Overview

URLwwwhbo.com/
IP 103.224.182.245 (Australia)
ASN#133618 Trellian Pty. Limited
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2022-12-02 08:27:04 UTC
StatusLoading report..
IDS alerts0
Blocklist alert4
urlquery alerts No alerts detected
Tags None

Domain Summary (47)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
staticw2.yotpo.com (5) 6769 2015-03-11 08:58:41 UTC 2020-04-26 08:45:33 UTC 95.101.97.70
sc-static.net (1) 1183 2022-01-24 20:13:30 UTC 2022-12-01 17:16:34 UTC 54.230.82.240
s2.adform.net (1) 4693 2013-04-18 11:49:52 UTC 2020-03-08 23:56:06 UTC 37.157.5.71
status.thawte.com (3) 5123 2019-03-13 17:00:46 UTC 2020-04-10 08:00:21 UTC 93.184.220.29
no-go.kelkoogroup.net (5) 0 No data No data 95.211.116.27 Domain (kelkoogroup.net) ranked at: 79339
www.google-analytics.com (2) 40 2012-10-03 01:04:21 UTC 2022-12-01 21:18:15 UTC 142.250.74.14
static.klaviyo.com (3) 4056 2018-06-15 20:45:47 UTC 2020-04-18 08:36:46 UTC 151.101.130.133
connect.facebook.net (1) 139 2012-05-22 02:51:28 UTC 2020-02-17 13:26:09 UTC 157.240.240.1
p.yotpo.com (5) 6355 2021-09-13 06:21:56 UTC 2022-12-01 17:25:55 UTC 3.73.192.192
www.google.com (3) 7 2016-03-22 03:56:07 UTC 2022-12-01 18:17:59 UTC 142.250.74.164
firefox.settings.services.mozilla.com (2) 867 2020-06-04 20:08:41 UTC 2022-12-01 17:14:08 UTC 34.102.187.140
content-signature-2.cdn.mozilla.net (1) 1152 No data No data 34.160.144.191
img-getpocket.cdn.mozilla.net (7) 1631 2018-06-21 23:36:00 UTC 2020-02-19 04:43:25 UTC 34.120.237.76
dipaka-ead.com (3) 0 2022-10-31 13:23:43 UTC 2022-12-01 13:58:55 UTC 3.208.247.235 Unknown ranking
fonts.gstatic.com (4) 0 2014-09-09 00:40:21 UTC 2022-12-01 22:08:56 UTC 216.58.207.227 Domain (gstatic.com) ranked at: 540
www.google.no (3) 25607 2016-04-05 19:50:59 UTC 2022-12-01 20:43:35 UTC 142.250.74.131
r3.o.lencr.org (10) 344 No data No data 23.36.76.226
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-12-01 17:12:49 UTC 34.117.237.239
s.kk-resources.com (1) 38577 2018-08-25 06:32:23 UTC 2020-02-13 23:43:35 UTC 143.204.55.7
www.googletagmanager.com (2) 75 2013-05-22 02:07:37 UTC 2022-12-01 18:48:44 UTC 142.250.74.40
stats.g.doubleclick.net (1) 96 2013-06-10 20:21:11 UTC 2022-12-01 20:40:43 UTC 108.177.14.155
www.facebook.com (1) 99 2012-05-21 00:23:41 UTC 2021-06-08 06:38:51 UTC 31.13.72.36
clever-redirect.com (1) 0 2021-02-09 06:24:33 UTC 2022-12-01 19:59:55 UTC 78.46.197.88 Unknown ranking
lookandfind.me (2) 35702 2021-03-08 12:58:51 UTC 2022-12-01 19:59:55 UTC 5.9.110.29
analytics.tiktok.com (6) 1182 No data No data 23.36.79.32
tr.snapchat.com (2) 978 2017-04-26 06:25:03 UTC 2022-05-17 21:54:32 UTC 35.190.43.134
ocsp.sca1b.amazontrust.com (1) 1015 2017-03-03 15:20:51 UTC 2019-03-27 04:05:54 UTC 143.204.42.158
region1.analytics.google.com (1) 0 2022-03-17 11:26:33 UTC 2022-12-01 17:23:11 UTC 216.239.34.36 Domain (google.com) ranked at: 1
client-rapi.recombee.com (2) 251656 2018-11-09 13:59:18 UTC 2022-12-02 06:18:33 UTC 5.9.235.247
ocsp.pki.goog (15) 175 2018-07-01 06:43:07 UTC 2020-05-02 20:58:16 UTC 216.58.211.3
analytics.tights.no (2) 0 2021-11-23 11:40:20 UTC 2022-12-02 06:17:55 UTC 185.116.4.133 Unknown ranking
s.kelkoogroup.net (1) 316265 2018-08-31 04:37:04 UTC 2020-01-12 21:25:09 UTC 185.60.164.26
googleads.g.doubleclick.net (2) 42 2021-02-20 15:43:32 UTC 2022-12-01 20:58:36 UTC 142.250.74.98
wwwhbo.com (1) 0 2018-12-13 08:43:41 UTC 2022-11-30 08:26:35 UTC 103.224.182.245 Unknown ranking
push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2020-05-03 10:09:39 UTC 54.148.53.106
d38psrni17bvxu.cloudfront.net (1) 0 2022-10-31 21:29:45 UTC 2022-12-01 22:08:50 UTC 54.230.245.8 Unknown ranking
ocsp.sectigo.com (2) 487 2019-11-29 11:50:24 UTC 2021-09-17 20:05:40 UTC 104.18.32.68
bat.bing.com (3) 387 2014-04-08 09:23:16 UTC 2020-04-20 20:17:24 UTC 13.107.21.200
c.bannerflow.net (1) 10957 2019-11-05 12:12:25 UTC 2022-12-01 21:46:49 UTC 104.16.13.64
ocsp.digicert.com (8) 86 2012-05-21 07:02:23 UTC 2020-05-02 20:58:10 UTC 93.184.220.29
api.yadore.com (1) 591567 2019-01-11 04:50:54 UTC 2022-12-01 19:59:56 UTC 88.99.112.2
static-tracking.klaviyo.com (1) 4414 No data No data 151.101.194.133
fonts.googleapis.com (1) 8877 2013-06-10 20:14:26 UTC 2022-12-01 17:28:41 UTC 142.250.74.106
ww38.wwwhbo.com (5) 0 No data No data 185.53.179.29 Unknown ranking
www.tights.no (132) 0 2014-12-01 09:35:47 UTC 2022-12-02 06:17:52 UTC 185.116.4.22 Unknown ranking
track.adform.net (2) 3564 2012-05-21 07:01:21 UTC 2020-02-22 18:52:02 UTC 37.157.4.23
f.tights.no (2) 0 2021-11-17 21:22:16 UTC 2022-12-02 06:18:06 UTC 16.170.207.163 Unknown ranking

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-12-02 2 wwwhbo.com/ Malware
2022-12-02 2 ww38.wwwhbo.com/ Malware
2022-12-02 2 d38psrni17bvxu.cloudfront.net/scripts/js3.js Malware
2022-12-02 2 ww38.wwwhbo.com/ls.php Malware

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 103.224.182.245
Date UQ / IDS / BL URL IP
2023-02-01 08:27:02 +0000 0 - 0 - 3 wwwhbo.com/ 103.224.182.245
2023-01-29 13:35:04 +0000 0 - 0 - 1 xn--ingenieurpdagogik-zqb.de/index.php/false/ (...) 103.224.182.245
2023-01-26 10:15:48 +0000 0 - 0 - 3 debrillen.de/ 103.224.182.245
2023-01-14 06:26:31 +0000 0 - 0 - 3 goglas.de/ 103.224.182.245
2022-12-12 23:26:38 +0000 0 - 0 - 3 youtub4e.de/ 103.224.182.245


Last 5 reports on ASN: Trellian Pty. Limited
Date UQ / IDS / BL URL IP
2023-02-08 09:31:36 +0000 0 - 0 - 2 express-deals.cyou/ 103.224.182.210
2023-02-08 08:12:51 +0000 0 - 0 - 2 onlinesetupayee.xyz/Lloydsbank.co.uk/Login.php 103.224.182.210
2023-02-08 03:47:16 +0000 0 - 2 - 5 5ju4c.ouoapenpo.top/ 103.224.182.210
2023-02-07 11:39:10 +0000 0 - 0 - 5 eredd.bar/ 103.224.182.210
2023-02-07 08:23:30 +0000 0 - 0 - 5 vdpmedic.com/ 103.224.212.219


Last 5 reports on domain: wwwhbo.com
Date UQ / IDS / BL URL IP
2023-02-01 08:27:02 +0000 0 - 0 - 3 wwwhbo.com/ 103.224.182.245
2022-12-02 08:27:04 +0000 0 - 0 - 4 wwwhbo.com/ 103.224.182.245
2022-11-28 08:27:43 +0000 0 - 0 - 4 wwwhbo.com/ 103.224.182.245
2022-11-25 08:27:26 +0000 0 - 0 - 2 wwwhbo.com/ 103.224.182.245
2022-11-16 08:26:42 +0000 0 - 0 - 1 wwwhbo.com/ 103.224.182.245


No other reports with similar screenshot

JavaScript

Executed Scripts (106)

Executed Evals (1)
#1 JavaScript::Eval (size: 596) - SHA256: 20aac78b9f93f28c4e079d85f99c5995f63f99d21d9fb0389b231eed307cd44a
jQuery(function($) {
    (function($) {

        var email = '';

        if (typeof window._klarnaCheckout == 'function') {
            window._klarnaCheckout(function(api) {
                api.on({
                    'change': function(data) {
                        if (data.email) {
                            // hasn't changed
                            if (email == data.email) {
                                return;
                            }

                            email = data.email;

                            $.post('/butikk/levity-match-ballpocket-short-tights-black/?kk=a4c6293-184d1f21d20-305fa4&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=LEVITY+Match+Ballpocket+Short+Tights+Bla&aw-ajax=capture_email', {
                                email: email
                            });
                        }
                    }
                })
            });
        }
    })(jQuery);

});

Executed Writes (0)


HTTP Transactions (261)


Request Response
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "6035871C0DE6FF2D120921461207CFA32BC286E1FE78849CE74815FFBB9FF950"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19507
Expires: Fri, 02 Dec 2022 13:51:58 GMT
Date: Fri, 02 Dec 2022 08:26:51 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 2694
Cache-Control: max-age=96555
Date: Fri, 02 Dec 2022 08:26:51 GMT
Etag: "63888270-1d7"
Expires: Sat, 03 Dec 2022 11:16:06 GMT
Last-Modified: Thu, 01 Dec 2022 10:31:12 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "39F6BB64420BCFC8F0B010168FD35B67732984CD0698409F04D5AE40410422AA"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5284
Expires: Fri, 02 Dec 2022 09:54:55 GMT
Date: Fri, 02 Dec 2022 08:26:51 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 02 Dec 2022 08:18:11 GMT
cache-control: public,max-age=3600
age: 520
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    14cd9a0afb6ba9a763651d5112760d1e
Sha1:   75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
Sha256: 4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: /rXWWDUZjEhQe1Mdee+k/ii3gngL/ZppDXed/RjkZuyMIkG75gO0UOH1wp0XfgRErepIOrz9lvI=
x-amz-request-id: 7G62H28Y1FJT4W06
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 02 Dec 2022 07:46:37 GMT
age: 2414
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    9ebddc2b260d081ebbefee47c037cb28
Sha1:   492bad62a7ca6a74738921ef5ae6f0be5edebf39
Sha256: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
                                        
                                            GET / HTTP/1.1 
Host: wwwhbo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         103.224.182.245
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Date: Fri, 02 Dec 2022 08:26:51 GMT
Server: Apache/2.4.38 (Debian)
Set-Cookie: __tad=1669969611.8357545; expires=Mon, 29-Nov-2032 08:26:51 GMT; Max-Age=315360000
Location: http://ww38.wwwhbo.com/
Content-Length: 0
Connection: close


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Fri, 02 Dec 2022 08:26:51 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Retry-After, Cache-Control, Content-Type, Pragma, Backoff, ETag, Expires, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 02 Dec 2022 08:11:15 GMT
cache-control: public,max-age=3600
age: 937
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 2687
Cache-Control: 'max-age=158059'
Date: Fri, 02 Dec 2022 08:26:52 GMT
Last-Modified: Fri, 02 Dec 2022 07:42:05 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 7pWbSb4Hd6f/LC5deFV8VA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         54.148.53.106
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: deZ1V5FPlp6HA7MqSACj10is3pU=

                                        
                                            GET / HTTP/1.1 
Host: ww38.wwwhbo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         185.53.179.29
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Fri, 02 Dec 2022 08:26:53 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Redirect: zeropark_zeroclick
X-Template: tpl_CleanPeppermintBlack_twoclick
X-Language: norwegian
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2214)
Size:   2477
Md5:    ddd8c0616b820a566dcf857702fc01da
Sha1:   46f4194878c54aa9f4d3ff97358182416a774894
Sha256: 1f8a0dc0ce389ff89cf2af7a9e2981016c205ea57d0ed6432148808c927c1f51

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /scripts/js3.js HTTP/1.1 
Host: d38psrni17bvxu.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ww38.wwwhbo.com/

search
                                         54.230.245.8
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Content-Length: 1134
Connection: keep-alive
Server: nginx
Date: Fri, 02 Dec 2022 04:54:34 GMT
Last-Modified: Tue, 17 Aug 2021 09:17:22 GMT
Accept-Ranges: bytes
ETag: "611b7ea2-46e"
X-Cache: Hit from cloudfront
Via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 18Pn9WSXY7hVzmVxe34ZMs25dY2Ev-hio9zY4gH3MKFBIuaw_44eog==
Age: 12739


--- Additional Info ---
Magic:  ASCII text, with very long lines (506)
Size:   1134
Md5:    64b79b43df8fbf2c5d082964b9116a68
Sha1:   dc3c763519baf0f4c32bb60bfc429651a491ea01
Sha256: c57e9feec209e3ea5eb1d75a1ba6fa277242a3df250055be8446052b51e58637

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2401
Expires: Fri, 02 Dec 2022 09:06:54 GMT
Date: Fri, 02 Dec 2022 08:26:53 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2401
Expires: Fri, 02 Dec 2022 09:06:54 GMT
Date: Fri, 02 Dec 2022 08:26:53 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2401
Expires: Fri, 02 Dec 2022 09:06:54 GMT
Date: Fri, 02 Dec 2022 08:26:53 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F937deb9c-e12c-486f-bf82-4833aed00836.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 11443
x-amzn-requestid: 21469d81-ee4b-47f3-8877-b6658b3ea8b8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfHDHE4zoAMFvfw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891ee0-5b39eddd703ea04e6a1355f8;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:38:40 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: nPuZoyOu_QAqbZvTUaNy1J3BOqnR2ttrIhv9BwRmWnKeba-e6MZWKA==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 21:55:34 GMT
age: 37879
etag: "b5118bca37feda2ada3001199dc1d80ac6d2aacc"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   11443
Md5:    d08081e2dd562ef50e4e98ebc0136698
Sha1:   b5118bca37feda2ada3001199dc1d80ac6d2aacc
Sha256: 5160333e0cfd338b3887972d0a5c0f817ef88b70b7eb78e4e25d153a85e3478f
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcca8556b-b044-489f-bc74-086aad62b062.webp HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7591
x-amzn-requestid: e179862e-f840-4e50-a9dc-09f325479b9a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGgMFRZIAMFl7g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891e01-676a1571459f2d83488f2765;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:34:57 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: oB5K_ZCWWwCltMx8FQSjDdXRMzSTSyRLSYSLAooQXuCrUxadLUiWkA==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 21:48:51 GMT
age: 38282
etag: "ffd0763f997e71a8c1458523fc17cafe8849dfdf"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7591
Md5:    d147ccb10bda82b153a596c3c967cd6a
Sha1:   ffd0763f997e71a8c1458523fc17cafe8849dfdf
Sha256: 1cfeb90a4ba027195f903d938d4a0aac418a1c2f0b52215ec023263f15905971
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F683f066f-699d-4765-8f4f-33c72e1672e2.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6174
x-amzn-requestid: f78f1e9d-8c0c-495d-a862-61838f8297e8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cZ0iyH2WoAMFQdg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63870144-45442a8544259930564f685b;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 07:07:48 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: QIOz71_Kr08pIIwOm2GUkWr421fO7-UyUI7LYld0JBaGnYQ0j3IDFg==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 06:00:48 GMT
age: 8765
etag: "6e6c8bd2bce144cc4da1cd7be375b046b60dca79"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6174
Md5:    b986f9fcbeca91ed5c8d58fbfaf47d19
Sha1:   6e6c8bd2bce144cc4da1cd7be375b046b60dca79
Sha256: 07a8938d2841f8c13bd646f4e79e41e46acd6463aa019cd70871b3741f12bb4f
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa07af64d-c287-4b0a-9677-9a1000422afc.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7334
x-amzn-requestid: a6b8b420-8394-496b-8be8-26dee52e3887
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGeoHJOoAMF75g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891df7-0b38d07f518c8b3134457df2;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:34:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: tuKmV_nb4HVbqkhtCnZY3b33VB-bB6UxaBl6HsY_JgWesbUB8SPt-g==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 22:09:38 GMT
age: 37035
etag: "23753fe8af09ec8ffa10eed4d201a71833885c99"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7334
Md5:    498ab4412ed5cf977bc23e4e870894b0
Sha1:   23753fe8af09ec8ffa10eed4d201a71833885c99
Sha256: 036042656f15e42b4d1537c45f5b8e7190c70305fa9a69c1287c6739ad0b7122
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b6b798b-d396-454d-9d5b-17b47827e4ad.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 2942
x-amzn-requestid: ed26679f-cd56-477f-9914-f9afbcaaeea6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGeoGFYoAMFWgA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891df7-4ec6bebe21656d5026456994;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:34:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Fw6nrporwF27NW0-vXpaolW79nDXLF2RyS-lqhhp1osHt7q98VpI3g==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 21:49:56 GMT
age: 38217
etag: "9fc7ab3a4eb2d36fd6df7e0267a26a47627d1704"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   2942
Md5:    b47431190f34eccf0a6efb98e2a32b7d
Sha1:   9fc7ab3a4eb2d36fd6df7e0267a26a47627d1704
Sha256: 08d3b6be354cafb70c20e6865788cb375adbf88d47711651fe1a3b855094daf2
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F356e23df-cb76-452a-b299-da5410086837.png HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 15495
x-amzn-requestid: 977cdbce-3a9c-4006-a5a1-5c4c82bd4a94
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfHDIFxzIAMFzEw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891ee0-4b2cb3a16ca745537a8caf8c;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:38:40 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: KnOx0PJ8BR9OoAzXfuWk_Je_yawqzY4isC0hYTZRvJ74YiVs8jqyIQ==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 22:25:42 GMT
age: 36071
etag: "f799dfd89a4f5a452dc837b8616549f578fb4184"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   15495
Md5:    82ea44d6cb116fb1f5752ce9bb87e345
Sha1:   f799dfd89a4f5a452dc837b8616549f578fb4184
Sha256: e9087e7fce332289d67d4d5646d0233c2f2d871cc88dc1c51d5ea1e9f2fb5abd
                                        
