ZTc2ZTE2LTNmNmQ0YmFiMWZhNA==
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 4e51ebc2d5d220d5c2085b1db2c7fdf8
7c18b111c306692338a81bb5b10c0641808099a6
81e03cadf4bfd82dc2d704ef5bf2395a3a45de70868a9da65e66ee91526cc234
GET /pixel?google_nid=userreport_ddp&google_cm&google_hm=MDBmNGNmNWMtNTlmMzY3ZTc2ZTE2LTNmNmQ0YmFiMWZhNA== HTTP/1.1
Host: cm.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tag.userreport.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
location: https://cm.g.doubleclick.net/pixel?google_nid=userreport_ddp&google_cm=&google_hm=MDBmNGNmNWMtNTlmMzY3ZTc2ZTE2LTNmNmQ0YmFiMWZhNA==&google_tc=
date: Thu, 24 Nov 2022 17:18:25 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
server: HTTP server (unknown)
content-length: 350
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Thu, 24-Nov-2022 17:33:25 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cm.g.doubleclick.net/pixel?google_nid=userreport_ddp&google_cm=&google_hm=MDBmNGNmNWMtNTlmMzY3ZTc2ZTE2LTNmNmQ0YmFiMWZhNA==&google_tc=
302 Found 253 B URL HTTP/2 cm.g.doubleclick.net/pixel?google_nid=userreport_ddp&google_cm=&google_hm=MDBmNGNmNWMtNTlmMzY3ZTc2ZTE2LTNmNmQ0YmFiMWZhNA==&google_tc=
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash db866eb53f6c0de3aa679d6c09b40cc9
88e6cb9cac11b7a254ae854f4d2b188b18bd1265
6f2f8cb6c65375ed2dfab55bdd1e93232faa4232a169401ab1b53e70df1a5f25
GET /pixel?google_nid=userreport_ddp&google_cm=&google_hm=MDBmNGNmNWMtNTlmMzY3ZTc2ZTE2LTNmNmQ0YmFiMWZhNA==&google_tc= HTTP/1.1
Host: cm.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tag.userreport.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: https://cdw-dcl.userreport.com/gs/receive?google_error=3
date: Thu, 24 Nov 2022 17:18:25 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
server: HTTP server (unknown)
content-length: 253
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f86429279e19a89ba7fae87ba2406b4e
abfa5369a7feb4dfebf13f5eb902c3e860976238
76d03c181e150e7e3a61bfa8489231999fb562f6cb0b382c456b9a37da1106a6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 17:18:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdw-dcl.userreport.com/gs/receive?google_error=3
200 OK 35 B URL HTTP/1.1 cdw-dcl.userreport.com/gs/receive?google_error=3
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash c2196de8ba412c60c22ab491af7b1409
5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b
6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992
GET /gs/receive?google_error=3 HTTP/1.1
Host: cdw-dcl.userreport.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tag.userreport.com/
Connection: keep-alive
Cookie: __bpn_uid=270650d0-652b-45cb-b404-4183aa314083; __ur_i=0; __ur_dc=1669310305002; __ur_ttl=1700846305009
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/gif
Content-Length: 35
Connection: keep-alive
Cache-Control: s-maxage=0, max-age=0
Date: Thu, 24 Nov 2022 17:18:25 GMT
Server: nginx/1.22.0
X-Cache: Miss from cloudfront
Via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: IthJ1SgQCLBvk6L6MZfu5tAjji22Gb6-Ya7n51fBHf9PHgjslXg1wQ==
rouva-v.vuodatus.net/kommentoi/read/thread/blogpost-50d4a1c2d26466757b000ce5-50da2723d26466af530098e4?_=1669310304368
200 OK 2.6 kB URL HTTP/2 rouva-v.vuodatus.net/kommentoi/read/thread/blogpost-50d4a1c2d26466757b000ce5-50da2723d26466af530098e4?_=1669310304368
IP
File type JSON data\012- , ASCII text, with very long lines (2318), with no line terminators
Hash 532d1cf2a4b4bd29bf3a23aa68de1504
4fa0a9178f35fca84be3016483e0fbec7d27ea5c
220578ecf9adbbfddae9a4a7bea907b340488753f27150d6fbc3ef83c1d29060
GET /kommentoi/read/thread/blogpost-50d4a1c2d26466757b000ce5-50da2723d26466af530098e4?_=1669310304368 HTTP/1.1
Host: rouva-v.vuodatus.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rouva-v.vuodatus.net/lue/2008/11/muutama-koristeltu-pipari
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Cookie: _SESS=629695270637fa75fa2b42
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 17:18:25 GMT
content-type: application/json
x-powered-by: PHP/5.6.40
cache-control: must-revalidate, private
x-csrf-token: 41f5dec2aa79a73542709813ba6788e193464dbd
expires: -1
vary: Cookie,Accept-Encoding
set-cookie: _SESS=629695270637fa75fa2b42; path=/; domain=.vuodatus.net
referrer-policy: no-referrer-when-downgrade
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DTwa%2FU1fX%2FNMGxvaV%2FekwPnkth%2BevMK0T%2B0wdraNzBt8w954S26O2z7KPijnnNsUl82X7svyBAZUtXCOkZ%2BopJNKm7sMMeBxZ2BTDnDgvaXQbdt0YJSTXSnLBy3%2BKjFBtzx1Bqt8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f3cdbc7944fac0-OSL
content-encoding: br
X-Firefox-Spdy: h2
z.moatads.com/addthismoatframe568911941483/moatframe.js
200 OK 948 B URL HTTP/2 z.moatads.com/addthismoatframe568911941483/moatframe.js
IP
File type ASCII text, with very long lines (523)
Hash f14b4e1f799b14f798a195f43cf58376
b6fd3b3d407fb4c0a00fb8a31862235e2a6e0a86
92ed3e9fda5fa4d738ff4d9023846b56633617363dda6a750cacb4fba53241ac
GET /addthismoatframe568911941483/moatframe.js HTTP/1.1
Host: z.moatads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rouva-v.vuodatus.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: e0HboiVQpjIDEK8WTxqU5+8G8wOtu9bNCFY72alTHLP0/Yb+qoiTOxu6fad89ebRofzHxENxOOg=
x-amz-request-id: 61EC92F13BB22DD4
last-modified: Fri, 08 Nov 2019 20:13:52 GMT
etag: "f14b4e1f799b14f798a195f43cf58376"
content-encoding: gzip
accept-ranges: bytes
content-type: application/x-javascript
content-length: 948
server: AmazonS3
vary: Accept-Encoding
cache-control: max-age=17499
date: Thu, 24 Nov 2022 17:18:25 GMT
X-Firefox-Spdy: h2
adx.adform.net/adx/?mid=673906
302 Found 0 B URL HTTP/2 adx.adform.net/adx/?mid=673906
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /adx/?mid=673906 HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rouva-v.vuodatus.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Thu, 24 Nov 2022 17:18:25 GMT
content-length: 0
location: https://adx.adform.net/adx/?CC=1&mid=673906
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: GET,OPTIONS
access-control-allow-origin: *
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
set-cookie: C=1; expires=Sat, 24 Dec 2022 17:18:25 GMT; domain=adform.net; path=/
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
securepubads.g.doubleclick.net/tag/js/gpt.js
200 OK 27 kB URL HTTP/2 securepubads.g.doubleclick.net/tag/js/gpt.js
IP
File type ASCII text, with very long lines (40310)
Hash 71faa9b537bbc39ab37d57668e1df236
b5b666cf4224e621250c4efbc7f679767648670d
59d123d4908d1ec7f8d4e9f8f471f204913e1b8584b9b07d3dc29aeb70c96c54
GET /tag/js/gpt.js HTTP/1.1
Host: securepubads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rouva-v.vuodatus.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-gpt-scs"
report-to: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]}
timing-allow-origin: *
content-length: 27205
date: Thu, 24 Nov 2022 17:18:25 GMT
expires: Thu, 24 Nov 2022 17:18:25 GMT
cache-control: private, max-age=900, stale-while-revalidate=3600
etag: "1401 / 34 of 1000 / last-modified: 1669244741"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 5f07c78d469c92836851fac9ba1c51db
a93d0e7a2019170603c42bad200faa903a39f960
cd99642459866f53d342deaf8029492936ba8c176baede02265ba7108efd1b29
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4235
Cache-Control: max-age=93539
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 17:18:25 GMT
Etag: "637e6139-1d7"
Expires: Fri, 25 Nov 2022 19:17:24 GMT
Last-Modified: Wed, 23 Nov 2022 18:06:49 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471
ics.userreport.com/c_d7f036ce32e949ec8c5d7b21da082d9a/settings.js
200 OK 1.6 kB URL HTTP/2 ics.userreport.com/c_d7f036ce32e949ec8c5d7b21da082d9a/settings.js
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (2213), with no line terminators
Hash fe2ddbf01a6c7cde4db55478dbc9bed8
738046675c3ed2685ca9e58417ac5456b619335a
7462e7b8dc56ad2cfb4f698ce0acf5e5a1c8c93f10955780d58c1f0bd575f189
GET /c_d7f036ce32e949ec8c5d7b21da082d9a/settings.js HTTP/1.1
Host: ics.userreport.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ics.userreport.com/frame.html
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
content-length: 1610
last-modified: Thu, 10 Nov 2022 03:01:50 GMT
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
date: Thu, 24 Nov 2022 17:18:26 GMT
cache-control: max-age=0
etag: "fe2ddbf01a6c7cde4db55478dbc9bed8"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 dac7cf040932e0c072eeed10afdd7b3e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: OMokyUr0Q7HjzUr70HkjdcGRsKpNGBnUr_pKOEzq-RRYMzgitlZtAg==
X-Firefox-Spdy: h2
tag.userreport.com/server.html
200 OK 14 kB URL HTTP/2 tag.userreport.com/server.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (31971)
Hash 39a5c1bbeec9ac72cfd705ff6c88ffb6
e068b76dcd96c25d230f953c93edbd60bf57ca3f
72ebbb39afea525a2b7db933361df3f1db9c96b443010825a9b8e41bfee5ec93
GET /server.html HTTP/1.1
Host: tag.userreport.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ics.userreport.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: text/html
server: nginx/1.12.2
last-modified: Fri, 22 Apr 2022 09:44:06 GMT
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
content-encoding: gzip
date: Thu, 24 Nov 2022 16:36:21 GMT
cache-control: max-age=3600
etag: W/"626278e6-936d"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: a0nyOXMINsr9j5RQaH_dGu2MdLvwHbV-1U-XD5lPURvjp9F5Ov_x2A==
age: 2524
X-Firefox-Spdy: h2
m.addthis.com/live/red_lojson/300lo.json?si=637fa760395e0bf0&bkl=0&bl=1&pdt=1399&sid=637fa760395e0bf0&pub=ra-5050997009f3dfba&rev=v8.28.8-wp&ln=fi&pc=men&cb=0&ab=-&dp=rouva-v.vuodatus.net&fp=lue%2F2008%2F11%2Fmuutama-koristeltu-pipari&fr=&of=0&pd=0&irt=0&vcl=0&md=0&ct=1&tct=0&abt=0&cdn=0&pi=1&rb=0&gen=100&chr=UTF-8&colc=1669310304495&jsl=4257&uvs=637fa76039e18d8d000&skipb=1&callback=addthis.cbs.jsonp__92727028234781690
