Overview

URLflaviar.com/?irclickid=2Ts0EhwnYxyNRFW0Vm26Pw3CUkDQl1z5LTTqXQ0&ir_cid=3334&ir_affid=10813&utm_medium=affiliates&utm_source=MaxBounty.com%20ULC&ir_partnerid=10813&ir_adid=1215604&ir_campaignid=3334
IP 172.66.43.165 (United States)
ASN#13335 CLOUDFLARENET
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2022-10-06 20:19:36 UTC
StatusLoading report..
IDS alerts0
Blocklist alert1
urlquery alerts No alerts detected
Tags None

Domain Summary (98)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
www.redditstatic.com (1) 1440 2012-06-30 12:33:28 UTC 2022-10-06 05:14:53 UTC 151.101.85.140
rb9yp8py.flaviar.com (3) 0 2022-06-24 07:42:28 UTC 2022-09-14 19:38:51 UTC 159.203.152.67 Domain (flaviar.com) ranked at: 193933
ad.360yield.com (2) 657 2012-11-28 11:30:25 UTC 2022-10-06 04:46:08 UTC 18.185.190.16
gs.mountain.com (1) 17855 2021-07-16 12:27:00 UTC 2022-10-06 14:48:29 UTC 34.212.4.35
campaign.fbot.me (1) 21860 2020-03-27 09:20:05 UTC 2022-10-06 11:21:10 UTC 54.230.111.120
www.google-analytics.com (1) 40 2012-10-03 01:04:21 UTC 2022-10-06 13:55:28 UTC 142.250.74.174
cdn.sgmntfy.com (1) 0 2022-06-14 04:56:35 UTC 2022-10-04 11:01:19 UTC 34.149.223.191 Unknown ranking
ad.yieldlab.net (1) 3515 2014-05-07 00:17:56 UTC 2022-10-06 04:47:14 UTC 23.32.110.31
cm.adform.net (1) 1667 2015-03-30 07:47:01 UTC 2022-10-06 04:46:48 UTC 37.157.4.28
s.thebrighttag.com (1) 1487 2014-11-26 15:16:07 UTC 2022-10-06 04:47:09 UTC 3.128.146.7
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-10-06 04:55:14 UTC 34.160.144.191
push.services.mozilla.com (1) 2140 2015-09-03 10:29:36 UTC 2022-10-06 05:02:20 UTC 44.240.140.78
gem.gbc.criteo.com (1) 6039 2019-02-06 06:21:41 UTC 2022-10-06 15:24:01 UTC 185.235.84.14
www.google.com (2) 7 2016-08-04 12:36:31 UTC 2022-10-06 14:48:50 UTC 142.250.74.164
sslwidget.criteo.com (1) 1723 2012-05-31 02:43:28 UTC 2022-10-06 09:48:18 UTC 178.250.0.163
sync-criteo.ads.yieldmo.com (1) 2354 2019-12-10 21:28:48 UTC 2022-10-06 04:52:06 UTC 54.220.128.66
consent.cookiebot.com (2) 4972 2014-02-26 14:48:42 UTC 2022-10-06 05:12:33 UTC 104.84.152.233
cdn.segmentify.com (1) 45412 2014-11-29 04:41:53 UTC 2022-10-04 14:31:25 UTC 34.120.65.227
www.google.no (1) 25607 2016-04-05 19:50:59 UTC 2022-10-06 06:32:55 UTC 142.250.74.3
dx.mountain.com (1) 12081 2021-06-28 08:59:34 UTC 2022-10-06 14:48:25 UTC 35.83.209.52
px.mountain.com (2) 11897 2021-07-08 20:56:16 UTC 2022-10-06 08:47:04 UTC 35.85.106.161
visitor.omnitagjs.com (1) 1722 2017-01-30 04:58:42 UTC 2022-10-06 05:03:13 UTC 185.255.84.152
consentcdn.cookiebot.com (1) 5676 2018-05-23 05:13:43 UTC 2022-10-06 05:12:34 UTC 104.110.3.72
splow.flaviar.com (1) 0 2019-08-14 14:48:44 UTC 2022-09-26 02:06:38 UTC 172.66.43.165 Domain (flaviar.com) ranked at: 193933
bat.bing.com (3) 387 2014-04-08 09:23:16 UTC 2022-10-06 04:47:06 UTC 13.107.21.200
api.sail-personalize.com (1) 2657 2017-01-30 03:12:33 UTC 2022-10-06 07:10:33 UTC 99.83.154.140
x.bidswitch.net (2) 286 2017-08-28 15:21:00 UTC 2022-10-06 04:46:48 UTC 3.126.140.73
dpm.demdex.net (2) 204 2017-01-30 04:59:39 UTC 2022-10-06 04:46:29 UTC 34.243.91.96
nytrng.com (1) 3752 2017-05-13 00:54:58 UTC 2022-10-06 12:21:25 UTC 75.2.91.175
contextual.media.net (1) 513 2019-04-30 08:49:36 UTC 2022-10-06 11:10:26 UTC 23.38.200.22
sync-t1.taboola.com (1) 1269 2020-06-29 11:52:33 UTC 2022-10-06 04:52:06 UTC 141.226.228.48
widget.trustpilot.com (8) 6018 2017-09-05 07:45:53 UTC 2022-10-06 12:40:27 UTC 54.230.111.50
stats.g.doubleclick.net (3) 96 2013-06-02 22:47:44 UTC 2022-10-06 06:27:32 UTC 173.194.73.156
public.fbot.me (2) 25033 2018-12-11 11:12:00 UTC 2022-10-06 16:42:37 UTC 52.45.210.7
beacon-v2.helpscout.net (4) 11066 2019-07-09 07:31:53 UTC 2022-10-06 13:59:42 UTC 54.230.111.96
sc-static.net (1) 1183 2022-01-24 20:13:30 UTC 2022-10-06 17:20:38 UTC 54.230.82.240
fbcapi.flaviar.com (2) 0 2021-10-20 10:09:14 UTC 2022-09-25 14:59:17 UTC 54.183.233.41 Domain (flaviar.com) ranked at: 193933
alb.reddit.com (1) 1521 2017-06-15 05:33:56 UTC 2022-10-06 07:00:30 UTC 151.101.85.140
r3.o.lencr.org (10) 344 2020-12-02 08:52:13 UTC 2022-10-06 04:46:31 UTC 23.36.76.226
ocsp.digicert.com (26) 86 2012-05-21 07:02:23 UTC 2022-10-06 14:49:11 UTC 93.184.220.29
www.googleoptimize.com (1) 1604 2019-07-23 08:23:32 UTC 2022-10-06 06:53:56 UTC 142.250.74.46
dis.criteo.com (2) 660 2012-06-02 15:38:12 UTC 2022-10-06 05:52:17 UTC 178.250.0.163
static.fbot.me (1) 21788 2020-03-25 21:09:20 UTC 2022-10-06 13:16:41 UTC 54.230.111.83
criteo-sync.teads.tv (1) 1786 2017-02-17 10:06:41 UTC 2022-10-06 04:52:06 UTC 23.195.255.234
match.sharethrough.com (1) 604 2015-12-22 22:55:59 UTC 2022-10-06 04:46:51 UTC 52.28.129.28
insight.adsrvr.org (1) 631 2014-07-14 16:03:10 UTC 2022-10-06 04:59:19 UTC 15.197.193.217
googleads.g.doubleclick.net (1) 42 2021-02-20 15:43:32 UTC 2022-10-06 17:22:46 UTC 142.250.74.130
d3rr3d0n31t48m.cloudfront.net (3) 0 2021-11-29 13:42:00 UTC 2022-10-06 12:21:22 UTC 54.230.111.123 Unknown ranking
gum.criteo.com (3) 381 2015-01-22 10:58:57 UTC 2022-10-06 13:00:19 UTC 178.250.2.146
cdn.nytrng.com (1) 25486 2020-10-02 18:00:48 UTC 2022-10-06 12:21:26 UTC 54.230.111.121
pixel.rubiconproject.com (1) 314 2012-10-09 03:17:38 UTC 2022-10-06 04:46:28 UTC 213.19.162.80
ocsp.sca1b.amazontrust.com (15) 1015 2017-03-03 15:20:51 UTC 2019-03-27 04:05:54 UTC 54.230.245.100
img-getpocket.cdn.mozilla.net (6) 1631 2017-09-01 03:40:57 UTC 2022-10-06 15:33:49 UTC 34.120.237.76
tr.snapchat.com (7) 978 2017-04-26 06:25:03 UTC 2022-10-06 04:47:17 UTC 35.190.43.134
ocsp.entrust.net (1) 1208 2013-07-24 12:09:14 UTC 2022-10-06 04:46:08 UTC 104.110.10.32
ak.sail-horizon.com (1) 2750 2012-07-08 11:21:29 UTC 2022-10-06 07:10:32 UTC 54.230.111.63
ag.gbc.criteo.com (1) 5925 2018-12-17 13:17:41 UTC 2022-10-06 15:24:01 UTC 185.235.84.21
ib.adnxs.com (2) 241 2012-05-23 22:36:14 UTC 2022-10-06 18:01:22 UTC 37.252.173.27
simage2.pubmatic.com (1) 578 2012-07-21 03:13:48 UTC 2022-10-06 04:47:14 UTC 185.64.189.110
beacon.krxd.net (1) 408 2012-05-22 04:25:40 UTC 2022-10-06 04:46:29 UTC 52.210.106.114
analytics.twitter.com (2) 526 2013-04-10 19:53:18 UTC 2022-10-06 05:24:34 UTC 104.244.42.67
shopper.shop.pe (1) 12886 2017-07-18 19:28:17 UTC 2022-10-06 14:42:12 UTC 35.190.54.17
exchange.mediavine.com (1) 2109 2020-11-23 01:20:19 UTC 2022-10-06 04:52:06 UTC 35.158.179.233
firefox.settings.services.mozilla.com (2) 867 2020-05-28 17:26:30 UTC 2022-10-06 17:18:03 UTC 54.230.111.7
www.googletagmanager.com (1) 75 2012-12-25 14:52:06 UTC 2022-10-06 08:32:24 UTC 142.250.74.168
status.thawte.com (2) 5123 2017-11-27 12:33:51 UTC 2022-10-06 05:13:36 UTC 93.184.220.29
aacdn.nagich.com (5) 17244 2018-05-15 10:18:13 UTC 2022-10-06 12:35:06 UTC 104.26.15.45
region1.analytics.google.com (1) 0 2022-03-17 11:26:33 UTC 2022-10-06 07:09:20 UTC 216.239.34.36 Domain (google.com) ranked at: 1
dynamic.criteo.com (1) 4826 2018-04-12 10:04:05 UTC 2022-10-06 13:33:22 UTC 178.250.2.140
dnacdn.net (2) 3760 2019-09-02 15:07:45 UTC 2022-10-06 06:08:18 UTC 178.250.0.157
static.ads-twitter.com (1) 614 2017-01-30 05:00:15 UTC 2022-10-06 04:59:19 UTC 151.101.84.157
t.co (2) 569 2012-07-25 19:09:44 UTC 2022-10-06 04:50:18 UTC 104.244.42.133
tr.outbrain.com (2) 2017 2017-04-12 07:58:35 UTC 2022-10-06 06:16:03 UTC 64.202.112.127
use.typekit.net (3) 494 2012-07-05 01:42:39 UTC 2022-10-06 04:46:04 UTC 23.36.76.122
cdn.flaviar.com (30) 547247 2021-04-09 16:12:31 UTC 2022-09-14 19:38:48 UTC 54.230.111.75
ajax.googleapis.com (1) 12905 2013-08-16 09:51:31 UTC 2022-10-06 14:22:14 UTC 142.250.74.138
sync.outbrain.com (1) 757 2016-08-02 06:37:14 UTC 2022-10-06 04:49:37 UTC 64.202.112.127
ocsp.globalsign.com (1) 2075 2012-05-25 06:20:55 UTC 2022-10-06 04:46:52 UTC 104.18.21.226
ocsp.godaddy.com (1) 698 2012-05-20 19:28:57 UTC 2022-10-06 04:48:04 UTC 192.124.249.23
id5-sync.com (1) 504 2017-01-25 21:02:34 UTC 2022-10-06 04:46:28 UTC 162.19.138.117
eb2.3lift.com (1) 402 2014-09-24 15:03:42 UTC 2022-10-06 08:28:47 UTC 13.248.245.213
widget.us.criteo.com (1) 19445 2015-08-23 19:59:38 UTC 2022-10-06 07:09:37 UTC 74.119.119.150
ocsp.sectigo.com (6) 487 2018-12-17 11:31:55 UTC 2022-10-06 12:08:41 UTC 104.18.32.68
shop.pe (1) 10635 2012-07-24 18:16:22 UTC 2022-10-06 12:21:22 UTC 35.227.244.1
r.casalemedia.com (2) 1896 2012-06-24 01:17:14 UTC 2022-10-06 04:52:06 UTC 185.80.36.245
100.20.58.101 (1) 0 No data No data 100.20.58.101 Unknown ranking
matching.ivitrack.com (1) 10236 2017-09-04 17:11:27 UTC 2022-10-06 05:31:53 UTC 34.117.157.22
criteo-partners.tremorhub.com (1) 2360 2017-11-20 17:11:05 UTC 2022-10-06 04:53:25 UTC 52.44.73.49
flaviar.com (2) 193933 2014-10-07 22:11:24 UTC 2022-10-06 12:17:51 UTC 172.66.43.165
flaviar.com (2) 193933 2014-10-07 22:11:24 UTC 2022-10-06 12:17:51 UTC 172.66.40.91
e1.o.lencr.org (1) 6159 2021-08-20 07:36:30 UTC 2022-10-06 06:04:03 UTC 23.36.77.32
gandalf-eu.segmentify.com (2) 94818 2019-05-21 07:54:56 UTC 2022-10-04 11:01:19 UTC 35.246.234.8
d3hb14vkzrxvla.cloudfront.net (1) 0 2021-03-08 19:13:46 UTC 2022-10-06 14:29:30 UTC 54.230.245.184 Unknown ranking
getrockerbox.com (1) 4208 2018-11-09 03:01:16 UTC 2022-10-06 15:39:47 UTC 172.64.140.25
ups.analytics.yahoo.com (2) 287 2019-05-09 15:57:40 UTC 2022-10-06 04:46:29 UTC 3.126.56.137
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-10-06 04:46:50 UTC 34.117.237.239
ocsp.pki.goog (10) 175 2017-06-14 07:23:31 UTC 2022-10-06 04:46:05 UTC 142.250.74.3
addshoppers.s3.amazonaws.com (1) 15696 2014-10-08 14:25:15 UTC 2022-10-06 14:42:12 UTC 52.216.94.27

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
 No alerts detected

mnemonic secure dns
 No alerts detected

Quad9 DNS
Scan Date Severity Indicator Comment
2022-10-06 2 sgmntfy.com Sinkholed


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 172.66.43.165
Date UQ / IDS / BL URL IP
2023-03-12 10:03:21 +0000 0 - 0 - 1 flaviar.com/ 172.66.43.165
2023-01-12 22:06:24 +0000 0 - 0 - 1 flaviar.com/?irclickid=z9WwdERT1xyNTfUU3bWBaT (...) 172.66.43.165
2022-12-24 05:00:40 +0000 0 - 0 - 30 www.utahadvocates.com/contact/locations/salt- (...) 172.66.43.165
2022-12-21 07:33:13 +0000 0 - 0 - 2 flaviar.com/j-rieger-co/riegers-kansas-city-w (...) 172.66.43.165
2022-12-04 11:26:37 +0000 0 - 0 - 1 flaviar.com/mars/mars-iwai-45-whisky/ 172.66.43.165


