| www.glosserier.com/glosser/noref/?tg=https://track.webgains.com/click.html?wgcampaignid=1603355&wgprogramid=285505&clickref=wubuvhkbld5id9cmi0j4c1r4 |  104.21.11.181 | 302 Found | 0 B |
URL HTTP/1.1www.glosserier.com/glosser/noref/?tg=https://track.webgains.com/click.html?wgcampaignid=1603355&wgprogramid=285505&clickref=wubuvhkbld5id9cmi0j4c1r4 IP104.21.11.181:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /glosser/noref/?tg=https://track.webgains.com/click.html?wgcampaignid=1603355&wgprogramid=285505&clickref=wubuvhkbld5id9cmi0j4c1r4 HTTP/1.1
Host: www.glosserier.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Date: Fri, 03 Feb 2023 17:06:27 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Referrer-Policy: no-referrer
Location: https://track.webgains.com/click.html?wgcampaignid=1603355&wgprogramid=285505&clickref=wubuvhkbld5id9cmi0j4c1r4
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Kc2bMZtzIrx5Dy4yyO%2B9jYRbznrM10ot894yejF4oLja00FE66GLzQCXiucNFAYl3nMnSLg7UIwRDM%2FXTTLVXBA4xZEJb3mVQQMu8vGp2H5CCCwRvug7MzemfDJHOLQSFDhS7Mk%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 793cc1d9aff50b4d-OSL
alt-svc: h2=":443"; ma=60
|
|
| r3.o.lencr.org/ |  23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash81713f952b51a865ad9764cde68e3fdb 278c3a9c4bb2a0ffb7375f90d89a1ba6e90a766a c2eb0d8a24ecb51af28f1c71db4b9a95c568dcf6c94b41ee8c78787a4ebebcef
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C2EB0D8A24ECB51AF28F1C71DB4B9A95C568DCF6C94B41EE8C78787A4EBEBCEF"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6502
Expires: Fri, 03 Feb 2023 18:54:49 GMT
Date: Fri, 03 Feb 2023 17:06:27 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashe935ea42be4feaed61a824b0b903913e f966cfa80d65a805cb9d7c6a53b3340865d7c51a eb0ce9ae50d156fe5924b2d77346735e4e93b5240cff301c9aa835bb0b385815
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EB0CE9AE50D156FE5924B2D77346735E4E93B5240CFF301C9AA835BB0B385815"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15609
Expires: Fri, 03 Feb 2023 21:26:36 GMT
Date: Fri, 03 Feb 2023 17:06:27 GMT
Connection: keep-alive
|
|
| firefox.settings.services.mozilla.com/v1/ |  35.241.9.150 | 200 OK | 939 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/ IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hashff250d3ef3fa45322bf05039a0122a9f b3e7a2c383bce1bab807dbe1a03c375258b51f1d d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Backoff, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 03 Feb 2023 16:43:35 GMT
content-type: application/json
age: 1372
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash9a76feabb767086ae0fa54e0ffbf763f 3655d78994a1e9838340669462728b67c8c12e54 bf215ab858c7785b7c01f7d3d437a918f056f00fe9b065820e1cdd09b7bba8f9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BF215AB858C7785B7C01F7D3D437A918F056F00FE9B065820E1CDD09B7BBA8F9"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14796
Expires: Fri, 03 Feb 2023 21:13:03 GMT
Date: Fri, 03 Feb 2023 17:06:27 GMT
Connection: keep-alive
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain | 34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hash7b922915ebf1fa3639b333f994c74f24 144a3f80b98fd0652d4614f24cf6cbbee40f8938 adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 9OCQdv2/2SsBuTruFsrtdPcmFLrE0/ShkFBy3urZuWzVHnR6uhxF/bpigl+b0y1vO72c7yMIfBs=
x-amz-request-id: 78BJ9GEHJ4XHZMNH
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 03 Feb 2023 16:52:29 GMT
age: 838
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 17:06:27 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.sca1b.amazontrust.com/ | 143.204.42.156 | 200 OK | 471 B |
URL HTTP/1.1ocsp.sca1b.amazontrust.com/ IP143.204.42.156:0
Hash7edc0e0c28a4976e2872ac0da6a592e8 9e5d4c4132198449a852d2e161e203cd1aa0caeb 22e4c22f0f3a730b83ccee68c2d84a32bd3ad479b5b5a60508cbf09e7c33443a
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Fri, 03 Feb 2023 17:06:28 GMT
Last-Modified: Fri, 03 Feb 2023 16:06:00 GMT
Server: ECS (nyb/1D22)
X-Cache: Miss from cloudfront
Via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: TTVZObYW-4BmgnowGc2Mr1MT71JkihJozAIoJemGgmzktWZC2ijJtg==
Age: 3628
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 35.241.9.150 | 200 OK | 329 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Last-Modified, Cache-Control, Pragma, ETag, Backoff, Content-Type, Alert, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 03 Feb 2023 16:07:19 GMT
age: 3549
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| c.saramart.com/4c9i?wgu=285505_1603355_16754439880973_b52dab9171&wgexpiry=1706979988&affSub=285505_1603355_16754439880973_b52dab9171&affSub5=1335525 | 104.18.31.31 | 302 Found | 0 B |
URL HTTP/2c.saramart.com/4c9i?wgu=285505_1603355_16754439880973_b52dab9171&wgexpiry=1706979988&affSub=285505_1603355_16754439880973_b52dab9171&affSub5=1335525 IP104.18.31.31:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /4c9i?wgu=285505_1603355_16754439880973_b52dab9171&wgexpiry=1706979988&affSub=285505_1603355_16754439880973_b52dab9171&affSub5=1335525 HTTP/1.1
Host: c.saramart.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
date: Fri, 03 Feb 2023 17:06:28 GMT
content-length: 0
location: https://m5i6q-alternate.app.link?af_dp=saramart%3A%2F%2Findex%3Ff%3Dp_webgains.o_suxi.g_affiliate.m_webgains.c_saramart-DACH-UK-IT-ES-FR-homepage.t_20210420-203152.sub_-GE-1-285505-5F1603355-5F16754439880973-5Fb52dab9171.sub5_-GE-1-1335525.v_1&%24fallback_url=https%3A%2F%2Fwww.saramart.pl%3Ff%3Dp_webgains.o_suxi.g_affiliate.m_webgains.c_saramart-DACH-UK-IT-ES-FR-homepage.t_20210420-203152.sub_-GE-1-285505-5F1603355-5F16754439880973-5Fb52dab9171.sub5_-GE-1-1335525.v_1%26install_banner%3Dbranch&%24ios_passive_deepview=false&%24android_passive_deepview=false&wgu=285505_1603355_16754439880973_b52dab9171&wgexpiry=1706979988
x-envoy-upstream-service-time: 0
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 793cc1de28c4b506-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash8913af0be619500295008bb91f506660 a7b8068ba9aa506205a295b24458c2616997a0d1 6a9838d00256431807ca382fc205064b07c08d5054f2895c2ae3cc4e9094179a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6A9838D00256431807CA382FC205064B07C08D5054F2895C2AE3CC4E9094179A"
Last-Modified: Wed, 01 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6724
Expires: Fri, 03 Feb 2023 18:58:32 GMT
Date: Fri, 03 Feb 2023 17:06:28 GMT
Connection: keep-alive
|
|
| ocsp.digicert.com/ |  93.184.220.29 | 200 OK | 280 B |
IP93.184.220.29:0
Hashe46ed5a55d4526934d2886424185dd45 20ff4f3ec59a0ef083d3048640924f461b55cbbb 639c416b3fb0596183470c05d1efc6a2855c8366e2edc648b810e64b8d6d019f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 358
Cache-Control: max-age=121348
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 17:06:28 GMT
Etag: "63dc74b2-118"
Expires: Sun, 05 Feb 2023 02:48:56 GMT
Last-Modified: Fri, 03 Feb 2023 02:42:58 GMT
Server: ECS (amb/6B76)
X-Cache: HIT
Content-Length: 280
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 280 B |
IP93.184.220.29:0
Hashe46ed5a55d4526934d2886424185dd45 20ff4f3ec59a0ef083d3048640924f461b55cbbb 639c416b3fb0596183470c05d1efc6a2855c8366e2edc648b810e64b8d6d019f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 358
Cache-Control: max-age=121348
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 17:06:28 GMT
Etag: "63dc74b2-118"
Expires: Sun, 05 Feb 2023 02:48:56 GMT
Last-Modified: Fri, 03 Feb 2023 02:42:58 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 280
|
|
| push.services.mozilla.com/ | 52.34.31.66 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP52.34.31.66:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: hbUjlMpRow53SORAFAmqUA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: x3UBpU8nBoycKb29HIBnLKjlFbg=
|
|
| s4.forcloudcdn.com/-/libs/fd-polyfill/1.1.2/polyfill.js,libs/fd-f/3.6.3/f.js,libs/fd-image/1.6.0/image.js,libs/fd-base/1.8.1/base.js,libs/fd-tracker-utils/1.3.5/trackerUtils.js | 104.18.24.201 | 200 OK | 22 kB |
URL HTTP/2s4.forcloudcdn.com/-/libs/fd-polyfill/1.1.2/polyfill.js,libs/fd-f/3.6.3/f.js,libs/fd-image/1.6.0/image.js,libs/fd-base/1.8.1/base.js,libs/fd-tracker-utils/1.3.5/trackerUtils.js IP104.18.24.201:0
File typeASCII text, with very long lines (48990), with no line terminators Hashe0b3d9a64fd8eb75be6b5683d762dbdd f828ba040f17625c911b9bf24e04505d87ec0ef6 31ac4321980fea256bda5f1bc67d8fcf0b385eaa85ecd3a8b9874a3849f7746a
GET /-/libs/fd-polyfill/1.1.2/polyfill.js,libs/fd-f/3.6.3/f.js,libs/fd-image/1.6.0/image.js,libs/fd-base/1.8.1/base.js,libs/fd-tracker-utils/1.3.5/trackerUtils.js HTTP/1.1
Host: s4.forcloudcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.saramart.pl/
Origin: https://www.saramart.pl
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:06:29 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-bgj: minify
cf-polished: origSize=48994
etag: W/"bf62-s2nTb79PPQvt0ImOd1mGgE3knQE"
last-modified: Thu, 02 Feb 2023 08:34:13 GMT
vary: Origin, Accept-Encoding
x-cache-status: MISS
web: aws-ir1-front-cdnsrc-prod-016055
cf-cache-status: HIT
age: 79510
expires: Sat, 03 Feb 2024 17:06:29 GMT
server: cloudflare
cf-ray: 793cc1e40cb4b521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| dot-hub-x.saramart.pl/api/v2/dotRecords |  188.114.97.1 | 204 No Content | 0 B |
URL HTTP/2dot-hub-x.saramart.pl/api/v2/dotRecords IP188.114.97.1:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/v2/dotRecords HTTP/1.1
Host: dot-hub-x.saramart.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.saramart.pl/
Origin: https://www.saramart.pl
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 204 No Content
date: Fri, 03 Feb 2023 17:06:29 GMT
access-control-allow-origin: https://www.saramart.pl
access-control-allow-credentials: true
access-control-allow-methods: GET, HEAD, POST, PUT, PATCH, DELETE, OPTIONS
access-control-max-age: 86400
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, x-token, Authorization, x-xsrf-token
allow: GET, HEAD, POST, PUT, DELETE, OPTIONS, PATCH
front-end-https: on
x-envoy-upstream-service-time: 0
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ob1oGlAKARu9wonuWwnCTFxs1xOWS%2B6o6HutUwzQDuUklACzXoGlXdk5u80fJSsvVgbygeL26Tra0Icg0wuUNgMiJ0QOt4U6i4t1TD%2Bvw1e9ohjYXTyreg1UWm0gt5ofHorXfPAIh1w%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 793cc1e67fecb521-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| s3.forcloudcdn.com/dmc/74481a9c-d3c0-4767-9ae8-46982a7dfe41.svg | 104.18.24.201 | 200 OK | 1.5 kB |
URL HTTP/2s3.forcloudcdn.com/dmc/74481a9c-d3c0-4767-9ae8-46982a7dfe41.svg IP104.18.24.201:0
File typeSVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (396), with no line terminators Hash2c5d1d54f7137a49c737988ad95b8f2a 6790b82c10fd52b6d61f2dd88ff9b0831a19f4ec 206986223149b6f0412629ca1d661f25ec88409d0a2c8ae2a4daf1d5307012f2
GET /dmc/74481a9c-d3c0-4767-9ae8-46982a7dfe41.svg HTTP/1.1
Host: s3.forcloudcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.saramart.pl/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:06:29 GMT
content-type: image/svg+xml
x-amz-id-2: 146CJqiVkcXk/NDEyAji9SW1mITyVNdYyU3uLWaphswHDM7rUWXKh/JT4z3vJ87k1ae3RMfq8nY=
x-amz-request-id: 80XC3J07TJEGPE9W
last-modified: Wed, 30 Dec 2020 08:30:36 GMT
etag: W/"3520216d5ce195f409fbc5d3e64e6e0a"
x-amz-version-id: 8wujHREmt8QXzvxlXJSTmd3tny0soDtR
cf-cache-status: HIT
age: 110678
expires: Sat, 11 Feb 2023 17:06:29 GMT
cache-control: public, max-age=691200
vary: Accept-Encoding
server: cloudflare
cf-ray: 793cc1e40d6cb527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| s4.forcloudcdn.com/-/libs/fd-base-style/1.4.2/base.pc.css,libs/fd-pc-module/1.6.13/header.sm.css,libs/fd-pc-module/1.6.13/footer.sm.css | 104.18.24.201 | 200 OK | 12 kB |
URL HTTP/2s4.forcloudcdn.com/-/libs/fd-base-style/1.4.2/base.pc.css,libs/fd-pc-module/1.6.13/header.sm.css,libs/fd-pc-module/1.6.13/footer.sm.css IP104.18.24.201:0
File typeASCII text, with very long lines (36317), with no line terminators Hash3232caf6c7defca762976730f8de3ba3 a5cf84a59d2f4a42177a585d71afbfde23daebd1 c78fc881bb1607408f9d5f594783020c8ad47a383cb5b356da85bb05b3f13224
GET /-/libs/fd-base-style/1.4.2/base.pc.css,libs/fd-pc-module/1.6.13/header.sm.css,libs/fd-pc-module/1.6.13/footer.sm.css HTTP/1.1
Host: s4.forcloudcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.saramart.pl/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:06:29 GMT
content-type: text/css; charset=utf-8
cache-control: public, max-age=31536000
cf-bgj: minify
cf-polished: origSize=36345
etag: W/"8df9-rEAYl70pORuhQgptKl7ONYEIX4A"
last-modified: Wed, 10 Aug 2022 02:53:19 GMT
vary: Origin, Accept-Encoding
x-cache-status: HIT
web: aws-ir1-front-cdnsrc-prod-026130
cf-cache-status: HIT
age: 1456405
expires: Sat, 03 Feb 2024 17:06:29 GMT
server: cloudflare
cf-ray: 793cc1e3fd55b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| s4.forcloudcdn.com/assets/pc-sm-home/0.1.12/index.js | 104.18.24.201 | 200 OK | 27 kB |
URL HTTP/2s4.forcloudcdn.com/assets/pc-sm-home/0.1.12/index.js IP104.18.24.201:0
File typeUnicode text, UTF-8 text, with very long lines (60158) Hashd01b962071f6726e66ad87200a043fac 9c9140753721a8a5bdbf542d3ff0bdcf876e8a7d 744f34b4fbefd3831465dc08f41571d1b299f8d86629eb803184f649fdb040be
GET /assets/pc-sm-home/0.1.12/index.js HTTP/1.1
Host: s4.forcloudcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.saramart.pl/
Origin: https://www.saramart.pl
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:06:29 GMT
content-type: application/javascript
access-control-allow-methods: GET
access-control-allow-origin: *
access-control-max-age: 6000
cache-control: public, max-age=31536000
cf-bgj: minify
cf-polished: origSize=76830
etag: W/"cbef801e91f394691fc29f49c0e56c79"
last-modified: Mon, 20 Dec 2021 10:35:36 GMT
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Origin
x-amz-id-2: uNFDuSfbYrlkgXiU3Gjgmiqr5EOfO4P2vIi2bR0tfZWtVdgfSENaEvgIynK1Bvnp6fpDdcdilO8=
x-amz-request-id: 8WWS03TZ44FF6PM0
x-amz-version-id: KuUoeswyhofpBaCGseeJtElMp9z4o3AV
cf-cache-status: HIT
age: 110678
expires: Sat, 03 Feb 2024 17:06:29 GMT
server: cloudflare
cf-ray: 793cc1e3fca3b521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| s4.forcloudcdn.com/-/libs/fd-url/1.5.2/url.js,libs/fd-dwp/1.9.6/dwp.js,libs/fd-dce/1.1.2/dce.js,libs/fd-f-dot/1.0.2/fDot.js,libs/fd-logger/1.8.12/logger.js,libs/fd-tracker/2.4.15/tracker.js,libs/fd-promotion/1.11.0/promotion.js | 104.18.24.201 | 200 OK | 39 kB |
URL HTTP/2s4.forcloudcdn.com/-/libs/fd-url/1.5.2/url.js,libs/fd-dwp/1.9.6/dwp.js,libs/fd-dce/1.1.2/dce.js,libs/fd-f-dot/1.0.2/fDot.js,libs/fd-logger/1.8.12/logger.js,libs/fd-tracker/2.4.15/tracker.js,libs/fd-promotion/1.11.0/promotion.js IP104.18.24.201:0
File typeUnicode text, UTF-8 text, with very long lines (65464), with no line terminators Hasha52e5a5799d2fef3bf012406e12a0752 5f4c22dbc588f097c89839e7fecc2f85fea54c63 ebb4a9b523793d70d58da6c4eaa843889731159105f33f7d406a407194f7232b
GET /-/libs/fd-url/1.5.2/url.js,libs/fd-dwp/1.9.6/dwp.js,libs/fd-dce/1.1.2/dce.js,libs/fd-f-dot/1.0.2/fDot.js,libs/fd-logger/1.8.12/logger.js,libs/fd-tracker/2.4.15/tracker.js,libs/fd-promotion/1.11.0/promotion.js HTTP/1.1
Host: s4.forcloudcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.saramart.pl/
Origin: https://www.saramart.pl
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:06:29 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-bgj: minify
cf-polished: origSize=132777
etag: W/"206a9-0XrKJ9okp+0aTNldmPOxgZ5KU58"
last-modified: Wed, 01 Feb 2023 03:20:34 GMT
vary: Origin, Accept-Encoding
x-cache-status: MISS
web: aws-ir1-front-cdnsrc-prod-028094
cf-cache-status: HIT
age: 79510
expires: Sat, 03 Feb 2024 17:06:29 GMT
server: cloudflare
cf-ray: 793cc1e3fca5b521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash9c45ea25709afbea416f215ee34611b0 117c52c0ee3ff15a2485c0b1e39cc12c7c2021ed 7fbc3c806c7fc6d70d70b55723dbbfc00698b14fcad55014218bc5e03e92a118
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 17:06:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| sc-static.net/scevent.min.js | 54.230.82.240 | 200 OK | 13 kB |
URL HTTP/2sc-static.net/scevent.min.js IP54.230.82.240:0
File typeASCII text, with very long lines (30923), with no line terminators Hash957d65dfa972893511879b4d2abce54b a0106f59c171c72c527a88cc3b06263af186a5c4 24cae1a14856e2642826fe9d960b0e61ae60fa45a778ec61f2b7d862dc3af603
GET /scevent.min.js HTTP/1.1
Host: sc-static.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.saramart.pl/
Origin: https://www.saramart.pl
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
content-length: 13270
server: CloudFront
date: Fri, 03 Feb 2023 17:06:29 GMT
content-encoding: gzip
access-control-allow-origin: *
access-control-allow-headers: Content-Type
cache-control: private, s-maxage=0, max-age=600
set-cookie: X-AB=0d6e407936704bd380072f5891d28b0e;max-age=86400;expires=Sat, 04 Feb 2023 15:02:21 GMT;Path=/scevent.min.js; Secure; SameSite=None
x-cache: LambdaGeneratedResponse from cloudfront
via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: HCXjmPYnlezVdmgBrk13kBx30XRd_8W9GKZ0W-RXWK9YzWT5_xw7cA==
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=G-D0PHSXGC6F | 142.250.74.40 | 200 OK | 78 kB |
URL HTTP/2www.googletagmanager.com/gtag/js?id=G-D0PHSXGC6F IP142.250.74.40:0
File typeASCII text, with very long lines (22178) Hash3bf36a48219d5ed4ab4e5cf1cb0bbb83 86abc7b038a66d1c64406123c8ec354e797e56c9 1876774fbf257f3009d5ff545eb6ee783ba70bc85ce1aeb8fda997ba4ba0f52f
GET /gtag/js?id=G-D0PHSXGC6F HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.saramart.pl/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 03 Feb 2023 17:06:29 GMT
expires: Fri, 03 Feb 2023 17:06:29 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 77966
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| cdn.branch.io/branch-latest.min.js | 143.204.55.52 | 200 OK | 22 kB |
URL HTTP/2cdn.branch.io/branch-latest.min.js IP143.204.55.52:0
File typeASCII text, with very long lines (2646) Hash2a6320386437cc44ae1713f25f6ea30b cf60f8578b16e8beddb82eb43d9b1f9db5491650 75622ee3451d62f121868396395909cd979874287141da4de39562ccf1f8f799
GET /branch-latest.min.js HTTP/1.1
Host: cdn.branch.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.saramart.pl/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript
content-length: 22048
content-encoding: gzip
last-modified: Thu, 17 Nov 2022 20:07:47 GMT
x-amz-version-id: LzwY9oP1_KD6QZAz0SCDQRP53VCVCZV0
server: AmazonS3
date: Fri, 03 Feb 2023 17:02:00 GMT
cache-control: max-age=300
etag: "2a6320386437cc44ae1713f25f6ea30b"
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: wx9e-qcv3xJr70lJjVKNSKPoZ-5F3KamtivhLCALTWSHkgAtxNoObA==
age: 269
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash9c45ea25709afbea416f215ee34611b0 117c52c0ee3ff15a2485c0b1e39cc12c7c2021ed 7fbc3c806c7fc6d70d70b55723dbbfc00698b14fcad55014218bc5e03e92a118
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 17:06:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hashd3e050cf67675c3c19014a74517e3747 9931fd6a416e220e15ef5eccad6d0cb12edf3995 8411e23b7bfeba91b6252f15de6ed18b8cff1f752af0efc4f5429b54fccb0da4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3663
Cache-Control: max-age=143388
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 17:06:29 GMT
Etag: "63dcbde2-1d7"
Expires: Sun, 05 Feb 2023 08:56:17 GMT
Last-Modified: Fri, 03 Feb 2023 07:55:14 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471
|
|
| connect.facebook.net/en_US/fbevents.js |  157.240.205.11 | 200 OK | 28 kB |
URL HTTP/2connect.facebook.net/en_US/fbevents.js IP157.240.205.11:0
File typeASCII text, with very long lines (64348) Hashfd586b6d9d38d000e351616c182ddc7f a4713988eecb35a9503131bbfacf099921a7eed4 0c4c1b344698d0f0f6c92719c1129271c51ae6fe7f1d611068ffd794de1209b6
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.saramart.pl/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
report-to: {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/?minimize=0"}],"group":"coep_report"}
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: zRD326UFaT2rX2eEcHvzkZIKk1HocbPD99qgKW69J7nscpNoG/QbObP5G1HvWI22yguZacIVVe92fH7Vp4vNTg==
priority: u=3,i
content-length: 28333
x-fb-trip-id: 1679558926
date: Fri, 03 Feb 2023 17:06:29 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hashd3e050cf67675c3c19014a74517e3747 9931fd6a416e220e15ef5eccad6d0cb12edf3995 8411e23b7bfeba91b6252f15de6ed18b8cff1f752af0efc4f5429b54fccb0da4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3663
Cache-Control: max-age=143388
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 17:06:29 GMT
Etag: "63dcbde2-1d7"
Expires: Sun, 05 Feb 2023 08:56:17 GMT
Last-Modified: Fri, 03 Feb 2023 07:55:14 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashc14d3cf8ade0150a711f094be32ac474 11e7fb5487d364c5392e1594e09f5b49831043ea 2a98ce39894b7d9befdba3916467bc95962376d0b308103e0a1eea36c0bc2302
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2A98CE39894B7D9BEFDBA3916467BC95962376D0B308103E0A1EEA36C0BC2302"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2852
