Overview

URLredir.tealwinds.xyz/feed/click/?t1=128&tid=4&uid=3&subid=4.jp.android.webview-android&id=ebbd5d0bec59cfd0c9216abe2a7f0531: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&s1=63892f426db523155a5cd84e
IP 198.211.113.186 (United States)
ASN#14061 DIGITALOCEAN-ASN
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2022-12-01 22:49:09 UTC
StatusLoading report..
IDS alerts0
Blocklist alert5
urlquery alerts No alerts detected
Tags None

Domain Summary (36)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
pdxx-7fmavzpxk2xlm-4-2.lowsea.fun (1) 0 2022-08-21 08:58:43 UTC 2022-12-01 13:12:46 UTC 5.161.78.177 Unknown ranking
shopde.pricedeals.shop (3) 0 2021-12-22 12:50:32 UTC 2022-12-01 06:18:28 UTC 135.181.6.240 Unknown ranking
www.adlibris.com (21) 225821 2012-07-20 16:17:06 UTC 2020-04-28 07:20:02 UTC 23.32.107.239
ocsp.pki.goog (7) 175 2018-07-01 06:43:07 UTC 2020-05-02 20:58:16 UTC 142.250.74.131
redir.tealwinds.xyz (1) 0 2022-07-28 05:22:11 UTC 2022-12-01 19:21:32 UTC 198.211.113.186 Domain (tealwinds.xyz) ranked at: 178693
r3.o.lencr.org (8) 344 No data No data 23.36.76.226
leche.labtrffc.com (1) 0 2021-02-18 14:08:36 UTC 2022-12-01 06:39:39 UTC 51.83.143.92 Domain (labtrffc.com) ranked at: 87846
ocsp.usertrust.com (1) 899 2012-05-21 15:43:18 UTC 2021-11-02 18:02:09 UTC 172.64.155.188
sdk.privacy-center.org (3) 6220 2020-06-27 01:43:54 UTC 2022-12-01 17:33:14 UTC 54.230.111.7
www.google-analytics.com (2) 40 2012-10-03 01:04:21 UTC 2022-12-01 21:18:15 UTC 142.250.74.110
s.kk-resources.com (1) 38577 2018-08-25 06:32:23 UTC 2020-02-13 23:43:35 UTC 143.204.55.7
content-signature-2.cdn.mozilla.net (1) 1152 No data No data 34.160.144.191
ron.trffclb.com (1) 0 2022-09-30 13:04:48 UTC 2022-12-01 19:04:35 UTC 51.83.143.92 Unknown ranking
push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2020-05-03 10:09:39 UTC 44.237.51.86
samba.trffclb.com (3) 0 2022-09-30 11:20:25 UTC 2022-12-01 15:40:24 UTC 51.83.143.92 Unknown ranking
status.thawte.com (1) 5123 2019-03-13 17:00:46 UTC 2020-04-10 08:00:21 UTC 93.184.220.29
no-go.kelkoogroup.net (5) 0 No data No data 95.211.116.27 Domain (kelkoogroup.net) ranked at: 79339
www.googletagmanager.com (1) 75 2013-05-22 02:07:37 UTC 2022-12-01 18:48:44 UTC 172.217.21.168
www.google.com (1) 7 2016-03-22 03:56:07 UTC 2022-12-01 18:17:59 UTC 142.250.74.132
app.kuvio.io (1) 614001 2021-08-03 11:04:38 UTC 2022-12-01 19:10:02 UTC 54.230.111.87
ocsp.digicert.com (3) 86 2012-05-21 07:02:23 UTC 2020-05-02 20:58:10 UTC 93.184.220.29
dd.kelkoogroup.net (1) 0 No data No data 54.230.111.47 Domain (kelkoogroup.net) ranked at: 79339
s3.adlibris.com (21) 228228 2018-08-27 05:04:25 UTC 2020-03-27 07:54:56 UTC 23.32.107.239
s1.adlibris.com (1) 766280 2015-10-05 09:27:34 UTC 2020-04-09 19:20:12 UTC 23.32.107.239
img-getpocket.cdn.mozilla.net (6) 1631 2018-06-21 23:36:00 UTC 2020-02-19 04:43:25 UTC 34.120.237.76
cdn-eu.dynamicyield.com (2) 24961 No data No data 143.204.55.14
www.google.no (1) 25607 2016-04-05 19:50:59 UTC 2022-12-01 20:43:35 UTC 142.250.74.163
dipaka-ead.com (1) 0 2022-10-31 13:23:43 UTC 2022-12-01 13:58:55 UTC 3.212.50.125 Unknown ranking
googleads.g.doubleclick.net (1) 42 2021-02-20 15:43:32 UTC 2022-12-01 20:58:36 UTC 142.250.74.66
popcash.net (1) 11104 2017-07-19 16:41:38 UTC 2022-12-01 18:29:32 UTC 172.67.194.203
ps.popcash.net (2) 67692 No data No data 3.228.63.1
api-js.datadome.co (1) 8155 2017-10-11 14:14:56 UTC 2020-04-28 12:56:58 UTC 13.51.39.45
st-eu.dynamicyield.com (1) 25950 No data No data 54.230.111.122
firefox.settings.services.mozilla.com (2) 867 2020-06-04 20:08:41 UTC 2022-12-01 17:14:08 UTC 34.102.187.140
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-12-01 17:12:49 UTC 34.117.237.239
ocsp.pki.goog (7) 175 2018-07-01 06:43:07 UTC 2020-05-02 20:58:16 UTC

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-12-01 2 ps.popcash.net/go/134600/317194 Malware

mnemonic secure dns
 No alerts detected

Quad9 DNS
Scan Date Severity Indicator Comment
2022-12-01 2 trffclb.com Sinkholed
2022-12-01 2 trffclb.com Sinkholed
2022-12-01 2 trffclb.com Sinkholed
2022-12-01 2 trffclb.com Sinkholed


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 198.211.113.186
Date UQ / IDS / BL URL IP
2023-01-27 09:05:59 +0000 0 - 2 - 7 redir.blowingwind.xyz/feed/click/?t1=128&tid= (...) 198.211.113.186
2023-01-26 08:11:31 +0000 0 - 0 - 9 redir.blowingwind.xyz/feed/click/?t1=128&tid= (...) 198.211.113.186
2023-01-09 02:02:27 +0000 0 - 2 - 2 redir.blowingwind.xyz/click/invalid/?tid=8&su (...) 198.211.113.186
2023-01-07 15:55:50 +0000 0 - 2 - 3 redir.blowingwind.xyz/feed/click/?t1=128&tid= (...) 198.211.113.186
2023-01-07 07:44:58 +0000 0 - 2 - 7 redir.blowingwind.xyz/feed/click/?t1=128&tid= (...) 198.211.113.186


Last 5 reports on ASN: DIGITALOCEAN-ASN
Date UQ / IDS / BL URL IP
2023-01-28 13:25:46 +0000 0 - 0 - 22 www.gynaikologos-petropoulos.gr/amxr/amexnew/ (...) 138.68.88.86
2023-01-28 13:05:33 +0000 0 - 0 - 2 informazioni23-digitale01filiale23.shimueps.c (...) 159.203.121.61
2023-01-28 12:46:05 +0000 0 - 0 - 1 informazioni23-digitale01filiale23.shimueps.c (...) 159.203.121.61
2023-01-28 12:45:52 +0000 0 - 0 - 1 informazioni23-digitale01filiale23.shimueps.c (...) 159.203.121.61
2023-01-28 12:35:06 +0000 0 - 1 - 0 www.colegiomayaitzama.edu.gt/Ftpuserns/descar (...) 159.65.252.226


Last 5 reports on domain: tealwinds.xyz
Date UQ / IDS / BL URL IP
2023-01-25 06:47:03 +0000 0 - 0 - 1 21.us.tealwinds.xyz/feed/?link=true&tid=21&su (...) 23.235.251.114
2023-01-19 15:47:03 +0000 0 - 0 - 2 60.us.tealwinds.xyz/feed/?link=true&tid=60&su (...) 23.235.251.114
2023-01-15 22:17:10 +0000 0 - 0 - 1 60.us.tealwinds.xyz/feed/?link=true&tid=60&su (...) 23.235.251.114
2023-01-14 10:55:41 +0000 0 - 2 - 2 8.us.tealwinds.xyz/feed/?link=true&tid=8&subi (...) 23.235.251.114
2023-01-13 16:57:17 +0000 0 - 0 - 2 60.us.tealwinds.xyz/feed/?link=true&tid=60&su (...) 23.235.251.114


No other reports with similar screenshot

JavaScript

Executed Scripts (43)

Executed Evals (9)
#1 JavaScript::Eval (size: 348) - SHA256: 3919235b95a26bc29151ba4a08d72fa73bcf37c5cb87fadb125bef5070cb44d4
DYO.Q.Promise(function(resolve) {
    DY.API('callback', function() {
        var sku = DY.feedProperties.sku;
        DY.ServerUtil.getProductsData([sku], "", "", true, function(err, res) {
            var review = res[sku].productData.review;
            if (review.length > 0) {
                resolve(true);
            } else {
                resolve(false);
            }
        });
    });
});
#2 JavaScript::Eval (size: 222) - SHA256: 4694725a83af048f1f0f27d21c5a8b5d89b4e163a75ff7d929a7f3bdae296b0e
(function() {
    var a = window.location.host + window.location.pathname;
    if (-1 < a.search(/\/se(\/|$)/)) return "SEK";
    if (-1 < a.search(/\/no(\/|$)/)) return "NOK";
    if (-1 < a.search(/\/fi(\/|$)/) || -1 < a.search(/\/fi\/sv(\/|$)/)) return "EUR"
})();
#3 JavaScript::Eval (size: 205) - SHA256: f37175f45826a1b435464c1b900034348e62912f608162345b91b1d94cdf7461
(function() {
    for (var c = "shopperID", d = document.cookie.split(";"), b = 0; b < d.length; b++) {
        for (var a = d[b];
            " " == a.charAt(0);) a = a.substring(1);
        if (0 == a.indexOf(c)) return a.substring(c.length + 1, a.length)
    }
    return ""
})();
#4 JavaScript::Eval (size: 398) - SHA256: dacce63e51d5383917d642c5400a814e061af1a67d54dda5c6c459154c3ea90b
/**
 * USE AT YOUR OWN RISK
 * 1. This code is provided as an example to be used by a web developer.
 * 2. You must run thorough QA on this code before using it.
 * 3. DY will not accept responsibility or provide any support following usage of this code.
 */

DYO.Q.Promise(function(resolve) {
    DY.API('callback', function() {
        var stock = DY.feedProperties.in_stock;
        resolve(stock);
    });
});
#5 JavaScript::Eval (size: 1783) - SHA256: 93bd2f7068fa36e8da5ab46cf277e545f24fe2b4d0ba0c8c727531f78ec5f2fc
(function() {
    return function(c) {
        try {
            var h = [{
                    name: "externalEmail",
                    regex: /[^\/]{4}@(?!adlibris\.com)[^\/]{4}/gi,
                    group: ""
                }, {
                    name: "internalEmail",
                    regex: /[^\/]{4}@(?=adlibris\.com)[^\/]{4}/gi,
                    group: ""
                }, {
                    name: "telephone",
                    regex: /((tel=)|(telephone=)|(phone=)|(mobile=)|(mob=)(telefon=)|(mobil=)|(tele=))[\d\+\s][^&\/\?]+/gi,
                    group: ""
                }, {
                    name: "name",
                    regex: /((firstname=)|(lastname=)|(surname=)|(prosuppliername)|(username))[^&\/\?]+/gi,
                    group: ""
                }, {
                    name: "password",
                    regex: /((password=)|(passwd=)|(pass=)|(losen=)|(losenord=))[^&\/\?]+/gi,
                    group: ""
                }, {
                    name: "postCode",
                    regex: /((postcode=)|(zipcode=)|(zip=)|(postkod=)|(postnummer=))[^&\/\?]+/gi,
                    group: ""
                }, {
                    name: "id",
                    regex: /((mscssid=)|(shopperid=)|(tduid=)|(prosupplierid=)|(msclkid=)|(buyercookie=))[^&\/\?]+/gi,
                    group: ""
                }, {
                    name: "billingInfo",
                    regex: /((billingAddressParam=)|(shippingAddressParam=))[^&\/\?]+/gi,
                    group: ""
                }, {
                    name: "dibsData",
                    regex: /((dibs_verifyId=)|(dibs_MAC=)|(dibs_sum=)|(dibs_ccType=)|(dibs_ccPart=)|(dibs_ccPrefix=)|(dibs_expY=)|(dibs_acquirerResponseCode=)|(input_pageSet=)|(input_authOnly=)|(input_billingAddress=)|(input_customReturnUrl=)|(input_billingCity=)|(input_billingLastName=)|(input_billingCountry=)|(input_language=)|(input_referenceNo=)|(input_billingFirstName=)|(input_eMail=)|(input_data=)|(input_lng=)|(csrf=))[^&\/\?]+/gi,
                    group: ""
                }],
                k = c.get("sendHitTask"),
                e, b;
            c.set("sendHitTask", function(d) {
                e = c.get("hitPayload");
                b = e.replace(/(^\?)/, "").split("\x26").map(function(a) {
                    return a = a.split("\x3d"), this[a[0]] = a[1], this
                }.bind({}))[0];
                for (var f in b) {
                    var g = decodeURIComponent(b[f]);
                    h.forEach(function(a) {
                        g.match(a.regex) && (b[f] = encodeURIComponent(g.replace(a.regex, a.group + "[Removed PII - " + a.name + "]")))
                    })
                }
                d.set("hitPayload", Object.keys(b).map(function(a) {
                    return a + "\x3d" + b[a]
                }).join("\x26"), !0);
                k(d)
            })
        } catch (d) {}
    }
})();
#6 JavaScript::Eval (size: 92) - SHA256: 31862bd77bb1d44db1de8976b732ba44c52a6f2a8e9f4c60bf77102084db57f0
(function() {
    if ($("#cart").data("user")) return google_tag_manager["GTM-MFT3M8"].macro(9)
})();
#7 JavaScript::Eval (size: 93) - SHA256: bc4f4db874533ca4e8b9b5a9d87e8b0f3b6d10412c2edcf731b57a48bea8cf8d
(function() {
    if ($("#cart").data("user")) return google_tag_manager["GTM-MFT3M8"].macro(26)
})();
#8 JavaScript::Eval (size: 1157) - SHA256: 9ca103d7764563c69d95b8100399cbb1540c23b0ee6a829ce993a1f3c080073c
(function() {
    var head = document.getElementsByTagName("head")[0],
        elem = document.createElement("script"),
        id = 0,
        jsession = "";
    try {
        id = window.localStorage.getItem("_dyid").replace(/^(-?[0-9]+)(.*)/, "$1")
    } catch (e) {}
    try {
        jsession = window.sessionStorage.getItem("_dyjsession").replace(/^([a-zA-Z0-9]+)(.*)/, "$1")
    } catch (e) {}
    try {
        id = document.cookie.match(/(?:^|;)\s?_dyid=(.*?)(?:;|$)/i)[1]
    } catch (e) {}
    try {
        jsession = document.cookie.match(/(?:^|;)\s?_dyjsession=(.*?)(?:;|$)/i)[1]
    } catch (e) {}
    elem.setAttribute("type", "text/javascript"), elem.setAttribute("async", "true");
    var url = "//st-eu.dynamicyield.com/st?sec=" + DY.scsec + "&inHead=true&id=" + id + "&jsession=" + jsession + "&ref=" + encodeURIComponent(document.referrer) + "&scriptVersion=" + (window.DYO && "undefined" != typeof DYO.version ? DYO.version : "_UNKNOWN_"),
        dyIdServer = "";
    try {
        dyIdServer = document.cookie.match(/(?:^|;)\s?_dyid_server=(.*?)(?:;|$)/i)[1]
    } catch (e) {}
    url += "&dyid_server=" + dyIdServer;
    var context = encodeURIComponent(DYJSON.stringify(DY.recommendationContext || null));
    "null" !== context && (url += "&ctx=" + context);
    try {
        url = DYO.ActiveConsent.addStatusToQueryParams(url)
    } catch (e) {}
    elem.setAttribute("src", url), head.appendChild(elem);
})();
#9 JavaScript::Eval (size: 93) - SHA256: 27a9b2d582783cf9d98c2bd877621e11d3043f9455aa034f6bfc556450131d45
(function() {
    if ($("#cart").data("user")) return google_tag_manager["GTM-MFT3M8"].macro(23)
})();

Executed Writes (0)


HTTP Transactions (109)


Request Response
                                        
                                            GET /feed/click/?t1=128&tid=4&uid=3&subid=4.jp.android.webview-android&id=ebbd5d0bec59cfd0c9216abe2a7f0531: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&s1=63892f426db523155a5cd84e HTTP/1.1 
Host: redir.tealwinds.xyz
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         198.211.113.186
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
                                        
X-Powered-By: Express
Surrogate-Control: no-store
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate
Pragma: no-cache
Expires: 0
Location: https://leche.labtrffc.com/p.php?p=c:9qopki6xwqp07eckv&d=603611c5b7eaf46891533240?s=nxs_4
Vary: Accept
Content-Length: 230
Date: Thu, 01 Dec 2022 22:48:58 GMT
Connection: keep-alive
Keep-Alive: timeout=5