200 OK 89 B URL HTTP/2 m.addthis.com/live/red_lojson/300lo.json?si=637fa760395e0bf0&bkl=0&bl=1&pdt=1399&sid=637fa760395e0bf0&pub=ra-5050997009f3dfba&rev=v8.28.8-wp&ln=fi&pc=men&cb=0&ab=-&dp=rouva-v.vuodatus.net&fp=lue%2F2008%2F11%2Fmuutama-koristeltu-pipari&fr=&of=0&pd=0&irt=0&vcl=0&md=0&ct=1&tct=0&abt=0&cdn=0&pi=1&rb=0&gen=100&chr=UTF-8&colc=1669310304495&jsl=4257&uvs=637fa76039e18d8d000&skipb=1&callback=addthis.cbs.jsonp__92727028234781690
IP
File type ASCII text, with no line terminators
Hash 209197857a96ecb215d27be5f2aa7eac
73f2ea27d8360fcb7fe5f1ac1e1758ef486cf521
8408aa3bb195b391d22323fba9f64f68c0341afb2ab5d0f09a208b67061f4465
GET /live/red_lojson/300lo.json?si=637fa760395e0bf0&bkl=0&bl=1&pdt=1399&sid=637fa760395e0bf0&pub=ra-5050997009f3dfba&rev=v8.28.8-wp&ln=fi&pc=men&cb=0&ab=-&dp=rouva-v.vuodatus.net&fp=lue%2F2008%2F11%2Fmuutama-koristeltu-pipari&fr=&of=0&pd=0&irt=0&vcl=0&md=0&ct=1&tct=0&abt=0&cdn=0&pi=1&rb=0&gen=100&chr=UTF-8&colc=1669310304495&jsl=4257&uvs=637fa76039e18d8d000&skipb=1&callback=addthis.cbs.jsonp__92727028234781690 HTTP/1.1
Host: m.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rouva-v.vuodatus.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
content-length: 89
cache-control: max-age=0, no-cache, no-store, no-transform
pragma: no-cache
content-disposition: attachment; filename=1.txt
date: Thu, 24 Nov 2022 17:18:25 GMT
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 670dda5fda45a89db08867e9109f65b7
2a64bc381f8e795fe7a46a98c3e8add2f1ade404
7c2085a52a32eab3f4ab73c4ab3718cf1e7d67502e83001ce45d2857b37a0755
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3436
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 17:18:25 GMT
Last-Modified: Thu, 24 Nov 2022 16:21:09 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471
cb.amazingcounters.com/counter.php?i=2364592&c=7094089
500 Internal Server Error 919 B URL HTTP/1.1 cb.amazingcounters.com/counter.php?i=2364592&c=7094089
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 6f717dee818389566a2ffc55ee21afca
7c20f379daed970f32113032eb2b2348b0f6b479
986f19e2877284e8ba095900f678eae2a5e30acb6044f7994633dd946fad94e2
GET /counter.php?i=2364592&c=7094089 HTTP/1.1
Host: cb.amazingcounters.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 500 Internal Server Error
Date: Thu, 24 Nov 2022 17:18:25 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=27uu7EiuSqaHUEVHgxVVvxJSjhiPl0aXLQtwb2H%2FkNeD1Ntjb2F9kOztHF68fF4crmfukRUWQFKE1smJNO2afgrfwMbZx01gFeO6yrK%2Fj2rnJImSbRaFlGOOblgqUXQKtSWurNTqwV5K"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 76f3cdc1cfe2fac8-OSL
alt-svc: h2=":443"; ma=60
adx.adform.net/adx/?rp=3&pv=1&bWlkPW51bGw&bWlkPTgzNTkzNg&bWlkPTgzNTkzNQ&bWlkPW51bGw&bWlkPTEyOTUyNjI&bWlkPW51bGw&bWlkPTgzNTkzNg&url=https%3A%2F%2Frouva-v.vuodatus.net%2Flue%2F2008%2F11%2Fmuutama-koristeltu-pipari&callback=_adform_cb_1669310305493_1687274973111702
302 Found 0 B URL HTTP/2 adx.adform.net/adx/?rp=3&pv=1&bWlkPW51bGw&bWlkPTgzNTkzNg&bWlkPTgzNTkzNQ&bWlkPW51bGw&bWlkPTEyOTUyNjI&bWlkPW51bGw&bWlkPTgzNTkzNg&url=https%3A%2F%2Frouva-v.vuodatus.net%2Flue%2F2008%2F11%2Fmuutama-koristeltu-pipari&callback=_adform_cb_1669310305493_1687274973111702
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /adx/?rp=3&pv=1&bWlkPW51bGw&bWlkPTgzNTkzNg&bWlkPTgzNTkzNQ&bWlkPW51bGw&bWlkPTEyOTUyNjI&bWlkPW51bGw&bWlkPTgzNTkzNg&url=https%3A%2F%2Frouva-v.vuodatus.net%2Flue%2F2008%2F11%2Fmuutama-koristeltu-pipari&callback=_adform_cb_1669310305493_1687274973111702 HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rouva-v.vuodatus.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Thu, 24 Nov 2022 17:18:25 GMT
content-length: 0
location: https://adx.adform.net/adx/?CC=1&rp=3&pv=1&bWlkPW51bGw&bWlkPTgzNTkzNg&bWlkPTgzNTkzNQ&bWlkPW51bGw&bWlkPTEyOTUyNjI&bWlkPW51bGw&bWlkPTgzNTkzNg&url=https%3A%2F%2Frouva-v.vuodatus.net%2Flue%2F2008%2F11%2Fmuutama-koristeltu-pipari&callback=_adform_cb_1669310305493_1687274973111702
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: GET,OPTIONS
access-control-allow-origin: *
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
set-cookie: C=1; expires=Sat, 24 Dec 2022 17:18:25 GMT; domain=adform.net; path=/
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
v1.addthisedge.com/live/boost/ra-5050997009f3dfba/_ate.track.config_resp
200 OK 154 B URL HTTP/2 v1.addthisedge.com/live/boost/ra-5050997009f3dfba/_ate.track.config_resp
IP
File type ASCII text, with no line terminators
Hash 1798455c51e19a1de93e52339a502e8d
a0457d200050e575fe5fce342ef18826773a19a2
3f695eaf6f5245ffc8385edd6ed3d174509a3faedc9b9e14e4bffb1f0a881fb0
GET /live/boost/ra-5050997009f3dfba/_ate.track.config_resp HTTP/1.1
Host: v1.addthisedge.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rouva-v.vuodatus.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
etag: 659743217
content-disposition: attachment; filename=1.txt
content-encoding: gzip
content-length: 154
cache-control: public, max-age=27, s-maxage=86400
date: Thu, 24 Nov 2022 17:18:25 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
rouva-v.vuodatus.net/bundles/vuodatuscore/favicon.ico
200 OK 1.6 kB URL HTTP/2 rouva-v.vuodatus.net/bundles/vuodatuscore/favicon.ico
IP
File type MS Windows icon resource - 2 icons, 32x32, 32 bits/pixel, 16x16, 32 bits/pixel\012- data
Hash 6efb919ec5bf89e3167e90632b5c1c40
7b98905d4302b6efacd05f1bfea3bfd2948f37bc
eb6677fe3f63b018be54e5d20e716b7bbf309a3d711b743df947838f13ec532a
GET /bundles/vuodatuscore/favicon.ico HTTP/1.1
Host: rouva-v.vuodatus.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rouva-v.vuodatus.net/lue/2008/11/muutama-koristeltu-pipari
Connection: keep-alive
Cookie: _SESS=629695270637fa75fa2b42; __atuvc=1%7C47; __atuvs=637fa76039e18d8d000
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 17:18:25 GMT
content-type: image/x-icon
etag: W/"1536-58e7b2545b440-gzip"
vary: Accept-Encoding
cache-control: public, max-age=31536000
expires: Fri, 24 Nov 2023 17:18:25 GMT
referrer-policy: no-referrer-when-downgrade
pragma: public
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8l4raftUegoS4tytdlfVV9cquRkjsh2okT2FEQPLSp9CltknmHbwK5hVQdB%2Fc%2BbA%2FnTiQMTT7Zp0ACESwVO0968NuV3qlL6bcbh01OOL5im1kRTlfLe3s%2Fy5Yw3red1DqEZ5%2FLxX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f3cdc1de01fac0-OSL
content-encoding: br
X-Firefox-Spdy: h2
rules.quantcount.com/rules-p-qFxEwqA-betvq.js
200 OK 160 B URL HTTP/2 rules.quantcount.com/rules-p-qFxEwqA-betvq.js
IP
Hash bdc09dafc5ef92e73e2d3f053498b537
26e7959946cb5862df2dc689305750029a98c8ac
a4943b9480289bda310a769eb39552644d984650d5b74375b0a0a4d1b6ebfea1
GET /rules-p-qFxEwqA-betvq.js HTTP/1.1
Host: rules.quantcount.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rouva-v.vuodatus.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 160
last-modified: Thu, 13 Oct 2022 16:28:04 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
access-control-allow-methods: GET
date: Thu, 24 Nov 2022 16:30:23 GMT
cache-control: max-age=3600
etag: "bdc09dafc5ef92e73e2d3f053498b537"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: bOI4Odic-62s-PQybGhjdPB0bKEtuM6Emy9RnQaDa8OSdwPv5DMTew==
age: 2899
X-Firefox-Spdy: h2
platform.twitter.com/widgets.js
200 OK 29 kB URL HTTP/1.1 platform.twitter.com/widgets.js
IP
File type Unicode text, UTF-8 text, with very long lines (33915)
Hash 7899fffaf0046efb7f9be2495d9dc928
d4c60d88e8deea577a50f9d20e1b6b3a20cba2cf
07d50450f22df0588cc1b67f5a124cb91d99a032a229586eb7dc490cce9f7f30
GET /widgets.js HTTP/1.1
Host: platform.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rouva-v.vuodatus.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Encoding: gzip
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Access-Control-Max-Age: 3000
Age: 1243
Cache-Control: public, max-age=1800
Content-Type: application/javascript; charset=utf-8
Date: Thu, 24 Nov 2022 17:18:26 GMT
Etag: "6633f9603c759c40d9b200995454f17c+gzip"
Last-Modified: Wed, 02 Nov 2022 19:43:37 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F70E)
Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=,edge;dur=1
Vary: Accept-Encoding
x-amzn-internal-status: 304
X-Cache: HIT
x-tw-cdn: VZ
Content-Length: 29221
cmp.quantcast.com/choice/qFxEwqA-betvq/rouva-v.vuodatus.net/choice.js
204 No Content 0 B URL HTTP/2 cmp.quantcast.com/choice/qFxEwqA-betvq/rouva-v.vuodatus.net/choice.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /choice/qFxEwqA-betvq/rouva-v.vuodatus.net/choice.js HTTP/1.1
Host: cmp.quantcast.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rouva-v.vuodatus.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
cache-control: max-age=3600
date: Thu, 24 Nov 2022 17:18:25 GMT
server: AmazonS3
cross-origin-resource-policy: cross-origin
vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin,Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: HsnRzkCDWJDZZTsrOpF0nzuRyvjwKYo_g80JoPjEtugw4K6xCVQxHw==
X-Firefox-Spdy: h2
stats.g.doubleclick.net/r/collect?v=1&aip=1&t=dc&_r=3&tid=UA-4314133-2&cid=1968925882.1669310305&jid=122840115&_v=5.7.2&z=1084806586
200 OK 35 B URL HTTP/2 stats.g.doubleclick.net/r/collect?v=1&aip=1&t=dc&_r=3&tid=UA-4314133-2&cid=1968925882.1669310305&jid=122840115&_v=5.7.2&z=1084806586
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /r/collect?v=1&aip=1&t=dc&_r=3&tid=UA-4314133-2&cid=1968925882.1669310305&jid=122840115&_v=5.7.2&z=1084806586 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rouva-v.vuodatus.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Thu, 24 Nov 2022 17:18:26 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
