firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 2d12f67fe57a87e7366b662d153a5582
d7b02d81cc74f24a251d9363e0f4b0a149264ec1
73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Backoff, Content-Type, Retry-After, Alert
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Tue, 27 Sep 2022 12:15:30 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 4f01f770085624552bc30a98954f963a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 6YO8UWZTkItQCVFd5NF5CFTDEG6v_a4ifNy1H1B1ChVFYmvj2a65PQ==
Age: 2793
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d2560f62890e75b8de444fed96c22f52
334ce0c48e606ee029f31eeb1463af87b1024bb9
4397e6b45b5822fbab9b83abe0b96ee70efba7cd2160b51936159865ede5fdb1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4397E6B45B5822FBAB9B83ABE0B96EE70EFBA7CD2160B51936159865EDE5FDB1"
Last-Modified: Sun, 25 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6573
Expires: Tue, 27 Sep 2022 14:51:36 GMT
Date: Tue, 27 Sep 2022 13:02:03 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP
File type PEM certificate\012- , ASCII text
Hash 6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Tue, 27 Sep 2022 09:24:14 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 6cb1d4b545e7beb4ead790454f4807c6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 3iBbozwUZUvn5YMxRW4rAlfE6lzMEJFdJiDuBTsbdJWzMoCknVpEJA==
age: 13070
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 27 Sep 2022 13:02:03 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600, max-age=3600
Date: Tue, 27 Sep 2022 12:10:46 GMT
Expires: Tue, 27 Sep 2022 12:40:44 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 5DJmnm3gV84HFx5AJCBCFOLKobw00vHMY8ZbiikFLlZJTc9S1QbIGA==
Age: 3078
tulum.crypit.net/
200 OK 2.0 kB IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (534)
Hash 3aae349ecc895cf8bdea65b542482eb8
c1d28357f14cd9885476e6d6a543f3d463fc837d
7300fcba408d162a038e93fd6a20ff99f8b9645adedd9130fee7024a3dc19cd5
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: tulum.crypit.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Tue, 27 Sep 2022 13:02:03 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9
X-Powered-By: PHP/5.4.16
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
ocsp.digicert.com/
200 OK 471 B IP
Hash c18823050f86339eaa73ddb1bf80d64c
ac4ee81f59f706cee8a74458d498bbc20d8d351a
9a505647517bd02d8ff994fd4ad98dc2f4b519916145b0c327691420c1084c46
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5292
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 13:02:04 GMT
Last-Modified: Tue, 27 Sep 2022 11:33:52 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 471
tulum.crypit.net/page/bouncy.php?&bpae=GbhGdysnpUx7jku2q9HP%2FjhgG%2B8PZuQHrTk%2BQuzVtmcBxn63IiNdlmK73VD7jecnjce1a2KIvg8ymfsD18YsndlmPE%2BgxWlQRX1xPuH9R6ltwmRinUnjszVebvAxMYLxdnQNWgmnBtJ8lAj19zMSTV0IkqbSL0gr395Ssmx8waXwDmJpMefcUrX9WUufBj0oTEKxwcSxRBA%2BHQVBCQ7ai2CQO2udTEw16%2BlI%2BUHMBGMVWZaGnzKnECds8ArCj%2FJ3Pr09LM5FOAOgEDWIxDUECVmvUqbRVl9myJOAD0oNPkBI9XtsYvCwsStsiLw49S86DGEMnJXH6HaA%2FN5gjmP60JVzYlJbDiuMffGoq9XE3WM6SFFbDjE0ifxOFnZQAhh08n623axQXyw6kuqMYOhuhfV85Z%2Bcfjaj9%2Fk%3D&redirectType=js&inIframe=false&inPopUp=false
200 OK 679 B URL HTTP/1.1 tulum.crypit.net/page/bouncy.php?&bpae=GbhGdysnpUx7jku2q9HP%2FjhgG%2B8PZuQHrTk%2BQuzVtmcBxn63IiNdlmK73VD7jecnjce1a2KIvg8ymfsD18YsndlmPE%2BgxWlQRX1xPuH9R6ltwmRinUnjszVebvAxMYLxdnQNWgmnBtJ8lAj19zMSTV0IkqbSL0gr395Ssmx8waXwDmJpMefcUrX9WUufBj0oTEKxwcSxRBA%2BHQVBCQ7ai2CQO2udTEw16%2BlI%2BUHMBGMVWZaGnzKnECds8ArCj%2FJ3Pr09LM5FOAOgEDWIxDUECVmvUqbRVl9myJOAD0oNPkBI9XtsYvCwsStsiLw49S86DGEMnJXH6HaA%2FN5gjmP60JVzYlJbDiuMffGoq9XE3WM6SFFbDjE0ifxOFnZQAhh08n623axQXyw6kuqMYOhuhfV85Z%2Bcfjaj9%2Fk%3D&redirectType=js&inIframe=false&inPopUp=false
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash d7b2584fb2ae485c4b19a78cb66bea97
61d5d24be492bbd267bd66b2eadbf55c752eda6d
10383ff31d09b04498e86f8a291b2cbe5ee1f76b7eada665d1f20b813c1530e5
GET /page/bouncy.php?&bpae=GbhGdysnpUx7jku2q9HP%2FjhgG%2B8PZuQHrTk%2BQuzVtmcBxn63IiNdlmK73VD7jecnjce1a2KIvg8ymfsD18YsndlmPE%2BgxWlQRX1xPuH9R6ltwmRinUnjszVebvAxMYLxdnQNWgmnBtJ8lAj19zMSTV0IkqbSL0gr395Ssmx8waXwDmJpMefcUrX9WUufBj0oTEKxwcSxRBA%2BHQVBCQ7ai2CQO2udTEw16%2BlI%2BUHMBGMVWZaGnzKnECds8ArCj%2FJ3Pr09LM5FOAOgEDWIxDUECVmvUqbRVl9myJOAD0oNPkBI9XtsYvCwsStsiLw49S86DGEMnJXH6HaA%2FN5gjmP60JVzYlJbDiuMffGoq9XE3WM6SFFbDjE0ifxOFnZQAhh08n623axQXyw6kuqMYOhuhfV85Z%2Bcfjaj9%2Fk%3D&redirectType=js&inIframe=false&inPopUp=false HTTP/1.1
Host: tulum.crypit.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://tulum.crypit.net/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Tue, 27 Sep 2022 13:02:04 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9
X-Powered-By: PHP/5.4.16
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: YIHt2R0RhIPLQnmLrSj6lw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: NLPneIvy84DqfPBOlMmfJSzmuk8=
click-v4.expmdiadi.com/click?i=tbfd3kj3kq8_0
302 Found 0 B URL HTTP/1.1 click-v4.expmdiadi.com/click?i=tbfd3kj3kq8_0
IP
ASN #27257 WEBAIR-INTERNET
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /click?i=tbfd3kj3kq8_0 HTTP/1.1
Host: click-v4.expmdiadi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://tulum.crypit.net/
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Cache-Control: no-store
Content-Length: 0
Age: 0
Connection: keep-alive
Location: https://api.apptap.com/link/buy/android/tile.comfyballs.no/e1?clinkID=xKX18oK1jOJqbEGK488wX-7zU65UKSOYm5wOirVIbuSg99iUmn63OHVLKQ&pubID=laGp89Ptz6FCc0yNz-I6Tu0&siteID=k-23rN3-&placementID=225955_crypit.net&trackingID=-XcFD3YWRvI&creativeID=5588973&pub.keyword=crypit.net&loc.country=no&partnerCampaignID=945115&cost.cpc=0.015
Pragma: no-cache
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 47693342db97ca970460f469d32adca6
a580749ffdff193f724d4069f4a5e1cf06e19758
a95dfe0776f7054c313ed507848a58119f7b48d1a240b389796818cd4be2f649
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 27 Sep 2022 13:02:05 GMT
Last-Modified: Tue, 27 Sep 2022 11:14:14 GMT
Server: ECS (nyb/1D0B)
X-Cache: Miss from cloudfront
Via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: dNvAiYEJ75s-8qP3wyIjvgsEJt7mTlgfJqiy6hy_SkXNZmhx8Jk9_g==
Age: 6471
api.apptap.com/link/buy/android/tile.comfyballs.no/e1?clinkID=xKX18oK1jOJqbEGK488wX-7zU65UKSOYm5wOirVIbuSg99iUmn63OHVLKQ&pubID=laGp89Ptz6FCc0yNz-I6Tu0&siteID=k-23rN3-&placementID=225955_crypit.net&trackingID=-XcFD3YWRvI&creativeID=5588973&pub.keyword=crypit.net&loc.country=no&partnerCampaignID=945115&cost.cpc=0.015
302 0 B URL HTTP/1.1 api.apptap.com/link/buy/android/tile.comfyballs.no/e1?clinkID=xKX18oK1jOJqbEGK488wX-7zU65UKSOYm5wOirVIbuSg99iUmn63OHVLKQ&pubID=laGp89Ptz6FCc0yNz-I6Tu0&siteID=k-23rN3-&placementID=225955_crypit.net&trackingID=-XcFD3YWRvI&creativeID=5588973&pub.keyword=crypit.net&loc.country=no&partnerCampaignID=945115&cost.cpc=0.015
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /link/buy/android/tile.comfyballs.no/e1?clinkID=xKX18oK1jOJqbEGK488wX-7zU65UKSOYm5wOirVIbuSg99iUmn63OHVLKQ&pubID=laGp89Ptz6FCc0yNz-I6Tu0&siteID=k-23rN3-&placementID=225955_crypit.net&trackingID=-XcFD3YWRvI&creativeID=5588973&pub.keyword=crypit.net&loc.country=no&partnerCampaignID=945115&cost.cpc=0.015 HTTP/1.1
Host: api.apptap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://tulum.crypit.net/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302
Content-Type: text/html;charset=UTF-8
Date: Tue, 27 Sep 2022 13:02:05 GMT
Location: https://api.mplayit.com/link/redirect?data=G0jLepTc_6isBQjKhrXZ-l6g9i-PjeK4lHpStEmDpouCyjLvE2NvckEvbKajOa0b_J05H_8sM4i7kGdec_hs0Bw4ghH-P8EvVI2HMdHKeeaA4ItuXzQ%3D&appID=tile.comfyballs.no&stripFragment=false&link=https%3A%2F%2Fr.srvtrck.com%2Fv1%2Fredirect%3Fapi_key%3D7f492f7e98f9f621f520ab0fb797464f%26yk_tag%3DOE4WO5RNGJIE2VZZJJSEQY3SGBHXIWSNJB3TUZZTHBFVIY2B_ORUWYZJOMNXW2ZTZMJQWY3DTFZXG6HZUGJHHIZLTNJDXK2ZWHFUUKMDHNJHW2RRRIEPUCVBRMRWHA3TJNRZG2MDIORUWG2TKOR2WYYLXGFQXI427GU4W24DIO4YXMNRXGI3Q_72994674be9c4efea5dcc4fbc47224b8%26site_id%3D72994674be9c4efea5dcc4fbc47224b8%26source%3D%26type%3Durl%26url%3Dhttps%253A%252F%252Fwww.comfyballs.no%252F&clickID=q9gv-2PMW9JdHcr0OtZMHw%3Ag38KTcA&js=true
Referrer-Policy: no-referrer
Server: nginx/1.20.0
Set-Cookie: apt=1509d02769c448c597e23cc0233124e1; Domain=apptap.com; Expires=Sun, 26-Sep-2032 23:09:45 GMT; Path=/
fv=1; Domain=apptap.com; Path=/
Content-Length: 0
Connection: keep-alive
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 4473b44e6b8a42880339f92c197e7aef
5b23cfc6370034a46cc06cffb32d85b782c7d0b4
26492a2c90e2c3e2babe46ff77574a6f80a4d0417e390e38bb98f2fb754bf44e
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Tue, 27 Sep 2022 13:02:05 GMT
Server: ECS (dcb/7F83)
X-Cache: Miss from cloudfront
Via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Tlux_4K7E3zE_YPzC7n-tMA58dO4RigoPp5mWbWrLUjuwhpMbWZyOQ==
api.mplayit.com/link/redirect?data=G0jLepTc_6isBQjKhrXZ-l6g9i-PjeK4lHpStEmDpouCyjLvE2NvckEvbKajOa0b_J05H_8sM4i7kGdec_hs0Bw4ghH-P8EvVI2HMdHKeeaA4ItuXzQ%3D&appID=tile.comfyballs.no&stripFragment=false&link=https%3A%2F%2Fr.srvtrck.com%2Fv1%2Fredirect%3Fapi_key%3D7f492f7e98f9f621f520ab0fb797464f%26yk_tag%3DOE4WO5RNGJIE2VZZJJSEQY3SGBHXIWSNJB3TUZZTHBFVIY2B_ORUWYZJOMNXW2ZTZMJQWY3DTFZXG6HZUGJHHIZLTNJDXK2ZWHFUUKMDHNJHW2RRRIEPUCVBRMRWHA3TJNRZG2MDIORUWG2TKOR2WYYLXGFQXI427GU4W24DIO4YXMNRXGI3Q_72994674be9c4efea5dcc4fbc47224b8%26site_id%3D72994674be9c4efea5dcc4fbc47224b8%26source%3D%26type%3Durl%26url%3Dhttps%253A%252F%252Fwww.comfyballs.no%252F&clickID=q9gv-2PMW9JdHcr0OtZMHw%3Ag38KTcA&js=true
200 555 B URL HTTP/1.1 api.mplayit.com/link/redirect?data=G0jLepTc_6isBQjKhrXZ-l6g9i-PjeK4lHpStEmDpouCyjLvE2NvckEvbKajOa0b_J05H_8sM4i7kGdec_hs0Bw4ghH-P8EvVI2HMdHKeeaA4ItuXzQ%3D&appID=tile.comfyballs.no&stripFragment=false&link=https%3A%2F%2Fr.srvtrck.com%2Fv1%2Fredirect%3Fapi_key%3D7f492f7e98f9f621f520ab0fb797464f%26yk_tag%3DOE4WO5RNGJIE2VZZJJSEQY3SGBHXIWSNJB3TUZZTHBFVIY2B_ORUWYZJOMNXW2ZTZMJQWY3DTFZXG6HZUGJHHIZLTNJDXK2ZWHFUUKMDHNJHW2RRRIEPUCVBRMRWHA3TJNRZG2MDIORUWG2TKOR2WYYLXGFQXI427GU4W24DIO4YXMNRXGI3Q_72994674be9c4efea5dcc4fbc47224b8%26site_id%3D72994674be9c4efea5dcc4fbc47224b8%26source%3D%26type%3Durl%26url%3Dhttps%253A%252F%252Fwww.comfyballs.no%252F&clickID=q9gv-2PMW9JdHcr0OtZMHw%3Ag38KTcA&js=true
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (483)
Hash a553d645135495fae3b4dfb4b8d0a308
0025ea3e33ba92980b1d579632a2a5f4b556bcea
e5aa93d3e7cd6661c099e4b11fccc4440dd433f320fa7bbe910d0d85918baeb0
GET /link/redirect?data=G0jLepTc_6isBQjKhrXZ-l6g9i-PjeK4lHpStEmDpouCyjLvE2NvckEvbKajOa0b_J05H_8sM4i7kGdec_hs0Bw4ghH-P8EvVI2HMdHKeeaA4ItuXzQ%3D&appID=tile.comfyballs.no&stripFragment=false&link=https%3A%2F%2Fr.srvtrck.com%2Fv1%2Fredirect%3Fapi_key%3D7f492f7e98f9f621f520ab0fb797464f%26yk_tag%3DOE4WO5RNGJIE2VZZJJSEQY3SGBHXIWSNJB3TUZZTHBFVIY2B_ORUWYZJOMNXW2ZTZMJQWY3DTFZXG6HZUGJHHIZLTNJDXK2ZWHFUUKMDHNJHW2RRRIEPUCVBRMRWHA3TJNRZG2MDIORUWG2TKOR2WYYLXGFQXI427GU4W24DIO4YXMNRXGI3Q_72994674be9c4efea5dcc4fbc47224b8%26site_id%3D72994674be9c4efea5dcc4fbc47224b8%26source%3D%26type%3Durl%26url%3Dhttps%253A%252F%252Fwww.comfyballs.no%252F&clickID=q9gv-2PMW9JdHcr0OtZMHw%3Ag38KTcA&js=true HTTP/1.1
Host: api.mplayit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200
Date: Tue, 27 Sep 2022 13:02:05 GMT
Server: nginx/1.20.0
Content-Length: 555
Connection: keep-alive
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash a241b8310f04cf188877764c5aac3e4e
1f5e9ba669a67db21743bee491adb0df57aeff9a
6635da7f680bdd822bc81440aeb9d0556b9c0562532ae60b0326770fcd118d5f
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Tue, 27 Sep 2022 13:02:05 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19022
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Mon, 26 Sep 2022 22:38:00 GMT
Expires: Tue, 27 Sep 2022 22:38:00 GMT
ETag: "1f5e9ba669a67db21743bee491adb0df57aeff9a"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5a6097201b7da81f6e9a6d99a7353a0c
d4240fe80c76013b9f7b6fd09963aa47151b8d6a
519e9b47ddfa1e1fe047f4dc7df88e3011817f88144fcc3853a7984a781c2070
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "519E9B47DDFA1E1FE047F4DC7DF88E3011817F88144FCC3853A7984A781C2070"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4059
Expires: Tue, 27 Sep 2022 14:09:45 GMT
Date: Tue, 27 Sep 2022 13:02:06 GMT
Connection: keep-alive
r.srvtrck.com/v1/redirect?api_key=7f492f7e98f9f621f520ab0fb797464f&yk_tag=OE4WO5RNGJIE2VZZJJSEQY3SGBHXIWSNJB3TUZZTHBFVIY2B_ORUWYZJOMNXW2ZTZMJQWY3DTFZXG6HZUGJHHIZLTNJDXK2ZWHFUUKMDHNJHW2RRRIEPUCVBRMRWHA3TJNRZG2MDIORUWG2TKOR2WYYLXGFQXI427GU4W24DIO4YXMNRXGI3Q_72994674be9c4efea5dcc4fbc47224b8&site_id=72994674be9c4efea5dcc4fbc47224b8&source=&type=url&url=https%3A%2F%2Fwww.comfyballs.no%2F
302 Found 0 B URL HTTP/2 r.srvtrck.com/v1/redirect?api_key=7f492f7e98f9f621f520ab0fb797464f&yk_tag=OE4WO5RNGJIE2VZZJJSEQY3SGBHXIWSNJB3TUZZTHBFVIY2B_ORUWYZJOMNXW2ZTZMJQWY3DTFZXG6HZUGJHHIZLTNJDXK2ZWHFUUKMDHNJHW2RRRIEPUCVBRMRWHA3TJNRZG2MDIORUWG2TKOR2WYYLXGFQXI427GU4W24DIO4YXMNRXGI3Q_72994674be9c4efea5dcc4fbc47224b8&site_id=72994674be9c4efea5dcc4fbc47224b8&source=&type=url&url=https%3A%2F%2Fwww.comfyballs.no%2F
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v1/redirect?api_key=7f492f7e98f9f621f520ab0fb797464f&yk_tag=OE4WO5RNGJIE2VZZJJSEQY3SGBHXIWSNJB3TUZZTHBFVIY2B_ORUWYZJOMNXW2ZTZMJQWY3DTFZXG6HZUGJHHIZLTNJDXK2ZWHFUUKMDHNJHW2RRRIEPUCVBRMRWHA3TJNRZG2MDIORUWG2TKOR2WYYLXGFQXI427GU4W24DIO4YXMNRXGI3Q_72994674be9c4efea5dcc4fbc47224b8&site_id=72994674be9c4efea5dcc4fbc47224b8&source=&type=url&url=https%3A%2F%2Fwww.comfyballs.no%2F HTTP/1.1
Host: r.srvtrck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Tue, 27 Sep 2022 13:02:06 GMT
content-length: 0
p3p: CP="CAO PSA OUR"
set-cookie: ykuid=9d677fd7c4b34a11be5c9dfee710df2f; Domain=.srvtrck.com; Expires=Wed, 27-Sep-2023 13:02:06 GMT; Path=/
location: /v2/go?t=8t4p2%3A4%2Fbo4gc.5eekeocreu4.6e9%2F2t%3D%2Fmotsut%26s5abc5G2%3F1t4%3D16a4984399903%26as6g0.923Z0O0o0c0Y%3D_mDtruV%269uqtAs%26afaididtao4I5%3D96368675-c7m8db150-0d1796c9u3t1y%3DnI%26efoe%26I3%3Debidr5s82d634c70_c8e9c3d824e61_b2s1a3c0I6%3D017d1h0r7e0%262e1c68241e578a662301529a%265e9vccc%3Dd6rtfkonod%3D3rbn3o3%26-9d765407%3D-Ido0%26a2a689a9dd1n%26idaelPfram-%3DIrHeec1sFon1nvR3R480y1D0R0%3Dfi4.a7299591124621as5.9o3her3e3ecis%2Fog2l7c9t4n7pbo9g4oflakdoc-fnc%2F7s2tbh&e=1&ai=bd065b411a6d47b3af6f3c41e249400a&sct=1&ct=1664283726139&cu=0f64aa3299994194a21a4519235eb353&ykuid=9d677fd7c4b34a11be5c9dfee710df2f&sc=1&cs=ab9cb14c7158b15e760c652edc61c765
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 75146e87a99ab4f4-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5a6097201b7da81f6e9a6d99a7353a0c
d4240fe80c76013b9f7b6fd09963aa47151b8d6a
519e9b47ddfa1e1fe047f4dc7df88e3011817f88144fcc3853a7984a781c2070
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "519E9B47DDFA1E1FE047F4DC7DF88E3011817F88144FCC3853A7984A781C2070"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4059
Expires: Tue, 27 Sep 2022 14:09:45 GMT
Date: Tue, 27 Sep 2022 13:02:06 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5a6097201b7da81f6e9a6d99a7353a0c
d4240fe80c76013b9f7b6fd09963aa47151b8d6a
519e9b47ddfa1e1fe047f4dc7df88e3011817f88144fcc3853a7984a781c2070
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "519E9B47DDFA1E1FE047F4DC7DF88E3011817F88144FCC3853A7984A781C2070"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4059
Expires: Tue, 27 Sep 2022 14:09:45 GMT
Date: Tue, 27 Sep 2022 13:02:06 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5a6097201b7da81f6e9a6d99a7353a0c
d4240fe80c76013b9f7b6fd09963aa47151b8d6a
519e9b47ddfa1e1fe047f4dc7df88e3011817f88144fcc3853a7984a781c2070
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "519E9B47DDFA1E1FE047F4DC7DF88E3011817F88144FCC3853A7984A781C2070"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4059
Expires: Tue, 27 Sep 2022 14:09:45 GMT
Date: Tue, 27 Sep 2022 13:02:06 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F79631135-a10c-43bf-85d2-fa2236b96883.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F79631135-a10c-43bf-85d2-fa2236b96883.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 62e68c3cd08dd94d910507512a67e85f
3d4fa8701f17e8818c25584ef5f04bfbee8440cd
058d798963f83f5fb88ab728185f755c5353fa981d93e1b6ff869089f501586b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F79631135-a10c-43bf-85d2-fa2236b96883.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13213
x-amzn-requestid: fe9ec409-2757-4910-8443-5b4d3be7efd3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZFlATEp8oAMFd9Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63321b9b-3230e97a4fe34413285eb578;Sampled=0
x-amzn-remapped-date: Mon, 26 Sep 2022 21:37:31 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: kRSg9NTTAgeAJgIZ_C9_rRodCX4bzGduJEvNPNHUya0Moa2vsmWSoQ==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 2324edbcb8fc72f617442c65f36a40fc.cloudfront.net (CloudFront), 1.1 google
date: Mon, 26 Sep 2022 21:38:57 GMT
age: 55389
etag: "3d4fa8701f17e8818c25584ef5f04bfbee8440cd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1bfe3adc-1955-4f21-9e44-c0bc53a4edc5.jpeg
200 OK 9.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1bfe3adc-1955-4f21-9e44-c0bc53a4edc5.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash deb8d1e3b6d7fbc8c8ba478269621676
84f5a4c8b38acde814bc790e5b514347718d5bb9
ed14fa766f0708b4166e83b61f160db5671af430917b7c67184bf18d9208742b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1bfe3adc-1955-4f21-9e44-c0bc53a4edc5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9163
x-amzn-requestid: 8ccd9b1f-bef9-4591-be32-e6dd98f4ee78
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZFlKpEZrIAMFS1Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63321bdd-4a40b9c8281b64c725fec0f1;Sampled=0
x-amzn-remapped-date: Mon, 26 Sep 2022 21:38:37 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: bs6HOUmHOoYKDuzBoVHhcr8d4HP4bBmwUF3EtOmwKXo7ozhfaIYEvw==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 707e733794d52100fde0ab21bf0b1462.cloudfront.net (CloudFront), 1.1 google
date: Mon, 26 Sep 2022 21:39:07 GMT
age: 55379
etag: "84f5a4c8b38acde814bc790e5b514347718d5bb9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc9985e6-5fe2-4d64-8060-3ea9e7ea528d.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc9985e6-5fe2-4d64-8060-3ea9e7ea528d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a90590f26bae9ad9e95ffdfbfb7dd21d