                                            GET /track.php?domain=wwwhbo.com&toggle=browserjs&uid=MTY2OTk2OTYxMy4zMzY3OmNlZGZiYjNhMzFiYjY1NjZiOWNhMTFjYThiZjdhZGMwZjA2MWJhMDUwMzc3YTk4MDQwNDQ0ZTdkOWEwMjYxYmI6NjM4OWI2Y2Q1MjM0Mg%3D%3D HTTP/1.1 
Host: ww38.wwwhbo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ww38.wwwhbo.com/

search
                                         185.53.179.29
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Fri, 02 Dec 2022 08:26:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Custom-Track: browserjs
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
Access-Control-Allow-Origin: *
Content-Encoding: gzip

                                        
                                            POST /ls.php HTTP/1.1 
Host: ww38.wwwhbo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Content-Length: 2166
Origin: http://ww38.wwwhbo.com
Connection: keep-alive
Referer: http://ww38.wwwhbo.com/

search
                                         185.53.179.29
HTTP/1.1 201 Created
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Fri, 02 Dec 2022 08:26:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
X-Log-Success: 6389b6cee4f29c41352872d4
Charset: utf-8
Access-Control-Allow-Origin: http://ww38.wwwhbo.com
Access-Control-Allow-Methods: POST, OPTIONS
Access-Control-Max-Age: 86400
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_URy/5NHdtOnA0YqzccOLFDkfP9NV4CuwS41VmPbG/PC64IiV7JYsNBdBLb3lMRUio+I7aPJrLGMcGY7w5wKJYw==


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: ww38.wwwhbo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ww38.wwwhbo.com/

search
                                         185.53.179.29
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Server: nginx
Date: Fri, 02 Dec 2022 08:26:54 GMT
Content-Length: 0
Connection: keep-alive
Last-Modified: Tue, 12 May 2020 14:25:52 GMT
ETag: "5ebab1f0-0"
Accept-Ranges: bytes

                                        
                                            GET /track.php?click=7d905f613654ea9b70e255b7bdd643a73d525fe6&domain=wwwhbo.com&uid=MTY2OTk2OTYxMy4zMzY3OmNlZGZiYjNhMzFiYjY1NjZiOWNhMTFjYThiZjdhZGMwZjA2MWJhMDUwMzc3YTk4MDQwNDQ0ZTdkOWEwMjYxYmI6NjM4OWI2Y2Q1MjM0Mg%3D%3D&ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTF8fHx8fHw2Mzg5YjZjZDUyMzJifHx8MTY2OTk2OTYxMy42MTgzfDcxODUzNzQzMGM0MjM4MDQwN2M4NzU1NjgyODJjZDg4NjdmODcxYWR8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXwwY2U0MDFkZDFlNjFmYzY0NWMzNzhkZDMwNTI0MmYzOGUyOTIyNDBjfDB8ZHAtdGVhbWludGVybmV0MDlfM3BofDB8MA%3D%3D&kw=&search=&pcat=&rxid=&bucket=&clientID=&adtest=off HTTP/1.1 
Host: ww38.wwwhbo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ww38.wwwhbo.com/

search
                                         185.53.179.29
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Fri, 02 Dec 2022 08:26:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-View-Match: true
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
Access-Control-Allow-Origin: *
Content-Encoding: gzip

                                        
                                            GET /zcvisitor/137c4c71-721b-11ed-80a6-128fe381c22d/85aefdc2-9ed0-48aa-922d-60f9f9fc0f2d?campaignid=4fb4e190-e7f9-11ec-be3c-128084d1ce51 HTTP/1.1 
Host: dipaka-ead.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ww38.wwwhbo.com/
Upgrade-Insecure-Requests: 1

search
                                         3.208.247.235
HTTP/1.1 200
Content-Type: text/html;charset=UTF-8
                                        
Date: Fri, 02 Dec 2022 08:26:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Headers: X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag
Server: UCxaklfh


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   1100
Md5:    560fcd2e44790d23b5b3f2cecd73b3ce
Sha1:   a1ae7a4ba7381969af843d73dd3bb764200a81e0
Sha256: 0eee225e7030a92508a4f0abb89fbfeea2ba9a5ee268ced554b5ae39252c77d7
                                        
                                            GET /zcredirect?visitid=137c4c71-721b-11ed-80a6-128fe381c22d&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false&webdriverDetected=false HTTP/1.1 
Host: dipaka-ead.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dipaka-ead.com/zcvisitor/137c4c71-721b-11ed-80a6-128fe381c22d/85aefdc2-9ed0-48aa-922d-60f9f9fc0f2d?campaignid=4fb4e190-e7f9-11ec-be3c-128084d1ce51
Upgrade-Insecure-Requests: 1

search
                                         3.208.247.235
HTTP/1.1 200
Content-Type: text/html;charset=UTF-8
                                        
Date: Fri, 02 Dec 2022 08:26:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Headers: X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag
redirected: JS
Server: gNSrTiLw


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   364
Md5:    f3b0e4d5d73580712eaa98657cb28175
Sha1:   123c2b5285005203a05fb61f05b71a970865bd58
Sha256: 473d6d3058c12dab5dc50a2a0d020e6fcfec64e2454a175b2e562d14095de62e
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "7E4BA72F450A17FF9A8BDC43A50C9D4656142360062B55C40077E2F33EC76812"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13806
Expires: Fri, 02 Dec 2022 12:17:01 GMT
Date: Fri, 02 Dec 2022 08:26:55 GMT
Connection: keep-alive

                                        
                                            GET /s/r6?s=623619497&s2=lateritious-falcon&s3=juliet-ads-v5m57ljlqd HTTP/1.1 
Host: clever-redirect.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://dipaka-ead.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         78.46.197.88
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
referrer-policy: no-referrer
x-powered-by: PHP/7.4.27
set-cookie: 0399d87f8ea0a1978f81843903d3752e=e6e3e619926cedafc1ce4248d318bb786f1fed4ae1d27766828f28ef1d4a3a89a%3A2%3A%7Bi%3A0%3Bs%3A32%3A%220399d87f8ea0a1978f81843903d3752e%22%3Bi%3A1%3Bs%3A1%3A%221%22%3B%7D; expires=Sat, 03-Dec-2022 08:26:55 GMT; Max-Age=86400; path=/; HttpOnly
content-length: 353
date: Fri, 02 Dec 2022 08:26:55 GMT
server: Apache/2.4.52 (codeit) OpenSSL/1.1.1m PHP/7.4.27
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (353), with no line terminators
Size:   353
Md5:    40bcd219a49f9c53e306d1593c221034
Sha1:   c032e49a0b8fc2efe80fa368dffda47a2c175dc6
Sha256: 482c373c9815aca8b0e33d953e5358c6f3f49d6351063b6b41b778627bd1a548
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: dipaka-ead.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dipaka-ead.com/zcredirect?visitid=137c4c71-721b-11ed-80a6-128fe381c22d&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false&webdriverDetected=false

search
                                         3.208.247.235
HTTP/1.1 404
Content-Type: text/html;charset=utf-8
                                        
Date: Fri, 02 Dec 2022 08:26:55 GMT
Content-Length: 653
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Content-Language: en
Server: iCYMKFql


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (649), with no line terminators
Size:   653
Md5:    ba2732b1b2fa2626ffaa15f62f9e7d66
Sha1:   203d4e7fbb1d80449d6e4e1f3ae7a9bf8625debe
Sha256: 879861cb72fe9fbb476dab246021c4c83b4066327de2529e05ec54d3afb0a1c8
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "191744D9D3A1692F5E33CE9AA815984D00E0068CA22CD84328F9F075821EF8C7"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9655
Expires: Fri, 02 Dec 2022 11:07:50 GMT
Date: Fri, 02 Dec 2022 08:26:55 GMT
Connection: keep-alive

                                        
                                            GET /s/a?t=10&f=1&u=f4bdb01fc36e3f720c2a963a770625c6&m=tights.no&s1=623619497&s2=lateritious-falcon&s3=juliet-ads-v5m57ljlqd&s5=cf HTTP/1.1 
Host: lookandfind.me
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         5.9.110.29
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Fri, 02 Dec 2022 08:26:55 GMT
Server: Apache/2.4.37 (centos) OpenSSL/1.1.1k
X-Powered-By: PHP/8.1.10
Set-Cookie: 61fb1c4125590b11ca60b4331205be9d=2a42bd6de1706ca3eec263c0b8a89c27517509cb181e51e1d1e2f4a149c67573a%3A2%3A%7Bi%3A0%3Bs%3A32%3A%2261fb1c4125590b11ca60b4331205be9d%22%3Bi%3A1%3Bs%3A1%3A%221%22%3B%7D; expires=Sat, 03-Dec-2022 08:26:55 GMT; Max-Age=86400; path=/; HttpOnly
Referrer-Policy: strict-origin-when-cross-origin
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  HTML document text\012- HTML document, ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    e10266c32700d793984efc01db1b2928
Sha1:   6019fa82d2d7256d97b3a46754b8df7f1bfeec18
Sha256: c184e32def9f697b9e2727a3e7c5f943aff60ea39119737a88fed4ade199a75c
                                        
                                            GET /s/r?u=https%3A%2F%2Fapi.yadore.com%2Fv2%2Fr%3Fe%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%3D%3D%26i%3D_deY97i1812JiK_o%26placementId%3D951dfb9dfe64d40b75620308d6cce2a8&h=3dcc5d2215c753d4bf9a71669977f777 HTTP/1.1 
Host: lookandfind.me
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: 61fb1c4125590b11ca60b4331205be9d=2a42bd6de1706ca3eec263c0b8a89c27517509cb181e51e1d1e2f4a149c67573a%3A2%3A%7Bi%3A0%3Bs%3A32%3A%2261fb1c4125590b11ca60b4331205be9d%22%3Bi%3A1%3Bs%3A1%3A%221%22%3B%7D
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin

search
                                         5.9.110.29
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Fri, 02 Dec 2022 08:26:55 GMT
Server: Apache/2.4.37 (centos) OpenSSL/1.1.1k
X-Powered-By: PHP/8.1.10
Referrer-Policy: strict-origin-when-cross-origin
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (867), with no line terminators
Size:   867
Md5:    705eaae2e5d0104d045ef76a1056a18a
Sha1:   e8a52e45e6f226212162d3d4718532d33132e1f4
Sha256: 1a33ca03c96c0f2b2af244b530cde31e34cc2ec4bcc96be0be5357fe01e95a40
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "6436EA63E6F447C8DC2BD5ADA9D54D34D6EED6C3C63BE6CE47FDD81F234E8458"
Last-Modified: Thu, 01 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1562
Expires: Fri, 02 Dec 2022 08:52:57 GMT
Date: Fri, 02 Dec 2022 08:26:55 GMT
Connection: keep-alive

                                        
                                            GET /v2/r?e=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&i=_deY97i1812JiK_o&placementId=951dfb9dfe64d40b75620308d6cce2a8 HTTP/1.1 
Host: api.yadore.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lookandfind.me/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         88.99.112.2
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
                                        
date: Fri, 02 Dec 2022 08:26:55 GMT
location: https://no-go.kelkoogroup.net/ctl/go/offersearchGo?.ts=1669945508833&.sig=ErcrOb3x3_8US9tVUgsbr1t2PGs-&affiliationId=96965886&comId=100507196&country=no&offerId=9a3142ee4598e70a605033e9b46b06c1&service=37&tokenId=eef84b7f-8e19-45d1-adee-7c88767dc72d&wait=true&addedParams=true&custom1=fe5405024a1eb2e8070559fec6862781b8079692ae59b7d88ac0eed8842c7370&custom2=SRdytlITOR16&custom3=false
server: nginx
x-powered-by: PHP/8.0.25
content-length: 0
X-Firefox-Spdy: h2

                                        
                                            POST / HTTP/1.1 
Host: status.thawte.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 6013
Cache-Control: max-age=125040
Date: Fri, 02 Dec 2022 08:26:56 GMT
Etag: "6388e4c3-1d7"
Expires: Sat, 03 Dec 2022 19:10:56 GMT
Last-Modified: Thu, 01 Dec 2022 17:30:43 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /ctl/go/offersearchGo?.ts=1669945508833&.sig=ErcrOb3x3_8US9tVUgsbr1t2PGs-&affiliationId=96965886&comId=100507196&country=no&offerId=9a3142ee4598e70a605033e9b46b06c1&service=37&tokenId=eef84b7f-8e19-45d1-adee-7c88767dc72d&wait=true&addedParams=true&custom1=fe5405024a1eb2e8070559fec6862781b8079692ae59b7d88ac0eed8842c7370&custom2=SRdytlITOR16&custom3=false HTTP/1.1 
Host: no-go.kelkoogroup.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lookandfind.me/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         95.211.116.27
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Fri, 02 Dec 2022 08:26:56 GMT
leadId: dc1-kls-prod-ls-silo.prod.dc1.kelkoo.net_1669969616165_460373
clickId: 107698147_1669969616160_10112830
country: no
Accept-CH: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory
X-DataDome: protected
Request-Time: PT0.015075S
X-Robots-Tag: noindex,nofollow
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: ALLOWALL
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: master-only
Content-Length: 32805
Set-Cookie: datadome=4G38mvb-AiWqb~Ortg9APLd1zvJOO4Fu0DWxaOtC3othO3oX1cnaGu4IQYchW7a3LFa01KfcifbF~cDxCJnl-6~FYf9ggK~m6xWvGXuvcnHQAaQqmmlVH_nkfKa2c5~T; Max-Age=31536000; Expires=Sat, 02 Dec 2023 08:26:56 GMT; SameSite=Lax; Path=/; Domain=.kelkoogroup.net; Secure kelkooID=a4c6293-184d1f21d20-305fa4; Max-Age=31536000; Expires=Sat, 02 Dec 2023 08:26:56 GMT; SameSite=None; Path=/; Domain=kelkoogroup.net; Secure; HTTPOnly
P3P: CP="Anything"
ApacheTracking: localhost
Keep-Alive: timeout=40, max=64
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (13002)
Size:   32805
Md5:    3887be636c78fe4cd1c8f8801f2844a1
Sha1:   78b83c65e3b838f3fe2a602214f0dcbf2dfee399
Sha256: 153987263669f50dce1d02421eace0939e347141ce5476b60c597567d7b22023
                                        
                                            GET /assets/images/p.png?country=no&k=612f7a9541cd6ea61eb554c0e4cff43705260665475808a707dc4bf57eb987e735c41c784ae5fe996989528e7468c7fb092bb107f56c611c71d63f24f6254026d3d000a608d83d511accc0f50c231bdab16f878a00e167b9f3c8061ebec1a119658f4d1f72f40b2ddf45abee6bec6d022f476bcc52876b0ba20aa615cbf95baae0c96fc77945ac0443c85f93d072be8e65c62e666264456ca8f8a60789d1b131ddefd712d5f6d8b378dd600d9facacc83ee8f2dabd24558a015b0784864a52ea82dc54d63fa9d5c27b3283174d0bd30c40e55d26a7759e950f605d4f5d8f46ad4656bb3e5f7cee5cbbae7f48bf7185a67c7284a0c3f41995271ada0ef65a7a335e97e312200d0edd046f54a4d6324b17526b01a50a5db3f1&leadId=dc1-kls-prod-ls-silo.prod.dc1.kelkoo.net_1669969616165_460373&clickId=107698147_1669969616160_10112830 HTTP/1.1 
Host: no-go.kelkoogroup.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no-go.kelkoogroup.net/ctl/go/offersearchGo?.ts=1669945508833&.sig=ErcrOb3x3_8US9tVUgsbr1t2PGs-&affiliationId=96965886&comId=100507196&country=no&offerId=9a3142ee4598e70a605033e9b46b06c1&service=37&tokenId=eef84b7f-8e19-45d1-adee-7c88767dc72d&wait=true&addedParams=true&custom1=fe5405024a1eb2e8070559fec6862781b8079692ae59b7d88ac0eed8842c7370&custom2=SRdytlITOR16&custom3=false
Connection: keep-alive
Cookie: datadome=4G38mvb-AiWqb~Ortg9APLd1zvJOO4Fu0DWxaOtC3othO3oX1cnaGu4IQYchW7a3LFa01KfcifbF~cDxCJnl-6~FYf9ggK~m6xWvGXuvcnHQAaQqmmlVH_nkfKa2c5~T; kelkooID=a4c6293-184d1f21d20-305fa4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         95.211.116.27
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Fri, 02 Dec 2022 08:26:56 GMT
Request-Time: PT0.001539S
X-Robots-Tag: noindex,nofollow
Cache-Control: private, must-revalidate
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: ALLOWALL
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: master-only
Content-Length: 68
P3P: CP="Anything"
ApacheTracking: localhost
Keep-Alive: timeout=40, max=91
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced\012- data
Size:   68
Md5:    91e42db1c66c0b276abf6234dc50b2eb
Sha1:   c1986af3c26609b8b7d8933f99c51c1a89e9ea6b
Sha256: 63ef318d96b5d0d0ceba6e04a4e622b1158335cdc67c49e27839132c6f655058
                                        