Last 5 reports on ASN: CLOUDFLARENET
Date UQ / IDS / BL URL IP
2023-03-31 18:06:08 +0000 0 - 0 - 1 suporteitau30horas.com/ 188.114.96.1
2023-03-31 18:06:00 +0000 0 - 0 - 2 www.beastsurveys.com/www.unsub/?vbhhx/610ace5 (...) 104.21.66.221
2023-03-31 18:05:58 +0000 0 - 0 - 2 www.beastsurveys.com/1Sd-WYb~Ad_d8202764/C/?i (...) 188.114.96.1
2023-03-31 18:05:55 +0000 0 - 0 - 2 www.beastsurveys.com/www.unsub/?luomw/610ace5 (...) 188.114.97.1
2023-03-31 18:05:55 +0000 0 - 0 - 2 www.beastsurveys.com/1Sd-WYb~Ad_d8202764/C/?g (...) 188.114.97.1


Last 5 reports on domain: flaviar.com
Date UQ / IDS / BL URL IP
2023-03-12 10:03:21 +0000 0 - 0 - 1 flaviar.com/ 172.66.43.165
2023-01-12 22:06:24 +0000 0 - 0 - 1 flaviar.com/?irclickid=z9WwdERT1xyNTfUU3bWBaT (...) 172.66.43.165
2023-01-04 23:22:05 +0000 0 - 0 - 1 www.flaviar.com/tasting 172.66.40.91
2022-12-21 07:33:13 +0000 0 - 0 - 2 flaviar.com/j-rieger-co/riegers-kansas-city-w (...) 172.66.43.165
2022-12-21 07:33:13 +0000 0 - 0 - 1 flaviar.com/kamet/kamet-single-malt-whisky/ 172.66.40.91


Last 3 reports with similar screenshot
Date UQ / IDS / BL URL IP
2022-10-27 10:16:43 +0000 0 - 0 - 1 flaviar.com/ 172.66.43.165
2022-09-07 12:18:32 +0000 0 - 0 - 1 flaviar.com/ 172.66.43.165
2022-09-02 19:36:54 +0000 0 - 0 - 1 flaviar.com/ 172.66.43.165

JavaScript

Executed Scripts (76)

Executed Evals (9)
#1 JavaScript::Eval (size: 240) - SHA256: 8dcfc3dda3fa512ecb28923fe66c9a17be73158a83ee9207a9400e6c49585b4a
let run_conversion_block = (...urls) => {
    let block = "sh_conversion=SHBLOCK";
    let url = window.location.href;
    for (let x of urls) {
        if (url.indexOf(x) > -1) {
            block = null;
            break;
        }
    };
    return block
};
run_conversion_block("https://flaviar.com/");
#2 JavaScript::Eval (size: 90) - SHA256: 4f6405f66c1f1e9c1f52dfcb7cadb349b32360b3d399323d54066cbd971219ea
(function() {
    return "undefined" === typeof Cookiebot ? !1 : Cookiebot.regulations.gdprApplies
})();
#3 JavaScript::Eval (size: 147) - SHA256: 4570527997213e7b6f1646ca9dbb2aee54e7a767c71412960bd8f5127c11dbad
(function() {
    return /iPad/.test(navigator.userAgent) ? "t" : /Mobile|iP(hone|od)|Android|BlackBerry|IEMobile|Silk/.test(navigator.userAgent) ? "m" : "d"
})();
#4 JavaScript::Eval (size: 232) - SHA256: 31ce869da033250d55761f51671d970b8c96dbf3a4590e5a00c3ec81345df814
let mntn_audience_type = null;
let signIn = document.querySelector("#navbar > div.side-menu > div.simple-menu-element > a");
if (signIn) {
    if (signIn.href.indexOf("login") > -1) {
        null
    } else {
        mntn_audience_type = "mntn_audience=logged_in";
    }
}
#5 JavaScript::Eval (size: 2548) - SHA256: 2c034d3a9785cb73769b8a1d80ae2808b179972a5b0bd25c34cc1022db7e90ed
(function() {
    if (typeof irongate == 'undefined') irongate = {};
    irongate.gr = function(callback) {
        if (typeof irongate.g != 'undefined') {
            callback()
        } else {
            if (typeof irongate.gcb == 'undefined') {
                irongate.gcb = []
            }
            irongate.gcb.push(callback)
        }
    };
    irongate.gsl = function() {
        var st = document.createElement("script");
        st.type = "text/javascript";
        st.src = "https://gs.mountain.com/gs";
        var list = document.getElementsByTagName("script");
        var last = Number(list.length) - 1;
        var scpt = document.getElementsByTagName("script")[last];
        scpt.parentNode.insertBefore(st, scpt);
        irongate.timeout = setInterval(irongate.dl, 2000)
    };
    irongate.dl = function() {
        if (typeof irongate.g != 'undefined') {
            clearInterval(irongate.timeout)
        }
        while (irongate.gcb.length > 0) {
            var callback = irongate.gcb.pop();
            callback()
        }
    };
    var request = function() {
        var st = document.createElement('script');
        st.type = 'text/javascript';
        var g = (typeof irongate.g != 'undefined' ? irongate.g() : 'null');
        var gt = (typeof irongate.gt != 'undefined' ? irongate.gt() : 'null');
        var sturl = 'px.mountain.com/st?ga_tracking_id=UA-28959768-20&ga_client_id=2009995165.1665087567&shpt=Flaviar%20Membership%20%C2%BB%20Fine%20Spirits%20%26%20Whiskey%20Club%20%F0%9F%A5%83%20-%20Flaviar&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-28959768-20%22%2C%22ga_client_id%22%3A%222009995165.1665087567%22%2C%22shpt%22%3A%22Flaviar%20Membership%20%C2%BB%20Fine%20Spirits%20%26%20Whiskey%20Club%20%F0%9F%A5%83%20-%20Flaviar%22%2C%22dcm_cid%22%3A%221665087566.1%22%2C%22dcm_gid%22%3A%221328691908.1665087567%22%2C%22ga_utm_source%22%3A%22MaxBounty.com%20ULC%22%2C%22ga_utm_medium%22%3A%22affiliates%22%2C%22mntnis%22%3A%22glKHoe1xnXpxOFOUSmfngZCTOW96uWrx%22%2C%22execution_workflow%22%3A%7B%22iteration%22%3A7%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%2C%22ga_utm_source%22%3A%22OK%22%2C%22ga_utm_medium%22%3A%22OK%22%7D%7D&dcm_cid=1665087566.1&dcm_gid=1328691908.1665087567&dxver=4.0.0&shaid=33038&plh=https%3A%2F%2Fflaviar.com%2F%3Firclickid%3D2Ts0EhwnYxyNRFW0Vm26Pw3CUkDQl1z5LTTqXQ0%26ir_cid%3D3334%26ir_affid%3D10813%26utm_medium%3Daffiliates%26utm_source%3DMaxBounty.com%2520ULC%26ir_partnerid%3D10813%26ir_adid%3D1215604%26ir_campaignid%3D3334&shadditional=googletagmanager%3Dtrue%2Cga4%3Dtrue%2Ccriteo%3Dtrue&cb=1665087571018689&shguid=' + g + '&shgts=' + gt;
        st.src = ('https:' == document.location.protocol ? 'https://' : 'http://') + sturl;
        var list = document.getElementsByTagName('script');
        var last = Number(list.length) - 1;
        var scpt = document.getElementsByTagName('script')[last];
        scpt.parentNode.insertBefore(st, scpt)
    };
    irongate.gr(request);
    irongate.gsl()
})();
#6 JavaScript::Eval (size: 6813) - SHA256: 8c992219644092aa4235452b01a376d229bea2e521fda23566b23431ea7462e0
(function() {
    // User code
    function asIsProductPage() {
            if (document.URL.search('/gifts') > -1) {
                return {
                    'product_name': document.querySelector('div.card strong.title').textContent.replace(';', ',').trim(),
                    'image': document.querySelector('div.image.position-relative img').src.split('?')[0],
                    'price': parseFloat(document.querySelector('strong.price').textContent.split(',')[0].replace(';', ',').replace(/[^0-9\.]/g, '')),
                    'quantity': 1,
                    'sku': document.URL.split('?')[0]
                }
            } else if (document.URL.search('/join') > -1) {
                return {
                    'product_name': document.querySelector('div.product-title').textContent.replace(';', ',').trim(),
                    'image': document.querySelector('div.product-img img').src.split('?')[0],
                    'price': parseFloat(document.querySelector('div.product-price-sub>span.price').textContent.split(',')[0].replace(';', ',').replace(/[^0-9\.]/g, '')),
                    'quantity': 1,
                    'sku': document.URL.split('?')[0]
                }
            } else if (document.querySelector('#product-cta>div.add-to-cart')) {
                return {
                    'product_name': document.querySelector('div.product-info>h1>a').textContent.replace(';', ',').trim(),
                    'image': document.querySelector('img.main-image').src.split('?')[0],
                    'price': parseFloat(document.querySelector('span.price-primary').textContent.split(',')[0].replace(';', ',').replace(/[^0-9\.]/g, '')),
                    'quantity': 1,
                    'sku': document.URL.split('?')[0]
                }
            }
        }
        // End of user code
    if (typeof asIsProductPage === 'function') {
        window.asIsProductPage = asIsProductPage;
    }
})();


(function() {
    // User code
    function asCartItems(cartRows) {
            if (cartRows.length > 0 && document.querySelector('div.order-summary div.cart-item')) {
                var asCartArr = [];
                for (let x = 0; x < cartRows.length; x++) {
                    var Pic = '';
                    if (cartRows[x].querySelector('div.order-summary div.cart-item div.cart-image img')) {
                        Pic = cartRows[x].querySelector('div.order-summary div.cart-item div.cart-image img').src
                    } else {
                        Pic = document.querySelector('.logo img').src
                    }
                    var Sku = '';
                    if (cartRows[x].querySelector('div.order-summary div.cart-item span.title>a').href != '') {
                        Sku = cartRows[x].querySelector('div.order-summary div.cart-item span.title>a').href
                    } else {
                        Sku = document.URL.split('?')[0]
                    }
                    let asCartProduct = {
                        'product_name': cartRows[x].querySelector('div.order-summary div.cart-item span.title>a').innerText.trim().replace(/\r?\n|\r/g, ''),
                        'price': cartRows[x].querySelector('div.order-summary div.cart-item span.total>span').textContent.replace(/[^0-9\.]/g, ''),
                        'image': Pic,
                        'quantity': cartRows[x].querySelector('div.order-summary div.cart-item div.quantity-selector-field input').value,
                        'sku': Sku
                    }
                    asCartArr.push(asCartProduct);
                }
                return asCartArr;
            } else if (cartRows.length > 0 && document.querySelector('div.cart-item')) {
                var asCartArr = [];
                for (let x = 0; x < cartRows.length; x++) {
                    var Pic = '';
                    if (cartRows[x].querySelector('div.cart-item div.cart-image img')) {
                        Pic = cartRows[x].querySelector('div.cart-item div.cart-image img').src
                    } else {
                        Pic = document.querySelector('.logo img').src
                    }
                    var Sku = '';
                    if (cartRows[x].querySelector('div.cart-item span.title>a').href != '') {
                        Sku = cartRows[x].querySelector('div.cart-item span.title>a').href
                    } else {
                        Sku = document.URL.split('?')[0]
                    }
                    let asCartProduct = {
                        'product_name': cartRows[x].querySelector('div.cart-item span.title>a').innerText.trim().replace(/\r?\n|\r/g, ''),
                        'price': cartRows[x].querySelector('div.cart-item span.total>span').textContent.replace(/[^0-9\.]/g, ''),
                        'image': Pic,
                        'quantity': cartRows[x].querySelector('div.cart-item div.quantity-selector-field input').value,
                        'sku': Sku
                    }
                    asCartArr.push(asCartProduct);
                }
                return asCartArr;
            }
        }
        // End of user code
    if (typeof asCartItems === 'function') {
        window.asCartItems = asCartItems;
    }
})();


(function() {
    // User code
    function asOfferRedemption(callback) {
            var element = document.querySelector('div.apply-coupon input')
            if (typeof(element) != 'undefined' && element != null) {
                element.addEventListener('change', (event) => {
                    callback(element.value);
                });
            }
        }
        // End of user code
    if (typeof asOfferRedemption === 'function') {
        window.asOfferRedemption = asOfferRedemption;
    }
})();


(function() {
    // User code
    function asCart(isCartPage) {
        // console.log('asCart');
        isCartPage();
    }

    function isCartPage() {
            if (document.URL.search('/checkout') > -1 || document.querySelector('div.cart-wrapper')) {
                return true;
            }
        }
        // End of user code
    if (typeof asCart === 'function') {
        window.asCart = asCart;
    }
})();


(function() {
    // User code
    function asCartRows() {
            return document.querySelectorAll('div.cart-item,div.order-summary div.cart-item');
        }
        // End of user code
    if (typeof asCartRows === 'function') {
        window.asCartRows = asCartRows;
    }
})();;
AddShoppersTriggerRunner.dataLayerLoaded();
AddShoppersWidget && AddShoppersWidget.dataLayerLoaded && AddShoppersWidget.dataLayerLoaded();
#7 JavaScript::Eval (size: 799) - SHA256: b5339fe2e06347d3e5f4bd018d4355ee30a7af66a0a2cd00126278c0d4ed29c3
_SgmntfY_._variables.pushInfo.dataCenter = 'https://gimli-eu.segmentify.com/';

var _pushInfo = {
    instanceId: 'psh_9f5bc74284000',
    subscription: 'NONE',
    permissionMethod: 'Firebase',
    firebase: {
        scriptUrl: 'https://cdn.segmentify.com/push/fb.js',
        apiKey: 'AAAAqVm1GQA:APA91bHfPRO7cTsUn6BgpwlBhvvpacuYTdo5UPP4ul1OfdDHVbBiUnHVOZaa9mXYGnVy5AXy6uswLnT3sNZHmy6p40OBazyw6GI9JZEiR593pR8D5rNd_j-hZ8szTAviUqKowMUkv_Z0',
        messagingSenderId: '727354513664',
        messaging: ''
    },
    vapid: {
        publicKey: ''
    },
    safari: {
        webPushId: '',
        packageUrl: _SgmntfY_._variables.pushInfo.dataCenter + 'safari/' + _SgmntfY_._variables.apiKey
    },
    agent: '',
    serviceWorkerReg: null,
    isFirebaseCompatible: false
};

_SgmntfY_._getJq().extend(_SgmntfY_._variables.pushInfo, _pushInfo);
#8 JavaScript::Eval (size: 792) - SHA256: be95c8d79151c70258c07974285ecbec353f917fa5054c668968d1e81295a6f0
let searchForTags = (...compTags) => {
    let data = {};
    let scriptNodes = document.getElementsByTagName("script");
    let imageNodes = document.getElementsByTagName("img");
    let nodesArray = [...scriptNodes, ...imageNodes];
    for (let node of nodesArray) {
        for (let i = 0; i < compTags.length; i++) {
            if (node.src && node.src.indexOf(compTags[i].id) > -1) {
                data[compTags[i].id] = compTags[i].name;
            }
        }
    };
    return Object.values(data).join(",");
};
searchForTags({
    id: "criteo",
    name: "criteo=true"
}, {
    id: "shopify",
    name: "shopify=true"
}, {
    id: "adroll",
    name: "adroll=true"
}, {
    id: "adnxs.com",
    name: "appnexus=true"
}, {
    id: "googletagmanager",
    name: "googletagmanager=true"
}, {
    id: "googletagmanager.com/gtag/js?id=G-",
    name: "ga4=true"
}, {
    id: "pixel.mathtag.com",
    name: "mediamath=true"
});
#9 JavaScript::Eval (size: 94) - SHA256: 5275479864fbf79b7fdd370484aff734de089f6e7ab2b6658bc2e7a5b488fc97
function preRenderConf(conf) {
    if (!_SgmntfY_._variables.pushInfo) {
        return false;
    }
}