cde7845f38c4c077f1f1cfda1d1e3b00065d3ac3
33fe3394213e01d11c3e005cb5a678ba74511704d4132fc2bd9f7ad4e1b7dbfc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc9985e6-5fe2-4d64-8060-3ea9e7ea528d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10318
x-amzn-requestid: 6a205445-8a9e-4f25-b144-ba6e6934d383
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZCSlhFNAIAMFmBA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6330caef-61ecbf9154cd56131b940ac0;Sampled=0
x-amzn-remapped-date: Sun, 25 Sep 2022 21:41:04 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: qP5-TglQAoTGc78-rIK27mKRTS_WthN0OpiiMqSF-y2rmWxVOyfNVw==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Mon, 26 Sep 2022 19:30:21 GMT
age: 63105
etag: "cde7845f38c4c077f1f1cfda1d1e3b00065d3ac3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2517fd65-65c6-43b1-93a6-b1205ba3f0f8.jpeg
200 OK 7.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2517fd65-65c6-43b1-93a6-b1205ba3f0f8.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5274e770cb5a704916c8965659709f4a
1a26007f761e439db575fb80fb403031260aecf4
e36e8be75c92feb9b416a46c5918356d8f9694894a799b7c10de21034d33d5ef
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2517fd65-65c6-43b1-93a6-b1205ba3f0f8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7455
x-amzn-requestid: 0887cd56-f324-46cf-a086-709e1c66f354
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZGBTdHmhoAMFvIw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633248e2-42391706084f335228fe3994;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 00:50:42 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: IWzfDNFlgYdqYnbQ9uWfOvqb5zl3I3mgTZrT5pU5P3EvetMRDN5P7w==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 ead78c395f4bede3ec6cd7ea180e3d3a.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 01:06:47 GMT
age: 42919
etag: "1a26007f761e439db575fb80fb403031260aecf4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F658e1cdd-3e54-47dd-9724-ec65659721ea.jpeg
200 OK 6.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F658e1cdd-3e54-47dd-9724-ec65659721ea.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 14218a43c5e5bbce546735a780c8ccce
61676358cdbb2373bc644e66f8a84fbc8cc5daf6
905b1c30a2273aef69904f2eb1451c756fc1fdba02e86ea5c957629dd056aeda
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F658e1cdd-3e54-47dd-9724-ec65659721ea.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6390
x-amzn-requestid: b2681ff8-ab83-41e6-adef-3e6772c93c3f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZGFJ6Gc_oAMF44g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63324f0c-3dbf9f4e2047567b5abdbe74;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 01:17:00 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 8JXEBo_L_xKuKdeoOXEJ6FO7ZVsZVQzUmQFe7fYcxaHRQNEq1HWp6w==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 28390a4d24ed4fdccd685d99cd06cf4e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 01:37:50 GMT
age: 41056
etag: "61676358cdbb2373bc644e66f8a84fbc8cc5daf6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F171029d0-40d4-47b3-8936-8ba3b16b3212.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F171029d0-40d4-47b3-8936-8ba3b16b3212.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 347dca206e13a3b13953f0ab398310b4
be60bbc96c832ae385cc9ae5828bd32703011b21
f6da888a54a0c6c73466f2c2a72dd875514a39d81b760a6b0116b4dd56ef31dd
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F171029d0-40d4-47b3-8936-8ba3b16b3212.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10211
x-amzn-requestid: 3ea4ac84-2465-4bd1-8ade-863de3c9576e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YbfSuGoQoAMF9oQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632145aa-7843b82728ead9a053c689d1;Sampled=0
x-amzn-remapped-date: Wed, 14 Sep 2022 03:08:26 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: p1vYTqYjOmYHjVmJ8f6qyT_nLIsyXsr7ZI-DI7JBF9RJa0ZJNPiluA==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 e95ec8f1dc02e32f0cb9e113963ceb4e.cloudfront.net (CloudFront), 1.1 google
date: Mon, 26 Sep 2022 21:56:23 GMT
age: 54343
etag: "be60bbc96c832ae385cc9ae5828bd32703011b21"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash a241b8310f04cf188877764c5aac3e4e
1f5e9ba669a67db21743bee491adb0df57aeff9a
6635da7f680bdd822bc81440aeb9d0556b9c0562532ae60b0326770fcd118d5f
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Tue, 27 Sep 2022 13:02:05 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19022
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Mon, 26 Sep 2022 22:38:00 GMT
Expires: Tue, 27 Sep 2022 22:38:00 GMT
ETag: "1f5e9ba669a67db21743bee491adb0df57aeff9a"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
status.thawte.com/
200 OK 471 B IP
Hash b59d1394cd85140e9594a47a61b95c28
d794c3f1fdcbad9b9491b398b5f149105677ab09
d7d1be356e702c5c2a42857125574ca922d68e481a6935facf22b7f0cb207f8f
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1488
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 13:02:06 GMT
Last-Modified: Tue, 27 Sep 2022 12:37:18 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
no-go.kelkoogroup.net/ctl/go/sitesearchGo?.ts=1664281359907&.sig=.R2DZyO8oRcRYn_nDFr1Ve9HqIA-&affiliationId=96966625&comId=100507199&country=no&offerId=cbcd9558ad231c306cae7ced428ec1eb&searchId=1076100371022_1664281359886_27045692&service=36&tokenId=31b33936-7dd6-457b-8d70-a7a883a9d514&addedParams=true&custom1=v0304000130900f64aa3299994194a21a4519235eb353&custom2=72994674be9c4efea5dcc4fbc47224b8
200 OK 29 kB URL HTTP/1.1 no-go.kelkoogroup.net/ctl/go/sitesearchGo?.ts=1664281359907&.sig=.R2DZyO8oRcRYn_nDFr1Ve9HqIA-&affiliationId=96966625&comId=100507199&country=no&offerId=cbcd9558ad231c306cae7ced428ec1eb&searchId=1076100371022_1664281359886_27045692&service=36&tokenId=31b33936-7dd6-457b-8d70-a7a883a9d514&addedParams=true&custom1=v0304000130900f64aa3299994194a21a4519235eb353&custom2=72994674be9c4efea5dcc4fbc47224b8
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (12978)
Hash 0b489c370184036d2597508cdfef2430
93fc9ae2f298aa0c73e98457ef29c30e7437a331
66ec08c6d2a8da1322c35bc21729be8df510f40b4438537576f9c1c75fd8f9f6
GET /ctl/go/sitesearchGo?.ts=1664281359907&.sig=.R2DZyO8oRcRYn_nDFr1Ve9HqIA-&affiliationId=96966625&comId=100507199&country=no&offerId=cbcd9558ad231c306cae7ced428ec1eb&searchId=1076100371022_1664281359886_27045692&service=36&tokenId=31b33936-7dd6-457b-8d70-a7a883a9d514&addedParams=true&custom1=v0304000130900f64aa3299994194a21a4519235eb353&custom2=72994674be9c4efea5dcc4fbc47224b8 HTTP/1.1
Host: no-go.kelkoogroup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://r.srvtrck.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 27 Sep 2022 13:02:06 GMT
leadId: dc1-kls-prod-ls-03.prod.dc1.kelkoo.net_1664283726372_2345626
clickId: 107698147_1664283726365_4953091
country: no
Accept-CH: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory
X-DataDome: protected
Request-Time: PT0.018225S
X-Robots-Tag: noindex,nofollow
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: ALLOWALL
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: master-only
Content-Type: text/html; charset=UTF-8
Content-Length: 29136
Set-Cookie: datadome=.0P0HSDrgj1ZY6YswWTb~zU_7VtSpWDQY62lUpdlwNdtttDQsFx0tGgLmDDAzMsWw5UbrB-bETR.7ywOQHtcnfavE14_6A7i8YJkyjEbT50lcUzt8OIF1OEkRz_RKRKd; Max-Age=31536000; Expires=Wed, 27 Sep 2023 13:02:06 GMT; SameSite=Lax; Path=/; Domain=.kelkoogroup.net; Secure
kelkooID=a4c6293-1837f0a521d-1419af; Max-Age=31536000; Expires=Wed, 27 Sep 2023 13:02:06 GMT; SameSite=None; Path=/; Domain=kelkoogroup.net; Secure; HTTPOnly
P3P: CP="Anything"
ApacheTracking: localhost
Keep-Alive: timeout=40, max=95
Connection: Keep-Alive
no-go.kelkoogroup.net/assets/images/p.png?country=no&k=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&leadId=dc1-kls-prod-ls-03.prod.dc1.kelkoo.net_1664283726372_2345626&clickId=107698147_1664283726365_4953091
200 OK 68 B URL HTTP/1.1 no-go.kelkoogroup.net/assets/images/p.png?country=no&k=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&leadId=dc1-kls-prod-ls-03.prod.dc1.kelkoo.net_1664283726372_2345626&clickId=107698147_1664283726365_4953091
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced\012- data
Hash 91e42db1c66c0b276abf6234dc50b2eb
c1986af3c26609b8b7d8933f99c51c1a89e9ea6b
63ef318d96b5d0d0ceba6e04a4e622b1158335cdc67c49e27839132c6f655058
GET /assets/images/p.png?country=no&k=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&leadId=dc1-kls-prod-ls-03.prod.dc1.kelkoo.net_1664283726372_2345626&clickId=107698147_1664283726365_4953091 HTTP/1.1
Host: no-go.kelkoogroup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no-go.kelkoogroup.net/ctl/go/sitesearchGo?.ts=1664281359907&.sig=.R2DZyO8oRcRYn_nDFr1Ve9HqIA-&affiliationId=96966625&comId=100507199&country=no&offerId=cbcd9558ad231c306cae7ced428ec1eb&searchId=1076100371022_1664281359886_27045692&service=36&tokenId=31b33936-7dd6-457b-8d70-a7a883a9d514&addedParams=true&custom1=v0304000130900f64aa3299994194a21a4519235eb353&custom2=72994674be9c4efea5dcc4fbc47224b8
Connection: keep-alive
Cookie: datadome=.0P0HSDrgj1ZY6YswWTb~zU_7VtSpWDQY62lUpdlwNdtttDQsFx0tGgLmDDAzMsWw5UbrB-bETR.7ywOQHtcnfavE14_6A7i8YJkyjEbT50lcUzt8OIF1OEkRz_RKRKd; kelkooID=a4c6293-1837f0a521d-1419af
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 27 Sep 2022 13:02:06 GMT
Request-Time: PT0.001437S
X-Robots-Tag: noindex,nofollow
Cache-Control: private, must-revalidate
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: ALLOWALL
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: master-only
Content-Type: image/png
Content-Length: 68
P3P: CP="Anything"
ApacheTracking: localhost
Keep-Alive: timeout=40, max=98
Connection: Keep-Alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a2ac275c96053cccb0f7e6094fa86dc9
0bb506fa7e1c2cd47cf714deb0d6f69616b77387
5b299c389e50463dc79f9c1c72927e2f9144fc964fcdb8ff4577be8c59058e8b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5B299C389E50463DC79F9C1C72927E2F9144FC964FCDB8FF4577BE8C59058E8B"
Last-Modified: Tue, 27 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15295
Expires: Tue, 27 Sep 2022 17:17:01 GMT
Date: Tue, 27 Sep 2022 13:02:06 GMT
Connection: keep-alive
r.srvtrck.com/v2/go?t=8t4p2%3A4%2Fbo4gc.5eekeocreu4.6e9%2F2t%3D%2Fmotsut%26s5abc5G2%3F1t4%3D16a4984399903%26as6g0.923Z0O0o0c0Y%3D_mDtruV%269uqtAs%26afaididtao4I5%3D96368675-c7m8db150-0d1796c9u3t1y%3DnI%26efoe%26I3%3Debidr5s82d634c70_c8e9c3d824e61_b2s1a3c0I6%3D017d1h0r7e0%262e1c68241e578a662301529a%265e9vccc%3Dd6rtfkonod%3D3rbn3o3%26-9d765407%3D-Ido0%26a2a689a9dd1n%26idaelPfram-%3DIrHeec1sFon1nvR3R480y1D0R0%3Dfi4.a7299591124621as5.9o3her3e3ecis%2Fog2l7c9t4n7pbo9g4oflakdoc-fnc%2F7s2tbh&e=1&ai=bd065b411a6d47b3af6f3c41e249400a&sct=1&ct=1664283726139&cu=0f64aa3299994194a21a4519235eb353&ykuid=9d677fd7c4b34a11be5c9dfee710df2f&sc=1&cs=ab9cb14c7158b15e760c652edc61c765
200 OK 44 kB URL HTTP/2 r.srvtrck.com/v2/go?t=8t4p2%3A4%2Fbo4gc.5eekeocreu4.6e9%2F2t%3D%2Fmotsut%26s5abc5G2%3F1t4%3D16a4984399903%26as6g0.923Z0O0o0c0Y%3D_mDtruV%269uqtAs%26afaididtao4I5%3D96368675-c7m8db150-0d1796c9u3t1y%3DnI%26efoe%26I3%3Debidr5s82d634c70_c8e9c3d824e61_b2s1a3c0I6%3D017d1h0r7e0%262e1c68241e578a662301529a%265e9vccc%3Dd6rtfkonod%3D3rbn3o3%26-9d765407%3D-Ido0%26a2a689a9dd1n%26idaelPfram-%3DIrHeec1sFon1nvR3R480y1D0R0%3Dfi4.a7299591124621as5.9o3her3e3ecis%2Fog2l7c9t4n7pbo9g4oflakdoc-fnc%2F7s2tbh&e=1&ai=bd065b411a6d47b3af6f3c41e249400a&sct=1&ct=1664283726139&cu=0f64aa3299994194a21a4519235eb353&ykuid=9d677fd7c4b34a11be5c9dfee710df2f&sc=1&cs=ab9cb14c7158b15e760c652edc61c765
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (569)
Hash 792819b6a82f4dabfe3204db560fca44
d17c9f2705e01961720d47aacc31575c86233760
d29bcab839a945a54849b86ac9cb17222f6a5f47fb55bf206e2e83f4162c52a3
GET /v2/go?t=8t4p2%3A4%2Fbo4gc.5eekeocreu4.6e9%2F2t%3D%2Fmotsut%26s5abc5G2%3F1t4%3D16a4984399903%26as6g0.923Z0O0o0c0Y%3D_mDtruV%269uqtAs%26afaididtao4I5%3D96368675-c7m8db150-0d1796c9u3t1y%3DnI%26efoe%26I3%3Debidr5s82d634c70_c8e9c3d824e61_b2s1a3c0I6%3D017d1h0r7e0%262e1c68241e578a662301529a%265e9vccc%3Dd6rtfkonod%3D3rbn3o3%26-9d765407%3D-Ido0%26a2a689a9dd1n%26idaelPfram-%3DIrHeec1sFon1nvR3R480y1D0R0%3Dfi4.a7299591124621as5.9o3her3e3ecis%2Fog2l7c9t4n7pbo9g4oflakdoc-fnc%2F7s2tbh&e=1&ai=bd065b411a6d47b3af6f3c41e249400a&sct=1&ct=1664283726139&cu=0f64aa3299994194a21a4519235eb353&ykuid=9d677fd7c4b34a11be5c9dfee710df2f&sc=1&cs=ab9cb14c7158b15e760c652edc61c765 HTTP/1.1
Host: r.srvtrck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: ykuid=9d677fd7c4b34a11be5c9dfee710df2f
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 13:02:06 GMT
content-type: text/html;charset=UTF-8
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 75146e888af5b4f4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
no-go.kelkoogroup.net/fp?country=no&k=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&leadId=dc1-kls-prod-ls-03.prod.dc1.kelkoo.net_1664283726372_2345626&clickId=107698147_1664283726365_4953091
200 OK 0 B URL HTTP/1.1 no-go.kelkoogroup.net/fp?country=no&k=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&leadId=dc1-kls-prod-ls-03.prod.dc1.kelkoo.net_1664283726372_2345626&clickId=107698147_1664283726365_4953091
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /fp?country=no&k=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&leadId=dc1-kls-prod-ls-03.prod.dc1.kelkoo.net_1664283726372_2345626&clickId=107698147_1664283726365_4953091 HTTP/1.1
Host: no-go.kelkoogroup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no-go.kelkoogroup.net/ctl/go/sitesearchGo?.ts=1664281359907&.sig=.R2DZyO8oRcRYn_nDFr1Ve9HqIA-&affiliationId=96966625&comId=100507199&country=no&offerId=cbcd9558ad231c306cae7ced428ec1eb&searchId=1076100371022_1664281359886_27045692&service=36&tokenId=31b33936-7dd6-457b-8d70-a7a883a9d514&addedParams=true&custom1=v0304000130900f64aa3299994194a21a4519235eb353&custom2=72994674be9c4efea5dcc4fbc47224b8
Content-Type: text/plain;charset=utf-8
Content-Length: 520
Origin: https://no-go.kelkoogroup.net
Connection: keep-alive
Cookie: datadome=.0P0HSDrgj1ZY6YswWTb~zU_7VtSpWDQY62lUpdlwNdtttDQsFx0tGgLmDDAzMsWw5UbrB-bETR.7ywOQHtcnfavE14_6A7i8YJkyjEbT50lcUzt8OIF1OEkRz_RKRKd; kelkooID=a4c6293-1837f0a521d-1419af; _ga=GA1.2.1901376106.1664283724; _gid=GA1.2.56739220.1664283724
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 27 Sep 2022 13:02:06 GMT
Request-Time: PT0.00296S
X-Robots-Tag: noindex,nofollow
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: ALLOWALL
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: master-only
Content-Type: text/plain; charset=UTF-8
Content-Length: 0
P3P: CP="Anything"
ApacheTracking: localhost
Keep-Alive: timeout=40, max=95
Connection: Keep-Alive
no-go.kelkoogroup.net/favicon.ico
403 Forbidden 0 B URL HTTP/1.0 no-go.kelkoogroup.net/favicon.ico
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: no-go.kelkoogroup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no-go.kelkoogroup.net/ctl/go/sitesearchGo?.ts=1664281359907&.sig=.R2DZyO8oRcRYn_nDFr1Ve9HqIA-&affiliationId=96966625&comId=100507199&country=no&offerId=cbcd9558ad231c306cae7ced428ec1eb&searchId=1076100371022_1664281359886_27045692&service=36&tokenId=31b33936-7dd6-457b-8d70-a7a883a9d514&addedParams=true&custom1=v0304000130900f64aa3299994194a21a4519235eb353&custom2=72994674be9c4efea5dcc4fbc47224b8
Connection: keep-alive
Cookie: datadome=.0P0HSDrgj1ZY6YswWTb~zU_7VtSpWDQY62lUpdlwNdtttDQsFx0tGgLmDDAzMsWw5UbrB-bETR.7ywOQHtcnfavE14_6A7i8YJkyjEbT50lcUzt8OIF1OEkRz_RKRKd; kelkooID=a4c6293-1837f0a521d-1419af; _ga=GA1.2.1901376106.1664283724; _gid=GA1.2.56739220.1664283724
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.0 403 Forbidden
Server: BigIP
Connection: Keep-Alive
Content-Length: 0
no-go.kelkoogroup.net/redirect?country=no&k=612f7a9541cd6ea61eb554c0e4cff4373002ebc12b4ed464ea353546c4747339ef46f2df305e9facedd943ce93f9a8e063e7a2c1efc2768ad53f7aa078b6934694b53569f32199b05c62ec1811d45925c4e8626412980ad936b53a4f16569170a685ebd41fbf9c56edbea42a5ac3a92a8604cf1570771ebcf98f358650a6a8fdb0863a4273336dd0c1c4c26dbd21050bac1bc31dd37086b6d66a1028d6479c586700a3c8459ad86e9374de97cdda34ab14c0f4a781dbfb62c426803db99e5fdd7cabd5eeca88e9a482505103009fc071a331ba318fbe9fcd815dd637b51f1f7b83b1d2af9276230374aca67b289427fc04e9650de07749812aacd2253593099fb160f0d0e790f60662d87fd24cd6ae55&leadId=dc1-kls-prod-ls-03.prod.dc1.kelkoo.net_1664283726372_2345626&clickId=107698147_1664283726365_4953091&url=https%3A%2F%2Fwww.comfyballs.no%2Fbutikk%2Fdame%2Ft-skjorter%2Fcomfy-tee-black-cotton-woman%2F%3Futm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DComfyballs%2BComfy%2BTee%2BBlack%2BWoman%2BCotton&initiator=dd
303 See Other 0 B URL HTTP/1.1 no-go.kelkoogroup.net/redirect?country=no&k=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&leadId=dc1-kls-prod-ls-03.prod.dc1.kelkoo.net_1664283726372_2345626&clickId=107698147_1664283726365_4953091&url=https%3A%2F%2Fwww.comfyballs.no%2Fbutikk%2Fdame%2Ft-skjorter%2Fcomfy-tee-black-cotton-woman%2F%3Futm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DComfyballs%2BComfy%2BTee%2BBlack%2BWoman%2BCotton&initiator=dd
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /redirect?country=no&k=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&leadId=dc1-kls-prod-ls-03.prod.dc1.kelkoo.net_1664283726372_2345626&clickId=107698147_1664283726365_4953091&url=https%3A%2F%2Fwww.comfyballs.no%2Fbutikk%2Fdame%2Ft-skjorter%2Fcomfy-tee-black-cotton-woman%2F%3Futm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DComfyballs%2BComfy%2BTee%2BBlack%2BWoman%2BCotton&initiator=dd HTTP/1.1
Host: no-go.kelkoogroup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no-go.kelkoogroup.net/ctl/go/sitesearchGo?.ts=1664281359907&.sig=.R2DZyO8oRcRYn_nDFr1Ve9HqIA-&affiliationId=96966625&comId=100507199&country=no&offerId=cbcd9558ad231c306cae7ced428ec1eb&searchId=1076100371022_1664281359886_27045692&service=36&tokenId=31b33936-7dd6-457b-8d70-a7a883a9d514&addedParams=true&custom1=v0304000130900f64aa3299994194a21a4519235eb353&custom2=72994674be9c4efea5dcc4fbc47224b8