                                            POST /fp?country=no&k=612f7a9541cd6ea61eb554c0e4cff43705260665475808a707dc4bf57eb987e735c41c784ae5fe996989528e7468c7fb092bb107f56c611c71d63f24f6254026d3d000a608d83d511accc0f50c231bdab16f878a00e167b9f3c8061ebec1a119658f4d1f72f40b2ddf45abee6bec6d022f476bcc52876b0ba20aa615cbf95baae0c96fc77945ac0443c85f93d072be8e65c62e666264456ca8f8a60789d1b131ddefd712d5f6d8b378dd600d9facacc83ee8f2dabd24558a015b0784864a52ea82dc54d63fa9d5c27b3283174d0bd30c40e55d26a7759e950f605d4f5d8f46ad4656bb3e5f7cee5cbbae7f48bf7185a67c7284a0c3f41995271ada0ef65a7a335e97e312200d0edd046f54a4d6324b17526b01a50a5db3f1&leadId=dc1-kls-prod-ls-silo.prod.dc1.kelkoo.net_1669969616165_460373&clickId=107698147_1669969616160_10112830 HTTP/1.1 
Host: no-go.kelkoogroup.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no-go.kelkoogroup.net/ctl/go/offersearchGo?.ts=1669945508833&.sig=ErcrOb3x3_8US9tVUgsbr1t2PGs-&affiliationId=96965886&comId=100507196&country=no&offerId=9a3142ee4598e70a605033e9b46b06c1&service=37&tokenId=eef84b7f-8e19-45d1-adee-7c88767dc72d&wait=true&addedParams=true&custom1=fe5405024a1eb2e8070559fec6862781b8079692ae59b7d88ac0eed8842c7370&custom2=SRdytlITOR16&custom3=false
Content-Type: text/plain;charset=utf-8
Content-Length: 536
Origin: https://no-go.kelkoogroup.net
Connection: keep-alive
Cookie: datadome=4G38mvb-AiWqb~Ortg9APLd1zvJOO4Fu0DWxaOtC3othO3oX1cnaGu4IQYchW7a3LFa01KfcifbF~cDxCJnl-6~FYf9ggK~m6xWvGXuvcnHQAaQqmmlVH_nkfKa2c5~T; kelkooID=a4c6293-184d1f21d20-305fa4; _ga=GA1.2.898908771.1669969614; _gid=GA1.2.1129149611.1669969614
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         95.211.116.27
HTTP/1.1 200 OK
Content-Type: text/plain; charset=UTF-8
                                        
Date: Fri, 02 Dec 2022 08:26:56 GMT
Request-Time: PT0.004735S
X-Robots-Tag: noindex,nofollow
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: ALLOWALL
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: master-only
Content-Length: 0
P3P: CP="Anything"
ApacheTracking: localhost
Keep-Alive: timeout=40, max=81
Connection: Keep-Alive

                                        
                                            GET /favicon.ico HTTP/1.1 
Host: no-go.kelkoogroup.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no-go.kelkoogroup.net/ctl/go/offersearchGo?.ts=1669945508833&.sig=ErcrOb3x3_8US9tVUgsbr1t2PGs-&affiliationId=96965886&comId=100507196&country=no&offerId=9a3142ee4598e70a605033e9b46b06c1&service=37&tokenId=eef84b7f-8e19-45d1-adee-7c88767dc72d&wait=true&addedParams=true&custom1=fe5405024a1eb2e8070559fec6862781b8079692ae59b7d88ac0eed8842c7370&custom2=SRdytlITOR16&custom3=false
Connection: keep-alive
Cookie: datadome=4G38mvb-AiWqb~Ortg9APLd1zvJOO4Fu0DWxaOtC3othO3oX1cnaGu4IQYchW7a3LFa01KfcifbF~cDxCJnl-6~FYf9ggK~m6xWvGXuvcnHQAaQqmmlVH_nkfKa2c5~T; kelkooID=a4c6293-184d1f21d20-305fa4; _ga=GA1.2.898908771.1669969614; _gid=GA1.2.1129149611.1669969614
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         95.211.116.27
HTTP/1.0 403 Forbidden
                                        
Server: BigIP
Connection: Keep-Alive
Content-Length: 0

                                        
                                            GET /redirect?country=no&k=612f7a9541cd6ea61eb554c0e4cff43705260665475808a707dc4bf57eb987e735c41c784ae5fe996989528e7468c7fb092bb107f56c611c71d63f24f6254026d3d000a608d83d511accc0f50c231bdab16f878a00e167b9f3c8061ebec1a119658f4d1f72f40b2ddf45abee6bec6d022f476bcc52876b0ba20aa615cbf95baae0c96fc77945ac0443c85f93d072be8e65c62e666264456ca8f8a60789d1b131ddefd712d5f6d8b378dd600d9facacc83ee8f2dabd24558a015b0784864a52ea82dc54d63fa9d5c27b3283174d0bd30c40e55d26a7759e950f605d4f5d8f46ad4656bb3e5f7cee5cbbae7f48bf7185a67c7284a0c3f41995271ada0ef65a7a335e97e312200d0edd046f54a4d6324b17526b01a50a5db3f1&leadId=dc1-kls-prod-ls-silo.prod.dc1.kelkoo.net_1669969616165_460373&clickId=107698147_1669969616160_10112830&url=https%3A%2F%2Fwww.tights.no%2Fbutikk%2Flevity-match-ballpocket-short-tights-black%2F%3Fkk%3Da4c6293-184d1f21d20-305fa4%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DLEVITY%2BMatch%2BBallpocket%2BShort%2BTights%2BBla HTTP/1.1 
Host: no-go.kelkoogroup.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no-go.kelkoogroup.net/ctl/go/offersearchGo?.ts=1669945508833&.sig=ErcrOb3x3_8US9tVUgsbr1t2PGs-&affiliationId=96965886&comId=100507196&country=no&offerId=9a3142ee4598e70a605033e9b46b06c1&service=37&tokenId=eef84b7f-8e19-45d1-adee-7c88767dc72d&wait=true&addedParams=true&custom1=fe5405024a1eb2e8070559fec6862781b8079692ae59b7d88ac0eed8842c7370&custom2=SRdytlITOR16&custom3=false
Connection: keep-alive
Cookie: datadome=4G38mvb-AiWqb~Ortg9APLd1zvJOO4Fu0DWxaOtC3othO3oX1cnaGu4IQYchW7a3LFa01KfcifbF~cDxCJnl-6~FYf9ggK~m6xWvGXuvcnHQAaQqmmlVH_nkfKa2c5~T; kelkooID=a4c6293-184d1f21d20-305fa4; _ga=GA1.2.898908771.1669969614; _gid=GA1.2.1129149611.1669969614
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin

search
                                         95.211.116.27
HTTP/1.1 303 See Other
Content-Type: text/plain
                                        
Date: Fri, 02 Dec 2022 08:26:56 GMT
leadId: dc1-kls-prod-ls-silo.prod.dc1.kelkoo.net_1669969616165_460373
clickId: 107698147_1669969616160_10112830
country: no
Location: https://www.tights.no/butikk/levity-match-ballpocket-short-tights-black/?kk=a4c6293-184d1f21d20-305fa4&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=LEVITY+Match+Ballpocket+Short+Tights+Bla
Accept-CH: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory
X-DataDome: protected
Request-Time: PT0.014153S
X-Robots-Tag: noindex,nofollow
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: ALLOWALL
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: master-only
Content-Length: 0
Set-Cookie: datadome=1Mo5yM7qNybeU66fBR0TKz18AUxL1mE3~QKfqK8KjPDAZeyZmMs6lwaXtldHtBJSm8zHjrfhcMM6_btRWhWr-vOz6j1U3o9ZqLFrDP8kr8a626nOR9V_RZepHVhx5fZJ; Max-Age=31536000; Expires=Sat, 02 Dec 2023 08:26:56 GMT; SameSite=Lax; Path=/; Domain=.kelkoogroup.net; Secure
P3P: CP="Anything"
ApacheTracking: localhost
Keep-Alive: timeout=40, max=92
Connection: Keep-Alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         104.18.32.68
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 02 Dec 2022 08:26:56 GMT
Content-Length: 472
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 20:21:10 GMT
Expires: Thu, 08 Dec 2022 20:21:09 GMT
Etag: "4c24b7b4487600cd66cf90a5b71454d3a4c7a3f3"
Cache-Control: max-age=560652,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7732ae370da10afa-OSL

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         216.58.211.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 02 Dec 2022 08:26:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /collect?v=1&_v=j96&t=pageview&_s=1&dl=https%3A%2F%2Fno-go.kelkoogroup.net%2Fctl%2Fgo%2FoffersearchGo%3F.ts%3D1669945508833%26.sig%3DErcrOb3x3_8US9tVUgsbr1t2PGs-%26affiliationId%3D96965886%26comId%3D100507196%26country%3Dno%26offerId%3D9a3142ee4598e70a605033e9b46b06c1%26service%3D37%26tokenId%3Deef84b7f-8e19-45d1-adee-7c88767dc72d%26wait%3Dtrue%26addedParams%3Dtrue%26custom1%3Dfe5405024a1eb2e8070559fec6862781b8079692ae59b7d88ac0eed8842c7370%26custom2%3DSRdytlITOR16%26custom3%3Dfalse&dr=https%3A%2F%2Flookandfind.me%2F&dp=%2F96965886%7C100507196%7C&ul=en-us&de=UTF-8&dt=Du%20sendes%20videre%20til%20Tights.no&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=QACAAAABAAAAAC~&cid=898908771.1669969614&tid=UA-168544891-6&_gid=1129149611.1669969614&_r=1&cd1=96965886&cd2=dc1-kls-prod-ls-silo.prod.dc1.kelkoo.net_1669969616165_460373&cd3=100507196&cd4=a4c6293-184d1f21d20-305fa4&cd5=&cd6=96965886%7C100507196%7C&z=1605267271 HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://no-go.kelkoogroup.net
Connection: keep-alive
Referer: https://no-go.kelkoogroup.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0

search
                                         142.250.74.14
HTTP/2 200 OK
content-type: image/gif
                                        
access-control-allow-origin: https://no-go.kelkoogroup.net
date: Fri, 02 Dec 2022 08:26:56 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
x-content-type-options: nosniff
access-control-allow-credentials: true
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 35
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         216.58.211.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 02 Dec 2022 08:26:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/uploads/sites/7/2022/10/sitewide-skoguide-desktop.jpg HTTP/1.1 
Host: www.tights.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.tights.no/butikk/levity-match-ballpocket-short-tights-black/?kk=a4c6293-184d1f21d20-305fa4&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=LEVITY+Match+Ballpocket+Short+Tights+Bla
Cookie: wordpress_google_apps_login=2c15ac3e74c3bb632db7c44a6d06f997; nhg-progress-sum=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.116.4.22
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
date: Fri, 02 Dec 2022 08:26:56 GMT
content-length: 29170
last-modified: Mon, 24 Oct 2022 13:04:53 GMT
etag: "63568d75-71f2"
expires: Sat, 02 Dec 2023 08:26:56 GMT
cache-control: max-age=31536000
x_avif_sp_miss: /home/wpmu/public_html/wp-content/uploads/sites/7/2022/10/sitewide-skoguide-desktop.avif
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, progressive, precision 8, 1920x80, components 3\012- data
Size:   29170
Md5:    1d4d1576b7dc2cac89304c66f1459650
Sha1:   0a3c970066e5761baf79ac20f0df4fe9deeb2f13
Sha256: 53773e028f4d3b4a6b361f18916c6629f97cd6c260367705e6a9283606f6572c
                                        
                                            GET /wp-content/uploads/sites/7/2022/10/sitewide-skoguide-mobile-2.jpg HTTP/1.1 
Host: www.tights.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.tights.no/butikk/levity-match-ballpocket-short-tights-black/?kk=a4c6293-184d1f21d20-305fa4&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=LEVITY+Match+Ballpocket+Short+Tights+Bla
Cookie: wordpress_google_apps_login=2c15ac3e74c3bb632db7c44a6d06f997; nhg-progress-sum=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.116.4.22
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
date: Fri, 02 Dec 2022 08:26:56 GMT
content-length: 35133
last-modified: Mon, 24 Oct 2022 13:05:00 GMT
etag: "63568d7c-893d"
expires: Sat, 02 Dec 2023 08:26:56 GMT
cache-control: max-age=31536000
x_avif_sp_miss: /home/wpmu/public_html/wp-content/uploads/sites/7/2022/10/sitewide-skoguide-mobile-2.avif
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, progressive, precision 8, 1200x120, components 3\012- data
Size:   35133
Md5:    08ce87d2c251d747d77fa3ae2a94c150
Sha1:   718f7f6f607145f81fedff08313238d63b575659
Sha256: 4110cf48eb71cb140404485469dcfbca5f9717ce2560da0394c362a7b457092c
                                        
                                            GET /wp-content/uploads/sites/7/2021/08/9102222006431-88-768x960.jpg HTTP/1.1 
Host: www.tights.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.tights.no/butikk/levity-match-ballpocket-short-tights-black/?kk=a4c6293-184d1f21d20-305fa4&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=LEVITY+Match+Ballpocket+Short+Tights+Bla
Cookie: wordpress_google_apps_login=2c15ac3e74c3bb632db7c44a6d06f997; nhg-progress-sum=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.116.4.22
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
date: Fri, 02 Dec 2022 08:26:56 GMT
content-length: 127095
last-modified: Wed, 02 Feb 2022 13:31:10 GMT
etag: "61fa879e-1f077"
expires: Sat, 02 Dec 2023 08:26:56 GMT
cache-control: max-age=31536000
x_avif_sp_miss: /home/wpmu/public_html/wp-content/uploads/sites/7/2021/08/9102222006431-88-768x960.avif
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=8, manufacturer=Canon, model=Canon EOS R6, xresolution=130, yresolution=138, resolutionunit=2, software=Capture One 22 Macintosh, GPS-Data], baseline, precision 8, 768x960, components 3\012- data
Size:   127095
Md5:    4d11dccb9eb46f659d121560cc1248bb
Sha1:   6efe988bea591305fadca8d376109eebb96e1723
Sha256: b282a82a3c68fb47652c60c4b088d5268a4cf9f7a6c3ceb6f24fb2caf6494d9e
                                        
                                            GET /wp-content/uploads/sites/7/2021/08/9102222006431-86-768x960.jpg HTTP/1.1 
Host: www.tights.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.tights.no/butikk/levity-match-ballpocket-short-tights-black/?kk=a4c6293-184d1f21d20-305fa4&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=LEVITY+Match+Ballpocket+Short+Tights+Bla
Cookie: wordpress_google_apps_login=2c15ac3e74c3bb632db7c44a6d06f997; nhg-progress-sum=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.116.4.22
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
date: Fri, 02 Dec 2022 08:26:56 GMT
content-length: 120631
last-modified: Wed, 02 Feb 2022 13:30:32 GMT
etag: "61fa8778-1d737"
expires: Sat, 02 Dec 2023 08:26:56 GMT
cache-control: max-age=31536000
x_avif_sp_miss: /home/wpmu/public_html/wp-content/uploads/sites/7/2021/08/9102222006431-86-768x960.avif
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=8, manufacturer=Canon, model=Canon EOS R6, xresolution=130, yresolution=138, resolutionunit=2, software=Capture One 22 Macintosh, GPS-Data], baseline, precision 8, 768x960, components 3\012- data
Size:   120631
Md5:    9a3abf4b19d95516a18f19ce1ce0b6bb
Sha1:   61d193a7475cd801f8e353373f6d21bbc5b05315
Sha256: 9e2b04efcd43cb3c020e837c05dd39691c90e571a5487b28e8d757eeb358f969
                                        
                                            GET /wp-content/uploads/sites/7/2021/08/9102222006431-87-768x960.jpg HTTP/1.1 
Host: www.tights.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.tights.no/butikk/levity-match-ballpocket-short-tights-black/?kk=a4c6293-184d1f21d20-305fa4&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=LEVITY+Match+Ballpocket+Short+Tights+Bla
Cookie: wordpress_google_apps_login=2c15ac3e74c3bb632db7c44a6d06f997; nhg-progress-sum=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.116.4.22
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
date: Fri, 02 Dec 2022 08:26:56 GMT
content-length: 109600
last-modified: Wed, 02 Feb 2022 13:30:51 GMT
etag: "61fa878b-1ac20"
expires: Sat, 02 Dec 2023 08:26:56 GMT
cache-control: max-age=31536000
x_avif_sp_miss: /home/wpmu/public_html/wp-content/uploads/sites/7/2021/08/9102222006431-87-768x960.avif
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=8, manufacturer=Canon, model=Canon EOS R6, xresolution=130, yresolution=138, resolutionunit=2, software=Capture One 22 Macintosh, GPS-Data], baseline, precision 8, 768x960, components 3\012- data
Size:   109600
Md5:    2ae4bbcafae40104ff955866a2836dc8
Sha1:   e4f1d01fe281ad39e4c790445ea9f7df82b77d93
Sha256: 21b71cd142612081d4a574326205b3ae8f1bc801c6830763bdcf2530534b5ba1
                                        
