r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a26d0784548ecab22f417f3d689daf23
8893b79366bbadeb5c8d587b8f023e310694df1c
35baaae7b3ce3110ebb2b075881cfab55ecf3eab57d834283fd18ac691b41fa2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "35BAAAE7B3CE3110EBB2B075881CFAB55ECF3EAB57D834283FD18AC691B41FA2"
Last-Modified: Tue, 20 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5033
Expires: Thu, 22 Sep 2022 17:38:58 GMT
Date: Thu, 22 Sep 2022 16:15:05 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 2d12f67fe57a87e7366b662d153a5582
d7b02d81cc74f24a251d9363e0f4b0a149264ec1
73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Backoff, Content-Length, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Thu, 22 Sep 2022 15:23:09 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: OVp8dWZ9r_QzKClB9BbghoIUwnNQQSU7FRGErKt6xs1bC_4a7UGFCQ==
Age: 3116
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash afb65a07bf7214addf83d17a53acba32
a8e973204431320aa7b362a4e73944520c4b51b9
46e1a9e6c98245afb7fa84bc6d9ba6844105024e2d3f56e28748e6c321475d02
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "46E1A9E6C98245AFB7FA84BC6D9BA6844105024E2D3F56E28748E6C321475D02"
Last-Modified: Wed, 21 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2384
Expires: Thu, 22 Sep 2022 16:54:49 GMT
Date: Thu, 22 Sep 2022 16:15:05 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP
File type PEM certificate\012- , ASCII text
Hash 6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 3dMvS9mRTS9t4E7AT/dY4o0zJjeDzthilB3YaTfUerTaQvFSGY+Oq3y1GJQDqY7MxbTHcU6zKasViRCk+gRIwA==
x-amz-request-id: EQK0EDFE7M0SK65S
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 22 Sep 2022 15:46:21 GMT
age: 1724
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
etag: "6113f8408c59aebe188d6af273b90743"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 22 Sep 2022 16:15:05 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
davidrigney.blogspot.com/2010/06/
200 OK 34 kB URL HTTP/1.1 davidrigney.blogspot.com/2010/06/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (1440)
Hash 36357c49010dfb1528ed60de16bc8b20
9dec1df68ffde3a59d40132688fe4d81ee99a4b3
dc38bdf44ad0fbb96cb9df00a069a48c72e4beb72283539b8fa6109b9f461b86
GET /2010/06/ HTTP/1.1
Host: davidrigney.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Expires: Thu, 22 Sep 2022 16:15:05 GMT
Date: Thu, 22 Sep 2022 16:15:05 GMT
Cache-Control: private, max-age=0
Last-Modified: Wed, 17 Aug 2022 22:32:18 GMT
ETag: W/"92be7b1aba5e188a76d10d5a0140bc0435e93e5bfc842159022e68e3ee470479"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 33567
Server: GSE
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Thu, 22 Sep 2022 16:03:22 GMT
Cache-Control: max-age=3600
Expires: Thu, 22 Sep 2022 16:17:27 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 3VO0YEWOdBezmUggTV61xJrS3TW72jd04u1UE05XaCHWnHmg-bjEPw==
Age: 703
ocsp.digicert.com/
200 OK 471 B IP
Hash 86624f45fb3b7126dbe002f69c94dd86
30bcf274db5037122f989fb25dbf1e72c9ec417b
2cc9600578cf057dc499835773fb495caa60ac154c4945f0fc1f2b31d43f5502
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2742
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 16:15:05 GMT
Last-Modified: Thu, 22 Sep 2022 15:29:24 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 471
davidrigney.blogspot.com/js/cookienotice.js
200 OK 2.0 kB URL HTTP/1.1 davidrigney.blogspot.com/js/cookienotice.js
IP
Hash c4e1ed83d89245089b8a1203be20a377
f3940e1215b89300ef97d57a25993f25243b8688
afa801a129ff6fc98533118275db8a7d4a38fc91f8ab55ed4c19b864255e68d2
GET /js/cookienotice.js HTTP/1.1
Host: davidrigney.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://davidrigney.blogspot.com/2010/06/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Type: text/javascript
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 2026
Date: Thu, 22 Sep 2022 16:15:05 GMT
Expires: Thu, 29 Sep 2022 16:15:05 GMT
Cache-Control: public, max-age=604800
Last-Modified: Thu, 22 Sep 2022 14:53:26 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 017b35db8b7a44fb09d592e4f01e6221
52b62eda95cb2dc0fd4bb767f336dbeb0755071d
cf55ac8ca259aaa5113a2eb7bfdedc82cee487381dfe970f258503b55a996ffe
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 16:15:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a66068824c8bed97e895f8f292ef0623
704bb22deb8b53f64e199eea05e680cf93f1192a
2e7f65288c12ebae7ed8e7616377045016d8ea89017d7429b68d8ded3a90c633
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 16:15:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.blogger.com/static/v1/widgets/1416043673-widgets.js
200 OK 57 kB URL HTTP/2 www.blogger.com/static/v1/widgets/1416043673-widgets.js
IP
File type ASCII text, with very long lines (2221)
Hash c6aef9cbd2abf926a23970b70f8a24c2
78972b4f41a7d2580c383da41e3a472c4cfc647a
111111066b8f3fddcd24cedce8c4e8b93a1d9e9b8e3f5f2959172da5adda14b6
GET /static/v1/widgets/1416043673-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://davidrigney.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 56913
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 21 Sep 2022 02:21:33 GMT
expires: Thu, 21 Sep 2023 02:21:33 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 21 Sep 2022 00:51:51 GMT
content-type: text/javascript
age: 136412
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
resources.blogblog.com/img/icon18_edit_allbkg.gif
200 OK 162 B URL HTTP/2 resources.blogblog.com/img/icon18_edit_allbkg.gif
IP
File type GIF image data, version 89a, 18 x 18\012- data
Hash c991641178ff05adf0d004298b5eafa9
d8f6ce8ecd92b86d49849360f6b81ceb10b4c941
ca9848e6006cfec8f9ffa29433ade8152204bdb95579200831c6dc0f53dff70b
GET /img/icon18_edit_allbkg.gif HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://davidrigney.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 162
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 21 Sep 2022 18:39:38 GMT
expires: Wed, 28 Sep 2022 18:39:38 GMT
cache-control: public, max-age=604800
last-modified: Wed, 21 Sep 2022 13:53:25 GMT
content-type: image/gif
age: 77727
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.blogger.com/static/v1/widgets/2975350028-css_bundle_v2.css
200 OK 7.8 kB URL HTTP/2 www.blogger.com/static/v1/widgets/2975350028-css_bundle_v2.css
IP
File type ASCII text, with very long lines (35959)
Hash 5aa2d3297bdc86bc81322aedecbb5e79
1c0a3c007e41726e167e79b70ddea76198650884
feae1fac625d0f30b5f10fa00b62df1a5600cd2178062c427e55f289b29cc630
GET /static/v1/widgets/2975350028-css_bundle_v2.css HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://davidrigney.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 7776
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 22 Sep 2022 07:10:12 GMT
expires: Fri, 22 Sep 2023 07:10:12 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 21 Sep 2022 22:56:47 GMT
content-type: text/css
age: 32693
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 4O18td7eruEEy4zCl38zEw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: WQkixKk7Ih5Vl5/aw1FFbBVGvrs=
www.gmodules.com/ig/ifr?url=http://www.google.com/ig/modules/translatemypage.xml&up_source_language=en&w=160&h=60&title=&border=&output=js
404 Not Found 117 B URL HTTP/1.1 www.gmodules.com/ig/ifr?url=http://www.google.com/ig/modules/translatemypage.xml&up_source_language=en&w=160&h=60&title=&border=&output=js
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 50e010e6df7baa397fb4070b6553cff8
fe7f8b322f493e27d54136a1d3d562d8c2afbab7
e69da6f4387d34867cfdf001ad4ede46f8e78ddd3d4cceb1535b7cf6f3c84932
GET /ig/ifr?url=http://www.google.com/ig/modules/translatemypage.xml&up_source_language=en&w=160&h=60&title=&border=&output=js HTTP/1.1
Host: www.gmodules.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://davidrigney.blogspot.com/
HTTP/1.1 404 Not Found
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Thu, 22 Sep 2022 16:15:05 GMT
Content-Type: text/html; charset=UTF-8
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
X-XSS-Protection: 1; mode=block
Content-Length: 117
Server: GSE
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 31dee602cf981b72cb225fe18ddc89b4
611ced99c4802df1b4a5cae459d50d84c7486e79
5d37667cd66d7e7a20738e5b35a5a91eba5b86451a84a12b1e71077efc3f439e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 16:15:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.widgetserver.com/syndication/subscriber/InsertWidget.js
200 OK 157 B URL HTTP/1.1 cdn.widgetserver.com/syndication/subscriber/InsertWidget.js
IP
Hash 67e216a27dda24bdcb086c2385b0cb99
17141c80f5d32bec3691c5ab24741d8b7dd5f0c6
9dc433b2142d3ba0803fcffa53f19d34da26996d20c829df6d694bc887325dd7
Analyzer Verdict Alert fortinet Malware
GET /syndication/subscriber/InsertWidget.js HTTP/1.1
Host: cdn.widgetserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://davidrigney.blogspot.com/
HTTP/1.1 200 OK
server: openresty/1.13.6.1
date: Thu, 22 Sep 2022 16:15:05 GMT
content-type: application/javascript
content-length: 157
last-modified: Fri, 09 Mar 2018 19:33:30 GMT
etag: "5aa2e18a-9d"
accept-ranges: bytes
connection: close
apis.google.com/js/platform.js
200 OK 20 kB URL HTTP/2 apis.google.com/js/platform.js
IP
File type ASCII text, with very long lines (1277)
Hash b5a31516be83fe4f962609045d824f88
939a49a9858bf23561279f9ca2d1941d3256c66f
edb661aa461800e97e3847608a8b2d81cfe345f69a6f84abaa001d8a60500328
GET /js/platform.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://davidrigney.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 20361
date: Thu, 22 Sep 2022 16:15:05 GMT
expires: Thu, 22 Sep 2022 16:15:05 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "40c22a9ccbd70870"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.z9QjrzsHcOc.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo8359JQqZQ0dzCVJ5Ui3CZcERHEWA/cb=gapi.loaded_0?le=scs
200 OK 58 kB URL HTTP/2 apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.z9QjrzsHcOc.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo8359JQqZQ0dzCVJ5Ui3CZcERHEWA/cb=gapi.loaded_0?le=scs
IP
File type ASCII text, with very long lines (580)
Hash d70fcc84d705c565b31a5835c0938d5b
d28e5dc9fcc6239d67986df3205468072023d2d7
1d558c94793446aa6a7832dde0c39ed7d9c77fd963ffb738c460e4f7369a7f4e
GET /_/scs/abc-static/_/js/k=gapi.lb.en.z9QjrzsHcOc.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo8359JQqZQ0dzCVJ5Ui3CZcERHEWA/cb=gapi.loaded_0?le=scs HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://davidrigney.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 57995
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 18 Sep 2022 07:25:35 GMT
expires: Mon, 18 Sep 2023 07:25:35 GMT
cache-control: public, max-age=31536000
age: 377370
last-modified: Sat, 30 Jul 2022 15:17:53 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/pagead/js/google_top_exp.js
200 OK 67 B URL HTTP/1.1 pagead2.googlesyndication.com/pagead/js/google_top_exp.js
IP
Hash 9bbc3ca32ec951a484589ce0e6b4db73
753d6f6183b33b2dee5dde2208fca91c17f5bb13
b8f16a16d2a7ea39a9cc079fdbe3af7d31393d62a853668bdd549e0a0311cb3c
GET /pagead/js/google_top_exp.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://davidrigney.blogspot.com/
HTTP/1.1 200 OK
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 67
X-XSS-Protection: 0
Date: Thu, 22 Sep 2022 09:51:18 GMT
Expires: Thu, 06 Oct 2022 09:51:18 GMT
Cache-Control: public, max-age=1209600
ETag: 13036835877489095579
Content-Type: text/javascript; charset=UTF-8
Age: 23027
www.blogger.com/dyn-css/authorization.css?targetBlogID=18623795&zx=06ae913f-e337-4e0b-b84e-1bf73027a53f
200 OK 21 B URL HTTP/2 www.blogger.com/dyn-css/authorization.css?targetBlogID=18623795&zx=06ae913f-e337-4e0b-b84e-1bf73027a53f
IP
File type very short file (no magic)
Hash a62e4d501434033d5d177e67d3aafdd0
34f7300c9ed47334cf10826d57af785321e3138b
b0cabcbfed4b1830ab1956efbd2eec32289a968323cb854a47ef98360ed0f522
GET /dyn-css/authorization.css?targetBlogID=18623795&zx=06ae913f-e337-4e0b-b84e-1bf73027a53f HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://davidrigney.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/css; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 22 Sep 2022 16:15:05 GMT
last-modified: Thu, 22 Sep 2022 16:15:05 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 21
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.blogger.com/img/share_buttons_20_3.png
200 OK 5.1 kB URL HTTP/2 www.blogger.com/img/share_buttons_20_3.png
IP
File type PNG image data, 120 x 60, 8-bit/color RGBA, non-interlaced\012- data
Hash ad9999106d5f550920b586e8e1704e5a
93fd02c51166402a41f96509cd0ca3fb917877dd
3829a5b2ade7cfc416c80b8f3df71e49e68672875f025d525223978f5cee3fd3
GET /img/share_buttons_20_3.png HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/static/v1/widgets/2975350028-css_bundle_v2.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 5080
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 22 Sep 2022 05:59:46 GMT
expires: Thu, 29 Sep 2022 05:59:46 GMT
cache-control: public, max-age=604800
last-modified: Wed, 21 Sep 2022 13:53:25 GMT
content-type: image/png
age: 36919
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
themes.googleusercontent.com/image?id=1fupio4xM9eVxyr-k5QC5RiCJlYR35r9dXsp63RKsKt64v33poi2MvnjkX_1MULBY8BsT&options=w1600
301 Moved Permanently 0 B URL HTTP/1.1 themes.googleusercontent.com/image?id=1fupio4xM9eVxyr-k5QC5RiCJlYR35r9dXsp63RKsKt64v33poi2MvnjkX_1MULBY8BsT&options=w1600
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /image?id=1fupio4xM9eVxyr-k5QC5RiCJlYR35r9dXsp63RKsKt64v33poi2MvnjkX_1MULBY8BsT&options=w1600 HTTP/1.1
Host: themes.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://davidrigney.blogspot.com/
HTTP/1.1 301 Moved Permanently
Content-Type: application/binary
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Thu, 22 Sep 2022 16:15:05 GMT
Location: https://themes.googleusercontent.com/image?id=1fupio4xM9eVxyr-k5QC5RiCJlYR35r9dXsp63RKsKt64v33poi2MvnjkX_1MULBY8BsT&options=w1600
Server: ESF
Content-Length: 0
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
www.blogblog.com/1kt/transparent/header_gradient_shade.png
200 OK 424 B URL HTTP/1.1 www.blogblog.com/1kt/transparent/header_gradient_shade.png
IP
File type PNG image data, 88 x 300, 8-bit colormap, non-interlaced\012- data
Hash 68d74f6988b7bcb8d69e382c1769f6af
956161f38d64d4fbf81cafe0b009339dcdbcb73c
4bf4e9296165fffe3661a6a978e175f37f9ff65e6ac2beb9f40a92e2d96710c3
GET /1kt/transparent/header_gradient_shade.png HTTP/1.1
Host: www.blogblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://davidrigney.blogspot.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 424
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Thu, 22 Sep 2022 06:58:24 GMT
Expires: Thu, 29 Sep 2022 06:58:24 GMT
Cache-Control: public, max-age=604800
Last-Modified: Wed, 21 Sep 2022 07:51:25 GMT
Content-Type: image/png
Age: 33401
img1.blogblog.com/img/icon18_email.gif
200 OK 164 B URL HTTP/1.1 img1.blogblog.com/img/icon18_email.gif
IP
File type GIF image data, version 89a, 18 x 13\012- data
Hash 36b9f993db1b953f3b9b08040aaf9af4
18248661b307586dc291fd2dff4bb59cf7579475
1258cbe1e2900ec3df11a83a6bb6008d7a833f783a6df80b0d5d45a052ac1466
GET /img/icon18_email.gif HTTP/1.1
Host: img1.blogblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://davidrigney.blogspot.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 164
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Thu, 22 Sep 2022 01:25:46 GMT
Expires: Thu, 29 Sep 2022 01:25:46 GMT
Cache-Control: public, max-age=604800
Last-Modified: Wed, 21 Sep 2022 22:56:47 GMT
Content-Type: image/gif
Age: 53359
static2.px.yelp.com/static/20090717/i/new/p.gif
301 Moved Permanently 0 B URL HTTP/1.1 static2.px.yelp.com/static/20090717/i/new/p.gif
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /static/20090717/i/new/p.gif HTTP/1.1
Host: static2.px.yelp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://davidrigney.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: Varnish
Retry-After: 0
Content-Length: 0
Accept-Ranges: bytes
Date: Thu, 22 Sep 2022 16:15:05 GMT
Via: 1.1 varnish
Connection: close
X-Served-By: cache-bma1622-BMA
X-Cache: MISS
X-Cache-Hits: 0
X-Timer: S1663863306.900613,VS0,VE0
Location: https://static2.px.yelp.com/static/20090717/i/new/p.gif
www.blogblog.com/1kt/transparent/white80.png
200 OK 96 B URL HTTP/1.1 www.blogblog.com/1kt/transparent/white80.png
IP
File type PNG image data, 20 x 20, 1-bit colormap, non-interlaced\012- data
Hash 94a1820903fb1f98de19df188a6ad531
599ad7d04fd5b1fa13f334e95240a5a9f4a66583
6e232a3693a281342acc16b293dddeafcf91579f1b52df2cf22303b17c2a0e57
GET /1kt/transparent/white80.png HTTP/1.1
Host: www.blogblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://davidrigney.blogspot.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 96
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Wed, 21 Sep 2022 16:23:08 GMT
Expires: Wed, 28 Sep 2022 16:23:08 GMT
Cache-Control: public, max-age=604800
Last-Modified: Tue, 20 Sep 2022 23:54:43 GMT
Content-Type: image/png
Age: 85917
realbird.com/images2/RealBird-Property-Search-Logo.png
301 Moved Permanently 0 B URL HTTP/1.1 realbird.com/images2/RealBird-Property-Search-Logo.png
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images2/RealBird-Property-Search-Logo.png HTTP/1.1
Host: realbird.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://davidrigney.blogspot.com/
HTTP/1.1 301 Moved Permanently
Date: Thu, 22 Sep 2022 16:15:05 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Thu, 22 Sep 2022 17:15:05 GMT
Location: https://realbird.com/images2/RealBird-Property-Search-Logo.png
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=10doIocpk2P7rjVDexe9FqI9TE1oz%2BrNFgx7ZsxZuhiRq5gMPVOAK3N2dFvxBExYHDMoDbrqhaFXd7V8YRi3mHwEjC4ylQuq1eTo4fQjwdKXlvTCbIZZKPE5EI1iew%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74ec565ddf72b4ee-OSL
alt-svc: h2=":443"; ma=60