Connection: keep-alive
Cookie: datadome=.0P0HSDrgj1ZY6YswWTb~zU_7VtSpWDQY62lUpdlwNdtttDQsFx0tGgLmDDAzMsWw5UbrB-bETR.7ywOQHtcnfavE14_6A7i8YJkyjEbT50lcUzt8OIF1OEkRz_RKRKd; kelkooID=a4c6293-1837f0a521d-1419af; _ga=GA1.2.1901376106.1664283724; _gid=GA1.2.56739220.1664283724
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
HTTP/1.1 303 See Other
Date: Tue, 27 Sep 2022 13:02:06 GMT
leadId: dc1-kls-prod-ls-03.prod.dc1.kelkoo.net_1664283726372_2345626
clickId: 107698147_1664283726365_4953091
country: no
Location: https://www.comfyballs.no/butikk/dame/t-skjorter/comfy-tee-black-cotton-woman/?utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Comfyballs+Comfy+Tee+Black+Woman+Cotton
Accept-CH: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory
X-DataDome: protected
Request-Time: PT0.014365S
X-Robots-Tag: noindex,nofollow
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: ALLOWALL
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: master-only
Content-Length: 0
Set-Cookie: datadome=FnYP5h1AjXiG2fB0WSF~y1MxUScu6d-rvgMvJrljLaNhyjYf7l51AcD1f.K1A68gTu5tjlcAbdfS37KkMZOnx9dfoxBIUBfb.1ncYcg2si73VM3XDL7-jqxeLVye-K5; Max-Age=31536000; Expires=Wed, 27 Sep 2023 13:02:06 GMT; SameSite=Lax; Path=/; Domain=.kelkoogroup.net; Secure
P3P: CP="Anything"
ApacheTracking: localhost
Keep-Alive: timeout=40, max=97
Connection: Keep-Alive
Content-Type: text/plain
ocsp.sectigo.com/
200 OK 471 B IP
Hash 32bc0b4cf942030f756a36ea74fe8d9d
8d9e69327f9e2c4366cb6ac2e6b04da967f37fc8
dd39332219bb1eff0393be78c4a53995e91ba92ee7a1c4bd858516e1f86f1621
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 27 Sep 2022 13:02:06 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 27 Sep 2022 08:57:38 GMT
Expires: Tue, 04 Oct 2022 08:57:37 GMT
Etag: "8d9e69327f9e2c4366cb6ac2e6b04da967f37fc8"
Cache-Control: max-age=589530,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 75146e8bec90b521-OSL
www.comfyballs.no/butikk/dame/t-skjorter/comfy-tee-black-cotton-woman/?utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Comfyballs+Comfy+Tee+Black+Woman+Cotton
200 OK 17 kB URL HTTP/2 www.comfyballs.no/butikk/dame/t-skjorter/comfy-tee-black-cotton-woman/?utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Comfyballs+Comfy+Tee+Black+Woman+Cotton
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (59102)
Hash b779d9488416665127d4bc8f44c542f4
39f1372c67068a44d068ab45b482ef1b6b6ee572
39b5b400d8b0e3b1fe3f5425dfd05ae041d5b9ea653eb312cef41ba193f799c1
GET /butikk/dame/t-skjorter/comfy-tee-black-cotton-woman/?utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Comfyballs+Comfy+Tee+Black+Woman+Cotton HTTP/1.1
Host: www.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no-go.kelkoogroup.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 27 Sep 2022 13:02:05 GMT
content-type: text/html
content-length: 16741
last-modified: Tue, 27 Sep 2022 12:01:39 GMT
etag: "6332e623-4165"
expires: Wed, 27 Sep 2023 13:02:05 GMT
cache-control: max-age=31536000
content-encoding: gzip
vary: Accept-Encoding, Cookie
x-rocket-nginx-bypass: Yes
strict-transport-security: max-age=31536000; includeSubDomains
accept-ranges: bytes
X-Firefox-Spdy: h2
www.comfyballs.no/wp-content/uploads/sites/9/2021/09/19-11_front-768x768.jpg
200 OK 21 kB URL HTTP/2 www.comfyballs.no/wp-content/uploads/sites/9/2021/09/19-11_front-768x768.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 768x768, components 3\012- data
Hash 53053c750e1d46e35158ddb87e8395cc
d9f9eb79f370a8342da0097fb48e1a2756f7b842
24673535bc045dc2f15088a8720cbf147e78b0a29bd6f465cac96f31aad4f242
GET /wp-content/uploads/sites/9/2021/09/19-11_front-768x768.jpg HTTP/1.1
Host: www.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/butikk/dame/t-skjorter/comfy-tee-black-cotton-woman/?utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Comfyballs+Comfy+Tee+Black+Woman+Cotton
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 27 Sep 2022 13:02:06 GMT
content-type: image/jpeg
content-length: 21070
last-modified: Wed, 15 Sep 2021 13:31:37 GMT
etag: "6141f5b9-524e"
expires: Wed, 27 Sep 2023 13:02:06 GMT
cache-control: max-age=31536000
x_avif_sp_miss: /home/wpmu/comfyballs/wp-content/uploads/sites/9/2021/09/19-11_front-768x768.avif
accept-ranges: bytes
X-Firefox-Spdy: h2
www.comfyballs.no/wp-content/uploads/sites/9/2021/09/19-11_om_cf-768x768.jpg
200 OK 132 kB URL HTTP/2 www.comfyballs.no/wp-content/uploads/sites/9/2021/09/19-11_om_cf-768x768.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 768x768, components 3\012- data
Size 132 kB (132468 bytes)
Hash eeb17eee02a30f8d22e81171e551d1f5
7a2e82629ccbc793fdc222139977e6e5ec828dd4
c2cb9c449c57162ace624cb50ffa93f028fa5779f6e09320083a6c6453661020
GET /wp-content/uploads/sites/9/2021/09/19-11_om_cf-768x768.jpg HTTP/1.1
Host: www.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/butikk/dame/t-skjorter/comfy-tee-black-cotton-woman/?utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Comfyballs+Comfy+Tee+Black+Woman+Cotton
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 27 Sep 2022 13:02:06 GMT
content-type: image/jpeg
content-length: 132468
last-modified: Wed, 15 Sep 2021 13:31:28 GMT
etag: "6141f5b0-20574"
expires: Wed, 27 Sep 2023 13:02:06 GMT
cache-control: max-age=31536000
x_avif_sp_miss: /home/wpmu/comfyballs/wp-content/uploads/sites/9/2021/09/19-11_om_cf-768x768.avif
accept-ranges: bytes
X-Firefox-Spdy: h2
www.comfyballs.no/wp-content/uploads/sites/9/2021/09/19-11_om_full-768x768.jpg
200 OK 35 kB URL HTTP/2 www.comfyballs.no/wp-content/uploads/sites/9/2021/09/19-11_om_full-768x768.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 768x768, components 3\012- data
Hash ef59abc5cdb9f0ec315d6fdd644a8f75
794c158afa93fbf9ebbd66c7340fcf445f014a55
565555f73fcf65d60efbd37a07cbbf89f161c6e6c967a50200f8fda6ff237e97
GET /wp-content/uploads/sites/9/2021/09/19-11_om_full-768x768.jpg HTTP/1.1
Host: www.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/butikk/dame/t-skjorter/comfy-tee-black-cotton-woman/?utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Comfyballs+Comfy+Tee+Black+Woman+Cotton
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 27 Sep 2022 13:02:06 GMT
content-type: image/jpeg
content-length: 35105
last-modified: Wed, 15 Sep 2021 13:32:34 GMT
etag: "6141f5f2-8921"
expires: Wed, 27 Sep 2023 13:02:06 GMT
cache-control: max-age=31536000
x_avif_sp_miss: /home/wpmu/comfyballs/wp-content/uploads/sites/9/2021/09/19-11_om_full-768x768.avif
accept-ranges: bytes
X-Firefox-Spdy: h2
use.typekit.net/uhm6mkr.css?ver=5.8
200 OK 893 B URL HTTP/2 use.typekit.net/uhm6mkr.css?ver=5.8
IP
ASN #20940 Akamai International B.V.
File type Unicode text, UTF-8 text, with very long lines (516)
Hash aa0a45c0f45f48ee46d46109b0940f7c
83ad291337b0bf67a86104f316f6ba4e26996c12
6f3dcfe663d33d5b898f87393ba9799204f5be87577f62398f3b882abf1f9ed5
GET /uhm6mkr.css?ver=5.8 HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: text/css;charset=utf-8
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains;
cache-control: private, max-age=600, stale-while-revalidate=604800
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
content-encoding: gzip
content-length: 893
date: Tue, 27 Sep 2022 13:02:07 GMT
X-Firefox-Spdy: h2
static.klaviyo.com/onsite/js/klaviyo.js?company_id=XEup8G&ver=1.0.0
200 OK 919 B URL HTTP/2 static.klaviyo.com/onsite/js/klaviyo.js?company_id=XEup8G&ver=1.0.0
IP
File type ASCII text, with very long lines (2028)
Hash 0e8bb87b382ccd86693fa183d0e58085
24b0e0ac6375929fa6012c769446c8ce2f08d379
37f8eb2cca710723b769e4ad41b227bcca4045a3f1240052d06508d1b330407c
GET /onsite/js/klaviyo.js?company_id=XEup8G&ver=1.0.0 HTTP/1.1
Host: static.klaviyo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-headers:
access-control-allow-methods: GET
access-control-allow-origin: *
access-control-max-age: 86400
allow: OPTIONS, GET
cache-control: max-age=1, stale-while-revalidate=10800
content-encoding: gzip
content-type: application/javascript
etag: W/"315dbfa112f5db75f29ddbed1c18a2be"
server: nginx
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 27 Sep 2022 13:02:07 GMT
age: 1410
x-served-by: cache-lga21932-LGA, cache-bma1676-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 1
x-timer: S1664283727.070175,VS0,VE1
vary: Accept-Encoding
content-length: 919
X-Firefox-Spdy: h2
www.comfyballs.no/wp-content/cache/busting/9/gtm-8f191dc9121b854935e1150a6ff8f88d.js
200 OK 42 kB URL HTTP/2 www.comfyballs.no/wp-content/cache/busting/9/gtm-8f191dc9121b854935e1150a6ff8f88d.js
IP
Hash fdeb7f04686a802aafd3fe20d2c8dbd4
f23d1f2b63e4120220c18519d84671d59c2e2cad
0c3bc55920c30fe904733cc7ef85caf0e172dde35ba78c7d6a75da31136cfd0a
GET /wp-content/cache/busting/9/gtm-8f191dc9121b854935e1150a6ff8f88d.js HTTP/1.1
Host: www.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/butikk/dame/t-skjorter/comfy-tee-black-cotton-woman/?utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Comfyballs+Comfy+Tee+Black+Woman+Cotton
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 27 Sep 2022 13:02:06 GMT
content-type: application/javascript
last-modified: Tue, 27 Sep 2022 01:32:30 GMT
vary: Accept-Encoding
etag: W/"633252ae-1a899"
expires: Wed, 27 Sep 2023 13:02:06 GMT
cache-control: max-age=31536000
x-rocket-nginx-bypass: No
content-encoding: gzip
X-Firefox-Spdy: h2
staticw2.yotpo.com/YD4eGk9s4jP1kEspn9NQS7IIWFpY8ABJLQ5nYf1U/widget.js
200 OK 108 kB URL HTTP/2 staticw2.yotpo.com/YD4eGk9s4jP1kEspn9NQS7IIWFpY8ABJLQ5nYf1U/widget.js
IP
File type ASCII text, with very long lines (44057)
Size 108 kB (108082 bytes)
Hash d4d4fb343b5fb52fcfbb66a554d3f1b2
b016b25516b5ad897f0e8fc8ae0d5e994c301b00
63db14dac51a0451dbf95ae54467b5fc5ebd27a6a49602fe79c3497de4c5d700
GET /YD4eGk9s4jP1kEspn9NQS7IIWFpY8ABJLQ5nYf1U/widget.js HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"d4d4fb343b5fb52fcfbb66a554d3f1b2"
x-request-id: 783fd143378c38d685280e3a03750e18
x-runtime: 0.044421
content-length: 108082
cache-control: public, max-age=6115
date: Tue, 27 Sep 2022 13:02:07 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=1
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: GET,POST
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c939f97c8bcbfea356e92036803714bc
608c795e7c4fb943a4db49a4e4533c41ea717023
b05b38c78c15c259720bfc6783ac65ab60ceb1e6037b45b08113f183554f08cb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 13:02:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.comfyballs.no/wp-content/cache/busting/9/wp-content/themes/proto/js/jquery.countdown.min-1624953258.js
200 OK 2.4 kB URL HTTP/2 www.comfyballs.no/wp-content/cache/busting/9/wp-content/themes/proto/js/jquery.countdown.min-1624953258.js
IP
Hash c8a010fa51089fa9fab5ddb2ecb0a547
ad5e7f87843321edc20bd9ebf437794128f3778e
577144f1f2168cc56d333de5e3e845b263993ffe45e3cca7dfb44dc743c40236
GET /wp-content/cache/busting/9/wp-content/themes/proto/js/jquery.countdown.min-1624953258.js HTTP/1.1
Host: www.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/butikk/dame/t-skjorter/comfy-tee-black-cotton-woman/?utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Comfyballs+Comfy+Tee+Black+Woman+Cotton
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 27 Sep 2022 13:02:06 GMT
content-type: application/javascript
last-modified: Tue, 27 Sep 2022 01:32:30 GMT
vary: Accept-Encoding
etag: W/"633252ae-14db"
expires: Wed, 27 Sep 2023 13:02:06 GMT
cache-control: max-age=31536000
x-rocket-nginx-bypass: No
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c939f97c8bcbfea356e92036803714bc
608c795e7c4fb943a4db49a4e4533c41ea717023
b05b38c78c15c259720bfc6783ac65ab60ceb1e6037b45b08113f183554f08cb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 13:02:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.comfyballs.no/wp-content/themes/proto/img/icons/stars/full.png
200 OK 3.0 kB URL HTTP/2 www.comfyballs.no/wp-content/themes/proto/img/icons/stars/full.png
IP
File type PNG image data, 82 x 80, 8-bit colormap, non-interlaced\012- data
Hash 69ebde80a25085053db6504864e78e0f
8d948cb45d2e89e35d8317273dba28497845b1aa
8adb9ffa87fa9d986256a95a5efcc6a48ecbba72a0c37d18369187c8bf4daab0
GET /wp-content/themes/proto/img/icons/stars/full.png HTTP/1.1
Host: www.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/wp-content/cache/min/9/bad08918caf18192e14dc3a15dfd4403.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 27 Sep 2022 13:02:06 GMT
content-type: image/png
content-length: 3048
last-modified: Tue, 29 Jun 2021 07:54:18 GMT
etag: "60dad1aa-be8"
expires: Wed, 27 Sep 2023 13:02:06 GMT
cache-control: max-age=31536000
x_avif_sp_miss: /home/wpmu/comfyballs/wp-content/themes/proto/img/icons/stars/full.avif
accept-ranges: bytes
X-Firefox-Spdy: h2
www.comfyballs.no/wp-content/cache/min/9/wp-content/plugins/nhg-filter-products/assets/js/product-filter-e6f4ce4a36016b5893b0241f97a2a9ea.js
200 OK 5.8 kB URL HTTP/2 www.comfyballs.no/wp-content/cache/min/9/wp-content/plugins/nhg-filter-products/assets/js/product-filter-e6f4ce4a36016b5893b0241f97a2a9ea.js
IP
Hash 6a45b77e8aa6780d69d7a72bc8ae7f5e
83fc886b3bbeb3bbd63bb194061edf040d5e2298
ee9cfa7fd97e228ab198e9755a76f3aae244c219c9c21d7c17c9a166ff869348
GET /wp-content/cache/min/9/wp-content/plugins/nhg-filter-products/assets/js/product-filter-e6f4ce4a36016b5893b0241f97a2a9ea.js HTTP/1.1
Host: www.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/butikk/dame/t-skjorter/comfy-tee-black-cotton-woman/?utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Comfyballs+Comfy+Tee+Black+Woman+Cotton
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 27 Sep 2022 13:02:06 GMT
content-type: application/javascript
last-modified: Tue, 27 Sep 2022 01:32:30 GMT
vary: Accept-Encoding
etag: W/"633252ae-21f9"
expires: Wed, 27 Sep 2023 13:02:06 GMT
cache-control: max-age=31536000
x-rocket-nginx-bypass: No
content-encoding: gzip
X-Firefox-Spdy: h2
use.typekit.net/af/efe4a5/00000000000000007735e609/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n4&v=3
200 OK 30 kB URL HTTP/2 use.typekit.net/af/efe4a5/00000000000000007735e609/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n4&v=3
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format (Version 2), CFF, length 29820, version 1.0\012- data
Hash 22f210f896c47ca032dee5d32edfee1d
18a0f2b6d98fe442047fa2b232705b1587b407cd
c4d04d2b6a041dde11c80d8332f983a58c1031c663ab4f42230899cb82adf4a7
GET /af/efe4a5/00000000000000007735e609/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n4&v=3 HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.comfyballs.no
Connection: keep-alive
Referer: https://use.typekit.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/font-woff2
content-length: 29820
etag: "6aeae62b893768150f3460329dc461358e8ab2f5"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Tue, 27 Sep 2022 13:02:07 GMT
X-Firefox-Spdy: h2
use.typekit.net/af/2555e1/00000000000000007735e603/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n7&v=3
200 OK 31 kB URL HTTP/2 use.typekit.net/af/2555e1/00000000000000007735e603/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n7&v=3
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format (Version 2), CFF, length 30704, version 1.0\012- data
Hash cbae49bae5cbc8469c1a53a6bfbd5b15
a9fd98171826997827d0d02dab92318be2d7d639
a33128c94dd3c425bc3f4a9ba389a1f3d7a75233e8cb788ea80f8f43a3d68423
GET /af/2555e1/00000000000000007735e603/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n7&v=3 HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.comfyballs.no
Connection: keep-alive
Referer: https://use.typekit.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/font-woff2
content-length: 30704
etag: "09d1a94c81035c62708e0a513ee76d7886d15a25"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Tue, 27 Sep 2022 13:02:07 GMT
X-Firefox-Spdy: h2
www.comfyballs.no/wp-content/cache/busting/9/wp/wp-includes/js/dist/vendor/regenerator-runtime.min-1638874947.js
200 OK 11 kB URL HTTP/2 www.comfyballs.no/wp-content/cache/busting/9/wp/wp-includes/js/dist/vendor/regenerator-runtime.min-1638874947.js
IP
File type ASCII text, with very long lines (31722), with no line terminators
Hash 51bf50b850e07bf61e2991dca9f976dd
dd778813e8b27cd145cba491260e3bda15fe7100
f2bbcfde0cc6eb9b2f047cf4160114b4cb10e86e7916ea2be723261389bf034b
GET /wp-content/cache/busting/9/wp/wp-includes/js/dist/vendor/regenerator-runtime.min-1638874947.js HTTP/1.1
Host: www.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/butikk/dame/t-skjorter/comfy-tee-black-cotton-woman/?utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Comfyballs+Comfy+Tee+Black+Woman+Cotton
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 27 Sep 2022 13:02:06 GMT
content-type: application/javascript
last-modified: Tue, 27 Sep 2022 01:32:30 GMT
vary: Accept-Encoding
etag: W/"633252ae-1906"
expires: Wed, 27 Sep 2023 13:02:06 GMT
cache-control: max-age=31536000
x-rocket-nginx-bypass: No
content-encoding: gzip
X-Firefox-Spdy: h2
www.comfyballs.no/wp-content/cache/busting/9/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart-variation.min-1638874946.js
200 OK 42 kB URL HTTP/2 www.comfyballs.no/wp-content/cache/busting/9/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart-variation.min-1638874946.js
IP
File type ASCII text, with very long lines (51841)
Hash dbe1a6bf42b01aa0815bf75423dd9fd0
d32bfe75c204099fbdc92a1df52698c64be20404
d138e535996662886b08c1d9b65fbcb454c1146a06d8daed7b88d45984e8f236
GET /wp-content/cache/busting/9/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart-variation.min-1638874946.js HTTP/1.1
Host: www.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/butikk/dame/t-skjorter/comfy-tee-black-cotton-woman/?utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Comfyballs+Comfy+Tee+Black+Woman+Cotton
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 27 Sep 2022 13:02:06 GMT
content-type: application/javascript
last-modified: Tue, 27 Sep 2022 01:32:51 GMT
vary: Accept-Encoding
etag: W/"633252c3-351b"
expires: Wed, 27 Sep 2023 13:02:06 GMT
cache-control: max-age=31536000
x-rocket-nginx-bypass: No
content-encoding: gzip
X-Firefox-Spdy: h2
static.klaviyo.com/onsite/js/runtime.2888bf8d92dced7d992b.js?cb=1
200 OK 8.1 kB URL HTTP/2 static.klaviyo.com/onsite/js/runtime.2888bf8d92dced7d992b.js?cb=1