                                            GET /wp-content/uploads/sites/7/2021/08/9102222006431-89-768x960.jpg HTTP/1.1 
Host: www.tights.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.tights.no/butikk/levity-match-ballpocket-short-tights-black/?kk=a4c6293-184d1f21d20-305fa4&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=LEVITY+Match+Ballpocket+Short+Tights+Bla
Cookie: wordpress_google_apps_login=2c15ac3e74c3bb632db7c44a6d06f997; nhg-progress-sum=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.116.4.22
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
date: Fri, 02 Dec 2022 08:26:56 GMT
content-length: 109023
last-modified: Wed, 02 Feb 2022 13:31:29 GMT
etag: "61fa87b1-1a9df"
expires: Sat, 02 Dec 2023 08:26:56 GMT
cache-control: max-age=31536000
x_avif_sp_miss: /home/wpmu/public_html/wp-content/uploads/sites/7/2021/08/9102222006431-89-768x960.avif
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=8, manufacturer=Canon, model=Canon EOS R6, xresolution=130, yresolution=138, resolutionunit=2, software=Capture One 22 Macintosh, GPS-Data], baseline, precision 8, 768x960, components 3\012- data
Size:   109023
Md5:    8c34201dc77d19b30391c09b46c4abad
Sha1:   6daff4e8954193d57c6a6d636d017c7e6c59d8c1
Sha256: effb3f4e648f1444fbc505340c1f43e91243b8e195452769f5ac4846cbe42ead
                                        
                                            GET /wp-content/uploads/sites/7/2021/08/9102222006431-91-768x960.jpg HTTP/1.1 
Host: www.tights.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.tights.no/butikk/levity-match-ballpocket-short-tights-black/?kk=a4c6293-184d1f21d20-305fa4&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=LEVITY+Match+Ballpocket+Short+Tights+Bla
Cookie: wordpress_google_apps_login=2c15ac3e74c3bb632db7c44a6d06f997; nhg-progress-sum=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.116.4.22
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
date: Fri, 02 Dec 2022 08:26:56 GMT
content-length: 126107
last-modified: Wed, 02 Feb 2022 13:31:52 GMT
etag: "61fa87c8-1ec9b"
expires: Sat, 02 Dec 2023 08:26:56 GMT
cache-control: max-age=31536000
x_avif_sp_miss: /home/wpmu/public_html/wp-content/uploads/sites/7/2021/08/9102222006431-91-768x960.avif
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=8, manufacturer=Canon, model=Canon EOS R6, xresolution=130, yresolution=138, resolutionunit=2, software=Capture One 22 Macintosh, GPS-Data], baseline, precision 8, 768x960, components 3\012- data
Size:   126107
Md5:    27fb4abc696d33625f9b2611418ed2cb
Sha1:   11f17a69a804d97bfb2e05b3d3d839987b2d7081
Sha256: 3887e0b75e4aefcda979ea0fc7bccd729d592494cab119bc4451d04e753b9435
                                        
                                            GET /wp-content/uploads/sites/7/2021/08/9102222006431-92-768x960.jpg HTTP/1.1 
Host: www.tights.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.tights.no/butikk/levity-match-ballpocket-short-tights-black/?kk=a4c6293-184d1f21d20-305fa4&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=LEVITY+Match+Ballpocket+Short+Tights+Bla
Cookie: wordpress_google_apps_login=2c15ac3e74c3bb632db7c44a6d06f997; nhg-progress-sum=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.116.4.22
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
date: Fri, 02 Dec 2022 08:26:56 GMT
content-length: 115541
last-modified: Wed, 02 Feb 2022 13:32:10 GMT
etag: "61fa87da-1c355"
expires: Sat, 02 Dec 2023 08:26:56 GMT
cache-control: max-age=31536000
x_avif_sp_miss: /home/wpmu/public_html/wp-content/uploads/sites/7/2021/08/9102222006431-92-768x960.avif
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=8, manufacturer=Canon, model=Canon EOS R6, xresolution=130, yresolution=138, resolutionunit=2, software=Capture One 22 Macintosh, GPS-Data], baseline, precision 8, 768x960, components 3\012- data
Size:   115541
Md5:    ec3d4a2e62645e0aa9bc93ea3f63abe8
Sha1:   dc8dd3f65ea1afe7b80c64bc0c78fbb565781987
Sha256: cc8ca6a273f052497916c4791d2688dc47dff4214d7cf3be28b59d3042fa059a
                                        
                                            GET /wp-content/uploads/sites/7/2022/04/9102222006431-2-768x960.jpg HTTP/1.1 
Host: www.tights.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.tights.no/butikk/levity-match-ballpocket-short-tights-black/?kk=a4c6293-184d1f21d20-305fa4&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=LEVITY+Match+Ballpocket+Short+Tights+Bla
Cookie: wordpress_google_apps_login=2c15ac3e74c3bb632db7c44a6d06f997; nhg-progress-sum=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.116.4.22
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
date: Fri, 02 Dec 2022 08:26:56 GMT
content-length: 166454
last-modified: Thu, 01 Sep 2022 09:23:58 GMT
etag: "63107a2e-28a36"
expires: Sat, 02 Dec 2023 08:26:56 GMT
cache-control: max-age=31536000
x_avif_sp_miss: /home/wpmu/public_html/wp-content/uploads/sites/7/2022/04/9102222006431-2-768x960.avif
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=8, manufacturer=Canon, model=Canon EOS R6, xresolution=130, yresolution=138, resolutionunit=2, software=Capture One 15 Macintosh, GPS-Data], baseline, precision 8, 768x960, components 3\012- data
Size:   166454
Md5:    ff3b2b093c7dbfa531c267e121ff925b
Sha1:   9b4d4794f8c76bdb23b3da8f9f6c241160efa4ca
Sha256: c5713cd18786a7ce6fb267b38b6ddd7470c11790425ed5c219071da593748608
                                        
                                            GET /wp-content/uploads/sites/7/2022/09/tightsclub.logo_.circle-hvit-bakgrunn.png HTTP/1.1 
Host: www.tights.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.tights.no/butikk/levity-match-ballpocket-short-tights-black/?kk=a4c6293-184d1f21d20-305fa4&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=LEVITY+Match+Ballpocket+Short+Tights+Bla
Cookie: wordpress_google_apps_login=2c15ac3e74c3bb632db7c44a6d06f997; nhg-progress-sum=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.116.4.22
HTTP/2 200 OK
content-type: image/png
                                        
server: nginx
date: Fri, 02 Dec 2022 08:26:57 GMT
content-length: 27221
last-modified: Mon, 12 Sep 2022 07:14:26 GMT
etag: "631edc52-6a55"
expires: Sat, 02 Dec 2023 08:26:57 GMT
cache-control: max-age=31536000
x_avif_sp_miss: /home/wpmu/public_html/wp-content/uploads/sites/7/2022/09/tightsclub.logo_.circle-hvit-bakgrunn.avif
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 634 x 634, 8-bit/color RGBA, non-interlaced\012- data
Size:   27221
Md5:    3fac6e34e87a42f25204cccf9d022c56
Sha1:   2aff3780aad9860bef2a7a03b6907e6967a2c633
Sha256: 54c43316183c401b7b475428cbe0a6323bbfd5048ab888267200e6f05583f77e
                                        
                                            GET /wp-content/uploads/sites/7/2022/05/Levity.Logo_.2022.png HTTP/1.1 
Host: www.tights.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.tights.no/butikk/levity-match-ballpocket-short-tights-black/?kk=a4c6293-184d1f21d20-305fa4&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=LEVITY+Match+Ballpocket+Short+Tights+Bla
Cookie: wordpress_google_apps_login=2c15ac3e74c3bb632db7c44a6d06f997; nhg-progress-sum=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.116.4.22
HTTP/2 200 OK
content-type: image/png
                                        
server: nginx
date: Fri, 02 Dec 2022 08:26:57 GMT
content-length: 23933
last-modified: Wed, 18 May 2022 09:58:11 GMT
etag: "6284c333-5d7d"
expires: Sat, 02 Dec 2023 08:26:57 GMT
cache-control: max-age=31536000
x_avif_sp_miss: /home/wpmu/public_html/wp-content/uploads/sites/7/2022/05/Levity.Logo_.2022.avif
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 2050 x 402, 8-bit/color RGBA, non-interlaced\012- data
Size:   23933
Md5:    19cdcfb7f02013ae538034d67d061018
Sha1:   476f47010bf2bbd659f6228e630a5626bd75c332
Sha256: 07a18429c1d3c26ca3656f844b2264104bf1aef6b3f2cb18c31f434d2f0e6325
                                        
                                            GET /wp-content/uploads/sites/7/2022/11/banner-sitewide-400x500-1.jpg HTTP/1.1 
Host: www.tights.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.tights.no/butikk/levity-match-ballpocket-short-tights-black/?kk=a4c6293-184d1f21d20-305fa4&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=LEVITY+Match+Ballpocket+Short+Tights+Bla
Cookie: wordpress_google_apps_login=2c15ac3e74c3bb632db7c44a6d06f997; nhg-progress-sum=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.116.4.22
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
date: Fri, 02 Dec 2022 08:26:57 GMT
content-length: 21844
last-modified: Mon, 07 Nov 2022 13:36:12 GMT
etag: "636909cc-5554"
expires: Sat, 02 Dec 2023 08:26:57 GMT
cache-control: max-age=31536000
x_avif_sp_miss: /home/wpmu/public_html/wp-content/uploads/sites/7/2022/11/banner-sitewide-400x500-1.avif
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, progressive, precision 8, 400x500, components 3\012- data
Size:   21844
Md5:    7e3b76afdfab9e9e2dd79de928506b21
Sha1:   83ff20d9f6e0b12f99d6c40678590832424de99f
Sha256: 10a25047e6e535724321b3511b2d30954e92100819e3db3c381a66987236f5ab
                                        
                                            GET /wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-style.css?ver=1649151002 HTTP/1.1 
Host: www.tights.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.tights.no/butikk/levity-match-ballpocket-short-tights-black/?kk=a4c6293-184d1f21d20-305fa4&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=LEVITY+Match+Ballpocket+Short+Tights+Bla
Cookie: wordpress_google_apps_login=2c15ac3e74c3bb632db7c44a6d06f997; nhg-progress-sum=0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.116.4.22
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Fri, 02 Dec 2022 08:26:56 GMT
last-modified: Tue, 05 Apr 2022 09:30:02 GMT
vary: Accept-Encoding
etag: W/"624c0c1a-3059d"
expires: Sat, 02 Dec 2023 08:26:56 GMT
cache-control: max-age=31536000
x-rocket-nginx-bypass: No
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   116307
Md5:    d098b3962b13931521fa27a3b1aace09
Sha1:   0149c7c81afe293f279e5b7c7a30683f960d4a2a
Sha256: 7eeafeef50d1b53ee5243bf11f3c4deff749da78f324f74686046f5000ed1339
                                        
                                            GET /wp-content/plugins/nhg-limited-special-price-offer/assets/css/front-product.min.css?ver=1667995720 HTTP/1.1 
Host: www.tights.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.tights.no/butikk/levity-match-ballpocket-short-tights-black/?kk=a4c6293-184d1f21d20-305fa4&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=LEVITY+Match+Ballpocket+Short+Tights+Bla
Cookie: wordpress_google_apps_login=2c15ac3e74c3bb632db7c44a6d06f997; nhg-progress-sum=0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.116.4.22
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Fri, 02 Dec 2022 08:26:56 GMT
last-modified: Wed, 09 Nov 2022 12:08:40 GMT
vary: Accept-Encoding
etag: W/"636b9848-13f"
expires: Sat, 02 Dec 2023 08:26:56 GMT
cache-control: max-age=31536000
x-rocket-nginx-bypass: No
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   88739
Md5:    35a53b11257aa80a34da767422faf060
Sha1:   ba60c926ec8cc5a7dbd01e7a4d83f10556d3cd51
Sha256: 7762508c23bf26a9d552d759d18e086f4d4cf23af0254a17df2ac375dab67608
                                        
                                            GET /wp-content/plugins/nhg-wishlist/assets/css/styles.css?ver=1669204775 HTTP/1.1 
Host: www.tights.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.tights.no/butikk/levity-match-ballpocket-short-tights-black/?kk=a4c6293-184d1f21d20-305fa4&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=LEVITY+Match+Ballpocket+Short+Tights+Bla
Cookie: wordpress_google_apps_login=2c15ac3e74c3bb632db7c44a6d06f997; nhg-progress-sum=0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.116.4.22
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Fri, 02 Dec 2022 08:26:56 GMT
last-modified: Wed, 23 Nov 2022 11:59:35 GMT
vary: Accept-Encoding
etag: W/"637e0b27-5707"
expires: Sat, 02 Dec 2023 08:26:56 GMT
cache-control: max-age=31536000
x-rocket-nginx-bypass: No
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   104728
Md5:    b7a684c7bc272ef537200d68a68ecffd
Sha1:   a0c63cba62edb442eea04d37782ad171227fda1a
Sha256: 231819634489b860b3f6544e21b1c5215f8ed5dfed1b2060f71caa27d568059d
                                        
                                            GET /wp-content/uploads/sites/7/2022/01/flex-tilbeh%C3%B8r.jpg HTTP/1.1 
Host: www.tights.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.tights.no/butikk/levity-match-ballpocket-short-tights-black/?kk=a4c6293-184d1f21d20-305fa4&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=LEVITY+Match+Ballpocket+Short+Tights+Bla
Cookie: wordpress_google_apps_login=2c15ac3e74c3bb632db7c44a6d06f997; nhg-progress-sum=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.116.4.22
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
date: Fri, 02 Dec 2022 08:26:57 GMT
content-length: 140764
last-modified: Mon, 31 Jan 2022 13:43:21 GMT
etag: "61f7e779-225dc"
expires: Sat, 02 Dec 2023 08:26:57 GMT
cache-control: max-age=31536000
x_avif_sp_miss: /home/wpmu/public_html/wp-content/uploads/sites/7/2022/01/flex-tilbeh%C3%B8r.avif
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, progressive, precision 8, 600x400, components 3\012- data
Size:   140764
Md5:    41ab6fbab15128aa8f91b3e279db391b
Sha1:   b34f3ee822efb82d659c4f1cdaec55fa3122b377
Sha256: 92f38d4285d57e331afbef8c4bf89968ffcff8b34eabe4462bc87ec93001ebc8
                                        
                                            GET /wp-content/uploads/sites/7/2020/09/banner-bumpro-600x400-1.jpg HTTP/1.1 
Host: www.tights.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.tights.no/butikk/levity-match-ballpocket-short-tights-black/?kk=a4c6293-184d1f21d20-305fa4&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=LEVITY+Match+Ballpocket+Short+Tights+Bla
Cookie: wordpress_google_apps_login=2c15ac3e74c3bb632db7c44a6d06f997; nhg-progress-sum=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.116.4.22
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
date: Fri, 02 Dec 2022 08:26:57 GMT
content-length: 65840
last-modified: Tue, 08 Sep 2020 13:07:06 GMT
etag: "5f5781fa-10130"
expires: Sat, 02 Dec 2023 08:26:57 GMT
cache-control: max-age=31536000
x_avif_sp_miss: /home/wpmu/public_html/wp-content/uploads/sites/7/2020/09/banner-bumpro-600x400-1.avif
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x400, components 3\012- data
Size:   65840
Md5:    078e54dba471cfcdc9f0dd853c48532e
Sha1:   ae96c97d761eac50e7eacc79297af60deb56bbf4
Sha256: 20f2386a9b3adaee5f83554ca1074139bba71b4f3b569f526abbcdd8db7c2b6e
                                        
                                            GET /wp-content/uploads/sites/7/2019/11/monsterpakken-1.jpg HTTP/1.1 
Host: www.tights.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.tights.no/butikk/levity-match-ballpocket-short-tights-black/?kk=a4c6293-184d1f21d20-305fa4&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=LEVITY+Match+Ballpocket+Short+Tights+Bla
Cookie: wordpress_google_apps_login=2c15ac3e74c3bb632db7c44a6d06f997; nhg-progress-sum=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.116.4.22
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
date: Fri, 02 Dec 2022 08:26:57 GMT
content-length: 62297
last-modified: Sat, 23 Nov 2019 19:34:05 GMT
etag: "5dd989ad-f359"
expires: Sat, 02 Dec 2023 08:26:57 GMT
cache-control: max-age=31536000
x_avif_sp_miss: /home/wpmu/public_html/wp-content/uploads/sites/7/2019/11/monsterpakken-1.avif
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x400, components 3\012- data
Size:   62297
Md5:    c3b0732bbbe7c631a7df4f8b3e1b5f9d
Sha1:   6476a7060d70a6ded091a6b5e627cb0e0231e80c
Sha256: 1e42154d8fd551177dba3fecb71f45f916185c72688a4d9596385a2feb352650
                                        
                                            GET /wp-content/uploads/sites/7/2021/08/flexbanner-levityseamless.jpg HTTP/1.1 
Host: www.tights.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.tights.no/butikk/levity-match-ballpocket-short-tights-black/?kk=a4c6293-184d1f21d20-305fa4&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=LEVITY+Match+Ballpocket+Short+Tights+Bla
Cookie: wordpress_google_apps_login=2c15ac3e74c3bb632db7c44a6d06f997; nhg-progress-sum=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.116.4.22
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
date: Fri, 02 Dec 2022 08:26:57 GMT
content-length: 17790
last-modified: Mon, 02 Aug 2021 13:46:43 GMT
etag: "6107f743-457e"
expires: Sat, 02 Dec 2023 08:26:57 GMT
cache-control: max-age=31536000
x_avif_sp_miss: /home/wpmu/public_html/wp-content/uploads/sites/7/2021/08/flexbanner-levityseamless.avif
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x400, components 3\012- data
Size:   17790
Md5:    574ade230280cf221389179a33fc0d0b
Sha1:   b591ff19d6bc9a87d43be83954c3f8e6b39e81c2
Sha256: 09764611cddba715ff8a5d19d6bfbe6494b43a1f2d48e10c41ab09a65e541eee
                                        
