m.cm/
200 OK 460 B IP
ASN #60781 LeaseWeb Netherlands B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (460), with no line terminators
Hash d410e291644a9ac5ea30f832b7993f45
491e75653347b080012e7fafded5ff1763c0d272
9434b8b9b4cf96a191247592447f706a553269a5d52aca39e5eac7808d2e67ef
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: m.cm
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 460
content-type: text/html; charset=utf-8
date: Tue, 04 Oct 2022 11:45:13 GMT
server: nginx
set-cookie: sid=02560928-43da-11ed-b6f5-d5661d58d862; path=/; domain=.m.cm; expires=Sun, 22 Oct 2090 14:59:20 GMT; max-age=2147483647; HttpOnly
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9955bda9c9ef64bc5700a14af0bae25e
8de7b7469e905af0374bdfcc3006bbb844f13e94
1f611155394fac39439b8ec8217d8cd493d6b588d372d264e0d66c03129c50c6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1F611155394FAC39439B8EC8217D8CD493D6B588D372D264E0D66C03129C50C6"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8840
Expires: Tue, 04 Oct 2022 14:12:34 GMT
Date: Tue, 04 Oct 2022 11:45:14 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 1b3053fa528e28810f8a2cc9284cc921
cca9eb471d941881a6b9a1793aecb6c281908f6a
a2427848ba35575dda8a82cf88f104978234c05389deebc3fc8279d9075eff45
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Alert, Content-Type, Backoff, Content-Length, Retry-After
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Tue, 04 Oct 2022 10:47:04 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 2NIUZDi6DPGSOG4CpuJjRe9C4jcCbZk5eNvoE0SThkj6biaBWd5O1A==
Age: 3490
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP
File type PEM certificate\012- , ASCII text
Hash 6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Tue, 04 Oct 2022 05:28:28 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: evXTrS9Iyy04LtDDCNZljLuPacvev9N1Y7XI0OdtS4elqvwTayWkhw==
age: 22607
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 04 Oct 2022 11:45:14 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
m.cm/favicon.ico
404 Not Found 9 B IP
ASN #60781 LeaseWeb Netherlands B.V.
File type ASCII text, with no line terminators
Hash d8f4a1993546cc4b850cde3599e27aec
094b763b4cfcc0b05e5d040581cd513c3ca08067
907ba78b4545338d3539683e63ecb51cf51c10adc9dabd86e92bd52339f298b9
GET /favicon.ico HTTP/1.1
Host: m.cm
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://m.cm/
Cookie: sid=02560928-43da-11ed-b6f5-d5661d58d862
HTTP/1.1 404 Not Found
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 9
date: Tue, 04 Oct 2022 11:45:14 GMT
server: nginx
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600, max-age=3600
Date: Tue, 04 Oct 2022 11:29:33 GMT
Expires: Tue, 04 Oct 2022 12:17:03 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: xuXCePVAR2sWwh44lh2hegihI1l50yKpQw0uTdLcPhMk8uS05olEYA==
Age: 941
ocsp.digicert.com/
200 OK 471 B IP
Hash 16ebfb2aa621547ecf581e26fc828a7d
f78993331f6f5b8af6409a9ad2fc50b77070f68a
0f81fd1d6be9ccc04b74f0348aafe642c7b9ab7dffb7e8a679b5d67cc2e5fac3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4809
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 11:45:14 GMT
Last-Modified: Tue, 04 Oct 2022 10:25:05 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: dg1GiYe/ELEoULk2108trA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: TEES+oAV4ZMFsZya+g++jQ1TqbA=
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ff433c9569a3557d806b1480aeafece9
20bbd46383b85326837f45290ff87df708b3b310
e8e5212b8d90257f23bdb0d1d643b5e7d7528d964056c3a4a269b5e09f409f2d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E8E5212B8D90257F23BDB0D1D643B5E7D7528D964056C3A4A269B5E09F409F2D"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8002
Expires: Tue, 04 Oct 2022 13:58:38 GMT
Date: Tue, 04 Oct 2022 11:45:16 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ff433c9569a3557d806b1480aeafece9
20bbd46383b85326837f45290ff87df708b3b310
e8e5212b8d90257f23bdb0d1d643b5e7d7528d964056c3a4a269b5e09f409f2d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E8E5212B8D90257F23BDB0D1D643B5E7D7528D964056C3A4A269B5E09F409F2D"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8002
Expires: Tue, 04 Oct 2022 13:58:38 GMT
Date: Tue, 04 Oct 2022 11:45:16 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ff433c9569a3557d806b1480aeafece9
20bbd46383b85326837f45290ff87df708b3b310
e8e5212b8d90257f23bdb0d1d643b5e7d7528d964056c3a4a269b5e09f409f2d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E8E5212B8D90257F23BDB0D1D643B5E7D7528D964056C3A4A269B5E09F409F2D"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8002
Expires: Tue, 04 Oct 2022 13:58:38 GMT
Date: Tue, 04 Oct 2022 11:45:16 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ff433c9569a3557d806b1480aeafece9
20bbd46383b85326837f45290ff87df708b3b310
e8e5212b8d90257f23bdb0d1d643b5e7d7528d964056c3a4a269b5e09f409f2d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E8E5212B8D90257F23BDB0D1D643B5E7D7528D964056C3A4A269B5E09F409F2D"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8002
Expires: Tue, 04 Oct 2022 13:58:38 GMT
Date: Tue, 04 Oct 2022 11:45:16 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fec31ab6c-46f2-4d77-a807-9f14bb5073bc.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fec31ab6c-46f2-4d77-a807-9f14bb5073bc.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 54b3ef7aa50273b78b59c24511b0c1f9
e2ea2ef6805e391c497e62e101e76a0bdecfce64
296e8954022d5160137b3e02ab5085a15cee7c23cd6d4ca61b36880706062457
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fec31ab6c-46f2-4d77-a807-9f14bb5073bc.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11955
x-amzn-requestid: ce6bbe93-95b0-4b6e-a8bc-012796485e67
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Zcqb9FUtoAMF0WQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633b577f-59dc0a18523f900a059aa5df;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 21:43:27 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 44jC1Ww19YUJjZHw9_3cSSR5Y7nw5df412G-RxWFTcbRz1XDKaT3zQ==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 b8c4a4ca04bb1976e020396d211bc8dc.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Oct 2022 21:44:35 GMT
age: 50441
etag: "e2ea2ef6805e391c497e62e101e76a0bdecfce64"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F545190f2-96f3-40f8-bd46-cebe7171aee7.webp
200 OK 9.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F545190f2-96f3-40f8-bd46-cebe7171aee7.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d8c08f8066cc732de8befd6ccd629a95
22aab05208a01ae5def4d63dc145085630f57bcb
f8a560a0563518d992d0bd2655d2b5c406435a18e874ca00b51374d2ff901770
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F545190f2-96f3-40f8-bd46-cebe7171aee7.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9917
x-amzn-requestid: 2dff93d9-795d-4885-9b82-610b0d235a82
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZcpvTGEnIAMF1zg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633b5661-117afa703663ada75627792c;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 21:38:41 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: DOS5kVEVqBrCVMKRw07fX-6HDgWVb9lJwkVM2pXs0PQHys6CBJUVfQ==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Oct 2022 21:44:20 GMT
age: 50456
etag: "22aab05208a01ae5def4d63dc145085630f57bcb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8641c47a-9aff-4f73-bb07-6770cbbcc8d6.jpeg
200 OK 5.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8641c47a-9aff-4f73-bb07-6770cbbcc8d6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6c6882c60d7ca6f918c77104e3ad1d52
20ef861be49c652a938e0145e4ca3a60159367e2
861f5870990fbd2939d151ae18384cf311e87067ca9a50818efe0c2d51b83088
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8641c47a-9aff-4f73-bb07-6770cbbcc8d6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5504
x-amzn-requestid: 37405eb0-5c75-46a9-84c0-e8ed726995d8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZcpHvHPvoAMF3mg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633b5564-77fd550b58af612525e74761;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 21:34:28 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: O1yNc4H21kixhUEE7099oNqs7a5ZnJBBjlZbsbmLvaXyzXzrK0dL3w==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 b36bf2c460ac693ce304817aed073112.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Oct 2022 21:44:33 GMT
age: 50443
etag: "20ef861be49c652a938e0145e4ca3a60159367e2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9a61745f-0c9b-404a-ba22-0a69cf2f0383.jpeg
200 OK 4.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9a61745f-0c9b-404a-ba22-0a69cf2f0383.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6779181f9c06975f2a662da743893939
585e7146fd24cdc2496b05baafea04091dc541e2
8e9a9f92fd89b7cdce77884ccd76b83ab82d28f125ebfc1cb0d371d4046b7985
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9a61745f-0c9b-404a-ba22-0a69cf2f0383.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4858
x-amzn-requestid: fb21c414-2994-444a-a838-e643fd05b171
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZcpvTEfPoAMFfeQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633b5661-593dd8043b0490e7301cac0d;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 21:38:41 GMT
x-amz-cf-pop: SFO5-P2, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: SGeDEPoXxsTV5UwkZnn3MJPbjhHhrKSsueHPxVapV_7Icl6daFk3oA==
via: 1.1 773ca14e6bd4bf9244988cb69fc9dca8.cloudfront.net (CloudFront), 1.1 89791e6b21b9a30cc51cac1bc51cf098.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Oct 2022 21:44:20 GMT
age: 50456
etag: "585e7146fd24cdc2496b05baafea04091dc541e2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb3178d2f-9a52-4d0e-a26b-5a90ef8578f2.jpeg
200 OK 3.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb3178d2f-9a52-4d0e-a26b-5a90ef8578f2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 488ec5b4267ccb1cdc4e6e08556f7f3b
42dd7ec0c606dbd3ccc0074f61d3b4b12f2e3c88
d9b05fe92962a58b9a8e8dbd4757969aa361be12018107ae649ffcdb8a0f8d84
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb3178d2f-9a52-4d0e-a26b-5a90ef8578f2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3430
x-amzn-requestid: 22a0e400-1567-4c9c-aca9-782f3f81a8ef
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZKLCrEn4IAMFZWw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6333f210-11fa888c78719c44160accf8;Sampled=0
x-amzn-remapped-date: Wed, 28 Sep 2022 07:04:49 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: czAJIO54qhc57-FC2v3o_6iUysen6MFHxo4KWJL7Uhs3ZBmRalqgMw==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 2324edbcb8fc72f617442c65f36a40fc.cloudfront.net (CloudFront), 1.1 google
date: Tue, 04 Oct 2022 09:44:26 GMT
age: 7250
etag: "42dd7ec0c606dbd3ccc0074f61d3b4b12f2e3c88"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffdb412b7-1bf6-4a48-b9f1-b171f540e434.jpeg
200 OK 4.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffdb412b7-1bf6-4a48-b9f1-b171f540e434.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 24a4a122273ef9f772852031eb13114a
c20f1fac9020eb4bd6c84583f73872979639b991
8e1ffbed5f156637ed2f22e81d03f6d85eff0c28237c1639ea5f977e92ee7b70
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffdb412b7-1bf6-4a48-b9f1-b171f540e434.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4151
x-amzn-requestid: f709a11e-cbea-4965-8502-94ddbd8768bb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZcpvSF3YIAMFdow=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633b5661-29bfa31d51e8f60b38136dba;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 21:38:41 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: iHjSrLdzntzVnJ-qaRf834nLglcKXY1cTgLY5VcCyKtp0lwN2gGnnw==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 707e733794d52100fde0ab21bf0b1462.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Oct 2022 21:44:20 GMT
age: 50456
etag: "c20f1fac9020eb4bd6c84583f73872979639b991"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
m.cm/?js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTY2NDg5MTExMywiaWF0IjoxNjY0ODgzOTEzLCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIyc2RkbTZhYmcwN2I1azZxMjQxN2tkNmQiLCJuYmYiOjE2NjQ4ODM5MTMsInRzIjoxNjY0ODgzOTEzOTU0MTI3fQ.ZN4-ZWh7BAbX_zsLW5laFdlqkE8Ka_-T6tfF9INytVI&sid=02560928-43da-11ed-b6f5-d5661d58d862
302 Found 11 B URL HTTP/1.1 m.cm/?js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTY2NDg5MTExMywiaWF0IjoxNjY0ODgzOTEzLCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIyc2RkbTZhYmcwN2I1azZxMjQxN2tkNmQiLCJuYmYiOjE2NjQ4ODM5MTMsInRzIjoxNjY0ODgzOTEzOTU0MTI3fQ.ZN4-ZWh7BAbX_zsLW5laFdlqkE8Ka_-T6tfF9INytVI&sid=02560928-43da-11ed-b6f5-d5661d58d862
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type ASCII text, with no line terminators
Hash 32682312d17c7cbf18e73594f5570319
60e22121bdd0bc71cdb2bae2a3aa577006b2eae9
e55fb1a1d731153e943b68844af12dcce8bfac917c98ffdea64c80da0607dd47
GET /?js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTY2NDg5MTExMywiaWF0IjoxNjY0ODgzOTEzLCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIyc2RkbTZhYmcwN2I1azZxMjQxN2tkNmQiLCJuYmYiOjE2NjQ4ODM5MTMsInRzIjoxNjY0ODgzOTEzOTU0MTI3fQ.ZN4-ZWh7BAbX_zsLW5laFdlqkE8Ka_-T6tfF9INytVI&sid=02560928-43da-11ed-b6f5-d5661d58d862 HTTP/1.1
Host: m.cm
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://m.cm/
Cookie: sid=02560928-43da-11ed-b6f5-d5661d58d862
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 11
date: Tue, 04 Oct 2022 11:45:16 GMT
location: http://click-v4.expmdiadi.com/click?i=uY9jOYfMUyI_0
server: nginx
set-cookie: sid=02560928-43da-11ed-b6f5-d5661d58d862; path=/; domain=.m.cm; expires=Sun, 22 Oct 2090 14:59:23 GMT; max-age=2147483647; HttpOnly
click-v4.expmdiadi.com/click?i=uY9jOYfMUyI_0
302 Found 0 B URL HTTP/1.1 click-v4.expmdiadi.com/click?i=uY9jOYfMUyI_0
IP
ASN #27257 WEBAIR-INTERNET
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /click?i=uY9jOYfMUyI_0 HTTP/1.1
Host: click-v4.expmdiadi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://m.cm/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Cache-Control: no-store
Content-Length: 0
Age: 0
Connection: keep-alive
Location: https://api.apptap.com/link/buy/android/tile.comfyballs.no/e1?clinkID=xKX18oK1jOJqbEGK488wX-7zU65UKSOYm5wOirVIbuSg99iUmn63OHVLKQ&pubID=laGp89Ptz6FCc0yNz-I6Tu0&siteID=k-23rN3-&placementID=424864_m.cm&trackingID=roY-jfE58ng&creativeID=5588973&pub.keyword=m&loc.country=no&partnerCampaignID=945115&cost.cpc=0.01425
Pragma: no-cache
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash c4d227c5d716eebb674e37551fe8e6cf
2270785282fb34f4e60a4958b1e1138c3be9ac02
4138b80b41c48c7b4444ab8fbf4de3cb5e817cc0ef7a59bbbef94f311dcd75d1
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 04 Oct 2022 11:45:17 GMT
Last-Modified: Tue, 04 Oct 2022 10:03:32 GMT
Server: ECS (bsa/EB1E)
X-Cache: Miss from cloudfront
Via: 1.1 5de23153ac267c206221751e1cccb6e8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: duihwBAmeVVAKdHJuVlYIyDrabwziMngoUe2m5T6g6oMvFeUAgMqkw==
Age: 6105
api.apptap.com/link/buy/android/tile.comfyballs.no/e1?clinkID=xKX18oK1jOJqbEGK488wX-7zU65UKSOYm5wOirVIbuSg99iUmn63OHVLKQ&pubID=laGp89Ptz6FCc0yNz-I6Tu0&siteID=k-23rN3-&placementID=424864_m.cm&trackingID=roY-jfE58ng&creativeID=5588973&pub.keyword=m&loc.country=no&partnerCampaignID=945115&cost.cpc=0.01425
302 0 B URL HTTP/1.1 api.apptap.com/link/buy/android/tile.comfyballs.no/e1?clinkID=xKX18oK1jOJqbEGK488wX-7zU65UKSOYm5wOirVIbuSg99iUmn63OHVLKQ&pubID=laGp89Ptz6FCc0yNz-I6Tu0&siteID=k-23rN3-&placementID=424864_m.cm&trackingID=roY-jfE58ng&creativeID=5588973&pub.keyword=m&loc.country=no&partnerCampaignID=945115&cost.cpc=0.01425
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /link/buy/android/tile.comfyballs.no/e1?clinkID=xKX18oK1jOJqbEGK488wX-7zU65UKSOYm5wOirVIbuSg99iUmn63OHVLKQ&pubID=laGp89Ptz6FCc0yNz-I6Tu0&siteID=k-23rN3-&placementID=424864_m.cm&trackingID=roY-jfE58ng&creativeID=5588973&pub.keyword=m&loc.country=no&partnerCampaignID=945115&cost.cpc=0.01425 HTTP/1.1
Host: api.apptap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://m.cm/
Connection: keep-alive
Cookie: apt=d0e59390b2614b7db85fd23556c259a5
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302
Content-Type: text/html;charset=UTF-8
Date: Tue, 04 Oct 2022 11:45:17 GMT
Location: https://api.mplayit.com/link/redirect?data=qCbwlg9uk-icWd1z3ZZ1_qjedKoWv3xoUDjD4NDXcwYeXqo1wsJv-jNC4Ro8iqj9nyVB-7CnRBjy9EEuBrL1gqme70YL3ONbrhCiL2V2hl4%3D&appID=tile.comfyballs.no&stripFragment=false&link=https%3A%2F%2Fr.srvtrck.com%2Fv1%2Fredirect%3Fapi_key%3D7f492f7e98f9f621f520ab0fb797464f%26yk_tag%3DNBXWG3ZSMZXDKWLMOJFWUQLWGBZW26CPINITUZZWJRIWO42J_ORUWYZJOMNXW2ZTZMJQWY3DTFZXG6HZUGJHHIZLTNJDXK2ZWHFUUKMDHNJHW2RRRIEPUCVBRMRWHA3TJNRZG2MDIORUWG2TKOR2WYYLXGFQXI427GIYDKY3EGR2GG6JQNJ3A_72994674be9c4efea5dcc4fbc47224b8%26site_id%3D72994674be9c4efea5dcc4fbc47224b8%26source%3D%26type%3Durl%26url%3Dhttps%253A%252F%252Fwww.comfyballs.no%252F&clickID=hoco2fn5YlrKjAv0smxOCQ%3Ag6LQgsI&js=true
Referrer-Policy: no-referrer
Server: nginx/1.20.0
