firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 804f8bbb7f556d51a5f52d5ebd5b6eef
922cd7e06df278615a04abb81d811d14596c8180
ef4804d381a34ab67873a7755621081c49c646310e085a9b2356ae07098f6021
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Alert, Content-Length, Backoff, Retry-After, Content-Type
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Tue, 20 Sep 2022 17:13:11 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: ti-zoy1B0EzI9jMtmdztltjXjuOT3kYC_WSJVgYpTBhUKl0RSZeJPA==
Age: 1476
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 861cfa99de956423d917ed0ddbea4b9c
ad65dbc394b48b04a45c205f56af296c8d008db4
5c706b2718b1698995f4feb91223779aef4bf6dc967c31f9ef9a93873197d5f9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5C706B2718B1698995F4FEB91223779AEF4BF6DC967C31F9EF9A93873197D5F9"
Last-Modified: Sun, 18 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10927
Expires: Tue, 20 Sep 2022 20:39:54 GMT
Date: Tue, 20 Sep 2022 17:37:47 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP
File type PEM certificate\012- , ASCII text
Hash 6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Tue, 20 Sep 2022 04:35:14 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: L2pNszRqBD6tMQ7c2s0bWy-UHJJlORNsR59NF2E81BjK0i3YGeMivw==
age: 46954
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 17:37:47 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Tue, 20 Sep 2022 17:03:22 GMT
Expires: Tue, 20 Sep 2022 17:30:17 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: km6sQb46LRhfcbBsIvtJTwr8u3DWckB9SvRrnlbrQBZWUKO9Egi5cw==
Age: 2065
gorillaboardwj.com/
200 OK 2.3 kB IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (646)
Hash 5959f537d01f126eebb1542de7feb203
392561e57dd4b8eae3f155a84b0f0896d0b2a2d5
d4fb95d656ea4b85ef986cfb12792e2d8c2ff942ee9ed4dd69051e1413936e43
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: gorillaboardwj.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Tue, 20 Sep 2022 17:37:47 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9
X-Powered-By: PHP/5.4.16
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
ocsp.digicert.com/
200 OK 471 B IP
Hash edf07cd621f733b0eb50c632387ebf4f
61a082d26501c2c8d481b1676d0de2e585269613
e5c4324e4c55824b86f48bf0b9a1d317a82e7d3c19bdea7a91d78ce98d68a980
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4514
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 20 Sep 2022 17:37:48 GMT
Last-Modified: Tue, 20 Sep 2022 16:22:34 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471
gorillaboardwj.com/page/bouncy.php?&bpae=GbhGtL3mtEx%2F9bvvvVlc7RyiSaVQzOtUvzt1V5hkm%2Fd9%2BKJg6%2FnAkaqEZf7cxCRbnXJNiIs7PfBGc5VamXMHVMbnv4XaEHjm%2B0%2Ba5MJi629JdEAnPpW78I7Lw21%2BJ3qF2DuFHTKVyPAgC3WKL0%2FZzGWVSw3%2B6VKJ7bdOcedFC5ycFGM1W54zHjU6%2BEGgQ7qdz10HA6QnHa5UrEbjMjHigig5XbnU1okYG4Uas7FT6T%2Fx6fslVmjCCmYbQUGsySJXW3hiEZ5d%2FMK0gwWR%2F3sF6CGevbJz1UPSQpGj7Tn%2BXSpFKmumGLsh8xRY6F7RBNC1gM0PyBtvt5eLGfFcTK7rihr8bjux%2FkQzluyuxo%2FihXF%2BopqubaP%2BH8CtpKWszHlusoD0h9P4h5mszUyYvtsg98ZQ7HSaZpF4%2BWGflR2HrQ7m35E72PeOYYzWuqU2GJx6lUi1NbDkn0byu3xV7G28gTR7ybxnJzPfis1DSLvzQ57o4ODYZYJ9r5rMJR2%2Fuk1aDLtT&redirectType=js&inIframe=false&inPopUp=false
200 OK 985 B URL HTTP/1.1 gorillaboardwj.com/page/bouncy.php?&bpae=GbhGtL3mtEx%2F9bvvvVlc7RyiSaVQzOtUvzt1V5hkm%2Fd9%2BKJg6%2FnAkaqEZf7cxCRbnXJNiIs7PfBGc5VamXMHVMbnv4XaEHjm%2B0%2Ba5MJi629JdEAnPpW78I7Lw21%2BJ3qF2DuFHTKVyPAgC3WKL0%2FZzGWVSw3%2B6VKJ7bdOcedFC5ycFGM1W54zHjU6%2BEGgQ7qdz10HA6QnHa5UrEbjMjHigig5XbnU1okYG4Uas7FT6T%2Fx6fslVmjCCmYbQUGsySJXW3hiEZ5d%2FMK0gwWR%2F3sF6CGevbJz1UPSQpGj7Tn%2BXSpFKmumGLsh8xRY6F7RBNC1gM0PyBtvt5eLGfFcTK7rihr8bjux%2FkQzluyuxo%2FihXF%2BopqubaP%2BH8CtpKWszHlusoD0h9P4h5mszUyYvtsg98ZQ7HSaZpF4%2BWGflR2HrQ7m35E72PeOYYzWuqU2GJx6lUi1NbDkn0byu3xV7G28gTR7ybxnJzPfis1DSLvzQ57o4ODYZYJ9r5rMJR2%2Fuk1aDLtT&redirectType=js&inIframe=false&inPopUp=false
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash d1e03e6f7c6a3f79f382bccdc19f757e
64b6b50a11826e7f6ec7fe96961dbcc7e17575d9
e6699f986a627ce0c4ee93c5ccc46356023680a8354bdc45808928239d142596
GET /page/bouncy.php?&bpae=GbhGtL3mtEx%2F9bvvvVlc7RyiSaVQzOtUvzt1V5hkm%2Fd9%2BKJg6%2FnAkaqEZf7cxCRbnXJNiIs7PfBGc5VamXMHVMbnv4XaEHjm%2B0%2Ba5MJi629JdEAnPpW78I7Lw21%2BJ3qF2DuFHTKVyPAgC3WKL0%2FZzGWVSw3%2B6VKJ7bdOcedFC5ycFGM1W54zHjU6%2BEGgQ7qdz10HA6QnHa5UrEbjMjHigig5XbnU1okYG4Uas7FT6T%2Fx6fslVmjCCmYbQUGsySJXW3hiEZ5d%2FMK0gwWR%2F3sF6CGevbJz1UPSQpGj7Tn%2BXSpFKmumGLsh8xRY6F7RBNC1gM0PyBtvt5eLGfFcTK7rihr8bjux%2FkQzluyuxo%2FihXF%2BopqubaP%2BH8CtpKWszHlusoD0h9P4h5mszUyYvtsg98ZQ7HSaZpF4%2BWGflR2HrQ7m35E72PeOYYzWuqU2GJx6lUi1NbDkn0byu3xV7G28gTR7ybxnJzPfis1DSLvzQ57o4ODYZYJ9r5rMJR2%2Fuk1aDLtT&redirectType=js&inIframe=false&inPopUp=false HTTP/1.1
Host: gorillaboardwj.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gorillaboardwj.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Tue, 20 Sep 2022 17:37:48 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9
X-Powered-By: PHP/5.4.16
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: OBPvUlKXnIfqhrgk5KzWxQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: kITxVPz+ZnXlmdleAnFTgolwVJM=
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash eb722a1f1d84c37e6e13f30617228592
feccd3218447fb61a0e5738d4d39504f6d558ac5
80309a28673d709361312a2ff59dd822c5c60b2478d3e09eb51faf18b30c50d7
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 20 Sep 2022 17:37:48 GMT
Last-Modified: Tue, 20 Sep 2022 16:21:11 GMT
Server: ECS (bsa/EB1B)
X-Cache: Miss from cloudfront
Via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: bvsDdmRKcG8C2t4KSzyjgdvhaToF1htWE0ttc94jqDZ3wVosHopvFg==
Age: 4597
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5f1d70dd622e890ae55e79f2382c53c4
d00bbe3defa23da93a013aba5e738fc1918fdaa1
fcaf76194609b5b76065e11652678b4ce3f951e32a93a0839a8d88c846efb209
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FCAF76194609B5B76065E11652678B4CE3F951E32A93A0839A8D88C846EFB209"
Last-Modified: Mon, 19 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5939
Expires: Tue, 20 Sep 2022 19:16:48 GMT
Date: Tue, 20 Sep 2022 17:37:49 GMT
Connection: keep-alive
clever-redirect.com/s/r6?s=623619497&s2=infuscate-hornet&s3=quebec-rif-v04grp6o2o
200 OK 356 B URL HTTP/2 clever-redirect.com/s/r6?s=623619497&s2=infuscate-hornet&s3=quebec-rif-v04grp6o2o
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (356), with no line terminators
Hash c46bd440e3f02693cfe18b787cb9ddf7
60c593a5cdb532eb7e141b51419f479b630f4d79
2b1cb0b9ed4fe64846a77519af6d49c1bd92f10861e86a1d083f4e2373b292e2
GET /s/r6?s=623619497&s2=infuscate-hornet&s3=quebec-rif-v04grp6o2o HTTP/1.1
Host: clever-redirect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://brynh-lei.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
referrer-policy: no-referrer
x-powered-by: PHP/7.4.27
set-cookie: e0de07b6a58d2f2709472406cbb175fd=b6176c7269f232e9f3640ae127b0af074589df8094de87c7342c64fda44458a7a%3A2%3A%7Bi%3A0%3Bs%3A32%3A%22e0de07b6a58d2f2709472406cbb175fd%22%3Bi%3A1%3Bs%3A1%3A%221%22%3B%7D; expires=Wed, 21-Sep-2022 17:37:49 GMT; Max-Age=86400; path=/; HttpOnly
content-length: 356
content-type: text/html; charset=UTF-8
date: Tue, 20 Sep 2022 17:37:49 GMT
server: Apache/2.4.52 (codeit) OpenSSL/1.1.1m PHP/7.4.27
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fe5ffc0bb967bf39c053d24cdfae521a
87bc50876b1600714e2c29608bf4af00fbfbd23e
ceaf52d90eaf692a8da9f6c353d09011e26d8e2b971ec4c17fcbcab8676c70c3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CEAF52D90EAF692A8DA9F6C353D09011E26D8E2B971EC4C17FCBCAB8676C70C3"
Last-Modified: Sun, 18 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14180
Expires: Tue, 20 Sep 2022 21:34:09 GMT
Date: Tue, 20 Sep 2022 17:37:49 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fe5ffc0bb967bf39c053d24cdfae521a
87bc50876b1600714e2c29608bf4af00fbfbd23e
ceaf52d90eaf692a8da9f6c353d09011e26d8e2b971ec4c17fcbcab8676c70c3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CEAF52D90EAF692A8DA9F6C353D09011E26D8E2B971EC4C17FCBCAB8676C70C3"
Last-Modified: Sun, 18 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14180
Expires: Tue, 20 Sep 2022 21:34:09 GMT
Date: Tue, 20 Sep 2022 17:37:49 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc72c9eb8-103b-4d09-b405-97d1a7ae99a8.webp
200 OK 9.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc72c9eb8-103b-4d09-b405-97d1a7ae99a8.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 30fbdfee7ec4513a5ff3dfcb7282f816
a852edb64a7220532aa619ab2a440c3a7e11b97a
4adee59f97bea412c6a0a786d0a27e431a497198b9047a75841b0a530803bdfe
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc72c9eb8-103b-4d09-b405-97d1a7ae99a8.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9543
x-amzn-requestid: 17be04c9-54f0-4988-82dd-f13911a2a629
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YugINHN1IAMF8iA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6328e09a-35496b4c21c23dec75257964;Sampled=0
x-amzn-remapped-date: Mon, 19 Sep 2022 21:35:22 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: y3urrVdjZEds_DKf3yL2XfaOy-5UPBwU-YVWe5eKYsDpl3JPmqffsw==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 b36bf2c460ac693ce304817aed073112.cloudfront.net (CloudFront), 1.1 google
date: Mon, 19 Sep 2022 22:23:30 GMT
age: 69259
etag: "a852edb64a7220532aa619ab2a440c3a7e11b97a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1b9b6fcc-4a98-463a-8c9c-a60812d5b535.jpeg
200 OK 9.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1b9b6fcc-4a98-463a-8c9c-a60812d5b535.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1a7d863845e96c5927e812f325c08c16
b8484fb5443344b03e52dd56b1d6c5682eb6221a
fcb382029332a44deaf212298b618074a752d674d0c735a1b8b861ab4bb6ff0f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1b9b6fcc-4a98-463a-8c9c-a60812d5b535.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 9865
x-amzn-requestid: 7eeeff5b-cb13-4060-96a6-bf5a4be57331
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YugokGQVoAMFXmA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6328e169-4211dbbe1a22d0255a45aff0;Sampled=0
x-amzn-remapped-date: Mon, 19 Sep 2022 21:38:49 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: zDPKSOJ7SJImKcluUMhGvVMHv4t2oKLD2AJfGKAFSfedsdSA4VgZ_g==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 e95ec8f1dc02e32f0cb9e113963ceb4e.cloudfront.net (CloudFront), 1.1 google
date: Mon, 19 Sep 2022 22:02:56 GMT
etag: "b8484fb5443344b03e52dd56b1d6c5682eb6221a"
content-type: image/jpeg
age: 70493
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4c2e0de8-088f-449b-a3cb-bbb83e3883a6.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4c2e0de8-088f-449b-a3cb-bbb83e3883a6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2ed7323b395e757f7766ea0045efdaca
8b91bc3069a3217bc719c27959d578b353b5d9dc
8daf8cb1464daa5f72bc4f1049adb4aba00b2c2dec11cb3ade3454ec2ebbfb63
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4c2e0de8-088f-449b-a3cb-bbb83e3883a6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11832
x-amzn-requestid: 75065a71-5f2d-4987-915b-9bddc772c76a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YugI_EsLIAMFdmQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6328e09f-1248d25405209da3353d4a4a;Sampled=0
x-amzn-remapped-date: Mon, 19 Sep 2022 21:35:27 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 7sCevVX1nGXxZxnrXSURjUcap1a7vCZwrMMIXfzcBPR1srMxJHLGUg==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Mon, 19 Sep 2022 22:07:05 GMT
age: 70244
etag: "8b91bc3069a3217bc719c27959d578b353b5d9dc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1d1af9c9-23b5-42e1-b7c6-655c21db6627.jpeg
200 OK 9.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1d1af9c9-23b5-42e1-b7c6-655c21db6627.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7ca0c1a7f205ad07f1cce80b26448873
0e14f5062e40ce94346494ff947bfcf74b5e88c1
ebc960279032671136749823c126ec807334d9eaf2b019abcc63b41bcdbf4a7f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1d1af9c9-23b5-42e1-b7c6-655c21db6627.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9873
x-amzn-requestid: 7171299f-e6e3-40ef-a292-33779346e1ee
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YugI-FDIIAMF-xg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6328e09f-31f9413434a6b00e77e7709b;Sampled=0
x-amzn-remapped-date: Mon, 19 Sep 2022 21:35:27 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: evL3aL1ULo6B2a8Rp6iILKCX7F14O9HMSbEqkEY3XHFhmMptE8FaVw==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Mon, 19 Sep 2022 21:50:04 GMT
age: 71265
etag: "0e14f5062e40ce94346494ff947bfcf74b5e88c1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F28b8af49-2631-4a57-aeca-43e33f0f6d83.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F28b8af49-2631-4a57-aeca-43e33f0f6d83.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c283017ec789693602177a2785177e21
ff8286c4d2cf87a1865d56d082bc5235dba60ad7
520db2567ad5529d35d2ac63b94d4186848382e9c86d0c4355ab979b34f0e0ab
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F28b8af49-2631-4a57-aeca-43e33f0f6d83.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11145
x-amzn-requestid: dcb726a6-2f43-4170-a53c-4f0d2883309e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yuh7yHfHIAMFu4g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6328e37e-11bf06e96123e01c11854cbb;Sampled=0
x-amzn-remapped-date: Mon, 19 Sep 2022 21:47:42 GMT
x-amz-cf-pop: SEA73-P2, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: DwufJXA1yHz_jnJL0PWjCQYF9fa3jlJ0e-2hIomInAXCpmPISX3mjg==
via: 1.1 b47618c03bd47cf085f27b1e215f76cc.cloudfront.net (CloudFront), 1.1 35575576af8067e30cfb17c6b9fde8e2.cloudfront.net (CloudFront), 1.1 google
date: Mon, 19 Sep 2022 22:02:33 GMT
age: 70516
etag: "ff8286c4d2cf87a1865d56d082bc5235dba60ad7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a91bc33-86f4-4bda-af70-da083ceb7c72.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a91bc33-86f4-4bda-af70-da083ceb7c72.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d3e70b2859ca89b353682d03f6b46b93
ebd83f29edd95217dfa4f4c7a94eddf34dd58b14
43ad8f8b0a664bbec39e0410c1201498a2d2e36e5bd7d5ece8d65b15230ec50b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a91bc33-86f4-4bda-af70-da083ceb7c72.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10894
x-amzn-requestid: f7aad96e-af80-4db7-8bc1-d1e09a9b37e8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YeJQGHhOIAMFYuw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6322559a-538534e91448af217c59ab3d;Sampled=0
x-amzn-remapped-date: Wed, 14 Sep 2022 22:28:42 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: P7aZQzmAvqn2rcHJUQjHo0Dcg8dsrqseey5mNOabfq1b857M4SUMDQ==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google
date: Tue, 20 Sep 2022 02:46:17 GMT
age: 53492
etag: "ebd83f29edd95217dfa4f4c7a94eddf34dd58b14"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8413f43c7424329f567e77139a370df8
65bc0048d54de77a2a57ebe94012964836d8a5f4
53573669dfac593d9963c1aa32fa470334583073f00e29274eb7098613d3d49c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "53573669DFAC593D9963C1AA32FA470334583073F00E29274EB7098613D3D49C"
Last-Modified: Mon, 19 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2075
Expires: Tue, 20 Sep 2022 18:12:24 GMT
Date: Tue, 20 Sep 2022 17:37:49 GMT
Connection: keep-alive
lookandfind.me/s/a?t=10&f=1&u=f4bdb01fc36e3f720c2a963a770625c6&m=ginatricot.com&s1=623619497&s2=infuscate-hornet&s3=quebec-rif-v04grp6o2o&s5=cf
200 OK 939 B URL HTTP/2 lookandfind.me/s/a?t=10&f=1&u=f4bdb01fc36e3f720c2a963a770625c6&m=ginatricot.com&s1=623619497&s2=infuscate-hornet&s3=quebec-rif-v04grp6o2o&s5=cf
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document, ASCII text, with very long lines (939), with no line terminators
Hash 2fd365bffbfb4457c137bcacd6a8a907
