r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 81713f952b51a865ad9764cde68e3fdb
278c3a9c4bb2a0ffb7375f90d89a1ba6e90a766a
c2eb0d8a24ecb51af28f1c71db4b9a95c568dcf6c94b41ee8c78787a4ebebcef
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C2EB0D8A24ECB51AF28F1C71DB4B9A95C568DCF6C94B41EE8C78787A4EBEBCEF"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13686
Expires: Sun, 05 Feb 2023 12:45:28 GMT
Date: Sun, 05 Feb 2023 08:57:22 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c21ba65e44ac95470c314e068e49a9eb
17a13b13738993d889d4afa3d848dc63bf6eba64
9bd0795b30e84ce63b6e2a365ca91bbffc395dd955e112152066c31e63a4ab66
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9BD0795B30E84CE63B6E2A365CA91BBFFC395DD955E112152066C31E63A4AB66"
Last-Modified: Sat, 04 Feb 2023 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2297
Expires: Sun, 05 Feb 2023 09:35:39 GMT
Date: Sun, 05 Feb 2023 08:57:22 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fb7b6b46e708ad73eaaa3c21e74569ae
950663c025acad81556af5aa3022ecc9d55097fe
763f58b9fb838378c92033b59907b036f4c33081f5103d9bcc2ca2a8de500d64
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "763F58B9FB838378C92033B59907B036F4C33081F5103D9BCC2CA2A8DE500D64"
Last-Modified: Sat, 04 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9980
Expires: Sun, 05 Feb 2023 11:43:42 GMT
Date: Sun, 05 Feb 2023 08:57:22 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Alert, Retry-After, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 05 Feb 2023 08:33:54 GMT
content-type: application/json
age: 1408
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: FyvR4mc3Zz11mu7SlsTjiVkAj8DoB2Tzv1mAKVbRLiVI4nZHKlFWsNGSK6CnNXV6g6XMoApBHK8=
x-amz-request-id: RTAY8GPEQDM98W58
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 05 Feb 2023 08:53:12 GMT
age: 250
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 05 Feb 2023 08:57:22 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Pragma, Backoff, Retry-After, Content-Length, Last-Modified, Expires, Cache-Control, ETag, Alert, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 05 Feb 2023 08:07:20 GMT
age: 3003
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dedf9c519ac38c4bece9c5bc895787d7
4911175c3f8a435978c5301c33c7a99a5e00a1d5
bddd7e3a4939f863642a7c5348c1c8b9bc569b35c10a27f4cf5ec71f7e6b9698
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BDDD7E3A4939F863642A7C5348C1C8B9BC569B35C10A27F4CF5EC71F7E6B9698"
Last-Modified: Fri, 03 Feb 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12446
Expires: Sun, 05 Feb 2023 12:24:49 GMT
Date: Sun, 05 Feb 2023 08:57:23 GMT
Connection: keep-alive
superimarkets.com/
302 Found 11 B IP
File type ASCII text, with no line terminators
Hash 32682312d17c7cbf18e73594f5570319
60e22121bdd0bc71cdb2bae2a3aa577006b2eae9
e55fb1a1d731153e943b68844af12dcce8bfac917c98ffdea64c80da0607dd47
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: superimarkets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 11
date: Sun, 05 Feb 2023 08:57:23 GMT
location: http://r.redirekted.com/redirect?redirect_id=d4d178fddc902ee38642871e71247766&request_id=918b65eb6988b97a73c281d0f435d7f3
server: nginx
set-cookie: sid=1acc8616-a533-11ed-aaa8-60f105824961; path=/; domain=.superimarkets.com; expires=Fri, 23 Feb 2091 12:11:30 GMT; max-age=2147483647; HttpOnly
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 9su+Pf+pTa7XQF3z/VLu/Q==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 8PQw90VTCz0MzcLN7MARsJ2vldk=
r.redirekted.com/redirect?redirect_id=d4d178fddc902ee38642871e71247766&request_id=918b65eb6988b97a73c281d0f435d7f3
200 OK 774 B URL HTTP/1.1 r.redirekted.com/redirect?redirect_id=d4d178fddc902ee38642871e71247766&request_id=918b65eb6988b97a73c281d0f435d7f3
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (303)
Hash 0572f248ac9d5cb4320a6c9b637e2de6
4abd9afba638c6ee590cf5dd153a407158169325
9b50b67a5ccf3bcd89c44014080df4bae5e7d3af9207f315dd93ef956bfa8309
GET /redirect?redirect_id=d4d178fddc902ee38642871e71247766&request_id=918b65eb6988b97a73c281d0f435d7f3 HTTP/1.1
Host: r.redirekted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx/1.23.3
Date: Sun, 05 Feb 2023 08:57:24 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/8.1.13
r.redirekted.com/css/adren.css?n=2014637341
200 OK 243 B URL HTTP/1.1 r.redirekted.com/css/adren.css?n=2014637341
IP
Hash f72acd3fece9f7cf58643616c745b2ea
92bc529a83c5466fbf6b9e702eef1e59644687a1
e2d9fd8b995f146baf54bc35d162d3e8169a5345368058b10a3b3bf4592ed777
GET /css/adren.css?n=2014637341 HTTP/1.1
Host: r.redirekted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://r.redirekted.com/redirect?redirect_id=d4d178fddc902ee38642871e71247766&request_id=918b65eb6988b97a73c281d0f435d7f3
HTTP/1.1 200 OK
Server: nginx/1.23.3
Date: Sun, 05 Feb 2023 08:57:24 GMT
Content-Type: text/css
Content-Length: 243
Last-Modified: Sat, 03 Jul 2021 05:46:18 GMT
Connection: keep-alive
ETag: "60dff9aa-f3"
Accept-Ranges: bytes
r.redirekted.com/js/adren.min.js?n=2014637341
200 OK 7.5 kB URL HTTP/1.1 r.redirekted.com/js/adren.min.js?n=2014637341
IP
File type ASCII text, with very long lines (7528), with no line terminators
Hash 9a9ec61d7e275f25fe83f0aa93bd2e41
8a3a23c432b601e9f8f8fe2b61f0fedbc341c9ac
55afe8ae4db5b6ca9ec5a3aca1f3a7b482ca51d0914acd250093f1a9ecbfccec
GET /js/adren.min.js?n=2014637341 HTTP/1.1
Host: r.redirekted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://r.redirekted.com/redirect?redirect_id=d4d178fddc902ee38642871e71247766&request_id=918b65eb6988b97a73c281d0f435d7f3
HTTP/1.1 200 OK
Server: nginx/1.23.3
Date: Sun, 05 Feb 2023 08:57:24 GMT
Content-Type: application/javascript
Content-Length: 7528
Last-Modified: Sat, 03 Jul 2021 05:46:18 GMT
Connection: keep-alive
ETag: "60dff9aa-1d68"
Accept-Ranges: bytes
r.redirekted.com/favicon.ico
200 OK 0 B URL HTTP/1.1 r.redirekted.com/favicon.ico
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: r.redirekted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://r.redirekted.com/redirect?redirect_id=d4d178fddc902ee38642871e71247766&request_id=918b65eb6988b97a73c281d0f435d7f3
HTTP/1.1 200 OK
Server: nginx/1.23.3
Date: Sun, 05 Feb 2023 08:57:24 GMT
Content-Type: image/x-icon
Content-Length: 0
Last-Modified: Sat, 03 Jul 2021 05:46:18 GMT
Connection: keep-alive
ETag: "60dff9aa-0"
Accept-Ranges: bytes
r.redirekted.com/go?e=04mWWSFW8xxs2uKL9ulW603B8Zzs2uUM9STqvkKL8cxsmIUC8MaXsk3FajGsuclF59Gr8RPXv81XmEaL-M3X8fvq8ETsmyKCeHPsw13BvbxsmEGFeHPAWk3BvVJsYcFL59Gr-RPWeLHVytUF8IvVuk3F0fHsmEaCdRTEbAmCaD0ZlgvE0V2VXSFWzNJr-NTC9yFssEmBtcGsy0aB8STqYglpexwX7jQFdRzWVk3BdZTs7tUM8IvWWclF9bmX2MFF8ElXYcvL5WJVyDaF-AUp-DGL9cxZm9SM8gRC-Hmpt9SA_pFC
200 OK 1.8 kB URL HTTP/1.1 r.redirekted.com/go?e=04mWWSFW8xxs2uKL9ulW603B8Zzs2uUM9STqvkKL8cxsmIUC8MaXsk3FajGsuclF59Gr8RPXv81XmEaL-M3X8fvq8ETsmyKCeHPsw13BvbxsmEGFeHPAWk3BvVJsYcFL59Gr-RPWeLHVytUF8IvVuk3F0fHsmEaCdRTEbAmCaD0ZlgvE0V2VXSFWzNJr-NTC9yFssEmBtcGsy0aB8STqYglpexwX7jQFdRzWVk3BdZTs7tUM8IvWWclF9bmX2MFF8ElXYcvL5WJVyDaF-AUp-DGL9cxZm9SM8gRC-Hmpt9SA_pFC
IP
File type HTML document, ASCII text, with very long lines (468)
Hash 96b036ccadcafea84e36427644995c8a
49d8136d4341a1eb125921fc456846be3c961449
b6cf93dd88f6cc95961e11d901a03e0a8902a29089a56cd4971e2d9c5b04634f
GET /go?e=04mWWSFW8xxs2uKL9ulW603B8Zzs2uUM9STqvkKL8cxsmIUC8MaXsk3FajGsuclF59Gr8RPXv81XmEaL-M3X8fvq8ETsmyKCeHPsw13BvbxsmEGFeHPAWk3BvVJsYcFL59Gr-RPWeLHVytUF8IvVuk3F0fHsmEaCdRTEbAmCaD0ZlgvE0V2VXSFWzNJr-NTC9yFssEmBtcGsy0aB8STqYglpexwX7jQFdRzWVk3BdZTs7tUM8IvWWclF9bmX2MFF8ElXYcvL5WJVyDaF-AUp-DGL9cxZm9SM8gRC-Hmpt9SA_pFC HTTP/1.1
Host: r.redirekted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://r.redirekted.com/redirect?redirect_id=d4d178fddc902ee38642871e71247766&request_id=918b65eb6988b97a73c281d0f435d7f3
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx/1.23.3
Date: Sun, 05 Feb 2023 08:57:24 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/8.1.13
Set-Cookie: uuid=2863857017443407872; expires=Mon, 06-Feb-2023 08:57:24 GMT; Max-Age=86400
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/1.1 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://r.redirekted.com/
HTTP/1.1 200 OK
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Cross-Origin-Resource-Policy: cross-origin
Server: Golfe2
Content-Length: 20085
Date: Sun, 05 Feb 2023 07:43:22 GMT
Expires: Sun, 05 Feb 2023 09:43:22 GMT
Cache-Control: public, max-age=7200
Age: 4442
Last-Modified: Tue, 10 Jan 2023 21:29:14 GMT
Content-Type: text/javascript
www.google-analytics.com/collect?v=1&_v=j99&a=9481054&t=pageview&_s=2&dl=http%3A%2F%2Fr.redirekted.com%2Fgo%3Fe%3D04mWWSFW8xxs2uKL9ulW603B8Zzs2uUM9STqvkKL8cxsmIUC8MaXsk3FajGsuclF59Gr8RPXv81XmEaL-M3X8fvq8ETsmyKCeHPsw13BvbxsmEGFeHPAWk3BvVJsYcFL59Gr-RPWeLHVytUF8IvVuk3F0fHsmEaCdRTEbAmCaD0ZlgvE0V2VXSFWzNJr-NTC9yFssEmBtcGsy0aB8STqYglpexwX7jQFdRzWVk3BdZTs7tUM8IvWWclF9bmX2MFF8ElXYcvL5WJVyDaF-AUp-DGL9cxZm9SM8gRC-Hmpt9SA_pFC&ul=en-us&de=UTF-8&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=IEBAAEABAAAAACAAI~&jid=&gjid=&cid=1679117000.1675587484&tid=UA-32454353-1&_gid=1901560267.1675587484&cd1=oz9lo258n2kesUk8sT5ipz9hsTgfn3k8sUj%3D&z=1456053543
200 OK 35 B URL HTTP/1.1 www.google-analytics.com/collect?v=1&_v=j99&a=9481054&t=pageview&_s=2&dl=http%3A%2F%2Fr.redirekted.com%2Fgo%3Fe%3D04mWWSFW8xxs2uKL9ulW603B8Zzs2uUM9STqvkKL8cxsmIUC8MaXsk3FajGsuclF59Gr8RPXv81XmEaL-M3X8fvq8ETsmyKCeHPsw13BvbxsmEGFeHPAWk3BvVJsYcFL59Gr-RPWeLHVytUF8IvVuk3F0fHsmEaCdRTEbAmCaD0ZlgvE0V2VXSFWzNJr-NTC9yFssEmBtcGsy0aB8STqYglpexwX7jQFdRzWVk3BdZTs7tUM8IvWWclF9bmX2MFF8ElXYcvL5WJVyDaF-AUp-DGL9cxZm9SM8gRC-Hmpt9SA_pFC&ul=en-us&de=UTF-8&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=IEBAAEABAAAAACAAI~&jid=&gjid=&cid=1679117000.1675587484&tid=UA-32454353-1&_gid=1901560267.1675587484&cd1=oz9lo258n2kesUk8sT5ipz9hsTgfn3k8sUj%3D&z=1456053543
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /collect?v=1&_v=j99&a=9481054&t=pageview&_s=2&dl=http%3A%2F%2Fr.redirekted.com%2Fgo%3Fe%3D04mWWSFW8xxs2uKL9ulW603B8Zzs2uUM9STqvkKL8cxsmIUC8MaXsk3FajGsuclF59Gr8RPXv81XmEaL-M3X8fvq8ETsmyKCeHPsw13BvbxsmEGFeHPAWk3BvVJsYcFL59Gr-RPWeLHVytUF8IvVuk3F0fHsmEaCdRTEbAmCaD0ZlgvE0V2VXSFWzNJr-NTC9yFssEmBtcGsy0aB8STqYglpexwX7jQFdRzWVk3BdZTs7tUM8IvWWclF9bmX2MFF8ElXYcvL5WJVyDaF-AUp-DGL9cxZm9SM8gRC-Hmpt9SA_pFC&ul=en-us&de=UTF-8&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=IEBAAEABAAAAACAAI~&jid=&gjid=&cid=1679117000.1675587484&tid=UA-32454353-1&_gid=1901560267.1675587484&cd1=oz9lo258n2kesUk8sT5ipz9hsTgfn3k8sUj%3D&z=1456053543 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://r.redirekted.com/
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Pragma: no-cache
X-Content-Type-Options: nosniff
Cross-Origin-Resource-Policy: cross-origin
Server: Golfe2
Content-Length: 35
Date: Sat, 04 Feb 2023 18:09:20 GMT
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Age: 53284
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
Content-Type: image/gif
status.thawte.com/
200 OK 471 B IP
Hash 9a3a12e016cde70049abb7457cdd7f10
df25386b4a61118baeaf704019f520c4bec8d4bf
a3d1e61d0f8eceeda1b5c4930f77f3a8d5747edf26614412b23fc4952d76687b
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 955
Cache-Control: max-age=118156
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 08:57:24 GMT
Etag: "63de9645-1d7"
Expires: Mon, 06 Feb 2023 17:46:40 GMT
Last-Modified: Sat, 04 Feb 2023 17:30:45 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
no-go.kelkoogroup.net/offersearchGo?.ts=1675526109029&.sig=m935qzzaDmXQrolnaDFQs7OrFjk-&affiliationId=96965866&comId=100515819&country=no&offerId=fc9481b004a151da51c185fc2bc0e728&service=37&tokenId=35e025c3-2943-4e2d-874f-eaee491f9fab&wait=true&addedParams=true&custom1=Ns7VPF-AKAaEwLat0XcxKDmtFqXWGLa8SAXE2BmRTLaIPCbqzsyDaE-IPpT13p4MRsyLlK3ZUqVk3pzZTsmuUL&custom2=jKWjuHsyDUL-AUqxqwqSExZvyxEmVJrUAQB
200 OK 31 kB URL HTTP/1.1 no-go.kelkoogroup.net/offersearchGo?.ts=1675526109029&.sig=m935qzzaDmXQrolnaDFQs7OrFjk-&affiliationId=96965866&comId=100515819&country=no&offerId=fc9481b004a151da51c185fc2bc0e728&service=37&tokenId=35e025c3-2943-4e2d-874f-eaee491f9fab&wait=true&addedParams=true&custom1=Ns7VPF-AKAaEwLat0XcxKDmtFqXWGLa8SAXE2BmRTLaIPCbqzsyDaE-IPpT13p4MRsyLlK3ZUqVk3pzZTsmuUL&custom2=jKWjuHsyDUL-AUqxqwqSExZvyxEmVJrUAQB
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (12878)
Hash 5a515d379522d762d17af588ccb6365b
efb8204c76d72a8e2cf33e3e1f572d72c552ece1
efd01c98eb079b23477015942190e8b2135e9e0f253a074592c723de4fd0eadb
GET /offersearchGo?.ts=1675526109029&.sig=m935qzzaDmXQrolnaDFQs7OrFjk-&affiliationId=96965866&comId=100515819&country=no&offerId=fc9481b004a151da51c185fc2bc0e728&service=37&tokenId=35e025c3-2943-4e2d-874f-eaee491f9fab&wait=true&addedParams=true&custom1=Ns7VPF-AKAaEwLat0XcxKDmtFqXWGLa8SAXE2BmRTLaIPCbqzsyDaE-IPpT13p4MRsyLlK3ZUqVk3pzZTsmuUL&custom2=jKWjuHsyDUL-AUqxqwqSExZvyxEmVJrUAQB HTTP/1.1
Host: no-go.kelkoogroup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://r.redirekted.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
leadId: dc1-kls-prod-ls-04.prod.dc1.kelkoo.net_1675587444940_1019524
clickId: 107698148_1675587444932_5451812
country: no
Accept-CH: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory
Set-Cookie: datadome=638Z7_lC2Sq5UD0s3HDmf~W3HtuBD9M0fgn0DEVI1m4E2i_NRofJl~eHKpOiSkBGG_SY4v_GViKFiv10oXJvsbkpi6HVZWXGTH0AmuE1mkPJg0E6mltC2uEIBs9H00kp; Max-Age=31536000; Expires=Mon, 05 Feb 2024 08:57:24 GMT; SameSite=Lax; Path=/; Domain=.kelkoogroup.net; Secure
kelkooID=a4c6294-18620cb60c5-bbf91; Max-Age=31536000; Expires=Mon, 05 Feb 2024 08:57:24 GMT; SameSite=None; Path=/; Domain=kelkoogroup.net; Secure; HTTPOnly
X-DataDome: protected
Request-Time: PT0.017247S
X-Robots-Tag: noindex,nofollow
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: DENY
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: master-only
Date: Sun, 05 Feb 2023 08:57:24 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 31433
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1b25bf82638deaab60981e1315ee0849
e3bd912fd1a890e64ee6746a78a674db7ff77039
a99b0dfa9ca7176b21cc2d65963a1b6eb6d534b3767d02ef06cc207a63331ebf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A99B0DFA9CA7176B21CC2D65963A1B6EB6D534B3767D02EF06CC207A63331EBF"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4302
Expires: Sun, 05 Feb 2023 10:09:07 GMT
Date: Sun, 05 Feb 2023 08:57:25 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1b25bf82638deaab60981e1315ee0849
e3bd912fd1a890e64ee6746a78a674db7ff77039