i4.ytimg.com/vi/sIFYPQjYhv8/hqdefault.jpg
200 OK 6.4 kB URL HTTP/1.1 i4.ytimg.com/vi/sIFYPQjYhv8/hqdefault.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3\012- data
Hash e859955a52cf0541555bbc6423b911fe
4c1011aec67233e4cfabaf3adae501d586150bd9
efebaa3a1f851d909822348f9d1fefa4c075b5626f01114c3854b3a9b693136c
GET /vi/sIFYPQjYhv8/hqdefault.jpg HTTP/1.1
Host: i4.ytimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://davidrigney.blogspot.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: image/jpeg
Vary: Origin
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube"
Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
Timing-Allow-Origin: *
Content-Length: 6366
Date: Thu, 22 Sep 2022 16:15:05 GMT
Expires: Thu, 22 Sep 2022 18:15:05 GMT
Cache-Control: public, max-age=7200
ETag: "0"
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
i4.ytimg.com/vi/sFW9u0JQsHk/hqdefault.jpg
404 Not Found 1.1 kB URL HTTP/1.1 i4.ytimg.com/vi/sFW9u0JQsHk/hqdefault.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x90, components 3\012- data
Hash e2ddfee11ae7edcae257da47f3a78a70
6e902fa6302eb30cd204579bca6a59b37233e262
20e9aab22032d85684d7d916a1013f7c577a132a5b10ea3fd3578e8d0b28a711
GET /vi/sFW9u0JQsHk/hqdefault.jpg HTTP/1.1
Host: i4.ytimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://davidrigney.blogspot.com/
HTTP/1.1 404 Not Found
Vary: Origin
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Content-Type: image/jpeg
Date: Thu, 22 Sep 2022 16:15:05 GMT
Expires: Thu, 22 Sep 2022 16:15:35 GMT
Cache-Control: public, max-age=30
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 1097
X-XSS-Protection: 0
i2.ytimg.com/vi/YM1rg2umdVI/hqdefault.jpg
404 Not Found 1.1 kB URL HTTP/1.1 i2.ytimg.com/vi/YM1rg2umdVI/hqdefault.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x90, components 3\012- data
Hash e2ddfee11ae7edcae257da47f3a78a70
6e902fa6302eb30cd204579bca6a59b37233e262
20e9aab22032d85684d7d916a1013f7c577a132a5b10ea3fd3578e8d0b28a711
GET /vi/YM1rg2umdVI/hqdefault.jpg HTTP/1.1
Host: i2.ytimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://davidrigney.blogspot.com/
HTTP/1.1 404 Not Found
Vary: Origin
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Content-Type: image/jpeg
Date: Thu, 22 Sep 2022 16:15:05 GMT
Expires: Thu, 22 Sep 2022 16:15:35 GMT
Cache-Control: public, max-age=30
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 1097
X-XSS-Protection: 0
i4.ytimg.com/vi/SS61VmyoqZg/hqdefault.jpg
404 Not Found 1.1 kB URL HTTP/1.1 i4.ytimg.com/vi/SS61VmyoqZg/hqdefault.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x90, components 3\012- data
Hash e2ddfee11ae7edcae257da47f3a78a70
6e902fa6302eb30cd204579bca6a59b37233e262
20e9aab22032d85684d7d916a1013f7c577a132a5b10ea3fd3578e8d0b28a711
GET /vi/SS61VmyoqZg/hqdefault.jpg HTTP/1.1
Host: i4.ytimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://davidrigney.blogspot.com/
HTTP/1.1 404 Not Found
Vary: Origin
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Content-Type: image/jpeg
Date: Thu, 22 Sep 2022 16:15:05 GMT
Expires: Thu, 22 Sep 2022 16:15:35 GMT
Cache-Control: public, max-age=30
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 1097
X-XSS-Protection: 0
i4.ytimg.com/vi/GSR1gegvoA4/hqdefault.jpg
404 Not Found 1.1 kB URL HTTP/1.1 i4.ytimg.com/vi/GSR1gegvoA4/hqdefault.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x90, components 3\012- data
Hash e2ddfee11ae7edcae257da47f3a78a70
6e902fa6302eb30cd204579bca6a59b37233e262
20e9aab22032d85684d7d916a1013f7c577a132a5b10ea3fd3578e8d0b28a711
GET /vi/GSR1gegvoA4/hqdefault.jpg HTTP/1.1
Host: i4.ytimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://davidrigney.blogspot.com/
HTTP/1.1 404 Not Found
Vary: Origin
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Content-Type: image/jpeg
Date: Thu, 22 Sep 2022 16:15:05 GMT
Expires: Thu, 22 Sep 2022 16:15:35 GMT
Cache-Control: public, max-age=30
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 1097
X-XSS-Protection: 0
downlinesecrets2.com/images/250x72.gif
302 Moved Temporarily 0 B URL HTTP/1.1 downlinesecrets2.com/images/250x72.gif
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/250x72.gif HTTP/1.1
Host: downlinesecrets2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://davidrigney.blogspot.com/
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Thu, 22 Sep 2022 16:15:05 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.41
Location: http://www.hz-spring.net/images/250x72.gif
banners.wunderground.com/weathersticker/htmlSticker1/language/www/US/IL/Chicago-O'Hare_International.gif
503 Service Unavailable: Back-end server is at capacity 0 B URL HTTP/1.1 banners.wunderground.com/weathersticker/htmlSticker1/language/www/US/IL/Chicago-O'Hare_International.gif
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /weathersticker/htmlSticker1/language/www/US/IL/Chicago-O'Hare_International.gif HTTP/1.1
Host: banners.wunderground.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://davidrigney.blogspot.com/
HTTP/1.1 503 Service Unavailable: Back-end server is at capacity
Content-Length: 0
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a66068824c8bed97e895f8f292ef0623
704bb22deb8b53f64e199eea05e680cf93f1192a
2e7f65288c12ebae7ed8e7616377045016d8ea89017d7429b68d8ded3a90c633
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 16:15:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
i1.ytimg.com/vi/TeZDSizLtdk/hqdefault.jpg
200 OK 9.9 kB URL HTTP/1.1 i1.ytimg.com/vi/TeZDSizLtdk/hqdefault.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3\012- data
Hash b9d05d4b18deab2499d53a6d9db59725
77ce8ab40bc1933c77a55ca21f7869e2b7b2a73e
f69ce475068ef8e5ff627d67ab3523f0cbe3dbb3ede857f0a39368323d209d2b
GET /vi/TeZDSizLtdk/hqdefault.jpg HTTP/1.1
Host: i1.ytimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://davidrigney.blogspot.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: image/jpeg
Vary: Origin
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube"
Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
Timing-Allow-Origin: *
Content-Length: 9855
Date: Thu, 22 Sep 2022 16:15:06 GMT
Expires: Thu, 22 Sep 2022 18:15:06 GMT
Cache-Control: public, max-age=7200
ETag: "0"
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
i2.ytimg.com/vi/I7IqSXVyqco/hqdefault.jpg
200 OK 14 kB URL HTTP/1.1 i2.ytimg.com/vi/I7IqSXVyqco/hqdefault.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3\012- data
Hash cd1d2a665a0c2af76c32a6d4cd7d75d6
6f5ac32e0b205b1b92dfd8fccb4586d8c8e5e680
354e1dffa3ba8b4c48d6647988094b392d6f3ebabf7a7df59d59cbe4f636258a
GET /vi/I7IqSXVyqco/hqdefault.jpg HTTP/1.1
Host: i2.ytimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://davidrigney.blogspot.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: image/jpeg
Vary: Origin
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube"
Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
Timing-Allow-Origin: *
Content-Length: 13782
Date: Thu, 22 Sep 2022 16:15:06 GMT
Expires: Thu, 22 Sep 2022 18:15:06 GMT
Cache-Control: public, max-age=7200
ETag: "0"
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
cdn.widgetserver.com/
200 OK 7.2 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (336)
Hash dfb4be32cf7833f03125f2293446cd1c
c0722509950a6485afe62c6b332db4d26b91734d
d749a3e823692aa3208bf752cfb8d5388f1e04f714fceaa1af71476981cdef49
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: cdn.widgetserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://davidrigney.blogspot.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
server: openresty/1.13.6.1
date: Thu, 22 Sep 2022 16:15:06 GMT
content-type: text/html; charset=utf-8
content-length: 7174
vary: Accept-Language
content-language: en
connection: close
cdn.widgetserver.com/mtm/async/.eJxdjksOwiAQhu_CshJwqTWexVCY0kl4OYxtjfHugnHl7pv_lXmJB6EYhRZSGPK1YSOCGQioHQtzGbV2ZkVH6BM81RSyryWzsjn22pIr35KJ0OLWJbWh88AVaAXqmb5sLRRuPsPOeuEYpCkloDWMOem9K4f9X43hcr8e1VliNB50e2H-4QZTkYMevv5JvD8raEQE:1obOqw:-Ux4ikzNeCmGqhvkzQe-8b8leP0/1/0
200 OK 256 B URL HTTP/1.1 cdn.widgetserver.com/mtm/async/.eJxdjksOwiAQhu_CshJwqTWexVCY0kl4OYxtjfHugnHl7pv_lXmJB6EYhRZSGPK1YSOCGQioHQtzGbV2ZkVH6BM81RSyryWzsjn22pIr35KJ0OLWJbWh88AVaAXqmb5sLRRuPsPOeuEYpCkloDWMOem9K4f9X43hcr8e1VliNB50e2H-4QZTkYMevv5JvD8raEQE:1obOqw:-Ux4ikzNeCmGqhvkzQe-8b8leP0/1/0
IP
File type ASCII text, with no line terminators
Hash 574a7f60d60a088b39df53110e48e652
b55534c05010e3550f7154c128ef57fb0571607a
6e5dfd4cea0ac098b8e7d2b476fdb0ccac7fbeb7dfdf5534ff8be8b28b1a6bd2
Analyzer Verdict Alert fortinet Malware
GET /mtm/async/.eJxdjksOwiAQhu_CshJwqTWexVCY0kl4OYxtjfHugnHl7pv_lXmJB6EYhRZSGPK1YSOCGQioHQtzGbV2ZkVH6BM81RSyryWzsjn22pIr35KJ0OLWJbWh88AVaAXqmb5sLRRuPsPOeuEYpCkloDWMOem9K4f9X43hcr8e1VliNB50e2H-4QZTkYMevv5JvD8raEQE:1obOqw:-Ux4ikzNeCmGqhvkzQe-8b8leP0/1/0 HTTP/1.1
Host: cdn.widgetserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://cdn.widgetserver.com/
Connection: keep-alive
HTTP/1.1 200 OK
server: openresty/1.13.6.1
date: Thu, 22 Sep 2022 16:15:06 GMT
content-type: text/html; charset=utf-8
content-length: 256
x-mtm-path: 4
x-mtm-prov: 70:0.00;1:7.16
x-mtm-rd: 0.98
vary: Accept-Language
content-language: en
set-cookie: mtm_delivered=WyJ3aWRnZXRzZXJ2ZXIuY29tIiwiaHR0cDovL3d3dzEud2lkZ2V0c2VydmVyLmNvbS8_dG09MSZzdWJpZDQ9MTY2Mzg2MzMwNi4wNDk1ODEwMDAwJktXMT1FdXJvcGUlMjBEZWRpY2F0ZWQlMjBTZXJ2ZXJzJktXMj1Ob3J3YXklMjBEZWRpY2F0ZWQlMjBTZXJ2ZXJzJktXMz1Pc2xvJTIwQ291bnR5JTIwRGVkaWNhdGVkJTIwU2VydmVycyZLVzQ9T3NsbyUyMERlZGljYXRlZCUyMFNlcnZlcnMmS1c1PUN1c3RvbSUyMERlZGljYXRlZCUyMFNlcnZlcnMmc2VhcmNoYm94PTAmYmFja2ZpbGw9MCIsMSwiMjAyMi0wOS0yMiAxNjoxNTowNiIsMSwiMTY2Mzg2MzMwNi4wNDk1ODEwMDAwIiwxLG51bGwsbnVsbF0:1obOqw:aAlwkI-5C100mvKPoefEz-LH0rA; expires=Thu, 22-Sep-2022 17:15:06 GMT; Max-Age=3600; Path=/
connection: close
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8ebb267e443b81854ef9a01b3eb6489d
b932e9e5679da5a9160da5429458041765509b52
4ac5aa5b4fb4a85282b825c5c0ed7b1aaf2b39ffe77d69dec5123a84709f3fe2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10767
Expires: Thu, 22 Sep 2022 19:14:34 GMT
Date: Thu, 22 Sep 2022 16:15:07 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8ebb267e443b81854ef9a01b3eb6489d
b932e9e5679da5a9160da5429458041765509b52
4ac5aa5b4fb4a85282b825c5c0ed7b1aaf2b39ffe77d69dec5123a84709f3fe2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10767
Expires: Thu, 22 Sep 2022 19:14:34 GMT
Date: Thu, 22 Sep 2022 16:15:07 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8ebb267e443b81854ef9a01b3eb6489d
b932e9e5679da5a9160da5429458041765509b52
4ac5aa5b4fb4a85282b825c5c0ed7b1aaf2b39ffe77d69dec5123a84709f3fe2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10767
Expires: Thu, 22 Sep 2022 19:14:34 GMT
Date: Thu, 22 Sep 2022 16:15:07 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8ebb267e443b81854ef9a01b3eb6489d
b932e9e5679da5a9160da5429458041765509b52
4ac5aa5b4fb4a85282b825c5c0ed7b1aaf2b39ffe77d69dec5123a84709f3fe2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10767
Expires: Thu, 22 Sep 2022 19:14:34 GMT
Date: Thu, 22 Sep 2022 16:15:07 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8ebb267e443b81854ef9a01b3eb6489d
b932e9e5679da5a9160da5429458041765509b52
4ac5aa5b4fb4a85282b825c5c0ed7b1aaf2b39ffe77d69dec5123a84709f3fe2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10767
Expires: Thu, 22 Sep 2022 19:14:34 GMT
Date: Thu, 22 Sep 2022 16:15:07 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67bb0692-30b9-4b69-a748-f7a4474a72e0.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67bb0692-30b9-4b69-a748-f7a4474a72e0.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9becda6e892a190dbbc63216ae697506
ba3369e1827d8f01ca10acb8648195847dd02ffd
d71dd28e0ff260326ba0c30748fa11160f4544c2a264d3a3dc361af0de9fd283
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67bb0692-30b9-4b69-a748-f7a4474a72e0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11286
x-amzn-requestid: 7263b60d-fffe-4c0b-8de5-59dc9ac92a47
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y1GwZHOaIAMFSQQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632b84cf-62e160b156b587cc21c7fda5;Sampled=0
x-amzn-remapped-date: Wed, 21 Sep 2022 21:40:31 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: QxgrVMX7xwI6qE3T3-LRS3JWoJauPyvCSb9TacW9-ktw-BIq5PSF-g==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 ee330666adf9f04c8c30094f8ddcd004.cloudfront.net (CloudFront), 1.1 google
date: Wed, 21 Sep 2022 22:16:03 GMT
etag: "ba3369e1827d8f01ca10acb8648195847dd02ffd"
content-type: image/jpeg
age: 64744
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F32d94aa1-e164-4f98-8fe2-beb3868db074.jpeg
200 OK 5.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F32d94aa1-e164-4f98-8fe2-beb3868db074.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5f4438521bfdc6871ae384abcb7da547
a17fc7a7c30999b8789011c2064f5a8704b00eee
2e40ac154724af625c4858b09b90fa3f6a600b70c9e5e959598f0cdb05a78847
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F32d94aa1-e164-4f98-8fe2-beb3868db074.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5402
x-amzn-requestid: 56e3a080-a8df-4385-ab3e-20e1f822083f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YYvaLH1-IAMFbgA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63202c40-28f492196d5699066cb53d39;Sampled=0
x-amzn-remapped-date: Tue, 13 Sep 2022 07:07:45 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: QJVjyx5R1h8EqiP1Utg85VU9JTO9ubMbY3DaHaM6KC66d72039Mo_w==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 989017835f43d594873bde5a7ee7fe5e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Sep 2022 13:11:04 GMT
age: 11043
etag: "a17fc7a7c30999b8789011c2064f5a8704b00eee"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faf89a4b3-f586-4870-ab26-efb054f637fd.jpeg
200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faf89a4b3-f586-4870-ab26-efb054f637fd.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 91c56f0b9810bfdd84e10a626b89e389
15d83e44d568938b6c9c87201e898cedb3edec0a
942de9764e1c408f7512759774aab0479db201e6fae15ccc39e653adae4cb86f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faf89a4b3-f586-4870-ab26-efb054f637fd.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8678
x-amzn-requestid: c671a9ab-c5d0-4743-b13e-cc9a47e3d2fe
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y1F0vEThIAMFSwQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632b8351-17ed13811d3833ea00a34423;Sampled=0
x-amzn-remapped-date: Wed, 21 Sep 2022 21:34:09 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: hp-WIGb9M8tEmNGOVjx6UQKx9E4-1oJmka0a6seG7inahqYByPmRAg==
via: 1.1 95b0ac620fa3a80ee590ecf1cda1c698.cloudfront.net (CloudFront), 1.1 9c675215120a4ade8754c4357ef2f3ea.cloudfront.net (CloudFront), 1.1 google
date: Wed, 21 Sep 2022 21:34:22 GMT
age: 67245
etag: "15d83e44d568938b6c9c87201e898cedb3edec0a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc2f739db-1c27-4929-8aff-997c0f66b2ed.jpeg
200 OK 5.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc2f739db-1c27-4929-8aff-997c0f66b2ed.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a5edcd9aee78a6cacc9241b47cbce598
f95b843029e84dbb188427a8c2ff8c9f32740465
6a56c3d0eb1d641e565d3d7d31b42be03bdad30beb20b994ffc9a6f2aaceee1e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc2f739db-1c27-4929-8aff-997c0f66b2ed.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5650
x-amzn-requestid: 41ceb886-c038-4ba0-9e3a-a27879cf48ce
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y1GwjFVjoAMFWNQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632b84d0-3f4f6a367c893c7a0669dffe;Sampled=0
x-amzn-remapped-date: Wed, 21 Sep 2022 21:40:32 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: d8Kelwi2OY0jt17q80szh8-ErN3ZQM1hhl3HZeNQvlKijygQIJtNww==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 567b44ed19c8caed2570b7bcd8c70034.cloudfront.net (CloudFront), 1.1 google
date: Wed, 21 Sep 2022 22:16:00 GMT
etag: "f95b843029e84dbb188427a8c2ff8c9f32740465"
content-type: image/jpeg
age: 64747
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dee9427-1c1b-4ddc-9f89-8c6e254bd0f1.jpeg
200 OK 8.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dee9427-1c1b-4ddc-9f89-8c6e254bd0f1.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 62818de3c50f957b2e5680851a1768c9
80e48c9ae48c89598780736b089c98e22d58df9a
16f2c2d23e8641a3f297a175730343d11120a228c0fe846c0fdf1e39212c522c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dee9427-1c1b-4ddc-9f89-8c6e254bd0f1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8549
x-amzn-requestid: 6d44626b-16c6-4f19-ae52-d5350065b390
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y1GwPHJJoAMFdfA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632b84ce-46ebc35612eb7a4473b36189;Sampled=0
x-amzn-remapped-date: Wed, 21 Sep 2022 21:40:30 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: e5m6NaDUH_3GPDkxbk6iKhffSJzyYMA97Illy7mtg9um3jcYBR6TXQ==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 ebe4011a81a36e2bf678f69ce1711330.cloudfront.net (CloudFront), 1.1 google
date: Wed, 21 Sep 2022 22:11:23 GMT
etag: "80e48c9ae48c89598780736b089c98e22d58df9a"
content-type: image/jpeg
age: 65024
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0788498f-41db-4d62-b749-e01caddb7f8d.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0788498f-41db-4d62-b749-e01caddb7f8d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash af5773255351157d72c28a670a355c60
c803e5866edbe6c9baec14e93677f610bdf09bff
3229b4aa1c698647ad96d114174782549ad240f1b2c4ba8c268165a16afc84f0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0788498f-41db-4d62-b749-e01caddb7f8d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10754
x-amzn-requestid: 2d03531d-6055-477f-9cb6-9ea9fa27eeb9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y1F0vHJ4IAMF42Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632b8351-692620e80d5b2efe1d0e3a82;Sampled=0
