grilleriet.no/
301 Moved Permanently 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: grilleriet.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Age: 377462
Content-Length: 0
Date: Wed, 30 Nov 2022 15:15:35 GMT
Location: https://www.grilleriet.no/
Server: Squarespace
Set-Cookie: crumb=BQvWGT2qcJ/jNjdjYjEyODFhMWVkMDJhZTY2OTg3ZGYwM2FjZjUx;Path=/
X-Contextid: 6x2U02is/J4eIKvt5
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cfec3d7283a9b66d2be426ce54d210f3
808c1feb1ba918951d1928c1f6bfc0c253262774
1bad6c06aa3e88dcbc125fc98a6cb753eb2b18d2c8dd61da21d12209aeeda3f9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1BAD6C06AA3E88DCBC125FC98A6CB753EB2B18D2C8DD61DA21D12209AEEDA3F9"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3157
Expires: Mon, 05 Dec 2022 00:59:15 GMT
Date: Mon, 05 Dec 2022 00:06:38 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash fb2c0697c6d9a96a5411dd2952947458
79e57f831ec396bbdaa5bfe9472a05e6c9fb31f4
3fd7edcc349ab4402f62e54a142be6b4cecf0e7ee3f431d3168bdf0643ba4d92
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 878
Cache-Control: max-age=124757
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 00:06:38 GMT
Etag: "638c76f5-1d7"
Expires: Tue, 06 Dec 2022 10:45:55 GMT
Last-Modified: Sun, 04 Dec 2022 10:31:17 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 04 Dec 2022 23:18:25 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 2893
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1ea206ac3c440825741687351f8c6e4e
2f38dafd8c43dcce2411a0590bc5c02cd6286735
7d7232c8c91bcd18161ba2c9d23e3bff159604e058bd5b3fc1c7fcbcd03a7ee3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7D7232C8C91BCD18161BA2C9D23E3BFF159604E058BD5B3FC1C7FCBCD03A7EE3"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4165
Expires: Mon, 05 Dec 2022 01:16:03 GMT
Date: Mon, 05 Dec 2022 00:06:38 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: y3q18wBmC60OjKQE0Z19JHkxaJG0P+/bCk9+DPBp9jYdaJzKbN0C5mER06Y7fQa/pTeMjznt0LsLE6OPuZT8kg==
x-amz-request-id: TYYBB1G7T0Y39V6Y
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 04 Dec 2022 23:47:45 GMT
age: 1133
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 05 Dec 2022 00:06:38 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Retry-After, Cache-Control, Content-Type, Pragma, Backoff, ETag, Expires, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 04 Dec 2022 23:11:19 GMT
cache-control: public,max-age=3600
age: 3319
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
www.grilleriet.no/
200 OK 17 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (15615), with CRLF, LF line terminators
Hash fe7b599cbd82c7564ef0e3a1113a355d
4daa2eab92a386e788f9bccb07310be6a9d26790
b3ef918d76ecae454c05418b6b4a9e91acf5f6ac6021db811fe8b364c0b94aba
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: www.grilleriet.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
accept-ranges: bytes
age: 1168
content-encoding: gzip
content-type: text/html;charset=utf-8
date: Sun, 04 Dec 2022 23:47:10 GMT
etag: W/"092fafadd32653cdd8a5ba144cff82be"
expires: Thu, 01 Jan 1970 00:00:00 GMT
server: Squarespace
set-cookie: crumb=Beg9AS60cP3aOWY2ODk3NTE2OGI0MmRkMjI3Yjg1ZWI1NTNlNzRj;Path=/
strict-transport-security: max-age=0
vary: Accept-Encoding
x-content-type-options: nosniff
x-contextid: 0XlTyEL2/f9MErEzc
content-length: 16865
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 31b129c94a90b1e695b21395cb54e378
a3cae46b48d469cc61ab0581303bcd5f5b654db9
fac3f681be358a20f78958dff10c89b7a91365c5114c81246c1bc34c1362ba1e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 864
Cache-Control: max-age=119677
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 00:06:38 GMT
Etag: "638c632b-1d7"
Expires: Tue, 06 Dec 2022 09:21:15 GMT
Last-Modified: Sun, 04 Dec 2022 09:06:51 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471
assets.squarespace.com/@sqs/polyfiller/1.2.2/modern.js
200 OK 29 kB URL HTTP/2 assets.squarespace.com/@sqs/polyfiller/1.2.2/modern.js
IP
File type Unicode text, UTF-8 text, with very long lines (32788), with NEL line terminators
Hash 03e5ef7c77d113abf6178fce61ec6344
9c8e7c2834de6e3fc7bb6e856a7691c474d98b7d
5ce90067054cd21e935b79fb096722b5f615b39d845c941800c516424c41d000
GET /@sqs/polyfiller/1.2.2/modern.js HTTP/1.1
Host: assets.squarespace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.grilleriet.no
Connection: keep-alive
Referer: https://www.grilleriet.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: gzip
server: UploadServer
expires: Thu, 16 Mar 2023 05:45:55 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 08 Sep 2021 20:21:24 GMT
etag: "03e5ef7c77d113abf6178fce61ec6344"
content-type: text/javascript
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Mon, 05 Dec 2022 00:06:39 GMT
age: 22789245
x-served-by: cache-iad-kiad7000083-IAD, cache-bma1682-BMA
x-cache: HIT, HIT
x-cache-hits: 2, 26217
x-timer: S1670198799.028727,VS0,VE0
vary: Accept-Encoding
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
content-length: 29224
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 122124f83967c12700f5a6f5546b0f1f
d7acd2db61ad811c388a44b7bd407fa5f4aea8ee
b6b9e0b6c241b4eeb5161b1c297dec2aa6188032017074ee7f8e5533fab87a4d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 00:06:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
assets.squarespace.com/universal/scripts-compressed/performance-8a62d2805270e36d43ce5-min.en-US.js
200 OK 12 kB URL HTTP/2 assets.squarespace.com/universal/scripts-compressed/performance-8a62d2805270e36d43ce5-min.en-US.js
IP
File type ASCII text, with very long lines (40617)
Hash 5099c15db463ee3b8bdd55606d290ac5
4b6afa1d5d8d900c9d54bfe48ddc69476d48b0cc
e63b98458ab3431e4571268fd35454ca2a5dbf932ef55ad20703c86d1a44193e
GET /universal/scripts-compressed/performance-8a62d2805270e36d43ce5-min.en-US.js HTTP/1.1
Host: assets.squarespace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.grilleriet.no
Connection: keep-alive
Referer: https://www.grilleriet.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
expires: Thu, 30 Nov 2023 21:04:13 GMT
last-modified: Wed, 30 Nov 2022 17:26:13 GMT
etag: "5099c15db463ee3b8bdd55606d290ac5"
content-type: text/javascript
content-encoding: br
server: UploadServer
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Mon, 05 Dec 2022 00:06:39 GMT
age: 356545
x-served-by: cache-iad-kjyo7100057-IAD, cache-bma1682-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 17459
x-timer: S1670198799.035729,VS0,VE0
vary: Accept-Encoding
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
content-length: 12228
X-Firefox-Spdy: h2
use.typekit.net/ik/qIPyNNkRcm5w-Z8CsTOvexpOKTn8WnsheZtMOFdO69jfenXffFHN4UJLFRbh52jhWDm8wRIowQqD5QbXZQy8wQByZQj3FDjk5g7pMPG0Z1mkShmXOAik-AUCZW4TZWbld1q0SaBujW48Sagyjh90jhNlOeZuS1F8ifu1Sc8Cdemk-AmXOAooO1FUiABkZWF3jAF8OcFzdPU1Sc8Cdemk-AmXOcozOeUzjhBC-eNDifUaiaS0Z1mkShmXOAik-AUCZW4TZWbld1q0SaBujW48Sagyjh90jhNlOYiaiko1Sc8Cdemk-AmXOcozJyTyjaml-AtlSY4zOAmtiY4yOAFzdcs8d1F8ZfGHfHOOMsMMeMb6MKGHfHROMsMMeM96MKGHfHnOMsMMeMj6MKGHfH2OMsMMeMS6MKGHfH1OMsMMeMv6MKGHfHzOMsMMegM6MKGHfHYOMsMMegI6MTMgxnfnvb9.js
200 OK 6.8 kB URL HTTP/2 use.typekit.net/ik/qIPyNNkRcm5w-Z8CsTOvexpOKTn8WnsheZtMOFdO69jfenXffFHN4UJLFRbh52jhWDm8wRIowQqD5QbXZQy8wQByZQj3FDjk5g7pMPG0Z1mkShmXOAik-AUCZW4TZWbld1q0SaBujW48Sagyjh90jhNlOeZuS1F8ifu1Sc8Cdemk-AmXOAooO1FUiABkZWF3jAF8OcFzdPU1Sc8Cdemk-AmXOcozOeUzjhBC-eNDifUaiaS0Z1mkShmXOAik-AUCZW4TZWbld1q0SaBujW48Sagyjh90jhNlOYiaiko1Sc8Cdemk-AmXOcozJyTyjaml-AtlSY4zOAmtiY4yOAFzdcs8d1F8ZfGHfHOOMsMMeMb6MKGHfHROMsMMeM96MKGHfHnOMsMMeMj6MKGHfH2OMsMMeMS6MKGHfH1OMsMMeMv6MKGHfHzOMsMMegM6MKGHfHYOMsMMegI6MTMgxnfnvb9.js
IP
ASN #20940 Akamai International B.V.