IP
File type ASCII text, with very long lines (19473), with no line terminators
Hash 1ea046024d640d1fcfc672352ab15f29
dd7a6844190f7ddc9fd7f1d85f58c004d223ce35
d81d47283c5e689f2dbeb77684dcc4dd03840dfbb417e37a4d553519320be212
GET /onsite/js/runtime.2888bf8d92dced7d992b.js?cb=1 HTTP/1.1
Host: static.klaviyo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.comfyballs.no
Connection: keep-alive
Referer: https://www.comfyballs.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: Q2Jf+teWuwSV3vU3OCDnpvcOL6OVngIxoB9XqGYe7pSEDVFFmnNgCU17s0+YMgeH5WcihxaT0SM=
x-amz-request-id: 9E3EBX78Q5K9YJY0
last-modified: Mon, 19 Sep 2022 20:02:28 GMT
etag: "291533f5634b65eae20f9422baa29d9a"
cache-control: max-age=2592000,stale-while-revalidate=10800
x-amz-meta-surrogate-control: max-age=31536000
x-amz-meta-surrogate-key: fender-asset
x-amz-version-id: Xxt9HjAXzYk7aCvjcj0Rr49LqJcS8fvM
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
access-control-allow-origin: *
accept-ranges: bytes
date: Tue, 27 Sep 2022 13:02:07 GMT
age: 2426
x-served-by: cache-lga21976-LGA, cache-bma1668-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 597
vary: Accept-Encoding
content-length: 8075
X-Firefox-Spdy: h2
www.comfyballs.no/wp-content/cache/busting/9/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min-1638874946.js
200 OK 14 kB URL HTTP/2 www.comfyballs.no/wp-content/cache/busting/9/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min-1638874946.js
IP
File type Unicode text, UTF-8 text, with very long lines (36446), with no line terminators
Hash b3d3b844420218140e4264314b429cb9
a48881fc27173a45208ebfd2362c1fad199cdb11
6211640355f53578af2b1f6a3a87f31412a39994c13f404b339b380df17e32be
GET /wp-content/cache/busting/9/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min-1638874946.js HTTP/1.1
Host: www.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/butikk/dame/t-skjorter/comfy-tee-black-cotton-woman/?utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Comfyballs+Comfy+Tee+Black+Woman+Cotton
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 27 Sep 2022 13:02:06 GMT
content-type: application/javascript
last-modified: Tue, 27 Sep 2022 01:32:30 GMT
vary: Accept-Encoding
etag: W/"633252ae-85b"
expires: Wed, 27 Sep 2023 13:02:06 GMT
cache-control: max-age=31536000
x-rocket-nginx-bypass: No
content-encoding: gzip
X-Firefox-Spdy: h2
static-tracking.klaviyo.com/onsite/js/static.444020cd426b0bea12c1.js?cb=1
200 OK 5.2 kB URL HTTP/2 static-tracking.klaviyo.com/onsite/js/static.444020cd426b0bea12c1.js?cb=1
IP
File type ASCII text, with very long lines (12428), with no line terminators
Hash 8a51385137b20bdfcace3e12a6e9981f
b291ae4859ec56be11f24617f556db2be626d1f6
60157d9b98c625ee91011c3c06ee76809c5ac9225554e26a891462e8ed39c77d
GET /onsite/js/static.444020cd426b0bea12c1.js?cb=1 HTTP/1.1
Host: static-tracking.klaviyo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.comfyballs.no
Connection: keep-alive
Referer: https://www.comfyballs.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: NVmB6Kd0YFo9iCmGx+yu+eOqiC5jqbz25AtCBJn8Vs1Hbf0QGGXROARgd05prVYM5kfCwyQJ2xk=
x-amz-request-id: EYA39404SA8WM76Q
last-modified: Thu, 18 Aug 2022 15:05:14 GMT
etag: "1774dcfd43ae7a477e554d4266bbaa8e"
cache-control: max-age=2592000,stale-while-revalidate=10800
x-amz-meta-surrogate-control: max-age=31536000
x-amz-meta-surrogate-key: fender-asset
x-amz-version-id: ep5t_kHI_qKbZWWytxIKzh5j3YAjdqHx
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
access-control-allow-origin: *
accept-ranges: bytes
date: Tue, 27 Sep 2022 13:02:07 GMT
age: 2426
x-served-by: cache-lga21968-LGA, cache-bma1680-BMA
x-cache: HIT, HIT
x-cache-hits: 57, 551
vary: Accept-Encoding
content-length: 5219
X-Firefox-Spdy: h2
static-tracking.klaviyo.com/onsite/js/fender_analytics.9bd929e66a2449a7cdc1.js?cb=1
200 OK 11 kB URL HTTP/2 static-tracking.klaviyo.com/onsite/js/fender_analytics.9bd929e66a2449a7cdc1.js?cb=1
IP
File type ASCII text, with very long lines (27584), with no line terminators
Hash 0f29e4f1e3f2addc67e4852883ecf694
5c059b2980e9c5356fdc0b2c727a3a86c320c5a9
2949ec27afb5fb53e7bba607529a9529a8c75a4d71dcbea074b88dd679f1b8c9
GET /onsite/js/fender_analytics.9bd929e66a2449a7cdc1.js?cb=1 HTTP/1.1
Host: static-tracking.klaviyo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.comfyballs.no
Connection: keep-alive
Referer: https://www.comfyballs.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 36f/ps//h2tsvtsRUgp6Mk8LzgnmM0HKjWkeHSxHbhGWZ7W/4R77UIFLmwMJGAxxLaUgzekp6vo=
x-amz-request-id: V3VGV2WY5XZ8QSWT
last-modified: Fri, 26 Aug 2022 20:33:40 GMT
etag: "d48fad1b3f959b474b934ed39d9ba542"
cache-control: max-age=2592000,stale-while-revalidate=10800
x-amz-meta-surrogate-control: max-age=31536000
x-amz-meta-surrogate-key: fender-asset
x-amz-version-id: DxlKU8PAW5Z2L0V.1wRK5LqPR2sBWhOg
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
access-control-allow-origin: *
accept-ranges: bytes
date: Tue, 27 Sep 2022 13:02:07 GMT
age: 2426
x-served-by: cache-lga21973-LGA, cache-bma1680-BMA
x-cache: HIT, HIT
x-cache-hits: 5, 580
vary: Accept-Encoding
content-length: 10605
X-Firefox-Spdy: h2
www.comfyballs.no/wp-content/uploads/sites/9/2021/09/19-11_front-450x450.jpg
200 OK 7.8 kB URL HTTP/2 www.comfyballs.no/wp-content/uploads/sites/9/2021/09/19-11_front-450x450.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 450x450, components 3\012- data
Hash ef5d8f3bf4959321f17408d524438c75
038f8aa82579d4ee8294d54c95813a7a79cbb6b9
6903f709086cd749faf28629895bad6d3249fb047df5c4d1717000241a250906
GET /wp-content/uploads/sites/9/2021/09/19-11_front-450x450.jpg HTTP/1.1
Host: www.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/butikk/dame/t-skjorter/comfy-tee-black-cotton-woman/?utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Comfyballs+Comfy+Tee+Black+Woman+Cotton
Cookie: _sp_id.397d=5631bb0933249ee6.1664283725.1.1664283725.1664283725; _sp_ses.397d=*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 27 Sep 2022 13:02:06 GMT
content-type: image/jpeg
content-length: 7788
last-modified: Wed, 15 Sep 2021 13:31:37 GMT
etag: "6141f5b9-1e6c"
expires: Wed, 27 Sep 2023 13:02:06 GMT
cache-control: max-age=31536000
x_avif_sp_miss: /home/wpmu/comfyballs/wp-content/uploads/sites/9/2021/09/19-11_front-450x450.avif
accept-ranges: bytes
X-Firefox-Spdy: h2
www.comfyballs.no/wp-content/cache/min/9/wp-content/plugins/woo-vipps/js/vipps-887688048220cd1b5c3a93c70e062464.js
200 OK 6.5 kB URL HTTP/2 www.comfyballs.no/wp-content/cache/min/9/wp-content/plugins/woo-vipps/js/vipps-887688048220cd1b5c3a93c70e062464.js
IP
Hash 1107bcc6c829c083d04921d52d5bea0a
77562adc25051642df11110847a0bb3b01857844
d30b52e43b4c710588992bff11cdc3e67817e1c392a6a7df341668c1b6132c71
GET /wp-content/cache/min/9/wp-content/plugins/woo-vipps/js/vipps-887688048220cd1b5c3a93c70e062464.js HTTP/1.1
Host: www.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/butikk/dame/t-skjorter/comfy-tee-black-cotton-woman/?utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Comfyballs+Comfy+Tee+Black+Woman+Cotton
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 27 Sep 2022 13:02:06 GMT
content-type: application/javascript
last-modified: Tue, 27 Sep 2022 01:32:30 GMT
vary: Accept-Encoding
etag: W/"633252ae-180e"
expires: Wed, 27 Sep 2023 13:02:06 GMT
cache-control: max-age=31536000
x-rocket-nginx-bypass: No
content-encoding: gzip
X-Firefox-Spdy: h2
www.comfyballs.no/wp-content/uploads/sites/9/2022/07/background-newsletter-2.jpg
200 OK 25 kB URL HTTP/2 www.comfyballs.no/wp-content/uploads/sites/9/2022/07/background-newsletter-2.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1080, components 3\012- data
Hash ce138ae6bb824737479a53196fb0f05b
5c0c1bd384c784e72629419de6b1263e1530332c
569afc0e266238d3f9c5430e6f57a352a5102a2b5637a3a75bea106af7b9e582
GET /wp-content/uploads/sites/9/2022/07/background-newsletter-2.jpg HTTP/1.1
Host: www.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/butikk/dame/t-skjorter/comfy-tee-black-cotton-woman/?utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Comfyballs+Comfy+Tee+Black+Woman+Cotton
Cookie: _sp_id.397d=5631bb0933249ee6.1664283725.1.1664283725.1664283725; _sp_ses.397d=*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 27 Sep 2022 13:02:06 GMT
content-type: image/jpeg
content-length: 25431
last-modified: Thu, 14 Jul 2022 07:27:12 GMT
etag: "62cfc550-6357"
expires: Wed, 27 Sep 2023 13:02:06 GMT
cache-control: max-age=31536000
x_avif_sp_miss: /home/wpmu/comfyballs/wp-content/uploads/sites/9/2022/07/background-newsletter-2.avif
accept-ranges: bytes
X-Firefox-Spdy: h2
www.comfyballs.no/wp-content/themes/proto/img/logoer/visa.svg
200 OK 2.1 kB URL HTTP/2 www.comfyballs.no/wp-content/themes/proto/img/logoer/visa.svg
IP
Hash eeabab4f4b3c531396b427cb3c78b14a
abe323a9d3ff4e778fb868321a691b9205b5cbfb
002d4c8a2c9c8abfdebae9a9200615263e787efb6de2042e78e6c66db3ff530d
GET /wp-content/themes/proto/img/logoer/visa.svg HTTP/1.1
Host: www.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/butikk/dame/t-skjorter/comfy-tee-black-cotton-woman/?utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Comfyballs+Comfy+Tee+Black+Woman+Cotton
Cookie: _sp_id.397d=5631bb0933249ee6.1664283725.1.1664283725.1664283725; _sp_ses.397d=*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 27 Sep 2022 13:02:06 GMT
content-type: image/svg+xml
last-modified: Tue, 29 Jun 2021 07:54:18 GMT
vary: Accept-Encoding
etag: W/"60dad1aa-d80"
expires: Wed, 27 Sep 2023 13:02:06 GMT
cache-control: max-age=31536000
x-rocket-nginx-bypass: No
content-encoding: gzip
X-Firefox-Spdy: h2
www.comfyballs.no/wp-content/cache/busting/9/wp-content/plugins/nhg-js-cookie-analytics/js/url.min-1606206701.js
200 OK 42 kB URL HTTP/2 www.comfyballs.no/wp-content/cache/busting/9/wp-content/plugins/nhg-js-cookie-analytics/js/url.min-1606206701.js
IP
Hash 713f9e0c0bbdcb3d4fc71eb1962ed194
0dc08ec1485c80bc9d9121eb18523985c8169b76
cdde4e92a3154e54fc0e3d5da8b5f0800d903ff7f07a21d00bfec7f3befddba9
GET /wp-content/cache/busting/9/wp-content/plugins/nhg-js-cookie-analytics/js/url.min-1606206701.js HTTP/1.1
Host: www.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/butikk/dame/t-skjorter/comfy-tee-black-cotton-woman/?utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Comfyballs+Comfy+Tee+Black+Woman+Cotton
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 27 Sep 2022 13:02:06 GMT
content-type: application/javascript
last-modified: Tue, 27 Sep 2022 01:32:30 GMT
vary: Accept-Encoding
etag: W/"633252ae-793"
expires: Wed, 27 Sep 2023 13:02:06 GMT
cache-control: max-age=31536000
x-rocket-nginx-bypass: No
content-encoding: gzip
X-Firefox-Spdy: h2
www.comfyballs.no/wp-content/uploads/sites/9/2020/05/cropped-logo-comfyballs-favicon-32x32.png
200 OK 746 B URL HTTP/2 www.comfyballs.no/wp-content/uploads/sites/9/2020/05/cropped-logo-comfyballs-favicon-32x32.png
IP
File type PNG image data, 32 x 32, 8-bit colormap, non-interlaced\012- data
Hash 36974b95aed214e862b9ae49488586fc
2e2ecdc564f555c457647f81f6befe71ed9d4ca8
1d95e3e60b2bbf6e2fe1c40b70860c5b839c6ebee93dc324de9bc06ac84fa459
GET /wp-content/uploads/sites/9/2020/05/cropped-logo-comfyballs-favicon-32x32.png HTTP/1.1
Host: www.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/butikk/dame/t-skjorter/comfy-tee-black-cotton-woman/?utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Comfyballs+Comfy+Tee+Black+Woman+Cotton
Cookie: _sp_id.397d=5631bb0933249ee6.1664283725.1.1664283725.1664283725; _sp_ses.397d=*; __kla_id=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
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 27 Sep 2022 13:02:06 GMT
content-type: image/png
content-length: 746
last-modified: Wed, 13 May 2020 09:15:29 GMT
etag: "5ebbbab1-2ea"
expires: Wed, 27 Sep 2023 13:02:06 GMT
cache-control: max-age=31536000
x_avif_sp_miss: /home/wpmu/comfyballs/wp-content/uploads/sites/9/2020/05/cropped-logo-comfyballs-favicon-32x32.avif
accept-ranges: bytes
X-Firefox-Spdy: h2
www.comfyballs.no/wp-content/cache/min/9/wp-content/themes/proto/js/proto-b352020c79db7e1c6125c594c4a00f11.js
200 OK 6.4 kB URL HTTP/2 www.comfyballs.no/wp-content/cache/min/9/wp-content/themes/proto/js/proto-b352020c79db7e1c6125c594c4a00f11.js
IP
File type Unicode text, UTF-8 text, with very long lines (27171)
Hash 3484dd39cd71f9a29abca1de19168908
735402118389491cf5bf6dd538657edb11d46dd1
ce188e664607cab8706f85d246ddb97a53d135d84d4cf8a2cd28c6ee7a9cb58f
GET /wp-content/cache/min/9/wp-content/themes/proto/js/proto-b352020c79db7e1c6125c594c4a00f11.js HTTP/1.1
Host: www.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/butikk/dame/t-skjorter/comfy-tee-black-cotton-woman/?utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Comfyballs+Comfy+Tee+Black+Woman+Cotton
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 27 Sep 2022 13:02:06 GMT
content-type: application/javascript
last-modified: Tue, 27 Sep 2022 01:32:30 GMT
vary: Accept-Encoding
etag: W/"633252ae-18d1"
expires: Wed, 27 Sep 2023 13:02:06 GMT
cache-control: max-age=31536000
x-rocket-nginx-bypass: No
content-encoding: gzip
X-Firefox-Spdy: h2
www.comfyballs.no/wp-content/cache/min/9/wp-content/plugins/nhg-remember-user-preference/js/nhg-rup-variations-a613eb73d6d62147ca20c7535a7f9e0e.js
200 OK 1.5 kB URL HTTP/2 www.comfyballs.no/wp-content/cache/min/9/wp-content/plugins/nhg-remember-user-preference/js/nhg-rup-variations-a613eb73d6d62147ca20c7535a7f9e0e.js
IP
File type ASCII text, with very long lines (386)
Hash 66d1f582520f32a848c3708333f99130
aa2a7c6a4546cf0aa04a88a019ab0a8bc0670fff
f692c0e13d18960d4d986b0f715a1888557218c10dff3fa063f9efe864c50a9a
GET /wp-content/cache/min/9/wp-content/plugins/nhg-remember-user-preference/js/nhg-rup-variations-a613eb73d6d62147ca20c7535a7f9e0e.js HTTP/1.1
Host: www.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/butikk/dame/t-skjorter/comfy-tee-black-cotton-woman/?utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Comfyballs+Comfy+Tee+Black+Woman+Cotton
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 27 Sep 2022 13:02:06 GMT
content-type: application/javascript
last-modified: Tue, 27 Sep 2022 01:32:50 GMT
vary: Accept-Encoding
etag: W/"633252c2-686"
expires: Wed, 27 Sep 2023 13:02:06 GMT
cache-control: max-age=31536000
x-rocket-nginx-bypass: No
content-encoding: gzip
X-Firefox-Spdy: h2
www.comfyballs.no/wp-content/themes/proto/img/logoer/mastercard.svg
200 OK 2.6 kB URL HTTP/2 www.comfyballs.no/wp-content/themes/proto/img/logoer/mastercard.svg
IP
Hash 579b9913c10da1fa0aab6160776f0d86
cd267f85825c03f81340cef1593961c4a40d067f
f9603a835d12dc9f39341b8a8f105c61018c3332a30eb5aaf9d9484fc8650315
GET /wp-content/themes/proto/img/logoer/mastercard.svg HTTP/1.1
Host: www.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/butikk/dame/t-skjorter/comfy-tee-black-cotton-woman/?utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Comfyballs+Comfy+Tee+Black+Woman+Cotton
Cookie: _sp_id.397d=5631bb0933249ee6.1664283725.1.1664283725.1664283725; _sp_ses.397d=*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 27 Sep 2022 13:02:06 GMT
content-type: image/svg+xml
last-modified: Tue, 29 Jun 2021 07:54:18 GMT
vary: Accept-Encoding
etag: W/"60dad1aa-177b"
expires: Wed, 27 Sep 2023 13:02:06 GMT
cache-control: max-age=31536000
x-rocket-nginx-bypass: No
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash c57d433fb39f25c1e4b8de5293753573
bd4fc0d1d4083f6d3da5b8a90f9ee7fce8de3cbf
f927a2d7de10eb71435bc68e9fd82d597576caaa6b95d469d409b303b70e54ae
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6171
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 13:02:07 GMT
Last-Modified: Tue, 27 Sep 2022 11:19:16 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash cf99681f6f1d6e00e0abca7033eb6219
73261f7daa90ce6fd7a81b10ed7bd762200c3f28
3f4bfe673679f8f0650774c07f8707a7013ac7e1c3e1b3b03e68cbaa5ccc1af6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6506
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 13:02:07 GMT
Last-Modified: Tue, 27 Sep 2022 11:13:41 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 471
connect.facebook.net/en_US/fbevents.js
200 OK 27 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
File type ASCII text, with very long lines (64348)
Hash e1327a02d76346c7e23d114e4e508b30
195b8ad875ab8f7a7adf735f1f70aa02b3a2e1a3
331e67b451c6559915b12ab2df810ccdba73b3971c5301b2010b54dd6d391de2
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: Hhj+1mGX4C4HtyvqTT/0jfzCJGL4+Trb+RtYopEvRHouxi6hPa/mwfPM0ItOjgI7cwGuJ3N4Xq+qPDV4k1OJ0A==
priority: u=3,i
content-length: 26840
x-fb-trip-id: 1679558926
date: Tue, 27 Sep 2022 13:02:07 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash cf99681f6f1d6e00e0abca7033eb6219
73261f7daa90ce6fd7a81b10ed7bd762200c3f28
3f4bfe673679f8f0650774c07f8707a7013ac7e1c3e1b3b03e68cbaa5ccc1af6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6506
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 13:02:07 GMT
Last-Modified: Tue, 27 Sep 2022 11:13:41 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 737756d717fd215d94458a21028ae486
ee3c3097bcb2ff3f5482b0dc6056b1549afa8f1f
8e705bae2060960e1b2f79c42ebc445d52f307aeac41b34d3a1789879e51b85a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 13:02:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2
200 OK 17 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 16740, version 1.0\012- data
Hash e43b535855a4ae53bd5b07a6eeb3bf67
6507312d9491156036316484bf8dc41e8b52ddd9
b34551ae25916c460423b82beb8e0675b27f76a9a2908f18286260fbd6de6681
GET /s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.comfyballs.no
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 16740
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 26 Sep 2022 18:53:39 GMT
expires: Tue, 26 Sep 2023 18:53:39 GMT
cache-control: public, max-age=31536000
age: 65308
last-modified: Mon, 15 Aug 2022 18:14:44 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
analytics.tiktok.com/i18n/pixel/config.js?sdkid=CA34KV3C77U9OVK6NG00&hostname=www.comfyballs.no
200 OK 345 B URL HTTP/2 analytics.tiktok.com/i18n/pixel/config.js?sdkid=CA34KV3C77U9OVK6NG00&hostname=www.comfyballs.no
IP
ASN #20940 Akamai International B.V.