6f918be55f2030fd6725926e0ec4ee67915fec7a
d7ad3ffb104337c88e6bb9aa3ff4ade0621b1c001d3e2aee2651e09b80e3575f
GET /s/a?t=10&f=1&u=f4bdb01fc36e3f720c2a963a770625c6&m=ginatricot.com&s1=623619497&s2=infuscate-hornet&s3=quebec-rif-v04grp6o2o&s5=cf HTTP/1.1
Host: lookandfind.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
referrer-policy: strict-origin-when-cross-origin
x-powered-by: PHP/7.4.30
set-cookie: 49eba57452792a2d39a468b3a844904b=9b176944a86e3f617dd5ba25ddac89c6e1b21290f7df32f84554bce76b1d1eeba%3A2%3A%7Bi%3A0%3Bs%3A32%3A%2249eba57452792a2d39a468b3a844904b%22%3Bi%3A1%3Bs%3A1%3A%221%22%3B%7D; expires=Wed, 21-Sep-2022 17:37:50 GMT; Max-Age=86400; path=/; HttpOnly
content-length: 939
content-type: text/html; charset=UTF-8
date: Tue, 20 Sep 2022 17:37:50 GMT
server: Apache/2.4.54 (codeit) OpenSSL/1.1.1q+quic PHP/7.4.30
X-Firefox-Spdy: h2
lookandfind.me/s/r?u=https%3A%2F%2Fapi.yadore.com%2Fv2%2Fr%3Fe%3DVDdpRUhPdXpjUnB0MFB3RWh2VEl4TGorZnVZZ0dKM3lvWlp6Zmt4TG5jcXdtU3lDQVFmM0RHZmluUlVBb2taSGNhdWZrWWo3bitaUzRhNzVIeTkzL2xmWjhycTNFcytLT2lvUVhFSnhSU1lqTU5neGxJQ0VXZUtONEplN0RxQnlqZFBadkx2enJHRmNXSURMaVBaZzBYcDRWVlhPUUljVHkycGJIT1ZXaGF3RDdseW9VR1FvRTNPQnU2UUlYZEdFYkNBMVpCR3FYYk5QaVoxY2EwaDhEUWFpR2xyUzdVZ3RYQkpaMlc5S1dmRFdaYnBhZ1dNQUNDOGVHU3VYQm5ITDFxU1FobmxZTGtQV3ZrM2NrMlB5MHNqcmtlZjNOQUdOZzFEY2JWVTFJMXF3RC9IMCsyY3VIVnF1eUZVUzZ0V0tSN3kxVEttb1RTTndIeHNiR2MzYVpyWk54SEVtaXQyR3VZNWxMeUZvNlp1dkg3OFdUWXl4S0dQU08vRVNEc1E2b1UxQXFjU0VtZ1pHZnJ2VHROa3g0QlZaSnRjZEV6Z3M4c21EQ1E9PQ%3D%3D%26i%3DU7kQ5BCgyD9BaLr0%26placementId%3D41aa08bd92ba0bc1f39ff4d628484e0e&h=6f94b435425a490ad311589146a11250
200 OK 867 B URL HTTP/2 lookandfind.me/s/r?u=https%3A%2F%2Fapi.yadore.com%2Fv2%2Fr%3Fe%3DVDdpRUhPdXpjUnB0MFB3RWh2VEl4TGorZnVZZ0dKM3lvWlp6Zmt4TG5jcXdtU3lDQVFmM0RHZmluUlVBb2taSGNhdWZrWWo3bitaUzRhNzVIeTkzL2xmWjhycTNFcytLT2lvUVhFSnhSU1lqTU5neGxJQ0VXZUtONEplN0RxQnlqZFBadkx2enJHRmNXSURMaVBaZzBYcDRWVlhPUUljVHkycGJIT1ZXaGF3RDdseW9VR1FvRTNPQnU2UUlYZEdFYkNBMVpCR3FYYk5QaVoxY2EwaDhEUWFpR2xyUzdVZ3RYQkpaMlc5S1dmRFdaYnBhZ1dNQUNDOGVHU3VYQm5ITDFxU1FobmxZTGtQV3ZrM2NrMlB5MHNqcmtlZjNOQUdOZzFEY2JWVTFJMXF3RC9IMCsyY3VIVnF1eUZVUzZ0V0tSN3kxVEttb1RTTndIeHNiR2MzYVpyWk54SEVtaXQyR3VZNWxMeUZvNlp1dkg3OFdUWXl4S0dQU08vRVNEc1E2b1UxQXFjU0VtZ1pHZnJ2VHROa3g0QlZaSnRjZEV6Z3M4c21EQ1E9PQ%3D%3D%26i%3DU7kQ5BCgyD9BaLr0%26placementId%3D41aa08bd92ba0bc1f39ff4d628484e0e&h=6f94b435425a490ad311589146a11250
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (867), with no line terminators
Hash fb67d5e2f0004826655164bab43ea055
e501f182aebc909db015d861e23e883db44decba
b0304c932bb9abf64694dac0bc1b62319d67a272df398196381eda13d514418e
GET /s/r?u=https%3A%2F%2Fapi.yadore.com%2Fv2%2Fr%3Fe%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%3D%3D%26i%3DU7kQ5BCgyD9BaLr0%26placementId%3D41aa08bd92ba0bc1f39ff4d628484e0e&h=6f94b435425a490ad311589146a11250 HTTP/1.1
Host: lookandfind.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: 49eba57452792a2d39a468b3a844904b=9b176944a86e3f617dd5ba25ddac89c6e1b21290f7df32f84554bce76b1d1eeba%3A2%3A%7Bi%3A0%3Bs%3A32%3A%2249eba57452792a2d39a468b3a844904b%22%3Bi%3A1%3Bs%3A1%3A%221%22%3B%7D
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
referrer-policy: strict-origin-when-cross-origin
x-powered-by: PHP/7.4.30
content-length: 867
content-type: text/html; charset=UTF-8
date: Tue, 20 Sep 2022 17:37:50 GMT
server: Apache/2.4.54 (codeit) OpenSSL/1.1.1q+quic PHP/7.4.30
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f64a8585ebe7ea2d7216868a159d30e0
3398111ad4c42f71bd65800976e1aad7afc1a59a
285e3c7e02599d3b578ba1bd004eb1e851118f27c418a066814741c12b6bf7a2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "285E3C7E02599D3B578BA1BD004EB1E851118F27C418A066814741C12B6BF7A2"
Last-Modified: Sun, 18 Sep 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15626
Expires: Tue, 20 Sep 2022 21:58:16 GMT
Date: Tue, 20 Sep 2022 17:37:50 GMT
Connection: keep-alive
brynh-lei.com/zcvisitor/f1119177-390a-11ed-8ede-124d48d46f5f/c48f16c0-a519-11ec-9226-0a76dcc61f13?campaignid=4fb4e190-e7f9-11ec-be3c-128084d1ce51
200 OK 1.4 kB URL HTTP/2 brynh-lei.com/zcvisitor/f1119177-390a-11ed-8ede-124d48d46f5f/c48f16c0-a519-11ec-9226-0a76dcc61f13?campaignid=4fb4e190-e7f9-11ec-be3c-128084d1ce51
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash fd8eac5671898836996b8635030a0592
bfd40c006550885d067932036dcaadf277b574f7
286febebd54b8497b9077c3099817ae7f7004a491efedd0cf7ba3528ea6cbd6e
GET /zcvisitor/f1119177-390a-11ed-8ede-124d48d46f5f/c48f16c0-a519-11ec-9226-0a76dcc61f13?campaignid=4fb4e190-e7f9-11ec-be3c-128084d1ce51 HTTP/1.1
Host: brynh-lei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://gorillaboardwj.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 20 Sep 2022 17:37:49 GMT
content-type: text/html;charset=UTF-8
cache-control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-webkit-csp: default-src 'self'; script-src 'self' 'unsafe-inline'
access-control-allow-origin: *
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-headers: X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag
server: VoCYWwYY
X-Firefox-Spdy: h2
status.thawte.com/
200 OK 471 B IP
Hash 10734b7d5832d2bcc97175e094bd7151
94bc94f0aa4242de3f6678e75535249d64e117b7
f00294810adee070df4eb361526016228fdec74ba964007d56c2c1cf4e0256fd
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4071
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 20 Sep 2022 17:37:50 GMT
Last-Modified: Tue, 20 Sep 2022 16:29:59 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471
no-go.kelkoogroup.net/ctl/go/offersearchGo?.ts=1663677900636&.sig=MnI7eote6sYkOmId71OctQTHOis-&affiliationId=96965886&comId=100457524&country=no&offerId=1141ba58d0601faf42023496d502d129&service=37&tokenId=eef84b7f-8e19-45d1-adee-7c88767dc72d&wait=true&addedParams=true&custom1=11e9d0e38bead65e81956fc82fae05a7652a2fb834d5272598e4df30955e711b&custom2=SRdytlITOR16&custom3=false
200 OK 33 kB URL HTTP/1.1 no-go.kelkoogroup.net/ctl/go/offersearchGo?.ts=1663677900636&.sig=MnI7eote6sYkOmId71OctQTHOis-&affiliationId=96965886&comId=100457524&country=no&offerId=1141ba58d0601faf42023496d502d129&service=37&tokenId=eef84b7f-8e19-45d1-adee-7c88767dc72d&wait=true&addedParams=true&custom1=11e9d0e38bead65e81956fc82fae05a7652a2fb834d5272598e4df30955e711b&custom2=SRdytlITOR16&custom3=false
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (12978)
Hash 8b262891094cb4be9ae3d4a5305eef63
213cc1f26d314e9599a0680fb07cbe7f47c81d4a
6656a6355de6db9a1163a1d33978bb4cc1bbffc8bcf665bd621c8ec1c4c20eae
GET /ctl/go/offersearchGo?.ts=1663677900636&.sig=MnI7eote6sYkOmId71OctQTHOis-&affiliationId=96965886&comId=100457524&country=no&offerId=1141ba58d0601faf42023496d502d129&service=37&tokenId=eef84b7f-8e19-45d1-adee-7c88767dc72d&wait=true&addedParams=true&custom1=11e9d0e38bead65e81956fc82fae05a7652a2fb834d5272598e4df30955e711b&custom2=SRdytlITOR16&custom3=false HTTP/1.1
Host: no-go.kelkoogroup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lookandfind.me/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 20 Sep 2022 17:37:50 GMT
leadId: dc1-kls-prod-ls-01.prod.dc1.kelkoo.net_1663695470635_483429
clickId: 107698149_1663695470626_1070078
country: no
Accept-CH: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory
X-DataDome: protected
Request-Time: PT0.017619S
X-Robots-Tag: noindex,nofollow
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: ALLOWALL
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: master-only
Content-Type: text/html; charset=UTF-8
Content-Length: 32841
Set-Cookie: datadome=..NYxUWjWwMEjOJm~GKa-vcUQuwcqmT8I12lnpKPEMGjJ69i~~KBmXrMEQuZ79jVFgxlH2ahUrRiEWySCpJIZ5NZ6DfSZTxbjwjo5Ul_jcOP9Cnt3AA86wbdR~GZAnD7; Max-Age=31536000; Expires=Wed, 20 Sep 2023 17:37:50 GMT; SameSite=Lax; Path=/; Domain=.kelkoogroup.net; Secure
kelkooID=a4c6295-1835bfa4023-48d46; Max-Age=31536000; Expires=Wed, 20 Sep 2023 17:37:50 GMT; SameSite=None; Path=/; Domain=kelkoogroup.net; Secure; HTTPOnly
P3P: CP="Anything"
ApacheTracking: localhost
Keep-Alive: timeout=40, max=92
Connection: Keep-Alive
no-go.kelkoogroup.net/assets/images/p.png?country=no&k=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&leadId=dc1-kls-prod-ls-01.prod.dc1.kelkoo.net_1663695470635_483429&clickId=107698149_1663695470626_1070078
200 OK 68 B URL HTTP/1.1 no-go.kelkoogroup.net/assets/images/p.png?country=no&k=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&leadId=dc1-kls-prod-ls-01.prod.dc1.kelkoo.net_1663695470635_483429&clickId=107698149_1663695470626_1070078
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced\012- data
Hash 91e42db1c66c0b276abf6234dc50b2eb
c1986af3c26609b8b7d8933f99c51c1a89e9ea6b
63ef318d96b5d0d0ceba6e04a4e622b1158335cdc67c49e27839132c6f655058
GET /assets/images/p.png?country=no&k=612f7a9541cd6ea61eb554c0e4cff43705260665475808a79ff72c5f4eb11018307edb65d75243eae5046bf07cc026a13e6431ce0f64f1894160acf1a23aa5523e5f16ceff04ad05e5283484e2af31c0759a595b2155630a88a5fd85ece94f2b1639a47884eb4aebe4a9e9fab87aa552cbf2c06d46de5c78197f70d84a3df85603ea9e79e77ca441fbc13a5c460d08e30ee82356776d31629d7ab602a3cf4fa9efffb201918e003c4af96732aa124a8cd3edc821d522f6faee5af3335c32c5ca62ec31f495bc0c9f68d4ed8f246a4569ba76cbf2259d71cc0d8a36b76aed739b71f11a20b20f5109f037230a884a494040660bc3c715c58b7e318d0d3c472e96fed7aad700c479d8ca70c5b0fc066a3a13dca6307cd31fad&leadId=dc1-kls-prod-ls-01.prod.dc1.kelkoo.net_1663695470635_483429&clickId=107698149_1663695470626_1070078 HTTP/1.1
Host: no-go.kelkoogroup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no-go.kelkoogroup.net/ctl/go/offersearchGo?.ts=1663677900636&.sig=MnI7eote6sYkOmId71OctQTHOis-&affiliationId=96965886&comId=100457524&country=no&offerId=1141ba58d0601faf42023496d502d129&service=37&tokenId=eef84b7f-8e19-45d1-adee-7c88767dc72d&wait=true&addedParams=true&custom1=11e9d0e38bead65e81956fc82fae05a7652a2fb834d5272598e4df30955e711b&custom2=SRdytlITOR16&custom3=false
Connection: keep-alive
Cookie: datadome=..NYxUWjWwMEjOJm~GKa-vcUQuwcqmT8I12lnpKPEMGjJ69i~~KBmXrMEQuZ79jVFgxlH2ahUrRiEWySCpJIZ5NZ6DfSZTxbjwjo5Ul_jcOP9Cnt3AA86wbdR~GZAnD7; kelkooID=a4c6295-1835bfa4023-48d46
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 20 Sep 2022 17:37:50 GMT
Request-Time: PT0.001746S
X-Robots-Tag: noindex,nofollow
Cache-Control: private, must-revalidate
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: ALLOWALL
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: master-only
Content-Type: image/png
Content-Length: 68
P3P: CP="Anything"
ApacheTracking: localhost
Keep-Alive: timeout=40, max=99
Connection: Keep-Alive
dd.kelkoogroup.net/tags.js
200 OK 42 kB URL HTTP/2 dd.kelkoogroup.net/tags.js
IP
File type ASCII text, with very long lines (65432)
Hash 7150acd408b7e8d6c917ecfcfbe47050
cb61fa84f12b95b9be19e8fb351231e393d72dfa
f2e8c6d5e71cff0727daf02501140f20ed2980b52a4b9f7db037efbd674a0854
GET /tags.js HTTP/1.1
Host: dd.kelkoogroup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no-go.kelkoogroup.net/
Connection: keep-alive
Cookie: datadome=..NYxUWjWwMEjOJm~GKa-vcUQuwcqmT8I12lnpKPEMGjJ69i~~KBmXrMEQuZ79jVFgxlH2ahUrRiEWySCpJIZ5NZ6DfSZTxbjwjo5Ul_jcOP9Cnt3AA86wbdR~GZAnD7; kelkooID=a4c6295-1835bfa4023-48d46
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: text/javascript
content-length: 42506
server: Apache
strict-transport-security: max-age=63072000; includeSubDomains; preload
last-modified: Thu, 08 Sep 2022 07:49:28 GMT
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
via: 1.1 109c7a7f1cf897851e09b16d3030a948.cloudfront.net (CloudFront), 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
date: Tue, 20 Sep 2022 16:50:02 GMT
cache-control: max-age=3600, public
expires: Tue, 20 Sep 2022 17:49:58 GMT
etag: "32ef7-5e825ab48f67d-gzip"
vary: Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: FRA60-P2, OSL50-P1
x-amz-cf-id: tZiKA4jkPrdMaFfAx4dCuQxAQfEcTf-drkQcin7hdQiRqgU8clip8g==
age: 2872
X-Firefox-Spdy: h2
no-go.kelkoogroup.net/favicon.ico
403 Forbidden 0 B URL HTTP/1.0 no-go.kelkoogroup.net/favicon.ico
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: no-go.kelkoogroup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no-go.kelkoogroup.net/ctl/go/offersearchGo?.ts=1663677900636&.sig=MnI7eote6sYkOmId71OctQTHOis-&affiliationId=96965886&comId=100457524&country=no&offerId=1141ba58d0601faf42023496d502d129&service=37&tokenId=eef84b7f-8e19-45d1-adee-7c88767dc72d&wait=true&addedParams=true&custom1=11e9d0e38bead65e81956fc82fae05a7652a2fb834d5272598e4df30955e711b&custom2=SRdytlITOR16&custom3=false
Connection: keep-alive
Cookie: datadome=..NYxUWjWwMEjOJm~GKa-vcUQuwcqmT8I12lnpKPEMGjJ69i~~KBmXrMEQuZ79jVFgxlH2ahUrRiEWySCpJIZ5NZ6DfSZTxbjwjo5Ul_jcOP9Cnt3AA86wbdR~GZAnD7; kelkooID=a4c6295-1835bfa4023-48d46; _ga=GA1.2.1308051892.1663695470; _gid=GA1.2.17451406.1663695470
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.0 403 Forbidden
Server: BigIP
Connection: Keep-Alive
Content-Length: 0
no-go.kelkoogroup.net/fp?country=no&k=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&leadId=dc1-kls-prod-ls-01.prod.dc1.kelkoo.net_1663695470635_483429&clickId=107698149_1663695470626_1070078
200 OK 0 B URL HTTP/1.1 no-go.kelkoogroup.net/fp?country=no&k=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&leadId=dc1-kls-prod-ls-01.prod.dc1.kelkoo.net_1663695470635_483429&clickId=107698149_1663695470626_1070078
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /fp?country=no&k=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&leadId=dc1-kls-prod-ls-01.prod.dc1.kelkoo.net_1663695470635_483429&clickId=107698149_1663695470626_1070078 HTTP/1.1
Host: no-go.kelkoogroup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no-go.kelkoogroup.net/ctl/go/offersearchGo?.ts=1663677900636&.sig=MnI7eote6sYkOmId71OctQTHOis-&affiliationId=96965886&comId=100457524&country=no&offerId=1141ba58d0601faf42023496d502d129&service=37&tokenId=eef84b7f-8e19-45d1-adee-7c88767dc72d&wait=true&addedParams=true&custom1=11e9d0e38bead65e81956fc82fae05a7652a2fb834d5272598e4df30955e711b&custom2=SRdytlITOR16&custom3=false
Content-Type: text/plain;charset=utf-8
Content-Length: 520
Origin: https://no-go.kelkoogroup.net
Connection: keep-alive
Cookie: datadome=..NYxUWjWwMEjOJm~GKa-vcUQuwcqmT8I12lnpKPEMGjJ69i~~KBmXrMEQuZ79jVFgxlH2ahUrRiEWySCpJIZ5NZ6DfSZTxbjwjo5Ul_jcOP9Cnt3AA86wbdR~GZAnD7; kelkooID=a4c6295-1835bfa4023-48d46; _ga=GA1.2.1308051892.1663695470; _gid=GA1.2.17451406.1663695470
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 20 Sep 2022 17:37:50 GMT
Request-Time: PT0.003505S
X-Robots-Tag: noindex,nofollow
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: ALLOWALL
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: master-only
Content-Type: text/plain; charset=UTF-8
Content-Length: 0
P3P: CP="Anything"
ApacheTracking: localhost
Keep-Alive: timeout=40, max=74
Connection: Keep-Alive
no-go.kelkoogroup.net/redirect?country=no&k=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&leadId=dc1-kls-prod-ls-01.prod.dc1.kelkoo.net_1663695470635_483429&clickId=107698149_1663695470626_1070078&url=https%3A%2F%2Fpdt.tradedoubler.com%2Fclick%3Fa%281532448%29p%28283778%29product%2825439-808277194104%29ttid%283%29url%28https%253A%252F%252Fwww.ginatricot.com%252Fno%252Fklaer%252Ftopper%252Fsingleter%252Fsinglet-808277194%29epi%28dc1-kls-prod-ls-01.prod.dc1.kelkoo.net_1663695470635_483429%29
303 See Other 0 B URL HTTP/1.1 no-go.kelkoogroup.net/redirect?country=no&k=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&leadId=dc1-kls-prod-ls-01.prod.dc1.kelkoo.net_1663695470635_483429&clickId=107698149_1663695470626_1070078&url=https%3A%2F%2Fpdt.tradedoubler.com%2Fclick%3Fa%281532448%29p%28283778%29product%2825439-808277194104%29ttid%283%29url%28https%253A%252F%252Fwww.ginatricot.com%252Fno%252Fklaer%252Ftopper%252Fsingleter%252Fsinglet-808277194%29epi%28dc1-kls-prod-ls-01.prod.dc1.kelkoo.net_1663695470635_483429%29