Executed Writes (2)
#1 JavaScript::Write (size: 198) - SHA256: fe93e5320aa2c68628b6d1527df5c89dedad5d8aca7072de2e2db8c5d40eddda
< !DOCTYPE html >
    < html >
    < head >

    < /head> < body id = "beacon-container-body" >
    < div id = "beacon-container" > < /div> < /body> < /html>
#2 JavaScript::Write (size: 5432) - SHA256: 638a95583d229a25581474d52180fbf3e52a8b5b1a80b1c567600343665c9afb
< html > < head > < title > Dising < /title><script type="text/javascript
">rD = false;function edcTimeout() {rD = true; }function cto_AI(u,n) { if (rD) {return;} var cto_ifr=document.getElementById('cto_sub_ifr_px');var cto_ifr_doc=null;if(typeof(cto_ifr)==='undefined'||cto_ifr==null)cto_ifr_doc=document;else if(cto_ifr.contentDocument)cto_ifr_doc=cto_ifr.contentDocument;else if(cto_ifr.contentWindow)cto_ifr_doc=cto_ifr.contentWindow.document;else if(cto_ifr.document)cto_ifr_doc=cto_ifr.document;else cto_ifr_doc=document;if(cto_ifr_doc.createElement){var im=cto_ifr_doc.createElement('IMG');if(im){var d=document.getElementById('cto_pc');if(d!==null && d.appendChild){d.appendChild(im)}if(n){im.onload=n;im.onerror=n;im.onabort=n}im.src=u}} }function cto_l(){if(typeof(cto_loaded)==='undefined')cto_loaded=1;else cto_loaded++;}function cto_run() {function l_i1_1(){cto_AI('https://x.bidswitch.net/sync?dsp_id=46&user_id=k-ZSLcmYyFtkn3YsMjnIeCD65HbrTJPtZxZfA97Q&expires=30', cto_l);}function l_i2_1(){cto_AI('https://cm.g.doubleclick.net/pixel?google_nid=cjp&google_sc&google_ula=913071&CriteoUserId=k-uC0W64yFtkn3YsMjnIeCD65HbrRPPdMkTFDsxQ&google_cm&google_hm=ay11QzBXNjR5RnRrbjNZc01qbkllQ0Q2NUhiclJQUGRNa1RGRHN4UQ', cto_l);}function l_i3_1(){cto_AI('https://ib.adnxs.com/getuid?https://dis.criteo.com/dis/rtb/appnexus/cookiematch.aspx?appnxsid=$UID', cto_l);}function l_i4_1(){cto_AI('https://r.casalemedia.com/rum?cm_dsp_id=20&external_user_id=k-7VCeOIyFtkn3YsMjnIeCD65HbrRkneS64pwgBg', cto_l);}function l_i5_1(){cto_AI('https://ad.360yield.com/match?publisher_dsp_id=38&external_user_id=k-QuvWHYyFtkn3YsMjnIeCD65HbrQro5re5fMHlQ', cto_l);}function l_i6_1(){cto_AI('https://contextual.media.net/cksync.php?cs=3&type=crt&ovsid=k-q_8BPoyFtkn3YsMjnIeCD65HbrRB3jTOStbWjA', cto_l);}function l_i7_1(){cto_AI('https://exchange.mediavine.com/usersync/push?partner=criteo&partnerId=k-4xB3coyFtkn3YsMjnIeCD65HbrRPpAuhIkpe0J7pmOrunUeZ', cto_l);}function l_i8_1(){cto_AI('https://sync.outbrain.com/cookie-sync?p=criteo&uid=k-gABkMYyFtkn3YsMjnIeCD65HbrSsB9n7d3hG6A', cto_l);}function l_i9_1(){cto_AI('https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&piggybackCookie=uid:k-KQgE-oyFtkn3YsMjnIeCD65HbrQOGMa2cb_3nA', cto_l);}function l_i10_1(){cto_AI('https://pixel.rubiconproject.com/tap.php?v=6434&nid=2149&put=k-dYZjm4yFtkn3YsMjnIeCD65HbrRHqNdYmdpT3w&expires=30', cto_l);}function l_i11_1(){cto_AI('https://match.sharethrough.com/sync/v1?source_id=7658cb1d77a660882b48db06&source_user_id=k-EVZEIYyFtkn3YsMjnIeCD65HbrSIJunPX5AIDA', cto_l);}function l_i12_1(){cto_AI('https://rtb-csync.smartadserver.com/redir/?partnerid=79&partneruserid=k-xm41gYyFtkn3YsMjnIeCD65HbrRzFdTWNWzdYA', cto_l);}function l_i13_1(){cto_AI('https://sync-t1.taboola.com/sg/criteortb-network/1/rtb-h/?taboola_hm=k-e2iB2YyFtkn3YsMjnIeCD65HbrSjS3Sx7-0CKA', cto_l);}function l_i14_1(){cto_AI('https://criteo-sync.teads.tv/um?eid=80&uid=k-uyIBfoyFtkn3YsMjnIeCD65HbrTgvx46JVrMCw', cto_l);}function l_i15_1(){cto_AI('https://eb2.3lift.com/xuid?mid=2711&xuid=k-ZLZYz4yFtkn3YsMjnIeCD65HbrR07frSo2IrYw&dongle=013b', cto_l);}function l_i16_1(){cto_AI('https://ups.analytics.yahoo.com/ups/58301/sync?_origin=1&uid=k-JYttDoyFtkn3YsMjnIeCD65HbrTfYyLfz6Bdsg', cto_l);}function l_i17_1(){cto_AI('https://cm.adform.net/pixel?adform_pid=15&adform_pc=k-e_IsoIyFtkn3YsMjnIeCD65HbrQfaaScE-rJjQ', cto_l);}function l_i18_1(){cto_AI('https://visitor.omnitagjs.com/visitor/sync?uid=732efe97317e6352de4c1caf24b5064b&name=CRITEO&visitor=k-c5cdR4yFtkn3YsMjnIeCD65HbrT7paL5-afDEw', cto_l);}function l_i19_1(){cto_AI('https://gum.criteo.com/sync?c=8&r=1&a=1&u=https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D28645%26dpuuid%3D%40USERID%40', l_i19_2);}function l_i19_2(){cto_AI('https://gum.criteo.com/sync?c=83&r=1&a=1&u=https%3A%2F%2Fbeacon.krxd.net%2Fusermatch.gif%3Fpartner%3Dcriteo%26partner_uid%3D%40USERID%40', l_i19_3);}function l_i19_3(){cto_AI('https://gum.criteo.com/sync?c=10&r=1&u=https%3A%2F%2Fs.thebrighttag.com%2Fcs%3Fbtt%3D0%26tp%3Dcr%26uid%3D%40USERID%40', cto_l);}function l_i20_1(){cto_AI('https://id5-sync.com/s/966/9.gif?puid=k-SkbJJoyFtkn3YsMjnIeCD65HbrSazTalAMa87A', cto_l);}function l_i21_1(){cto_AI('https://matching.ivitrack.com/sync?realm=criteo&uid=k-lalgdYyFtkn3YsMjnIeCD65HbrT9Ml8Za16eCw', cto_l);}function l_i22_1(){cto_AI('https://criteo-partners.tremorhub.com/sync?UICR=k-jmN3oYyFtkn3YsMjnIeCD65HbrTFa29eCNdd_Q', cto_l);}function l_i23_1(){cto_AI('https://ad.yieldlab.net/m?dt_id=8664&ext_id=k-A7noBYyFtkn3YsMjnIeCD65HbrRgK7btDsWSNA', cto_l);}function l_i24_1(){cto_AI('https://sync-criteo.ads.yieldmo.com/sync?id=k-NdaEToyFtkn3YsMjnIeCD65HbrRQUdlZvACffQ&pn_id=criteo&ext=1', cto_l);}cto_tot = 24;l_i1_1();l_i2_1();l_i3_1();l_i4_1();l_i5_1();l_i6_1();l_i7_1();l_i8_1();l_i9_1();l_i10_1();l_i11_1();l_i12_1();l_i13_1();l_i14_1();l_i15_1();l_i16_1();l_i17_1();l_i18_1();l_i19_1();l_i20_1();l_i21_1();l_i22_1();l_i23_1();l_i24_1();}</script></head><body><iframe id="
cto_sub_ifr_px " src="
javascript: false " style="
width: 1 px;
height: 1 px;
display: none;
"><div id='cto_pc' style='display:none'></div></iframe><script type="
text / javascript ">document.body.onload = function(){ if(window.cto_run) cto_run(); };window.setTimeout(function(){ if(typeof(cto_loaded)==='undefined' || cto_loaded<cto_tot) {edcTimeout();var redirectLocation=location.protocol+'//static.criteo.net/empty.html'; location.replace(redirectLocation);}}, 5000);</script></body></html>


HTTP Transactions (245)


Request Response
                                        
                                            GET /?irclickid=2Ts0EhwnYxyNRFW0Vm26Pw3CUkDQl1z5LTTqXQ0&ir_cid=3334&ir_affid=10813&utm_medium=affiliates&utm_source=MaxBounty.com%20ULC&ir_partnerid=10813&ir_adid=1215604&ir_campaignid=3334 HTTP/1.1 
Host: flaviar.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         172.66.40.91
HTTP/1.1 301 Moved Permanently
                                        
Date: Thu, 06 Oct 2022 20:19:24 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Thu, 06 Oct 2022 21:19:24 GMT
Location: https://flaviar.com/?irclickid=2Ts0EhwnYxyNRFW0Vm26Pw3CUkDQl1z5LTTqXQ0&ir_cid=3334&ir_affid=10813&utm_medium=affiliates&utm_source=MaxBounty.com%20ULC&ir_partnerid=10813&ir_adid=1215604&ir_campaignid=3334
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AJTC5zqPZkcTyukONolFbqvJd%2F9TjYqTYd0QHl75n0AekVSPxoneELdSto1RRU4JFs%2BXL%2BCIxlos%2FYde48dwySCUy98sppU%2FTecvDKUDNFmlFLmW1vhTgnu0Bv58"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7561177cc9491c0a-OSL
alt-svc: h2=":443"; ma=60

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         54.230.111.7
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Backoff, Content-Type, Retry-After, Alert
Cache-Control: max-age=259200
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Wed, 05 Oct 2022 15:47:18 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: twk0mUKVLUwk-mUM2AM6u8zCryR9VBUQs0EdwYRSU1CVBwugV9gWug==
Age: 102726


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    2d12f67fe57a87e7366b662d153a5582
Sha1:   d7b02d81cc74f24a251d9363e0f4b0a149264ec1
Sha256: 73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "6A8070EBE51259CB11DB68CCA2C81F3C7408FAD481D8C14CC1C38912442C63F4"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7710
Expires: Thu, 06 Oct 2022 22:27:54 GMT
Date: Thu, 06 Oct 2022 20:19:24 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "B91D37F606EAF448B9C7DFC05566A11DE004CE44503409E1A776288EE2622805"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15050
Expires: Fri, 07 Oct 2022 00:30:14 GMT
Date: Thu, 06 Oct 2022 20:19:24 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: E1QZH3YrWd0hr2fsFpczk68lHPioDrA1J3BkPbJhYtzga6gL/EYZ30YMAoC8/7afoB9sjz60UPQ=
x-amz-request-id: R3YEYHCVJE4V40MG
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 06 Oct 2022 19:58:52 GMT
age: 1232
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    67d5a988edcda47bc3b3b3f65d32b4b6
Sha1:   d4f0e0da8b3690cc7da925026d3414b68c7d954f
Sha256: 55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Cache-Control: 'max-age=158059'
Date: Thu, 06 Oct 2022 20:19:24 GMT
Server: ECS (amb/6B88)
Content-Length: 279

                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Thu, 06 Oct 2022 20:19:24 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         54.230.111.7
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Pragma, Content-Length, Backoff, Last-Modified, Cache-Control, Content-Type, Retry-After, ETag, Expires, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600, max-age=3600
Date: Thu, 06 Oct 2022 19:29:41 GMT
Expires: Thu, 06 Oct 2022 20:07:30 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: N8EI1NmP3bH37pPip9nPXF2DUkLQQ0TvEdJ7k91GeHgV8bMe_mtEFw==
Age: 2983


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 1
Cache-Control: 'max-age=158059'
Date: Thu, 06 Oct 2022 20:19:25 GMT
Last-Modified: Thu, 06 Oct 2022 20:19:24 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 279

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 6586
Cache-Control: 'max-age=158059'
Date: Thu, 06 Oct 2022 20:19:25 GMT
Last-Modified: Thu, 06 Oct 2022 18:29:39 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /bootstrap/v5/tp.widget.bootstrap.min.js HTTP/1.1 
Host: widget.trustpilot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://flaviar.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         54.230.111.50
HTTP/2 200 OK
content-type: application/x-javascript
                                        
content-length: 6124
date: Thu, 06 Oct 2022 05:16:11 GMT
last-modified: Mon, 30 May 2022 14:38:02 GMT
etag: "5add60196e5f96a414fb4b9586764e5d"
x-amz-server-side-encryption: AES256
cache-control: max-age=86400
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 1MMAZjio3zF7PQN0RgOSTrHj58uO4kQZ0BckV2cckX9mUpVbRFNPRQ==
age: 54195
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 (with BOM) text, with very long lines (19239)
Size:   6124
Md5:    5add60196e5f96a414fb4b9586764e5d
Sha1:   633f471b3c2fcedeef9cad90cb5bf56f5fe55588
Sha256: 5370f4ba91dda790c7cae92817b812fcbd1ab367cbb4862f5669960ae4e2c9e0
                                        
                                            GET /bne0epn.js HTTP/1.1 
Host: use.typekit.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://flaviar.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         23.36.76.122
HTTP/2 200 OK
content-type: text/javascript;charset=utf-8
                                        
server: nginx
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains;
cache-control: public, max-age=600, stale-while-revalidate=604800
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
content-encoding: gzip
content-length: 6730
date: Thu, 06 Oct 2022 20:19:25 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (2258)
Size:   6730
Md5:    56c323529b45591f153e4f5a72d75c0e
Sha1:   cfada07aa803d4651a773d0e4536e036bcfd134c
Sha256: 2953f691618da33aef7c7b909532b8a918bf95dc02c9d44816c526fd40bed81d
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         54.230.245.100
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 06 Oct 2022 20:19:25 GMT
Last-Modified: Thu, 06 Oct 2022 18:34:46 GMT
Server: ECS (bsa/EB16)
X-Cache: Miss from cloudfront
Via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: s1yCC6SfgsK2KTDgX0FFubDyHroIr3q72zQrZomdtrzRLKNkLCZ4og==
Age: 6279