--- Additional Info ---
Magic:  HTML document, ASCII text, with no line terminators
Size:   230
Md5:    bf1ea261d68c3cae104a4434b2ed8723
Sha1:   5c2720cc951f801f2f7091867636e73490adcc78
Sha256: 67be18803779206c2595f60be36782945e42e8ba6ce70f8595a405c6861670d0
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "6035871C0DE6FF2D120921461207CFA32BC286E1FE78849CE74815FFBB9FF950"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7611
Expires: Fri, 02 Dec 2022 00:55:49 GMT
Date: Thu, 01 Dec 2022 22:48:58 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 1078
Cache-Control: max-age=129612
Date: Thu, 01 Dec 2022 22:48:58 GMT
Etag: "63888270-1d7"
Expires: Sat, 03 Dec 2022 10:49:10 GMT
Last-Modified: Thu, 01 Dec 2022 10:31:12 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Type, Backoff, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 01 Dec 2022 22:18:09 GMT
cache-control: public,max-age=3600
age: 1849
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    30db107dcf4380cef05efea409c2e6a3
Sha1:   96e6a306fbc07299aba64e5c14e2bfca35872fa9
Sha256: b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "39F6BB64420BCFC8F0B010168FD35B67732984CD0698409F04D5AE40410422AA"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2408
Expires: Thu, 01 Dec 2022 23:29:06 GMT
Date: Thu, 01 Dec 2022 22:48:58 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: /U/jcuiUHGhiLRihDPGIBS0a0KO+0sjdgzQA9jol0SmWlgvNpIPmc7m4uNP/bSyXW5U8h8sSbjQ=
x-amz-request-id: ZD20RXBY1YXYSP21
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 01 Dec 2022 22:46:28 GMT
age: 150
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    9ebddc2b260d081ebbefee47c037cb28
Sha1:   492bad62a7ca6a74738921ef5ae6f0be5edebf39
Sha256: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Thu, 01 Dec 2022 22:48:58 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "729D7C2013164D474D00F20CDA869D86DA1C9DE6E31832308FEC1EDA4FE940BA"
Last-Modified: Tue, 29 Nov 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11371
Expires: Fri, 02 Dec 2022 01:58:29 GMT
Date: Thu, 01 Dec 2022 22:48:58 GMT
Connection: keep-alive

                                        
                                            GET /p.php?p=c:9qopki6xwqp07eckv&d=603611c5b7eaf46891533240?s=nxs_4 HTTP/1.1 
Host: leche.labtrffc.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

search
                                         51.83.143.92
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Thu, 01 Dec 2022 22:48:58 GMT
Content-Length: 0
Connection: keep-alive
Round:
Raund:
Location: https://pdxx-7fmavzpxk2xlm-4-2.lowsea.fun/emw/v1/dt?sid=888b&k=bfb&url=&xrw=&lid=63892f5a2bf9bd1325343a17&fid=888fb

                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Pragma, Last-Modified, ETag, Alert, Expires, Retry-After, Cache-Control, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 01 Dec 2022 22:11:15 GMT
cache-control: public,max-age=3600
age: 2263
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0428F13FDCC1F316FCA253DD00F8E5C39216050638BDCBA5EBDECBBC330B9D6A"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6207
Expires: Fri, 02 Dec 2022 00:32:25 GMT
Date: Thu, 01 Dec 2022 22:48:58 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 1070
Cache-Control: max-age=124540
Date: Thu, 01 Dec 2022 22:48:59 GMT
Etag: "63886ea9-1d7"
Expires: Sat, 03 Dec 2022 09:24:39 GMT
Last-Modified: Thu, 01 Dec 2022 09:06:49 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /emw/v1/dt?sid=888b&k=bfb&url=&xrw=&lid=63892f5a2bf9bd1325343a17&fid=888fb HTTP/1.1 
Host: pdxx-7fmavzpxk2xlm-4-2.lowsea.fun
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

search
                                         5.161.78.177
HTTP/2 307 Temporary Redirect
content-type: text/html
                                        
date: Thu, 01 Dec 2022 22:48:59 GMT
content-length: 164
location: https://ron.trffclb.com/a.php?p=c:7omnig4vw718godha&d=6213b4b0ff85982fd6331e4b&s=888b
set-cookie: emwxcid_4_1=05458UnlmIAYVzEUahB2eHs3nsqP0hRaXw211gF2R4WQqOzVk4; expires=Fri, Dec 01 2023 22:48:59 GMT; Max-Age=31536000; path=/; domain=lowsea.fun; SameSite=Lax
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   164
Md5:    813f9846b49c0ada805648edf1b2fdbd
Sha1:   caa24890460f73e6a72bb49426351e67e83b053d
Sha256: 8f03491247cbfa8a2e60e0f7ec62d63b5070659f60383a1c81abeb2b20221be3
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "729D7C2013164D474D00F20CDA869D86DA1C9DE6E31832308FEC1EDA4FE940BA"
Last-Modified: Tue, 29 Nov 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11370
Expires: Fri, 02 Dec 2022 01:58:29 GMT
Date: Thu, 01 Dec 2022 22:48:59 GMT
Connection: keep-alive

                                        
                                            GET /a.php?p=c:7omnig4vw718godha&d=6213b4b0ff85982fd6331e4b&s=888b HTTP/1.1 
Host: ron.trffclb.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

search
                                         51.83.143.92
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Thu, 01 Dec 2022 22:48:59 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Round: 11hx4alk7e
Raund: 1zd
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document, ASCII text, with no line terminators
Size:   158
Md5:    c87457594ef907d482eb114aaab14561
Sha1:   a528b0dfb11add9a369a0ad1f1dd462ea345f86e
Sha256: 83c06d15d0da3d5a81c885e5c71ba39c406d464738a421bb732a69f1c7dabf72

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: GI9R6ou8TqTxOcTrGQFZ4g==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         44.237.51.86
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: ERaTUAn5S8JQDtfP5CkZNb/3f+M=

                                        
                                            GET /l.php?p=c:9qopki6xwqp07eckv&d=603611c5b7eaf46891533240&s=int_888b HTTP/1.1 
Host: samba.trffclb.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site

search
                                         51.83.143.92
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Thu, 01 Dec 2022 22:48:59 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: bt-603611c5b7eaf46891533240=63892f5b0bb1be6c9a5cbe16; expires=Sun, 04-Dec-2022 22:48:59 GMT; Max-Age=259200; path=/; domain=samba.trffclb.com; HttpOnly
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document, ASCII text, with very long lines (541)
Size:   494
Md5:    ddcd1c0555ffc7a9a956a9b92d2ba892
Sha1:   b80262fb4c813aea5661fa8aee0fe02cf60fa0f0
Sha256: 000551961e61a86c5e82322ee7863095c9ade632f96288463ab3cab23b5712fe

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /l.php?p=c:9qopki6xwqp07eckv&d=603611c5b7eaf46891533240&s=int_888b&bv=1 HTTP/1.1 
Host: samba.trffclb.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://samba.trffclb.com/l.php?p=c:9qopki6xwqp07eckv&d=603611c5b7eaf46891533240&s=int_888b
Cookie: bt-603611c5b7eaf46891533240=63892f5b0bb1be6c9a5cbe16
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin

search
                                         51.83.143.92
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Thu, 01 Dec 2022 22:48:59 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: bt-603611c5b7eaf46891533240=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=samba.trffclb.com; HttpOnly
Round: 119cdtswvl
Raund: 2si
Location: https://popcash.net/world/go/134600/317194


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5837
Cache-Control: max-age=106980
Date: Thu, 01 Dec 2022 22:48:59 GMT
Etag: "63881772-117"
Expires: Sat, 03 Dec 2022 04:31:59 GMT
Last-Modified: Thu, 01 Dec 2022 02:54:42 GMT
Server: ECS (amb/6B9C)
X-Cache: HIT
Content-Length: 279

                                        
                                            GET /favicon.ico HTTP/1.1 
Host: samba.trffclb.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://samba.trffclb.com/l.php?p=c:9qopki6xwqp07eckv&d=603611c5b7eaf46891533240&s=int_888b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         51.83.143.92
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Thu, 01 Dec 2022 22:48:59 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  data
Size:   20
Md5:    a4745abc5e7fdb89cc6df3069f3c6e69
Sha1:   74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
Sha256: d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /world/go/134600/317194 HTTP/1.1 
Host: popcash.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://samba.trffclb.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         172.67.194.203
HTTP/2 301 Moved Permanently
content-type: text/html
                                        
date: Thu, 01 Dec 2022 22:48:59 GMT
content-length: 162
location: http://ps.popcash.net/go/134600/317194
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SzqAQRw8Xo00AET8gN%2FNvMiD9VPwjxBjO3iQTOnD9z2%2FvIfJyF64mIkITAOZUmV1885Zfz6MonR6bH4w4%2F%2BbWhULGR1AZd7pBs5pvri5q9kr0%2FzHWZE%2BelfAFCWz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 772f5f9cd9ed1c06-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   162
Md5:    4f8e702cc244ec5d4de32740c0ecbd97
Sha1:   3adb1f02d5b6054de0046e367c1d687b6cdf7aff
Sha256: 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
                                        
                                            GET /go/134600/317194 HTTP/1.1 
Host: ps.popcash.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         3.228.63.1
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Content-Encoding: gzip
Date: Thu, 01 Dec 2022 22:48:59 GMT
Server: nginx
Vary: Accept-Encoding
Content-Length: 272
Connection: keep-alive


--- Additional Info ---
Magic:  HTML document, ASCII text
Size:   272
Md5:    a085154b1319e89acd2bf9d233963199
Sha1:   4e0b392b00408e7d04236a4c78f008113bd87ed1
Sha256: 6170346bda0acbaa4f4435a1580ebe302198d6425c87ed1b75827bc768a6460a

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /ad/ad?p=134600&w=317194&t=66afb63e753c247e&r=&vw=1280&vh=0 HTTP/1.1 
Host: ps.popcash.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ps.popcash.net/go/134600/317194
Upgrade-Insecure-Requests: 1

search
                                         3.228.63.1
HTTP/1.1 303 See Other
                                        
Date: Thu, 01 Dec 2022 22:49:00 GMT
Location: http://dipaka-ead.com/zcvisitor/588929b3-71ca-11ed-9009-0afe01b51ffb/7fcf9220-c93c-11e7-9820-0e06c6fba698?campaignid=b9792a50-4807-11ed-8e2b-128084d1ce51#pc151445
Server: nginx
Content-Length: 0
Connection: keep-alive

                                        
                                            GET /zcvisitor/588929b3-71ca-11ed-9009-0afe01b51ffb/7fcf9220-c93c-11e7-9820-0e06c6fba698?campaignid=b9792a50-4807-11ed-8e2b-128084d1ce51 HTTP/1.1 
Host: dipaka-ead.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ps.popcash.net/
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         3.212.50.125
HTTP/1.1 302
                                        
Date: Thu, 01 Dec 2022 22:49:00 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Headers: X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag
Location: https://shopde.pricedeals.shop/go.php?market=no&zr588929b371ca11ed90090afe01b51ffb1b45783092d14d85b885f5100cfd54e40694062a49ad966a43
Server: qevzxQph

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "DB4666B57D90A7DE22AE003A084DC78141F0476CD2EF6D928CE7E49B6ADBC7FC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12064
Expires: Fri, 02 Dec 2022 02:10:04 GMT
Date: Thu, 01 Dec 2022 22:49:00 GMT
Connection: keep-alive

                                        
                                            GET /go.php?market=no&zr588929b371ca11ed90090afe01b51ffb1b45783092d14d85b885f5100cfd54e40694062a49ad966a43 HTTP/1.1 
Host: shopde.pricedeals.shop
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ps.popcash.net/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         135.181.6.240
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Thu, 01 Dec 2022 22:49:00 GMT
Server: Apache/2.4.54 (Debian)
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 569
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (448)
Size:   569
Md5:    ac3a89dc4c10e18183c6516dfe26163e
Sha1:   ae4bee1dd02c5eec4724e08193e83441ee645974
Sha256: a166e24b4e2b11a784e59256e940488a7e511a9252e65105aa6d61b54ad842cf
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: shopde.pricedeals.shop
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shopde.pricedeals.shop/go.php?market=no&zr588929b371ca11ed90090afe01b51ffb1b45783092d14d85b885f5100cfd54e40694062a49ad966a43
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         135.181.6.240
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Thu, 01 Dec 2022 22:49:00 GMT
Server: Apache/2.4.54 (Debian)
Content-Length: 285
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   285
Md5:    7cd85cf7b8f9a014ae145681b1f5e73d
Sha1:   a574403ec64b443a802d0980e3bd368bafebe2d9
Sha256: cb5d0086c43932c164cc6892b9f762fb4128c182d3dbdbf476036a2783f0023b
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6391
Expires: Fri, 02 Dec 2022 00:35:31 GMT
Date: Thu, 01 Dec 2022 22:49:00 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6391
Expires: Fri, 02 Dec 2022 00:35:31 GMT
Date: Thu, 01 Dec 2022 22:49:00 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6edb00ee-3888-4974-ae1a-52ef18e62d0d.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 11402
x-amzn-requestid: 20c2c359-1e43-40c0-885d-1c90e76ea12b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGzJHu-IAMFbYA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891e7a-1d89722e767daa014b174a39;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:36:58 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: OJBnbjJB_kvPuJcePGnno3zI0CTWAzV-Osb2L1hPZZhlNYhFHWmLsA==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 21:51:33 GMT
etag: "aa944d10fe4a44b790b01ef62edc0f85a6d558e3"
age: 3447
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   11402
Md5:    1c80b8025242ddfcc816ec612456b99e
Sha1:   aa944d10fe4a44b790b01ef62edc0f85a6d558e3
Sha256: a9f060bc15738a3fe257e0c81a29e4611a89c273bcbb2765ce856d4e854a5f1f
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcca8556b-b044-489f-bc74-086aad62b062.webp HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7591
x-amzn-requestid: e179862e-f840-4e50-a9dc-09f325479b9a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGgMFRZIAMFl7g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891e01-676a1571459f2d83488f2765;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:34:57 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: oB5K_ZCWWwCltMx8FQSjDdXRMzSTSyRLSYSLAooQXuCrUxadLUiWkA==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 22:08:56 GMT
etag: "ffd0763f997e71a8c1458523fc17cafe8849dfdf"
age: 2404
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7591
Md5:    d147ccb10bda82b153a596c3c967cd6a
Sha1:   ffd0763f997e71a8c1458523fc17cafe8849dfdf
Sha256: 1cfeb90a4ba027195f903d938d4a0aac418a1c2f0b52215ec023263f15905971
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe0842726-801f-4648-a54d-c0cb2cf5348a.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 5675
x-amzn-requestid: a47e049a-6f76-4af4-8064-fd7722bcfb17
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGepGYEIAMFeQw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891df7-09e13afe27c4dc5b44e828be;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:34:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: U_3ah2pFrsQl9IVVqm9EVI99FnF79b9zOUFVBGX966JAjkDg6UF--A==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 21:47:56 GMT
age: 3664
etag: "898d50ac6e372609656fccee27de3d036bc0281c"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5675
Md5:    89502a302863c914b4de5e8c6a7f6846
Sha1:   898d50ac6e372609656fccee27de3d036bc0281c
Sha256: 9bc1f83d570d70b7e17e5de7a1546885851431ea989d915852ae7130387c422f
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b6b798b-d396-454d-9d5b-17b47827e4ad.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 2942
x-amzn-requestid: ed26679f-cd56-477f-9914-f9afbcaaeea6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGeoGFYoAMFWgA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891df7-4ec6bebe21656d5026456994;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:34:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Fw6nrporwF27NW0-vXpaolW79nDXLF2RyS-lqhhp1osHt7q98VpI3g==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 21:34:47 GMT
age: 4453
etag: "9fc7ab3a4eb2d36fd6df7e0267a26a47627d1704"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   2942
Md5:    b47431190f34eccf0a6efb98e2a32b7d
Sha1:   9fc7ab3a4eb2d36fd6df7e0267a26a47627d1704
Sha256: 08d3b6be354cafb70c20e6865788cb375adbf88d47711651fe1a3b855094daf2
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F449f29d0-f60b-4dec-8b5b-0a1971bab406.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10270
x-amzn-requestid: ac2d2825-2ec4-435e-9921-3ea6524df1dc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfG1nEvYoAMFliA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891e8a-4419423112b5723e3dba46ea;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:37:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: NQ21d2_5JO2Ym-LEnDecub9bK6wUyvM2zUf_XpfMGag83fVWlMjT8w==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 21:50:09 GMT
age: 3531
etag: "2cb4edc6b161c6d2d5b47aa498ae54e677966466"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10270
Md5:    4c7113338bc3310b13d23ca415c177e2
Sha1:   2cb4edc6b161c6d2d5b47aa498ae54e677966466
Sha256: 3a83adce869dd7eb064c583bf7ff93c57fabd7ea2da872f7d1f7d868b8a492e9
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F092f8542-1ed2-47c2-82aa-d5ef970a77ca.png HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 3711
x-amzn-requestid: 68772438-16c4-40ab-a40e-860425d8301c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGyhHVsIAMFmsQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891e76-21d27db6708228002e738938;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:36:54 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: JOCSKxy4WUDbS22Gd9BlyN1gmcDsDNlNWnT57KITGlNwfOe_Iaco9g==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 559326ad73233233a9e52cb9e8601ede.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 21:48:59 GMT
age: 3601
etag: "6c56f4015305eff04a99cec9758cd40bf4e5f704"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   3711
Md5:    89e1a735e16f55c78fa75ae434294029
Sha1:   6c56f4015305eff04a99cec9758cd40bf4e5f704
Sha256: 26e8b042c0bbef2c7f93f77451563cf6e12af282251ef864652574be2b2c5b15
                                        
                                            GET /redirect.php?u=aHR0cHM6Ly9uby1nby5rZWxrb29ncm91cC5uZXQvY3RsL2dvL29mZmVyc2VhcmNoR28_LnRzPTE2Njk4NjkyMTMwNjYmLnNpZz0wOFZvdzBjRTRaaFlHMjhjT1JPRTB6ZnhzaUUtJmFmZmlsaWF0aW9uSWQ9OTY5Nzk3MTQmY29tSWQ9NzU4NzMyMyZjb3VudHJ5PW5vJm9mZmVySWQ9N2M4M2UwMTY0NWIyOTExZDY1OWM2ZTI4NGRlY2IzZjAmc2VydmljZT0zNyZ0b2tlbklkPTMyZjM0MzEyLWYyMDMtNDA3MC04Njg1LTU0MmZiMTI3YjExMCZ3YWl0PXRydWUmYWRkZWRQYXJhbXM9dHJ1ZSZjdXN0b20xPTU0Jg HTTP/1.1 
Host: shopde.pricedeals.shop
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shopde.pricedeals.shop/go.php?market=no&zr588929b371ca11ed90090afe01b51ffb1b45783092d14d85b885f5100cfd54e40694062a49ad966a43
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin

search
                                         135.181.6.240
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Thu, 01 Dec 2022 22:49:01 GMT
Server: Apache/2.4.54 (Debian)
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 463
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (361)
Size:   463
Md5:    bb90e9a72988f468a79459f1077aef6a
Sha1:   7a5509d10c9671dd2fb63649e467aa20c849ab9a
Sha256: 47cb0589b0d86752b70e762e9153f2d9885857a80b61defc476b0733991d96bf
                                        