Content-Length: 0
Connection: keep-alive
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash c4d227c5d716eebb674e37551fe8e6cf
2270785282fb34f4e60a4958b1e1138c3be9ac02
4138b80b41c48c7b4444ab8fbf4de3cb5e817cc0ef7a59bbbef94f311dcd75d1
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 04 Oct 2022 11:45:17 GMT
Last-Modified: Tue, 04 Oct 2022 10:22:11 GMT
Server: ECS (nyb/1D25)
X-Cache: Miss from cloudfront
Via: 1.1 5de23153ac267c206221751e1cccb6e8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: QNY-Tx_SX6KqVeFlZPmXZsAQRnMhobtCwxzGeLG0chbR1GGrQZZrwA==
Age: 4986
api.mplayit.com/link/redirect?data=qCbwlg9uk-icWd1z3ZZ1_qjedKoWv3xoUDjD4NDXcwYeXqo1wsJv-jNC4Ro8iqj9nyVB-7CnRBjy9EEuBrL1gqme70YL3ONbrhCiL2V2hl4%3D&appID=tile.comfyballs.no&stripFragment=false&link=https%3A%2F%2Fr.srvtrck.com%2Fv1%2Fredirect%3Fapi_key%3D7f492f7e98f9f621f520ab0fb797464f%26yk_tag%3DNBXWG3ZSMZXDKWLMOJFWUQLWGBZW26CPINITUZZWJRIWO42J_ORUWYZJOMNXW2ZTZMJQWY3DTFZXG6HZUGJHHIZLTNJDXK2ZWHFUUKMDHNJHW2RRRIEPUCVBRMRWHA3TJNRZG2MDIORUWG2TKOR2WYYLXGFQXI427GIYDKY3EGR2GG6JQNJ3A_72994674be9c4efea5dcc4fbc47224b8%26site_id%3D72994674be9c4efea5dcc4fbc47224b8%26source%3D%26type%3Durl%26url%3Dhttps%253A%252F%252Fwww.comfyballs.no%252F&clickID=hoco2fn5YlrKjAv0smxOCQ%3Ag6LQgsI&js=true
200 555 B URL HTTP/1.1 api.mplayit.com/link/redirect?data=qCbwlg9uk-icWd1z3ZZ1_qjedKoWv3xoUDjD4NDXcwYeXqo1wsJv-jNC4Ro8iqj9nyVB-7CnRBjy9EEuBrL1gqme70YL3ONbrhCiL2V2hl4%3D&appID=tile.comfyballs.no&stripFragment=false&link=https%3A%2F%2Fr.srvtrck.com%2Fv1%2Fredirect%3Fapi_key%3D7f492f7e98f9f621f520ab0fb797464f%26yk_tag%3DNBXWG3ZSMZXDKWLMOJFWUQLWGBZW26CPINITUZZWJRIWO42J_ORUWYZJOMNXW2ZTZMJQWY3DTFZXG6HZUGJHHIZLTNJDXK2ZWHFUUKMDHNJHW2RRRIEPUCVBRMRWHA3TJNRZG2MDIORUWG2TKOR2WYYLXGFQXI427GIYDKY3EGR2GG6JQNJ3A_72994674be9c4efea5dcc4fbc47224b8%26site_id%3D72994674be9c4efea5dcc4fbc47224b8%26source%3D%26type%3Durl%26url%3Dhttps%253A%252F%252Fwww.comfyballs.no%252F&clickID=hoco2fn5YlrKjAv0smxOCQ%3Ag6LQgsI&js=true
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (483)
Hash af958fb7a211fa66ea76322da61a0e19
3ff797c036eb780c6f48faa396ed928e7d97c852
2d15392d3c10e7a70702f36356e716111a25ed171e10efa60a17abfafb4d1339
GET /link/redirect?data=qCbwlg9uk-icWd1z3ZZ1_qjedKoWv3xoUDjD4NDXcwYeXqo1wsJv-jNC4Ro8iqj9nyVB-7CnRBjy9EEuBrL1gqme70YL3ONbrhCiL2V2hl4%3D&appID=tile.comfyballs.no&stripFragment=false&link=https%3A%2F%2Fr.srvtrck.com%2Fv1%2Fredirect%3Fapi_key%3D7f492f7e98f9f621f520ab0fb797464f%26yk_tag%3DNBXWG3ZSMZXDKWLMOJFWUQLWGBZW26CPINITUZZWJRIWO42J_ORUWYZJOMNXW2ZTZMJQWY3DTFZXG6HZUGJHHIZLTNJDXK2ZWHFUUKMDHNJHW2RRRIEPUCVBRMRWHA3TJNRZG2MDIORUWG2TKOR2WYYLXGFQXI427GIYDKY3EGR2GG6JQNJ3A_72994674be9c4efea5dcc4fbc47224b8%26site_id%3D72994674be9c4efea5dcc4fbc47224b8%26source%3D%26type%3Durl%26url%3Dhttps%253A%252F%252Fwww.comfyballs.no%252F&clickID=hoco2fn5YlrKjAv0smxOCQ%3Ag6LQgsI&js=true HTTP/1.1
Host: api.mplayit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200
Date: Tue, 04 Oct 2022 11:45:18 GMT
Server: nginx/1.20.0
Content-Length: 555
Connection: keep-alive
r.srvtrck.com/v1/redirect?api_key=7f492f7e98f9f621f520ab0fb797464f&yk_tag=NBXWG3ZSMZXDKWLMOJFWUQLWGBZW26CPINITUZZWJRIWO42J_ORUWYZJOMNXW2ZTZMJQWY3DTFZXG6HZUGJHHIZLTNJDXK2ZWHFUUKMDHNJHW2RRRIEPUCVBRMRWHA3TJNRZG2MDIORUWG2TKOR2WYYLXGFQXI427GIYDKY3EGR2GG6JQNJ3A_72994674be9c4efea5dcc4fbc47224b8&site_id=72994674be9c4efea5dcc4fbc47224b8&source=&type=url&url=https%3A%2F%2Fwww.comfyballs.no%2F
302 Found 0 B URL HTTP/2 r.srvtrck.com/v1/redirect?api_key=7f492f7e98f9f621f520ab0fb797464f&yk_tag=NBXWG3ZSMZXDKWLMOJFWUQLWGBZW26CPINITUZZWJRIWO42J_ORUWYZJOMNXW2ZTZMJQWY3DTFZXG6HZUGJHHIZLTNJDXK2ZWHFUUKMDHNJHW2RRRIEPUCVBRMRWHA3TJNRZG2MDIORUWG2TKOR2WYYLXGFQXI427GIYDKY3EGR2GG6JQNJ3A_72994674be9c4efea5dcc4fbc47224b8&site_id=72994674be9c4efea5dcc4fbc47224b8&source=&type=url&url=https%3A%2F%2Fwww.comfyballs.no%2F
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v1/redirect?api_key=7f492f7e98f9f621f520ab0fb797464f&yk_tag=NBXWG3ZSMZXDKWLMOJFWUQLWGBZW26CPINITUZZWJRIWO42J_ORUWYZJOMNXW2ZTZMJQWY3DTFZXG6HZUGJHHIZLTNJDXK2ZWHFUUKMDHNJHW2RRRIEPUCVBRMRWHA3TJNRZG2MDIORUWG2TKOR2WYYLXGFQXI427GIYDKY3EGR2GG6JQNJ3A_72994674be9c4efea5dcc4fbc47224b8&site_id=72994674be9c4efea5dcc4fbc47224b8&source=&type=url&url=https%3A%2F%2Fwww.comfyballs.no%2F HTTP/1.1
Host: r.srvtrck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: ykuid=2ca8fd1462a94598b7294e3106c6a3a6
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Tue, 04 Oct 2022 11:45:18 GMT
content-length: 0
location: https://www.comfyballs.no/
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 754daba89a14b4f7-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash df41c21a25d4c949b2029059808679a2
1f09fa1d0380fdbb1dbbe322a3e9950168b41b22
51161c6098421c3c58fe50c8d10df7898bf3e2538fee2deeccd131b3c8b1380b
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 04 Oct 2022 11:45:18 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 04 Oct 2022 08:57:40 GMT
Expires: Tue, 11 Oct 2022 08:57:39 GMT
Etag: "1f09fa1d0380fdbb1dbbe322a3e9950168b41b22"
Cache-Control: max-age=594140,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 754daba96cc7b50b-OSL
www.comfyballs.no/
200 OK 24 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (65518), with no line terminators
Hash 5ead73a556b5a6cbbe66cd1b2972c49f
d3455179346b76c14e20e8c52caf35810f02d9ad
3432e459d8fa80010086925d920c31f30db3c21378d725fdd9e6e42f8ad7a60b
GET / HTTP/1.1
Host: www.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 04 Oct 2022 11:45:17 GMT
content-type: text/html
content-length: 23976
last-modified: Tue, 04 Oct 2022 11:21:01 GMT
etag: "633c171d-5da8"
expires: Wed, 04 Oct 2023 11:45:17 GMT
cache-control: max-age=31536000
content-encoding: gzip
vary: Accept-Encoding, Cookie
x-rocket-nginx-bypass: Yes
strict-transport-security: max-age=31536000; includeSubDomains
accept-ranges: bytes
X-Firefox-Spdy: h2
www.comfyballs.no/wp-content/uploads/sites/9/2022/09/hero-comfy-pl-staycomfy-desktop-2.jpg
200 OK 678 kB URL HTTP/2 www.comfyballs.no/wp-content/uploads/sites/9/2022/09/hero-comfy-pl-staycomfy-desktop-2.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 2560x920, components 3\012- data
Size 678 kB (678200 bytes)
Hash 9d8f5be7cb4ea4a755153bd41e983cae
ebfd799ee5ab73d438280a3c25e609e1b86a9fc1
475de260bd0840c3f18601216a8a9f3a26c7dd222ba3322b6a53e45e2cc0a973
GET /wp-content/uploads/sites/9/2022/09/hero-comfy-pl-staycomfy-desktop-2.jpg HTTP/1.1
Host: www.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 04 Oct 2022 11:45:17 GMT
content-type: image/jpeg
content-length: 678200
last-modified: Fri, 30 Sep 2022 11:38:51 GMT
etag: "6336d54b-a5938"
expires: Wed, 04 Oct 2023 11:45:17 GMT
cache-control: max-age=31536000
x_avif_sp_miss: /home/wpmu/comfyballs/wp-content/uploads/sites/9/2022/09/hero-comfy-pl-staycomfy-desktop-2.avif
accept-ranges: bytes
X-Firefox-Spdy: h2
www.comfyballs.no/wp-content/uploads/sites/9/2022/09/hero-comfy-pl-staycomfy-mobile-2.jpg
200 OK 504 kB URL HTTP/2 www.comfyballs.no/wp-content/uploads/sites/9/2022/09/hero-comfy-pl-staycomfy-mobile-2.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1200x1200, components 3\012- data
Size 504 kB (504250 bytes)
Hash 35d3e2062dc92d210cdbd00edd053b72
9d757a838db5138dd65e81de69c3f2a17e25dc2e
e6edbbc99010dd8c64cd683f88ddfbc45defa3d201b28a4407f0ed3d4e818446
GET /wp-content/uploads/sites/9/2022/09/hero-comfy-pl-staycomfy-mobile-2.jpg HTTP/1.1
Host: www.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 04 Oct 2022 11:45:17 GMT
content-type: image/jpeg
content-length: 504250
last-modified: Fri, 30 Sep 2022 11:38:55 GMT
etag: "6336d54f-7b1ba"
expires: Wed, 04 Oct 2023 11:45:17 GMT
cache-control: max-age=31536000
x_avif_sp_miss: /home/wpmu/comfyballs/wp-content/uploads/sites/9/2022/09/hero-comfy-pl-staycomfy-mobile-2.avif
accept-ranges: bytes
X-Firefox-Spdy: h2
use.typekit.net/uhm6mkr.css?ver=5.8
200 OK 893 B URL HTTP/2 use.typekit.net/uhm6mkr.css?ver=5.8
IP
ASN #20940 Akamai International B.V.
File type Unicode text, UTF-8 text, with very long lines (516)
Hash aa0a45c0f45f48ee46d46109b0940f7c
83ad291337b0bf67a86104f316f6ba4e26996c12
6f3dcfe663d33d5b898f87393ba9799204f5be87577f62398f3b882abf1f9ed5
GET /uhm6mkr.css?ver=5.8 HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: text/css;charset=utf-8
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains;
cache-control: private, max-age=600, stale-while-revalidate=604800
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
content-encoding: gzip
content-length: 893
date: Tue, 04 Oct 2022 11:45:18 GMT
X-Firefox-Spdy: h2
static.klaviyo.com/onsite/js/klaviyo.js?company_id=XEup8G&ver=1.0.0
200 OK 922 B URL HTTP/2 static.klaviyo.com/onsite/js/klaviyo.js?company_id=XEup8G&ver=1.0.0
IP
File type ASCII text, with very long lines (2028)
Hash 5f8dd9e9ca6988af451d447282a26d0b
d2cf710bad4103a9eb97e2316f584e8820502b88
9e36170ad6230068955648e58b940c4fbb22c71ab180c41cebcd6f0d156f6ad1
GET /onsite/js/klaviyo.js?company_id=XEup8G&ver=1.0.0 HTTP/1.1
Host: static.klaviyo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-headers:
access-control-allow-methods: GET
access-control-allow-origin: *
access-control-max-age: 86400
allow: GET, OPTIONS
cache-control: max-age=1, stale-while-revalidate=10800
content-encoding: gzip
content-type: application/javascript; charset=utf-8
etag: W/"f9c40db7c2fb60abda28336bd6cec7bd"
server: nginx
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 04 Oct 2022 11:45:18 GMT
age: 43857
x-served-by: cache-lga21948-LGA, cache-bma1649-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 3
x-timer: S1664883919.865399,VS0,VE0
vary: Accept-Encoding
content-length: 922
X-Firefox-Spdy: h2
www.comfyballs.no/wp-content/cache/min/9/c9666fcdd566406e5173f3b5a3a58249.css
200 OK 117 kB URL HTTP/2 www.comfyballs.no/wp-content/cache/min/9/c9666fcdd566406e5173f3b5a3a58249.css
IP
Size 117 kB (117013 bytes)
Hash 69648ec55934c9b7d5c7ea3d2779251f
7f9f619ecaa78c13b1674bcdcaca6679f08c5171
1a414c5836f796ebb174c6afcf15e4abf39f46ea9fe3854b49551a0e00be8479
GET /wp-content/cache/min/9/c9666fcdd566406e5173f3b5a3a58249.css HTTP/1.1
Host: www.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 04 Oct 2022 11:45:17 GMT
content-type: text/css
last-modified: Tue, 04 Oct 2022 01:31:59 GMT
vary: Accept-Encoding
etag: W/"633b8d0f-f7477"
expires: Wed, 04 Oct 2023 11:45:17 GMT
cache-control: max-age=31536000
x-rocket-nginx-bypass: No
content-encoding: gzip
X-Firefox-Spdy: h2
www.comfyballs.no/wp-content/cache/busting/9/gtm-73007a8581d97cd330d2b03e023fe6dd.js
200 OK 50 kB URL HTTP/2 www.comfyballs.no/wp-content/cache/busting/9/gtm-73007a8581d97cd330d2b03e023fe6dd.js
IP
File type ASCII text, with very long lines (2039)
Hash 338533edbc57077fe7f7f235faced576
0878b6ede86943db786cec6e6c9593503d207afa
6fe1a0c2caacf9afbe87553567fe565842083ece270ccfaa604475904dd0f847
GET /wp-content/cache/busting/9/gtm-73007a8581d97cd330d2b03e023fe6dd.js HTTP/1.1
Host: www.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 04 Oct 2022 11:45:17 GMT
content-type: application/javascript
last-modified: Tue, 04 Oct 2022 01:31:59 GMT
vary: Accept-Encoding
etag: W/"633b8d0f-1a8c1"
expires: Wed, 04 Oct 2023 11:45:17 GMT
cache-control: max-age=31536000
x-rocket-nginx-bypass: No
content-encoding: gzip
X-Firefox-Spdy: h2
www.comfyballs.no/wp-content/themes/proto/img/icons/stars/full.png
200 OK 3.0 kB URL HTTP/2 www.comfyballs.no/wp-content/themes/proto/img/icons/stars/full.png
IP
File type PNG image data, 82 x 80, 8-bit colormap, non-interlaced\012- data
Hash 69ebde80a25085053db6504864e78e0f
8d948cb45d2e89e35d8317273dba28497845b1aa
8adb9ffa87fa9d986256a95a5efcc6a48ecbba72a0c37d18369187c8bf4daab0
GET /wp-content/themes/proto/img/icons/stars/full.png HTTP/1.1
Host: www.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/wp-content/cache/min/9/c9666fcdd566406e5173f3b5a3a58249.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 04 Oct 2022 11:45:18 GMT
content-type: image/png
content-length: 3048
last-modified: Tue, 29 Jun 2021 07:54:18 GMT
etag: "60dad1aa-be8"
expires: Wed, 04 Oct 2023 11:45:18 GMT
cache-control: max-age=31536000
x_avif_sp_miss: /home/wpmu/comfyballs/wp-content/themes/proto/img/icons/stars/full.avif
accept-ranges: bytes
X-Firefox-Spdy: h2
www.comfyballs.no/wp-content/themes/proto/img/icons/stars/empty.png
200 OK 3.0 kB URL HTTP/2 www.comfyballs.no/wp-content/themes/proto/img/icons/stars/empty.png
IP
File type PNG image data, 82 x 80, 8-bit colormap, non-interlaced\012- data
Hash faa803f2790d7cbbafb0e5d6f29a2b95
d1e380706930eca575f11a31cd532dd81215e95b
2a8c49a0269c38c2a78ffe6cb1c7642a2df3ab1bcfcd967322d50557633cb363
GET /wp-content/themes/proto/img/icons/stars/empty.png HTTP/1.1
Host: www.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/wp-content/cache/min/9/c9666fcdd566406e5173f3b5a3a58249.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 04 Oct 2022 11:45:18 GMT
content-type: image/png
content-length: 2967
last-modified: Tue, 29 Jun 2021 07:54:18 GMT
etag: "60dad1aa-b97"
expires: Wed, 04 Oct 2023 11:45:18 GMT
cache-control: max-age=31536000
x_avif_sp_miss: /home/wpmu/comfyballs/wp-content/themes/proto/img/icons/stars/empty.avif
accept-ranges: bytes
X-Firefox-Spdy: h2
static.klaviyo.com/onsite/js/runtime.68f9b72d55b47fff402c.js?cb=1
200 OK 8.1 kB URL HTTP/2 static.klaviyo.com/onsite/js/runtime.68f9b72d55b47fff402c.js?cb=1
IP
File type ASCII text, with very long lines (19473), with no line terminators
Hash c4cb4cd0e1803d190f8bbc72df28acf1
ddd201e640d8136b8463ebd2a8c3762bc36492f2
cb053d4caa6c7d33289e4623fb93849591b48cf2f7b32a584c0a2283098a0b9c
GET /onsite/js/runtime.68f9b72d55b47fff402c.js?cb=1 HTTP/1.1
Host: static.klaviyo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.comfyballs.no
Connection: keep-alive
Referer: https://www.comfyballs.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: QNHVGo0SMiSq4iSMY1mjV1UZ3Jn4weDKS5Id1Fk1isTKKcaOseSRjaCob5kp+7HszkNYz9zirpn+8PrbRD1ErA==
x-amz-request-id: KA9PRWD29PPJT64H
last-modified: Wed, 28 Sep 2022 22:42:10 GMT
etag: "839436485a2830d92e6d66db5efb1d7d"
cache-control: max-age=2592000,stale-while-revalidate=10800
x-amz-meta-surrogate-control: max-age=31536000
x-amz-meta-surrogate-key: fender-asset
x-amz-version-id: u2zumWVHxItX8hLjBMQdOluezaQdnsSK
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
access-control-allow-origin: *
accept-ranges: bytes
date: Tue, 04 Oct 2022 11:45:19 GMT
age: 43873
x-served-by: cache-lga21943-LGA, cache-bma1655-BMA
x-cache: HIT, HIT
x-cache-hits: 2, 11378
vary: Accept-Encoding
content-length: 8073
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 05b73f7bfa876ecd5fcb1b44abc65471
f2ff7dcfe449309bd7f8ba665d2fa0799c72a634
5289a0372f25df4f79a703363f1efe97de880c8df207b1881f9c46596bb7071a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3978
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 11:45:19 GMT
Last-Modified: Tue, 04 Oct 2022 10:39:01 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471
www.comfyballs.no/wp-content/themes/proto/img/icons/stars/half.png
200 OK 2.9 kB URL HTTP/2 www.comfyballs.no/wp-content/themes/proto/img/icons/stars/half.png
IP
File type PNG image data, 82 x 80, 8-bit colormap, non-interlaced\012- data
Hash 5cc79a46afa2dee8ab7343c0aa3dba52
04ca8bf33ae8b37b98c80b86f1c9c9c6c01d03f6
8154df685eb3949f6e73d8a3c7385a6d095364ebc5c21952dd5d952bcbcbc3ad
GET /wp-content/themes/proto/img/icons/stars/half.png HTTP/1.1
Host: www.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/wp-content/cache/min/9/c9666fcdd566406e5173f3b5a3a58249.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 04 Oct 2022 11:45:18 GMT
content-type: image/png
content-length: 2930
last-modified: Tue, 29 Jun 2021 07:54:18 GMT
etag: "60dad1aa-b72"
expires: Wed, 04 Oct 2023 11:45:18 GMT
cache-control: max-age=31536000
x_avif_sp_miss: /home/wpmu/comfyballs/wp-content/themes/proto/img/icons/stars/half.avif
accept-ranges: bytes
X-Firefox-Spdy: h2
static.klaviyo.com/onsite/js/sharedUtils.0bc3da446707ca1edb02.js?cb=1
200 OK 13 kB URL HTTP/2 static.klaviyo.com/onsite/js/sharedUtils.0bc3da446707ca1edb02.js?cb=1
IP
File type Unicode text, UTF-8 text, with very long lines (34307), with no line terminators
Hash ac1e18ce6cac8daaaef31bed3c074515
8ea498fa5964d40d6e9d771a57b2c2d4951c7a83
7c027fff21e5b62a108e839ed90d91b856969e798318524b06faf4232c490544
GET /onsite/js/sharedUtils.0bc3da446707ca1edb02.js?cb=1 HTTP/1.1
Host: static.klaviyo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.comfyballs.no
Connection: keep-alive
Referer: https://www.comfyballs.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: IlT6kPnA9ssToQg2br24zjaYpouwzHuGVmlqFIP+L8Pw+7i15Yy2jhHVcSD2xOHx5RWAdZWRMJE=
x-amz-request-id: FDHRXCM9F36M1V2Y
last-modified: Thu, 22 Sep 2022 20:56:47 GMT
etag: "af06dc05c43c0e0ef631aa6578eb2b20"
cache-control: max-age=2592000,stale-while-revalidate=10800
x-amz-meta-surrogate-control: max-age=31536000
x-amz-meta-surrogate-key: fender-asset
x-amz-version-id: nWL.VwGMlkCnpf2w6hy7LSuPMY5QeZrD