                                            GET /wp-content/uploads/sites/7/2020/04/billigevitamienr.jpg HTTP/1.1 
Host: www.tights.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.tights.no/butikk/levity-match-ballpocket-short-tights-black/?kk=a4c6293-184d1f21d20-305fa4&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=LEVITY+Match+Ballpocket+Short+Tights+Bla
Cookie: wordpress_google_apps_login=2c15ac3e74c3bb632db7c44a6d06f997; nhg-progress-sum=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.116.4.22
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
date: Fri, 02 Dec 2022 08:26:57 GMT
content-length: 56214
last-modified: Sat, 04 Apr 2020 17:25:55 GMT
etag: "5e88c323-db96"
expires: Sat, 02 Dec 2023 08:26:57 GMT
cache-control: max-age=31536000
x_avif_sp_miss: /home/wpmu/public_html/wp-content/uploads/sites/7/2020/04/billigevitamienr.avif
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x400, components 3\012- data
Size:   56214
Md5:    2a3e27b9b9ab1fc9b4ae37457fa01cfd
Sha1:   d7d209de15d502cae1ab01de67d9be5d6dbf1c8c
Sha256: 0d4ae289509176421fc57a8465121cb151b23444f8c2dd990ae41a7a45206984
                                        
                                            GET /wp-content/uploads/sites/7/2021/08/flexbanner-oe.jpg HTTP/1.1 
Host: www.tights.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.tights.no/butikk/levity-match-ballpocket-short-tights-black/?kk=a4c6293-184d1f21d20-305fa4&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=LEVITY+Match+Ballpocket+Short+Tights+Bla
Cookie: wordpress_google_apps_login=2c15ac3e74c3bb632db7c44a6d06f997; nhg-progress-sum=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.116.4.22
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
date: Fri, 02 Dec 2022 08:26:57 GMT
content-length: 91112
last-modified: Mon, 02 Aug 2021 13:30:37 GMT
etag: "6107f37d-163e8"
expires: Sat, 02 Dec 2023 08:26:57 GMT
cache-control: max-age=31536000
x_avif_sp_miss: /home/wpmu/public_html/wp-content/uploads/sites/7/2021/08/flexbanner-oe.avif
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x400, components 3\012- data
Size:   91112
Md5:    a90f531c0ede2cd61ef67c5eaff40a97
Sha1:   90a75b7595c26bfcd504f3eb8ec5a48b04f421fc
Sha256: 3d2c75cbf415aebb80ff19048a9cd49d20ab3bb02d469d8ebaac774bb86f82e8
                                        
                                            GET /wp-content/plugins/instabox-for-woocommerce/assets/css/instabox-for-woocommerce.css?ver=1639051014 HTTP/1.1 
Host: www.tights.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.tights.no/butikk/levity-match-ballpocket-short-tights-black/?kk=a4c6293-184d1f21d20-305fa4&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=LEVITY+Match+Ballpocket+Short+Tights+Bla
Cookie: wordpress_google_apps_login=2c15ac3e74c3bb632db7c44a6d06f997; nhg-progress-sum=0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.116.4.22
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Fri, 02 Dec 2022 08:26:56 GMT
last-modified: Thu, 09 Dec 2021 11:56:54 GMT
vary: Accept-Encoding
etag: W/"61b1ef06-ef6"
expires: Sat, 02 Dec 2023 08:26:56 GMT
cache-control: max-age=31536000
x-rocket-nginx-bypass: No
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   80739
Md5:    385c65c40529300be0f9ecd5a1eebd84
Sha1:   9158c117af1004427f0da91eade0b34e07860b0b
Sha256: 4c9eb732602047eba9eae795d976ad62cc950893dbffa56a178a6989c63a432a
                                        
                                            GET /wp-content/themes/proto/uikit/css/uikit.css?ver=1624953258 HTTP/1.1 
Host: www.tights.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.tights.no/butikk/levity-match-ballpocket-short-tights-black/?kk=a4c6293-184d1f21d20-305fa4&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=LEVITY+Match+Ballpocket+Short+Tights+Bla
Cookie: wordpress_google_apps_login=2c15ac3e74c3bb632db7c44a6d06f997; nhg-progress-sum=0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.116.4.22
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Fri, 02 Dec 2022 08:26:56 GMT
last-modified: Tue, 29 Jun 2021 07:54:18 GMT
vary: Accept-Encoding
etag: W/"60dad1aa-b318"
expires: Sat, 02 Dec 2023 08:26:56 GMT
cache-control: max-age=31536000
x-rocket-nginx-bypass: No
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   44073
Md5:    346d882010a8a481e2c3ee380a5ea79f
Sha1:   2525dbb86b043b8c1d08b09eea2f5abbb70254f2
Sha256: cb3c87a9c6505fc704268fdc5ae3789e20ffb49a6bffd430ffc0642f5d491180
                                        
                                            GET /wp-content/themes/tights2/css/theme.css?ver=1669888705 HTTP/1.1 
Host: www.tights.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.tights.no/butikk/levity-match-ballpocket-short-tights-black/?kk=a4c6293-184d1f21d20-305fa4&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=LEVITY+Match+Ballpocket+Short+Tights+Bla
Cookie: wordpress_google_apps_login=2c15ac3e74c3bb632db7c44a6d06f997; nhg-progress-sum=0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.116.4.22
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Fri, 02 Dec 2022 08:26:56 GMT
last-modified: Thu, 01 Dec 2022 09:58:25 GMT
vary: Accept-Encoding
etag: W/"63887ac1-db344"
expires: Sat, 02 Dec 2023 08:26:56 GMT
cache-control: max-age=31536000
x-rocket-nginx-bypass: No
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   125214
Md5:    0208de321e952468aab92b57ef76539b
Sha1:   d4864efacb7332727744165e8baf874bac60d30a
Sha256: b74916fca65ae8b58f96803bd648cced0f0be4006da13d6e17944a92a6eddc6a
                                        
                                            GET /wp-content/uploads/sites/7/2021/11/flex-loungewear.jpg HTTP/1.1 
Host: www.tights.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.tights.no/butikk/levity-match-ballpocket-short-tights-black/?kk=a4c6293-184d1f21d20-305fa4&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=LEVITY+Match+Ballpocket+Short+Tights+Bla
Cookie: wordpress_google_apps_login=2c15ac3e74c3bb632db7c44a6d06f997; nhg-progress-sum=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.116.4.22
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
date: Fri, 02 Dec 2022 08:26:57 GMT
content-length: 97320
last-modified: Tue, 01 Feb 2022 12:50:18 GMT
etag: "61f92c8a-17c28"
expires: Sat, 02 Dec 2023 08:26:57 GMT
cache-control: max-age=31536000
x_avif_sp_miss: /home/wpmu/public_html/wp-content/uploads/sites/7/2021/11/flex-loungewear.avif
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, progressive, precision 8, 600x400, components 3\012- data
Size:   97320
Md5:    0660b08001b519e3761b531191679846
Sha1:   d1caf86c2a2d3c14c3aa4267ad1431e82a0e9b27
Sha256: 7710a68ccd1dbabf14edc5a7c381dd2ac86c1527f8aa14b29a300c5fed7726b3
                                        
                                            GET /wp-content/uploads/sites/7/2021/10/turtoy.jpg HTTP/1.1 
Host: www.tights.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.tights.no/butikk/levity-match-ballpocket-short-tights-black/?kk=a4c6293-184d1f21d20-305fa4&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=LEVITY+Match+Ballpocket+Short+Tights+Bla
Cookie: wordpress_google_apps_login=2c15ac3e74c3bb632db7c44a6d06f997; nhg-progress-sum=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.116.4.22
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
date: Fri, 02 Dec 2022 08:26:57 GMT
content-length: 147151
last-modified: Wed, 04 May 2022 12:21:48 GMT
etag: "62726fdc-23ecf"
expires: Sat, 02 Dec 2023 08:26:57 GMT
cache-control: max-age=31536000
x_avif_sp_miss: /home/wpmu/public_html/wp-content/uploads/sites/7/2021/10/turtoy.avif
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, progressive, precision 8, 600x400, components 3\012- data
Size:   147151
Md5:    4aff29de08450e90900693d377bf392c
Sha1:   86e40b0daf7fa37d3e74aeccbea69ec844f9dbf5
Sha256: bd72bff9eb8f8464ba8d653df53aef770826cd00b87bdf07a17b47427342763f
                                        
                                            GET /wp-content/uploads/sites/7/2021/02/tredemolle-1.jpg HTTP/1.1 
Host: www.tights.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.tights.no/butikk/levity-match-ballpocket-short-tights-black/?kk=a4c6293-184d1f21d20-305fa4&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=LEVITY+Match+Ballpocket+Short+Tights+Bla
Cookie: wordpress_google_apps_login=2c15ac3e74c3bb632db7c44a6d06f997; nhg-progress-sum=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.116.4.22
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
date: Fri, 02 Dec 2022 08:26:57 GMT
content-length: 32674
last-modified: Wed, 04 May 2022 12:30:40 GMT
etag: "627271f0-7fa2"
expires: Sat, 02 Dec 2023 08:26:57 GMT
cache-control: max-age=31536000
x_avif_sp_miss: /home/wpmu/public_html/wp-content/uploads/sites/7/2021/02/tredemolle-1.avif
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, progressive, precision 8, 600x400, components 3\012- data
Size:   32674
Md5:    03e83a326265a900d494a0e23b9568c8
Sha1:   2aa41309d1b73feef66086f6b2285e61a45205a1
Sha256: 3dbd87c90cc87f6a2f6fe96e9d7f3dbb9fe05e453a28dfce2b84a0c97b2b3824
                                        
                                            GET /wp-content/uploads/sites/7/2021/10/tights.jpg HTTP/1.1 
Host: www.tights.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.tights.no/butikk/levity-match-ballpocket-short-tights-black/?kk=a4c6293-184d1f21d20-305fa4&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=LEVITY+Match+Ballpocket+Short+Tights+Bla
Cookie: wordpress_google_apps_login=2c15ac3e74c3bb632db7c44a6d06f997; nhg-progress-sum=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.116.4.22
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
date: Fri, 02 Dec 2022 08:26:57 GMT
content-length: 111722
last-modified: Wed, 04 May 2022 12:27:57 GMT
etag: "6272714d-1b46a"
expires: Sat, 02 Dec 2023 08:26:57 GMT
cache-control: max-age=31536000
x_avif_sp_miss: /home/wpmu/public_html/wp-content/uploads/sites/7/2021/10/tights.avif
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, progressive, precision 8, 600x400, components 3\012- data
Size:   111722
Md5:    e31d824cfc774e573173d81deff8f66e
Sha1:   f42d9f6c9b354a77039ccadb1d4f6dc45fbd65e5
Sha256: 33bcab10403900a1312172603606404b4b4d99d23cb36610919d090e37c1a88e
                                        
                                            GET /wp-content/uploads/sites/7/2021/10/energidrikke.jpg HTTP/1.1 
Host: www.tights.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.tights.no/butikk/levity-match-ballpocket-short-tights-black/?kk=a4c6293-184d1f21d20-305fa4&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=LEVITY+Match+Ballpocket+Short+Tights+Bla
Cookie: wordpress_google_apps_login=2c15ac3e74c3bb632db7c44a6d06f997; nhg-progress-sum=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.116.4.22
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
date: Fri, 02 Dec 2022 08:26:57 GMT
content-length: 111069
last-modified: Wed, 04 May 2022 12:29:14 GMT
etag: "6272719a-1b1dd"
expires: Sat, 02 Dec 2023 08:26:57 GMT
cache-control: max-age=31536000
x_avif_sp_miss: /home/wpmu/public_html/wp-content/uploads/sites/7/2021/10/energidrikke.avif
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, progressive, precision 8, 600x400, components 3\012- data
Size:   111069
Md5:    b71fec00f390e833a918f74a0026ee94
Sha1:   fffd583d6dd0ce20b1d14e1e3e3ab8e3141a5544
Sha256: eb2de71e55f2fdd5cdacc39313b473f457deb1cfe1a007e0daf9bf1755dd80b7
                                        
                                            GET /wp/wp-includes/css/dist/block-library/style.min.css?ver=1649151003 HTTP/1.1 
Host: www.tights.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.tights.no/butikk/levity-match-ballpocket-short-tights-black/?kk=a4c6293-184d1f21d20-305fa4&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=LEVITY+Match+Ballpocket+Short+Tights+Bla
Cookie: wordpress_google_apps_login=2c15ac3e74c3bb632db7c44a6d06f997; nhg-progress-sum=0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.116.4.22
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Fri, 02 Dec 2022 08:26:56 GMT
last-modified: Tue, 05 Apr 2022 09:30:03 GMT
vary: Accept-Encoding
etag: W/"624c0c1b-13abe"
expires: Sat, 02 Dec 2023 08:26:56 GMT
cache-control: max-age=31536000
x-rocket-nginx-bypass: No
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   113752
Md5:    0967a0d2558798c930dd24dcb4c3193d
Sha1:   cef294936b1a93049253ffba43f87619c88b828d
Sha256: e7195fe1aaf8b9114dab2d8baa6155e697b4a1f6fba68312a608ae96b97c9993
                                        
                                            GET /wp-content/plugins/nhg-wishlist/assets/css/modal.css?ver=1668594484 HTTP/1.1 
Host: www.tights.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.tights.no/butikk/levity-match-ballpocket-short-tights-black/?kk=a4c6293-184d1f21d20-305fa4&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=LEVITY+Match+Ballpocket+Short+Tights+Bla
Cookie: wordpress_google_apps_login=2c15ac3e74c3bb632db7c44a6d06f997; nhg-progress-sum=0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.116.4.22
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Fri, 02 Dec 2022 08:26:56 GMT
last-modified: Wed, 16 Nov 2022 10:28:04 GMT
vary: Accept-Encoding
etag: W/"6374bb34-1789"
expires: Sat, 02 Dec 2023 08:26:56 GMT
cache-control: max-age=31536000
x-rocket-nginx-bypass: No
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   16434
Md5:    1a53027daa19a5ea838f5bdc390764a4
Sha1:   1d20d740ccc2fb98384b343e730b8239239c3e75
Sha256: 0fde2cca401a08760d19d7be79fea3b832e273cc9249b6f5ecc73228c093668c
                                        
                                            GET /wp-content/uploads/sites/7/2021/10/GENSER-600x400-1-1.jpg HTTP/1.1 
Host: www.tights.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.tights.no/butikk/levity-match-ballpocket-short-tights-black/?kk=a4c6293-184d1f21d20-305fa4&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=LEVITY+Match+Ballpocket+Short+Tights+Bla
Cookie: wordpress_google_apps_login=2c15ac3e74c3bb632db7c44a6d06f997; nhg-progress-sum=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.116.4.22
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
date: Fri, 02 Dec 2022 08:26:57 GMT
content-length: 95599
last-modified: Mon, 31 Jan 2022 07:43:39 GMT
etag: "61f7932b-1756f"
expires: Sat, 02 Dec 2023 08:26:57 GMT
cache-control: max-age=31536000
x_avif_sp_miss: /home/wpmu/public_html/wp-content/uploads/sites/7/2021/10/GENSER-600x400-1-1.avif
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 600x400, components 3\012- data
Size:   95599
Md5:    a78615f2b1e4d122247a9a46c91c43c6
Sha1:   f5bcd01c10c9a0cbabe42090e74a1efb6cd114bb
Sha256: 5e49f1b64d927575ff8733210702754785cda65512878a929043f0836769366d
                                        
                                            GET /wp-content/uploads/sites/7/2021/10/brod-og-bakevarer.jpg HTTP/1.1 
Host: www.tights.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.tights.no/butikk/levity-match-ballpocket-short-tights-black/?kk=a4c6293-184d1f21d20-305fa4&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=LEVITY+Match+Ballpocket+Short+Tights+Bla
Cookie: wordpress_google_apps_login=2c15ac3e74c3bb632db7c44a6d06f997; nhg-progress-sum=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.116.4.22
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
date: Fri, 02 Dec 2022 08:26:57 GMT
content-length: 29227
last-modified: Tue, 12 Oct 2021 12:44:20 GMT
etag: "61658324-722b"
expires: Sat, 02 Dec 2023 08:26:57 GMT
cache-control: max-age=31536000
x_avif_sp_miss: /home/wpmu/public_html/wp-content/uploads/sites/7/2021/10/brod-og-bakevarer.avif
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x400, components 3\012- data
Size:   29227
Md5:    3945f26f853449baa418e98cc8f7b8a2
Sha1:   a75dab2bfc44863f86cdc67bf4ddeaee17d1990c
Sha256: 6f89ff74b47028251af7380fe1f3fb6c88ea434f459729a098716c70befdc238
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         216.58.211.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 02 Dec 2022 08:26:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/uploads/sites/7/2021/11/ombrenuke.jpg HTTP/1.1 
Host: www.tights.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.tights.no/butikk/levity-match-ballpocket-short-tights-black/?kk=a4c6293-184d1f21d20-305fa4&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=LEVITY+Match+Ballpocket+Short+Tights+Bla
Cookie: wordpress_google_apps_login=2c15ac3e74c3bb632db7c44a6d06f997; nhg-progress-sum=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.116.4.22
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
date: Fri, 02 Dec 2022 08:26:57 GMT
content-length: 23225
last-modified: Thu, 18 Nov 2021 18:24:00 GMT
etag: "61969a40-5ab9"
expires: Sat, 02 Dec 2023 08:26:57 GMT
cache-control: max-age=31536000
x_avif_sp_miss: /home/wpmu/public_html/wp-content/uploads/sites/7/2021/11/ombrenuke.avif
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x400, components 3\012- data
Size:   23225
Md5:    051bc94cea16c3f955dca81dfbccf317
Sha1:   27c66b1a2672355ff58f42b002ad349039a4d467
Sha256: 2ec45e480c53c25caa647ae0a443066057258dc3348487f7e1a38dfe4bfef966
                                        