x-amzn-remapped-date: Wed, 21 Sep 2022 21:34:09 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: -3bQG5Av1EDxj7_3i8MktwjlPSEU8WDdxt5M6TsrWaodLWgSf3vdEA==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 68fadeb91f97256bb67b03bfca74d830.cloudfront.net (CloudFront), 1.1 google
date: Wed, 21 Sep 2022 21:34:22 GMT
age: 67245
etag: "c803e5866edbe6c9baec14e93677f610bdf09bff"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www1.widgetserver.com/?tm=1&subid4=1663863306.0495810000&KW1=Europe%20Dedicated%20Servers&KW2=Norway%20Dedicated%20Servers&KW3=Oslo%20County%20Dedicated%20Servers&KW4=Oslo%20Dedicated%20Servers&KW5=Custom%20Dedicated%20Servers&searchbox=0&backfill=0
200 OK 2.5 kB URL HTTP/1.1 www1.widgetserver.com/?tm=1&subid4=1663863306.0495810000&KW1=Europe%20Dedicated%20Servers&KW2=Norway%20Dedicated%20Servers&KW3=Oslo%20County%20Dedicated%20Servers&KW4=Oslo%20Dedicated%20Servers&KW5=Custom%20Dedicated%20Servers&searchbox=0&backfill=0
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2238)
Hash 79eabfcaa627116ee42b9231500b1749
f736ae094045392b98ad87781d4771a19702b7f9
edc41c68d1552d2b9b89e706f3d49cdf6d585f043b64fdae5b8b717a42599e34
GET /?tm=1&subid4=1663863306.0495810000&KW1=Europe%20Dedicated%20Servers&KW2=Norway%20Dedicated%20Servers&KW3=Oslo%20County%20Dedicated%20Servers&KW4=Oslo%20Dedicated%20Servers&KW5=Custom%20Dedicated%20Servers&searchbox=0&backfill=0 HTTP/1.1
Host: www1.widgetserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://cdn.widgetserver.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Thu, 22 Sep 2022 16:15:07 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Vary: Accept-Encoding
X-Redirect: zeropark_zeroclick
X-Template: tpl_CleanPeppermintBlack_twoclick
X-Language: norwegian
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
Content-Encoding: gzip
d38psrni17bvxu.cloudfront.net/scripts/js3.js
200 OK 1.1 kB URL HTTP/1.1 d38psrni17bvxu.cloudfront.net/scripts/js3.js
IP
File type ASCII text, with very long lines (506)
Hash 64b79b43df8fbf2c5d082964b9116a68
dc3c763519baf0f4c32bb60bfc429651a491ea01
c57e9feec209e3ea5eb1d75a1ba6fa277242a3df250055be8446052b51e58637
GET /scripts/js3.js HTTP/1.1
Host: d38psrni17bvxu.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www1.widgetserver.com/
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 1134
Connection: keep-alive
Server: nginx
Date: Thu, 22 Sep 2022 09:14:27 GMT
Last-Modified: Tue, 17 Aug 2021 09:17:22 GMT
Accept-Ranges: bytes
ETag: "611b7ea2-46e"
X-Cache: Hit from cloudfront
Via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Oetq8X5tpFSVMGYoVQHO6yprEhx01nTlzUnuIKOjbE2KjWqT9sAQoA==
Age: 25240
www1.widgetserver.com/track.php?domain=widgetserver.com&toggle=browserjs&uid=MTY2Mzg2MzMwNi45Mjc2OjcwNThjZDQ1ZGNkOGU1NmJjYTViY2IyY2IwMTIwYTg4NzljNDdkYjhiZjFhYzA5MmY2MGFkMWM2MDUxYWE5YWQ6NjMyYzhhMGFlMjc4Yw%3D%3D
200 OK 20 B URL HTTP/1.1 www1.widgetserver.com/track.php?domain=widgetserver.com&toggle=browserjs&uid=MTY2Mzg2MzMwNi45Mjc2OjcwNThjZDQ1ZGNkOGU1NmJjYTViY2IyY2IwMTIwYTg4NzljNDdkYjhiZjFhYzA5MmY2MGFkMWM2MDUxYWE5YWQ6NjMyYzhhMGFlMjc4Yw%3D%3D
IP
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /track.php?domain=widgetserver.com&toggle=browserjs&uid=MTY2Mzg2MzMwNi45Mjc2OjcwNThjZDQ1ZGNkOGU1NmJjYTViY2IyY2IwMTIwYTg4NzljNDdkYjhiZjFhYzA5MmY2MGFkMWM2MDUxYWE5YWQ6NjMyYzhhMGFlMjc4Yw%3D%3D HTTP/1.1
Host: www1.widgetserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www1.widgetserver.com/?tm=1&subid4=1663863306.0495810000&KW1=Europe%20Dedicated%20Servers&KW2=Norway%20Dedicated%20Servers&KW3=Oslo%20County%20Dedicated%20Servers&KW4=Oslo%20Dedicated%20Servers&KW5=Custom%20Dedicated%20Servers&searchbox=0&backfill=0
HTTP/1.1 200 OK
Date: Thu, 22 Sep 2022 16:15:08 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Vary: Accept-Encoding
X-Custom-Track: browserjs
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
Access-Control-Allow-Origin: *
Content-Encoding: gzip
www1.widgetserver.com/ls.php
201 Created 0 B URL HTTP/1.1 www1.widgetserver.com/ls.php
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Malware
POST /ls.php HTTP/1.1
Host: www1.widgetserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Content-Length: 2190
Origin: http://www1.widgetserver.com
Connection: keep-alive
Referer: http://www1.widgetserver.com/?tm=1&subid4=1663863306.0495810000&KW1=Europe%20Dedicated%20Servers&KW2=Norway%20Dedicated%20Servers&KW3=Oslo%20County%20Dedicated%20Servers&KW4=Oslo%20Dedicated%20Servers&KW5=Custom%20Dedicated%20Servers&searchbox=0&backfill=0
HTTP/1.1 201 Created
Date: Thu, 22 Sep 2022 16:15:08 GMT
Content-Type: text/javascript;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
X-Log-Success: 632c8a0cf425b769f75914ab
Charset: utf-8
Access-Control-Allow-Origin: http://www1.widgetserver.com
Access-Control-Allow-Methods: POST, OPTIONS
Access-Control-Max-Age: 86400
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_SUPSYTS2PCRh8Ls5zp1NSmxeij00Qvlwhvjl2cyGx0vBj3mon9/x1+ONnws1ZpP257yznaZ50Ban0jeT28eI6Q==
www1.widgetserver.com/track.php?click=7734c042495d131ef4c95617c4712d5c9f446293&domain=widgetserver.com&uid=MTY2Mzg2MzMwNi45Mjc2OjcwNThjZDQ1ZGNkOGU1NmJjYTViY2IyY2IwMTIwYTg4NzljNDdkYjhiZjFhYzA5MmY2MGFkMWM2MDUxYWE5YWQ6NjMyYzhhMGFlMjc4Yw%3D%3D&ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTF8fHx8fHw2MzJjOGEwYWUyNzZkfHx8MTY2Mzg2MzMwNy4yNjcyfGMwZWFjNGZlNmM2MzEwNGMyNDRlNGJhNTE1MTM4YmM0Mjg3NjJhNjR8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXwyNDc4YTI4N2U1YmE0MTJiNjFhNTM1YTMxMTYyZGVlZDg2OGM2ZTcxfDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MA%3D%3D&kw=&search=&pcat=&rxid=&bucket=&clientID=&adtest=off
200 OK 20 B URL HTTP/1.1 www1.widgetserver.com/track.php?click=7734c042495d131ef4c95617c4712d5c9f446293&domain=widgetserver.com&uid=MTY2Mzg2MzMwNi45Mjc2OjcwNThjZDQ1ZGNkOGU1NmJjYTViY2IyY2IwMTIwYTg4NzljNDdkYjhiZjFhYzA5MmY2MGFkMWM2MDUxYWE5YWQ6NjMyYzhhMGFlMjc4Yw%3D%3D&ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTF8fHx8fHw2MzJjOGEwYWUyNzZkfHx8MTY2Mzg2MzMwNy4yNjcyfGMwZWFjNGZlNmM2MzEwNGMyNDRlNGJhNTE1MTM4YmM0Mjg3NjJhNjR8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXwyNDc4YTI4N2U1YmE0MTJiNjFhNTM1YTMxMTYyZGVlZDg2OGM2ZTcxfDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MA%3D%3D&kw=&search=&pcat=&rxid=&bucket=&clientID=&adtest=off
IP
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /track.php?click=7734c042495d131ef4c95617c4712d5c9f446293&domain=widgetserver.com&uid=MTY2Mzg2MzMwNi45Mjc2OjcwNThjZDQ1ZGNkOGU1NmJjYTViY2IyY2IwMTIwYTg4NzljNDdkYjhiZjFhYzA5MmY2MGFkMWM2MDUxYWE5YWQ6NjMyYzhhMGFlMjc4Yw%3D%3D&ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTF8fHx8fHw2MzJjOGEwYWUyNzZkfHx8MTY2Mzg2MzMwNy4yNjcyfGMwZWFjNGZlNmM2MzEwNGMyNDRlNGJhNTE1MTM4YmM0Mjg3NjJhNjR8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXwyNDc4YTI4N2U1YmE0MTJiNjFhNTM1YTMxMTYyZGVlZDg2OGM2ZTcxfDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MA%3D%3D&kw=&search=&pcat=&rxid=&bucket=&clientID=&adtest=off HTTP/1.1
Host: www1.widgetserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www1.widgetserver.com/?tm=1&subid4=1663863306.0495810000&KW1=Europe%20Dedicated%20Servers&KW2=Norway%20Dedicated%20Servers&KW3=Oslo%20County%20Dedicated%20Servers&KW4=Oslo%20Dedicated%20Servers&KW5=Custom%20Dedicated%20Servers&searchbox=0&backfill=0
HTTP/1.1 200 OK
Date: Thu, 22 Sep 2022 16:15:08 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Vary: Accept-Encoding
X-View-Match: true
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
Access-Control-Allow-Origin: *
Content-Encoding: gzip
irene-eux.com/zcvisitor/b93e4c13-3a91-11ed-83ce-0a7c3f0539b9/85aefdc2-9ed0-48aa-922d-60f9f9fc0f2d?campaignid=b95185f6-3a91-11ed-83ce-0a7c3f0539b9
200 996 B URL HTTP/1.1 irene-eux.com/zcvisitor/b93e4c13-3a91-11ed-83ce-0a7c3f0539b9/85aefdc2-9ed0-48aa-922d-60f9f9fc0f2d?campaignid=b95185f6-3a91-11ed-83ce-0a7c3f0539b9
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 0389a33139f30aae5232f68aaf3f7c21
515ce329138d663c03a7c2051fb2dd6db3df1de4
06760561cd7ef27636f2bb91914ac8ddb6cc4f10ba03729c47627e09d65f4ade
GET /zcvisitor/b93e4c13-3a91-11ed-83ce-0a7c3f0539b9/85aefdc2-9ed0-48aa-922d-60f9f9fc0f2d?campaignid=b95185f6-3a91-11ed-83ce-0a7c3f0539b9 HTTP/1.1
Host: irene-eux.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www1.widgetserver.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200
Date: Thu, 22 Sep 2022 16:15:08 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Headers: X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag
Server: MJTfgiYl
irene-eux.com/zcredirect?visitid=b93e4c13-3a91-11ed-83ce-0a7c3f0539b9&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false
200 284 B URL HTTP/1.1 irene-eux.com/zcredirect?visitid=b93e4c13-3a91-11ed-83ce-0a7c3f0539b9&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash aad1336c60e698828ce3a345bb3c72f0
e05c4163d42f28ce3d7a70e1677f3486c511ded3
90080ac6d7fcfed3bf08f11889850af3eb66207cfa30cff2033d3ebf2b344240
GET /zcredirect?visitid=b93e4c13-3a91-11ed-83ce-0a7c3f0539b9&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false HTTP/1.1
Host: irene-eux.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://irene-eux.com/zcvisitor/b93e4c13-3a91-11ed-83ce-0a7c3f0539b9/85aefdc2-9ed0-48aa-922d-60f9f9fc0f2d?campaignid=b95185f6-3a91-11ed-83ce-0a7c3f0539b9
Upgrade-Insecure-Requests: 1
HTTP/1.1 200
Date: Thu, 22 Sep 2022 16:15:08 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Headers: X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag
redirected: JS
Server: FdMPBGfj
irene-eux.com/favicon.ico
404 653 B URL HTTP/1.1 irene-eux.com/favicon.ico
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (649), with no line terminators
Hash ba2732b1b2fa2626ffaa15f62f9e7d66
203d4e7fbb1d80449d6e4e1f3ae7a9bf8625debe
879861cb72fe9fbb476dab246021c4c83b4066327de2529e05ec54d3afb0a1c8
GET /favicon.ico HTTP/1.1
Host: irene-eux.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://irene-eux.com/zcredirect?visitid=b93e4c13-3a91-11ed-83ce-0a7c3f0539b9&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false
HTTP/1.1 404
Date: Thu, 22 Sep 2022 16:15:08 GMT
Content-Type: text/html;charset=utf-8
Content-Length: 653
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Content-Language: en
Server: MJTfgiYl
click-v4.expmdiadi.com/click?i=0ast5dCX6IU_0
302 Found 0 B URL HTTP/1.1 click-v4.expmdiadi.com/click?i=0ast5dCX6IU_0
IP
ASN #27257 WEBAIR-INTERNET
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /click?i=0ast5dCX6IU_0 HTTP/1.1
Host: click-v4.expmdiadi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://irene-eux.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Cache-Control: no-store
Content-Length: 0
Age: 0
Connection: keep-alive
Location: https://api.apptap.com/link/buy/android/tile.ditur.no/e1?clinkID=xKX18oK1j-lqbEGK488wX-7zU65ULiWBiJczhbZ7L4j9qrLOzi8&pubID=laGp89Ptz6FCc0yNz-I6Tu0&siteID=k-23rN3-&placementID=385775_12293994169&trackingID=u5Qb2q3wZZk&creativeID=5587747&pub.keyword=europe+dedicated+servers%2Cnorway+dedicated+servers%2Coslo+county+dedicated+servers%2Coslo+dedicated+serve&loc.country=no&partnerCampaignID=944184&cost.cpc=0.015
Pragma: no-cache
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 6a015f57b7511f5d5d2e1cd7f9858af2
b0cc8926f0c16d0c2d56f45a4e87862c5094676f
c19fd6c9e50f477c196955241a62dacd6256c24c1b1c88a204bca4d9364ff0fb
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 22 Sep 2022 16:15:09 GMT
Last-Modified: Thu, 22 Sep 2022 15:00:13 GMT
Server: ECS (nyb/1D2D)
X-Cache: Miss from cloudfront
Via: 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: YjVqxFu7CNP5-4DPr9Ee7FdGSy3g-AURnzWCwehe8_jlzvdeW5APaQ==
Age: 4496
api.apptap.com/link/buy/android/tile.ditur.no/e1?clinkID=xKX18oK1j-lqbEGK488wX-7zU65ULiWBiJczhbZ7L4j9qrLOzi8&pubID=laGp89Ptz6FCc0yNz-I6Tu0&siteID=k-23rN3-&placementID=385775_12293994169&trackingID=u5Qb2q3wZZk&creativeID=5587747&pub.keyword=europe+dedicated+servers%2Cnorway+dedicated+servers%2Coslo+county+dedicated+servers%2Coslo+dedicated+serve&loc.country=no&partnerCampaignID=944184&cost.cpc=0.015
302 0 B URL HTTP/1.1 api.apptap.com/link/buy/android/tile.ditur.no/e1?clinkID=xKX18oK1j-lqbEGK488wX-7zU65ULiWBiJczhbZ7L4j9qrLOzi8&pubID=laGp89Ptz6FCc0yNz-I6Tu0&siteID=k-23rN3-&placementID=385775_12293994169&trackingID=u5Qb2q3wZZk&creativeID=5587747&pub.keyword=europe+dedicated+servers%2Cnorway+dedicated+servers%2Coslo+county+dedicated+servers%2Coslo+dedicated+serve&loc.country=no&partnerCampaignID=944184&cost.cpc=0.015
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /link/buy/android/tile.ditur.no/e1?clinkID=xKX18oK1j-lqbEGK488wX-7zU65ULiWBiJczhbZ7L4j9qrLOzi8&pubID=laGp89Ptz6FCc0yNz-I6Tu0&siteID=k-23rN3-&placementID=385775_12293994169&trackingID=u5Qb2q3wZZk&creativeID=5587747&pub.keyword=europe+dedicated+servers%2Cnorway+dedicated+servers%2Coslo+county+dedicated+servers%2Coslo+dedicated+serve&loc.country=no&partnerCampaignID=944184&cost.cpc=0.015 HTTP/1.1
Host: api.apptap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://irene-eux.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302
Content-Type: text/html;charset=UTF-8
Date: Thu, 22 Sep 2022 16:15:09 GMT
Location: https://api.mplayit.com/link/redirect?data=gx7UGZFWsRGyBDwg0b5RKCzHIoegVUkYFfWoHHhw541c-01Yrz8nkTxtM9wrEVZ_shud2nWFQdR3v5GeEfC1nWoA3Kf-Rc--eVestJHzSdMsBA%3D%3D&appID=tile.ditur.no&stripFragment=false&link=https%3A%2F%2Fr.srvtrck.com%2Fv1%2Fredirect%3Fapi_key%3D7f492f7e98f9f621f520ab0fb797464f%26yk_tag%3DOZZVSSTQMFFTKTTUFVXXCQSGGBVEUTSBKF3TUZZSLA3VEUBY_ORUWYZJOMRUXI5LSFZXG6H3MJZ4FAZZTKBDVS2SVIZ2W2TDON4ZWO33UO4PUCVBRMRWHA3TJNRZG2MDIORUWG2TKOR2WYYLXGFQXI427MFXDI5RXMNRHAN3NOE4A_72994674be9c4efea5dcc4fbc47224b8%26site_id%3D72994674be9c4efea5dcc4fbc47224b8%26source%3D%26type%3Durl%26url%3Dhttps%253A%252F%252Fditur.no&clickID=vsYJpaK5Nt-oqBF0jJNAQw%3Ag2X7RP8&js=true
Referrer-Policy: no-referrer
Server: nginx/1.20.0
Set-Cookie: apt=bc66f6fd4ce047229544216e059f439a; Domain=apptap.com; Expires=Wed, 22-Sep-2032 02:22:49 GMT; Path=/
fv=1; Domain=apptap.com; Path=/
Content-Length: 0
Connection: keep-alive
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 6a015f57b7511f5d5d2e1cd7f9858af2
b0cc8926f0c16d0c2d56f45a4e87862c5094676f
c19fd6c9e50f477c196955241a62dacd6256c24c1b1c88a204bca4d9364ff0fb
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 22 Sep 2022 16:15:10 GMT
Last-Modified: Thu, 22 Sep 2022 14:56:57 GMT
Server: ECS (dcb/7F17)
X-Cache: Miss from cloudfront
Via: 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: eiv0CKeLAa25CvqmAEcjxO2oUg9eq6RxTWerFiXvwrldD7_EsQl35g==
Age: 4694
api.mplayit.com/link/redirect?data=gx7UGZFWsRGyBDwg0b5RKCzHIoegVUkYFfWoHHhw541c-01Yrz8nkTxtM9wrEVZ_shud2nWFQdR3v5GeEfC1nWoA3Kf-Rc--eVestJHzSdMsBA%3D%3D&appID=tile.ditur.no&stripFragment=false&link=https%3A%2F%2Fr.srvtrck.com%2Fv1%2Fredirect%3Fapi_key%3D7f492f7e98f9f621f520ab0fb797464f%26yk_tag%3DOZZVSSTQMFFTKTTUFVXXCQSGGBVEUTSBKF3TUZZSLA3VEUBY_ORUWYZJOMRUXI5LSFZXG6H3MJZ4FAZZTKBDVS2SVIZ2W2TDON4ZWO33UO4PUCVBRMRWHA3TJNRZG2MDIORUWG2TKOR2WYYLXGFQXI427MFXDI5RXMNRHAN3NOE4A_72994674be9c4efea5dcc4fbc47224b8%26site_id%3D72994674be9c4efea5dcc4fbc47224b8%26source%3D%26type%3Durl%26url%3Dhttps%253A%252F%252Fditur.no&clickID=vsYJpaK5Nt-oqBF0jJNAQw%3Ag2X7RP8&js=true
200 535 B URL HTTP/1.1 api.mplayit.com/link/redirect?data=gx7UGZFWsRGyBDwg0b5RKCzHIoegVUkYFfWoHHhw541c-01Yrz8nkTxtM9wrEVZ_shud2nWFQdR3v5GeEfC1nWoA3Kf-Rc--eVestJHzSdMsBA%3D%3D&appID=tile.ditur.no&stripFragment=false&link=https%3A%2F%2Fr.srvtrck.com%2Fv1%2Fredirect%3Fapi_key%3D7f492f7e98f9f621f520ab0fb797464f%26yk_tag%3DOZZVSSTQMFFTKTTUFVXXCQSGGBVEUTSBKF3TUZZSLA3VEUBY_ORUWYZJOMRUXI5LSFZXG6H3MJZ4FAZZTKBDVS2SVIZ2W2TDON4ZWO33UO4PUCVBRMRWHA3TJNRZG2MDIORUWG2TKOR2WYYLXGFQXI427MFXDI5RXMNRHAN3NOE4A_72994674be9c4efea5dcc4fbc47224b8%26site_id%3D72994674be9c4efea5dcc4fbc47224b8%26source%3D%26type%3Durl%26url%3Dhttps%253A%252F%252Fditur.no&clickID=vsYJpaK5Nt-oqBF0jJNAQw%3Ag2X7RP8&js=true
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (463)
Hash bd76164d4a91bf0cb09c9cd3fd33a96a
11e64a61c874711cddb7c17f281e080f947bbc98
5394a178bebe601de690552dc6735b4105a1032d7c9ad7d7cde0f7560e2505a7
GET /link/redirect?data=gx7UGZFWsRGyBDwg0b5RKCzHIoegVUkYFfWoHHhw541c-01Yrz8nkTxtM9wrEVZ_shud2nWFQdR3v5GeEfC1nWoA3Kf-Rc--eVestJHzSdMsBA%3D%3D&appID=tile.ditur.no&stripFragment=false&link=https%3A%2F%2Fr.srvtrck.com%2Fv1%2Fredirect%3Fapi_key%3D7f492f7e98f9f621f520ab0fb797464f%26yk_tag%3DOZZVSSTQMFFTKTTUFVXXCQSGGBVEUTSBKF3TUZZSLA3VEUBY_ORUWYZJOMRUXI5LSFZXG6H3MJZ4FAZZTKBDVS2SVIZ2W2TDON4ZWO33UO4PUCVBRMRWHA3TJNRZG2MDIORUWG2TKOR2WYYLXGFQXI427MFXDI5RXMNRHAN3NOE4A_72994674be9c4efea5dcc4fbc47224b8%26site_id%3D72994674be9c4efea5dcc4fbc47224b8%26source%3D%26type%3Durl%26url%3Dhttps%253A%252F%252Fditur.no&clickID=vsYJpaK5Nt-oqBF0jJNAQw%3Ag2X7RP8&js=true HTTP/1.1
Host: api.mplayit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200
Date: Thu, 22 Sep 2022 16:15:10 GMT
Server: nginx/1.20.0
Content-Length: 535
Connection: keep-alive
r.srvtrck.com/v1/redirect?api_key=7f492f7e98f9f621f520ab0fb797464f&yk_tag=OZZVSSTQMFFTKTTUFVXXCQSGGBVEUTSBKF3TUZZSLA3VEUBY_ORUWYZJOMRUXI5LSFZXG6H3MJZ4FAZZTKBDVS2SVIZ2W2TDON4ZWO33UO4PUCVBRMRWHA3TJNRZG2MDIORUWG2TKOR2WYYLXGFQXI427MFXDI5RXMNRHAN3NOE4A_72994674be9c4efea5dcc4fbc47224b8&site_id=72994674be9c4efea5dcc4fbc47224b8&source=&type=url&url=https%3A%2F%2Fditur.no
302 Found 0 B URL HTTP/2 r.srvtrck.com/v1/redirect?api_key=7f492f7e98f9f621f520ab0fb797464f&yk_tag=OZZVSSTQMFFTKTTUFVXXCQSGGBVEUTSBKF3TUZZSLA3VEUBY_ORUWYZJOMRUXI5LSFZXG6H3MJZ4FAZZTKBDVS2SVIZ2W2TDON4ZWO33UO4PUCVBRMRWHA3TJNRZG2MDIORUWG2TKOR2WYYLXGFQXI427MFXDI5RXMNRHAN3NOE4A_72994674be9c4efea5dcc4fbc47224b8&site_id=72994674be9c4efea5dcc4fbc47224b8&source=&type=url&url=https%3A%2F%2Fditur.no
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v1/redirect?api_key=7f492f7e98f9f621f520ab0fb797464f&yk_tag=OZZVSSTQMFFTKTTUFVXXCQSGGBVEUTSBKF3TUZZSLA3VEUBY_ORUWYZJOMRUXI5LSFZXG6H3MJZ4FAZZTKBDVS2SVIZ2W2TDON4ZWO33UO4PUCVBRMRWHA3TJNRZG2MDIORUWG2TKOR2WYYLXGFQXI427MFXDI5RXMNRHAN3NOE4A_72994674be9c4efea5dcc4fbc47224b8&site_id=72994674be9c4efea5dcc4fbc47224b8&source=&type=url&url=https%3A%2F%2Fditur.no HTTP/1.1