                                            POST / HTTP/1.1 
Host: status.thawte.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 3647
Cache-Control: max-age=157348
Date: Thu, 01 Dec 2022 22:49:02 GMT
Etag: "6388e4c3-1d7"
Expires: Sat, 03 Dec 2022 18:31:30 GMT
Last-Modified: Thu, 01 Dec 2022 17:30:43 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /ctl/go/offersearchGo?.ts=1669869213066&.sig=08Vow0cE4ZhYG28cOROE0zfxsiE-&affiliationId=96979714&comId=7587323&country=no&offerId=7c83e01645b2911d659c6e284decb3f0&service=37&tokenId=32f34312-f203-4070-8685-542fb127b110&wait=true&addedParams=true&custom1=54& HTTP/1.1 
Host: no-go.kelkoogroup.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shopde.pricedeals.shop/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         95.211.116.27
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Thu, 01 Dec 2022 22:49:02 GMT
leadId: dc1-kls-prod-ls-02.prod.dc1.kelkoo.net_1669934942710_909698
clickId: 107698147_1669934942704_9858287
country: no
Accept-CH: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory
X-DataDome: protected
Request-Time: PT0.023468S
X-Robots-Tag: noindex,nofollow
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: DENY
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: master-only
Content-Length: 27768
Set-Cookie: datadome=6b4uO8x~3rcidYL-2af1mFwLl1~CQpzCAzE4BAmE-chJSc93JmxKLNhxB8o~l~-hhr7NMyeNKdEP-tbYoq1Fb-yRYcO7y-zknbgpK90r6VrdwW_aBZVGKFnh5yJXJWet; Max-Age=31536000; Expires=Fri, 01 Dec 2023 22:49:02 GMT; SameSite=Lax; Path=/; Domain=.kelkoogroup.net; Secure kelkooID=a4c6293-184cfe109f1-2f180a; Max-Age=31536000; Expires=Fri, 01 Dec 2023 22:49:02 GMT; SameSite=None; Path=/; Domain=kelkoogroup.net; Secure; HTTPOnly
P3P: CP="Anything"
ApacheTracking: localhost
Keep-Alive: timeout=40, max=67
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (13002)
Size:   27768
Md5:    b340a8f749255827d1ea1de91c7ffd9e
Sha1:   5d6d550dfa212a3c313dfeb7cdee00d58c1f53bb
Sha256: 21d521786b0519162f6d816ff0846c786ab261ad94a1a23567507b0b9f2f4480
                                        
                                            GET /assets/images/p.png?country=no&k=612f7a9541cd6ea61eb554c0e4cff4376051d4e1eb650ae29385a9f5adef0594a8c1df9fff162c82ad9b20984d98b063e9d5ada16b66607780ec6a88a842e76d6d007198a7605e9b344631207619fc00467f8ae1a08324888d5f5e7f6098ffcef2f0dbb2b9561d27faa756b90e8de7a07b527c55f9e3562be78fb273b656da05573480ad50e24d99d7b65627311383dce50af5fb26478eff5cff8dccce535b0aa0e9fdde9770a5c8fb8fa0ec0c13f04804617657738c561f&leadId=dc1-kls-prod-ls-02.prod.dc1.kelkoo.net_1669934942710_909698&clickId=107698147_1669934942704_9858287 HTTP/1.1 
Host: no-go.kelkoogroup.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no-go.kelkoogroup.net/ctl/go/offersearchGo?.ts=1669869213066&.sig=08Vow0cE4ZhYG28cOROE0zfxsiE-&affiliationId=96979714&comId=7587323&country=no&offerId=7c83e01645b2911d659c6e284decb3f0&service=37&tokenId=32f34312-f203-4070-8685-542fb127b110&wait=true&addedParams=true&custom1=54&
Connection: keep-alive
Cookie: datadome=6b4uO8x~3rcidYL-2af1mFwLl1~CQpzCAzE4BAmE-chJSc93JmxKLNhxB8o~l~-hhr7NMyeNKdEP-tbYoq1Fb-yRYcO7y-zknbgpK90r6VrdwW_aBZVGKFnh5yJXJWet; kelkooID=a4c6293-184cfe109f1-2f180a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         95.211.116.27
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Thu, 01 Dec 2022 22:49:02 GMT
Request-Time: PT0.001459S
X-Robots-Tag: noindex,nofollow
Cache-Control: private, must-revalidate
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: DENY
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: master-only
Content-Length: 68
P3P: CP="Anything"
ApacheTracking: localhost
Keep-Alive: timeout=40, max=81
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced\012- data
Size:   68
Md5:    91e42db1c66c0b276abf6234dc50b2eb
Sha1:   c1986af3c26609b8b7d8933f99c51c1a89e9ea6b
Sha256: 63ef318d96b5d0d0ceba6e04a4e622b1158335cdc67c49e27839132c6f655058
                                        
                                            POST /fp?country=no&k=612f7a9541cd6ea61eb554c0e4cff4376051d4e1eb650ae29385a9f5adef0594a8c1df9fff162c82ad9b20984d98b063e9d5ada16b66607780ec6a88a842e76d6d007198a7605e9b344631207619fc00467f8ae1a08324888d5f5e7f6098ffcef2f0dbb2b9561d27faa756b90e8de7a07b527c55f9e3562be78fb273b656da05573480ad50e24d99d7b65627311383dce50af5fb26478eff5cff8dccce535b0aa0e9fdde9770a5c8fb8fa0ec0c13f04804617657738c561f&leadId=dc1-kls-prod-ls-02.prod.dc1.kelkoo.net_1669934942710_909698&clickId=107698147_1669934942704_9858287 HTTP/1.1 
Host: no-go.kelkoogroup.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no-go.kelkoogroup.net/ctl/go/offersearchGo?.ts=1669869213066&.sig=08Vow0cE4ZhYG28cOROE0zfxsiE-&affiliationId=96979714&comId=7587323&country=no&offerId=7c83e01645b2911d659c6e284decb3f0&service=37&tokenId=32f34312-f203-4070-8685-542fb127b110&wait=true&addedParams=true&custom1=54&
Content-Type: text/plain;charset=utf-8
Content-Length: 548
Origin: https://no-go.kelkoogroup.net
Connection: keep-alive
Cookie: datadome=6b4uO8x~3rcidYL-2af1mFwLl1~CQpzCAzE4BAmE-chJSc93JmxKLNhxB8o~l~-hhr7NMyeNKdEP-tbYoq1Fb-yRYcO7y-zknbgpK90r6VrdwW_aBZVGKFnh5yJXJWet; kelkooID=a4c6293-184cfe109f1-2f180a; _ga=GA1.2.1669677609.1669934941; _gid=GA1.2.453004333.1669934941
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         95.211.116.27
HTTP/1.1 200 OK
Content-Type: text/plain; charset=UTF-8
                                        
Date: Thu, 01 Dec 2022 22:49:02 GMT
Request-Time: PT0.003008S
X-Robots-Tag: noindex,nofollow
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: DENY
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: master-only
Content-Length: 0
P3P: CP="Anything"
ApacheTracking: localhost
Keep-Alive: timeout=40, max=99
Connection: Keep-Alive

                                        
                                            GET /tags.js HTTP/1.1 
Host: dd.kelkoogroup.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no-go.kelkoogroup.net/
Connection: keep-alive
Cookie: datadome=6b4uO8x~3rcidYL-2af1mFwLl1~CQpzCAzE4BAmE-chJSc93JmxKLNhxB8o~l~-hhr7NMyeNKdEP-tbYoq1Fb-yRYcO7y-zknbgpK90r6VrdwW_aBZVGKFnh5yJXJWet; kelkooID=a4c6293-184cfe109f1-2f180a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

search
                                         54.230.111.47
HTTP/2 200 OK
content-type: text/javascript
                                        
content-length: 43164
server: Apache
strict-transport-security: max-age=63072000; includeSubDomains; preload
last-modified: Thu, 17 Nov 2022 15:19:16 GMT
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
via: 1.1 615f944336054ae07b8e7c415ddbad44.cloudfront.net (CloudFront), 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
date: Thu, 01 Dec 2022 22:19:58 GMT
cache-control: max-age=3600, public
expires: Thu, 01 Dec 2022 23:19:58 GMT
etag: "33bf8-5edac1cc94a7f-gzip"
vary: Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: FRA60-P2, OSL50-P1
x-amz-cf-id: n4S0GzE54suDTmdUMUiec5MKZhgoLe7Th9bsvkQaC6d5CiZ9tBXeWg==
age: 1744
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65432)
Size:   43164
Md5:    1e9601b9f2fcd0d1d742e87fd046749c
Sha1:   88431bfdad7d8be4cf62396a57aebcec0de09827
Sha256: 4bcdd319b49ac3e4683e774aefe69157100f9ebee3bc428e425cfc93a7da9feb
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: no-go.kelkoogroup.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no-go.kelkoogroup.net/ctl/go/offersearchGo?.ts=1669869213066&.sig=08Vow0cE4ZhYG28cOROE0zfxsiE-&affiliationId=96979714&comId=7587323&country=no&offerId=7c83e01645b2911d659c6e284decb3f0&service=37&tokenId=32f34312-f203-4070-8685-542fb127b110&wait=true&addedParams=true&custom1=54&
Connection: keep-alive
Cookie: datadome=6b4uO8x~3rcidYL-2af1mFwLl1~CQpzCAzE4BAmE-chJSc93JmxKLNhxB8o~l~-hhr7NMyeNKdEP-tbYoq1Fb-yRYcO7y-zknbgpK90r6VrdwW_aBZVGKFnh5yJXJWet; kelkooID=a4c6293-184cfe109f1-2f180a; _ga=GA1.2.1669677609.1669934941; _gid=GA1.2.453004333.1669934941
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         95.211.116.27
HTTP/1.0 403 Forbidden
                                        
Server: BigIP
Connection: Keep-Alive
Content-Length: 0

                                        
                                            GET /redirect?country=no&k=612f7a9541cd6ea61eb554c0e4cff4376051d4e1eb650ae29385a9f5adef0594a8c1df9fff162c82ad9b20984d98b063e9d5ada16b66607780ec6a88a842e76d6d007198a7605e9b344631207619fc00467f8ae1a08324888d5f5e7f6098ffcef2f0dbb2b9561d27faa756b90e8de7a07b527c55f9e3562be78fb273b656da05573480ad50e24d99d7b65627311383dce50af5fb26478eff5cff8dccce535b0aa0e9fdde9770a5c8fb8fa0ec0c13f04804617657738c561f&leadId=dc1-kls-prod-ls-02.prod.dc1.kelkoo.net_1669934942710_909698&clickId=107698147_1669934942704_9858287&url=https%3A%2F%2Fwww.adlibris.com%2Fno%2Fbok%2Ftextiles-of-the-banjara-9780500518373%3Fkk%3Da4c6293-184cfe109f1-2f180a%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DKwon%252C%2BCharlotte%2BTextiles%2Bof%2Bthe%2BBanjara%2B&initiator=timeout HTTP/1.1 
Host: no-go.kelkoogroup.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no-go.kelkoogroup.net/ctl/go/offersearchGo?.ts=1669869213066&.sig=08Vow0cE4ZhYG28cOROE0zfxsiE-&affiliationId=96979714&comId=7587323&country=no&offerId=7c83e01645b2911d659c6e284decb3f0&service=37&tokenId=32f34312-f203-4070-8685-542fb127b110&wait=true&addedParams=true&custom1=54&
Connection: keep-alive
Cookie: datadome=6b4uO8x~3rcidYL-2af1mFwLl1~CQpzCAzE4BAmE-chJSc93JmxKLNhxB8o~l~-hhr7NMyeNKdEP-tbYoq1Fb-yRYcO7y-zknbgpK90r6VrdwW_aBZVGKFnh5yJXJWet; kelkooID=a4c6293-184cfe109f1-2f180a; _ga=GA1.2.1669677609.1669934941; _gid=GA1.2.453004333.1669934941
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin

search
                                         95.211.116.27
HTTP/1.1 303 See Other
Content-Type: text/plain
                                        
Date: Thu, 01 Dec 2022 22:49:03 GMT
leadId: dc1-kls-prod-ls-02.prod.dc1.kelkoo.net_1669934942710_909698
clickId: 107698147_1669934942704_9858287
country: no
Location: https://www.adlibris.com/no/bok/textiles-of-the-banjara-9780500518373?kk=a4c6293-184cfe109f1-2f180a&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Kwon%2C+Charlotte+Textiles+of+the+Banjara+
Accept-CH: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory
X-DataDome: protected
Request-Time: PT0.015599S
X-Robots-Tag: noindex,nofollow
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: DENY
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: master-only
Content-Length: 0
Set-Cookie: datadome=2~g~Co5VLwC_8rv76bkDTWlC5eGXN37oOao6gOwSO4VIUdOQ3-hycZMNXoa2tJVyjWy-JZPPaX1A2QYVyYY40IIfYYmqspCyYmDD2UYYNNVt4BNUAkJq8fP0ajsZn8Xl; Max-Age=31536000; Expires=Fri, 01 Dec 2023 22:49:03 GMT; SameSite=Lax; Path=/; Domain=.kelkoogroup.net; Secure
P3P: CP="Anything"
ApacheTracking: localhost
Keep-Alive: timeout=40, max=86
Connection: Keep-Alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.usertrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         172.64.155.188
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 01 Dec 2022 22:49:03 GMT
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 29 Nov 2022 13:51:16 GMT
Expires: Tue, 06 Dec 2022 13:51:15 GMT
Etag: "7a7636c312030713f423f96629a9024892748326"
Cache-Control: max-age=603350,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 859
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 772f5fb2defab512-OSL

                                        
                                            POST /js/ HTTP/1.1 
Host: api-js.datadome.co
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 3917
Origin: https://no-go.kelkoogroup.net
Connection: keep-alive
Referer: https://no-go.kelkoogroup.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         13.51.39.45
HTTP/2 200 OK
content-type: application/json;charset=utf-8
                                        
date: Thu, 01 Dec 2022 22:49:03 GMT
content-length: 236
server: DataDome
access-control-allow-origin: *
pragma: no-cache
cache-control: no-cache, no-store, must-revalidate
expires: 0
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   236
Md5:    b1696e29fd6376e092560ac7d71d01ac
Sha1:   82879991041fc947fb5300c6cd42d090fab589ab
Sha256: 252a447c5a3f284895835d63a2b77c5440a4080a435de1c14d71137f59f8b87e
                                        
                                            GET /no/bok/textiles-of-the-banjara-9780500518373?kk=a4c6293-184cfe109f1-2f180a&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Kwon%2C+Charlotte+Textiles+of+the+Banjara+ HTTP/1.1 
Host: www.adlibris.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no-go.kelkoogroup.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         23.32.107.239
HTTP/2 200 OK
content-type: text/html; charset=utf-8
                                        
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
expires: -1
vary: Accept-Encoding
x-ua-compatible: IE=Edge,chrome=1
content-length: 22538
feature-policy: geolocation 'none';midi 'none';microphone 'none';camera 'none';magnetometer 'none';gyroscope 'none';speaker 'self';fullscreen 'self';payment 'none';
referrer-policy: no-referrer-when-downgrade
x-content-type-options: nosniff
x-frame-options: sameorigin
x-xss-protection: 1; mode=block
strict-transport-security: max-age=14515200
date: Thu, 01 Dec 2022 22:49:03 GMT
set-cookie: culture=nb-NO; expires=Wed, 01-Dec-2032 22:49:03 GMT; path=/; secure notify=; expires=Wed, 01-Dec-2021 22:49:03 GMT; path=/; secure shopperID=B0DC23EE58764C3EAA812593D12FE1C4; expires=Wed, 01-Dec-2032 22:49:03 GMT; path=/; secure adss=nb-NO-f3e33d9d23804d77a70b393b8ccf05de-638055353432138763; expires=Mon, 30-Jan-2023 22:47:03 GMT; path=/; secure lastProductPageVisitedId=7c62cc5c-7cec-4a98-a553-41f1e03bac29; path=/; secure __RequestVerificationToken=fUih95H96Yj4i7qpLmGLGhcMm01SdmyFkpSoVGx4JLPWLEWfYQFUHQmJF2fIsLVsY2eFVmwjSNhvqvfW_SHAQDuZYcM1; path=/; HttpOnly BBN0167c7a4=019a302dc255012e7fcd6a1bbefcebba3b0965596997505d24812e1286607fa94448227e2485071f16252238d9df7d8d3a2948e320; Path=/; Secure; HTTPOnly
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (23529), with CRLF, LF line terminators
Size:   22538
Md5:    b591bee84217427c73d977d088716592
Sha1:   103e47f70fc5df53b7172108f784f9c54b46bd88
Sha256: 5f68783afce8b1221c541a5c9f2000d58319557d982fcd40506ce69a27c2f346
                                        