                                            GET /wp-content/uploads/sites/7/2020/11/banner-bodyfuel-600x400-1-1.jpg HTTP/1.1 
Host: www.tights.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.tights.no/butikk/levity-match-ballpocket-short-tights-black/?kk=a4c6293-184d1f21d20-305fa4&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=LEVITY+Match+Ballpocket+Short+Tights+Bla
Cookie: wordpress_google_apps_login=2c15ac3e74c3bb632db7c44a6d06f997; nhg-progress-sum=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.116.4.22
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
date: Fri, 02 Dec 2022 08:26:57 GMT
content-length: 55671
last-modified: Mon, 31 Jan 2022 07:45:33 GMT
etag: "61f7939d-d977"
expires: Sat, 02 Dec 2023 08:26:57 GMT
cache-control: max-age=31536000
x_avif_sp_miss: /home/wpmu/public_html/wp-content/uploads/sites/7/2020/11/banner-bodyfuel-600x400-1-1.avif
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x400, components 3\012- data
Size:   55671
Md5:    942fa541fa0e3261997148fe90adf630
Sha1:   9d648f69bab5e43ca18354931510292c09a96df6
Sha256: df71457544ec6dadb28520235b17a7e91e0e4a35dd49e37835ebc5593b9e3944
                                        
                                            GET /wp-content/uploads/sites/7/2021/10/NOTTER-OG-FRO-1.jpg HTTP/1.1 
Host: www.tights.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.tights.no/butikk/levity-match-ballpocket-short-tights-black/?kk=a4c6293-184d1f21d20-305fa4&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=LEVITY+Match+Ballpocket+Short+Tights+Bla
Cookie: wordpress_google_apps_login=2c15ac3e74c3bb632db7c44a6d06f997; nhg-progress-sum=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.116.4.22
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
date: Fri, 02 Dec 2022 08:26:57 GMT
content-length: 29193
last-modified: Mon, 31 Jan 2022 07:38:56 GMT
etag: "61f79210-7209"
expires: Sat, 02 Dec 2023 08:26:57 GMT
cache-control: max-age=31536000
x_avif_sp_miss: /home/wpmu/public_html/wp-content/uploads/sites/7/2021/10/NOTTER-OG-FRO-1.avif
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x400, components 3\012- data
Size:   29193
Md5:    b323ba2927733a4f1edf612a637a383b
Sha1:   7adf44b8c3d3f93381c83934b92fb6e5607a22ef
Sha256: bd1564e9f1d070bca7b0bdb398c2c3e8415ced470d6ee070951160d5e767a6ce
                                        
                                            GET /wp-content/uploads/sites/7/2021/10/jakker-herre.jpg HTTP/1.1 
Host: www.tights.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.tights.no/butikk/levity-match-ballpocket-short-tights-black/?kk=a4c6293-184d1f21d20-305fa4&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=LEVITY+Match+Ballpocket+Short+Tights+Bla
Cookie: wordpress_google_apps_login=2c15ac3e74c3bb632db7c44a6d06f997; nhg-progress-sum=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.116.4.22
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
date: Fri, 02 Dec 2022 08:26:57 GMT
content-length: 39540
last-modified: Wed, 04 May 2022 12:33:28 GMT
etag: "62727298-9a74"
expires: Sat, 02 Dec 2023 08:26:57 GMT
cache-control: max-age=31536000
x_avif_sp_miss: /home/wpmu/public_html/wp-content/uploads/sites/7/2021/10/jakker-herre.avif
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, progressive, precision 8, 600x400, components 3\012- data
Size:   39540
Md5:    35a57ef6cf1a1c54358394461e704ede
Sha1:   a2392eb9c6cb7f56db0877e3e7037f2d2d4a40b2
Sha256: e693b33f6a96a1fc70b73cadb8d27dead00843c93a00fce564bae30e2219f0fb
                                        
                                            GET /wp-content/uploads/sites/7/2021/10/jakker-dame.jpg HTTP/1.1 
Host: www.tights.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.tights.no/butikk/levity-match-ballpocket-short-tights-black/?kk=a4c6293-184d1f21d20-305fa4&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=LEVITY+Match+Ballpocket+Short+Tights+Bla
Cookie: wordpress_google_apps_login=2c15ac3e74c3bb632db7c44a6d06f997; nhg-progress-sum=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.116.4.22
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
date: Fri, 02 Dec 2022 08:26:57 GMT
content-length: 59101
last-modified: Wed, 04 May 2022 12:36:25 GMT
etag: "62727349-e6dd"
expires: Sat, 02 Dec 2023 08:26:57 GMT
cache-control: max-age=31536000
x_avif_sp_miss: /home/wpmu/public_html/wp-content/uploads/sites/7/2021/10/jakker-dame.avif
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, progressive, precision 8, 600x400, components 3\012- data
Size:   59101
Md5:    cade4c851411a381e1e9ef8d6be27d56
Sha1:   b5829b94f4e184d253c4f58c2ff1cc088e21f85d
Sha256: c70b331325868ef83065fe8d2391a133d18e055b1e9cb633e8a1d24b5f9098ae
                                        
                                            GET /wp-content/uploads/sites/7/2021/10/tskjorter-600x400-1-1.jpg HTTP/1.1 
Host: www.tights.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.tights.no/butikk/levity-match-ballpocket-short-tights-black/?kk=a4c6293-184d1f21d20-305fa4&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=LEVITY+Match+Ballpocket+Short+Tights+Bla
Cookie: wordpress_google_apps_login=2c15ac3e74c3bb632db7c44a6d06f997; nhg-progress-sum=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.116.4.22
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
date: Fri, 02 Dec 2022 08:26:57 GMT
content-length: 59773
last-modified: Mon, 31 Jan 2022 07:43:19 GMT
etag: "61f79317-e97d"
expires: Sat, 02 Dec 2023 08:26:57 GMT
cache-control: max-age=31536000
x_avif_sp_miss: /home/wpmu/public_html/wp-content/uploads/sites/7/2021/10/tskjorter-600x400-1-1.avif
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 600x400, components 3\012- data
Size:   59773
Md5:    fa348544fc452f478876b533526cf2e4
Sha1:   3dc9051abc6ea171423f2bb3e6a180a5d43b6e1d
Sha256: 2eabb873b47542e0fd7aa37fde068aa4e3b7f7531de19944e47d655a72255ce5
                                        
                                            GET /wp-content/uploads/sites/7/2020/12/flexbanner-dame-1.jpg HTTP/1.1 
Host: www.tights.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.tights.no/butikk/levity-match-ballpocket-short-tights-black/?kk=a4c6293-184d1f21d20-305fa4&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=LEVITY+Match+Ballpocket+Short+Tights+Bla
Cookie: wordpress_google_apps_login=2c15ac3e74c3bb632db7c44a6d06f997; nhg-progress-sum=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.116.4.22
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
date: Fri, 02 Dec 2022 08:26:57 GMT
content-length: 41689
last-modified: Mon, 31 Jan 2022 07:45:15 GMT
etag: "61f7938b-a2d9"
expires: Sat, 02 Dec 2023 08:26:57 GMT
cache-control: max-age=31536000
x_avif_sp_miss: /home/wpmu/public_html/wp-content/uploads/sites/7/2020/12/flexbanner-dame-1.avif
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, progressive, precision 8, 600x400, components 3\012- data
Size:   41689
Md5:    3161713585404f1ced8378a9c63c21b3
Sha1:   d5c72b55be6318f6466a2e199e8591101c8a3d93
Sha256: 547621fbfc20c68a75bc762dd4b7db9cf67184756d4f5003c543908e2d1bd634
                                        
                                            GET /leadtag.js?ver=1.0.0 HTTP/1.1 
Host: s.kk-resources.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.tights.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.7
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
Content-Length: 2595
Connection: keep-alive
X-Gravitee-Transaction-Id: 43c98faf-c4df-4c26-898f-afc4df7c2610
X-Gravitee-Request-Id: 43c98faf-c4df-4c26-898f-afc4df7c2610
Request-Time: 5
Accept-Ranges: bytes
Last-Modified: Tue, 12 Jul 2022 13:48:05 GMT
Content-Encoding: gzip
Date: Fri, 02 Dec 2022 08:01:36 GMT
Cache-Control: public, max-age=3600
ETag: "01eb894c46b26432f1c6dc225e35b2f1bfc24a0c"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 0Ql-coPpqzEOBkBrbKTVzeu8aJJcIb4rb6AS2sRcqAOcAdXgiw8rtw==
Age: 1521


--- Additional Info ---
Magic:  C source, ASCII text, with very long lines (6910)
Size:   2595
Md5:    b9c7aa9898d0e7b5d8dfa27c81eda1ac
Sha1:   3e22a4f4ac1fd469128de60e1a80433513242071
Sha256: 980531f0a81016e3a7a4c3fa56f75e7b791f1f4c09296992221bd766b91a53a0
                                        
                                            GET /wp-content/uploads/sites/7/2021/02/flexbanner-herre-1.jpg HTTP/1.1 
Host: www.tights.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.tights.no/butikk/levity-match-ballpocket-short-tights-black/?kk=a4c6293-184d1f21d20-305fa4&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=LEVITY+Match+Ballpocket+Short+Tights+Bla
Cookie: wordpress_google_apps_login=2c15ac3e74c3bb632db7c44a6d06f997; nhg-progress-sum=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.116.4.22
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
date: Fri, 02 Dec 2022 08:26:57 GMT
content-length: 13771
last-modified: Mon, 31 Jan 2022 07:44:43 GMT
etag: "61f7936b-35cb"
expires: Sat, 02 Dec 2023 08:26:57 GMT
cache-control: max-age=31536000
x_avif_sp_miss: /home/wpmu/public_html/wp-content/uploads/sites/7/2021/02/flexbanner-herre-1.avif
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, progressive, precision 8, 600x400, components 3\012- data
Size:   13771
Md5:    18d1cbbb52e13aeaf571e1c5878f3fd8
Sha1:   5aabd8ed9b0cf4f7007ba8239535aa1f80a3d6e2
Sha256: abe614e61f586a64c1d9183645ca5288fa81002969de92ab753381526949c4c3
                                        
                                            GET /wp-content/uploads/sites/7/2020/12/frokost-middag-gfds-1.jpg HTTP/1.1 
Host: www.tights.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.tights.no/butikk/levity-match-ballpocket-short-tights-black/?kk=a4c6293-184d1f21d20-305fa4&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=LEVITY+Match+Ballpocket+Short+Tights+Bla
Cookie: wordpress_google_apps_login=2c15ac3e74c3bb632db7c44a6d06f997; nhg-progress-sum=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.116.4.22
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
date: Fri, 02 Dec 2022 08:26:57 GMT
content-length: 72245
last-modified: Mon, 31 Jan 2022 07:44:52 GMT
etag: "61f79374-11a35"
expires: Sat, 02 Dec 2023 08:26:57 GMT
cache-control: max-age=31536000
x_avif_sp_miss: /home/wpmu/public_html/wp-content/uploads/sites/7/2020/12/frokost-middag-gfds-1.avif
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x400, components 3\012- data
Size:   72245
Md5:    e0e895cba9505ffb3b7c8b734886133b
Sha1:   5b76c15a591288d2c3fd67285281a70437261164
Sha256: a90b5c8b5ea547c6e1b96e3a3cc5191761ff8e5e729cc05ce93c51b181a43b93
                                        
                                            GET /wp-content/uploads/sites/7/2020/01/levity-2.jpg HTTP/1.1 
Host: www.tights.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.tights.no/butikk/levity-match-ballpocket-short-tights-black/?kk=a4c6293-184d1f21d20-305fa4&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=LEVITY+Match+Ballpocket+Short+Tights+Bla
Cookie: wordpress_google_apps_login=2c15ac3e74c3bb632db7c44a6d06f997; nhg-progress-sum=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.116.4.22
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
date: Fri, 02 Dec 2022 08:26:57 GMT
content-length: 78266
last-modified: Mon, 31 Jan 2022 07:46:10 GMT
etag: "61f793c2-131ba"
expires: Sat, 02 Dec 2023 08:26:57 GMT
cache-control: max-age=31536000
x_avif_sp_miss: /home/wpmu/public_html/wp-content/uploads/sites/7/2020/01/levity-2.avif
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x400, components 3\012- data
Size:   78266
Md5:    6ec182c0c64b9d541db6a6d674067b14
Sha1:   89baf129cbdf1582460771c750e7c72b36d14219
Sha256: 945f3ea29c99e244465137515dad2ebe38bc13d140466e570353a70e4a8d5eb5
                                        
                                            GET /wp-content/uploads/sites/7/2021/10/proteinpulver-1.jpg HTTP/1.1 
Host: www.tights.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.tights.no/butikk/levity-match-ballpocket-short-tights-black/?kk=a4c6293-184d1f21d20-305fa4&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=LEVITY+Match+Ballpocket+Short+Tights+Bla
Cookie: wordpress_google_apps_login=2c15ac3e74c3bb632db7c44a6d06f997; nhg-progress-sum=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.116.4.22
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
date: Fri, 02 Dec 2022 08:26:57 GMT
content-length: 29445
last-modified: Mon, 31 Jan 2022 07:46:27 GMT
etag: "61f793d3-7305"
expires: Sat, 02 Dec 2023 08:26:57 GMT
cache-control: max-age=31536000
x_avif_sp_miss: /home/wpmu/public_html/wp-content/uploads/sites/7/2021/10/proteinpulver-1.avif
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, progressive, precision 8, 600x400, components 3\012- data
Size:   29445
Md5:    316c550a1a8706202eaa20e29f31aba9
Sha1:   9b0e26c28a6adb4f02db5e479dca0b4ebd059e09
Sha256: af0954fffd9267beea19246b34aa79d02bf75ab91f09210efb446031c55d23a3
                                        
                                            GET /wp-content/uploads/sites/7/2021/10/flexbanner-lavkarbopakken.jpg HTTP/1.1 
Host: www.tights.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.tights.no/butikk/levity-match-ballpocket-short-tights-black/?kk=a4c6293-184d1f21d20-305fa4&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=LEVITY+Match+Ballpocket+Short+Tights+Bla
Cookie: wordpress_google_apps_login=2c15ac3e74c3bb632db7c44a6d06f997; nhg-progress-sum=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.116.4.22
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
date: Fri, 02 Dec 2022 08:26:57 GMT
content-length: 121562
last-modified: Mon, 25 Oct 2021 13:06:27 GMT
etag: "6176abd3-1dada"
expires: Sat, 02 Dec 2023 08:26:57 GMT
cache-control: max-age=31536000
x_avif_sp_miss: /home/wpmu/public_html/wp-content/uploads/sites/7/2021/10/flexbanner-lavkarbopakken.avif
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, baseline, precision 8, 600x400, components 3\012- data
Size:   121562
Md5:    fa3f9967b5d268cb3203d4e237c64399
Sha1:   8b480bb8adf12e298d04bb1a155f256d7a7621a7
Sha256: a2ab56e40f8f632c6e306791747c07d9f124db2ef79c3352026da63e98dcdeb0
                                        
                                            GET /wp-content/uploads/sites/7/2020/11/omega-3-5355654.jpg HTTP/1.1 
Host: www.tights.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.tights.no/butikk/levity-match-ballpocket-short-tights-black/?kk=a4c6293-184d1f21d20-305fa4&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=LEVITY+Match+Ballpocket+Short+Tights+Bla
Cookie: wordpress_google_apps_login=2c15ac3e74c3bb632db7c44a6d06f997; nhg-progress-sum=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.116.4.22
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
date: Fri, 02 Dec 2022 08:26:57 GMT
content-length: 31595
last-modified: Fri, 27 Nov 2020 09:04:27 GMT
etag: "5fc0c11b-7b6b"
expires: Sat, 02 Dec 2023 08:26:57 GMT
cache-control: max-age=31536000
x_avif_sp_miss: /home/wpmu/public_html/wp-content/uploads/sites/7/2020/11/omega-3-5355654.avif
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x400, components 3\012- data
Size:   31595
Md5:    4134e742599772f3b197beb0904e0b79
Sha1:   348b21544ff12bb2245a7a34afd69adb38de3884
Sha256: 914cd8d01b979e1d6032db72d2caa251c0e9d0921463263f81fbdab474d19812
                                        
                                            GET /wp-content/uploads/sites/7/2021/10/sjokolade-1-1.jpg HTTP/1.1 
Host: www.tights.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.tights.no/butikk/levity-match-ballpocket-short-tights-black/?kk=a4c6293-184d1f21d20-305fa4&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=LEVITY+Match+Ballpocket+Short+Tights+Bla
Cookie: wordpress_google_apps_login=2c15ac3e74c3bb632db7c44a6d06f997; nhg-progress-sum=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.116.4.22
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
date: Fri, 02 Dec 2022 08:26:57 GMT
content-length: 30636
last-modified: Mon, 31 Jan 2022 07:37:58 GMT
etag: "61f791d6-77ac"
expires: Sat, 02 Dec 2023 08:26:57 GMT
cache-control: max-age=31536000
x_avif_sp_miss: /home/wpmu/public_html/wp-content/uploads/sites/7/2021/10/sjokolade-1-1.avif
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, progressive, precision 8, 600x400, components 3\012- data
Size:   30636
Md5:    ca289d5733d19b19e6bd65cee9ce371e
Sha1:   00a0d26b689039e88dd40c8f47375243de0cf413
Sha256: 1b72cf5ca68a326a9deaa10abad1a23369cbab91d85f501b61a8e16fa5bccaf5
                                        