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /redirect?country=no&k=612f7a9541cd6ea61eb554c0e4cff43705260665475808a79ff72c5f4eb11018307edb65d75243eae5046bf07cc026a13e6431ce0f64f1894160acf1a23aa5523e5f16ceff04ad05e5283484e2af31c0759a595b2155630a88a5fd85ece94f2b1639a47884eb4aebe4a9e9fab87aa552cbf2c06d46de5c78197f70d84a3df85603ea9e79e77ca441fbc13a5c460d08e30ee82356776d31629d7ab602a3cf4fa9efffb201918e003c4af96732aa124a8cd3edc821d522f6faee5af3335c32c5ca62ec31f495bc0c9f68d4ed8f246a4569ba76cbf2259d71cc0d8a36b76aed739b71f11a20b20f5109f037230a884a494040660bc3c715c58b7e318d0d3c472e96fed7aad700c479d8ca70c5b0fc066a3a13dca6307cd31fad&leadId=dc1-kls-prod-ls-01.prod.dc1.kelkoo.net_1663695470635_483429&clickId=107698149_1663695470626_1070078&url=https%3A%2F%2Fpdt.tradedoubler.com%2Fclick%3Fa%281532448%29p%28283778%29product%2825439-808277194104%29ttid%283%29url%28https%253A%252F%252Fwww.ginatricot.com%252Fno%252Fklaer%252Ftopper%252Fsingleter%252Fsinglet-808277194%29epi%28dc1-kls-prod-ls-01.prod.dc1.kelkoo.net_1663695470635_483429%29 HTTP/1.1
Host: no-go.kelkoogroup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no-go.kelkoogroup.net/ctl/go/offersearchGo?.ts=1663677900636&.sig=MnI7eote6sYkOmId71OctQTHOis-&affiliationId=96965886&comId=100457524&country=no&offerId=1141ba58d0601faf42023496d502d129&service=37&tokenId=eef84b7f-8e19-45d1-adee-7c88767dc72d&wait=true&addedParams=true&custom1=11e9d0e38bead65e81956fc82fae05a7652a2fb834d5272598e4df30955e711b&custom2=SRdytlITOR16&custom3=false
Connection: keep-alive
Cookie: datadome=..NYxUWjWwMEjOJm~GKa-vcUQuwcqmT8I12lnpKPEMGjJ69i~~KBmXrMEQuZ79jVFgxlH2ahUrRiEWySCpJIZ5NZ6DfSZTxbjwjo5Ul_jcOP9Cnt3AA86wbdR~GZAnD7; kelkooID=a4c6295-1835bfa4023-48d46; _ga=GA1.2.1308051892.1663695470; _gid=GA1.2.17451406.1663695470
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
HTTP/1.1 303 See Other
Date: Tue, 20 Sep 2022 17:37:50 GMT
leadId: dc1-kls-prod-ls-01.prod.dc1.kelkoo.net_1663695470635_483429
clickId: 107698149_1663695470626_1070078
country: no
Location: https://pdt.tradedoubler.com/click?a(1532448)p(283778)product(25439-808277194104)ttid(3)url(https%3A%2F%2Fwww.ginatricot.com%2Fno%2Fklaer%2Ftopper%2Fsingleter%2Fsinglet-808277194)epi(dc1-kls-prod-ls-01.prod.dc1.kelkoo.net_1663695470635_483429)
Accept-CH: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory
X-DataDome: protected
Request-Time: PT0.014584S
X-Robots-Tag: noindex,nofollow
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: ALLOWALL
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: master-only
Content-Length: 0
Set-Cookie: datadome=X3Z7XY.JY8WaICy2oaAbjp4maDWatH44l.cYBZ2E1A4IubczfoeEaeboicnF8kH-GrchOEXRHZUFgPnlkyYU-ypu1fBm7DRWfiVpWraAlVbdgj_5TH_CcGk8JOOZ_8K; Max-Age=31536000; Expires=Wed, 20 Sep 2023 17:37:50 GMT; SameSite=Lax; Path=/; Domain=.kelkoogroup.net; Secure
P3P: CP="Anything"
ApacheTracking: localhost
Keep-Alive: timeout=40, max=95
Connection: Keep-Alive
Content-Type: text/plain
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 50c6a2a59bef3884496665a274427d43
afc880faf7c7c5ca7448d034309552ba801fd696
366af4add5f40ed4ba30b71570b094ad4f20a799ef1debd6b35e14912a4ff899
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "366AF4ADD5F40ED4BA30B71570B094AD4F20A799EF1DEBD6B35E14912A4FF899"
Last-Modified: Mon, 19 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10583
Expires: Tue, 20 Sep 2022 20:34:13 GMT
Date: Tue, 20 Sep 2022 17:37:50 GMT
Connection: keep-alive
pdt.tradedoubler.com/click?a(1532448)p(283778)product(25439-808277194104)ttid(3)url(https%3A%2F%2Fwww.ginatricot.com%2Fno%2Fklaer%2Ftopper%2Fsingleter%2Fsinglet-808277194)epi(dc1-kls-prod-ls-01.prod.dc1.kelkoo.net_1663695470635_483429)
200 OK 1.4 kB URL HTTP/2 pdt.tradedoubler.com/click?a(1532448)p(283778)product(25439-808277194104)ttid(3)url(https%3A%2F%2Fwww.ginatricot.com%2Fno%2Fklaer%2Ftopper%2Fsingleter%2Fsinglet-808277194)epi(dc1-kls-prod-ls-01.prod.dc1.kelkoo.net_1663695470635_483429)
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (649)
Hash bb5183377c9e69cff0265164b16165e0
e681e588dd2c0167235060da62d7b03067b0cf9b
0db210a241eeacefe0eec7596becefd44d78bcec4324e9acdf68136f759495d9
GET /click?a(1532448)p(283778)product(25439-808277194104)ttid(3)url(https%3A%2F%2Fwww.ginatricot.com%2Fno%2Fklaer%2Ftopper%2Fsingleter%2Fsinglet-808277194)epi(dc1-kls-prod-ls-01.prod.dc1.kelkoo.net_1663695470635_483429) HTTP/1.1
Host: pdt.tradedoubler.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no-go.kelkoogroup.net/
Cookie: EH_0=1z11z1zwBzfqrx5z1DPWyZkB3FCJyERkfV2MdfP%7a5N%79Cj.RkaPl5pWtNGdqc%79wxi3RI8%79m07jUSgxd9e6e_ivh%79m12g7PaVw2Rg%7aprPmNlOeJbs%7aDRMj_BZ%79cUHLxL4x5Mmt%7aIDIG3gI6UIk%79E_%7a5p.G7LxqsOM4v%7aJ5Oj2sN; GUID=1z11zzwBz2Fje8Kz3a7a46a30a8cba5ea321c1f15a2c85c8; TradeDoublerGUID=3a7a46a30a8cba5ea321c1f15a2c85c8
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=ISO-8859-1
server: TXServerHttp
access-control-allow-origin: *
cache-control: private, max-age=0
pragma: no-cache
p3p: policyref="http://tracker.tradedoubler.com/w3c/p3p.xml",CP="NOI DSP COR NID CUR OUR NOR"
referrer-policy: origin
date: Tue, 20 Sep 2022 17:37:50 GMT
content-length: 1391
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.usertrust.com/
200 OK 471 B IP
Hash d7560181446d1841e0c96ba262009190
2cb9d907d6853d4de43e1b317368cf30e97f5187
ebdf275f883f5de04aff4c2751c8ca650698e3e429e021b95af377a046b5dce3
POST / HTTP/1.1
Host: ocsp.usertrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 20 Sep 2022 17:37:50 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 19 Sep 2022 20:56:57 GMT
Expires: Mon, 26 Sep 2022 20:56:56 GMT
Etag: "2cb9d907d6853d4de43e1b317368cf30e97f5187"
Cache-Control: max-age=603037,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 1281
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74dc54d5af15fab8-OSL
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 50c6a2a59bef3884496665a274427d43
afc880faf7c7c5ca7448d034309552ba801fd696
366af4add5f40ed4ba30b71570b094ad4f20a799ef1debd6b35e14912a4ff899
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "366AF4ADD5F40ED4BA30B71570B094AD4F20A799EF1DEBD6B35E14912A4FF899"
Last-Modified: Mon, 19 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10582
Expires: Tue, 20 Sep 2022 20:34:13 GMT
Date: Tue, 20 Sep 2022 17:37:51 GMT
Connection: keep-alive
vht.tradedoubler.com/fp/prefs.js
200 OK 3.7 kB URL HTTP/1.1 vht.tradedoubler.com/fp/prefs.js
IP
File type ASCII text, with very long lines (764)
Hash 9042aeefa6b50fd89dafd065aee87148
0903b60da6faa7a16b30fe42a0974ae20c0e09bf
dcde81d721f2b5f9e932b434eff9f39b07ce0803a772c991296ddd4e9e8e0b30
GET /fp/prefs.js HTTP/1.1
Host: vht.tradedoubler.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pdt.tradedoubler.com/
Connection: keep-alive
Cookie: EH_0=1z11z1zwBzfqrx5z1DPWyZkB3FCJyERkfV2MdfP%7a5N%79Cj.RkaPl5pWtNGdqc%79wxi3RI8%79m07jUSgxd9e6e_ivh%79m12g7PaVw2Rg%7aprPmNlOeJbs%7aDRMj_BZ%79cUHLxL4x5Mmt%7aIDIG3gI6UIk%79E_%7a5p.G7LxqsOM4v%7aJ5Oj2sN; GUID=1z11zzwBz2Fje8Kz3a7a46a30a8cba5ea321c1f15a2c85c8; TradeDoublerGUID=3a7a46a30a8cba5ea321c1f15a2c85c8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 3705
Connection: keep-alive
Server: Apache
Strict-Transport-Security: max-age=15552000; includeSubDomains
Last-Modified: Mon, 15 Oct 2018 09:28:46 GMT
Accept-Ranges: bytes
Content-Encoding: gzip
Date: Sun, 18 Sep 2022 04:31:37 GMT
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: A5wZCKyaUVCJF5Dcp_9jek1jiprvESxdXcXHfiasMqkGb_fJx7Fr5Q==
Age: 220000
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Referrer-Policy: strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 6b48ff7061e2350611709c3d6c29cf9f
e6d779e6643b5a2afdadf98203707c7106fe4a2f
48df37327b4304baed833ab2b329a39f22052555cf49c61f3107e1b831bff97c
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 20 Sep 2022 17:37:51 GMT
Last-Modified: Tue, 20 Sep 2022 15:49:36 GMT
Server: ECS (bsa/EB11)
X-Cache: Miss from cloudfront
Via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: ieJHLOUUO19Ld5G3_WWvDmo2uu73dzNSTlBS-E5rQh9ce1Yg6c8Rxg==
Age: 6495
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 26fcf8aea27805b4a6a29e3e2a4ba19b
f920fd6c5a79a4adb2f456edcee678757ff1602c
7aa63d03f514e4f51190e85f167f747563f980e0e6fdee6cce9393321dff1038
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 20 Sep 2022 17:37:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google-analytics.com/collect?v=1&_v=j96&t=pageview&_s=1&dl=https%3A%2F%2Fno-go.kelkoogroup.net%2Fctl%2Fgo%2FoffersearchGo%3F.ts%3D1663677900636%26.sig%3DMnI7eote6sYkOmId71OctQTHOis-%26affiliationId%3D96965886%26comId%3D100457524%26country%3Dno%26offerId%3D1141ba58d0601faf42023496d502d129%26service%3D37%26tokenId%3Deef84b7f-8e19-45d1-adee-7c88767dc72d%26wait%3Dtrue%26addedParams%3Dtrue%26custom1%3D11e9d0e38bead65e81956fc82fae05a7652a2fb834d5272598e4df30955e711b%26custom2%3DSRdytlITOR16%26custom3%3Dfalse&dr=https%3A%2F%2Flookandfind.me%2F&dp=%2F96965886%7C100457524%7C&ul=en-us&de=UTF-8&dt=Du%20sendes%20videre%20til%20Ginatricot.com%2Fno&sd=24-bit&sr=1280x1024&vp=1152x836&je=0&_u=QACAAAABAAAAAC~&cid=1308051892.1663695470&tid=UA-168544891-6&_gid=17451406.1663695470&_r=1&cd1=96965886&cd2=dc1-kls-prod-ls-01.prod.dc1.kelkoo.net_1663695470635_483429&cd3=100457524&cd4=a4c6295-1835bfa4023-48d46&cd5=&cd6=96965886%7C100457524%7C&z=234953572
200 OK 35 B URL HTTP/2 www.google-analytics.com/collect?v=1&_v=j96&t=pageview&_s=1&dl=https%3A%2F%2Fno-go.kelkoogroup.net%2Fctl%2Fgo%2FoffersearchGo%3F.ts%3D1663677900636%26.sig%3DMnI7eote6sYkOmId71OctQTHOis-%26affiliationId%3D96965886%26comId%3D100457524%26country%3Dno%26offerId%3D1141ba58d0601faf42023496d502d129%26service%3D37%26tokenId%3Deef84b7f-8e19-45d1-adee-7c88767dc72d%26wait%3Dtrue%26addedParams%3Dtrue%26custom1%3D11e9d0e38bead65e81956fc82fae05a7652a2fb834d5272598e4df30955e711b%26custom2%3DSRdytlITOR16%26custom3%3Dfalse&dr=https%3A%2F%2Flookandfind.me%2F&dp=%2F96965886%7C100457524%7C&ul=en-us&de=UTF-8&dt=Du%20sendes%20videre%20til%20Ginatricot.com%2Fno&sd=24-bit&sr=1280x1024&vp=1152x836&je=0&_u=QACAAAABAAAAAC~&cid=1308051892.1663695470&tid=UA-168544891-6&_gid=17451406.1663695470&_r=1&cd1=96965886&cd2=dc1-kls-prod-ls-01.prod.dc1.kelkoo.net_1663695470635_483429&cd3=100457524&cd4=a4c6295-1835bfa4023-48d46&cd5=&cd6=96965886%7C100457524%7C&z=234953572
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
POST /collect?v=1&_v=j96&t=pageview&_s=1&dl=https%3A%2F%2Fno-go.kelkoogroup.net%2Fctl%2Fgo%2FoffersearchGo%3F.ts%3D1663677900636%26.sig%3DMnI7eote6sYkOmId71OctQTHOis-%26affiliationId%3D96965886%26comId%3D100457524%26country%3Dno%26offerId%3D1141ba58d0601faf42023496d502d129%26service%3D37%26tokenId%3Deef84b7f-8e19-45d1-adee-7c88767dc72d%26wait%3Dtrue%26addedParams%3Dtrue%26custom1%3D11e9d0e38bead65e81956fc82fae05a7652a2fb834d5272598e4df30955e711b%26custom2%3DSRdytlITOR16%26custom3%3Dfalse&dr=https%3A%2F%2Flookandfind.me%2F&dp=%2F96965886%7C100457524%7C&ul=en-us&de=UTF-8&dt=Du%20sendes%20videre%20til%20Ginatricot.com%2Fno&sd=24-bit&sr=1280x1024&vp=1152x836&je=0&_u=QACAAAABAAAAAC~&cid=1308051892.1663695470&tid=UA-168544891-6&_gid=17451406.1663695470&_r=1&cd1=96965886&cd2=dc1-kls-prod-ls-01.prod.dc1.kelkoo.net_1663695470635_483429&cd3=100457524&cd4=a4c6295-1835bfa4023-48d46&cd5=&cd6=96965886%7C100457524%7C&z=234953572 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://no-go.kelkoogroup.net
Connection: keep-alive
Referer: https://no-go.kelkoogroup.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 200 OK
access-control-allow-origin: https://no-go.kelkoogroup.net
date: Tue, 20 Sep 2022 17:37:51 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
x-content-type-options: nosniff
access-control-allow-credentials: true
content-type: image/gif
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 35
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
analytics.tradedoubler.com/
200 OK 21 B URL HTTP/2 analytics.tradedoubler.com/
IP
Hash 83f2b6ae5eabd18baaea2e474bada981
8b00ce49ba77b75a3efbe2c29fe454e5a6272bbe
d9b5878f071cf85ec356d049cadf8df96a51b84337d444705625d600b58b704c
POST / HTTP/1.1
Host: analytics.tradedoubler.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pdt.tradedoubler.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 375
Origin: https://pdt.tradedoubler.com
Connection: keep-alive
Cookie: EH_0=1z11z1zwBzfqrx5z1DPWyZkB3FCJyERkfV2MdfP%7a5N%79Cj.RkaPl5pWtNGdqc%79wxi3RI8%79m07jUSgxd9e6e_ivh%79m12g7PaVw2Rg%7aprPmNlOeJbs%7aDRMj_BZ%79cUHLxL4x5Mmt%7aIDIG3gI6UIk%79E_%7a5p.G7LxqsOM4v%7aJ5Oj2sN; GUID=1z11zzwBz2Fje8Kz3a7a46a30a8cba5ea321c1f15a2c85c8; TradeDoublerGUID=3a7a46a30a8cba5ea321c1f15a2c85c8
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 17:37:51 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-via-popn: primary
content-encoding: gzip
x-via-poph: primary
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 26fcf8aea27805b4a6a29e3e2a4ba19b
f920fd6c5a79a4adb2f456edcee678757ff1602c
7aa63d03f514e4f51190e85f167f747563f980e0e6fdee6cce9393321dff1038
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 20 Sep 2022 17:37:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.ginatricot.com/fonts/cera/CeraPro-Regular.woff2
200 OK 53 kB URL HTTP/2 www.ginatricot.com/fonts/cera/CeraPro-Regular.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 53440, version 6.0\012- data
Hash 9035d74616302251107c88cb3b1495bc
db14c47a0d7ffbce700474d43f50c019d4f1a871
42018aecfd6e54d5f7bd4cb9f1c24c310528ba453239c118146243ae02b4c6ca
GET /fonts/cera/CeraPro-Regular.woff2 HTTP/1.1
Host: www.ginatricot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ginatricot.com/no/klaer/topper/singleter/singlet-808277194?tduid=3a7a46a30a8cba5ea321c1f15a2c85c8&utm_source=tradedoubler_no&utm_medium=affiliate&utm_campaign=Kelkoo+%28NO%29&utm_content=[td_site_id]
Cookie: GINATRICOT_SCOPE=no
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 20 Sep 2022 17:37:51 GMT
content-type: font/woff2
content-length: 53440
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public, max-age=31536, immutable
last-modified: Mon, 29 Aug 2022 06:29:50 GMT
etag: W/"d0c0-182e84ac330"
x-cache: Hit from cloudfront
via: 1.1 dddc8f2bbf76628526b9a5a150e6e5ba.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN54-C1
x-amz-cf-id: lwDFPBzvVk-r1B_4EGRFLZvoIoxlYN-ev6fs1cjfYcPlyAm4JqQzVQ==
age: 28292
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 74dc54dbbde3992c-ARN
X-Firefox-Spdy: h2
www.ginatricot.com/fonts/cera/CeraPro-Medium.woff2
200 OK 53 kB URL HTTP/2 www.ginatricot.com/fonts/cera/CeraPro-Medium.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 53220, version 6.0\012- data
Hash aa487617200f651a29f628c0c887c46c
492656068d2e4a667214e552585812ad9ddeecda
30e4cee0fdf2474aa4585728bdd769857457ecf8e021c7c7d064c56ed4974d15
GET /fonts/cera/CeraPro-Medium.woff2 HTTP/1.1
Host: www.ginatricot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ginatricot.com/no/klaer/topper/singleter/singlet-808277194?tduid=3a7a46a30a8cba5ea321c1f15a2c85c8&utm_source=tradedoubler_no&utm_medium=affiliate&utm_campaign=Kelkoo+%28NO%29&utm_content=[td_site_id]
Cookie: GINATRICOT_SCOPE=no
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 20 Sep 2022 17:37:51 GMT
content-type: font/woff2
content-length: 53220
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public, max-age=31536, immutable
last-modified: Mon, 29 Aug 2022 06:29:50 GMT
etag: W/"cfe4-182e84ac330"
x-cache: Hit from cloudfront
via: 1.1 bc362383b5c95fa821ce42f151e2a4aa.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN54-C1
x-amz-cf-id: AWoTH43xMpjmlHymqZ6KGRdw6VpfCLevl063WOWco1woHAvArKuwMQ==
age: 28292
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 74dc54dbbde6992c-ARN