a99b0dfa9ca7176b21cc2d65963a1b6eb6d534b3767d02ef06cc207a63331ebf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A99B0DFA9CA7176B21CC2D65963A1B6EB6D534B3767D02EF06CC207A63331EBF"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4302
Expires: Sun, 05 Feb 2023 10:09:07 GMT
Date: Sun, 05 Feb 2023 08:57:25 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1b25bf82638deaab60981e1315ee0849
e3bd912fd1a890e64ee6746a78a674db7ff77039
a99b0dfa9ca7176b21cc2d65963a1b6eb6d534b3767d02ef06cc207a63331ebf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A99B0DFA9CA7176B21CC2D65963A1B6EB6D534B3767D02EF06CC207A63331EBF"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4302
Expires: Sun, 05 Feb 2023 10:09:07 GMT
Date: Sun, 05 Feb 2023 08:57:25 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1b25bf82638deaab60981e1315ee0849
e3bd912fd1a890e64ee6746a78a674db7ff77039
a99b0dfa9ca7176b21cc2d65963a1b6eb6d534b3767d02ef06cc207a63331ebf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A99B0DFA9CA7176B21CC2D65963A1B6EB6D534B3767D02EF06CC207A63331EBF"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4302
Expires: Sun, 05 Feb 2023 10:09:07 GMT
Date: Sun, 05 Feb 2023 08:57:25 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1b25bf82638deaab60981e1315ee0849
e3bd912fd1a890e64ee6746a78a674db7ff77039
a99b0dfa9ca7176b21cc2d65963a1b6eb6d534b3767d02ef06cc207a63331ebf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A99B0DFA9CA7176B21CC2D65963A1B6EB6D534B3767D02EF06CC207A63331EBF"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4302
Expires: Sun, 05 Feb 2023 10:09:07 GMT
Date: Sun, 05 Feb 2023 08:57:25 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3c8da623-73ab-4c2d-afaa-03d28de3a280.png
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3c8da623-73ab-4c2d-afaa-03d28de3a280.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3e0c38abfcd86f8074d4182d49fc354f
1367bebb73fa652695242100b26c394f1bfe4457
e42d110060133ac05e6cdfafa6473c55473220fdc7eaf03e3a89f58aa3603670
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3c8da623-73ab-4c2d-afaa-03d28de3a280.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11056
x-amzn-requestid: 4acc3364-4a33-4934-bdcb-41284d952113
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fPFrwEW4IAMF_Tg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cf8317-33872f461a2faab552322837;Sampled=0
x-amzn-remapped-date: Tue, 24 Jan 2023 07:04:55 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: XhPm-ZDoEjlgeiXUwMRQZ5pOMs4qJzXagWZg302DcrYpUm5X7O8ZZA==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Sat, 04 Feb 2023 21:46:47 GMT
age: 40238
etag: "1367bebb73fa652695242100b26c394f1bfe4457"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6718344-fcb4-4366-9239-8921034a7114.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6718344-fcb4-4366-9239-8921034a7114.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8e0be7db14d930d6227443314bcd1747
4e42e2ad289dfe5bd9a55d34fd768f7532bdf71d
baedfbdb08a67f9ff4c698f7e65b08d7e4c5078d0a4233e6bff529b44812735a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6718344-fcb4-4366-9239-8921034a7114.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12967
x-amzn-requestid: 38c58626-f4ad-4e2b-ad71-a628519d2ea2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fmEdHFwCoAMFhxQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d8b453-7da6d0c1093468d320caaa1e;Sampled=0
x-amzn-remapped-date: Tue, 31 Jan 2023 06:25:23 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: t8dZTwod1-pZr8ACfp-6gfEu0TA3kGpfJrQeF8VgLg2tlrt03sa6Bg==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 7022a5bbf9872d4a09d63e6cdb457dfe.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Feb 2023 03:40:08 GMT
age: 19037
etag: "4e42e2ad289dfe5bd9a55d34fd768f7532bdf71d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F98423c35-aa11-41c0-8f4f-52bec4c9eaa8.jpeg
200 OK 9.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F98423c35-aa11-41c0-8f4f-52bec4c9eaa8.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b3e7140400336984afc6093c1246f863
59e0b21cdf4cfdac3f1ea05badd007727939ac42
4d927e74922159db5d07b9947fa1021cff74bb7b55759960cb3941d05c1e8f11
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F98423c35-aa11-41c0-8f4f-52bec4c9eaa8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9579
x-amzn-requestid: c474008d-a6a9-409b-88e2-c55062044575
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fzQtnFGhoAMF5Zw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ddfb23-54dd67257ba25ad24e977a9c;Sampled=0
x-amzn-remapped-date: Sat, 04 Feb 2023 06:28:51 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 0Of3BK3VqVMGQGDIODQthVmi7BC8Ney4zgGCpVuzYc1j6D8RRP-AxA==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Sat, 04 Feb 2023 11:55:41 GMT
age: 75704
etag: "59e0b21cdf4cfdac3f1ea05badd007727939ac42"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fad342374-789b-497a-b212-29d0b2aaced0.jpeg
200 OK 7.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fad342374-789b-497a-b212-29d0b2aaced0.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 75caf9549ac23c827c10d6baabb84884
e8391e4046acb91cd4a6113974fda1c44dcd3865
a01e3a9aaa0b0fa156303bcbf38c1c45ea6abe8d0a052734b05ea4da82f176c4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fad342374-789b-497a-b212-29d0b2aaced0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7060
x-amzn-requestid: e3e457e7-b73a-4b5f-a7bb-9a643cde2760
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fwAv_GI1oAMFbIg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dcae66-6793e5e054a709881bb2d191;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 06:49:10 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 6LeXkwyELIc_XykRxsfDIBu7Kda_3OHFDiteX0rKwDt-315catmvKw==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Sat, 04 Feb 2023 22:10:43 GMT
age: 38802
etag: "e8391e4046acb91cd4a6113974fda1c44dcd3865"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe8a9d301-2b38-4046-91c2-941ed351597a.jpeg
200 OK 3.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe8a9d301-2b38-4046-91c2-941ed351597a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d7a466d89c75ff3459b7328591db52cf
c3f29f9c2fbdc1fa2aef7a9e79ca796b28394afb
e73243be3d01d12a224c4e9826c4f52610cf7722eee69f62755278d7550705f1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe8a9d301-2b38-4046-91c2-941ed351597a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3474
x-amzn-requestid: 5846c080-9f25-4590-863c-8af2126cdbe1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f1WXEEbnoAMFRdg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ded0f9-1bd490125feadc14366e7ca0;Sampled=0
x-amzn-remapped-date: Sat, 04 Feb 2023 21:41:13 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: d8aQmkW-aqLFpb79RynlJG2vY1GTDbjLNY0Qukgg_WIjdI6cmbVKFw==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Sat, 04 Feb 2023 22:10:58 GMT
etag: "c3f29f9c2fbdc1fa2aef7a9e79ca796b28394afb"
content-type: image/jpeg
age: 38787
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F37422a56-a7de-4ab8-ac8a-650de9dae97c.jpeg
200 OK 5.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F37422a56-a7de-4ab8-ac8a-650de9dae97c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5b6c30ad03669b66bf2f63b3edd69882
e630bd132b52b965a5ade646ea8a165d1abf6d7b
f8233d879ec17fd91909655ff8881f2ebfad84272fde3ed5e5be37580378a989
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F37422a56-a7de-4ab8-ac8a-650de9dae97c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5014
x-amzn-requestid: a434aae4-fe4b-4fc7-9b7e-eeb552484e8a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fi3bIE0aoAMF6YQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d76c47-5556d14757190c842bbc6b06;Sampled=0
x-amzn-remapped-date: Mon, 30 Jan 2023 07:05:43 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: k6YqagXr3Wr-u1uDKojEnIGW0CxU5yvWPtlzNpzoIvmg9F-rJb9uFQ==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 1a53057db389e96b4ef1bfbc925dde1c.cloudfront.net (CloudFront), 1.1 google
date: Sat, 04 Feb 2023 14:53:45 GMT
age: 65020
etag: "e630bd132b52b965a5ade646ea8a165d1abf6d7b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
no-go.kelkoogroup.net/assets/images/p.png?country=no&k=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
200 OK 68 B URL HTTP/1.1 no-go.kelkoogroup.net/assets/images/p.png?country=no&k=612f7a9541cd6ea61eb554c0e4cff437567c460be4e08eed49d56f330fab19bb91f398f4be69d7c030705df8316be45a4d1e00c83d0374eae6ee899d9958746afa2fc68d2848030235143282afe5485b947f97a018e57c97f49b6df4d06f55a27b11a38269cfb4c31e2bc81c933c233031365eef1d322e990b2346b633264d983f72632618628867f7d38a7c33e908fc2c4924674d89f238d38cb7de1a0078cb05a4865d6481d7e5337ed7c7faad451da6300bbc1681276572c92a6d372877efaf79ab3ad6b6a16204b6d1194f6330441600b7d1f4e0350e1a0f2a6e91448cb1e46f6cdfbea6fc1cb1eaf1d25f75a18720317de203286f20b1092496add9858852bd57db0248239721243c03929d84210260861ac88b4570a9b68f3ac631a45d9ca8b6cbd727118ebb15f766e17e0a003dae371d89334a2f3070c8ac9a6078b5ea81da2f334d4dbd171b37419882eb0a52e703dd0ac81cc739a65ba1ef5134cc4c8782a62facc22a5f6f741daeaf027bc9191c4593518c14bdb859a3556d6d1485d4ea90e731f1f6c7b50efd0032ed5d6911b599d9bda55b4877775dfe312de4b73f1d049d7471a4
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced\012- data
Hash 91e42db1c66c0b276abf6234dc50b2eb
c1986af3c26609b8b7d8933f99c51c1a89e9ea6b
63ef318d96b5d0d0ceba6e04a4e622b1158335cdc67c49e27839132c6f655058
GET /assets/images/p.png?country=no&k=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 HTTP/1.1
Host: no-go.kelkoogroup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no-go.kelkoogroup.net/offersearchGo?.ts=1675526109029&.sig=m935qzzaDmXQrolnaDFQs7OrFjk-&affiliationId=96965866&comId=100515819&country=no&offerId=fc9481b004a151da51c185fc2bc0e728&service=37&tokenId=35e025c3-2943-4e2d-874f-eaee491f9fab&wait=true&addedParams=true&custom1=Ns7VPF-AKAaEwLat0XcxKDmtFqXWGLa8SAXE2BmRTLaIPCbqzsyDaE-IPpT13p4MRsyLlK3ZUqVk3pzZTsmuUL&custom2=jKWjuHsyDUL-AUqxqwqSExZvyxEmVJrUAQB
Connection: keep-alive
Cookie: datadome=638Z7_lC2Sq5UD0s3HDmf~W3HtuBD9M0fgn0DEVI1m4E2i_NRofJl~eHKpOiSkBGG_SY4v_GViKFiv10oXJvsbkpi6HVZWXGTH0AmuE1mkPJg0E6mltC2uEIBs9H00kp; kelkooID=a4c6294-18620cb60c5-bbf91
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
leadId: dc1-kls-prod-ls-04.prod.dc1.kelkoo.net_1675587444940_1019524
clickId: 107698148_1675587444932_5451812
country: no
Request-Time: PT0.001222S
X-Robots-Tag: noindex,nofollow
Cache-Control: private, must-revalidate
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: DENY
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: master-only
Date: Sun, 05 Feb 2023 08:57:25 GMT
Content-Type: image/png
Content-Length: 68
no-go.kelkoogroup.net/fp?country=no&k=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
200 OK 0 B URL HTTP/1.1 no-go.kelkoogroup.net/fp?country=no&k=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
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /fp?country=no&k=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 HTTP/1.1
Host: no-go.kelkoogroup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no-go.kelkoogroup.net/offersearchGo?.ts=1675526109029&.sig=m935qzzaDmXQrolnaDFQs7OrFjk-&affiliationId=96965866&comId=100515819&country=no&offerId=fc9481b004a151da51c185fc2bc0e728&service=37&tokenId=35e025c3-2943-4e2d-874f-eaee491f9fab&wait=true&addedParams=true&custom1=Ns7VPF-AKAaEwLat0XcxKDmtFqXWGLa8SAXE2BmRTLaIPCbqzsyDaE-IPpT13p4MRsyLlK3ZUqVk3pzZTsmuUL&custom2=jKWjuHsyDUL-AUqxqwqSExZvyxEmVJrUAQB
Content-Type: text/plain;charset=utf-8
Content-Length: 536
Origin: https://no-go.kelkoogroup.net
Connection: keep-alive
Cookie: datadome=638Z7_lC2Sq5UD0s3HDmf~W3HtuBD9M0fgn0DEVI1m4E2i_NRofJl~eHKpOiSkBGG_SY4v_GViKFiv10oXJvsbkpi6HVZWXGTH0AmuE1mkPJg0E6mltC2uEIBs9H00kp; kelkooID=a4c6294-18620cb60c5-bbf91; _ga=GA1.2.1427323474.1675587484; _gid=GA1.2.389786607.1675587484
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
leadId: dc1-kls-prod-ls-04.prod.dc1.kelkoo.net_1675587444940_1019524
clickId: 107698148_1675587444932_5451812
country: no
Request-Time: PT0.00391S
X-Robots-Tag: noindex,nofollow
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: DENY
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: master-only
Date: Sun, 05 Feb 2023 08:57:25 GMT
Content-Type: text/plain; charset=UTF-8
Content-Length: 0
dd.kelkoogroup.net/tags.js
200 OK 43 kB URL HTTP/2 dd.kelkoogroup.net/tags.js
IP
File type ASCII text, with very long lines (65432)
Hash 75fee8645619b669e05eed0d332fb9ee
af9095cc20ce8f8d14052e87efb9de31fe43e803
e0f62f765af751d53cd8b045736f95f2d417c2ee9919c40a4ead1b0d6520f92e
GET /tags.js HTTP/1.1
Host: dd.kelkoogroup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no-go.kelkoogroup.net/
Connection: keep-alive
Cookie: datadome=638Z7_lC2Sq5UD0s3HDmf~W3HtuBD9M0fgn0DEVI1m4E2i_NRofJl~eHKpOiSkBGG_SY4v_GViKFiv10oXJvsbkpi6HVZWXGTH0AmuE1mkPJg0E6mltC2uEIBs9H00kp; kelkooID=a4c6294-18620cb60c5-bbf91; _ga=GA1.2.1427323474.1675587484; _gid=GA1.2.389786607.1675587484
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: text/javascript
content-length: 42836
server: Apache
strict-transport-security: max-age=63072000; includeSubDomains; preload
last-modified: Wed, 01 Feb 2023 11:10:44 GMT
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
via: 1.1 f7e6fd9466c5c2a3b15f0fb077de1afa.cloudfront.net (CloudFront), 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
date: Sun, 05 Feb 2023 08:11:35 GMT
cache-control: max-age=3600, public
expires: Sun, 05 Feb 2023 09:11:32 GMT
etag: "33404-5f3a17fded07d-gzip"
vary: Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: FRA60-P2, OSL50-P1
x-amz-cf-id: na0l0T6m47OGW39CYs0TYAMAjG4dGLMKkU0MDuov6PVkBbRb6hnLyw==
age: 2753
X-Firefox-Spdy: h2
no-go.kelkoogroup.net/redirect?country=no&k=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&url=https%3A%2F%2Fwww.parfymonline.no%2Fbjork-forma-textur-mini-100ml.html%3Futm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DBj%25C3%25B6rk%2BForma%2BTextur%2BMini%2B100ml&initiator=timeout
303 See Other 0 B URL HTTP/1.1 no-go.kelkoogroup.net/redirect?country=no&k=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&url=https%3A%2F%2Fwww.parfymonline.no%2Fbjork-forma-textur-mini-100ml.html%3Futm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DBj%25C3%25B6rk%2BForma%2BTextur%2BMini%2B100ml&initiator=timeout
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /redirect?country=no&k=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&url=https%3A%2F%2Fwww.parfymonline.no%2Fbjork-forma-textur-mini-100ml.html%3Futm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DBj%25C3%25B6rk%2BForma%2BTextur%2BMini%2B100ml&initiator=timeout HTTP/1.1