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
access-control-allow-origin: *
accept-ranges: bytes
date: Tue, 04 Oct 2022 11:45:19 GMT
age: 43873
x-served-by: cache-lga21967-LGA, cache-bma1655-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 10964
vary: Accept-Encoding
content-length: 13237
X-Firefox-Spdy: h2
www.comfyballs.no/wp-content/cache/min/9/wp-content/themes/proto/js/proto-e45e1597ad2f1fff56e564c3fc87ac06.js
200 OK 13 kB URL HTTP/2 www.comfyballs.no/wp-content/cache/min/9/wp-content/themes/proto/js/proto-e45e1597ad2f1fff56e564c3fc87ac06.js
IP
File type ASCII text, with very long lines (27820)
Hash 9fae72c8bd28fadb4156d0489cab6c46
b1b5d4adac0c603eb6b6fa1e9d7a12c91e17269c
e01b2629af5c99c699603be8b48803006f2c85fe85967ef2fc7390ea9613f840
GET /wp-content/cache/min/9/wp-content/themes/proto/js/proto-e45e1597ad2f1fff56e564c3fc87ac06.js HTTP/1.1
Host: www.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 04 Oct 2022 11:45:17 GMT
content-type: application/javascript
last-modified: Tue, 04 Oct 2022 01:31:59 GMT
vary: Accept-Encoding
etag: W/"633b8d0f-1bb3"
expires: Wed, 04 Oct 2023 11:45:17 GMT
cache-control: max-age=31536000
x-rocket-nginx-bypass: No
content-encoding: gzip
X-Firefox-Spdy: h2
www.comfyballs.no/wp-content/cache/busting/9/wp-content/themes/proto/js/sticky-sidebar.min-1624953258.js
200 OK 8.7 kB URL HTTP/2 www.comfyballs.no/wp-content/cache/busting/9/wp-content/themes/proto/js/sticky-sidebar.min-1624953258.js
IP
File type ASCII text, with very long lines (24105)
Hash 01d8cd6d55e9230f7f9f103dc5029f9d
f175545eff87838f49de1b5ba275cc438acbb399
3abd20cbf3ffe0cdcc7dad3d7981328634e3eada485e65a2af3781367cc4bf20
GET /wp-content/cache/busting/9/wp-content/themes/proto/js/sticky-sidebar.min-1624953258.js HTTP/1.1
Host: www.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 04 Oct 2022 11:45:17 GMT
content-type: application/javascript
last-modified: Tue, 04 Oct 2022 01:31:59 GMT
vary: Accept-Encoding
etag: W/"633b8d0f-2e78"
expires: Wed, 04 Oct 2023 11:45:17 GMT
cache-control: max-age=31536000
x-rocket-nginx-bypass: No
content-encoding: gzip
X-Firefox-Spdy: h2
use.typekit.net/af/efe4a5/00000000000000007735e609/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n4&v=3
200 OK 30 kB URL HTTP/2 use.typekit.net/af/efe4a5/00000000000000007735e609/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n4&v=3
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format (Version 2), CFF, length 29820, version 1.0\012- data
Hash 22f210f896c47ca032dee5d32edfee1d
18a0f2b6d98fe442047fa2b232705b1587b407cd
c4d04d2b6a041dde11c80d8332f983a58c1031c663ab4f42230899cb82adf4a7
GET /af/efe4a5/00000000000000007735e609/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n4&v=3 HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.comfyballs.no
Connection: keep-alive
Referer: https://use.typekit.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/font-woff2
content-length: 29820
etag: "6aeae62b893768150f3460329dc461358e8ab2f5"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Tue, 04 Oct 2022 11:45:19 GMT
X-Firefox-Spdy: h2
use.typekit.net/af/2555e1/00000000000000007735e603/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n7&v=3
200 OK 31 kB URL HTTP/2 use.typekit.net/af/2555e1/00000000000000007735e603/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n7&v=3
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format (Version 2), CFF, length 30704, version 1.0\012- data
Hash cbae49bae5cbc8469c1a53a6bfbd5b15
a9fd98171826997827d0d02dab92318be2d7d639
a33128c94dd3c425bc3f4a9ba389a1f3d7a75233e8cb788ea80f8f43a3d68423
GET /af/2555e1/00000000000000007735e603/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n7&v=3 HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.comfyballs.no
Connection: keep-alive
Referer: https://use.typekit.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/font-woff2
content-length: 30704
etag: "09d1a94c81035c62708e0a513ee76d7886d15a25"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Tue, 04 Oct 2022 11:45:19 GMT
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 05b73f7bfa876ecd5fcb1b44abc65471
f2ff7dcfe449309bd7f8ba665d2fa0799c72a634
5289a0372f25df4f79a703363f1efe97de880c8df207b1881f9c46596bb7071a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3978
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 11:45:19 GMT
Last-Modified: Tue, 04 Oct 2022 10:39:01 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471
www.comfyballs.no/wp-content/uploads/sites/9/2022/08/inline-bestselgere-desktop.jpg
200 OK 15 kB URL HTTP/2 www.comfyballs.no/wp-content/uploads/sites/9/2022/08/inline-bestselgere-desktop.jpg
IP
File type JPEG image data, progressive, precision 8, 2560x81, components 3\012- data
Hash b2ec2472ec98aed1699a3887da6b7d42
96aea6c1cda085bc3ea3950f703d62b589c04992
11986eddab8a3d5a47da3fda98c5ac318112c889531a14c78106d2461bf0cd7f
GET /wp-content/uploads/sites/9/2022/08/inline-bestselgere-desktop.jpg HTTP/1.1
Host: www.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/
Cookie: __kla_id=eyIkcmVmZXJyZXIiOnsidHMiOjE2NjQ4ODM5MTksInZhbHVlIjoiIiwiZmlyc3RfcGFnZSI6Imh0dHBzOi8vd3d3LmNvbWZ5YmFsbHMubm8vIn0sIiRsYXN0X3JlZmVycmVyIjp7InRzIjoxNjY0ODgzOTE5LCJ2YWx1ZSI6IiIsImZpcnN0X3BhZ2UiOiJodHRwczovL3d3dy5jb21meWJhbGxzLm5vLyJ9fQ==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 04 Oct 2022 11:45:18 GMT
content-type: image/jpeg
content-length: 15308
last-modified: Fri, 12 Aug 2022 12:08:52 GMT
etag: "62f642d4-3bcc"
expires: Wed, 04 Oct 2023 11:45:18 GMT
cache-control: max-age=31536000
x_avif_sp_miss: /home/wpmu/comfyballs/wp-content/uploads/sites/9/2022/08/inline-bestselgere-desktop.avif
accept-ranges: bytes
X-Firefox-Spdy: h2
www.comfyballs.no/wp-content/uploads/sites/9/2022/10/inline-spesialtilbud-desktop.jpg
200 OK 25 kB URL HTTP/2 www.comfyballs.no/wp-content/uploads/sites/9/2022/10/inline-spesialtilbud-desktop.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 2560x140, components 3\012- data
Hash 1617cdc9f8194dc240c7e981ae5bbfda
54e256a9b2610079018ba3639b18a40e971b8fc1
5a09a512fb6af25bb5e4366f71115c608adf08f651635f60cbee49f524c8815d
GET /wp-content/uploads/sites/9/2022/10/inline-spesialtilbud-desktop.jpg HTTP/1.1
Host: www.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/
Cookie: __kla_id=eyIkcmVmZXJyZXIiOnsidHMiOjE2NjQ4ODM5MTksInZhbHVlIjoiIiwiZmlyc3RfcGFnZSI6Imh0dHBzOi8vd3d3LmNvbWZ5YmFsbHMubm8vIn0sIiRsYXN0X3JlZmVycmVyIjp7InRzIjoxNjY0ODgzOTE5LCJ2YWx1ZSI6IiIsImZpcnN0X3BhZ2UiOiJodHRwczovL3d3dy5jb21meWJhbGxzLm5vLyJ9fQ==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 04 Oct 2022 11:45:18 GMT
content-type: image/jpeg
content-length: 25223
last-modified: Mon, 03 Oct 2022 08:28:47 GMT
etag: "633a9d3f-6287"
expires: Wed, 04 Oct 2023 11:45:18 GMT
cache-control: max-age=31536000
x_avif_sp_miss: /home/wpmu/comfyballs/wp-content/uploads/sites/9/2022/10/inline-spesialtilbud-desktop.avif
accept-ranges: bytes
X-Firefox-Spdy: h2
www.comfyballs.no/wp-content/uploads/sites/9/2022/02/91-00_front-450x450.jpg
200 OK 62 kB URL HTTP/2 www.comfyballs.no/wp-content/uploads/sites/9/2022/02/91-00_front-450x450.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=14, height=4200, bps=182, PhotometricIntepretation=RGB, manufacturer=Canon, model=Canon EOS R5, orientation=upper-left, width=2800], baseline, precision 8, 450x450, components 3\012- data
Hash d39c855ccaaf353fca24568d308e2871
cbf7f8ba277795846c01f09656d4cbf8ba766e6e
618434626df15852e21a29f9fd1696a86dd18e7e329fc89a4695bf5dc23c441c
GET /wp-content/uploads/sites/9/2022/02/91-00_front-450x450.jpg HTTP/1.1
Host: www.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/
Cookie: __kla_id=eyIkcmVmZXJyZXIiOnsidHMiOjE2NjQ4ODM5MTksInZhbHVlIjoiIiwiZmlyc3RfcGFnZSI6Imh0dHBzOi8vd3d3LmNvbWZ5YmFsbHMubm8vIn0sIiRsYXN0X3JlZmVycmVyIjp7InRzIjoxNjY0ODgzOTE5LCJ2YWx1ZSI6IiIsImZpcnN0X3BhZ2UiOiJodHRwczovL3d3dy5jb21meWJhbGxzLm5vLyJ9fQ==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 04 Oct 2022 11:45:18 GMT
content-type: image/jpeg
content-length: 62321
last-modified: Thu, 11 Aug 2022 08:21:31 GMT
etag: "62f4bc0b-f371"
expires: Wed, 04 Oct 2023 11:45:18 GMT
cache-control: max-age=31536000
x_avif_sp_miss: /home/wpmu/comfyballs/wp-content/uploads/sites/9/2022/02/91-00_front-450x450.avif
accept-ranges: bytes
X-Firefox-Spdy: h2
www.comfyballs.no/wp-content/uploads/sites/9/2016/02/comfyballs-pitch-black-performance_front-1200x1200-1-450x450.jpg
200 OK 22 kB URL HTTP/2 www.comfyballs.no/wp-content/uploads/sites/9/2016/02/comfyballs-pitch-black-performance_front-1200x1200-1-450x450.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 450x450, components 3\012- data
Hash 5d624812f646af22dbd58a1de6ac6241
6517d0b2413f02d9595f5fa5279be7dce713e0d7
8eb806e63eddab2f5425dccf8064fb04bf82c31e808bbb8c1061cf1fb5a7be90
GET /wp-content/uploads/sites/9/2016/02/comfyballs-pitch-black-performance_front-1200x1200-1-450x450.jpg HTTP/1.1
Host: www.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/
Cookie: __kla_id=eyIkcmVmZXJyZXIiOnsidHMiOjE2NjQ4ODM5MTksInZhbHVlIjoiIiwiZmlyc3RfcGFnZSI6Imh0dHBzOi8vd3d3LmNvbWZ5YmFsbHMubm8vIn0sIiRsYXN0X3JlZmVycmVyIjp7InRzIjoxNjY0ODgzOTE5LCJ2YWx1ZSI6IiIsImZpcnN0X3BhZ2UiOiJodHRwczovL3d3dy5jb21meWJhbGxzLm5vLyJ9fQ==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 04 Oct 2022 11:45:18 GMT
content-type: image/jpeg
content-length: 22474
last-modified: Wed, 12 May 2021 12:19:02 GMT
etag: "609bc7b6-57ca"
expires: Wed, 04 Oct 2023 11:45:18 GMT
cache-control: max-age=31536000
x_avif_sp_miss: /home/wpmu/comfyballs/wp-content/uploads/sites/9/2016/02/comfyballs-pitch-black-performance_front-1200x1200-1-450x450.avif
accept-ranges: bytes
X-Firefox-Spdy: h2
www.comfyballs.no/wp-content/uploads/sites/9/2022/08/grande6stke-450x450.jpg
200 OK 78 kB URL HTTP/2 www.comfyballs.no/wp-content/uploads/sites/9/2022/08/grande6stke-450x450.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 450x450, components 3\012- data
Hash a38c3b4618988b1e966802d150416e92
e2a704b7ad0b42fae9e3ead4a9670578979f21be
d0ffce85d02f86ac1149671bb4f5c25daaa98c165f042469c9ed6e1b086959e6
GET /wp-content/uploads/sites/9/2022/08/grande6stke-450x450.jpg HTTP/1.1
Host: www.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/
Cookie: __kla_id=eyIkcmVmZXJyZXIiOnsidHMiOjE2NjQ4ODM5MTksInZhbHVlIjoiIiwiZmlyc3RfcGFnZSI6Imh0dHBzOi8vd3d3LmNvbWZ5YmFsbHMubm8vIn0sIiRsYXN0X3JlZmVycmVyIjp7InRzIjoxNjY0ODgzOTE5LCJ2YWx1ZSI6IiIsImZpcnN0X3BhZ2UiOiJodHRwczovL3d3dy5jb21meWJhbGxzLm5vLyJ9fQ==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 04 Oct 2022 11:45:18 GMT
content-type: image/jpeg
content-length: 78252
last-modified: Wed, 31 Aug 2022 12:51:21 GMT
etag: "630f5949-131ac"
expires: Wed, 04 Oct 2023 11:45:18 GMT
cache-control: max-age=31536000
x_avif_sp_miss: /home/wpmu/comfyballs/wp-content/uploads/sites/9/2022/08/grande6stke-450x450.avif
accept-ranges: bytes
X-Firefox-Spdy: h2
www.comfyballs.no/wp-content/uploads/sites/9/2022/02/11-89_front-450x450.jpg
200 OK 69 kB URL HTTP/2 www.comfyballs.no/wp-content/uploads/sites/9/2022/02/11-89_front-450x450.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=14, height=4200, bps=182, PhotometricIntepretation=RGB, manufacturer=Canon, model=Canon EOS R5, orientation=upper-left, width=2801], baseline, precision 8, 450x450, components 3\012- data
Hash 0b65cf47ab72c4061749f1aa9e9ef9fd
2af6bc239c3bdf28ec354dd6a53e13e378919761
d7d7d21b43410842d1987414ecd8e4ef6646a6e1d4df941ca080a7f692d3e03f
GET /wp-content/uploads/sites/9/2022/02/11-89_front-450x450.jpg HTTP/1.1
Host: www.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/
Cookie: __kla_id=eyIkcmVmZXJyZXIiOnsidHMiOjE2NjQ4ODM5MTksInZhbHVlIjoiIiwiZmlyc3RfcGFnZSI6Imh0dHBzOi8vd3d3LmNvbWZ5YmFsbHMubm8vIn0sIiRsYXN0X3JlZmVycmVyIjp7InRzIjoxNjY0ODgzOTE5LCJ2YWx1ZSI6IiIsImZpcnN0X3BhZ2UiOiJodHRwczovL3d3dy5jb21meWJhbGxzLm5vLyJ9fQ==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 04 Oct 2022 11:45:18 GMT
content-type: image/jpeg
content-length: 69125
last-modified: Wed, 24 Aug 2022 10:25:06 GMT
etag: "6305fc82-10e05"
expires: Wed, 04 Oct 2023 11:45:18 GMT
cache-control: max-age=31536000
x_avif_sp_miss: /home/wpmu/comfyballs/wp-content/uploads/sites/9/2022/02/11-89_front-450x450.avif
accept-ranges: bytes
X-Firefox-Spdy: h2
www.comfyballs.no/wp-content/uploads/sites/9/2020/10/11-72_front-1-450x450.jpg
200 OK 11 kB URL HTTP/2 www.comfyballs.no/wp-content/uploads/sites/9/2020/10/11-72_front-1-450x450.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 450x450, components 3\012- data
Hash ed2ebe0942550f130ac74e3a264b5173
6475c669c4e2841e459a5580f7a1170f499c9910
8d770c30eae41a44cc1f245a1a9d56be334b6abf8abcf2cad0047ad59426075a
GET /wp-content/uploads/sites/9/2020/10/11-72_front-1-450x450.jpg HTTP/1.1
Host: www.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/
Cookie: __kla_id=eyIkcmVmZXJyZXIiOnsidHMiOjE2NjQ4ODM5MTksInZhbHVlIjoiIiwiZmlyc3RfcGFnZSI6Imh0dHBzOi8vd3d3LmNvbWZ5YmFsbHMubm8vIn0sIiRsYXN0X3JlZmVycmVyIjp7InRzIjoxNjY0ODgzOTE5LCJ2YWx1ZSI6IiIsImZpcnN0X3BhZ2UiOiJodHRwczovL3d3dy5jb21meWJhbGxzLm5vLyJ9fQ==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 04 Oct 2022 11:45:18 GMT
content-type: image/jpeg
content-length: 11153
last-modified: Wed, 18 Aug 2021 11:24:58 GMT
etag: "611cee0a-2b91"
expires: Wed, 04 Oct 2023 11:45:18 GMT
cache-control: max-age=31536000
x_avif_sp_miss: /home/wpmu/comfyballs/wp-content/uploads/sites/9/2020/10/11-72_front-1-450x450.avif
accept-ranges: bytes
X-Firefox-Spdy: h2
www.comfyballs.no/wp-content/uploads/sites/9/2022/08/drevne10pack-450x450.jpg
200 OK 59 kB URL HTTP/2 www.comfyballs.no/wp-content/uploads/sites/9/2022/08/drevne10pack-450x450.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 450x450, components 3\012- data
Hash edadb8dc4fe21c2f9c6f6c3109b03e62
c28279cff6e86aa265a0e59aab63c4642e6b85da
38f200b1537b7a040ccbc94f7ebbf5a22041080889e0b1c85313522316d96ae2
GET /wp-content/uploads/sites/9/2022/08/drevne10pack-450x450.jpg HTTP/1.1
Host: www.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/
Cookie: __kla_id=eyIkcmVmZXJyZXIiOnsidHMiOjE2NjQ4ODM5MTksInZhbHVlIjoiIiwiZmlyc3RfcGFnZSI6Imh0dHBzOi8vd3d3LmNvbWZ5YmFsbHMubm8vIn0sIiRsYXN0X3JlZmVycmVyIjp7InRzIjoxNjY0ODgzOTE5LCJ2YWx1ZSI6IiIsImZpcnN0X3BhZ2UiOiJodHRwczovL3d3dy5jb21meWJhbGxzLm5vLyJ9fQ==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 04 Oct 2022 11:45:18 GMT
content-type: image/jpeg
content-length: 58722
last-modified: Wed, 31 Aug 2022 12:03:32 GMT
etag: "630f4e14-e562"
expires: Wed, 04 Oct 2023 11:45:18 GMT
cache-control: max-age=31536000
x_avif_sp_miss: /home/wpmu/comfyballs/wp-content/uploads/sites/9/2022/08/drevne10pack-450x450.avif
accept-ranges: bytes
X-Firefox-Spdy: h2
www.comfyballs.no/wp-content/cache/min/9/wp-content/themes/proto/js/menu-7cae0a356ed4516713fcbe0c05c5d5aa.js
200 OK 280 kB URL HTTP/2 www.comfyballs.no/wp-content/cache/min/9/wp-content/themes/proto/js/menu-7cae0a356ed4516713fcbe0c05c5d5aa.js
IP
Size 280 kB (280113 bytes)
Hash b4dd467e063d25a4311c3215339c41c4
57810350634667abf5564694d2284427f32782b7
cb7c5be1c79ce431c00bef842904917f0b64064cedf0e740c70b5eaccb86fd2c
GET /wp-content/cache/min/9/wp-content/themes/proto/js/menu-7cae0a356ed4516713fcbe0c05c5d5aa.js HTTP/1.1
Host: www.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 04 Oct 2022 11:45:17 GMT
content-type: application/javascript
last-modified: Tue, 04 Oct 2022 01:31:59 GMT
vary: Accept-Encoding
etag: W/"633b8d0f-cce"
expires: Wed, 04 Oct 2023 11:45:17 GMT
cache-control: max-age=31536000
x-rocket-nginx-bypass: No
content-encoding: gzip
X-Firefox-Spdy: h2
www.comfyballs.no/wp-content/uploads/sites/9/2022/08/column-pl-ny.jpg
200 OK 69 kB URL HTTP/2 www.comfyballs.no/wp-content/uploads/sites/9/2022/08/column-pl-ny.jpg
IP
File type JPEG image data, progressive, precision 8, 1005x1200, components 3\012- data
Hash 09f5c8132983abe58496f5ecb4f62f06
4220eb938a2b3fd7242f93faa9e0e298ec6a97ff
e376978f1ebdc76397bf6093a31aa234fe85561c87651d787b78524381355f99
GET /wp-content/uploads/sites/9/2022/08/column-pl-ny.jpg HTTP/1.1
Host: www.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/
Cookie: __kla_id=eyIkcmVmZXJyZXIiOnsidHMiOjE2NjQ4ODM5MTksInZhbHVlIjoiIiwiZmlyc3RfcGFnZSI6Imh0dHBzOi8vd3d3LmNvbWZ5YmFsbHMubm8vIn0sIiRsYXN0X3JlZmVycmVyIjp7InRzIjoxNjY0ODgzOTE5LCJ2YWx1ZSI6IiIsImZpcnN0X3BhZ2UiOiJodHRwczovL3d3dy5jb21meWJhbGxzLm5vLyJ9fQ==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 04 Oct 2022 11:45:18 GMT
content-type: image/jpeg
content-length: 69411
last-modified: Mon, 08 Aug 2022 08:16:41 GMT
etag: "62f0c669-10f23"
expires: Wed, 04 Oct 2023 11:45:18 GMT
cache-control: max-age=31536000
x_avif_sp_miss: /home/wpmu/comfyballs/wp-content/uploads/sites/9/2022/08/column-pl-ny.avif
accept-ranges: bytes
X-Firefox-Spdy: h2
www.comfyballs.no/wp-content/uploads/sites/9/2022/10/column-spilleren.jpg
200 OK 666 kB URL HTTP/2 www.comfyballs.no/wp-content/uploads/sites/9/2022/10/column-spilleren.jpg
IP
File type JPEG image data, progressive, precision 8, 1005x1200, components 3\012- data
Size 666 kB (666207 bytes)
Hash 120200d687538f44772110a421b73d61