File type Unicode text, UTF-8 text, with very long lines (2330)
Hash 9ebaf999bca9ceb0cfb978c19fcfce2e
3e031620198eb5d5e84ea52e2a3f20840be7d170
7515f86ac7164e9575a69944acad4441af141990ea5e6e08851e58911ca5236a
GET /ik/qIPyNNkRcm5w-Z8CsTOvexpOKTn8WnsheZtMOFdO69jfenXffFHN4UJLFRbh52jhWDm8wRIowQqD5QbXZQy8wQByZQj3FDjk5g7pMPG0Z1mkShmXOAik-AUCZW4TZWbld1q0SaBujW48Sagyjh90jhNlOeZuS1F8ifu1Sc8Cdemk-AmXOAooO1FUiABkZWF3jAF8OcFzdPU1Sc8Cdemk-AmXOcozOeUzjhBC-eNDifUaiaS0Z1mkShmXOAik-AUCZW4TZWbld1q0SaBujW48Sagyjh90jhNlOYiaiko1Sc8Cdemk-AmXOcozJyTyjaml-AtlSY4zOAmtiY4yOAFzdcs8d1F8ZfGHfHOOMsMMeMb6MKGHfHROMsMMeM96MKGHfHnOMsMMeMj6MKGHfH2OMsMMeMS6MKGHfH1OMsMMeMv6MKGHfHzOMsMMegM6MKGHfHYOMsMMegI6MTMgxnfnvb9.js HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.grilleriet.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: text/javascript;charset=utf-8
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains;
cache-control: public, max-age=604800
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
content-encoding: gzip
content-length: 6809
date: Mon, 05 Dec 2022 00:06:39 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 122124f83967c12700f5a6f5546b0f1f
d7acd2db61ad811c388a44b7bd407fa5f4aea8ee
b6b9e0b6c241b4eeb5161b1c297dec2aa6188032017074ee7f8e5533fab87a4d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 00:06:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
assets.squarespace.com/universal/scripts-compressed/common-7160848b22dbb79648a1c-min.en-US.js
200 OK 230 kB URL HTTP/2 assets.squarespace.com/universal/scripts-compressed/common-7160848b22dbb79648a1c-min.en-US.js
IP
File type HTML document, ASCII text, with very long lines (65536), with no line terminators
Size 230 kB (230301 bytes)
Hash d4c1306f709fe29a8a0713d63713c21b
05086c5e42f04412bf09ac614d617e443f759068
06cfbc681aea2595cf1bca5568dd2be0a8dd3997cb2340e5e12b85adbf485144
GET /universal/scripts-compressed/common-7160848b22dbb79648a1c-min.en-US.js HTTP/1.1
Host: assets.squarespace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.grilleriet.no
Connection: keep-alive
Referer: https://www.grilleriet.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
expires: Sat, 02 Dec 2023 17:42:01 GMT
last-modified: Fri, 02 Dec 2022 16:57:54 GMT
etag: "d4c1306f709fe29a8a0713d63713c21b"
content-type: text/javascript
content-encoding: br
server: UploadServer
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Mon, 05 Dec 2022 00:06:39 GMT
age: 195876
x-served-by: cache-iad-kcgs7200131-IAD, cache-bma1682-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 79
x-timer: S1670198799.033009,VS0,VE0
vary: Accept-Encoding
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
content-length: 230301
X-Firefox-Spdy: h2
assets.squarespace.com/universal/scripts-compressed/extract-css-runtime-20cedcfc598ca1dec0f52-min.en-US.js
200 OK 15 kB URL HTTP/2 assets.squarespace.com/universal/scripts-compressed/extract-css-runtime-20cedcfc598ca1dec0f52-min.en-US.js
IP
File type ASCII text, with very long lines (45204)
Hash 7da110ea84f5e8034aa0019e6babf3bf
f3a62d3f5eb3a767b8da021bc2459740cd0bb553
0445849921213e94c921d2863505a37cc569d1610e6804a2336fcfbdc20b866d
GET /universal/scripts-compressed/extract-css-runtime-20cedcfc598ca1dec0f52-min.en-US.js HTTP/1.1
Host: assets.squarespace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.grilleriet.no
Connection: keep-alive
Referer: https://www.grilleriet.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=31536000
expires: Sat, 02 Dec 2023 22:55:24 GMT
last-modified: Fri, 02 Dec 2022 22:14:44 GMT
etag: "7da110ea84f5e8034aa0019e6babf3bf"
content-type: text/javascript
content-encoding: br
server: UploadServer
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Mon, 05 Dec 2022 00:06:39 GMT
age: 177075
x-served-by: cache-iad-kjyo7100143-IAD, cache-bma1682-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 6992
x-timer: S1670198799.050555,VS0,VE0
vary: Accept-Encoding
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
content-length: 15336
X-Firefox-Spdy: h2
assets.squarespace.com/universal/scripts-compressed/cldr-resource-pack-33f25cea66c84971c39d6-min.en-US.js
200 OK 18 kB URL HTTP/2 assets.squarespace.com/universal/scripts-compressed/cldr-resource-pack-33f25cea66c84971c39d6-min.en-US.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash bf4aa98d55eee8cce95ff27af398f599
eccfc800014e449cdfe1365dacc541f817cdd178
4d08cfbf346295d8cc4012bd9d3dc9fa797969a811898f2f83c5291158954f8d
GET /universal/scripts-compressed/cldr-resource-pack-33f25cea66c84971c39d6-min.en-US.js HTTP/1.1
Host: assets.squarespace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.grilleriet.no
Connection: keep-alive
Referer: https://www.grilleriet.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=31536000
expires: Tue, 21 Nov 2023 17:23:55 GMT
last-modified: Mon, 21 Nov 2022 16:42:30 GMT
etag: "bf4aa98d55eee8cce95ff27af398f599"
content-type: text/javascript
content-encoding: br
server: UploadServer
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Mon, 05 Dec 2022 00:06:39 GMT
age: 1147364
x-served-by: cache-iad-kjyo7100046-IAD, cache-bma1682-BMA
x-cache: HIT, HIT
x-cache-hits: 2, 26484
x-timer: S1670198799.049706,VS0,VE0
vary: Accept-Encoding
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
content-length: 18492
X-Firefox-Spdy: h2
ajax.googleapis.com/ajax/libs/jquery/3.2.1/jquery.min.js
200 OK 30 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/3.2.1/jquery.min.js
IP
File type ASCII text, with very long lines (32058)
Hash fc3fc31e5e7c0933dc18e562c1c071bf
a44c31323f6bd29e583cc585036e6eb39f7014a6
ddad766fb94b23efeb5574cdedc5e8446d496fb91bd0b08cd80be212e001055d
GET /ajax/libs/jquery/3.2.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.grilleriet.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30306
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 18:54:48 GMT
expires: Thu, 30 Nov 2023 18:54:48 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 364311
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static1.squarespace.com/static/ta/55f0a9b0e4b0f3eb70352f6d/349/scripts/site-bundle.js
200 OK 43 kB URL HTTP/2 static1.squarespace.com/static/ta/55f0a9b0e4b0f3eb70352f6d/349/scripts/site-bundle.js
IP
File type Unicode text, UTF-8 text, with very long lines (32033)
Hash cb0d78e537f1ff28d694132d86e8e82f
c550a7aae81b884499ae658649e3920f4f224914
64ae376eff7cfd47213298fbd6f652e80e204a74643dc3df93e3a091dff59d31
GET /static/ta/55f0a9b0e4b0f3eb70352f6d/349/scripts/site-bundle.js HTTP/1.1
Host: static1.squarespace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.grilleriet.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=94608000
content-encoding: gzip
content-type: application/javascript; charset=UTF-8
etag: W/"33717d3279e74c9fe5e9bb7a75b6c3fb--gzip"
pragma: cache
server: Squarespace
timing-allow-origin: *
x-content-type-options: nosniff
x-contextid: 7ZijBvDa/isigMyNX
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Mon, 05 Dec 2022 00:06:39 GMT
age: 19125188