Host: r.srvtrck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Thu, 22 Sep 2022 16:15:10 GMT
content-length: 0
location: https://ditur.no
p3p: CP="CAO PSA OUR"
set-cookie: ykuid=183bac51cfa74fa7ad961e263ba1776e; Domain=.srvtrck.com; Expires=Fri, 22-Sep-2023 16:15:10 GMT; Path=/
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 74ec567a69e7b4fa-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.ditur.no/media/catalog/placeholder/placeholder-272x340.png
200 OK 2.2 kB URL HTTP/2 www.ditur.no/media/catalog/placeholder/placeholder-272x340.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash b43d4df52cf32a5eb6bdcafd9af8c50f
d2096dabc38aa1f0d318283de3a82e2dc012002d
1af50438bc222ec1be5d92806eab7ef02678d7522c374cec7480e0b7f503b735
GET /media/catalog/placeholder/placeholder-272x340.png HTTP/1.1
Host: www.ditur.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ditur.no/
Cookie: ditur_country=NO; ditur_country=NO; frontend=mnber7auv64jaknuer1kio6rk8; frontend_cid=qgkeOV4LE5DDonit
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 22 Sep 2022 16:15:11 GMT
content-type: image/webp
content-length: 2152
cache-control: max-age=15638400
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=8940
content-disposition: inline; filename="placeholder-272x340.webp"
vary: Accept
etag: "22ec"
expires: Sun, 19 Mar 2023 19:06:18 GMT
last-modified: Wed, 30 Jun 2021 07:38:12 GMT
x-ph-static-cache: HIT
x-served-by: Apache, phct-015.cust.powerhosting.dk, ipv4: 185.31.79.122 ipv6: 2a00:b920:3:1337::122, vhost = ditur.dk
cf-cache-status: HIT
age: 248933
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2B62mlL8q5MOr9lu6az54TK5RskT54hP9AaKzDUQPUci1H4hqQC9Z27eQneyueKehZv5J06VIIOqomsOiACy%2FQAtY60U%2F2%2BM%2B1YP0J6T0PS82j2fR4s53ZOpU%2FkYHYw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74ec567e5f82b521-OSL
X-Firefox-Spdy: h2
www.ditur.no/media/wysiwyg/Footer/visa2.png
200 OK 4.7 kB URL HTTP/2 www.ditur.no/media/wysiwyg/Footer/visa2.png
IP
File type PNG image data, 65 x 40, 8-bit/color RGBA, non-interlaced\012- data
Hash 507606014133f5d50eb59f59672cb884
383016cbc64c6164055a95586ac7e365b631d818
6d3d38c07a1a0818ecde89bb28b2dc5bd2169897ed5a57c175f640a11caba9b5
GET /media/wysiwyg/Footer/visa2.png HTTP/1.1
Host: www.ditur.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ditur.no/
Cookie: ditur_country=NO; ditur_country=NO; frontend=mnber7auv64jaknuer1kio6rk8; frontend_cid=qgkeOV4LE5DDonit
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 22 Sep 2022 16:15:11 GMT
content-type: image/png
content-length: 4672
cache-control: max-age=15638400
cf-bgj: imgq:100,h2pri
cf-polished: status=cannot_optimize
etag: "1240"
expires: Wed, 08 Mar 2023 13:24:26 GMT
last-modified: Fri, 11 Mar 2022 13:10:12 GMT
x-ph-static-cache: HIT
x-served-by: Apache, phct-015.cust.powerhosting.dk, ipv4: 185.31.79.122 ipv6: 2a00:b920:3:1337::122, vhost = ditur.dk
cf-cache-status: HIT
age: 1219845
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=89zbx6iXx5erUpL9yBhMykdL30vrTvH11lAOqAXjzpnEKnecSVbVbP5J2t8gEUdGHbBhzPTvW4NppaLYcqx%2BWr6jc4WBvhle0UVWmU9QpObcNMbCETmo160Rjr%2F%2FKA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74ec567e5f87b521-OSL
X-Firefox-Spdy: h2
www.ditur.no/media/wysiwyg/Footer/mastercard2.png
200 OK 1.0 kB URL HTTP/2 www.ditur.no/media/wysiwyg/Footer/mastercard2.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 4cd0edd6bc1454367c2694825a5ce751
c4f57293df6ea9198922d91edccacc98302af7ce
0bea5109ec3856e164cafe33744d189a6dcd2e7e65e5db732a4969120e6d537e
GET /media/wysiwyg/Footer/mastercard2.png HTTP/1.1
Host: www.ditur.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ditur.no/
Cookie: ditur_country=NO; ditur_country=NO; frontend=mnber7auv64jaknuer1kio6rk8; frontend_cid=qgkeOV4LE5DDonit
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 22 Sep 2022 16:15:11 GMT
content-type: image/webp
content-length: 1016
cache-control: max-age=15638400
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=4335
content-disposition: inline; filename="mastercard2.webp"
vary: Accept
etag: "10ef"
expires: Sun, 19 Mar 2023 19:43:23 GMT
last-modified: Fri, 11 Mar 2022 13:10:13 GMT
x-ph-static-cache: HIT
x-served-by: Apache, phct-015.cust.powerhosting.dk, ipv4: 185.31.79.122 ipv6: 2a00:b920:3:1337::122, vhost = ditur.dk
cf-cache-status: HIT
age: 246708
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KBCEYZZBL9XjmpGQWZnr4%2BEuBhjzxaJego8Q7X%2B5TXGhSu%2BClO3u3xsFt3E5assrNgcNQISJVnjk65UEQuVjVWENtrkZysBKAW5A1yFGxl1%2Bixu2fneMFEivTFeq2A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74ec567e5f89b521-OSL
X-Firefox-Spdy: h2
www.ditur.no/media/wysiwyg/Footer/klarna2.png
200 OK 742 B URL HTTP/2 www.ditur.no/media/wysiwyg/Footer/klarna2.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash e5916087ff9a7f25b91124548c4bf968
180d22e8eaa59eb157325b45610c34093d1b6a17
964588b0eaf1b2a36674ec8b7e3a60ca48e3eb47b9092231c0c5447cb90e3bcc
GET /media/wysiwyg/Footer/klarna2.png HTTP/1.1
Host: www.ditur.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ditur.no/
Cookie: ditur_country=NO; ditur_country=NO; frontend=mnber7auv64jaknuer1kio6rk8; frontend_cid=qgkeOV4LE5DDonit
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 22 Sep 2022 16:15:11 GMT
content-type: image/webp
content-length: 742
cache-control: max-age=15638400
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=4272
content-disposition: inline; filename="klarna2.webp"
vary: Accept
etag: "10b0"
expires: Sun, 19 Mar 2023 18:32:47 GMT
last-modified: Fri, 11 Mar 2022 13:10:13 GMT
x-ph-static-cache: HIT
x-served-by: Apache, phct-015.cust.powerhosting.dk, ipv4: 185.31.79.122 ipv6: 2a00:b920:3:1337::122, vhost = ditur.dk
cf-cache-status: HIT
age: 250944
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=q%2FVER5BIxvktUWhxx12uicfoRHU5T1jk0FjJ0QxXJjgCTdc4IrP%2FRWggbbEBfLFagCrZltlZ8OhvLNifhHVjvPdKMD6RPZZYBqAcUmBvCvJ1jPCG2GWm2VfHMpX%2FoQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74ec567e5f95b521-OSL
X-Firefox-Spdy: h2
www.ditur.no/media/wysiwyg/Footer/google-pay2.png
200 OK 978 B URL HTTP/2 www.ditur.no/media/wysiwyg/Footer/google-pay2.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 76548c48d686e29703110229a2c06e56
45361715a59d7d33cf262d9576808eecc5f37932
87d0b78ae36ba5969045eb5d9581911bf6b077112294fb0afc1642ad8246de97
GET /media/wysiwyg/Footer/google-pay2.png HTTP/1.1
Host: www.ditur.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ditur.no/
Cookie: ditur_country=NO; ditur_country=NO; frontend=mnber7auv64jaknuer1kio6rk8; frontend_cid=qgkeOV4LE5DDonit
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 22 Sep 2022 16:15:11 GMT
content-type: image/webp
content-length: 978
cache-control: max-age=15638400
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=4318
content-disposition: inline; filename="google-pay2.webp"
vary: Accept
etag: "10de"
expires: Sun, 19 Mar 2023 18:32:47 GMT
last-modified: Fri, 11 Mar 2022 13:10:13 GMT
x-ph-static-cache: HIT
x-served-by: Apache, phct-015.cust.powerhosting.dk, ipv4: 185.31.79.122 ipv6: 2a00:b920:3:1337::122, vhost = ditur.dk
cf-cache-status: HIT
age: 250944
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0MGDT42mk9rdmbgqWnCHLiknjRbBeXJk1t4MC9i3TScnxpX2Gvq1TppknxSTxV%2FiTS2CmnP0rIoHq4T74c881dfvEyCTJqrTuoBVFi0TPl00C%2FDjASaP7cExKXIQuA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74ec567e6f9fb521-OSL
X-Firefox-Spdy: h2
www.ditur.no/media/wysiwyg/Footer/bring.png
200 OK 1.4 kB URL HTTP/2 www.ditur.no/media/wysiwyg/Footer/bring.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash b35f56b4b2da2921ef9d89f820747f9f
fa7f5e612474803e493b2d68f3e4c8da65474b9c
45baf00cb3deccb0ba9ca2299e17b611fc9415ba9eac1526587a37cf12879a29
GET /media/wysiwyg/Footer/bring.png HTTP/1.1
Host: www.ditur.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ditur.no/
Cookie: ditur_country=NO; ditur_country=NO; frontend=mnber7auv64jaknuer1kio6rk8; frontend_cid=qgkeOV4LE5DDonit
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 22 Sep 2022 16:15:11 GMT
content-type: image/webp
content-length: 1404
cache-control: max-age=15638400
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=4842
content-disposition: inline; filename="bring.webp"
vary: Accept
etag: "12ea"
expires: Tue, 14 Mar 2023 22:14:21 GMT
last-modified: Fri, 11 Mar 2022 13:18:53 GMT
x-ph-static-cache: HIT
x-served-by: Apache, phct-015.cust.powerhosting.dk, ipv4: 185.31.79.122 ipv6: 2a00:b920:3:1337::122, vhost = ditur.dk
cf-cache-status: HIT
age: 669650
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LXEsXR1xrtCG4VP8AY2TjCV5SwLT%2FxQerAI4K7h%2FMMTV73CoolwMKsu74qbmJA0vY529NcG5UGoW0hW4KnZ7GHAub1txjvhkA8iuv3ZNtkeUpMHTw8gUBVIkGHnSKg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74ec567e6fa9b521-OSL
X-Firefox-Spdy: h2
www.ditur.no/media/wysiwyg/Footer/apple-pay2.png
200 OK 620 B URL HTTP/2 www.ditur.no/media/wysiwyg/Footer/apple-pay2.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 708dcf157b38e4eed45d8a9da3ac49fb
5674feff5e461bcee57f6b18a627afc0419a53d7
4fa7927cc65f3e553c2478e2cf892947529dbbcee6f3d4ecb9fe99fc9a514f7d
GET /media/wysiwyg/Footer/apple-pay2.png HTTP/1.1
Host: www.ditur.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ditur.no/
Cookie: ditur_country=NO; ditur_country=NO; frontend=mnber7auv64jaknuer1kio6rk8; frontend_cid=qgkeOV4LE5DDonit
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 22 Sep 2022 16:15:11 GMT
content-type: image/webp
content-length: 620
cache-control: max-age=15638400
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=4285
content-disposition: inline; filename="apple-pay2.webp"
vary: Accept
etag: "10bd"
expires: Sun, 19 Mar 2023 17:42:00 GMT
last-modified: Fri, 11 Mar 2022 13:10:13 GMT
x-ph-static-cache: HIT
x-served-by: Apache, phct-015.cust.powerhosting.dk, ipv4: 185.31.79.122 ipv6: 2a00:b920:3:1337::122, vhost = ditur.dk
cf-cache-status: HIT
age: 253991
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QBfvLAqiU3HA5nv9Uz4lxyBn%2BDWDIpkxp4OymLxB2v9L90k%2B1AKgsWwzvTuch52U5MS%2FrsQK9UkoQq9HSpxoV6roBaQ17CkKVJRBhM8QznWgKUD5N%2F7o7nazpD2VYA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74ec567e6fa8b521-OSL
X-Firefox-Spdy: h2
www.ditur.no/media/wysiwyg/Footer/vjpps.png
200 OK 710 B URL HTTP/2 www.ditur.no/media/wysiwyg/Footer/vjpps.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 01f3a5f6990eb5f40849f692ee595276
198b3a25e73f992469c0b80a411179fa8613ab19
062ed90eccb25d9a5ffee6fbea9327091db395b1ab4c559ae6d2665844b85c35
GET /media/wysiwyg/Footer/vjpps.png HTTP/1.1
Host: www.ditur.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ditur.no/
Cookie: ditur_country=NO; ditur_country=NO; frontend=mnber7auv64jaknuer1kio6rk8; frontend_cid=qgkeOV4LE5DDonit
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 22 Sep 2022 16:15:11 GMT
content-type: image/webp
content-length: 710
cache-control: max-age=15638400
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=4139
content-disposition: inline; filename="vjpps.webp"
vary: Accept
etag: "102b"
expires: Sun, 19 Mar 2023 18:58:42 GMT
last-modified: Fri, 11 Mar 2022 13:10:12 GMT
x-ph-static-cache: HIT
x-served-by: Apache, phct-015.cust.powerhosting.dk, ipv4: 185.31.79.122 ipv6: 2a00:b920:3:1337::122, vhost = ditur.dk
cf-cache-status: HIT
age: 249389
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kTYmKXPjcvzX%2B4dEAteiOoLXobD60FRrAP6xuWxnB3dP3uZN0LzhbKGhsOYzKtL2fKNsXnj%2Bb0jZNY9hQB1UAASV6ZtJdcvDz%2FQVFSg%2FdbPw%2Br5xYh%2BK0nkvYqkY8Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74ec567e6f9db521-OSL
X-Firefox-Spdy: h2
www.ditur.no/media/wysiwyg/Footer/trustpilot2.png
200 OK 4.5 kB URL HTTP/2 www.ditur.no/media/wysiwyg/Footer/trustpilot2.png
IP
File type PNG image data, 65 x 40, 8-bit/color RGBA, non-interlaced\012- data
Hash b252fe13086b5b0841648a7d24e5f47b
b398861ad90054252ac9a797b8628aa5c8333596
18deb21fd3f43ce909ecbeddb8c9b6ef0512813c97daf7a74f6c6d165d7910e0
GET /media/wysiwyg/Footer/trustpilot2.png HTTP/1.1
Host: www.ditur.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ditur.no/
Cookie: ditur_country=NO; ditur_country=NO; frontend=mnber7auv64jaknuer1kio6rk8; frontend_cid=qgkeOV4LE5DDonit
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 22 Sep 2022 16:15:11 GMT
content-type: image/png
content-length: 4492
cache-control: max-age=15638400
cf-bgj: imgq:100,h2pri
cf-polished: status=cannot_optimize
etag: "118c"
expires: Sun, 04 Dec 2022 22:18:19 GMT
last-modified: Fri, 11 Mar 2022 13:10:12 GMT
x-ph-static-cache: HIT
x-served-by: Apache, phct-015.cust.powerhosting.dk, ipv4: 185.31.79.122 ipv6: 2a00:b920:3:1337::122, vhost = ditur.dk
cf-cache-status: HIT
age: 9309412
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wYTyuyRE9KhHAkMlO4GX5MSa%2BnulvlzcG%2FoaftUTO0PBzXBQi6bRSUbVvSBGrH1nf9yJ3LcFKJ7VZmCmz%2BErK87OAxnmQtgCQPAJLuCcSMlT7WiP7zP%2BBZlXonRMsg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74ec567e6faab521-OSL
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash c3628a8c2fad1cd474d0f266145e6197
456648159e25eab0fdd434ad2e9d6327d977789e
f4072182f0df41454fd2bcaec1a05722ef01625e1f64caded55a9cd58f78d5a3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6322
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 16:15:11 GMT
Last-Modified: Thu, 22 Sep 2022 14:29:49 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 280
flagcdn.com/h40/se.png
200 OK 101 B IP
File type PNG image data, 64 x 40, 1-bit colormap, non-interlaced\012- data
Hash eda98922919f7abcb62f2c61d2bee075
5384eb0ffa2bcadec7495f4052183316d78cdbb8
7f1c9a06e39728d8de8773056ba79ec50bc765c0bb9f4f7ff59c73002169fb8d
GET /h40/se.png HTTP/1.1
Host: flagcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ditur.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 22 Sep 2022 16:15:11 GMT
content-type: image/png
content-length: 101
last-modified: Thu, 19 Nov 2020 12:03:26 GMT
etag: "5fb65f0e-65"
access-control-allow-origin: *
cache-control: public, max-age=2678400, s-maxage=2678400
cf-cache-status: HIT
age: 2250756
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9%2FIFNyk6GIcsCL4a1eYUgNAHJwt3pECEY8640SJG%2FpiNwkDJsZ8CQITreGCvPf77aQiVFGsWEl6ZMYv9dcwH3KRYlQ2hKtgaINDMfHDoNivjJ7Ps2Uboxzyk8wNg8A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 74ec567eff49718c-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
flagcdn.com/h40/de.png
200 OK 124 B IP
File type PNG image data, 67 x 40, 4-bit colormap, non-interlaced\012- data
Hash 9734f81c395c8edfb0d3575cc907c473
013fbced8d3a5799ae61793ecf929613551e55a0
dc3dd77b8173022ade904f163ddc52805fcb21316fcf414c32734a9c98c3efc1
GET /h40/de.png HTTP/1.1
Host: flagcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ditur.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 22 Sep 2022 16:15:11 GMT
content-type: image/png
content-length: 124
last-modified: Thu, 19 Nov 2020 12:03:26 GMT
etag: "5fb65f0e-7c"
access-control-allow-origin: *
cache-control: public, max-age=2678400, s-maxage=2678400
cf-cache-status: HIT
age: 2250427
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kX0qmQ2lRmX7bOEbTTLalBhRTWuCkw9CQ5DqSrj4bT%2BTiQVLkQin56eHjMtG6PTEFgdkAOKSR8yWHPIqq1RZ9IxzKWgFVwDcZCQUlKX5IE2hd6B8f0UrAf%2FGxpgfBw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 74ec567eff57718c-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
flagcdn.com/h40/dk.png
200 OK 131 B IP
File type PNG image data, 53 x 40, 4-bit colormap, non-interlaced\012- data
Hash ab5a1b09624bd8b59fdd105fabe8d595
f067bafd94ce63fdac9bafffca07f1e7fd47607a
a230ce0a600306a7ec894589e4555dae018168b77fc9d1d956597beb5e7205b3
GET /h40/dk.png HTTP/1.1
Host: flagcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ditur.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 22 Sep 2022 16:15:11 GMT
content-type: image/png
content-length: 131
last-modified: Thu, 19 Nov 2020 12:03:26 GMT
etag: "5fb65f0e-83"
access-control-allow-origin: *
cache-control: public, max-age=2678400, s-maxage=2678400
cf-cache-status: HIT
age: 1821218
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=o23hAdxwQgVL3vObYI1js9Rt%2FHi2t4ImlDZ6NLTnqrGxao4%2FfSE6DhBfjxntEKtJfmQ66NHZaAPlvPpuwDHfS9xUBdo9da1eGY9g%2FH4n%2Bm98rD2SAnFvqXob3%2Fjplw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 74ec567f3fc5718c-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.tryggehandel.no/wp-content/uploads/2016/10/trygg-e-handel-logo.png
200 OK 315 kB URL HTTP/2 www.tryggehandel.no/wp-content/uploads/2016/10/trygg-e-handel-logo.png
IP
File type PNG image data, 600 x 599, 8-bit/color RGBA, non-interlaced\012- data
Size 315 kB (315120 bytes)
Hash 77a3fbca23cd58a665d41f943f686f1a
b09bf91476b4d3aaf916b2add262642bc7b34482
512690e1a08c3f31ddf75d87ebfe47f03581c9715c99fd30fd617d5114bf333a
GET /wp-content/uploads/2016/10/trygg-e-handel-logo.png HTTP/1.1
Host: www.tryggehandel.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ditur.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 22 Sep 2022 16:15:11 GMT
content-type: image/png
content-length: 315120
last-modified: Thu, 09 May 2019 09:48:43 GMT
etag: "5cd3f77b-4cef0"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: HIT
age: 9304088
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Izqj%2Bc5w%2BEdivNCLWhq3fcZKrKrBRZLcbc0%2FfjaGNXoqMeh70phoz21uIj1KRWIQMPxMjzPPo%2FWTAlwebZ38pjLhlfxWzKrwHuwL5osJkWkEXaO9xTp%2F4RlNjo06vMVGA%2Fmu5PRP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74ec567f3a56fac4-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
flagcdn.com/h40/fi.png
200 OK 142 B IP
File type PNG image data, 65 x 40, 4-bit colormap, non-interlaced\012- data
Hash eeb55e2a7dfe5f11e7ee7da489db38cd
c6c50f5b998aa3c3d2094b6c377c02dd73ce94b5
c788b718143a128a0f4897e14a853a726f0bae86c6f0ce5cbc2191c05461c8fa
GET /h40/fi.png HTTP/1.1