Hash 0561053057a8d898b75869ad047b1e56
ce58fedab878bc3ca2564acdb247bc395e4f2d6c
38ca5f1fa6fa051824e9b47f1d35a8f05938fe5b62437102bedcf9309bd95de2
GET /i18n/pixel/config.js?sdkid=CA34KV3C77U9OVK6NG00&hostname=www.comfyballs.no HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
x-tt-logid: 2022092713020767F154C24EEB9AEF55AB
x-tt-trace-host: 016eabbbec2a80a817c88fdee8d986cf60459c918a449af51d55daa38da0f8465ba82d9d95a2aff4faa524af83329991d3495bac90fdcae21d6c8ac58c37466d208e25ad15c568a1583765ee175f10f738
content-encoding: gzip
expires: Tue, 27 Sep 2022 13:02:07 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Tue, 27 Sep 2022 13:02:07 GMT
content-length: 345
x-cache: TCP_MISS from a23-36-79-28.deploy.akamaitechnologies.com (AkamaiGHost/10.9.4-44125806) (-)
vary: Accept-Encoding
set-cookie: _ttp=2FLuXrxs0lmNqes2v574wjDk7GU; Path=/; Domain=tiktok.com; Max-Age=33696000; Secure; SameSite=None
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: inner; dur=3, cdn-cache; desc=MISS, edge; dur=0, origin; dur=109
x-origin-response-time: 109,23.36.79.28
x-akamai-request-id: 57d99977
X-Firefox-Spdy: h2
www.comfyballs.no/wp-content/themes/proto/img/logoer/vipps.svg
200 OK 12 kB URL HTTP/2 www.comfyballs.no/wp-content/themes/proto/img/logoer/vipps.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (38832)
Hash 7df1d5ebc52c41e9b030a1a8cfe88234
27fb451c350d9fe4e4ef105a87225479ab8b76c9
becd94a9ce8d20aa73dfb7147ea79c69f0bec2fb40c597dc9e35a1ad06e39e1a
GET /wp-content/themes/proto/img/logoer/vipps.svg HTTP/1.1
Host: www.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/butikk/dame/t-skjorter/comfy-tee-black-cotton-woman/?utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Comfyballs+Comfy+Tee+Black+Woman+Cotton
Cookie: _sp_id.397d=5631bb0933249ee6.1664283725.1.1664283725.1664283725; _sp_ses.397d=*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 27 Sep 2022 13:02:06 GMT
content-type: image/svg+xml
last-modified: Tue, 29 Jun 2021 07:54:18 GMT
vary: Accept-Encoding
etag: W/"60dad1aa-893"
expires: Wed, 27 Sep 2023 13:02:06 GMT
cache-control: max-age=31536000
x-rocket-nginx-bypass: No
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 8db5d2c9b0cb775a6a25dbf8cd34a48f
5d282cac803319dc0e91c82c587fe8cc1cd0b3cc
bd1328870578318074744122d16699dfa2a748cf9d891a6959a959147c63d65a
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 27 Sep 2022 13:02:07 GMT
Last-Modified: Tue, 27 Sep 2022 11:27:34 GMT
Server: ECS (nyb/1D25)
X-Cache: Miss from cloudfront
Via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: nQmv3spDfuWjNvrS2qWBviBFtNpRURk0hzftJTKpwWN0RvXI0zQs8w==
Age: 5674
p.yotpo.com/i?e=pv&page=Comfy%20Tee%20Black%20Woman%20Cotton%20-%20Comfyballs.no&se_psk=683836&se_va=YD4eGk9s4jP1kEspn9NQS7IIWFpY8ABJLQ5nYf1U&cx=eyJwdl91dWlkIjo2MTAwOTUwODB9&dtm=1664283725172&tid=378725&vp=1280x939&ds=1268x1650&vid=1&duid=5631bb0933249ee6&p=web&tv=js-0.13.2&fp=1326250463&aid=onsite_v2&lang=en-US&cs=UTF-8&tz=Etc%2FUTC&refr=https%3A%2F%2Fno-go.kelkoogroup.net%2F&res=1280x1024&cd=24&cookie=1&url=https%3A%2F%2Fwww.comfyballs.no%2Fbutikk%2Fdame%2Ft-skjorter%2Fcomfy-tee-black-cotton-woman%2F%3Futm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DComfyballs%2BComfy%2BTee%2BBlack%2BWoman%2BCotton
200 OK 35 B URL HTTP/2 p.yotpo.com/i?e=pv&page=Comfy%20Tee%20Black%20Woman%20Cotton%20-%20Comfyballs.no&se_psk=683836&se_va=YD4eGk9s4jP1kEspn9NQS7IIWFpY8ABJLQ5nYf1U&cx=eyJwdl91dWlkIjo2MTAwOTUwODB9&dtm=1664283725172&tid=378725&vp=1280x939&ds=1268x1650&vid=1&duid=5631bb0933249ee6&p=web&tv=js-0.13.2&fp=1326250463&aid=onsite_v2&lang=en-US&cs=UTF-8&tz=Etc%2FUTC&refr=https%3A%2F%2Fno-go.kelkoogroup.net%2F&res=1280x1024&cd=24&cookie=1&url=https%3A%2F%2Fwww.comfyballs.no%2Fbutikk%2Fdame%2Ft-skjorter%2Fcomfy-tee-black-cotton-woman%2F%3Futm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DComfyballs%2BComfy%2BTee%2BBlack%2BWoman%2BCotton
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash c2196de8ba412c60c22ab491af7b1409
5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b
6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992
GET /i?e=pv&page=Comfy%20Tee%20Black%20Woman%20Cotton%20-%20Comfyballs.no&se_psk=683836&se_va=YD4eGk9s4jP1kEspn9NQS7IIWFpY8ABJLQ5nYf1U&cx=eyJwdl91dWlkIjo2MTAwOTUwODB9&dtm=1664283725172&tid=378725&vp=1280x939&ds=1268x1650&vid=1&duid=5631bb0933249ee6&p=web&tv=js-0.13.2&fp=1326250463&aid=onsite_v2&lang=en-US&cs=UTF-8&tz=Etc%2FUTC&refr=https%3A%2F%2Fno-go.kelkoogroup.net%2F&res=1280x1024&cd=24&cookie=1&url=https%3A%2F%2Fwww.comfyballs.no%2Fbutikk%2Fdame%2Ft-skjorter%2Fcomfy-tee-black-cotton-woman%2F%3Futm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DComfyballs%2BComfy%2BTee%2BBlack%2BWoman%2BCotton HTTP/1.1
Host: p.yotpo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 27 Sep 2022 13:02:07 GMT
content-type: image/gif
content-length: 35
server: nginx
set-cookie: pixel=b1996d7d-31c7-433a-66b8-b7bda6690995; Path=/; Domain=yotpo.com; Max-Age=31536000; HttpOnly; Secure; SameSite=None
expires: Wed, 28 Sep 2022 13:02:07 GMT
cache-control: max-age=86400, private
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 737756d717fd215d94458a21028ae486
ee3c3097bcb2ff3f5482b0dc6056b1549afa8f1f
8e705bae2060960e1b2f79c42ebc445d52f307aeac41b34d3a1789879e51b85a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 13:02:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
bat.bing.com/action/0?ti=17112753&Ver=2&mid=b8f772d3-9787-4409-aeac-fc5ec3221ad4&sid=96276dc03e6411edba5fbd03dfbb7439&vid=9627c1003e6411ed9818fb5a32945507&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Comfy%20Tee%20Black%20Woman%20Cotton%20-%20Comfyballs.no&p=https%3A%2F%2Fwww.comfyballs.no%2Fbutikk%2Fdame%2Ft-skjorter%2Fcomfy-tee-black-cotton-woman%2F%3Futm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DComfyballs%2BComfy%2BTee%2BBlack%2BWoman%2BCotton&r=https%3A%2F%2Fno-go.kelkoogroup.net%2F<=710&evt=pageLoad&sv=1&rn=894601
204 No Content 0 B URL HTTP/2 bat.bing.com/action/0?ti=17112753&Ver=2&mid=b8f772d3-9787-4409-aeac-fc5ec3221ad4&sid=96276dc03e6411edba5fbd03dfbb7439&vid=9627c1003e6411ed9818fb5a32945507&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Comfy%20Tee%20Black%20Woman%20Cotton%20-%20Comfyballs.no&p=https%3A%2F%2Fwww.comfyballs.no%2Fbutikk%2Fdame%2Ft-skjorter%2Fcomfy-tee-black-cotton-woman%2F%3Futm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DComfyballs%2BComfy%2BTee%2BBlack%2BWoman%2BCotton&r=https%3A%2F%2Fno-go.kelkoogroup.net%2F<=710&evt=pageLoad&sv=1&rn=894601
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/0?ti=17112753&Ver=2&mid=b8f772d3-9787-4409-aeac-fc5ec3221ad4&sid=96276dc03e6411edba5fbd03dfbb7439&vid=9627c1003e6411ed9818fb5a32945507&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Comfy%20Tee%20Black%20Woman%20Cotton%20-%20Comfyballs.no&p=https%3A%2F%2Fwww.comfyballs.no%2Fbutikk%2Fdame%2Ft-skjorter%2Fcomfy-tee-black-cotton-woman%2F%3Futm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DComfyballs%2BComfy%2BTee%2BBlack%2BWoman%2BCotton&r=https%3A%2F%2Fno-go.kelkoogroup.net%2F<=710&evt=pageLoad&sv=1&rn=894601 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=28C9CDFCD3D96CFB0C9CDFD0D22C6D80; domain=.bing.com; expires=Sun, 22-Oct-2023 13:02:07 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: D4F147669CA34D32B7A790E0EB2678C1 Ref B: OSL30EDGE0516 Ref C: 2022-09-27T13:02:07Z
date: Tue, 27 Sep 2022 13:02:07 GMT
X-Firefox-Spdy: h2
analytics.tiktok.com/api/v2/pixel
200 OK 0 B URL HTTP/2 analytics.tiktok.com/api/v2/pixel
IP
ASN #20940 Akamai International B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/v2/pixel HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1042
Origin: https://www.comfyballs.no
Connection: keep-alive
Referer: https://www.comfyballs.no/
Cookie: _ttp=2FLuXrxs0lmNqes2v574wjDk7GU
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/octet-stream
content-length: 0
access-control-allow-origin: *
x-tt-logid: 2022092713020792764AD1E82E08F4247D
x-tt-trace-host: 016eabbbec2a80a817c88fdee8d986cf60459c918a449af51d55daa38da0f8465b49350ec2f3d338cf85434ae43b594d4061baaa44a10a55ada815081c8882ef2c6c08edfd891862e9ab9b372dcb0cf69d
expires: Tue, 27 Sep 2022 13:02:07 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Tue, 27 Sep 2022 13:02:07 GMT
x-cache: TCP_MISS from a23-36-79-28.deploy.akamaitechnologies.com (AkamaiGHost/10.9.4-44125806) (-)
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: inner; dur=17, cdn-cache; desc=MISS, edge; dur=4, origin; dur=114
x-origin-response-time: 114,23.36.79.28
x-akamai-request-id: 57d99a66
X-Firefox-Spdy: h2
analytics.tiktok.com/api/v2/pixel
200 OK 0 B URL HTTP/2 analytics.tiktok.com/api/v2/pixel
IP
ASN #20940 Akamai International B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/v2/pixel HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 918
Origin: https://www.comfyballs.no
Connection: keep-alive
Referer: https://www.comfyballs.no/
Cookie: _ttp=2FLuXrxs0lmNqes2v574wjDk7GU
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/octet-stream
content-length: 0
access-control-allow-origin: *
x-tt-logid: 2022092713020719747FD77918DAF7EDD9
x-tt-trace-host: 016eabbbec2a80a817c88fdee8d986cf60459c918a449af51d55daa38da0f8465b4bce0060db386cbbc2739594ca54e1ac0028891eea55fd6ddb565b1f8f6b8f5ffd30302a61c17d84f8452d5737c72e14
expires: Tue, 27 Sep 2022 13:02:07 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Tue, 27 Sep 2022 13:02:07 GMT
x-cache: TCP_MISS from a23-36-79-28.deploy.akamaitechnologies.com (AkamaiGHost/10.9.4-44125806) (-)
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: inner; dur=19, cdn-cache; desc=MISS, edge; dur=7, origin; dur=125
x-origin-response-time: 125,23.36.79.28
x-akamai-request-id: 57d99a5b
X-Firefox-Spdy: h2
analytics.tiktok.com/api/v2/pixel
200 OK 0 B URL HTTP/2 analytics.tiktok.com/api/v2/pixel
IP
ASN #20940 Akamai International B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/v2/pixel HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 920
Origin: https://www.comfyballs.no
Connection: keep-alive
Referer: https://www.comfyballs.no/
Cookie: _ttp=2FLuXrxs0lmNqes2v574wjDk7GU
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/octet-stream
content-length: 0
access-control-allow-origin: *
x-tt-logid: 202209271302074B227772DDE5C8F09DCE
x-tt-trace-host: 016eabbbec2a80a817c88fdee8d986cf60459c918a449af51d55daa38da0f8465b49350ec2f3d338cf85434ae43b594d40350bb548ff6275ed2e1834911882202eaac44ef41f228ef9bcce046c48e09a87
expires: Tue, 27 Sep 2022 13:02:07 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Tue, 27 Sep 2022 13:02:07 GMT
x-cache: TCP_MISS from a23-36-79-28.deploy.akamaitechnologies.com (AkamaiGHost/10.9.4-44125806) (-)
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: inner; dur=42, cdn-cache; desc=MISS, edge; dur=6, origin; dur=139
x-origin-response-time: 139,23.36.79.28
x-akamai-request-id: 57d99a57
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash d2aa56ff5aa61caf25c2d918818cfe79
c01e85507dc8de353a460444b3255c7fa5b4fcf8
f0ac9297f334934924d873304380a10e3f3f8a1e617c72b3250181a1f3ad4f0f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4959
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 13:02:07 GMT
Last-Modified: Tue, 27 Sep 2022 11:39:29 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash d2aa56ff5aa61caf25c2d918818cfe79
c01e85507dc8de353a460444b3255c7fa5b4fcf8
f0ac9297f334934924d873304380a10e3f3f8a1e617c72b3250181a1f3ad4f0f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4305
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 13:02:07 GMT
Last-Modified: Tue, 27 Sep 2022 11:50:22 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 471
bat.bing.com/p/action/17112753.js
200 OK 667 B URL HTTP/2 bat.bing.com/p/action/17112753.js
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with CRLF line terminators
Hash 3545c9f745d9bf474fbd216a3af40cfa
b88a34ec3167bf62a2a122cd95fbc8063f82b845
d224011c803afdbfabe52751a79df7459980fbb6f1a41944d47a24508dc11d0c
GET /p/action/17112753.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private,max-age=60
content-length: 667
content-type: application/javascript; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
set-cookie: MUID=17E81A831A50652A246C08AF1BA564AB; domain=.bing.com; expires=Sun, 22-Oct-2023 13:02:07 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: ARR/3.0
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: E6A122440FE64D2A94F6D9AC4B14BCC5 Ref B: OSL30EDGE0516 Ref C: 2022-09-27T13:02:07Z
date: Tue, 27 Sep 2022 13:02:07 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c939f97c8bcbfea356e92036803714bc
608c795e7c4fb943a4db49a4e4533c41ea717023
b05b38c78c15c259720bfc6783ac65ab60ceb1e6037b45b08113f183554f08cb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 13:02:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
s2.adform.net/banners/scripts/st/trackpoint-async.js
200 OK 31 kB URL HTTP/2 s2.adform.net/banners/scripts/st/trackpoint-async.js
IP
File type ASCII text, with very long lines (992)
Hash 721be427d543aec02f3de366664a44f2
b9b2d1043bfffd4e9e25b788aecbe39e58ebc130
372e7b97f38e51c59d6da183b717c6294abfaa635cabd3637ce0c04dcaa2cb04
GET /banners/scripts/st/trackpoint-async.js HTTP/1.1
Host: s2.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.comfyballs.no/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 27 Sep 2022 13:02:07 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Fri, 23 Sep 2022 11:35:31 GMT
x-rgw-object-type: Normal
etag: W/"64271612f9771203ff18d1de033d1b31"
x-amz-request-id: tx000000000000002034209-006332e583-328fb259-default
access-control-allow-origin: *
cache-control: public, max-age=604800
x-cache-status: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
staticw2.yotpo.com/assets/yotpo-widget-font.woff?version=2019-06-17_07-32-56
200 OK 12 kB URL HTTP/2 staticw2.yotpo.com/assets/yotpo-widget-font.woff?version=2019-06-17_07-32-56
IP
File type Web Open Font Format, TrueType, length 12288, version 1.0\012- data
Hash 652f1f8f7ffd92a8fc5b8b1ea66dcca3
e79b5a779aa32ecb953d7c182744653b577b6000
ded3cc824f7bd6d490d247ad247bc13cd3205f3dca15e6afa78610dc8a4d1143
GET /assets/yotpo-widget-font.woff?version=2019-06-17_07-32-56 HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.comfyballs.no
Connection: keep-alive
Referer: https://staticw2.yotpo.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/font-woff
content-length: 12288
last-modified: Tue, 20 Sep 2022 08:57:46 GMT
etag: "6329808a-3000"
accept-ranges: bytes
cache-control: max-age=604800
expires: Tue, 04 Oct 2022 13:02:07 GMT
date: Tue, 27 Sep 2022 13:02:07 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: GET,POST
access-control-allow-origin: *
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=AW-948460532&l=dataLayer&cx=c
200 OK 191 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=AW-948460532&l=dataLayer&cx=c
IP
Size 191 kB (191414 bytes)
Hash be9875f2e2316937699e22af0cafd4b0
58cb126fe55d82979203d0ddd369c0da46461683
139886f9e227a50b099a4d47118bacaaffe14f081c86abd8629a266e05b1d294
GET /gtag/js?id=AW-948460532&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 27 Sep 2022 13:02:07 GMT
expires: Tue, 27 Sep 2022 13:02:07 GMT
cache-control: private, max-age=900
last-modified: Tue, 27 Sep 2022 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 46799
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
tr.snapchat.com/p
200 OK 68 B IP
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash c4a2b870062c2bb98c500bc1526c0498
528666ccdb12997358077bc8fcdbfb6b825c7788
2aa4fa20701cdd6d8d56046069001186b5267e3ee7d0ef618ad2f4a683723e11
POST /p HTTP/1.1
Host: tr.snapchat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: multipart/form-data; boundary=---------------------------368823200412964517323851651708
Content-Length: 2381
Origin: https://www.comfyballs.no