Host: no-go.kelkoogroup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no-go.kelkoogroup.net/offersearchGo?.ts=1675526109029&.sig=m935qzzaDmXQrolnaDFQs7OrFjk-&affiliationId=96965866&comId=100515819&country=no&offerId=fc9481b004a151da51c185fc2bc0e728&service=37&tokenId=35e025c3-2943-4e2d-874f-eaee491f9fab&wait=true&addedParams=true&custom1=Ns7VPF-AKAaEwLat0XcxKDmtFqXWGLa8SAXE2BmRTLaIPCbqzsyDaE-IPpT13p4MRsyLlK3ZUqVk3pzZTsmuUL&custom2=jKWjuHsyDUL-AUqxqwqSExZvyxEmVJrUAQB
Connection: keep-alive
Cookie: datadome=638Z7_lC2Sq5UD0s3HDmf~W3HtuBD9M0fgn0DEVI1m4E2i_NRofJl~eHKpOiSkBGG_SY4v_GViKFiv10oXJvsbkpi6HVZWXGTH0AmuE1mkPJg0E6mltC2uEIBs9H00kp; kelkooID=a4c6294-18620cb60c5-bbf91; _ga=GA1.2.1427323474.1675587484; _gid=GA1.2.389786607.1675587484
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
HTTP/1.1 303 See Other
leadId: dc1-kls-prod-ls-04.prod.dc1.kelkoo.net_1675587444940_1019524
clickId: 107698148_1675587444932_5451812
country: no
Location: https://www.parfymonline.no/bjork-forma-textur-mini-100ml.html?utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Bj%C3%B6rk+Forma+Textur+Mini+100ml
Accept-CH: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory
Set-Cookie: datadome=6-U_R8Sgg7E52DLKyNp~kRvbmPd8aqc2Xg~Hv2sWfFC3YItHqdgx0ygZ6FEkBd7j_gSsE90A0EddK_zGA0Ytxnkdr9lX6khijxKVwAdB3xkwR3FC-KHrSjhmzmu4WuH_; Max-Age=31536000; Expires=Mon, 05 Feb 2024 08:57:25 GMT; SameSite=Lax; Path=/; Domain=.kelkoogroup.net; Secure
X-DataDome: protected
Request-Time: PT0.012669S
X-Robots-Tag: noindex,nofollow
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: DENY
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: master-only
Date: Sun, 05 Feb 2023 08:57:25 GMT
Content-Length: 0
ocsp.usertrust.com/
200 OK 471 B IP
Hash ba564ccd2c703ef45d15a370c07263c4
34e4d9dda97d696ab37bb66210fcc99a5c64b2d6
28196309aded67965a14f3616ea4c1e7bf82443e5d8c3ba5d8a9dc57099c8b49
POST / HTTP/1.1
Host: ocsp.usertrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 05 Feb 2023 08:57:25 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 04 Feb 2023 01:51:19 GMT
Expires: Sat, 11 Feb 2023 01:51:18 GMT
Etag: "34e4d9dda97d696ab37bb66210fcc99a5c64b2d6"
Cache-Control: max-age=603242,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 1577
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 794a703dc93eb4f1-OSL
api-js.datadome.co/js/
200 OK 236 B IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 713dacbf32b77b1e5275a62000e50533
7488c7e36f11c97e3a57d7952276a02b61750625
1e97ff2279cdbfdaaa4c6676c03b8cd9b45d4bb3646dcf6a12d40563f941a192
POST /js/ HTTP/1.1
Host: api-js.datadome.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 4537
Origin: https://no-go.kelkoogroup.net
Connection: keep-alive
Referer: https://no-go.kelkoogroup.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 05 Feb 2023 08:57:25 GMT
content-type: application/json;charset=utf-8
content-length: 236
server: DataDome
access-control-allow-origin: *
pragma: no-cache
cache-control: no-cache, no-store, must-revalidate
expires: 0
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 153d0de36959c722c00df71ba86daca2
305f56a3134879ebf0828e169e903e560540c070
0cf533a798d42d1e97fb6619a411afadf9a68c92302ba852869b0c0555a47987
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 08:57:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google-analytics.com/collect?v=1&_v=j96&t=pageview&_s=1&dl=https%3A%2F%2Fno-go.kelkoogroup.net%2FoffersearchGo%3F.ts%3D1675526109029%26.sig%3Dm935qzzaDmXQrolnaDFQs7OrFjk-%26affiliationId%3D96965866%26comId%3D100515819%26country%3Dno%26offerId%3Dfc9481b004a151da51c185fc2bc0e728%26service%3D37%26tokenId%3D35e025c3-2943-4e2d-874f-eaee491f9fab%26wait%3Dtrue%26addedParams%3Dtrue%26custom1%3DNs7VPF-AKAaEwLat0XcxKDmtFqXWGLa8SAXE2BmRTLaIPCbqzsyDaE-IPpT13p4MRsyLlK3ZUqVk3pzZTsmuUL%26custom2%3DjKWjuHsyDUL-AUqxqwqSExZvyxEmVJrUAQB&dr=http%3A%2F%2Fr.redirekted.com%2F&dp=%2F96965866%7C100515819%7C&ul=en-us&de=UTF-8&dt=Du%20sendes%20videre%20til%20Parfymonline.no&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=QACAAAABAAAAAC~&cid=1427323474.1675587484&tid=UA-168544891-6&_gid=389786607.1675587484&_r=1&cd1=96965866&cd2=dc1-kls-prod-ls-04.prod.dc1.kelkoo.net_1675587444940_1019524&cd3=100515819&cd4=a4c6294-18620cb60c5-bbf91&cd5=&cd6=96965866%7C100515819%7C&z=140361044
200 OK 35 B URL HTTP/2 www.google-analytics.com/collect?v=1&_v=j96&t=pageview&_s=1&dl=https%3A%2F%2Fno-go.kelkoogroup.net%2FoffersearchGo%3F.ts%3D1675526109029%26.sig%3Dm935qzzaDmXQrolnaDFQs7OrFjk-%26affiliationId%3D96965866%26comId%3D100515819%26country%3Dno%26offerId%3Dfc9481b004a151da51c185fc2bc0e728%26service%3D37%26tokenId%3D35e025c3-2943-4e2d-874f-eaee491f9fab%26wait%3Dtrue%26addedParams%3Dtrue%26custom1%3DNs7VPF-AKAaEwLat0XcxKDmtFqXWGLa8SAXE2BmRTLaIPCbqzsyDaE-IPpT13p4MRsyLlK3ZUqVk3pzZTsmuUL%26custom2%3DjKWjuHsyDUL-AUqxqwqSExZvyxEmVJrUAQB&dr=http%3A%2F%2Fr.redirekted.com%2F&dp=%2F96965866%7C100515819%7C&ul=en-us&de=UTF-8&dt=Du%20sendes%20videre%20til%20Parfymonline.no&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=QACAAAABAAAAAC~&cid=1427323474.1675587484&tid=UA-168544891-6&_gid=389786607.1675587484&_r=1&cd1=96965866&cd2=dc1-kls-prod-ls-04.prod.dc1.kelkoo.net_1675587444940_1019524&cd3=100515819&cd4=a4c6294-18620cb60c5-bbf91&cd5=&cd6=96965866%7C100515819%7C&z=140361044
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
POST /collect?v=1&_v=j96&t=pageview&_s=1&dl=https%3A%2F%2Fno-go.kelkoogroup.net%2FoffersearchGo%3F.ts%3D1675526109029%26.sig%3Dm935qzzaDmXQrolnaDFQs7OrFjk-%26affiliationId%3D96965866%26comId%3D100515819%26country%3Dno%26offerId%3Dfc9481b004a151da51c185fc2bc0e728%26service%3D37%26tokenId%3D35e025c3-2943-4e2d-874f-eaee491f9fab%26wait%3Dtrue%26addedParams%3Dtrue%26custom1%3DNs7VPF-AKAaEwLat0XcxKDmtFqXWGLa8SAXE2BmRTLaIPCbqzsyDaE-IPpT13p4MRsyLlK3ZUqVk3pzZTsmuUL%26custom2%3DjKWjuHsyDUL-AUqxqwqSExZvyxEmVJrUAQB&dr=http%3A%2F%2Fr.redirekted.com%2F&dp=%2F96965866%7C100515819%7C&ul=en-us&de=UTF-8&dt=Du%20sendes%20videre%20til%20Parfymonline.no&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=QACAAAABAAAAAC~&cid=1427323474.1675587484&tid=UA-168544891-6&_gid=389786607.1675587484&_r=1&cd1=96965866&cd2=dc1-kls-prod-ls-04.prod.dc1.kelkoo.net_1675587444940_1019524&cd3=100515819&cd4=a4c6294-18620cb60c5-bbf91&cd5=&cd6=96965866%7C100515819%7C&z=140361044 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://no-go.kelkoogroup.net
Connection: keep-alive
Referer: https://no-go.kelkoogroup.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 200 OK
access-control-allow-origin: https://no-go.kelkoogroup.net
date: Sun, 05 Feb 2023 08:57:25 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
x-content-type-options: nosniff
access-control-allow-credentials: true
content-type: image/gif
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 35
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 153d0de36959c722c00df71ba86daca2
305f56a3134879ebf0828e169e903e560540c070
0cf533a798d42d1e97fb6619a411afadf9a68c92302ba852869b0c0555a47987
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 08:57:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 280 B IP
Hash 28c3f02ba8cac75c2f1945e7be499cae
82390270ea7ee981db3fae587295029f335726da
ce1f772f6bd3cdd88e6f161731958d8bce7e3c019c9e618d0ed37560b79b0a4c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3677
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 08:57:27 GMT
Last-Modified: Sun, 05 Feb 2023 07:56:11 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 280
ocsp.digicert.com/
200 OK 280 B IP
Hash 28c3f02ba8cac75c2f1945e7be499cae
82390270ea7ee981db3fae587295029f335726da
ce1f772f6bd3cdd88e6f161731958d8bce7e3c019c9e618d0ed37560b79b0a4c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3677
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 08:57:27 GMT
Last-Modified: Sun, 05 Feb 2023 07:56:11 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 280
d2cgpm3z94jqsd.cloudfront.net/static/version1674976674/frontend/TemplateMonster/theme007/sv_SE/fonts/font-awesome/fontawesome-webfont.woff2?v=4.5.0
200 OK 64 kB URL HTTP/2 d2cgpm3z94jqsd.cloudfront.net/static/version1674976674/frontend/TemplateMonster/theme007/sv_SE/fonts/font-awesome/fontawesome-webfont.woff2?v=4.5.0
IP
File type Web Open Font Format (Version 2), TrueType, length 64464, version 4.262\012- data
Hash 4b5a84aaf1c9485e060c503a0ff8cadb
574ea2698c03ae9477db2ea3baf460ee32f1a7ea
3c4a1bb7ce3234407184f0d80cc4dec075e4ad616b44dcc5778e1cfb1bc24019
GET /static/version1674976674/frontend/TemplateMonster/theme007/sv_SE/fonts/font-awesome/fontawesome-webfont.woff2?v=4.5.0 HTTP/1.1
Host: d2cgpm3z94jqsd.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.parfymonline.no
Connection: keep-alive
Referer: https://www.parfymonline.no/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 64464
date: Sun, 05 Feb 2023 08:57:27 GMT
last-modified: Sun, 29 Jan 2023 07:18:12 GMT
vary: Accept-Encoding
etag: "63d61db4-fbd0"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-headers: x-requested-with
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IT3wAtici%2BlJSFDTlwnJxuVzlBvMEsCjVcdbvIK2GK1rGphahJxY37G7gOEWjIKvGW01t02MgERTFewC2C30HoTm%2FmapDmGXttl%2Bq3%2FP9sowMla%2Bx8EzCRyh3aL4%2B85tC2c0qfc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 794a704a496871ae-LHR
x-cache: Miss from cloudfront
via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: rS-Ct0FZ4Xxk50p1A5G8CY_h4mV6oQlGO3YkW7Opcpf9qxAtldC-5w==
age: 610616
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash cdb9badbfdef45690a03b7f4b9439555
ee44a7117649a607b1c10bffae5268b2fad04814
55e42da5bb99073c2b9ed44d8a7defbdec42fdbdabe057ca0612212f56f35259
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=92370
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 08:57:27 GMT
Etag: "63de3549-116"
Expires: Mon, 06 Feb 2023 10:36:57 GMT
Last-Modified: Sat, 04 Feb 2023 10:36:57 GMT
Server: nginx
Content-Length: 278
ocsp.digicert.com/
200 OK 278 B IP
Hash cdb9badbfdef45690a03b7f4b9439555
ee44a7117649a607b1c10bffae5268b2fad04814
55e42da5bb99073c2b9ed44d8a7defbdec42fdbdabe057ca0612212f56f35259
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 08:57:27 GMT
Server: ECS (amb/6BBE)
Content-Length: 278
d2cgpm3z94jqsd.cloudfront.net/static/version1674976674/frontend/TemplateMonster/theme007/sv_SE/fonts/linearicons/Linearicons.ttf
200 OK 136 kB URL HTTP/2 d2cgpm3z94jqsd.cloudfront.net/static/version1674976674/frontend/TemplateMonster/theme007/sv_SE/fonts/linearicons/Linearicons.ttf
IP
File type TrueType Font data, digitally signed, 11 tables, 1st "DSIG", 24 names, Macintosh, Copyright \251 2015 Perxis.com. All Rights Reserved.LineariconsRegular2.000; ;Linearicons-Reg\012- data
Size 136 kB (135532 bytes)
Hash e42f418848c1f9b44f564eee6439d017
90beb4b6fcb1c9a55b9aff7c774f88130d1ad770
4df7967f3ecf7cd2e3a23bdb993584d070ff4c6879ff1aef12c2ded454cc52e3
GET /static/version1674976674/frontend/TemplateMonster/theme007/sv_SE/fonts/linearicons/Linearicons.ttf HTTP/1.1
Host: d2cgpm3z94jqsd.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.parfymonline.no
Connection: keep-alive
Referer: https://www.parfymonline.no/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 135532
date: Sun, 05 Feb 2023 08:57:27 GMT
last-modified: Sun, 29 Jan 2023 07:18:12 GMT
vary: Accept-Encoding
etag: "63d61db4-2116c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-headers: x-requested-with
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xmIsrvjTY0lolH28i5lemU6OJKpiZsrxarFCtLEAf%2B6LwLzlgEPuLigp8arAiGYFHOxgqbkyfykdiTHpz7%2F1VcjAV9giWLuZp1xSIegEQvh0gX7gXs3NU2rF4wa5pCI37V04eSE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 794a704acdc176e9-LHR
x-cache: Miss from cloudfront
via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: dUNwYzg-oIWkdK9yMS50xuTdqdy_EEsb-LTXyzipkVIxg6ZE_WCkdA==
age: 606823
X-Firefox-Spdy: h2
d2cgpm3z94jqsd.cloudfront.net/static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/fonts/poppins/poppins-v1-latin-700.woff2
200 OK 14 kB URL HTTP/2 d2cgpm3z94jqsd.cloudfront.net/static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/fonts/poppins/poppins-v1-latin-700.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 13604, version 2.0\012- data
Hash d550e08dd491b2c61cae19ff44bd02d5
7bb238d6e53aac92bf82e149e3d50f2b1b175a9e
c112661591d6bba9f113b341d7e5725343d4c0e572c568b8435db3624aa09e01
GET /static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/fonts/poppins/poppins-v1-latin-700.woff2 HTTP/1.1
Host: d2cgpm3z94jqsd.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.parfymonline.no
Connection: keep-alive
Referer: https://d2cgpm3z94jqsd.cloudfront.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 13604
date: Sun, 05 Feb 2023 08:57:27 GMT
last-modified: Sun, 29 Jan 2023 07:18:50 GMT
vary: Accept-Encoding
etag: "63d61dda-3524"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-headers: x-requested-with
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qbbvMbWgihfmr7gSHL5VYNhHrfHBhSRtKit0edKaHBclVMM%2B2tsDScoVciYmRXBAcKunLKStN720VQYsXwaqva9z0FkNnH8VucN%2BO0CBvTy2rDq1W6sXAiBSpZZLn7DOckibbns%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 794a704b6db37463-LHR
x-cache: Miss from cloudfront
via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: sjMTNSV0oLdpCs6EwhKx8k28Z4PiuqujJqHhXFmSwoIDHx3pG7bACg==
age: 606858
X-Firefox-Spdy: h2
d2cgpm3z94jqsd.cloudfront.net/static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/fonts/poppins/poppins-v1-latin-regular.woff2
200 OK 14 kB URL HTTP/2 d2cgpm3z94jqsd.cloudfront.net/static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/fonts/poppins/poppins-v1-latin-regular.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 13576, version 2.0\012- data
Hash 828dd9fb85d179a4192b457e4b293229
70372e96703ffc095ceb3e7c80b9218dee7d6d9c
d2cd4a9dbd710efc99b77a7a93b99652f9f68a299406605e25e57244d5b5ab96
GET /static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/fonts/poppins/poppins-v1-latin-regular.woff2 HTTP/1.1
Host: d2cgpm3z94jqsd.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.parfymonline.no
Connection: keep-alive
Referer: https://d2cgpm3z94jqsd.cloudfront.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 13576
date: Sun, 05 Feb 2023 08:57:27 GMT
last-modified: Sun, 29 Jan 2023 07:18:50 GMT
vary: Accept-Encoding
etag: "63d61dda-3508"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-headers: x-requested-with