                                            GET /dist/0d878b14dafde44d1583b782a781a1275875833e/runtime.js HTTP/1.1 
Host: s3.adlibris.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.adlibris.com/no/bok/textiles-of-the-banjara-9780500518373?kk=a4c6293-184cfe109f1-2f180a&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Kwon%2C+Charlotte+Textiles+of+the+Banjara+
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         23.32.107.239
HTTP/2 200 OK
content-type: application/x-javascript
                                        
content-md5: 2wbOe/yzA8o2Xvcpn2+nHw==
last-modified: Mon, 21 Nov 2022 09:20:49 GMT
accept-ranges: bytes
etag: "0x8DACBA1ADFD6E24"
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
vary: Origin, Accept-Encoding
content-encoding: gzip
date: Thu, 01 Dec 2022 22:49:03 GMT
content-length: 1622
cache-control: max-age=5184000
access-control-allow-origin: https://www.adlibris.com
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (3547), with no line terminators
Size:   1622
Md5:    5ed523a1b8e8f9d907db0daf5f61bdee
Sha1:   925d3b327fb4d36746efdc67c69d351190d58cd7
Sha256: ca91f76bebf6ad1dda2e8a8d491acefa60e364d89f0dcefb34b9d4e66b41ccec
                                        
                                            GET /dist/0d878b14dafde44d1583b782a781a1275875833e/tryggEHandelSE.js HTTP/1.1 
Host: s3.adlibris.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.adlibris.com/no/bok/textiles-of-the-banjara-9780500518373?kk=a4c6293-184cfe109f1-2f180a&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Kwon%2C+Charlotte+Textiles+of+the+Banjara+
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         23.32.107.239
HTTP/2 200 OK
content-type: application/x-javascript
                                        
content-md5: unI8c4qtu/DDs9y9+spBOw==
last-modified: Mon, 21 Nov 2022 09:20:49 GMT
accept-ranges: bytes
etag: "0x8DACBA1ADFDE346"
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
vary: Origin, Accept-Encoding
content-encoding: gzip
date: Thu, 01 Dec 2022 22:49:03 GMT
content-length: 1184
cache-control: max-age=5184000
access-control-allow-origin: https://www.adlibris.com
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2901), with no line terminators
Size:   1184
Md5:    e84289ba6c81658e98ae143540cff5eb
Sha1:   040960ff2ebaa9874535b7d258a939f58e800696
Sha256: 446fceb783d5276d2d2680575a2fca40fac0d66367f6d2dea7cb1af4f22e9b5b
                                        
                                            GET /dist/0d878b14dafde44d1583b782a781a1275875833e/product-page.css HTTP/1.1 
Host: s3.adlibris.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.adlibris.com/no/bok/textiles-of-the-banjara-9780500518373?kk=a4c6293-184cfe109f1-2f180a&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Kwon%2C+Charlotte+Textiles+of+the+Banjara+
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         23.32.107.239
HTTP/2 200 OK
content-type: text/css
                                        
content-md5: lD15JiT/I5MrMZbv3wn3aw==
last-modified: Mon, 21 Nov 2022 09:20:49 GMT
accept-ranges: bytes
etag: "0x8DACBA1ADFCAAF2"
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
vary: Origin, Accept-Encoding
content-encoding: gzip
date: Thu, 01 Dec 2022 22:49:03 GMT
content-length: 10410
cache-control: max-age=5184000
access-control-allow-origin: https://www.adlibris.com
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   10410
Md5:    1188bf05401968c5552a47f6cf7f12da
Sha1:   d8d9e1ad21d3d473a4127d02b17d0b5b4df8d615
Sha256: ba908e6bef37290d4bc59cd1acc96d40eaa7a57a29e203c15fffd812c42af92e
                                        
                                            GET /dist/0d878b14dafde44d1583b782a781a1275875833e/global-styling.css HTTP/1.1 
Host: s3.adlibris.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.adlibris.com/no/bok/textiles-of-the-banjara-9780500518373?kk=a4c6293-184cfe109f1-2f180a&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Kwon%2C+Charlotte+Textiles+of+the+Banjara+
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         23.32.107.239
HTTP/2 200 OK
content-type: text/css
                                        
content-md5: WLMgiEmREVR5FLTF2ZcLjA==
last-modified: Mon, 21 Nov 2022 09:20:49 GMT
accept-ranges: bytes
etag: "0x8DACBA1ADF9C52C"
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
vary: Origin, Accept-Encoding
content-encoding: gzip
date: Thu, 01 Dec 2022 22:49:03 GMT
content-length: 15841
cache-control: max-age=5184000
access-control-allow-origin: https://www.adlibris.com
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   15841
Md5:    0dae9ee1c03d5412682609de12d23466
Sha1:   33dd2190a1a34e690a6bd202597f662b684ef6cd
Sha256: 0bb9cd94baae70aa0748922c8539f206ac4311d3372e3bd67f8756d38ef11ad2
                                        
                                            GET /dist/0d878b14dafde44d1583b782a781a1275875833e/newGlobals.js HTTP/1.1 
Host: s3.adlibris.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.adlibris.com/no/bok/textiles-of-the-banjara-9780500518373?kk=a4c6293-184cfe109f1-2f180a&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Kwon%2C+Charlotte+Textiles+of+the+Banjara+
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         23.32.107.239
HTTP/2 200 OK
content-type: application/x-javascript
                                        
content-md5: 6Ywbc4K6bqJgImyQDxKDTg==
last-modified: Mon, 21 Nov 2022 09:20:49 GMT
accept-ranges: bytes
etag: "0x8DACBA1ADFFDEC3"
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
vary: Origin, Accept-Encoding
content-encoding: gzip
date: Thu, 01 Dec 2022 22:49:03 GMT
content-length: 38478
cache-control: max-age=5184000
access-control-allow-origin: https://www.adlibris.com
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   38478
Md5:    8ba5d33a02a40a5863bf0481f717b8b8
Sha1:   66d8a2ed9a4f1ca61193cab6847265b570b1f578
Sha256: bfdb622f73336ff1c9d0e9978a838a29e081e156683ed5686f2f4b1fd7c4aa62
                                        
                                            GET /dist/long_term_cache202011021056/Roboto-Regular.woff2 HTTP/1.1 
Host: s3.adlibris.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.adlibris.com/no/bok/textiles-of-the-banjara-9780500518373?kk=a4c6293-184cfe109f1-2f180a&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Kwon%2C+Charlotte+Textiles+of+the+Banjara+
Origin: https://www.adlibris.com
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site

search
                                         23.32.107.239
HTTP/2 200 OK
content-type: application/octet-stream
                                        
content-length: 15736
content-md5: R5lw/7dPIRcxf50k2eMX/g==
last-modified: Mon, 21 Nov 2022 14:24:32 GMT
accept-ranges: bytes
etag: "0x8DACBCC1BAA64EB"
vary: Origin
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
date: Thu, 01 Dec 2022 22:49:03 GMT
cache-control: max-age=5184000
access-control-allow-origin: https://www.adlibris.com
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 15736, version 1.0\012- data
Size:   15736
Md5:    479970ffb74f2117317f9d24d9e317fe
Sha1:   81c796737cbe44d4a719777f0aff14b73a3efb1e
Sha256: 48c3fa6f86c54f1d9bb519220713d4b0a1f8cd1a589a3c03b9fa82e98ecb13e3
                                        
                                            GET /56b72b28-6231-4423-82bd-ce2bebfcc2db/loader.js?target_type=notice&target=9H2NwbqT HTTP/1.1 
Host: sdk.privacy-center.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.adlibris.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         54.230.111.7
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
content-length: 7718
server: CloudFront
date: Thu, 01 Dec 2022 21:58:33 GMT
x-didomi-remote-config-source: Lambda
content-encoding: gzip
cache-control: max-age=7200, public
etag: "492a9082a0981880daf9d0644133c0ce"
x-cache: Hit from cloudfront
via: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: XD0F4AKwFvU31Y2bWv9XfeXihK4qU_XaKIA52r20ec4CoQaJzIU4Cw==
age: 3030
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (22878), with no line terminators
Size:   7718
Md5:    b9135dca3a1083b8a45305ba1f960cec
Sha1:   63544f5e41b4087c1d68dd340110234ffab93ecf
Sha256: 490698611a66f88469e30a90f1114ea3f0301d05dca1c8308b68494678ede0e3
                                        
                                            GET /dist/long_term_cache202011021056/Montserrat-Bold.woff2 HTTP/1.1 
Host: s3.adlibris.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.adlibris.com/no/bok/textiles-of-the-banjara-9780500518373?kk=a4c6293-184cfe109f1-2f180a&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Kwon%2C+Charlotte+Textiles+of+the+Banjara+
Origin: https://www.adlibris.com
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site

search
                                         23.32.107.239
HTTP/2 200 OK
content-type: application/octet-stream
                                        
content-length: 19480
content-md5: Odk89njHQPn2srHP3jS+4w==
last-modified: Mon, 21 Nov 2022 14:24:32 GMT
accept-ranges: bytes
etag: "0x8DACBCC1BA02D44"
vary: Origin
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
date: Thu, 01 Dec 2022 22:49:03 GMT
cache-control: max-age=5184000
access-control-allow-origin: https://www.adlibris.com
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 19480, version 1.0\012- data
Size:   19480
Md5:    39d93cf678c740f9f6b2b1cfde34bee3
Sha1:   0d98d755bbbdfbb0943665c2c2a644005952e4cd
Sha256: 4545eb1dec25fe868d19dc292d417d8a9e41c0276d75a4eaf524a9db21aa705a
                                        
                                            GET /dist/long_term_cache202011021056/Roboto-Bold.woff2 HTTP/1.1 
Host: s3.adlibris.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.adlibris.com/no/bok/textiles-of-the-banjara-9780500518373?kk=a4c6293-184cfe109f1-2f180a&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Kwon%2C+Charlotte+Textiles+of+the+Banjara+
Origin: https://www.adlibris.com
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site

search
                                         23.32.107.239
HTTP/2 200 OK
content-type: application/octet-stream
                                        
content-length: 15816
content-md5: JzWjpptQn681d6/SW99VLg==
last-modified: Mon, 21 Nov 2022 14:24:32 GMT
accept-ranges: bytes
etag: "0x8DACBCC1BA953A7"
vary: Origin
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
date: Thu, 01 Dec 2022 22:49:03 GMT
cache-control: max-age=5184000
access-control-allow-origin: https://www.adlibris.com
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 15816, version 1.0\012- data
Size:   15816
Md5:    2735a3a69b509faf3577afd25bdf552e
Sha1:   8621aff863b67040010ccc183da5b9079ce6fd1d
Sha256: b4d07892cde715d50bb69c1982df496385d1dfd8f9d1867c31f19a3c8634cfae
                                        
                                            GET /dist/long_term_cache202011021056/Montserrat-Regular.woff2 HTTP/1.1 
Host: s3.adlibris.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.adlibris.com/no/bok/textiles-of-the-banjara-9780500518373?kk=a4c6293-184cfe109f1-2f180a&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Kwon%2C+Charlotte+Textiles+of+the+Banjara+
Origin: https://www.adlibris.com
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site

search
                                         23.32.107.239
HTTP/2 200 OK
content-type: application/octet-stream
                                        
content-length: 19172
content-md5: vDqpXcoI9f7lKR40lZwnvA==
last-modified: Mon, 21 Nov 2022 14:24:32 GMT
accept-ranges: bytes
etag: "0x8DACBCC1BA0062F"
vary: Origin
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
date: Thu, 01 Dec 2022 22:49:03 GMT
cache-control: max-age=5184000
access-control-allow-origin: https://www.adlibris.com
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 19172, version 1.0\012- data
Size:   19172
Md5:    bc3aa95dca08f5fee5291e34959c27bc
Sha1:   7b7c670ef2f0ba7fc0ce6437e523ccbdc847fde2
Sha256: 8767f01caa430c5bd4e3b008a8e9dfe022156a4e91a23c394fdcb05c267f1b94
                                        
                                            GET /dist/long_term_cache202011021056/material-icons.woff HTTP/1.1 
Host: s3.adlibris.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.adlibris.com/no/bok/textiles-of-the-banjara-9780500518373?kk=a4c6293-184cfe109f1-2f180a&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Kwon%2C+Charlotte+Textiles+of+the+Banjara+
Origin: https://www.adlibris.com
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site

search
                                         23.32.107.239
HTTP/2 200 OK
content-type: application/octet-stream
                                        
content-length: 9620
content-md5: Q5bqb5iyUuJCh6IXbN2m0g==
last-modified: Mon, 21 Nov 2022 14:24:32 GMT
accept-ranges: bytes
etag: "0x8DACBCC1B9E58BF"
vary: Origin
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
date: Thu, 01 Dec 2022 22:49:03 GMT
cache-control: max-age=5184000
access-control-allow-origin: https://www.adlibris.com
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format, TrueType, length 9620, version 1.0\012- data
Size:   9620
Md5:    4396ea6f98b252e24287a2176cdda6d2
Sha1:   b5f9935a5848a312f6339235a53ee47116b9fa93
Sha256: 5f37540287cda5664b0b909b33178ef31367f42f00355d3ad383ad68b3ab8973
                                        
                                            GET /dist/long_term_cache202011021056/Montserrat-SemiBold.woff2 HTTP/1.1 
Host: s3.adlibris.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.adlibris.com/no/bok/textiles-of-the-banjara-9780500518373?kk=a4c6293-184cfe109f1-2f180a&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Kwon%2C+Charlotte+Textiles+of+the+Banjara+
Origin: https://www.adlibris.com
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site

search
                                         23.32.107.239
HTTP/2 200 OK
content-type: application/octet-stream
                                        
content-length: 19264
content-md5: b7G1Yj5SjifBhlj+z17g7g==
last-modified: Mon, 21 Nov 2022 14:24:32 GMT
accept-ranges: bytes
etag: "0x8DACBCC1B9FDF28"
vary: Origin
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
date: Thu, 01 Dec 2022 22:49:03 GMT
cache-control: max-age=5184000
access-control-allow-origin: https://www.adlibris.com
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 19264, version 1.0\012- data
Size:   19264
Md5:    6fb1b5623e528e27c18658fecf5ee0ee
Sha1:   b651cb01dfd237d1ea67a88e13f7e7a65ebdda34
Sha256: d10e701c44ab739c7d711b6483def0c6cd47e5a3d04eda1df2c5cbb08f21d81a
                                        
                                            POST /collect?v=1&_v=j96&t=pageview&_s=1&dl=https%3A%2F%2Fno-go.kelkoogroup.net%2Fctl%2Fgo%2FoffersearchGo%3F.ts%3D1669869213066%26.sig%3D08Vow0cE4ZhYG28cOROE0zfxsiE-%26affiliationId%3D96979714%26comId%3D7587323%26country%3Dno%26offerId%3D7c83e01645b2911d659c6e284decb3f0%26service%3D37%26tokenId%3D32f34312-f203-4070-8685-542fb127b110%26wait%3Dtrue%26addedParams%3Dtrue%26custom1%3D54%26&dr=https%3A%2F%2Fshopde.pricedeals.shop%2F&dp=%2F96979714%7C7587323%7C&ul=en-us&de=UTF-8&dt=Du%20sendes%20videre%20til%20Adlibris&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=QACAAAABAAAAAC~&cid=1669677609.1669934941&tid=UA-168544891-6&_gid=453004333.1669934941&_r=1&cd1=96979714&cd2=dc1-kls-prod-ls-02.prod.dc1.kelkoo.net_1669934942710_909698&cd3=7587323&cd4=a4c6293-184cfe109f1-2f180a&cd5=&cd6=96979714%7C7587323%7C&z=1562948305 HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://no-go.kelkoogroup.net
Connection: keep-alive
Referer: https://no-go.kelkoogroup.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0

search
                                         142.250.74.110
HTTP/2 200 OK
content-type: image/gif
                                        
access-control-allow-origin: https://no-go.kelkoogroup.net
date: Thu, 01 Dec 2022 22:49:03 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
x-content-type-options: nosniff
access-control-allow-credentials: true
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 35
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 01 Dec 2022 22:49:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 01 Dec 2022 22:49:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /sdk.b0923c718d4f102971bad68b2699543d26e1e20a.js HTTP/1.1 
Host: sdk.privacy-center.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.adlibris.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         54.230.111.7
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
date: Mon, 28 Nov 2022 08:26:51 GMT
last-modified: Mon, 28 Nov 2022 08:22:18 GMT
etag: W/"e86c6609c35215c097c30717825710a0"
x-amz-server-side-encryption: AES256
x-amz-meta-s3cmd-attrs: atime:1669623408/ctime:1669623408/gid:0/gname:root/md5:e86c6609c35215c097c30717825710a0/mode:33188/mtime:1669623408/uid:0/uname:root
cache-control: public, max-age=31536000
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: _0XJvzdivzyOkaLl0Khc6222g7-j3hjECy9dpRfFwSv3DL7bmhfb8A==
age: 310933
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   97692
Md5:    7f597b9378121ce459a9e470c9748b43
Sha1:   4646ca300f0a3ad43a1b1d833d15817f6f0743b8
Sha256: 005257ac96be36b97f1c0517f923c27d58a0eced411a1abfb298dc33d457de3a
                                        
                                            GET /dist/long_term_cache202011021056/ic_expand_more_black_24px.svg HTTP/1.1 
Host: s3.adlibris.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://s3.adlibris.com/dist/0d878b14dafde44d1583b782a781a1275875833e/global-styling.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         23.32.107.239
HTTP/2 200 OK
content-type: image/svg+xml
                                        
content-length: 177
content-md5: bXcKCgSRP7JYuVjxhuVfFA==
last-modified: Mon, 21 Nov 2022 14:24:32 GMT
accept-ranges: bytes
etag: "0x8DACBCC1B9AFDE2"
vary: Origin
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
date: Thu, 01 Dec 2022 22:49:04 GMT
cache-control: max-age=5184000
access-control-allow-origin: https://www.adlibris.com
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with no line terminators
Size:   177
Md5:    6d770a0a04913fb258b958f186e55f14
Sha1:   2abadf438ec1cb9c55e4f2cf721dcbb0bd8ee6f5
Sha256: 1a12e61597dc62e14359652da535d2ce1ba74095cce13420be35309f37777094
                                        