9ab6b749dedf13a26eecbe9cf51d18b8f51126fc
1c218992833b38a9ee509e9ce14679d2fc563d399c9cafc84a1cacb1cd38141b
GET /wp-content/uploads/sites/9/2022/10/column-spilleren.jpg HTTP/1.1
Host: www.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/
Cookie: __kla_id=eyIkcmVmZXJyZXIiOnsidHMiOjE2NjQ4ODM5MTksInZhbHVlIjoiIiwiZmlyc3RfcGFnZSI6Imh0dHBzOi8vd3d3LmNvbWZ5YmFsbHMubm8vIn0sIiRsYXN0X3JlZmVycmVyIjp7InRzIjoxNjY0ODgzOTE5LCJ2YWx1ZSI6IiIsImZpcnN0X3BhZ2UiOiJodHRwczovL3d3dy5jb21meWJhbGxzLm5vLyJ9fQ==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 04 Oct 2022 11:45:18 GMT
content-type: image/jpeg
content-length: 666207
last-modified: Fri, 30 Sep 2022 22:12:36 GMT
etag: "633769d4-a2a5f"
expires: Wed, 04 Oct 2023 11:45:18 GMT
cache-control: max-age=31536000
x_avif_sp_miss: /home/wpmu/comfyballs/wp-content/uploads/sites/9/2022/10/column-spilleren.avif
accept-ranges: bytes
X-Firefox-Spdy: h2
player.vimeo.com/video/755498509?h=fd89329791&dnt=1&loop=1&background=1&app_id=122963
200 OK 16 kB URL HTTP/1.1 player.vimeo.com/video/755498509?h=fd89329791&dnt=1&loop=1&background=1&app_id=122963
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (48092)
Hash 4db89fa35bdbe772f51146db1717e573
e096a4ace67c65a390f984dc19e55128dd3af2ec
342cce18083794133f71abe095350df7791b8a3ebfed09ff327733df732b9076
GET /video/755498509?h=fd89329791&dnt=1&loop=1&background=1&app_id=122963 HTTP/1.1
Host: player.vimeo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 04 Oct 2022 11:45:19 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
x-xss-protection: 1; mode=block
content-security-policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: resource: https://f.vimeocdn.com https://vimeo.com https://js-agent.newrelic.com https://imasdk.googleapis.com/ https://adservice.google.com/ https://s0.2mdn.net/instream/video/ https://bam.nr-data.net https://src.litix.io https://www.gstatic.com https://cdn.streamroot.io https://cdn.kollective.app/ https://wirewax.s3.eu-west-1.amazonaws.com https://edge-assets.wirewax.com https://embedder-sdk.wirewax.com https://embedder-sdk.wirewax.tv https://f.vimeocdn.com; style-src 'self' 'unsafe-inline' https://f.vimeocdn.com https://fonts.googleapis.com https://edge-assets.wirewax.com https://f.vimeocdn.com; connect-src 'self' ws: wss: https://vimeo.com https://vimeo.dev https://api.vimeo.com https://api.vimeo.dev https://*.ci.vimeows.com https://csi.gstatic.com https://fresnel-player-staging.vimeows.com https://fresnel-event-staging.vimeows.com https://player-telemetry.vimeo.com https://*.akamaized.net https://*.akamaized-staging.net https://*.vimeocdn.com https://netflux.cloud.vimeo.com https://lic.staging.drmtoday.com https://lic.drmtoday.com https://wv.service.expressplay.com https://fp.service.expressplay.com https://pr.service.expressplay.com https://sentry.io https://*.ingest.sentry.io https://storage.googleapis.com https://bam.nr-data.net https://live-api.cloud.vimeo.com https://live-api-dev.cloud.vimeo.com https://*.litix.io/ https://collector.vhx.tv https://collector.vhxstaging.com https://*.dna-delivery.com https://*.kollective.app/ https://mimir.cloud.vimeo.com https://*.wirewax.com https://*.wirewax.tv https://wirewax.s3.eu-west-1.amazonaws.com https://sqs.us-east-1.amazonaws.com https://sqs.eu-west-1.amazonaws.com https://s3-eu-west-1.amazonaws.com https://cognito-identity.us-east-1.amazonaws.com https://cognito-identity.eu-west-1.amazonaws.com; media-src 'self' blob: https://*.vimeocdn.com https://*.akamaized.net https://*.akamaized-staging.net https://*.gvt1.com https://live-api.cloud.vimeo.com https://live-api-dev.cloud.vimeo.com https://devcaptions.cloud.vimeo.com/; object-src 'self' https://*.vimeocdn.com https://*.akamaized.net https://*.akamaized-staging.net; default-src 'none'; font-src https://edge-assets.wirewax.com https://player.vimeo.com https://fonts.gstatic.com; img-src 'self' data: https://i.vimeocdn.com https://secure-b.vimeocdn.com https://f.vimeocdn.com https://vimeo.com https://secure.gravatar.com https://i0.wp.com https://i1.wp.com https://i2.wp.com https://pagead2.googlesyndication.com https://player.vimeo.com https://*.ci.vimeows.com https://videoapi-sprites.vimeocdn.com https://i.vimeocdn.com https://wirewax.s3.eu-west-1.amazonaws.com https://studio-media.wirewax.com https://edge-assets.wirewax.com https://maps.googleapis.com https://f.vimeocdn.com; frame-src 'self' https://*
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
link: <https://i.vimeocdn.com>; rel=preconnect; crossorigin, <https://f.vimeocdn.com>; rel=preconnect; crossorigin, <https://fresnel.vimeocdn.com>; rel=preconnect; crossorigin
p3p: CP="This is not a P3P policy! See https://vimeo.com/privacy"
expires: Tue, 04 Oct 2022 11:47:31 GMT
x-host: player-668dcfbf46-8fh68
via: 1.1 varnish, 1.1 varnish
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
x-varnish-cache: 1
x-vserver: playproxy-rollout-prod-varnish-7
x-backend-proxy: playproxy8
x-bapp-server: player-668dcfbf46-8fh68
Age: 0
X-Served-By: cache-bma1678-BMA
X-Cache: MISS
X-Cache-Hits: 0
X-Timer: S1664883919.994532,VS0,VE214
Vary: Accept-Encoding
X-Player-Backend: p
CF-Cache-Status: DYNAMIC
Set-Cookie: __cf_bm=gWHJl5XWATJROvGxNZPISrCJQnblie7gSO8yKYlkKnM-1664883919-0-AdvmCdmmbsafwilke3YjjlARMyy2LZm8twdqfduAi2zP6yAwNKRdD7+sEKw2cr2muYPHss7Nn5i6MBsOxDNlHG0=; path=/; expires=Tue, 04-Oct-22 12:15:19 GMT; domain=.vimeo.com; HttpOnly; Secure; SameSite=None
Server: cloudflare
CF-RAY: 754dabad98b6b517-OSL
Content-Encoding: gzip
www.comfyballs.no/wp-content/uploads/sites/9/2020/05/cropped-logo-comfyballs-favicon-192x192.png
200 OK 1.4 kB URL HTTP/2 www.comfyballs.no/wp-content/uploads/sites/9/2020/05/cropped-logo-comfyballs-favicon-192x192.png
IP
File type PNG image data, 192 x 192, 4-bit colormap, non-interlaced\012- data
Hash 055176464ca080024d7e08b09e88b89c
bdda85d9296cb55c286ffc16faa424c8bc12d42a
f9f439f123a0647bda6e02dc9cf192747629bb554236bd60179d22305ab2d254
GET /wp-content/uploads/sites/9/2020/05/cropped-logo-comfyballs-favicon-192x192.png HTTP/1.1
Host: www.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/
Cookie: __kla_id=eyIkcmVmZXJyZXIiOnsidHMiOjE2NjQ4ODM5MTksInZhbHVlIjoiIiwiZmlyc3RfcGFnZSI6Imh0dHBzOi8vd3d3LmNvbWZ5YmFsbHMubm8vIn0sIiRsYXN0X3JlZmVycmVyIjp7InRzIjoxNjY0ODgzOTE5LCJ2YWx1ZSI6IiIsImZpcnN0X3BhZ2UiOiJodHRwczovL3d3dy5jb21meWJhbGxzLm5vLyJ9fQ==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 04 Oct 2022 11:45:18 GMT
content-type: image/png
content-length: 1416
last-modified: Wed, 13 May 2020 09:15:29 GMT
etag: "5ebbbab1-588"
expires: Wed, 04 Oct 2023 11:45:18 GMT
cache-control: max-age=31536000
x_avif_sp_miss: /home/wpmu/comfyballs/wp-content/uploads/sites/9/2020/05/cropped-logo-comfyballs-favicon-192x192.avif
accept-ranges: bytes
X-Firefox-Spdy: h2
www.comfyballs.no/wp-content/uploads/sites/9/2020/05/cropped-logo-comfyballs-favicon-32x32.png
200 OK 746 B URL HTTP/2 www.comfyballs.no/wp-content/uploads/sites/9/2020/05/cropped-logo-comfyballs-favicon-32x32.png
IP
File type PNG image data, 32 x 32, 8-bit colormap, non-interlaced\012- data
Hash 36974b95aed214e862b9ae49488586fc
2e2ecdc564f555c457647f81f6befe71ed9d4ca8
1d95e3e60b2bbf6e2fe1c40b70860c5b839c6ebee93dc324de9bc06ac84fa459
GET /wp-content/uploads/sites/9/2020/05/cropped-logo-comfyballs-favicon-32x32.png HTTP/1.1
Host: www.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/
Cookie: __kla_id=eyIkcmVmZXJyZXIiOnsidHMiOjE2NjQ4ODM5MTksInZhbHVlIjoiIiwiZmlyc3RfcGFnZSI6Imh0dHBzOi8vd3d3LmNvbWZ5YmFsbHMubm8vIn0sIiRsYXN0X3JlZmVycmVyIjp7InRzIjoxNjY0ODgzOTE5LCJ2YWx1ZSI6IiIsImZpcnN0X3BhZ2UiOiJodHRwczovL3d3dy5jb21meWJhbGxzLm5vLyJ9fQ==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 04 Oct 2022 11:45:18 GMT
content-type: image/png
content-length: 746
last-modified: Wed, 13 May 2020 09:15:29 GMT
etag: "5ebbbab1-2ea"
expires: Wed, 04 Oct 2023 11:45:18 GMT
cache-control: max-age=31536000
x_avif_sp_miss: /home/wpmu/comfyballs/wp-content/uploads/sites/9/2020/05/cropped-logo-comfyballs-favicon-32x32.avif
accept-ranges: bytes
X-Firefox-Spdy: h2
open.spotifycdn.com/cdn/build/embed/vendor~embed.6be60370.css
200 OK 986 B URL HTTP/1.1 open.spotifycdn.com/cdn/build/embed/vendor~embed.6be60370.css
IP
File type ASCII text, with very long lines (8973), with no line terminators
Hash 39a0174cdd7c50425083a2e6bff8c6a4
e29b8f814712215e08857dee1eed008d12cdb200
1dd80bd71dfd3edc5807c2ec9c1e37ee57c3ed72225879e31f16388b178c3a2f
GET /cdn/build/embed/vendor~embed.6be60370.css HTTP/1.1
Host: open.spotifycdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://open.spotify.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 986
Last-Modified: Mon, 25 Jul 2022 10:32:22 GMT
ETag: "39a0174cdd7c50425083a2e6bff8c6a4"
x-goog-generation: 1658745142492300
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 986
Content-Type: text/css
Content-Encoding: gzip
Accept-Ranges: bytes
Date: Tue, 04 Oct 2022 11:45:19 GMT
Age: 6138554
X-Served-By: cache-chi-kigq8000077-CHI, cache-bma1644-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 1, 672
Access-Control-Allow-Origin: https://open.spotify.com
Cache-Control: public, max-age=31536000
open.spotifycdn.com/cdn/generated-locales/embed/en.81e1c370.json
200 OK 700 B URL HTTP/1.1 open.spotifycdn.com/cdn/generated-locales/embed/en.81e1c370.json
IP
File type JSON data\012- , ASCII text
Hash e0f89d775b116c80800ba679737fbac6
f1987b2fe3be445f382120264b89f91d73c2d6e8
be77f50dcd3a87993fe46011f9b6236c2ffdefaa5bebe5918d9417c400709a6d
GET /cdn/generated-locales/embed/en.81e1c370.json HTTP/1.1
Host: open.spotifycdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://open.spotify.com
Connection: keep-alive
Referer: https://open.spotify.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 700
Last-Modified: Mon, 29 Aug 2022 14:55:01 GMT
ETag: "e0f89d775b116c80800ba679737fbac6"
x-goog-generation: 1661784901939285
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 700
Content-Type: application/json
Content-Encoding: gzip
Accept-Ranges: bytes
Date: Tue, 04 Oct 2022 11:45:19 GMT
Age: 500690
X-Served-By: cache-chi-klot8100048-CHI, cache-bma1648-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 1, 48
Access-Control-Allow-Origin: https://open.spotify.com
Cache-Control: public, max-age=31536000
open.spotifycdn.com/cdn/build/embed/embed.0505292d.js
200 OK 48 kB URL HTTP/1.1 open.spotifycdn.com/cdn/build/embed/embed.0505292d.js
IP
File type Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Hash bd608a53b5c5a1aabaf8f7b43661e0c3
31c80ea19e09e04f74594f9a2c91f58f8d48b141
30d29a41c4050fb001b2cc1f2f169ba4cf3ee8fa14812a7315873f446df5f87d
GET /cdn/build/embed/embed.0505292d.js HTTP/1.1
Host: open.spotifycdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://open.spotify.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 47629
Last-Modified: Tue, 04 Oct 2022 10:50:12 GMT
ETag: "bd608a53b5c5a1aabaf8f7b43661e0c3"
x-goog-generation: 1664880612021379
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 47629
Content-Type: application/javascript
Content-Encoding: gzip
Accept-Ranges: bytes
Date: Tue, 04 Oct 2022 11:45:19 GMT
Age: 3081
X-Served-By: cache-chi-kigq8000095-CHI, cache-bma1662-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 40, 213
Access-Control-Allow-Origin: https://open.spotify.com
Cache-Control: public, max-age=31536000
open.spotifycdn.com/cdn/build/embed/embed.8209e152.css
200 OK 10 kB URL HTTP/1.1 open.spotifycdn.com/cdn/build/embed/embed.8209e152.css
IP
File type Unicode text, UTF-8 text, with very long lines (62160), with no line terminators
Hash 437f1ec7cebe13739173af13a4ed4d64
36ad9ae46205a873b9cdd9d44eaa8db6d08f1c14
49682c78182048312baa8610ff61f1b568c0241410718d09e1ddce8c80d88945
GET /cdn/build/embed/embed.8209e152.css HTTP/1.1
Host: open.spotifycdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://open.spotify.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 10533
Last-Modified: Fri, 16 Sep 2022 12:15:47 GMT
ETag: "437f1ec7cebe13739173af13a4ed4d64"
x-goog-generation: 1663330547828331
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 10533
Content-Type: text/css
Content-Encoding: gzip
Accept-Ranges: bytes
Date: Tue, 04 Oct 2022 11:45:19 GMT
Age: 1553091
X-Served-By: cache-chi-kigq8000093-CHI, cache-bma1669-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 1, 49774
Access-Control-Allow-Origin: https://open.spotify.com
Cache-Control: public, max-age=31536000
ocsp.digicert.com/
200 OK 471 B IP
Hash 5e89969841b429e3ca44b320d17ea98a
30486a886b793ad5431b73d983d091487e5709c6
2d08365a447343168153cf1178b3b847377c2923bce06d9f6485ad08d3a06d34
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4211
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 11:45:19 GMT
Last-Modified: Tue, 04 Oct 2022 10:35:08 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471
open.spotifycdn.com/cdn/fonts/spoticon_regular_2.d319d911.woff2
200 OK 57 kB URL HTTP/1.1 open.spotifycdn.com/cdn/fonts/spoticon_regular_2.d319d911.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 56996, version 1.0\012- data
Hash 3b7bbfac9ed3e75d426728e900579aa9
baff27e32807b7c8c558e2102aa2e034a47c1561
d728648c3e1d90bf50f0e988787ce26ea1111fa697b0a9daeb95d6724842a9c1
GET /cdn/fonts/spoticon_regular_2.d319d911.woff2 HTTP/1.1
Host: open.spotifycdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://open.spotify.com
Connection: keep-alive
Referer: https://open.spotify.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 56996
Last-Modified: Mon, 13 Jun 2022 14:00:42 GMT
ETag: "3b7bbfac9ed3e75d426728e900579aa9"
Content-Type: application/octet-stream
Accept-Ranges: bytes
Date: Tue, 04 Oct 2022 11:45:19 GMT
Age: 9754901
X-Served-By: cache-ord1736-ORD, cache-chi-kigq8000054-CHI, cache-bma1683-BMA
X-Cache: MISS, HIT, HIT
X-Cache-Hits: 0, 1, 51944
Access-Control-Allow-Origin: https://open.spotify.com
Cache-Control: public, max-age=31536000
bat.bing.com/bat.js
200 OK 11 kB IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (38826), with no line terminators
Hash 293ae3e0fc8b0d5c143fdf9d8490228d
3976c659b908e70818a3a1ac71860b497fe2d1a9
04a840d967ae836e14179bde574cabf14a1fc871182ca0f8193e7a0b06c727ab
GET /bat.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: private,max-age=1800
content-length: 11367
content-type: application/javascript
content-encoding: gzip
last-modified: Thu, 28 Jul 2022 17:32:37 GMT
accept-ranges: bytes
etag: "80a8697a8a2d81:0"
vary: Accept-Encoding
set-cookie: MUID=020C3296DC686D3803BD20A5DD9D6C95; domain=.bing.com; expires=Sun, 29-Oct-2023 11:45:19 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 21CDD45F0AD748B69AD1B3FD7B5EFEF2 Ref B: OSL30EDGE0511 Ref C: 2022-10-04T11:45:19Z
date: Tue, 04 Oct 2022 11:45:18 GMT
X-Firefox-Spdy: h2
open.spotifycdn.com/cdn/build/embed/vendor~embed.931d4888.js
200 OK 301 kB URL HTTP/1.1 open.spotifycdn.com/cdn/build/embed/vendor~embed.931d4888.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Size 301 kB (301427 bytes)
Hash 323d5bb69c464cab97da05b40a1fe849
3fb398182298c5e55fc1eccacb785825e54315fc
c8b33c6ac5ba1a0c6e9ff5f18e1097d6c725eed7f60ef18cf198697508d2c0e0
GET /cdn/build/embed/vendor~embed.931d4888.js HTTP/1.1
Host: open.spotifycdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://open.spotify.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 301427
Last-Modified: Mon, 03 Oct 2022 15:26:22 GMT
ETag: "323d5bb69c464cab97da05b40a1fe849"
x-goog-generation: 1664810782165993
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 301427
Content-Type: application/javascript
Content-Encoding: gzip
Accept-Ranges: bytes
Date: Tue, 04 Oct 2022 11:45:19 GMT
Age: 72868
X-Served-By: cache-chi-klot8100165-CHI, cache-bma1655-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 18, 1043
Access-Control-Allow-Origin: https://open.spotify.com
Cache-Control: public, max-age=31536000
encore.scdn.co/fonts/CircularSp-Bold-fe1cfc14b7498b187c78fa72fb72d148.woff2
200 OK 90 kB URL HTTP/1.1 encore.scdn.co/fonts/CircularSp-Bold-fe1cfc14b7498b187c78fa72fb72d148.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 89536, version 1.66\012- data
Hash 216b12b5a9657850b1b324e158454f8e
b02b14e1ed70d323167efa295ceb8ba156a37fab
81c0ae5eb7c7ea1bca274d51be67818e3f2577e63c9f2ee766b20e8964335db9
GET /fonts/CircularSp-Bold-fe1cfc14b7498b187c78fa72fb72d148.woff2 HTTP/1.1
Host: encore.scdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://open.spotify.com
Connection: keep-alive
Referer: https://open.spotify.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 89529
Last-Modified: Fri, 13 May 2022 11:38:50 GMT
ETag: "216b12b5a9657850b1b324e158454f8e"
x-goog-generation: 1652441930609707
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 89529
Content-Type: font/woff2
Content-Encoding: gzip
Accept-Ranges: bytes
Date: Tue, 04 Oct 2022 11:45:19 GMT
Age: 1961956
X-Served-By: cache-chi-kigq8000140-CHI, cache-bma1659-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 1, 89534
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=31536000