x-content-type-options: nosniff
content-type: image/gif
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 35
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
platform.twitter.com/widgets/widget_iframe.644279d1635fd969e87af94a98bd232b.html?origin=https%3A%2F%2Frouva-v.vuodatus.net
200 OK 105 kB URL HTTP/1.1 platform.twitter.com/widgets/widget_iframe.644279d1635fd969e87af94a98bd232b.html?origin=https%3A%2F%2Frouva-v.vuodatus.net
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (56168)
Size 105 kB (105445 bytes)
Hash 2b4968b185495eddda0d85b2351ebb71
c665785ca0f4039f8c71d94631cd50a879d866b5
eb8af089d8082a58a6e90fedc23007f17a9e89ddbc6a29b6e535e4847ba94160
GET /widgets/widget_iframe.644279d1635fd969e87af94a98bd232b.html?origin=https%3A%2F%2Frouva-v.vuodatus.net HTTP/1.1
Host: platform.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rouva-v.vuodatus.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Encoding: gzip
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Age: 1882653
Cache-Control: public, max-age=315360000
Content-Type: text/html; charset=utf-8
Date: Thu, 24 Nov 2022 17:18:26 GMT
Etag: "50d73c0b4a4c7e4697b9c6ac6f1ecd75+gzip"
Last-Modified: Wed, 02 Nov 2022 19:36:59 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F71D)
Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=,edge;dur=1
Vary: Accept-Encoding
X-Cache: HIT
x-tw-cdn: VZ
Content-Length: 105445
ocsp.digicert.com/
200 OK 313 B IP
Hash 4018de4e86c4b97c991b6c8449a8be03
425cefbedd5c7752c887a5b81da14d2f975864a3
74e6dce1ddee0c298dc2e0990ba0a2594b04d0f72e36b9ee7bd2d625c382c90f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6252
Cache-Control: max-age=135131
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 17:18:26 GMT
Etag: "637efbd1-139"
Expires: Sat, 26 Nov 2022 06:50:37 GMT
Last-Modified: Thu, 24 Nov 2022 05:06:25 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 313
www.facebook.com/plugins/like.php?action=like&app_id=123360887535&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df3a856cae7da8a6%26domain%3Drouva-v.vuodatus.net%26is_canvas%3Dfalse%26origin%3Dhttps%253A%252F%252Frouva-v.vuodatus.net%252Ff27b8be95b63604%26relation%3Dparent.parent&container_width=0&font=arial&height=25&href=https%3A%2F%2Frouva-v.vuodatus.net%2Flue%2F2008%2F11%2Fmuutama-koristeltu-pipari&layout=button_count&locale=fi_FI&sdk=joey&send=false&share=false&show_faces=false&width=90
200 OK 0 B URL HTTP/2 www.facebook.com/plugins/like.php?action=like&app_id=123360887535&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df3a856cae7da8a6%26domain%3Drouva-v.vuodatus.net%26is_canvas%3Dfalse%26origin%3Dhttps%253A%252F%252Frouva-v.vuodatus.net%252Ff27b8be95b63604%26relation%3Dparent.parent&container_width=0&font=arial&height=25&href=https%3A%2F%2Frouva-v.vuodatus.net%2Flue%2F2008%2F11%2Fmuutama-koristeltu-pipari&layout=button_count&locale=fi_FI&sdk=joey&send=false&share=false&show_faces=false&width=90
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /plugins/like.php?action=like&app_id=123360887535&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df3a856cae7da8a6%26domain%3Drouva-v.vuodatus.net%26is_canvas%3Dfalse%26origin%3Dhttps%253A%252F%252Frouva-v.vuodatus.net%252Ff27b8be95b63604%26relation%3Dparent.parent&container_width=0&font=arial&height=25&href=https%3A%2F%2Frouva-v.vuodatus.net%2Flue%2F2008%2F11%2Fmuutama-koristeltu-pipari&layout=button_count&locale=fi_FI&sdk=joey&send=false&share=false&show_faces=false&width=90 HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rouva-v.vuodatus.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html;charset=utf-8
pragma: no-cache
cache-control: private, no-cache, no-store, must-revalidate
expires: Sat, 01 Jan 2000 00:00:00 GMT
content-security-policy-report-only: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' connect.facebook.net;style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com;worker-src blob: *.facebook.com data:;report-uri https://www.facebook.com/csp/reporting/?minimize=0;
content-security-policy: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' connect.facebook.net;style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;
report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-xss-protection: 0
x-fb-debug: eyhOptg2OyLzIkd+OzFaYdxqkeRW2I7tdQW+SplGTUbfOtPTtdDW1tZqYrOZa0X0pVeim5SaJ0cZtzXbfm894w==
content-length: 0
date: Thu, 24 Nov 2022 17:18:26 GMT
priority: u=3,i
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
secure.adnxs.com/ttj?id=24893653&size=980x400&psa=0
307 Redirection 0 B URL HTTP/1.1 secure.adnxs.com/ttj?id=24893653&size=980x400&psa=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ttj?id=24893653&size=980x400&psa=0 HTTP/1.1
Host: secure.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rouva-v.vuodatus.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Thu, 24 Nov 2022 17:18:26 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Location: https://secure.adnxs.com/bounce?%2Fttj%3Fid%3D24893653%26size%3D980x400%26psa%3D0
AN-X-Request-Uuid: 87709113-d329-4c20-9c09-95752253fd34
Set-Cookie: uuid2=2556030817456453694; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 22-Feb-2023 17:18:26 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 942.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
secure.adnxs.com/bounce?%2Fttj%3Fid%3D24893653%26size%3D980x400%26psa%3D0
200 OK 2.9 kB URL HTTP/1.1 secure.adnxs.com/bounce?%2Fttj%3Fid%3D24893653%26size%3D980x400%26psa%3D0
IP
File type HTML document, ASCII text, with very long lines (7373), with no line terminators
Hash 1666a2d95da2cec59e702437cb6abcd0
eea1a2633d9470635017d724158d11e4ceed3c09
52a29fe9abea4758b1f537ecf99f427a4255338557b9a0b7c000cea71746ebef
GET /bounce?%2Fttj%3Fid%3D24893653%26size%3D980x400%26psa%3D0 HTTP/1.1
Host: secure.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rouva-v.vuodatus.net/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Thu, 24 Nov 2022 17:18:26 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
AN-X-Request-Uuid: 2e074458-4631-4f3e-b168-f3388d043144
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 942.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
Content-Encoding: gzip
secure.adnxs.com/ttj?ttjb=1&bdc=1669310306&bdh=QXkEs-2pGPIWqVXeAHayC5BE-do.&&bdref=https%3A%2F%2Frouva-v.vuodatus.net%2Flue%2F2008%2F11%2Fmuutama-koristeltu-pipari&bdtop=true&bdifs=1&bstk=https%3A%2F%2Frouva-v.vuodatus.net%2Flue%2F2008%2F11%2Fmuutama-koristeltu-pipari,https%3A%2F%2Frouva-v.vuodatus.net%2Flue%2F2008%2F11%2Fmuutama-koristeltu-pipari&&id=24893653&size=980x400&psa=0
307 Redirection 0 B URL HTTP/1.1 secure.adnxs.com/ttj?ttjb=1&bdc=1669310306&bdh=QXkEs-2pGPIWqVXeAHayC5BE-do.&&bdref=https%3A%2F%2Frouva-v.vuodatus.net%2Flue%2F2008%2F11%2Fmuutama-koristeltu-pipari&bdtop=true&bdifs=1&bstk=https%3A%2F%2Frouva-v.vuodatus.net%2Flue%2F2008%2F11%2Fmuutama-koristeltu-pipari,https%3A%2F%2Frouva-v.vuodatus.net%2Flue%2F2008%2F11%2Fmuutama-koristeltu-pipari&&id=24893653&size=980x400&psa=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ttj?ttjb=1&bdc=1669310306&bdh=QXkEs-2pGPIWqVXeAHayC5BE-do.&&bdref=https%3A%2F%2Frouva-v.vuodatus.net%2Flue%2F2008%2F11%2Fmuutama-koristeltu-pipari&bdtop=true&bdifs=1&bstk=https%3A%2F%2Frouva-v.vuodatus.net%2Flue%2F2008%2F11%2Fmuutama-koristeltu-pipari,https%3A%2F%2Frouva-v.vuodatus.net%2Flue%2F2008%2F11%2Fmuutama-koristeltu-pipari&&id=24893653&size=980x400&psa=0 HTTP/1.1
Host: secure.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rouva-v.vuodatus.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Thu, 24 Nov 2022 17:18:26 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Location: https://secure.adnxs.com/bounce?%2Fttj%3Fttjb%3D1%26bdc%3D1669310306%26bdh%3DQXkEs-2pGPIWqVXeAHayC5BE-do.%26%26bdref%3Dhttps%253A%252F%252Frouva-v.vuodatus.net%252Flue%252F2008%252F11%252Fmuutama-koristeltu-pipari%26bdtop%3Dtrue%26bdifs%3D1%26bstk%3Dhttps%253A%252F%252Frouva-v.vuodatus.net%252Flue%252F2008%252F11%252Fmuutama-koristeltu-pipari%2Chttps%253A%252F%252Frouva-v.vuodatus.net%252Flue%252F2008%252F11%252Fmuutama-koristeltu-pipari%26%26id%3D24893653%26size%3D980x400%26psa%3D0
AN-X-Request-Uuid: f2b5ec53-c42f-4c67-8214-0d244f09d6c3
Set-Cookie: uuid2=1995645785699698121; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 22-Feb-2023 17:18:26 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 942.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
syndication.twitter.com/settings?session_id=fa8985a2cbdc613e41af363a7da3fb102d6bca7d
200 OK 374 B URL HTTP/2 syndication.twitter.com/settings?session_id=fa8985a2cbdc613e41af363a7da3fb102d6bca7d
IP
File type JSON data\012- , ASCII text, with very long lines (913), with no line terminators
Hash 925c2a7587f39436ea29513221652474
695b7f2f3d99f407bcdfd0b372db0e28193cc60c
62e36e14e5c219119cb51c3cdf43a2005512a1bd6ebf2d68d0c610a2e6e3ef0f
GET /settings?session_id=fa8985a2cbdc613e41af363a7da3fb102d6bca7d HTTP/1.1
Host: syndication.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://platform.twitter.com/
Origin: https://platform.twitter.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Thu, 24 Nov 2022 17:18:25 GMT
perf: 7626143928
vary: Origin
server: tsa_o
content-type: application/json; charset=utf-8
cache-control: must-revalidate, max-age=600
last-modified: Thu, 24 Nov 2022 17:18:26 GMT
content-length: 374
content-encoding: gzip
x-transaction-id: 6f133e3198d4549b
strict-transport-security: max-age=631138519
access-control-allow-origin: https://platform.twitter.com
access-control-allow-credentials: true
x-response-time: 113