Expires: Fri, 03 Feb 2023 17:54:01 GMT
Date: Fri, 03 Feb 2023 17:06:29 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashc14d3cf8ade0150a711f094be32ac474 11e7fb5487d364c5392e1594e09f5b49831043ea 2a98ce39894b7d9befdba3916467bc95962376d0b308103e0a1eea36c0bc2302
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2A98CE39894B7D9BEFDBA3916467BC95962376D0B308103E0A1EEA36C0BC2302"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2852
Expires: Fri, 03 Feb 2023 17:54:01 GMT
Date: Fri, 03 Feb 2023 17:06:29 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 819 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash3026f0ccffd8fc5aa995a97fa18b7659 ba361609edf92d9ce3c8230334fa77a083328da2 a101610d86c19fb68ab6176c8ef218de36440ec3a1ca09875e8ba513a09897e0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2A98CE39894B7D9BEFDBA3916467BC95962376D0B308103E0A1EEA36C0BC2302"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2852
Expires: Fri, 03 Feb 2023 17:54:01 GMT
Date: Fri, 03 Feb 2023 17:06:29 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashc14d3cf8ade0150a711f094be32ac474 11e7fb5487d364c5392e1594e09f5b49831043ea 2a98ce39894b7d9befdba3916467bc95962376d0b308103e0a1eea36c0bc2302
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2A98CE39894B7D9BEFDBA3916467BC95962376D0B308103E0A1EEA36C0BC2302"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2852
Expires: Fri, 03 Feb 2023 17:54:01 GMT
Date: Fri, 03 Feb 2023 17:06:29 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F64144d1c-f524-496f-8b52-ba63714dbfc5.jpeg | 34.120.237.76 | 200 OK | 24 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F64144d1c-f524-496f-8b52-ba63714dbfc5.jpeg IP34.120.237.76:0
Hash09e90fb1d341c0a6b88e081b570a8eaf 914dcb687e244fd5cc047a81cb92ad1deb29af37 f5f18910f4bb681590d2010c6fd2ddab632b1c182ccdb950f8292dff3739bf9f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F64144d1c-f524-496f-8b52-ba63714dbfc5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11565
x-amzn-requestid: 87a84ffd-1176-4656-aac4-e98f38ec2cd9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fboIrFGboAMFyyQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d48704-162ed8114aa1809204500548;Sampled=0
x-amzn-remapped-date: Sat, 28 Jan 2023 02:23:00 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: w0Zm5V0TQxsQ7917U3fdhS_n7qKE143PuhI2JmNCDM_Pf0yPLyW6yA==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 32c16f33c8f5601364fa8229b0d74dc2.cloudfront.net (CloudFront), 1.1 google
date: Thu, 02 Feb 2023 21:48:01 GMT
age: 69508
etag: "a52c2883bad98fa20333aa639a5dd3a5bf544c8e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49d52576-44b1-4baf-92c0-88f267415a19.jpeg | 34.120.237.76 | 200 OK | 6.1 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49d52576-44b1-4baf-92c0-88f267415a19.jpeg IP34.120.237.76:0
Hash3ee96a14025c36f1b883a5646d65a85a f7afa072c8f84d728b32743545faffd68a9f568a 104b21cf75ed5d305a0ba49c02608a51dd272fb990b8ea6211f778ac22ccc828
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49d52576-44b1-4baf-92c0-88f267415a19.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5641
x-amzn-requestid: b53b54b1-3b00-47cf-a25c-e93910c2ebfb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fuvzpHsXoAMFsuw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dc2ce3-0c4fc8154763febb44460ac2;Sampled=0
x-amzn-remapped-date: Thu, 02 Feb 2023 21:36:36 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: x4-BZdG4JGRKCSdKynnuweZfo9l0XZtDB-MiANy7C2Yz1URYMHP4sQ==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Thu, 02 Feb 2023 21:57:49 GMT
age: 68920
etag: "4978a4a20836b6f5d863d331bcedad782b7b4ac6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b4ea648-021a-44ef-a083-3ea03f73dca3.jpeg | 34.120.237.76 | 200 OK | 11 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b4ea648-021a-44ef-a083-3ea03f73dca3.jpeg IP34.120.237.76:0
Hash22b890f4acdce6261bd71d0d3af58c0e b22b3e924b17be8d04d48057cb51fcd1f5f0128d f424185f3923ba4face987566b14e6a585b8739a677179cf0f3fa40d449eeb8f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b4ea648-021a-44ef-a083-3ea03f73dca3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10796
x-amzn-requestid: 5c9b1a83-c99a-44b9-9a90-5edd7ef1e225
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fi0XKG93oAMFtsA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d76760-01bf754d6c725c3275c02a1b;Sampled=0
x-amzn-remapped-date: Mon, 30 Jan 2023 06:44:48 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: XTZJAn0LMAfFtaQ2bN8z58cCsUT5GzxDMnHVB_iw9E_NskHQ-BgbRQ==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Thu, 02 Feb 2023 22:19:26 GMT
age: 84437
etag: "18e9f8f160d3515f1cb31fc7538ac762a6cab344"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| s3.forcloudcdn.com/dmc/296ca7b3-ba79-4934-ad6f-9f575afe2333.svg | 104.18.24.201 | 200 OK | 11 kB |
URL HTTP/2s3.forcloudcdn.com/dmc/296ca7b3-ba79-4934-ad6f-9f575afe2333.svg IP104.18.24.201:0
File typeSVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (600), with no line terminators Hash2067698a607ebd8dfcef52bd0cd38607 9908d644394c279666b91cd7e7748e8d5ae0d72d 3e2d482ddf6008d71966bc58635999630a28c43c79b8d26324e7f067bdcecd65
GET /dmc/296ca7b3-ba79-4934-ad6f-9f575afe2333.svg HTTP/1.1
Host: s3.forcloudcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.saramart.pl/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:06:29 GMT
content-type: image/svg+xml
x-amz-id-2: ctIBv1ex+EhlR711UDIv526WmyChi13hAw5Q4iYX40VcSUsGRXM4iJZyWldh7b05SqvfzIPdhcY=
x-amz-request-id: 2HA87YEX1PQ0RD5Q
last-modified: Wed, 30 Dec 2020 08:30:36 GMT
etag: W/"60e1a1c021c4a57b7f505fec05cf8033"
x-amz-version-id: BKqB543Nwbd5HqNurKu6FyJJZimZJBGp
cf-cache-status: HIT
age: 373225
expires: Sat, 11 Feb 2023 17:06:29 GMT
cache-control: public, max-age=691200
vary: Accept-Encoding
server: cloudflare
cf-ray: 793cc1e41d74b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F524a46fd-88eb-4539-9d8b-1ac679ae5990.jpeg | 34.120.237.76 | 200 OK | 8.2 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F524a46fd-88eb-4539-9d8b-1ac679ae5990.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash114e345e134986d7451148fcea31b29d 541e878afee68c8802bb52b0cbbe5a5a0a185392 5030244d4babd1023166f39c935029d789a91ba90aa3a44c6f4c88ddc947b678
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F524a46fd-88eb-4539-9d8b-1ac679ae5990.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8211
x-amzn-requestid: 6a1fd567-b34d-4787-aa05-5b7db3fc51c3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fflRBHU4IAMFnsw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d61c06-2d1ec3206d2ebeb4780a84b4;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 07:11:02 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: lUloQ6xaRWpnvMRh7kFvFIWhFotmILLZHfD_YK01RmrQ2vmYKVh46w==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 03:08:32 GMT
age: 50277
etag: "541e878afee68c8802bb52b0cbbe5a5a0a185392"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe4c16006-34b0-45cb-bb9f-46fe6dd44e3c.jpeg | 34.120.237.76 | 200 OK | 13 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe4c16006-34b0-45cb-bb9f-46fe6dd44e3c.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashcf80667db0c35c9c6139eca4ba5d12fd 4c4cfdc2463e8704a7bf8e1477c43b6adf7c7590 d63e69f4b6ea16333d242bf33d4f02a4a6c96a739ca018d86afc5741d85b774d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe4c16006-34b0-45cb-bb9f-46fe6dd44e3c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13065
x-amzn-requestid: 20c6f462-0f1f-44d1-9b6b-6afbc4e79e8b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fpYpcELtIAMFvFg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63da07d5-44cd803c0feba28919b0a9ec;Sampled=0
x-amzn-remapped-date: Wed, 01 Feb 2023 06:33:57 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: T3PhGRcHX1X2hn8K_4587fXBrEyuY5Em-b9Jg41uH4uyQXeFoRBIYg==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 02 Feb 2023 21:46:56 GMT
age: 69573
etag: "4c4cfdc2463e8704a7bf8e1477c43b6adf7c7590"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 6.7 kB |
IP93.184.220.29:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 225x225, components 3\012- data Hash51b1760a9017ccae7108640523566dec 5d3628ca09a8e3deece5a75ba3953dd66630856f fbaa0662baa5970a6a677488465d304e81e32786935acae7bf99c89064fa8f5b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4166
Cache-Control: max-age=139927
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 17:06:30 GMT
Etag: "63dcae67-1d7"
Expires: Sun, 05 Feb 2023 07:58:37 GMT
Last-Modified: Fri, 03 Feb 2023 06:49:11 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 51 kB |
IP93.184.220.29:0
Hash16b67fabdf45fd4bb97de1771be81c54 caba079290b0281fdc53ce15e38ef973f6e961ec 5cdb705f70a4555b280367c543967ced8d476488eb691f55edeed53de8695199
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4166
Cache-Control: max-age=139927
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 17:06:30 GMT
Etag: "63dcae67-1d7"
Expires: Sun, 05 Feb 2023 07:58:37 GMT
Last-Modified: Fri, 03 Feb 2023 06:49:11 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash3dc6e258fc83d07cbca03d0774670dc0 e800ba5425f2c48b4d17aa2e51ffd1d92509114e e775242d430166a832ee4c4f85e96345e24ecaf099dd5dae836ec4ca423fe266
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2031
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 17:06:30 GMT
Last-Modified: Fri, 03 Feb 2023 16:32:39 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash3dc6e258fc83d07cbca03d0774670dc0 e800ba5425f2c48b4d17aa2e51ffd1d92509114e e775242d430166a832ee4c4f85e96345e24ecaf099dd5dae836ec4ca423fe266
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4845
Cache-Control: max-age=140606
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 17:06:30 GMT
Etag: "63dcae67-1d7"
Expires: Sun, 05 Feb 2023 08:09:56 GMT
Last-Modified: Fri, 03 Feb 2023 06:49:11 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 471
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 9.5 kB |
IP93.184.220.29:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 225x225, components 3\012- data Hash7989545f6f077a49c8a96316b7234428 58e0094922c0d93d5d1837c8cbb6b9719a7d10d8 3648cfd2b031365b2a836f4d13eaabf8bfd5c8ffbc657f8ee2fb07c1a3c34770
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4166
Cache-Control: max-age=139927
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 17:06:30 GMT
Etag: "63dcae67-1d7"
Expires: Sun, 05 Feb 2023 07:58:37 GMT
Last-Modified: Fri, 03 Feb 2023 06:49:11 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471
|
|