encore.scdn.co/fonts/CircularSpTitle-Black-3f9afb402080d53345ca1850226ca724.woff2
200 OK 86 kB URL HTTP/1.1 encore.scdn.co/fonts/CircularSpTitle-Black-3f9afb402080d53345ca1850226ca724.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 85622, version 1.66\012- data
Hash 0e196bce574e01f42fc686e3e6dc4f76
330b633667a9533638955e725e53a760904170eb
94591008ecb9d40b575e52b72bd30dc31bab0b064ba132766fb80f95f85d27aa
GET /fonts/CircularSpTitle-Black-3f9afb402080d53345ca1850226ca724.woff2 HTTP/1.1
Host: encore.scdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://open.spotify.com
Connection: keep-alive
Referer: https://open.spotify.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 85585
Last-Modified: Thu, 19 May 2022 07:59:22 GMT
ETag: "0e196bce574e01f42fc686e3e6dc4f76"
Content-Type: font/woff2
Content-Encoding: gzip
Accept-Ranges: bytes
Date: Tue, 04 Oct 2022 11:45:19 GMT
Age: 7782408
X-Served-By: cache-ord1740-ORD, cache-chi-kigq8000179-CHI, cache-bma1669-BMA
X-Cache: HIT, HIT, HIT
X-Cache-Hits: 1, 1, 91406
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=31536000
ocsp.digicert.com/
200 OK 471 B IP
Hash 5e89969841b429e3ca44b320d17ea98a
30486a886b793ad5431b73d983d091487e5709c6
2d08365a447343168153cf1178b3b847377c2923bce06d9f6485ad08d3a06d34
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4211
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 11:45:19 GMT
Last-Modified: Tue, 04 Oct 2022 10:35:08 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471
f.vimeocdn.com/p/4.11.3/css/player.css
200 OK 20 kB URL HTTP/2 f.vimeocdn.com/p/4.11.3/css/player.css
IP
File type ASCII text, with very long lines (65495)
Hash 26b5c30b1a267076d31595a764100a24
04f392edf61a175f2eb5831dc9ce886b3d4f0638
b83b89204b6f8434911082baa313706c1e3ca0e440f919a7e4873dd2c146634a
GET /p/4.11.3/css/player.css HTTP/1.1
Host: f.vimeocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 04 Oct 2022 11:45:19 GMT
age: 68617
x-served-by: cache-iad-kiad7000069-IAD, cache-bma1681-BMA
x-cache: HIT, HIT
x-cache-hits: 41, 16869
x-timer: S1664883919.475862,VS0,VE0
vary: Accept-Encoding,x-http-method-override
cache-control: max-age=1209600
access-control-allow-origin: *
content-length: 20305
X-Firefox-Spdy: h2
f.vimeocdn.com/p/4.11.3/js/player.js
200 OK 212 kB URL HTTP/2 f.vimeocdn.com/p/4.11.3/js/player.js
IP
File type ASCII text, with very long lines (64649)
Size 212 kB (212476 bytes)
Hash 1a9158a6f3dbfa9f98a2525d60e4c819
b80d8ca4bd9869c6fce2def33022d35c7d41b3b8
8bad76d74f9f6cfa086dccf378934b2a7b6c07c94c1b279d7dd71974e5c9a782
GET /p/4.11.3/js/player.js HTTP/1.1
Host: f.vimeocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 04 Oct 2022 11:45:19 GMT
age: 68617
x-served-by: cache-iad-kiad7000050-IAD, cache-bma1681-BMA
x-cache: HIT, HIT
x-cache-hits: 35, 12457
x-timer: S1664883919.491474,VS0,VE0
vary: Accept-Encoding,x-http-method-override
cache-control: max-age=1209600
content-length: 212476
X-Firefox-Spdy: h2
analytics.tiktok.com/i18n/pixel/config.js?sdkid=CA34KV3C77U9OVK6NG00&hostname=www.comfyballs.no
200 OK 345 B URL HTTP/2 analytics.tiktok.com/i18n/pixel/config.js?sdkid=CA34KV3C77U9OVK6NG00&hostname=www.comfyballs.no
IP
ASN #20940 Akamai International B.V.
Hash 0561053057a8d898b75869ad047b1e56
ce58fedab878bc3ca2564acdb247bc395e4f2d6c
38ca5f1fa6fa051824e9b47f1d35a8f05938fe5b62437102bedcf9309bd95de2
GET /i18n/pixel/config.js?sdkid=CA34KV3C77U9OVK6NG00&hostname=www.comfyballs.no HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
x-tt-logid: 20221004114519B4B38C5379238B34C0A5
x-tt-trace-host: 016eabbbec2a80a817c88fdee8d986cf6005720c6962fed5e357d9218e3edd781669e5e541d4d4bc360c39c9c71dbcfc92903b905ec49fcf42add7875ee2db8a7cfe93a1be56c339d6595eac39c7de9de42d9322b829eb3d322ed21e9c0dad2877
content-encoding: gzip
content-length: 345
x-origin-response-time: 102,23.218.223.19
x-akamai-request-id: 567e3c57.1bd2aae5
expires: Tue, 04 Oct 2022 11:45:19 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Tue, 04 Oct 2022 11:45:19 GMT
x-cache: TCP_MISS from a23-36-79-39.deploy.akamaitechnologies.com (AkamaiGHost/10.9.5-44356082) (-)
vary: Accept-Encoding
set-cookie: _ttp=2FfX4KJHA0wlyOUgLKTq60nzoAC; Path=/; Domain=tiktok.com; Max-Age=33696000; Secure; SameSite=None
x-cache-remote: TCP_MISS from a23-218-223-19.deploy.akamaitechnologies.com (AkamaiGHost/10.9.4-44125806) (-)
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: cdn-cache; desc=MISS, edge; dur=145, origin; dur=102, inner; dur=2
x-parent-response-time: 247,23.36.79.39
X-Firefox-Spdy: h2
encore.scdn.co/fonts/CircularSp-Book-4eaffdf96f4c6f984686e93d5d9cb325.woff2
200 OK 39 kB URL HTTP/1.1 encore.scdn.co/fonts/CircularSp-Book-4eaffdf96f4c6f984686e93d5d9cb325.woff2
IP
Hash 027411f2cdebd61bafba53270225c514
35b0a28a7111ac03571ececc33983b4245ec031c
346b5e3ee642aeab6bee939c8f8ecd6e327953697a8bdea672f48bffc5506235
GET /fonts/CircularSp-Book-4eaffdf96f4c6f984686e93d5d9cb325.woff2 HTTP/1.1
Host: encore.scdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://open.spotify.com
Connection: keep-alive
Referer: https://open.spotify.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 84027
Last-Modified: Fri, 13 May 2022 11:38:51 GMT
ETag: "f7b12903dd7a2d536ceb2b7cd1dba2c1"
Content-Type: font/woff2
Content-Encoding: gzip
Accept-Ranges: bytes
Date: Tue, 04 Oct 2022 11:45:19 GMT
Age: 7337307
X-Served-By: cache-ord1745-ORD, cache-chi-kigq8000169-CHI, cache-bma1656-BMA
X-Cache: HIT, HIT, HIT
X-Cache-Hits: 1, 1, 176257
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=31536000
bat.bing.com/action/0?ti=17112753&Ver=2&mid=d57e9b60-f633-4571-899c-1852bcec6322&sid=0559b16043da11ed85d571759f98f8bc&vid=0559977043da11edac8b231ade4c1997&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=PREMIER%20LEAGUE%20%2F%2F%20A%20Whole%20New%20Ballgame%20-%20Comfyballs.no&p=https%3A%2F%2Fwww.comfyballs.no%2F&r=<=992&evt=pageLoad&sv=1&rn=259537
204 No Content 0 B URL HTTP/2 bat.bing.com/action/0?ti=17112753&Ver=2&mid=d57e9b60-f633-4571-899c-1852bcec6322&sid=0559b16043da11ed85d571759f98f8bc&vid=0559977043da11edac8b231ade4c1997&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=PREMIER%20LEAGUE%20%2F%2F%20A%20Whole%20New%20Ballgame%20-%20Comfyballs.no&p=https%3A%2F%2Fwww.comfyballs.no%2F&r=<=992&evt=pageLoad&sv=1&rn=259537
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/0?ti=17112753&Ver=2&mid=d57e9b60-f633-4571-899c-1852bcec6322&sid=0559b16043da11ed85d571759f98f8bc&vid=0559977043da11edac8b231ade4c1997&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=PREMIER%20LEAGUE%20%2F%2F%20A%20Whole%20New%20Ballgame%20-%20Comfyballs.no&p=https%3A%2F%2Fwww.comfyballs.no%2F&r=<=992&evt=pageLoad&sv=1&rn=259537 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=3A1110901C2F6498263602A31DDA6529; domain=.bing.com; expires=Sun, 29-Oct-2023 11:45:19 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: D25F2260F1294D29994ACCB79C8281CF Ref B: OSL30EDGE0511 Ref C: 2022-10-04T11:45:19Z
date: Tue, 04 Oct 2022 11:45:18 GMT
X-Firefox-Spdy: h2
analytics.tiktok.com/api/v2/pixel
200 OK 0 B URL HTTP/2 analytics.tiktok.com/api/v2/pixel
IP
ASN #20940 Akamai International B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/v2/pixel HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 727
Origin: https://www.comfyballs.no
Connection: keep-alive
Referer: https://www.comfyballs.no/
Cookie: _ttp=2FfX4KJHA0wlyOUgLKTq60nzoAC
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/octet-stream
content-length: 0
access-control-allow-origin: *
x-tt-logid: 202210041145196C2602BFFCBF0537110E
x-tt-trace-host: 016eabbbec2a80a817c88fdee8d986cf6005720c6962fed5e357d9218e3edd7816db82a3458ce5e352d5312328d441d0ebb16af2c190eca0e0f2fe81feec05ec0ef9c67869eb21a44fc83ff072bb244db6f38fb3a5eefe1a4ba0dedb01237d9121
x-origin-response-time: 16,23.218.223.13
x-akamai-request-id: 42629e82.1bd2b1c7
expires: Tue, 04 Oct 2022 11:45:19 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Tue, 04 Oct 2022 11:45:19 GMT
x-cache: TCP_MISS from a23-36-79-39.deploy.akamaitechnologies.com (AkamaiGHost/10.9.5-44356082) (-)
x-cache-remote: TCP_MISS from a23-218-223-13.deploy.akamaitechnologies.com (AkamaiGHost/10.9.5-44356082) (-)
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: cdn-cache; desc=MISS, edge; dur=107, origin; dur=16, inner; dur=12
x-parent-response-time: 117,23.36.79.39
X-Firefox-Spdy: h2
analytics.tiktok.com/api/v2/pixel
200 OK 0 B URL HTTP/2 analytics.tiktok.com/api/v2/pixel
IP
ASN #20940 Akamai International B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/v2/pixel HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 729
Origin: https://www.comfyballs.no
Connection: keep-alive
Referer: https://www.comfyballs.no/
Cookie: _ttp=2FfX4KJHA0wlyOUgLKTq60nzoAC
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/octet-stream
content-length: 0
access-control-allow-origin: *
x-tt-logid: 20221004114519E86A98E99E3A3B36019E
x-tt-trace-host: 016eabbbec2a80a817c88fdee8d986cf6005720c6962fed5e357d9218e3edd7816db82a3458ce5e352d5312328d441d0ebbc3c4288ef5b14b99ef0f97583f8d33d0a337fb0e68a35882d5349196be85d3ce5ea7a18f018c763d1577a416783598a
x-origin-response-time: 14,23.218.223.13
x-akamai-request-id: 4262a8be.1bd2b1c2
expires: Tue, 04 Oct 2022 11:45:19 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Tue, 04 Oct 2022 11:45:19 GMT
x-cache: TCP_MISS from a23-36-79-39.deploy.akamaitechnologies.com (AkamaiGHost/10.9.5-44356082) (-)
x-cache-remote: TCP_MISS from a23-218-223-13.deploy.akamaitechnologies.com (AkamaiGHost/10.9.5-44356082) (-)
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: cdn-cache; desc=MISS, edge; dur=129, origin; dur=14, inner; dur=12
x-parent-response-time: 138,23.36.79.39
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c5ca066be5a0211e439daa1f533d4e14
f5cfbf83dff10155279583227d42ff33db5feace
546969b19bc2f9ed44ca69c4ba477ef4b32a1d56d968a2c8889c4df5104fd933
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "546969B19BC2F9ED44CA69C4BA477EF4B32A1D56D968A2C8889C4DF5104FD933"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7737
Expires: Tue, 04 Oct 2022 13:54:16 GMT
Date: Tue, 04 Oct 2022 11:45:19 GMT
Connection: keep-alive
www.facebook.com/tr/?id=1531245867172135&ev=PageView&dl=https%3A%2F%2Fwww.comfyballs.no%2F&rl=&if=false&ts=1664883919361&sw=1280&sh=1024&v=2.9.84&r=stable&ec=0&o=30&fbp=fb.1.1664883919358.280252309&eid=ob3_plugin-set_28a2ce19a8dc41c2820269a963ce7c0533cb17b9aa6fca220954e710e5053c29&it=1664883919026&coo=false&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=1531245867172135&ev=PageView&dl=https%3A%2F%2Fwww.comfyballs.no%2F&rl=&if=false&ts=1664883919361&sw=1280&sh=1024&v=2.9.84&r=stable&ec=0&o=30&fbp=fb.1.1664883919358.280252309&eid=ob3_plugin-set_28a2ce19a8dc41c2820269a963ce7c0533cb17b9aa6fca220954e710e5053c29&it=1664883919026&coo=false&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=1531245867172135&ev=PageView&dl=https%3A%2F%2Fwww.comfyballs.no%2F&rl=&if=false&ts=1664883919361&sw=1280&sh=1024&v=2.9.84&r=stable&ec=0&o=30&fbp=fb.1.1664883919358.280252309&eid=ob3_plugin-set_28a2ce19a8dc41c2820269a963ce7c0533cb17b9aa6fca220954e710e5053c29&it=1664883919026&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
date: Tue, 04 Oct 2022 11:45:19 GMT
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 35ea78c60af4ec3ef00561a97b33ea92
a26d0cbb9410f057f06f6d987946f5d630d719d1
fd7fe4340f4e3d64f1e40469780e9a614f7b2b3bca129500c914cb67f5702473
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FD7FE4340F4E3D64F1E40469780E9A614F7B2B3BCA129500C914CB67F5702473"
Last-Modified: Mon, 03 Oct 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17728
Expires: Tue, 04 Oct 2022 16:40:47 GMT
Date: Tue, 04 Oct 2022 11:45:19 GMT
Connection: keep-alive
o22381.ingest.sentry.io/api/1409086/envelope/?sentry_key=80341f4271be4aec89050e48a0e4553e&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.12.1
200 OK 2 B URL HTTP/2 o22381.ingest.sentry.io/api/1409086/envelope/?sentry_key=80341f4271be4aec89050e48a0e4553e&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.12.1
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
POST /api/1409086/envelope/?sentry_key=80341f4271be4aec89050e48a0e4553e&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.12.1 HTTP/1.1
Host: o22381.ingest.sentry.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://open.spotify.com/
Content-Type: text/plain;charset=UTF-8
Origin: https://open.spotify.com
Content-Length: 420
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 04 Oct 2022 11:45:19 GMT
content-type: application/json
content-length: 2
access-control-allow-origin: https://open.spotify.com
access-control-expose-headers: retry-after, x-sentry-error, x-sentry-rate-limits
vary: Origin
x-envoy-upstream-service-time: 0
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fb.comfyballs.no/events
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /events HTTP/1.1
Host: fb.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 327
Origin: https://www.comfyballs.no
Connection: keep-alive
Referer: https://www.comfyballs.no/
Cookie: _uetsid=0559b16043da11ed85d571759f98f8bc; _uetvid=0559977043da11edac8b231ade4c1997; _tt_enable_cookie=1; _ttp=fd36fb98-3627-457e-a200-5e6f379ae561; _fbp=fb.1.1664883919358.280252309
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 11:45:19 GMT
content-length: 0
vary: origin
access-control-allow-credentials: true
access-control-allow-origin: https://www.comfyballs.no
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c5ca066be5a0211e439daa1f533d4e14
f5cfbf83dff10155279583227d42ff33db5feace
546969b19bc2f9ed44ca69c4ba477ef4b32a1d56d968a2c8889c4df5104fd933
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "546969B19BC2F9ED44CA69C4BA477EF4B32A1D56D968A2C8889C4DF5104FD933"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7737
Expires: Tue, 04 Oct 2022 13:54:16 GMT
Date: Tue, 04 Oct 2022 11:45:19 GMT
Connection: keep-alive
bat.bing.com/p/action/17112753.js
200 OK 667 B URL HTTP/2 bat.bing.com/p/action/17112753.js
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with CRLF line terminators
Hash 3545c9f745d9bf474fbd216a3af40cfa
b88a34ec3167bf62a2a122cd95fbc8063f82b845
d224011c803afdbfabe52751a79df7459980fbb6f1a41944d47a24508dc11d0c
GET /p/action/17112753.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private,max-age=60
content-length: 667
content-type: application/javascript; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
set-cookie: MUID=171D540DA3556D7E1C42463EA2A06C60; domain=.bing.com; expires=Sun, 29-Oct-2023 11:45:19 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: ARR/3.0
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 3CB5877599F04329A975D92ED9175553 Ref B: OSL30EDGE0511 Ref C: 2022-10-04T11:45:19Z
date: Tue, 04 Oct 2022 11:45:19 GMT
X-Firefox-Spdy: h2
f.vimeocdn.com/p/4.11.3/js/module/sentry.js
200 OK 19 kB URL HTTP/2 f.vimeocdn.com/p/4.11.3/js/module/sentry.js
IP
File type ASCII text, with very long lines (50848)
Hash b910cfc607950bd4a9c55baa805e0bc4
5c4a2f829fd2253ecd994a38c56754fca907a8df
2bae4c1942e09c2e1175644b4a7deedf8737b4195e5fd3cc83a30c80edd01e6a
GET /p/4.11.3/js/module/sentry.js HTTP/1.1
Host: f.vimeocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 04 Oct 2022 11:45:19 GMT
age: 68617
x-served-by: cache-iad-kcgs7200135-IAD, cache-bma1681-BMA
x-cache: HIT, HIT
x-cache-hits: 16, 1944
x-timer: S1664883920.986086,VS0,VE0
vary: Accept-Encoding,x-http-method-override
cache-control: max-age=1209600
content-length: 18794
X-Firefox-Spdy: h2
i.vimeocdn.com/video/1517758964-37f6d0cec8daa30eba86dce5a250489685c5d03209a19c2c90b6fc03552446ff-d?mw=1200&mh=675
200 OK 39 kB URL HTTP/2 i.vimeocdn.com/video/1517758964-37f6d0cec8daa30eba86dce5a250489685c5d03209a19c2c90b6fc03552446ff-d?mw=1200&mh=675
IP
File type ISO Media, AVIF Image\012- data
Hash e05c2b8d4ba76bc50e1578edf19a44a3
2a6436210a9047debf90da5a202a1cad7a749f33
fb12d91e60b6b949711468279adbb293c06045f9b7be85a873b95d2ba7497587
GET /video/1517758964-37f6d0cec8daa30eba86dce5a250489685c5d03209a19c2c90b6fc03552446ff-d?mw=1200&mh=675 HTTP/1.1
Host: i.vimeocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/avif
etag: e05c2b8d4ba76bc50e1578edf19a44a3
x-viewmaster-lossless-format: automatic
viewmaster-server: viewmaster-us-central1-dpbn
cache-control: public, max-age=2592000
via: vvarnish, 1.1 varnish, 1.1 varnish
x-backend-server: varnish
access-control-allow-origin: *
access-control-expose-headers: X-Viewmaster-Status
access-control-max-age: 86400
accept-ranges: bytes
date: Tue, 04 Oct 2022 11:45:20 GMT
age: 348798
x-served-by: cache-dfw-kdfw8210072-DFW, cache-bma1681-BMA
x-cache: miss, HIT, MISS
x-cache-hits: 1, 0
x-timer: S1664883920.926059,VS0,VE125
vary: Accept
content-length: 39189
X-Firefox-Spdy: h2
js-agent.newrelic.com/nr-spa-1216.min.js
200 OK 18 kB URL HTTP/2 js-agent.newrelic.com/nr-spa-1216.min.js
IP
File type ASCII text, with very long lines (32010)
Hash 6561a2403142205f966207d61576f1a6
1310e72f494e12ab63a4280fc1600a2c89dc9bb8
0e496fcab0b9120938373e271fa6631b7da17adf33f8a490637467c170a3e37a