x-connection-hash: 100af9419f21e4e32b63b65236bf089d770b73c2933d87a9dd7f4b7b72d42f6a
X-Firefox-Spdy: h2
secure.adnxs.com/ttj?id=24893654&size=980x120&psa=0
307 Redirection 0 B URL HTTP/1.1 secure.adnxs.com/ttj?id=24893654&size=980x120&psa=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ttj?id=24893654&size=980x120&psa=0 HTTP/1.1
Host: secure.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rouva-v.vuodatus.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Thu, 24 Nov 2022 17:18:26 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Location: https://secure.adnxs.com/bounce?%2Fttj%3Fid%3D24893654%26size%3D980x120%26psa%3D0
AN-X-Request-Uuid: 4e600359-dcf6-4046-8f0f-c77b413b6f73
Set-Cookie: uuid2=2736255571074721961; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 22-Feb-2023 17:18:26 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 942.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
secure.adnxs.com/bounce?%2Fttj%3Fttjb%3D1%26bdc%3D1669310306%26bdh%3DQXkEs-2pGPIWqVXeAHayC5BE-do.%26%26bdref%3Dhttps%253A%252F%252Frouva-v.vuodatus.net%252Flue%252F2008%252F11%252Fmuutama-koristeltu-pipari%26bdtop%3Dtrue%26bdifs%3D1%26bstk%3Dhttps%253A%252F%252Frouva-v.vuodatus.net%252Flue%252F2008%252F11%252Fmuutama-koristeltu-pipari%2Chttps%253A%252F%252Frouva-v.vuodatus.net%252Flue%252F2008%252F11%252Fmuutama-koristeltu-pipari%26%26id%3D24893653%26size%3D980x400%26psa%3D0
200 OK 0 B URL HTTP/1.1 secure.adnxs.com/bounce?%2Fttj%3Fttjb%3D1%26bdc%3D1669310306%26bdh%3DQXkEs-2pGPIWqVXeAHayC5BE-do.%26%26bdref%3Dhttps%253A%252F%252Frouva-v.vuodatus.net%252Flue%252F2008%252F11%252Fmuutama-koristeltu-pipari%26bdtop%3Dtrue%26bdifs%3D1%26bstk%3Dhttps%253A%252F%252Frouva-v.vuodatus.net%252Flue%252F2008%252F11%252Fmuutama-koristeltu-pipari%2Chttps%253A%252F%252Frouva-v.vuodatus.net%252Flue%252F2008%252F11%252Fmuutama-koristeltu-pipari%26%26id%3D24893653%26size%3D980x400%26psa%3D0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bounce?%2Fttj%3Fttjb%3D1%26bdc%3D1669310306%26bdh%3DQXkEs-2pGPIWqVXeAHayC5BE-do.%26%26bdref%3Dhttps%253A%252F%252Frouva-v.vuodatus.net%252Flue%252F2008%252F11%252Fmuutama-koristeltu-pipari%26bdtop%3Dtrue%26bdifs%3D1%26bstk%3Dhttps%253A%252F%252Frouva-v.vuodatus.net%252Flue%252F2008%252F11%252Fmuutama-koristeltu-pipari%2Chttps%253A%252F%252Frouva-v.vuodatus.net%252Flue%252F2008%252F11%252Fmuutama-koristeltu-pipari%26%26id%3D24893653%26size%3D980x400%26psa%3D0 HTTP/1.1
Host: secure.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rouva-v.vuodatus.net/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Thu, 24 Nov 2022 17:18:26 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
AN-X-Request-Uuid: 835d20a5-eec7-4c99-898f-986450157251
Set-Cookie: icu=ChgI3ph_EAoYASABKAEw4s7-mwY4AUABSAEQ4s7-mwYYAA..; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 22-Feb-2023 17:18:26 GMT; Domain=.adnxs.com; Secure; HttpOnly
uuid2=2107427359130420731; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 22-Feb-2023 17:18:26 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 942.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
secure.adnxs.com/ttj?id=24893654&size=980x120&psa=0
307 Redirection 0 B URL HTTP/1.1 secure.adnxs.com/ttj?id=24893654&size=980x120&psa=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ttj?id=24893654&size=980x120&psa=0 HTTP/1.1
Host: secure.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rouva-v.vuodatus.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Thu, 24 Nov 2022 17:18:26 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Location: https://secure.adnxs.com/bounce?%2Fttj%3Fid%3D24893654%26size%3D980x120%26psa%3D0
AN-X-Request-Uuid: 4f17db22-9899-42b8-b4f3-283ff247fe9a
Set-Cookie: uuid2=6214407812415094576; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 22-Feb-2023 17:18:26 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 942.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
secure.adnxs.com/bounce?%2Fttj%3Fid%3D24893654%26size%3D980x120%26psa%3D0
200 OK 2.9 kB URL HTTP/1.1 secure.adnxs.com/bounce?%2Fttj%3Fid%3D24893654%26size%3D980x120%26psa%3D0
IP
File type HTML document, ASCII text, with very long lines (7373), with no line terminators
Hash 033b043bd07eb0d24e2b51c28a567d4a
2b457afcdb5be16833678e29e614b52199fb0660
158db2bb4a400700d58216d4a3c77bb06285ec08169748cb4698153b44ca65fb
GET /bounce?%2Fttj%3Fid%3D24893654%26size%3D980x120%26psa%3D0 HTTP/1.1
Host: secure.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rouva-v.vuodatus.net/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Thu, 24 Nov 2022 17:18:26 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
AN-X-Request-Uuid: c4631b02-cc19-4507-a31a-ac53f1b811f8
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 942.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
Content-Encoding: gzip
ocsp.digicert.com/
200 OK 314 B IP
Hash bd6296ec9daaa3e6ab202fa297b046d2
e445c212d58f4b056fa94af4874536155df6d319
0736f933641c57d8b8bf830ebcc29e65dbea9b926c2865fd5fbd02ea24ab1fff
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 557
Cache-Control: max-age=151058
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 17:18:26 GMT
Etag: "637f5047-13a"
Expires: Sat, 26 Nov 2022 11:16:04 GMT
Last-Modified: Thu, 24 Nov 2022 11:06:47 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 314
secure.adnxs.com/ttj?ttjb=1&bdc=1669310306&bdh=QXkEs-2pGPIWqVXeAHayC5BE-do.&&bdref=https%3A%2F%2Frouva-v.vuodatus.net%2Flue%2F2008%2F11%2Fmuutama-koristeltu-pipari&bdtop=true&bdifs=1&bstk=https%3A%2F%2Frouva-v.vuodatus.net%2Flue%2F2008%2F11%2Fmuutama-koristeltu-pipari,https%3A%2F%2Frouva-v.vuodatus.net%2Flue%2F2008%2F11%2Fmuutama-koristeltu-pipari&&id=24893654&size=980x120&psa=0
307 Redirection 0 B URL HTTP/1.1 secure.adnxs.com/ttj?ttjb=1&bdc=1669310306&bdh=QXkEs-2pGPIWqVXeAHayC5BE-do.&&bdref=https%3A%2F%2Frouva-v.vuodatus.net%2Flue%2F2008%2F11%2Fmuutama-koristeltu-pipari&bdtop=true&bdifs=1&bstk=https%3A%2F%2Frouva-v.vuodatus.net%2Flue%2F2008%2F11%2Fmuutama-koristeltu-pipari,https%3A%2F%2Frouva-v.vuodatus.net%2Flue%2F2008%2F11%2Fmuutama-koristeltu-pipari&&id=24893654&size=980x120&psa=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ttj?ttjb=1&bdc=1669310306&bdh=QXkEs-2pGPIWqVXeAHayC5BE-do.&&bdref=https%3A%2F%2Frouva-v.vuodatus.net%2Flue%2F2008%2F11%2Fmuutama-koristeltu-pipari&bdtop=true&bdifs=1&bstk=https%3A%2F%2Frouva-v.vuodatus.net%2Flue%2F2008%2F11%2Fmuutama-koristeltu-pipari,https%3A%2F%2Frouva-v.vuodatus.net%2Flue%2F2008%2F11%2Fmuutama-koristeltu-pipari&&id=24893654&size=980x120&psa=0 HTTP/1.1
Host: secure.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rouva-v.vuodatus.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Thu, 24 Nov 2022 17:18:26 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Location: https://secure.adnxs.com/bounce?%2Fttj%3Fttjb%3D1%26bdc%3D1669310306%26bdh%3DQXkEs-2pGPIWqVXeAHayC5BE-do.%26%26bdref%3Dhttps%253A%252F%252Frouva-v.vuodatus.net%252Flue%252F2008%252F11%252Fmuutama-koristeltu-pipari%26bdtop%3Dtrue%26bdifs%3D1%26bstk%3Dhttps%253A%252F%252Frouva-v.vuodatus.net%252Flue%252F2008%252F11%252Fmuutama-koristeltu-pipari%2Chttps%253A%252F%252Frouva-v.vuodatus.net%252Flue%252F2008%252F11%252Fmuutama-koristeltu-pipari%26%26id%3D24893654%26size%3D980x120%26psa%3D0
AN-X-Request-Uuid: bb25828f-4851-4bd2-91c6-9054b1f2a829
Set-Cookie: uuid2=8950380176888118688; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 22-Feb-2023 17:18:26 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 942.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
secure.adnxs.com/bounce?%2Fttj%3Fttjb%3D1%26bdc%3D1669310306%26bdh%3DQXkEs-2pGPIWqVXeAHayC5BE-do.%26%26bdref%3Dhttps%253A%252F%252Frouva-v.vuodatus.net%252Flue%252F2008%252F11%252Fmuutama-koristeltu-pipari%26bdtop%3Dtrue%26bdifs%3D1%26bstk%3Dhttps%253A%252F%252Frouva-v.vuodatus.net%252Flue%252F2008%252F11%252Fmuutama-koristeltu-pipari%2Chttps%253A%252F%252Frouva-v.vuodatus.net%252Flue%252F2008%252F11%252Fmuutama-koristeltu-pipari%26%26id%3D24893654%26size%3D980x120%26psa%3D0
200 OK 0 B URL HTTP/1.1 secure.adnxs.com/bounce?%2Fttj%3Fttjb%3D1%26bdc%3D1669310306%26bdh%3DQXkEs-2pGPIWqVXeAHayC5BE-do.%26%26bdref%3Dhttps%253A%252F%252Frouva-v.vuodatus.net%252Flue%252F2008%252F11%252Fmuutama-koristeltu-pipari%26bdtop%3Dtrue%26bdifs%3D1%26bstk%3Dhttps%253A%252F%252Frouva-v.vuodatus.net%252Flue%252F2008%252F11%252Fmuutama-koristeltu-pipari%2Chttps%253A%252F%252Frouva-v.vuodatus.net%252Flue%252F2008%252F11%252Fmuutama-koristeltu-pipari%26%26id%3D24893654%26size%3D980x120%26psa%3D0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bounce?%2Fttj%3Fttjb%3D1%26bdc%3D1669310306%26bdh%3DQXkEs-2pGPIWqVXeAHayC5BE-do.%26%26bdref%3Dhttps%253A%252F%252Frouva-v.vuodatus.net%252Flue%252F2008%252F11%252Fmuutama-koristeltu-pipari%26bdtop%3Dtrue%26bdifs%3D1%26bstk%3Dhttps%253A%252F%252Frouva-v.vuodatus.net%252Flue%252F2008%252F11%252Fmuutama-koristeltu-pipari%2Chttps%253A%252F%252Frouva-v.vuodatus.net%252Flue%252F2008%252F11%252Fmuutama-koristeltu-pipari%26%26id%3D24893654%26size%3D980x120%26psa%3D0 HTTP/1.1
Host: secure.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rouva-v.vuodatus.net/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Thu, 24 Nov 2022 17:18:26 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
AN-X-Request-Uuid: c73dd063-5a1d-48d9-b7fc-439af21428d6
Set-Cookie: icu=ChgI3ph_EAoYASABKAEw4s7-mwY4AUABSAEQ4s7-mwYYAA..; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 22-Feb-2023 17:18:26 GMT; Domain=.adnxs.com; Secure; HttpOnly
uuid2=8423615084327643330; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 22-Feb-2023 17:18:26 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 942.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