x-served-by: cache-dfw18677-DFW, cache-bma1657-BMA
x-cache: HIT, HIT
x-cache-hits: 2, 26683
x-timer: S1670198799.081441,VS0,VE0
vary: Accept-Encoding
tracepoint: Fastly
content-length: 42907
X-Firefox-Spdy: h2
static1.squarespace.com/static/sitecss/5e219193944e8e11ae607628/146/55f0aac0e4b0f0a5b7e0b22e/5e21943ca917cc6d14a15a3a/349/site.css
200 OK 84 kB URL HTTP/2 static1.squarespace.com/static/sitecss/5e219193944e8e11ae607628/146/55f0aac0e4b0f0a5b7e0b22e/5e21943ca917cc6d14a15a3a/349/site.css
IP
File type Unicode text, UTF-8 text, with very long lines (32309)
Hash 48d83f9033d7ab1510303ca043e80850
a9fd069cc4b9772224fe05f83122cdfa5f1c30d6
ba7a5bd9c0b78a0c4ff39e653ba149da1ec17596b9bdadf951712b15b2e0d14c
GET /static/sitecss/5e219193944e8e11ae607628/146/55f0aac0e4b0f0a5b7e0b22e/5e21943ca917cc6d14a15a3a/349/site.css HTTP/1.1
Host: static1.squarespace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.grilleriet.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=94608000
content-encoding: gzip
content-type: text/css; charset=UTF-8
pragma: cache
server: Squarespace
timing-allow-origin: *
x-content-type-options: nosniff
x-contextid: DrOm29wm/iN42xdW1
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Mon, 05 Dec 2022 00:06:39 GMT
age: 669589
x-served-by: cache-dfw-kdfw8210105-DFW, cache-bma1657-BMA
x-cache: HIT, HIT
x-cache-hits: 27, 1
x-timer: S1670198799.083456,VS0,VE1
vary: Accept-Encoding
tracepoint: Fastly
content-length: 83864
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: d/l5z1+NZ1fPsiV1bS+wkA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 7zsat4thncDVe14KSPGt+Fv/xV4=
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 122124f83967c12700f5a6f5546b0f1f
d7acd2db61ad811c388a44b7bd407fa5f4aea8ee
b6b9e0b6c241b4eeb5161b1c297dec2aa6188032017074ee7f8e5533fab87a4d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 00:06:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.gasta.no/assets/translation.js
200 OK 4.3 kB URL HTTP/2 www.gasta.no/assets/translation.js
IP
Hash 53171b24821e9de589fe47fca48fb77d
9e1999cfd1add6a66bba55e7dcf4826525ea0101
b140b81424585dd23f6dbb5653516cdfe4816109f02eb6c446dd70ac04814a54
GET /assets/translation.js HTTP/1.1
Host: www.gasta.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.grilleriet.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 194186
cache-control: public, max-age=94608000
content-encoding: gzip
content-type: application/javascript
date: Fri, 02 Dec 2022 18:10:13 GMT
etag: W/"d0fe1b778623749ef8c3c91efaddc092--gzip"
expires: Thu, 01 Jan 1970 00:00:00 GMT
pragma: cache
server: Squarespace
set-cookie: crumb=BQdEPSZlpi8ZODQzM2UxMTA2YzM0MGI2NGU5YmI3OWRmNzAwNGQz;Path=/
strict-transport-security: max-age=0
vary: Accept-Encoding
x-content-type-options: nosniff
x-contextid: qoZ8yCik/nQT5TFXI
content-length: 4253
X-Firefox-Spdy: h2
images.squarespace-cdn.com/content/v1/54c60b21e4b0d7a7fa84e91b/1423558396957-F29ROLFS63I554CWMRHD/Grilleriet_logo.png?format=1500w
200 OK 7.1 kB URL HTTP/2 images.squarespace-cdn.com/content/v1/54c60b21e4b0d7a7fa84e91b/1423558396957-F29ROLFS63I554CWMRHD/Grilleriet_logo.png?format=1500w
IP
File type PNG image data, 483 x 150, 8-bit/color RGBA, non-interlaced\012- data
Hash 20315c1aeac7ec09bd8248b5c720c6ff
1bd3f21530d2d4391d69fabb889ea8b9b05b8f18
9e22b7b401c5ccd5ae43f50ca731505f845c29597c97dc7e080e81ec44a0ba6f
GET /content/v1/54c60b21e4b0d7a7fa84e91b/1423558396957-F29ROLFS63I554CWMRHD/Grilleriet_logo.png?format=1500w HTTP/1.1
Host: images.squarespace-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.grilleriet.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
timing-allow-origin: *
access-control-expose-headers: Content-Length, Timing-Allow-Origin
content-type: image/png
access-control-allow-origin: *
etag: CIe3toGTousCEAE=
cache-control: max-age=604800
via: 1.1 google, 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Mon, 05 Dec 2022 00:06:39 GMT
age: 478680
x-served-by: cache-iad-kjyo7100169-IAD, cache-bma1632-BMA
x-cache: HIT, HIT
x-cache-hits: 43, 1
x-timer: S1670198800.601251,VS0,VE1
vary: Accept-Encoding
tracepoint: Fastly
content-length: 7083
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5f16a534222e5749ef240d413826c2f6
11683d84d420dd6f919425094edb8961278f7fed
691ebf7feb1f7d6ae7e5e7efd678626c62042dda520506f262c7d9a67a48e3ed
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 00:06:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtm.js?id=GTM-5C4SL3K
404 Not Found 1.6 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-5C4SL3K
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1136)
Hash d2eecb98874c63ba8025ffeef19c75c9
08b2434fcebc43eacea165993bed50b4d73c82b3
ff34aee34c006924b532190b064bc0254e433d4e16ab6983ac0183eaf115929c
GET /gtm.js?id=GTM-5C4SL3K HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.grilleriet.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
cross-origin-resource-policy: cross-origin
date: Mon, 05 Dec 2022 00:06:39 GMT
content-type: text/html; charset=UTF-8
server: Google Tag Manager
content-length: 1582
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
use.typekit.net/af/8d1fa8/00000000000000003b9acb1e/27/l?subset_id=2&fvd=n6&v=3
200 OK 18 kB URL HTTP/2 use.typekit.net/af/8d1fa8/00000000000000003b9acb1e/27/l?subset_id=2&fvd=n6&v=3
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format (Version 2), TrueType, length 17720, version 1.0\012- data
Hash fe11a9981599583d3ebae4175cf104c7
836e540eb5988e094e50fadd53f452314da6a9ad
2208d34efbdf77e18cbde4d3008bb4bbf4c0700667aecab083a6bb67c38ac97c
GET /af/8d1fa8/00000000000000003b9acb1e/27/l?subset_id=2&fvd=n6&v=3 HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.grilleriet.no
Connection: keep-alive
Referer: https://www.grilleriet.no/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/font-woff2
content-length: 17720
etag: "bb748dc43cd9a078a1f29e61a609dbe33a270f11"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Mon, 05 Dec 2022 00:06:39 GMT
X-Firefox-Spdy: h2
use.typekit.net/af/c4767b/00000000000000003b9acb20/27/l?subset_id=2&fvd=n7&v=3
200 OK 18 kB URL HTTP/2 use.typekit.net/af/c4767b/00000000000000003b9acb20/27/l?subset_id=2&fvd=n7&v=3
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format (Version 2), TrueType, length 17812, version 1.0\012- data
Hash f95c849ac799b06b813fbae9fbf12309
e230fb7078d016a05e14d9b50baddd105da833b7
531f3cc871f2ffa5481cbbde8ba1808d9c5da63865f88216a12246fde7d18c4b
GET /af/c4767b/00000000000000003b9acb20/27/l?subset_id=2&fvd=n7&v=3 HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.grilleriet.no
Connection: keep-alive
Referer: https://www.grilleriet.no/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/font-woff2
content-length: 17812
etag: "a87f8ae27dd2ad2e14fd9ba3bb61b34e10c08e96"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Mon, 05 Dec 2022 00:06:39 GMT
X-Firefox-Spdy: h2
use.typekit.net/af/08f3e7/00000000000000003b9acb1f/27/l?subset_id=2&fvd=i6&v=3
200 OK 19 kB URL HTTP/2 use.typekit.net/af/08f3e7/00000000000000003b9acb1f/27/l?subset_id=2&fvd=i6&v=3