Host: flagcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ditur.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 22 Sep 2022 16:15:11 GMT
content-type: image/png
content-length: 142
last-modified: Thu, 19 Nov 2020 12:03:26 GMT
etag: "5fb65f0e-8e"
access-control-allow-origin: *
cache-control: public, max-age=2678400, s-maxage=2678400
cf-cache-status: HIT
age: 108926
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0O6N3zQp0K4KdiwoDkl0jOEdoWPdcRRVG6DTDCAFjwjV%2FsBj44%2B3%2FhhGliLvigWzPLUY6UM8ys3NyZa6Yby83mQNOGYHN3K8p3NC%2FlTSesjVhdT4Sq%2BxhohZG2LAhA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 74ec567f2fa0718c-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
flagcdn.com/h40/no.png
200 OK 144 B IP
File type PNG image data, 55 x 40, 4-bit colormap, non-interlaced\012- data
Hash 79b817c35bd5ba0729807f12ab3c4465
2f3496a223487055eae15c52cd0d01250aa0cb5e
858472d4f0321cb78d4b8011bd2df34f0a49fbd6ff3ec761bc834d77326aa7ca
GET /h40/no.png HTTP/1.1
Host: flagcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ditur.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 22 Sep 2022 16:15:11 GMT
content-type: image/png
content-length: 144
last-modified: Thu, 19 Nov 2020 12:03:26 GMT
etag: "5fb65f0e-90"
access-control-allow-origin: *
cache-control: public, max-age=2678400, s-maxage=2678400
cf-cache-status: HIT
age: 1006913
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ly3giW4aLeVCEi4vdoQk2BBnUiyBZtPF%2BgsklCwoE6WzdLVDkfss489vs6Kl%2BVUPrtXaXndsvS%2BOqsrTMDrEgzJepvJnig0NXhkDlQHASotfs83HNC2y66yD3mPrfQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 74ec567f3fce718c-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 77be54f693bca835ba171c1ed97d9c6a
9531c836322bcbacd04373411e8afa58fa2a9d48
b05988037929b794e73597d829d2e8c6fe8bffca0b14c44c5fce5ad4e98a4933
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "B05988037929B794E73597D829D2E8C6FE8BFFCA0B14C44C5FCE5AD4E98A4933"
Last-Modified: Wed, 21 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2928
Expires: Thu, 22 Sep 2022 17:03:59 GMT
Date: Thu, 22 Sep 2022 16:15:11 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 35343b6981ed4c9eb2cd90bc8c2146cd
4e49432e50195a2bc528fb1745a2899306c79db8
cf55f53534e3e8b62513618cda90832a7b9bcd0d15b1a8f6bb51db6eb60daefd
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 16:15:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.ditur.no/skin/frontend/ditur/default/fonts/fontawesome/5.6.0/webfonts/fa-brands-400.woff2?mt=1588051102
200 OK 75 kB URL HTTP/2 www.ditur.no/skin/frontend/ditur/default/fonts/fontawesome/5.6.0/webfonts/fa-brands-400.woff2?mt=1588051102
IP
File type Web Open Font Format (Version 2), TrueType, length 74284, version 1.0\012- data
Hash bf20816f8285f4d15803c79ebee626ed
cd46bc19dc73bf871451c95639fbe49f27ff2177
95d5cf29d7031e48f893a97f64f0bf1dca61172b506b7c1bc1161ef31ea5fcf7
GET /skin/frontend/ditur/default/fonts/fontawesome/5.6.0/webfonts/fa-brands-400.woff2?mt=1588051102 HTTP/1.1
Host: www.ditur.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ditur.no/
Cookie: ditur_country=NO; ditur_country=NO; frontend=mnber7auv64jaknuer1kio6rk8; frontend_cid=qgkeOV4LE5DDonit
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 22 Sep 2022 16:15:11 GMT
content-type: font/woff2
last-modified: Tue, 28 Apr 2020 05:18:22 GMT
etag: W/"1222c-gzip"
cache-control: max-age=15638400
expires: Tue, 27 Dec 2022 09:58:01 GMT
vary: Accept-Encoding
x-served-by: Apache, phct-015.cust.powerhosting.dk, ipv4: 185.31.79.122 ipv6: 2a00:b920:3:1337::122, vhost = ditur.dk
x-ph-static-cache: HIT
cf-cache-status: HIT
age: 7366630
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nyWcdk8lB7QreNzhfiasBcIHHHp%2BhR0WhGs0M8sJPqeyGC7t%2F6%2BUyyJzEgqmYgqFHLObHR%2FJFPdSX7ibQ%2FvzDOqMbMkjdR%2BNSTGxKNlhxYnUJ73wt9tv8IWQxE0W0g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74ec567e3f4cb521-OSL
X-Firefox-Spdy: h2
static.klaviyo.com/onsite/js/klaviyo.js?company_id=WZCm9t
200 OK 1.0 kB URL HTTP/2 static.klaviyo.com/onsite/js/klaviyo.js?company_id=WZCm9t
IP
File type ASCII text, with very long lines (2904)
Hash 4163c6eaa9448881ae615af1f7aa3e52
211f933b4558bf9190ec86b2a21a9b7595f978a8
17afbaac5e8e752cc7edadf441b259ee5ab13f2abce6383c8cbf8632a2043b2d
GET /onsite/js/klaviyo.js?company_id=WZCm9t HTTP/1.1
Host: static.klaviyo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ditur.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-headers:
access-control-allow-methods: GET
access-control-allow-origin: *
access-control-max-age: 86400
allow: GET, OPTIONS
cache-control: max-age=1, stale-while-revalidate=10800
content-encoding: gzip
content-type: application/javascript
etag: W/"cf7f6455b56bd7f11e65139aaa46ac6c"
server: nginx
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 22 Sep 2022 16:15:11 GMT
age: 9108
x-served-by: cache-lga13622-LGA, cache-bma1645-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 1
x-timer: S1663863311.283441,VS0,VE1
vary: Accept-Encoding
content-length: 1035
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash c3628a8c2fad1cd474d0f266145e6197
456648159e25eab0fdd434ad2e9d6327d977789e
f4072182f0df41454fd2bcaec1a05722ef01625e1f64caded55a9cd58f78d5a3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6322
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 16:15:11 GMT
Last-Modified: Thu, 22 Sep 2022 14:29:49 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 280
policy.app.cookieinformation.com/uc.js
200 OK 11 kB URL HTTP/2 policy.app.cookieinformation.com/uc.js
IP
File type Unicode text, UTF-8 text, with very long lines (33201), with no line terminators
Hash 9626497e4a1599f5d294e90b1dbd198f
22a72fb2995afc102d3b6a72c6511c10fb77d24e
a37a72b164fc85b4a72ae08d071b670f8eba283b644c767e159fcea4423281db
GET /uc.js HTTP/1.1
Host: policy.app.cookieinformation.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ditur.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: gzip
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding
age: 155
cache-control: max-age=300
content-md5: hG9YNEAknJT23aFh0wyWzA==
content-type: application/javascript
date: Thu, 22 Sep 2022 16:15:11 GMT
etag: 0x8DA9717A6FD1277
expires: Thu, 22 Sep 2022 16:20:11 GMT
last-modified: Thu, 15 Sep 2022 12:41:46 GMT
server: ECAcc (ska/F74D)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 68739cd0-001e-003d-339e-ce4e56000000
x-ms-version: 2009-09-19
x-robots-tag: noindex, noarchive, nosnippet
content-length: 10617
X-Firefox-Spdy: h2
www.ditur.dk/media/wysiwyg/forside/Standardforside/MOBIL_Hjemmeside_banner.jpg
200 OK 89 kB URL HTTP/2 www.ditur.dk/media/wysiwyg/forside/Standardforside/MOBIL_Hjemmeside_banner.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 375x667, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash ab86382af65fa998edbf06bf8ff0f0e1
576af7cd3ade5d7fc4f1d9875aa27a6eae1e0af4
0f53ad53cc8b9160aad4d5ff242c7afcdf543533794208648f0f7e0b7261d99c
GET /media/wysiwyg/forside/Standardforside/MOBIL_Hjemmeside_banner.jpg HTTP/1.1
Host: www.ditur.dk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ditur.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 22 Sep 2022 16:15:11 GMT
content-type: image/webp
content-length: 89314
cache-control: max-age=15638400
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=jpeg, origSize=167823
content-disposition: inline; filename="MOBIL_Hjemmeside_banner.webp"
vary: Accept
etag: "28f8f"
expires: Wed, 01 Mar 2023 17:31:57 GMT
last-modified: Mon, 31 Jan 2022 07:44:53 GMT
x-ph-static-cache: HIT
x-served-by: Apache, phct-015.cust.powerhosting.dk, ipv4: 185.31.79.122 ipv6: 2a00:b920:3:1337::122, vhost = ditur.dk
cf-cache-status: HIT
age: 1809794
accept-ranges: bytes
server: cloudflare
cf-ray: 74ec567fac1b990f-ARN
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-1MWFRTCQD4
200 OK 74 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=G-1MWFRTCQD4
IP
File type ASCII text, with very long lines (17807)
Hash 7c136136184727aad2d8a04277246e00
2f4d09e013f3b350ca1abf67e62b507badb08ad7
08059b5b815c629937408d58d72cc4fb0e05d88a27cb9eeb266b8e59903d5e61
GET /gtag/js?id=G-1MWFRTCQD4 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ditur.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 22 Sep 2022 16:15:11 GMT
expires: Thu, 22 Sep 2022 16:15:11 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 74467
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.googleadservices.com/pagead/conversion.js
200 OK 17 kB URL HTTP/2 www.googleadservices.com/pagead/conversion.js
IP
File type ASCII text, with very long lines (1952)
Hash f65df5bfeba7e45702bc6b4be768c7e3
7d49820b96edede6e587650ecd387cab1b29951d
7d9314961f09f17bb248d0ee2c99481fce2d8d7d9d3297ffe98d2538d2f1caff
GET /pagead/conversion.js HTTP/1.1
Host: www.googleadservices.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ditur.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Thu, 22 Sep 2022 16:15:11 GMT
expires: Thu, 22 Sep 2022 16:15:11 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 17680024240845530123
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 17403
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
policy.app.cookieinformation.com/cookiesharingiframe.html
200 OK 2.8 kB URL HTTP/2 policy.app.cookieinformation.com/cookiesharingiframe.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (8796), with no line terminators
Hash 5d73da05edbe3ced0d9b34a509ec7d99
1c8f4d3e6dc5bf97680195de4ad1dc6eb94d957c
097bf77959393840ebfc2763f170b84d29ffc31f4628730ba27b0da170741c81
GET /cookiesharingiframe.html HTTP/1.1
Host: policy.app.cookieinformation.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ditur.no/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding
age: 146
cache-control: max-age=300
content-md5: xqkKVmywb8mz//pJblCHTA==
content-type: text/html
date: Thu, 22 Sep 2022 16:15:11 GMT
etag: 0x8DA9717A6FC4F38
expires: Thu, 22 Sep 2022 16:20:11 GMT
last-modified: Thu, 15 Sep 2022 12:41:46 GMT
server: ECAcc (ska/F754)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 90227c31-901e-0062-379e-cefa6a000000
x-ms-version: 2009-09-19
x-robots-tag: noindex, noarchive, nosnippet
content-length: 2809
X-Firefox-Spdy: h2
policy.app.cookieinformation.com/080be5/ditur.no/nb.js
200 OK 18 kB URL HTTP/2 policy.app.cookieinformation.com/080be5/ditur.no/nb.js
IP
File type HTML document, Unicode text, UTF-8 text, with very long lines (65425)
Hash e0057a16a2b53359a04911bf1ea94ad4
9fe90df9a3e0ef419428fe1cce184be9c3941bf7
ea78d08e73312c80946b96d3ded3380ff1b9bb76ae62c125bff715ae2e01e46a
GET /080be5/ditur.no/nb.js HTTP/1.1
Host: policy.app.cookieinformation.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ditur.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding
age: 165
cache-control: max-age=300
content-md5: xc/Jq4QnIyLMGR88oMjdGA==
content-type: application/javascript
date: Thu, 22 Sep 2022 16:15:11 GMT
etag: 0x8DA971061A38EAB
expires: Thu, 22 Sep 2022 16:20:11 GMT
last-modified: Thu, 15 Sep 2022 11:49:43 GMT
server: ECAcc (ska/F686)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 592fb3cb-b01e-0091-6f9e-ce5dff000000
x-ms-version: 2009-09-19
x-robots-tag: noindex, noarchive, nosnippet
content-length: 18299
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 77be54f693bca835ba171c1ed97d9c6a
9531c836322bcbacd04373411e8afa58fa2a9d48
b05988037929b794e73597d829d2e8c6fe8bffca0b14c44c5fce5ad4e98a4933
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "B05988037929B794E73597D829D2E8C6FE8BFFCA0B14C44C5FCE5AD4E98A4933"
Last-Modified: Wed, 21 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Thu, 22 Sep 2022 22:15:11 GMT
Date: Thu, 22 Sep 2022 16:15:11 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 682477608532cf0f939b82148a7d996c
53f5564723f8ca88bf990fb2e4de8ffd8000c96f
4f89314a758da9c42d7ab1c97f8794e3c10ed59112f6bad7f02f8b63fc24a3a6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 16:15:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f08468f742203b67cafd4eb9d919877c
0ab9c6875fa317315e2e7dcdb1ba8c5d28bfef68
b66d3243be1a67a813352f3c2efa4259d4e0c7960b2206a381b52ee97dc3ff23
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 16:15:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
policy.app.cookieinformation.com/cookie-data/ditur.no/cabl.json
200 OK 394 B URL HTTP/2 policy.app.cookieinformation.com/cookie-data/ditur.no/cabl.json
IP
File type JSON data\012- , ASCII text, with very long lines (1369), with no line terminators
Hash 40ebd61d04e97a31279e416148d35369
51330ac0f29e9fd6b0fdd0de13b55d211e2dbefd
3eea964a7e3633e64544b013cbeb2cc038c1c9471febdfa80330e02c00c16262
GET /cookie-data/ditur.no/cabl.json HTTP/1.1
Host: policy.app.cookieinformation.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.ditur.no
Connection: keep-alive
Referer: https://www.ditur.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding
cache-control: max-age=300
content-md5: fm3VGnGJF14aNqsRRrXM9Q==
content-type: application/json
date: Thu, 22 Sep 2022 16:15:10 GMT
etag: 0x8DA971060E6E3FA
expires: Thu, 22 Sep 2022 16:20:11 GMT
last-modified: Thu, 15 Sep 2022 11:49:42 GMT
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
vary: Accept-Encoding
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: afcd81eb-a01e-001b-439e-ce064e000000
x-ms-version: 2009-09-19
x-robots-tag: noindex, noarchive, nosnippet
content-length: 394
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c8ac2005f83e8a3a9da1a9837b6c2ff3
7c05f49683e49232c1e11b91253e684d2f96ab83
b0b42743b4c7e4b528fd78aadc5429ef34c2e127f3d5147330d428a47203dc0a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 16:15:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ajax.googleapis.com/ajax/libs/jquery/1.7.1/jquery.min.js
200 OK 33 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/1.7.1/jquery.min.js
IP
File type HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (32769)
Hash 18351732b1849ba758e98884e186b3c8
d735af8661eda41ff4ffbf76e6a284a0e2deb81c
bfac625d304d52e04f2caeb19266354749929c888ca09d3d1e3edcbb8770d0f0
GET /ajax/libs/jquery/1.7.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ditur.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33333
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 18 Sep 2022 23:26:25 GMT
expires: Mon, 18 Sep 2023 23:26:25 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 319726
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c8ac2005f83e8a3a9da1a9837b6c2ff3
7c05f49683e49232c1e11b91253e684d2f96ab83
b0b42743b4c7e4b528fd78aadc5429ef34c2e127f3d5147330d428a47203dc0a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 16:15:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
widget.trustpilot.com/bootstrap/v5/tp.widget.bootstrap.min.js
200 OK 6.1 kB URL HTTP/2 widget.trustpilot.com/bootstrap/v5/tp.widget.bootstrap.min.js
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (19239)
Hash 5add60196e5f96a414fb4b9586764e5d
633f471b3c2fcedeef9cad90cb5bf56f5fe55588
5370f4ba91dda790c7cae92817b812fcbd1ab367cbb4862f5669960ae4e2c9e0
GET /bootstrap/v5/tp.widget.bootstrap.min.js HTTP/1.1
Host: widget.trustpilot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ditur.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/x-javascript
content-length: 6124
last-modified: Mon, 30 May 2022 14:38:02 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
date: Thu, 22 Sep 2022 01:22:27 GMT
cache-control: max-age=86400
etag: "5add60196e5f96a414fb4b9586764e5d"
x-cache: Hit from cloudfront
via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: G7DnFP0EOOjDVf9-r5-gCYOZC4XR4WgxEd3fFlVnNzcSDioivDi6Ew==
age: 53565
X-Firefox-Spdy: h2
static.klaviyo.com/onsite/js/runtime.2888bf8d92dced7d992b.js?cb=1
200 OK 8.1 kB URL HTTP/2 static.klaviyo.com/onsite/js/runtime.2888bf8d92dced7d992b.js?cb=1
IP
File type ASCII text, with very long lines (19473), with no line terminators
Hash 1ea046024d640d1fcfc672352ab15f29
dd7a6844190f7ddc9fd7f1d85f58c004d223ce35
d81d47283c5e689f2dbeb77684dcc4dd03840dfbb417e37a4d553519320be212
GET /onsite/js/runtime.2888bf8d92dced7d992b.js?cb=1 HTTP/1.1
Host: static.klaviyo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.ditur.no
Connection: keep-alive
Referer: https://www.ditur.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: Q2Jf+teWuwSV3vU3OCDnpvcOL6OVngIxoB9XqGYe7pSEDVFFmnNgCU17s0+YMgeH5WcihxaT0SM=
x-amz-request-id: 9E3EBX78Q5K9YJY0
last-modified: Mon, 19 Sep 2022 20:02:28 GMT
etag: "291533f5634b65eae20f9422baa29d9a"
cache-control: max-age=2592000,stale-while-revalidate=10800
x-amz-meta-surrogate-control: max-age=31536000
x-amz-meta-surrogate-key: fender-asset
x-amz-version-id: Xxt9HjAXzYk7aCvjcj0Rr49LqJcS8fvM
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
access-control-allow-origin: *
accept-ranges: bytes
date: Thu, 22 Sep 2022 16:15:11 GMT
age: 9114
x-served-by: cache-lga21976-LGA, cache-bma1636-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 3819
vary: Accept-Encoding
content-length: 8075
X-Firefox-Spdy: h2
static.klaviyo.com/onsite/js/vendors~signup_forms.f7066e273a66876a4dee.js?cb=1
200 OK 12 kB URL HTTP/2 static.klaviyo.com/onsite/js/vendors~signup_forms.f7066e273a66876a4dee.js?cb=1
IP
File type ASCII text, with very long lines (36905)
Hash 2a5130a3283c5feb0565d3dbedfc9b94
d8f366809e17a57d1c1b3929a54fb259398c1fa9
bf18345ccf28ee5540d5a11559a4dff3d908ffa8e93a4c06d3e5ae408c0fec60
GET /onsite/js/vendors~signup_forms.f7066e273a66876a4dee.js?cb=1 HTTP/1.1
Host: static.klaviyo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.ditur.no
Connection: keep-alive
Referer: https://www.ditur.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: jjBLvBaAHFkdYVj2+Lzl4EwiVBypzOSfV7Hh68KS7NpSMh6P+cAphy/WZOdlMir50eSlWlunTIQ=
x-amz-request-id: QMK0P3P9BX6C1KYD
last-modified: Mon, 27 Jun 2022 21:34:56 GMT
etag: "8b11cc3d85af2e5a333cdf19d980234f"
cache-control: max-age=2592000,stale-while-revalidate=10800
x-amz-meta-surrogate-control: max-age=31536000
x-amz-meta-surrogate-key: fender-asset
x-amz-version-id: bsJKSXN8aZQUCveR8yzC_DqAz1c7vu6.