                                            GET /gtm.js?id=GTM-MFT3M8 HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.adlibris.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         172.217.21.168
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 01 Dec 2022 22:49:03 GMT
expires: Thu, 01 Dec 2022 22:49:03 GMT
cache-control: private, max-age=900
last-modified: Thu, 01 Dec 2022 22:13:37 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 109914
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (38442)
Size:   109914
Md5:    4fbfcfe362e9063b2625c6e5a496b3b3
Sha1:   521b5a223f939498843b0f18b89df7bbba3a411c
Sha256: 87bc9d01cf5a347df3244d6f250949554ece2b61ad429b80eadc70adf2ce7c52
                                        
                                            GET /dist/long_term_cache202011021056/adlibris-icons.woff HTTP/1.1 
Host: s3.adlibris.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.adlibris.com
Connection: keep-alive
Referer: https://s3.adlibris.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         23.32.107.239
HTTP/2 200 OK
content-type: application/octet-stream
                                        
content-length: 1228
content-md5: EaKtsFjdC7XAlMIKeX1UdA==
last-modified: Mon, 21 Nov 2022 14:24:32 GMT
accept-ranges: bytes
etag: "0x8DACBCC1B8F66DC"
vary: Origin
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
date: Thu, 01 Dec 2022 22:49:04 GMT
cache-control: max-age=5184000
access-control-allow-origin: https://www.adlibris.com
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format, CFF, length 1228, version 0.0\012- data
Size:   1228
Md5:    11a2adb058dd0bb5c094c20a797d5474
Sha1:   7b1af4c3164468d067bf4b75974341180f620778
Sha256: b64cff2c8015379ecc474fff7420418241d95b2fb99f3e6b234f48f2017b2371
                                        
                                            GET /dist/0d878b14dafde44d1583b782a781a1275875833e/2.css HTTP/1.1 
Host: s3.adlibris.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.adlibris.com/no/bok/textiles-of-the-banjara-9780500518373?kk=a4c6293-184cfe109f1-2f180a&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Kwon%2C+Charlotte+Textiles+of+the+Banjara+
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         23.32.107.239
HTTP/2 200 OK
content-type: text/css
                                        
content-md5: 0bWPtwn4+VBu1nTgu9rjBQ==
last-modified: Mon, 21 Nov 2022 09:20:49 GMT
accept-ranges: bytes
etag: "0x8DACBA1ADF2252D"
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
vary: Origin, Accept-Encoding
content-encoding: gzip
date: Thu, 01 Dec 2022 22:49:04 GMT
content-length: 1476
cache-control: max-age=5184000
access-control-allow-origin: https://www.adlibris.com
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (7283)
Size:   1476
Md5:    cd56b28b700da72293e1c64e21fb6296
Sha1:   a06360b489b3ce9ff6065283330e6e47303dbf07
Sha256: 27e32cf64aa595c08aa6ff765a0f3db9628068dc4228c462f29a02876a3aacea
                                        
                                            GET /dist/0d878b14dafde44d1583b782a781a1275875833e/2.js HTTP/1.1 
Host: s3.adlibris.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.adlibris.com/no/bok/textiles-of-the-banjara-9780500518373?kk=a4c6293-184cfe109f1-2f180a&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Kwon%2C+Charlotte+Textiles+of+the+Banjara+
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         23.32.107.239
HTTP/2 200 OK
content-type: application/x-javascript
                                        
content-md5: cyg2kmALq4oTNmsRW7iCQQ==
last-modified: Mon, 21 Nov 2022 09:20:49 GMT
accept-ranges: bytes
etag: "0x8DACBA1ADF30F65"
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
vary: Origin, Accept-Encoding
content-encoding: gzip
date: Thu, 01 Dec 2022 22:49:04 GMT
content-length: 4530
cache-control: max-age=5184000
access-control-allow-origin: https://www.adlibris.com
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (16683), with no line terminators
Size:   4530
Md5:    2c7bc63ead4f68b512a6f7ae30126084
Sha1:   2ebc777f470287558972f0e844503a9d13120297
Sha256: fe8400978a55037b97fa0f90b8f2b4eb602b282d34fc6488721a5c8e1ff7c7fe
                                        
                                            GET /dist/0d878b14dafde44d1583b782a781a1275875833e/46.js HTTP/1.1 
Host: s3.adlibris.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.adlibris.com/no/bok/textiles-of-the-banjara-9780500518373?kk=a4c6293-184cfe109f1-2f180a&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Kwon%2C+Charlotte+Textiles+of+the+Banjara+
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         23.32.107.239
HTTP/2 200 OK
content-type: application/x-javascript
                                        
content-md5: sEx73rlt2nuHT+NBPU97uQ==
last-modified: Mon, 21 Nov 2022 09:20:49 GMT
accept-ranges: bytes
etag: "0x8DACBA1AE022862"
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
vary: Origin, Accept-Encoding
content-encoding: gzip
date: Thu, 01 Dec 2022 22:49:04 GMT
content-length: 33017
cache-control: max-age=5184000
access-control-allow-origin: https://www.adlibris.com
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (65532), with no line terminators
Size:   33017
Md5:    90ff9a110a04dcd58abc2e54a9c7b3b8
Sha1:   c514910d6cd117b7d7402df044e2b8eaebc54f32
Sha256: 3e17f4a94623939104accd55ca504925a9618608b48d236daaa5e717eec09664
                                        
                                            GET /Staticimages/favicon/favicon.svg HTTP/1.1 
Host: www.adlibris.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.adlibris.com/no/bok/textiles-of-the-banjara-9780500518373?kk=a4c6293-184cfe109f1-2f180a&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Kwon%2C+Charlotte+Textiles+of+the+Banjara+
Connection: keep-alive
Cookie: culture=nb-NO; shopperID=B0DC23EE58764C3EAA812593D12FE1C4; adss=nb-NO-f3e33d9d23804d77a70b393b8ccf05de-638055353432138763; lastProductPageVisitedId=7c62cc5c-7cec-4a98-a553-41f1e03bac29; __RequestVerificationToken=fUih95H96Yj4i7qpLmGLGhcMm01SdmyFkpSoVGx4JLPWLEWfYQFUHQmJF2fIsLVsY2eFVmwjSNhvqvfW_SHAQDuZYcM1; BBN0167c7a4=019a302dc255012e7fcd6a1bbefcebba3b0965596997505d24812e1286607fa94448227e2485071f16252238d9df7d8d3a2948e320
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         23.32.107.239
HTTP/2 200 OK
content-type: image/svg+xml
                                        
last-modified: Mon, 13 Jun 2022 11:12:50 GMT
accept-ranges: bytes
etag: "0a5b684167fd81:0"
x-ua-compatible: IE=Edge,chrome=1
feature-policy: geolocation 'none';midi 'none';microphone 'none';camera 'none';magnetometer 'none';gyroscope 'none';speaker 'self';fullscreen 'self';payment 'none';
referrer-policy: no-referrer-when-downgrade
x-content-type-options: nosniff
x-frame-options: sameorigin
x-xss-protection: 1; mode=block
strict-transport-security: max-age=14515200
vary: Accept-Encoding
content-encoding: gzip
content-length: 235
cache-control: max-age=5184000
date: Thu, 01 Dec 2022 22:49:04 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with CRLF line terminators
Size:   235
Md5:    0e2a02bec975c08cdfc3e30731174c59
Sha1:   fee30ec43ee66b6ee8c5fb7b3961518611553601
Sha256: b0e6a5e088f44a147d828d95aa6a148d095fbb11b984f607c8e5214c2391567f
                                        
                                            GET /scripts/1.140.0/dy-coll-nojq-min.js HTTP/1.1 
Host: cdn-eu.dynamicyield.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.adlibris.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         143.204.55.14
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Sun, 20 Nov 2022 01:06:02 GMT
last-modified: Thu, 27 Oct 2022 06:44:36 GMT
etag: W/"9fea6a0632dc40f0ec691d9d4da90a50"
cache-control: max-age=31536000
server: DYCDN
content-encoding: gzip
vary: Accept-Encoding
via: 1.1 5de23153ac267c206221751e1cccb6e8.cloudfront.net (CloudFront)
age: 1028583
link: <//st.dynamicyield.com>; rel="dns-prefetch", <//st.dynamicyield.com>; rel="preconnect", <//rcom.dynamicyield.com>; rel="dns-prefetch", <//rcom.dynamicyield.com>; rel="preconnect", <//async-px.dynamicyield.com>; rel="dns-prefetch", <//async-px.dynamicyield.com>; rel="preconnect"
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: GQEAXeYlIwOCdrgqdJVV5ovtmZrW4T0BujVSkIMKFYAloxjgQ6psbA==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   37236
Md5:    665f95e662c28a5c7d39972a6d667bc7
Sha1:   59e1fc2c214d23dd3b39bb466a3aa8e7a34ba108
Sha256: e8886d158af023f2038448f2e0983ba70a0dd2cdf9e594e3e6d123acd67a859a
                                        
                                            GET /staticimages/partners/tryggehandelNO.png HTTP/1.1 
Host: www.adlibris.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.adlibris.com/no/bok/textiles-of-the-banjara-9780500518373?kk=a4c6293-184cfe109f1-2f180a&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Kwon%2C+Charlotte+Textiles+of+the+Banjara+
Connection: keep-alive
Cookie: culture=nb-NO; shopperID=B0DC23EE58764C3EAA812593D12FE1C4; adss=nb-NO-f3e33d9d23804d77a70b393b8ccf05de-638055353432138763; lastProductPageVisitedId=7c62cc5c-7cec-4a98-a553-41f1e03bac29; __RequestVerificationToken=fUih95H96Yj4i7qpLmGLGhcMm01SdmyFkpSoVGx4JLPWLEWfYQFUHQmJF2fIsLVsY2eFVmwjSNhvqvfW_SHAQDuZYcM1; BBN0167c7a4=019a302dc255012e7fcd6a1bbefcebba3b0965596997505d24812e1286607fa94448227e2485071f16252238d9df7d8d3a2948e320
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         23.32.107.239
HTTP/2 200 OK
content-type: image/png
                                        
last-modified: Mon, 13 Jun 2022 11:12:50 GMT
accept-ranges: bytes
etag: "0a5b684167fd81:0"
x-ua-compatible: IE=Edge,chrome=1
content-length: 67497
feature-policy: geolocation 'none';midi 'none';microphone 'none';camera 'none';magnetometer 'none';gyroscope 'none';speaker 'self';fullscreen 'self';payment 'none';
referrer-policy: no-referrer-when-downgrade
x-content-type-options: nosniff
x-frame-options: sameorigin
x-xss-protection: 1; mode=block
strict-transport-security: max-age=14515200
cache-control: max-age=5184000
date: Thu, 01 Dec 2022 22:49:04 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced\012- data
Size:   67497
Md5:    28bdc8e6c677d4009547f38952ec76bd
Sha1:   d3d73608defaab63f9cb09ab98af0a307d6c6261
Sha256: 628b346c7a6c13644e0928dbee0006070b5ec61618ded6c44b2be287ab02c89a
                                        
                                            GET /staticimages/partners/grontpunkt.png HTTP/1.1 
Host: www.adlibris.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.adlibris.com/no/bok/textiles-of-the-banjara-9780500518373?kk=a4c6293-184cfe109f1-2f180a&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Kwon%2C+Charlotte+Textiles+of+the+Banjara+
Connection: keep-alive
Cookie: culture=nb-NO; shopperID=B0DC23EE58764C3EAA812593D12FE1C4; adss=nb-NO-f3e33d9d23804d77a70b393b8ccf05de-638055353432138763; lastProductPageVisitedId=7c62cc5c-7cec-4a98-a553-41f1e03bac29; __RequestVerificationToken=fUih95H96Yj4i7qpLmGLGhcMm01SdmyFkpSoVGx4JLPWLEWfYQFUHQmJF2fIsLVsY2eFVmwjSNhvqvfW_SHAQDuZYcM1; BBN0167c7a4=019a302dc255012e7fcd6a1bbefcebba3b0965596997505d24812e1286607fa94448227e2485071f16252238d9df7d8d3a2948e320
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         23.32.107.239
HTTP/2 200 OK
content-type: image/png
                                        
last-modified: Mon, 13 Jun 2022 11:12:50 GMT
accept-ranges: bytes
etag: "0a5b684167fd81:0"
x-ua-compatible: IE=Edge,chrome=1
content-length: 28139
feature-policy: geolocation 'none';midi 'none';microphone 'none';camera 'none';magnetometer 'none';gyroscope 'none';speaker 'self';fullscreen 'self';payment 'none';
referrer-policy: no-referrer-when-downgrade
x-content-type-options: nosniff
x-frame-options: sameorigin
x-xss-protection: 1; mode=block
strict-transport-security: max-age=14515200
cache-control: max-age=5184000
date: Thu, 01 Dec 2022 22:49:04 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 1213 x 240, 8-bit/color RGBA, non-interlaced\012- data
Size:   28139
Md5:    bd774beffb7d1bb18221809b010a8ad1
Sha1:   d3e90d0b20677aafd1188027d7622e2b5ffacf38
Sha256: d61e8e3127235c2375391a704bf5958ac77abf9cd3a47b6db0b6a2d38d6cca21
                                        
                                            GET /dist/long_term_cache202011021056/twitter.svg HTTP/1.1 
Host: s3.adlibris.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://s3.adlibris.com/dist/0d878b14dafde44d1583b782a781a1275875833e/global-styling.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         23.32.107.239
HTTP/2 200 OK
content-type: image/svg+xml
                                        
content-length: 615
content-md5: 74LJRbJqRDhLmQZxmW0hjQ==
last-modified: Mon, 21 Nov 2022 14:24:32 GMT
accept-ranges: bytes
etag: "0x8DACBCC1BACAE83"
vary: Origin
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
date: Thu, 01 Dec 2022 22:49:04 GMT
cache-control: max-age=5184000
access-control-allow-origin: https://www.adlibris.com
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (615), with no line terminators
Size:   615
Md5:    ef82c945b26a44384b990671996d218d
Sha1:   8989200c24abf39704dcb63dd989b052afdd9789
Sha256: 5d75a58f09cea60ae1c0ad395cee62d804d5e76be4e3f1d673700c2f1c7a7448
                                        
                                            GET /dist/long_term_cache202011021056/instagram.svg HTTP/1.1 
Host: s3.adlibris.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://s3.adlibris.com/dist/0d878b14dafde44d1583b782a781a1275875833e/global-styling.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         23.32.107.239
HTTP/2 200 OK
content-type: image/svg+xml
                                        
content-length: 4169
content-md5: pdZ0/dprUbE82IgKiEnwWg==
last-modified: Mon, 21 Nov 2022 14:24:32 GMT
accept-ranges: bytes
etag: "0x8DACBCC1B9BE820"
vary: Origin
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
date: Thu, 01 Dec 2022 22:49:04 GMT
cache-control: max-age=5184000
access-control-allow-origin: https://www.adlibris.com
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (4169), with no line terminators
Size:   4169
Md5:    a5d674fdda6b51b13cd8880a8849f05a
Sha1:   a9fa9ef462bdb9c3f93b09b091c91d4486e11c57
Sha256: 3d1b30a0ad87b0eabf2b137e010b1add9b29aa4148a272659d16581a95f728fb
                                        
                                            GET /dist/long_term_cache202011021056/facebook.svg HTTP/1.1 
Host: s3.adlibris.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://s3.adlibris.com/dist/0d878b14dafde44d1583b782a781a1275875833e/global-styling.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         23.32.107.239
HTTP/2 200 OK
content-type: image/svg+xml
                                        
content-length: 271
content-md5: GzBG9UsMl19IXi1qXWHw3w==
last-modified: Mon, 21 Nov 2022 14:24:32 GMT
accept-ranges: bytes
etag: "0x8DACBCC1B96B8BE"
vary: Origin
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
date: Thu, 01 Dec 2022 22:49:04 GMT
cache-control: max-age=5184000
access-control-allow-origin: https://www.adlibris.com
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with no line terminators
Size:   271
Md5:    1b3046f54b0c975f485e2d6a5d61f0df
Sha1:   0dcf43a4f95cc76c049ac7ff947a4fb4294e14bc
Sha256: b427f7270d98f4efb0d4b785684777772839a66537b47adba3509cb85ee4f31d
                                        
                                            GET /dist/0d878b14dafde44d1583b782a781a1275875833e/product-page.js HTTP/1.1 
Host: s3.adlibris.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.adlibris.com/no/bok/textiles-of-the-banjara-9780500518373?kk=a4c6293-184cfe109f1-2f180a&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Kwon%2C+Charlotte+Textiles+of+the+Banjara+
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         23.32.107.239
HTTP/2 200 OK
content-type: application/x-javascript
                                        
content-length: 100
content-md5: RJoM5o6skEsMqOcSmeCNYw==
last-modified: Mon, 21 Nov 2022 09:20:49 GMT
accept-ranges: bytes
etag: "0x8DACBA1ADFD6E24"
vary: Origin
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
date: Thu, 01 Dec 2022 22:49:04 GMT
cache-control: max-age=5184000
access-control-allow-origin: https://www.adlibris.com
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   100
Md5:    449a0ce68eac904b0ca8e71299e08d63
Sha1:   db94af3b72ba524e83f3e8dcaba2ea1b00213fd4
Sha256: f93e15df305f83d14646b7f09216dffd09b33d6932598ee9494c02677f7f4585
                                        