| tr.snapchat.com/cm/i?pid=312e9ab0-1cf9-461a-8f46-ad5f499b7d4d&u_scsid=cea8a4bd-0c65-4803-a365-df6faf914bd3&u_sclid=73ad3468-1b05-49b6-891e-5e93472d87e4 | 35.190.43.134 | 200 OK | 0 B |
URL HTTP/2tr.snapchat.com/cm/i?pid=312e9ab0-1cf9-461a-8f46-ad5f499b7d4d&u_scsid=cea8a4bd-0c65-4803-a365-df6faf914bd3&u_sclid=73ad3468-1b05-49b6-891e-5e93472d87e4 IP35.190.43.134:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cm/i?pid=312e9ab0-1cf9-461a-8f46-ad5f499b7d4d&u_scsid=cea8a4bd-0c65-4803-a365-df6faf914bd3&u_sclid=73ad3468-1b05-49b6-891e-5e93472d87e4 HTTP/1.1
Host: tr.snapchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.saramart.pl/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:06:30 GMT
content-type: text/html
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-length: 0
x-envoy-upstream-service-time: 0
server: API Gateway
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| tr.snapchat.com/cm/i?pid=252437c7-50e0-4301-a459-98c58c5fc2dc&u_scsid=cea8a4bd-0c65-4803-a365-df6faf914bd3&u_sclid=73ad3468-1b05-49b6-891e-5e93472d87e4 | 35.190.43.134 | 200 OK | 0 B |
URL HTTP/2tr.snapchat.com/cm/i?pid=252437c7-50e0-4301-a459-98c58c5fc2dc&u_scsid=cea8a4bd-0c65-4803-a365-df6faf914bd3&u_sclid=73ad3468-1b05-49b6-891e-5e93472d87e4 IP35.190.43.134:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cm/i?pid=252437c7-50e0-4301-a459-98c58c5fc2dc&u_scsid=cea8a4bd-0c65-4803-a365-df6faf914bd3&u_sclid=73ad3468-1b05-49b6-891e-5e93472d87e4 HTTP/1.1
Host: tr.snapchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.saramart.pl/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:06:30 GMT
content-type: text/html
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-length: 0
x-envoy-upstream-service-time: 0
server: API Gateway
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| tr.snapchat.com/p | 35.190.43.134 | 200 OK | 68 B |
IP35.190.43.134:0
File typePNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data Hashc4a2b870062c2bb98c500bc1526c0498 528666ccdb12997358077bc8fcdbfb6b825c7788 2aa4fa20701cdd6d8d56046069001186b5267e3ee7d0ef618ad2f4a683723e11
POST /p HTTP/1.1
Host: tr.snapchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.saramart.pl/
Content-Type: application/x-www-form-urlencoded
Content-Length: 1512
Origin: https://www.saramart.pl
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:06:30 GMT
access-control-allow-origin: https://www.saramart.pl
cache-control: no-cache, no-transform
set-cookie: sc_at=v2|H4sIAAAAAAAAAAXBCQ0AMAgEMEUkx/iGHAJzgfi1Fx0wE4JnkT405emiESiXs0xhlz1MVTKx+KYLr7YyAAAA;SameSite=None;Version=1;Comment=;Domain=.snapchat.com;Path=/;Max-Age=33696000;Secure
content-type: text/html
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-length: 68
x-envoy-upstream-service-time: 5
server: API Gateway
access-control-allow-credentials: true
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash3dc6e258fc83d07cbca03d0774670dc0 e800ba5425f2c48b4d17aa2e51ffd1d92509114e e775242d430166a832ee4c4f85e96345e24ecaf099dd5dae836ec4ca423fe266
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2031
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 17:06:30 GMT
Last-Modified: Fri, 03 Feb 2023 16:32:39 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471
|
|
| tr.snapchat.com/p | 35.190.43.134 | 200 OK | 10 kB |
IP35.190.43.134:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 225x225, components 3\012- data Hash82e723614c6c1b0d791c6f0733d58e6b 731ffd58730135ce04cc723b2f3726189595f073 f87239f7e8fc25a02776a2ab40b52cdac8de8204cbfa4fd3a9c88434ef1fc5f4
POST /p HTTP/1.1
Host: tr.snapchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.saramart.pl/
Content-Type: application/x-www-form-urlencoded
Content-Length: 1512
Origin: https://www.saramart.pl
Connection: keep-alive
Cookie: sc_at=v2|H4sIAAAAAAAAAAXBCQ0AMAgEMEUkx/iGHAJzgfi1Fx0wE4JnkT405emiESiXs0xhlz1MVTKx+KYLr7YyAAAA
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:06:30 GMT
access-control-allow-origin: https://www.saramart.pl
cache-control: no-cache, no-transform
content-type: text/html
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-length: 68
x-envoy-upstream-service-time: 0
server: API Gateway
access-control-allow-credentials: true
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| app.link/_r?sdk=web2.71.0&branch_key=key_live_bpMqZhY6ql1x2POJPkepIfojrvecZNqH&callback=branch_callback__0 | 54.230.111.23 | 200 OK | 6.1 kB |
URL HTTP/2app.link/_r?sdk=web2.71.0&branch_key=key_live_bpMqZhY6ql1x2POJPkepIfojrvecZNqH&callback=branch_callback__0 IP54.230.111.23:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 225x225, components 3\012- data Hash4e80596c5bc7fe342bb84534df9d42df eb7db27dc1fb63e60f110c58c02d447d2f9e131f 5b06413fc4693746286b374a97fe392483e398314aefd0aa40560f16e750d8d4
GET /_r?sdk=web2.71.0&branch_key=key_live_bpMqZhY6ql1x2POJPkepIfojrvecZNqH&callback=branch_callback__0 HTTP/1.1
Host: app.link
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.saramart.pl/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
content-length: 91
server: openresty
date: Fri, 03 Feb 2023 17:06:30 GMT
set-cookie: _s=S9Z%2FZgkXn%2BsS%2F0lxXm1JHO53FOvy0pgKFYWWS4vR6%2FWUtPjz71HKSFdaDAxzuTSP; Max-Age=31536000; Domain=.app.link; Path=/; Expires=Sat, 03 Feb 2024 17:06:30 GMT; Secure
x-content-type-options: nosniff
etag: W/"5b-CHH5gBGDxGZkNBDOLagGkmQkPHg"
strict-transport-security: max-age=31536000; includeSubDomains
x-cache: Miss from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: XkyYzeFR9CDiGcnhGCt3H0-JM_Ty_-d9gFmCHL2IrsY70kcNT1gx1g==
X-Firefox-Spdy: h2
|
|
| client-metrics.saramart.pl/api/dotMets | 188.114.97.1 | 204 No Content | 0 B |
URL HTTP/2client-metrics.saramart.pl/api/dotMets IP188.114.97.1:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/dotMets HTTP/1.1
Host: client-metrics.saramart.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.saramart.pl/
Origin: https://www.saramart.pl
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 204 No Content
date: Fri, 03 Feb 2023 17:06:30 GMT
access-control-allow-origin: https://www.saramart.pl
access-control-allow-credentials: true
access-control-allow-methods: GET, HEAD, POST, PUT, PATCH, DELETE, OPTIONS
access-control-max-age: 86400
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, x-token, Authorization, x-xsrf-token
allow: GET, HEAD, POST, PUT, DELETE, OPTIONS, PATCH
front-end-https: on
x-envoy-upstream-service-time: 0
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YRkm5Q6DkWkWm47XD1I0MWLYTDfR15sjW2Vbe40VUVlNo54k6UnmIN8kbMOGbaaVw3GLKzHfE8pXkkFddalPX2bscYYRGABFcaV9cHXD9jVcPnb0lfxtJSZFy8dQCPDn5yoV%2Fsx3GX24hvqaEw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 793cc1edba08b521-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| status.geotrust.com/ | 93.184.220.29 | 200 OK | 10 kB |
IP93.184.220.29:0
Hash2594d4c70c56b4c864fd7dfb50450b9f effb362a25db88ea2af725ba09b7f3ca196c81e7 dedac748e1812d0ab8c6df85145a66951910820ed9474647e55b5f0a0daf6402
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5582
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 17:06:30 GMT
Last-Modified: Fri, 03 Feb 2023 15:33:28 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
|
|
| 492ef91c085f4c098e1ad2e8b2c1b840-b1c895c26dcd.cdn.forter.com/prop.json | 100.26.87.64 | 200 OK | 2 B |
URL HTTP/1.1492ef91c085f4c098e1ad2e8b2c1b840-b1c895c26dcd.cdn.forter.com/prop.json IP100.26.87.64:0
File typeJSON data\012- , ASCII text, with no line terminators Hash99914b932bd37a50b983c5e7c90ae93b bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
POST /prop.json HTTP/1.1
Host: 492ef91c085f4c098e1ad2e8b2c1b840-b1c895c26dcd.cdn.forter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.saramart.pl/
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://www.saramart.pl
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 17:06:30 GMT
Server: Apache
Last-Modified: Mon, 26 Dec 2022 12:09:06 GMT
ETag: "2-5f0ba0080600f"
Accept-Ranges: bytes
Content-Length: 2
Cache-Control: max-age=0, no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Access-Control-Allow-Origin: https://www.saramart.pl
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: *
Access-Control-Allow-Headers: origin, x-requested-with, content-type, x-csrf-token
Access-Control-Allow-Methods: PUT, GET, POST, DELETE, OPTIONS
Connection: close
Content-Type: application/json
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 14 kB |
IP142.250.74.131:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 225x225, components 3\012- data Hashbc93f7788704efd345bb2c281bbd138d a48009ae7bc32708f154623118b03f2119a3dce0 aaa1da97f5342b5103eecf28f187e1a767160594814fb9936ac664d0d6970ed8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 17:06:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash9bfd33253208c9d034988400d66abd5d 8811fd76d9bc56c15431433f8f08d648185992ed 6382de7eb2bc0b40dc6d2e21ab8b6cb90cc0effe3241e3fb5008d2e4f626e92c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 17:06:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-D0PHSXGC6F&cid=13156886.1675444022>m=45je3210&aip=1&z=939196436 | 142.250.74.35 | 200 OK | 42 B |
URL HTTP/2www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-D0PHSXGC6F&cid=13156886.1675444022>m=45je3210&aip=1&z=939196436 IP142.250.74.35:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashd89746888da2d9510b64a9f031eaecd5 d5fceb6532643d0d84ffe09c40c481ecdf59e15a ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-D0PHSXGC6F&cid=13156886.1675444022>m=45je3210&aip=1&z=939196436 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.saramart.pl/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 03 Feb 2023 17:06:30 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| googleads.g.doubleclick.net/pagead/viewthroughconversion/10952681819/?random=1675444022429&cv=11&fst=1675444022429&bg=ffffff&guid=ON&async=1>m=45be3210&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.saramart.pl%2Fen-NO%2F%3Ff%3Dp_webgains.o_suxi.g_affiliate.m_webgains.c_saramart-DACH-UK-IT-ES-FR-homepage.t_20210420-203152.sub_-GE-1-285505-5F1603355-5F16754439880973-5Fb52dab9171.sub5_-GE-1-1335525.v_1%26install_banner%3Dbranch%26af_dp%3Dsaramart%253A%252F%252Findex%253Ff%253Dp_webgains.o_suxi.g_affiliate.m_webgains.c_saramart-DACH-UK-IT-ES-FR-homepage.t_20210420-203152.sub_-GE-1-285505-5F1603355-5F16754439880973-5Fb52dab9171.sub5_-GE-1-1335525.v_1%26%2524ios_passive_deepview%3Dfalse%26%2524android_passive_deepview%3Dfalse%26wgu%3D28&tiba=SaraMart.com%20-%20Lowest%20price%2C%20best%20product&auid=1540165658.1675444022&data=event%3Dgtag.config&rfmt=3&fmt=4 | 142.250.74.2 | 200 OK | 16 kB |