Connection: keep-alive
Referer: https://www.comfyballs.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 13:02:07 GMT
access-control-allow-origin: https://www.comfyballs.no
cache-control: no-cache, no-transform
set-cookie: sc_at=v2|H4sIAAAAAAAAAA3DiwkAIAgFwImEND81zjNsCoevg5u7zvlJzYI0UQQGk1/LXFJASTe7q6wZEj0eA4AwcjIAAAA=;SameSite=None;Version=1;Comment=;Domain=.snapchat.com;Path=/;Max-Age=33696000;Secure
content-type: text/html
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-length: 68
x-envoy-upstream-service-time: 6
server: API Gateway
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash d2aa56ff5aa61caf25c2d918818cfe79
c01e85507dc8de353a460444b3255c7fa5b4fcf8
f0ac9297f334934924d873304380a10e3f3f8a1e617c72b3250181a1f3ad4f0f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4959
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 13:02:07 GMT
Last-Modified: Tue, 27 Sep 2022 11:39:29 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 471
p.yotpo.com/i?e=se&se_ca=reviews&se_ac=loaded&se_la=review&se_psk=683836&se_va=YD4eGk9s4jP1kEspn9NQS7IIWFpY8ABJLQ5nYf1U&cx=eyJwdl91dWlkIjo2MTAwOTUwODAsInJldmlld19pZCI6WyIzOTMwODk4MzIiXSwiY291bnRfcmV2aWV3cyI6MX0&dtm=1664283725699&tid=942667&vp=1280x939&ds=1268x1651&vid=1&duid=5631bb0933249ee6&p=web&tv=js-0.13.2&fp=1326250463&aid=onsite_v2&lang=en-US&cs=UTF-8&tz=Etc%2FUTC&refr=https%3A%2F%2Fno-go.kelkoogroup.net%2F&res=1280x1024&cd=24&cookie=1&url=https%3A%2F%2Fwww.comfyballs.no%2Fbutikk%2Fdame%2Ft-skjorter%2Fcomfy-tee-black-cotton-woman%2F%3Futm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DComfyballs%2BComfy%2BTee%2BBlack%2BWoman%2BCotton
200 OK 35 B URL HTTP/2 p.yotpo.com/i?e=se&se_ca=reviews&se_ac=loaded&se_la=review&se_psk=683836&se_va=YD4eGk9s4jP1kEspn9NQS7IIWFpY8ABJLQ5nYf1U&cx=eyJwdl91dWlkIjo2MTAwOTUwODAsInJldmlld19pZCI6WyIzOTMwODk4MzIiXSwiY291bnRfcmV2aWV3cyI6MX0&dtm=1664283725699&tid=942667&vp=1280x939&ds=1268x1651&vid=1&duid=5631bb0933249ee6&p=web&tv=js-0.13.2&fp=1326250463&aid=onsite_v2&lang=en-US&cs=UTF-8&tz=Etc%2FUTC&refr=https%3A%2F%2Fno-go.kelkoogroup.net%2F&res=1280x1024&cd=24&cookie=1&url=https%3A%2F%2Fwww.comfyballs.no%2Fbutikk%2Fdame%2Ft-skjorter%2Fcomfy-tee-black-cotton-woman%2F%3Futm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DComfyballs%2BComfy%2BTee%2BBlack%2BWoman%2BCotton
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash c2196de8ba412c60c22ab491af7b1409
5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b
6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992
GET /i?e=se&se_ca=reviews&se_ac=loaded&se_la=review&se_psk=683836&se_va=YD4eGk9s4jP1kEspn9NQS7IIWFpY8ABJLQ5nYf1U&cx=eyJwdl91dWlkIjo2MTAwOTUwODAsInJldmlld19pZCI6WyIzOTMwODk4MzIiXSwiY291bnRfcmV2aWV3cyI6MX0&dtm=1664283725699&tid=942667&vp=1280x939&ds=1268x1651&vid=1&duid=5631bb0933249ee6&p=web&tv=js-0.13.2&fp=1326250463&aid=onsite_v2&lang=en-US&cs=UTF-8&tz=Etc%2FUTC&refr=https%3A%2F%2Fno-go.kelkoogroup.net%2F&res=1280x1024&cd=24&cookie=1&url=https%3A%2F%2Fwww.comfyballs.no%2Fbutikk%2Fdame%2Ft-skjorter%2Fcomfy-tee-black-cotton-woman%2F%3Futm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DComfyballs%2BComfy%2BTee%2BBlack%2BWoman%2BCotton HTTP/1.1
Host: p.yotpo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 13:02:07 GMT
content-type: image/gif
content-length: 35
server: nginx
set-cookie: pixel=d5e4d620-2a0c-4d00-56f2-5ca5ee389958; Path=/; Domain=yotpo.com; Max-Age=31536000; HttpOnly; Secure; SameSite=None
expires: Wed, 28 Sep 2022 13:02:07 GMT
cache-control: max-age=86400, private
X-Firefox-Spdy: h2
p.yotpo.com/i?e=se&se_ca=pictures_in_reviews&se_ac=loaded&se_la=image&se_psk=683836&se_va=YD4eGk9s4jP1kEspn9NQS7IIWFpY8ABJLQ5nYf1U&cx=eyJwdl91dWlkIjo2MTAwOTUwODAsIm1lZGlhX2lkIjpbXSwiY291bnRfcGljdHVyZXMiOjB9&dtm=1664283725677&tid=184627&vp=1280x939&ds=1268x1651&vid=1&duid=5631bb0933249ee6&p=web&tv=js-0.13.2&fp=1326250463&aid=onsite_v2&lang=en-US&cs=UTF-8&tz=Etc%2FUTC&refr=https%3A%2F%2Fno-go.kelkoogroup.net%2F&res=1280x1024&cd=24&cookie=1&url=https%3A%2F%2Fwww.comfyballs.no%2Fbutikk%2Fdame%2Ft-skjorter%2Fcomfy-tee-black-cotton-woman%2F%3Futm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DComfyballs%2BComfy%2BTee%2BBlack%2BWoman%2BCotton
200 OK 35 B URL HTTP/2 p.yotpo.com/i?e=se&se_ca=pictures_in_reviews&se_ac=loaded&se_la=image&se_psk=683836&se_va=YD4eGk9s4jP1kEspn9NQS7IIWFpY8ABJLQ5nYf1U&cx=eyJwdl91dWlkIjo2MTAwOTUwODAsIm1lZGlhX2lkIjpbXSwiY291bnRfcGljdHVyZXMiOjB9&dtm=1664283725677&tid=184627&vp=1280x939&ds=1268x1651&vid=1&duid=5631bb0933249ee6&p=web&tv=js-0.13.2&fp=1326250463&aid=onsite_v2&lang=en-US&cs=UTF-8&tz=Etc%2FUTC&refr=https%3A%2F%2Fno-go.kelkoogroup.net%2F&res=1280x1024&cd=24&cookie=1&url=https%3A%2F%2Fwww.comfyballs.no%2Fbutikk%2Fdame%2Ft-skjorter%2Fcomfy-tee-black-cotton-woman%2F%3Futm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DComfyballs%2BComfy%2BTee%2BBlack%2BWoman%2BCotton
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash c2196de8ba412c60c22ab491af7b1409
5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b
6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992
GET /i?e=se&se_ca=pictures_in_reviews&se_ac=loaded&se_la=image&se_psk=683836&se_va=YD4eGk9s4jP1kEspn9NQS7IIWFpY8ABJLQ5nYf1U&cx=eyJwdl91dWlkIjo2MTAwOTUwODAsIm1lZGlhX2lkIjpbXSwiY291bnRfcGljdHVyZXMiOjB9&dtm=1664283725677&tid=184627&vp=1280x939&ds=1268x1651&vid=1&duid=5631bb0933249ee6&p=web&tv=js-0.13.2&fp=1326250463&aid=onsite_v2&lang=en-US&cs=UTF-8&tz=Etc%2FUTC&refr=https%3A%2F%2Fno-go.kelkoogroup.net%2F&res=1280x1024&cd=24&cookie=1&url=https%3A%2F%2Fwww.comfyballs.no%2Fbutikk%2Fdame%2Ft-skjorter%2Fcomfy-tee-black-cotton-woman%2F%3Futm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DComfyballs%2BComfy%2BTee%2BBlack%2BWoman%2BCotton HTTP/1.1
Host: p.yotpo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 13:02:07 GMT
content-type: image/gif
content-length: 35
server: nginx
set-cookie: pixel=2c29f8d4-04f2-4a39-421d-5015588765cc; Path=/; Domain=yotpo.com; Max-Age=31536000; HttpOnly; Secure; SameSite=None
expires: Wed, 28 Sep 2022 13:02:07 GMT
cache-control: max-age=86400, private
X-Firefox-Spdy: h2
p.yotpo.com/i?e=se&se_ca=reviews&se_ac=loaded&se_la=has_reviews&se_pr=2019-06-17_07-32-56&se_psk=683836&se_va=YD4eGk9s4jP1kEspn9NQS7IIWFpY8ABJLQ5nYf1U&cx=eyJwdl91dWlkIjo2MTAwOTUwODB9&dtm=1664283725699&tid=090896&vp=1280x939&ds=1268x1651&vid=1&duid=5631bb0933249ee6&p=web&tv=js-0.13.2&fp=1326250463&aid=onsite_v2&lang=en-US&cs=UTF-8&tz=Etc%2FUTC&refr=https%3A%2F%2Fno-go.kelkoogroup.net%2F&res=1280x1024&cd=24&cookie=1&url=https%3A%2F%2Fwww.comfyballs.no%2Fbutikk%2Fdame%2Ft-skjorter%2Fcomfy-tee-black-cotton-woman%2F%3Futm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DComfyballs%2BComfy%2BTee%2BBlack%2BWoman%2BCotton
200 OK 35 B URL HTTP/2 p.yotpo.com/i?e=se&se_ca=reviews&se_ac=loaded&se_la=has_reviews&se_pr=2019-06-17_07-32-56&se_psk=683836&se_va=YD4eGk9s4jP1kEspn9NQS7IIWFpY8ABJLQ5nYf1U&cx=eyJwdl91dWlkIjo2MTAwOTUwODB9&dtm=1664283725699&tid=090896&vp=1280x939&ds=1268x1651&vid=1&duid=5631bb0933249ee6&p=web&tv=js-0.13.2&fp=1326250463&aid=onsite_v2&lang=en-US&cs=UTF-8&tz=Etc%2FUTC&refr=https%3A%2F%2Fno-go.kelkoogroup.net%2F&res=1280x1024&cd=24&cookie=1&url=https%3A%2F%2Fwww.comfyballs.no%2Fbutikk%2Fdame%2Ft-skjorter%2Fcomfy-tee-black-cotton-woman%2F%3Futm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DComfyballs%2BComfy%2BTee%2BBlack%2BWoman%2BCotton
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash c2196de8ba412c60c22ab491af7b1409
5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b
6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992
GET /i?e=se&se_ca=reviews&se_ac=loaded&se_la=has_reviews&se_pr=2019-06-17_07-32-56&se_psk=683836&se_va=YD4eGk9s4jP1kEspn9NQS7IIWFpY8ABJLQ5nYf1U&cx=eyJwdl91dWlkIjo2MTAwOTUwODB9&dtm=1664283725699&tid=090896&vp=1280x939&ds=1268x1651&vid=1&duid=5631bb0933249ee6&p=web&tv=js-0.13.2&fp=1326250463&aid=onsite_v2&lang=en-US&cs=UTF-8&tz=Etc%2FUTC&refr=https%3A%2F%2Fno-go.kelkoogroup.net%2F&res=1280x1024&cd=24&cookie=1&url=https%3A%2F%2Fwww.comfyballs.no%2Fbutikk%2Fdame%2Ft-skjorter%2Fcomfy-tee-black-cotton-woman%2F%3Futm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DComfyballs%2BComfy%2BTee%2BBlack%2BWoman%2BCotton HTTP/1.1
Host: p.yotpo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 13:02:07 GMT
content-type: image/gif
content-length: 35
server: nginx
set-cookie: pixel=4ed89512-4c76-48ae-631a-4a482b840f7d; Path=/; Domain=yotpo.com; Max-Age=31536000; HttpOnly; Secure; SameSite=None
expires: Wed, 28 Sep 2022 13:02:07 GMT
cache-control: max-age=86400, private
X-Firefox-Spdy: h2
staticw2.yotpo.com/close-new.png
308 Permanent Redirect 164 B URL HTTP/1.1 staticw2.yotpo.com/close-new.png
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f23c4815ecaef1588f16ac735c0e15d6
026bf8cdd5076014b6fc822878e0086eb44da556
43a81fb3d47b34e7d42d6b8444f592ed9251b8e57db8f67d32419aa40b1480d0
GET /close-new.png HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 308 Permanent Redirect
Content-Type: text/html
Content-Length: 164
Location: https://staticw2.yotpo.com/close-new.png
Date: Tue, 27 Sep 2022 13:02:07 GMT
Connection: keep-alive
Server-Timing: cdn-cache; desc=HIT, edge; dur=1
ENV: PRODUCTION
Access-Control-Max-Age: 86400
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET,POST
Access-Control-Allow-Origin: *
track.adform.net/Serving/TrackPoint/?CC=1&pm=2195372&ADFPageName=Product%20View&ADFdivider=|&ord=942796655560&ADFtpmode=2&itm=eyJpdG1zIjpbeyJwaWQiOjY4MzgzNiwic3RlcCI6MX1dfQ&loc=https%3A%2F%2Fwww.comfyballs.no%2Fbutikk%2Fdame%2Ft-skjorter%2Fcomfy-tee-black-cotton-woman%2F%3Futm_source%3Dkelkoono%26&CPref=https%3A%2F%2Fno-go.kelkoogroup.net%2F&Set1=en-US%7Cen-US%7C1280x1024%7C24
200 OK 186 B URL HTTP/2 track.adform.net/Serving/TrackPoint/?CC=1&pm=2195372&ADFPageName=Product%20View&ADFdivider=|&ord=942796655560&ADFtpmode=2&itm=eyJpdG1zIjpbeyJwaWQiOjY4MzgzNiwic3RlcCI6MX1dfQ&loc=https%3A%2F%2Fwww.comfyballs.no%2Fbutikk%2Fdame%2Ft-skjorter%2Fcomfy-tee-black-cotton-woman%2F%3Futm_source%3Dkelkoono%26&CPref=https%3A%2F%2Fno-go.kelkoogroup.net%2F&Set1=en-US%7Cen-US%7C1280x1024%7C24
IP
File type ASCII text, with CRLF line terminators
Hash de702410b3d895b72cabb14defdedce4
65e8b0c2db5d40941efba92e2f33e61f6f1df424
1043e2ed621958a3161ce0f1b3e14448f0d97321c4d085f73c7f49b69e2f352d
GET /Serving/TrackPoint/?CC=1&pm=2195372&ADFPageName=Product%20View&ADFdivider=|&ord=942796655560&ADFtpmode=2&itm=eyJpdG1zIjpbeyJwaWQiOjY4MzgzNiwic3RlcCI6MX1dfQ&loc=https%3A%2F%2Fwww.comfyballs.no%2Fbutikk%2Fdame%2Ft-skjorter%2Fcomfy-tee-black-cotton-woman%2F%3Futm_source%3Dkelkoono%26&CPref=https%3A%2F%2Fno-go.kelkoogroup.net%2F&Set1=en-US%7Cen-US%7C1280x1024%7C24 HTTP/1.1
Host: track.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.comfyballs.no/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 27 Sep 2022 13:02:07 GMT
content-type: text/javascript; charset=utf-8
content-length: 186
cache-control: no-cache, no-store, must-revalidate, no-transform
pragma: no-cache
content-encoding: gzip
expires: -1
vary: Accept-Encoding
access-control-allow-origin: *
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
www.google-analytics.com/plugins/ua/linkid.js
200 OK 859 B URL HTTP/2 www.google-analytics.com/plugins/ua/linkid.js
IP
File type ASCII text, with very long lines (1335)
Hash 904463ce35aee800847ab85ec948aaf6
904e4d2647466c7f7e0f7412019984e3b2ccfb24
057b4d29359dfe2536a2ec40243bdfa7b151222efcc1eb358608994a14c34237
GET /plugins/ua/linkid.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 859
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 27 Sep 2022 12:16:03 GMT
expires: Tue, 27 Sep 2022 13:16:03 GMT
cache-control: public, max-age=3600
age: 2764
last-modified: Tue, 22 Oct 2019 18:15:00 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
staticw2.yotpo.com/close-new.png
404 Not Found 1.4 kB URL HTTP/2 staticw2.yotpo.com/close-new.png
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash f4d59d741048f0f72dc59c7cec8e4575
74602b66b94a68f114e8410a7ee9a983d39c76c2
ae488f2a554a5f6227606ef7b7c4c705806d10a72a84111a777e5db215dfd243
GET /close-new.png HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
content-type: text/html; charset=utf-8
content-length: 1351
status: 404 Not Found
x-request-id: 722a8fcfa89b461d33415e89048677df
x-runtime: 0.001412
date: Tue, 27 Sep 2022 13:02:07 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=18
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: GET,POST
access-control-allow-origin: *
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=1531245867172135&ev=PageView&dl=https%3A%2F%2Fwww.comfyballs.no%2Fbutikk%2Fdame%2Ft-skjorter%2Fcomfy-tee-black-cotton-woman%2F%3Futm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DComfyballs%2BComfy%2BTee%2BBlack%2BWoman%2BCotton&rl=https%3A%2F%2Fno-go.kelkoogroup.net%2F&if=false&ts=1664283725743&sw=1280&sh=1024&v=2.9.84&r=stable&ec=0&o=30&fbp=fb.1.1664283725740.598498531&eid=ob3_plugin-set_97fa933becd0096bbf2d0f817a823ab13f00887a6a4d91cfd156d3163e3b62b6&it=1664283725457&coo=false&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=1531245867172135&ev=PageView&dl=https%3A%2F%2Fwww.comfyballs.no%2Fbutikk%2Fdame%2Ft-skjorter%2Fcomfy-tee-black-cotton-woman%2F%3Futm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DComfyballs%2BComfy%2BTee%2BBlack%2BWoman%2BCotton&rl=https%3A%2F%2Fno-go.kelkoogroup.net%2F&if=false&ts=1664283725743&sw=1280&sh=1024&v=2.9.84&r=stable&ec=0&o=30&fbp=fb.1.1664283725740.598498531&eid=ob3_plugin-set_97fa933becd0096bbf2d0f817a823ab13f00887a6a4d91cfd156d3163e3b62b6&it=1664283725457&coo=false&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=1531245867172135&ev=PageView&dl=https%3A%2F%2Fwww.comfyballs.no%2Fbutikk%2Fdame%2Ft-skjorter%2Fcomfy-tee-black-cotton-woman%2F%3Futm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DComfyballs%2BComfy%2BTee%2BBlack%2BWoman%2BCotton&rl=https%3A%2F%2Fno-go.kelkoogroup.net%2F&if=false&ts=1664283725743&sw=1280&sh=1024&v=2.9.84&r=stable&ec=0&o=30&fbp=fb.1.1664283725740.598498531&eid=ob3_plugin-set_97fa933becd0096bbf2d0f817a823ab13f00887a6a4d91cfd156d3163e3b62b6&it=1664283725457&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
date: Tue, 27 Sep 2022 13:02:07 GMT
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a4ca58695e9e1cb2a165a8e1bca3efe5
cbe0e2479ffd388dc9df194cffffa5f580c8d1e4
635521094d2eab1f979b2f20b9e56ed74bab6075ff72aa82ae3d84a891bd2a68
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "635521094D2EAB1F979B2F20B9E56ED74BAB6075FF72AA82AE3D84A891BD2A68"
Last-Modified: Mon, 26 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16412
Expires: Tue, 27 Sep 2022 17:35:39 GMT
Date: Tue, 27 Sep 2022 13:02:07 GMT
Connection: keep-alive
fb.comfyballs.no/events
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /events HTTP/1.1
Host: fb.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 518
Origin: https://www.comfyballs.no
Connection: keep-alive
Referer: https://www.comfyballs.no/
Cookie: _tt_enable_cookie=1; _ttp=3be95cc3-fc32-41c6-9487-96cfa56f5cfb; _uetsid=96276dc03e6411edba5fbd03dfbb7439; _uetvid=9627c1003e6411ed9818fb5a32945507; _ga=GA1.2.695624830.1664283726; _gid=GA1.2.306622106.1664283726; _scid=83e8297c-f454-48e4-8546-30265c3c8d23; _fbp=fb.1.1664283725740.598498531
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Tue, 27 Sep 2022 13:02:07 GMT
content-length: 0
vary: origin
access-control-allow-credentials: true
access-control-allow-origin: https://www.comfyballs.no
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5b7b66f5886a12421c3f3970bbf49d5a
13a31565fb5b2f1e75d67ba1ce09dae339f1c0e8
3ed8ffa99cefdf81381912b426c0ab9091fb5888836665d9012435965f99feba
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 13:02:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
w2.yotpo.com/sessions/sign_in_url