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=54k44%2BM6K56g%2FlVQD9inYumwkx6roEtxp1sTMsWSvHGd8owtqByNC12myz0%2B9Z2Q8Xqg6JSxB%2Bwah5O9LdC9RANjd%2BqUIJc7g8BWPj%2F5Ekj8LaHB7LrVftacVivFlNMlBmGIwlc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 794a704b7f2372c7-LHR
x-cache: Miss from cloudfront
via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: hwYBGzUKx_lGVjDwwaYGLoXWa60NnoZ2UoT-CVFTVtlVCW1MV1M7cw==
age: 609934
X-Firefox-Spdy: h2
d2cgpm3z94jqsd.cloudfront.net/static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/fonts/linearicons/Linearicons.ttf
200 OK 136 kB URL HTTP/2 d2cgpm3z94jqsd.cloudfront.net/static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/fonts/linearicons/Linearicons.ttf
IP
File type TrueType Font data, digitally signed, 11 tables, 1st "DSIG", 24 names, Macintosh, Copyright \251 2015 Perxis.com. All Rights Reserved.LineariconsRegular2.000; ;Linearicons-Reg\012- data
Size 136 kB (135532 bytes)
Hash e42f418848c1f9b44f564eee6439d017
90beb4b6fcb1c9a55b9aff7c774f88130d1ad770
4df7967f3ecf7cd2e3a23bdb993584d070ff4c6879ff1aef12c2ded454cc52e3
GET /static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/fonts/linearicons/Linearicons.ttf HTTP/1.1
Host: d2cgpm3z94jqsd.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.parfymonline.no
Connection: keep-alive
Referer: https://d2cgpm3z94jqsd.cloudfront.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 135532
date: Sun, 05 Feb 2023 08:57:27 GMT
last-modified: Sun, 29 Jan 2023 07:18:50 GMT
vary: Accept-Encoding
etag: "63d61dda-2116c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-headers: x-requested-with
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NF00J0w14mwkThlTjgXS8Ffc6el3Hl9RpDhbWRf8q3wFaekXjUmS3jnQjzMVQJlujEGI8TC5J20whciplbyNLqgWpPYp3vgMPDgQjnt7pdnxQzDdhU9OxY0OXj9Lkb%2Bd00VGfPw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 794a704b7d3b23ef-LHR
x-cache: Miss from cloudfront
via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: PAOlbJHAiLVUIFKKB6Nx6sUgpp5AS1KS63vlk0YSHVKAwiLS1MycXA==
age: 610150
X-Firefox-Spdy: h2
d2cgpm3z94jqsd.cloudfront.net/static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/fonts/poppins/poppins-v1-latin-600.woff2
200 OK 14 kB URL HTTP/2 d2cgpm3z94jqsd.cloudfront.net/static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/fonts/poppins/poppins-v1-latin-600.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 13852, version 2.0\012- data
Hash 1a9b31eb5b41da25f3be7b2916b5777e
148f11a7c508e551e6a29fc49cc73337925c0e8d
bfd8092542abd061b319227c4c44181bfbbf3249876d4031db3228d5b9ab779b
GET /static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/fonts/poppins/poppins-v1-latin-600.woff2 HTTP/1.1
Host: d2cgpm3z94jqsd.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.parfymonline.no
Connection: keep-alive
Referer: https://d2cgpm3z94jqsd.cloudfront.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 13852
date: Sun, 05 Feb 2023 08:57:27 GMT
last-modified: Sun, 29 Jan 2023 07:18:50 GMT
vary: Accept-Encoding
etag: "63d61dda-361c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-headers: x-requested-with
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LZb8Q7itfDDsU4uamL%2BsbTsxwnlTZAeJwFGBBm00PAi7FwVv3ApDv8l7Ns%2FV926iteERMXiiyFMPsUT33o%2B5aU0lu8AIpjfo%2Fd39NnqkDyp%2FZFbq%2FAIyPKb0qLPUtx4MMfq9w8g%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 794a704bade906c1-LHR
x-cache: Miss from cloudfront
via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: XDE98S2dfv40N_kFG8flVVngKca18XY3GESDI2ej0L_Uje2-cEk6oQ==
age: 606854
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 153d0de36959c722c00df71ba86daca2
305f56a3134879ebf0828e169e903e560540c070
0cf533a798d42d1e97fb6619a411afadf9a68c92302ba852869b0c0555a47987
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 08:57:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 278 B IP
Hash a6faf6bac47f187c33d3135b43962279
fe3eb4e70b0cadf5e65a8d56c7e82fd61cbd2622
8385f8095c6c0b564bd86d552c85766b7e9c83f3b0b37d4f2d66bf1375378e02
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4270
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 08:57:28 GMT
Last-Modified: Sun, 05 Feb 2023 07:46:18 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 278
www.googletagmanager.com/gtm.js?id=GTM-TV5CPX7
200 OK 39 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-TV5CPX7
IP
File type ASCII text, with very long lines (1759)
Hash fe67ea635a208680f128d0e704dcf3e8
f85b4323b710fbd89b89258cfd9e471d2728b119
fb63ea8b617df0e8a97cdf67a36a54c056fc492194323de1ac49f420ba8fdaff
GET /gtm.js?id=GTM-TV5CPX7 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.parfymonline.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 05 Feb 2023 08:57:28 GMT
expires: Sun, 05 Feb 2023 08:57:28 GMT
cache-control: private, max-age=900
last-modified: Sun, 05 Feb 2023 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 38852
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 98be7fe21d059e46146a43d20c4eea92
1ec58129fea75085588be7b8baec05b0874b5274
7bb2eb5ffcd88a3b6ba7b210bdbcd4469134c9708f06befb6c616beebf8dae46
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 08:57:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.googleapis.com/css2?family=Poppins:wght@600&display=swap
200 OK 883 B URL HTTP/2 fonts.googleapis.com/css2?family=Poppins:wght@600&display=swap
IP
Hash 9c2096c9bf5d35cfd130d76c54240f88
5f0bd75746fa3efcc822e3d40f5b559443617b20
b9a7bf655a86485f67f047ab9b3d18faa54d7bd2e057cd0566624018df3e9c5e
GET /css2?family=Poppins:wght@600&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.parfymonline.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 05 Feb 2023 08:57:28 GMT
date: Sun, 05 Feb 2023 08:57:28 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 5452c58c07ce8d3cade93b323b271c35
581b1e438daeb32a12feaf50f2aab17dcf3e3171
b99ea2af71e697f45db51732f7d3e8d3e50258c9c96e50a772b8c4638577140a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 08:57:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2
200 OK 8.1 kB URL HTTP/2 fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2
IP
Hash 05a5bfa247176bef999bcaff17fa3846
5f22fed97e5a0a1459be803c2581cac2bcc0f918
9b538f140b75355e748e4d7d951eb70b441964d6d4cba95a762b87d87037ffdb
GET /s/poppins/v20/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.parfymonline.no
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 8000
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 31 Jan 2023 09:41:14 GMT
expires: Wed, 31 Jan 2024 09:41:14 GMT
cache-control: public, max-age=31536000
age: 429374
last-modified: Wed, 27 Apr 2022 16:59:07 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 5452c58c07ce8d3cade93b323b271c35
581b1e438daeb32a12feaf50f2aab17dcf3e3171
b99ea2af71e697f45db51732f7d3e8d3e50258c9c96e50a772b8c4638577140a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 08:57:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 5a69c0e7ac3b3308b44576e23b5f3323
40f2ecf62f82f182d9f7c4745b5a2da756b84315
91af3988457fb08d4934f7b333c3bf7b24895f51d3a2f1f085431a9b0d7c2425
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sun, 05 Feb 2023 08:57:28 GMT
Last-Modified: Sun, 05 Feb 2023 07:48:42 GMT
Server: ECS (bsa/EB1B)
X-Cache: Miss from cloudfront
Via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: iU7k4BLltIa5krybnBtznX43X1ZH5MrLQPzTQgioqSKYfnnzcn-52w==
Age: 4126
dapi.videoly.co/2/videos/0/2043/?hn=www.parfymonline.no&oos=0&productTitle=Bj%C3%B6rk%20Forma%20Textur%20Mini%20100ml&product_view_uuid=05f11462-68a3-4d77-a88f-c877613f7c18&_cl=nb&_b=Firefox&_bv=105.0&_h=939&_pl=nb&_w=1280&href=https%3A%2F%2Fw%C4%88.parfymonline.no%2Fbjork-f%C4%9Dma-textur-m%C4%94i-100ml.%C4%80%C4%B4%3Futm_so%C4%AAce%3Dkelko%C4%91o%26%C4%BA%C4%BCmedium%3Dcpc%C5%8B%C4%BB_cam%C4%8Bign%C5%83%C5%85%C5%87oc%C4%93ck%C5%98%C4%BC%C4%A6r%C5%93Bj%25C3%25B6%C4%9E%2520F%C4%A2a%C5%B80T%C4%A7%C4%A9r%C5%BEM%C4%AE%C5%BE%C4%B1%C4%B3l&isInjectedByAddon=false&p=1&tsltd=0&productId=19677&mpn=>in=&SKU=&brandName=&productPrice=¤cy=&categoryTree=&crtProv=undefined&callback=_vdly76db737f77
200 OK 13 kB URL HTTP/2 dapi.videoly.co/2/videos/0/2043/?hn=www.parfymonline.no&oos=0&productTitle=Bj%C3%B6rk%20Forma%20Textur%20Mini%20100ml&product_view_uuid=05f11462-68a3-4d77-a88f-c877613f7c18&_cl=nb&_b=Firefox&_bv=105.0&_h=939&_pl=nb&_w=1280&href=https%3A%2F%2Fw%C4%88.parfymonline.no%2Fbjork-f%C4%9Dma-textur-m%C4%94i-100ml.%C4%80%C4%B4%3Futm_so%C4%AAce%3Dkelko%C4%91o%26%C4%BA%C4%BCmedium%3Dcpc%C5%8B%C4%BB_cam%C4%8Bign%C5%83%C5%85%C5%87oc%C4%93ck%C5%98%C4%BC%C4%A6r%C5%93Bj%25C3%25B6%C4%9E%2520F%C4%A2a%C5%B80T%C4%A7%C4%A9r%C5%BEM%C4%AE%C5%BE%C4%B1%C4%B3l&isInjectedByAddon=false&p=1&tsltd=0&productId=19677&mpn=>in=&SKU=&brandName=&productPrice=¤cy=&categoryTree=&crtProv=undefined&callback=_vdly76db737f77
IP
File type ASCII text, with very long lines (342), with no line terminators
Hash 02c7d4687dee0fdeeb99f2fdace89ba4
2a19bed4f00318cb14ad12343a012d03add868a3
6f572e2ae00587f5fb8baccab1c112fbc8648455472e18888bf3516a7e5396ea
GET /2/videos/0/2043/?hn=www.parfymonline.no&oos=0&productTitle=Bj%C3%B6rk%20Forma%20Textur%20Mini%20100ml&product_view_uuid=05f11462-68a3-4d77-a88f-c877613f7c18&_cl=nb&_b=Firefox&_bv=105.0&_h=939&_pl=nb&_w=1280&href=https%3A%2F%2Fw%C4%88.parfymonline.no%2Fbjork-f%C4%9Dma-textur-m%C4%94i-100ml.%C4%80%C4%B4%3Futm_so%C4%AAce%3Dkelko%C4%91o%26%C4%BA%C4%BCmedium%3Dcpc%C5%8B%C4%BB_cam%C4%8Bign%C5%83%C5%85%C5%87oc%C4%93ck%C5%98%C4%BC%C4%A6r%C5%93Bj%25C3%25B6%C4%9E%2520F%C4%A2a%C5%B80T%C4%A7%C4%A9r%C5%BEM%C4%AE%C5%BE%C4%B1%C4%B3l&isInjectedByAddon=false&p=1&tsltd=0&productId=19677&mpn=>in=&SKU=&brandName=&productPrice=¤cy=&categoryTree=&crtProv=undefined&callback=_vdly76db737f77 HTTP/1.1
Host: dapi.videoly.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.parfymonline.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 08:57:28 GMT
content-type: text/javascript; charset=utf-8
x-powered-by: Express
access-control-allow-origin: *
access-control-allow-methods: GET,PUT,POST,OPTIONS
access-control-allow-headers: Content-Type
access-control-allow-credentials: true
x-videoly-cached: 1
x-content-type-options: nosniff
etag: W/"156-/xprSgmU75Kq7lIGQZfry2CCCW4"
set-cookie: vdly=s%3AOldV07Bl_YBY9GbkXQ6X4oZcP6FojbUb.Vx2GeqJnlfwcViaCsE6PBkMC8mVDrwgm2cpgNcYIE78; Path=/; Expires=Tue, 09 May 2023 08:57:28 GMT; HttpOnly; Secure; SameSite=None
via: 1.1 vegur
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=oRSBaSShWbbxeHEEhKwC%2BeqAKo4BW9e5X%2FD9gnLmx%2FRquIOt3g7TRENA%2BcYQjmej8%2FEcRgSYGrn3hk3iUfZuXLDQvxGuZeyVWKCqqTQkTqrZnHB%2FH3w0WsaAqEkesXKHVw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 794a7050cd57b50c-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.parfymonline.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Sun, 05 Feb 2023 07:44:08 GMT
expires: Sun, 05 Feb 2023 09:44:08 GMT
cache-control: public, max-age=7200
age: 4401
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
d2cgpm3z94jqsd.cloudfront.net/static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/Mirasvit_ImageLazyLoad/js/lazysizes.min.js
200 OK 16 kB URL HTTP/2 d2cgpm3z94jqsd.cloudfront.net/static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/Mirasvit_ImageLazyLoad/js/lazysizes.min.js
IP
Hash 535114f27df4acdf64d406fe9ec2e37f
a3c311fc1f68e43de00a06ff257d97882c3a33df
15b8663319fe0c017e40aa2feaf72ffa3213aaccfcda12cda91af555957f443d
GET /static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/Mirasvit_ImageLazyLoad/js/lazysizes.min.js HTTP/1.1
Host: d2cgpm3z94jqsd.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.parfymonline.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Sun, 05 Feb 2023 08:57:28 GMT
last-modified: Sun, 29 Jan 2023 07:18:49 GMT
vary: Accept-Encoding
etag: W/"63d61dd9-388d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-headers: x-requested-with
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lqKnZ53l1fwRcBqsbzJTC0MjHP3BlbbSL8y9Ip6rxNS0f21BtTXwjH0UDbnCzy9EyLofjgOCUAwFhRQPOTVcUebTn%2FHvELZx1UUbuSHZYwpMs3jN9azUhb8AvZrFSGH6pzjSBoc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 794a7051e88576fb-LHR
x-cache: Miss from cloudfront
via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: yf4_-1ioBAShzLyjAq_1EtzshVQHXYCoF9TL4CLur8JthCO4nuM8rg==
age: 610617
X-Firefox-Spdy: h2
d2cgpm3z94jqsd.cloudfront.net/static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/jquery/ui-modules/effect-fold.min.js
200 OK 1.3 kB URL HTTP/2 d2cgpm3z94jqsd.cloudfront.net/static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/jquery/ui-modules/effect-fold.min.js
IP
File type ASCII text, with very long lines (743)
Hash 6e3ff342ca8925877a8c79e1cb9c483a
b4c3d878850131f8f859819feefd2ae3b6397a1d
3e25472c9835f5c669c44023eae74f8d392e81ce28fc22af58f344054e1afd4a
GET /static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/jquery/ui-modules/effect-fold.min.js HTTP/1.1
Host: d2cgpm3z94jqsd.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.parfymonline.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Sun, 05 Feb 2023 08:57:29 GMT
last-modified: Sun, 29 Jan 2023 07:18:46 GMT
vary: Accept-Encoding
etag: W/"63d61dd6-52c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-headers: x-requested-with
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9%2Bo1XyISPy97ww4hyKMMi%2FmkJc9ZMv2NlGSuHiK8o97BNatjypGVkd9QjxnNkK6GWZAruAjyC3AGb%2F9K6LXi4rwmlOs0x1CirnO2jAsyfNxV%2FKafoqFy9sgKoI4%2F7uk9l8R9Z0Y%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 794a7054480c23ef-LHR
x-cache: Miss from cloudfront
via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: r-PG59KmH-0LRq2hld4dWBL1gkXEXPZPIQDmGe6cLqvyeVA3wNhdow==
age: 610621
X-Firefox-Spdy: h2
d2cgpm3z94jqsd.cloudfront.net/static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/jquery/ui-modules/effect-fade.min.js
200 OK 497 B URL HTTP/2 d2cgpm3z94jqsd.cloudfront.net/static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/jquery/ui-modules/effect-fade.min.js
IP
Hash 19d3e5e29513251d0aeaf3d44d9bceac
f752d43d4effb3d3cda3c243fda64edfdd5acda8
00db5864c0c683f12b0aecc6ff4824e9d9ffcf91c5c22225d8914738b6f593fd
GET /static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/jquery/ui-modules/effect-fade.min.js HTTP/1.1
Host: d2cgpm3z94jqsd.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.parfymonline.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Sun, 05 Feb 2023 08:57:29 GMT
last-modified: Sun, 29 Jan 2023 07:18:46 GMT
vary: Accept-Encoding
etag: W/"63d61dd6-1f1"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-headers: x-requested-with
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qikuzI%2BYO4SrxdYJgpaeYcFWeyvf6KUIuF81wD4QSOSXrLcR%2Bm4M6H7dXLBaHnGYw8Hiw7JYobzH5FulTh48s2RfgvVD%2Bzh2yyTdmj0QrPrPOgOcTheKrd8b7FbAmdS5rlL9z%2BQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 794a70544fc37531-LHR