                                            GET /wp-content/uploads/sites/7/2020/12/booty-builder-1.jpg HTTP/1.1 
Host: www.tights.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.tights.no/butikk/levity-match-ballpocket-short-tights-black/?kk=a4c6293-184d1f21d20-305fa4&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=LEVITY+Match+Ballpocket+Short+Tights+Bla
Cookie: wordpress_google_apps_login=2c15ac3e74c3bb632db7c44a6d06f997; nhg-progress-sum=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.116.4.22
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
date: Fri, 02 Dec 2022 08:26:57 GMT
content-length: 100204
last-modified: Mon, 31 Jan 2022 07:45:03 GMT
etag: "61f7937f-1876c"
expires: Sat, 02 Dec 2023 08:26:57 GMT
cache-control: max-age=31536000
x_avif_sp_miss: /home/wpmu/public_html/wp-content/uploads/sites/7/2020/12/booty-builder-1.avif
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x400, components 3\012- data
Size:   100204
Md5:    8451dd70c22433ca8ed9f4486d30df1a
Sha1:   76a59a75edf78c532cdd241c186e584f7b8b6565
Sha256: 323be9cc1697678044e8704ed2998b2faff25d750b8e07f652b3a94f0845145f
                                        
                                            GET /wp-content/uploads/sites/7/2021/10/hoodies-herre-1.jpg HTTP/1.1 
Host: www.tights.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.tights.no/butikk/levity-match-ballpocket-short-tights-black/?kk=a4c6293-184d1f21d20-305fa4&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=LEVITY+Match+Ballpocket+Short+Tights+Bla
Cookie: wordpress_google_apps_login=2c15ac3e74c3bb632db7c44a6d06f997; nhg-progress-sum=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.116.4.22
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
date: Fri, 02 Dec 2022 08:26:57 GMT
content-length: 15393
last-modified: Mon, 31 Jan 2022 07:42:11 GMT
etag: "61f792d3-3c21"
expires: Sat, 02 Dec 2023 08:26:57 GMT
cache-control: max-age=31536000
x_avif_sp_miss: /home/wpmu/public_html/wp-content/uploads/sites/7/2021/10/hoodies-herre-1.avif
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, progressive, precision 8, 600x400, components 3\012- data
Size:   15393
Md5:    6873aa53edc23f71647be11a4e882253
Sha1:   7ac36435b289317964fa9994828bc43d83528347
Sha256: 879a5a15e336024025d9ede7a0e05313a723c7494083b25956262b7ae85a3753
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         216.58.211.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 02 Dec 2022 08:26:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /onsite/js/klaviyo.js?company_id=TqUTmW&ver=1.0.0 HTTP/1.1 
Host: static.klaviyo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.tights.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         151.101.130.133
HTTP/2 200 OK
content-type: application/javascript
                                        
access-control-allow-credentials: true
access-control-allow-headers:
access-control-allow-methods: GET
access-control-allow-origin: *
access-control-max-age: 86400
allow: GET, OPTIONS
cache-control: max-age=1, stale-while-revalidate=10800
content-encoding: gzip
etag: W/"f5e5f68f21b0f32e0d8e7a79646cb758"
server: nginx
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Fri, 02 Dec 2022 08:26:57 GMT
age: 29673
x-served-by: cache-lga21983-LGA, cache-bma1682-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 140
x-timer: S1669969617.453638,VS0,VE0
vary: Accept-Encoding
content-length: 919
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2028)
Size:   919
Md5:    50d14e0cfc22522761ce3b801ec0506f
Sha1:   f149be47d3ee88f10412929a33aee06b5851b90a
Sha256: 4ad3bdd3c889725c452c4602c2061736a16b06f3078794bd60a6ba0244c1bf6f
                                        
                                            GET /wp/wp-includes/js/jquery/jquery.min.js?ver=1649151003 HTTP/1.1 
Host: www.tights.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.tights.no/butikk/levity-match-ballpocket-short-tights-black/?kk=a4c6293-184d1f21d20-305fa4&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=LEVITY+Match+Ballpocket+Short+Tights+Bla
Cookie: wordpress_google_apps_login=2c15ac3e74c3bb632db7c44a6d06f997; nhg-progress-sum=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.116.4.22
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Fri, 02 Dec 2022 08:26:56 GMT
last-modified: Tue, 05 Apr 2022 09:30:03 GMT
vary: Accept-Encoding
etag: W/"624c0c1b-15db1"
expires: Sat, 02 Dec 2023 08:26:56 GMT
cache-control: max-age=31536000
x-rocket-nginx-bypass: No
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   44836
Md5:    6f74620d8aa2c701a37a91475b4f72c5
Sha1:   047b6c728d1237f05278e1775a363ef1c2da057d
Sha256: 718d746847b67dee72f83b6141fd720fc65b23e11d75e3821ded93fc721c9c59
                                        
                                            GET /wp-content/uploads/sites/7/2021/10/OLJER.jpg HTTP/1.1 
Host: www.tights.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.tights.no/butikk/levity-match-ballpocket-short-tights-black/?kk=a4c6293-184d1f21d20-305fa4&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=LEVITY+Match+Ballpocket+Short+Tights+Bla
Cookie: wordpress_google_apps_login=2c15ac3e74c3bb632db7c44a6d06f997; nhg-progress-sum=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.116.4.22
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
date: Fri, 02 Dec 2022 08:26:57 GMT
content-length: 20408
last-modified: Tue, 12 Oct 2021 13:01:58 GMT
etag: "61658746-4fb8"
expires: Sat, 02 Dec 2023 08:26:57 GMT
cache-control: max-age=31536000
x_avif_sp_miss: /home/wpmu/public_html/wp-content/uploads/sites/7/2021/10/OLJER.avif
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x400, components 3\012- data
Size:   20408
Md5:    cd98fcb1ce88c0cf05eb15a9b4a55888
Sha1:   392d8a8bb44e3e7aaae1375546f1bd0a57fa0d50
Sha256: 0cd0406a798e23acccb6b8d61ac38a7db5ae95c0555b2e24863285603692ed9a
                                        
                                            GET /wp-content/themes/tights2/img/logo3.svg HTTP/1.1 
Host: www.tights.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.tights.no/butikk/levity-match-ballpocket-short-tights-black/?kk=a4c6293-184d1f21d20-305fa4&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=LEVITY+Match+Ballpocket+Short+Tights+Bla
Cookie: wordpress_google_apps_login=2c15ac3e74c3bb632db7c44a6d06f997; nhg-progress-sum=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.116.4.22
HTTP/2 200 OK
content-type: image/svg+xml
                                        
server: nginx
date: Fri, 02 Dec 2022 08:26:56 GMT
last-modified: Mon, 16 Aug 2021 09:10:49 GMT
vary: Accept-Encoding
etag: W/"611a2b99-1b3f"
expires: Sat, 02 Dec 2023 08:26:56 GMT
cache-control: max-age=31536000
x-rocket-nginx-bypass: No
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   20432
Md5:    70d89889e711fe64006e72e4028f96b9
Sha1:   5fd4c11bd3c57686424b41f68612c3afa3bbfd25
Sha256: dccadb1f2ab86bcc569a2ef3c26d29609ba97e438bbd7140ec64867a48263411
                                        
                                            GET /wp-content/uploads/sites/7/2021/10/flex-kollagen.jpg HTTP/1.1 
Host: www.tights.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.tights.no/butikk/levity-match-ballpocket-short-tights-black/?kk=a4c6293-184d1f21d20-305fa4&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=LEVITY+Match+Ballpocket+Short+Tights+Bla
Cookie: wordpress_google_apps_login=2c15ac3e74c3bb632db7c44a6d06f997; nhg-progress-sum=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.116.4.22
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
date: Fri, 02 Dec 2022 08:26:57 GMT
content-length: 14607
last-modified: Tue, 12 Oct 2021 13:08:54 GMT
etag: "616588e6-390f"
expires: Sat, 02 Dec 2023 08:26:57 GMT
cache-control: max-age=31536000
x_avif_sp_miss: /home/wpmu/public_html/wp-content/uploads/sites/7/2021/10/flex-kollagen.avif
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x400, components 3\012- data
Size:   14607
Md5:    4304dcce5f64d4580ce753b99210d6af
Sha1:   fda3cdd498a1cc967ef628fdfc1cb761e66c230d
Sha256: f9b451b91d651be8ebc094e653e9bf13c8c2eee435081487f5af1a919978cbab
                                        
                                            GET /wp-content/uploads/sites/7/2021/10/superfood-600x400-1.jpg HTTP/1.1 
Host: www.tights.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.tights.no/butikk/levity-match-ballpocket-short-tights-black/?kk=a4c6293-184d1f21d20-305fa4&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=LEVITY+Match+Ballpocket+Short+Tights+Bla
Cookie: wordpress_google_apps_login=2c15ac3e74c3bb632db7c44a6d06f997; nhg-progress-sum=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.116.4.22
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
date: Fri, 02 Dec 2022 08:26:57 GMT
content-length: 114606
last-modified: Mon, 25 Oct 2021 12:29:49 GMT
etag: "6176a33d-1bfae"
expires: Sat, 02 Dec 2023 08:26:57 GMT
cache-control: max-age=31536000
x_avif_sp_miss: /home/wpmu/public_html/wp-content/uploads/sites/7/2021/10/superfood-600x400-1.avif
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 600x400, components 3\012- data
Size:   114606
Md5:    cb99b2e2cf7abdc2094bab09e3e7cefd
Sha1:   ab0b9f75b2ca182463aa9bcc4e134aadf79459b9
Sha256: 19014d2b690f0bf24088a4a6441a74c15f290c2005b95d836d7772ecaa92d65b
                                        
                                            GET /wp-content/uploads/sites/7/2021/10/mel-600x400-1.jpg HTTP/1.1 
Host: www.tights.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.tights.no/butikk/levity-match-ballpocket-short-tights-black/?kk=a4c6293-184d1f21d20-305fa4&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=LEVITY+Match+Ballpocket+Short+Tights+Bla
Cookie: wordpress_google_apps_login=2c15ac3e74c3bb632db7c44a6d06f997; nhg-progress-sum=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.116.4.22
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
date: Fri, 02 Dec 2022 08:26:57 GMT
content-length: 85763
last-modified: Mon, 25 Oct 2021 13:12:58 GMT
etag: "6176ad5a-14f03"
expires: Sat, 02 Dec 2023 08:26:57 GMT
cache-control: max-age=31536000
x_avif_sp_miss: /home/wpmu/public_html/wp-content/uploads/sites/7/2021/10/mel-600x400-1.avif
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 600x400, components 3\012- data
Size:   85763
Md5:    ccc66a51b4fa6d2a4b0475dd8d5acf15
Sha1:   35934e0cd82b9ea308d45d0e828c519559945740
Sha256: 1d583bde7f0045722bdca72aa9b1e7b455abdb06bd062fa65858508d3c9aab2f
                                        
                                            GET /wp-content/plugins/search-by-algolia-instant-relevant-results/css/algolia-autocomplete.css?ver=1652430226 HTTP/1.1 
Host: www.tights.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.tights.no/butikk/levity-match-ballpocket-short-tights-black/?kk=a4c6293-184d1f21d20-305fa4&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=LEVITY+Match+Ballpocket+Short+Tights+Bla
Cookie: wordpress_google_apps_login=2c15ac3e74c3bb632db7c44a6d06f997; nhg-progress-sum=0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.116.4.22
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Fri, 02 Dec 2022 08:26:56 GMT
last-modified: Fri, 13 May 2022 08:23:46 GMT
vary: Accept-Encoding
etag: W/"627e1592-d4b"
expires: Sat, 02 Dec 2023 08:26:56 GMT
cache-control: max-age=31536000
x-rocket-nginx-bypass: No
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   26034
Md5:    2ae16d6455558da6a2923e9ea4ca0f51
Sha1:   cd0164ba3c5e4dab4741420d03275cfba22c4cf9
Sha256: 1131df9c2292877069c5e26d1c0324776c1bfcea04ee97edf02cc58be9d2da0a
                                        
                                            GET /wp-content/plugins/woo-vipps/css/vipps.css?ver=1649151002 HTTP/1.1 
Host: www.tights.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.tights.no/butikk/levity-match-ballpocket-short-tights-black/?kk=a4c6293-184d1f21d20-305fa4&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=LEVITY+Match+Ballpocket+Short+Tights+Bla
Cookie: wordpress_google_apps_login=2c15ac3e74c3bb632db7c44a6d06f997; nhg-progress-sum=0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.116.4.22
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Fri, 02 Dec 2022 08:26:56 GMT
last-modified: Tue, 05 Apr 2022 09:30:02 GMT
vary: Accept-Encoding
etag: W/"624c0c1a-1f52"
expires: Sat, 02 Dec 2023 08:26:56 GMT
cache-control: max-age=31536000
x-rocket-nginx-bypass: No
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   125850
Md5:    1c882da4e7f7eb0c5938aa9832eaf0c0
Sha1:   b92c1dd96e30e9fe604dee9260d68ac7e3d0aa6f
Sha256: 0b54f93a7f26bda28d8a81aaab02b1e9a1c385f8fbf041c8372dbe719791a2ac
                                        
                                            GET /gtag.js?id=UA-57105374-1 HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.tights.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.40
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 02 Dec 2022 08:26:57 GMT
expires: Fri, 02 Dec 2022 08:26:57 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 44703
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1921)
Size:   44703
Md5:    60ec72d63a2e22cf247dedb94789d0ef
Sha1:   0ca79652a00cb7509908385fb443578e3e45b984
Sha256: b336fa636837f1ef15e22ece54baa870cf836790172b1caaa7bb7165598215fa
                                        
                                            GET /wp-content/plugins/nhg-free-shipping-progressbar/assets/css/style.css?ver=1669639673 HTTP/1.1 
Host: www.tights.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.tights.no/butikk/levity-match-ballpocket-short-tights-black/?kk=a4c6293-184d1f21d20-305fa4&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=LEVITY+Match+Ballpocket+Short+Tights+Bla
Cookie: wordpress_google_apps_login=2c15ac3e74c3bb632db7c44a6d06f997; nhg-progress-sum=0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.116.4.22
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Fri, 02 Dec 2022 08:26:56 GMT
last-modified: Mon, 28 Nov 2022 12:47:53 GMT
vary: Accept-Encoding
etag: W/"6384adf9-565"
expires: Sat, 02 Dec 2023 08:26:56 GMT
cache-control: max-age=31536000
x-rocket-nginx-bypass: No
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   15938
Md5:    61b2582278a974d4042380cf420d56ae
Sha1:   86959010ec5ab781cd11526d73fb6ab28ba0ed4a
Sha256: eb582cc6f187d7f7938ce9df2b4e21b7dc50a916457095a008486126727b0de5
                                        
                                            GET /gtm.js?id=GTM-NHNH52Q HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.tights.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.40
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 02 Dec 2022 08:26:57 GMT
expires: Fri, 02 Dec 2022 08:26:57 GMT
cache-control: private, max-age=900
last-modified: Fri, 02 Dec 2022 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 73882
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (7790)
Size:   73882
Md5:    921d6ed5efb07a865425695af2a84388
Sha1:   ead9a4c84b637fef0315416a4040641b06776e72
Sha256: 637165c96837cae87f482bbdb74e011fa798fb7b867b0a802eb2332e24580bce
                                        
                                            GET /wp-content/uploads/sites/7/2021/10/Gojib%C3%A6r-pa%CC%8A-gr%C3%B8t-600x400.jpg HTTP/1.1 
Host: www.tights.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.tights.no/butikk/levity-match-ballpocket-short-tights-black/?kk=a4c6293-184d1f21d20-305fa4&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=LEVITY+Match+Ballpocket+Short+Tights+Bla
Cookie: wordpress_google_apps_login=2c15ac3e74c3bb632db7c44a6d06f997; nhg-progress-sum=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.116.4.22
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
date: Fri, 02 Dec 2022 08:26:57 GMT
content-length: 91483
last-modified: Mon, 25 Oct 2021 13:07:54 GMT
etag: "6176ac2a-1655b"
expires: Sat, 02 Dec 2023 08:26:57 GMT
cache-control: max-age=31536000
x_avif_sp_miss: /home/wpmu/public_html/wp-content/uploads/sites/7/2021/10/Gojib%C3%A6r-pa%CC%8A-gr%C3%B8t-600x400.avif
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=16, height=3648, bps=206, PhotometricIntepretation=RGB, manufacturer=Canon, model=Canon EOS 6D, orientation=upper-left, width=5472], baseline, precision 8, 600x400, components 3\012- data
Size:   91483
Md5:    e904f4e108b498c391753d1ea37e8312
Sha1:   da2d9680d371e8132dc9b8e56fef1bb8b999e3d5
Sha256: 359436f0bfbaf94745f59a8ea5954136ba91bf2317831b8e023c30cb1d48e602
                                        
                                            GET /wp-content/uploads/sites/7/2021/10/Alphamale.jpg HTTP/1.1 
Host: www.tights.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.tights.no/butikk/levity-match-ballpocket-short-tights-black/?kk=a4c6293-184d1f21d20-305fa4&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=LEVITY+Match+Ballpocket+Short+Tights+Bla
Cookie: wordpress_google_apps_login=2c15ac3e74c3bb632db7c44a6d06f997; nhg-progress-sum=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.116.4.22
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
date: Fri, 02 Dec 2022 08:26:57 GMT
content-length: 14761
last-modified: Wed, 24 Nov 2021 10:22:30 GMT
etag: "619e1266-39a9"
expires: Sat, 02 Dec 2023 08:26:57 GMT
cache-control: max-age=31536000
x_avif_sp_miss: /home/wpmu/public_html/wp-content/uploads/sites/7/2021/10/Alphamale.avif
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, progressive, precision 8, 600x400, components 3\012- data
Size:   14761
Md5:    20043fe9d3b89a356744ded3c5fb01dd
Sha1:   c24d2f3ea75b0c054d3665413e0a52f6ad23273f
Sha256: 162698553d53a25cdb3987778806796d06ac10f90a96a77bd38d900320b013e9
                                        