URL HTTP/2googleads.g.doubleclick.net/pagead/viewthroughconversion/10952681819/?random=1675444022429&cv=11&fst=1675444022429&bg=ffffff&guid=ON&async=1>m=45be3210&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.saramart.pl%2Fen-NO%2F%3Ff%3Dp_webgains.o_suxi.g_affiliate.m_webgains.c_saramart-DACH-UK-IT-ES-FR-homepage.t_20210420-203152.sub_-GE-1-285505-5F1603355-5F16754439880973-5Fb52dab9171.sub5_-GE-1-1335525.v_1%26install_banner%3Dbranch%26af_dp%3Dsaramart%253A%252F%252Findex%253Ff%253Dp_webgains.o_suxi.g_affiliate.m_webgains.c_saramart-DACH-UK-IT-ES-FR-homepage.t_20210420-203152.sub_-GE-1-285505-5F1603355-5F16754439880973-5Fb52dab9171.sub5_-GE-1-1335525.v_1%26%2524ios_passive_deepview%3Dfalse%26%2524android_passive_deepview%3Dfalse%26wgu%3D28&tiba=SaraMart.com%20-%20Lowest%20price%2C%20best%20product&auid=1540165658.1675444022&data=event%3Dgtag.config&rfmt=3&fmt=4 IP142.250.74.2:0
Hash0cde28433cd0d96cf193ea93fa3d1a34 e2938d71368b21b6cfee1c8eb1b413a399e01d90 34128dfcd46d223f95fe6fb287bcee4e9d77083e99ab141607a6f09269b171dc
GET /pagead/viewthroughconversion/10952681819/?random=1675444022429&cv=11&fst=1675444022429&bg=ffffff&guid=ON&async=1>m=45be3210&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.saramart.pl%2Fen-NO%2F%3Ff%3Dp_webgains.o_suxi.g_affiliate.m_webgains.c_saramart-DACH-UK-IT-ES-FR-homepage.t_20210420-203152.sub_-GE-1-285505-5F1603355-5F16754439880973-5Fb52dab9171.sub5_-GE-1-1335525.v_1%26install_banner%3Dbranch%26af_dp%3Dsaramart%253A%252F%252Findex%253Ff%253Dp_webgains.o_suxi.g_affiliate.m_webgains.c_saramart-DACH-UK-IT-ES-FR-homepage.t_20210420-203152.sub_-GE-1-285505-5F1603355-5F16754439880973-5Fb52dab9171.sub5_-GE-1-1335525.v_1%26%2524ios_passive_deepview%3Dfalse%26%2524android_passive_deepview%3Dfalse%26wgu%3D28&tiba=SaraMart.com%20-%20Lowest%20price%2C%20best%20product&auid=1540165658.1675444022&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.saramart.pl/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 03 Feb 2023 17:06:30 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 1110
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 03-Feb-2023 17:21:30 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 11 kB |
IP142.250.74.131:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 225x225, components 3\012- data Hash0c463cc1f04afb31a6c5a11706d5ec86 ad6507684bb936fdaa07e5f662999adcee3c0e73 94f5044bea46bdf4dd4c8e2efcce17d325de560313c360c33f54bac21bc68b55
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 17:06:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.google.no/pagead/1p-user-list/10952681819/?random=1675444022429&cv=11&fst=1675443600000&bg=ffffff&guid=ON&async=1>m=45be3210&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.saramart.pl%2Fen-NO%2F%3Ff%3Dp_webgains.o_suxi.g_affiliate.m_webgains.c_saramart-DACH-UK-IT-ES-FR-homepage.t_20210420-203152.sub_-GE-1-285505-5F1603355-5F16754439880973-5Fb52dab9171.sub5_-GE-1-1335525.v_1%26install_banner%3Dbranch%26af_dp%3Dsaramart%253A%252F%252Findex%253Ff%253Dp_webgains.o_suxi.g_affiliate.m_webgains.c_saramart-DACH-UK-IT-ES-FR-homepage.t_20210420-203152.sub_-GE-1-285505-5F1603355-5F16754439880973-5Fb52dab9171.sub5_-GE-1-1335525.v_1%26%2524ios_passive_deepview%3Dfalse%26%2524android_passive_deepview%3Dfalse%26wgu%3D28&tiba=SaraMart.com%20-%20Lowest%20price%2C%20best%20product&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=3829469518&rmt_tld=1&ipr=y | 142.250.74.35 | 200 OK | 42 B |
URL HTTP/2www.google.no/pagead/1p-user-list/10952681819/?random=1675444022429&cv=11&fst=1675443600000&bg=ffffff&guid=ON&async=1>m=45be3210&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.saramart.pl%2Fen-NO%2F%3Ff%3Dp_webgains.o_suxi.g_affiliate.m_webgains.c_saramart-DACH-UK-IT-ES-FR-homepage.t_20210420-203152.sub_-GE-1-285505-5F1603355-5F16754439880973-5Fb52dab9171.sub5_-GE-1-1335525.v_1%26install_banner%3Dbranch%26af_dp%3Dsaramart%253A%252F%252Findex%253Ff%253Dp_webgains.o_suxi.g_affiliate.m_webgains.c_saramart-DACH-UK-IT-ES-FR-homepage.t_20210420-203152.sub_-GE-1-285505-5F1603355-5F16754439880973-5Fb52dab9171.sub5_-GE-1-1335525.v_1%26%2524ios_passive_deepview%3Dfalse%26%2524android_passive_deepview%3Dfalse%26wgu%3D28&tiba=SaraMart.com%20-%20Lowest%20price%2C%20best%20product&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=3829469518&rmt_tld=1&ipr=y IP142.250.74.35:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashd89746888da2d9510b64a9f031eaecd5 d5fceb6532643d0d84ffe09c40c481ecdf59e15a ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/10952681819/?random=1675444022429&cv=11&fst=1675443600000&bg=ffffff&guid=ON&async=1>m=45be3210&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.saramart.pl%2Fen-NO%2F%3Ff%3Dp_webgains.o_suxi.g_affiliate.m_webgains.c_saramart-DACH-UK-IT-ES-FR-homepage.t_20210420-203152.sub_-GE-1-285505-5F1603355-5F16754439880973-5Fb52dab9171.sub5_-GE-1-1335525.v_1%26install_banner%3Dbranch%26af_dp%3Dsaramart%253A%252F%252Findex%253Ff%253Dp_webgains.o_suxi.g_affiliate.m_webgains.c_saramart-DACH-UK-IT-ES-FR-homepage.t_20210420-203152.sub_-GE-1-285505-5F1603355-5F16754439880973-5Fb52dab9171.sub5_-GE-1-1335525.v_1%26%2524ios_passive_deepview%3Dfalse%26%2524android_passive_deepview%3Dfalse%26wgu%3D28&tiba=SaraMart.com%20-%20Lowest%20price%2C%20best%20product&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=3829469518&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.saramart.pl/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 03 Feb 2023 17:06:31 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash9bfd33253208c9d034988400d66abd5d 8811fd76d9bc56c15431433f8f08d648185992ed 6382de7eb2bc0b40dc6d2e21ab8b6cb90cc0effe3241e3fb5008d2e4f626e92c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 17:06:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hash4cf0ccf2909be74efd7a89dbe4228ffb b4993da334b48312584d116a3de4be4cd71962cf e81c8aa45d0707079d9eba798fb447059042453be4834d14467839688ca66f5d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 17:06:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.google.com/pagead/1p-user-list/10952681819/?random=1675444022429&cv=11&fst=1675443600000&bg=ffffff&guid=ON&async=1>m=45be3210&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.saramart.pl%2Fen-NO%2F%3Ff%3Dp_webgains.o_suxi.g_affiliate.m_webgains.c_saramart-DACH-UK-IT-ES-FR-homepage.t_20210420-203152.sub_-GE-1-285505-5F1603355-5F16754439880973-5Fb52dab9171.sub5_-GE-1-1335525.v_1%26install_banner%3Dbranch%26af_dp%3Dsaramart%253A%252F%252Findex%253Ff%253Dp_webgains.o_suxi.g_affiliate.m_webgains.c_saramart-DACH-UK-IT-ES-FR-homepage.t_20210420-203152.sub_-GE-1-285505-5F1603355-5F16754439880973-5Fb52dab9171.sub5_-GE-1-1335525.v_1%26%2524ios_passive_deepview%3Dfalse%26%2524android_passive_deepview%3Dfalse%26wgu%3D28&tiba=SaraMart.com%20-%20Lowest%20price%2C%20best%20product&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=3829469518&rmt_tld=0&ipr=y | 216.58.207.228 | 200 OK | 42 B |
URL HTTP/2www.google.com/pagead/1p-user-list/10952681819/?random=1675444022429&cv=11&fst=1675443600000&bg=ffffff&guid=ON&async=1>m=45be3210&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.saramart.pl%2Fen-NO%2F%3Ff%3Dp_webgains.o_suxi.g_affiliate.m_webgains.c_saramart-DACH-UK-IT-ES-FR-homepage.t_20210420-203152.sub_-GE-1-285505-5F1603355-5F16754439880973-5Fb52dab9171.sub5_-GE-1-1335525.v_1%26install_banner%3Dbranch%26af_dp%3Dsaramart%253A%252F%252Findex%253Ff%253Dp_webgains.o_suxi.g_affiliate.m_webgains.c_saramart-DACH-UK-IT-ES-FR-homepage.t_20210420-203152.sub_-GE-1-285505-5F1603355-5F16754439880973-5Fb52dab9171.sub5_-GE-1-1335525.v_1%26%2524ios_passive_deepview%3Dfalse%26%2524android_passive_deepview%3Dfalse%26wgu%3D28&tiba=SaraMart.com%20-%20Lowest%20price%2C%20best%20product&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=3829469518&rmt_tld=0&ipr=y IP216.58.207.228:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashd89746888da2d9510b64a9f031eaecd5 d5fceb6532643d0d84ffe09c40c481ecdf59e15a ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/10952681819/?random=1675444022429&cv=11&fst=1675443600000&bg=ffffff&guid=ON&async=1>m=45be3210&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.saramart.pl%2Fen-NO%2F%3Ff%3Dp_webgains.o_suxi.g_affiliate.m_webgains.c_saramart-DACH-UK-IT-ES-FR-homepage.t_20210420-203152.sub_-GE-1-285505-5F1603355-5F16754439880973-5Fb52dab9171.sub5_-GE-1-1335525.v_1%26install_banner%3Dbranch%26af_dp%3Dsaramart%253A%252F%252Findex%253Ff%253Dp_webgains.o_suxi.g_affiliate.m_webgains.c_saramart-DACH-UK-IT-ES-FR-homepage.t_20210420-203152.sub_-GE-1-285505-5F1603355-5F16754439880973-5Fb52dab9171.sub5_-GE-1-1335525.v_1%26%2524ios_passive_deepview%3Dfalse%26%2524android_passive_deepview%3Dfalse%26wgu%3D28&tiba=SaraMart.com%20-%20Lowest%20price%2C%20best%20product&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=3829469518&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.saramart.pl/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 03 Feb 2023 17:06:31 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| region1.analytics.google.com/g/collect?v=2&tid=G-D0PHSXGC6F>m=45je3210&_p=782182824&_gaz=1&cid=13156886.1675444022&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675444022&sct=1&seg=0&dl=https%3A%2F%2Fwww.saramart.pl%2Fen-NO%2F%3Ff%3Dp_webgains.o_suxi.g_affiliate.m_webgains.c_saramart-DACH-UK-IT-ES-FR-homepage.t_20210420-203152.sub_-GE-1-285505-5F1603355-5F16754439880973-5Fb52dab9171.sub5_-GE-1-1335525.v_1%26install_banner%3Dbranch%26af_dp%3Dsaramart%253A%252F%252Findex%253Ff%253Dp_webgains.o_suxi.g_affiliate.m_webgains.c_saramart-DACH-UK-IT-ES-FR-homepage.t_20210420-203152.sub_-GE-1-285505-5F1603355-5F16754439880973-5Fb52dab9171.sub5_-GE-1-1335525.v_1%26%2524ios_passive_deepview%3Dfalse%26%2524android_passive_deepview%3Dfalse%26wgu%3D285505_1603355_16754439880973_b52dab9171%26wgexpiry%3D1706979988%26_branch_match_id%3D1062369509546216292%26_branch_referrer%3DH4sIAAAAAAAAA9WQy26DMBBFv4bu7PiBIVRCVdSEtuquj%252FVoCAas8HAxhPTva5S0URf9gEpejDx3RudMPY7W3a5WrTLRB0VraWO6w%252BoOSyhs6nDAFocxkJtAZP6ZrtCnQGZlILcWZp1XaDpHe3DTydAKsCxNY3DUtL129%252FC9h2w394%252Fk%252FZk8vZHdK8leSN232mKl6QiCCc5CwYhgkitB3ZQDedgRTsRaKaaIynjEpFTnKlZhKJP1miWx9B%252B5EgXmCY%252F5Mqguk3yJC0WPwG8CEZbYNDnuDzANTVov6j9m8zzTb0xqm%252F%252FpGIjIw4zeEnLsOj14hXzAbl8v9qZ3YNE5c9RQaG2PRs%252BpP4nTSxe7YuhN8Vdirqb0zAgXQvjNB1c6H9Yna4bPlMcsSuLER74AHQ30JWkCAAA%253D&dt=SaraMart.com%20-%20Lowest%20price%2C%20best%20product&en=page_view&_fv=1&_nsi=1&_ss=2&_ee=1 | 216.239.32.36 | 204 No Content | 0 B |