GET /nr-spa-1216.min.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: TAwVDFAylU9PwNPPW/eXC4UyIMC8EQ1d6JNW9Q+uXGnPmL1fuimq9M3lAe733gCMeKNDiCQX1YM=
x-amz-request-id: SYTECJR5CMD8NJ8E
last-modified: Thu, 14 Apr 2022 16:45:57 GMT
etag: "63e2df852d15ab21d7ff8fc4363222e8"
x-amz-version-id: UU.F5jvoumAjQChriwTQHbisCFw_OInU
content-type: application/javascript
server: AmazonS3
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Tue, 04 Oct 2022 11:45:20 GMT
via: 1.1 varnish
x-served-by: cache-bma1643-BMA
x-cache: HIT
x-cache-hits: 5567
x-timer: S1664883920.130962,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 18216
X-Firefox-Spdy: h2
analytics.tiktok.com/i18n/pixel/identify.js
200 OK 34 kB URL HTTP/2 analytics.tiktok.com/i18n/pixel/identify.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65536), with no line terminators
Hash b500c6e41404c55c554b2f6bac1ec89b
dc25c19687d9c88b32826c6d633075201021a765
7a93a697318c2320f031ec8fc5e5e2ff301f5e173746abf220b0082967f86b95
GET /i18n/pixel/identify.js HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
x-tt-logid: 20221004114519D9D3A7033C6CAF4258F1
x-tt-trace-host: 016eabbbec2a80a817c88fdee8d986cf6005720c6962fed5e357d9218e3edd7816d7b4616c5f33877deeb35615a0fa09d371672dbf3ddccaf59874e3df54ba96e724fa37ec0a3448869c1f0a5c75884360a4e1f4d579bf13ebcd1a1693a8ae11f5
content-encoding: gzip
x-origin-response-time: 7,23.218.223.15
x-akamai-request-id: 13835fa9.1bd2aad7
expires: Tue, 04 Oct 2022 11:45:19 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Tue, 04 Oct 2022 11:45:19 GMT
x-cache: TCP_MISS from a23-36-79-39.deploy.akamaitechnologies.com (AkamaiGHost/10.9.5-44356082) (-)
vary: Accept-Encoding
x-cache-remote: TCP_MISS from a23-218-223-15.deploy.akamaitechnologies.com (AkamaiGHost/10.9.5-44356082) (-)
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: cdn-cache; desc=MISS, edge; dur=102, origin; dur=7, inner; dur=4
x-parent-response-time: 108,23.36.79.39
X-Firefox-Spdy: h2
www.clarity.ms/tag/uet/17112753
200 OK 1.5 kB URL HTTP/2 www.clarity.ms/tag/uet/17112753
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with very long lines (1495), with no line terminators
Hash e37318681a876699b9a7a0aa32ba4f56
ea869b47d740561faaec5db079723e707bd5c54e
b697ae229df0d5bc0fb647227bccba759fba6f2f08dfe42b2414290c5aec85af
GET /tag/uet/17112753 HTTP/1.1
Host: www.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache, no-store
content-length: 1495
content-type: application/x-javascript
expires: -1
set-cookie: CLID=be284742a1a94e8f95e244f84aedf8f8.20221004.20231004; expires=Wed, 04 Oct 2023 11:45:20 GMT; path=/; secure; samesite=none; httponly
request-context: appId=cid-v1:67bc0b23-8423-4b52-b1ca-6a87709ceaa2
x-cache: CONFIG_NOCACHE
x-azure-ref: 00Bw8YwAAAABBEUJg1ri7SZxxNb1Ds//OT1NMMjMxMDUwMjA0MDA5ADZjZmJlZWUwLTUwMjctNDg0Yi04OTY3LTRhMjlhZjc3ZjFlMQ==
date: Tue, 04 Oct 2022 11:45:20 GMT
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 4672b109702058184d929f6a33f6948e
a289f28d4c9c9ce58e7452dd7b977a66c5ad6568
6d2e0c5e215890c8cc38c25b21c6d2bcb2804ff7899544d95f45a6a23bd646be
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2411
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 11:45:20 GMT
Last-Modified: Tue, 04 Oct 2022 11:05:09 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471
www.comfyballs.no/wp-content/cache/busting/google-tracking/ga-fda30e8a22c9bcd954fd8d0fadd0e77c.js
200 OK 20 kB URL HTTP/2 www.comfyballs.no/wp-content/cache/busting/google-tracking/ga-fda30e8a22c9bcd954fd8d0fadd0e77c.js
IP
Hash 5d96bc49d08323fa377e7cb7e0f10191
f923e115997e48800f311b1c9988911f14664cee
7d60992608973a4300f532a9d8120fcbb85199385018d666af0424c8250a307f
GET /wp-content/cache/busting/google-tracking/ga-fda30e8a22c9bcd954fd8d0fadd0e77c.js HTTP/1.1
Host: www.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/
Cookie: __kla_id=eyIkcmVmZXJyZXIiOnsidHMiOjE2NjQ4ODM5MTksInZhbHVlIjoiIiwiZmlyc3RfcGFnZSI6Imh0dHBzOi8vd3d3LmNvbWZ5YmFsbHMubm8vIn0sIiRsYXN0X3JlZmVycmVyIjp7InRzIjoxNjY0ODgzOTE5LCJ2YWx1ZSI6IiIsImZpcnN0X3BhZ2UiOiJodHRwczovL3d3dy5jb21meWJhbGxzLm5vLyJ9fQ==; _uetsid=0559b16043da11ed85d571759f98f8bc; _uetvid=0559977043da11edac8b231ade4c1997; nhgjsca-pw=1; nhgjsca-ref=direct; nhgjsca-landing=/; _tt_enable_cookie=1; _ttp=fd36fb98-3627-457e-a200-5e6f379ae561; _fbp=fb.1.1664883919358.280252309
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 04 Oct 2022 11:45:19 GMT
content-type: application/javascript
last-modified: Tue, 04 Oct 2022 01:31:59 GMT
vary: Accept-Encoding
etag: W/"633b8d0f-c436"
expires: Wed, 04 Oct 2023 11:45:19 GMT
cache-control: max-age=31536000
x-rocket-nginx-bypass: No
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 4672b109702058184d929f6a33f6948e
a289f28d4c9c9ce58e7452dd7b977a66c5ad6568
6d2e0c5e215890c8cc38c25b21c6d2bcb2804ff7899544d95f45a6a23bd646be
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2411
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 11:45:20 GMT
Last-Modified: Tue, 04 Oct 2022 11:05:09 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471
www.googletagmanager.com/gtag/js?id=AW-948460532&l=dataLayer&cx=c
200 OK 47 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=AW-948460532&l=dataLayer&cx=c
IP
File type ASCII text, with very long lines (2039)
Hash dafb31feb34cc42f26253ae8095a6604
d2c7502874bdd232990fc533c7ab5575f24b727a
b61b27de8247affe2fc178920d52180593f5596294624124dfb658b1599e34e1
GET /gtag/js?id=AW-948460532&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 04 Oct 2022 11:45:20 GMT
expires: Tue, 04 Oct 2022 11:45:20 GMT
cache-control: private, max-age=900
last-modified: Tue, 04 Oct 2022 09:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 46847
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
tr.snapchat.com/cm/i?pid=0b1a219a-b17c-4af4-b093-a1fce1299e92&u_scsid=61878100-0204-46e6-89d4-701eb2b599f4&u_sclid=e4c26096-f461-41bc-8a16-2e017776f70a
200 OK 0 B URL HTTP/2 tr.snapchat.com/cm/i?pid=0b1a219a-b17c-4af4-b093-a1fce1299e92&u_scsid=61878100-0204-46e6-89d4-701eb2b599f4&u_sclid=e4c26096-f461-41bc-8a16-2e017776f70a
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cm/i?pid=0b1a219a-b17c-4af4-b093-a1fce1299e92&u_scsid=61878100-0204-46e6-89d4-701eb2b599f4&u_sclid=e4c26096-f461-41bc-8a16-2e017776f70a HTTP/1.1
Host: tr.snapchat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 11:45:20 GMT
content-type: text/html
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-length: 0
x-envoy-upstream-service-time: 0
server: API Gateway
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 4672b109702058184d929f6a33f6948e
a289f28d4c9c9ce58e7452dd7b977a66c5ad6568
6d2e0c5e215890c8cc38c25b21c6d2bcb2804ff7899544d95f45a6a23bd646be
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2411
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 11:45:20 GMT
Last-Modified: Tue, 04 Oct 2022 11:05:09 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 5ba23234dfb31276cc3bf9a347508595
a225d0a9ecf5d7f0032816c6f3d4a5ae1f3b27a3
33558bed4856ac3f2a7267965521b316ccd3ccc669877994c6c590e2d2a1b559
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 11:45:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tr.snapchat.com/init?pids=0b1a219a-b17c-4af4-b093-a1fce1299e92
200 OK 988 B URL HTTP/2 tr.snapchat.com/init?pids=0b1a219a-b17c-4af4-b093-a1fce1299e92
IP
File type JSON data\012- , ASCII text, with very long lines (1461)
Hash 57f9771a5b56546f69eaa7b233ed5ead
f1870f32e92b924875f606b572259aed6e2e1640
1426f754c239acf84e95009f4bedfdc2772f02cae77ae2c476e9a03f3e157c09
GET /init?pids=0b1a219a-b17c-4af4-b093-a1fce1299e92 HTTP/1.1
Host: tr.snapchat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.comfyballs.no/
Origin: https://www.comfyballs.no
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 11:45:20 GMT
access-control-allow-origin: https://www.comfyballs.no
content-type: application/json
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-envoy-upstream-service-time: 0
content-encoding: gzip
vary: Accept-Encoding
server: API Gateway
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
apresolve.spotify.com/?type=dealer&type=spclient
200 OK 110 B URL HTTP/2 apresolve.spotify.com/?type=dealer&type=spclient
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash adad986c2ff077b69be014e75b10fc88
d9cc13fa9d20e5058271ce3f139d07894ae2bd0a
e0e4449d9c2174c0f2ee2c64418c7087efbaefd08eb00920eee5d81880cdfe4e
GET /?type=dealer&type=spclient HTTP/1.1
Host: apresolve.spotify.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://open.spotify.com/
Origin: https://open.spotify.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: application/json; charset=utf-8
cache-control: private, max-age=0
access-control-allow-origin: *
content-encoding: gzip
content-length: 110
date: Tue, 04 Oct 2022 11:45:20 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
bam.nr-data.net/1/689d5b4562?a=2815207&v=1216.487a282&to=NVVXNhYAWhJWBhVfCwwfcxcKAkAIWAtOQA0PVVpMBw5aFUUKDVoBEEMbDwUIWj5UCg9CFg1cWQcWW3kAXgspVwoGXFAQSgZRFQ%3D%3D&rst=1270&ck=1&ref=https://player.vimeo.com/video/755498509&ap=1&be=421&fe=1171&dc=538&af=err,xhr,stn,ins,spa&perf=%7B%22timing%22:%7B%22of%22:1664883918435,%22n%22:0,%22f%22:0,%22dn%22:13,%22dne%22:44,%22c%22:44,%22s%22:50,%22ce%22:70,%22rq%22:70,%22rp%22:316,%22rpe%22:317,%22dl%22:407,%22di%22:466,%22ds%22:538,%22de%22:538,%22dc%22:1170,%22l%22:1170,%22le%22:1171%7D,%22navigation%22:%7B%7D%7D&jsonp=NREUM.setToken
200 OK 77 B URL HTTP/1.1 bam.nr-data.net/1/689d5b4562?a=2815207&v=1216.487a282&to=NVVXNhYAWhJWBhVfCwwfcxcKAkAIWAtOQA0PVVpMBw5aFUUKDVoBEEMbDwUIWj5UCg9CFg1cWQcWW3kAXgspVwoGXFAQSgZRFQ%3D%3D&rst=1270&ck=1&ref=https://player.vimeo.com/video/755498509&ap=1&be=421&fe=1171&dc=538&af=err,xhr,stn,ins,spa&perf=%7B%22timing%22:%7B%22of%22:1664883918435,%22n%22:0,%22f%22:0,%22dn%22:13,%22dne%22:44,%22c%22:44,%22s%22:50,%22ce%22:70,%22rq%22:70,%22rp%22:316,%22rpe%22:317,%22dl%22:407,%22di%22:466,%22ds%22:538,%22de%22:538,%22dc%22:1170,%22l%22:1170,%22le%22:1171%7D,%22navigation%22:%7B%7D%7D&jsonp=NREUM.setToken
IP
File type ASCII text, with no line terminators
Hash f1442f5831dbbe0210da2d7a4180d6b8
2ade23c6c7a001c66f0c0a9a101ec152747b434e
c6acf9fb2ecc1b144c51bd0337bbf1c26db3df2f649ac2da5c56db20d93eb3ef
GET /1/689d5b4562?a=2815207&v=1216.487a282&to=NVVXNhYAWhJWBhVfCwwfcxcKAkAIWAtOQA0PVVpMBw5aFUUKDVoBEEMbDwUIWj5UCg9CFg1cWQcWW3kAXgspVwoGXFAQSgZRFQ%3D%3D&rst=1270&ck=1&ref=https://player.vimeo.com/video/755498509&ap=1&be=421&fe=1171&dc=538&af=err,xhr,stn,ins,spa&perf=%7B%22timing%22:%7B%22of%22:1664883918435,%22n%22:0,%22f%22:0,%22dn%22:13,%22dne%22:44,%22c%22:44,%22s%22:50,%22ce%22:70,%22rq%22:70,%22rp%22:316,%22rpe%22:317,%22dl%22:407,%22di%22:466,%22ds%22:538,%22de%22:538,%22dc%22:1170,%22l%22:1170,%22le%22:1171%7D,%22navigation%22:%7B%7D%7D&jsonp=NREUM.setToken HTTP/1.1
Host: bam.nr-data.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 04 Oct 2022 11:45:20 GMT
Content-Type: text/javascript
Transfer-Encoding: chunked
Connection: keep-alive
CF-Ray: 754dabb54bb10b55-OSL
Access-Control-Allow-Origin: *
Set-Cookie: JSESSIONID=c73209fa1e731f16; Path=/; Domain=.nr-data.net; Secure; SameSite=None
CF-Cache-Status: DYNAMIC
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS
Cross-Origin-Resource-Policy: cross-origin
Vary: Accept-Encoding
Server: cloudflare
Content-Encoding: gzip
open.spotifycdn.com/cdn/build/embed/298.bea3aa22.js
200 OK 42 kB URL HTTP/1.1 open.spotifycdn.com/cdn/build/embed/298.bea3aa22.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash ebaf0039af99162118bfcc2557790379
b4489993e8fc768d733eace7a1424dd4925be20a
86f690987bc90f18cfc7f1ec5a1e4fd84d6a760e627e0039411b628a17b755b3
GET /cdn/build/embed/298.bea3aa22.js HTTP/1.1
Host: open.spotifycdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://open.spotify.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 41863
Last-Modified: Tue, 13 Sep 2022 14:12:00 GMT
ETag: "ebaf0039af99162118bfcc2557790379"
x-goog-generation: 1663078320157937
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 41863
Content-Type: application/javascript
Content-Encoding: gzip
Accept-Ranges: bytes
Date: Tue, 04 Oct 2022 11:45:20 GMT
Age: 1805367
X-Served-By: cache-chi-klot8100049-CHI, cache-bma1655-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 1, 32431
Access-Control-Allow-Origin: https://open.spotify.com
Cache-Control: public, max-age=31536000
open.spotifycdn.com/cdn/build/embed/spotify_player_o.03d33e03.js
200 OK 8.1 kB URL HTTP/1.1 open.spotifycdn.com/cdn/build/embed/spotify_player_o.03d33e03.js
IP
File type ASCII text, with very long lines (30183)
Hash 46a704a9503c6ad54556b3bf6b120d14
2c89d20066da15351c1000787986f3ae4fb27325
ccfaa35702bade3f1d401ec8b9912878c86a6d6171a898822fc63ceea9f6d046
GET /cdn/build/embed/spotify_player_o.03d33e03.js HTTP/1.1
Host: open.spotifycdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://open.spotify.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 8134
Last-Modified: Fri, 23 Sep 2022 16:15:31 GMT
ETag: "46a704a9503c6ad54556b3bf6b120d14"
x-goog-generation: 1663949730958887
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 8134
Content-Type: application/javascript
Content-Encoding: gzip
Accept-Ranges: bytes
Date: Tue, 04 Oct 2022 11:45:20 GMT
Age: 933892
X-Served-By: cache-chi-kigq8000108-CHI, cache-bma1662-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 1, 17805
Access-Control-Allow-Origin: https://open.spotify.com
Cache-Control: public, max-age=31536000
www.clarity.ms/eus2/s/0.6.42/clarity.js
200 OK 23 kB URL HTTP/2 www.clarity.ms/eus2/s/0.6.42/clarity.js
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (54141)
Hash f016daac053b80575e11e20b6644142b
bc23277b8eae567b77c3dfc3f03b91fb054feda7
ee91529c076bf5e87a26b3c045e0b6e63326e6aa871dafea1c1509f73454123d
GET /eus2/s/0.6.42/clarity.js HTTP/1.1
Host: www.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public,max-age=86400
content-length: 23382
content-type: application/javascript;charset=utf-8
content-encoding: br
last-modified: Wed, 01 Jun 2022 12:22:22 GMT
accept-ranges: bytes
etag: "1d8d4495324d7d4"
vary: Accept-Encoding
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
x-cache: CONFIG_NOCACHE
x-azure-ref: 00Bw8YwAAAAAfJMY+s1RQTp/KU/OPWXiST1NMMjMxMDUwMjA0MDA5ADZjZmJlZWUwLTUwMjctNDg0Yi04OTY3LTRhMjlhZjc3ZjFlMQ==
date: Tue, 04 Oct 2022 11:45:20 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b45b15bb651cc185ea82d91a51f06b5a
44987727be72bb12b4e4fc4fac50145835512750
f0b61426de169cf2efde87ac98d5123ea785004ad05c05932a099b644b2fdf64
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 11:45:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/pagead/conversion_async.js
200 OK 15 kB URL HTTP/2 www.google.com/pagead/conversion_async.js
IP
File type ASCII text, with very long lines (1654)
Hash 8766c5a801f08afceca9b66ff9097e6a
ce7640d1d166eddeb9d40be642ec34652f790713
f448f99b4ad9a9b50daa9c38054cf16ab2b9fcb5d83ddad60571fb6a8a432a99
GET /pagead/conversion_async.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Tue, 04 Oct 2022 11:45:20 GMT
expires: Tue, 04 Oct 2022 11:45:20 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 17557423932572341828
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 15187
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 129fe858bf2aa7291fd2c6dd4cf9d226
e3e048b964b851ebbdcfb5bd80ebdbad13720cf6
addc7e4ddab73c8c7ee50f6d33fc1e4ff73b71cc014e481049a393c3b87b0924
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 11:45:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fb.comfyballs.no/events
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /events HTTP/1.1
Host: fb.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 895
Origin: https://www.comfyballs.no
Connection: keep-alive
Referer: https://www.comfyballs.no/
Cookie: _uetsid=0559b16043da11ed85d571759f98f8bc; _uetvid=0559977043da11edac8b231ade4c1997; _tt_enable_cookie=1; _ttp=fd36fb98-3627-457e-a200-5e6f379ae561; _fbp=fb.1.1664883919358.280252309; _ga=GA1.2.1888846549.1664883920; _gid=GA1.2.750681829.1664883920; _scid=7f1613fa-2b83-4f9d-866b-ea584739ace7; _gcl_au=1.1.535189772.1664883920; _clck=17vbhpj|1|f5f|0; _gat_gtag_UA_36031724_1=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 11:45:20 GMT
content-length: 0
vary: origin
access-control-allow-credentials: true
access-control-allow-origin: https://www.comfyballs.no
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
140vod-adaptive.akamaized.net/exp=1664887819~acl=%2F783e3cf7-7b93-431c-a8fd-69c234de1b13%2F%2A~hmac=e62bf8c2cb0c5e5e98c4a2d5308ea206caec1e709c38c5b7f27e1f93b1ca0675/783e3cf7-7b93-431c-a8fd-69c234de1b13/parcel/audio/66b77fb7.mp4?r=dXM%3D&range=790-144007
200 OK 143 kB URL HTTP/1.1 140vod-adaptive.akamaized.net/exp=1664887819~acl=%2F783e3cf7-7b93-431c-a8fd-69c234de1b13%2F%2A~hmac=e62bf8c2cb0c5e5e98c4a2d5308ea206caec1e709c38c5b7f27e1f93b1ca0675/783e3cf7-7b93-431c-a8fd-69c234de1b13/parcel/audio/66b77fb7.mp4?r=dXM%3D&range=790-144007
IP
ASN #20940 Akamai International B.V.