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format (Version 2), TrueType, length 18632, version 1.0\012- data
Hash ffabaac2fca0a1374f77974cf0edd54f
99eeb9a34591d051b4ecd393e4de2ac6a9cbee03
796edd0cb9fc0f860593ff1497499ac6a1337d7e9b22bd4aad1ac4fd649be145
GET /af/08f3e7/00000000000000003b9acb1f/27/l?subset_id=2&fvd=i6&v=3 HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.grilleriet.no
Connection: keep-alive
Referer: https://www.grilleriet.no/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/font-woff2
content-length: 18632
etag: "4ba4826cfa0090ac1a51e569af73fb7311b5f74e"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Mon, 05 Dec 2022 00:06:39 GMT
X-Firefox-Spdy: h2
use.typekit.net/af/289661/00000000000000003b9acb21/27/l?subset_id=2&fvd=i7&v=3
200 OK 19 kB URL HTTP/2 use.typekit.net/af/289661/00000000000000003b9acb21/27/l?subset_id=2&fvd=i7&v=3
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format (Version 2), TrueType, length 18664, version 1.0\012- data
Hash baf6a75586cff976fc36afe4a7039d67
7589940a4773183d87d2a99ea488cb9ea5d744ef
31cb310ff45b855e98d5b04e09a39ec7fbb0e6feb65162bb4eb291bbeed9e0f7
GET /af/289661/00000000000000003b9acb21/27/l?subset_id=2&fvd=i7&v=3 HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.grilleriet.no
Connection: keep-alive
Referer: https://www.grilleriet.no/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/font-woff2
content-length: 18664
etag: "0a07e6b0f9778e66a619ab6cbaf9dbe9153a98f4"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Mon, 05 Dec 2022 00:06:39 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash da9700d928847bca71f73dc9ca89bd1c
2f156a1557a7504da776ed9a82dc52563662be6f
428ed39905a42b1fc7aaf84f2144caf58ddcb53ac2fbda9af61784ca7394a344
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 00:06:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
use.typekit.net/af/b8e425/00000000000000003b9acb1c/27/l?subset_id=2&fvd=n5&v=3
200 OK 18 kB URL HTTP/2 use.typekit.net/af/b8e425/00000000000000003b9acb1c/27/l?subset_id=2&fvd=n5&v=3
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format (Version 2), TrueType, length 17948, version 1.0\012- data
Hash de373ae924e07b9c5436aac1dce6c47a
7ad31c2aa629b43acb0441070fa8695461578eef
ab4c9f97834c00944bd4d719b948bdac61533f461d2210abbde75cc39c7311c2
GET /af/b8e425/00000000000000003b9acb1c/27/l?subset_id=2&fvd=n5&v=3 HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.grilleriet.no
Connection: keep-alive
Referer: https://www.grilleriet.no/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/font-woff2
content-length: 17948
etag: "55f9ffb726ea9ef19dee5c48c3f4fef0cc905812"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Mon, 05 Dec 2022 00:06:39 GMT
X-Firefox-Spdy: h2
use.typekit.net/af/f2b2eb/00000000000000003b9acb1a/27/l?subset_id=2&fvd=n4&v=3
200 OK 18 kB URL HTTP/2 use.typekit.net/af/f2b2eb/00000000000000003b9acb1a/27/l?subset_id=2&fvd=n4&v=3
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format (Version 2), TrueType, length 17984, version 1.0\012- data
Hash 49e80822df3668a8cda6a8cd0d6ed600
051cbaba203842ee9a810c810238142afb8f9b2c
3a518aab25adf72cfc490f9e79fa26528e0293a801dc4d202a2c584fa5cfbba3
GET /af/f2b2eb/00000000000000003b9acb1a/27/l?subset_id=2&fvd=n4&v=3 HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.grilleriet.no
Connection: keep-alive
Referer: https://www.grilleriet.no/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/font-woff2
content-length: 17984
etag: "287d1d3d5c8daf4980dd4bad12a851512a424c33"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Mon, 05 Dec 2022 00:06:39 GMT
X-Firefox-Spdy: h2
www.grilleriet.no/api/1/performance/settings
200 OK 53 B URL HTTP/2 www.grilleriet.no/api/1/performance/settings
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 1951564dd07cfd08f9539b786b20a594
00e1efdf0a108769d0f744ddfbb7c89e179387af
9195d7401f2acf7d18d75ecbc9bf2f86195f1ba780fb391cd0b36351872a3f57
Analyzer Verdict Alert fortinet Phishing
GET /api/1/performance/settings HTTP/1.1
Host: www.grilleriet.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.grilleriet.no/
Cookie: crumb=Beg9AS60cP3aOWY2ODk3NTE2OGI0MmRkMjI3Yjg1ZWI1NTNlNzRj; ss_cvr=baad2e0c-51fe-465a-b2fb-129aef1c7ea8|1670198797137|1670198797137|1670198797137|1; ss_cvt=1670198797137
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/json
date: Mon, 05 Dec 2022 00:06:39 GMT
server: Squarespace
vary: Accept-Encoding, User-Agent
x-contextid: 0XlTyEL2/I8cTHGXc
content-length: 53
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash da9700d928847bca71f73dc9ca89bd1c
2f156a1557a7504da776ed9a82dc52563662be6f
428ed39905a42b1fc7aaf84f2144caf58ddcb53ac2fbda9af61784ca7394a344
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 00:06:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
images.squarespace-cdn.com/content/v1/5e219193944e8e11ae607628/1584105038748-WFSF3F9GNLJ27MXR0Z7W/grilleriet-3219.jpg?format=1500w
200 OK 98 kB URL HTTP/2 images.squarespace-cdn.com/content/v1/5e219193944e8e11ae607628/1584105038748-WFSF3F9GNLJ27MXR0Z7W/grilleriet-3219.jpg?format=1500w
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1500x1000, components 3\012- data
Hash 0c29303b3c4feb9a29af54d71ceb242f
f2c2d69c333e82dde6dbb639b326daea108ca4ef
c781181e1b1518324fb07c4fc4d9f3a9a932753025fb8d67059f0e355a83e7b6
GET /content/v1/5e219193944e8e11ae607628/1584105038748-WFSF3F9GNLJ27MXR0Z7W/grilleriet-3219.jpg?format=1500w HTTP/1.1
Host: images.squarespace-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.grilleriet.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
timing-allow-origin: *
access-control-expose-headers: Content-Length, Timing-Allow-Origin
content-type: image/jpeg
access-control-allow-origin: *
etag: CPO+yPzBi+sCEAE=
cache-control: max-age=604800
via: 1.1 google, 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Mon, 05 Dec 2022 00:06:39 GMT
age: 203465
x-served-by: cache-iad-kjyo7100072-IAD, cache-bma1632-BMA
x-cache: HIT, HIT
x-cache-hits: 12, 4
x-timer: S1670198800.716819,VS0,VE0
vary: Accept-Encoding
tracepoint: Fastly
content-length: 98236
X-Firefox-Spdy: h2
www.grilleriet.no/assets/ui-icons.svg
200 OK 8.5 kB URL HTTP/2 www.grilleriet.no/assets/ui-icons.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (688)
Hash 7f34731b5af0235414438765be9f5fbd
546d551ab05880986d007b148e921b1dc694cad9
ded1e2af9a5d3937cc8d26fbb6d0212702f611ca62607c4eb3e7b4dc3b196d9f
Analyzer Verdict Alert fortinet Phishing
GET /assets/ui-icons.svg HTTP/1.1
Host: www.grilleriet.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.grilleriet.no/
Cookie: crumb=Beg9AS60cP3aOWY2ODk3NTE2OGI0MmRkMjI3Yjg1ZWI1NTNlNzRj; ss_cvr=baad2e0c-51fe-465a-b2fb-129aef1c7ea8|1670198797137|1670198797137|1670198797137|1; ss_cvt=1670198797137
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 376599
cache-control: public, max-age=94608000
content-type: image/svg+xml
date: Wed, 30 Nov 2022 15:29:59 GMT
etag: W/"e0dcf5978615db20a22f6a23c5a1e81d"