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
access-control-allow-origin: *
accept-ranges: bytes
date: Thu, 22 Sep 2022 16:15:11 GMT
age: 9114
x-served-by: cache-lga13627-LGA, cache-bma1636-BMA
x-cache: HIT, HIT
x-cache-hits: 2, 2461
vary: Accept-Encoding
content-length: 12401
X-Firefox-Spdy: h2
static.klaviyo.com/onsite/js/sharedUtils.dbe6f6fba25c3d5eb9b9.js?cb=1
200 OK 13 kB URL HTTP/2 static.klaviyo.com/onsite/js/sharedUtils.dbe6f6fba25c3d5eb9b9.js?cb=1
IP
File type Unicode text, UTF-8 text, with very long lines (34281), with no line terminators
Hash dffbe23500806fa61cf9b1cb36179a18
59adee37271284fd299915149b38d6b2e8e7c2ae
f3ce2ca6fdd6433af9eeb917bcb89c05f6c03980fa73320036c4cdeac81f4528
GET /onsite/js/sharedUtils.dbe6f6fba25c3d5eb9b9.js?cb=1 HTTP/1.1
Host: static.klaviyo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.ditur.no
Connection: keep-alive
Referer: https://www.ditur.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: g47h3KQS4bp3IvTdylupdvCLzxAn/+Vam0i6O7FIY0/uwapwvSHVS9p0DmgzdEUqGhipQoElflk=
x-amz-request-id: 0RY44SXR5J2D6HRA
last-modified: Tue, 06 Sep 2022 17:44:25 GMT
etag: "3920e36a09a180da98b37bcad5e5e2c2"
cache-control: max-age=2592000,stale-while-revalidate=10800
x-amz-meta-surrogate-control: max-age=31536000
x-amz-meta-surrogate-key: fender-asset
x-amz-version-id: J6DhPDfg3V4z4HCiiBOatFqUcC3teiEp
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
access-control-allow-origin: *
accept-ranges: bytes
date: Thu, 22 Sep 2022 16:15:11 GMT
age: 9114
x-served-by: cache-lga13626-LGA, cache-bma1636-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 3517
vary: Accept-Encoding
content-length: 13227
X-Firefox-Spdy: h2
static.klaviyo.com/onsite/js/signup_forms.47564cabd447e0caeb79.js?cb=1
200 OK 12 kB URL HTTP/2 static.klaviyo.com/onsite/js/signup_forms.47564cabd447e0caeb79.js?cb=1
IP
File type Unicode text, UTF-8 text, with very long lines (35080), with no line terminators
Hash baeffa65b049c4924b49cbfffc1afb97
3a35818b9a6babada70426a59576d901075fc66e
379d738619d85f7219a98c01eb67a5b54bc926d62cf02328ab45669fd0641a4d
GET /onsite/js/signup_forms.47564cabd447e0caeb79.js?cb=1 HTTP/1.1
Host: static.klaviyo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.ditur.no
Connection: keep-alive
Referer: https://www.ditur.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: gOGqJffLj4AyKttnk4HnLQClK31k93MkdrDcfE1uaoIaY+1Pk8e0n3DUWutMyfZy8McC3mfuuUA=
x-amz-request-id: NB2XG3YCBMHKQSVG
last-modified: Thu, 08 Sep 2022 18:16:36 GMT
etag: "2d63267addf14fe8300469051c594504"
cache-control: max-age=2592000,stale-while-revalidate=10800
x-amz-meta-surrogate-control: max-age=31536000
x-amz-meta-surrogate-key: fender-asset
x-amz-version-id: YzUvVFTSTm9rqYmTEJ4211JqvsZ4AZ2T
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
access-control-allow-origin: *
accept-ranges: bytes
date: Thu, 22 Sep 2022 16:15:11 GMT
age: 9114
x-served-by: cache-lga21950-LGA, cache-bma1636-BMA
x-cache: HIT, HIT
x-cache-hits: 3, 2484
vary: Accept-Encoding
content-length: 11607
X-Firefox-Spdy: h2
static-tracking.klaviyo.com/onsite/js/static.444020cd426b0bea12c1.js?cb=1
200 OK 5.2 kB URL HTTP/2 static-tracking.klaviyo.com/onsite/js/static.444020cd426b0bea12c1.js?cb=1
IP
File type ASCII text, with very long lines (12428), with no line terminators
Hash 8a51385137b20bdfcace3e12a6e9981f
b291ae4859ec56be11f24617f556db2be626d1f6
60157d9b98c625ee91011c3c06ee76809c5ac9225554e26a891462e8ed39c77d
GET /onsite/js/static.444020cd426b0bea12c1.js?cb=1 HTTP/1.1
Host: static-tracking.klaviyo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.ditur.no
Connection: keep-alive
Referer: https://www.ditur.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: NVmB6Kd0YFo9iCmGx+yu+eOqiC5jqbz25AtCBJn8Vs1Hbf0QGGXROARgd05prVYM5kfCwyQJ2xk=
x-amz-request-id: EYA39404SA8WM76Q
last-modified: Thu, 18 Aug 2022 15:05:14 GMT
etag: "1774dcfd43ae7a477e554d4266bbaa8e"
cache-control: max-age=2592000,stale-while-revalidate=10800
x-amz-meta-surrogate-control: max-age=31536000
x-amz-meta-surrogate-key: fender-asset
x-amz-version-id: ep5t_kHI_qKbZWWytxIKzh5j3YAjdqHx
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
access-control-allow-origin: *
accept-ranges: bytes
date: Thu, 22 Sep 2022 16:15:11 GMT
age: 9114
x-served-by: cache-lga21968-LGA, cache-bma1680-BMA
x-cache: HIT, HIT
x-cache-hits: 57, 3699
vary: Accept-Encoding
content-length: 5219
X-Firefox-Spdy: h2
sleeknotecustomerscripts.sleeknote.com/15535.js
200 OK 2.5 kB URL HTTP/2 sleeknotecustomerscripts.sleeknote.com/15535.js
IP
File type ASCII text, with very long lines (21681), with no line terminators
Hash c2b96ab6131fd82023c384a2edfb05c6
d9dfc422281904f24c00eb521343026f65136325
60d36262f559826d4c34643e4a4aac16d9914c70798b5b07f43f90a92d818140
GET /15535.js HTTP/1.1
Host: sleeknotecustomerscripts.sleeknote.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ditur.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
content-length: 2458
last-modified: Thu, 22 Sep 2022 13:05:48 GMT
content-encoding: gzip
x-amz-version-id: Gyo3DZWb0tipquT5ZeIOLYxmd7j5ZQZz
accept-ranges: bytes
server: AmazonS3
date: Thu, 22 Sep 2022 16:15:11 GMT
cache-control: max-age=60
etag: "c2b96ab6131fd82023c384a2edfb05c6"
x-cache: Hit from cloudfront
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: uYaFegX5fSnQqnIAE9zhGszuH8mGx93_nggiPeygrI6m9k-BlPI7QQ==
age: 10
X-Firefox-Spdy: h2
static-tracking.klaviyo.com/onsite/js/fender_analytics.9bd929e66a2449a7cdc1.js?cb=1
200 OK 11 kB URL HTTP/2 static-tracking.klaviyo.com/onsite/js/fender_analytics.9bd929e66a2449a7cdc1.js?cb=1
IP
File type ASCII text, with very long lines (27584), with no line terminators
Hash 0f29e4f1e3f2addc67e4852883ecf694
5c059b2980e9c5356fdc0b2c727a3a86c320c5a9
2949ec27afb5fb53e7bba607529a9529a8c75a4d71dcbea074b88dd679f1b8c9
GET /onsite/js/fender_analytics.9bd929e66a2449a7cdc1.js?cb=1 HTTP/1.1
Host: static-tracking.klaviyo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.ditur.no
Connection: keep-alive
Referer: https://www.ditur.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 36f/ps//h2tsvtsRUgp6Mk8LzgnmM0HKjWkeHSxHbhGWZ7W/4R77UIFLmwMJGAxxLaUgzekp6vo=
x-amz-request-id: V3VGV2WY5XZ8QSWT
last-modified: Fri, 26 Aug 2022 20:33:40 GMT
etag: "d48fad1b3f959b474b934ed39d9ba542"
cache-control: max-age=2592000,stale-while-revalidate=10800
x-amz-meta-surrogate-control: max-age=31536000
x-amz-meta-surrogate-key: fender-asset
x-amz-version-id: DxlKU8PAW5Z2L0V.1wRK5LqPR2sBWhOg
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
access-control-allow-origin: *
accept-ranges: bytes
date: Thu, 22 Sep 2022 16:15:11 GMT
age: 9114
x-served-by: cache-lga21973-LGA, cache-bma1680-BMA
x-cache: HIT, HIT
x-cache-hits: 5, 3615
vary: Accept-Encoding
content-length: 10605
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 41d3140d4be2377e414695a84dfe2b79
41fcffee908a6cd5fb7922ffe6aa9636c494942a
f6b8d03618d9164eddace988c0b49e454e597ff4dc2d5449ba846451e2d291e2
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 22 Sep 2022 16:15:11 GMT
Last-Modified: Thu, 22 Sep 2022 15:07:09 GMT
Server: ECS (nyb/1D22)
X-Cache: Miss from cloudfront
Via: 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Gruslk6OqUsBP30nHKwpW1_8xd9ZHYJEGefHjTlWmNiTKDRHa_TYgA==
Age: 4082
invitejs.trustpilot.com/tp.min.js
200 OK 4.3 kB URL HTTP/2 invitejs.trustpilot.com/tp.min.js
IP
Hash 1a0dfef78f3ea4b866a5419eabe85dc4
a52b58e696d8cbc69742c989cebf3d2428f70950
e3a91a1236d157a94c36d9b210308bc3f4fdc12b1116d3cf71441fc66b24bc17
GET /tp.min.js HTTP/1.1
Host: invitejs.trustpilot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ditur.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
last-modified: Thu, 08 Sep 2022 14:17:43 GMT
content-encoding: gzip
date: Thu, 22 Sep 2022 02:52:30 GMT
cache-control: public, max-age=86400
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: fqqUXk6REhTg84SEmEQC3pb-z1ZK2ncY3BSZ1z5GeQhgkkNq4cEDKg==
age: 48161
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 167654a65ab4409d0bb445f90ad40e1d
cff57f9cb159f06af9d53e2473521231dbe37318
7e529240e8b7fde309ba8050786ebc1809bb0a2d90d3eec783051c603e8f36cf
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 22 Sep 2022 16:15:11 GMT
Last-Modified: Thu, 22 Sep 2022 15:09:17 GMT
Server: ECS (nyb/1D25)
X-Cache: Miss from cloudfront
Via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 5Rs-VWqeH3rXL5KXMd4ErExkw2yO8clzLd4zwVVzI6xa3PaO0CRvgw==
Age: 3954
static.klaviyo.com/onsite/js/sentry.32defc2659e6aaee877c.js
200 OK 14 kB URL HTTP/2 static.klaviyo.com/onsite/js/sentry.32defc2659e6aaee877c.js
IP
File type Unicode text, UTF-8 text, with very long lines (39962), with no line terminators
Hash 93429c6be72678683e9267a528e4c0b4
dec00b93c3128f0094770ae508f24cb3f25fb317
f8e4e0da84f668d6f21293c30e6bfa6b1460cd2cc9b4e84cade80e81a680f477
GET /onsite/js/sentry.32defc2659e6aaee877c.js HTTP/1.1
Host: static.klaviyo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.ditur.no
Connection: keep-alive
Referer: https://www.ditur.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: iq43u9z8C5ggfgPwFsn+4bKUQtK7mcyE9p8ercG9UOmhgEJVt0S8OxGaklyy2Cyy2H5tse9JGrQ=
x-amz-request-id: KNB7YRE35ZYYP34A
last-modified: Mon, 27 Jun 2022 21:34:56 GMT
etag: "28b2f273ea92b5951335870743671025"
cache-control: max-age=2592000,stale-while-revalidate=10800
x-amz-meta-surrogate-control: max-age=31536000
x-amz-meta-surrogate-key: fender-asset
x-amz-version-id: SEi8mXkr3rDKIOIawsPVx86hWqhxnHRI
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
access-control-allow-origin: *
accept-ranges: bytes
date: Thu, 22 Sep 2022 16:15:11 GMT
age: 9114
x-served-by: cache-lga21963-LGA, cache-bma1636-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 2204
vary: Accept-Encoding
content-length: 13736
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 77f9b5e468180a8976a641e40dceedbf
9873db160721dc9f41d3ff2d711db700d6f5d4d7
cae6929c00ed37fc097432c9ac1d6800244479d3877b17662c67bafeeff23aba
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 16:15:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
googleads.g.doubleclick.net/pagead/viewthroughconversion/972423007/?random=1663863311121&cv=9&fst=1663863311121&num=1&label=MeAsCNmioggQ3_7XzwM&guid=ON&resp=GooglemKTybQhCsO&eid=375603261&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=3&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&data=ecomm_pagetype%3Dhome&frm=0&url=https%3A%2F%2Fwww.ditur.no%2F&tiba=Ditur.no%20%7C%20Skandinavias%20st%C3%B8rste%20nettbutikk%20av%20klokker&hn=www.googleadservices.com&rfmt=3&fmt=4
200 OK 1.1 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/972423007/?random=1663863311121&cv=9&fst=1663863311121&num=1&label=MeAsCNmioggQ3_7XzwM&guid=ON&resp=GooglemKTybQhCsO&eid=375603261&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=3&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&data=ecomm_pagetype%3Dhome&frm=0&url=https%3A%2F%2Fwww.ditur.no%2F&tiba=Ditur.no%20%7C%20Skandinavias%20st%C3%B8rste%20nettbutikk%20av%20klokker&hn=www.googleadservices.com&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2373), with no line terminators
Hash d885520c2dc5219988f8b2a3c74efd13
acd47efba5eb65bdf2f25dc88f84b214856bfba3
596e824074b8e24d9eed82f4be912a48a619e4a0d15799d1c39ccf765b95cd29
GET /pagead/viewthroughconversion/972423007/?random=1663863311121&cv=9&fst=1663863311121&num=1&label=MeAsCNmioggQ3_7XzwM&guid=ON&resp=GooglemKTybQhCsO&eid=375603261&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=3&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&data=ecomm_pagetype%3Dhome&frm=0&url=https%3A%2F%2Fwww.ditur.no%2F&tiba=Ditur.no%20%7C%20Skandinavias%20st%C3%B8rste%20nettbutikk%20av%20klokker&hn=www.googleadservices.com&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ditur.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 22 Sep 2022 16:15:11 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 1099
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Thu, 22-Sep-2022 16:30:11 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fast.a.klaviyo.com/custom-fonts/api/v1/company-fonts/onsite?company_id=WZCm9t
200 OK 43 B URL HTTP/2 fast.a.klaviyo.com/custom-fonts/api/v1/company-fonts/onsite?company_id=WZCm9t
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash d580dbc442c939957156ff1261f40d27
2e3908aed4ce60e13d439273bbbdf45e768030d3
53a85651866852f33fcaf1ee1eff6e5002e8dfe32e4dd49187007b3a7c1367ea
GET /custom-fonts/api/v1/company-fonts/onsite?company_id=WZCm9t HTTP/1.1
Host: fast.a.klaviyo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.ditur.no
Connection: keep-alive
Referer: https://www.ditur.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-headers:
access-control-allow-methods: GET
access-control-allow-origin: *
access-control-max-age: 86400
allow: GET, HEAD, OPTIONS
cache-control: max-age=10
content-type: application/json; charset=utf-8
server: nginx
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 22 Sep 2022 16:15:11 GMT
age: 1654169
x-served-by: cache-bos4629-BOS, cache-bma1629-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 1
vary: Cookie
strict-transport-security: max-age=900
content-length: 43
X-Firefox-Spdy: h2
static-forms.klaviyo.com/forms/api/v6/WZCm9t/full-forms
200 OK 2.6 kB URL HTTP/2 static-forms.klaviyo.com/forms/api/v6/WZCm9t/full-forms
IP
File type ASCII text, with very long lines (17766), with no line terminators
Hash b258cab510114b91754feef4847f4382
91be3b8f291193e8d8be761e348f7968ce48b228
16fc8a4b9f80d3129cddcf12f7eee8ca76de811c63dd3431ed52eaa5907ea811
GET /forms/api/v6/WZCm9t/full-forms HTTP/1.1
Host: static-forms.klaviyo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.ditur.no
Connection: keep-alive
Referer: https://www.ditur.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: RnEt4XL7DplomgXAnF/ZpEI2ViG7WIlG6L8bt6GjT9L8Y6hONLa6BOmVt6ckeecXS2vwZhXiP5Y=
x-amz-request-id: 6VSCEPWVB7ZV1BQ6
last-modified: Thu, 18 Aug 2022 06:47:17 GMT
etag: "e3f4288f8afd2c838288a63bd4aee0e3"
cache-control: max-age=5
x-amz-meta-surrogate-control: max-age=31536000
x-amz-meta-surrogate-key: full-forms/shared full-forms/WZCm9t custom-fonts/WZCm9t
x-amz-version-id: GQ_h8t2PTVBLnwRJcRDlCItr8nt6MgSB
content-type: application/json
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Thu, 22 Sep 2022 16:15:11 GMT
via: 1.1 varnish
age: 232451
x-served-by: cache-bma1673-BMA
x-cache: HIT
x-cache-hits: 6
x-timer: S1663863312.916489,VS0,VE0
vary: Accept-Encoding
client-geo-continent: EU
client-geo-country: NO
access-control-expose-headers: client-geo-continent, client-geo-country
access-control-allow-origin: *
content-length: 2570
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 77f9b5e468180a8976a641e40dceedbf
9873db160721dc9f41d3ff2d711db700d6f5d4d7
cae6929c00ed37fc097432c9ac1d6800244479d3877b17662c67bafeeff23aba
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 16:15:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
s.pinimg.com/ct/core.js
200 OK 1.2 kB IP
File type ASCII text, with very long lines (1182), with no line terminators
Hash 7cac7e5d9e2b15cdc4ae76549dde174b
41a5b48387aef7bef116d52da64af00c504c7f86
d8261c0f4ae314e710ac7b15aa6bd0cf371de5b1cec41331ca12a1c392742ce6
GET /ct/core.js HTTP/1.1
Host: s.pinimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ditur.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
etag: "7cac7e5d9e2b15cdc4ae76549dde174b"
cache-control: max-age=7200
accept-ranges: bytes
content-type: application/javascript
content-length: 1182
vary: Accept-Encoding, Origin
x-cdn: akamai
access-control-max-age: 86400
access-control-expose-headers: X-CDN
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 75a6c13f18620214e5e013385d752044
174c34759a1e50884846a2505f0be16c285d75cc
fe6fcbbe324ceefc1e833208faedaeae6934b34f868690e5ad4676b02c0b3bf0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 16:15:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f675396b1827a50c78e358358f256144
451b788273e06a08f762735c23c13028e32a3f3c
6bd9e2ec423bf8f0f681a92f4ad0b28cdb53f5df6ca4b571c9697b678c20c126
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 16:15:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/pagead/1p-user-list/972423007/?random=1663863311121&cv=9&fst=1663862400000&num=1&label=MeAsCNmioggQ3_7XzwM&guid=ON&eid=375603261&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=3&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&data=ecomm_pagetype%3Dhome&frm=0&url=https%3A%2F%2Fwww.ditur.no%2F&tiba=Ditur.no%20%7C%20Skandinavias%20st%C3%B8rste%20nettbutikk%20av%20klokker&fmt=3&is_vtc=1&random=1591457175&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y
200 OK 42 B URL HTTP/2 www.google.com/pagead/1p-user-list/972423007/?random=1663863311121&cv=9&fst=1663862400000&num=1&label=MeAsCNmioggQ3_7XzwM&guid=ON&eid=375603261&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=3&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&data=ecomm_pagetype%3Dhome&frm=0&url=https%3A%2F%2Fwww.ditur.no%2F&tiba=Ditur.no%20%7C%20Skandinavias%20st%C3%B8rste%20nettbutikk%20av%20klokker&fmt=3&is_vtc=1&random=1591457175&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/972423007/?random=1663863311121&cv=9&fst=1663862400000&num=1&label=MeAsCNmioggQ3_7XzwM&guid=ON&eid=375603261&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=3&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&data=ecomm_pagetype%3Dhome&frm=0&url=https%3A%2F%2Fwww.ditur.no%2F&tiba=Ditur.no%20%7C%20Skandinavias%20st%C3%B8rste%20nettbutikk%20av%20klokker&fmt=3&is_vtc=1&random=1591457175&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ditur.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 22 Sep 2022 16:15:12 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/972423007/?random=1663863311121&cv=9&fst=1663862400000&num=1&label=MeAsCNmioggQ3_7XzwM&guid=ON&eid=375603261&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=3&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&data=ecomm_pagetype%3Dhome&frm=0&url=https%3A%2F%2Fwww.ditur.no%2F&tiba=Ditur.no%20%7C%20Skandinavias%20st%C3%B8rste%20nettbutikk%20av%20klokker&fmt=3&is_vtc=1&random=1591457175&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/972423007/?random=1663863311121&cv=9&fst=1663862400000&num=1&label=MeAsCNmioggQ3_7XzwM&guid=ON&eid=375603261&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=3&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&data=ecomm_pagetype%3Dhome&frm=0&url=https%3A%2F%2Fwww.ditur.no%2F&tiba=Ditur.no%20%7C%20Skandinavias%20st%C3%B8rste%20nettbutikk%20av%20klokker&fmt=3&is_vtc=1&random=1591457175&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/972423007/?random=1663863311121&cv=9&fst=1663862400000&num=1&label=MeAsCNmioggQ3_7XzwM&guid=ON&eid=375603261&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=3&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&data=ecomm_pagetype%3Dhome&frm=0&url=https%3A%2F%2Fwww.ditur.no%2F&tiba=Ditur.no%20%7C%20Skandinavias%20st%C3%B8rste%20nettbutikk%20av%20klokker&fmt=3&is_vtc=1&random=1591457175&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ditur.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 22 Sep 2022 16:15:12 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f85caa32cfc5c68ae9d37dac5075d086
d98cb95e042dfdf7fcfe0bef3d83624a970ee7ab
c1d5882e2ccbee35dfb5d42d78ef6fd843882cbbbe5653cd686ff768e697ac84
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 16:15:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f675396b1827a50c78e358358f256144
451b788273e06a08f762735c23c13028e32a3f3c
6bd9e2ec423bf8f0f681a92f4ad0b28cdb53f5df6ca4b571c9697b678c20c126
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 16:15:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.ditur.no/media/logo/default/Nuv_rende.svg
200 OK 19 kB URL HTTP/2 www.ditur.no/media/logo/default/Nuv_rende.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (1471), with no line terminators
Hash e3f738282f21c5a87d8ea82a1a7329e2
d9446f5ae4a59bb9ed501669c1f6b4890cccaf8a
349a8faff36e060a8ff92eb6f34103d2c186724e66fe91f9b8c368a0efb67b8a
GET /media/logo/default/Nuv_rende.svg HTTP/1.1
Host: www.ditur.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ditur.no/
Cookie: ditur_country=NO; ditur_country=NO; frontend=mnber7auv64jaknuer1kio6rk8; frontend_cid=qgkeOV4LE5DDonit
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 22 Sep 2022 16:15:11 GMT