200 OK 189 B URL HTTP/2 w2.yotpo.com/sessions/sign_in_url
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 25002accc9c10c3cbe5b8c61a3a9bcaf
1d1c1c00413e265f776da9a19155158597dcd404
ca3f30bdf39f719b42fcb09cb4600cb5d4055cadd949431fd8d11aeb5c543054
GET /sessions/sign_in_url HTTP/1.1
Host: w2.yotpo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.comfyballs.no
Connection: keep-alive
Referer: https://www.comfyballs.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
etag: W/"25002accc9c10c3cbe5b8c61a3a9bcaf"
x-request-id: e6572a10f7032d5239cc44214be4c9a5
x-runtime: 0.002573
access-control-allow-origin: https://www.comfyballs.no
access-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT, HEAD
access-control-allow-headers: *
access-control-allow-credentials: true
cache-control: private, must-revalidate, max-age=0
date: Tue, 27 Sep 2022 13:02:08 GMT
content-length: 189
X-Firefox-Spdy: h2
www.google.com/pagead/conversion_async.js
200 OK 472 B URL HTTP/2 www.google.com/pagead/conversion_async.js
IP
Hash 4538701cf9bc34d908f50370beb922f4
df141b9c3ec626ecaba7c1899073a48b811c4113
61497b93eb237687a8fff5845a7a81aff2f2f53dc56f2d0818bfb98dd1256d6f
GET /pagead/conversion_async.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Tue, 27 Sep 2022 13:02:08 GMT
expires: Tue, 27 Sep 2022 13:02:08 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 3080337328058561381
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 15693
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 002d49bafbcc428a44fe523322ad9e05
b39aad0d1e941121f28af8f9b6d76f19216800d5
59a10c7762be219b689cd518aea4d034aa725c6a632b7f866989dcf984b5e007
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 13:02:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.clarity.ms/tag/uet/17112753
200 OK 1.5 kB URL HTTP/2 www.clarity.ms/tag/uet/17112753
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with very long lines (1495), with no line terminators
Hash 423ffdebfc5df8527e2fc21b87c004fc
47d070b7d25aa2a08ac916df76078214197a59cc
3273b148fdc3103801f07a1e334a281f2d7b979312987f7892a27c7221e1b2a1
GET /tag/uet/17112753 HTTP/1.1
Host: www.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache, no-store
content-length: 1495
content-type: application/x-javascript
expires: -1
set-cookie: CLID=1610627a352f438eaaf97b4aac1574ca.20220927.20230927; expires=Wed, 27 Sep 2023 13:02:08 GMT; path=/; secure; samesite=none; httponly
request-context: appId=cid-v1:238681e8-7d6b-453a-acb6-7dcad74f3111
x-powered-by: ASP.NET
x-cache: CONFIG_NOCACHE
x-azure-ref: 0T/QyYwAAAAANrjX2bYAnR4Fs56oyb1eET1NMMjMxMDUwMjAzMDI5ADZjZmJlZWUwLTUwMjctNDg0Yi04OTY3LTRhMjlhZjc3ZjFlMQ==
date: Tue, 27 Sep 2022 13:02:08 GMT
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/948460532/?random=1664283725898&cv=9&fst=1664283725898&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oa9q0&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.comfyballs.no%2Fbutikk%2Fdame%2Ft-skjorter%2Fcomfy-tee-black-cotton-woman%2F%3Futm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DComfyballs%2BComfy%2BTee%2BBlack%2BWoman%2BCotton&ref=https%3A%2F%2Fno-go.kelkoogroup.net%2F&tiba=Comfy%20Tee%20Black%20Woman%20Cotton%20-%20Comfyballs.no&auid=1207757554.1664283726&hn=www.google.com&async=1&rfmt=3&fmt=4
200 OK 1.2 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/948460532/?random=1664283725898&cv=9&fst=1664283725898&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oa9q0&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.comfyballs.no%2Fbutikk%2Fdame%2Ft-skjorter%2Fcomfy-tee-black-cotton-woman%2F%3Futm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DComfyballs%2BComfy%2BTee%2BBlack%2BWoman%2BCotton&ref=https%3A%2F%2Fno-go.kelkoogroup.net%2F&tiba=Comfy%20Tee%20Black%20Woman%20Cotton%20-%20Comfyballs.no&auid=1207757554.1664283726&hn=www.google.com&async=1&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2800), with no line terminators
Hash a9c4137c9604d64248440c29d4ab38d3
f91ccfc6b4f6805bba5474f5d641e57984e255ce
35c4b4b1e2f54c1b654b1bb9156b3cc823d5aa7084c7efa690b8dbe42a6db5c1
GET /pagead/viewthroughconversion/948460532/?random=1664283725898&cv=9&fst=1664283725898&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oa9q0&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.comfyballs.no%2Fbutikk%2Fdame%2Ft-skjorter%2Fcomfy-tee-black-cotton-woman%2F%3Futm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DComfyballs%2BComfy%2BTee%2BBlack%2BWoman%2BCotton&ref=https%3A%2F%2Fno-go.kelkoogroup.net%2F&tiba=Comfy%20Tee%20Black%20Woman%20Cotton%20-%20Comfyballs.no&auid=1207757554.1664283726&hn=www.google.com&async=1&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 27 Sep 2022 13:02:08 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 1171
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Tue, 27-Sep-2022 13:17:08 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 002d49bafbcc428a44fe523322ad9e05
b39aad0d1e941121f28af8f9b6d76f19216800d5
59a10c7762be219b689cd518aea4d034aa725c6a632b7f866989dcf984b5e007
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 13:02:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 95f95fee6e94fb192e7c06459e3e3f8e
025638b85afcc833cd592c98cc941dd011d2526f
dbc8654990b37741f8e393d069054ae68d584c2496421892e814e7a8c45467fd
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 13:02:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/pagead/1p-user-list/948460532/?random=1664283725898&cv=9&fst=1664283600000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oa9q0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.comfyballs.no%2Fbutikk%2Fdame%2Ft-skjorter%2Fcomfy-tee-black-cotton-woman%2F%3Futm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DComfyballs%2BComfy%2BTee%2BBlack%2BWoman%2BCotton&ref=https%3A%2F%2Fno-go.kelkoogroup.net%2F&tiba=Comfy%20Tee%20Black%20Woman%20Cotton%20-%20Comfyballs.no&async=1&fmt=3&is_vtc=1&random=2830570278&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/948460532/?random=1664283725898&cv=9&fst=1664283600000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oa9q0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.comfyballs.no%2Fbutikk%2Fdame%2Ft-skjorter%2Fcomfy-tee-black-cotton-woman%2F%3Futm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DComfyballs%2BComfy%2BTee%2BBlack%2BWoman%2BCotton&ref=https%3A%2F%2Fno-go.kelkoogroup.net%2F&tiba=Comfy%20Tee%20Black%20Woman%20Cotton%20-%20Comfyballs.no&async=1&fmt=3&is_vtc=1&random=2830570278&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/948460532/?random=1664283725898&cv=9&fst=1664283600000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oa9q0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.comfyballs.no%2Fbutikk%2Fdame%2Ft-skjorter%2Fcomfy-tee-black-cotton-woman%2F%3Futm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DComfyballs%2BComfy%2BTee%2BBlack%2BWoman%2BCotton&ref=https%3A%2F%2Fno-go.kelkoogroup.net%2F&tiba=Comfy%20Tee%20Black%20Woman%20Cotton%20-%20Comfyballs.no&async=1&fmt=3&is_vtc=1&random=2830570278&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 27 Sep 2022 13:02:08 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 95f95fee6e94fb192e7c06459e3e3f8e
025638b85afcc833cd592c98cc941dd011d2526f
dbc8654990b37741f8e393d069054ae68d584c2496421892e814e7a8c45467fd
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 13:02:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j97&tid=UA-36031724-1&cid=695624830.1664283726&jid=364960417&gjid=896911964&_gid=306622106.1664283726&_u=aGBAAUIiQAAAAC~&z=1893194752
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j97&tid=UA-36031724-1&cid=695624830.1664283726&jid=364960417&gjid=896911964&_gid=306622106.1664283726&_u=aGBAAUIiQAAAAC~&z=1893194752
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j97&tid=UA-36031724-1&cid=695624830.1664283726&jid=364960417&gjid=896911964&_gid=306622106.1664283726&_u=aGBAAUIiQAAAAC~&z=1893194752 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.comfyballs.no
Connection: keep-alive
Referer: https://www.comfyballs.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.comfyballs.no
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Tue, 27 Sep 2022 13:02:08 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fb.comfyballs.no/events
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /events HTTP/1.1
Host: fb.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 3676
Origin: https://www.comfyballs.no
Connection: keep-alive
Referer: https://www.comfyballs.no/
Cookie: _tt_enable_cookie=1; _ttp=3be95cc3-fc32-41c6-9487-96cfa56f5cfb; _uetsid=96276dc03e6411edba5fbd03dfbb7439; _uetvid=9627c1003e6411ed9818fb5a32945507; _ga=GA1.2.695624830.1664283726; _gid=GA1.2.306622106.1664283726; _scid=83e8297c-f454-48e4-8546-30265c3c8d23; _fbp=fb.1.1664283725740.598498531; _gcl_au=1.1.1207757554.1664283726; _gat_gtag_UA_36031724_1=1; _clck=3v1gpy|1|f58|0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 13:02:08 GMT
content-length: 0
vary: origin
access-control-allow-credentials: true
access-control-allow-origin: https://www.comfyballs.no
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
c.clarity.ms/c.gif
302 Found 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c.gif HTTP/1.1
Host: c.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.bing.com/c.gif?CtsSyncId=10A407D3D85049B48E41708824F517F8&RedC=c.clarity.ms&MXFR=2A56C211A47D679F2414D03DA07D6985
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: SM=T; domain=c.clarity.ms; path=/; SameSite=None; Secure;
MUID=2A56C211A47D679F2414D03DA07D6985; domain=.clarity.ms; expires=Sun, 22-Oct-2023 13:02:08 GMT; path=/; SameSite=None; Secure; Priority=High;
date: Tue, 27 Sep 2022 13:02:07 GMT
content-length: 0
X-Firefox-Spdy: h2
c.bing.com/c.gif?CtsSyncId=10A407D3D85049B48E41708824F517F8&RedC=c.clarity.ms&MXFR=2A56C211A47D679F2414D03DA07D6985
302 Found 0 B URL HTTP/2 c.bing.com/c.gif?CtsSyncId=10A407D3D85049B48E41708824F517F8&RedC=c.clarity.ms&MXFR=2A56C211A47D679F2414D03DA07D6985
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c.gif?CtsSyncId=10A407D3D85049B48E41708824F517F8&RedC=c.clarity.ms&MXFR=2A56C211A47D679F2414D03DA07D6985 HTTP/1.1
Host: c.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.comfyballs.no/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.clarity.ms/c.gif?CtsSyncId=10A407D3D85049B48E41708824F517F8&MUID=2C615804EB90663E0A954A28EA656769
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: SRM_B=2C615804EB90663E0A954A28EA656769; domain=c.bing.com; expires=Sun, 22-Oct-2023 13:02:08 GMT; path=/; SameSite=None; Secure;
x-powered-by: ASP.NET
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 93DDC8DAC9F449BD944A06920CF31E4A Ref B: OSL30EDGE0516 Ref C: 2022-09-27T13:02:08Z
date: Tue, 27 Sep 2022 13:02:08 GMT
content-length: 0
X-Firefox-Spdy: h2
c.clarity.ms/c.gif?CtsSyncId=10A407D3D85049B48E41708824F517F8&MUID=2C615804EB90663E0A954A28EA656769
200 OK 42 B URL HTTP/2 c.clarity.ms/c.gif?CtsSyncId=10A407D3D85049B48E41708824F517F8&MUID=2C615804EB90663E0A954A28EA656769
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type GIF image data, version 89a, 1 x 1\012- data
Hash 32023bb33cfb2a1990a4ef2d85b6ac16
23dcc6d4b5bfe00357fd0248bb5955b8e36bb8f1
99c2917ee5b2a01459a923bdd1c676f15ee73b62b87f696e6735312d26f51e12
GET /c.gif?CtsSyncId=10A407D3D85049B48E41708824F517F8&MUID=2C615804EB90663E0A954A28EA656769 HTTP/1.1
Host: c.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.comfyballs.no/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
content-type: image/gif
last-modified: Tue, 13 Sep 2022 19:54:52 GMT
accept-ranges: bytes
etag: "8d3298b0aac7d81:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: ANONCHK=0; domain=c.clarity.ms; expires=Tue, 27-Sep-2022 13:12:08 GMT; path=/; SameSite=None; Secure;
date: Tue, 27 Sep 2022 13:02:08 GMT
content-length: 42
X-Firefox-Spdy: h2
b.clarity.ms/collect
204 No Content 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /collect HTTP/1.1
Host: b.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1698
Origin: https://www.comfyballs.no
Connection: keep-alive
Referer: https://www.comfyballs.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: Microsoft-IIS/10.0
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
access-control-allow-origin: https://www.comfyballs.no
access-control-allow-credentials: true
x-powered-by: ASP.NET
date: Tue, 27 Sep 2022 13:02:08 GMT
X-Firefox-Spdy: h2
b.clarity.ms/collect
204 No Content 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /collect HTTP/1.1
Host: b.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 93795
Origin: https://www.comfyballs.no
Connection: keep-alive
Referer: https://www.comfyballs.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: Microsoft-IIS/10.0
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
access-control-allow-origin: https://www.comfyballs.no
access-control-allow-credentials: true
x-powered-by: ASP.NET
date: Tue, 27 Sep 2022 13:02:08 GMT
X-Firefox-Spdy: h2
www.comfyballs.no/wp-content/cache/busting/9/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min-1638874946.js
200 OK 0 B URL HTTP/2 www.comfyballs.no/wp-content/cache/busting/9/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min-1638874946.js
IP
GET /wp-content/cache/busting/9/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min-1638874946.js HTTP/1.1
Host: www.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/butikk/dame/t-skjorter/comfy-tee-black-cotton-woman/?utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Comfyballs+Comfy+Tee+Black+Woman+Cotton
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 27 Sep 2022 13:02:06 GMT
content-type: application/javascript
last-modified: Tue, 27 Sep 2022 01:32:30 GMT
vary: Accept-Encoding
etag: W/"633252ae-72a"
expires: Wed, 27 Sep 2023 13:02:06 GMT
cache-control: max-age=31536000
x-rocket-nginx-bypass: No
content-encoding: gzip
X-Firefox-Spdy: h2
www.comfyballs.no/wp-content/cache/min/9/wp-content/plugins/nhg-product-groups/assets/js/product-groups-40662be5990e580e5c53d7dbef598f88.js
200 OK 0 B URL HTTP/2 www.comfyballs.no/wp-content/cache/min/9/wp-content/plugins/nhg-product-groups/assets/js/product-groups-40662be5990e580e5c53d7dbef598f88.js
IP
GET /wp-content/cache/min/9/wp-content/plugins/nhg-product-groups/assets/js/product-groups-40662be5990e580e5c53d7dbef598f88.js HTTP/1.1
Host: www.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/butikk/dame/t-skjorter/comfy-tee-black-cotton-woman/?utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Comfyballs+Comfy+Tee+Black+Woman+Cotton
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 27 Sep 2022 13:02:06 GMT
content-type: application/javascript
last-modified: Tue, 27 Sep 2022 01:32:50 GMT
vary: Accept-Encoding
etag: W/"633252c2-109"
expires: Wed, 27 Sep 2023 13:02:06 GMT
cache-control: max-age=31536000
x-rocket-nginx-bypass: No
content-encoding: gzip
X-Firefox-Spdy: h2
www.comfyballs.no/wp-content/themes/comfyballs/img/logo-dark.svg
200 OK 0 B URL HTTP/2 www.comfyballs.no/wp-content/themes/comfyballs/img/logo-dark.svg
IP
GET /wp-content/themes/comfyballs/img/logo-dark.svg HTTP/1.1
Host: www.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/butikk/dame/t-skjorter/comfy-tee-black-cotton-woman/?utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Comfyballs+Comfy+Tee+Black+Woman+Cotton
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 27 Sep 2022 13:02:06 GMT
content-type: image/svg+xml
last-modified: Tue, 29 Jun 2021 07:54:18 GMT
vary: Accept-Encoding
etag: W/"60dad1aa-3dfd"
expires: Wed, 27 Sep 2023 13:02:06 GMT
cache-control: max-age=31536000
x-rocket-nginx-bypass: No
content-encoding: gzip
X-Firefox-Spdy: h2
analytics.tiktok.com/i18n/pixel/identify.js
200 OK 0 B URL HTTP/2 analytics.tiktok.com/i18n/pixel/identify.js
IP
ASN #20940 Akamai International B.V.