vuodatus.net/bundles/roheatheme/fonts/Lane/LANENAR_-webfont.ttf
200 OK 38 kB URL HTTP/2 vuodatus.net/bundles/roheatheme/fonts/Lane/LANENAR_-webfont.ttf
IP
File type TrueType Font data, 16 tables, 1st "FFTM", 8 names, Microsoft, language 0x409, \251 Graham Meade. All rights reserved. gem@c031.aone.net.auLane - NarrowRegularwebfontLane - Na\012- data
Hash 297c36edbb6e8259aea03331d79db87f
9531cc1501985783a88f2e66f6ef9c0bfe91f3d4
e0306e76a85b6b536378d5d7193cb0f04827332e950a510254544464a56e5e3f
GET /bundles/roheatheme/fonts/Lane/LANENAR_-webfont.ttf HTTP/1.1
Host: vuodatus.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vuodatus.net/teemat/read/blog/50d4a1c2d26466757b000ce5/theme.css?updated=0
Origin: https://rouva-v.vuodatus.net
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 17:18:24 GMT
content-type: application/x-font-ttf
etag: W/"92d4-58e7b2545b440-gzip"
vary: Accept-Encoding
cache-control: public, max-age=31536000
expires: Thu, 23 Nov 2023 15:41:58 GMT
referrer-policy: no-referrer-when-downgrade
pragma: public
cf-cache-status: HIT
age: 92186
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YavfezSI9OvFiEWKNJM7ne93hnsVqLbMDR7W4jAy6VHKN7ykf38Zg8fSOdau%2Bh5pxBpBQlhe4ss4uMb76Byg3DVTTWw5vbDer7GfHjtAGufwCmqy%2B2sjo0kH9GJ1eQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f3cdbd9a11fac0-OSL
X-Firefox-Spdy: h2
secure.adnxs.com/bounce?%2Fttj%3Fid%3D24893654%26size%3D980x120%26psa%3D0
200 OK 2.9 kB URL HTTP/1.1 secure.adnxs.com/bounce?%2Fttj%3Fid%3D24893654%26size%3D980x120%26psa%3D0
IP
File type HTML document, ASCII text, with very long lines (7373), with no line terminators
Hash 033b043bd07eb0d24e2b51c28a567d4a
2b457afcdb5be16833678e29e614b52199fb0660
158db2bb4a400700d58216d4a3c77bb06285ec08169748cb4698153b44ca65fb
GET /bounce?%2Fttj%3Fid%3D24893654%26size%3D980x120%26psa%3D0 HTTP/1.1
Host: secure.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rouva-v.vuodatus.net/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Thu, 24 Nov 2022 17:18:26 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
AN-X-Request-Uuid: 6cee20d9-7617-4b53-a038-11535d77ba76
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 942.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
Content-Encoding: gzip
secure.adnxs.com/ttj?ttjb=1&bdc=1669310306&bdh=QXkEs-2pGPIWqVXeAHayC5BE-do.&&bdref=https%3A%2F%2Frouva-v.vuodatus.net%2Flue%2F2008%2F11%2Fmuutama-koristeltu-pipari&bdtop=true&bdifs=1&bstk=https%3A%2F%2Frouva-v.vuodatus.net%2Flue%2F2008%2F11%2Fmuutama-koristeltu-pipari,https%3A%2F%2Frouva-v.vuodatus.net%2Flue%2F2008%2F11%2Fmuutama-koristeltu-pipari&&id=24893654&size=980x120&psa=0
307 Redirection 0 B URL HTTP/1.1 secure.adnxs.com/ttj?ttjb=1&bdc=1669310306&bdh=QXkEs-2pGPIWqVXeAHayC5BE-do.&&bdref=https%3A%2F%2Frouva-v.vuodatus.net%2Flue%2F2008%2F11%2Fmuutama-koristeltu-pipari&bdtop=true&bdifs=1&bstk=https%3A%2F%2Frouva-v.vuodatus.net%2Flue%2F2008%2F11%2Fmuutama-koristeltu-pipari,https%3A%2F%2Frouva-v.vuodatus.net%2Flue%2F2008%2F11%2Fmuutama-koristeltu-pipari&&id=24893654&size=980x120&psa=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ttj?ttjb=1&bdc=1669310306&bdh=QXkEs-2pGPIWqVXeAHayC5BE-do.&&bdref=https%3A%2F%2Frouva-v.vuodatus.net%2Flue%2F2008%2F11%2Fmuutama-koristeltu-pipari&bdtop=true&bdifs=1&bstk=https%3A%2F%2Frouva-v.vuodatus.net%2Flue%2F2008%2F11%2Fmuutama-koristeltu-pipari,https%3A%2F%2Frouva-v.vuodatus.net%2Flue%2F2008%2F11%2Fmuutama-koristeltu-pipari&&id=24893654&size=980x120&psa=0 HTTP/1.1
Host: secure.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rouva-v.vuodatus.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Thu, 24 Nov 2022 17:18:26 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Location: https://secure.adnxs.com/bounce?%2Fttj%3Fttjb%3D1%26bdc%3D1669310306%26bdh%3DQXkEs-2pGPIWqVXeAHayC5BE-do.%26%26bdref%3Dhttps%253A%252F%252Frouva-v.vuodatus.net%252Flue%252F2008%252F11%252Fmuutama-koristeltu-pipari%26bdtop%3Dtrue%26bdifs%3D1%26bstk%3Dhttps%253A%252F%252Frouva-v.vuodatus.net%252Flue%252F2008%252F11%252Fmuutama-koristeltu-pipari%2Chttps%253A%252F%252Frouva-v.vuodatus.net%252Flue%252F2008%252F11%252Fmuutama-koristeltu-pipari%26%26id%3D24893654%26size%3D980x120%26psa%3D0
AN-X-Request-Uuid: 678c5a23-cdc4-4b81-bc5a-1e56d0ef73c2
Set-Cookie: uuid2=460454890739553235; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 22-Feb-2023 17:18:26 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 942.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
platform.twitter.com/js/button.d2f864f87f544dc0c11d7d712a191c1f.js
200 OK 2.4 kB URL HTTP/1.1 platform.twitter.com/js/button.d2f864f87f544dc0c11d7d712a191c1f.js
IP
File type ASCII text, with very long lines (7017), with no line terminators
Hash 83616664e4155f8af0efb0576f8920cf
1277b0f4f935bec3ada0f87c45395bb6d9b2efbc
bb19d85932c5e8a952b6fc28c1df42aed6d6920f79ee3f2217d2484294d575d3
GET /js/button.d2f864f87f544dc0c11d7d712a191c1f.js HTTP/1.1
Host: platform.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rouva-v.vuodatus.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Encoding: gzip
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Age: 1882654
Cache-Control: public, max-age=315360000
Content-Type: application/javascript; charset=utf-8
Date: Thu, 24 Nov 2022 17:18:26 GMT
Etag: "7bb2d17ac20be3bd6ec1079356afecd9+gzip"
Last-Modified: Wed, 02 Nov 2022 19:36:52 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F70E)
Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=,edge;dur=1
Vary: Accept-Encoding
X-Cache: HIT
x-tw-cdn: VZ
Content-Length: 2362
secure.adnxs.com/bounce?%2Fttj%3Fttjb%3D1%26bdc%3D1669310306%26bdh%3DQXkEs-2pGPIWqVXeAHayC5BE-do.%26%26bdref%3Dhttps%253A%252F%252Frouva-v.vuodatus.net%252Flue%252F2008%252F11%252Fmuutama-koristeltu-pipari%26bdtop%3Dtrue%26bdifs%3D1%26bstk%3Dhttps%253A%252F%252Frouva-v.vuodatus.net%252Flue%252F2008%252F11%252Fmuutama-koristeltu-pipari%2Chttps%253A%252F%252Frouva-v.vuodatus.net%252Flue%252F2008%252F11%252Fmuutama-koristeltu-pipari%26%26id%3D24893654%26size%3D980x120%26psa%3D0
200 OK 0 B URL HTTP/1.1 secure.adnxs.com/bounce?%2Fttj%3Fttjb%3D1%26bdc%3D1669310306%26bdh%3DQXkEs-2pGPIWqVXeAHayC5BE-do.%26%26bdref%3Dhttps%253A%252F%252Frouva-v.vuodatus.net%252Flue%252F2008%252F11%252Fmuutama-koristeltu-pipari%26bdtop%3Dtrue%26bdifs%3D1%26bstk%3Dhttps%253A%252F%252Frouva-v.vuodatus.net%252Flue%252F2008%252F11%252Fmuutama-koristeltu-pipari%2Chttps%253A%252F%252Frouva-v.vuodatus.net%252Flue%252F2008%252F11%252Fmuutama-koristeltu-pipari%26%26id%3D24893654%26size%3D980x120%26psa%3D0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bounce?%2Fttj%3Fttjb%3D1%26bdc%3D1669310306%26bdh%3DQXkEs-2pGPIWqVXeAHayC5BE-do.%26%26bdref%3Dhttps%253A%252F%252Frouva-v.vuodatus.net%252Flue%252F2008%252F11%252Fmuutama-koristeltu-pipari%26bdtop%3Dtrue%26bdifs%3D1%26bstk%3Dhttps%253A%252F%252Frouva-v.vuodatus.net%252Flue%252F2008%252F11%252Fmuutama-koristeltu-pipari%2Chttps%253A%252F%252Frouva-v.vuodatus.net%252Flue%252F2008%252F11%252Fmuutama-koristeltu-pipari%26%26id%3D24893654%26size%3D980x120%26psa%3D0 HTTP/1.1
Host: secure.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rouva-v.vuodatus.net/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Thu, 24 Nov 2022 17:18:26 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
AN-X-Request-Uuid: dc20615e-c9c1-4964-8b21-3a72c44b199a
Set-Cookie: icu=ChgI3ph_EAoYASABKAEw4s7-mwY4AUABSAEQ4s7-mwYYAA..; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 22-Feb-2023 17:18:26 GMT; Domain=.adnxs.com; Secure; HttpOnly
uuid2=334611507629797367; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 22-Feb-2023 17:18:26 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 942.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
platform.twitter.com/widgets/tweet_button.644279d1635fd969e87af94a98bd232b.fi.html
200 OK 14 kB URL HTTP/1.1 platform.twitter.com/widgets/tweet_button.644279d1635fd969e87af94a98bd232b.fi.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (32033)
Hash d413fa13205db1c28f55dd4dc518ab83
24ba6929abaaa1e4f660e3793182c490525f5714
373d9003a531a1701d31f4c5fb6f378699709af10e38f61f831b9d6d5017d050
GET /widgets/tweet_button.644279d1635fd969e87af94a98bd232b.fi.html HTTP/1.1
Host: platform.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rouva-v.vuodatus.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Encoding: gzip
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Age: 1882653
Cache-Control: public, max-age=315360000
Content-Type: text/html; charset=utf-8
Date: Thu, 24 Nov 2022 17:18:26 GMT
Etag: "7d75f2772b248fdbb7bc0304f1df432b+gzip"
Last-Modified: Wed, 02 Nov 2022 19:36:56 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F70E)
Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=,edge;dur=1
Vary: Accept-Encoding
X-Cache: HIT
x-tw-cdn: VZ
Content-Length: 14030
syndication.twitter.com/i/jot/embeds?l=%7B%22widget_origin%22%3A%22https%3A%2F%2Frouva-v.vuodatus.net%2Flue%2F2008%2F11%2Fmuutama-koristeltu-pipari%22%2C%22widget_frame%22%3Afalse%2C%22language%22%3A%22fi%22%2C%22message%22%3A%22m%3Anocount%3A%22%2C%22context%22%3A%22rufous-eol%22%2C%22_category_%22%3A%22tfw_client_event%22%2C%22triggered_on%22%3A1669310306621%2C%22dnt%22%3Afalse%2C%22client_version%22%3A%22a3525f077c700%3A1667415560940%22%2C%22format_version%22%3A1%2C%22event_namespace%22%3A%7B%22client%22%3A%22tfw%22%2C%22page%22%3A%22button%22%2C%22section%22%3A%22share%22%2C%22action%22%3A%22impression%22%7D%7D&session_id=fa8985a2cbdc613e41af363a7da3fb102d6bca7d