X-Firefox-Spdy: h2
www.ginatricot.com/fonts/cera/CeraPro-Bold.woff2
200 OK 53 kB URL HTTP/2 www.ginatricot.com/fonts/cera/CeraPro-Bold.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 52888, version 6.0\012- data
Hash 437f12045c5eb043117f728083aeed24
c057197c5095b880ea96ab4277e80538a930a3e3
ca5c9713e00889334d3b4e407110c7619089ffc7b7808878181d505286b101b0
GET /fonts/cera/CeraPro-Bold.woff2 HTTP/1.1
Host: www.ginatricot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ginatricot.com/no/klaer/topper/singleter/singlet-808277194?tduid=3a7a46a30a8cba5ea321c1f15a2c85c8&utm_source=tradedoubler_no&utm_medium=affiliate&utm_campaign=Kelkoo+%28NO%29&utm_content=[td_site_id]
Cookie: GINATRICOT_SCOPE=no
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 20 Sep 2022 17:37:51 GMT
content-type: font/woff2
content-length: 52888
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public, max-age=31536, immutable
last-modified: Mon, 29 Aug 2022 06:29:50 GMT
etag: W/"ce98-182e84ac330"
x-cache: Hit from cloudfront
via: 1.1 3a4d5aad46ae3a82da414d69565389aa.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN54-C1
x-amz-cf-id: oigZuTNbB8phVVlvK0b_5epdpjvzKrM8WoXyl-U4-UiutgycK8CIBQ==
age: 18023
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 74dc54dbbde8992c-ARN
X-Firefox-Spdy: h2
www.ginatricot.com/fonts/vesterbro-light/Vesterbro-Light.woff2
200 OK 33 kB URL HTTP/2 www.ginatricot.com/fonts/vesterbro-light/Vesterbro-Light.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 32888, version 1.26214\012- data
Hash 0373e905647a0a90fc45d50c62d9a54d
4817f59eca6851cfa0ee69abb1d5ee94d85175a6
ba0ffcaad51e2e8247dd1e9e26627c19089ad8dc61ab7863588ab1b19ac8de09
GET /fonts/vesterbro-light/Vesterbro-Light.woff2 HTTP/1.1
Host: www.ginatricot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ginatricot.com/no/klaer/topper/singleter/singlet-808277194?tduid=3a7a46a30a8cba5ea321c1f15a2c85c8&utm_source=tradedoubler_no&utm_medium=affiliate&utm_campaign=Kelkoo+%28NO%29&utm_content=[td_site_id]
Cookie: GINATRICOT_SCOPE=no
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 20 Sep 2022 17:37:51 GMT
content-type: font/woff2
content-length: 32888
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public, max-age=31536, immutable
last-modified: Mon, 29 Aug 2022 06:29:50 GMT
etag: W/"8078-182e84ac330"
x-cache: Miss from cloudfront
via: 1.1 9e68c5632e1f9f77f8da043a0495769a.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN54-C1
x-amz-cf-id: VztQsrfgeoH7UQYW1Z9W0PlfKU5u_9rhlsl7qJgT2fg4BlCLpeylsA==
cf-cache-status: HIT
age: 28291
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 74dc54dbcdf5992c-ARN
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash ca46912009d55d770480ac4e3929d920
f809b7a6044cfbbc8334b427617d09996603cb93
5fb0e29e1e75a9bf5259b4245b1ab3516c3945e9fb10535d42bab9859831c6f3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1547
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 20 Sep 2022 17:37:52 GMT
Last-Modified: Tue, 20 Sep 2022 17:12:05 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 278 B IP
Hash 3a25c81290ed0a81231a9de19704736b
97411d7d9e6c3c29dcfc7af5b32534ab39548c35
f1a9ba9492b017e9f683ad06104a044ace67a56f78760148603dd611a7939748
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3569
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 20 Sep 2022 17:37:52 GMT
Last-Modified: Tue, 20 Sep 2022 16:38:23 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 278
ginatricotpc.imgix.net/pim/product-images/808274222/swatch.jpg?auto=format,compress&w=104
200 OK 367 B URL HTTP/2 ginatricotpc.imgix.net/pim/product-images/808274222/swatch.jpg?auto=format,compress&w=104
IP
File type ISO Media, AVIF Image\012- data
Hash 1e09bc140dd0ef45d50692f8da654c54
9eb79bde9827d96ef3371b04aab8f44791ec7f0a
64dc44ceae38d4e6759224b26ae5754f3bb0bc16b3d6ddd308d4dcd3d3c421e3
GET /pim/product-images/808274222/swatch.jpg?auto=format,compress&w=104 HTTP/1.1
Host: ginatricotpc.imgix.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ginatricot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 10 Aug 2022 11:25:15 GMT
cache-control: public, max-age=5184000
server: imgix
x-imgix-id: 6be97efcef169c88e89054b323f938a7323559db
date: Tue, 20 Sep 2022 17:37:52 GMT
age: 3564757
accept-ranges: bytes
content-type: image/avif
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10081-SJC, cache-bma1672-BMA
x-cache: HIT, HIT
vary: Accept, User-Agent
content-length: 367
X-Firefox-Spdy: h2
ginatricotpc.imgix.net/pim/product-images/808272156/swatch.jpg?auto=format,compress&w=104
200 OK 405 B URL HTTP/2 ginatricotpc.imgix.net/pim/product-images/808272156/swatch.jpg?auto=format,compress&w=104
IP
File type ISO Media, AVIF Image\012- data
Hash abc274648ffbfa962101d931ee1ad1c0
042413c1379ec18f0415c9f2911003bbdbda94b3
a50162f7a7cdfae169a2dcd3a270ee58a4adecebab3987b431066f83091b1896
GET /pim/product-images/808272156/swatch.jpg?auto=format,compress&w=104 HTTP/1.1
Host: ginatricotpc.imgix.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ginatricot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Tue, 30 Aug 2022 10:46:53 GMT
cache-control: public, max-age=5184000
server: imgix
x-imgix-id: d397e3335cf0c4005d9c9c096928cbc35f6ba0b0
x-imgix-render-farm: 01.1
date: Tue, 20 Sep 2022 17:37:52 GMT
age: 1839058
accept-ranges: bytes
content-type: image/avif
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10038-SJC, cache-bma1672-BMA
x-cache: HIT, HIT
vary: Accept, User-Agent
content-length: 405
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ec92f152e44e73010ed8a35c03d76e7a
555e2c53fbf0c2e42bbdf8b28fae74f697602e78
51eb042bc2eae63c770b6666d09855e5c2240d75fafb066d3260f43ccde0ed2e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "51EB042BC2EAE63C770B6666D09855E5C2240D75FAFB066D3260F43CCDE0ED2E"
Last-Modified: Sun, 18 Sep 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16559
Expires: Tue, 20 Sep 2022 22:13:51 GMT
Date: Tue, 20 Sep 2022 17:37:52 GMT
Connection: keep-alive
ginatricotpc.imgix.net/pim/product-images/808274640/swatch.jpg?auto=format,compress&w=104
200 OK 369 B URL HTTP/2 ginatricotpc.imgix.net/pim/product-images/808274640/swatch.jpg?auto=format,compress&w=104
IP
File type ISO Media, AVIF Image\012- data
Hash ccebfcf9d2a3661aa3e51e3aedf672b5
a95dc1efd1baf7d9c9e059ad1288afad9a52979a
35a710e4c5451e606822667238f248dc0ae32cec07aa06b948e3d58fd5060f0c
GET /pim/product-images/808274640/swatch.jpg?auto=format,compress&w=104 HTTP/1.1
Host: ginatricotpc.imgix.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ginatricot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 09 Aug 2022 13:08:32 GMT
cache-control: public, max-age=5184000
server: imgix
x-imgix-id: 7fcc6a730c9ebcc386d96ee33df49d8ed3100643
date: Tue, 20 Sep 2022 17:37:52 GMT
age: 3644959
accept-ranges: bytes
content-type: image/avif
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10047-SJC, cache-bma1672-BMA
x-cache: HIT, HIT
vary: Accept, User-Agent
content-length: 369
X-Firefox-Spdy: h2
ginatricotpc.imgix.net/pim/product-images/808273951/swatch.jpg?auto=format,compress&w=104
200 OK 362 B URL HTTP/2 ginatricotpc.imgix.net/pim/product-images/808273951/swatch.jpg?auto=format,compress&w=104
IP
File type ISO Media, AVIF Image\012- data
Hash 1e43a8a5f92031642a883c2748038c5f
4691d25bae5b11955855efcafd1d15562e39b7e9
9d9dee777dfe72ad4d497dc21427f9546cf8d85dab641d3bb3ae10ad8c2200b6
GET /pim/product-images/808273951/swatch.jpg?auto=format,compress&w=104 HTTP/1.1
Host: ginatricotpc.imgix.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ginatricot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 10 Aug 2022 08:57:32 GMT
cache-control: public, max-age=5184000
server: imgix
x-imgix-id: 423a275f7a1222072551a2234c17ce9b1973b471
date: Tue, 20 Sep 2022 17:37:52 GMT
age: 3573619
accept-ranges: bytes
content-type: image/avif
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10073-SJC, cache-bma1672-BMA
x-cache: HIT, HIT
vary: Accept, User-Agent
content-length: 362
X-Firefox-Spdy: h2
ginatricotpc.imgix.net/pim/product-images/808277103/swatch.jpg?auto=format,compress&w=104
200 OK 1.1 kB URL HTTP/2 ginatricotpc.imgix.net/pim/product-images/808277103/swatch.jpg?auto=format,compress&w=104
IP
File type ISO Media, AVIF Image\012- data
Hash 7bdd4969119b6d7c4fa49fa795460c7f
1ba3b0d83fae720f2a9a9c5c55ba1f25d10a5600
c662f521882e758e8eda2a7ce85bb8dcdb46fed8ea649daedf6323d477266df4
GET /pim/product-images/808277103/swatch.jpg?auto=format,compress&w=104 HTTP/1.1
Host: ginatricotpc.imgix.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ginatricot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 30 Aug 2022 10:33:19 GMT
cache-control: public, max-age=5184000
server: imgix
x-imgix-id: 423c685ae1d3eb6b5e089fa487245d004287e474
x-imgix-render-farm: 01.1
date: Tue, 20 Sep 2022 17:37:52 GMT
age: 1839871
accept-ranges: bytes
content-type: image/avif
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10054-SJC, cache-bma1672-BMA
x-cache: HIT, HIT
vary: Accept, User-Agent
content-length: 1120
X-Firefox-Spdy: h2
ginatricotpc.imgix.net/pim/product-images/808277093/swatch.jpg?auto=format,compress&w=104
200 OK 405 B URL HTTP/2 ginatricotpc.imgix.net/pim/product-images/808277093/swatch.jpg?auto=format,compress&w=104
IP
File type ISO Media, AVIF Image\012- data
Hash 9261864bb554e2074de5af0fce7534c3
e105b8792d18374376a0be2161eb131cf7821ca8
326814f2dfdf041ab7e7e1906de43c89b78fb7014cca0877487f891d42e8231e
GET /pim/product-images/808277093/swatch.jpg?auto=format,compress&w=104 HTTP/1.1
Host: ginatricotpc.imgix.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ginatricot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 13 Sep 2022 14:50:33 GMT
cache-control: public, max-age=5184000
server: imgix
x-imgix-id: 2534c59132cca74b32940918deaf686d1072d6e7
x-imgix-render-farm: 01.592
date: Tue, 20 Sep 2022 17:37:52 GMT
age: 614838
accept-ranges: bytes
content-type: image/avif
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10045-SJC, cache-bma1672-BMA
x-cache: HIT, HIT
vary: Accept, User-Agent
content-length: 405
X-Firefox-Spdy: h2
ginatricotpc.imgix.net/pim/product-images/808276464/swatch.jpg?auto=format,compress&w=104
200 OK 371 B URL HTTP/2 ginatricotpc.imgix.net/pim/product-images/808276464/swatch.jpg?auto=format,compress&w=104
IP
File type ISO Media, AVIF Image\012- data
Hash 8513885dc663f1ac032b93c0d68c0308
f52d8e4bea24c90d51e6c92d885ce18cf1c34fba
3aa3889d78524359e29224b7ca61b16a3e66e4051404fba23f18ca43ac4e3428
GET /pim/product-images/808276464/swatch.jpg?auto=format,compress&w=104 HTTP/1.1
Host: ginatricotpc.imgix.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ginatricot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 13 Sep 2022 11:13:57 GMT
cache-control: public, max-age=5184000
server: imgix
x-imgix-id: 9ccf1e0705c65c3f86bfcb064607abd05b8e5fb0
x-imgix-render-farm: 01.592
date: Tue, 20 Sep 2022 17:37:52 GMT
age: 627834
accept-ranges: bytes
content-type: image/avif
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10061-SJC, cache-bma1672-BMA
x-cache: HIT, HIT
vary: Accept, User-Agent
content-length: 371
X-Firefox-Spdy: h2
ginatricotpc.imgix.net/pim/product-images/808276074/swatch.jpg?auto=format,compress&w=104
200 OK 494 B URL HTTP/2 ginatricotpc.imgix.net/pim/product-images/808276074/swatch.jpg?auto=format,compress&w=104
IP
File type ISO Media, AVIF Image\012- data
Hash eb40edc4a33fa55d5e10e7204775fc13
9aac49e9dc6e9804cae6db5deabd289f9a74e137
ba4bf5de6a63eca42fa4b0adaaef1349928f82eefa464ba780937e155b8e6759
GET /pim/product-images/808276074/swatch.jpg?auto=format,compress&w=104 HTTP/1.1
Host: ginatricotpc.imgix.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ginatricot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 30 Aug 2022 14:16:17 GMT
cache-control: public, max-age=5184000
server: imgix
x-imgix-id: 391274ba479290b72577f67e97e2e7264a4a0896
x-imgix-render-farm: 01.1
date: Tue, 20 Sep 2022 17:37:52 GMT
age: 1826495
accept-ranges: bytes
content-type: image/avif
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10076-SJC, cache-bma1672-BMA
x-cache: HIT, HIT
vary: Accept, User-Agent
content-length: 494
X-Firefox-Spdy: h2
ginatricotpc.imgix.net/pim/product-images/808276051/swatch.jpg?auto=format,compress&w=104
200 OK 363 B URL HTTP/2 ginatricotpc.imgix.net/pim/product-images/808276051/swatch.jpg?auto=format,compress&w=104
IP
File type ISO Media, AVIF Image\012- data
Hash e56ca4327ab7ec608d6296842acbe134
2e25ee0dd95a88a2eede4f12428fde2001bbe74a
827bc9ca8e237772a8cbcf41fc133f06bc99e66c205f9d1ab13010d4c4babf82
GET /pim/product-images/808276051/swatch.jpg?auto=format,compress&w=104 HTTP/1.1
Host: ginatricotpc.imgix.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ginatricot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 24 Aug 2022 15:55:36 GMT
cache-control: public, max-age=5184000
server: imgix
x-imgix-id: 2bdac1b71c51e266d4a5a52083a7d5c9c684b8ea
x-imgix-render-farm: 01.1
date: Tue, 20 Sep 2022 17:37:52 GMT
age: 2338935
accept-ranges: bytes
content-type: image/avif
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10056-SJC, cache-bma1672-BMA
x-cache: HIT, HIT
vary: Accept, User-Agent
content-length: 363
X-Firefox-Spdy: h2
ginatricotpc.imgix.net/pim/product-images/808277964/swatch.jpg?auto=format,compress&w=104
200 OK 399 B URL HTTP/2 ginatricotpc.imgix.net/pim/product-images/808277964/swatch.jpg?auto=format,compress&w=104
IP
File type ISO Media, AVIF Image\012- data
Hash 46b1c70e99c78abe21da5a60d651f228
97f9108d075b89a4e736f27d194f20a1e888406e
ee605cf2aaa25b497c4947d43293599ccfd0791044802fdc13ffb91cff4da575
GET /pim/product-images/808277964/swatch.jpg?auto=format,compress&w=104 HTTP/1.1
Host: ginatricotpc.imgix.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ginatricot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 10 Aug 2022 10:54:53 GMT
cache-control: public, max-age=5184000
server: imgix
x-imgix-id: 797863cbed089589257a1b01d4223d3a30211a59
date: Tue, 20 Sep 2022 17:37:52 GMT
age: 3566579
accept-ranges: bytes
content-type: image/avif
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10068-SJC, cache-bma1672-BMA
x-cache: HIT, HIT
vary: Accept, User-Agent
content-length: 399
X-Firefox-Spdy: h2
ginatricotpc.imgix.net/pim/product-images/808277315/swatch.jpg?auto=format,compress&w=104
200 OK 393 B URL HTTP/2 ginatricotpc.imgix.net/pim/product-images/808277315/swatch.jpg?auto=format,compress&w=104
IP
File type ISO Media, AVIF Image\012- data
Hash 095359737c8eea85e72c9af73c3e255b
7c7c1f7fb83184877df26b9bd7903568c2de0fb7
0781028a257f4d7dc2547726a3792d32d6dc4f6e91256ace10e620ecbe8d1e3d
GET /pim/product-images/808277315/swatch.jpg?auto=format,compress&w=104 HTTP/1.1
Host: ginatricotpc.imgix.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ginatricot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 16 Aug 2022 14:53:47 GMT
cache-control: public, max-age=5184000
server: imgix
x-imgix-id: 92cdfc3f13aa3718facd0036b9fcb1c8af5a9224
date: Tue, 20 Sep 2022 17:37:52 GMT
age: 3033844
accept-ranges: bytes
content-type: image/avif
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10068-SJC, cache-bma1672-BMA
x-cache: HIT, HIT
vary: Accept, User-Agent
content-length: 393
X-Firefox-Spdy: h2
ginatricotpc.imgix.net/pim/product-images/808279000/swatch.jpg?auto=format,compress&w=104
200 OK 1.4 kB URL HTTP/2 ginatricotpc.imgix.net/pim/product-images/808279000/swatch.jpg?auto=format,compress&w=104
IP
File type ISO Media, AVIF Image\012- data
Hash ef450853f22494246548a5b7f82a8c25
f243fc3560060a5ccfee9560ed27632742a68a3d
cca45379e1cd820bc537a1a6bbbb0d910c7fb3d6d49c1b0d8eecb9bf5b660bd3
GET /pim/product-images/808279000/swatch.jpg?auto=format,compress&w=104 HTTP/1.1