expires: Thu, 01 Jan 1970 00:00:00 GMT
pragma: cache
server: Squarespace
strict-transport-security: max-age=0
x-content-type-options: nosniff
x-contextid: 0XlTyEL2/pzgvOIVH
content-length: 8459
X-Firefox-Spdy: h2
fonts.gstatic.com/s/sourcecodepro/v22/HI_SiYsKILxRpg3hIP6sJ7fM7PqlPevW.woff2
200 OK 20 kB URL HTTP/2 fonts.gstatic.com/s/sourcecodepro/v22/HI_SiYsKILxRpg3hIP6sJ7fM7PqlPevW.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 19680, version 1.0\012- data
Hash 0628e64d7cdd00a4c6c41b7554ecf8b1
0dee04b143193572e8421021f5fe03b006fa4530
1c2e64053b56afdcc933af75555920cf89c08b8ca04961f4815abdbd0bdcdbc3
GET /s/sourcecodepro/v22/HI_SiYsKILxRpg3hIP6sJ7fM7PqlPevW.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.grilleriet.no
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 19680
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 29 Nov 2022 22:22:33 GMT
expires: Wed, 29 Nov 2023 22:22:33 GMT
cache-control: public, max-age=31536000
age: 438246
last-modified: Tue, 23 Aug 2022 18:25:36 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.grilleriet.no/api/census/RecordHit
200 OK 17 B URL HTTP/2 www.grilleriet.no/api/census/RecordHit
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5b64e8b89092b2e3dfd448b10700627f
484b3032619fa1acd135d114565b0a5166281c22
f1ea07a1e51a389c8de07120ae5c2e432e9dd8f4fbd6f92489f185b0523a3fd4
Analyzer Verdict Alert fortinet Phishing
POST /api/census/RecordHit HTTP/1.1
Host: www.grilleriet.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=utf-8
X-CSRF-Token: Beg9AS60cP3aOWY2ODk3NTE2OGI0MmRkMjI3Yjg1ZWI1NTNlNzRj
Content-Length: 784
Origin: https://www.grilleriet.no
Connection: keep-alive
Referer: https://www.grilleriet.no/
Cookie: crumb=Beg9AS60cP3aOWY2ODk3NTE2OGI0MmRkMjI3Yjg1ZWI1NTNlNzRj; ss_cvr=baad2e0c-51fe-465a-b2fb-129aef1c7ea8|1670198797137|1670198797137|1670198797137|1; ss_cvt=1670198797137
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
content-type: application/json;charset=utf-8
date: Mon, 05 Dec 2022 00:06:39 GMT
server: Squarespace
strict-transport-security: max-age=0
x-content-type-options: nosniff
x-contextid: 0XlTyEL2/Ln2mnIeY
content-length: 17
X-Firefox-Spdy: h2
www.grilleriet.no/api/census/button-render
200 OK 17 B URL HTTP/2 www.grilleriet.no/api/census/button-render
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5b64e8b89092b2e3dfd448b10700627f
484b3032619fa1acd135d114565b0a5166281c22
f1ea07a1e51a389c8de07120ae5c2e432e9dd8f4fbd6f92489f185b0523a3fd4
Analyzer Verdict Alert fortinet Phishing
POST /api/census/button-render HTTP/1.1
Host: www.grilleriet.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
X-CSRF-Token: Beg9AS60cP3aOWY2ODk3NTE2OGI0MmRkMjI3Yjg1ZWI1NTNlNzRj
Content-Length: 471
Origin: https://www.grilleriet.no
Connection: keep-alive
Referer: https://www.grilleriet.no/
Cookie: crumb=Beg9AS60cP3aOWY2ODk3NTE2OGI0MmRkMjI3Yjg1ZWI1NTNlNzRj; ss_cvr=baad2e0c-51fe-465a-b2fb-129aef1c7ea8|1670198797137|1670198797137|1670198797137|1; ss_cvt=1670198797137
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
content-type: application/json;charset=utf-8
date: Mon, 05 Dec 2022 00:06:39 GMT
server: Squarespace
strict-transport-security: max-age=0
x-content-type-options: nosniff
x-contextid: 0XlTyEL2/QvYxhdVH
content-length: 17
X-Firefox-Spdy: h2
use.typekit.net/af/60ef7f/00000000000000003b9acb1d/27/l?subset_id=2&fvd=i5&v=3
200 OK 19 kB URL HTTP/2 use.typekit.net/af/60ef7f/00000000000000003b9acb1d/27/l?subset_id=2&fvd=i5&v=3
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format (Version 2), TrueType, length 18856, version 1.0\012- data
Hash cb7292d89ce69b7ee7d8df47ecad15f4
0dcd751e8590b2e01cef15a388797d9175afde3e
edf2a486aa65a7349abf33b99a62d5b12ac0ea14b97bb989fb532575c75b001c
GET /af/60ef7f/00000000000000003b9acb1d/27/l?subset_id=2&fvd=i5&v=3 HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.grilleriet.no
Connection: keep-alive
Referer: https://www.grilleriet.no/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/font-woff2
content-length: 18856
etag: "ca7abe2f03e29980c31769ef612acecd81fa1603"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Mon, 05 Dec 2022 00:06:39 GMT
X-Firefox-Spdy: h2
www.grilleriet.no/api/census/button-render
200 OK 17 B URL HTTP/2 www.grilleriet.no/api/census/button-render
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5b64e8b89092b2e3dfd448b10700627f
484b3032619fa1acd135d114565b0a5166281c22
f1ea07a1e51a389c8de07120ae5c2e432e9dd8f4fbd6f92489f185b0523a3fd4
Analyzer Verdict Alert fortinet Phishing
POST /api/census/button-render HTTP/1.1
Host: www.grilleriet.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
X-CSRF-Token: Beg9AS60cP3aOWY2ODk3NTE2OGI0MmRkMjI3Yjg1ZWI1NTNlNzRj
Content-Length: 421
Origin: https://www.grilleriet.no
Connection: keep-alive
Referer: https://www.grilleriet.no/
Cookie: crumb=Beg9AS60cP3aOWY2ODk3NTE2OGI0MmRkMjI3Yjg1ZWI1NTNlNzRj; ss_cvr=baad2e0c-51fe-465a-b2fb-129aef1c7ea8|1670198797137|1670198797137|1670198797137|1; ss_cvt=1670198797137
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
content-type: application/json;charset=utf-8
date: Mon, 05 Dec 2022 00:06:39 GMT
server: Squarespace
strict-transport-security: max-age=0
x-content-type-options: nosniff
x-contextid: 0XlTyEL2/rfC5X80Q
content-length: 17
X-Firefox-Spdy: h2
fonts.gstatic.com/s/rubik/v21/iJWKBXyIfDnIV7nBrXw.woff2
200 OK 34 kB URL HTTP/2 fonts.gstatic.com/s/rubik/v21/iJWKBXyIfDnIV7nBrXw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 33580, version 1.0\012- data
Hash 848cd2ecd011428969dc6b90431bc482
6b1a7b562a56bd54510e0f6f95e26babca331a1b
981307dcbbd348f6fb4e3eab184077392f9ee15097ea868f630debefad9044e9
GET /s/rubik/v21/iJWKBXyIfDnIV7nBrXw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.grilleriet.no
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 33580
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 29 Nov 2022 18:32:08 GMT
expires: Wed, 29 Nov 2023 18:32:08 GMT
cache-control: public, max-age=31536000
age: 452071
last-modified: Mon, 18 Jul 2022 19:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3c4319f54a5675ee9acda96c58f97ac6
210ea86db1836d430b321d59b4bd1b016c914f22
cb20ad3ec895ed3a2ae9b1a90dda6b7cc174d8851f3a15ba054a435746cbdc65
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 00:06:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash da9700d928847bca71f73dc9ca89bd1c
2f156a1557a7504da776ed9a82dc52563662be6f
428ed39905a42b1fc7aaf84f2144caf58ddcb53ac2fbda9af61784ca7394a344
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 00:06:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
p.typekit.net/p.gif?s=2&k=646866_5e219193944e8e11ae607628&ht=tk&h=www.grilleriet.no&f=26018.26024.26026.26016.26025.26027.26017&a=646866&js=1.21.0&app=typekit&e=js&_=1670198797301
200 OK 35 B URL HTTP/2 p.typekit.net/p.gif?s=2&k=646866_5e219193944e8e11ae607628&ht=tk&h=www.grilleriet.no&f=26018.26024.26026.26016.26025.26027.26017&a=646866&js=1.21.0&app=typekit&e=js&_=1670198797301
IP
ASN #20940 Akamai International B.V.