200 OK 43 B URL HTTP/2 syndication.twitter.com/i/jot/embeds?l=%7B%22widget_origin%22%3A%22https%3A%2F%2Frouva-v.vuodatus.net%2Flue%2F2008%2F11%2Fmuutama-koristeltu-pipari%22%2C%22widget_frame%22%3Afalse%2C%22language%22%3A%22fi%22%2C%22message%22%3A%22m%3Anocount%3A%22%2C%22context%22%3A%22rufous-eol%22%2C%22_category_%22%3A%22tfw_client_event%22%2C%22triggered_on%22%3A1669310306621%2C%22dnt%22%3Afalse%2C%22client_version%22%3A%22a3525f077c700%3A1667415560940%22%2C%22format_version%22%3A1%2C%22event_namespace%22%3A%7B%22client%22%3A%22tfw%22%2C%22page%22%3A%22button%22%2C%22section%22%3A%22share%22%2C%22action%22%3A%22impression%22%7D%7D&session_id=fa8985a2cbdc613e41af363a7da3fb102d6bca7d
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/jot/embeds?l=%7B%22widget_origin%22%3A%22https%3A%2F%2Frouva-v.vuodatus.net%2Flue%2F2008%2F11%2Fmuutama-koristeltu-pipari%22%2C%22widget_frame%22%3Afalse%2C%22language%22%3A%22fi%22%2C%22message%22%3A%22m%3Anocount%3A%22%2C%22context%22%3A%22rufous-eol%22%2C%22_category_%22%3A%22tfw_client_event%22%2C%22triggered_on%22%3A1669310306621%2C%22dnt%22%3Afalse%2C%22client_version%22%3A%22a3525f077c700%3A1667415560940%22%2C%22format_version%22%3A1%2C%22event_namespace%22%3A%7B%22client%22%3A%22tfw%22%2C%22page%22%3A%22button%22%2C%22section%22%3A%22share%22%2C%22action%22%3A%22impression%22%7D%7D&session_id=fa8985a2cbdc613e41af363a7da3fb102d6bca7d HTTP/1.1
Host: syndication.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rouva-v.vuodatus.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 17:18:27 GMT
perf: 7626143928
vary: Origin
server: tsa_o
content-type: image/gif
cache-control: must-revalidate, max-age=600
last-modified: Thu, 24 Nov 2022 17:18:27 GMT
content-length: 43
x-transaction-id: 2ca01d147c9d412d
strict-transport-security: max-age=631138519
x-response-time: 116
x-connection-hash: 100af9419f21e4e32b63b65236bf089d770b73c2933d87a9dd7f4b7b72d42f6a
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 312 B IP
Hash d4daf1dfe64a0efc5307761240844950
5b7380b1249c7ba65c5d3cf3ef7db0a0aa0f87fa
26330bc9faf9f88ea49947d9253df1ba70c061730a628813391dc9b7d946e74f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 620
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 17:18:29 GMT
Last-Modified: Thu, 24 Nov 2022 17:08:09 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 312
dnacdn.net/dna
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dna HTTP/1.1
Host: dnacdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 24 Nov 2022 17:18:28 GMT
server: Kestrel
content-length: 0
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
set-cookie: browser_data=NADuDV80M0RITmhlJTJCZkMwOUJGQlhaMUN2czZJJTJCayUyQkxIa1JWbkRhQlpveWtRa1JaZllvV0RMc0QzQ1BVT2xYQ0Uza3Bn; expires=Tue, 19 Dec 2023 17:18:29 GMT; domain=dnacdn.net; path=/; secure; samesite=none
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 261754
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
gum.criteo.com/sync?c=30&r=2&j=cr_handle_data_a
200 OK 8.8 kB URL HTTP/2 gum.criteo.com/sync?c=30&r=2&j=cr_handle_data_a
IP
File type C source, ASCII text, with very long lines (29467)
Hash a2bd609b5640cbff2d7beaf4555bf8cf
c1e53fa011fae364dc203f2a0719c8cb9ef8b6f3
94e57438412a71beb8fb162724641a018e9d51274b6bd60845f005bc7a901b66
GET /sync?c=30&r=2&j=cr_handle_data_a HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rouva-v.vuodatus.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 24 Nov 2022 17:18:25 GMT
content-type: text/javascript; charset=utf-8
server: Kestrel
cache-control: private, max-age=3600
expires: 60
server-processing-duration-in-ticks: 933436
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 314 B IP
Hash 1d08f7fbe6aed6d8ba415a8f14d609af
6afb73c7fa74c2f1d99f67c468da8e16e7b9ebec
18e1fed8a1e67f690011be914294e252f800175c4550cb3af93a631fa7eaeff0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2388
Cache-Control: max-age=148940
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 17:18:29 GMT
Etag: "637f40dd-13a"
Expires: Sat, 26 Nov 2022 10:40:49 GMT
Last-Modified: Thu, 24 Nov 2022 10:01:01 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 314
dnacdn.net/dna
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dna HTTP/1.1
Host: dnacdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 17:18:28 GMT
server: Kestrel
content-length: 0
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
set-cookie: browser_data=6r8gll80M0RITmhlJTJCZkMwOUJGQlhaMUN2czVyOWRqJTJGWngwaUk3djhSWXlyTzJidjljYW9BSXZhMUR0YlhpbFJiMUlFZw; expires=Tue, 19 Dec 2023 17:18:29 GMT; domain=dnacdn.net; path=/; secure; samesite=none
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 263819
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ag.gbc.criteo.com/newidsd
200 OK 78 B URL HTTP/2 ag.gbc.criteo.com/newidsd
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash b4d90c6c694d3f419db0ce9b0ad5d48f
48972c0560f902a6b4a75f25bebe83c7905f4bdc
ad705f0384cc231a2280120eaa6e5dbbaf7b61fb688b78c0399bb90833afa9c5
GET /newidsd HTTP/1.1
Host: ag.gbc.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Thu, 24 Nov 2022 17:18:29 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 97887
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
gum.criteo.com/sync?c=30&r=2&j=cr_handle_data_a
200 OK 0 B URL HTTP/2 gum.criteo.com/sync?c=30&r=2&j=cr_handle_data_a
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /sync?c=30&r=2&j=cr_handle_data_a HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-crto-bundle
Referer: https://rouva-v.vuodatus.net/
Origin: https://rouva-v.vuodatus.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 17:18:29 GMT
server: Kestrel
content-length: 0
cache-control: private, max-age=3600
expires: 60
access-control-allow-credentials: true
access-control-allow-headers: X-CRTO-SID, X-CRTO-IDCPY, X-CRTO-OPTOUT, X-CRTO-BUNDLE
access-control-allow-origin: https://rouva-v.vuodatus.net
server-processing-duration-in-ticks: 379472
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 314 B IP
Hash 587bcbcbb81bfbdaa85c85bceb727039
97f268422eae1397ad8c777f49346c9c434587bd
6169e5a91a1fb721dd77c787f3cd91efe03822b8fbac11d1635fb3f497cbbc9e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2180
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 17:18:29 GMT
Last-Modified: Thu, 24 Nov 2022 16:42:09 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 314
gum.criteo.com/sync?c=30&r=2&j=cr_handle_data_a
200 OK 8.8 kB URL HTTP/2 gum.criteo.com/sync?c=30&r=2&j=cr_handle_data_a
IP
Hash 26b0ed62b0ae02a3238f7ccb88f44b3b
dba857661d5e49a13b119962a02634fb5d7c2196
ed04e4299c60341d37b9031987902e79fa141bb268f9902b2727bb26f8c79cc7
GET /sync?c=30&r=2&j=cr_handle_data_a HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rouva-v.vuodatus.net/
x-crto-bundle: 9jlIjl82bXVBUHdVVEZORlZpOEIxbzFlRHVtaDBmN2d6MjV5OWZXbDlYS3p1TGJabEkwMWpLdyUyQnFNZFZkN2RqdTFsMkNnQUxIUTNyU2tLdVNacTdEc1UwbENRS3NBOE9Md1doOTNIZk9hVFNyWGV5a3FVJTJGbG5xZlAySlN2em8lMkJISWJaJTJCVFNYclpsbEViVVB4NTJDS09hZiUyQlRnJTNEJTNE
Origin: https://rouva-v.vuodatus.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 17:18:28 GMT
content-type: text/javascript; charset=utf-8
server: Kestrel
cache-control: private, max-age=3600
expires: 60
access-control-allow-credentials: true
access-control-allow-origin: https://rouva-v.vuodatus.net
server-processing-duration-in-ticks: 2694380
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
adx.adform.net/adx/?CC=1&mid=673906
200 OK 0 B URL HTTP/2 adx.adform.net/adx/?CC=1&mid=673906
IP
GET /adx/?CC=1&mid=673906 HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rouva-v.vuodatus.net/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 17:18:25 GMT
content-type: text/javascript
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: GET,OPTIONS
access-control-allow-origin: *
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
content-encoding: gzip
X-Firefox-Spdy: h2
vuodatus.net/bundles/roheatheme/fonts/Lane/LANENAR_-webfont.woff
200 OK 0 B URL HTTP/2 vuodatus.net/bundles/roheatheme/fonts/Lane/LANENAR_-webfont.woff
IP
GET /bundles/roheatheme/fonts/Lane/LANENAR_-webfont.woff HTTP/1.1
Host: vuodatus.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://vuodatus.net/teemat/read/blog/50d4a1c2d26466757b000ce5/theme.css?updated=0
Origin: https://rouva-v.vuodatus.net
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 17:18:24 GMT
content-type: application/font-woff
etag: W/"586c-58e7b2545b440-gzip"
vary: Accept-Encoding
cache-control: public, max-age=31536000
expires: Thu, 23 Nov 2023 15:41:57 GMT
referrer-policy: no-referrer-when-downgrade
pragma: public
cf-cache-status: HIT
age: 92187
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HyxzymXvOF4490RBVS%2BsQiHpLgD0QSEZQqPnEZlw7B8n2VwpcyvvZb1k%2Bdx%2Fbp%2FJpiGOTj353mPLPgv2cByxG674eIbxXqy6EfFFgv1%2BUpUq16cfr%2F5mecRSkvjCZQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f3cdbcc984fac0-OSL
X-Firefox-Spdy: h2
rouva-v.vuodatus.net/cdn-cgi/challenge-platform/h/b/scripts/alpha/invisible.js?ts=1669305600
200 OK 0 B URL HTTP/2 rouva-v.vuodatus.net/cdn-cgi/challenge-platform/h/b/scripts/alpha/invisible.js?ts=1669305600
IP
GET /cdn-cgi/challenge-platform/h/b/scripts/alpha/invisible.js?ts=1669305600 HTTP/1.1
Host: rouva-v.vuodatus.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _SESS=629695270637fa75fa2b42; __atuvc=1%7C47; __atuvs=637fa76039e18d8d000
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 17:18:24 GMT
content-type: application/javascript; charset=UTF-8
cache-control: max-age=14400, public
vary: accept-encoding
x-control-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Acj7wFdFmnLJzCxiXTvn7gnqXXsprek%2FIX0xP4jyvljRmFWRKW4fAikUXjns6WVeHuONIllUj75CShWEJPOgOCZlYnngmScR6T3U916nO7CF61sMkvvHkCMGfE05Men3hpDT058s"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f3cdbd79fdfac0-OSL