x-cache: Miss from cloudfront
via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 5VJnS0MIqR9pnmKIHRi6P_GwbK2bH1RZtC636ZqO1HurfqGTdwZOAg==
age: 609327
X-Firefox-Spdy: h2
d2cgpm3z94jqsd.cloudfront.net/static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/jquery/ui-modules/draggable.min.js
200 OK 39 kB URL HTTP/2 d2cgpm3z94jqsd.cloudfront.net/static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/jquery/ui-modules/draggable.min.js
IP
Hash 371e1aac34489b3d0434bb97cdfa7f5e
cf2127b037caa5f53dd080d87f9a8dd1d841211f
216f647d3809dd26b2c0f19ee4d0722b2aa7d5b762adda0cd26056023296b1f0
GET /static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/jquery/ui-modules/draggable.min.js HTTP/1.1
Host: d2cgpm3z94jqsd.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.parfymonline.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Sun, 05 Feb 2023 08:57:28 GMT
last-modified: Sun, 29 Jan 2023 07:18:46 GMT
vary: Accept-Encoding
etag: W/"63d61dd6-51a2"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-headers: x-requested-with
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LaagFrxFZmW9%2F18WDAryJMaJ%2Bb4x1xBq8WccYmTVtTT3tPq8oGmB5ZGEtWv5%2BWlaZE1RGZHz4FDHIo3Iy%2FIoxRp4FR27O8%2B9FbeujJ%2B7Gkt%2F6osT1TJZ4YdWmUUEvO2wDCyfXRY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 794a7052cc1a778b-LHR
x-cache: Miss from cloudfront
via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 8KcIXb38VNfGAnYp9mUd5bMjBM52HqQYDbwYAy8wxm_oB_K53cbfDg==
age: 609923
X-Firefox-Spdy: h2
d2cgpm3z94jqsd.cloudfront.net/static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/jquery/ui-modules/mouse.min.js
200 OK 12 kB URL HTTP/2 d2cgpm3z94jqsd.cloudfront.net/static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/jquery/ui-modules/mouse.min.js
IP
Hash 703f7836a7072f4890935d9ce9565a4e
9359374ebd27bcb9f982e5234aca56c4cc65ee7d
be38c905161db99376279de42cc440639f2d10e1dae71c6cf1300bc6549b7e59
GET /static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/jquery/ui-modules/mouse.min.js HTTP/1.1
Host: d2cgpm3z94jqsd.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.parfymonline.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Sun, 05 Feb 2023 08:57:28 GMT
last-modified: Sun, 29 Jan 2023 07:18:46 GMT
vary: Accept-Encoding
etag: W/"63d61dd6-d3a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-headers: x-requested-with
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VeOPDOf8hBaAKaPpk4GHZlUrSKYhKLnOHEy1fhlkQGgIHm71dh5DX%2FLPXCBk4r0ZKM%2BkuXI5ES%2FFqZt1ErFzjM54vnCg87ur7ysFh0ZZpYBRn0dydSgu8YvBvO5uzlcCVO6FKJY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 794a7052cc677705-LHR
x-cache: Miss from cloudfront
via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: LQvBzOuc6ZsCk06e1KuY51J0cYIZLsMZi3L-7MN6eVFRujrpivxYYA==
age: 610561
X-Firefox-Spdy: h2
d2cgpm3z94jqsd.cloudfront.net/static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/Magento_ConfigurableProduct/js/catalog-add-to-cart-mixin.min.js
200 OK 11 kB URL HTTP/2 d2cgpm3z94jqsd.cloudfront.net/static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/Magento_ConfigurableProduct/js/catalog-add-to-cart-mixin.min.js
IP
Hash 85d5f128569e31e738d80358089ca062
624bfc670ddc3229b484445059d20bf8b55bbfcf
409938a0f61e6718c00d1af67cf187d45f07382f72b695ece035380c913020c5
GET /static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/Magento_ConfigurableProduct/js/catalog-add-to-cart-mixin.min.js HTTP/1.1
Host: d2cgpm3z94jqsd.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.parfymonline.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Sun, 05 Feb 2023 08:57:29 GMT
last-modified: Sun, 29 Jan 2023 07:18:49 GMT
vary: Accept-Encoding
etag: W/"63d61dd9-1ed"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-headers: x-requested-with
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dJI97DdwrlF33Zju0S8oGx5mUriPFHGyKzzrmX7Dj3Pywb4n8Tqs1d2mmW8HqzlqJ4a8eeudOkvSXY%2FNhtwGwqk9loEmm7Nkc1GJg0FgNlRpdCcH%2BBBSjFbInya%2FexCQLPoVQQY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 794a70557a3fdd1f-LHR
x-cache: Miss from cloudfront
via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: EX_9hzcAfhHx3kRt2vJSuzSIhGBjZ9wo2jB-xZ3i_5Hk2BNe55JlWQ==
age: 609853
X-Firefox-Spdy: h2
d2cgpm3z94jqsd.cloudfront.net/static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/Magento_ConfigurableProduct/js/product/view/product-info-resolver.min.js
200 OK 667 B URL HTTP/2 d2cgpm3z94jqsd.cloudfront.net/static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/Magento_ConfigurableProduct/js/product/view/product-info-resolver.min.js
IP
Hash dc6fba4aba1d8a5ef590e7362142f991
1a9370e48a2e0ec9377452e1a86f5fc5d8489981
948dde8537a6e29bbf4d903c29c0be8bfb4a8cc0f12a35ad9cab7fb6180fb7a5
GET /static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/Magento_ConfigurableProduct/js/product/view/product-info-resolver.min.js HTTP/1.1
Host: d2cgpm3z94jqsd.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.parfymonline.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Sun, 05 Feb 2023 08:57:29 GMT
last-modified: Sun, 29 Jan 2023 07:18:49 GMT
vary: Accept-Encoding
etag: W/"63d61dd9-278"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-headers: x-requested-with
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HYOLdofYvIaMm1gMpqFar9OmSwqTTUt7X75gC0NaXRO8dsyC3CUNUaitPrctam4iguZml6TaAn%2FJMnKg5Jbg5KU%2F4B4h47iqVcGjsd49SwvayI6hNss7JTZT3LfSjkUIXoemGVM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 794a70568c4175cf-LHR
x-cache: Miss from cloudfront
via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 2CUKJg3U-aiMCEo2El3ZQ1i2Sn4DE79hUrE-pkQoJkal2x_sPqakcA==
age: 609433
X-Firefox-Spdy: h2
d2cgpm3z94jqsd.cloudfront.net/static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/fonts/poppins/poppins-v1-latin-500.woff2
200 OK 14 kB URL HTTP/2 d2cgpm3z94jqsd.cloudfront.net/static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/fonts/poppins/poppins-v1-latin-500.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 13988, version 2.0\012- data
Hash 14e5dbab8e2e8259e8f68a6d46d2a4d2
458963b110b03c63b9497a6aeb810b7468b757ca
e3cc6223f76dac1abe95f64280756f04739beb1c4fd36c7e53169b4f2c7959eb
GET /static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/fonts/poppins/poppins-v1-latin-500.woff2 HTTP/1.1
Host: d2cgpm3z94jqsd.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.parfymonline.no
Connection: keep-alive
Referer: https://d2cgpm3z94jqsd.cloudfront.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 13988
date: Sun, 05 Feb 2023 08:57:29 GMT
last-modified: Sun, 29 Jan 2023 07:18:50 GMT
vary: Accept-Encoding
etag: "63d61dda-36a4"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-headers: x-requested-with
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AVxoEWI6tMr0BgPo0yaHvPHwzL7r31HDUlwivdbHN0JkZUSZBavJmCkNbbRqGIW%2BTUw3T7bAead3swvl3tcK1SUqAEqP%2BHmQJzrb4OfQLUCKNMfEykzGXw8Wrikg3n8c1MY7izc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 794a7056e9857433-LHR
x-cache: Miss from cloudfront
via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 6CgPQQaL9LhFx1JYU6DIhA1MynYuBzdiTT7XRwEDxGDiAcfiXTyDoA==
age: 600169
X-Firefox-Spdy: h2
d2cgpm3z94jqsd.cloudfront.net/static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/jquery/ui-modules/datepicker.min.js
200 OK 65 kB URL HTTP/2 d2cgpm3z94jqsd.cloudfront.net/static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/jquery/ui-modules/datepicker.min.js
IP
Hash d1a5c142efe26affa805f7744a7aa75d
8b3c3cc1571411be23ea148574ab29322d6babf9
3767c204671e7990c88789c78234cfa8c99a6aee05b1b4dae4ad7118ecac3cef
GET /static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/jquery/ui-modules/datepicker.min.js HTTP/1.1
Host: d2cgpm3z94jqsd.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.parfymonline.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Sun, 05 Feb 2023 08:57:28 GMT
last-modified: Sun, 29 Jan 2023 07:18:46 GMT
vary: Accept-Encoding
etag: W/"63d61dd6-bdf6"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-headers: x-requested-with
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yMkNBwa3CGyBOfi6%2FKqnoJDnxOBP%2FL6UpQOiZYSquwXxQoPautgTuk2Cf92IgipjsJnxRDcCEtcJnUs2rUVHT7IT%2FKviBfeRoMzjedAcUmxiML745XlNlhaVoD%2BhSilgCrdHq84%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 794a7051fe1223e8-LHR
x-cache: Miss from cloudfront
via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: i73Qf99nAShwBClQkztDmMnPkiUZbWxoDw60monYjX7lDpFr7Ls-nw==
age: 610479
X-Firefox-Spdy: h2
d1pna5l3xsntoj.cloudfront.net/scripts/modules/ui_tabs.js
200 OK 514 B URL HTTP/2 d1pna5l3xsntoj.cloudfront.net/scripts/modules/ui_tabs.js
IP
Hash 73c3105a76571cb1a2252190cce1102b
00f2c61969fdd6a22fc3d48e309ec89d6d2c8ff6
5c6cb2056473cd5916932c24e7ac6fd4addfee9bb121481667dbe6cc12f14fa9
GET /scripts/modules/ui_tabs.js HTTP/1.1
Host: d1pna5l3xsntoj.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.parfymonline.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
content-length: 514
content-language: en-US
last-modified: Fri, 03 Feb 2023 13:32:34 GMT
accept-ranges: bytes
content-encoding: gzip
date: Sun, 05 Feb 2023 08:53:18 GMT
cache-control: public, max-age=600
expires: Sun, 05 Feb 2023 09:03:16 GMT
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 80d21802b1b80c40e55ccf83433b8eac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: S8_FJAWsHxZJ94t7KdqcrA9T5V-L7MZO8mwKID218J2h7L8_Wfgk2Q==
age: 253
X-Firefox-Spdy: h2
d2cgpm3z94jqsd.cloudfront.net/static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/jquery/ui-modules/effect-blind.min.js
200 OK 67 kB URL HTTP/2 d2cgpm3z94jqsd.cloudfront.net/static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/jquery/ui-modules/effect-blind.min.js
IP
Hash f0800a2f2fa42f01f7e55daaa8b3bde2
63aaa9e4b178402b13d5764003a60c502be1640d
5179ca1f1fa5c085e34b98b8d2881e4844f1979de41a2accbc3c7ad97ce9d1d5
GET /static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/jquery/ui-modules/effect-blind.min.js HTTP/1.1
Host: d2cgpm3z94jqsd.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.parfymonline.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Sun, 05 Feb 2023 08:57:29 GMT
last-modified: Sun, 29 Jan 2023 07:18:46 GMT
vary: Accept-Encoding
etag: W/"63d61dd6-5ba"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-headers: x-requested-with
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mOjcCd6aElzctOEzNjDNiNZH1vHZiusySXInRsbcK9i3aUSB3byStpu9ZJOYrP7HubTZ6Hguvk6k%2BfQDqphGwRBIw0VYtdXXGEdC9sn7z9u5ksemAr121lfFThFgTNmPFBs7Nu0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 794a7054486476d5-LHR
x-cache: Miss from cloudfront
via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: YNM3jNLqjIcJL4W4VFHQM1K6MzfIibgzTFFe732OEMf1HzBNstfSFQ==
age: 610480
X-Firefox-Spdy: h2
d2cgpm3z94jqsd.cloudfront.net/static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/jquery/ui-modules/effect.min.js
200 OK 52 kB URL HTTP/2 d2cgpm3z94jqsd.cloudfront.net/static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/jquery/ui-modules/effect.min.js
IP
Hash c4c72e930b735d05da0dcfc1aba164ef
291f8f736b020639f17d4621484bcd2053df9fdf
579a30e2927979d9ac50f137e92e9cf36d75b2d028a33d3b412adf5322c5db3b
GET /static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/jquery/ui-modules/effect.min.js HTTP/1.1
Host: d2cgpm3z94jqsd.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.parfymonline.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Sun, 05 Feb 2023 08:57:29 GMT
last-modified: Sun, 29 Jan 2023 07:18:46 GMT
vary: Accept-Encoding
etag: W/"63d61dd6-4b2b"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-headers: x-requested-with
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HCjX1pXgmfRwgTzOQBFrNH%2FW6Jw%2BGTEbHXxCznOf7RDcU%2B1ZJhcSXjHsmtkgi7jrjpb6VUCsjWxqI%2F5nopBEHTYZ%2BVo0csEJQhTPP795NO0cU5wbo%2BMSkiTsnYNR1G9uY6Bt01k%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 794a70545b41dd64-LHR
x-cache: Miss from cloudfront
via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: XkU0ZnkXPsc5TfgKNtfQXbIyegXQhtwno_rzjkHaQxkKUtgGDx6Pmw==
age: 610180
X-Firefox-Spdy: h2
d2cgpm3z94jqsd.cloudfront.net/static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/jquery/ui-modules/effect-shake.min.js
200 OK 67 kB URL HTTP/2 d2cgpm3z94jqsd.cloudfront.net/static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/jquery/ui-modules/effect-shake.min.js
IP
Hash 9cc63809f70e4952c2d1171d53f8666c
bc4d35f0d9b3ce90bff4ea9e46b21d96c60911f6
ca8528bff8d57b665de2e12e96f1b4565390d80ef85eb63239e002e1b914cd0e
GET /static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/jquery/ui-modules/effect-shake.min.js HTTP/1.1
Host: d2cgpm3z94jqsd.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.parfymonline.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Sun, 05 Feb 2023 08:57:29 GMT
last-modified: Sun, 29 Jan 2023 07:18:46 GMT
vary: Accept-Encoding
etag: W/"63d61dd6-59c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-headers: x-requested-with
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1E22SnMuvGwADRw7SLlhcpIXbL1BMKrtqi4%2BuveB7rjfXEAYcUIgg2vyEWKhrPyagsgXqGEvIPBOlQRQgDI8Pz9K%2BIjKd6yUltrfNhlgcwqAVIEBaZHtHED1jrYUHPZ9a6Hoz9Y%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 794a70546c7f757a-LHR
x-cache: Miss from cloudfront
via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 1MXo6xZPyZ9miQSuhQQbp6wUUoSXdM-vbi8_E37J6XQ5phP8NqbIoA==
age: 610617
X-Firefox-Spdy: h2
d2cgpm3z94jqsd.cloudfront.net/static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/jquery/ui-modules/effect-slide.min.js
200 OK 161 kB URL HTTP/2 d2cgpm3z94jqsd.cloudfront.net/static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/jquery/ui-modules/effect-slide.min.js
IP
Size 161 kB (161177 bytes)
Hash f14e2f1bd17475ab5d799436519310b4
1675e9f2633ad3b63531ab645dc5b92783148087
86e258b93b03d85bdfe6d567cc2e7103cf6eaf2072abc07ac6f94fdc43093477
GET /static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/jquery/ui-modules/effect-slide.min.js HTTP/1.1
Host: d2cgpm3z94jqsd.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.parfymonline.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Sun, 05 Feb 2023 08:57:29 GMT
last-modified: Sun, 29 Jan 2023 07:18:46 GMT
vary: Accept-Encoding
etag: W/"63d61dd6-495"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-headers: x-requested-with
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=P%2Bi%2BJODHmpbCe4OtKoV8o2bpyVdMMJGSpXMyobgmTjRST6JH343uzFA8guK8Pz3ZX8vjh8TziBGuchs9X%2FeWSh9Ls7IdtgjotLTL60UAUgOVo8QviSPF7BswAccEhTJMD0Rc3Ro%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 794a70544d9a068e-LHR