File type GIF image data, version 89a, 1 x 1\012- data
Hash 81144d75b3e69e9aa2fa3e9d83a64d03
f0fbc60b50edf5b2a0b76e0aa0537b76bf346ffc
9b9265c69a5cc295d1ab0d04e0273b3677db1a6216ce2ccf4efc8c277ed84b39
GET /p.gif?s=2&k=646866_5e219193944e8e11ae607628&ht=tk&h=www.grilleriet.no&f=26018.26024.26026.26016.26025.26027.26017&a=646866&js=1.21.0&app=typekit&e=js&_=1670198797301 HTTP/1.1
Host: p.typekit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.grilleriet.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cache-control: public, max-age=604800
content-type: image/gif
cross-origin-resource-policy: cross-origin
etag: "61c32ad2-23"
last-modified: Wed, 22 Dec 2021 13:40:34 GMT
server: nginx
content-length: 35
unused62: 8096267
date: Mon, 05 Dec 2022 00:06:39 GMT
X-Firefox-Spdy: h2
images.squarespace-cdn.com/content/v1/5e219193944e8e11ae607628/1579263481576-6H84H4BLF4THYVW3J4EF/favicon.ico?format=100w
200 OK 1.2 kB URL HTTP/2 images.squarespace-cdn.com/content/v1/5e219193944e8e11ae607628/1579263481576-6H84H4BLF4THYVW3J4EF/favicon.ico?format=100w
IP
File type PNG image data, 100 x 100, 8-bit colormap, non-interlaced\012- data
Hash e8a2b53c0db3e47bad467aaf45772489
f222b6a2b074080688b41d65c4e414e347fc9de0
6a1a5f1a3ba06bacc1a2d964d970cbab2f63ad5c62695359f512d78330d74108
GET /content/v1/5e219193944e8e11ae607628/1579263481576-6H84H4BLF4THYVW3J4EF/favicon.ico?format=100w HTTP/1.1
Host: images.squarespace-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.grilleriet.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
timing-allow-origin: *
access-control-expose-headers: Content-Length, Timing-Allow-Origin
content-type: image/png
access-control-allow-origin: *
etag: CKzd1ZXCi+sCEAE=
cache-control: max-age=604800
via: 1.1 google, 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Mon, 05 Dec 2022 00:06:39 GMT
age: 196250
x-served-by: cache-iad-kiad7000109-IAD, cache-bma1632-BMA
x-cache: HIT, HIT
x-cache-hits: 28, 1
x-timer: S1670198800.851884,VS0,VE1
vary: Accept-Encoding
tracepoint: Fastly
content-length: 1186
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash eb764de8591ca0ead3f3dc6e35a31027
3d9de3bcd4f04330fd329e31879b49c3986b783a
4fc4c7e744fc3c827bf2cc73b87737f3f9aed48652f8dc3ec5a7a33edbce3b4a
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=136173
Date: Mon, 05 Dec 2022 00:06:40 GMT
Etag: "638c95c2-1d7"
Expires: Tue, 06 Dec 2022 13:56:13 GMT
Last-Modified: Sun, 04 Dec 2022 12:42:42 GMT
Server: ECS (nyb/1D2F)
X-Cache: Miss from cloudfront
Via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: UdDvo0L_E4LrFJQQrPnnGNjw8g0dxEoPs4ESp-yo6L0W-Dq8QR0uOw==
Age: 4411
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4714
Expires: Mon, 05 Dec 2022 01:25:14 GMT
Date: Mon, 05 Dec 2022 00:06:40 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4714
Expires: Mon, 05 Dec 2022 01:25:14 GMT
Date: Mon, 05 Dec 2022 00:06:40 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc2955536-4372-40c4-bbce-37f3da5c8a64.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc2955536-4372-40c4-bbce-37f3da5c8a64.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash bb029b41d342a82250aef6d6f713be6e
cd754bb6094d2e456b95dce8daace45a0de8a121
c16e364547c9e7a3c487b614073d59c7c495c5e5387b75136afab0dc68bebca4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc2955536-4372-40c4-bbce-37f3da5c8a64.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10031
x-amzn-requestid: ca6c11c5-8842-4ffb-bb9e-5351c4e60c5c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cjY0CGUVIAMFxog=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638ad4e6-4282be9f505aa5764e9b1fa2;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 04:47:34 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: vg9n0d9YqjfrKwJHGGcztV4gsGENhNYUuC1HUmWFsxRlDdMSpV4IQw==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 15:58:47 GMT
age: 29273
etag: "cd754bb6094d2e456b95dce8daace45a0de8a121"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcb6034ca-f8c1-4979-8165-5f755e5d12a1.jpeg
200 OK 6.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcb6034ca-f8c1-4979-8165-5f755e5d12a1.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3c36448c65274ebbe1eb21e3bf02385e
e03cf1c7c2ec15b3cc50d9c54bebbf81aa08cf28
6f17788a394f1305755805a1b92117b1c1a03a1e3a075cb97a0da5184d574553
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcb6034ca-f8c1-4979-8165-5f755e5d12a1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6430
x-amzn-requestid: ae2ec151-d383-4554-9ac2-3d204701251c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: co_ttFDKoAMFp0A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638d1324-15aebb1a06253068472a6ab0;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 21:37:40 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: hEiLpBd0Tubj3-Wgqh_jpK6XEekyrHfuQxpVD_JLlNSAQj41XK_1EA==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 caf6806821bc479b28a6f1ce3043b8a6.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 21:52:15 GMT
age: 8065
etag: "e03cf1c7c2ec15b3cc50d9c54bebbf81aa08cf28"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F396c9419-24ff-48bc-bf81-361b151c281b.jpeg
200 OK 6.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F396c9419-24ff-48bc-bf81-361b151c281b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f3d863be9bd5d072e85b8976251ce342
b9c67cf9a5ae7ec4c7bf8e8b857918be9277a140
f188fb7575c4b8662acfe2a6682559d50a12430c116605391dd77257bc11a60b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F396c9419-24ff-48bc-bf81-361b151c281b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6133
x-amzn-requestid: d2c60baf-1d2e-4b1f-9c08-2adf0aa458a1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cjKUXHcPIAMFl5Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638abdb5-3ddc6f0428790a9d5f253825;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 03:08:37 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: HVO2yJJggGy-dou69DXIb254DYhzLj31b9-lyIOyIvQAQGGqQfmSSg==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 03:17:42 GMT
age: 74938
etag: "b9c67cf9a5ae7ec4c7bf8e8b857918be9277a140"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f879ef8-1a6d-4f5a-9ed7-092a33c3642f.png
200 OK 3.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f879ef8-1a6d-4f5a-9ed7-092a33c3642f.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d7bde76a4dbab17f37747e7da55ad924
56ee7aa6cf94570b1218ef6e767a7036d0b8900f
bd8320fe10dc06061008034cfd1ca9f17e941b2b859b8dd12f23bcac35746aab
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f879ef8-1a6d-4f5a-9ed7-092a33c3642f.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3707
x-amzn-requestid: e9d4dc01-cb68-471b-8da4-c6f170248387
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: co_xhEm-IAMFRNQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638d133c-5414a54751e2569f639d0dea;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 21:38:04 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: _nGZrHCvmP-EKAQG20l1ayIftZ4spFGPuG--vyTpMhbNa9L3pIWhCA==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 21:48:29 GMT
age: 8291
etag: "56ee7aa6cf94570b1218ef6e767a7036d0b8900f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feff698a5-ffc4-43ea-b7a3-b681cafeb108.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feff698a5-ffc4-43ea-b7a3-b681cafeb108.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5d72fb8d20c29763234c2817b119d11b
d4924ec714f5157bcb2fddcb5f768188a3dd37dc
e9aa59142e0673ed3f58b36beaca48213c678dbe4655f9c4b64581cb0f6f22f6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feff698a5-ffc4-43ea-b7a3-b681cafeb108.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12830