                                            GET /wp-content/uploads/sites/7/2021/10/BodyFuel-Magnesium2-1200x1500-1-1-600x400.jpg HTTP/1.1 
Host: www.tights.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.tights.no/butikk/levity-match-ballpocket-short-tights-black/?kk=a4c6293-184d1f21d20-305fa4&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=LEVITY+Match+Ballpocket+Short+Tights+Bla
Cookie: wordpress_google_apps_login=2c15ac3e74c3bb632db7c44a6d06f997; nhg-progress-sum=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.116.4.22
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
date: Fri, 02 Dec 2022 08:26:57 GMT
content-length: 34481
last-modified: Tue, 12 Oct 2021 13:28:30 GMT
etag: "61658d7e-86b1"
expires: Sat, 02 Dec 2023 08:26:57 GMT
cache-control: max-age=31536000
x_avif_sp_miss: /home/wpmu/public_html/wp-content/uploads/sites/7/2021/10/BodyFuel-Magnesium2-1200x1500-1-1-600x400.avif
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x400, components 3\012- data
Size:   34481
Md5:    fb0688bfaa94c8ff32183de527552380
Sha1:   b0aae75e524e01317b77d1219a134fd7e6b071ae
Sha256: 364d15d66d6f12ab9a57476100dff4df9cb458e25b62c22fe408761f0c2c2b66
                                        
                                            GET /wp-content/uploads/sites/7/2020/09/GAINZ.jpg HTTP/1.1 
Host: www.tights.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.tights.no/butikk/levity-match-ballpocket-short-tights-black/?kk=a4c6293-184d1f21d20-305fa4&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=LEVITY+Match+Ballpocket+Short+Tights+Bla
Cookie: wordpress_google_apps_login=2c15ac3e74c3bb632db7c44a6d06f997; nhg-progress-sum=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.116.4.22
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
date: Fri, 02 Dec 2022 08:26:57 GMT
content-length: 8683
last-modified: Mon, 25 Oct 2021 13:33:20 GMT
etag: "6176b220-21eb"
expires: Sat, 02 Dec 2023 08:26:57 GMT
cache-control: max-age=31536000
x_avif_sp_miss: /home/wpmu/public_html/wp-content/uploads/sites/7/2020/09/GAINZ.avif
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, progressive, precision 8, 600x400, components 3\012- data
Size:   8683
Md5:    22dbd3afa70cd3cf1702eceb6ce3316e
Sha1:   96a75ff44486cb8f48deb5f4a16416040d72cd63
Sha256: 8777319dc21779127d4a0db68d2145e68f440b53bbce1726910ec7220b86ef1a
                                        
                                            GET /wp-content/themes/proto/img/logoer/helthjem.png HTTP/1.1 
Host: www.tights.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.tights.no/butikk/levity-match-ballpocket-short-tights-black/?kk=a4c6293-184d1f21d20-305fa4&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=LEVITY+Match+Ballpocket+Short+Tights+Bla
Cookie: wordpress_google_apps_login=2c15ac3e74c3bb632db7c44a6d06f997; nhg-progress-sum=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.116.4.22
HTTP/2 200 OK
content-type: image/png
                                        
server: nginx
date: Fri, 02 Dec 2022 08:26:57 GMT
content-length: 2614
last-modified: Tue, 29 Jun 2021 07:54:18 GMT
etag: "60dad1aa-a36"
expires: Sat, 02 Dec 2023 08:26:57 GMT
cache-control: max-age=31536000
x_avif_sp_miss: /home/wpmu/public_html/wp-content/themes/proto/img/logoer/helthjem.avif
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 342 x 88, 8-bit colormap, non-interlaced\012- data
Size:   2614
Md5:    678a87e3cce706c80619564c86fbb5f9
Sha1:   91c742cbf4b5d76d9a63c33076b3657014fd8bcd
Sha256: 5eb991a0da11b406d840e2847d10df136a13e586e6756b3a64f14e3b5bebc5b7
                                        
                                            GET /wp-content/themes/proto/img/logoer/instabox.png HTTP/1.1 
Host: www.tights.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.tights.no/butikk/levity-match-ballpocket-short-tights-black/?kk=a4c6293-184d1f21d20-305fa4&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=LEVITY+Match+Ballpocket+Short+Tights+Bla
Cookie: wordpress_google_apps_login=2c15ac3e74c3bb632db7c44a6d06f997; nhg-progress-sum=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.116.4.22
HTTP/2 200 OK
content-type: image/png
                                        
server: nginx
date: Fri, 02 Dec 2022 08:26:57 GMT
content-length: 3277
last-modified: Fri, 10 Dec 2021 08:28:57 GMT
etag: "61b30fc9-ccd"
expires: Sat, 02 Dec 2023 08:26:57 GMT
cache-control: max-age=31536000
x_avif_sp_miss: /home/wpmu/public_html/wp-content/themes/proto/img/logoer/instabox.avif
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 410 x 123, 8-bit colormap, non-interlaced\012- data
Size:   3277
Md5:    e64af2ce7ee6408cfb5ad2b4226b9b2a
Sha1:   0842834ed309bbfa1d279901341855fe650e6cdc
Sha256: 72b6cd8633d5594e4253663ced52fad31e33900725a605579f48b67a78a7b6f8
                                        
                                            GET /wp-content/themes/proto/img/icons/social/facebook.png HTTP/1.1 
Host: www.tights.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.tights.no/butikk/levity-match-ballpocket-short-tights-black/?kk=a4c6293-184d1f21d20-305fa4&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=LEVITY+Match+Ballpocket+Short+Tights+Bla
Cookie: wordpress_google_apps_login=2c15ac3e74c3bb632db7c44a6d06f997; nhg-progress-sum=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.116.4.22
HTTP/2 200 OK
content-type: image/png
                                        
server: nginx
date: Fri, 02 Dec 2022 08:26:57 GMT
content-length: 958
last-modified: Tue, 29 Jun 2021 07:54:18 GMT
etag: "60dad1aa-3be"
expires: Sat, 02 Dec 2023 08:26:57 GMT
cache-control: max-age=31536000
x_avif_sp_miss: /home/wpmu/public_html/wp-content/themes/proto/img/icons/social/facebook.avif
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 100 x 100, 8-bit colormap, non-interlaced\012- data
Size:   958
Md5:    9e734b7c896d378cc1fa587d40c2b45c
Sha1:   f2f66361df067c4fb01cd4b3668642136bc779a8
Sha256: 630197a78253a2dae5b572aa3db3aa0eab2179f4c9d9c260017468bff1ee746a
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         216.58.211.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 02 Dec 2022 08:26:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/themes/proto/img/icons/social/instagram.png HTTP/1.1 
Host: www.tights.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.tights.no/butikk/levity-match-ballpocket-short-tights-black/?kk=a4c6293-184d1f21d20-305fa4&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=LEVITY+Match+Ballpocket+Short+Tights+Bla
Cookie: wordpress_google_apps_login=2c15ac3e74c3bb632db7c44a6d06f997; nhg-progress-sum=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.116.4.22
HTTP/2 200 OK
content-type: image/png
                                        
server: nginx
date: Fri, 02 Dec 2022 08:26:57 GMT
content-length: 3749
last-modified: Tue, 29 Jun 2021 07:54:18 GMT
etag: "60dad1aa-ea5"
expires: Sat, 02 Dec 2023 08:26:57 GMT
cache-control: max-age=31536000
x_avif_sp_miss: /home/wpmu/public_html/wp-content/themes/proto/img/icons/social/instagram.avif
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 100 x 100, 8-bit colormap, non-interlaced\012- data
Size:   3749
Md5:    2b14536f2de3dd45a7201999f5d7f397
Sha1:   88d274c95f2c8b1809c05e0f6990f762392d5f23
Sha256: eaee1098e32467edfb435b7c710663f46e67a3ff1cd384c4dfcfad09bc32aefe
                                        
                                            GET /wp-content/themes/proto/img/icons/social/snapchat.png HTTP/1.1 
Host: www.tights.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.tights.no/butikk/levity-match-ballpocket-short-tights-black/?kk=a4c6293-184d1f21d20-305fa4&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=LEVITY+Match+Ballpocket+Short+Tights+Bla
Cookie: wordpress_google_apps_login=2c15ac3e74c3bb632db7c44a6d06f997; nhg-progress-sum=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.116.4.22
HTTP/2 200 OK
content-type: image/png
                                        
server: nginx
date: Fri, 02 Dec 2022 08:26:57 GMT
content-length: 2167
last-modified: Tue, 29 Jun 2021 07:54:18 GMT
etag: "60dad1aa-877"
expires: Sat, 02 Dec 2023 08:26:57 GMT
cache-control: max-age=31536000
x_avif_sp_miss: /home/wpmu/public_html/wp-content/themes/proto/img/icons/social/snapchat.avif
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 100 x 100, 8-bit colormap, non-interlaced\012- data
Size:   2167
Md5:    22a35d93a13a257eeffc4af3490ac07a
Sha1:   a1e666d2ed07975d3d202270234f2bc0a7c82c2f
Sha256: 09fb80d274e377d8a5bc2d6fdf4e8f7b7d9fe19d043c4fd8eeef4b90685a5701
                                        
                                            GET /wp-content/themes/proto/img/icons/social/twitter.png HTTP/1.1 
Host: www.tights.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.tights.no/butikk/levity-match-ballpocket-short-tights-black/?kk=a4c6293-184d1f21d20-305fa4&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=LEVITY+Match+Ballpocket+Short+Tights+Bla
Cookie: wordpress_google_apps_login=2c15ac3e74c3bb632db7c44a6d06f997; nhg-progress-sum=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.116.4.22
HTTP/2 200 OK
content-type: image/png
                                        
server: nginx
date: Fri, 02 Dec 2022 08:26:57 GMT
content-length: 1193
last-modified: Tue, 29 Jun 2021 07:54:18 GMT
etag: "60dad1aa-4a9"
expires: Sat, 02 Dec 2023 08:26:57 GMT
cache-control: max-age=31536000
x_avif_sp_miss: /home/wpmu/public_html/wp-content/themes/proto/img/icons/social/twitter.avif
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 100 x 100, 8-bit colormap, non-interlaced\012- data
Size:   1193
Md5:    dc0c7cca7f147d9084a72795c3f40ddd
Sha1:   c75b2eefc790ba72846c96714692f3d685ac76ac
Sha256: 9565e727ca9a6afe9d2f00f0d34103984ed63b263eb2e3d33801137709b82f83
                                        
                                            GET /wp-content/themes/proto/img/icons/social/tiktok.png HTTP/1.1 
Host: www.tights.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.tights.no/butikk/levity-match-ballpocket-short-tights-black/?kk=a4c6293-184d1f21d20-305fa4&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=LEVITY+Match+Ballpocket+Short+Tights+Bla
Cookie: wordpress_google_apps_login=2c15ac3e74c3bb632db7c44a6d06f997; nhg-progress-sum=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.116.4.22
HTTP/2 200 OK
content-type: image/png
                                        
server: nginx
date: Fri, 02 Dec 2022 08:26:57 GMT
content-length: 8378
last-modified: Mon, 14 Mar 2022 12:23:12 GMT
etag: "622f33b0-20ba"
expires: Sat, 02 Dec 2023 08:26:57 GMT
cache-control: max-age=31536000
x_avif_sp_miss: /home/wpmu/public_html/wp-content/themes/proto/img/icons/social/tiktok.avif
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Size:   8378
Md5:    f0480576b5516ed621b0753108faae44
Sha1:   95844a093f3c921fae192e1b878f3b357b333039
Sha256: 67a675701b0830647895900c8e7ddceb31de4fc0923f348f45888c2e5c299e0a
                                        
                                            GET /wp-content/themes/proto/img/icons/social/linkedin.png HTTP/1.1 
Host: www.tights.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.tights.no/butikk/levity-match-ballpocket-short-tights-black/?kk=a4c6293-184d1f21d20-305fa4&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=LEVITY+Match+Ballpocket+Short+Tights+Bla
Cookie: wordpress_google_apps_login=2c15ac3e74c3bb632db7c44a6d06f997; nhg-progress-sum=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.116.4.22
HTTP/2 200 OK
content-type: image/png
                                        
server: nginx
date: Fri, 02 Dec 2022 08:26:57 GMT
content-length: 6533
last-modified: Mon, 14 Mar 2022 12:23:12 GMT
etag: "622f33b0-1985"
expires: Sat, 02 Dec 2023 08:26:57 GMT
cache-control: max-age=31536000
x_avif_sp_miss: /home/wpmu/public_html/wp-content/themes/proto/img/icons/social/linkedin.avif
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Size:   6533
Md5:    56ee6316080d74b2dfdfefb2fc52c964
Sha1:   680bdc870b12e632769ba72ab4cd8374ae60176b
Sha256: e665784e72daaf5cca926f9363e985c24c66b690999ad8903fe1574dbb7813bd
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         104.18.32.68
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 02 Dec 2022 08:26:57 GMT
Content-Length: 472
Connection: keep-alive
Last-Modified: Wed, 30 Nov 2022 05:58:28 GMT
Expires: Wed, 07 Dec 2022 05:58:27 GMT
Etag: "5600da63427731d07d74d76521582ae641e9fe86"
Cache-Control: max-age=422489,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7732ae3dbb190afa-OSL

                                        
                                            GET /wp-content/themes/proto/img/icons/social/youtube.png HTTP/1.1 
Host: www.tights.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.tights.no/butikk/levity-match-ballpocket-short-tights-black/?kk=a4c6293-184d1f21d20-305fa4&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=LEVITY+Match+Ballpocket+Short+Tights+Bla
Cookie: wordpress_google_apps_login=2c15ac3e74c3bb632db7c44a6d06f997; nhg-progress-sum=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.116.4.22
HTTP/2 200 OK
content-type: image/png
                                        
server: nginx
date: Fri, 02 Dec 2022 08:26:57 GMT
content-length: 1771
last-modified: Tue, 29 Jun 2021 07:54:18 GMT
etag: "60dad1aa-6eb"
expires: Sat, 02 Dec 2023 08:26:57 GMT
cache-control: max-age=31536000
x_avif_sp_miss: /home/wpmu/public_html/wp-content/themes/proto/img/icons/social/youtube.avif
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 100 x 100, 8-bit colormap, non-interlaced\012- data
Size:   1771
Md5:    afe4126a45aed98b105fae963c931fcd
Sha1:   942f087fcb9b0c1312e86da4ce378cd319bc2c39
Sha256: e11204192f845b52dd6d6df5c11558afd20ee2e61fcabe67dcf31f47566e659b
                                        
                                            GET /wp-content/themes/proto/img/icons/stars/full.png HTTP/1.1 
Host: www.tights.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.tights.no/wp-content/themes/tights2/css/theme.css?ver=1669888705
Cookie: wordpress_google_apps_login=2c15ac3e74c3bb632db7c44a6d06f997; nhg-progress-sum=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.116.4.22
HTTP/2 200 OK
content-type: image/png
                                        
server: nginx
date: Fri, 02 Dec 2022 08:26:57 GMT
content-length: 3048
last-modified: Tue, 29 Jun 2021 07:54:18 GMT
etag: "60dad1aa-be8"
expires: Sat, 02 Dec 2023 08:26:57 GMT
cache-control: max-age=31536000
x_avif_sp_miss: /home/wpmu/public_html/wp-content/themes/proto/img/icons/stars/full.avif
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 82 x 80, 8-bit colormap, non-interlaced\012- data
Size:   3048
Md5:    69ebde80a25085053db6504864e78e0f
Sha1:   8d948cb45d2e89e35d8317273dba28497845b1aa
Sha256: 8adb9ffa87fa9d986256a95a5efcc6a48ecbba72a0c37d18369187c8bf4daab0
                                        
                                            GET /wp-content/themes/proto/img/icons/stars/half.png HTTP/1.1 
Host: www.tights.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.tights.no/wp-content/themes/tights2/css/theme.css?ver=1669888705
Cookie: wordpress_google_apps_login=2c15ac3e74c3bb632db7c44a6d06f997; nhg-progress-sum=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.116.4.22
HTTP/2 200 OK
content-type: image/png
                                        
server: nginx
date: Fri, 02 Dec 2022 08:26:57 GMT
content-length: 2930
last-modified: Tue, 29 Jun 2021 07:54:18 GMT
etag: "60dad1aa-b72"
expires: Sat, 02 Dec 2023 08:26:57 GMT
cache-control: max-age=31536000
x_avif_sp_miss: /home/wpmu/public_html/wp-content/themes/proto/img/icons/stars/half.avif
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 82 x 80, 8-bit colormap, non-interlaced\012- data
Size:   2930
Md5:    5cc79a46afa2dee8ab7343c0aa3dba52
Sha1:   04ca8bf33ae8b37b98c80b86f1c9c9c6c01d03f6
Sha256: 8154df685eb3949f6e73d8a3c7385a6d095364ebc5c21952dd5d952bcbcbc3ad
                                        
                                            GET /eEgje2NHOF8RhoXDaerAJmYLXIgPhbFTLIrdhGP2/widget.js HTTP/1.1 
Host: staticw2.yotpo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.tights.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         95.101.97.70
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                        
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"6cf1ef8fcb1d9ad9d2f765f33ecbaf83"
x-request-id: 2bd22b9c975d6a07403abdc0ac42999a
x-runtime: 0.036377
access-control-allow-headers: *
content-length: 117644
cache-control: public, max-age=4490
date: Fri, 02 Dec 2022 08:26:57 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=1
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true