Size 143 kB (143218 bytes)
Hash 362fb31cfe49b74084d728213d8cf1e5
99246c7af3eaff4495c56a8818361934a054ff62
9c62503172411ef0ee4e2df183278f7f65765f5de428d266aeee156b1d137355
GET /exp=1664887819~acl=%2F783e3cf7-7b93-431c-a8fd-69c234de1b13%2F%2A~hmac=e62bf8c2cb0c5e5e98c4a2d5308ea206caec1e709c38c5b7f27e1f93b1ca0675/783e3cf7-7b93-431c-a8fd-69c234de1b13/parcel/audio/66b77fb7.mp4?r=dXM%3D&range=790-144007 HTTP/1.1
Host: 140vod-adaptive.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://player.vimeo.com
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Length: 143218
Last-Modified: Fri, 30 Sep 2022 10:46:51 GMT
Server: parcel
origin-retrieved-hour: 1664532000
Access-Control-Max-Age: 86400
timing-allow-origin: *
Aka-c-hit: cache-hit
Cache-Control: private, max-age=31187550
Expires: Sat, 30 Sep 2023 10:57:50 GMT
Date: Tue, 04 Oct 2022 11:45:20 GMT
Connection: keep-alive
Akamai-Mon-Iucid-Del: 877678
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
Content-Type: video/mp4
AK-REFERENCE-ID: 0.ac4c2417.1664883920.59db87
X-VIM-CACHEBC: EP:H11,E:h
Access-Control-Expose-Headers: Akamai-Edge-IP, X-VIM-CACHEBC, X-Akamai-Request-ID, AK-REFERENCE-ID
Akamai-Edge-IP: 23.36.76.176
Access-Control-Allow-Headers: Content-Type, Accept-Encoding, Range, X-OTT-Agent,CMCD-Request,CMCD-Object,CMCD-Status,CMCD-Session
Access-Control-Allow-Origin: *
Set-Cookie: aka_debug=cpcode:877678~clientip:91.90.42.154~ghostip:23.36.76.176~requestid:59db87~time:1664883920~ghostforwardip:~edgecache:cache-hit~rtt:1~region:NO-; path=/; domain=.akamaized.net;
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 53e0e5a2455fedae0d6308f91d41e445
237c2856f8a89ae3673ea909164557d65268c463
ddba9b3842f879168185b6607551069b312c44de4ec015ca4b43ad154d190bc8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 11:45:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
140vod-adaptive.akamaized.net/exp=1664887819~acl=%2F783e3cf7-7b93-431c-a8fd-69c234de1b13%2F%2A~hmac=e62bf8c2cb0c5e5e98c4a2d5308ea206caec1e709c38c5b7f27e1f93b1ca0675/783e3cf7-7b93-431c-a8fd-69c234de1b13/parcel/video/185671a3.mp4?r=dXMtY2VudHJhbDE%3D&range=902-246009
200 OK 245 kB URL HTTP/1.1 140vod-adaptive.akamaized.net/exp=1664887819~acl=%2F783e3cf7-7b93-431c-a8fd-69c234de1b13%2F%2A~hmac=e62bf8c2cb0c5e5e98c4a2d5308ea206caec1e709c38c5b7f27e1f93b1ca0675/783e3cf7-7b93-431c-a8fd-69c234de1b13/parcel/video/185671a3.mp4?r=dXMtY2VudHJhbDE%3D&range=902-246009
IP
ASN #20940 Akamai International B.V.
Size 245 kB (245108 bytes)
Hash c113e6411c3e2a84d6207d43b0170f3c
09e9c3a62c0509844f0269f96da882599901e76c
62933028b4c5e614b7aac6383ce380038271b109efd343bebdd6cfc5fed96bc0
GET /exp=1664887819~acl=%2F783e3cf7-7b93-431c-a8fd-69c234de1b13%2F%2A~hmac=e62bf8c2cb0c5e5e98c4a2d5308ea206caec1e709c38c5b7f27e1f93b1ca0675/783e3cf7-7b93-431c-a8fd-69c234de1b13/parcel/video/185671a3.mp4?r=dXMtY2VudHJhbDE%3D&range=902-246009 HTTP/1.1
Host: 140vod-adaptive.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://player.vimeo.com
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Length: 245108
Last-Modified: Fri, 30 Sep 2022 10:47:47 GMT
Server: parcel
origin-retrieved-hour: 1664532000
Access-Control-Max-Age: 86400
timing-allow-origin: *
Aka-c-hit: cache-hit
Cache-Control: private, max-age=31187178
Expires: Sat, 30 Sep 2023 10:51:38 GMT
Date: Tue, 04 Oct 2022 11:45:20 GMT
Connection: keep-alive
Akamai-Mon-Iucid-Del: 877678
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
Content-Type: video/mp4
AK-REFERENCE-ID: 0.ac4c2417.1664883920.59dba3
X-VIM-CACHEBC: EP:H11,E:h
Access-Control-Expose-Headers: Akamai-Edge-IP, X-VIM-CACHEBC, X-Akamai-Request-ID, AK-REFERENCE-ID
Akamai-Edge-IP: 23.36.76.176
Access-Control-Allow-Headers: Content-Type, Accept-Encoding, Range, X-OTT-Agent,CMCD-Request,CMCD-Object,CMCD-Status,CMCD-Session
Access-Control-Allow-Origin: *
Set-Cookie: aka_debug=cpcode:877678~clientip:91.90.42.154~ghostip:23.36.76.176~requestid:59dba3~time:1664883920~ghostforwardip:~edgecache:cache-hit~rtt:0~region:NO-; path=/; domain=.akamaized.net;
googleads.g.doubleclick.net/pagead/viewthroughconversion/948460532/?random=1664883920140&cv=9&fst=1664883920140&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oa9s0&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.comfyballs.no%2F&tiba=PREMIER%20LEAGUE%20%2F%2F%20A%20Whole%20New%20Ballgame%20-%20Comfyballs.no&auid=535189772.1664883920&hn=www.google.com&async=1&rfmt=3&fmt=4
200 OK 1.1 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/948460532/?random=1664883920140&cv=9&fst=1664883920140&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oa9s0&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.comfyballs.no%2F&tiba=PREMIER%20LEAGUE%20%2F%2F%20A%20Whole%20New%20Ballgame%20-%20Comfyballs.no&auid=535189772.1664883920&hn=www.google.com&async=1&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2348), with no line terminators
Hash d8a8bfbb0a6ae624e19aa23424f1afe5
db11a9c0fbdbf77cccc34e531e3a58d4db23c56a
ad043dde060044d685f4a20b3c2f95641c18f14e1493fb912ae7a9ac11080553
GET /pagead/viewthroughconversion/948460532/?random=1664883920140&cv=9&fst=1664883920140&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oa9s0&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.comfyballs.no%2F&tiba=PREMIER%20LEAGUE%20%2F%2F%20A%20Whole%20New%20Ballgame%20-%20Comfyballs.no&auid=535189772.1664883920&hn=www.google.com&async=1&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 04 Oct 2022 11:45:20 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 1067
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Tue, 04-Oct-2022 12:00:20 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 53e0e5a2455fedae0d6308f91d41e445
237c2856f8a89ae3673ea909164557d65268c463
ddba9b3842f879168185b6607551069b312c44de4ec015ca4b43ad154d190bc8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 11:45:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
140vod-adaptive.akamaized.net/exp=1664887819~acl=%2F783e3cf7-7b93-431c-a8fd-69c234de1b13%2F%2A~hmac=e62bf8c2cb0c5e5e98c4a2d5308ea206caec1e709c38c5b7f27e1f93b1ca0675/783e3cf7-7b93-431c-a8fd-69c234de1b13/parcel/video/43630202.mp4?r=dXMtZWFzdDE%3D&range=901-4624945
200 OK 4.6 MB URL HTTP/1.1 140vod-adaptive.akamaized.net/exp=1664887819~acl=%2F783e3cf7-7b93-431c-a8fd-69c234de1b13%2F%2A~hmac=e62bf8c2cb0c5e5e98c4a2d5308ea206caec1e709c38c5b7f27e1f93b1ca0675/783e3cf7-7b93-431c-a8fd-69c234de1b13/parcel/video/43630202.mp4?r=dXMtZWFzdDE%3D&range=901-4624945
IP
ASN #20940 Akamai International B.V.