content-encoding: br
X-Firefox-Spdy: h2
gem.gbc.criteo.com/newidsd
200 OK 0 B URL HTTP/2 gem.gbc.criteo.com/newidsd
IP
GET /newidsd HTTP/1.1
Host: gem.gbc.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Thu, 24 Nov 2022 17:18:29 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 102866
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
sak.userreport.com/nostemedia/launcher.js
200 OK 0 B URL HTTP/2 sak.userreport.com/nostemedia/launcher.js
IP
GET /nostemedia/launcher.js HTTP/1.1
Host: sak.userreport.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rouva-v.vuodatus.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Thu, 29 Sep 2022 11:20:16 GMT
x-amz-version-id: AZleu1ZI3iOZmnD4C4JVn_tzY5EKrRQa
server: AmazonS3
content-encoding: br
date: Thu, 24 Nov 2022 17:18:03 GMT
cache-control: max-age=7200, s-maxage=60
etag: W/"6940d7416206f3025adf7d793b655f3e"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ezhXdfzYmdh969ml4NzINX7zJtdh2delh-sToHKNzfwpEOdSCJ115Q==
age: 40
X-Firefox-Spdy: h2
sb.scorecardresearch.com/beacon.js
200 OK 0 B URL HTTP/2 sb.scorecardresearch.com/beacon.js
IP
GET /beacon.js HTTP/1.1
Host: sb.scorecardresearch.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rouva-v.vuodatus.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Tue, 28 Jun 2022 13:19:23 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: gzip
date: Thu, 24 Nov 2022 01:57:21 GMT
cache-control: max-age=86400
etag: W/"eaf85c1c6758e84acfe134efd70e9373"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: R_ZUZ7_mAMqttJrqOOKWqQmInMm292MVqSN-nJQW-0WDLRlAZvvXlw==
age: 55265
X-Firefox-Spdy: h2
rouva-v.vuodatus.net/lue/2008/11/muutama-koristeltu-pipari
200 OK 0 B URL HTTP/2 rouva-v.vuodatus.net/lue/2008/11/muutama-koristeltu-pipari
IP
GET /lue/2008/11/muutama-koristeltu-pipari HTTP/1.1
Host: rouva-v.vuodatus.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Thu, 24 Nov 2022 17:18:24 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/5.6.40
cache-control: no-cache
set-cookie: _SESS=629695270637fa75fa2b42; path=/; domain=.vuodatus.net
vary: Accept-Encoding
referrer-policy: no-referrer-when-downgrade
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xhZ7sj%2ByQShEOYUoTwEZpYvH%2B7%2FIonuLjkcPsIHpUVDdXTj9DwS9zcfvFDYxhafG0KF0B0DA2miiGVLFxMnlnUteS2lvTl1P3xjlF5B89nqTE6sio5%2Fhy7FcAPDpo5iX4Z%2BtnNJh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f3cdb3af98fac0-OSL
content-encoding: br
X-Firefox-Spdy: h2
ics.userreport.com/frame.html
200 OK 0 B URL HTTP/2 ics.userreport.com/frame.html
IP
GET /frame.html HTTP/1.1
Host: ics.userreport.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rouva-v.vuodatus.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Thu, 29 Oct 2020 13:01:22 GMT
server: AmazonS3
content-encoding: gzip
date: Thu, 24 Nov 2022 01:04:49 GMT
etag: W/"105c717402ff669348a149748beff2f1"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 dac7cf040932e0c072eeed10afdd7b3e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Jr1jKppohIQqIvD4afnhbHGWTciT5cgP_EQGlDZxJXyhwho7CvgQpw==
age: 58417
X-Firefox-Spdy: h2
www.tonyadams.com/
200 OK 0 B IP
ASN #140576 VPSBlocks Pty Ltd
GET / HTTP/1.1
Host: www.tonyadams.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 17:18:26 GMT
Server: Apache
X-Powered-By: PHP/5.6.40
Link: <https://www.tonyadams.com/wp-json/>; rel="https://api.w.org/", <https://www.tonyadams.com/wp-json/wp/v2/pages/17055>; rel="alternate"; type="application/json", <https://www.tonyadams.com/>; rel=shortlink
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
gum.criteo.com/sid/json?origin=rtus&domain=vuodatus.net&sn=FirefoxSyncframe&so=0&topUrl=rouva-v.vuodatus.net&info=XD6DN180M0RITmhlJTJCZkMwOUJGQlhaMUN2czZJJTJCayUyQkxIa1JWbkRhQlpveWtRa1JiTlpPVlljZiUyQmRLTkhkY3dJcDJUS2o&idsd=-288463926,1657739878&cw=1&rtusCallerId=30&lsw=1
200 OK 0 B URL HTTP/2 gum.criteo.com/sid/json?origin=rtus&domain=vuodatus.net&sn=FirefoxSyncframe&so=0&topUrl=rouva-v.vuodatus.net&info=XD6DN180M0RITmhlJTJCZkMwOUJGQlhaMUN2czZJJTJCayUyQkxIa1JWbkRhQlpveWtRa1JiTlpPVlljZiUyQmRLTkhkY3dJcDJUS2o&idsd=-288463926,1657739878&cw=1&rtusCallerId=30&lsw=1
IP
GET /sid/json?origin=rtus&domain=vuodatus.net&sn=FirefoxSyncframe&so=0&topUrl=rouva-v.vuodatus.net&info=XD6DN180M0RITmhlJTJCZkMwOUJGQlhaMUN2czZJJTJCayUyQkxIa1JWbkRhQlpveWtRa1JiTlpPVlljZiUyQmRLTkhkY3dJcDJUS2o&idsd=-288463926,1657739878&cw=1&rtusCallerId=30&lsw=1 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/syncframe?origin=rtus&topUrl=rouva-v.vuodatus.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 17:18:28 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
server-processing-duration-in-ticks: 893639
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
www.cakecraftworld.co.uk/images/logo.gif
404 Not Found 0 B URL HTTP/2 www.cakecraftworld.co.uk/images/logo.gif
IP
GET /images/logo.gif HTTP/1.1
Host: www.cakecraftworld.co.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
date: Thu, 24 Nov 2022 17:18:25 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding, Accept-Encoding
pragma: no-cache
expires: -1
cache-control: no-store, no-cache, must-revalidate, max-age=0
via: 1.1 google
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XhdmxwsZ%2FxmD34uwtSEfzOLouAmmZWFUrj%2BZ3vfYdSTWiFyY3%2BIyfoJ%2FmNjumAcEbp3%2FoIBdN%2FtOIqgbrTpVTokC00RiWCtN9xxeGGZvtsFMYBXEgj753dtdTV6zbnpr8d7w4B%2FtHFQUaeU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=0; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 76f3cdbf7e7e0b4d-OSL
content-encoding: br
X-Firefox-Spdy: h2
adx.adform.net/adx/?CC=1&rp=3&pv=1&bWlkPW51bGw&bWlkPTgzNTkzNg&bWlkPTgzNTkzNQ&bWlkPW51bGw&bWlkPTEyOTUyNjI&bWlkPW51bGw&bWlkPTgzNTkzNg&url=https%3A%2F%2Frouva-v.vuodatus.net%2Flue%2F2008%2F11%2Fmuutama-koristeltu-pipari&callback=_adform_cb_1669310305493_1687274973111702
200 OK 0 B URL HTTP/2 adx.adform.net/adx/?CC=1&rp=3&pv=1&bWlkPW51bGw&bWlkPTgzNTkzNg&bWlkPTgzNTkzNQ&bWlkPW51bGw&bWlkPTEyOTUyNjI&bWlkPW51bGw&bWlkPTgzNTkzNg&url=https%3A%2F%2Frouva-v.vuodatus.net%2Flue%2F2008%2F11%2Fmuutama-koristeltu-pipari&callback=_adform_cb_1669310305493_1687274973111702
IP
GET /adx/?CC=1&rp=3&pv=1&bWlkPW51bGw&bWlkPTgzNTkzNg&bWlkPTgzNTkzNQ&bWlkPW51bGw&bWlkPTEyOTUyNjI&bWlkPW51bGw&bWlkPTgzNTkzNg&url=https%3A%2F%2Frouva-v.vuodatus.net%2Flue%2F2008%2F11%2Fmuutama-koristeltu-pipari&callback=_adform_cb_1669310305493_1687274973111702 HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rouva-v.vuodatus.net/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 17:18:26 GMT
content-type: text/javascript
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: GET,OPTIONS
access-control-allow-origin: *
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
content-encoding: gzip
X-Firefox-Spdy: h2
macro.adnami.io/macro/gen/adsm.macro.rmb.js
200 OK 0 B URL HTTP/2 macro.adnami.io/macro/gen/adsm.macro.rmb.js
IP
GET /macro/gen/adsm.macro.rmb.js HTTP/1.1
Host: macro.adnami.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rouva-v.vuodatus.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 17:18:24 GMT
content-type: application/javascript
content-md5: 7NHRLyz5dbNuBtN2HL/EMw==
last-modified: Thu, 24 Nov 2022 14:07:39 GMT
x-ms-request-id: 59d864ca-501e-0060-7d0e-002507000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cf-cache-status: HIT
age: 4240
expires: Thu, 24 Nov 2022 21:18:24 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
server: cloudflare
cf-ray: 76f3cdbd7cd3b4fa-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
dnacdn.net/dna
200 OK 0 B IP
GET /dna HTTP/1.1
Host: dnacdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Cookie: browser_data=NADuDV80M0RITmhlJTJCZkMwOUJGQlhaMUN2czZJJTJCayUyQkxIa1JWbkRhQlpveWtRa1JaZllvV0RMc0QzQ1BVT2xYQ0Uza3Bn
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 17:18:29 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
set-cookie: browser_data=L9v7_180M0RITmhlJTJCZkMwOUJGQlhaMUN2czZJJTJCayUyQkxIa1JWbkRhQlpveWtRa1JZczRldVhCTjE4UTRsTHAzbU1KQTZW; expires=Tue, 19 Dec 2023 17:18:29 GMT; domain=dnacdn.net; path=/; secure; samesite=none
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 368668
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
gem.gbc.criteo.com/newidsd
200 OK 0 B URL HTTP/2 gem.gbc.criteo.com/newidsd
IP
GET /newidsd HTTP/1.1
Host: gem.gbc.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 17:18:28 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 85579
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
cakefix.shop.wosbee.com/filemanager/productpics/419picture1Upload.jpg
404 Not Found 0 B URL HTTP/1.0 cakefix.shop.wosbee.com/filemanager/productpics/419picture1Upload.jpg
IP
GET /filemanager/productpics/419picture1Upload.jpg HTTP/1.1
Host: cakefix.shop.wosbee.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.0 404 Not Found
cache-control: no-cache
content-type: text/html
x-reason: MediaRequest
s1.adform.net/banners/scripts/adx.js
200 OK 0 B URL HTTP/2 s1.adform.net/banners/scripts/adx.js
IP
GET /banners/scripts/adx.js HTTP/1.1
Host: s1.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rouva-v.vuodatus.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 17:18:25 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Mon, 21 Nov 2022 11:50:07 GMT
x-rgw-object-type: Normal
etag: W/"5fae11bd8facb45d9707cd5617753542"
x-amz-request-id: tx000009c67c493cf98fac1-00637b6786-32940f80-default
access-control-allow-origin: *
cache-control: public, max-age=604800
x-cache-status: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
gum.criteo.com/syncframe?origin=rtus&topUrl=rouva-v.vuodatus.net