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         54.230.245.100
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 06 Oct 2022 20:19:25 GMT
Last-Modified: Thu, 06 Oct 2022 19:31:14 GMT
Server: ECS (dcb/7FA6)
X-Cache: Miss from cloudfront
Via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: zJlbz-t8aRFCyiBEPE7j1T8QDrLX-NMa8wz0K3G_XLVuYjnQ3xe37g==
Age: 2891

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         54.230.245.100
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 06 Oct 2022 20:19:25 GMT
Last-Modified: Thu, 06 Oct 2022 18:50:02 GMT
Server: ECS (dcb/7EEB)
X-Cache: Miss from cloudfront
Via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: zfAwnKYmikfUKFzd8kpFPieK5yV2wn5wIjEffqkm-7ZZCZi6aXmU3w==
Age: 5363

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         54.230.245.100
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Thu, 06 Oct 2022 20:19:25 GMT
Server: ECS (dcb/7F5F)
X-Cache: Miss from cloudfront
Via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: IHPRcaZaLO6hsCJ9kHscPnuwR6JxHdY-Kbw0cLVS0lULwUuKmWdhsQ==

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 06 Oct 2022 20:19:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: GNbr8eTub3R55m/NdrNErA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         44.240.140.78
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 0rxCJk66dJZdoVw+6EY7uKKemhw=

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         54.230.245.100
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Thu, 06 Oct 2022 20:19:25 GMT
Server: ECS (dcb/7F80)
X-Cache: Miss from cloudfront
Via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: q1tu-ZQqG242zuIGUwCSVCSOkbc5MTScFw7n6nwbFKjSUluyvX1tBg==

                                        
                                            GET /gtm.js?id=GTM-K4F6SWQ HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://flaviar.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.168
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 06 Oct 2022 20:19:25 GMT
expires: Thu, 06 Oct 2022 20:19:25 GMT
cache-control: private, max-age=900
last-modified: Thu, 06 Oct 2022 18:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 103740
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (50758)
Size:   103740
Md5:    887b6fc5137075373e98cd2af759aa9b
Sha1:   b0ae34e6747d48c4b0afc6bed278d164bf95881b
Sha256: a3e249aee95606046ffb1c1361025340244c3fbc3ebb1cc97fb8eba27aec5a20
                                        
                                            GET /build/app-style.f96bbae3.css HTTP/1.1 
Host: cdn.flaviar.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://flaviar.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         54.230.111.75
HTTP/2 200 OK
content-type: text/css
                                        
date: Tue, 04 Oct 2022 07:08:21 GMT
last-modified: Tue, 04 Oct 2022 07:04:23 GMT
etag: W/"31c9f51b7857e3a3288e7f4b337c4be5-1"
cache-control: public, max-age=3888000, immutable
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: qL5DI865Gdeby6Gcn_vkqKlLlmfai8q1i9w2aTpkehjedkL28naNiA==
age: 220265
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   103522
Md5:    90982825891f75a7be38557437421002
Sha1:   4c24d92b9516edfaabd26b71f018399169b8aaa1
Sha256: dddbe0ff904f810b3143bbda9b79f194980d77b8712d6f5bf7b0535f49ebaa05
                                        
                                            GET /build/8e5402ccdf94b59b9f78de47cd6cb684.svg HTTP/1.1 
Host: cdn.flaviar.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.flaviar.com/build/menu-style.236e9452.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         54.230.111.75
HTTP/2 200 OK
content-type: image/svg+xml
                                        
content-length: 868
last-modified: Fri, 19 Aug 2022 09:26:01 GMT
accept-ranges: bytes
server: AmazonS3
date: Wed, 05 Oct 2022 09:17:12 GMT
cache-control: public, max-age=3888000, immutable
etag: "97ed703833547737ccd9a7d4031003f8-1"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Y1nv_RN6jlruzpg5BZdWhQkLUieQeBH4erhT9Paw-qJyuLO3bBIqmA==
age: 126135
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text
Size:   868
Md5:    81e28f374062b798546ef6218ec5febf
Sha1:   e6532814c6602cb01770126889d9a8b4e9f8f340
Sha256: 7f7c1337807c89a6cbbef83986a1e88ffe8e6fd0837b406cdd857cd2d3a9afd4
                                        
                                            GET /build/147089eb0e969519162228615087840c.svg HTTP/1.1 
Host: cdn.flaviar.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.flaviar.com/build/menu-style.236e9452.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         54.230.111.75
HTTP/2 200 OK
content-type: image/svg+xml
                                        
content-length: 167
date: Thu, 08 Sep 2022 01:12:14 GMT
last-modified: Wed, 07 Sep 2022 10:30:21 GMT
etag: "a8a8c9c926542ca0dcd8356d88824554-1"
cache-control: public, max-age=3888000, immutable
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: SB6QlbQrR88eqjXFl215Ua2XvrVrLVf0jKAEFhXe_F-frBYHEpEdLg==
age: 2488032
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text
Size:   167
Md5:    5e401daafb389738fc65f44508f1183a
Sha1:   6b8e3975b7e8b57812d9786dd181ae5c721a26ff
Sha256: 69484d982b36e8f772df946ef9cd4fb2a3c21a1ae9383a480b0e2f0957fa1542
                                        
                                            GET /build/app-main.7262d0fb.js HTTP/1.1 
Host: cdn.flaviar.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://flaviar.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

search
                                         54.230.111.75
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Thu, 06 Oct 2022 08:37:12 GMT
last-modified: Thu, 06 Oct 2022 08:36:12 GMT
etag: W/"177de009c007bc1f799c3449af1fcf82-1"
cache-control: public, max-age=3888000, immutable
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: gtpjQGsgE-PUdczSwjbIXgk2W1zF9YYImZq_CRNLoohKHgEWEUFrNA==
age: 42134
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   3753
Md5:    4c3d720634b238613fb804233d2dd346
Sha1:   6dcd11090dace062b057f3f77031225f4ba1788f
Sha256: c32c801fb6c666ab3339c66e67260ca207218aea1da29a59deacbe1bcab94ce7
                                        
                                            GET /build/d850192027f05dd934a52b0d863ad7f5.svg HTTP/1.1 
Host: cdn.flaviar.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.flaviar.com/build/menu-style.236e9452.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         54.230.111.75
HTTP/2 200 OK
content-type: image/svg+xml
                                        
content-length: 619
last-modified: Fri, 19 Aug 2022 09:26:07 GMT
accept-ranges: bytes
server: AmazonS3
date: Tue, 04 Oct 2022 08:30:23 GMT
cache-control: public, max-age=3888000, immutable
etag: "f064a0b829a658c19215470da43b61ea-1"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: hU4FwHg74PKOLrp6YrNT-DmxuDceg5xL3xuIbpJp_bL6HDvEHSNC3w==
age: 215344
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text
Size:   619
Md5:    28fa412f736ddd64527ccca25da9e476
Sha1:   fe6590f41f3d7b6ae4e097f11dfd902720dd5235
Sha256: 4badecfeda51547b816abbddf7507fb8028e2b94938f9b6537e717ac1278dc59
                                        
                                            GET /build/ee1bfc1004d7a262f4cab6b3a57236b2.svg HTTP/1.1 
Host: cdn.flaviar.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.flaviar.com/build/menu-style.236e9452.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         54.230.111.75
HTTP/2 200 OK
content-type: image/svg+xml
                                        
content-length: 403
date: Sat, 01 Oct 2022 07:22:07 GMT
last-modified: Fri, 30 Sep 2022 11:36:22 GMT
etag: "74e5fbff2bf990dcf3d9f3787c5b9a6e-1"
cache-control: public, max-age=3888000, immutable
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: _duHOm8ZY9t0gJ-nyjzTmAv1JZqvrfOeWyALLGq0X6ThhG9pfjSjVQ==
age: 478640
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text
Size:   403
Md5:    40cd3269593182aa24ee9208f99a7a29
Sha1:   24a1613b1214857f4f2608a0905a5bcbb92d909a
Sha256: b5593ea00b3b76f818402c2eea2a4fc751d3be852c304b49cd5f227249d7fafb
                                        
                                            GET /build/images/landingPage/frontpage/01_hero_desktop_membership.093b6202.jpg HTTP/1.1 
Host: cdn.flaviar.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://flaviar.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         54.230.111.75
HTTP/2 200 OK
content-type: image/jpeg
                                        
content-length: 117885
date: Sat, 10 Sep 2022 05:04:23 GMT
last-modified: Fri, 09 Sep 2022 13:05:14 GMT
etag: "0148f9a547222ba521760f429bfee563-1"
cache-control: public, max-age=31536000, immutable
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: c-lHDZflC2Y2UicgY3H7LVKdDFRu5nYSR4ep6XKDYOpwSXblwHr0fw==
age: 2301304
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1434x1094, components 3\012- data
Size:   117885
Md5:    8ae454b0cd1ff5eda6d54988f055366c
Sha1:   9b8d69bd97443055df393afe8385aa4787b24ef6
Sha256: 2411b89938db306b9e96167501c6e2349848ac0d30e6433e9f5d5868aa7631ee
                                        
                                            GET /build/4.2a092778.css HTTP/1.1 
Host: cdn.flaviar.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://flaviar.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         54.230.111.75
HTTP/2 200 OK
content-type: text/css
                                        
date: Thu, 08 Sep 2022 04:53:04 GMT
last-modified: Wed, 07 Sep 2022 10:30:22 GMT
etag: W/"f3b9d55198bcef67fac8f7bdc78c3c88-1"
cache-control: public, max-age=3888000, immutable
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Jb20ws9gH7oalcFNI-Cjz4fqtoikUh71GXlSoDClNrfValcg9cEFoQ==
age: 2474782
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   11130
Md5:    2644c8e2d56f40754d04b63bf416b5fa
Sha1:   1367e3818cfeac8a7fc146b7d7c0699d3213d469
Sha256: 0185489ef2c41aa04b37a73a78508b3229b858af428e53904ce98b5ba94bb23a
                                        
                                            GET /build/images/landingPage/frontpage/05_icon_wheel.ca85a479.svg HTTP/1.1 
Host: cdn.flaviar.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://flaviar.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         54.230.111.75
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Thu, 25 Aug 2022 13:06:27 GMT
last-modified: Wed, 24 Aug 2022 11:29:08 GMT
etag: W/"3c6683219e258ac228d9e3d2444fdce2-1"
cache-control: public, max-age=3888000, immutable
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Ly3K_LfF-Nw5boYr2hmCCE4Z3OV1nyz71qAPfd_0XfN7m3VxJEyI5w==
age: 3654779
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   2348
Md5:    ea1294055594fd0913c46d2b13e2a559
Sha1:   751ddaf53bd6a5c6652de322c82c04ce9abe2450
Sha256: 0f4b2aee00b4167837fa6f81492d1bdf1217a520bd36b44bc4065ec42455cd1e
                                        
                                            GET /build/ef92299a86f9f06db9c9cb6338f70445.svg HTTP/1.1 
Host: cdn.flaviar.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.flaviar.com/build/landing-frontpage.2932a276.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         54.230.111.75
HTTP/2 200 OK
content-type: image/svg+xml
                                        
content-length: 517
date: Thu, 08 Sep 2022 03:47:58 GMT
last-modified: Wed, 07 Sep 2022 10:30:28 GMT
etag: "18056129aed2639bd3faacbf444bdc8a-1"
cache-control: public, max-age=3888000, immutable
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: f9Sl_ztROLU0QAP6LI3SmYorFIRjgwjaaeTFtR9F0LbgRLk_s4TqBA==
age: 2478689
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (413)
Size:   517
Md5:    39c7100bc113cfadf92ffd571834e547
Sha1:   e3964948a9d71014ad9aa5b78ee1106315691ac4
Sha256: 222bf3fda43bcb74628055cd4224a6cff48edd5524a9326ec93d70c1cd58b94c
                                        
                                            GET /build/fonts/MalagaOT-Reg.27ac096b.otf HTTP/1.1 
Host: cdn.flaviar.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://flaviar.com
Connection: keep-alive
Referer: https://cdn.flaviar.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         54.230.111.75
HTTP/2 200 OK
content-type: font/otf
                                        
date: Sat, 27 Aug 2022 02:15:02 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 7776000
last-modified: Fri, 26 Aug 2022 14:00:56 GMT
etag: W/"137d230a777448619cc48431b268aa92-1"
cache-control: public, max-age=3888000, immutable
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding,Origin,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: C07yRw1ySf0ljyebZyvJ5GCzVZk7RFX19gMBuI6lhCd6Wcfn-oxiAg==
age: 3521065
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   75173
Md5:    9b661c8541bee6382772dbc381f8554d
Sha1:   d5d523b629e462328c5ba9ff5de4d76292af4156
Sha256: 780f3d838223b7a584a57932f73e9fe182fbd4e754660729653e7810c4c43231
                                        
                                            GET /af/85d455/00000000000000003b9adc6a/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n7&v=3 HTTP/1.1 
Host: use.typekit.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://flaviar.com
Connection: keep-alive
Referer: https://flaviar.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         23.36.76.122
HTTP/2 200 OK
content-type: application/font-woff2
                                        
server: nginx
content-length: 30656
etag: "374d4e049d59d33f7c1b988631b115ad96597d60"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Thu, 06 Oct 2022 20:19:26 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), CFF, length 30656, version 1.0\012- data
Size:   30656
Md5:    09848390b847375a8dbf4a3808750013
Sha1:   d8b5db5923705fba6073a52d2145d086c5030527
Sha256: ead661c1cd323f4f9a023be4cea810a9bcbc3498871593a256fc9221a52f1417
                                        
                                            GET /af/379cfa/00000000000000003b9adc6d/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n4&v=3 HTTP/1.1 
Host: use.typekit.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://flaviar.com
Connection: keep-alive
Referer: https://flaviar.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         23.36.76.122
HTTP/2 200 OK
content-type: application/font-woff2
                                        
server: nginx
content-length: 11668
etag: "a53237c24cbd279f0405e007f31ec7f47234819b"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Thu, 06 Oct 2022 20:19:26 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), CFF, length 11668, version 1.0\012- data
Size:   11668
Md5:    71eca0957e4d35fc26852895f49491f8
Sha1:   d9ba92c55ef2a7370857143922344880bac2bf6e
Sha256: 4e2db239b50398011c1fb49a5ea7e296a9babab1a7b4968d1974d417f1ab805b
                                        
                                            GET /build/landing-frontpage.2932a276.css HTTP/1.1 
Host: cdn.flaviar.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://flaviar.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         54.230.111.75
HTTP/2 200 OK
content-type: text/css
                                        
date: Mon, 05 Sep 2022 03:59:53 GMT
last-modified: Fri, 02 Sep 2022 14:13:24 GMT
etag: W/"d896832036da46556de471f5dfa215e0-1"
cache-control: public, max-age=3888000, immutable
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ZmpgFnCnIJAFlSU4_EKsoR3e2mtZSJDjK_D7jQgJkB3rC86C1itehg==
age: 2737173
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   23044
Md5:    80cabe22c9feea35cd8b96ef07ac543f
Sha1:   1fa3d25ca305fa4dac85c7570862da2f5822762a
Sha256: ee8f60e6daf6b9057f6884af28a3673321d2424389a013d36642a229b69e4c15
                                        