x-cache: Miss from cloudfront
via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: voYx50TCiqEIGha5dmvCw0qIILtwIiK4eKV33doOWg_n83G6ssCbeA==
age: 610548
X-Firefox-Spdy: h2
d1pna5l3xsntoj.cloudfront.net/scripts/modules/search_instance.js
200 OK 3.5 kB URL HTTP/2 d1pna5l3xsntoj.cloudfront.net/scripts/modules/search_instance.js
IP
Hash 2f7b9424e66d66ab1823b84b842d8924
a9cb7462ff9bdcd8c41fc1e0da0b23f2b212d987
c1077192580444964e22356da710841d691966404112854dd69ca8a687472df7
GET /scripts/modules/search_instance.js HTTP/1.1
Host: d1pna5l3xsntoj.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.parfymonline.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
content-length: 3477
content-language: en-US
last-modified: Fri, 03 Feb 2023 13:32:34 GMT
accept-ranges: bytes
content-encoding: gzip
date: Sun, 05 Feb 2023 08:51:53 GMT
cache-control: public, max-age=600
expires: Sun, 05 Feb 2023 09:01:53 GMT
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 80d21802b1b80c40e55ccf83433b8eac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: pU6rUVUrVMhfwefuvK2LY4BRjOQZ8cFj-miZqoQJOjZww4Mmvml2hg==
age: 336
X-Firefox-Spdy: h2
d2cgpm3z94jqsd.cloudfront.net/static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/jquery/ui-modules/effect-clip.min.js
200 OK 68 kB URL HTTP/2 d2cgpm3z94jqsd.cloudfront.net/static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/jquery/ui-modules/effect-clip.min.js
IP
Hash 6d8151513d26ea08c28d69e119d1aab4
e4cef9faf7c7e3d00aa7edc01c57d07f27e1fd05
ff405933ffeb8095ceaaf550cc4b4ad2b3cde9e5a1d65902c915c9bf97694d28
GET /static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/jquery/ui-modules/effect-clip.min.js HTTP/1.1
Host: d2cgpm3z94jqsd.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.parfymonline.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Sun, 05 Feb 2023 08:57:29 GMT
last-modified: Sun, 29 Jan 2023 07:18:46 GMT
vary: Accept-Encoding
etag: W/"63d61dd6-469"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-headers: x-requested-with
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8jbIWQYd5Axglj1u1izOXjNIzHGgJqKihufj9fVAs%2FuNLytNtKxFTHRjRAv2GuY6EK6nANuF1zSgtlk9lACdAitoTz8SzeUJY3BQD3k%2Fj0ASi%2FSvJxQ48kDKQChV38jSLd1%2FNj8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 794a70544f107771-LHR
x-cache: Miss from cloudfront
via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Q7eK4TCOUx0xumfVQLwDO6KbXMJ0PsMC-8KoMWlRmqKQVQuk5UsdAw==
age: 610180
X-Firefox-Spdy: h2
d1pna5l3xsntoj.cloudfront.net/scripts/modules/style_loader.js
200 OK 623 B URL HTTP/2 d1pna5l3xsntoj.cloudfront.net/scripts/modules/style_loader.js
IP
Hash 1e7bf2abe5101c71d4c709e2b26a2ead
ca2cf0de3580710bc4e59df8aee0e43685ec9fbe
9b77347ee7bdbc26adbe012e170189193b42863dd3ca368a21cc42878a763199
GET /scripts/modules/style_loader.js HTTP/1.1
Host: d1pna5l3xsntoj.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.parfymonline.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
content-length: 623
content-language: en-US
last-modified: Fri, 03 Feb 2023 13:32:34 GMT
accept-ranges: bytes
content-encoding: gzip
date: Sun, 05 Feb 2023 08:56:01 GMT
cache-control: public, max-age=600
expires: Sun, 05 Feb 2023 09:06:01 GMT
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 80d21802b1b80c40e55ccf83433b8eac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: HSuWveWc1mni_nfUspyksHPHSqWBkwzJlcJPSrXYxoSlB9a66KlRgg==
age: 88
X-Firefox-Spdy: h2
d1pna5l3xsntoj.cloudfront.net/scripts/modules/overlay.css
200 OK 133 B URL HTTP/2 d1pna5l3xsntoj.cloudfront.net/scripts/modules/overlay.css
IP
Hash 4d0b531e5e9d7118dbb8206419ba0beb
be703f0651995b9d7fbc097e745b3c8cfb222e9d
ffed23adb8e4b496b88c85f9a8e162aae136677ed8d11bf496307443ff80d362
GET /scripts/modules/overlay.css HTTP/1.1
Host: d1pna5l3xsntoj.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.parfymonline.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/css;charset=utf-8
content-length: 133
content-language: en-US
last-modified: Fri, 03 Feb 2023 13:32:34 GMT
accept-ranges: bytes
content-encoding: gzip
date: Sun, 05 Feb 2023 08:51:18 GMT
cache-control: public, max-age=3600
expires: Sun, 05 Feb 2023 09:51:18 GMT
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 80d21802b1b80c40e55ccf83433b8eac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 5s9-rG6gS36pkA5MRI227pkNi4iG90Sc98Kg5Bp46pmsKfevUTyxUQ==
age: 371
X-Firefox-Spdy: h2
core.helloretail.com/partner/save.html
200 OK 61 B URL HTTP/2 core.helloretail.com/partner/save.html
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 8c891bc48d12a34cdc986e886516de1d
86882f105d82410f9db2b1924b0c2700a071c753
027f973d2e97e271f987d3cc224957e6d050be7a5357bd3a13d020b9363185ad
POST /partner/save.html HTTP/1.1
Host: core.helloretail.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 363
Origin: https://www.parfymonline.no
Connection: keep-alive
Referer: https://www.parfymonline.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 08:57:30 GMT
content-type: application/json;charset=utf-8
content-length: 61
access-control-allow-origin: https://www.parfymonline.no
access-control-allow-credentials: true
content-language: en-US
vary: Origin, Accept-Encoding, User-Agent
content-encoding: gzip
X-Firefox-Spdy: h2
core.helloretail.com/api/v1/cart/setCart
200 OK 4 B URL HTTP/2 core.helloretail.com/api/v1/cart/setCart
IP
File type ASCII text, with no line terminators
Hash 37a6259cc0c1dae299a7866489dff0bd
2be88ca4242c76e8253ac62474851065032d6833
74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b
POST /api/v1/cart/setCart HTTP/1.1
Host: core.helloretail.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 109
Origin: https://www.parfymonline.no
Connection: keep-alive
Referer: https://www.parfymonline.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 08:57:30 GMT
content-type: application/json;charset=utf-8
content-length: 4
access-control-allow-origin: https://www.parfymonline.no
access-control-allow-credentials: true
content-language: en-US
vary: Origin, Accept-Encoding, User-Agent
X-Firefox-Spdy: h2
d2cgpm3z94jqsd.cloudfront.net/static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/jquery/ui-modules/effect-highlight.min.js
200 OK 0 B URL HTTP/2 d2cgpm3z94jqsd.cloudfront.net/static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/jquery/ui-modules/effect-highlight.min.js
IP
GET /static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/jquery/ui-modules/effect-highlight.min.js HTTP/1.1
Host: d2cgpm3z94jqsd.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.parfymonline.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Sun, 05 Feb 2023 08:57:29 GMT
last-modified: Sun, 29 Jan 2023 07:18:46 GMT
vary: Accept-Encoding
etag: W/"63d61dd6-345"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-headers: x-requested-with
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bHpTEPiJs2aNK1Oxu1JoobuI7V2%2FiSjt0Rpn%2FlJdN3SoTtBRuwiIGt%2BWG0GsrKxx8LQhiEKD%2Beyf8eTIk%2ByXETv5h7f2%2BVbtaxrqAx67m1mZ7N2RkcekZlBcYe3B1Ux6joKCleU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 794a70544cacd188-LHR
x-cache: Miss from cloudfront
via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: YgNSbzp3YpKtyCF2Jz-QuwkS9jDlyA5pGbQ71Nrj-IRCsrwk2IJf1A==
age: 610544
X-Firefox-Spdy: h2
d2cgpm3z94jqsd.cloudfront.net/static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/jquery/ui-modules/tabs.min.js
200 OK 0 B URL HTTP/2 d2cgpm3z94jqsd.cloudfront.net/static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/jquery/ui-modules/tabs.min.js
IP
GET /static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/jquery/ui-modules/tabs.min.js HTTP/1.1
Host: d2cgpm3z94jqsd.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.parfymonline.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Sun, 05 Feb 2023 08:57:29 GMT
last-modified: Sun, 29 Jan 2023 07:18:46 GMT
vary: Accept-Encoding
etag: W/"63d61dd6-3980"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-headers: x-requested-with
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FcwrOYbSGtkQ1DlF7RQnkD1rH2vfhqB30VBUVxsrek3%2FRjgSfnCwhmgCcA0XbDBC19pQ0X3KXMt8XLj7nP34%2BGw89NO52wG31FZqX4m97godba2XUr2rK4BsGRg15wb3dU%2BrnUA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 794a70545f2a88b5-LHR
x-cache: Miss from cloudfront
via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: XC5sML0VgiZhAtRgPUkU3zvWgyBW_RfYrrCLkmlMcugGglFviwcr7Q==
age: 610180
X-Firefox-Spdy: h2
d2cgpm3z94jqsd.cloudfront.net/media/catalog/product/cache/b07ebfc84bb6f201960fa180623e180f/b/j/bjork-forma-textur-200ml-1505-134-0200_1_1.jpg
200 OK 0 B URL HTTP/2 d2cgpm3z94jqsd.cloudfront.net/media/catalog/product/cache/b07ebfc84bb6f201960fa180623e180f/b/j/bjork-forma-textur-200ml-1505-134-0200_1_1.jpg
IP
GET /media/catalog/product/cache/b07ebfc84bb6f201960fa180623e180f/b/j/bjork-forma-textur-200ml-1505-134-0200_1_1.jpg HTTP/1.1
Host: d2cgpm3z94jqsd.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.parfymonline.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
date: Sun, 05 Feb 2023 08:57:27 GMT
vary: Accept-Encoding
last-modified: Sat, 17 Dec 2022 10:35:19 GMT
etag: W/"639d9b67-19872"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ktz2R7H5Lb5yuWtr6aquv%2FrKxTnJxbenOFc8%2BUud%2FLgUJs0aFsfghPGc28blZ07LD3FPdUW52sg%2FpibQjPuu7hkrjCFXyRGrsAwjf44iKF%2BpLGiBi21T08%2BXlgOcpPy93Z2cqoo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 794a704c7fee068e-LHR
x-cache: Miss from cloudfront
via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: AcUIq27o7oT-pbzBceNq55v4N7aHJ4JkQeII8v1fcOgIopxnXdr10w==
X-Firefox-Spdy: h2
d2cgpm3z94jqsd.cloudfront.net/static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/jquery/ui-modules/effect-pulsate.min.js
200 OK 0 B URL HTTP/2 d2cgpm3z94jqsd.cloudfront.net/static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/jquery/ui-modules/effect-pulsate.min.js
IP
GET /static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/jquery/ui-modules/effect-pulsate.min.js HTTP/1.1
Host: d2cgpm3z94jqsd.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.parfymonline.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Sun, 05 Feb 2023 08:57:29 GMT
last-modified: Sun, 29 Jan 2023 07:18:46 GMT
vary: Accept-Encoding
etag: W/"63d61dd6-3dc"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-headers: x-requested-with
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=c7Aceg10IAZAOT6xeBIB7nLpD2NJShMnNh5WZeaCc48fZSnqz%2BdOWVyEzZ%2BmB%2BP9q%2FHGDjmNi3W5PcN99n6nKZl0TYzjK9iHpo4RF6DmoUfhNSPZVqUL6qGoWd%2FmWpkLY4q%2F8oo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 794a70544c6506c1-LHR
x-cache: Miss from cloudfront
via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: v9_DgJWfUTn_BC871exlOUzEP-zeLa8N-b3u7QhHsAZ6qpH38knKhw==
age: 609668
X-Firefox-Spdy: h2
d2cgpm3z94jqsd.cloudfront.net/static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/jquery/ui-modules/selectable.min.js
200 OK 0 B URL HTTP/2 d2cgpm3z94jqsd.cloudfront.net/static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/jquery/ui-modules/selectable.min.js
IP
GET /static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/jquery/ui-modules/selectable.min.js HTTP/1.1
Host: d2cgpm3z94jqsd.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.parfymonline.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Sun, 05 Feb 2023 08:57:29 GMT
last-modified: Sun, 29 Jan 2023 07:18:46 GMT
vary: Accept-Encoding
etag: W/"63d61dd6-14a0"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-headers: x-requested-with
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jyonyudQvp4BsAfuDPUTl8eY0S79UT4ZPnJNX80LALhn9C5IsHZz7aYnIbE04C25xO0F1PeVNE00c8PXlUqN%2B66P9iaAIIQHJk%2BaTEWaTmtEotwns0Yx6cU3CxTC6KyHKBDjtEY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 794a70545accf437-LHR
x-cache: Miss from cloudfront
via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: XTYSID1BMQ2vOc5dMZbLesAHZsTEI2xvrXEqYgL9xkKee0jVeBWJtg==
age: 610621
X-Firefox-Spdy: h2
d2cgpm3z94jqsd.cloudfront.net/static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/jquery/ui-modules/timepicker.min.js
200 OK 0 B URL HTTP/2 d2cgpm3z94jqsd.cloudfront.net/static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/jquery/ui-modules/timepicker.min.js
IP
GET /static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/jquery/ui-modules/timepicker.min.js HTTP/1.1
Host: d2cgpm3z94jqsd.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.parfymonline.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Sun, 05 Feb 2023 08:57:28 GMT
last-modified: Sun, 29 Jan 2023 07:18:46 GMT
vary: Accept-Encoding
etag: W/"63d61dd6-ba68"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-headers: x-requested-with
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5zoQkS28S%2FaDseO1Vn3vUdVcqK2AbAoBJ1Q%2FcbjJvxli71PpqGYZGWpmY9hEl1Wkm9WxiVy1edPi6eYagLoxIR2QJ08U5C%2F59uMgC05IPHwC%2F4s2EDlzQasghtgHFiH2bwsaApI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 794a7051edb57531-LHR
x-cache: Miss from cloudfront
via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: aEXC9HSZk0ow88Uw72ulK8_GlwIJ2CgI-LGCD2z85lEPjmnIo9Xsqg==
age: 610617
X-Firefox-Spdy: h2
d2cgpm3z94jqsd.cloudfront.net/media/catalog/product/cache/39017ddb09b961ffc8249a8a6f52f5fa/b/0/b050194_1.jpg
200 OK 0 B URL HTTP/2 d2cgpm3z94jqsd.cloudfront.net/media/catalog/product/cache/39017ddb09b961ffc8249a8a6f52f5fa/b/0/b050194_1.jpg
IP
GET /media/catalog/product/cache/39017ddb09b961ffc8249a8a6f52f5fa/b/0/b050194_1.jpg HTTP/1.1
Host: d2cgpm3z94jqsd.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.parfymonline.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
date: Sun, 05 Feb 2023 08:57:29 GMT
cache-control: max-age=315360000
cf-bgj: imgq:100,h2pri
cf-polished: origSize=74723
access-control-allow-origin: *
etag: W/"63b70287-123e3"
expires: Thu, 31 Dec 2037 23:55:55 GMT
last-modified: Thu, 05 Jan 2023 17:01:59 GMT
vary: Accept
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XZmWML6rPO9EemjHNM3NJLTmp33D3mGJMaqh0dEHqHTRmfSzhEdnOlZcyRw69Qta0irlE36L4jCLsqBbpV0u7OcV5pSwVzLjfi%2BpNiJG3S%2FrhgG1HwxEH4vBa21aUJnhJyUVxcI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 794a705738d3dd75-LHR
x-cache: Miss from cloudfront
via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: er7hLbdbZbcX3-nwKtEI9Ycbx-SbscLzVOCJWwWV8QuXLDYAMb4wfA==
age: 36124
X-Firefox-Spdy: h2
d2cgpm3z94jqsd.cloudfront.net/media/catalog/product/cache/39017ddb09b961ffc8249a8a6f52f5fa/b/j/bjork-hojd-conditioner-750ml.png