content-type: image/svg+xml
last-modified: Wed, 03 Nov 2021 15:57:39 GMT
etag: W/"5bf-gzip"
cache-control: max-age=15638400
expires: Sun, 04 Dec 2022 22:56:28 GMT
vary: Accept-Encoding
x-served-by: Apache, phct-015.cust.powerhosting.dk, ipv4: 185.31.79.122 ipv6: 2a00:b920:3:1337::122, vhost = ditur.dk
x-ph-static-cache: HIT
cf-cache-status: HIT
age: 9307123
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=I3QaLQYo7wpU1aRAo%2FEYl4%2FGX9Ozn5gWhCjW3xB5xJKOjGwPJcJKAHragXfv%2BA78k%2FQrvQeQR4VxcEnUbTYKDz7Wszn%2FE5kDuMsGnA8djOG%2FwLPh9pEdqGisRDG08w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74ec567e5f83b521-OSL
content-encoding: br
X-Firefox-Spdy: h2
ekr.zdassets.com/compose/466adbfa-803e-4666-9d1b-7c880b857630
200 OK 276 B URL HTTP/2 ekr.zdassets.com/compose/466adbfa-803e-4666-9d1b-7c880b857630
IP
File type JSON data\012- , ASCII text, with very long lines (383), with no line terminators
Hash e3ea9178730f1a30e608f000b5ac130f
36dd2566aba115e75d6e6bfa5e9fd878ba01ca59
a9d7ded7e1247d7f9cbf986db9d5d18a58eba07c8d7c9242a0f4fedb681c8586
GET /compose/466adbfa-803e-4666-9d1b-7c880b857630 HTTP/1.1
Host: ekr.zdassets.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.ditur.no
Connection: keep-alive
Referer: https://www.ditur.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 22 Sep 2022 16:15:12 GMT
content-type: application/json; charset=utf-8
status: 200 OK
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-expose-headers:
access-control-max-age: 7200
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-download-options: noopen
x-permitted-cross-domain-policies: none
referrer-policy: strict-origin-when-cross-origin
cache-control: max-age=600, public, s-maxage=60, stale-while-revalidate=600, stale-if-error=3600
etag: W/"30fa5dc57391bb853b3b7ca34fca5278"
x-request-id: 0048c140e11a6fb2e96778b4833ec9b3, 0048c140e11a6fb2e96778b4833ec9b3
x-runtime: 0.002439
vary: Origin, Accept-Encoding
x-zendesk-zorg: yes
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OF3jUH3iFbHwaSCJa128ALS0BHShhsAqrqeTbn2%2FJnVtmxnRtTXBYsnmUWTOww67pcJmG%2BhgvsgIq0xdY5LjDxzril0xQT1L56ZbMeIoVCyKSkkGyhuEGUHsadSsur7%2Ff5A%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 74ec56842a6db4fa-OSL
content-encoding: br
X-Firefox-Spdy: h2
ct.pinterest.com/user/?tid=2613045459174&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%7D&cb=1663863311671
200 OK 373 B URL HTTP/2 ct.pinterest.com/user/?tid=2613045459174&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%7D&cb=1663863311671
IP
File type JSON data\012- , ASCII text, with very long lines (533), with no line terminators
Hash 7c95bf1e7580e7dfa7f4f5c10b0addd9
a1e3954cd6a0d4a5fc0a6c344d91e6c24504722b
1f8cb83a1e4eedc470a6d0c6acc5f5ff13fa65639378a8a14d5db82e288b2e17
GET /user/?tid=2613045459174&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%7D&cb=1663863311671 HTTP/1.1
Host: ct.pinterest.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.ditur.no
Connection: keep-alive
Referer: https://www.ditur.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-expose-headers: Epik,Pin-Unauth
pin-unauth: dWlkPU5qSmlNek5rTnpndFpUazNOQzAwTmpJd0xUbGpZelF0WWpsbFpXRXpPREExWkRBMQ
cache-control: no-cache,no-store,must-revalidate,max-age=0
pragma: no-cache
expires: Sat, 01 Jan 2000 00:00:00 GMT
access-control-allow-origin: https://www.ditur.no
content-type: application/json; charset=utf-8
content-encoding: gzip
x-envoy-upstream-service-time: 3
referrer-policy: origin
x-pinterest-rid: 8353141351372174
date: Thu, 22 Sep 2022 16:15:12 GMT
x-cdn: fastly
content-length: 373
X-Firefox-Spdy: h2
ct.pinterest.com/ct.html
200 OK 323 B IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (565), with no line terminators
Hash b49b45b63051915a8c657060651eb07f
acaddf8021f220d0e4d30e7c8b3d8330ff781af9
4b00fbca5db49c6e4b29a0c873c43671880bcea1b7b3007655183382a318c2dc
GET /ct.html HTTP/1.1
Host: ct.pinterest.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ditur.no/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: max-age=86400
content-type: text/html; charset=utf-8
content-encoding: gzip
x-envoy-upstream-service-time: 0
referrer-policy: origin
x-pinterest-rid: 2688449652676096
date: Thu, 22 Sep 2022 16:15:12 GMT
x-cdn: fastly
content-length: 323
X-Firefox-Spdy: h2
static.zdassets.com/web_widget/latest/classic/web-widget-5324-4959cd4.js
200 OK 110 kB URL HTTP/2 static.zdassets.com/web_widget/latest/classic/web-widget-5324-4959cd4.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Size 110 kB (110480 bytes)
Hash f20f772f450a4173e643a924ce4d6579
ba7d8a4b9a5051b725e2f5077edc129bb82a75f4
795a4b4d6603f2d71c89da061c91968b47dd6ce7241faab3b7bd63d9b5f868ce
GET /web_widget/latest/classic/web-widget-5324-4959cd4.js HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 22 Sep 2022 16:15:12 GMT
content-type: application/javascript; charset=utf-8
x-amz-id-2: 7SBFzSrAx4tzcHW5Wp2+aU+xRUkDvh65ix7DTN2vy9hPqTm4lJznqd7xcTghFeklW6ABlk9JEeA=
x-amz-request-id: ZGGGVNHEM84TN110
x-amz-replication-status: COMPLETED
last-modified: Sun, 18 Sep 2022 23:58:51 GMT
etag: W/"366f7cf263407282b93cb68444e2d663"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Mon, 18 Sep 2023 23:58:50 GMT
x-amz-version-id: joYHRdGcYo0sEFaysm_reFc2G4fOBaTM
cf-cache-status: HIT
age: 297195
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OBo7pI5ibCYETBhmCDLTo5bCLal%2FvPgNmXaK%2BzNY1%2BtHki0KMux2eTH3vWPLQZ6IXUcWTeThcanXpMjTDkXT8MktYdUCo37sr%2Bqfpqd47J1GbztbXotArujmxSBmnhYze84hBK0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 74ec56889a87b511-OSL
content-encoding: br
X-Firefox-Spdy: h2
static.zdassets.com/web_widget/latest/classic/web-widget-classic-4959cd4.js
200 OK 42 kB URL HTTP/2 static.zdassets.com/web_widget/latest/classic/web-widget-classic-4959cd4.js
IP
Hash ba9cf9535afc3792f014f5b31ab7fa4e
e80dcd785cde80eabccc80176f9768fd1dc4f379
3fa558bcc810530bf2f0282d3ab02cfaed76e26b3eda36bd168ac1490780a461
GET /web_widget/latest/classic/web-widget-classic-4959cd4.js HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 22 Sep 2022 16:15:12 GMT
content-type: application/javascript; charset=utf-8
x-amz-id-2: jBR/tTHSxOW0n42bUG3f/ktQnVeO1sQn7oNurwmtgopFHN6T/MnUv3+qlo9MuniF8ow2bteE4Fg=
x-amz-request-id: ZGGGTBVJRE2SRBZ4
x-amz-replication-status: COMPLETED
last-modified: Sun, 18 Sep 2022 23:58:51 GMT
etag: W/"2c6d6e70bc75361eb638897d59167f88"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Mon, 18 Sep 2023 23:58:50 GMT
x-amz-version-id: PeIFmheKLB0W1j6uanpnO.FllYN6RFSf
cf-cache-status: HIT
age: 297195
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DnTYNTMTlV32tM8THHtMsgFlAicz709sJ0ne%2BKJer9Yu%2B5dLKas7IdKhTwvukP8VN52qYfHLOIqNu50%2Fs3bgdKaAQapZ55wDd9pCcCO33wHDUvSyJMZYFcrZatjFLhQO4EOkpUU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 74ec56884a08b511-OSL
content-encoding: br
X-Firefox-Spdy: h2
images.sleeknote.com/sleeknoteimages/tr:f-png,lo-true/637140819248120774.png
200 OK 0 B URL HTTP/2 images.sleeknote.com/sleeknoteimages/tr:f-png,lo-true/637140819248120774.png
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD /sleeknoteimages/tr:f-png,lo-true/637140819248120774.png HTTP/1.1
Host: images.sleeknote.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.ditur.no/
Origin: https://www.ditur.no
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/png
content-length: 288
x-request-id: 1791c58c-f91d-4086-a94d-a655410b549c
x-server: ImageKit.io
access-control-allow-origin: *
timing-allow-origin: *
cache-control: public, s-maxage=15552000, max-age=15552000, must-revalidate
etag: W/"120-AdDpBSiJbv/VnfdlGYtR9blzR0k"
date: Sat, 02 Jul 2022 03:35:27 GMT
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: UWqkbbGDarT2uAlyAG4lHOynQGNn5WJ3DXvxQu9mzEYLKXqSRR9RPw==
age: 7130385
X-Firefox-Spdy: h2
images.sleeknote.com/sleeknoteimages/tr:f-png,lo-true/637140819248120774.png
200 OK 288 B URL HTTP/2 images.sleeknote.com/sleeknoteimages/tr:f-png,lo-true/637140819248120774.png
IP
File type PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced\012- data
Hash 5e2fe4854cd020257e18465e270dec5e
01d0e90528896effd59df765198b51f5b9734749
099ff7cce451001227157005649b9ab130ca5cbc478f61af8a859033147f3b91
GET /sleeknoteimages/tr:f-png,lo-true/637140819248120774.png HTTP/1.1
Host: images.sleeknote.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.ditur.no/
Origin: https://www.ditur.no
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 288
x-request-id: 1791c58c-f91d-4086-a94d-a655410b549c
x-server: ImageKit.io
access-control-allow-origin: *
timing-allow-origin: *
cache-control: public, s-maxage=15552000, max-age=15552000, must-revalidate
etag: W/"120-AdDpBSiJbv/VnfdlGYtR9blzR0k"
date: Sat, 02 Jul 2022 03:35:27 GMT
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: yPHYGBg9VKW46OhqtvCPjezi-kMXE0ADJtjtpI7iHe4H4qACODWuTg==
age: 7130385
X-Firefox-Spdy: h2
images.sleeknote.com/sleeknoteimages/tr:f-avif,w-510/637987453925001854.jpeg
200 OK 15 kB URL HTTP/2 images.sleeknote.com/sleeknoteimages/tr:f-avif,w-510/637987453925001854.jpeg
IP
File type ISO Media, AVIF Image\012- data
Hash a8f736610002711bedbfb766f2d62354
4f3f959a2b6affa9cce2cc1f798ef5a8b89f072e
45c07f29ead8406ba8861f82783e8a514b072dd00351433d0b092f9c1e7cfaee
GET /sleeknoteimages/tr:f-avif,w-510/637987453925001854.jpeg HTTP/1.1
Host: images.sleeknote.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.ditur.no/
Origin: https://www.ditur.no
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/avif
content-length: 15183
x-request-id: 7fb1c3db-213b-40b8-8fa4-410177557698
x-server: ImageKit.io
access-control-allow-origin: *
timing-allow-origin: *
cache-control: public, s-maxage=15552000, max-age=15552000, must-revalidate
etag: W/"3b4f-Tz+Vmitq/6nM4swfeY71qLifBy4"
date: Wed, 14 Sep 2022 09:45:52 GMT
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: N4-1C1PCsdEeznugsd2ETqCuruFr8fjcyHyXDxZQXhibIxuNjagHog==
age: 714560
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 9b22aa346de11c0a21682c3fd76698ab
37f9137e9de66b187d0e83a43e7ff270dcab9766
8f1b939d1295d79c52149ba9ed2c2f872ab8ba1328c49da821226f92f4770612
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4441
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 16:15:12 GMT
Last-Modified: Thu, 22 Sep 2022 15:01:11 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 471
twemoji.maxcdn.com/v/12.1.3/72x72/1f389.png?1663863312166
200 OK 8.5 kB URL HTTP/2 twemoji.maxcdn.com/v/12.1.3/72x72/1f389.png?1663863312166
IP
File type gzip compressed data, from Unix\012- data
Hash 6cf5a7f514d32a11c5e9c9891016717c
9be99d9289070d5bec0287fab5b8908226989460
2e172a73f599dd3104527b81e80c569a418f5cfb88c55e2ddbe9a038736b5b61
GET /v/12.1.3/72x72/1f389.png?1663863312166 HTTP/1.1
Host: twemoji.maxcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.ditur.no/
Origin: https://www.ditur.no
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 22 Sep 2022 16:15:13 GMT
content-type: image/png
content-length: 1376
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Thu, 31 Mar 2022 03:24:16 GMT
access-control-allow-origin: *
etag: "62451ee0-560"
expires: Sat, 22 Oct 2022 16:15:13 GMT
cache-control: max-age=2592000
x-proxy-cache: MISS
x-github-request-id: 080A:2F94:556819:57A547:632A17C7
vary: Accept-Encoding
x-fastly-request-id: 47dfeb9e0f3f209be345cab783a417af81c54ee3
server: NetDNA-cache/2.2
powered-by: MaxCDN
x-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
twemoji.maxcdn.com/v/12.1.3/72x72/1f525.png?1663863312166
200 OK 928 B URL HTTP/2 twemoji.maxcdn.com/v/12.1.3/72x72/1f525.png?1663863312166
IP
File type PNG image data, 72 x 72, 8-bit colormap, non-interlaced\012- data
Hash 4862859d393b2a68ce341fa1f3c0ff9b
58f09735781a2f7ece5e5c0fde2cb7e9d2c22c77
b0f4c358afcce0ddcde029e72ea2d6054eece0ce5a34c9a7e0c5761ff4f33a25
GET /v/12.1.3/72x72/1f525.png?1663863312166 HTTP/1.1
Host: twemoji.maxcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.ditur.no/
Origin: https://www.ditur.no
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 22 Sep 2022 16:15:13 GMT
content-type: image/png
content-length: 928
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Thu, 31 Mar 2022 03:24:16 GMT
access-control-allow-origin: *
etag: "62451ee0-3a0"
expires: Sat, 22 Oct 2022 16:15:13 GMT
cache-control: max-age=2592000
x-proxy-cache: MISS
x-github-request-id: 080C:1117C:584EEF:5A973B:632A1AC3
vary: Accept-Encoding
x-fastly-request-id: 967ca38944f76aefab5161125dcf1fb11b319a42
server: NetDNA-cache/2.2
powered-by: MaxCDN
x-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
twemoji.maxcdn.com/v/12.1.3/72x72/1f929.png?1663863312166
200 OK 1.2 kB URL HTTP/2 twemoji.maxcdn.com/v/12.1.3/72x72/1f929.png?1663863312166
IP
File type PNG image data, 72 x 72, 8-bit colormap, non-interlaced\012- data
Hash 121fe41ff17c002cc87291eb3df5a9ff
3a7405954737e1892aa4088ae9321cd63dbdfecd
494a5d33fa83756c26384a2e7a90142bde9d8d0b4f81c7f2721b9527cf5ce684
GET /v/12.1.3/72x72/1f929.png?1663863312166 HTTP/1.1
Host: twemoji.maxcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.ditur.no/
Origin: https://www.ditur.no
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 22 Sep 2022 16:15:13 GMT
content-type: image/png
content-length: 1175
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Thu, 31 Mar 2022 03:24:16 GMT
access-control-allow-origin: *
etag: "62451ee0-497"
expires: Sat, 22 Oct 2022 16:15:13 GMT
cache-control: max-age=2592000
x-proxy-cache: MISS
x-github-request-id: 080C:1D9C:575A32:59A0EC:632A1869
vary: Accept-Encoding
x-fastly-request-id: 4d68cbe69dd17b22523e9c7dce8fb190204b7845
server: NetDNA-cache/2.2
powered-by: MaxCDN
x-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 375756444a8871bbe816165e294fb262
2f9e18473daa3daae633a4df448a2230e77f8c33
c2e94c3082cb76fad8f5ace3c686f46d43c807b7f2d3cb9f2b4d9965b91af4c2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 16:15:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
region1.google-analytics.com/g/collect?v=2&tid=G-1MWFRTCQD4>m=2oe9l0&_p=1628034732&gcs=G100&cid=964317705.1663863312&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1663863311&sct=1&seg=0&dl=https%3A%2F%2Fwww.ditur.no%2F&dt=Ditur.no%20%7C%20Skandinavias%20st%C3%B8rste%20nettbutikk%20av%20klokker&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-1MWFRTCQD4>m=2oe9l0&_p=1628034732&gcs=G100&cid=964317705.1663863312&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1663863311&sct=1&seg=0&dl=https%3A%2F%2Fwww.ditur.no%2F&dt=Ditur.no%20%7C%20Skandinavias%20st%C3%B8rste%20nettbutikk%20av%20klokker&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-1MWFRTCQD4>m=2oe9l0&_p=1628034732&gcs=G100&cid=964317705.1663863312&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1663863311&sct=1&seg=0&dl=https%3A%2F%2Fwww.ditur.no%2F&dt=Ditur.no%20%7C%20Skandinavias%20st%C3%B8rste%20nettbutikk%20av%20klokker&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.ditur.no
Connection: keep-alive
Referer: https://www.ditur.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.ditur.no
date: Thu, 22 Sep 2022 16:15:13 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c7b623b7bcd37d436886346d495f9577
eb5688f0df28fa33b202e78d916e35387178636d
74037773d23c4426c3717e239e9dc228904f9cc8b8f084c655e26dcd9e345a96
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 16:15:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash d92c4b4fec290444970357f9c6c18705
441d43c18772d39e588331a4019d0ceab19864ac
b25fb018e0f60156914c6309ecf64df288f728ca323e210e9dd48aad16242fa9
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 22 Sep 2022 16:15:13 GMT
Last-Modified: Thu, 22 Sep 2022 14:56:03 GMT
Server: ECS (bsa/EB23)
X-Cache: Miss from cloudfront
Via: 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: KBLsOUXX294YXvvjxVG0JN1tgMjQaTFzP0QUhp2r-GqEp6XhJdDC4w==
Age: 4750
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 5f68499f2ba3b2c5aa7e979ee9b4d3a8
67a456fe80bd69aa2fbd0331ba343d1789509d0f
394e18527ce3ad7de2274de2e5e6a7f3fb390e7d6c4f7342ab485b7794e169e7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 16:15:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 5f68499f2ba3b2c5aa7e979ee9b4d3a8
67a456fe80bd69aa2fbd0331ba343d1789509d0f
394e18527ce3ad7de2274de2e5e6a7f3fb390e7d6c4f7342ab485b7794e169e7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 16:15:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 5f68499f2ba3b2c5aa7e979ee9b4d3a8
67a456fe80bd69aa2fbd0331ba343d1789509d0f
394e18527ce3ad7de2274de2e5e6a7f3fb390e7d6c4f7342ab485b7794e169e7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 16:15:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static.zdassets.com/web_widget/latest/classic/web-widget-locales/classic/en-us-json-4959cd4.js
200 OK 58 kB URL HTTP/2 static.zdassets.com/web_widget/latest/classic/web-widget-locales/classic/en-us-json-4959cd4.js
IP
File type Unicode text, UTF-8 text, with very long lines (25705), with no line terminators
Hash 865675159825e9213c06c69defcb0e5e
ebd3cd7827c1d60e8873f59be10f476df33222be
1a2a8104aa2115902a0ac8d5b0025aad5e44b8e19b286c8e90182d0a2bb6becc
GET /web_widget/latest/classic/web-widget-locales/classic/en-us-json-4959cd4.js HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 22 Sep 2022 16:15:13 GMT
content-type: application/javascript; charset=utf-8
x-amz-id-2: 3JqznjTaJAt0Fm3ANakgcyfcAG2oHy7XSGM41n99aVRdwQ2UguB1oRHYLmGIenzxVhNDKWS/PwE=
x-amz-request-id: NRPW6CJKNM2X1MFQ
x-amz-replication-status: COMPLETED
last-modified: Sun, 18 Sep 2022 23:58:52 GMT
etag: W/"10d9a30eac6ed106c66673278428cd9d"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Mon, 18 Sep 2023 23:58:51 GMT
x-amz-version-id: HB_l8WtwoRjLChw61_XdQ_RcWkx3nTGi
cf-cache-status: HIT
age: 297194
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=z%2BFKhhFWc8XH8lNTlzm6PEhz2UsSQghlmx3nBZVnYdn4umDilCdq%2Bg7k8W3pQyxCdeFxBorHFVu8%2FGvx%2FeBCRZjAxL8cA4Lybma6JEjDzwxRyvokwU76q4MngvGFHMVo2vui0FY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 74ec568afd88b511-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 5f68499f2ba3b2c5aa7e979ee9b4d3a8
67a456fe80bd69aa2fbd0331ba343d1789509d0f
394e18527ce3ad7de2274de2e5e6a7f3fb390e7d6c4f7342ab485b7794e169e7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 16:15:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash edd6c63988b69a64a51433c3fd91b0ba
a0a41a5403a2c397d70cfa267c1d6407250df043
c9b1efff4ebf41ad54d3137ee7a93b688c66765df99e387ae730b39abe2f115f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 16:15:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4797d6fd00b4884a9a2bd74ed01e2d1d
8d5e48550c7eb8c2f81ab8c126d452257e4d98ed
4c6fb508b26b7fc8be67672a70d2d0b73ae0cee68c0969350751823c49bf4a9e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 16:15:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash edd6c63988b69a64a51433c3fd91b0ba
a0a41a5403a2c397d70cfa267c1d6407250df043
c9b1efff4ebf41ad54d3137ee7a93b688c66765df99e387ae730b39abe2f115f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 16:15:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4797d6fd00b4884a9a2bd74ed01e2d1d
8d5e48550c7eb8c2f81ab8c126d452257e4d98ed
4c6fb508b26b7fc8be67672a70d2d0b73ae0cee68c0969350751823c49bf4a9e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 16:15:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.googleapis.com/css?family=Heebo:400,300,700&1663863312166
200 OK 28 kB URL HTTP/2 fonts.googleapis.com/css?family=Heebo:400,300,700&1663863312166
IP
Hash 300d8f092a3081346cecd3185c497960
fa543b9438dc89c68330210f04a2ac67f59abd6f
6ccebed41f95a3c08e220f03c700011c2ee138d5f2b1b67aa56525618f7c5bce
GET /css?family=Heebo:400,300,700&1663863312166 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.ditur.no/
Origin: https://www.ditur.no
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 22 Sep 2022 16:15:13 GMT
date: Thu, 22 Sep 2022 16:15:13 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Dosis:400,300,700&1663863312166
200 OK 24 kB URL HTTP/2 fonts.googleapis.com/css?family=Dosis:400,300,700&1663863312166
IP
Hash 37fe40480f60e26a4a9d886f7693a764
dc2ca00483b68d14f6c2ddaec5dc6701a4785b4f
fc80a42f20ad34488903d73ed97fc8ca3e7bb0b1540c5b141e7e1dbe24fc2235
GET /css?family=Dosis:400,300,700&1663863312166 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.ditur.no/
Origin: https://www.ditur.no
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 22 Sep 2022 16:15:13 GMT
date: Thu, 22 Sep 2022 16:15:13 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