                                            GET /trustboxes/5419b6ffb0d04a076446a9af/index.html?templateId=5419b6ffb0d04a076446a9af&businessunitId=5c63d6134064df0001fff3b7 HTTP/1.1 
Host: widget.trustpilot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://flaviar.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         54.230.111.50
HTTP/2 200 OK
content-type: text/html
                                        
content-length: 2144
date: Thu, 06 Oct 2022 06:49:16 GMT
last-modified: Tue, 04 Oct 2022 10:34:09 GMT
etag: "1307e3fd5846bacc989c2fd05996f010"
x-amz-server-side-encryption: AES256
cache-control: max-age=86400
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 4ancPFamlXnniIvxDDRxthk3AwMPvlIRhlQIQhD4l12ngWHuylnxLQ==
age: 48611
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (6826)
Size:   2144
Md5:    1307e3fd5846bacc989c2fd05996f010
Sha1:   3fd96ecea8c4a91980939fe1e1efe9ec0f47eebc
Sha256: 39f14c526d9f43a24b5c1e219e7ee63500f90b39517d18085573dcf73eb33d87
                                        
                                            GET /trustboxes/5419b6ffb0d04a076446a9af/index.html?templateId=5419b6ffb0d04a076446a9af&businessunitId=5c63d6134064df0001fff3b7 HTTP/1.1 
Host: widget.trustpilot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://flaviar.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         54.230.111.50
HTTP/2 200 OK
content-type: text/html
                                        
content-length: 2144
date: Thu, 06 Oct 2022 06:49:16 GMT
last-modified: Tue, 04 Oct 2022 10:34:09 GMT
etag: "1307e3fd5846bacc989c2fd05996f010"
x-amz-server-side-encryption: AES256
cache-control: max-age=86400
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: yOrUZ2dtEe4GDob_oUQt6yKgv-cZ8gQzpxnDEn_A7jTYL74liYjTvw==
age: 48611
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (6826)
Size:   2144
Md5:    1307e3fd5846bacc989c2fd05996f010
Sha1:   3fd96ecea8c4a91980939fe1e1efe9ec0f47eebc
Sha256: 39f14c526d9f43a24b5c1e219e7ee63500f90b39517d18085573dcf73eb33d87
                                        
                                            GET /trustboxes/5419b6ffb0d04a076446a9af/main.js HTTP/1.1 
Host: widget.trustpilot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://widget.trustpilot.com/trustboxes/5419b6ffb0d04a076446a9af/index.html?templateId=5419b6ffb0d04a076446a9af&businessunitId=5c63d6134064df0001fff3b7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         54.230.111.50
HTTP/2 200 OK
content-type: application/x-javascript
                                        
content-length: 17072
last-modified: Tue, 04 Oct 2022 10:34:10 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
date: Thu, 06 Oct 2022 10:36:21 GMT
cache-control: max-age=86400
etag: "93d7d7afc794dd57add6ab0e6cb1e7a5"
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Qf4FyDcCLffg-KgyKtYXE9BCPgvkfL7DCpiEozIt5gy1nQU979TQQw==
age: 34985
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 (with BOM) text, with very long lines (55452)
Size:   17072
Md5:    93d7d7afc794dd57add6ab0e6cb1e7a5
Sha1:   f3192d2eb299e4111ac69821274555c54d34dd5e
Sha256: 07125f97b71d0a4b48f6ff11db9e9cbaa6ee1bd510ee795cb05353a3cd087f84
                                        
                                            POST / HTTP/1.1 
Host: e1.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 346
ETag: "E00993AB549E3741F67AEE6037E2A612059D457380BAFBF32B9EEE9C1A859986"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18654
Expires: Fri, 07 Oct 2022 01:30:20 GMT
Date: Thu, 06 Oct 2022 20:19:26 GMT
Connection: keep-alive

                                        
                                            GET /uc.js?cbid=d053bff0-f51a-4434-ab3e-b7ec8831e3ed HTTP/1.1 
Host: consent.cookiebot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://flaviar.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         104.84.152.233
HTTP/2 200 OK
content-type: application/javascript
                                        
content-encoding: gzip
last-modified: Tue, 04 Oct 2022 09:02:48 GMT
accept-ranges: bytes
etag: "0ac913d0d7d81:0"
vary: Accept-Encoding
request-context: appId=cid-v1:89f47f4b-bed0-4db8-956b-d6e6dfac3fef
access-control-expose-headers: Request-Context
content-length: 31718
cache-control: public, max-age=1003
expires: Thu, 06 Oct 2022 20:36:09 GMT
date: Thu, 06 Oct 2022 20:19:26 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (65499)
Size:   31718
Md5:    3c4e162c3321e924fd3d27dc6d095f08
Sha1:   9d2027cab49aaf66a89a521c16133ba818ff3d9d
Sha256: 425713b3dc09882376e466e3e6798ade37f8262d82138cf0e11ecbe92e2d565b
                                        
                                            GET /optimize.js?id=GTM-NLP39W9 HTTP/1.1 
Host: www.googleoptimize.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://flaviar.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.46
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 06 Oct 2022 20:19:26 GMT
expires: Thu, 06 Oct 2022 20:19:26 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 44034
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2039)
Size:   44034
Md5:    77d5c2e0093969776bbadb93fdcf989a
Sha1:   478afbbe8df585737548d85662ecae488f812311
Sha256: 4d77397f93c49e68ef79601c2d314fbceb9b25b33b127d2ac29ac12cd5ccc2d4
                                        
                                            GET /sdk/bc-v4.min.html HTTP/1.1 
Host: consentcdn.cookiebot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://flaviar.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         104.110.3.72
HTTP/2 200 OK
content-type: text/html
                                        
accept-ranges: bytes
etag: "3d08665fa4c7bcf9fa2dcbbc7efe1d0f:1649057029.895163"
last-modified: Mon, 04 Apr 2022 07:23:49 GMT
server: AkamaiNetStorage
x-akamai-transformed: 9 - 0 pmb=mRUM,1
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=31175407
expires: Mon, 02 Oct 2023 16:09:33 GMT
date: Thu, 06 Oct 2022 20:19:26 GMT
content-length: 392
server-timing: cdn-cache; desc=HIT, edge; dur=1
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (627), with no line terminators
Size:   392
Md5:    e7268eccad39bd651697fa793a52cc5c
Sha1:   47299cefa2397b0c1d0c5bf232390a5cf1bcc4d3
Sha256: 907e16c84d35556e4ed841a3511915e6d4bb4e9d68cfca178a740e90b4d80e35
                                        
                                            GET /d053bff0-f51a-4434-ab3e-b7ec8831e3ed/cc.js?renew=false&referer=flaviar.com&dnt=false&init=false&georegions=%5B%7B%22r%22%3A%22US-06%22%2C%22i%22%3A%226b04ee58-2401-4074-bb6b-0969a4c527d9%22%7D%5D HTTP/1.1 
Host: consent.cookiebot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://flaviar.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         104.84.152.233
HTTP/2 200 OK
content-type: application/x-javascript; charset=utf-8
                                        
cache-control: private, max-age=1200
content-encoding: gzip
last-modified: Thu, 06 Oct 2022 20:19:26 GMT
vary: Accept-Encoding
request-context: appId=cid-v1:89f47f4b-bed0-4db8-956b-d6e6dfac3fef
access-control-expose-headers: Request-Context
content-length: 156
date: Thu, 06 Oct 2022 20:19:26 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   156
Md5:    3477de123b1bcca0a96d557218c3c72c
Sha1:   279660604c7c2e9d5be154df57180849efca1e34
Sha256: 9331664c1938651f09a14fb45d0af5fd86a72c2d9aff0bc26193e239ddb38268
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         104.18.32.68
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 06 Oct 2022 20:19:26 GMT
Content-Length: 472
Connection: keep-alive
Last-Modified: Thu, 06 Oct 2022 14:06:52 GMT
Expires: Thu, 13 Oct 2022 14:06:51 GMT
Etag: "74265e37a2270fdbc588430f01421e46c31d8e44"
Cache-Control: max-age=581844,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7561178acaf01c0a-OSL

                                        
                                            GET /06e2e4b6-5e17-4dbf-9574-c462c3d742d7/segmentify.js HTTP/1.1 
Host: cdn.segmentify.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://flaviar.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.120.65.227
HTTP/2 200 OK
content-type: application/javascript
                                        
x-guploader-uploadid: ADPycdvLIjVXrgN6SI2J4_NqHuXLL6BFNCeGzZgDdW-swVsQ7JjiT1w0VJTWMqzXan9RzS5cd5NoBLA3e9zkDyzYYzis
x-goog-generation: 1664980718441886
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 50341
content-encoding: gzip
x-goog-hash: crc32c=lAAGVw==, md5=4R7FtJLC+xxq5ORkYp02Jg==
x-goog-storage-class: STANDARD
accept-ranges: bytes
vary: Accept-Encoding
content-length: 50341
access-control-allow-origin: *
access-control-expose-headers: Origin, Accept, Content-Type, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token
server: UploadServer
date: Wed, 05 Oct 2022 14:45:07 GMT
expires: Wed, 12 Oct 2022 14:45:07 GMT
cache-control: public, max-age=604800
last-modified: Wed, 05 Oct 2022 14:38:38 GMT
etag: "e11ec5b492c2fb1c6ae4e464629d3626"
age: 106459
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (56611)
Size:   50341
Md5:    e11ec5b492c2fb1c6ae4e464629d3626
Sha1:   4d7790d263fc3bdb89b4ac8f0d22d657f6016131
Sha256: 457cfea95867ff6f0fd7915f55a468691454a9c9f33ddfab9ff5acf8eb504003
                                        
                                            GET /build/images/favicon/favicon-16x16.d0ef64b5.png HTTP/1.1 
Host: cdn.flaviar.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://flaviar.com/
Cookie: _ga_94QYBVSJNV=GS1.1.1665087566.1.0.1665087566.60.0.0; _ga=GA1.1.2009995165.1665087567
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         54.230.111.75
HTTP/2 200 OK
content-type: image/png
                                        
content-length: 366
date: Thu, 01 Sep 2022 16:53:00 GMT
last-modified: Thu, 01 Sep 2022 14:40:25 GMT
etag: "334446e663de0654661de79703a6f44b-1"
cache-control: public, max-age=31536000, immutable
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: qSzjb-maF03-ZOn95nDUdm4dMDGXWZG7WJ6eDFFcsBpr-cDVuWjErw==
age: 3036386
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Size:   366
Md5:    4c06c8e440650c300d3b62fa3e070fd4
Sha1:   4cf5e23e149202acf229889ad06d286f01374837
Sha256: 277ec8ba10f75611524e035b6e02aed13b21ed7206ebdcaaac236de61246d410
                                        
                                            GET /build/images/favicon/favicon.d0a8bcf7.ico HTTP/1.1 
Host: cdn.flaviar.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://flaviar.com/
Cookie: _ga_94QYBVSJNV=GS1.1.1665087566.1.0.1665087566.60.0.0; _ga=GA1.1.2009995165.1665087567
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         54.230.111.75
HTTP/2 200 OK
content-type: application/octet-stream
                                        
content-length: 15086
date: Thu, 25 Aug 2022 06:11:08 GMT
last-modified: Wed, 24 Aug 2022 11:29:07 GMT
etag: "af288e94a0b9429c904d0eba8f8c6608-1"
accept-ranges: bytes
server: AmazonS3
cache-control: public, max-age=31536000, immutable
x-cache: Hit from cloudfront
via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: hVi2UhbjzDh0ALq3-7ZGtQOojLlnlZhpgaTsJLAe-xu_5mPMogfTEg==
age: 3679699
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel\012- data
Size:   15086
Md5:    77f3027ab846a13cd38111aeb570f027
Sha1:   aef83b0321260c21e42fa61b722d7bd10ce2a68d
Sha256: 6ff382ef95ad55469265af244e5a0c8544b7e3481de4c2ff0a96b1362dc43b04
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "B0C59E715D8C38C061CFA06EC64C69F442F9417D6BC9C76E393C1FA00B11AF86"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11568
Expires: Thu, 06 Oct 2022 23:32:14 GMT
Date: Thu, 06 Oct 2022 20:19:26 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "B0C59E715D8C38C061CFA06EC64C69F442F9417D6BC9C76E393C1FA00B11AF86"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11568
Expires: Thu, 06 Oct 2022 23:32:14 GMT
Date: Thu, 06 Oct 2022 20:19:26 GMT
Connection: keep-alive