x-amzn-requestid: 66f5f2fa-8472-4484-bbea-20ece7e98b1f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cmcsxGDyIAMFX4Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638c0e51-146167697890d9312ce3dbac;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 03:04:49 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: CYvQg9Tc0rQB9_DoDW4RoLx2GEdMSEaXViCY3qXbijd0P5mMSZWE6Q==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 760139201585481b26f947c5f776103a.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 03:35:27 GMT
age: 73873
etag: "d4924ec714f5157bcb2fddcb5f768188a3dd37dc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F50c0f516-113b-498b-a6f2-9f0a076ff423.jpeg
200 OK 7.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F50c0f516-113b-498b-a6f2-9f0a076ff423.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash dafdb4fe91795a9e16baebb085ccd818
f5ed5d03e6969f81349ad78fde0e71390a4ed391
f535ce45d68317bad15513d3cd3d21d2c0ef12e93d6ac19cc07b704ee1651f51
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F50c0f516-113b-498b-a6f2-9f0a076ff423.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7853
x-amzn-requestid: fa079a7e-1e93-41d6-bb16-2703077a0cb8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cdGrKEGFoAMFnBw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6388517a-076131847c129c197e84901b;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 07:02:18 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Cri6Vf6-INRisbFQ4ITZ7f8RIvomQXQ-TjkjWAOkkUhmI1yhHIbTYA==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 3cd7af07832481c336aa1c93c9b4a6fe.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 08:10:52 GMT
age: 57348
etag: "f5ed5d03e6969f81349ad78fde0e71390a4ed391"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
widgetapi.purechat.com/api/visitorwidget/widgetversions/93c3abdd-7e74-4658-a94a-533b5b2c6f25
200 OK 408 B URL HTTP/2 widgetapi.purechat.com/api/visitorwidget/widgetversions/93c3abdd-7e74-4658-a94a-533b5b2c6f25
IP
File type JSON data\012- , ASCII text, with very long lines (408), with no line terminators
Hash c1c1a7df2cf6a1f42e7ae368f216a9ec
899c9185997f7cec2135e73888358f72f0f8619a
fb2e97b79ca3d6b0622326dd8e6c4f0cf58dec628f879f725088c4abd7d1c7d9
GET /api/visitorwidget/widgetversions/93c3abdd-7e74-4658-a94a-533b5b2c6f25 HTTP/1.1
Host: widgetapi.purechat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.grilleriet.no
Connection: keep-alive
Referer: https://www.grilleriet.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 05 Dec 2022 00:06:40 GMT
content-type: application/json; charset=utf-8
content-length: 408
server: Kestrel
cache-control: max-age=60
set-cookie: thirdPartyCookiesEnabled=true; expires=Tue, 06 Dec 2022 00:06:40 GMT; domain=purechat.com; path=/
vary: Origin
access-control-allow-credentials: true
access-control-allow-origin: https://www.grilleriet.no
access-control-expose-headers: X-Requires-Auth
X-Firefox-Spdy: h2
app.purechat.com/version?_=_&callback=_WidgetJPCB_Version
200 OK 234 B URL HTTP/2 app.purechat.com/version?_=_&callback=_WidgetJPCB_Version
IP
File type ASCII text, with no line terminators
Hash b4a0d7af6df32f8107e975582c098ef3
f279529c58935943c51d2a5b8a38db1ff10ade04
643f76818cce37b7ab044eadec562ad4abbdc9db1416cbb3ecef58ce15c3f38b
GET /version?_=_&callback=_WidgetJPCB_Version HTTP/1.1
Host: app.purechat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.grilleriet.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
content-length: 234
last-modified: Wed, 26 Oct 2022 22:16:40 GMT
x-amz-version-id: null
server: AmazonS3
date: Sun, 04 Dec 2022 23:56:17 GMT
cache-control: public,max-age=900
etag: "b4a0d7af6df32f8107e975582c098ef3"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: LxqjaBmo-LpZSks9l1nfhmOltUmXHCZx6zTxajGBWekt3esuB24s3g==
age: 623
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash 1534af0d5eb7a9eba5bb944fd925fe74
9b25b6ebb7bd32cc2ded973090a07e4e2840d405
48f6135d3d4de946f328ccf7cbae89cb89d6680ca9f05e1535f5fa7e495c4edb
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3501
Cache-Control: max-age=93172
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 00:06:40 GMT
Etag: "638bf157-116"
Expires: Tue, 06 Dec 2022 01:59:32 GMT
Last-Modified: Sun, 04 Dec 2022 01:01:11 GMT
Server: ECS (amb/6BA8)
X-Cache: HIT
Content-Length: 278
prod.purechatcdn.com/assets/legacy.13836.js
200 OK 214 kB URL HTTP/2 prod.purechatcdn.com/assets/legacy.13836.js
IP
File type Unicode text, UTF-8 text, with very long lines (62090)
Size 214 kB (213815 bytes)
Hash cad00ec9657253fb4101fe0ae02a9777
9607ad91b89c5d02459ca92100c1cd1d9d083a4a
9e310a5e30b506e7974481e25dee8fc4541cb987d2e06e573b8393c97568410c
GET /assets/legacy.13836.js HTTP/1.1
Host: prod.purechatcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.grilleriet.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 05 Dec 2022 00:06:40 GMT
content-type: application/javascript; charset=utf-8
cache-control: public, max-age=31536000
last-modified: Wed, 26 Oct 2022 22:14:59 GMT
x-amz-version-id: null
etag: W/"08628f1866a4b4967b3bf05a842bef24"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: gVxVgzZlzFAiYBb8iIb3Re_62ArDo_WP_iV92KVb8SQalYODKWHM0w==
age: 3376177
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NanqPn7Dkl9CP1o%2BJucPzh15c5mFwMrF%2BG3OSfXDQSDeJB0PrUI8TIvBV66y1LYKV1Lj6JznAVnwpOJ9JlbROphSWs5pZL1ZMQ%2B5tXxli7MgL75G1z7gvUqGxMZsqE8fG7IEeGsDXg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 774889889ae70b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
widgetapi.purechat.com/api/VisitorWidget/ChatAvailable/424714/93c3abdd-7e74-4658-a94a-533b5b2c6f25/?externalRequest=false&t=1670198798493
200 OK 13 B URL HTTP/2 widgetapi.purechat.com/api/VisitorWidget/ChatAvailable/424714/93c3abdd-7e74-4658-a94a-533b5b2c6f25/?externalRequest=false&t=1670198798493
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 00daedd7a4fce557d26a433af56d6bd9
425607d3be4e6c8f626f6c6b3a4664119866ab4b
d7450ec03c0b60d25bbf75478f20764499dac4f7c671ec12edf3a3677384f101
GET /api/VisitorWidget/ChatAvailable/424714/93c3abdd-7e74-4658-a94a-533b5b2c6f25/?externalRequest=false&t=1670198798493 HTTP/1.1
Host: widgetapi.purechat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.grilleriet.no
Connection: keep-alive
Referer: https://www.grilleriet.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 05 Dec 2022 00:06:41 GMT
content-type: application/json; charset=utf-8
content-length: 13
server: Kestrel
access-control-allow-credentials: true
access-control-allow-origin: https://www.grilleriet.no
access-control-expose-headers: X-Requires-Auth
X-Firefox-Spdy: h2
checkin.purechat.com/api/checkin
204 No Content 0 B URL HTTP/2 checkin.purechat.com/api/checkin
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/checkin HTTP/1.1
Host: checkin.purechat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.grilleriet.no/
Origin: https://www.grilleriet.no
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Mon, 05 Dec 2022 00:06:41 GMT
server: Kestrel
access-control-allow-credentials: true
access-control-allow-headers: content-type
access-control-allow-methods: POST
access-control-allow-origin: https://www.grilleriet.no
X-Firefox-Spdy: h2
checkin.purechat.com/api/checkin
200 OK 114 B URL HTTP/2 checkin.purechat.com/api/checkin
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash e29f9202024eccb7e0aa5167a5bd4579
da4a1f529d93325e5dc51c45ac29bebdce795ed5
208e455fd377beb9e8a54da86633a1f9e7b8982c83f3dfed416bb627457fe185
POST /api/checkin HTTP/1.1
Host: checkin.purechat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=utf-8
Content-Length: 204
Origin: https://www.grilleriet.no
Connection: keep-alive
Referer: https://www.grilleriet.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Dec 2022 00:06:42 GMT
content-type: application/json; charset=utf-8
content-length: 114
server: Kestrel
set-cookie: _PCCSID_424714=9f5fbf6b-2455-455e-a4f7-fd167b7300d3; expires=Mon, 05 Dec 2022 00:26:42 GMT; domain=purechat.com; path=/; secure; samesite=none