api.clerk.io/v2/log/pageview?payload=%7B%22key%22%3A%22OyyysvF2QybXsVhZq3D6ES2nyleZRf32%22%2C%22visitor%22%3A%22auto%22%2C%22_%22%3A1663863312%7D&callback=__clerk_cb_0
200 OK 0 B URL HTTP/2 api.clerk.io/v2/log/pageview?payload=%7B%22key%22%3A%22OyyysvF2QybXsVhZq3D6ES2nyleZRf32%22%2C%22visitor%22%3A%22auto%22%2C%22_%22%3A1663863312%7D&callback=__clerk_cb_0
IP
GET /v2/log/pageview?payload=%7B%22key%22%3A%22OyyysvF2QybXsVhZq3D6ES2nyleZRf32%22%2C%22visitor%22%3A%22auto%22%2C%22_%22%3A1663863312%7D&callback=__clerk_cb_0 HTTP/1.1
Host: api.clerk.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ditur.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 22 Sep 2022 16:15:12 GMT
content-type: application/javascript
server: nginx
vary: Accept-Encoding
cache-control: no-cache
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
www.ditur.no/media/js/50533f378ef652f4d32ca07b6703cc08_1604415944.js
200 OK 0 B URL HTTP/2 www.ditur.no/media/js/50533f378ef652f4d32ca07b6703cc08_1604415944.js
IP
GET /media/js/50533f378ef652f4d32ca07b6703cc08_1604415944.js HTTP/1.1
Host: www.ditur.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ditur.no/
Cookie: ditur_country=NO; ditur_country=NO; frontend=mnber7auv64jaknuer1kio6rk8; frontend_cid=qgkeOV4LE5DDonit
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 22 Sep 2022 16:15:11 GMT
content-type: application/javascript
cache-control: max-age=15638400
cf-bgj: minify
cf-polished: origSize=926
etag: W/"39e-gzip"
expires: Sun, 01 Jan 2023 17:33:03 GMT
last-modified: Mon, 04 Jul 2022 07:45:45 GMT
vary: Accept-Encoding
x-ph-static-cache: HIT
x-served-by: Apache, phct-015.cust.powerhosting.dk, ipv4: 185.31.79.122 ipv6: 2a00:b920:3:1337::122, vhost = ditur.dk
cf-cache-status: HIT
age: 6907328
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0wmnDDVi%2Fr4BizB1iKjTaAWff%2Bho5XB25KC8iwnukzeo0Gbwm004IIbHAQo21nDv3kbuMxCY0%2BSs8sJ24PCEhahfFKYYl7iG4NLBh%2B6PKzcK3FAMk2OtVGOO3oEm9A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74ec567e6facb521-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.ditur.no/skin/frontend/ditur/default/fonts/heebo/heebo-v12-latin-regular.woff2
200 OK 0 B URL HTTP/2 www.ditur.no/skin/frontend/ditur/default/fonts/heebo/heebo-v12-latin-regular.woff2
IP
GET /skin/frontend/ditur/default/fonts/heebo/heebo-v12-latin-regular.woff2 HTTP/1.1
Host: www.ditur.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.ditur.no/media/css_secure/5b49bd4a1dbf0452048fa064ea3c5cba_1662531186.css
Cookie: ditur_country=NO; ditur_country=NO; frontend=mnber7auv64jaknuer1kio6rk8; frontend_cid=qgkeOV4LE5DDonit
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 22 Sep 2022 16:15:11 GMT
content-type: font/woff2
last-modified: Thu, 09 Sep 2021 12:35:54 GMT
etag: W/"2710-gzip"
cache-control: max-age=15638400
expires: Mon, 06 Mar 2023 13:16:12 GMT
vary: Accept-Encoding
x-served-by: Apache, phct-015.cust.powerhosting.dk, ipv4: 185.31.79.122 ipv6: 2a00:b920:3:1337::122, vhost = ditur.dk
x-ph-static-cache: HIT
cf-cache-status: HIT
age: 1393139
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WQpYr3S16hYG39Cx1gMyoaUe3p2TRar4RK2LmO%2BtsWmyvsccwL0kHersTTsHICdWl7eVeMkBA26agVPAaMAapAZ2YNNy4kouI2%2BckL1%2BJDMfTeVlDq3CrLBCjI5agw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74ec567ef85cb521-OSL
X-Firefox-Spdy: h2
www.ditur.no/skin/frontend/ditur/default/fonts/fontawesome/5.6.0/webfonts/fa-light-300.woff2
200 OK 0 B URL HTTP/2 www.ditur.no/skin/frontend/ditur/default/fonts/fontawesome/5.6.0/webfonts/fa-light-300.woff2
IP
GET /skin/frontend/ditur/default/fonts/fontawesome/5.6.0/webfonts/fa-light-300.woff2 HTTP/1.1
Host: www.ditur.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.ditur.no/media/css_secure/5b49bd4a1dbf0452048fa064ea3c5cba_1662531186.css
Cookie: ditur_country=NO; ditur_country=NO; frontend=mnber7auv64jaknuer1kio6rk8; frontend_cid=qgkeOV4LE5DDonit
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 22 Sep 2022 16:15:11 GMT
content-type: font/woff2
last-modified: Tue, 28 Apr 2020 05:18:22 GMT
etag: W/"26e90-gzip"
cache-control: max-age=15638400
expires: Sun, 04 Dec 2022 22:56:28 GMT
vary: Accept-Encoding
x-served-by: Apache, phct-015.cust.powerhosting.dk, ipv4: 185.31.79.122 ipv6: 2a00:b920:3:1337::122, vhost = ditur.dk
x-ph-static-cache: HIT
cf-cache-status: HIT
age: 9307123
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7e28%2BZTAznkR7KrJx7hFslak3vPdaz5Zc9ZuVyc83MgPL%2FCQmgOG6DlU0GoqcjGf54CwHFZpPg5eW4kAX8OHplm7CNm2d7lnj0kyM4%2FJ2RMhXkSEZJF%2BY7E4xhOdJw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74ec567ef85eb521-OSL
X-Firefox-Spdy: h2
www.ditur.no/skin/frontend/ditur/default/fonts/heebo/heebo-v12-latin-600.woff2
200 OK 0 B URL HTTP/2 www.ditur.no/skin/frontend/ditur/default/fonts/heebo/heebo-v12-latin-600.woff2
IP
GET /skin/frontend/ditur/default/fonts/heebo/heebo-v12-latin-600.woff2 HTTP/1.1
Host: www.ditur.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.ditur.no/media/css_secure/5b49bd4a1dbf0452048fa064ea3c5cba_1662531186.css
Cookie: ditur_country=NO; ditur_country=NO; frontend=mnber7auv64jaknuer1kio6rk8; frontend_cid=qgkeOV4LE5DDonit
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 22 Sep 2022 16:15:11 GMT
content-type: font/woff2
last-modified: Thu, 09 Sep 2021 12:35:54 GMT
etag: W/"284c-gzip"
cache-control: max-age=15638400
expires: Sun, 04 Dec 2022 22:56:28 GMT
vary: Accept-Encoding
x-served-by: Apache, phct-015.cust.powerhosting.dk, ipv4: 185.31.79.122 ipv6: 2a00:b920:3:1337::122, vhost = ditur.dk
x-ph-static-cache: HIT
cf-cache-status: HIT
age: 9307123
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9hKMRHmIEkDq%2FsWSsJfV4baAecopG6is7bYLjgzDxyBTQRLwr8%2Bt%2B1jTUUW4PgIZeqrsleO465Y2E8zdNCZ9VaRylPSczdFdCE3ZwBXNNy3DwvaGdMVDYZYAYZ2hJg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74ec5680fb5cb521-OSL
X-Firefox-Spdy: h2
sleeknotestaticcontent.sleeknote.com/core.js
200 OK 0 B URL HTTP/2 sleeknotestaticcontent.sleeknote.com/core.js
IP
GET /core.js HTTP/1.1
Host: sleeknotestaticcontent.sleeknote.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ditur.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
date: Wed, 21 Sep 2022 12:21:38 GMT
last-modified: Wed, 21 Sep 2022 12:21:15 GMT
etag: W/"2b755aedebc5be66de32ee001d3b6359"
cache-control: max-age=604800
x-amz-version-id: 3EsnNzslmIjzHTr1K8xPRl.jHsmLU8OX
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: K3cAXU5ugOintqjaS8GrvCROFeUQ0Bq6wi-M-VYIKxCaVnreFmzvJA==
age: 100415
X-Firefox-Spdy: h2
ditur.zendesk.com/embeddable/config
200 OK 0 B URL HTTP/2 ditur.zendesk.com/embeddable/config
IP
GET /embeddable/config HTTP/1.1
Host: ditur.zendesk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.ditur.no/
Origin: https://www.ditur.no
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 22 Sep 2022 16:15:12 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-expose-headers:
access-control-max-age: 7200
cache-control: public, max-age=60, stale-while-revalidate=600, stale-if-error=3600
x-zendesk-origin-server: embeddable-app-server-57d4cf848b-mh55x
x-request-id: d7de7868fb5a39bb85258c9a3bf2f274
x-runtime: 0.002315
vary: Origin, Accept-Encoding
x-cached: MISS
last-modified: Thu, 22 Sep 2022 16:14:04 GMT
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QC%2FI8IHQnkqtCS87xBdpv1lwgJbWUTDoJpfpejjnPWLuJmYpI%2B%2BP%2Fo8OtmySnr88c5msctPcYSFnAvlZhZ4zvtE8T%2FbdNn6MiLFhNHcyC6X76Pn0tkyZVphezl4Lk582n4n9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
set-cookie: __cfruid=af035a2485d8ee123fc0cd8df9f6579d816c7743-1663863312; path=/; domain=.ditur.zendesk.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 74ec56877d0ab515-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.ditur.no/skin/frontend/ditur/default/fonts/fontawesome/5.6.0/webfonts/fa-light-300.woff2?mt=1588051102
200 OK 0 B URL HTTP/2 www.ditur.no/skin/frontend/ditur/default/fonts/fontawesome/5.6.0/webfonts/fa-light-300.woff2?mt=1588051102
IP
GET /skin/frontend/ditur/default/fonts/fontawesome/5.6.0/webfonts/fa-light-300.woff2?mt=1588051102 HTTP/1.1
Host: www.ditur.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ditur.no/
Cookie: ditur_country=NO; ditur_country=NO; frontend=mnber7auv64jaknuer1kio6rk8; frontend_cid=qgkeOV4LE5DDonit
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 22 Sep 2022 16:15:11 GMT
content-type: font/woff2
last-modified: Tue, 28 Apr 2020 05:18:22 GMT
etag: W/"26e90-gzip"
cache-control: max-age=15638400
expires: Mon, 05 Dec 2022 00:07:50 GMT
vary: Accept-Encoding
x-served-by: Apache, phct-015.cust.powerhosting.dk, ipv4: 185.31.79.122 ipv6: 2a00:b920:3:1337::122, vhost = ditur.dk
x-ph-static-cache: HIT
cf-cache-status: HIT
age: 9302841
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PBZDhpf5Ay82ZiDoIbECgF21q%2F4G1QqRaDg0VVVwdKsyZa9fDTwvwgeLobnyP9JiHLUsaHihCHmT17j94FZHu%2B4TZ9TiwIBaLurlVAcYLj9VNrD0EKA3Nrm5dthrXg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74ec567e3f42b521-OSL
X-Firefox-Spdy: h2
www.ditur.no/media/css_secure/5b49bd4a1dbf0452048fa064ea3c5cba_1662531186.css
200 OK 0 B URL HTTP/2 www.ditur.no/media/css_secure/5b49bd4a1dbf0452048fa064ea3c5cba_1662531186.css
IP
GET /media/css_secure/5b49bd4a1dbf0452048fa064ea3c5cba_1662531186.css HTTP/1.1
Host: www.ditur.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ditur.no/
Cookie: ditur_country=NO; ditur_country=NO; frontend=mnber7auv64jaknuer1kio6rk8; frontend_cid=qgkeOV4LE5DDonit
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 22 Sep 2022 16:15:11 GMT
content-type: text/css
cache-control: max-age=15638400
cf-bgj: minify
cf-polished: origSize=312652
etag: W/"4c54c-gzip"
expires: Tue, 07 Mar 2023 06:18:58 GMT
last-modified: Wed, 07 Sep 2022 06:18:55 GMT
vary: Accept-Encoding
x-ph-static-cache: MISS
x-served-by: Apache, phct-015.cust.powerhosting.dk, ipv4: 185.31.79.122 ipv6: 2a00:b920:3:1337::122, vhost = ditur.dk
cf-cache-status: HIT
age: 1331773
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PQRwdyHcbnt7quAJMrsQFPvuT%2BPwCUxBKFTC3XLcqBJ4yap2ihIxDQHbR%2BGohY1Q4pftuDGj%2FYs8W%2BPLjK%2FGc8U26bL3WK0bO2SkvDzKBwe%2BzUdEJrf34bDTLhmw2g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74ec567e3f5bb521-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.ditur.no/media/js/427d6f42c9e7b3356bf4043099d031a0_1649662936.js
200 OK 0 B URL HTTP/2 www.ditur.no/media/js/427d6f42c9e7b3356bf4043099d031a0_1649662936.js
IP
GET /media/js/427d6f42c9e7b3356bf4043099d031a0_1649662936.js HTTP/1.1
Host: www.ditur.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ditur.no/
Cookie: ditur_country=NO; ditur_country=NO; frontend=mnber7auv64jaknuer1kio6rk8; frontend_cid=qgkeOV4LE5DDonit
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 22 Sep 2022 16:15:11 GMT
content-type: application/javascript
cache-control: max-age=15638400
cf-bgj: minify
cf-polished: origSize=772433
etag: W/"bc951-gzip"
expires: Sun, 09 Oct 2022 08:21:23 GMT
last-modified: Mon, 11 Apr 2022 08:18:23 GMT
vary: Accept-Encoding
x-ph-static-cache: MISS
x-served-by: Apache, phct-015.cust.powerhosting.dk, ipv4: 185.31.79.122 ipv6: 2a00:b920:3:1337::122, vhost = ditur.dk
cf-cache-status: HIT
age: 14198028
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Tk5XQbRtIg%2BcJ4nPJ%2BVqwM%2B%2FUzVdQr4KbJN7AgCRKGeu6cdZSCL%2Fgj%2B5CQq3Tmei6Dnxyt19ChRKVmFfPmHpriK9PZ2P8Q5gK15QRzTSvNAdFGTHC3ykIT2vPNBxSw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74ec567e6fabb521-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.ditur.no/media/css_secure/d90658f0d1225bb4cf98de69684daf40_1656577042.css
200 OK 0 B URL HTTP/2 www.ditur.no/media/css_secure/d90658f0d1225bb4cf98de69684daf40_1656577042.css
IP
GET /media/css_secure/d90658f0d1225bb4cf98de69684daf40_1656577042.css HTTP/1.1
Host: www.ditur.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ditur.no/
Cookie: ditur_country=NO; ditur_country=NO; frontend=mnber7auv64jaknuer1kio6rk8; frontend_cid=qgkeOV4LE5DDonit
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 22 Sep 2022 16:15:11 GMT
content-type: text/css
cache-control: max-age=15638400
cf-bgj: minify
cf-polished: origSize=16718
etag: W/"414e-gzip"
expires: Wed, 28 Dec 2022 08:22:02 GMT
last-modified: Thu, 30 Jun 2022 08:20:19 GMT
vary: Accept-Encoding
x-ph-static-cache: HIT
x-served-by: Apache, phct-015.cust.powerhosting.dk, ipv4: 185.31.79.122 ipv6: 2a00:b920:3:1337::122, vhost = ditur.dk
cf-cache-status: HIT
age: 7285989
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zd04QQrkHaLjL2P%2ByK6CCzFCCkJYDRcZiYB5R9z4GI3GuQiKTQj%2BE6svfeecNlzKajqhj2Q2TiAH7%2FPs%2BBDw0qM4dWi39CrJ8ADkvdByrssGr6gqbQS2kx8hKL9LwA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74ec567e8fceb521-OSL
content-encoding: br
X-Firefox-Spdy: h2
static.zdassets.com/web_widget/latest/classic/web-widget-locales/classic/no-json-4959cd4.js
200 OK 0 B URL HTTP/2 static.zdassets.com/web_widget/latest/classic/web-widget-locales/classic/no-json-4959cd4.js
IP
GET /web_widget/latest/classic/web-widget-locales/classic/no-json-4959cd4.js HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 22 Sep 2022 16:15:13 GMT
content-type: application/javascript; charset=utf-8
x-amz-id-2: rKO82S9OAHf6Jtu91lN6xLuN1T44+mQRf+5/2S9jzI1OdbiInXuHKAmbfqfFzQaqXCGGh2gU+WI=
x-amz-request-id: KR09FVHVV2BQ9485
x-amz-replication-status: COMPLETED
last-modified: Sun, 18 Sep 2022 23:58:53 GMT
etag: W/"5dc36b9b514687dd3ef6272c02cbcfb2"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Mon, 18 Sep 2023 23:58:52 GMT
x-amz-version-id: xL.eYezD7uda2iCGxkd0Isuw.obP3K79
cf-cache-status: HIT
age: 297196
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5nSuSuVOFLcXux%2FHNz0qiyx7Md9wP9BLZo8mG01y5H0A%2FgbooIfrybiI%2BZHiL97OvUwRBmuaeP2%2FmxArFZRNsTAgEalYeDtouf8p7o50fX4MbbrASevh8pe9DvKxQ5mgr%2FtWXAQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 74ec568dd95fb511-OSL
content-encoding: br
X-Firefox-Spdy: h2
ditur.no/
301 Moved Permanently 0 B IP
GET / HTTP/1.1
Host: ditur.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Thu, 22 Sep 2022 16:15:10 GMT
content-type: text/html; charset=UTF-8
location: https://www.ditur.no/
set-cookie: ditur_country=NO; expires=Sat, 22-Oct-2022 16:15:10 GMT; Max-Age=2592000; path=/; domain=ditur.no
x-served-by: Apache, phct-015.cust.powerhosting.dk, ipv4: 185.31.79.122 ipv6: 2a00:b920:3:1337::122, vhost = ditur.dk
content-security-policy: upgrade-insecure-requests;
strict-transport-security: max-age=31536000; preload;
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=O5OcbuXsPHLF4kW7eLQngZ0notv%2FLRxWExHdaJVx3PsZlDruFrFvLMRbNMs1fsNp%2BJoT6ITkEWjMSOgQ%2FxtbxLlrrkgPL%2FUhFBC1mdJhQPirTxfuA84nPUpt"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74ec567b0aa4b521-OSL
X-Firefox-Spdy: h2
www.ditur.no/skin/frontend/ditur/default/fonts/heebo/heebo-v12-latin-300.woff2
200 OK 0 B URL HTTP/2 www.ditur.no/skin/frontend/ditur/default/fonts/heebo/heebo-v12-latin-300.woff2
IP
GET /skin/frontend/ditur/default/fonts/heebo/heebo-v12-latin-300.woff2 HTTP/1.1
Host: www.ditur.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.ditur.no/media/css_secure/5b49bd4a1dbf0452048fa064ea3c5cba_1662531186.css
Cookie: ditur_country=NO; ditur_country=NO; frontend=mnber7auv64jaknuer1kio6rk8; frontend_cid=qgkeOV4LE5DDonit
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 22 Sep 2022 16:15:11 GMT
content-type: font/woff2
last-modified: Thu, 09 Sep 2021 12:35:54 GMT
etag: W/"2790-gzip"
cache-control: max-age=15638400
expires: Sun, 04 Dec 2022 21:36:16 GMT
vary: Accept-Encoding
x-served-by: Apache, phct-015.cust.powerhosting.dk, ipv4: 185.31.79.122 ipv6: 2a00:b920:3:1337::122, vhost = ditur.dk
x-ph-static-cache: HIT
cf-cache-status: HIT
age: 9311935
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IuNmTXG3lUtF0YeoCBNV6h6%2F5pQs4ZCMzYmAhLNR0Ut61v1LPoGz%2Bsr0GmWF%2BbebxjRd0ypUhhZ4HEbdKiofOGSimfibwkGQC2YvwMJqpVduJLKPAtjgxqyEurRPcA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74ec567f38a8b521-OSL
X-Firefox-Spdy: h2
cdn.clerk.io/clerk.js
200 OK 0 B IP
GET /clerk.js HTTP/1.1
Host: cdn.clerk.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ditur.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 22 Sep 2022 16:15:11 GMT
content-type: application/javascript
server: nginx
last-modified: Thu, 08 Sep 2022 13:15:54 GMT
vary: Accept-Encoding
etag: W/"6319eb0a-15f69"
expires: Thu, 22 Sep 2022 17:15:11 GMT
cache-control: max-age=3600
content-encoding: gzip
X-Firefox-Spdy: h2
static.zdassets.com/web_widget/latest/web-widget-framework-401beb9ea3bd83e9b796.js
200 OK 0 B URL HTTP/2 static.zdassets.com/web_widget/latest/web-widget-framework-401beb9ea3bd83e9b796.js
IP
GET /web_widget/latest/web-widget-framework-401beb9ea3bd83e9b796.js HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 22 Sep 2022 16:15:12 GMT
content-type: application/javascript; charset=utf-8
x-amz-id-2: iNAyJETtSRa7aAiJfv/3HTVWx1e6RG5YaiEPBGn99rD66kacStSrVUA+RXaTSAfwvG8attB6FRk=
x-amz-request-id: PC57JS0X04V9MTPG
x-amz-replication-status: COMPLETED
last-modified: Sun, 18 Sep 2022 23:58:39 GMT
etag: W/"ca364dd1a5fc1e2861160ee6bffcd7fc"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Mon, 18 Sep 2023 23:58:37 GMT
x-amz-version-id: UReOa9Mepubnz5Cn2_rcFnisRumO4QKg
cf-cache-status: HIT
age: 297195
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4a5OTctBDp0qQt4GWO93AU8cbjHs3pJxSwpt1j12hAnr%2F1%2FdNqnNciJmU1sCF7ozV%2BK29TT0CDYkqAgR9zl82dAf3OQY1BKO5RpnwGrJ2%2BRLNBzljeHjgKrdA12CSxY7oh%2FdjFk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 74ec56868edfb511-OSL
content-encoding: br
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Lato:300,400,700&1663863312166
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Lato:300,400,700&1663863312166
IP
GET /css?family=Lato:300,400,700&1663863312166 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.ditur.no/
Origin: https://www.ditur.no
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 22 Sep 2022 16:15:13 GMT
date: Thu, 22 Sep 2022 16:15:13 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static.zdassets.com/ekr/snippet.js?key=466adbfa-803e-4666-9d1b-7c880b857630
200 OK 0 B URL HTTP/2 static.zdassets.com/ekr/snippet.js?key=466adbfa-803e-4666-9d1b-7c880b857630
IP
GET /ekr/snippet.js?key=466adbfa-803e-4666-9d1b-7c880b857630 HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ditur.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 22 Sep 2022 16:15:11 GMT
content-type: application/javascript
x-amz-id-2: 2vczt6VEQAujZh2Sn1saK7Q0yPHQMRKRQuuC+kOwLnJ40itjD1HXfy2Id85tVz8wD4O1ArN10VQ=
x-amz-request-id: 4MARQ9YY8PDZ70A8
x-amz-replication-status: PENDING
last-modified: Thu, 28 Jul 2022 23:44:02 GMT
etag: W/"5cae6ce528dce0c327b2bcbaad459fdb"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=3600, s-maxage=60
x-amz-version-id: TCAqq4sghBBBAAXd3MLZ8Fy8XIds..vO
cf-cache-status: HIT
age: 49
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6pCJzFEdIO2bjMkxCgP7uzlufZtfPSrXQjNA5ufkK3igiu8vXk9kkjVSscF87kv%2BHIgDmmk5VLsCAt1qh2JKgPzBh2mTWbN4Pnwxsb5oaeuClXAY4D0cF214%2BPzvee1oDamh5nM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 74ec567f4be2b511-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.ditur.no/skin/frontend/ditur/default/fonts/heebo/heebo-v12-latin-700.woff2
200 OK 0 B URL HTTP/2 www.ditur.no/skin/frontend/ditur/default/fonts/heebo/heebo-v12-latin-700.woff2
IP
GET /skin/frontend/ditur/default/fonts/heebo/heebo-v12-latin-700.woff2 HTTP/1.1
Host: www.ditur.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.ditur.no/media/css_secure/5b49bd4a1dbf0452048fa064ea3c5cba_1662531186.css
Cookie: ditur_country=NO; ditur_country=NO; frontend=mnber7auv64jaknuer1kio6rk8; frontend_cid=qgkeOV4LE5DDonit
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 22 Sep 2022 16:15:11 GMT
content-type: font/woff2
last-modified: Thu, 09 Sep 2021 12:35:54 GMT
etag: W/"2864-gzip"
cache-control: max-age=15638400
expires: Sun, 04 Dec 2022 22:56:28 GMT
vary: Accept-Encoding
x-served-by: Apache, phct-015.cust.powerhosting.dk, ipv4: 185.31.79.122 ipv6: 2a00:b920:3:1337::122, vhost = ditur.dk
x-ph-static-cache: HIT
cf-cache-status: HIT
age: 9307123
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YmOHpwJxrmOyBxU06zz%2F8wVrdBOjdmyNUYsfwYu%2B3gBJp1Irxhjf9JwP2%2F75s%2BG%2FFT%2BYP4%2F3F0P7Hx1X4osM1tA7FCun%2BPpTMOOzsaST1OPwoPfxBxUHujqAhNDLtQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74ec56811b9cb521-OSL
X-Firefox-Spdy: h2
142.250.74.161
151.101.84.116
18.197.67.243
104.16.53.111
93.184.220.29
23.36.77.32