                                        
                                            GET /06cc9139-6a61-41fc-88db-9ec21e04eecf/campaigns.js HTTP/1.1 
Host: campaign.fbot.me
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://flaviar.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         54.230.111.120
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Tue, 04 Oct 2022 15:38:01 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: 0iWavKBcklx08Aok0xiJOZp_tK.PsHKa
server: AmazonS3
content-encoding: gzip
date: Thu, 06 Oct 2022 20:19:27 GMT
cache-control: max-age=30
etag: W/"d0b7ccee3cc4cfbac5a76a5b938bc857"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: c8sYKyKNMEeJFsLC9vw5gGTD_u7g-k4loUDOctlQQz1diOAeMA87mg==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   34364
Md5:    46d145e11c1430f27746734b4610bc18
Sha1:   62882815360d5ea928fc2f79bfb4b7c943e563f0
Sha256: f2d041153b4190767521b58ea3e6882451a50c316effaf7956cfa880b669c548
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "B0C59E715D8C38C061CFA06EC64C69F442F9417D6BC9C76E393C1FA00B11AF86"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11568
Expires: Thu, 06 Oct 2022 23:32:14 GMT
Date: Thu, 06 Oct 2022 20:19:26 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "B0C59E715D8C38C061CFA06EC64C69F442F9417D6BC9C76E393C1FA00B11AF86"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11568
Expires: Thu, 06 Oct 2022 23:32:14 GMT
Date: Thu, 06 Oct 2022 20:19:26 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2ecef3b6-b278-4a22-86dd-6a19875e1cc1.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7511
x-amzn-requestid: 995b51dd-5484-4b4c-ad40-550f7fd85930
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZjO6uG70IAMFjBw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633df844-70f17f6f24dce0003d03902a;Sampled=0
x-amzn-remapped-date: Wed, 05 Oct 2022 21:33:56 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: BddSUzh-PKiFmfw2p9gPW-B0qtrXWxCXfee29Pk-wLqN7RO21Yic6g==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 f7283f3fe2c258cf54f8b7d3dd272e0e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 05 Oct 2022 21:37:06 GMT
age: 81740
etag: "69ad212cb7ae309d4f02019552887135bfae67da"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7511
Md5:    9e520f87cae411cfc2ed1c8a14184385
Sha1:   69ad212cb7ae309d4f02019552887135bfae67da
Sha256: 723b10bfbcde201b5811e3bd0560f02f90775e4d18b28d19e6c814899f2da71a
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fccecc8c9-b6da-4470-b2be-fa8d46df1cc2.webp HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9044
x-amzn-requestid: 127bce04-9f75-4bb1-bbe7-33bf1694d96c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZdZPmHG5oAMFehw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633ba263-3896085b3b73ff5403237206;Sampled=0
x-amzn-remapped-date: Tue, 04 Oct 2022 03:02:59 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: E4yZTPRLFdK717YfwjOIFOJDi0wYpyA736dQELeM5iPLvGDXBosEWg==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Thu, 06 Oct 2022 05:04:17 GMT
age: 54909
etag: "ae2c476667f63c7f642f0d9f4d0bc0d846b0ef57"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9044
Md5:    70ea26af79226e9ff06d6198e2c019dc
Sha1:   ae2c476667f63c7f642f0d9f4d0bc0d846b0ef57
Sha256: f9393e7b8cbaedc8e1ef87fd89c617cf102f58813d84d866ff68e3124f94d44c
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5ce3d070-3bf1-47cd-bdd7-2bda7b826976.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 4140
x-amzn-requestid: f3cb33c4-26b6-4fd8-9293-dfb42be34600
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZjOZiEZ4IAMFvLg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633df770-424459547db8b3d721d75e54;Sampled=0
x-amzn-remapped-date: Wed, 05 Oct 2022 21:30:24 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: q70sezhl0h-lASzUDh5_WQ6KraRa3fWYl_tO0iuE0CpbJ5GeiihgMw==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 95785220a566cd050f3ad80928463374.cloudfront.net (CloudFront), 1.1 google
date: Wed, 05 Oct 2022 21:37:06 GMT
etag: "26694f34166345ee5693653e0101db6b910e68ba"
age: 81740
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4140
Md5:    dbba56f647bf5989ca51863632bbebfc
Sha1:   26694f34166345ee5693653e0101db6b910e68ba
Sha256: ec5cc38f2a77e8e655aeeb7a376cf882ccb7163e4ef9d1ce4633ab4754e48765
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb3178d2f-9a52-4d0e-a26b-5a90ef8578f2.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 3430
x-amzn-requestid: 9b3b52d6-08b4-4893-962b-3dfe67e2f11d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZjTijF0vIAMFq3Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633dffa9-0a128734418b6c4d6375e2ac;Sampled=0
x-amzn-remapped-date: Wed, 05 Oct 2022 22:05:29 GMT
x-amz-cf-pop: SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: G0mKHnEonkmY4EDpNGAbg_DF37oxElJt58Lv6IJ4ro-hiG61wEAqVQ==
via: 1.1 9b311162717b41c968f6f00426d88aaa.cloudfront.net (CloudFront), 1.1 95785220a566cd050f3ad80928463374.cloudfront.net (CloudFront), 1.1 google
date: Thu, 06 Oct 2022 09:57:45 GMT
age: 37301
etag: "42dd7ec0c606dbd3ccc0074f61d3b4b12f2e3c88"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   3430
Md5:    488ec5b4267ccb1cdc4e6e08556f7f3b
Sha1:   42dd7ec0c606dbd3ccc0074f61d3b4b12f2e3c88
Sha256: d9b05fe92962a58b9a8e8dbd4757969aa361be12018107ae649ffcdb8a0f8d84
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7fac259b-7a22-4aa2-ba3f-682cb749091c.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 11080
x-amzn-requestid: 8fa4d19d-87a5-46c5-96c5-4aec793daad9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZjO7xE5eoAMFQLw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633df84b-5c422c7a168c014f57559037;Sampled=0
x-amzn-remapped-date: Wed, 05 Oct 2022 21:34:03 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: LySueW1si-yWLwecUILV1s57IEV2FdcQ9_pH1Aoe4AYISi7QXXfd3A==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 34c44cb7892e57a3b6c51812bcf68ee4.cloudfront.net (CloudFront), 1.1 google
date: Wed, 05 Oct 2022 21:39:28 GMT
age: 81598
etag: "531d9e4ec9078cd2d7376a19fcb287084af36c82"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   11080
Md5:    2277f8f2d93b4bc3b05d348343177892
Sha1:   531d9e4ec9078cd2d7376a19fcb287084af36c82
Sha256: 62907648de4a2ed390232a71ab7dce49f1e9c3363cde6a2f30ecae10ab67f93a
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd38ec9d6-fb69-4c6e-aae2-136fd254ae50.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7270
x-amzn-requestid: e5d0bb7a-b9d5-49b1-b51c-8db019da641f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZjQOGEQloAMFjgw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633dfa5a-519d91fb0b83920960da479d;Sampled=0
x-amzn-remapped-date: Wed, 05 Oct 2022 21:42:50 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: l1HGT5ycH36vVojsOPFptRSU1YJFvLbBsgiWJqzRlRIGgm2o5vf6jg==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 34c44cb7892e57a3b6c51812bcf68ee4.cloudfront.net (CloudFront), 1.1 google
date: Wed, 05 Oct 2022 21:58:56 GMT
etag: "447cbf348ef10d0136a1811e843c46937defbba1"
age: 80430
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7270
Md5:    e238ccaa3b9fa88476a8514855e8232f
Sha1:   447cbf348ef10d0136a1811e843c46937defbba1
Sha256: 43dce3c1eb388dfaddca4176acb6eb32f76fc4c03fca18e7a315c9ddb43d2b02
                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://flaviar.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.174
HTTP/2 200 OK
content-type: text/javascript
                                        
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Thu, 06 Oct 2022 18:41:09 GMT
expires: Thu, 06 Oct 2022 20:41:09 GMT
cache-control: public, max-age=7200
age: 5897
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1325)
Size:   20039
Md5:    47e6f374ca946fddd5b59871b325736c
Sha1:   baa9282efc8785e84d247c3bff518eaa45f101c4
Sha256: 16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5312
Cache-Control: 'max-age=158059'
Date: Thu, 06 Oct 2022 20:19:26 GMT
Last-Modified: Thu, 06 Oct 2022 18:50:54 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 06 Oct 2022 20:19:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-94QYBVSJNV&cid=2009995165.1665087567&gtm=2oea50&aip=1&z=1907145201 HTTP/1.1 
Host: www.google.no
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://flaviar.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.3
HTTP/2 200 OK
content-type: image/gif
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 06 Oct 2022 20:19:26 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /assets/locale/en.json HTTP/1.1 
Host: aacdn.nagich.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaviar.com/
Origin: https://flaviar.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         104.26.15.45
HTTP/2 200 OK
content-type: application/json
                                        
date: Thu, 06 Oct 2022 20:19:26 GMT
cache-control: public, max-age=2204800
last-modified: Tue, 15 Jun 2021 15:40:09 GMT
etag: W/"f45920b9fc61d71:0"
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-credentials: true
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-frame-options: deny
strict-transport-security: max-age=31536000
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=J2II5L%2BUyKJRnclJQs9fWoZMQI0aoomcH7Yo221NUSJnBOd6JVKvXRyQi3Klq6Cs174pKi4Txjb6MMgNcLqPWCn8ga4yY9ehH33fYfJH4AUQW%2FdxQ19cX5KqPu2Rigm%2FwAc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7561178bc8fc0b06-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with CRLF line terminators
Size:   27210
Md5:    a5790a065346d467eedf3212a8a56930
Sha1:   58f142a5d1053bb679a352866ba12fe7c3c35619
Sha256: bedbe7885ad10d90763e86974108ca6b50248a26600bed6dbf508805ea62cece
                                        
                                            GET /build/images/landingPage/frontpage/04_image_favorite_dram.1ae9ed19.jpg HTTP/1.1 
Host: cdn.flaviar.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://flaviar.com/
Cookie: _ga_94QYBVSJNV=GS1.1.1665087566.1.0.1665087566.60.0.0; _ga=GA1.2.2009995165.1665087567; _gid=GA1.2.1328691908.1665087567
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         54.230.111.75
HTTP/2 200 OK
content-type: image/jpeg
                                        
content-length: 83683
date: Fri, 26 Aug 2022 06:26:03 GMT
last-modified: Wed, 24 Aug 2022 11:29:10 GMT
etag: "4ed4ad1d3056db3e43645bacd890073f-1"
cache-control: public, max-age=31536000, immutable
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: f_n6h2x36lDF-ojidk1gdRw2SEQgoWzyFc4L9HyWJPKQGlRfJbwrQg==
age: 3592404
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1268x898, components 3\012- data
Size:   83683
Md5:    9cddc511d9100cd3f67bffcfd5793b27
Sha1:   89836103be33b228999a13d01fdbd20db165dc99
Sha256: 0ef2bb53d0cffd55ad4c341bdb76f3f89c5b0de86719fbad396b1dde0c08c7f4
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5312
Cache-Control: 'max-age=158059'
Date: Thu, 06 Oct 2022 20:19:26 GMT
Last-Modified: Thu, 06 Oct 2022 18:50:54 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 06 Oct 2022 20:19:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /trustbox-data/5419b6ffb0d04a076446a9af?businessUnitId=5c63d6134064df0001fff3b7&locale=en-US HTTP/1.1 
Host: widget.trustpilot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Connection: keep-alive
Referer: https://widget.trustpilot.com/trustboxes/5419b6ffb0d04a076446a9af/index.html?templateId=5419b6ffb0d04a076446a9af&businessunitId=5c63d6134064df0001fff3b7
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         54.230.111.50
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
content-length: 482
content-encoding: gzip
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-fallback-status: BYPASS
x-skip-cache-cookie: 0
x-xss-protection: 1; mode=block
date: Thu, 06 Oct 2022 20:19:27 GMT
cache-control: public,max-age=1800
etag: "aef1fce8ed398a3b3bba77875b4ca9ab"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: pDaZR7IJXZEAB1Wh3jqkQXNmIlvCbb7ZYoIeTaLLhcosjO3vMHb6dA==
age: 1287
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (1051), with no line terminators
Size:   482
Md5:    6674af3e706f3fa70d04b2d8f96e6f50
Sha1:   ef963ac01d18e3f89fbb833768df1fb821e5d37c
Sha256: 0a1128bb0429c4374bfc2a7c0e0b8a47af06d0921a464e67ba482e2d319c19b0
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         104.18.32.68
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 06 Oct 2022 20:19:27 GMT
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 03 Oct 2022 20:28:58 GMT
Expires: Mon, 10 Oct 2022 20:28:57 GMT
Etag: "9c415fa9b740d016f5ae423b058a820630cb4cba"
Cache-Control: max-age=345569,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7561178d4e061c0a-OSL

                                        
                                            GET /pa.js HTTP/1.1 
Host: cdn.sgmntfy.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://flaviar.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.149.223.191
HTTP/2 200 OK
content-type: application/javascript
                                        
x-guploader-uploadid: ADPycdsQ-I23tOtWjrkY8HsQAHJtSNBeIky52lB-De1Ov0ArMqy-sXDXkxj5f2berEY8N7kS8vkG-95iB4cM_vPHp-xfbA
x-goog-generation: 1654598345914433
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 3744
content-language: en
x-goog-hash: crc32c=EasKAQ==, md5=cyc4G7pvJJ/kcNF8DcostA==
x-goog-storage-class: STANDARD
accept-ranges: bytes
content-length: 3744
server: UploadServer
date: Thu, 06 Oct 2022 19:30:45 GMT
expires: Thu, 06 Oct 2022 20:30:45 GMT
cache-control: public, max-age=3600
age: 2922
last-modified: Tue, 07 Jun 2022 10:39:06 GMT
etag: "7327381bba6f249fe470d17c0dca2cb4"
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (3744), with no line terminators
Size:   3744
Md5:    7327381bba6f249fe470d17c0dca2cb4
Sha1:   b6fac12855c66c4841a38d07934fc22302e881ef
Sha256: 393195c622ffdab45d8f71e6988cdcc65ef85102061defa603882dc9f80d11ec

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /stats/TrustboxImpression?locale=en-US&styleHeight=28px&styleWidth=100%25&theme=light&url=https%3A%2F%2Fflaviar.com%2F%3Firclickid%3D2Ts0EhwnYxyNRFW0Vm26Pw3CUkDQl1z5LTTqXQ0%26ir_cid%3D3334%26ir_affid%3D10813%26utm_medium%3Daffiliates%26utm_source%3DMaxBounty.com%2520ULC%26ir_partnerid%3D10813%26ir_adid%3D1215604%26ir_campaignid%3D3334&referrer=&userAgent=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&language=en-US&platform=Linux%20x86_64&nosettings=1&businessUnitId=5c63d6134064df0001fff3b7&widgetId=5419b6ffb0d04a076446a9af HTTP/1.1 
Host: widget.trustpilot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Connection: keep-alive
Referer: https://widget.trustpilot.com/trustboxes/5419b6ffb0d04a076446a9af/index.html?templateId=5419b6ffb0d04a076446a9af&businessunitId=5c63d6134064df0001fff3b7
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         54.230.111.50
HTTP/2 204 No Content
                                        
cache-control: no-store,no-cache
date: Thu, 06 Oct 2022 20:19:26 GMT
pragma: no-cache
server: Kestrel
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: YOHjIOumaraNKKU3U_PlFz7SGL5oA3w8c3QtHuaXQStfERq35W8vWQ==
X-Firefox-Spdy: h2

                                        
                                            GET /stats/TrustboxImpression?locale=en-US&styleHeight=42px&styleWidth=100%25&theme=light&url=https%3A%2F%2Fflaviar.com%2F%3Firclickid%3D2Ts0EhwnYxyNRFW0Vm26Pw3CUkDQl1z5LTTqXQ0%26ir_cid%3D3334%26ir_affid%3D10813%26utm_medium%3Daffiliates%26utm_source%3DMaxBounty.com%2520ULC%26ir_partnerid%3D10813%26ir_adid%3D1215604%26ir_campaignid%3D3334&referrer=&userAgent=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&language=en-US&platform=Linux%20x86_64&nosettings=1&businessUnitId=5c63d6134064df0001fff3b7&widgetId=5419b6ffb0d04a076446a9af HTTP/1.1 
Host: widget.trustpilot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Connection: keep-alive
Referer: https://widget.trustpilot.com/trustboxes/5419b6ffb0d04a076446a9af/index.html?templateId=5419b6ffb0d04a076446a9af&businessunitId=5c63d6134064df0001fff3b7
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         54.230.111.50
HTTP/2 204 No Content
                                        
cache-control: no-store,no-cache
date: Thu, 06 Oct 2022 20:19:27 GMT
pragma: no-cache
server: Kestrel
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: MvtoxegSqkHc-yvRjclcLnhquF7mFDWzfVLKarWJ9S14_5EXSDGhUw==
X-Firefox-Spdy: h2

                                        
                                            GET /stats/TrustboxView?locale=en-US&styleHeight=42px&styleWidth=100%25&theme=light&url=https%3A%2F%2Fflaviar.com%2F%3Firclickid%3D2Ts0EhwnYxyNRFW0Vm26Pw3CUkDQl1z5LTTqXQ0%26ir_cid%3D3334%26ir_affid%3D10813%26utm_medium%3Daffiliates%26utm_source%3DMaxBounty.com%2520ULC%26ir_partnerid%3D10813%26ir_adid%3D1215604%26ir_campaignid%3D3334&referrer=&userAgent=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&language=en-US&platform=Linux%20x86_64&nosettings=1&businessUnitId=5c63d6134064df0001fff3b7&widgetId=5419b6ffb0d04a076446a9af HTTP/1.1 
Host: widget.trustpilot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Connection: keep-alive
Referer: https://widget.trustpilot.com/trustboxes/5419b6ffb0d04a076446a9af/index.html?templateId=5419b6ffb0d04a076446a9af&businessunitId=5c63d6134064df0001fff3b7
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         54.230.111.50
HTTP/2 204 No Content
                                        
cache-control: no-store,no-cache
date: Thu, 06 Oct 2022 20:19:27 GMT
pragma: no-cache
server: Kestrel
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: f32RbK2A-LnqYuqFJQk3wiaxThNXpabplusC1-9kmOVdIKJEwyUuJw==
X-Firefox-Spdy: h2

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 06 Oct 2022 20:19:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /ajax/libs/jquery/1.11.1/jquery.min.js HTTP/1.1 
Host: ajax.googleapis.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://flaviar.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.138
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33434
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 02 Oct 2022 02:47:33 GMT
expires: Mon, 02 Oct 2023 02:47:33 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 408714
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (32086)
Size:   33434
Md5:    430e927c980ad4079de727fa59dd93f2
Sha1:   891aaada9a55a91292999f6d50fd300439905982
Sha256: e8728df8617340bd8c10bc8d27d3a725a48871a269c850e8598689938ec6e2ed
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 06 Oct 2022 20:19:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         104.18.32.68
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 06 Oct 2022 20:19:27 GMT
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 03 Oct 2022 20:28:58 GMT
Expires: Mon, 10 Oct 2022 20:28:57 GMT
Etag: "9c415fa9b740d016f5ae423b058a820630cb4cba"
Cache-Control: max-age=345569,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7561178ed8091c0a-OSL