200 OK 0 B URL HTTP/2 d2cgpm3z94jqsd.cloudfront.net/media/catalog/product/cache/39017ddb09b961ffc8249a8a6f52f5fa/b/j/bjork-hojd-conditioner-750ml.png
IP
GET /media/catalog/product/cache/39017ddb09b961ffc8249a8a6f52f5fa/b/j/bjork-hojd-conditioner-750ml.png HTTP/1.1
Host: d2cgpm3z94jqsd.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.parfymonline.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
date: Sun, 05 Feb 2023 08:57:29 GMT
vary: Accept-Encoding
last-modified: Wed, 28 Dec 2022 14:21:05 GMT
etag: W/"63ac50d1-1e895"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FK6%2FwtNmtFqaeTncP2Du8IsP7biV%2FSa1M8ZfeAz4rDSDnExdsWdRZqULcFAHwBG8J5tSB0kKUchVP6fh0RmO8oYvMl8kotvoYO8E%2FHvIuwYZVqjAtZeW5ktGH8aKK9AGdE8q7iw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 794a7056add0732a-LHR
x-cache: Miss from cloudfront
via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: eLejZoprkcvuEuXGY8FOAhb-PGEqeptrb8HV2aBNFsFw__LeMEdeAw==
X-Firefox-Spdy: h2
d2cgpm3z94jqsd.cloudfront.net/static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/jquery/ui-modules/effect-scale.min.js
200 OK 0 B URL HTTP/2 d2cgpm3z94jqsd.cloudfront.net/static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/jquery/ui-modules/effect-scale.min.js
IP
GET /static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/jquery/ui-modules/effect-scale.min.js HTTP/1.1
Host: d2cgpm3z94jqsd.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.parfymonline.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Sun, 05 Feb 2023 08:57:29 GMT
last-modified: Sun, 29 Jan 2023 07:18:46 GMT
vary: Accept-Encoding
etag: W/"63d61dd6-170a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-headers: x-requested-with
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uWnuqR9dpphtES%2Fmxs7Tc3YaZUolU9srdwpfPNHAsaMxP8emgdQZIJgTIjiO96%2FhtuyVETO7IhnIrF1dv2q9UJIMnpXdNyO55Quu9%2FtpkWP%2FRShLciES2rB33APAJmMMPEbRVi4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 794a70544bb0385b-LHR
x-cache: Miss from cloudfront
via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: mxjL7YwFWdqffihk671nlcIvR-x7sNtC_EqLbu_XasDQpFbU1aX0zQ==
age: 116203
X-Firefox-Spdy: h2
d2cgpm3z94jqsd.cloudfront.net/static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/jquery/ui-modules/effect-bounce.min.js
200 OK 0 B URL HTTP/2 d2cgpm3z94jqsd.cloudfront.net/static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/jquery/ui-modules/effect-bounce.min.js
IP
GET /static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/jquery/ui-modules/effect-bounce.min.js HTTP/1.1
Host: d2cgpm3z94jqsd.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.parfymonline.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Sun, 05 Feb 2023 08:57:29 GMT
last-modified: Sun, 29 Jan 2023 07:18:46 GMT
vary: Accept-Encoding
etag: W/"63d61dd6-6be"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-headers: x-requested-with
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XtdOyb3jDgRvAyKqf9WmEJZDalamIW8rlsZ3Kw7YmORTigRtO055y569qDMsCloOgw8Uzm35kG9yZNoMjGnrn82irvnr0TpEcxW6381nDMTv4vYDrEpWnhdyKKf7FHfCBM3ciY4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 794a70545b517792-LHR
x-cache: Miss from cloudfront
via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: xXQk-cn2jbOcc_DuFCsmqxHJWyn-n1TXzgbMwsSeMefTpeL2vPkpog==
age: 609700
X-Firefox-Spdy: h2
d2cgpm3z94jqsd.cloudfront.net/static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/jquery/ui-modules/spinner.min.js
200 OK 0 B URL HTTP/2 d2cgpm3z94jqsd.cloudfront.net/static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/jquery/ui-modules/spinner.min.js
IP
GET /static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/jquery/ui-modules/spinner.min.js HTTP/1.1
Host: d2cgpm3z94jqsd.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.parfymonline.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Sun, 05 Feb 2023 08:57:29 GMT
last-modified: Sun, 29 Jan 2023 07:18:46 GMT
vary: Accept-Encoding
etag: W/"63d61dd6-2062"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-headers: x-requested-with
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TuqD%2BCl5DQBwKu52RkCpIbXA0KyLvtEBIQwx5R5dvAFZAYL2kVe7jIYMsdUgc7gKA0AqshqzxNMvh8lYF%2Ffp0ZuJybEcIaM1zy1Pwel%2FU2UZO%2B1YPbjVyQcerboj0KhYYmyvp2o%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 794a70545bce76fb-LHR
x-cache: Miss from cloudfront
via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: CnizvcpnRRSNFMp8Rk2awYP2ivjgtMOeB6c-DJyaPTETnEPpMqKXig==
age: 607443
X-Firefox-Spdy: h2
www.parfymonline.no/bjork-forma-textur-mini-100ml.html?utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Bj%C3%B6rk+Forma+Textur+Mini+100ml
200 OK 0 B URL HTTP/2 www.parfymonline.no/bjork-forma-textur-mini-100ml.html?utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Bj%C3%B6rk+Forma+Textur+Mini+100ml
IP
GET /bjork-forma-textur-mini-100ml.html?utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Bj%C3%B6rk+Forma+Textur+Mini+100ml HTTP/1.1
Host: www.parfymonline.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no-go.kelkoogroup.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 05 Feb 2023 08:57:27 GMT
content-type: text/html; charset=UTF-8
x-cache-lifetime: 604800
content-security-policy-report-only: font-src *.fontawesome.com maxcdn.bootstrapcdn.com fonts.gstatic.com fonts.googleapis.com *.yotpo.com *.googleapis.com *.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.klarna.com *.yotpo.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com validator.swagger.io *.klarna.com *.klarnaevt.com *.facebook.com quickchart.io img.youtube.com *.yotpo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com video.google.com vimeo.com www.vimeo.com *.vimeocdn.com js.authorize.net jstest.authorize.net www.youtube.com *.klarna.com *.googletagmanager.com *.facebook.net *.avada.io *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com *.fontawesome.com maxcdn.bootstrapcdn.com fonts.gstatic.com fonts.googleapis.com *.yotpo.com *.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com *.klarnaevt.com *.google-analytics.com https://get.geojs.io *.avada.io *.yotpo.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';
content-security-policy: upgrade-insecure-requests;
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-cache-age: 0
pragma: no-cache
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-headers: x-requested-with
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JJ%2BJqeMiSPIJ1e5r9JlZ7wHR33jLKgiSKpRPwyeo6Xzcs9Rsr%2BLxIkcY1ZjQy%2BdpzmI12JSQTnsEz4P84W%2Fqoa%2B9kXFolwonNWsPpByfEV0XHSPuBjnQeah%2BQ3W6SgCE7KFBGuxk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 794a70436af80b39-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
d2cgpm3z94jqsd.cloudfront.net/static/version1674976674/_cache/merged/c446385a0c4dabf13d76d040dcf9ae77.min.css
200 OK 0 B URL HTTP/2 d2cgpm3z94jqsd.cloudfront.net/static/version1674976674/_cache/merged/c446385a0c4dabf13d76d040dcf9ae77.min.css
IP
GET /static/version1674976674/_cache/merged/c446385a0c4dabf13d76d040dcf9ae77.min.css HTTP/1.1
Host: d2cgpm3z94jqsd.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.parfymonline.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css
date: Sun, 05 Feb 2023 08:57:27 GMT
last-modified: Sun, 29 Jan 2023 07:20:02 GMT
vary: Accept-Encoding
etag: W/"63d61e22-d0bbb"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-headers: x-requested-with
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NhmM71OQ%2FzeJwsPfT8OSsQouqw1mkLoPDbilYxekf%2BSlPYrS0jq10nnCOqz0kBalJaRxpcL2GhupnS%2FeVjN531RvDxlmiwbkkVcpxgZV5pBdozhHNhAr64NfKggj2hbCNOkYuZg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 794a704a4f758e32-LHR
x-cache: Miss from cloudfront
via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: ISwuz9bCzOsHT3vD-66IR_Gq0K-20zO6LRxIkjxomUUYFQLcwoJeWA==
age: 610628
X-Firefox-Spdy: h2
d2cgpm3z94jqsd.cloudfront.net/static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/jquery/ui-modules/resizable.min.js
200 OK 0 B URL HTTP/2 d2cgpm3z94jqsd.cloudfront.net/static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/jquery/ui-modules/resizable.min.js
IP
GET /static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/jquery/ui-modules/resizable.min.js HTTP/1.1
Host: d2cgpm3z94jqsd.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.parfymonline.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Sun, 05 Feb 2023 08:57:28 GMT
last-modified: Sun, 29 Jan 2023 07:18:46 GMT
vary: Accept-Encoding
etag: W/"63d61dd6-5220"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-headers: x-requested-with
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3VA4plcehJW0vsN5Ol6s9PlkuGnCY1ndCJ%2Bm0c5dpU2nXt%2BK9RecxcE9EBVBhvLUjruJoUC94q5adtsDjqZGVn8gfVsD7mFHJowZvhChmLBgTnpO5oMdtOT32%2BN2W2S17Y7kYmA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 794a7051fbbb72c7-LHR
x-cache: Miss from cloudfront
via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: j4C3tJw7yTsNS3vaTTLqfMJH07jfw_38LaKsZm2pbPvphVbNs1c5ww==
age: 610624
X-Firefox-Spdy: h2
d2cgpm3z94jqsd.cloudfront.net/static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/jquery/ui-modules/effect-drop.min.js
200 OK 0 B URL HTTP/2 d2cgpm3z94jqsd.cloudfront.net/static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/jquery/ui-modules/effect-drop.min.js
IP
GET /static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/jquery/ui-modules/effect-drop.min.js HTTP/1.1
Host: d2cgpm3z94jqsd.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.parfymonline.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Sun, 05 Feb 2023 08:57:29 GMT
last-modified: Sun, 29 Jan 2023 07:18:46 GMT
vary: Accept-Encoding
etag: W/"63d61dd6-48c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-headers: x-requested-with
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cEHhxQK0X0FeOxQ8SMdNvRy6S0siiYeab4x2d0if8GcJ7J%2FP25QMXKhYY2jIMt%2BQ1VTWkRpXyTlFol90OgKFjlmj%2FhMcT1L6iQO%2BLs%2BlP%2F5RZ8vgWy6UqgtmoEHXQn42sSkdpSI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 794a70544b61251a-LHR
x-cache: Miss from cloudfront
via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 1GIVAO9I2wCQ2sDFHxJ_Q19Z9EARuIIZxVGx2kJfMA2hQ6IAV9er9g==
age: 609263
X-Firefox-Spdy: h2
d2cgpm3z94jqsd.cloudfront.net/static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/jquery/ui-modules/effect-transfer.min.js
200 OK 0 B URL HTTP/2 d2cgpm3z94jqsd.cloudfront.net/static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/jquery/ui-modules/effect-transfer.min.js
IP
GET /static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/jquery/ui-modules/effect-transfer.min.js HTTP/1.1
Host: d2cgpm3z94jqsd.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.parfymonline.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Sun, 05 Feb 2023 08:57:29 GMT
last-modified: Sun, 29 Jan 2023 07:18:46 GMT
vary: Accept-Encoding
etag: W/"63d61dd6-413"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-headers: x-requested-with
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PpIixlhoWt32YzuuAHfBfjog2ucpvNatdIsaN3YB0JZmzguPXv866y%2FBhhdEjKc3wyOkTkoGhHIDFIMLUINzZbQ0hy9du82A7iqPrSB1ikzfiNKTDP3NE7Yi9GpuJk2C2QoFw8w%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 794a70547dfb778b-LHR
x-cache: Miss from cloudfront
via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: -N40o06kdhJhjjpS6j9nORAgiwEhzPjjO0YHPm0PyJG9GpsS0X-V2g==
age: 610622
X-Firefox-Spdy: h2
d2cgpm3z94jqsd.cloudfront.net/static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/jquery/ui-modules/autocomplete.min.js
200 OK 0 B URL HTTP/2 d2cgpm3z94jqsd.cloudfront.net/static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/jquery/ui-modules/autocomplete.min.js
IP
GET /static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/jquery/ui-modules/autocomplete.min.js HTTP/1.1
Host: d2cgpm3z94jqsd.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.parfymonline.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Sun, 05 Feb 2023 08:57:29 GMT
last-modified: Sun, 29 Jan 2023 07:18:46 GMT
vary: Accept-Encoding
etag: W/"63d61dd6-2551"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-headers: x-requested-with
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=I2kdmUYf66ZJRgwDkYv5FP4Zp%2FKRYLcwvMCEKDBP%2FwBZzIzMWEmU8qyMSCUJpMPQ6HEI%2Fk%2Fl6JnkU%2FwFp73OKBVauBQ0elzo3Ao74G5dtDzJR1oat0z3fILgpRT1jGe47SM3%2FZg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 794a70544b59732a-LHR
x-cache: Miss from cloudfront
via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: n6_N1SEcmHU6McuaoGEPJ__x7EdAmV0b2xwhH_DBJ9z68q7iROGPNA==
age: 610622
X-Firefox-Spdy: h2
d1pna5l3xsntoj.cloudfront.net/scripts/company/awAddGift.js
200 OK 0 B URL HTTP/2 d1pna5l3xsntoj.cloudfront.net/scripts/company/awAddGift.js
IP
GET /scripts/company/awAddGift.js HTTP/1.1
Host: d1pna5l3xsntoj.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.parfymonline.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
content-language: en-US
last-modified: Wed, 01 Feb 2023 20:50:58 GMT
accept-ranges: bytes
content-encoding: gzip
date: Sun, 05 Feb 2023 08:53:50 GMT
cache-control: public, max-age=600
expires: Sun, 05 Feb 2023 09:03:37 GMT
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 80d21802b1b80c40e55ccf83433b8eac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: tTbRCQ4UOO1bunBBgOehtL5plynm3mxHDZw53UyXxYCzsqSA9yaNsA==
age: 231
X-Firefox-Spdy: h2
d2cgpm3z94jqsd.cloudfront.net/static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/jquery/ui-modules/dialog.min.js
200 OK 0 B URL HTTP/2 d2cgpm3z94jqsd.cloudfront.net/static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/jquery/ui-modules/dialog.min.js
IP
GET /static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/jquery/ui-modules/dialog.min.js HTTP/1.1
Host: d2cgpm3z94jqsd.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.parfymonline.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Sun, 05 Feb 2023 08:57:28 GMT
last-modified: Sun, 29 Jan 2023 07:18:46 GMT
vary: Accept-Encoding
etag: W/"63d61dd6-367a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-headers: x-requested-with
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cmj%2Fcvd2A1UMrbx0F84I4Bv7rlYC0IojOyg4%2FOr%2BzxXtgxo6zhv37xq5m7pGJSCcHhqMf6gY%2FIkr1KXLJGP2mxN7nWMM9StvOonyFxnInSjzQDw%2B3xHIBPksAtnMTwhPWN2sSmk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 794a7051d84a385b-LHR
x-cache: Miss from cloudfront
via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: qQRh6qEPXj2XpO8KDHstFx_8MMe0mXYMjl2W4uDVfh77RsdwJ4D2Zw==
age: 610573
X-Firefox-Spdy: h2
d2cgpm3z94jqsd.cloudfront.net/media/theme_options/default/parfymonline-logotyp-370x56.png