                                            POST /no/deliverypromise/getdeliverypromises HTTP/1.1 
Host: www.adlibris.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.adlibris.com/no/bok/textiles-of-the-banjara-9780500518373?kk=a4c6293-184cfe109f1-2f180a&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Kwon%2C+Charlotte+Textiles+of+the+Banjara+
X-Requested-With: XMLHttpRequest
Content-Type: application/json;charset=utf-8
Content-Length: 26
Origin: https://www.adlibris.com
Connection: keep-alive
Cookie: culture=nb-NO; shopperID=B0DC23EE58764C3EAA812593D12FE1C4; adss=nb-NO-f3e33d9d23804d77a70b393b8ccf05de-638055353432138763; lastProductPageVisitedId=7c62cc5c-7cec-4a98-a553-41f1e03bac29; __RequestVerificationToken=fUih95H96Yj4i7qpLmGLGhcMm01SdmyFkpSoVGx4JLPWLEWfYQFUHQmJF2fIsLVsY2eFVmwjSNhvqvfW_SHAQDuZYcM1; BBN0167c7a4=019a302dc255012e7fcd6a1bbefcebba3b0965596997505d24812e1286607fa94448227e2485071f16252238d9df7d8d3a2948e320
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         23.32.107.239
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
expires: -1
x-ua-compatible: IE=Edge,chrome=1
content-length: 201
feature-policy: geolocation 'none';midi 'none';microphone 'none';camera 'none';magnetometer 'none';gyroscope 'none';speaker 'self';fullscreen 'self';payment 'none';
referrer-policy: no-referrer-when-downgrade
x-content-type-options: nosniff
x-frame-options: sameorigin
x-xss-protection: 1; mode=block
strict-transport-security: max-age=14515200
date: Thu, 01 Dec 2022 22:49:04 GMT
vary: Content-Encoding, Accept-Encoding
set-cookie: notify=; expires=Wed, 01-Dec-2021 22:49:04 GMT; path=/; secure BBN0167c7a4=019a302dc255012e7fcd6a1bbefcebba3b0965596997505d24812e1286607fa94448227e2485071f16252238d9df7d8d3a2948e320; Path=/; Secure; HTTPOnly
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   201
Md5:    4dce03b630cbfa02dbf203efffbd13a9
Sha1:   6bd80a3bd7e1a7cbb9ab5109769db460724cd892
Sha256: 45d82a8b6c82bfdd8c0ef1231701a66329ea023ff77fc1c2b28585e038cb450f
                                        
                                            POST /no/productreview/grade HTTP/1.1 
Host: www.adlibris.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.adlibris.com/no/bok/textiles-of-the-banjara-9780500518373?kk=a4c6293-184cfe109f1-2f180a&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Kwon%2C+Charlotte+Textiles+of+the+Banjara+
X-Requested-With: XMLHttpRequest
Content-Type: application/json;charset=utf-8
Content-Length: 75
Origin: https://www.adlibris.com
Connection: keep-alive
Cookie: culture=nb-NO; shopperID=B0DC23EE58764C3EAA812593D12FE1C4; adss=nb-NO-f3e33d9d23804d77a70b393b8ccf05de-638055353432138763; lastProductPageVisitedId=7c62cc5c-7cec-4a98-a553-41f1e03bac29; __RequestVerificationToken=fUih95H96Yj4i7qpLmGLGhcMm01SdmyFkpSoVGx4JLPWLEWfYQFUHQmJF2fIsLVsY2eFVmwjSNhvqvfW_SHAQDuZYcM1; BBN0167c7a4=019a302dc255012e7fcd6a1bbefcebba3b0965596997505d24812e1286607fa94448227e2485071f16252238d9df7d8d3a2948e320
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         23.32.107.239
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
expires: -1
x-ua-compatible: IE=Edge,chrome=1
content-length: 145
feature-policy: geolocation 'none';midi 'none';microphone 'none';camera 'none';magnetometer 'none';gyroscope 'none';speaker 'self';fullscreen 'self';payment 'none';
referrer-policy: no-referrer-when-downgrade
x-content-type-options: nosniff
x-frame-options: sameorigin
x-xss-protection: 1; mode=block
strict-transport-security: max-age=14515200
date: Thu, 01 Dec 2022 22:49:04 GMT
vary: Content-Encoding, Accept-Encoding
set-cookie: notify=; expires=Wed, 01-Dec-2021 22:49:04 GMT; path=/; secure BBN0167c7a4=019a302dc255012e7fcd6a1bbefcebba3b0965596997505d24812e1286607fa94448227e2485071f16252238d9df7d8d3a2948e320; Path=/; Secure; HTTPOnly
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   145
Md5:    e8ef8e6579a26b6b87b83b0d257272fc
Sha1:   3d28a582bff4b891ed524cd1d67e1e89baf0abdc
Sha256: 7b86cbd81b82331eb2e85f87e8ce63184b69492d399d889c7ffd333599f09b8c
                                        
                                            POST /no/recommendation/recommendations HTTP/1.1 
Host: www.adlibris.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.adlibris.com/no/bok/textiles-of-the-banjara-9780500518373?kk=a4c6293-184cfe109f1-2f180a&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Kwon%2C+Charlotte+Textiles+of+the+Banjara+
X-Requested-With: XMLHttpRequest
Content-Type: application/json;charset=utf-8
Content-Length: 198
Origin: https://www.adlibris.com
Connection: keep-alive
Cookie: culture=nb-NO; shopperID=B0DC23EE58764C3EAA812593D12FE1C4; adss=nb-NO-f3e33d9d23804d77a70b393b8ccf05de-638055353432138763; lastProductPageVisitedId=7c62cc5c-7cec-4a98-a553-41f1e03bac29; __RequestVerificationToken=fUih95H96Yj4i7qpLmGLGhcMm01SdmyFkpSoVGx4JLPWLEWfYQFUHQmJF2fIsLVsY2eFVmwjSNhvqvfW_SHAQDuZYcM1; BBN0167c7a4=019a302dc255012e7fcd6a1bbefcebba3b0965596997505d24812e1286607fa94448227e2485071f16252238d9df7d8d3a2948e320
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         23.32.107.239
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
expires: -1
x-ua-compatible: IE=Edge,chrome=1
content-length: 53
feature-policy: geolocation 'none';midi 'none';microphone 'none';camera 'none';magnetometer 'none';gyroscope 'none';speaker 'self';fullscreen 'self';payment 'none';
referrer-policy: no-referrer-when-downgrade
x-content-type-options: nosniff
x-frame-options: sameorigin
x-xss-protection: 1; mode=block
strict-transport-security: max-age=14515200
date: Thu, 01 Dec 2022 22:49:04 GMT
vary: Content-Encoding, Accept-Encoding
set-cookie: notify=; expires=Wed, 01-Dec-2021 22:49:04 GMT; path=/; secure BBN0167c7a4=019a302dc255012e7fcd6a1bbefcebba3b0965596997505d24812e1286607fa94448227e2485071f16252238d9df7d8d3a2948e320; Path=/; Secure; HTTPOnly
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   53
Md5:    bd3ae37d94596bba09f229d0b99b9469
Sha1:   20e7b5a4b54cf8fbcb7b31e6ce375fa87880f30f
Sha256: eafaa557b3ac2de20f2277f63d150f9fd265450433bcdc126caa90b796d1dff3
                                        
                                            POST /no/recommendation/recommendations HTTP/1.1 
Host: www.adlibris.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.adlibris.com/no/bok/textiles-of-the-banjara-9780500518373?kk=a4c6293-184cfe109f1-2f180a&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Kwon%2C+Charlotte+Textiles+of+the+Banjara+
X-Requested-With: XMLHttpRequest
Content-Type: application/json;charset=utf-8
Content-Length: 207
Origin: https://www.adlibris.com
Connection: keep-alive
Cookie: culture=nb-NO; shopperID=B0DC23EE58764C3EAA812593D12FE1C4; adss=nb-NO-f3e33d9d23804d77a70b393b8ccf05de-638055353432138763; lastProductPageVisitedId=7c62cc5c-7cec-4a98-a553-41f1e03bac29; __RequestVerificationToken=fUih95H96Yj4i7qpLmGLGhcMm01SdmyFkpSoVGx4JLPWLEWfYQFUHQmJF2fIsLVsY2eFVmwjSNhvqvfW_SHAQDuZYcM1; BBN0167c7a4=019a302dc255012e7fcd6a1bbefcebba3b0965596997505d24812e1286607fa94448227e2485071f16252238d9df7d8d3a2948e320
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         23.32.107.239
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
expires: -1
x-ua-compatible: IE=Edge,chrome=1
content-length: 53
feature-policy: geolocation 'none';midi 'none';microphone 'none';camera 'none';magnetometer 'none';gyroscope 'none';speaker 'self';fullscreen 'self';payment 'none';
referrer-policy: no-referrer-when-downgrade
x-content-type-options: nosniff
x-frame-options: sameorigin
x-xss-protection: 1; mode=block
strict-transport-security: max-age=14515200
date: Thu, 01 Dec 2022 22:49:04 GMT
vary: Content-Encoding, Accept-Encoding
set-cookie: notify=; expires=Wed, 01-Dec-2021 22:49:04 GMT; path=/; secure BBN0167c7a4=019a302dc255012e7fcd6a1bbefcebba3b0965596997505d24812e1286607fa94448227e2485071f16252238d9df7d8d3a2948e320; Path=/; Secure; HTTPOnly
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   53
Md5:    bd3ae37d94596bba09f229d0b99b9469
Sha1:   20e7b5a4b54cf8fbcb7b31e6ce375fa87880f30f
Sha256: eafaa557b3ac2de20f2277f63d150f9fd265450433bcdc126caa90b796d1dff3
                                        
                                            GET /no/productcategory?categoryIds=10111210%2C26101516%2C16111112 HTTP/1.1 
Host: www.adlibris.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.adlibris.com/no/bok/textiles-of-the-banjara-9780500518373?kk=a4c6293-184cfe109f1-2f180a&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Kwon%2C+Charlotte+Textiles+of+the+Banjara+
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Cookie: culture=nb-NO; shopperID=B0DC23EE58764C3EAA812593D12FE1C4; adss=nb-NO-f3e33d9d23804d77a70b393b8ccf05de-638055353432138763; lastProductPageVisitedId=7c62cc5c-7cec-4a98-a553-41f1e03bac29; __RequestVerificationToken=fUih95H96Yj4i7qpLmGLGhcMm01SdmyFkpSoVGx4JLPWLEWfYQFUHQmJF2fIsLVsY2eFVmwjSNhvqvfW_SHAQDuZYcM1; BBN0167c7a4=019a302dc255012e7fcd6a1bbefcebba3b0965596997505d24812e1286607fa94448227e2485071f16252238d9df7d8d3a2948e320
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         23.32.107.239
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
expires: -1
x-ua-compatible: IE=Edge,chrome=1
content-length: 53
feature-policy: geolocation 'none';midi 'none';microphone 'none';camera 'none';magnetometer 'none';gyroscope 'none';speaker 'self';fullscreen 'self';payment 'none';
referrer-policy: no-referrer-when-downgrade
x-content-type-options: nosniff
x-frame-options: sameorigin
x-xss-protection: 1; mode=block
strict-transport-security: max-age=14515200
date: Thu, 01 Dec 2022 22:49:04 GMT
vary: Content-Encoding, Accept-Encoding
set-cookie: notify=; expires=Wed, 01-Dec-2021 22:49:04 GMT; path=/; secure BBN0167c7a4=019a302dc255012e7fcd6a1bbefcebba3b0965596997505d24812e1286607fa94448227e2485071f16252238d9df7d8d3a2948e320; Path=/; Secure; HTTPOnly
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   53
Md5:    bd3ae37d94596bba09f229d0b99b9469
Sha1:   20e7b5a4b54cf8fbcb7b31e6ce375fa87880f30f
Sha256: eafaa557b3ac2de20f2277f63d150f9fd265450433bcdc126caa90b796d1dff3
                                        
                                            POST /no/recommendation/recommendations HTTP/1.1 
Host: www.adlibris.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.adlibris.com/no/bok/textiles-of-the-banjara-9780500518373?kk=a4c6293-184cfe109f1-2f180a&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Kwon%2C+Charlotte+Textiles+of+the+Banjara+
X-Requested-With: XMLHttpRequest
Content-Type: application/json;charset=utf-8
Content-Length: 195
Origin: https://www.adlibris.com
Connection: keep-alive
Cookie: culture=nb-NO; shopperID=B0DC23EE58764C3EAA812593D12FE1C4; adss=nb-NO-f3e33d9d23804d77a70b393b8ccf05de-638055353432138763; lastProductPageVisitedId=7c62cc5c-7cec-4a98-a553-41f1e03bac29; __RequestVerificationToken=fUih95H96Yj4i7qpLmGLGhcMm01SdmyFkpSoVGx4JLPWLEWfYQFUHQmJF2fIsLVsY2eFVmwjSNhvqvfW_SHAQDuZYcM1; BBN0167c7a4=019a302dc255012e7fcd6a1bbefcebba3b0965596997505d24812e1286607fa94448227e2485071f16252238d9df7d8d3a2948e320
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         23.32.107.239
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
expires: -1
x-ua-compatible: IE=Edge,chrome=1
content-length: 53
feature-policy: geolocation 'none';midi 'none';microphone 'none';camera 'none';magnetometer 'none';gyroscope 'none';speaker 'self';fullscreen 'self';payment 'none';
referrer-policy: no-referrer-when-downgrade
x-content-type-options: nosniff
x-frame-options: sameorigin
x-xss-protection: 1; mode=block
strict-transport-security: max-age=14515200
date: Thu, 01 Dec 2022 22:49:04 GMT
vary: Content-Encoding, Accept-Encoding
set-cookie: notify=; expires=Wed, 01-Dec-2021 22:49:04 GMT; path=/; secure BBN0167c7a4=019a302dc255012e7fcd6a1bbefcebba3b0965596997505d24812e1286607fa94448227e2485071f16252238d9df7d8d3a2948e320; Path=/; Secure; HTTPOnly
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   53
Md5:    bd3ae37d94596bba09f229d0b99b9469
Sha1:   20e7b5a4b54cf8fbcb7b31e6ce375fa87880f30f
Sha256: eafaa557b3ac2de20f2277f63d150f9fd265450433bcdc126caa90b796d1dff3
                                        
                                            POST /no/productprice/pricesforvariants HTTP/1.1 
Host: www.adlibris.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.adlibris.com/no/bok/textiles-of-the-banjara-9780500518373?kk=a4c6293-184cfe109f1-2f180a&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Kwon%2C+Charlotte+Textiles+of+the+Banjara+
X-Requested-With: XMLHttpRequest
Content-Type: application/json;charset=utf-8
Content-Length: 95
Origin: https://www.adlibris.com
Connection: keep-alive
Cookie: culture=nb-NO; shopperID=B0DC23EE58764C3EAA812593D12FE1C4; adss=nb-NO-f3e33d9d23804d77a70b393b8ccf05de-638055353432138763; lastProductPageVisitedId=7c62cc5c-7cec-4a98-a553-41f1e03bac29; __RequestVerificationToken=fUih95H96Yj4i7qpLmGLGhcMm01SdmyFkpSoVGx4JLPWLEWfYQFUHQmJF2fIsLVsY2eFVmwjSNhvqvfW_SHAQDuZYcM1; BBN0167c7a4=019a302dc255012e7fcd6a1bbefcebba3b0965596997505d24812e1286607fa94448227e2485071f16252238d9df7d8d3a2948e320
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         23.32.107.239
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
expires: -1
x-ua-compatible: IE=Edge,chrome=1
content-length: 238
feature-policy: geolocation 'none';midi 'none';microphone 'none';camera 'none';magnetometer 'none';gyroscope 'none';speaker 'self';fullscreen 'self';payment 'none';
referrer-policy: no-referrer-when-downgrade
x-content-type-options: nosniff
x-frame-options: sameorigin
x-xss-protection: 1; mode=block
strict-transport-security: max-age=14515200
date: Thu, 01 Dec 2022 22:49:04 GMT
vary: Content-Encoding, Accept-Encoding
set-cookie: notify=; expires=Wed, 01-Dec-2021 22:49:04 GMT; path=/; secure BBN0167c7a4=019a302dc255012e7fcd6a1bbefcebba3b0965596997505d24812e1286607fa94448227e2485071f16252238d9df7d8d3a2948e320; Path=/; Secure; HTTPOnly
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (425), with no line terminators
Size:   238
Md5:    e3d958bbf3beb661a858519c5d81dd51
Sha1:   ac11afaa46250b3945a19c48d6ed6be716aa8b34
Sha256: 2a05cc5b2f3ef17801690b359c565731ecd91ff74a491d80fa9c316efab8bc34
                                        
                                            POST /no/productvariants HTTP/1.1 
Host: www.adlibris.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.adlibris.com/no/bok/textiles-of-the-banjara-9780500518373?kk=a4c6293-184cfe109f1-2f180a&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Kwon%2C+Charlotte+Textiles+of+the+Banjara+
X-Requested-With: XMLHttpRequest
Content-Type: application/json;charset=utf-8
Content-Length: 53
Origin: https://www.adlibris.com
Connection: keep-alive
Cookie: culture=nb-NO; shopperID=B0DC23EE58764C3EAA812593D12FE1C4; adss=nb-NO-f3e33d9d23804d77a70b393b8ccf05de-638055353432138763; lastProductPageVisitedId=7c62cc5c-7cec-4a98-a553-41f1e03bac29; __RequestVerificationToken=fUih95H96Yj4i7qpLmGLGhcMm01SdmyFkpSoVGx4JLPWLEWfYQFUHQmJF2fIsLVsY2eFVmwjSNhvqvfW_SHAQDuZYcM1; BBN0167c7a4=019a302dc255012e7fcd6a1bbefcebba3b0965596997505d24812e1286607fa94448227e2485071f16252238d9df7d8d3a2948e320
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         23.32.107.239
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
expires: -1
x-ua-compatible: IE=Edge,chrome=1
content-length: 2259
feature-policy: geolocation 'none';midi 'none';microphone 'none';camera 'none';magnetometer 'none';gyroscope 'none';speaker 'self';fullscreen 'self';payment 'none';
referrer-policy: no-referrer-when-downgrade
x-content-type-options: nosniff
x-frame-options: sameorigin
x-xss-protection: 1; mode=block
strict-transport-security: max-age=14515200
date: Thu, 01 Dec 2022 22:49:04 GMT
vary: Content-Encoding, Accept-Encoding
set-cookie: notify=; expires=Wed, 01-Dec-2021 22:49:04 GMT; path=/; secure BBN0167c7a4=019a302dc255012e7fcd6a1bbefcebba3b0965596997505d24812e1286607fa94448227e2485071f16252238d9df7d8d3a2948e320; Path=/; Secure; HTTPOnly
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , Unicode text, UTF-8 text, with very long lines (4865), with no line terminators
Size:   2259
Md5:    127c7f47bc26ddf0179439d6afba7b2b
Sha1:   565932f2968e56cacaede4efa35a3446a638b067
Sha256: 2a58d76ce2870714691a69df92d1c2fa8a57b470bba3d14e57c6e687d42a7c34
                                        