                                        
                                            POST /g/collect?v=2&tid=G-94QYBVSJNV&gtm=2oea50&_p=447142632&_gaz=1&cid=2009995165.1665087567&ul=en-us&sr=1280x1024&_s=1&sid=1665087566&sct=1&seg=0&dl=https%3A%2F%2Fflaviar.com%2F%3Firclickid%3D2Ts0EhwnYxyNRFW0Vm26Pw3CUkDQl1z5LTTqXQ0%26ir_cid%3D3334%26ir_affid%3D10813%26utm_medium%3Daffiliates%26utm_source%3DMaxBounty.com%2520ULC%26ir_partnerid%3D10813%26ir_adid%3D1215604%26ir_campaignid%3D3334&dt=Flaviar%20Membership%20%C2%BB%20Fine%20Spirits%20%26%20Whiskey%20Club%20%F0%9F%A5%83%20-%20Flaviar&en=page_view&_fv=1&_nsi=1&_ss=1&up.membership_status=anonymous HTTP/1.1 
Host: region1.analytics.google.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://flaviar.com
Connection: keep-alive
Referer: https://flaviar.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0

search
                                         216.239.34.36
HTTP/2 204 No Content
content-type: text/plain
                                        
access-control-allow-origin: https://flaviar.com
date: Thu, 06 Oct 2022 20:19:27 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 06 Oct 2022 20:19:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            OPTIONS /events/06cc9139-6a61-41fc-88db-9ec21e04eecf/profile/xhr HTTP/1.1 
Host: public.fbot.me
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: authorization,content-type
Referer: https://flaviar.com/
Origin: https://flaviar.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         52.45.210.7
HTTP/2 200 OK
                                        
date: Thu, 06 Oct 2022 20:19:27 GMT
content-length: 2
server: nginx/1.23.1
access-control-allow-origin: https://flaviar.com
access-control-allow-credentials: true
access-control-allow-methods: POST, GET
access-control-allow-headers: Authorization, Content-Type
info: {"connection":"upgrade","host":"public.fbot.me","x-forwarded-for":"91.90.42.154","x-forwarded-proto":"https","x-forwarded-port":"443","x-amzn-trace-id":"Root=1-633f384f-521fb91c1af43dcb672dd0ac","user-agent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","accept":"*/*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate, br","access-control-request-method":"POST","access-control-request-headers":"authorization,content-type","referer":"https://flaviar.com/","origin":"https://flaviar.com","sec-fetch-dest":"empty","sec-fetch-mode":"cors","sec-fetch-site":"cross-site"}
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   2
Md5:    e0aa021e21dddbd6d8cecec71e9cf564
Sha1:   9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
Sha256: 565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
                                        
                                            POST /g/collect?v=2&tid=G-94QYBVSJNV&cid=2009995165.1665087567&gtm=2oea50&aip=1 HTTP/1.1 
Host: stats.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://flaviar.com
Connection: keep-alive
Referer: https://flaviar.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0

search
                                         173.194.73.156
HTTP/2 204 No Content
content-type: text/plain
                                        
access-control-allow-origin: https://flaviar.com
date: Thu, 06 Oct 2022 20:19:27 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

                                        
                                            POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-28959768-20&cid=2009995165.1665087567&jid=59214629&gjid=1220826778&_gid=1328691908.1665087567&npa=1&_u=aCDAgEAjQAAAAEAAI~&z=1462507570 HTTP/1.1 
Host: stats.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://flaviar.com
Connection: keep-alive
Referer: https://flaviar.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         173.194.73.156
HTTP/2 200 OK
content-type: text/plain
                                        
access-control-allow-origin: https://flaviar.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Thu, 06 Oct 2022 20:19:27 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   4
Md5:    48c0473b7821185d937e685216e2168b
Sha1:   3743e47f8a429a5e87b86cb582d78940733d9d2e
Sha256: 570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
                                        
                                            POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-28959768-1&cid=2009995165.1665087567&jid=1260416104&gjid=1543498063&_gid=1328691908.1665087567&npa=1&_u=aCDAgEAjQAAAAEAAI~&z=1138578357 HTTP/1.1 
Host: stats.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://flaviar.com
Connection: keep-alive
Referer: https://flaviar.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         173.194.73.156
HTTP/2 200 OK
content-type: text/plain
                                        
access-control-allow-origin: https://flaviar.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Thu, 06 Oct 2022 20:19:27 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   4
Md5:    48c0473b7821185d937e685216e2168b
Sha1:   3743e47f8a429a5e87b86cb582d78940733d9d2e
Sha256: 570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 06 Oct 2022 20:19:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET //get/key/v1.json?count=2 HTTP/1.1 
Host: gandalf-eu.segmentify.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://flaviar.com
Connection: keep-alive
Referer: https://flaviar.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         35.246.234.8
HTTP/1.1 200
Content-Type: application/json;charset=UTF-8
                                        
Access-Control-Allow-Origin: *
Connection: keep-alive
Content-Encoding: br
Date: Thu, 06 Oct 2022 20:19:27 GMT
Server: nginx
Transfer-Encoding: chunked
X-Server-Name: 7bc30e0e2a5e4039e53cb85fca96879b


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   30
Md5:    ffbe8df7ed67de5a47c42e7a1e62a906
Sha1:   6457fb3b22a4129d079a15209f056a1f99b37f4b
Sha256: dbb1fd285ec2794e8b60869066861e60cbfbd594da5baaebb75695d6ddb5cb0d
                                        
                                            POST /events/06cc9139-6a61-41fc-88db-9ec21e04eecf/profile/xhr HTTP/1.1 
Host: public.fbot.me
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaviar.com/
Authorization:
Content-Type: application/json
Origin: https://flaviar.com
Content-Length: 215
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         52.45.210.7
HTTP/2 200 OK
content-type: application/json
                                        
date: Thu, 06 Oct 2022 20:19:27 GMT
content-length: 514
server: nginx/1.23.1
access-control-allow-origin: https://flaviar.com
set-cookie: globalId=d232d524-53f2-4d4d-9222-25cacfb9d37e; Max-Age=315360000; Domain=.fbot.me; Path=/; HttpOnly; Secure; SameSite=None
access-control-allow-credentials: true
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (514), with no line terminators
Size:   514
Md5:    605fb4f14f88492f811d9f6254295e16
Sha1:   ecc6ee669e541c08f0e8a99fdf4b6f25f63cc238
Sha256: baf09aa24283c81692df2336df64be87f9ab03816759fff2f83b5ebf44679d6c
                                        
                                            GET /assets/images/11.svg HTTP/1.1 
Host: aacdn.nagich.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaviar.com/
Origin: https://flaviar.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         104.26.15.45
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Thu, 06 Oct 2022 20:19:27 GMT
cache-control: public, max-age=2204800
last-modified: Thu, 01 Aug 2019 12:47:47 GMT
etag: W/"42b27526748d51:0"
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-credentials: true
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-frame-options: deny
strict-transport-security: max-age=31536000
cf-cache-status: HIT
age: 383324
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iYJr8Shq016GQoVrhoGH5Bp6Oj50dxI09tklj38uAqt7P0ANXKrNG2LQC1PPpjVLfs11XL%2FGWq50zzOma9ITC8erGVpl609Mu2zVVQTWNaUNDhHhtNLlHECHq%2B2GUaR1XS0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7561178fad2a0b06-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with CRLF line terminators
Size:   572
Md5:    79f7638eb77519ac1ccdd8cfc5a23cd3
Sha1:   16cb8a8052c229ba4327d6471819697d72f4d76f
Sha256: 010f098484fef61b740ac0c329e8d503867938c71abb52bf2a22ecbcd96aeac2
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 06 Oct 2022 20:19:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 06 Oct 2022 20:19:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-28959768-1&cid=2009995165.1665087567&jid=1260416104&npa=1&_u=aCDAgEAjQAAAAEAAI~&z=1068951493 HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://flaviar.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.164
HTTP/2 200 OK
content-type: image/gif
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 06 Oct 2022 20:19:27 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /build/images/logos/flaviar.d834b8fc.svg HTTP/1.1 
Host: cdn.flaviar.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://flaviar.com/
Cookie: _ga_94QYBVSJNV=GS1.1.1665087566.1.0.1665087566.60.0.0; _ga=GA1.1.2009995165.1665087567
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         54.230.111.75
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Sat, 03 Sep 2022 01:49:44 GMT
last-modified: Fri, 02 Sep 2022 14:13:22 GMT
etag: W/"bffec1c9b2cf2687181fc865bca3a631-1"
cache-control: public, max-age=3888000, immutable
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: bhP_5zEYkw4LuSDqo1aLaEETTErV77Rgx8q5OZDGZdu30aUvmq3_Lg==
age: 2917783
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, ASCII text, with very long lines (8362), with no line terminators
Size:   2277
Md5:    06c7691601e11b592675abd10d3a9ace
Sha1:   f1a78c3087ae3b961d072f776ce88de4c046f5ca
Sha256: 3a1fb32c29198de4c52740ff48876ff468dcdab4604fbc6ab08ae97b334693bc
                                        
                                            GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-28959768-20&cid=2009995165.1665087567&jid=59214629&npa=1&_u=aCDAgEAjQAAAAEAAI~&z=1088584540 HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://flaviar.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.164
HTTP/2 200 OK
content-type: image/gif
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 06 Oct 2022 20:19:27 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 06 Oct 2022 20:19:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST //add/events/v1.json?apiKey=06e2e4b6-5e17-4dbf-9574-c462c3d742d7 HTTP/1.1 
Host: gandalf-eu.segmentify.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
X-Sfy-Api-Key: 06e2e4b6-5e17-4dbf-9574-c462c3d742d7
Content-Length: 1445
Origin: https://flaviar.com
Connection: keep-alive
Referer: https://flaviar.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         35.246.234.8
HTTP/1.1 200
Content-Type: application/json;charset=UTF-8
                                        
Access-Control-Allow-Origin: *
Connection: keep-alive
Content-Encoding: br
Date: Thu, 06 Oct 2022 20:19:27 GMT
Server: nginx
Transfer-Encoding: chunked
X-Server-Name: e50eafe57688af3a47ec4fb3140ed864


--- Additional Info ---
Magic:  JSON data\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (33825), with no line terminators
Size:   7951
Md5:    ff8d61faa39090b3da5159a01b50618a
Sha1:   89709b5b35110b57a2e86c281b7e1d9839b6b93a
Sha256: 3bcb4432f3ad790ae8214e82ca59718974712a24bbfde04945687a04c0068cd9
                                        
                                            GET / HTTP/1.1 
Host: beacon-v2.helpscout.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://flaviar.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         54.230.111.96
HTTP/2 200 OK
content-type: application/javascript
                                        
content-length: 328
last-modified: Wed, 05 Oct 2022 09:30:09 GMT
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
date: Thu, 06 Oct 2022 20:18:41 GMT
cache-control: max-age=120, s-maxage=120, public
etag: "e06ae6a347de0e093eebf0f226a4a587"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 28KF9M6Y4BYXbCm7TlSl9AAr0Q0UM-f4TGTzQ3bd_JT9XrqIIAhIQw==
age: 48
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (458), with no line terminators
Size:   328
Md5:    e06ae6a347de0e093eebf0f226a4a587
Sha1:   f82aad08f244fd8d8b33ee47f15e1f51c034ae12
Sha256: ea793fc476fb27c3c8d538cc427a2dee7aacf69251dbc27b0110eea4b9247bc2
                                        
                                            GET /static/js/vendor.06c7227b.js HTTP/1.1 
Host: beacon-v2.helpscout.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://flaviar.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         54.230.111.96
HTTP/2 200 OK
content-type: application/javascript
                                        
content-length: 22285
date: Thu, 06 Oct 2022 18:24:29 GMT
last-modified: Wed, 05 Oct 2022 09:30:10 GMT
etag: "3f4a5cbde86a1c38d64756f63411e950"
cache-control: max-age=315360000, s-maxage=7200, public
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 9i3Gm5M1utrBdxdRx7jS1TXW_cn5xERXYo1JTE9zRoGS4nJGhXkeDQ==
age: 6899
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (64482), with no line terminators
Size:   22285
Md5:    3f4a5cbde86a1c38d64756f63411e950
Sha1:   4f660ae52eb3e6c2fb9b07232a39f7dbd8fc920b
Sha256: bf7ee1af4166e65a9d8aa2587a87f4a22965e9917c1f222c6ddb985fa2397d88
                                        
                                            GET /static/js/main.18441a3c.js HTTP/1.1 
Host: beacon-v2.helpscout.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://flaviar.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         54.230.111.96
HTTP/2 200 OK
content-type: application/javascript
                                        
content-length: 9699
date: Thu, 06 Oct 2022 18:24:29 GMT
last-modified: Wed, 05 Oct 2022 09:30:10 GMT
etag: "f2c0d254011b42ee6d3d9712c2404f0d"
cache-control: max-age=315360000, s-maxage=7200, public
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: cU9wsYiDIZs3lLpGLAwnKtmj8p6L3QFd7UEdNjmniQw5u6PD7P9wZw==
age: 6899
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (24956)
Size:   9699
Md5:    f2c0d254011b42ee6d3d9712c2404f0d
Sha1:   2b61cdef1da4b9171e3191adcbef9626eb615907
Sha256: b5c3c31eb985e13e197aa743262c1243afbde5402ec38a6668c1f3c32de81fc5
                                        
                                            GET /scevent.min.js HTTP/1.1 
Host: sc-static.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://flaviar.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         54.230.82.240
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
                                        
content-length: 8764
server: CloudFront
date: Thu, 06 Oct 2022 20:19:27 GMT
content-encoding: gzip
access-control-allow-origin: *
access-control-allow-headers: Content-Type
cache-control: private, s-maxage=0, max-age=600
set-cookie: X-AB=0d6e407936704bd380072f5891d28b0e;max-age=86400;expires=Fri, 07 Oct 2022 19:21:19 GMT;Path=/scevent.min.js; Secure; SameSite=None
x-cache: LambdaGeneratedResponse from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: brsqozgMFKx3J49Tnf2Vnuz4KhP1dZ-zDbAjKXhp5iLRjqF0ZaM1kw==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (25360), with no line terminators
Size:   8764
Md5:    e9a9d4e245fb5df1ac33be19306752e8
Sha1:   246e5996a63a71ce325dff7ca6c9ef71f324b62f
Sha256: 64211912b65ff9a15aa212c8e8f5d4e60b86629d305c130f8824eb55837b8d4a
                                        
                                            GET /ads/pixel.js HTTP/1.1 
Host: www.redditstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://flaviar.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         151.101.85.140
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Tue, 19 Jul 2022 22:48:09 GMT
etag: "95212d33cfff78ad59f5af5b20c48c53"
cache-control: public, max-age=60
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 06 Oct 2022 20:19:27 GMT
vary: Accept-Encoding,Origin
server: snooserv
report-to: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}
nel: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.02, "failure_fraction": 0.02}
content-length: 7722
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (25224)
Size:   7722
Md5:    95212d33cfff78ad59f5af5b20c48c53
Sha1:   9b99a4091a6eb716bc68f1428e3c86eca068b25b
Sha256: bd69f250efa08cb2c0a06c35d91fda762779820d87779019c25211f4559ebb1d
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 357
Cache-Control: 'max-age=158059'
Date: Thu, 06 Oct 2022 20:19:27 GMT
Last-Modified: Thu, 06 Oct 2022 20:13:30 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 313