200 OK 0 B URL HTTP/2 d2cgpm3z94jqsd.cloudfront.net/media/theme_options/default/parfymonline-logotyp-370x56.png
IP
GET /media/theme_options/default/parfymonline-logotyp-370x56.png HTTP/1.1
Host: d2cgpm3z94jqsd.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.parfymonline.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
date: Sun, 05 Feb 2023 08:57:27 GMT
cache-control: max-age=315360000
cf-bgj: imgq:100,h2pri
cf-polished: status=not_needed
access-control-allow-origin: *
etag: W/"5e94d661-1597"
expires: Thu, 31 Dec 2037 23:55:55 GMT
last-modified: Mon, 13 Apr 2020 21:15:13 GMT
vary: Accept
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=21NyC%2BLtrn%2BUMQYrU%2F1MO0py9%2FVfl6FzUncPv3HIXeS6UISifwr9kpWOHnNHHHsAFzRFchnHObZJw0%2BVVAPg9ro3M0S8IByFVSMI%2BeDyqr8ML4Qy7c%2B5G6SG%2Bkb8I%2FrM%2Bb6t1Ek%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 794a704c0ebe76e9-LHR
x-cache: Miss from cloudfront
via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: ox-j-ijPKU9vf4FFRh7D04_Q1jBwiXod5MHfqIPlXdwCdRrjMQug2g==
age: 846475
X-Firefox-Spdy: h2
d2cgpm3z94jqsd.cloudfront.net/static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/jquery/ui-modules/core.min.js
200 OK 0 B URL HTTP/2 d2cgpm3z94jqsd.cloudfront.net/static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/jquery/ui-modules/core.min.js
IP
GET /static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/jquery/ui-modules/core.min.js HTTP/1.1
Host: d2cgpm3z94jqsd.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.parfymonline.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Sun, 05 Feb 2023 08:57:28 GMT
last-modified: Sun, 29 Jan 2023 07:18:46 GMT
vary: Accept-Encoding
etag: W/"63d61dd6-15a2"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-headers: x-requested-with
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7fhk9D7soL9YWyNEeLyF0V6DBhYcCPub6%2BddqIbJqUXl5DiW1QtWaGOmZsFpo1jfA5WldIhSq9FU8ZSd%2BWpdtbwQ%2BGecbUUBQFNR3MuzZispt7qQQHAH1%2FTaonpj9rMKelSOnoo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 794a7051e91e732a-LHR
x-cache: Miss from cloudfront
via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: eEB5YNMlDEVkzIsxE0sXeSPL2HWe9H3Sf1c89fdo2gJmz8JvKmhMpw==
age: 610625
X-Firefox-Spdy: h2
d2cgpm3z94jqsd.cloudfront.net/static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/jquery/ui-modules/slider.min.js
200 OK 0 B URL HTTP/2 d2cgpm3z94jqsd.cloudfront.net/static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/jquery/ui-modules/slider.min.js
IP
GET /static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/jquery/ui-modules/slider.min.js HTTP/1.1
Host: d2cgpm3z94jqsd.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.parfymonline.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Sun, 05 Feb 2023 08:57:28 GMT
last-modified: Sun, 29 Jan 2023 07:18:46 GMT
vary: Accept-Encoding
etag: W/"63d61dd6-3397"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-headers: x-requested-with
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=55Sdf3UnoATa5IGEinP60sVpmeXR68MpWl0tIacjaDkslRC6A%2ByNTMXUF%2Bktyuz5reinltwlc9mu9gCoE9%2B5qeyhiN8gvtebjN41ND5edI45yfzVpZRwwWjlW5YKPchwdAtNXZw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 794a70526a2324d2-LHR
x-cache: Miss from cloudfront
via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 5IH5MFLTEBgj-M9ao3fokyZjoBrQzZ_9XwBUwe9RKVm76X6izEULWQ==
age: 609240
X-Firefox-Spdy: h2
core.helloretail.com/api/helloretailids/
200 OK 0 B URL HTTP/2 core.helloretail.com/api/helloretailids/
IP
GET /api/helloretailids/ HTTP/1.1
Host: core.helloretail.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.parfymonline.no
Connection: keep-alive
Referer: https://www.parfymonline.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 05 Feb 2023 08:57:28 GMT
content-type: application/json
access-control-allow-origin: https://www.parfymonline.no
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers, Accept-Encoding, User-Agent
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
strict-transport-security: max-age=31536000 ; includeSubDomains
x-frame-options: DENY
content-encoding: gzip
X-Firefox-Spdy: h2
www.parfymonline.no/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
200 OK 0 B URL HTTP/2 www.parfymonline.no/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
IP
GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1
Host: www.parfymonline.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.parfymonline.no/bjork-forma-textur-mini-100ml.html?utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Bj%C3%B6rk+Forma+Textur+Mini+100ml
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 08:57:27 GMT
content-type: application/javascript
last-modified: Fri, 03 Feb 2023 16:56:26 GMT
etag: W/"63dd3cba-302c"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jRi9fPvNlWfFVzowjKQfSG4FgRariGwCgn2KRWU9iKkTCGiIR24c7sxpFxhlDkiu6eEE2OEKMQGq3GXg%2FZLGEPMnkV7Mjoy3F7VFUfmVjtrc7a3yHhTXE5ql5BexFskZuUYZ%2FqMa"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 794a70499fe70b39-OSL
x-frame-options: DENY
x-content-type-options: nosniff
expires: Tue, 07 Feb 2023 08:57:27 GMT
cache-control: max-age=172800, public
content-encoding: gzip
X-Firefox-Spdy: h2
www.parfymonline.no/newsletter_popup/css/index/
200 OK 0 B URL HTTP/2 www.parfymonline.no/newsletter_popup/css/index/
IP
GET /newsletter_popup/css/index/ HTTP/1.1
Host: www.parfymonline.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.parfymonline.no/bjork-forma-textur-mini-100ml.html?utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Bj%C3%B6rk+Forma+Textur+Mini+100ml
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 08:57:27 GMT
content-type: text/css;charset=UTF-8
content-security-policy-report-only: font-src *.fontawesome.com maxcdn.bootstrapcdn.com fonts.gstatic.com fonts.googleapis.com *.yotpo.com *.googleapis.com *.gstatic.com *.cloudfront.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com *.yotpo.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.klarna.com *.yotpo.com *.facebook.com *.cloudfront.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com validator.swagger.io *.klarna.com *.klarnaevt.com *.facebook.com quickchart.io img.youtube.com *.yotpo.com *.cloudfront.com *.google.com *.google.se *.googletagmanager.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com video.google.com vimeo.com www.vimeo.com *.vimeocdn.com js.authorize.net jstest.authorize.net www.youtube.com *.klarna.com *.googletagmanager.com *.facebook.net *.avada.io *.yotpo.com *.cloudfront.com *.cloudfront.net *.adii.se *.ehandelscertifiering.se *.videoly.co 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com *.fontawesome.com maxcdn.bootstrapcdn.com fonts.gstatic.com fonts.googleapis.com *.yotpo.com *.googleapis.com *.cloudfront.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.cloudfront.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com *.klarnaevt.com *.google-analytics.com https://get.geojs.io *.avada.io *.yotpo.com *.cloudfront.com *.helloretail.com *.doubleclick.net 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';
content-security-policy: upgrade-insecure-requests;
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-cache-age: 408689
pragma: no-cache
expires: -1
cache-control: no-store, no-cache, must-revalidate, max-age=0
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=i0C2jkfWpy%2Fem9fRLQvK7wvDvbi4%2BA7OZyhx14iCde7TtJrwz%2B74dI2v6DFpa0zcw1IILddqKeXIM8Wf%2BML0%2FOjE%2FKODJJZkMntw8zmDDAvcefGhybeW9mLyGEJ%2FwSXvV7lZfzmk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 794a70499fe20b39-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
maxcdn.bootstrapcdn.com/font-awesome/latest/css/font-awesome.min.css
200 OK 0 B URL HTTP/2 maxcdn.bootstrapcdn.com/font-awesome/latest/css/font-awesome.min.css
IP
GET /font-awesome/latest/css/font-awesome.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.parfymonline.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 05 Feb 2023 08:57:27 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: SE
cdn-edgestorageid: 632, 718
last-modified: Mon, 25 Jan 2021 22:04:56 GMT
cdn-cachedat: 2021-03-10 20:26:23
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cache-control: public, max-age=31919000
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
cdn-requestid: 41f4151e67d75960478f0826b0345bfe
cdn-cache: HIT
cf-cache-status: HIT
age: 24898251
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 794a7049da37b506-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
d2cgpm3z94jqsd.cloudfront.net/static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/jquery/ui-modules/effect-explode.min.js
200 OK 0 B URL HTTP/2 d2cgpm3z94jqsd.cloudfront.net/static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/jquery/ui-modules/effect-explode.min.js
IP
GET /static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/jquery/ui-modules/effect-explode.min.js HTTP/1.1
Host: d2cgpm3z94jqsd.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.parfymonline.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Sun, 05 Feb 2023 08:57:29 GMT
last-modified: Sun, 29 Jan 2023 07:18:46 GMT
vary: Accept-Encoding
etag: W/"63d61dd6-57f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-headers: x-requested-with
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0N2g516Ro5VPxxQqmmRLmMn8uOj83hForXmsdpL%2BQ04YVXPrG3D6yzZ3R1CcR59Trdxrzl25hbjmKy%2BGyu6u8V9DyPkfdZEWiVTTBuI2Q%2FU5AhK181w6c1TBn9NHyt2pByhmw4M%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 794a70544d1d72c7-LHR
x-cache: Miss from cloudfront
via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: hM8e6At380byxq8vA4ooySxMz_kj8nrVBH8Mr1A37oG04g7jxN7dKQ==
age: 610479
X-Firefox-Spdy: h2
www.parfymonline.no/theme_options/css/index/
200 OK 0 B URL HTTP/2 www.parfymonline.no/theme_options/css/index/
IP
GET /theme_options/css/index/ HTTP/1.1
Host: www.parfymonline.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.parfymonline.no/bjork-forma-textur-mini-100ml.html?utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Bj%C3%B6rk+Forma+Textur+Mini+100ml
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 08:57:27 GMT
content-type: text/css;charset=UTF-8
content-security-policy-report-only: font-src *.fontawesome.com maxcdn.bootstrapcdn.com fonts.gstatic.com fonts.googleapis.com *.yotpo.com *.googleapis.com *.gstatic.com *.cloudfront.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com *.yotpo.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.klarna.com *.yotpo.com *.facebook.com *.cloudfront.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com validator.swagger.io *.klarna.com *.klarnaevt.com *.facebook.com quickchart.io img.youtube.com *.yotpo.com *.cloudfront.com *.google.com *.google.se *.googletagmanager.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com video.google.com vimeo.com www.vimeo.com *.vimeocdn.com js.authorize.net jstest.authorize.net www.youtube.com *.klarna.com *.googletagmanager.com *.facebook.net *.avada.io *.yotpo.com *.cloudfront.com *.cloudfront.net *.adii.se *.ehandelscertifiering.se *.videoly.co 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com *.fontawesome.com maxcdn.bootstrapcdn.com fonts.gstatic.com fonts.googleapis.com *.yotpo.com *.googleapis.com *.cloudfront.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.cloudfront.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com *.klarnaevt.com *.google-analytics.com https://get.geojs.io *.avada.io *.yotpo.com *.cloudfront.com *.helloretail.com *.doubleclick.net 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';
content-security-policy: upgrade-insecure-requests;
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-cache-age: 409335
pragma: no-cache
expires: -1
cache-control: no-store, no-cache, must-revalidate, max-age=0
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XYrRf%2FhZn43%2FQwNejBUr6OHHmqh3pu7C%2BayprbX1eyWZi%2FeU65eOcivna%2B%2BGmTsLQiEPnSsA2I6oos2XOW%2FlCq3O75abeSjYodFTBR4NoVRYXqMKG1i7zgfam0CYRhqtSDaMtqlT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 794a70499fe10b39-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
d2cgpm3z94jqsd.cloudfront.net/static/version1674976674/_cache/merged/b4f6f6dc1736286c8cdf1050a1fc927c.min.js
200 OK 0 B URL HTTP/2 d2cgpm3z94jqsd.cloudfront.net/static/version1674976674/_cache/merged/b4f6f6dc1736286c8cdf1050a1fc927c.min.js
IP
GET /static/version1674976674/_cache/merged/b4f6f6dc1736286c8cdf1050a1fc927c.min.js HTTP/1.1
Host: d2cgpm3z94jqsd.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.parfymonline.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Sun, 05 Feb 2023 08:57:27 GMT
last-modified: Sun, 29 Jan 2023 07:20:02 GMT
vary: Accept-Encoding
etag: W/"63d61e22-1c6033"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-headers: x-requested-with
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vLU38NaicZRl7GPXu7%2FJXcQ%2FvnIuDgI1SAhUeX464p8dpt3kurYX%2BtxLRDl2WXuA7NZQ7c3DKQ3p7wGP8Rls1gUBNrPXbCoAuYC7ngREG%2B6GitFI99W77tBRnjGMojXb8ArQ%2FHY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 794a704b7d91385f-LHR
x-cache: Miss from cloudfront
via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: T1aAdH05V66wKm60N3_zKbu_EpoAx9KBC2cihOus6SbJ_rr5P0oe5w==
age: 610532
X-Firefox-Spdy: h2
d2cgpm3z94jqsd.cloudfront.net/static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/jquery/ui-modules/widget.min.js
200 OK 0 B URL HTTP/2 d2cgpm3z94jqsd.cloudfront.net/static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/jquery/ui-modules/widget.min.js
IP
GET /static/version1674976674/frontend/TemplateMonster/theme007/nb_NO/jquery/ui-modules/widget.min.js HTTP/1.1
Host: d2cgpm3z94jqsd.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.parfymonline.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Sun, 05 Feb 2023 08:57:28 GMT
last-modified: Sun, 29 Jan 2023 07:18:46 GMT
vary: Accept-Encoding
etag: W/"63d61dd6-25ff"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-headers: x-requested-with
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PbOCDnwHyUDT5Z17GEaLuw1EUnxNtjoENGV9tA2LOpwNpBV9%2Foe6a%2BTLm82arqYIybYNqIgKA7IYHJ0n8IndLoMddnDQ2YWGsYGdNbv%2FY50nqupKibHzLgMN1OgYcQ6ZYk8cj7U%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 794a7051ddd3dc1d-LHR
x-cache: Miss from cloudfront
via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Yh5iToF9cP0FcuxgkvW3EbbUY8Wbd1WD2OgtVAsGrqUYqXqmEWEF-Q==
age: 610624
X-Firefox-Spdy: h2
192.187.111.220
93.184.220.29
13.51.192.216
104.18.32.68
23.36.76.226
95.211.116.26
188.114.98.234
3.248.158.178