URL HTTP/2region1.analytics.google.com/g/collect?v=2&tid=G-D0PHSXGC6F>m=45je3210&_p=782182824&_gaz=1&cid=13156886.1675444022&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675444022&sct=1&seg=0&dl=https%3A%2F%2Fwww.saramart.pl%2Fen-NO%2F%3Ff%3Dp_webgains.o_suxi.g_affiliate.m_webgains.c_saramart-DACH-UK-IT-ES-FR-homepage.t_20210420-203152.sub_-GE-1-285505-5F1603355-5F16754439880973-5Fb52dab9171.sub5_-GE-1-1335525.v_1%26install_banner%3Dbranch%26af_dp%3Dsaramart%253A%252F%252Findex%253Ff%253Dp_webgains.o_suxi.g_affiliate.m_webgains.c_saramart-DACH-UK-IT-ES-FR-homepage.t_20210420-203152.sub_-GE-1-285505-5F1603355-5F16754439880973-5Fb52dab9171.sub5_-GE-1-1335525.v_1%26%2524ios_passive_deepview%3Dfalse%26%2524android_passive_deepview%3Dfalse%26wgu%3D285505_1603355_16754439880973_b52dab9171%26wgexpiry%3D1706979988%26_branch_match_id%3D1062369509546216292%26_branch_referrer%3DH4sIAAAAAAAAA9WQy26DMBBFv4bu7PiBIVRCVdSEtuquj%252FVoCAas8HAxhPTva5S0URf9gEpejDx3RudMPY7W3a5WrTLRB0VraWO6w%252BoOSyhs6nDAFocxkJtAZP6ZrtCnQGZlILcWZp1XaDpHe3DTydAKsCxNY3DUtL129%252FC9h2w394%252Fk%252FZk8vZHdK8leSN232mKl6QiCCc5CwYhgkitB3ZQDedgRTsRaKaaIynjEpFTnKlZhKJP1miWx9B%252B5EgXmCY%252F5Mqguk3yJC0WPwG8CEZbYNDnuDzANTVov6j9m8zzTb0xqm%252F%252FpGIjIw4zeEnLsOj14hXzAbl8v9qZ3YNE5c9RQaG2PRs%252BpP4nTSxe7YuhN8Vdirqb0zAgXQvjNB1c6H9Yna4bPlMcsSuLER74AHQ30JWkCAAA%253D&dt=SaraMart.com%20-%20Lowest%20price%2C%20best%20product&en=page_view&_fv=1&_nsi=1&_ss=2&_ee=1 IP216.239.32.36:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-D0PHSXGC6F>m=45je3210&_p=782182824&_gaz=1&cid=13156886.1675444022&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675444022&sct=1&seg=0&dl=https%3A%2F%2Fwww.saramart.pl%2Fen-NO%2F%3Ff%3Dp_webgains.o_suxi.g_affiliate.m_webgains.c_saramart-DACH-UK-IT-ES-FR-homepage.t_20210420-203152.sub_-GE-1-285505-5F1603355-5F16754439880973-5Fb52dab9171.sub5_-GE-1-1335525.v_1%26install_banner%3Dbranch%26af_dp%3Dsaramart%253A%252F%252Findex%253Ff%253Dp_webgains.o_suxi.g_affiliate.m_webgains.c_saramart-DACH-UK-IT-ES-FR-homepage.t_20210420-203152.sub_-GE-1-285505-5F1603355-5F16754439880973-5Fb52dab9171.sub5_-GE-1-1335525.v_1%26%2524ios_passive_deepview%3Dfalse%26%2524android_passive_deepview%3Dfalse%26wgu%3D285505_1603355_16754439880973_b52dab9171%26wgexpiry%3D1706979988%26_branch_match_id%3D1062369509546216292%26_branch_referrer%3DH4sIAAAAAAAAA9WQy26DMBBFv4bu7PiBIVRCVdSEtuquj%252FVoCAas8HAxhPTva5S0URf9gEpejDx3RudMPY7W3a5WrTLRB0VraWO6w%252BoOSyhs6nDAFocxkJtAZP6ZrtCnQGZlILcWZp1XaDpHe3DTydAKsCxNY3DUtL129%252FC9h2w394%252Fk%252FZk8vZHdK8leSN232mKl6QiCCc5CwYhgkitB3ZQDedgRTsRaKaaIynjEpFTnKlZhKJP1miWx9B%252B5EgXmCY%252F5Mqguk3yJC0WPwG8CEZbYNDnuDzANTVov6j9m8zzTb0xqm%252F%252FpGIjIw4zeEnLsOj14hXzAbl8v9qZ3YNE5c9RQaG2PRs%252BpP4nTSxe7YuhN8Vdirqb0zAgXQvjNB1c6H9Yna4bPlMcsSuLER74AHQ30JWkCAAA%253D&dt=SaraMart.com%20-%20Lowest%20price%2C%20best%20product&en=page_view&_fv=1&_nsi=1&_ss=2&_ee=1 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.saramart.pl/
Origin: https://www.saramart.pl
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.saramart.pl
date: Fri, 03 Feb 2023 17:06:31 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| stats.g.doubleclick.net/g/collect?v=2&tid=G-D0PHSXGC6F&cid=13156886.1675444022>m=45je3210&aip=1 | 64.233.164.156 | 204 No Content | 0 B |
URL HTTP/2stats.g.doubleclick.net/g/collect?v=2&tid=G-D0PHSXGC6F&cid=13156886.1675444022>m=45je3210&aip=1 IP64.233.164.156:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-D0PHSXGC6F&cid=13156886.1675444022>m=45je3210&aip=1 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.saramart.pl/
Origin: https://www.saramart.pl
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.saramart.pl
date: Fri, 03 Feb 2023 17:06:31 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 23 kB |
IP142.250.74.131:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 225x225, components 3\012- data Hash4c00a75e0f4a194c52e224027097d7a6 596db897037dff04029f1b4f43fd5802516b3b5e 6ba99cccf1851ce32e5741651154b4f6407caa44edaf1516c41f0828a21bfff3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 17:06:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.facebook.com/tr/?id=1298670677008220&ev=PageView&dl=https%3A%2F%2Fwww.saramart.pl%2Fen-NO%2F%3Ff%3Dp_webgains.o_suxi.g_affiliate.m_webgains.c_saramart-DACH-UK-IT-ES-FR-homepage.t_20210420-203152.sub_-GE-1-285505-5F1603355-5F16754439880973-5Fb52dab9171.sub5_-GE-1-1335525.v_1%26install_banner%3Dbranch%26af_dp%3Dsaramart%253A%252F%252Findex%253Ff%253Dp_webgains.o_suxi.g_affiliate.m_webgains.c_saramart-DACH-UK-IT-ES-FR-homepage.t_20210420-203152.sub_-GE-1-285505-5F1603355-5F16754439880973-5Fb52dab9171.sub5_-GE-1-1335525.v_1%26%2524ios_passive_deepview%3Dfalse%26%2524android_passive_deepview%3Dfalse%26wgu%3D285505_1603355_16754439880973_b52dab9171%26wgexpiry%3D1706979988%26_branch_match_id%3D1062369509546216292%26_branch_referrer%3DH4sIAAAAAAAAA9WQy26DMBBFv4bu7PiBIVRCVdSEtuquj%252FVoCAas8HAxhPTva5S0URf9gEpejDx3RudMPY7W3a5WrTLRB0VraWO6w%252BoOSyhs6nDAFocxkJtAZP6ZrtCnQGZlILcWZp1XaDpHe3DTydAKsCxNY3DUtL129%252FC9h2w394%252Fk%252FZk8vZHdK8leSN232mKl6QiCCc5CwYhgkitB3ZQDedgRTsRaKaaIynjEpFTnKlZhKJP1miWx9B%252B5EgXmCY%252F5Mqguk3yJC0WPwG8CEZbYNDnuDzANTVov6j9m8zzTb0xqm%252F%252FpGIjIw4zeEnLsOj14hXzAbl8v9qZ3YNE5c9RQaG2PRs%252BpP4nTSxe7YuhN8Vdirqb0zAgXQvjNB1c6H9Yna4bPlMcsSuLER74AHQ30JWkCAAA%253D&rl=&if=false&ts=1675444022961&sw=1280&sh=1024&v=2.9.95&r=canary&ec=0&o=30&ttf=2771&tts=1879&ttse=2616&fbp=fb.1.1675444022960.67197552&it=1675444022069&coo=false&rqm=GET |  31.13.72.36 | 200 OK | 0 B |
URL HTTP/2www.facebook.com/tr/?id=1298670677008220&ev=PageView&dl=https%3A%2F%2Fwww.saramart.pl%2Fen-NO%2F%3Ff%3Dp_webgains.o_suxi.g_affiliate.m_webgains.c_saramart-DACH-UK-IT-ES-FR-homepage.t_20210420-203152.sub_-GE-1-285505-5F1603355-5F16754439880973-5Fb52dab9171.sub5_-GE-1-1335525.v_1%26install_banner%3Dbranch%26af_dp%3Dsaramart%253A%252F%252Findex%253Ff%253Dp_webgains.o_suxi.g_affiliate.m_webgains.c_saramart-DACH-UK-IT-ES-FR-homepage.t_20210420-203152.sub_-GE-1-285505-5F1603355-5F16754439880973-5Fb52dab9171.sub5_-GE-1-1335525.v_1%26%2524ios_passive_deepview%3Dfalse%26%2524android_passive_deepview%3Dfalse%26wgu%3D285505_1603355_16754439880973_b52dab9171%26wgexpiry%3D1706979988%26_branch_match_id%3D1062369509546216292%26_branch_referrer%3DH4sIAAAAAAAAA9WQy26DMBBFv4bu7PiBIVRCVdSEtuquj%252FVoCAas8HAxhPTva5S0URf9gEpejDx3RudMPY7W3a5WrTLRB0VraWO6w%252BoOSyhs6nDAFocxkJtAZP6ZrtCnQGZlILcWZp1XaDpHe3DTydAKsCxNY3DUtL129%252FC9h2w394%252Fk%252FZk8vZHdK8leSN232mKl6QiCCc5CwYhgkitB3ZQDedgRTsRaKaaIynjEpFTnKlZhKJP1miWx9B%252B5EgXmCY%252F5Mqguk3yJC0WPwG8CEZbYNDnuDzANTVov6j9m8zzTb0xqm%252F%252FpGIjIw4zeEnLsOj14hXzAbl8v9qZ3YNE5c9RQaG2PRs%252BpP4nTSxe7YuhN8Vdirqb0zAgXQvjNB1c6H9Yna4bPlMcsSuLER74AHQ30JWkCAAA%253D&rl=&if=false&ts=1675444022961&sw=1280&sh=1024&v=2.9.95&r=canary&ec=0&o=30&ttf=2771&tts=1879&ttse=2616&fbp=fb.1.1675444022960.67197552&it=1675444022069&coo=false&rqm=GET IP31.13.72.36:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=1298670677008220&ev=PageView&dl=https%3A%2F%2Fwww.saramart.pl%2Fen-NO%2F%3Ff%3Dp_webgains.o_suxi.g_affiliate.m_webgains.c_saramart-DACH-UK-IT-ES-FR-homepage.t_20210420-203152.sub_-GE-1-285505-5F1603355-5F16754439880973-5Fb52dab9171.sub5_-GE-1-1335525.v_1%26install_banner%3Dbranch%26af_dp%3Dsaramart%253A%252F%252Findex%253Ff%253Dp_webgains.o_suxi.g_affiliate.m_webgains.c_saramart-DACH-UK-IT-ES-FR-homepage.t_20210420-203152.sub_-GE-1-285505-5F1603355-5F16754439880973-5Fb52dab9171.sub5_-GE-1-1335525.v_1%26%2524ios_passive_deepview%3Dfalse%26%2524android_passive_deepview%3Dfalse%26wgu%3D285505_1603355_16754439880973_b52dab9171%26wgexpiry%3D1706979988%26_branch_match_id%3D1062369509546216292%26_branch_referrer%3DH4sIAAAAAAAAA9WQy26DMBBFv4bu7PiBIVRCVdSEtuquj%252FVoCAas8HAxhPTva5S0URf9gEpejDx3RudMPY7W3a5WrTLRB0VraWO6w%252BoOSyhs6nDAFocxkJtAZP6ZrtCnQGZlILcWZp1XaDpHe3DTydAKsCxNY3DUtL129%252FC9h2w394%252Fk%252FZk8vZHdK8leSN232mKl6QiCCc5CwYhgkitB3ZQDedgRTsRaKaaIynjEpFTnKlZhKJP1miWx9B%252B5EgXmCY%252F5Mqguk3yJC0WPwG8CEZbYNDnuDzANTVov6j9m8zzTb0xqm%252F%252FpGIjIw4zeEnLsOj14hXzAbl8v9qZ3YNE5c9RQaG2PRs%252BpP4nTSxe7YuhN8Vdirqb0zAgXQvjNB1c6H9Yna4bPlMcsSuLER74AHQ30JWkCAAA%253D&rl=&if=false&ts=1675444022961&sw=1280&sh=1024&v=2.9.95&r=canary&ec=0&o=30&ttf=2771&tts=1879&ttse=2616&fbp=fb.1.1675444022960.67197552&it=1675444022069&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.saramart.pl/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Fri, 03 Feb 2023 17:06:31 GMT
X-Firefox-Spdy: h2
|
|
| www.facebook.com/tr/?id=1126764197831393&ev=PageView&dl=https%3A%2F%2Fwww.saramart.pl%2Fen-NO%2F%3Ff%3Dp_webgains.o_suxi.g_affiliate.m_webgains.c_saramart-DACH-UK-IT-ES-FR-homepage.t_20210420-203152.sub_-GE-1-285505-5F1603355-5F16754439880973-5Fb52dab9171.sub5_-GE-1-1335525.v_1%26install_banner%3Dbranch%26af_dp%3Dsaramart%253A%252F%252Findex%253Ff%253Dp_webgains.o_suxi.g_affiliate.m_webgains.c_saramart-DACH-UK-IT-ES-FR-homepage.t_20210420-203152.sub_-GE-1-285505-5F1603355-5F16754439880973-5Fb52dab9171.sub5_-GE-1-1335525.v_1%26%2524ios_passive_deepview%3Dfalse%26%2524android_passive_deepview%3Dfalse%26wgu%3D285505_1603355_16754439880973_b52dab9171%26wgexpiry%3D1706979988%26_branch_match_id%3D1062369509546216292%26_branch_referrer%3DH4sIAAAAAAAAA9WQy26DMBBFv4bu7PiBIVRCVdSEtuquj%252FVoCAas8HAxhPTva5S0URf9gEpejDx3RudMPY7W3a5WrTLRB0VraWO6w%252BoOSyhs6nDAFocxkJtAZP6ZrtCnQGZlILcWZp1XaDpHe3DTydAKsCxNY3DUtL129%252FC9h2w394%252Fk%252FZk8vZHdK8leSN232mKl6QiCCc5CwYhgkitB3ZQDedgRTsRaKaaIynjEpFTnKlZhKJP1miWx9B%252B5EgXmCY%252F5Mqguk3yJC0WPwG8CEZbYNDnuDzANTVov6j9m8zzTb0xqm%252F%252FpGIjIw4zeEnLsOj14hXzAbl8v9qZ3YNE5c9RQaG2PRs%252BpP4nTSxe7YuhN8Vdirqb0zAgXQvjNB1c6H9Yna4bPlMcsSuLER74AHQ30JWkCAAA%253D&rl=&if=false&ts=1675444022964&sw=1280&sh=1024&v=2.9.95&r=canary&ec=0&o=30&ttf=2775&tts=1879&ttse=2616&cs_est=true&fbp=fb.1.1675444022960.67197552&it=1675444022069&coo=false&rqm=GET | 31.13.72.36 | 200 OK | 0 B |