200 OK 0 B URL HTTP/2 gum.criteo.com/syncframe?origin=rtus&topUrl=rouva-v.vuodatus.net
IP
GET /syncframe?origin=rtus&topUrl=rouva-v.vuodatus.net HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rouva-v.vuodatus.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 17:18:28 GMT
content-type: text/html; charset=utf-8
server: Kestrel
cache-control: private, max-age=3600
set-cookie: uid=16d1440f-32ae-40aa-afee-d942e4039407; expires=Tue, 19 Dec 2023 17:18:28 GMT; domain=.criteo.com; path=/; secure; samesite=none
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
server-processing-duration-in-ticks: 690273
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
www.daous.com/cgi-bin/Count.cgi?dd=D&df=annika@hurveli.com
404 Not Found 0 B URL HTTP/2 www.daous.com/cgi-bin/Count.cgi?dd=D&df=annika@hurveli.com
IP
ASN #24940 Hetzner Online GmbH
Analyzer Verdict Alert quad9 Sinkholed
GET /cgi-bin/Count.cgi?dd=D&df=annika@hurveli.com HTTP/1.1
Host: www.daous.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
server: nginx
date: Thu, 24 Nov 2022 17:18:24 GMT
content-type: text/html
last-modified: Sat, 12 Nov 2022 14:20:01 GMT
etag: W/"328-5ed46b3b036a7"
content-encoding: br
X-Firefox-Spdy: h2
secure.quantserve.com/quant.js
200 OK 0 B URL HTTP/2 secure.quantserve.com/quant.js
IP
GET /quant.js HTTP/1.1
Host: secure.quantserve.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rouva-v.vuodatus.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 24 Nov 2022 17:18:25 GMT
content-type: application/javascript
accept-ranges: bytes
cache-control: private, max-age=604800
content-encoding: gzip
etag: "nAbmxtqHqaYrwBiADJAeFg=="
expires: Thu, 01 Dec 2022 17:18:25 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
dnacdn.net/dna
200 OK 0 B IP
GET /dna HTTP/1.1
Host: dnacdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Cookie: browser_data=6r8gll80M0RITmhlJTJCZkMwOUJGQlhaMUN2czVyOWRqJTJGWngwaUk3djhSWXlyTzJidjljYW9BSXZhMUR0YlhpbFJiMUlFZw
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 17:18:29 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
set-cookie: browser_data=PBTbWF80M0RITmhlJTJCZkMwOUJGQlhaMUN2czVyOWRqJTJGWngwaUk3djhSWXlyTzJidU9oclR4TXpnN0VuZ2F3UEd0c0JKUA; expires=Tue, 19 Dec 2023 17:18:29 GMT; domain=dnacdn.net; path=/; secure; samesite=none
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 269641
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
gum.criteo.com/sync?c=30&r=2&j=cr_handle_data_a
200 OK 0 B URL HTTP/2 gum.criteo.com/sync?c=30&r=2&j=cr_handle_data_a
IP
GET /sync?c=30&r=2&j=cr_handle_data_a HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rouva-v.vuodatus.net/
x-crto-bundle: 3h9Rm19waGxMMjU4eldxZlU0RlhRUyUyQlY3Z2xRamhjSmZ5NUR0VENjMHdFMGlCYnJRUGZpSHNhQnlpelZOJTJCSGxlZ1FDajhqQTJFS212VUlYM2xseGRvRm5heWFXRWxyTXYzNXpWdHVROTI2ZUtvSkE3UHFaTnU3NVZ6dnRhRCUyQkJjbnVUNkhoTmdpTTVaUGNkaHdkeGlrVW54NXclM0QlM0Q
Origin: https://rouva-v.vuodatus.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 17:18:28 GMT
content-type: text/javascript; charset=utf-8
server: Kestrel
cache-control: private, max-age=3600
expires: 60
access-control-allow-credentials: true
access-control-allow-origin: https://rouva-v.vuodatus.net
server-processing-duration-in-ticks: 1834749
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
ag.gbc.criteo.com/newidsd
200 OK 0 B URL HTTP/2 ag.gbc.criteo.com/newidsd
IP
GET /newidsd HTTP/1.1
Host: ag.gbc.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 17:18:28 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 99798
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
gum.criteo.com/sid/json?origin=rtus&domain=vuodatus.net&sn=FirefoxSyncframe&so=0&topUrl=rouva-v.vuodatus.net&info=L9v7_180M0RITmhlJTJCZkMwOUJGQlhaMUN2czZJJTJCayUyQkxIa1JWbkRhQlpveWtRa1JZczRldVhCTjE4UTRsTHAzbU1KQTZW&idsd=-288463926,1657739878&cw=1&rtusCallerId=30&lsw=1
200 OK 0 B URL HTTP/2 gum.criteo.com/sid/json?origin=rtus&domain=vuodatus.net&sn=FirefoxSyncframe&so=0&topUrl=rouva-v.vuodatus.net&info=L9v7_180M0RITmhlJTJCZkMwOUJGQlhaMUN2czZJJTJCayUyQkxIa1JWbkRhQlpveWtRa1JZczRldVhCTjE4UTRsTHAzbU1KQTZW&idsd=-288463926,1657739878&cw=1&rtusCallerId=30&lsw=1
IP
GET /sid/json?origin=rtus&domain=vuodatus.net&sn=FirefoxSyncframe&so=0&topUrl=rouva-v.vuodatus.net&info=L9v7_180M0RITmhlJTJCZkMwOUJGQlhaMUN2czZJJTJCayUyQkxIa1JWbkRhQlpveWtRa1JZczRldVhCTjE4UTRsTHAzbU1KQTZW&idsd=-288463926,1657739878&cw=1&rtusCallerId=30&lsw=1 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/syncframe?origin=rtus&topUrl=rouva-v.vuodatus.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 17:18:28 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
server-processing-duration-in-ticks: 2374395
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
rouva-v.vuodatus.net/js/bannerloader.js
200 OK 0 B URL HTTP/2 rouva-v.vuodatus.net/js/bannerloader.js
IP
GET /js/bannerloader.js HTTP/1.1
Host: rouva-v.vuodatus.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rouva-v.vuodatus.net/lue/2008/11/muutama-koristeltu-pipari
Connection: keep-alive
Cookie: _SESS=629695270637fa75fa2b42
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 17:18:24 GMT
content-type: application/x-javascript
cache-control: public, max-age=31536000
cf-bgj: minify
cf-polished: origSize=1531
etag: W/"5fb-5a938815a6140-gzip"
expires: Fri, 24 Nov 2023 08:16:41 GMT
last-modified: Mon, 29 Jun 2020 12:50:37 GMT
pragma: public
referrer-policy: no-referrer-when-downgrade
vary: Accept-Encoding
cf-cache-status: HIT
age: 32503
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RIK80eCf0HSgnzwq00ZXA9eNmMRZ4VZ02o%2Fdn6%2Bg9P1WgdBWUKplZTJIomBqhsMIwv%2FgVhHgOF1P2aszJD7XUQfno5h9LVvU5OxGEjv3Q2bB%2FDBxVx%2FjOdvZtI7%2BXg1dB7%2FfJdGV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f3cdb96dc2fac0-OSL
content-encoding: br
X-Firefox-Spdy: h2
rouva-v.vuodatus.net/css/compressed.css?ts=2016-09-28-lts
200 OK 0 B URL HTTP/2 rouva-v.vuodatus.net/css/compressed.css?ts=2016-09-28-lts
IP
GET /css/compressed.css?ts=2016-09-28-lts HTTP/1.1
Host: rouva-v.vuodatus.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rouva-v.vuodatus.net/lue/2008/11/muutama-koristeltu-pipari
Connection: keep-alive
Cookie: _SESS=629695270637fa75fa2b42
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 17:18:24 GMT
content-type: text/css
cache-control: public, max-age=31536000
cf-bgj: minify
cf-polished: origSize=298209
etag: W/"48ce1-5e79d423064f2-gzip"
expires: Fri, 24 Nov 2023 08:16:41 GMT
last-modified: Thu, 01 Sep 2022 13:04:49 GMT
pragma: public
referrer-policy: no-referrer-when-downgrade
vary: Accept-Encoding
cf-cache-status: HIT
age: 32503
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=n4bKPjF5s3IpVtgmpFPgSk3zCm8kCjkDWTNvyr164lXi5qnszFdW91gi%2Fatr%2BdmjYK5aYWYSGoKOtnTwyXuWYXDsvUSOEx3kK%2FHe0toKmwnozOX5kAVhY24eFzsCgW4HKrtKw%2Fc3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f3cdb96dc4fac0-OSL
content-encoding: br
X-Firefox-Spdy: h2
vuodatus.net/teemat/read/blog/50d4a1c2d26466757b000ce5/theme.css?updated=0
200 OK 0 B URL HTTP/2 vuodatus.net/teemat/read/blog/50d4a1c2d26466757b000ce5/theme.css?updated=0
IP
GET /teemat/read/blog/50d4a1c2d26466757b000ce5/theme.css?updated=0 HTTP/1.1
Host: vuodatus.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rouva-v.vuodatus.net/lue/2008/11/muutama-koristeltu-pipari
Connection: keep-alive
Cookie: _SESS=629695270637fa75fa2b42
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 17:18:24 GMT
content-type: text/css; charset=UTF-8
x-powered-by: PHP/5.6.40
cache-control: max-age=2592000, public, s-maxage=2592000, max-age=31536000
vary: Accept-Encoding
expires: Fri, 24 Nov 2023 17:18:24 GMT
referrer-policy: no-referrer-when-downgrade
cf-cache-status: BYPASS
set-cookie: _SESS=629695270637fa75fa2b42; path=/; domain=.vuodatus.net
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8DBOaxqYUnJbxaIr7UG6v6QWwqscxHz2TU87%2BghyW0hiXr9dZvlXy7p4uCu9d9sJEnkz7XnktJKVKgTF%2B%2FS3ZvyfhLOFeaYFvY%2BN6KJjLdZFfArtKop3KR%2B9wJXtUg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f3cdb97dd1fac0-OSL
content-encoding: br
X-Firefox-Spdy: h2
dmp.adform.net/serving/cookie/match/?CC=1&party=1001&cid=270650d0-652b-45cb-b404-4183aa314083&Today=20221124
200 OK 0 B URL HTTP/2 dmp.adform.net/serving/cookie/match/?CC=1&party=1001&cid=270650d0-652b-45cb-b404-4183aa314083&Today=20221124
IP
GET /serving/cookie/match/?CC=1&party=1001&cid=270650d0-652b-45cb-b404-4183aa314083&Today=20221124 HTTP/1.1
Host: dmp.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tag.userreport.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 17:18:25 GMT
content-type: image/gif
cache-control: no-cache, no-store, must-revalidate, no-transform
pragma: no-cache
expires: -1
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: GET
access-control-allow-origin: *
access-control-max-age: 86400
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
gum.criteo.com/syncframe?origin=rtus&topUrl=rouva-v.vuodatus.net
200 OK 0 B URL HTTP/2 gum.criteo.com/syncframe?origin=rtus&topUrl=rouva-v.vuodatus.net
IP
GET /syncframe?origin=rtus&topUrl=rouva-v.vuodatus.net HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rouva-v.vuodatus.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 17:18:28 GMT
content-type: text/html; charset=utf-8
server: Kestrel
cache-control: private, max-age=3600
set-cookie: uid=6a7f5b77-56d1-4b1f-a47a-4a6b1b86ac8d; expires=Tue, 19 Dec 2023 17:18:29 GMT; domain=.criteo.com; path=/; secure; samesite=none
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
server-processing-duration-in-ticks: 2975753
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
172.67.74.217
185.235.84.85
37.157.6.236
23.38.201.146
104.21.21.94
93.184.220.66
203.143.89.81
185.89.210.212