                                            GET /images/18313542/textiles-of-the-banjara.jpg HTTP/1.1 
Host: s1.adlibris.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.adlibris.com/no/bok/textiles-of-the-banjara-9780500518373?kk=a4c6293-184cfe109f1-2f180a&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Kwon%2C+Charlotte+Textiles+of+the+Banjara+
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         23.32.107.239
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Thu, 19 May 2022 04:40:51 GMT
x-ua-compatible: IE=Edge,chrome=1
content-length: 21522
feature-policy: geolocation 'none';midi 'none';microphone 'none';camera 'none';magnetometer 'none';gyroscope 'none';speaker 'self';fullscreen 'self';payment 'none';
referrer-policy: no-referrer-when-downgrade
x-content-type-options: nosniff
x-frame-options: sameorigin
x-xss-protection: 1; mode=block
strict-transport-security: max-age=14515200
cache-control: public, max-age=30983462
expires: Sat, 25 Nov 2023 13:20:06 GMT
date: Thu, 01 Dec 2022 22:49:04 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x267, components 3\012- data
Size:   21522
Md5:    d3291aa5cc37aac3a1598ba91b827f1c
Sha1:   54d27b7fac92352441612bdb9b06fc5089b3c81c
Sha256: 5611f999e26faf983324fdb647a8836b40a606a3c87aa558a745f3823fee4fb5
                                        
                                            POST /no/productreview HTTP/1.1 
Host: www.adlibris.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.adlibris.com/no/bok/textiles-of-the-banjara-9780500518373?kk=a4c6293-184cfe109f1-2f180a&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Kwon%2C+Charlotte+Textiles+of+the+Banjara+
X-Requested-With: XMLHttpRequest
Content-Type: application/json;charset=utf-8
Content-Length: 103
Origin: https://www.adlibris.com
Connection: keep-alive
Cookie: culture=nb-NO; shopperID=B0DC23EE58764C3EAA812593D12FE1C4; adss=nb-NO-f3e33d9d23804d77a70b393b8ccf05de-638055353432138763; lastProductPageVisitedId=7c62cc5c-7cec-4a98-a553-41f1e03bac29; __RequestVerificationToken=fUih95H96Yj4i7qpLmGLGhcMm01SdmyFkpSoVGx4JLPWLEWfYQFUHQmJF2fIsLVsY2eFVmwjSNhvqvfW_SHAQDuZYcM1; BBN0167c7a4=019a302dc255012e7fcd6a1bbefcebba3b0965596997505d24812e1286607fa94448227e2485071f16252238d9df7d8d3a2948e320
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         23.32.107.239
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
expires: -1
x-ua-compatible: IE=Edge,chrome=1
content-length: 67
feature-policy: geolocation 'none';midi 'none';microphone 'none';camera 'none';magnetometer 'none';gyroscope 'none';speaker 'self';fullscreen 'self';payment 'none';
referrer-policy: no-referrer-when-downgrade
x-content-type-options: nosniff
x-frame-options: sameorigin
x-xss-protection: 1; mode=block
strict-transport-security: max-age=14515200
date: Thu, 01 Dec 2022 22:49:04 GMT
vary: Content-Encoding, Accept-Encoding
set-cookie: notify=; expires=Wed, 01-Dec-2021 22:49:04 GMT; path=/; secure BBN0167c7a4=019a302dc255012e7fcd6a1bbefcebba3b0965596997505d24812e1286607fa94448227e2485071f16252238d9df7d8d3a2948e320; Path=/; Secure; HTTPOnly
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   67
Md5:    011a20c74a67725b0c4c09f718314673
Sha1:   89d285d2d46533ce4904c7dd107cc5e4cdc3cdfc
Sha256: ac3df41e951dff37cf5b4e87619a02ebe731f9ed915a09f42f46b67013a44b01
                                        
                                            POST /no/recommendation/recommendations HTTP/1.1 
Host: www.adlibris.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.adlibris.com/no/bok/textiles-of-the-banjara-9780500518373?kk=a4c6293-184cfe109f1-2f180a&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Kwon%2C+Charlotte+Textiles+of+the+Banjara+
X-Requested-With: XMLHttpRequest
Content-Type: application/json;charset=utf-8
Content-Length: 198
Origin: https://www.adlibris.com
Connection: keep-alive
Cookie: culture=nb-NO; shopperID=B0DC23EE58764C3EAA812593D12FE1C4; adss=nb-NO-f3e33d9d23804d77a70b393b8ccf05de-638055353432138763; lastProductPageVisitedId=7c62cc5c-7cec-4a98-a553-41f1e03bac29; __RequestVerificationToken=fUih95H96Yj4i7qpLmGLGhcMm01SdmyFkpSoVGx4JLPWLEWfYQFUHQmJF2fIsLVsY2eFVmwjSNhvqvfW_SHAQDuZYcM1; BBN0167c7a4=019a302dc255012e7fcd6a1bbefcebba3b0965596997505d24812e1286607fa94448227e2485071f16252238d9df7d8d3a2948e320
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         23.32.107.239
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
expires: -1
x-ua-compatible: IE=Edge,chrome=1
content-length: 988
feature-policy: geolocation 'none';midi 'none';microphone 'none';camera 'none';magnetometer 'none';gyroscope 'none';speaker 'self';fullscreen 'self';payment 'none';
referrer-policy: no-referrer-when-downgrade
x-content-type-options: nosniff
x-frame-options: sameorigin
x-xss-protection: 1; mode=block
strict-transport-security: max-age=14515200
date: Thu, 01 Dec 2022 22:49:04 GMT
vary: Content-Encoding, Accept-Encoding
set-cookie: notify=; expires=Wed, 01-Dec-2021 22:49:04 GMT; path=/; secure BBN0167c7a4=019a302dc255012e7fcd6a1bbefcebba3b0965596997505d24812e1286607fa94448227e2485071f16252238d9df7d8d3a2948e320; Path=/; Secure; HTTPOnly
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (2445), with no line terminators
Size:   988
Md5:    c72233cf4587a469c014cf944e406a2d
Sha1:   cf952b97f51be653253d9f55d77bed91eb912713
Sha256: 51e37124b5652a09a5a98ba71b624b90ec3f5af92f2aebd0357546ab24dfaab5
                                        
                                            GET /leadtag.js HTTP/1.1 
Host: s.kk-resources.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.adlibris.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.7
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
Content-Length: 2595
Connection: keep-alive
X-Gravitee-Transaction-Id: 0e238087-9bcc-403a-a380-879bccf03ad8
X-Gravitee-Request-Id: 0e238087-9bcc-403a-a380-879bccf03ad8
ETag: "05e089e0c08fd98ee6b4f6497ec87752b123fc2f"
Request-Time: 6
Accept-Ranges: bytes
Cache-Control: public, max-age=3600
Last-Modified: Tue, 12 Jul 2022 13:51:05 GMT
Content-Encoding: gzip
Date: Thu, 01 Dec 2022 22:01:36 GMT
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Y7pUtPuED_dBTvjFDHP0CD3ld0Kgc7st9DYb4jsoC0IauDP__EruNw==
Age: 2848


--- Additional Info ---
Magic:  C source, ASCII text, with very long lines (6910)
Size:   2595
Md5:    b9c7aa9898d0e7b5d8dfa27c81eda1ac
Sha1:   3e22a4f4ac1fd469128de60e1a80433513242071
Sha256: 980531f0a81016e3a7a4c3fa56f75e7b791f1f4c09296992221bd766b91a53a0
                                        
                                            POST /no/recommendation/recommendations HTTP/1.1 
Host: www.adlibris.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.adlibris.com/no/bok/textiles-of-the-banjara-9780500518373?kk=a4c6293-184cfe109f1-2f180a&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Kwon%2C+Charlotte+Textiles+of+the+Banjara+
X-Requested-With: XMLHttpRequest
Content-Type: application/json;charset=utf-8
Content-Length: 196
Origin: https://www.adlibris.com
Connection: keep-alive
Cookie: culture=nb-NO; shopperID=B0DC23EE58764C3EAA812593D12FE1C4; adss=nb-NO-f3e33d9d23804d77a70b393b8ccf05de-638055353432138763; lastProductPageVisitedId=7c62cc5c-7cec-4a98-a553-41f1e03bac29; __RequestVerificationToken=fUih95H96Yj4i7qpLmGLGhcMm01SdmyFkpSoVGx4JLPWLEWfYQFUHQmJF2fIsLVsY2eFVmwjSNhvqvfW_SHAQDuZYcM1; BBN0167c7a4=019a302dc255012e7fcd6a1bbefcebba3b0965596997505d24812e1286607fa94448227e2485071f16252238d9df7d8d3a2948e320
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         23.32.107.239
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
expires: -1
x-ua-compatible: IE=Edge,chrome=1
content-length: 3370
feature-policy: geolocation 'none';midi 'none';microphone 'none';camera 'none';magnetometer 'none';gyroscope 'none';speaker 'self';fullscreen 'self';payment 'none';
referrer-policy: no-referrer-when-downgrade
x-content-type-options: nosniff
x-frame-options: sameorigin
x-xss-protection: 1; mode=block
strict-transport-security: max-age=14515200
date: Thu, 01 Dec 2022 22:49:04 GMT
vary: Content-Encoding, Accept-Encoding
set-cookie: notify=; expires=Wed, 01-Dec-2021 22:49:04 GMT; path=/; secure BBN0167c7a4=019a302dc255012e7fcd6a1bbefcebba3b0965596997505d24812e1286607fa94448227e2485071f16252238d9df7d8d3a2948e320; Path=/; Secure; HTTPOnly
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , Unicode text, UTF-8 text, with very long lines (13491), with no line terminators
Size:   3370
Md5:    4a006ad5444d82d0804a0e1524aaebc2
Sha1:   bf57e38e0cd3a533bac2d9b46675e03c1312bcdc
Sha256: ef2f454dce29eb076c70bf3221f3cc58d6b3aabbe2b146f70fc5b427476eeb60
                                        
                                            POST /no/productprice/pricesforvariants HTTP/1.1 
Host: www.adlibris.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.adlibris.com/no/bok/textiles-of-the-banjara-9780500518373?kk=a4c6293-184cfe109f1-2f180a&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Kwon%2C+Charlotte+Textiles+of+the+Banjara+
X-Requested-With: XMLHttpRequest
Content-Type: application/json;charset=utf-8
Content-Length: 95
Origin: https://www.adlibris.com
Connection: keep-alive
Cookie: culture=nb-NO; shopperID=B0DC23EE58764C3EAA812593D12FE1C4; adss=nb-NO-f3e33d9d23804d77a70b393b8ccf05de-638055353432138763; lastProductPageVisitedId=7c62cc5c-7cec-4a98-a553-41f1e03bac29; __RequestVerificationToken=fUih95H96Yj4i7qpLmGLGhcMm01SdmyFkpSoVGx4JLPWLEWfYQFUHQmJF2fIsLVsY2eFVmwjSNhvqvfW_SHAQDuZYcM1; BBN0167c7a4=019a302dc255012e7fcd6a1bbefcebba3b0965596997505d24812e1286607fa94448227e2485071f16252238d9df7d8d3a2948e320; _gcl_au=1.1.1143823892.1669934943; referral=kelkoono
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         23.32.107.239
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
expires: -1
x-ua-compatible: IE=Edge,chrome=1
content-length: 238
feature-policy: geolocation 'none';midi 'none';microphone 'none';camera 'none';magnetometer 'none';gyroscope 'none';speaker 'self';fullscreen 'self';payment 'none';
referrer-policy: no-referrer-when-downgrade
x-content-type-options: nosniff
x-frame-options: sameorigin
x-xss-protection: 1; mode=block
strict-transport-security: max-age=14515200
date: Thu, 01 Dec 2022 22:49:04 GMT
vary: Content-Encoding, Accept-Encoding
set-cookie: notify=; expires=Wed, 01-Dec-2021 22:49:04 GMT; path=/; secure BBN0167c7a4=019a302dc255012e7fcd6a1bbefcebba3b0965596997505d24812e1286607fa94448227e2485071f16252238d9df7d8d3a2948e320; Path=/; Secure; HTTPOnly
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (425), with no line terminators
Size:   238
Md5:    e3d958bbf3beb661a858519c5d81dd51
Sha1:   ac11afaa46250b3945a19c48d6ed6be716aa8b34
Sha256: 2a05cc5b2f3ef17801690b359c565731ecd91ff74a491d80fa9c316efab8bc34
                                        
                                            POST /no/readingsample HTTP/1.1 
Host: www.adlibris.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.adlibris.com/no/bok/textiles-of-the-banjara-9780500518373?kk=a4c6293-184cfe109f1-2f180a&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Kwon%2C+Charlotte+Textiles+of+the+Banjara+
X-Requested-With: XMLHttpRequest
Content-Type: application/json;charset=utf-8
Content-Length: 26
Origin: https://www.adlibris.com
Connection: keep-alive
Cookie: culture=nb-NO; shopperID=B0DC23EE58764C3EAA812593D12FE1C4; adss=nb-NO-f3e33d9d23804d77a70b393b8ccf05de-638055353432138763; lastProductPageVisitedId=7c62cc5c-7cec-4a98-a553-41f1e03bac29; __RequestVerificationToken=fUih95H96Yj4i7qpLmGLGhcMm01SdmyFkpSoVGx4JLPWLEWfYQFUHQmJF2fIsLVsY2eFVmwjSNhvqvfW_SHAQDuZYcM1; BBN0167c7a4=019a302dc255012e7fcd6a1bbefcebba3b0965596997505d24812e1286607fa94448227e2485071f16252238d9df7d8d3a2948e320; _gcl_au=1.1.1143823892.1669934943; referral=kelkoono
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         23.32.107.239
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
expires: -1
x-ua-compatible: IE=Edge,chrome=1
content-length: 60
feature-policy: geolocation 'none';midi 'none';microphone 'none';camera 'none';magnetometer 'none';gyroscope 'none';speaker 'self';fullscreen 'self';payment 'none';
referrer-policy: no-referrer-when-downgrade
x-content-type-options: nosniff
x-frame-options: sameorigin
x-xss-protection: 1; mode=block
strict-transport-security: max-age=14515200
date: Thu, 01 Dec 2022 22:49:04 GMT
vary: Content-Encoding, Accept-Encoding
set-cookie: notify=; expires=Wed, 01-Dec-2021 22:49:04 GMT; path=/; secure BBN0167c7a4=019a302dc255012e7fcd6a1bbefcebba3b0965596997505d24812e1286607fa94448227e2485071f16252238d9df7d8d3a2948e320; Path=/; Secure; HTTPOnly
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   60
Md5:    d5cd25c088d97bbcb0bde38439b5b7dc
Sha1:   f885bd9277b0f2fc93460c99f604e9e0abd2d0ae
Sha256: c07204e7763ff5080df655bbf9947dccd27871830df3e179f6f2930317729423
                                        
                                            POST /no/productcampaign HTTP/1.1 
Host: www.adlibris.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.adlibris.com/no/bok/textiles-of-the-banjara-9780500518373?kk=a4c6293-184cfe109f1-2f180a&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Kwon%2C+Charlotte+Textiles+of+the+Banjara+
X-Requested-With: XMLHttpRequest
Content-Type: application/json;charset=utf-8
Content-Length: 56
Origin: https://www.adlibris.com
Connection: keep-alive
Cookie: culture=nb-NO; shopperID=B0DC23EE58764C3EAA812593D12FE1C4; adss=nb-NO-f3e33d9d23804d77a70b393b8ccf05de-638055353432138763; lastProductPageVisitedId=7c62cc5c-7cec-4a98-a553-41f1e03bac29; __RequestVerificationToken=fUih95H96Yj4i7qpLmGLGhcMm01SdmyFkpSoVGx4JLPWLEWfYQFUHQmJF2fIsLVsY2eFVmwjSNhvqvfW_SHAQDuZYcM1; BBN0167c7a4=019a302dc255012e7fcd6a1bbefcebba3b0965596997505d24812e1286607fa94448227e2485071f16252238d9df7d8d3a2948e320; _gcl_au=1.1.1143823892.1669934943; referral=kelkoono
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         23.32.107.239
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
expires: -1
x-ua-compatible: IE=Edge,chrome=1
content-length: 56
feature-policy: geolocation 'none';midi 'none';microphone 'none';camera 'none';magnetometer 'none';gyroscope 'none';speaker 'self';fullscreen 'self';payment 'none';
referrer-policy: no-referrer-when-downgrade
x-content-type-options: nosniff
x-frame-options: sameorigin
x-xss-protection: 1; mode=block
strict-transport-security: max-age=14515200
date: Thu, 01 Dec 2022 22:49:04 GMT
vary: Content-Encoding, Accept-Encoding
set-cookie: notify=; expires=Wed, 01-Dec-2021 22:49:04 GMT; path=/; secure BBN0167c7a4=019a302dc255012e7fcd6a1bbefcebba3b0965596997505d24812e1286607fa94448227e2485071f16252238d9df7d8d3a2948e320; Path=/; Secure; HTTPOnly
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   56
Md5:    fc968874eb196f2b72d9cb42a2bc3773
Sha1:   2c6d6af8ac2985a59a62cc3433903192b3699c39
Sha256: 21251478890eed37439b887816f9b9a51ef274987b1ac8da94054bf8f1bf85cd
                                        