Host: ginatricotpc.imgix.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ginatricot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 29 Aug 2022 13:22:16 GMT
cache-control: public, max-age=5184000
server: imgix
x-imgix-id: 122e5ddb28ed421040847f28298e13c5798092f9
x-imgix-render-farm: 01.1
date: Tue, 20 Sep 2022 17:37:52 GMT
age: 1916134
accept-ranges: bytes
content-type: image/avif
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10050-SJC, cache-bma1672-BMA
x-cache: HIT, HIT
vary: Accept, User-Agent
content-length: 1405
X-Firefox-Spdy: h2
ginatricotpc.imgix.net/pim/product-images/808277185/swatch.jpg?auto=format,compress&w=104
200 OK 392 B URL HTTP/2 ginatricotpc.imgix.net/pim/product-images/808277185/swatch.jpg?auto=format,compress&w=104
IP
File type ISO Media, AVIF Image\012- data
Hash 7814a174ea936b5d3f62f26a597f5d1e
5e006d41c654ba2470875c53500275219bfc2e35
76c65341b604043020297329d80b6fa7361aed2f14526f89c04abc083e3b8f77
GET /pim/product-images/808277185/swatch.jpg?auto=format,compress&w=104 HTTP/1.1
Host: ginatricotpc.imgix.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ginatricot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 06 Sep 2022 12:24:37 GMT
cache-control: public, max-age=5184000
server: imgix
x-imgix-id: be5e221891ab7ec793c70900e03e22b3838afe29
x-imgix-render-farm: 01.592
date: Tue, 20 Sep 2022 17:37:52 GMT
age: 1228395
accept-ranges: bytes
content-type: image/avif
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10060-SJC, cache-bma1672-BMA
x-cache: HIT, HIT
vary: Accept, User-Agent
content-length: 392
X-Firefox-Spdy: h2
ginatricotpc.imgix.net/pim/product-images/808273208/swatch.jpg?auto=format,compress&w=104
200 OK 439 B URL HTTP/2 ginatricotpc.imgix.net/pim/product-images/808273208/swatch.jpg?auto=format,compress&w=104
IP
File type ISO Media, AVIF Image\012- data
Hash 07d48d137f8f2a8d9ed77c4d01898131
ca35eada5b3a638c7123eb27881a8b9116235894
7673cbbe66ae5495dc1c8ff7afbd31f2f1d224c654b8897483fe85f86c9a0f37
GET /pim/product-images/808273208/swatch.jpg?auto=format,compress&w=104 HTTP/1.1
Host: ginatricotpc.imgix.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ginatricot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Tue, 23 Aug 2022 12:22:02 GMT
cache-control: public, max-age=5184000
server: imgix
x-imgix-id: 80b4254e2820c650f2e1bf07d9d4a73acb59e71f
x-imgix-render-farm: 01.1
date: Tue, 20 Sep 2022 17:37:52 GMT
age: 2438149
accept-ranges: bytes
content-type: image/avif
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10037-SJC, cache-bma1672-BMA
x-cache: HIT, HIT
vary: Accept, User-Agent
content-length: 439
X-Firefox-Spdy: h2
ginatricotpc.imgix.net/pim/product-images/808277194/80827719401.jpg?auto=format,compress
200 OK 43 kB URL HTTP/2 ginatricotpc.imgix.net/pim/product-images/808277194/80827719401.jpg?auto=format,compress
IP
File type ISO Media, AVIF Image\012- data
Hash 87d6145644ab3271fb760320ce4de655
d57f0b71185e18809498f00e2d98ad284614ff78
37ef71f89fc8a8d7ead0c6ae43e5673d5cc4785b4f5da8fdc8a10b87109826b9
GET /pim/product-images/808277194/80827719401.jpg?auto=format,compress HTTP/1.1
Host: ginatricotpc.imgix.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ginatricot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 25 Aug 2022 13:13:59 GMT
cache-control: public, max-age=5184000
server: imgix
x-imgix-id: 8d649bc929fde70d2aef00817bfb3962895e52c8
x-imgix-render-farm: 01.1
date: Tue, 20 Sep 2022 17:37:52 GMT
age: 2262233
accept-ranges: bytes
content-type: image/avif
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10056-SJC, cache-bma1672-BMA
x-cache: HIT, HIT
vary: Accept, User-Agent
content-length: 43259
X-Firefox-Spdy: h2
ginatricotpc.imgix.net/pim/product-images/808272094/swatch.jpg?auto=format,compress&w=104
200 OK 375 B URL HTTP/2 ginatricotpc.imgix.net/pim/product-images/808272094/swatch.jpg?auto=format,compress&w=104
IP
File type ISO Media, AVIF Image\012- data
Hash 8a6b7427edcf1686dce799811a9f9928
78e5c5e7f0b208978e83a6a5d29d0cfd5226880a
dec9a49247d09bcc80373733873e1d64e2625619ba714019ebafb58e49e702ad
GET /pim/product-images/808272094/swatch.jpg?auto=format,compress&w=104 HTTP/1.1
Host: ginatricotpc.imgix.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ginatricot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Tue, 23 Aug 2022 12:14:41 GMT
cache-control: public, max-age=5184000
server: imgix
x-imgix-id: de9a678969dc3b79bf92bc9ea0540b25dd3bab96
x-imgix-render-farm: 01.1
date: Tue, 20 Sep 2022 17:37:52 GMT
age: 2438590
accept-ranges: bytes
content-type: image/avif
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10069-SJC, cache-bma1672-BMA
x-cache: HIT, HIT
vary: Accept, User-Agent
content-length: 375
X-Firefox-Spdy: h2
ginatricotpc.imgix.net/pim/product-images/808277194/80827719402.jpg?auto=format,compress
200 OK 48 kB URL HTTP/2 ginatricotpc.imgix.net/pim/product-images/808277194/80827719402.jpg?auto=format,compress
IP
File type ISO Media, AVIF Image\012- data
Hash b233a0a52e9e99f651176ad36ab02956
9f639a05e6a12bfe4745a65e87b22bc0df2e25b2
d018bac8a10f170ccf238fa7bfd62760e819b7c3f13976fe86733f45d803648a
GET /pim/product-images/808277194/80827719402.jpg?auto=format,compress HTTP/1.1
Host: ginatricotpc.imgix.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ginatricot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 30 Aug 2022 11:27:50 GMT
cache-control: public, max-age=5184000
server: imgix
x-imgix-id: 2676b6f07ca6298fb1783b480fd3b33dae1dfc55
x-imgix-render-farm: 01.592
date: Tue, 20 Sep 2022 17:37:52 GMT
age: 1836602
accept-ranges: bytes
content-type: image/avif
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10074-SJC, cache-bma1672-BMA
x-cache: HIT, HIT
vary: Accept, User-Agent
content-length: 48211
X-Firefox-Spdy: h2
ginatricotpc.imgix.net/cms/work/20220407_v14/lab/image-thumb__366309__storefront_cms_images/hanna_mw_logga_lab_hannamw.pjpeg?auto=format,compress&h=118
200 OK 2.1 kB URL HTTP/2 ginatricotpc.imgix.net/cms/work/20220407_v14/lab/image-thumb__366309__storefront_cms_images/hanna_mw_logga_lab_hannamw.pjpeg?auto=format,compress&h=118
IP
File type ISO Media, AVIF Image\012- data
Hash eae350c01cf40359550dadf4cbc8e87a
59440f01ffb4629fab718e75d5a9f1a54992de80
f06d0fcf763e21393374e84bdf12347587134b8721c6d09077d123fa5457177d
GET /cms/work/20220407_v14/lab/image-thumb__366309__storefront_cms_images/hanna_mw_logga_lab_hannamw.pjpeg?auto=format,compress&h=118 HTTP/1.1
Host: ginatricotpc.imgix.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ginatricot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Tue, 16 Aug 2022 09:13:45 GMT
cache-control: public, max-age=5184000
server: imgix
x-imgix-id: b2b6857675cf41c374acf61b15b1be50a5852983
date: Tue, 20 Sep 2022 17:37:52 GMT
age: 3054246
accept-ranges: bytes
content-type: image/avif
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10067-SJC, cache-bma1672-BMA
x-cache: HIT, HIT
vary: Accept, User-Agent
content-length: 2069
X-Firefox-Spdy: h2
ginatricotpc.imgix.net/pim/product-images/808271420/swatch.jpg?auto=format,compress&w=104
200 OK 351 B URL HTTP/2 ginatricotpc.imgix.net/pim/product-images/808271420/swatch.jpg?auto=format,compress&w=104
IP
File type ISO Media, AVIF Image\012- data
Hash 2eca111e17f2a9941b283459fad06c47
83921e929f0f3dff8f7c3c94ebc822d96ff78e66
98946d7088e8569e969636331e50f515a2116bdaa362820f127994eff2fae3b4
GET /pim/product-images/808271420/swatch.jpg?auto=format,compress&w=104 HTTP/1.1
Host: ginatricotpc.imgix.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ginatricot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Tue, 30 Aug 2022 10:09:22 GMT
cache-control: public, max-age=5184000
server: imgix
x-imgix-id: 631df145ee8763a4f034c76b574675b7e723fc71
x-imgix-render-farm: 01.1
date: Tue, 20 Sep 2022 17:37:52 GMT
age: 1841309
accept-ranges: bytes
content-type: image/avif
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10075-SJC, cache-bma1672-BMA
x-cache: HIT, HIT
vary: Accept, User-Agent
content-length: 351
X-Firefox-Spdy: h2
ginatricotpc.imgix.net/pim/product-images/808273402/swatch.jpg?auto=format,compress&w=104
200 OK 373 B URL HTTP/2 ginatricotpc.imgix.net/pim/product-images/808273402/swatch.jpg?auto=format,compress&w=104
IP
File type ISO Media, AVIF Image\012- data
Hash 99d529d3dcb5feed6c203a5ff9a0c809
b7c8b8416f77835dd72456825b5cf65a098da39f
694e59313192105f80b4616fefb88d7a7792335ee4333f0e9c4f2c701dded610
GET /pim/product-images/808273402/swatch.jpg?auto=format,compress&w=104 HTTP/1.1
Host: ginatricotpc.imgix.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ginatricot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Tue, 23 Aug 2022 08:39:46 GMT
cache-control: public, max-age=5184000
server: imgix
x-imgix-id: 91cfe159db5e07efda32b4b9b86240689533da06
x-imgix-render-farm: 01.1
date: Tue, 20 Sep 2022 17:37:52 GMT
age: 2451485
accept-ranges: bytes
content-type: image/avif
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10081-SJC, cache-bma1672-BMA
x-cache: HIT, HIT
vary: Accept, User-Agent
content-length: 373
X-Firefox-Spdy: h2
gtm.ginatricot.com/gtm.js?id=GTM-MXZ5NM
200 OK 91 kB URL HTTP/2 gtm.ginatricot.com/gtm.js?id=GTM-MXZ5NM
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type ASCII text, with very long lines (38523)
Hash dc0487810902627ce951b0dbc0d667c8
de5243814263275920e14c6ece362a112b04168e
ebaf2e7e0a03d4df6dfc46a1a0fae515c4f10c4fda170b62ba60b98144559cde
GET /gtm.js?id=GTM-MXZ5NM HTTP/1.1
Host: gtm.ginatricot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ginatricot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
access-control-allow-origin: *
cache-control: private, max-age=900
content-encoding: br
content-type: application/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
date: Tue, 20 Sep 2022 17:37:52 GMT
expires: Tue, 20 Sep 2022 17:37:52 GMT
last-modified: Tue, 20 Sep 2022 16:04:11 GMT
server: nginx
strict-transport-security: max-age=31536000; includeSubDomains
vary: Accept-Encoding
x-xss-protection: 0
content-length: 90849
X-Firefox-Spdy: h2
www.ginatricot.com/_next/static/favicon.a0f9247cc2031237279b5c508ccbcfb9.ico
200 OK 333 B URL HTTP/2 www.ginatricot.com/_next/static/favicon.a0f9247cc2031237279b5c508ccbcfb9.ico
IP
File type MS Windows icon resource - 1 icon, 16x16\012- data
Hash 5c296d3f09452e604a082c12d1454b52
ebcb5a29e2848ac6fe3ef417df26952d144710e4
0579a07b28539f3a5acc6ae401c8d0536b01802e63c4adca61e09048e9442ec7
GET /_next/static/favicon.a0f9247cc2031237279b5c508ccbcfb9.ico HTTP/1.1
Host: www.ginatricot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ginatricot.com/no/klaer/topper/singleter/singlet-808277194?tduid=3a7a46a30a8cba5ea321c1f15a2c85c8&utm_source=tradedoubler_no&utm_medium=affiliate&utm_campaign=Kelkoo+%28NO%29&utm_content=[td_site_id]
Cookie: GINATRICOT_SCOPE=no
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 20 Sep 2022 17:37:52 GMT
content-type: image/x-icon
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public, max-age=31536000, immutable
last-modified: Fri, 27 May 2022 12:06:11 GMT
etag: W/"47e-1810568eb38"
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 0dbf67e262a6295e9e8f6570f9aae7e0.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN54-C1
x-amz-cf-id: 4uFiW9xiUlktsJJ22Pt68_pYY66BEti8NFNulFdjK_ZElGpcMc3o9g==
age: 7116960
cf-cache-status: HIT
server: cloudflare
cf-ray: 74dc54dea9fe992c-ARN
X-Firefox-Spdy: h2
ginatricotpc.imgix.net/pim/product-images/808277194/80827719403.jpg?auto=format,compress
200 OK 36 kB URL HTTP/2 ginatricotpc.imgix.net/pim/product-images/808277194/80827719403.jpg?auto=format,compress
IP
File type ISO Media, AVIF Image\012- data
Hash 862e2960ff2518b131be83ca545586a7
782396f5e7fa0a3e97a93ed7a8fe9acaf08a5186
b7a3e8d9894996d8ae5eff79fb281dbdf96e9acb8f598fecc0091e610ed93f44
GET /pim/product-images/808277194/80827719403.jpg?auto=format,compress HTTP/1.1
Host: ginatricotpc.imgix.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ginatricot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 06 Sep 2022 17:41:06 GMT
cache-control: public, max-age=5184000
server: imgix
x-imgix-id: a68625ea2ac32051817a1deb2fa12dd63cc292ec
x-imgix-render-farm: 01.592
date: Tue, 20 Sep 2022 17:37:53 GMT
age: 1209407
accept-ranges: bytes
content-type: image/avif
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10028-SJC, cache-bma1672-BMA
x-cache: HIT, HIT
vary: Accept, User-Agent
content-length: 35991
X-Firefox-Spdy: h2
www.ginatricot.com/_next/static/chunks/pages/%5Bmarket%5D/product/%5Bid%5D-f733b1d52b7d9d5d8949.js
200 OK 21 kB URL HTTP/2 www.ginatricot.com/_next/static/chunks/pages/%5Bmarket%5D/product/%5Bid%5D-f733b1d52b7d9d5d8949.js
IP
Hash f9342f1ec8f7e492b1b11798c5e7de03
4f17952b4c414df7ada952a8d5aaa33bc0af9d5e
cd18653e33124bae33164a88526a812dcc61c12261143823e4f3eab25f49de91
GET /_next/static/chunks/pages/%5Bmarket%5D/product/%5Bid%5D-f733b1d52b7d9d5d8949.js HTTP/1.1
Host: www.ginatricot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ginatricot.com/no/klaer/topper/singleter/singlet-808277194?tduid=3a7a46a30a8cba5ea321c1f15a2c85c8&utm_source=tradedoubler_no&utm_medium=affiliate&utm_campaign=Kelkoo+%28NO%29&utm_content=[td_site_id]
Cookie: GINATRICOT_SCOPE=no
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 20 Sep 2022 17:37:52 GMT
content-type: application/javascript; charset=UTF-8
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public, max-age=31536000, immutable
last-modified: Thu, 18 Aug 2022 07:27:26 GMT
etag: W/"a398-182afd98b30"
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 3f25be8570bf62f8d4607f79984fccec.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P1
x-amz-cf-id: TgmtY-4X-IRjmVHeVOV34ZiUlE2J1_u7QceG67g6SnSbVW1kRBPTyQ==
cf-cache-status: HIT
age: 2887573
server: cloudflare
cf-ray: 74dc54dc0e62992c-ARN
X-Firefox-Spdy: h2
ginatricotpc.imgix.net/pim/product-images/808277194/80827719406.jpg?auto=format,compress
200 OK 18 kB URL HTTP/2 ginatricotpc.imgix.net/pim/product-images/808277194/80827719406.jpg?auto=format,compress
IP
File type ISO Media, AVIF Image\012- data
Hash b6e36727de100b6ce23f44bfde8a7d6d
4fedc27f201c80950940a0a210a072b988d9b068
66ef7b666fce8a3daf9391e445d767055394a5bd3466f44ca7c4eb9dfffa3b20
GET /pim/product-images/808277194/80827719406.jpg?auto=format,compress HTTP/1.1
Host: ginatricotpc.imgix.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ginatricot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 02 Sep 2022 13:15:31 GMT
cache-control: public, max-age=5184000
server: imgix
x-imgix-id: 9f2660fd7535101d3726a118755e651865b10e62
x-imgix-render-farm: 01.1
date: Tue, 20 Sep 2022 17:37:53 GMT
age: 1570942
accept-ranges: bytes
content-type: image/avif
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10030-SJC, cache-bma1672-BMA
x-cache: HIT, HIT
vary: Accept, User-Agent
content-length: 18370
X-Firefox-Spdy: h2
ginatricotpc.imgix.net/pim/product-images/808277194/80827719407.jpg?auto=format,compress
200 OK 60 kB URL HTTP/2 ginatricotpc.imgix.net/pim/product-images/808277194/80827719407.jpg?auto=format,compress
IP
File type ISO Media, AVIF Image\012- data
Hash ea5f0b43bc39bc19d22bce81c0a5e531
0263881edc8cb73d8a5c32a31d644d7ff86a7b85
c1a47b85baaaac5e1f168e28548b925fd149e7eafddc4336218869f2a2fec0cd
GET /pim/product-images/808277194/80827719407.jpg?auto=format,compress HTTP/1.1
Host: ginatricotpc.imgix.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ginatricot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Aug 2022 19:25:14 GMT
cache-control: public, max-age=5184000
server: imgix
x-imgix-id: 60ffe19563863d92b04186749e63cd09d2c42a28
date: Tue, 20 Sep 2022 17:37:53 GMT
age: 3190358
accept-ranges: bytes
content-type: image/avif
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10047-SJC, cache-bma1672-BMA
x-cache: HIT, HIT
vary: Accept, User-Agent
content-length: 60508