URL HTTP/2www.facebook.com/tr/?id=1126764197831393&ev=PageView&dl=https%3A%2F%2Fwww.saramart.pl%2Fen-NO%2F%3Ff%3Dp_webgains.o_suxi.g_affiliate.m_webgains.c_saramart-DACH-UK-IT-ES-FR-homepage.t_20210420-203152.sub_-GE-1-285505-5F1603355-5F16754439880973-5Fb52dab9171.sub5_-GE-1-1335525.v_1%26install_banner%3Dbranch%26af_dp%3Dsaramart%253A%252F%252Findex%253Ff%253Dp_webgains.o_suxi.g_affiliate.m_webgains.c_saramart-DACH-UK-IT-ES-FR-homepage.t_20210420-203152.sub_-GE-1-285505-5F1603355-5F16754439880973-5Fb52dab9171.sub5_-GE-1-1335525.v_1%26%2524ios_passive_deepview%3Dfalse%26%2524android_passive_deepview%3Dfalse%26wgu%3D285505_1603355_16754439880973_b52dab9171%26wgexpiry%3D1706979988%26_branch_match_id%3D1062369509546216292%26_branch_referrer%3DH4sIAAAAAAAAA9WQy26DMBBFv4bu7PiBIVRCVdSEtuquj%252FVoCAas8HAxhPTva5S0URf9gEpejDx3RudMPY7W3a5WrTLRB0VraWO6w%252BoOSyhs6nDAFocxkJtAZP6ZrtCnQGZlILcWZp1XaDpHe3DTydAKsCxNY3DUtL129%252FC9h2w394%252Fk%252FZk8vZHdK8leSN232mKl6QiCCc5CwYhgkitB3ZQDedgRTsRaKaaIynjEpFTnKlZhKJP1miWx9B%252B5EgXmCY%252F5Mqguk3yJC0WPwG8CEZbYNDnuDzANTVov6j9m8zzTb0xqm%252F%252FpGIjIw4zeEnLsOj14hXzAbl8v9qZ3YNE5c9RQaG2PRs%252BpP4nTSxe7YuhN8Vdirqb0zAgXQvjNB1c6H9Yna4bPlMcsSuLER74AHQ30JWkCAAA%253D&rl=&if=false&ts=1675444022964&sw=1280&sh=1024&v=2.9.95&r=canary&ec=0&o=30&ttf=2775&tts=1879&ttse=2616&cs_est=true&fbp=fb.1.1675444022960.67197552&it=1675444022069&coo=false&rqm=GET IP31.13.72.36:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=1126764197831393&ev=PageView&dl=https%3A%2F%2Fwww.saramart.pl%2Fen-NO%2F%3Ff%3Dp_webgains.o_suxi.g_affiliate.m_webgains.c_saramart-DACH-UK-IT-ES-FR-homepage.t_20210420-203152.sub_-GE-1-285505-5F1603355-5F16754439880973-5Fb52dab9171.sub5_-GE-1-1335525.v_1%26install_banner%3Dbranch%26af_dp%3Dsaramart%253A%252F%252Findex%253Ff%253Dp_webgains.o_suxi.g_affiliate.m_webgains.c_saramart-DACH-UK-IT-ES-FR-homepage.t_20210420-203152.sub_-GE-1-285505-5F1603355-5F16754439880973-5Fb52dab9171.sub5_-GE-1-1335525.v_1%26%2524ios_passive_deepview%3Dfalse%26%2524android_passive_deepview%3Dfalse%26wgu%3D285505_1603355_16754439880973_b52dab9171%26wgexpiry%3D1706979988%26_branch_match_id%3D1062369509546216292%26_branch_referrer%3DH4sIAAAAAAAAA9WQy26DMBBFv4bu7PiBIVRCVdSEtuquj%252FVoCAas8HAxhPTva5S0URf9gEpejDx3RudMPY7W3a5WrTLRB0VraWO6w%252BoOSyhs6nDAFocxkJtAZP6ZrtCnQGZlILcWZp1XaDpHe3DTydAKsCxNY3DUtL129%252FC9h2w394%252Fk%252FZk8vZHdK8leSN232mKl6QiCCc5CwYhgkitB3ZQDedgRTsRaKaaIynjEpFTnKlZhKJP1miWx9B%252B5EgXmCY%252F5Mqguk3yJC0WPwG8CEZbYNDnuDzANTVov6j9m8zzTb0xqm%252F%252FpGIjIw4zeEnLsOj14hXzAbl8v9qZ3YNE5c9RQaG2PRs%252BpP4nTSxe7YuhN8Vdirqb0zAgXQvjNB1c6H9Yna4bPlMcsSuLER74AHQ30JWkCAAA%253D&rl=&if=false&ts=1675444022964&sw=1280&sh=1024&v=2.9.95&r=canary&ec=0&o=30&ttf=2775&tts=1879&ttse=2616&cs_est=true&fbp=fb.1.1675444022960.67197552&it=1675444022069&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.saramart.pl/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Fri, 03 Feb 2023 17:06:31 GMT
X-Firefox-Spdy: h2
|
|
| cdn9.forter.com/vchk2 | 143.204.55.68 | 301 Moved Permanently | 653 B |
IP143.204.55.68:0
File typegzip compressed data, from Unix\012- data Hash0241dd50dabfdf11c2574128155a983a 267e648c6c60b6ec8bcdb72f00a9e3f7a3b2600e add986e4477d1c436e254f730aea09b71751f5cc4d589368e1678fe2ae7bf8db
GET /vchk2 HTTP/1.1
Host: cdn9.forter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: eyJyIjowLjcxMTMwODM1MjY1NjAzMDIsInUiOiI0OTJlZjkxYzA4NWY0YzA5OGUxYWQyZThiMmMxYjg0MCIsInMiOiJiMWM4OTVjMjZkY2QifQ==
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.saramart.pl/
Origin: https://www.saramart.pl
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
location: https://cdn9.forter.com/vchk2/v1/7ab658ce6a432d283d2cb74c18fd06b6f8e69f5a7a8a136deae4325eedccc614ac7f4bc9661353e4d0f949d0a779
date: Fri, 03 Feb 2023 17:06:30 GMT
access-control-allow-origin: *
timing-allow-origin: *
cache-control: private, s-maxage=0, proxy-revalidate
strict-transport-security: max-age=86400; includeSubDomains
x-cache: Miss from cloudfront
via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: TmzJQmzOU2lxa6HVtkYWUZDF6VXWjwsHTKlNYVR8hCiurw5VeWy37Q==
X-Firefox-Spdy: h2
|
|
| status.geotrust.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash85f536ce6dbb9697147ce51b2db46436 9e686afb2256514fc5a4e40aa749bc301fcb9760 ce4e3772db4696d9daf098ab330c6c7b3f1e7f841d8d5ff546624608789b2d62
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4719
Cache-Control: max-age=166713
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 17:06:31 GMT
Etag: "63dd14e1-1d7"
Expires: Sun, 05 Feb 2023 15:25:04 GMT
Last-Modified: Fri, 03 Feb 2023 14:06:25 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471
|
|
| api2.branch.io/v1/pageview | 143.204.55.80 | 200 OK | 28 B |
URL HTTP/2api2.branch.io/v1/pageview IP143.204.55.80:0
File typeJSON data\012- , ASCII text, with no line terminators Hash40ad459cb59514b4661cb0f8372dad3c 291656a477c82b220718a27d9a9f650325febc56 a82dc28d43942326b346f92907df3bea5e38b2325ef97176f3b6234966bf19eb
POST /v1/pageview HTTP/1.1
Host: api2.branch.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.saramart.pl/
Content-Type: application/x-www-form-urlencoded
Content-Length: 8287
Origin: https://www.saramart.pl
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
content-length: 28
access-control-allow-origin: *
date: Fri, 03 Feb 2023 17:06:31 GMT
etag: W/"1c-KRZWpHfIKyIHGKJ9mp9lAyX+vFY"
strict-transport-security: max-age=31536000; includeSubDomains
x-branch-request-id: a068660bbe344920b00f3ca025347565-2023020317
x-powered-by: Express
x-cache: Miss from cloudfront
via: 1.1 a2b4f68a89fc87406bff22c95fc07fba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: qMFps3TWLrf9HtGmVDx3cnY9h3VDAWLrQ_oGoNO3T97klAkX_PthXQ==
X-Firefox-Spdy: h2
|
|
| cdn0.forter.com/b1c895c26dcd/492ef91c085f4c098e1ad2e8b2c1b840/prop.json?_=1675444023085 | 54.243.108.33 | 200 OK | 20 B |
URL HTTP/1.1cdn0.forter.com/b1c895c26dcd/492ef91c085f4c098e1ad2e8b2c1b840/prop.json?_=1675444023085 IP54.243.108.33:0
File typeJSON data\012- , ASCII text, with no line terminators Hash5820854f62a6eb3d38ba7ba0d1b3ea75 639df0b84fe699b4a290a713fd6b9a94bd4deb95 912d0c07da7bdb22cdae025b96da26d01523aaab7362edb28544e3949deb369d
GET /b1c895c26dcd/492ef91c085f4c098e1ad2e8b2c1b840/prop.json?_=1675444023085 HTTP/1.1
Host: cdn0.forter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.saramart.pl/
Origin: https://www.saramart.pl
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Origin: https://www.saramart.pl
Vary: Origin
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: *
Cache-Control: no-cache
Expires: -1
Pragma: no-cache
Content-Type: application/json
Connection: keep-alive
Date: Fri, 03 Feb 2023 17:06:31 GMT
Transfer-Encoding: chunked
|
|
| cdn0.forter.com/b1c895c26dcd/492ef91c085f4c098e1ad2e8b2c1b840/prop.json?_=1675444023659 | 54.243.108.33 | 200 OK | 20 B |
URL HTTP/1.1cdn0.forter.com/b1c895c26dcd/492ef91c085f4c098e1ad2e8b2c1b840/prop.json?_=1675444023659 IP54.243.108.33:0
File typeJSON data\012- , ASCII text, with no line terminators Hash5820854f62a6eb3d38ba7ba0d1b3ea75 639df0b84fe699b4a290a713fd6b9a94bd4deb95 912d0c07da7bdb22cdae025b96da26d01523aaab7362edb28544e3949deb369d
GET /b1c895c26dcd/492ef91c085f4c098e1ad2e8b2c1b840/prop.json?_=1675444023659 HTTP/1.1
Host: cdn0.forter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.saramart.pl/
Origin: https://www.saramart.pl
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Origin: https://www.saramart.pl
Vary: Origin
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: *
Cache-Control: no-cache
Expires: -1
Pragma: no-cache
Content-Type: application/json
Connection: keep-alive
Date: Fri, 03 Feb 2023 17:06:31 GMT
Transfer-Encoding: chunked
|
|
| cdn0.forter.com/b1c895c26dcd/492ef91c085f4c098e1ad2e8b2c1b840/prop.json?_=1675444023906 | 54.243.108.33 | 200 OK | 20 B |
URL HTTP/1.1cdn0.forter.com/b1c895c26dcd/492ef91c085f4c098e1ad2e8b2c1b840/prop.json?_=1675444023906 IP54.243.108.33:0
File typeJSON data\012- , ASCII text, with no line terminators Hash5820854f62a6eb3d38ba7ba0d1b3ea75 639df0b84fe699b4a290a713fd6b9a94bd4deb95 912d0c07da7bdb22cdae025b96da26d01523aaab7362edb28544e3949deb369d
GET /b1c895c26dcd/492ef91c085f4c098e1ad2e8b2c1b840/prop.json?_=1675444023906 HTTP/1.1
Host: cdn0.forter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.saramart.pl/
Origin: https://www.saramart.pl
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Origin: https://www.saramart.pl
Vary: Origin
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: *
Cache-Control: no-cache
Expires: -1
Pragma: no-cache
Content-Type: application/json
Connection: keep-alive
Date: Fri, 03 Feb 2023 17:06:32 GMT
Transfer-Encoding: chunked
|
|
| cdn0.forter.com/b1c895c26dcd/492ef91c085f4c098e1ad2e8b2c1b840/wpt.json | 54.243.108.33 | 204 No Content | 0 B |
URL HTTP/1.1cdn0.forter.com/b1c895c26dcd/492ef91c085f4c098e1ad2e8b2c1b840/wpt.json IP54.243.108.33:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /b1c895c26dcd/492ef91c085f4c098e1ad2e8b2c1b840/wpt.json HTTP/1.1
Host: cdn0.forter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.saramart.pl/
Origin: https://www.saramart.pl
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE
Vary: Access-Control-Request-Headers
Access-Control-Allow-Headers: content-type
Content-Length: 0
Date: Fri, 03 Feb 2023 17:06:32 GMT
Connection: keep-alive
|
|
| cdn0.forter.com/b1c895c26dcd/492ef91c085f4c098e1ad2e8b2c1b840/wpt.json | 54.243.108.33 | 200 OK | 20 B |
URL HTTP/1.1cdn0.forter.com/b1c895c26dcd/492ef91c085f4c098e1ad2e8b2c1b840/wpt.json IP54.243.108.33:0
File typeJSON data\012- , ASCII text, with no line terminators Hash5820854f62a6eb3d38ba7ba0d1b3ea75 639df0b84fe699b4a290a713fd6b9a94bd4deb95 912d0c07da7bdb22cdae025b96da26d01523aaab7362edb28544e3949deb369d
POST /b1c895c26dcd/492ef91c085f4c098e1ad2e8b2c1b840/wpt.json HTTP/1.1
Host: cdn0.forter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.saramart.pl/
Content-Type: application/json; charset=utf-8
Content-Length: 29
Origin: https://www.saramart.pl
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Origin: https://www.saramart.pl
Vary: Origin
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: *
Cache-Control: private, no-cache, no-store
Expires: -1
Pragma: no-cache
Content-Type: application/json; charset=utf-8
Content-Length: 20
ETag: W/"14-Y53wuE/mmbSikKcT/WualL1N65U"
Date: Fri, 03 Feb 2023 17:06:32 GMT
Connection: keep-alive
|
|
| s4.forcloudcdn.com/-/libs/fd-vue-ui/1.1.2/popper.js,libs/fd-pc-module/1.6.13/header.sm.js,libs/fd-pc-module/1.6.13/footer.sm.js | 104.18.24.201 | 200 OK | 0 B |
URL HTTP/2s4.forcloudcdn.com/-/libs/fd-vue-ui/1.1.2/popper.js,libs/fd-pc-module/1.6.13/header.sm.js,libs/fd-pc-module/1.6.13/footer.sm.js IP104.18.24.201:0
GET /-/libs/fd-vue-ui/1.1.2/popper.js,libs/fd-pc-module/1.6.13/header.sm.js,libs/fd-pc-module/1.6.13/footer.sm.js HTTP/1.1
Host: s4.forcloudcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.saramart.pl/
Origin: https://www.saramart.pl
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:06:29 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-bgj: minify