                                            POST /no/deliverypromise/getdeliverypromises HTTP/1.1 
Host: www.adlibris.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.adlibris.com/no/bok/textiles-of-the-banjara-9780500518373?kk=a4c6293-184cfe109f1-2f180a&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Kwon%2C+Charlotte+Textiles+of+the+Banjara+
X-Requested-With: XMLHttpRequest
Content-Type: application/json;charset=utf-8
Content-Length: 26
Origin: https://www.adlibris.com
Connection: keep-alive
Cookie: culture=nb-NO; shopperID=B0DC23EE58764C3EAA812593D12FE1C4; adss=nb-NO-f3e33d9d23804d77a70b393b8ccf05de-638055353432138763; lastProductPageVisitedId=7c62cc5c-7cec-4a98-a553-41f1e03bac29; __RequestVerificationToken=fUih95H96Yj4i7qpLmGLGhcMm01SdmyFkpSoVGx4JLPWLEWfYQFUHQmJF2fIsLVsY2eFVmwjSNhvqvfW_SHAQDuZYcM1; BBN0167c7a4=019a302dc255012e7fcd6a1bbefcebba3b0965596997505d24812e1286607fa94448227e2485071f16252238d9df7d8d3a2948e320; _gcl_au=1.1.1143823892.1669934943; referral=kelkoono
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         23.32.107.239
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
expires: -1
x-ua-compatible: IE=Edge,chrome=1
content-length: 201
feature-policy: geolocation 'none';midi 'none';microphone 'none';camera 'none';magnetometer 'none';gyroscope 'none';speaker 'self';fullscreen 'self';payment 'none';
referrer-policy: no-referrer-when-downgrade
x-content-type-options: nosniff
x-frame-options: sameorigin
x-xss-protection: 1; mode=block
strict-transport-security: max-age=14515200
date: Thu, 01 Dec 2022 22:49:04 GMT
vary: Content-Encoding, Accept-Encoding
set-cookie: notify=; expires=Wed, 01-Dec-2021 22:49:04 GMT; path=/; secure BBN0167c7a4=019a302dc255012e7fcd6a1bbefcebba3b0965596997505d24812e1286607fa94448227e2485071f16252238d9df7d8d3a2948e320; Path=/; Secure; HTTPOnly
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   201
Md5:    4dce03b630cbfa02dbf203efffbd13a9
Sha1:   6bd80a3bd7e1a7cbb9ab5109769db460724cd892
Sha256: 45d82a8b6c82bfdd8c0ef1231701a66329ea023ff77fc1c2b28585e038cb450f
                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.adlibris.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.110
HTTP/2 200 OK
content-type: text/javascript
                                        
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Thu, 01 Dec 2022 22:41:08 GMT
expires: Fri, 02 Dec 2022 00:41:08 GMT
cache-control: public, max-age=7200
age: 476
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1325)
Size:   20039
Md5:    47e6f374ca946fddd5b59871b325736c
Sha1:   baa9282efc8785e84d247c3bff518eaa45f101c4
Sha256: 16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 01 Dec 2022 22:49:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /pagead/viewthroughconversion/1057673113/?random=1669934942904&cv=11&fst=1669934942904&bg=ffffff&guid=ON&async=1&gtm=2wgbu0&u_w=1280&u_h=1024&label=YVGECIm2kAEQmZ-r-AM&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.adlibris.com%2Fno%2Fbok%2Ftextiles-of-the-banjara-9780500518373%3Fkk%3Da4c6293-184cfe109f1-2f180a%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DKwon%252C%2BCharlotte%2BTextiles%2Bof%2Bthe%2BBanjara%2B&ref=https%3A%2F%2Fno-go.kelkoogroup.net%2F&tiba=Textiles%20of%20the%20Banjara%20-%20Charlotte%20Kwon%2C%20Tim%20McLaughlin%20-%20innbundet(9780500518373)%20%7C%20Adlibris%20Bokhandel&auid=1143823892.1669934943&data=ecomm_totalvalue%3D%3Becomm_pagetype%3Dsiteview%3Becomm_prodid%3D%3Becomm_pname%3D%3Becomm_pvalue%3D%3Becomm_quantity%3D%3Becomm_category%3D&rfmt=3&fmt=4 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.adlibris.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.66
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 01 Dec 2022 22:49:04 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 1188
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Thu, 01-Dec-2022 23:04:04 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2946), with no line terminators
Size:   1188
Md5:    42340d512323dc8bb73b013e444e6593
Sha1:   fff95c75c1d43b088e1aedac1acb9903fb63d55a
Sha256: 26e0858fc1d96a241a1175d695a4831b9845c7e5dd553cfebaf399258f6a8f19
                                        
                                            GET /api/9877494/api_static.js HTTP/1.1 
Host: cdn-eu.dynamicyield.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.adlibris.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.14
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
last-modified: Fri, 18 Nov 2022 13:46:24 GMT
server: DYCDN
content-encoding: gzip
date: Thu, 01 Dec 2022 01:06:45 GMT
cache-control: max-age=86400
etag: W/"6b010dde4998646bd31e773b4eadc16b"
vary: Accept-Encoding
via: 1.1 5de23153ac267c206221751e1cccb6e8.cloudfront.net (CloudFront)
age: 78139
link: <//st.dynamicyield.com>; rel="dns-prefetch", <//st.dynamicyield.com>; rel="preconnect", <//rcom.dynamicyield.com>; rel="dns-prefetch", <//rcom.dynamicyield.com>; rel="preconnect", <//async-px.dynamicyield.com>; rel="dns-prefetch", <//async-px.dynamicyield.com>; rel="preconnect"
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: LhQ-sKmohLOLQ2TBBcSMpMvVEZuEimCixWqRewpSGS91CNaAm4Xygw==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   86641
Md5:    620d86107f628d03596b4232dd0ca0bd
Sha1:   64d60c3248494f8f5882170a04693c056403d4e4
Sha256: 686bed4d5986c1931c253e25bc5d0f288727aef6bea5136de2699162e900abe0
                                        
                                            GET /dist/0d878b14dafde44d1583b782a781a1275875833e/vendor.js HTTP/1.1 
Host: s3.adlibris.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.adlibris.com/no/bok/textiles-of-the-banjara-9780500518373?kk=a4c6293-184cfe109f1-2f180a&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Kwon%2C+Charlotte+Textiles+of+the+Banjara+
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         23.32.107.239
HTTP/2 200 OK
content-type: application/x-javascript
                                        
content-md5: VphjcGhODMXKJ3NV+ONlpQ==
last-modified: Mon, 21 Nov 2022 09:20:49 GMT
accept-ranges: bytes
etag: "0x8DACBA1AE066D89"
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
vary: Origin, Accept-Encoding
content-encoding: gzip
date: Thu, 01 Dec 2022 22:49:03 GMT
cache-control: max-age=5184000
access-control-allow-origin: https://www.adlibris.com
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   110007
Md5:    bf50ec4a552e46066f15dc75f1bcbf45
Sha1:   a25f421d5525cd830a4fd5b5b0d50ff0468e7b11
Sha256: e554f6bebd91283244c1bae4aa66d7a5d696a181c32955f989c8d73ff4080f1c
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 01 Dec 2022 22:49:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  gzip compressed data, from Unix\012- data
Size:   58673
Md5:    9021e2889faa42b3285bdf23b9eff56f
Sha1:   2cf42a5b6fdf6fdf02849ca76adde07ad6773683
Sha256: 756ad8cd13071e434b8ba1ec6c8862dd881a75d8ba3fbb1454479500b5eaed45
                                        
                                            GET /pagead/1p-user-list/1057673113/?random=1669934942904&cv=11&fst=1669932000000&bg=ffffff&guid=ON&async=1&gtm=2wgbu0&u_w=1280&u_h=1024&label=YVGECIm2kAEQmZ-r-AM&frm=0&url=https%3A%2F%2Fwww.adlibris.com%2Fno%2Fbok%2Ftextiles-of-the-banjara-9780500518373%3Fkk%3Da4c6293-184cfe109f1-2f180a%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DKwon%252C%2BCharlotte%2BTextiles%2Bof%2Bthe%2BBanjara%2B&ref=https%3A%2F%2Fno-go.kelkoogroup.net%2F&tiba=Textiles%20of%20the%20Banjara%20-%20Charlotte%20Kwon%2C%20Tim%20McLaughlin%20-%20innbundet(9780500518373)%20%7C%20Adlibris%20Bokhandel&data=ecomm_totalvalue%3D%3Becomm_pagetype%3Dsiteview%3Becomm_prodid%3D%3Becomm_pname%3D%3Becomm_pvalue%3D%3Becomm_quantity%3D%3Becomm_category%3D&fmt=3&is_vtc=1&random=653730824&rmt_tld=1&ipr=y HTTP/1.1 
Host: www.google.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.adlibris.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.163
HTTP/2 200 OK
content-type: image/gif
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 01 Dec 2022 22:49:05 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /pagead/1p-user-list/1057673113/?random=1669934942904&cv=11&fst=1669932000000&bg=ffffff&guid=ON&async=1&gtm=2wgbu0&u_w=1280&u_h=1024&label=YVGECIm2kAEQmZ-r-AM&frm=0&url=https%3A%2F%2Fwww.adlibris.com%2Fno%2Fbok%2Ftextiles-of-the-banjara-9780500518373%3Fkk%3Da4c6293-184cfe109f1-2f180a%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DKwon%252C%2BCharlotte%2BTextiles%2Bof%2Bthe%2BBanjara%2B&ref=https%3A%2F%2Fno-go.kelkoogroup.net%2F&tiba=Textiles%20of%20the%20Banjara%20-%20Charlotte%20Kwon%2C%20Tim%20McLaughlin%20-%20innbundet(9780500518373)%20%7C%20Adlibris%20Bokhandel&data=ecomm_totalvalue%3D%3Becomm_pagetype%3Dsiteview%3Becomm_prodid%3D%3Becomm_pname%3D%3Becomm_pvalue%3D%3Becomm_quantity%3D%3Becomm_category%3D&fmt=3&is_vtc=1&random=653730824&rmt_tld=0&ipr=y HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.adlibris.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.132
HTTP/2 200 OK
content-type: image/gif
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 01 Dec 2022 22:49:05 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            POST /no/productmetadata HTTP/1.1 
Host: www.adlibris.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.adlibris.com/no/bok/textiles-of-the-banjara-9780500518373?kk=a4c6293-184cfe109f1-2f180a&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Kwon%2C+Charlotte+Textiles+of+the+Banjara+
X-Requested-With: XMLHttpRequest
Content-Type: application/json;charset=utf-8
Content-Length: 143
Origin: https://www.adlibris.com
Connection: keep-alive
Cookie: culture=nb-NO; shopperID=B0DC23EE58764C3EAA812593D12FE1C4; adss=nb-NO-f3e33d9d23804d77a70b393b8ccf05de-638055353432138763; lastProductPageVisitedId=7c62cc5c-7cec-4a98-a553-41f1e03bac29; __RequestVerificationToken=fUih95H96Yj4i7qpLmGLGhcMm01SdmyFkpSoVGx4JLPWLEWfYQFUHQmJF2fIsLVsY2eFVmwjSNhvqvfW_SHAQDuZYcM1; BBN0167c7a4=019a302dc255012e7fcd6a1bbefcebba3b0965596997505d24812e1286607fa94448227e2485071f16252238d9df7d8d3a2948e320
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         23.32.107.239
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
expires: -1
x-ua-compatible: IE=Edge,chrome=1
content-length: 340
feature-policy: geolocation 'none';midi 'none';microphone 'none';camera 'none';magnetometer 'none';gyroscope 'none';speaker 'self';fullscreen 'self';payment 'none';
referrer-policy: no-referrer-when-downgrade
x-content-type-options: nosniff
x-frame-options: sameorigin
x-xss-protection: 1; mode=block
strict-transport-security: max-age=14515200
date: Thu, 01 Dec 2022 22:49:05 GMT
vary: Content-Encoding, Accept-Encoding
set-cookie: notify=; expires=Wed, 01-Dec-2021 22:49:04 GMT; path=/; secure BBN0167c7a4=019a302dc255012e7fcd6a1bbefcebba3b0965596997505d24812e1286607fa94448227e2485071f16252238d9df7d8d3a2948e320; Path=/; Secure; HTTPOnly
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , Unicode text, UTF-8 text, with very long lines (498), with no line terminators
Size:   340
Md5:    46b09c93d9ac382547561d7bc56c83eb
Sha1:   8fbf9ad699ccb2602b2b79d157b06a9a52ddc83c
Sha256: 4ba624847cd91b92ecc1e264d8fbfb1ffa4442328a6b7687ce531027b1e45e2b
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 01 Dec 2022 22:49:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 01 Dec 2022 22:49:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /staticimages/home-screen/home-screen-192x192.png HTTP/1.1 
Host: www.adlibris.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.adlibris.com/no/bok/textiles-of-the-banjara-9780500518373?kk=a4c6293-184cfe109f1-2f180a&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Kwon%2C+Charlotte+Textiles+of+the+Banjara+
Connection: keep-alive
Cookie: culture=nb-NO; shopperID=B0DC23EE58764C3EAA812593D12FE1C4; adss=nb-NO-f3e33d9d23804d77a70b393b8ccf05de-638055353432138763; lastProductPageVisitedId=7c62cc5c-7cec-4a98-a553-41f1e03bac29; __RequestVerificationToken=fUih95H96Yj4i7qpLmGLGhcMm01SdmyFkpSoVGx4JLPWLEWfYQFUHQmJF2fIsLVsY2eFVmwjSNhvqvfW_SHAQDuZYcM1; BBN0167c7a4=019a302dc255012e7fcd6a1bbefcebba3b0965596997505d24812e1286607fa94448227e2485071f16252238d9df7d8d3a2948e320; _gcl_au=1.1.1143823892.1669934943; referral=kelkoono; didomi_9H2NwbqT=eyJ1c2VyX2lkIjoiMTg0Y2ZlMTAtODJmNC02M2FhLWE2MTMtMTRmNjMyMjBiZmU1IiwiY3JlYXRlZCI6IjIwMjItMTItMDFUMjI6NDk6MDMuMzI0WiIsInVwZGF0ZWQiOiIyMDIyLTEyLTAxVDIyOjQ5OjAzLjMyNFoiLCJ2ZXJzaW9uIjpudWxsfQ==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         23.32.107.239
HTTP/2 200 OK
content-type: image/png
                                        
last-modified: Mon, 13 Jun 2022 11:12:50 GMT
accept-ranges: bytes
etag: "0a5b684167fd81:0"
x-ua-compatible: IE=Edge,chrome=1
content-length: 4901
feature-policy: geolocation 'none';midi 'none';microphone 'none';camera 'none';magnetometer 'none';gyroscope 'none';speaker 'self';fullscreen 'self';payment 'none';
referrer-policy: no-referrer-when-downgrade
x-content-type-options: nosniff
x-frame-options: sameorigin
x-xss-protection: 1; mode=block
strict-transport-security: max-age=14515200
cache-control: max-age=5184000
date: Thu, 01 Dec 2022 22:49:05 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Size:   4901
Md5:    61f8cffc9bb3aa923c59b1741a608638
Sha1:   dc35391f850f859d53b6fc73586d8b48771effd2
Sha256: 08b662c419d9a09a2b1fd0a17ef7ab1a89d899e60ba5119f80eece37413efb22
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         
                                        


--- Additional Info ---
                                        
                                            GET /st?sec=9877494&inHead=true&id=0&jsession=&ref=https%3A%2F%2Fno-go.kelkoogroup.net%2F&scriptVersion=1.140.0&dyid_server=&ctx=%7B%22type%22%3A%22PRODUCT%22%2C%22data%22%3A%5B%229780500518373%22%5D%7D&noConsent=true HTTP/1.1 
Host: st-eu.dynamicyield.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.adlibris.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         54.230.111.122
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                        
date: Thu, 01 Dec 2022 22:49:04 GMT
cache-control: no-cache
expires: Thu, 01 Dec 2022 22:49:03 GMT
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR ADM DEV OUR BUS"
access-control-allow-origin: *
set-cookie: DYID=--; Max-Age=-1; Domain=.dynamicyield.com; Path=/; Expires=Thu, 01 Dec 2022 22:49:04 GMT; Secure; SameSite=None DYSES=--; Max-Age=-1; Domain=.dynamicyield.com; Path=/; Expires=Thu, 01 Dec 2022 22:49:04 GMT; Secure; SameSite=None
vary: Accept-Encoding
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: hVdoZwMq_ge51GQ9L6W4qUZFK31GM-u5WSCqEiFtCD-5r1odnG4PMA==
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /ui-gdpr-en.b0923c718d4f102971bad68b2699543d26e1e20a.js HTTP/1.1 
Host: sdk.privacy-center.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.adlibris.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         54.230.111.7
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
date: Mon, 28 Nov 2022 08:27:04 GMT
last-modified: Mon, 28 Nov 2022 08:22:52 GMT
etag: W/"c0c2a3b2fcfbc4e4e41b2be7da7f4ae9"
x-amz-server-side-encryption: AES256
x-amz-meta-s3cmd-attrs: atime:1669623408/ctime:1669623408/gid:0/gname:root/md5:c0c2a3b2fcfbc4e4e41b2be7da7f4ae9/mode:33188/mtime:1669623408/uid:0/uname:root
cache-control: public, max-age=31536000
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 8pMqCsQZNH1W05Cu6e-oTTt8mfvae6BP_bliIskQyRSGYM_y8HAqrQ==
age: 310921
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /track.js?wid=31W6PHWB HTTP/1.1 
Host: app.kuvio.io
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.adlibris.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         54.230.111.87
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Wed, 30 Nov 2022 07:04:45 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: 4eYK14QlMscBHNA6kXWmaUP2ka8IFTxX
server: AmazonS3
content-encoding: gzip
date: Thu, 01 Dec 2022 07:04:52 GMT
etag: W/"8b9add1d50c849a6ce02ea4f2ab8195f"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 64YiOO1SI4SewL98p-FCla-rptPep5rJ6fSIMb8wh3PxDgd6QzD0CA==
age: 56653
X-Firefox-Spdy: h2


--- Additional Info ---