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 3154
Cache-Control: 'max-age=158059'
Date: Thu, 06 Oct 2022 20:19:27 GMT
Last-Modified: Thu, 06 Oct 2022 19:26:53 GMT
Server: ECS (amb/6BA8)
X-Cache: HIT
Content-Length: 727

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 721
Cache-Control: 'max-age=158059'
Date: Thu, 06 Oct 2022 20:19:27 GMT
Last-Modified: Thu, 06 Oct 2022 20:07:26 GMT
Server: ECS (amb/6B88)
X-Cache: HIT
Content-Length: 727

                                        
                                            GET /static/js/full-beacon-init.ec997731.chunk.js HTTP/1.1 
Host: beacon-v2.helpscout.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://flaviar.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         54.230.111.96
HTTP/2 200 OK
content-type: application/javascript
                                        
content-length: 99888
last-modified: Wed, 05 Oct 2022 09:30:10 GMT
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
date: Thu, 06 Oct 2022 19:30:51 GMT
cache-control: max-age=315360000, s-maxage=7200, public
etag: "8f346daa7617a2ebb22a8a82db746ffa"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: XR_2hyciPnxQsx0JZUM51sTECYX6VpHmwR3kkmHkF6znk40AWn_B7w==
age: 2918
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   99888
Md5:    8f346daa7617a2ebb22a8a82db746ffa
Sha1:   10f8ccc0a185b6437d4b8bca411f3ad81dd88cfe
Sha256: 59fc14d5c75fb65fb76b14ba721d252c0e2cbd5d1d382ae95265385a7375a398
                                        
                                            GET /widget/widget_async.js HTTP/1.1 
Host: shop.pe
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://flaviar.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         35.227.244.1
HTTP/2 301 Moved Permanently
content-type: text/html
                                        
server: nginx
date: Thu, 06 Oct 2022 20:19:28 GMT
content-length: 178
location: https://d3rr3d0n31t48m.cloudfront.net/widget/widget_async.js
x-frame-options: deny
content-security-policy: frame-ancestors none;
strict-transport-security: max-age=31536000; includeSubDomains
referrer-policy: no-referrer-when-downgrade
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   178
Md5:    cd2e0e43980a00fb6a2742d3afd803b8
Sha1:   81ffbd1712afe8cdf138b570c0fc9934742c33c1
Sha256: bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "2522029D9F787A6F2DFD7F2A8B6740DE444981A9F8489496E1EF20EB2CD50898"
Last-Modified: Wed, 05 Oct 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Fri, 07 Oct 2022 02:19:28 GMT
Date: Thu, 06 Oct 2022 20:19:28 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 1029
Cache-Control: 'max-age=158059'
Date: Thu, 06 Oct 2022 20:19:28 GMT
Last-Modified: Thu, 06 Oct 2022 20:02:19 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5532
Cache-Control: 'max-age=158059'
Date: Thu, 06 Oct 2022 20:19:28 GMT
Last-Modified: Thu, 06 Oct 2022 18:47:16 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 3155
Cache-Control: 'max-age=158059'
Date: Thu, 06 Oct 2022 20:19:28 GMT
Last-Modified: Thu, 06 Oct 2022 19:26:53 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 727

                                        
                                            GET /cm/i?pid=b838e1c8-e5cb-4d99-bda2-d5594b71ff41&u_scsid=03a7103e-bbf7-4b5d-870d-ba9cdf60bcbc&u_sclid=d12b167c-65e7-4c61-bcbd-4d27777bc10d HTTP/1.1 
Host: tr.snapchat.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://flaviar.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         35.190.43.134
HTTP/2 200 OK
content-type: text/html
                                        
date: Thu, 06 Oct 2022 20:19:28 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-length: 0
x-envoy-upstream-service-time: 1
server: API Gateway
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

                                        
                                            GET /p?trackId=1c00205b-0ed4-45ba-b15f-9dce7a74ae09&pid=b838e1c8-e5cb-4d99-bda2-d5594b71ff41&ev=PAGE_VIEW&pl=https%3A%2F%2Fflaviar.com%2F%3Firclickid%3D2Ts0EhwnYxyNRFW0Vm26Pw3CUkDQl1z5LTTqXQ0%26ir_cid%3D3334%26ir_affid%3D10813%26utm_medium%3Daffiliates%26utm_source%3DMaxBounty.com%2520ULC%26ir_partnerid%3D10813%26ir_adid%3D1215604%26ir_campaignid%3D3334&ts=1665087568106&rf=&v=1.6.0&if=false&bt=1d53c387&intg=gtm&m_sl=3867&m_rd=3894&m_pi=1953&m_dcl=2032&m_fcps=1975&m_pl=3576&m_ic=0&m_pv=v2&u_hem=FFFeb045d78d273107348b0300c01d29b7552d622abbc6faf81b3ec55359aa9950c&u_c1=a69e04ca-cf52-4060-98a3-0ec70a259fe7&u_scsid=03a7103e-bbf7-4b5d-870d-ba9cdf60bcbc&u_sclid=d12b167c-65e7-4c61-bcbd-4d27777bc10d&s_r_ids=0 HTTP/1.1 
Host: tr.snapchat.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://flaviar.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         35.190.43.134
HTTP/2 200 OK
content-type: image/png
                                        
date: Thu, 06 Oct 2022 20:19:28 GMT
access-control-allow-origin: *
cache-control: no-cache, no-transform
set-cookie: sc_at=v2|H4sIAAAAAAAAAAXBgQ0AIAgDsItIwMHEc4jEKzjeljhxnSEoh/jqlrPT5NW6UC0kfcbI0NzBHP3Symf/MgAAAA==;SameSite=None;Version=1;Comment=;Domain=.snapchat.com;Path=/;Max-Age=33696000;Secure
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-length: 68
x-envoy-upstream-service-time: 0
server: API Gateway
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Size:   68
Md5:    c4a2b870062c2bb98c500bc1526c0498
Sha1:   528666ccdb12997358077bc8fcdbfb6b825c7788
Sha256: 2aa4fa20701cdd6d8d56046069001186b5267e3ee7d0ef618ad2f4a683723e11
                                        
                                            GET /p?trackId=b78f335d-366b-4789-905f-b4dcd1b29a83&pid=b838e1c8-e5cb-4d99-bda2-d5594b71ff41&ev=PAGE_VIEW&pl=https%3A%2F%2Fflaviar.com%2F%3Firclickid%3D2Ts0EhwnYxyNRFW0Vm26Pw3CUkDQl1z5LTTqXQ0%26ir_cid%3D3334%26ir_affid%3D10813%26utm_medium%3Daffiliates%26utm_source%3DMaxBounty.com%2520ULC%26ir_partnerid%3D10813%26ir_adid%3D1215604%26ir_campaignid%3D3334&ts=1665087568111&rf=&v=1.6.0&if=false&bt=1d53c387&intg=gtm&m_sl=3867&m_rd=3898&m_pi=1953&m_dcl=2032&m_fcps=1975&m_pl=3576&m_ic=0&m_pv=v2&u_hem=FFFeb045d78d273107348b0300c01d29b7552d622abbc6faf81b3ec55359aa9950c&u_c1=a69e04ca-cf52-4060-98a3-0ec70a259fe7&u_scsid=03a7103e-bbf7-4b5d-870d-ba9cdf60bcbc&u_sclid=d12b167c-65e7-4c61-bcbd-4d27777bc10d&s_r_ids=0 HTTP/1.1 
Host: tr.snapchat.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://flaviar.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         35.190.43.134
HTTP/2 200 OK
content-type: image/png
                                        
date: Thu, 06 Oct 2022 20:19:28 GMT
access-control-allow-origin: *
cache-control: no-cache, no-transform
set-cookie: sc_at=v2|H4sIAAAAAAAAAAXBiQ3AQAgDsImQiAhP1wFxUzB87bU3nWrCAYS+TxpGyR5MZX1c3iHCtdKjTn9eL6XcMgAAAA==;SameSite=None;Version=1;Comment=;Domain=.snapchat.com;Path=/;Max-Age=33696000;Secure
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-length: 68
x-envoy-upstream-service-time: 0
server: API Gateway
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Size:   68
Md5:    c4a2b870062c2bb98c500bc1526c0498
Sha1:   528666ccdb12997358077bc8fcdbfb6b825c7788
Sha256: 2aa4fa20701cdd6d8d56046069001186b5267e3ee7d0ef618ad2f4a683723e11
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5532
Cache-Control: 'max-age=158059'
Date: Thu, 06 Oct 2022 20:19:28 GMT
Last-Modified: Thu, 06 Oct 2022 18:47:16 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471

                                        
                                            OPTIONS /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 
Host: splow.flaviar.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://flaviar.com/
Origin: https://flaviar.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site

search
                                         172.66.43.165
HTTP/2 200 OK
                                        
date: Thu, 06 Oct 2022 20:19:28 GMT
content-length: 0
access-control-allow-origin: https://flaviar.com
access-control-allow-credentials: true
access-control-allow-headers: Content-Type
access-control-max-age: 5
x-robots-tag: noindex, nofollow, nosnippet, noarchive
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qQRTHspA1uxGYmIejiQLmoAc%2FOiS8X3a6XKa79wRSlgCNbv7z8KZ9D6vEHG12AgKlEShkd7b3z4UK%2FEOrepglA9nTkaARGZs3ay7m1fTR3pgPxtZ4x90ghhsLYkN2thk53vd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; includeSubDomains; preload
server: cloudflare
cf-ray: 75611794c8f4b4f9-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

                                        
                                            POST /events HTTP/1.1 
Host: fbcapi.flaviar.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 506
Origin: https://flaviar.com
Connection: keep-alive
Referer: https://flaviar.com/
Cookie: _ga_94QYBVSJNV=GS1.1.1665087566.1.0.1665087566.60.0.0; _ga=GA1.2.2009995165.1665087567; _gid=GA1.2.1328691908.1665087567; _dc_gtm_UA-28959768-20=1; _dc_gtm_UA-28959768-1=1; _fbp=fb.1.1665087567463.1544524691; _sgf_user_id=3082261241143297; _sgf_session_id=3082261241143296
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site

search
                                         54.183.233.41
HTTP/2 200 OK
                                        
date: Thu, 06 Oct 2022 20:19:28 GMT
content-length: 0
vary: origin
access-control-allow-credentials: true
access-control-allow-origin: https://flaviar.com
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         54.230.245.100
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 06 Oct 2022 20:19:28 GMT
Last-Modified: Thu, 06 Oct 2022 18:35:19 GMT
Server: ECS (nyb/1D2E)
X-Cache: Miss from cloudfront
Via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: n7k0XkFuoXZiWWptvtDTvu7g7YfGkc33ucbccZDcREyfmsE0qqmX8A==
Age: 6249

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         54.230.245.100
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 06 Oct 2022 20:19:28 GMT
Last-Modified: Thu, 06 Oct 2022 18:31:33 GMT
Server: ECS (bsa/EB11)
X-Cache: Miss from cloudfront
Via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Zc3wCjangJlmUllDLPsVZyTQqWqMyxkHxtZ6VIvI21wW5SNtimPMhQ==
Age: 6475

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 6133
Cache-Control: 'max-age=158059'
Date: Thu, 06 Oct 2022 20:19:28 GMT
Last-Modified: Thu, 06 Oct 2022 18:37:15 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 314

                                        
                                            GET /js/ld/ld.js?a=95340 HTTP/1.1 
Host: dynamic.criteo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://flaviar.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         178.250.2.140
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
date: Thu, 06 Oct 2022 20:19:27 GMT
server: Kestrel
cache-control: public,max-age=10800
content-encoding: br
vary: Origin, Accept-Encoding
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (43225)
Size:   14688
Md5:    39531bcbd4afa6f9864dee94b236d8a5
Sha1:   e0566a3f529de49b68b203220fc2b35a283539af
Sha256: 74192754d27b933f37cf966e82510640c82f09e4e811612bc6c37dac5b9d81bc
                                        
                                            GET /dna HTTP/1.1 
Host: dnacdn.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         178.250.0.157
HTTP/2 200 OK
                                        
date: Thu, 06 Oct 2022 20:19:28 GMT
server: Kestrel
content-length: 0
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
set-cookie: browser_data=kspn7V80M0RITmhlJTJCZkMwOUJGQlhaMUN2czlaMEZ5QWV5SVJmNEglMkJOYko1emY0bU9WQmVaciUyRkliJTJCekxIT3R2NXZOc20; expires=Tue, 31 Oct 2023 20:19:28 GMT; domain=dnacdn.net; path=/; secure; samesite=none
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 226439
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2

                                        
                                            GET /sp/2.18.2/Lk98JfUw.js HTTP/1.1 
Host: cdn.flaviar.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://flaviar.com/
Cookie: _ga_94QYBVSJNV=GS1.1.1665087566.1.0.1665087566.60.0.0; _ga=GA1.2.2009995165.1665087567; _gid=GA1.2.1328691908.1665087567; _dc_gtm_UA-28959768-20=1; _dc_gtm_UA-28959768-1=1; _fbp=fb.1.1665087567463.1544524691; _sgf_user_id=3082261241143297; _sgf_session_id=3082261241143296; _gcl_au=1.1.77709639.1665087568; _sgf_exp=; _sgf_push_permission_asked=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         54.230.111.75
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Mon, 22 Aug 2022 02:19:56 GMT
last-modified: Wed, 11 May 2022 13:33:25 GMT
etag: W/"595025034b65fd95a6547d58d743471a"
cache-control: public, max-age=315360000, immutable
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: A_p4wWxtL31OwZSaVngyAglytjGHO1uziGwcF2-GnLX8rYuhChE6Nw==
age: 3952772
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   26979
Md5:    e06ee26120169daba9b0c2cdb4bb608b
Sha1:   fee408ab13dd922ac6db0c5dfa58fa851ed6c102
Sha256: 02105364c63199a91ffabfbb5061da8c2e42970011581ad07c16f7ee7f798a52
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 4970
Cache-Control: 'max-age=158059'
Date: Thu, 06 Oct 2022 20:19:28 GMT
Last-Modified: Thu, 06 Oct 2022 18:56:38 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 312

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 4986
Cache-Control: 'max-age=158059'
Date: Thu, 06 Oct 2022 20:19:28 GMT
Last-Modified: Thu, 06 Oct 2022 18:56:22 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 312

                                        
                                            GET /collector/is_enabled?pids=b838e1c8-e5cb-4d99-bda2-d5594b71ff41&tld=com HTTP/1.1 
Host: tr.snapchat.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaviar.com/
Origin: https://flaviar.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         35.190.43.134
HTTP/2 200 OK
content-type: application/json
                                        
date: Thu, 06 Oct 2022 20:19:28 GMT
access-control-allow-origin: https://flaviar.com
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-envoy-upstream-service-time: 0
content-encoding: gzip
vary: Accept-Encoding
server: API Gateway
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

                                        
                                            GET /pagead/landing?gcs=G111&rnd=1825508107.1665087568&url=https%3A%2F%2Fflaviar.com%2F&gtm=2wga50K4F6SWQ&auid=77709639.1665087568 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaviar.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search