X-Firefox-Spdy: h2
api-v3.findify.io/v3/search
200 OK 34 kB URL HTTP/2 api-v3.findify.io/v3/search
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (48745)
Hash 69f9001039e3357859edc0a4dc00fa1a
cdba48c781b767410d91ff5d620d6399b81d3d02
785abc136a5580106857d2497af6cd82b378374353a5160c0a00029224a47d44
POST /v3/search HTTP/1.1
Host: api-v3.findify.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.ginatricot.com/
X-Key: 772173b4-f849-4bbc-86e8-a9589494a833
Content-Type: text/plain;charset=UTF-8
Origin: https://www.ginatricot.com
Content-Length: 212
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
vary: Accept-Encoding
access-control-allow-headers: Content-type,Accept,x-key
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-origin: *
cache-control: no-cache, no-store, must-revalidate
date: Tue, 20 Sep 2022 17:37:52 GMT
etag: W/"4172-QUcidHtW9YGvEBUpUukSKLwJP0Y"
expires: 0
pragma: no-cache
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 3ELYyD5aFA3X_SQN1UfShKR7GdAkwpBNMqqqJeZ6ijT3g-HAeBoaUg==
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 4247a5fa5bc48001653b8b1934ca107b
9d184df81aee2230b73e5b86ef58800d2c1c8636
92abdc4ba48e6213e4ab8cffcdaa15072f3699583c31b25abd2786527ac9bfac
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4520
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 20 Sep 2022 17:37:53 GMT
Last-Modified: Tue, 20 Sep 2022 16:22:33 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471
www.ginatricot.com/_next/static/chunks/576645a52b8fd67340577bf2f35b88b7d8ac5894.e2cb755a711002932431.js
200 OK 6.3 kB URL HTTP/2 www.ginatricot.com/_next/static/chunks/576645a52b8fd67340577bf2f35b88b7d8ac5894.e2cb755a711002932431.js
IP
File type ASCII text, with very long lines (18377), with no line terminators
Hash 48ab79c7f125f00dc108aad8aefd307b
74d0c120ae3ee2e5bc3b6d0b368a7bb64b50aba4
a391a0e8e664b7294d82f41518a4706aa307d47193da5b84691b1126811e4dff
GET /_next/static/chunks/576645a52b8fd67340577bf2f35b88b7d8ac5894.e2cb755a711002932431.js HTTP/1.1
Host: www.ginatricot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://www.ginatricot.com/no/klaer/topper/singleter/singlet-808277194?tduid=3a7a46a30a8cba5ea321c1f15a2c85c8&utm_source=tradedoubler_no&utm_medium=affiliate&utm_campaign=Kelkoo+%28NO%29&utm_content=[td_site_id]
Cookie: GINATRICOT_SCOPE=no; sg_cookies={%225619855%22:{%22vid%22:%22dc377c5e-667e-4911-96a0-175da8c4ea63%22%2C%22lw%22:%229-20-17-37%22%2C%22rf%22:%22https://pdt.tradedoubler.com/%22%2C%22pw%22:1%2C%22tc%22:0%2C%22tv%22:1%2C%22fp%22:3142295211%2C%22192519649_ch%22:%22-1%22}}
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 20 Sep 2022 17:37:53 GMT
content-type: application/javascript; charset=UTF-8
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public, max-age=31536000, immutable
last-modified: Thu, 18 Aug 2022 07:27:26 GMT
etag: W/"47c9-182afd98b30"
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 bfeae0ecbffe44ad98e5cd0ae83bdb4a.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P1
x-amz-cf-id: a2OTfrSh3kocxxa_oEVfpTE9cHRAel9EgXMLy0zGw2RLB1qF9J5rew==
cf-cache-status: HIT
age: 2887572
server: cloudflare
cf-ray: 74dc54e44a6e992c-ARN
X-Firefox-Spdy: h2
www.ginatricot.com/_next/static/chunks/framework.3f2973e7e46185d34f6f.js
200 OK 41 kB URL HTTP/2 www.ginatricot.com/_next/static/chunks/framework.3f2973e7e46185d34f6f.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 29f1ba8fa7427ac0432fd688754365f3
34aa2be90f9739cc9d5faffcb1395d40459f2c73
a39e5b868719d9594fa2757631bf380e5fe38bef660bd9d8b9dd0fca8932aa4e
GET /_next/static/chunks/framework.3f2973e7e46185d34f6f.js HTTP/1.1
Host: www.ginatricot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ginatricot.com/no/klaer/topper/singleter/singlet-808277194?tduid=3a7a46a30a8cba5ea321c1f15a2c85c8&utm_source=tradedoubler_no&utm_medium=affiliate&utm_campaign=Kelkoo+%28NO%29&utm_content=[td_site_id]
Cookie: GINATRICOT_SCOPE=no
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 20 Sep 2022 17:37:51 GMT
content-type: application/javascript; charset=UTF-8
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public, max-age=31536000, immutable
last-modified: Fri, 27 May 2022 12:06:11 GMT
etag: W/"1ffbc-1810568eb38"
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 978313776816dba934d16309fa2c65c8.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN54-C1
x-amz-cf-id: kfLvWbIB8FOQ3ZOT8oqxO_0P-2v5gDWULanrZMpBV0wY5jnu3FGnHA==
age: 7116963
cf-cache-status: HIT
server: cloudflare
cf-ray: 74dc54dbde13992c-ARN
X-Firefox-Spdy: h2
www.ginatricot.com/api/v2/no/product/808277194/promotions/
200 OK 17 B URL HTTP/2 www.ginatricot.com/api/v2/no/product/808277194/promotions/
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 432d95558af8172acea0fd41cf6bb49e
c51907d5ff71ad32ae34437cf304848030e89cf5
87e14df455455afaa3102c637d8bf94433e60f34721d6ca0134e69a21dceafba
GET /api/v2/no/product/808277194/promotions/ HTTP/1.1
Host: www.ginatricot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.ginatricot.com/no/klaer/topper/singleter/singlet-808277194?tduid=3a7a46a30a8cba5ea321c1f15a2c85c8&utm_source=tradedoubler_no&utm_medium=affiliate&utm_campaign=Kelkoo+%28NO%29&utm_content=[td_site_id]
Content-Type: application/json
Connection: keep-alive
Cookie: GINATRICOT_SCOPE=no; sg_cookies={%225619855%22:{%22vid%22:%22dc377c5e-667e-4911-96a0-175da8c4ea63%22%2C%22lw%22:%229-20-17-37%22%2C%22rf%22:%22https://pdt.tradedoubler.com/%22%2C%22pw%22:1%2C%22tc%22:0%2C%22tv%22:1%2C%22fp%22:3142295211%2C%22192519649_ch%22:%22-1%22}}; _rtbhouse_source_=tradedoubler_no
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 20 Sep 2022 17:37:53 GMT
content-type: application/json
content-length: 17
allow: GET
x-frame-options: DENY
strict-transport-security: max-age=10368000; preload
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: same-origin
vary: Cookie
x-cache: Miss from cloudfront
via: 1.1 17c1b187a3afe016510e55151109cc30.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: 9TAILLi1A3gf1L3_h8-_GTe82bitsDOpfkWIgStkzszRT_az_wzwtA==
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 74dc54e57c35992c-ARN
X-Firefox-Spdy: h2
consentcdn.cookiebot.com/sdk/bc-v4.min.html
200 OK 392 B URL HTTP/2 consentcdn.cookiebot.com/sdk/bc-v4.min.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (627), with no line terminators
Hash e7268eccad39bd651697fa793a52cc5c
47299cefa2397b0c1d0c5bf232390a5cf1bcc4d3
907e16c84d35556e4ed841a3511915e6d4bb4e9d68cfca178a740e90b4d80e35
GET /sdk/bc-v4.min.html HTTP/1.1
Host: consentcdn.cookiebot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ginatricot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: text/html
etag: "3d08665fa4c7bcf9fa2dcbbc7efe1d0f:1649057029.895163"
last-modified: Mon, 04 Apr 2022 07:23:49 GMT
server: AkamaiNetStorage
x-akamai-transformed: 9 - 0 pmb=mRUM,1
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=31175407
expires: Sat, 16 Sep 2023 13:28:00 GMT
date: Tue, 20 Sep 2022 17:37:53 GMT
content-length: 392
server-timing: cdn-cache; desc=HIT, edge; dur=1
X-Firefox-Spdy: h2
consent.cookiebot.com/3b9511af-5411-4b91-9fc6-be88a459a54b/cc.js?renew=false&referer=www.ginatricot.com&dnt=false&init=false&culture=NO
200 OK 55 kB URL HTTP/2 consent.cookiebot.com/3b9511af-5411-4b91-9fc6-be88a459a54b/cc.js?renew=false&referer=www.ginatricot.com&dnt=false&init=false&culture=NO
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65499)
Hash 3c238c0c5bc2927160624ae20276b354
8e2bfa918998ca19e37c38b2f592bac93138c608
cd8d8c145bb95dca73d08f0cf054bd9cab898220341782f02c68bf006940a2c7
GET /3b9511af-5411-4b91-9fc6-be88a459a54b/cc.js?renew=false&referer=www.ginatricot.com&dnt=false&init=false&culture=NO HTTP/1.1
Host: consent.cookiebot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ginatricot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private, max-age=1
content-type: application/x-javascript; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
request-context: appId=cid-v1:89f47f4b-bed0-4db8-956b-d6e6dfac3fef
access-control-expose-headers: Request-Context
content-length: 54861
date: Tue, 20 Sep 2022 17:37:53 GMT
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 3b69f28ffa138babf55a0844a13c920a
2e5026d1c5eb49fad7362fce680bb515a605cba0
ca52db621a09b18822c05ee2ce8dd8fbacc08fb83758c0c2bd918b61a8240390
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 20 Sep 2022 17:37:53 GMT
Last-Modified: Tue, 20 Sep 2022 16:09:40 GMT
Server: ECS (nyb/1D34)
X-Cache: Miss from cloudfront
Via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: xwMYUfQ9swhDbXq5AgQ8P2PNb0IHopn761EAzhQJkS0qWyBbyNVESA==
Age: 5293
rum-static.pingdom.net/pa-5f6890fdf07a4c0013000344.js
200 OK 3.2 kB URL HTTP/2 rum-static.pingdom.net/pa-5f6890fdf07a4c0013000344.js
IP
File type ASCII text, with very long lines (6238)
Hash 179ba4c3d9df4e936a0c296c36a0e7b6
e8eea4f2aec025145d0cc4f8d0b322d21dea770d
3bbd968d3f4c2566004899ddcf49143a32349ed384e8bf14786fee7002622496
GET /pa-5f6890fdf07a4c0013000344.js HTTP/1.1
Host: rum-static.pingdom.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ginatricot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 20 Sep 2022 17:37:52 GMT
content-type: application/javascript; charset=utf-8
last-modified: Tue, 11 May 2021 14:01:36 GMT
vary: Accept-Encoding
etag: W/"609a8e40-1852"
expires: Tue, 20 Sep 2022 17:39:09 GMT
cache-control: max-age=86400
access-control-allow-origin: *
content-encoding: gzip
cf-cache-status: HIT
age: 223
server: cloudflare
cf-ray: 74dc54dcae430b39-OSL
X-Firefox-Spdy: h2
creativecdn.com/tags?type=iframe&id=pr_nrvHe9XSiSxS3REDl6qz_offer_808277194&id=pr_nrvHe9XSiSxS3REDl6qz_lid_TfIzVMKFYzPha3jKGu9c&su=https%3A%2F%2Fwww.ginatricot.com%2Fno%2Fklaer%2Ftopper%2Fsingleter%2Fsinglet-808277194%3Ftduid%3D3a7a46a30a8cba5ea321c1f15a2c85c8%26utm_source%3Dtradedoubler_no%26utm_medium%3Daffiliate%26utm_campaign%3DKelkoo%2B%2528NO%2529%26utm_content%3D%5Btd_site_id%5D&sr=https%3A%2F%2Fpdt.tradedoubler.com%2F&ts=1663695473812
302 Found 0 B URL HTTP/2 creativecdn.com/tags?type=iframe&id=pr_nrvHe9XSiSxS3REDl6qz_offer_808277194&id=pr_nrvHe9XSiSxS3REDl6qz_lid_TfIzVMKFYzPha3jKGu9c&su=https%3A%2F%2Fwww.ginatricot.com%2Fno%2Fklaer%2Ftopper%2Fsingleter%2Fsinglet-808277194%3Ftduid%3D3a7a46a30a8cba5ea321c1f15a2c85c8%26utm_source%3Dtradedoubler_no%26utm_medium%3Daffiliate%26utm_campaign%3DKelkoo%2B%2528NO%2529%26utm_content%3D%5Btd_site_id%5D&sr=https%3A%2F%2Fpdt.tradedoubler.com%2F&ts=1663695473812
IP
ASN #204995 Rtb House S.A.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tags?type=iframe&id=pr_nrvHe9XSiSxS3REDl6qz_offer_808277194&id=pr_nrvHe9XSiSxS3REDl6qz_lid_TfIzVMKFYzPha3jKGu9c&su=https%3A%2F%2Fwww.ginatricot.com%2Fno%2Fklaer%2Ftopper%2Fsingleter%2Fsinglet-808277194%3Ftduid%3D3a7a46a30a8cba5ea321c1f15a2c85c8%26utm_source%3Dtradedoubler_no%26utm_medium%3Daffiliate%26utm_campaign%3DKelkoo%2B%2528NO%2529%26utm_content%3D%5Btd_site_id%5D&sr=https%3A%2F%2Fpdt.tradedoubler.com%2F&ts=1663695473812 HTTP/1.1
Host: creativecdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ginatricot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Tue, 20 Sep 2022 17:37:53 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST
access-control-max-age: 3600
vary: Origin
expires: Thu, 01 Jan 1970 00:00:00 GMT
p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
set-cookie: u=jIhvRmit1YTF6tXMd52J;Path=/;Domain=.creativecdn.com;Expires=Wed, 20-Sep-2023 17:37:53 GMT;Max-Age=31536000;Secure;SameSite=None
ts=1663695473;Path=/;Domain=.creativecdn.com;Expires=Wed, 20-Sep-2023 17:37:53 GMT;Max-Age=31536000;Secure;SameSite=None
location: https://creativecdn.com/tags?type=iframe&id=pr_nrvHe9XSiSxS3REDl6qz_offer_808277194&id=pr_nrvHe9XSiSxS3REDl6qz_lid_TfIzVMKFYzPha3jKGu9c&su=https%3A%2F%2Fwww.ginatricot.com%2Fno%2Fklaer%2Ftopper%2Fsingleter%2Fsinglet-808277194%3Ftduid%3D3a7a46a30a8cba5ea321c1f15a2c85c8%26utm_source%3Dtradedoubler_no%26utm_medium%3Daffiliate%26utm_campaign%3DKelkoo%2B%2528NO%2529%26utm_content%3D%5Btd_site_id%5D&sr=https%3A%2F%2Fpdt.tradedoubler.com%2F&ts=1663695473812&tc=1
content-length: 0
X-Firefox-Spdy: h2
creativecdn.com/tags?type=iframe&id=pr_nrvHe9XSiSxS3REDl6qz_offer_808277194&id=pr_nrvHe9XSiSxS3REDl6qz_lid_TfIzVMKFYzPha3jKGu9c&su=https%3A%2F%2Fwww.ginatricot.com%2Fno%2Fklaer%2Ftopper%2Fsingleter%2Fsinglet-808277194%3Ftduid%3D3a7a46a30a8cba5ea321c1f15a2c85c8%26utm_source%3Dtradedoubler_no%26utm_medium%3Daffiliate%26utm_campaign%3DKelkoo%2B%2528NO%2529%26utm_content%3D%5Btd_site_id%5D&sr=https%3A%2F%2Fpdt.tradedoubler.com%2F&ts=1663695473812&tc=1
204 No Content 0 B URL HTTP/2 creativecdn.com/tags?type=iframe&id=pr_nrvHe9XSiSxS3REDl6qz_offer_808277194&id=pr_nrvHe9XSiSxS3REDl6qz_lid_TfIzVMKFYzPha3jKGu9c&su=https%3A%2F%2Fwww.ginatricot.com%2Fno%2Fklaer%2Ftopper%2Fsingleter%2Fsinglet-808277194%3Ftduid%3D3a7a46a30a8cba5ea321c1f15a2c85c8%26utm_source%3Dtradedoubler_no%26utm_medium%3Daffiliate%26utm_campaign%3DKelkoo%2B%2528NO%2529%26utm_content%3D%5Btd_site_id%5D&sr=https%3A%2F%2Fpdt.tradedoubler.com%2F&ts=1663695473812&tc=1
IP
ASN #204995 Rtb House S.A.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tags?type=iframe&id=pr_nrvHe9XSiSxS3REDl6qz_offer_808277194&id=pr_nrvHe9XSiSxS3REDl6qz_lid_TfIzVMKFYzPha3jKGu9c&su=https%3A%2F%2Fwww.ginatricot.com%2Fno%2Fklaer%2Ftopper%2Fsingleter%2Fsinglet-808277194%3Ftduid%3D3a7a46a30a8cba5ea321c1f15a2c85c8%26utm_source%3Dtradedoubler_no%26utm_medium%3Daffiliate%26utm_campaign%3DKelkoo%2B%2528NO%2529%26utm_content%3D%5Btd_site_id%5D&sr=https%3A%2F%2Fpdt.tradedoubler.com%2F&ts=1663695473812&tc=1 HTTP/1.1
Host: creativecdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.ginatricot.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
X-Firefox-Spdy: h2
www.ginatricot.com/_next/static/chunks/26.33efaafeb5799618fc4d.js
200 OK 0 B URL HTTP/2 www.ginatricot.com/_next/static/chunks/26.33efaafeb5799618fc4d.js
IP
GET /_next/static/chunks/26.33efaafeb5799618fc4d.js HTTP/1.1
Host: www.ginatricot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ginatricot.com/no/klaer/topper/singleter/singlet-808277194?tduid=3a7a46a30a8cba5ea321c1f15a2c85c8&utm_source=tradedoubler_no&utm_medium=affiliate&utm_campaign=Kelkoo+%28NO%29&utm_content=[td_site_id]
Cookie: GINATRICOT_SCOPE=no
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 20 Sep 2022 17:37:52 GMT
content-type: application/javascript; charset=UTF-8
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public, max-age=31536000, immutable
last-modified: Thu, 18 Aug 2022 07:27:26 GMT
etag: W/"58a7-182afd98b30"
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 3f25be8570bf62f8d4607f79984fccec.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P1
x-amz-cf-id: m_8tw_sgLSvL0knSjVVBVBJJkQY9w3HjsyvsHe3uWaP2mj92UCLCoQ==
cf-cache-status: HIT
age: 2887573
server: cloudflare
cf-ray: 74dc54dbfe56992c-ARN
X-Firefox-Spdy: h2
rcgmal4n.klarnaservices.com/v3/s?ver=2.13.6&d=credit-promotion-badge&e=no-NO&g=b980351e-327a-5e72-90bc-3ccd47a5f3b1&purchase_amount=9900
200 OK 0 B URL HTTP/2 rcgmal4n.klarnaservices.com/v3/s?ver=2.13.6&d=credit-promotion-badge&e=no-NO&g=b980351e-327a-5e72-90bc-3ccd47a5f3b1&purchase_amount=9900
IP
GET /v3/s?ver=2.13.6&d=credit-promotion-badge&e=no-NO&g=b980351e-327a-5e72-90bc-3ccd47a5f3b1&purchase_amount=9900 HTTP/1.1
Host: rcgmal4n.klarnaservices.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.ginatricot.com/
Origin: https://www.ginatricot.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json; charset=utf-8
date: Tue, 20 Sep 2022 17:37:52 GMT
access-control-allow-origin: https://www.ginatricot.com
vary: Accept-Encoding, Origin
access-control-allow-credentials: true
klarna-correlation-id: 69b55494-1c76-4cc2-a462-30a1be8a8a75
timing-allow-origin: *