GET /i18n/pixel/identify.js HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
x-tt-logid: 20220927130207FEFF77DCBC819E1F05B0
x-tt-trace-host: 016eabbbec2a80a817c88fdee8d986cf60459c918a449af51d55daa38da0f8465b0be634410c44d6b1b59f6fa8dadaf90e9a6a7ae56d018887c8c0ff7026e39b6cfc7397bf729a89d71a72ed1f303f3b60
content-encoding: gzip
expires: Tue, 27 Sep 2022 13:02:07 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Tue, 27 Sep 2022 13:02:07 GMT
x-cache: TCP_MISS from a23-36-79-28.deploy.akamaitechnologies.com (AkamaiGHost/10.9.4-44125806) (-)
vary: Accept-Encoding
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: inner; dur=3, cdn-cache; desc=MISS, edge; dur=1, origin; dur=102
x-origin-response-time: 102,23.36.79.28
x-akamai-request-id: 57d9996e
X-Firefox-Spdy: h2
tr.snapchat.com/collector/is_enabled?pids=0b1a219a-b17c-4af4-b093-a1fce1299e92&tld=no
200 OK 0 B URL HTTP/2 tr.snapchat.com/collector/is_enabled?pids=0b1a219a-b17c-4af4-b093-a1fce1299e92&tld=no
IP
GET /collector/is_enabled?pids=0b1a219a-b17c-4af4-b093-a1fce1299e92&tld=no HTTP/1.1
Host: tr.snapchat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.comfyballs.no/
Origin: https://www.comfyballs.no
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 27 Sep 2022 13:02:07 GMT
access-control-allow-origin: https://www.comfyballs.no
content-type: application/json
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-envoy-upstream-service-time: 0
content-encoding: gzip
vary: Accept-Encoding
server: API Gateway
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.comfyballs.no/wp-content/cache/min/9/bad08918caf18192e14dc3a15dfd4403.css
200 OK 0 B URL HTTP/2 www.comfyballs.no/wp-content/cache/min/9/bad08918caf18192e14dc3a15dfd4403.css
IP
GET /wp-content/cache/min/9/bad08918caf18192e14dc3a15dfd4403.css HTTP/1.1
Host: www.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/butikk/dame/t-skjorter/comfy-tee-black-cotton-woman/?utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Comfyballs+Comfy+Tee+Black+Woman+Cotton
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 27 Sep 2022 13:02:06 GMT
content-type: text/css
last-modified: Tue, 27 Sep 2022 01:32:51 GMT
vary: Accept-Encoding
etag: W/"633252c3-f7854"
expires: Wed, 27 Sep 2023 13:02:06 GMT
cache-control: max-age=31536000
x-rocket-nginx-bypass: No
content-encoding: gzip
X-Firefox-Spdy: h2
www.comfyballs.no/wp-content/cache/busting/9/wp/wp-includes/js/jquery/jquery.min-1638874947.js
200 OK 0 B URL HTTP/2 www.comfyballs.no/wp-content/cache/busting/9/wp/wp-includes/js/jquery/jquery.min-1638874947.js
IP
GET /wp-content/cache/busting/9/wp/wp-includes/js/jquery/jquery.min-1638874947.js HTTP/1.1
Host: www.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/butikk/dame/t-skjorter/comfy-tee-black-cotton-woman/?utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Comfyballs+Comfy+Tee+Black+Woman+Cotton
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 27 Sep 2022 13:02:06 GMT
content-type: application/javascript
last-modified: Tue, 27 Sep 2022 01:32:30 GMT
vary: Accept-Encoding
etag: W/"633252ae-15db1"
expires: Wed, 27 Sep 2023 13:02:06 GMT
cache-control: max-age=31536000
x-rocket-nginx-bypass: No
content-encoding: gzip
X-Firefox-Spdy: h2
www.clarity.ms/eus2/s/0.6.41/clarity.js
200 OK 0 B URL HTTP/2 www.clarity.ms/eus2/s/0.6.41/clarity.js
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
GET /eus2/s/0.6.41/clarity.js HTTP/1.1
Host: www.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public,max-age=86400
content-type: application/javascript;charset=utf-8
content-encoding: br
last-modified: Wed, 01 Jun 2022 12:22:22 GMT
accept-ranges: bytes
etag: "1d8d107429df470"
vary: Accept-Encoding
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
x-powered-by: ASP.NET
x-cache: CONFIG_NOCACHE
x-azure-ref: 0UPQyYwAAAABv8ZKKEi9qSJPKKDPWZLgBT1NMMjMxMDUwMjAzMDI5ADZjZmJlZWUwLTUwMjctNDg0Yi04OTY3LTRhMjlhZjc3ZjFlMQ==
date: Tue, 27 Sep 2022 13:02:08 GMT
X-Firefox-Spdy: h2
www.comfyballs.no/wp-content/cache/busting/9/wp-content/themes/proto/js/sticky-sidebar.min-1624953258.js
200 OK 0 B URL HTTP/2 www.comfyballs.no/wp-content/cache/busting/9/wp-content/themes/proto/js/sticky-sidebar.min-1624953258.js
IP
GET /wp-content/cache/busting/9/wp-content/themes/proto/js/sticky-sidebar.min-1624953258.js HTTP/1.1
Host: www.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/butikk/dame/t-skjorter/comfy-tee-black-cotton-woman/?utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Comfyballs+Comfy+Tee+Black+Woman+Cotton
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 27 Sep 2022 13:02:06 GMT
content-type: application/javascript
last-modified: Tue, 27 Sep 2022 01:32:30 GMT
vary: Accept-Encoding
etag: W/"633252ae-2e78"
expires: Wed, 27 Sep 2023 13:02:06 GMT
cache-control: max-age=31536000
x-rocket-nginx-bypass: No
content-encoding: gzip
X-Firefox-Spdy: h2
www.comfyballs.no/wp-content/cache/busting/9/wp/wp-includes/js/dist/hooks.min-1638874947.js
200 OK 0 B URL HTTP/2 www.comfyballs.no/wp-content/cache/busting/9/wp/wp-includes/js/dist/hooks.min-1638874947.js
IP
GET /wp-content/cache/busting/9/wp/wp-includes/js/dist/hooks.min-1638874947.js HTTP/1.1
Host: www.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/butikk/dame/t-skjorter/comfy-tee-black-cotton-woman/?utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Comfyballs+Comfy+Tee+Black+Woman+Cotton
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 27 Sep 2022 13:02:06 GMT
content-type: application/javascript
last-modified: Tue, 27 Sep 2022 01:32:30 GMT
vary: Accept-Encoding
etag: W/"633252ae-1540"
expires: Wed, 27 Sep 2023 13:02:06 GMT
cache-control: max-age=31536000
x-rocket-nginx-bypass: No
content-encoding: gzip
X-Firefox-Spdy: h2
www.comfyballs.no/wp-content/cache/busting/9/wp-content/themes/proto/js/micromodal.min-1624953258.js
200 OK 0 B URL HTTP/2 www.comfyballs.no/wp-content/cache/busting/9/wp-content/themes/proto/js/micromodal.min-1624953258.js
IP
GET /wp-content/cache/busting/9/wp-content/themes/proto/js/micromodal.min-1624953258.js HTTP/1.1
Host: www.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/butikk/dame/t-skjorter/comfy-tee-black-cotton-woman/?utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Comfyballs+Comfy+Tee+Black+Woman+Cotton
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 27 Sep 2022 13:02:06 GMT
content-type: application/javascript
last-modified: Tue, 27 Sep 2022 01:32:51 GMT
vary: Accept-Encoding
etag: W/"633252c3-1b10"
expires: Wed, 27 Sep 2023 13:02:06 GMT
cache-control: max-age=31536000
x-rocket-nginx-bypass: No
content-encoding: gzip
X-Firefox-Spdy: h2
www.comfyballs.no/wp-content/themes/proto/img/logoer/klarna.svg
200 OK 0 B URL HTTP/2 www.comfyballs.no/wp-content/themes/proto/img/logoer/klarna.svg
IP
GET /wp-content/themes/proto/img/logoer/klarna.svg HTTP/1.1
Host: www.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/butikk/dame/t-skjorter/comfy-tee-black-cotton-woman/?utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Comfyballs+Comfy+Tee+Black+Woman+Cotton
Cookie: _sp_id.397d=5631bb0933249ee6.1664283725.1.1664283725.1664283725; _sp_ses.397d=*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 27 Sep 2022 13:02:06 GMT
content-type: image/svg+xml
last-modified: Tue, 29 Jun 2021 07:54:18 GMT
vary: Accept-Encoding
etag: W/"60dad1aa-10df"
expires: Wed, 27 Sep 2023 13:02:06 GMT
cache-control: max-age=31536000
x-rocket-nginx-bypass: No
content-encoding: gzip
X-Firefox-Spdy: h2
www.comfyballs.no/wp-content/cache/busting/9/wp-content/plugins/nhg-slack/assets/js/check-fb-cookie.min-1655287452.js
200 OK 0 B URL HTTP/2 www.comfyballs.no/wp-content/cache/busting/9/wp-content/plugins/nhg-slack/assets/js/check-fb-cookie.min-1655287452.js
IP
GET /wp-content/cache/busting/9/wp-content/plugins/nhg-slack/assets/js/check-fb-cookie.min-1655287452.js HTTP/1.1
Host: www.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/butikk/dame/t-skjorter/comfy-tee-black-cotton-woman/?utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Comfyballs+Comfy+Tee+Black+Woman+Cotton
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 27 Sep 2022 13:02:06 GMT
content-type: application/javascript
last-modified: Tue, 27 Sep 2022 01:32:51 GMT
vary: Accept-Encoding
etag: W/"633252c3-1e0"
expires: Wed, 27 Sep 2023 13:02:06 GMT
cache-control: max-age=31536000
x-rocket-nginx-bypass: No
content-encoding: gzip
X-Firefox-Spdy: h2
www.comfyballs.no/wp-content/cache/busting/9/wp/wp-includes/js/dist/vendor/wp-polyfill.min-1638874947.js
200 OK 0 B URL HTTP/2 www.comfyballs.no/wp-content/cache/busting/9/wp/wp-includes/js/dist/vendor/wp-polyfill.min-1638874947.js
IP
GET /wp-content/cache/busting/9/wp/wp-includes/js/dist/vendor/wp-polyfill.min-1638874947.js HTTP/1.1
Host: www.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/butikk/dame/t-skjorter/comfy-tee-black-cotton-woman/?utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Comfyballs+Comfy+Tee+Black+Woman+Cotton
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 27 Sep 2022 13:02:06 GMT
content-type: application/javascript
last-modified: Tue, 27 Sep 2022 01:32:30 GMT
vary: Accept-Encoding
etag: W/"633252ae-4056"
expires: Wed, 27 Sep 2023 13:02:06 GMT
cache-control: max-age=31536000
x-rocket-nginx-bypass: No
content-encoding: gzip
X-Firefox-Spdy: h2
www.comfyballs.no/wp-content/plugins/wp-rocket/assets/js/lazyload/12.0/lazyload.min.js
200 OK 0 B URL HTTP/2 www.comfyballs.no/wp-content/plugins/wp-rocket/assets/js/lazyload/12.0/lazyload.min.js
IP
GET /wp-content/plugins/wp-rocket/assets/js/lazyload/12.0/lazyload.min.js HTTP/1.1
Host: www.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/butikk/dame/t-skjorter/comfy-tee-black-cotton-woman/?utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Comfyballs+Comfy+Tee+Black+Woman+Cotton
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 27 Sep 2022 13:02:06 GMT
content-type: application/javascript
last-modified: Tue, 24 Nov 2020 08:31:44 GMT
vary: Accept-Encoding
etag: W/"5fbcc4f0-15d1"
expires: Wed, 27 Sep 2023 13:02:06 GMT
cache-control: max-age=31536000
x-rocket-nginx-bypass: No
content-encoding: gzip
X-Firefox-Spdy: h2
www.comfyballs.no/wp-content/cache/min/9/wp-content/plugins/nhg-js-cookie-analytics/js/nhgjsca-9b29bc31c7f94a25c96bf8bc611e5607.js
200 OK 0 B URL HTTP/2 www.comfyballs.no/wp-content/cache/min/9/wp-content/plugins/nhg-js-cookie-analytics/js/nhgjsca-9b29bc31c7f94a25c96bf8bc611e5607.js
IP
GET /wp-content/cache/min/9/wp-content/plugins/nhg-js-cookie-analytics/js/nhgjsca-9b29bc31c7f94a25c96bf8bc611e5607.js HTTP/1.1
Host: www.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/butikk/dame/t-skjorter/comfy-tee-black-cotton-woman/?utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Comfyballs+Comfy+Tee+Black+Woman+Cotton
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 27 Sep 2022 13:02:06 GMT
content-type: application/javascript
last-modified: Tue, 27 Sep 2022 01:32:30 GMT
vary: Accept-Encoding
etag: W/"633252ae-28f"
expires: Wed, 27 Sep 2023 13:02:06 GMT
cache-control: max-age=31536000
x-rocket-nginx-bypass: No
content-encoding: gzip
X-Firefox-Spdy: h2
track.adform.net/serving/scripts/trackpoint/async/
301 Moved Permanently 0 B URL HTTP/2 track.adform.net/serving/scripts/trackpoint/async/
IP
GET /serving/scripts/trackpoint/async/ HTTP/1.1
Host: track.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: nginx
date: Tue, 27 Sep 2022 13:02:07 GMT
content-type: text/html
location: https://s2.adform.net/banners/scripts/st/trackpoint-async.js
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
www.comfyballs.no/wp-content/cache/min/9/wp-content/themes/proto/js/menu-7cae0a356ed4516713fcbe0c05c5d5aa.js
200 OK 0 B URL HTTP/2 www.comfyballs.no/wp-content/cache/min/9/wp-content/themes/proto/js/menu-7cae0a356ed4516713fcbe0c05c5d5aa.js
IP
GET /wp-content/cache/min/9/wp-content/themes/proto/js/menu-7cae0a356ed4516713fcbe0c05c5d5aa.js HTTP/1.1
Host: www.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/butikk/dame/t-skjorter/comfy-tee-black-cotton-woman/?utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Comfyballs+Comfy+Tee+Black+Woman+Cotton
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 27 Sep 2022 13:02:06 GMT
content-type: application/javascript
last-modified: Tue, 27 Sep 2022 01:32:30 GMT
vary: Accept-Encoding
etag: W/"633252ae-cce"
expires: Wed, 27 Sep 2023 13:02:06 GMT
cache-control: max-age=31536000
x-rocket-nginx-bypass: No
content-encoding: gzip
X-Firefox-Spdy: h2
www.comfyballs.no/wp-content/cache/min/9/wp-content/plugins/nhg-klaviyo/assets/js/viewed-product-5c342030e0b85eb57e1fd8ea32ad000e.js
200 OK 0 B URL HTTP/2 www.comfyballs.no/wp-content/cache/min/9/wp-content/plugins/nhg-klaviyo/assets/js/viewed-product-5c342030e0b85eb57e1fd8ea32ad000e.js
IP
GET /wp-content/cache/min/9/wp-content/plugins/nhg-klaviyo/assets/js/viewed-product-5c342030e0b85eb57e1fd8ea32ad000e.js HTTP/1.1
Host: www.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/butikk/dame/t-skjorter/comfy-tee-black-cotton-woman/?utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Comfyballs+Comfy+Tee+Black+Woman+Cotton
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 27 Sep 2022 13:02:06 GMT
content-type: application/javascript
last-modified: Tue, 27 Sep 2022 01:32:50 GMT
vary: Accept-Encoding
etag: W/"633252c2-1c5"
expires: Wed, 27 Sep 2023 13:02:06 GMT
cache-control: max-age=31536000
x-rocket-nginx-bypass: No
content-encoding: gzip
X-Firefox-Spdy: h2
www.comfyballs.no/wp-content/cache/busting/9/wp/wp-includes/js/underscore.min-1638874947.js
200 OK 0 B URL HTTP/2 www.comfyballs.no/wp-content/cache/busting/9/wp/wp-includes/js/underscore.min-1638874947.js
IP
GET /wp-content/cache/busting/9/wp/wp-includes/js/underscore.min-1638874947.js HTTP/1.1
Host: www.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/butikk/dame/t-skjorter/comfy-tee-black-cotton-woman/?utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Comfyballs+Comfy+Tee+Black+Woman+Cotton
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 27 Sep 2022 13:02:06 GMT
content-type: application/javascript
last-modified: Tue, 27 Sep 2022 01:32:51 GMT
vary: Accept-Encoding
etag: W/"633252c3-4a84"
expires: Wed, 27 Sep 2023 13:02:06 GMT
cache-control: max-age=31536000
x-rocket-nginx-bypass: No
content-encoding: gzip
X-Firefox-Spdy: h2
www.comfyballs.no/wp-content/cache/busting/9/wp/wp-includes/js/wp-util.min-1638874947.js
200 OK 0 B URL HTTP/2 www.comfyballs.no/wp-content/cache/busting/9/wp/wp-includes/js/wp-util.min-1638874947.js
IP
GET /wp-content/cache/busting/9/wp/wp-includes/js/wp-util.min-1638874947.js HTTP/1.1
Host: www.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/butikk/dame/t-skjorter/comfy-tee-black-cotton-woman/?utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Comfyballs+Comfy+Tee+Black+Woman+Cotton
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 27 Sep 2022 13:02:06 GMT
content-type: application/javascript
last-modified: Tue, 27 Sep 2022 01:32:51 GMT
vary: Accept-Encoding
etag: W/"633252c3-53c"
expires: Wed, 27 Sep 2023 13:02:06 GMT
cache-control: max-age=31536000
x-rocket-nginx-bypass: No
content-encoding: gzip
X-Firefox-Spdy: h2
www.comfyballs.no/wp-content/cache/min/9/wp-content/themes/proto/js/single-product-a3a8253b4125d3c49cd38ea3b4e55641.js
200 OK 0 B URL HTTP/2 www.comfyballs.no/wp-content/cache/min/9/wp-content/themes/proto/js/single-product-a3a8253b4125d3c49cd38ea3b4e55641.js
IP
GET /wp-content/cache/min/9/wp-content/themes/proto/js/single-product-a3a8253b4125d3c49cd38ea3b4e55641.js HTTP/1.1
Host: www.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/butikk/dame/t-skjorter/comfy-tee-black-cotton-woman/?utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Comfyballs+Comfy+Tee+Black+Woman+Cotton
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 27 Sep 2022 13:02:06 GMT
content-type: application/javascript
last-modified: Tue, 27 Sep 2022 01:32:50 GMT
vary: Accept-Encoding
etag: W/"633252c2-18be"
expires: Wed, 27 Sep 2023 13:02:06 GMT
cache-control: max-age=31536000
x-rocket-nginx-bypass: No
content-encoding: gzip
X-Firefox-Spdy: h2
www.comfyballs.no/wp-content/cache/min/9/wp-content/themes/proto/js/defer-inline-js-c5f4326dbc809014a25d8dbb8388f92d.js
200 OK 0 B URL HTTP/2 www.comfyballs.no/wp-content/cache/min/9/wp-content/themes/proto/js/defer-inline-js-c5f4326dbc809014a25d8dbb8388f92d.js
IP
GET /wp-content/cache/min/9/wp-content/themes/proto/js/defer-inline-js-c5f4326dbc809014a25d8dbb8388f92d.js HTTP/1.1
Host: www.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/butikk/dame/t-skjorter/comfy-tee-black-cotton-woman/?utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Comfyballs+Comfy+Tee+Black+Woman+Cotton
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 27 Sep 2022 13:02:06 GMT
content-type: application/javascript
last-modified: Tue, 27 Sep 2022 01:32:30 GMT
vary: Accept-Encoding
etag: W/"633252ae-b6"
expires: Wed, 27 Sep 2023 13:02:06 GMT
cache-control: max-age=31536000
x-rocket-nginx-bypass: No
content-encoding: gzip
X-Firefox-Spdy: h2
tr.snapchat.com/init?pids=0b1a219a-b17c-4af4-b093-a1fce1299e92
200 OK 0 B URL HTTP/2 tr.snapchat.com/init?pids=0b1a219a-b17c-4af4-b093-a1fce1299e92
IP
GET /init?pids=0b1a219a-b17c-4af4-b093-a1fce1299e92 HTTP/1.1
Host: tr.snapchat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.comfyballs.no/
Origin: https://www.comfyballs.no
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 27 Sep 2022 13:02:07 GMT
access-control-allow-origin: https://www.comfyballs.no
content-type: application/json
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-envoy-upstream-service-time: 0
content-encoding: gzip
vary: Accept-Encoding
server: API Gateway
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.comfyballs.no/wp-content/cache/busting/9/wp-content/plugins/woocommerce/assets/js/frontend/single-product.min-1638874946.js
200 OK 0 B URL HTTP/2 www.comfyballs.no/wp-content/cache/busting/9/wp-content/plugins/woocommerce/assets/js/frontend/single-product.min-1638874946.js
IP
GET /wp-content/cache/busting/9/wp-content/plugins/woocommerce/assets/js/frontend/single-product.min-1638874946.js HTTP/1.1
Host: www.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/butikk/dame/t-skjorter/comfy-tee-black-cotton-woman/?utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Comfyballs+Comfy+Tee+Black+Woman+Cotton
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 27 Sep 2022 13:02:06 GMT
content-type: application/javascript
last-modified: Tue, 27 Sep 2022 01:32:51 GMT
vary: Accept-Encoding
etag: W/"633252c3-18d8"
expires: Wed, 27 Sep 2023 13:02:06 GMT
cache-control: max-age=31536000
x-rocket-nginx-bypass: No
content-encoding: gzip
X-Firefox-Spdy: h2
www.comfyballs.no/wp-content/cache/busting/9/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min-1638874946.js
200 OK 0 B URL HTTP/2 www.comfyballs.no/wp-content/cache/busting/9/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min-1638874946.js
IP
GET /wp-content/cache/busting/9/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min-1638874946.js HTTP/1.1
Host: www.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/butikk/dame/t-skjorter/comfy-tee-black-cotton-woman/?utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Comfyballs+Comfy+Tee+Black+Woman+Cotton
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 27 Sep 2022 13:02:06 GMT
content-type: application/javascript
last-modified: Tue, 27 Sep 2022 01:32:30 GMT
vary: Accept-Encoding
etag: W/"633252ae-2549"
expires: Wed, 27 Sep 2023 13:02:06 GMT
cache-control: max-age=31536000
x-rocket-nginx-bypass: No
content-encoding: gzip
X-Firefox-Spdy: h2
www.comfyballs.no/wp-content/cache/min/9/wp-content/plugins/nhg-mailchimp/assets/js/frontend-9c9e0168bb842a04fdd85ec285678e4e.js
200 OK 0 B URL HTTP/2 www.comfyballs.no/wp-content/cache/min/9/wp-content/plugins/nhg-mailchimp/assets/js/frontend-9c9e0168bb842a04fdd85ec285678e4e.js
IP
GET /wp-content/cache/min/9/wp-content/plugins/nhg-mailchimp/assets/js/frontend-9c9e0168bb842a04fdd85ec285678e4e.js HTTP/1.1
Host: www.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/butikk/dame/t-skjorter/comfy-tee-black-cotton-woman/?utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Comfyballs+Comfy+Tee+Black+Woman+Cotton
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 27 Sep 2022 13:02:06 GMT
content-type: application/javascript
last-modified: Tue, 27 Sep 2022 01:32:30 GMT
vary: Accept-Encoding
etag: W/"633252ae-40e"
expires: Wed, 27 Sep 2023 13:02:06 GMT
cache-control: max-age=31536000
x-rocket-nginx-bypass: No
content-encoding: gzip
X-Firefox-Spdy: h2
www.comfyballs.no/wp-content/cache/min/9/wp-content/plugins/nhg-klaviyo/assets/js/identify-browser-0d157c01fb5ed89060ff72337ae8945e.js
200 OK 0 B URL HTTP/2 www.comfyballs.no/wp-content/cache/min/9/wp-content/plugins/nhg-klaviyo/assets/js/identify-browser-0d157c01fb5ed89060ff72337ae8945e.js
IP
GET /wp-content/cache/min/9/wp-content/plugins/nhg-klaviyo/assets/js/identify-browser-0d157c01fb5ed89060ff72337ae8945e.js HTTP/1.1
Host: www.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/butikk/dame/t-skjorter/comfy-tee-black-cotton-woman/?utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Comfyballs+Comfy+Tee+Black+Woman+Cotton
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 27 Sep 2022 13:02:06 GMT
content-type: application/javascript
last-modified: Tue, 27 Sep 2022 01:32:30 GMT
vary: Accept-Encoding
etag: W/"633252ae-187"
expires: Wed, 27 Sep 2023 13:02:06 GMT
cache-control: max-age=31536000
x-rocket-nginx-bypass: No
content-encoding: gzip
X-Firefox-Spdy: h2
67.227.226.240
23.36.77.32
95.101.97.70
95.211.116.27
35.178.30.159
157.240.200.35
104.18.32.68