cf-polished: origSize=175819
etag: W/"2aecb-bwk+5CEciZd7OkVpPMIAD5VHkek"
last-modified: Wed, 10 Aug 2022 02:53:20 GMT
vary: Origin, Accept-Encoding
x-cache-status: MISS
web: aws-ir1-front-cdnsrc-prod-016055
cf-cache-status: HIT
age: 110678
expires: Sat, 03 Feb 2024 17:06:29 GMT
server: cloudflare
cf-ray: 793cc1e3ec94b521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| tr.snapchat.com/config/pl/252437c7-50e0-4301-a459-98c58c5fc2dc.js | 35.190.43.134 | 200 OK | 0 B |
URL HTTP/2tr.snapchat.com/config/pl/252437c7-50e0-4301-a459-98c58c5fc2dc.js IP35.190.43.134:0
GET /config/pl/252437c7-50e0-4301-a459-98c58c5fc2dc.js HTTP/1.1
Host: tr.snapchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.saramart.pl/
Origin: https://www.saramart.pl
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:06:30 GMT
access-control-allow-origin: https://www.saramart.pl
content-type: application/javascript
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-envoy-upstream-service-time: 0
content-encoding: gzip
vary: Accept-Encoding
server: API Gateway
access-control-allow-credentials: true
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| s3.forcloudcdn.com/dmc/cc0a8db9-b628-48ae-b4c9-93f8bcfb0310.svg | 104.18.24.201 | 200 OK | 0 B |
URL HTTP/2s3.forcloudcdn.com/dmc/cc0a8db9-b628-48ae-b4c9-93f8bcfb0310.svg IP104.18.24.201:0
GET /dmc/cc0a8db9-b628-48ae-b4c9-93f8bcfb0310.svg HTTP/1.1
Host: s3.forcloudcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.saramart.pl/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:06:29 GMT
content-type: image/svg+xml
x-amz-id-2: eAozeuubBlfqUmtcJDuaoHKN1yYWObsf4c6GDqPZHEBZv8G/veEf9FQeDHlE/vuxHzQApLkE6kw=
x-amz-request-id: VGPMJVYTEVMSKNHZ
last-modified: Tue, 29 Dec 2020 03:35:42 GMT
etag: W/"a0d648199a71688950b5c9270c384650"
x-amz-version-id: fBeDisdrWQnPUYTo36T5t0OQZBR02dBJ
cf-cache-status: HIT
age: 528497
expires: Sat, 11 Feb 2023 17:06:29 GMT
cache-control: public, max-age=691200
vary: Accept-Encoding
server: cloudflare
cf-ray: 793cc1e40d69b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| s4.forcloudcdn.com/-/libs/vue/2.6.14/vue.runtime.min.js,libs/vuex/3.6.2/vuex.min.js,libs/axios/0.18.0/axios.min.js,libs/js-cookie/3.0.1/js.cookie.min.js | 104.18.24.201 | 200 OK | 0 B |
URL HTTP/2s4.forcloudcdn.com/-/libs/vue/2.6.14/vue.runtime.min.js,libs/vuex/3.6.2/vuex.min.js,libs/axios/0.18.0/axios.min.js,libs/js-cookie/3.0.1/js.cookie.min.js IP104.18.24.201:0
GET /-/libs/vue/2.6.14/vue.runtime.min.js,libs/vuex/3.6.2/vuex.min.js,libs/axios/0.18.0/axios.min.js,libs/js-cookie/3.0.1/js.cookie.min.js HTTP/1.1
Host: s4.forcloudcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.saramart.pl/
Origin: https://www.saramart.pl
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:06:29 GMT
content-type: application/javascript; charset=utf-8
vary: Origin, Accept-Encoding
access-control-allow-origin: *
last-modified: Thu, 02 Feb 2023 06:33:09 GMT
cache-control: public, max-age=31536000
etag: W/"1690f-MIFOOTzULeiofoLnox+7aYRSjQM"
web: aws-ir1-front-cdnsrc-prod-026130
x-cache-status: MISS
cf-cache-status: HIT
age: 79510
expires: Sat, 03 Feb 2024 17:06:29 GMT
server: cloudflare
cf-ray: 793cc1e41cbbb521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| b1c895c26dcd.cdn4.forter.com/sn/b1c895c26dcd/script.js | 54.230.111.32 | 200 OK | 0 B |
URL HTTP/2b1c895c26dcd.cdn4.forter.com/sn/b1c895c26dcd/script.js IP54.230.111.32:0
GET /sn/b1c895c26dcd/script.js HTTP/1.1
Host: b1c895c26dcd.cdn4.forter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.saramart.pl/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
date: Thu, 26 Jan 2023 08:21:42 GMT
strict-transport-security: max-age=86400; includeSubDomains
access-control-allow-origin: *
timing-allow-origin: *
last-modified: Thu, 26 Jan 2023 08:21:42 GMT
expires: Thu, 26 Jan 2023 08:26:42 GMT
cache-control: private, max-age=300
x-sourcemap: https://cdn4.forter.com/map/suid/b1c895c26dcd/93096772030
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: L-ldpRvot9Db1ku32fLj6AiPRe1eRO-FAwfADrFYAAUFihPeuU6cag==
age: 722687
X-Firefox-Spdy: h2
|
|
| track.webgains.com/click.html?wgcampaignid=1603355&wgprogramid=285505&clickref=wubuvhkbld5id9cmi0j4c1r4 | 18.130.177.194 | 302 Found | 0 B |
URL HTTP/2track.webgains.com/click.html?wgcampaignid=1603355&wgprogramid=285505&clickref=wubuvhkbld5id9cmi0j4c1r4 IP18.130.177.194:0
GET /click.html?wgcampaignid=1603355&wgprogramid=285505&clickref=wubuvhkbld5id9cmi0j4c1r4 HTTP/1.1
Host: track.webgains.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
date: Fri, 03 Feb 2023 17:06:28 GMT
content-type: text/html; charset=UTF-8
location: https://c.saramart.com/4c9i?wgu=285505_1603355_16754439880973_b52dab9171&wgexpiry=1706979988&affSub=285505_1603355_16754439880973_b52dab9171&affSub5=1335525
server: nginx
x-powered-by: PHP/7.4.26
expires: Fri, 03 Feb 2023 17:07:28 GMT
last-modified: Fri, 03 Feb 2023 17:06:28 GMT
cache-control: private, max-age=60
x-wg-cache: cache-used
access-control-allow-origin: *
access-control-allow-headers: Authorization
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
X-Firefox-Spdy: h2
|
|
| m5i6q-alternate.app.link/?af_dp=saramart%3A%2F%2Findex%3Ff%3Dp_webgains.o_suxi.g_affiliate.m_webgains.c_saramart-DACH-UK-IT-ES-FR-homepage.t_20210420-203152.sub_-GE-1-285505-5F1603355-5F16754439880973-5Fb52dab9171.sub5_-GE-1-1335525.v_1&%24fallback_url=https%3A%2F%2Fwww.saramart.pl%3Ff%3Dp_webgains.o_suxi.g_affiliate.m_webgains.c_saramart-DACH-UK-IT-ES-FR-homepage.t_20210420-203152.sub_-GE-1-285505-5F1603355-5F16754439880973-5Fb52dab9171.sub5_-GE-1-1335525.v_1%26install_banner%3Dbranch&%24ios_passive_deepview=false&%24android_passive_deepview=false&wgu=285505_1603355_16754439880973_b52dab9171&wgexpiry=1706979988 | 54.230.111.120 | 307 Temporary Redirect | 0 B |
URL HTTP/2m5i6q-alternate.app.link/?af_dp=saramart%3A%2F%2Findex%3Ff%3Dp_webgains.o_suxi.g_affiliate.m_webgains.c_saramart-DACH-UK-IT-ES-FR-homepage.t_20210420-203152.sub_-GE-1-285505-5F1603355-5F16754439880973-5Fb52dab9171.sub5_-GE-1-1335525.v_1&%24fallback_url=https%3A%2F%2Fwww.saramart.pl%3Ff%3Dp_webgains.o_suxi.g_affiliate.m_webgains.c_saramart-DACH-UK-IT-ES-FR-homepage.t_20210420-203152.sub_-GE-1-285505-5F1603355-5F16754439880973-5Fb52dab9171.sub5_-GE-1-1335525.v_1%26install_banner%3Dbranch&%24ios_passive_deepview=false&%24android_passive_deepview=false&wgu=285505_1603355_16754439880973_b52dab9171&wgexpiry=1706979988 IP54.230.111.120:0
GET /?af_dp=saramart%3A%2F%2Findex%3Ff%3Dp_webgains.o_suxi.g_affiliate.m_webgains.c_saramart-DACH-UK-IT-ES-FR-homepage.t_20210420-203152.sub_-GE-1-285505-5F1603355-5F16754439880973-5Fb52dab9171.sub5_-GE-1-1335525.v_1&%24fallback_url=https%3A%2F%2Fwww.saramart.pl%3Ff%3Dp_webgains.o_suxi.g_affiliate.m_webgains.c_saramart-DACH-UK-IT-ES-FR-homepage.t_20210420-203152.sub_-GE-1-285505-5F1603355-5F16754439880973-5Fb52dab9171.sub5_-GE-1-1335525.v_1%26install_banner%3Dbranch&%24ios_passive_deepview=false&%24android_passive_deepview=false&wgu=285505_1603355_16754439880973_b52dab9171&wgexpiry=1706979988 HTTP/1.1
Host: m5i6q-alternate.app.link
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _s=%2F31SILt7P19jZ7KS8kYPQ1uvv6lIK49jS2sQqA846IjvTr%2Fva2wjaW9hs%2FuemTYW
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 307 Temporary Redirect
location: https://www.saramart.pl/?f=p_webgains.o_suxi.g_affiliate.m_webgains.c_saramart-DACH-UK-IT-ES-FR-homepage.t_20210420-203152.sub_-GE-1-285505-5F1603355-5F16754439880973-5Fb52dab9171.sub5_-GE-1-1335525.v_1&install_banner=branch&af_dp=saramart%3A%2F%2Findex%3Ff%3Dp_webgains.o_suxi.g_affiliate.m_webgains.c_saramart-DACH-UK-IT-ES-FR-homepage.t_20210420-203152.sub_-GE-1-285505-5F1603355-5F16754439880973-5Fb52dab9171.sub5_-GE-1-1335525.v_1&%24ios_passive_deepview=false&%24android_passive_deepview=false&wgu=285505_1603355_16754439880973_b52dab9171&wgexpiry=1706979988&_branch_match_id=1062369509546216292&_branch_referrer=H4sIAAAAAAAAA9WQy26DMBBFv4bu7PiBIVRCVdSEtuquj%2FVoCAas8HAxhPTva5S0URf9gEpejDx3RudMPY7W3a5WrTLRB0VraWO6w%2BoOSyhs6nDAFocxkJtAZP6ZrtCnQGZlILcWZp1XaDpHe3DTydAKsCxNY3DUtL129%2FC9h2w394%2Fk%2FZk8vZHdK8leSN232mKl6QiCCc5CwYhgkitB3ZQDedgRTsRaKaaIynjEpFTnKlZhKJP1miWx9B%2B5EgXmCY%2F5Mqguk3yJC0WPwG8CEZbYNDnuDzANTVov6j9m8zzTb0xqm%2F%2FpGIjIw4zeEnLsOj14hXzAbl8v9qZ3YNE5c9RQaG2PRs%2BpP4nTSxe7YuhN8Vdirqb0zAgXQvjNB1c6H9Yna4bPlMcsSuLER74AHQ30JWkCAAA%3D
server: openresty
date: Fri, 03 Feb 2023 17:06:28 GMT
set-cookie: _s=%2F31SILt7P19jZ7KS8kYPQ1uvv6lIK49jS2sQqA846IjvTr%2Fva2wjaW9hs%2FuemTYW; Max-Age=31536000; Domain=.app.link; Path=/; Expires=Sat, 03 Feb 2024 17:06:28 GMT; Secure
last-modified: Fri, 03 Feb 2023 17:06:28 GMT
strict-transport-security: max-age=31536000; includeSubDomains
x-cache: Miss from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: rS3wSSM6PpXlHa3iN30e8e1VkRzzIkFMkOAW85dV1qZoAc6TLMMolA==
X-Firefox-Spdy: h2
|
|
| s4.forcloudcdn.com/assets/pc-sm-home/0.1.12/index.css | 104.18.24.201 | 200 OK | 0 B |
URL HTTP/2s4.forcloudcdn.com/assets/pc-sm-home/0.1.12/index.css IP104.18.24.201:0
GET /assets/pc-sm-home/0.1.12/index.css HTTP/1.1
Host: s4.forcloudcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.saramart.pl/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:06:29 GMT
content-type: text/css
cache-control: public, max-age=31536000
cf-bgj: minify
cf-polished: origSize=15233
etag: W/"f953b93f63c99545a33f500cce7e803d"
last-modified: Mon, 20 Dec 2021 10:35:36 GMT
vary: Origin, Accept-Encoding
x-amz-id-2: mLfU9O1cPnoq7VL65CNsai+dw476KZiewwZS80aXgIIvGkASrQSPRypWTXqEaA+Aw0QS0Mz61+0=
x-amz-request-id: T1H8867K8FGKSKJ0
x-amz-version-id: lF6jssKXxo9L5ZfC_afgKtI8NdTYeT_F
cf-cache-status: HIT
age: 373226
expires: Sat, 03 Feb 2024 17:06:29 GMT
server: cloudflare
cf-ray: 793cc1e3ed49b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| tr.snapchat.com/config/pl/312e9ab0-1cf9-461a-8f46-ad5f499b7d4d.js | 35.190.43.134 | 200 OK | 0 B |
URL HTTP/2tr.snapchat.com/config/pl/312e9ab0-1cf9-461a-8f46-ad5f499b7d4d.js IP35.190.43.134:0
GET /config/pl/312e9ab0-1cf9-461a-8f46-ad5f499b7d4d.js HTTP/1.1
Host: tr.snapchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.saramart.pl/
Origin: https://www.saramart.pl
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:06:30 GMT
access-control-allow-origin: https://www.saramart.pl
content-type: application/javascript
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-envoy-upstream-service-time: 0
content-encoding: gzip
vary: Accept-Encoding
server: API Gateway
access-control-allow-credentials: true
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|