cache-control: public, max-age=86400
etag: W/"19ec-UybbuYZNG6NXKGKLmcxX6Rouhbg"
x-envoy-upstream-service-time: 5
server: envoy
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: L7ggAjsgRwDwvbTAp7s2oshCMraEnmAXM_3KOtknEUuYes-J7igM_Q==
X-Firefox-Spdy: h2
www.ginatricot.com/no/klaer/topper/singleter/singlet-808277194?tduid=3a7a46a30a8cba5ea321c1f15a2c85c8&utm_source=tradedoubler_no&utm_medium=affiliate&utm_campaign=Kelkoo+%28NO%29&utm_content=[td_site_id]
200 OK 0 B URL HTTP/2 www.ginatricot.com/no/klaer/topper/singleter/singlet-808277194?tduid=3a7a46a30a8cba5ea321c1f15a2c85c8&utm_source=tradedoubler_no&utm_medium=affiliate&utm_campaign=Kelkoo+%28NO%29&utm_content=[td_site_id]
IP
GET /no/klaer/topper/singleter/singlet-808277194?tduid=3a7a46a30a8cba5ea321c1f15a2c85c8&utm_source=tradedoubler_no&utm_medium=affiliate&utm_campaign=Kelkoo+%28NO%29&utm_content=[td_site_id] HTTP/1.1
Host: www.ginatricot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pdt.tradedoubler.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 20 Sep 2022 17:37:51 GMT
content-type: text/html; charset=utf-8
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: no-cache, no-store
set-cookie: GINATRICOT_SCOPE=no; expires=Thu, 20-Oct-2022 17:37:51 GMT; Max-Age=2592000; path=/
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 269b0fad85dfd450220cf6573a2d384e.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: Q87VCeyOmB3J8uiFeMJyLZKuB2LAZwmyxiN55kyX8xaV-7GP0V6BCw==
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 74dc54d8c9c8992c-ARN
content-encoding: gzip
X-Firefox-Spdy: h2
www.ginatricot.com/_next/static/chunks/styles.e594ea9a64f5ca5ad435.js
200 OK 0 B URL HTTP/2 www.ginatricot.com/_next/static/chunks/styles.e594ea9a64f5ca5ad435.js
IP
GET /_next/static/chunks/styles.e594ea9a64f5ca5ad435.js HTTP/1.1
Host: www.ginatricot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ginatricot.com/no/klaer/topper/singleter/singlet-808277194?tduid=3a7a46a30a8cba5ea321c1f15a2c85c8&utm_source=tradedoubler_no&utm_medium=affiliate&utm_campaign=Kelkoo+%28NO%29&utm_content=[td_site_id]
Cookie: GINATRICOT_SCOPE=no
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 20 Sep 2022 17:37:51 GMT
content-type: application/javascript; charset=UTF-8
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public, max-age=31536000, immutable
last-modified: Mon, 29 Aug 2022 06:35:05 GMT
etag: W/"e0e2-182e84f91a8"
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 660625642e0df86c41275db1ce1ac922.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN54-C1
x-amz-cf-id: Z7RNNpWVe8KSbKnCoIyARMltU7F0bZYOLSLDZGH8i2Og_yt9FcIqKg==
cf-cache-status: HIT
age: 1940315
server: cloudflare
cf-ray: 74dc54dbce03992c-ARN
X-Firefox-Spdy: h2
www.ginatricot.com/_next/static/chunks/1620567d1dd7c0c2f6c15d665d00bd4f6f5cfcbf.799686c55e2b147fc669.js
200 OK 0 B URL HTTP/2 www.ginatricot.com/_next/static/chunks/1620567d1dd7c0c2f6c15d665d00bd4f6f5cfcbf.799686c55e2b147fc669.js
IP
GET /_next/static/chunks/1620567d1dd7c0c2f6c15d665d00bd4f6f5cfcbf.799686c55e2b147fc669.js HTTP/1.1
Host: www.ginatricot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ginatricot.com/no/klaer/topper/singleter/singlet-808277194?tduid=3a7a46a30a8cba5ea321c1f15a2c85c8&utm_source=tradedoubler_no&utm_medium=affiliate&utm_campaign=Kelkoo+%28NO%29&utm_content=[td_site_id]
Cookie: GINATRICOT_SCOPE=no
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 20 Sep 2022 17:37:51 GMT
content-type: application/javascript; charset=UTF-8
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public, max-age=31536000, immutable
last-modified: Thu, 18 Aug 2022 07:27:26 GMT
etag: W/"b052-182afd98b30"
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 ff7194a111d1912088727cbee9f13db0.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P1
x-amz-cf-id: DDX1_QdwZjRNdFpYKYtT7ZwlooM4zr6g4m49jvMIa5kwvEsC60Nfpg==
cf-cache-status: HIT
age: 2887572
server: cloudflare
cf-ray: 74dc54dbee30992c-ARN
X-Firefox-Spdy: h2
www.ginatricot.com/_next/static/chunks/897388e7785f6fa8a80b2fa2fe87ac5742c642ee.7b495f9074f34489ab14.js
200 OK 0 B URL HTTP/2 www.ginatricot.com/_next/static/chunks/897388e7785f6fa8a80b2fa2fe87ac5742c642ee.7b495f9074f34489ab14.js
IP
GET /_next/static/chunks/897388e7785f6fa8a80b2fa2fe87ac5742c642ee.7b495f9074f34489ab14.js HTTP/1.1
Host: www.ginatricot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ginatricot.com/no/klaer/topper/singleter/singlet-808277194?tduid=3a7a46a30a8cba5ea321c1f15a2c85c8&utm_source=tradedoubler_no&utm_medium=affiliate&utm_campaign=Kelkoo+%28NO%29&utm_content=[td_site_id]
Cookie: GINATRICOT_SCOPE=no
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 20 Sep 2022 17:37:51 GMT
content-type: application/javascript; charset=UTF-8
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public, max-age=31536000, immutable
last-modified: Mon, 22 Aug 2022 13:17:08 GMT
etag: W/"8b88-182c5b32420"
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 3072267d18c4d0ed9e535752800364e0.cloudfront.net (CloudFront)
x-amz-cf-pop: FRA60-P2
x-amz-cf-id: caPB7K1_fu0Srfl0C79jlEQzQaXU2u9YgL98HNgKZt4k35wYLeHxIw==
age: 2331769
cf-cache-status: HIT
server: cloudflare
cf-ray: 74dc54dbfe46992c-ARN
X-Firefox-Spdy: h2
www.ginatricot.com/_next/static/chunks/pages/_app-352d61c0ca9870a99035.js
200 OK 0 B URL HTTP/2 www.ginatricot.com/_next/static/chunks/pages/_app-352d61c0ca9870a99035.js
IP
GET /_next/static/chunks/pages/_app-352d61c0ca9870a99035.js HTTP/1.1
Host: www.ginatricot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ginatricot.com/no/klaer/topper/singleter/singlet-808277194?tduid=3a7a46a30a8cba5ea321c1f15a2c85c8&utm_source=tradedoubler_no&utm_medium=affiliate&utm_campaign=Kelkoo+%28NO%29&utm_content=[td_site_id]
Cookie: GINATRICOT_SCOPE=no
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 20 Sep 2022 17:37:52 GMT
content-type: application/javascript; charset=UTF-8
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public, max-age=31536000, immutable
last-modified: Thu, 18 Aug 2022 07:27:26 GMT
etag: W/"2ac0b-182afd98b30"
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 ab5e2ae728dfa6338273a7f7bcdc636c.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P1
x-amz-cf-id: pCb5EqCLPdfUNnRT2l6315JmHDC5FKjQnV2bQMrG9p2LAnxgoidpRg==
cf-cache-status: HIT
age: 2887573
server: cloudflare
cf-ray: 74dc54dbfe52992c-ARN
X-Firefox-Spdy: h2
www.ginatricot.com/_next/static/chunks/d3738c1864fed66a1f59e66a98b7fb68c7aa8c8f.5600c6ed777625129df9.js
200 OK 0 B URL HTTP/2 www.ginatricot.com/_next/static/chunks/d3738c1864fed66a1f59e66a98b7fb68c7aa8c8f.5600c6ed777625129df9.js
IP
GET /_next/static/chunks/d3738c1864fed66a1f59e66a98b7fb68c7aa8c8f.5600c6ed777625129df9.js HTTP/1.1
Host: www.ginatricot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ginatricot.com/no/klaer/topper/singleter/singlet-808277194?tduid=3a7a46a30a8cba5ea321c1f15a2c85c8&utm_source=tradedoubler_no&utm_medium=affiliate&utm_campaign=Kelkoo+%28NO%29&utm_content=[td_site_id]
Cookie: GINATRICOT_SCOPE=no
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 20 Sep 2022 17:37:52 GMT
content-type: application/javascript; charset=UTF-8
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public, max-age=31536000, immutable
last-modified: Thu, 18 Aug 2022 07:27:26 GMT
etag: W/"1ef0-182afd98b30"
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 d84d4103926180da8f8abcb90515db0c.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P1
x-amz-cf-id: DC6FUoeCEfIxvvIC1qH7BEDSfjDPkVHBKsuLmzZpYGbQYr3w1eHxnA==
cf-cache-status: HIT
age: 2887571
server: cloudflare
cf-ray: 74dc54dbfe43992c-ARN
X-Firefox-Spdy: h2
www.ginatricot.com/_next/static/chunks/3b147285cadfc46d46591c49c330dbba6f47cbea.10f2f4d3a7c98ed5c34d.js
200 OK 0 B URL HTTP/2 www.ginatricot.com/_next/static/chunks/3b147285cadfc46d46591c49c330dbba6f47cbea.10f2f4d3a7c98ed5c34d.js
IP
GET /_next/static/chunks/3b147285cadfc46d46591c49c330dbba6f47cbea.10f2f4d3a7c98ed5c34d.js HTTP/1.1
Host: www.ginatricot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ginatricot.com/no/klaer/topper/singleter/singlet-808277194?tduid=3a7a46a30a8cba5ea321c1f15a2c85c8&utm_source=tradedoubler_no&utm_medium=affiliate&utm_campaign=Kelkoo+%28NO%29&utm_content=[td_site_id]
Cookie: GINATRICOT_SCOPE=no
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 20 Sep 2022 17:37:51 GMT
content-type: application/javascript; charset=UTF-8
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public, max-age=31536000, immutable
last-modified: Thu, 18 Aug 2022 07:27:26 GMT
etag: W/"1881-182afd98b30"
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 e2bc8da8a8d03748525187195f797d86.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P1
x-amz-cf-id: CzyAG30QnzSd8_CctrtpU4C12TF0uw5HgoDmWbraLP_pXBPwA-7P6w==
cf-cache-status: HIT
age: 2887572
server: cloudflare
cf-ray: 74dc54dbde18992c-ARN
X-Firefox-Spdy: h2
www.ginatricot.com/_next/static/chunks/4a376e0880231b765986c447b7b44f91149df089.b846b3676fc207eb9143.js
200 OK 0 B URL HTTP/2 www.ginatricot.com/_next/static/chunks/4a376e0880231b765986c447b7b44f91149df089.b846b3676fc207eb9143.js
IP
GET /_next/static/chunks/4a376e0880231b765986c447b7b44f91149df089.b846b3676fc207eb9143.js HTTP/1.1
Host: www.ginatricot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ginatricot.com/no/klaer/topper/singleter/singlet-808277194?tduid=3a7a46a30a8cba5ea321c1f15a2c85c8&utm_source=tradedoubler_no&utm_medium=affiliate&utm_campaign=Kelkoo+%28NO%29&utm_content=[td_site_id]
Cookie: GINATRICOT_SCOPE=no
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 20 Sep 2022 17:37:51 GMT
content-type: application/javascript; charset=UTF-8
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public, max-age=31536000, immutable
last-modified: Thu, 18 Aug 2022 07:27:26 GMT
etag: W/"4807-182afd98b30"
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 b34d5d8e5954d0b7b46d5f0eb534c166.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P1
x-amz-cf-id: jlOtL0y5-ue1uSDWnM3zIRLdlinXUW9KVSNQf8HbcVAnRe3XtGtFIg==
cf-cache-status: HIT
age: 2887572
server: cloudflare
cf-ray: 74dc54dbde1f992c-ARN
X-Firefox-Spdy: h2
www.ginatricot.com/_next/static/chunks/7a7d31fbe2ad08f19537e73e25e4cf63b6c378a8.6a4f95006ed6eb594afc.js
200 OK 0 B URL HTTP/2 www.ginatricot.com/_next/static/chunks/7a7d31fbe2ad08f19537e73e25e4cf63b6c378a8.6a4f95006ed6eb594afc.js
IP
GET /_next/static/chunks/7a7d31fbe2ad08f19537e73e25e4cf63b6c378a8.6a4f95006ed6eb594afc.js HTTP/1.1
Host: www.ginatricot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ginatricot.com/no/klaer/topper/singleter/singlet-808277194?tduid=3a7a46a30a8cba5ea321c1f15a2c85c8&utm_source=tradedoubler_no&utm_medium=affiliate&utm_campaign=Kelkoo+%28NO%29&utm_content=[td_site_id]
Cookie: GINATRICOT_SCOPE=no
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 20 Sep 2022 17:37:51 GMT
content-type: application/javascript; charset=UTF-8
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public, max-age=31536000, immutable
last-modified: Thu, 18 Aug 2022 07:27:26 GMT
etag: W/"81e0-182afd98b30"
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 3f25be8570bf62f8d4607f79984fccec.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P1
x-amz-cf-id: ZqvVdjyCS1JGAEeI9LKQcobtOjJdWmJbryFNloMLKpaKnA2J-5yxDw==
cf-cache-status: HIT
age: 2887572
server: cloudflare
cf-ray: 74dc54dbde24992c-ARN
X-Firefox-Spdy: h2
www.ginatricot.com/_next/static/chunks/d929fbf2d92edf24f05e18e0aeab075ee8a76d94.ff5a54a827e223f61412.js
200 OK 0 B URL HTTP/2 www.ginatricot.com/_next/static/chunks/d929fbf2d92edf24f05e18e0aeab075ee8a76d94.ff5a54a827e223f61412.js
IP
GET /_next/static/chunks/d929fbf2d92edf24f05e18e0aeab075ee8a76d94.ff5a54a827e223f61412.js HTTP/1.1
Host: www.ginatricot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ginatricot.com/no/klaer/topper/singleter/singlet-808277194?tduid=3a7a46a30a8cba5ea321c1f15a2c85c8&utm_source=tradedoubler_no&utm_medium=affiliate&utm_campaign=Kelkoo+%28NO%29&utm_content=[td_site_id]
Cookie: GINATRICOT_SCOPE=no
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 20 Sep 2022 17:37:51 GMT
content-type: application/javascript; charset=UTF-8
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public, max-age=31536000, immutable
last-modified: Thu, 18 Aug 2022 07:27:26 GMT
etag: W/"1e1c-182afd98b30"
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 301faf3f65621d2ccd9fad88788c128a.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P1
x-amz-cf-id: Zha5uMcvkyJRfrQmq_F1EaeEOBnVjhl1FEd44M8crshLJYaF4URbOA==
cf-cache-status: HIT
age: 2887572
server: cloudflare
cf-ray: 74dc54dbde27992c-ARN
X-Firefox-Spdy: h2
rcgmal4n.klarnaservices.com/v3/s?ver=2.13.6&d=footer-promotion-auto-size&e=no-NO&g=b980351e-327a-5e72-90bc-3ccd47a5f3b1
200 OK 0 B URL HTTP/2 rcgmal4n.klarnaservices.com/v3/s?ver=2.13.6&d=footer-promotion-auto-size&e=no-NO&g=b980351e-327a-5e72-90bc-3ccd47a5f3b1
IP
GET /v3/s?ver=2.13.6&d=footer-promotion-auto-size&e=no-NO&g=b980351e-327a-5e72-90bc-3ccd47a5f3b1 HTTP/1.1
Host: rcgmal4n.klarnaservices.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.ginatricot.com/
Origin: https://www.ginatricot.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json; charset=utf-8
date: Tue, 20 Sep 2022 17:37:52 GMT
access-control-allow-origin: https://www.ginatricot.com
vary: Accept-Encoding, Origin
access-control-allow-credentials: true
klarna-correlation-id: 9864f5f9-08d2-4c50-9629-364109e183f1
timing-allow-origin: *
cache-control: public, max-age=86400
etag: W/"8fc9-Kkvoxn07sWQ67Ge8wmf/Ya9spSY"
x-envoy-upstream-service-time: 11
server: envoy
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 8eHyqkzw8owv0kuOHT44MjzpZ2_7rYgBLd2VoJXK822aFzM6dILyaQ==
X-Firefox-Spdy: h2
www.ginatricot.com/_next/static/chunks/main-79b64d29bd34a0fb5e5e.js
200 OK 0 B URL HTTP/2 www.ginatricot.com/_next/static/chunks/main-79b64d29bd34a0fb5e5e.js
IP
GET /_next/static/chunks/main-79b64d29bd34a0fb5e5e.js HTTP/1.1
Host: www.ginatricot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ginatricot.com/no/klaer/topper/singleter/singlet-808277194?tduid=3a7a46a30a8cba5ea321c1f15a2c85c8&utm_source=tradedoubler_no&utm_medium=affiliate&utm_campaign=Kelkoo+%28NO%29&utm_content=[td_site_id]
Cookie: GINATRICOT_SCOPE=no
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 20 Sep 2022 17:37:51 GMT
content-type: application/javascript; charset=UTF-8
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public, max-age=31536000, immutable
last-modified: Thu, 18 Aug 2022 07:27:26 GMT
etag: W/"5dc3-182afd98b30"
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 bfeae0ecbffe44ad98e5cd0ae83bdb4a.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P1
x-amz-cf-id: N1jWWsHvU_5Kbrn6zx3pz4doeNF4ylA5b-2bG7gF8YahATfD_bMayQ==
cf-cache-status: HIT
age: 2887572
server: cloudflare
cf-ray: 74dc54dbcdf9992c-ARN
X-Firefox-Spdy: h2
eu-library.klarnaservices.com/lib.js
200 OK 0 B URL HTTP/2 eu-library.klarnaservices.com/lib.js
IP
GET /lib.js HTTP/1.1
Host: eu-library.klarnaservices.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ginatricot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
date: Tue, 20 Sep 2022 14:47:51 GMT
last-modified: Tue, 20 Sep 2022 14:47:32 GMT
etag: W/"3b3ffe1d09583d55a64d040f0e452ae3"
x-amz-server-side-encryption: AES256
cache-control: max-age=86400
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: kbdflDCaah3QTYVuBVuxaVJ5448-WTWC9P9EIkAbn9UbbFUDeicTlw==
age: 10202
X-Firefox-Spdy: h2
www.ginatricot.com/_next/static/ZEI9KwYsm3P52YhG25CWf/_ssgManifest.js
200 OK 0 B URL HTTP/2 www.ginatricot.com/_next/static/ZEI9KwYsm3P52YhG25CWf/_ssgManifest.js
IP
GET /_next/static/ZEI9KwYsm3P52YhG25CWf/_ssgManifest.js HTTP/1.1