_PCCID=0d98cb82-4e2e-46d1-b1f5-372f7ec52163; expires=Sat, 04 Dec 2027 00:06:42 GMT; domain=purechat.com; path=/; secure; samesite=none
access-control-allow-credentials: true
access-control-allow-origin: https://www.grilleriet.no
X-Firefox-Spdy: h2
checkin.purechat.com/api/checkin
204 No Content 0 B URL HTTP/2 checkin.purechat.com/api/checkin
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/checkin HTTP/1.1
Host: checkin.purechat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.grilleriet.no/
Origin: https://www.grilleriet.no
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Mon, 05 Dec 2022 00:06:47 GMT
server: Kestrel
access-control-allow-credentials: true
access-control-allow-headers: content-type
access-control-allow-methods: POST
access-control-allow-origin: https://www.grilleriet.no
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60dcc231-abb7-48f1-8ec5-e25b31bd100b.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60dcc231-abb7-48f1-8ec5-e25b31bd100b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 24c69d7ef356b352956d6dcbc9f5df1d
2cc31dc1c5d2d2a8b3a378dce8a1240a79acfec9
94d068620c34652cb2d24ca8b3cf962febe9606e6d3a33d937fc9d99f176edef
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60dcc231-abb7-48f1-8ec5-e25b31bd100b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 10396
x-amzn-requestid: b879fd2e-b6cf-4373-b780-2d97481c45f8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cioNbH5KoAMFUsA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638a8722-6add7f8e225878473b20c015;Sampled=0
x-amzn-remapped-date: Fri, 02 Dec 2022 23:15:46 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ir97GJKaFoW6BNXCcmMqp0JSUd5JhCACyUvLh5G-0BWCDVJsqs7XhQ==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 12:09:06 GMT
age: 43061
etag: "2cc31dc1c5d2d2a8b3a378dce8a1240a79acfec9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
checkin.purechat.com/api/checkin
200 OK 94 B URL HTTP/2 checkin.purechat.com/api/checkin
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 9399ca4256c4e02f8898a202af4ad6b1
b5ca28ab74b93a86a5601490b665578df1def6bb
653621d8de473b0e85e967f564e66bbe0aaf73a5a2b0319840e67331d1d3beab
POST /api/checkin HTTP/1.1
Host: checkin.purechat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=utf-8
Content-Length: 315
Origin: https://www.grilleriet.no
Connection: keep-alive
Referer: https://www.grilleriet.no/
Cookie: _PCCSID_424714=9f5fbf6b-2455-455e-a4f7-fd167b7300d3; _PCCID=0d98cb82-4e2e-46d1-b1f5-372f7ec52163
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Dec 2022 00:06:47 GMT
content-type: application/json; charset=utf-8
content-length: 94
server: Kestrel
access-control-allow-credentials: true
access-control-allow-origin: https://www.grilleriet.no
X-Firefox-Spdy: h2
assets.squarespace.com/universal/scripts-compressed/common-vendors-cf28b9adb429a6e878890-min.en-US.js
200 OK 0 B URL HTTP/2 assets.squarespace.com/universal/scripts-compressed/common-vendors-cf28b9adb429a6e878890-min.en-US.js
IP
GET /universal/scripts-compressed/common-vendors-cf28b9adb429a6e878890-min.en-US.js HTTP/1.1
Host: assets.squarespace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.grilleriet.no
Connection: keep-alive
Referer: https://www.grilleriet.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=31536000
expires: Thu, 30 Nov 2023 21:04:12 GMT
last-modified: Wed, 30 Nov 2022 16:44:28 GMT
etag: "af3c38d29483d4b8b4569357ffe8c8fc"
content-type: text/javascript
content-encoding: br
server: UploadServer
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Mon, 05 Dec 2022 00:06:39 GMT
age: 356546
x-served-by: cache-iad-kiad7000093-IAD, cache-bma1682-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 123
x-timer: S1670198799.058728,VS0,VE0
vary: Accept-Encoding
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
content-length: 168623
X-Firefox-Spdy: h2
assets.squarespace.com/universal/scripts-compressed/common-vendors-stable-ded59447778e1491d87fa-min.en-US.js
200 OK 0 B URL HTTP/2 assets.squarespace.com/universal/scripts-compressed/common-vendors-stable-ded59447778e1491d87fa-min.en-US.js
IP
GET /universal/scripts-compressed/common-vendors-stable-ded59447778e1491d87fa-min.en-US.js HTTP/1.1
Host: assets.squarespace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.grilleriet.no
Connection: keep-alive
Referer: https://www.grilleriet.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=31536000
expires: Wed, 22 Nov 2023 21:48:02 GMT
last-modified: Tue, 22 Nov 2022 21:08:15 GMT
etag: "a2aba54ac71d7b847b67a49a66957627"
content-type: text/javascript
content-encoding: br
server: UploadServer
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Mon, 05 Dec 2022 00:06:39 GMT
age: 1045116
x-served-by: cache-iad-kjyo7100036-IAD, cache-bma1682-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 23811
x-timer: S1670198799.064051,VS0,VE0
vary: Accept-Encoding
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
content-length: 70636
X-Firefox-Spdy: h2
assets.squarespace.com/universal/scripts-compressed/extract-css-moment-js-vendor-5082e2dab696b020ac83a-min.en-US.js
200 OK 0 B URL HTTP/2 assets.squarespace.com/universal/scripts-compressed/extract-css-moment-js-vendor-5082e2dab696b020ac83a-min.en-US.js
IP
GET /universal/scripts-compressed/extract-css-moment-js-vendor-5082e2dab696b020ac83a-min.en-US.js HTTP/1.1
Host: assets.squarespace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.grilleriet.no
Connection: keep-alive
Referer: https://www.grilleriet.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=31536000
expires: Tue, 21 Nov 2023 17:23:55 GMT
last-modified: Mon, 21 Nov 2022 16:44:05 GMT
etag: "c790849e8518999c8594a0bbb6597784"
content-type: text/javascript
content-encoding: br
server: UploadServer
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Mon, 05 Dec 2022 00:06:39 GMT
age: 1147364
x-served-by: cache-iad-kcgs7200082-IAD, cache-bma1682-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 23914
x-timer: S1670198799.042902,VS0,VE0
vary: Accept-Encoding
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
content-length: 87950
X-Firefox-Spdy: h2
app.purechat.com/VisitorWidget/WidgetScript
200 OK 0 B URL HTTP/2 app.purechat.com/VisitorWidget/WidgetScript
IP
GET /VisitorWidget/WidgetScript HTTP/1.1
Host: app.purechat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.grilleriet.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
last-modified: Wed, 26 Oct 2022 22:16:19 GMT
x-amz-version-id: null
server: AmazonS3
content-encoding: gzip
date: Sun, 04 Dec 2022 22:01:46 GMT
cache-control: public,max-age=14400
etag: W/"6d472c54bbcb8a12a1f1d8f4906802b1"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: W6pQBDNKH1BI3TLIKy5qXcGa4PMmW9i54qpnXXmh98IDQgHK7EuvGg==
age: 7494
X-Firefox-Spdy: h2
api-cdn.purechat.com/api/visitorwidget/widget/93c3abdd-7e74-4658-a94a-533b5b2c6f25/34
200 OK 0 B URL HTTP/2 api-cdn.purechat.com/api/visitorwidget/widget/93c3abdd-7e74-4658-a94a-533b5b2c6f25/34
IP
GET /api/visitorwidget/widget/93c3abdd-7e74-4658-a94a-533b5b2c6f25/34 HTTP/1.1
Host: api-cdn.purechat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.grilleriet.no
Connection: keep-alive
Referer: https://www.grilleriet.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json; charset=utf-8
date: Mon, 23 May 2022 04:37:33 GMT
server: Kestrel
cache-control: public, max-age=31536000
access-control-allow-credentials: true
access-control-allow-origin: https://www.grilleriet.no
access-control-expose-headers: X-Requires-Auth
content-encoding: gzip
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: uVfzjGodFIKvZYOtqnyO4-fRL_qXc5r8AH0qdsxvT9rnjSphJx-d2g==
age: 16918147
X-Firefox-Spdy: h2
198.49.23.145
95.101.11.115
104.21.69.94
93.184.220.29