Host: www.ginatricot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ginatricot.com/no/klaer/topper/singleter/singlet-808277194?tduid=3a7a46a30a8cba5ea321c1f15a2c85c8&utm_source=tradedoubler_no&utm_medium=affiliate&utm_campaign=Kelkoo+%28NO%29&utm_content=[td_site_id]
Cookie: GINATRICOT_SCOPE=no
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 20 Sep 2022 17:37:52 GMT
content-type: application/javascript; charset=UTF-8
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public, max-age=31536000, immutable
last-modified: Mon, 29 Aug 2022 06:35:05 GMT
etag: W/"4c-182e84f91a8"
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 2fe761c42f710dbc97bfbe41f450bf42.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN54-C1
x-amz-cf-id: eFie2KQofJ0Z_iVwxfcocbqW2D1rHD2vM_-oFJrGB1tgfBV4P_TRqQ==
cf-cache-status: HIT
age: 1940316
server: cloudflare
cf-ray: 74dc54dc3ea8992c-ARN
content-encoding: gzip
X-Firefox-Spdy: h2
www.ginatricot.com/_next/static/chunks/webpack-e174cac7ced0c9001c9b.js
200 OK 0 B URL HTTP/2 www.ginatricot.com/_next/static/chunks/webpack-e174cac7ced0c9001c9b.js
IP
GET /_next/static/chunks/webpack-e174cac7ced0c9001c9b.js HTTP/1.1
Host: www.ginatricot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ginatricot.com/no/klaer/topper/singleter/singlet-808277194?tduid=3a7a46a30a8cba5ea321c1f15a2c85c8&utm_source=tradedoubler_no&utm_medium=affiliate&utm_campaign=Kelkoo+%28NO%29&utm_content=[td_site_id]
Cookie: GINATRICOT_SCOPE=no
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 20 Sep 2022 17:37:51 GMT
content-type: application/javascript; charset=UTF-8
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public, max-age=31536000, immutable
last-modified: Mon, 29 Aug 2022 06:35:05 GMT
etag: W/"12a7-182e84f91a8"
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 f13ebb34b9ca74b5ffe9e85709c21a7c.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN54-C1
x-amz-cf-id: 3HICv9AcICR2hDijD8hbr77vSt1iK_LlzYXXkz90KAA1FHO7x366Gg==
cf-cache-status: HIT
age: 1940315
server: cloudflare
cf-ray: 74dc54dbce01992c-ARN
X-Firefox-Spdy: h2
www.ginatricot.com/_next/static/chunks/32b9191833a9f9b362468746707eb4c9acaabe67.ae6c9083db9c14119747.js
200 OK 0 B URL HTTP/2 www.ginatricot.com/_next/static/chunks/32b9191833a9f9b362468746707eb4c9acaabe67.ae6c9083db9c14119747.js
IP
GET /_next/static/chunks/32b9191833a9f9b362468746707eb4c9acaabe67.ae6c9083db9c14119747.js HTTP/1.1
Host: www.ginatricot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ginatricot.com/no/klaer/topper/singleter/singlet-808277194?tduid=3a7a46a30a8cba5ea321c1f15a2c85c8&utm_source=tradedoubler_no&utm_medium=affiliate&utm_campaign=Kelkoo+%28NO%29&utm_content=[td_site_id]
Cookie: GINATRICOT_SCOPE=no
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 20 Sep 2022 17:37:51 GMT
content-type: application/javascript; charset=UTF-8
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public, max-age=31536000, immutable
last-modified: Thu, 18 Aug 2022 07:27:26 GMT
etag: W/"5e9e-182afd98b30"
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 d84d4103926180da8f8abcb90515db0c.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P1
x-amz-cf-id: OGwh9c_QHdQFAhUQ463etmgOY63CuJ0T4VpYZ9tzWphGrIlDdLnvIw==
cf-cache-status: HIT
age: 2887572
server: cloudflare
cf-ray: 74dc54dbde21992c-ARN
X-Firefox-Spdy: h2
www.ginatricot.com/_next/static/chunks/d03e488063334e96b291401d582a8b2558ad1fb9.1db782afec07b85cd775.js
200 OK 0 B URL HTTP/2 www.ginatricot.com/_next/static/chunks/d03e488063334e96b291401d582a8b2558ad1fb9.1db782afec07b85cd775.js
IP
GET /_next/static/chunks/d03e488063334e96b291401d582a8b2558ad1fb9.1db782afec07b85cd775.js HTTP/1.1
Host: www.ginatricot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ginatricot.com/no/klaer/topper/singleter/singlet-808277194?tduid=3a7a46a30a8cba5ea321c1f15a2c85c8&utm_source=tradedoubler_no&utm_medium=affiliate&utm_campaign=Kelkoo+%28NO%29&utm_content=[td_site_id]
Cookie: GINATRICOT_SCOPE=no
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 20 Sep 2022 17:37:51 GMT
content-type: application/javascript; charset=UTF-8
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public, max-age=31536000, immutable
last-modified: Thu, 18 Aug 2022 07:27:26 GMT
etag: W/"3679-182afd98b30"
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 bfeae0ecbffe44ad98e5cd0ae83bdb4a.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P1
x-amz-cf-id: r2HtLI454dIUnh2k0KjQzGOuzou9vmwlvkktdWlPl-JwTsfZEoAdOw==
cf-cache-status: HIT
age: 2887571
server: cloudflare
cf-ray: 74dc54dbee3f992c-ARN
X-Firefox-Spdy: h2
www.ginatricot.com/_next/static/chunks/2fac1e96542226e265fc674d2f5bdfb3987d2cbd.e22e2c45c2c571cf381f.js
200 OK 0 B URL HTTP/2 www.ginatricot.com/_next/static/chunks/2fac1e96542226e265fc674d2f5bdfb3987d2cbd.e22e2c45c2c571cf381f.js
IP
GET /_next/static/chunks/2fac1e96542226e265fc674d2f5bdfb3987d2cbd.e22e2c45c2c571cf381f.js HTTP/1.1
Host: www.ginatricot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ginatricot.com/no/klaer/topper/singleter/singlet-808277194?tduid=3a7a46a30a8cba5ea321c1f15a2c85c8&utm_source=tradedoubler_no&utm_medium=affiliate&utm_campaign=Kelkoo+%28NO%29&utm_content=[td_site_id]
Cookie: GINATRICOT_SCOPE=no
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 20 Sep 2022 17:37:52 GMT
content-type: application/javascript; charset=UTF-8
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public, max-age=31536000, immutable
last-modified: Thu, 18 Aug 2022 07:27:26 GMT
etag: W/"407e-182afd98b30"
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 0ca6102b671acc9950502eeeca241bf8.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P1
x-amz-cf-id: qm2aN7tX_KnIQD01yI3HS2mwgAKCp9iB5ukV0t1KXt3gPYNffkbXQQ==
cf-cache-status: HIT
age: 2887573
server: cloudflare
cf-ray: 74dc54dbee42992c-ARN
X-Firefox-Spdy: h2
www.ginatricot.com/_next/static/chunks/9924a15169b054d9d1689f9bc9da88ecf6934902.126bd9708c5cb0ea3158.js
200 OK 0 B URL HTTP/2 www.ginatricot.com/_next/static/chunks/9924a15169b054d9d1689f9bc9da88ecf6934902.126bd9708c5cb0ea3158.js
IP
GET /_next/static/chunks/9924a15169b054d9d1689f9bc9da88ecf6934902.126bd9708c5cb0ea3158.js HTTP/1.1
Host: www.ginatricot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ginatricot.com/no/klaer/topper/singleter/singlet-808277194?tduid=3a7a46a30a8cba5ea321c1f15a2c85c8&utm_source=tradedoubler_no&utm_medium=affiliate&utm_campaign=Kelkoo+%28NO%29&utm_content=[td_site_id]
Cookie: GINATRICOT_SCOPE=no
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 20 Sep 2022 17:37:52 GMT
content-type: application/javascript; charset=UTF-8
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public, max-age=31536000, immutable
last-modified: Thu, 18 Aug 2022 07:27:26 GMT
etag: W/"2982-182afd98b30"
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 e15d64214925ae012e1d711871cc6452.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P1
x-amz-cf-id: X9N_quO4BNXdRjuAvrRRMbw4y7K8_u1oBpCL_Q6xD9uS7qLRnUkeWA==
cf-cache-status: HIT
age: 2887573
server: cloudflare
cf-ray: 74dc54dbfe55992c-ARN
X-Firefox-Spdy: h2
www.ginatricot.com/_next/static/chunks/d95a137a8f36fca97368ad91b970e163a4a9a86c.8b08e2e63301c9d680d3.js
200 OK 0 B URL HTTP/2 www.ginatricot.com/_next/static/chunks/d95a137a8f36fca97368ad91b970e163a4a9a86c.8b08e2e63301c9d680d3.js
IP
GET /_next/static/chunks/d95a137a8f36fca97368ad91b970e163a4a9a86c.8b08e2e63301c9d680d3.js HTTP/1.1
Host: www.ginatricot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ginatricot.com/no/klaer/topper/singleter/singlet-808277194?tduid=3a7a46a30a8cba5ea321c1f15a2c85c8&utm_source=tradedoubler_no&utm_medium=affiliate&utm_campaign=Kelkoo+%28NO%29&utm_content=[td_site_id]
Cookie: GINATRICOT_SCOPE=no
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 20 Sep 2022 17:37:51 GMT
content-type: application/javascript; charset=UTF-8
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public, max-age=31536000, immutable
last-modified: Thu, 18 Aug 2022 07:27:26 GMT
etag: W/"42ad-182afd98b30"
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 1fb0b89a5ccfb45255b8e8539e256ee2.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P1
x-amz-cf-id: bkPI6dJOyx0uRcBMy3EVh5CcpZzalLTo4K_z215o3cEQb6NE3XZ6jg==
cf-cache-status: HIT
age: 2887571
server: cloudflare
cf-ray: 74dc54dbde23992c-ARN
X-Firefox-Spdy: h2
www.ginatricot.com/_next/static/chunks/9ff0427c78e396882ced5b5e7586294257ee3f6a.7610180bdc1e3f8e0c24.js
200 OK 0 B URL HTTP/2 www.ginatricot.com/_next/static/chunks/9ff0427c78e396882ced5b5e7586294257ee3f6a.7610180bdc1e3f8e0c24.js
IP
GET /_next/static/chunks/9ff0427c78e396882ced5b5e7586294257ee3f6a.7610180bdc1e3f8e0c24.js HTTP/1.1
Host: www.ginatricot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://www.ginatricot.com/no/klaer/topper/singleter/singlet-808277194?tduid=3a7a46a30a8cba5ea321c1f15a2c85c8&utm_source=tradedoubler_no&utm_medium=affiliate&utm_campaign=Kelkoo+%28NO%29&utm_content=[td_site_id]
Cookie: GINATRICOT_SCOPE=no; sg_cookies={%225619855%22:{%22vid%22:%22dc377c5e-667e-4911-96a0-175da8c4ea63%22%2C%22lw%22:%229-20-17-37%22%2C%22rf%22:%22https://pdt.tradedoubler.com/%22%2C%22pw%22:1%2C%22tc%22:0%2C%22tv%22:1%2C%22fp%22:3142295211%2C%22192519649_ch%22:%22-1%22}}
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 20 Sep 2022 17:37:53 GMT
content-type: application/javascript; charset=UTF-8
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public, max-age=31536000, immutable
last-modified: Mon, 29 Aug 2022 06:35:05 GMT
etag: W/"2397-182e84f91a8"
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 c1a2760c3f8e9ff8c3652b4d6ff3a906.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN54-C1
x-amz-cf-id: i4xNps58rJQlmGaF37aR8dD0ZgtvmAcq-ecC_EuMzvuHBrnGFWNOQw==
cf-cache-status: HIT
age: 1940315
server: cloudflare
cf-ray: 74dc54e44a71992c-ARN
X-Firefox-Spdy: h2
www.ginatricot.com/_next/static/css/200f9c46ffe1091e6d7f.css
200 OK 0 B URL HTTP/2 www.ginatricot.com/_next/static/css/200f9c46ffe1091e6d7f.css
IP
GET /_next/static/css/200f9c46ffe1091e6d7f.css HTTP/1.1
Host: www.ginatricot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ginatricot.com/no/klaer/topper/singleter/singlet-808277194?tduid=3a7a46a30a8cba5ea321c1f15a2c85c8&utm_source=tradedoubler_no&utm_medium=affiliate&utm_campaign=Kelkoo+%28NO%29&utm_content=[td_site_id]
Cookie: GINATRICOT_SCOPE=no
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 20 Sep 2022 17:37:51 GMT
content-type: text/css; charset=UTF-8
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public, max-age=31536000, immutable
last-modified: Mon, 29 Aug 2022 06:35:05 GMT
etag: W/"3bd26-182e84f91a8"
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 a0ed8ab9bdb194ac51725369653b3802.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN54-C1
x-amz-cf-id: w6HWuqfnBQZYz6cEQsTgxXgMPZcYxdg8S7nq-AW4KdL5DVdIldkfGQ==
cf-cache-status: HIT
age: 1940315
server: cloudflare
cf-ray: 74dc54dbcdf8992c-ARN
X-Firefox-Spdy: h2
www.ginatricot.com/_next/static/chunks/commons.1f5212f01a3698e1be0d.js
200 OK 0 B URL HTTP/2 www.ginatricot.com/_next/static/chunks/commons.1f5212f01a3698e1be0d.js
IP
GET /_next/static/chunks/commons.1f5212f01a3698e1be0d.js HTTP/1.1
Host: www.ginatricot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ginatricot.com/no/klaer/topper/singleter/singlet-808277194?tduid=3a7a46a30a8cba5ea321c1f15a2c85c8&utm_source=tradedoubler_no&utm_medium=affiliate&utm_campaign=Kelkoo+%28NO%29&utm_content=[td_site_id]
Cookie: GINATRICOT_SCOPE=no
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 20 Sep 2022 17:37:51 GMT
content-type: application/javascript; charset=UTF-8
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public, max-age=31536000, immutable
last-modified: Thu, 18 Aug 2022 07:27:26 GMT
etag: W/"4a085-182afd98b30"
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 bfeae0ecbffe44ad98e5cd0ae83bdb4a.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P1
x-amz-cf-id: 4wKgS3p4NyFim-pA1CCasQR8knHWMMpPa7NLCteaYa0ayqtZe9H86A==
cf-cache-status: HIT
age: 2887572
server: cloudflare
cf-ray: 74dc54dbde16992c-ARN
X-Firefox-Spdy: h2
www.ginatricot.com/_next/static/chunks/2e8b06aad24f52cbb34092467e714c5bfb2d9e5d.a6f9a7574b0777817829.js
200 OK 0 B URL HTTP/2 www.ginatricot.com/_next/static/chunks/2e8b06aad24f52cbb34092467e714c5bfb2d9e5d.a6f9a7574b0777817829.js
IP
GET /_next/static/chunks/2e8b06aad24f52cbb34092467e714c5bfb2d9e5d.a6f9a7574b0777817829.js HTTP/1.1
Host: www.ginatricot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ginatricot.com/no/klaer/topper/singleter/singlet-808277194?tduid=3a7a46a30a8cba5ea321c1f15a2c85c8&utm_source=tradedoubler_no&utm_medium=affiliate&utm_campaign=Kelkoo+%28NO%29&utm_content=[td_site_id]
Cookie: GINATRICOT_SCOPE=no
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 20 Sep 2022 17:37:52 GMT
content-type: application/javascript; charset=UTF-8
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public, max-age=31536000, immutable
last-modified: Thu, 18 Aug 2022 07:27:26 GMT
etag: W/"4768-182afd98b30"
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 4838101f07e2dfcd1db4abc88031f082.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P1
x-amz-cf-id: ts0vq_YwDyuuZ78YEaLfBpUEZLMel7zeolvOKTQY4fNmSjBW05hOzg==
cf-cache-status: HIT
age: 2887573
server: cloudflare
cf-ray: 74dc54dbfe4f992c-ARN
X-Firefox-Spdy: h2
www.ginatricot.com/_next/static/chunks/22e1a92e45fe9eb7119b5af277544600082340de.a7d4da82425d7e4f894b.js
200 OK 0 B URL HTTP/2 www.ginatricot.com/_next/static/chunks/22e1a92e45fe9eb7119b5af277544600082340de.a7d4da82425d7e4f894b.js
IP
GET /_next/static/chunks/22e1a92e45fe9eb7119b5af277544600082340de.a7d4da82425d7e4f894b.js HTTP/1.1
Host: www.ginatricot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ginatricot.com/no/klaer/topper/singleter/singlet-808277194?tduid=3a7a46a30a8cba5ea321c1f15a2c85c8&utm_source=tradedoubler_no&utm_medium=affiliate&utm_campaign=Kelkoo+%28NO%29&utm_content=[td_site_id]
Cookie: GINATRICOT_SCOPE=no
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 20 Sep 2022 17:37:52 GMT
content-type: application/javascript; charset=UTF-8
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public, max-age=31536000, immutable
last-modified: Thu, 18 Aug 2022 07:27:26 GMT
etag: W/"363f-182afd98b30"
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 05844663035089f465172d861220e698.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P1
x-amz-cf-id: uh8jmjbkqfUO421WjSx8VcX2sVm-0pQHxuP2l9hgGwvGqyGjp7h61Q==
cf-cache-status: HIT
age: 2887572
server: cloudflare
cf-ray: 74dc54dbfe53992c-ARN
X-Firefox-Spdy: h2
www.ginatricot.com/_next/static/ZEI9KwYsm3P52YhG25CWf/_buildManifest.js
200 OK 0 B URL HTTP/2 www.ginatricot.com/_next/static/ZEI9KwYsm3P52YhG25CWf/_buildManifest.js
IP
GET /_next/static/ZEI9KwYsm3P52YhG25CWf/_buildManifest.js HTTP/1.1
Host: www.ginatricot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ginatricot.com/no/klaer/topper/singleter/singlet-808277194?tduid=3a7a46a30a8cba5ea321c1f15a2c85c8&utm_source=tradedoubler_no&utm_medium=affiliate&utm_campaign=Kelkoo+%28NO%29&utm_content=[td_site_id]
Cookie: GINATRICOT_SCOPE=no
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 20 Sep 2022 17:37:52 GMT
content-type: application/javascript; charset=UTF-8
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public, max-age=31536000, immutable
last-modified: Mon, 29 Aug 2022 06:35:05 GMT
etag: W/"12c1-182e84f91a8"
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 3bf14a720d62e0d1295d99086d103efa.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN54-C1
x-amz-cf-id: ISeNpjfuZmVpFcddy0Mm11-l-mQo8zlGW81BLmrVF1l2KP0qTl2uTg==
cf-cache-status: HIT
age: 1940316
server: cloudflare
cf-ray: 74dc54dc3ea4992c-ARN
X-Firefox-Spdy: h2
72.52.179.174
34.88.158.158
104.110.3.72
2.22.31.91
104.22.36.221
93.184.220.29
188.165.150.177
95.211.116.27
78.46.197.88