Size 4.6 MB (4624045 bytes)
Hash f5b0c45923fe4954bf46630e85b87dc4
df20dd6ab7db552419042af05da190b4a9c93275
08af1dde15564348166ee741b732951f57ce01f50fa28f1f453d7fda154c3765
GET /exp=1664887819~acl=%2F783e3cf7-7b93-431c-a8fd-69c234de1b13%2F%2A~hmac=e62bf8c2cb0c5e5e98c4a2d5308ea206caec1e709c38c5b7f27e1f93b1ca0675/783e3cf7-7b93-431c-a8fd-69c234de1b13/parcel/video/43630202.mp4?r=dXMtZWFzdDE%3D&range=901-4624945 HTTP/1.1
Host: 140vod-adaptive.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://player.vimeo.com
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Length: 4624045
Last-Modified: Fri, 30 Sep 2022 10:48:49 GMT
Server: parcel
origin-retrieved-hour: 1664532000
Access-Control-Max-Age: 86400
timing-allow-origin: *
Aka-c-hit: cache-hit
Cache-Control: private, max-age=31187105
Expires: Sat, 30 Sep 2023 10:50:25 GMT
Date: Tue, 04 Oct 2022 11:45:20 GMT
Connection: keep-alive
Akamai-Mon-Iucid-Del: 877678
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
Content-Type: video/mp4
AK-REFERENCE-ID: 0.ac4c2417.1664883920.59dba7
X-VIM-CACHEBC: EP:H11,E:h
Access-Control-Expose-Headers: Akamai-Edge-IP, X-VIM-CACHEBC, X-Akamai-Request-ID, AK-REFERENCE-ID
Akamai-Edge-IP: 23.36.76.176
Access-Control-Allow-Headers: Content-Type, Accept-Encoding, Range, X-OTT-Agent,CMCD-Request,CMCD-Object,CMCD-Status,CMCD-Session
Access-Control-Allow-Origin: *
Set-Cookie: aka_debug=cpcode:877678~clientip:91.90.42.154~ghostip:23.36.76.176~requestid:59dba7~time:1664883920~ghostforwardip:~edgecache:cache-hit~rtt:1~region:NO-; path=/; domain=.akamaized.net;
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e13df37c7a0102aa69d97512e4f3bad4
2c3019bef2f4bc34b3f3dc212b30d4fad04f8b37
cfbc8bfd83a8eb63bf5d189e398e1373222f1d1bde223fba70e3c7b560c708aa
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 11:45:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
gew4-spclient.spotify.com/gabo-receiver-service/public/v3/events
200 OK 0 B URL HTTP/2 gew4-spclient.spotify.com/gabo-receiver-service/public/v3/events
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /gabo-receiver-service/public/v3/events HTTP/1.1
Host: gew4-spclient.spotify.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://open.spotify.com/
Origin: https://open.spotify.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
access-control-allow-origin: https://open.spotify.com
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,PATCH,POST,PUT,OPTIONS
access-control-allow-headers: Accept,Authorization,Origin,Content-Type,Spotify-App-Version,App-Platform,X-Spotify-Connection-Id,X-Client-Id,X-Spotify-Quicksilver-Uri,client-token,content-access-token,x-cloud-trace-context
access-control-max-age: 604800
vary: Accept-Encoding
date: Tue, 04 Oct 2022 11:45:20 GMT
server: envoy
content-length: 0
via: HTTP/2 edgeproxy, 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-36031724-1&cid=1888846549.1664883920&jid=1919840738&gjid=1298989862&_gid=750681829.1664883920&_u=aGBAAUIiQAAAACAAI~&z=295087930
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-36031724-1&cid=1888846549.1664883920&jid=1919840738&gjid=1298989862&_gid=750681829.1664883920&_u=aGBAAUIiQAAAACAAI~&z=295087930
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-36031724-1&cid=1888846549.1664883920&jid=1919840738&gjid=1298989862&_gid=750681829.1664883920&_u=aGBAAUIiQAAAACAAI~&z=295087930 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.comfyballs.no
Connection: keep-alive
Referer: https://www.comfyballs.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.comfyballs.no
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Tue, 04 Oct 2022 11:45:20 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/948460532/?random=1664883920140&cv=9&fst=1664881200000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oa9s0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.comfyballs.no%2F&tiba=PREMIER%20LEAGUE%20%2F%2F%20A%20Whole%20New%20Ballgame%20-%20Comfyballs.no&async=1&fmt=3&is_vtc=1&random=1447945762&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/948460532/?random=1664883920140&cv=9&fst=1664881200000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oa9s0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.comfyballs.no%2F&tiba=PREMIER%20LEAGUE%20%2F%2F%20A%20Whole%20New%20Ballgame%20-%20Comfyballs.no&async=1&fmt=3&is_vtc=1&random=1447945762&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/948460532/?random=1664883920140&cv=9&fst=1664881200000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oa9s0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.comfyballs.no%2F&tiba=PREMIER%20LEAGUE%20%2F%2F%20A%20Whole%20New%20Ballgame%20-%20Comfyballs.no&async=1&fmt=3&is_vtc=1&random=1447945762&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 04 Oct 2022 11:45:21 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
gew4-spclient.spotify.com/gabo-receiver-service/public/v3/events
200 OK 0 B URL HTTP/2 gew4-spclient.spotify.com/gabo-receiver-service/public/v3/events
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /gabo-receiver-service/public/v3/events HTTP/1.1
Host: gew4-spclient.spotify.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://open.spotify.com/
Origin: https://open.spotify.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
access-control-allow-origin: https://open.spotify.com
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,PATCH,POST,PUT,OPTIONS
access-control-allow-headers: Accept,Authorization,Origin,Content-Type,Spotify-App-Version,App-Platform,X-Spotify-Connection-Id,X-Client-Id,X-Spotify-Quicksilver-Uri,client-token,content-access-token,x-cloud-trace-context
access-control-max-age: 604800
vary: Accept-Encoding
date: Tue, 04 Oct 2022 11:45:20 GMT
server: envoy
content-length: 0
via: HTTP/2 edgeproxy, 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-36031724-1&cid=1888846549.1664883920&jid=1919840738&_u=aGBAAUIiQAAAACAAI~&z=1341215591
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-36031724-1&cid=1888846549.1664883920&jid=1919840738&_u=aGBAAUIiQAAAACAAI~&z=1341215591
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-36031724-1&cid=1888846549.1664883920&jid=1919840738&_u=aGBAAUIiQAAAACAAI~&z=1341215591 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 04 Oct 2022 11:45:21 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e13df37c7a0102aa69d97512e4f3bad4
2c3019bef2f4bc34b3f3dc212b30d4fad04f8b37
cfbc8bfd83a8eb63bf5d189e398e1373222f1d1bde223fba70e3c7b560c708aa
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 11:45:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
bam.nr-data.net/events/1/689d5b4562?a=2815207&v=1216.487a282&to=NVVXNhYAWhJWBhVfCwwfcxcKAkAIWAtOQA0PVVpMBw5aFUUKDVoBEEMbDwUIWj5UCg9CFg1cWQcWW3kAXgspVwoGXFAQSgZRFQ%3D%3D&rst=2028&ck=1&ref=https://player.vimeo.com/video/755498509
200 OK 24 B URL HTTP/1.1 bam.nr-data.net/events/1/689d5b4562?a=2815207&v=1216.487a282&to=NVVXNhYAWhJWBhVfCwwfcxcKAkAIWAtOQA0PVVpMBw5aFUUKDVoBEEMbDwUIWj5UCg9CFg1cWQcWW3kAXgspVwoGXFAQSgZRFQ%3D%3D&rst=2028&ck=1&ref=https://player.vimeo.com/video/755498509
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash bc32ed98d624acb4008f986349a20d26
2d3df8c11d2168ce2c27e0937421d11d85016361
0c9cf152a0ad00d4f102c93c613c104914be5517ac8f8e0831727f8bfbe8b300
POST /events/1/689d5b4562?a=2815207&v=1216.487a282&to=NVVXNhYAWhJWBhVfCwwfcxcKAkAIWAtOQA0PVVpMBw5aFUUKDVoBEEMbDwUIWj5UCg9CFg1cWQcWW3kAXgspVwoGXFAQSgZRFQ%3D%3D&rst=2028&ck=1&ref=https://player.vimeo.com/video/755498509 HTTP/1.1
Host: bam.nr-data.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: text/plain
Content-Length: 1230
Origin: https://player.vimeo.com
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 04 Oct 2022 11:45:21 GMT
Content-Type: image/gif
Content-Length: 24
Connection: keep-alive
CF-Ray: 754dabb9e87b0b55-OSL
Access-Control-Allow-Origin: https://player.vimeo.com
CF-Cache-Status: DYNAMIC
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS
Vary: Accept-Encoding
Server: cloudflare
gew4-spclient.spotify.com/gabo-receiver-service/public/v3/events
200 OK 39 B URL HTTP/2 gew4-spclient.spotify.com/gabo-receiver-service/public/v3/events
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash f204785b49c504e43101096fd3a80e31
e92466090f918c8f9c11268c9d0027fe269a90b6
873696e689e27bcfa5259ade21ceefea69203ec493901b0f4634b4f255981b29
POST /gabo-receiver-service/public/v3/events HTTP/1.1
Host: gew4-spclient.spotify.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://open.spotify.com/
content-type: application/json
Origin: https://open.spotify.com
Content-Length: 846
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
cache-control: private, max-age=0
access-control-allow-origin: https://open.spotify.com
content-encoding: gzip
content-length: 39
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
access-control-allow-credentials: true
date: Tue, 04 Oct 2022 11:45:20 GMT
server: envoy
via: HTTP/2 edgeproxy, 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
gew4-spclient.spotify.com/gabo-receiver-service/public/v3/events
200 OK 39 B URL HTTP/2 gew4-spclient.spotify.com/gabo-receiver-service/public/v3/events
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash f204785b49c504e43101096fd3a80e31
e92466090f918c8f9c11268c9d0027fe269a90b6
873696e689e27bcfa5259ade21ceefea69203ec493901b0f4634b4f255981b29
POST /gabo-receiver-service/public/v3/events HTTP/1.1
Host: gew4-spclient.spotify.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://open.spotify.com/
content-type: application/json
Origin: https://open.spotify.com
Content-Length: 1030
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
cache-control: private, max-age=0
access-control-allow-origin: https://open.spotify.com
content-encoding: gzip
content-length: 39
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
access-control-allow-credentials: true
date: Tue, 04 Oct 2022 11:45:20 GMT
server: envoy
via: HTTP/2 edgeproxy, 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
c.clarity.ms/c.gif
302 Found 236 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type gzip compressed data, from Unix\012- data
Hash 9227b78982092254f32299d98ae3edf8
3f155cb9d8c884f8be9e52a78db3ce5adc3ee4e4
eeca39840efa05e1bf3dce5cadb9b8f290cb05e1f0288594d5442d949473cd41
GET /c.gif HTTP/1.1
Host: c.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.bing.com/c.gif?CtsSyncId=3B9B28457CDC4EAF8A2F9C3B812B2314&RedC=c.clarity.ms&MXFR=06895B685D0C641C1DEA495B590C6A0C
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: SM=T; domain=c.clarity.ms; path=/; SameSite=None; Secure;
MUID=06895B685D0C641C1DEA495B590C6A0C; domain=.clarity.ms; expires=Sun, 29-Oct-2023 11:45:21 GMT; path=/; SameSite=None; Secure; Priority=High;
date: Tue, 04 Oct 2022 11:45:21 GMT
content-length: 0
X-Firefox-Spdy: h2
b.clarity.ms/collect
204 No Content 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /collect HTTP/1.1
Host: b.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 853
Origin: https://www.comfyballs.no
Connection: keep-alive
Referer: https://www.comfyballs.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: Microsoft-IIS/10.0
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
access-control-allow-origin: https://www.comfyballs.no
access-control-allow-credentials: true
date: Tue, 04 Oct 2022 11:45:20 GMT
X-Firefox-Spdy: h2
c.bing.com/c.gif?CtsSyncId=3B9B28457CDC4EAF8A2F9C3B812B2314&RedC=c.clarity.ms&MXFR=06895B685D0C641C1DEA495B590C6A0C
302 Found 0 B URL HTTP/2 c.bing.com/c.gif?CtsSyncId=3B9B28457CDC4EAF8A2F9C3B812B2314&RedC=c.clarity.ms&MXFR=06895B685D0C641C1DEA495B590C6A0C
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c.gif?CtsSyncId=3B9B28457CDC4EAF8A2F9C3B812B2314&RedC=c.clarity.ms&MXFR=06895B685D0C641C1DEA495B590C6A0C HTTP/1.1
Host: c.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.comfyballs.no/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.clarity.ms/c.gif?CtsSyncId=3B9B28457CDC4EAF8A2F9C3B812B2314&MUID=0A55A458435E66832D0DB66B42AB6723
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: SRM_B=0A55A458435E66832D0DB66B42AB6723; domain=c.bing.com; expires=Sun, 29-Oct-2023 11:45:21 GMT; path=/; SameSite=None; Secure;
x-powered-by: ASP.NET
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: D44741F2148B4988817D6362BE6F21A9 Ref B: OSL30EDGE0511 Ref C: 2022-10-04T11:45:21Z
date: Tue, 04 Oct 2022 11:45:20 GMT
content-length: 0
X-Firefox-Spdy: h2
gew4-spclient.spotify.com/gabo-receiver-service/public/v3/events
200 OK 39 B URL HTTP/2 gew4-spclient.spotify.com/gabo-receiver-service/public/v3/events
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash f204785b49c504e43101096fd3a80e31
e92466090f918c8f9c11268c9d0027fe269a90b6
873696e689e27bcfa5259ade21ceefea69203ec493901b0f4634b4f255981b29
POST /gabo-receiver-service/public/v3/events HTTP/1.1
Host: gew4-spclient.spotify.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://open.spotify.com/
content-type: application/json
Origin: https://open.spotify.com
Content-Length: 943
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
cache-control: private, max-age=0
access-control-allow-origin: https://open.spotify.com
content-encoding: gzip
content-length: 39
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
access-control-allow-credentials: true
date: Tue, 04 Oct 2022 11:45:21 GMT
server: envoy
via: HTTP/2 edgeproxy, 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
c.clarity.ms/c.gif?CtsSyncId=3B9B28457CDC4EAF8A2F9C3B812B2314&MUID=0A55A458435E66832D0DB66B42AB6723
200 OK 42 B URL HTTP/2 c.clarity.ms/c.gif?CtsSyncId=3B9B28457CDC4EAF8A2F9C3B812B2314&MUID=0A55A458435E66832D0DB66B42AB6723
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type GIF image data, version 89a, 1 x 1\012- data
Hash 32023bb33cfb2a1990a4ef2d85b6ac16
23dcc6d4b5bfe00357fd0248bb5955b8e36bb8f1
99c2917ee5b2a01459a923bdd1c676f15ee73b62b87f696e6735312d26f51e12
GET /c.gif?CtsSyncId=3B9B28457CDC4EAF8A2F9C3B812B2314&MUID=0A55A458435E66832D0DB66B42AB6723 HTTP/1.1
Host: c.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.comfyballs.no/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
content-type: image/gif
last-modified: Tue, 13 Sep 2022 19:54:52 GMT
accept-ranges: bytes
etag: "8d3298b0aac7d81:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: ANONCHK=0; domain=c.clarity.ms; expires=Tue, 04-Oct-2022 11:55:21 GMT; path=/; SameSite=None; Secure;
date: Tue, 04 Oct 2022 11:45:21 GMT
content-length: 42
X-Firefox-Spdy: h2
b.clarity.ms/collect
204 No Content 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /collect HTTP/1.1
Host: b.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 145844
Origin: https://www.comfyballs.no
Connection: keep-alive
Referer: https://www.comfyballs.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: Microsoft-IIS/10.0
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
access-control-allow-origin: https://www.comfyballs.no
access-control-allow-credentials: true
date: Tue, 04 Oct 2022 11:45:21 GMT
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F962fb2a2-ad40-48cf-87a7-de082c564a5e.jpeg
200 OK 8.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F962fb2a2-ad40-48cf-87a7-de082c564a5e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f2287c489794dab0e9ba923a2057988f
2b9f6828a38da81b40dcad033572e48b4c5896db
e853fa2acf2425d14cb9746e8bbd45c8765598d2bb630859086b4668182dbf6c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F962fb2a2-ad40-48cf-87a7-de082c564a5e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 8534
x-amzn-requestid: 8ae51cd3-697b-47ed-8493-8f83e2bc7469
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZcpHuHlXoAMFucg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633b5564-165d72034440cf810d42f3bd;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 21:34:28 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: LPt8LUVoKhXjfz-jZHLmnWD15tQgSLRaxl-Bsl0UU83G7wm3jj7_mg==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 ee330666adf9f04c8c30094f8ddcd004.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Oct 2022 21:44:34 GMT
age: 50449
etag: "2b9f6828a38da81b40dcad033572e48b4c5896db"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
apresolve.spotify.com/?type=dealer&type=spclient
200 OK 113 B URL HTTP/2 apresolve.spotify.com/?type=dealer&type=spclient
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 3506325f28c17b7a3e22a26b321901c8
da0c7ae1e1c488f25dd9878e4c6163152ad8567d
90f301c7e02bcd6b5572c7883f49bc09c5be7e02f6f2f17d1235e7cf16a4992c
GET /?type=dealer&type=spclient HTTP/1.1
Host: apresolve.spotify.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://open.spotify.com/
Origin: https://open.spotify.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
cache-control: private, max-age=0
access-control-allow-origin: *
content-encoding: gzip
content-length: 113
date: Tue, 04 Oct 2022 11:45:23 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.comfyballs.no/wp-content/cache/busting/9/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min-1638874946.js
200 OK 0 B URL HTTP/2 www.comfyballs.no/wp-content/cache/busting/9/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min-1638874946.js
IP
GET /wp-content/cache/busting/9/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min-1638874946.js HTTP/1.1
Host: www.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 04 Oct 2022 11:45:17 GMT
content-type: application/javascript
last-modified: Tue, 04 Oct 2022 01:31:59 GMT
vary: Accept-Encoding
etag: W/"633b8d0f-85b"
expires: Wed, 04 Oct 2023 11:45:17 GMT
cache-control: max-age=31536000
x-rocket-nginx-bypass: No
content-encoding: gzip
X-Firefox-Spdy: h2
www.comfyballs.no/wp-content/cache/min/9/wp-content/plugins/nhg-filter-products/assets/js/product-filter-e6f4ce4a36016b5893b0241f97a2a9ea.js
200 OK 0 B URL HTTP/2 www.comfyballs.no/wp-content/cache/min/9/wp-content/plugins/nhg-filter-products/assets/js/product-filter-e6f4ce4a36016b5893b0241f97a2a9ea.js
IP
GET /wp-content/cache/min/9/wp-content/plugins/nhg-filter-products/assets/js/product-filter-e6f4ce4a36016b5893b0241f97a2a9ea.js HTTP/1.1
Host: www.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 04 Oct 2022 11:45:17 GMT
content-type: application/javascript
last-modified: Tue, 04 Oct 2022 01:31:59 GMT
vary: Accept-Encoding
etag: W/"633b8d0f-21f9"
expires: Wed, 04 Oct 2023 11:45:17 GMT
cache-control: max-age=31536000
x-rocket-nginx-bypass: No
content-encoding: gzip
X-Firefox-Spdy: h2
encore.scdn.co/fonts/CircularSpTitle-Bold-2fbf72b606d7f0b0f771ea4956a8b4d6.woff2
200 OK 0 B URL HTTP/1.1 encore.scdn.co/fonts/CircularSpTitle-Bold-2fbf72b606d7f0b0f771ea4956a8b4d6.woff2
IP
GET /fonts/CircularSpTitle-Bold-2fbf72b606d7f0b0f771ea4956a8b4d6.woff2 HTTP/1.1
Host: encore.scdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://open.spotify.com
Connection: keep-alive
Referer: https://open.spotify.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 87344
Last-Modified: Thu, 19 May 2022 07:59:23 GMT
ETag: "db1a27b35e26398fef4be920ea96078d"
x-goog-generation: 1652947162999500
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 87344
Content-Type: font/woff2
Content-Encoding: gzip
Accept-Ranges: bytes
Date: Tue, 04 Oct 2022 11:45:19 GMT
Age: 7782407
X-Served-By: cache-ord1746-ORD, cache-chi-klot8100076-CHI, cache-bma1681-BMA
X-Cache: HIT, HIT, HIT
X-Cache-Hits: 1, 1, 101348
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=31536000
www.comfyballs.no/wp-content/cache/min/9/wp-content/plugins/woo-vipps/js/vipps-887688048220cd1b5c3a93c70e062464.js
200 OK 0 B URL HTTP/2 www.comfyballs.no/wp-content/cache/min/9/wp-content/plugins/woo-vipps/js/vipps-887688048220cd1b5c3a93c70e062464.js
IP
GET /wp-content/cache/min/9/wp-content/plugins/woo-vipps/js/vipps-887688048220cd1b5c3a93c70e062464.js HTTP/1.1
Host: www.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 04 Oct 2022 11:45:17 GMT
content-type: application/javascript
last-modified: Tue, 04 Oct 2022 01:31:59 GMT
vary: Accept-Encoding
etag: W/"633b8d0f-180e"
expires: Wed, 04 Oct 2023 11:45:17 GMT
cache-control: max-age=31536000
x-rocket-nginx-bypass: No
content-encoding: gzip
X-Firefox-Spdy: h2
tr.snapchat.com/collector/is_enabled?pids=0b1a219a-b17c-4af4-b093-a1fce1299e92&tld=no
200 OK 0 B URL HTTP/2 tr.snapchat.com/collector/is_enabled?pids=0b1a219a-b17c-4af4-b093-a1fce1299e92&tld=no
IP
GET /collector/is_enabled?pids=0b1a219a-b17c-4af4-b093-a1fce1299e92&tld=no HTTP/1.1
Host: tr.snapchat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.comfyballs.no/
Origin: https://www.comfyballs.no
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 11:45:20 GMT
access-control-allow-origin: https://www.comfyballs.no
content-type: application/json
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-envoy-upstream-service-time: 0
content-encoding: gzip
vary: Accept-Encoding
server: API Gateway
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.comfyballs.no/wp-content/cache/min/9/wp-content/plugins/nhg-mailchimp/assets/js/frontend-9c9e0168bb842a04fdd85ec285678e4e.js
200 OK 0 B URL HTTP/2 www.comfyballs.no/wp-content/cache/min/9/wp-content/plugins/nhg-mailchimp/assets/js/frontend-9c9e0168bb842a04fdd85ec285678e4e.js
IP
GET /wp-content/cache/min/9/wp-content/plugins/nhg-mailchimp/assets/js/frontend-9c9e0168bb842a04fdd85ec285678e4e.js HTTP/1.1
Host: www.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 04 Oct 2022 11:45:17 GMT
content-type: application/javascript
last-modified: Tue, 04 Oct 2022 01:31:59 GMT
vary: Accept-Encoding
etag: W/"633b8d0f-40e"
expires: Wed, 04 Oct 2023 11:45:17 GMT
cache-control: max-age=31536000
x-rocket-nginx-bypass: No
content-encoding: gzip
X-Firefox-Spdy: h2
www.comfyballs.no/wp-content/cache/busting/9/wp/wp-includes/js/dist/vendor/regenerator-runtime.min-1638874947.js
200 OK 0 B URL HTTP/2 www.comfyballs.no/wp-content/cache/busting/9/wp/wp-includes/js/dist/vendor/regenerator-runtime.min-1638874947.js
IP
GET /wp-content/cache/busting/9/wp/wp-includes/js/dist/vendor/regenerator-runtime.min-1638874947.js HTTP/1.1
Host: www.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 04 Oct 2022 11:45:17 GMT
content-type: application/javascript
last-modified: Tue, 04 Oct 2022 01:31:59 GMT
vary: Accept-Encoding
etag: W/"633b8d0f-1906"
expires: Wed, 04 Oct 2023 11:45:17 GMT
cache-control: max-age=31536000
x-rocket-nginx-bypass: No
content-encoding: gzip
X-Firefox-Spdy: h2
www.comfyballs.no/wp-content/cache/busting/9/wp/wp-includes/js/dist/vendor/wp-polyfill.min-1638874947.js
200 OK 0 B URL HTTP/2 www.comfyballs.no/wp-content/cache/busting/9/wp/wp-includes/js/dist/vendor/wp-polyfill.min-1638874947.js
IP
GET /wp-content/cache/busting/9/wp/wp-includes/js/dist/vendor/wp-polyfill.min-1638874947.js HTTP/1.1
Host: www.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 04 Oct 2022 11:45:17 GMT
content-type: application/javascript
last-modified: Tue, 04 Oct 2022 01:31:59 GMT
vary: Accept-Encoding
etag: W/"633b8d0f-4056"
expires: Wed, 04 Oct 2023 11:45:17 GMT
cache-control: max-age=31536000
x-rocket-nginx-bypass: No
content-encoding: gzip
X-Firefox-Spdy: h2
www.comfyballs.no/wp-content/cache/busting/9/wp/wp-includes/js/dist/hooks.min-1638874947.js
200 OK 0 B URL HTTP/2 www.comfyballs.no/wp-content/cache/busting/9/wp/wp-includes/js/dist/hooks.min-1638874947.js
IP
GET /wp-content/cache/busting/9/wp/wp-includes/js/dist/hooks.min-1638874947.js HTTP/1.1
Host: www.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 04 Oct 2022 11:45:17 GMT
content-type: application/javascript
last-modified: Tue, 04 Oct 2022 01:31:59 GMT
vary: Accept-Encoding
etag: W/"633b8d0f-1540"
expires: Wed, 04 Oct 2023 11:45:17 GMT
cache-control: max-age=31536000
x-rocket-nginx-bypass: No
content-encoding: gzip
X-Firefox-Spdy: h2
www.comfyballs.no/wp-content/cache/min/9/wp-content/themes/proto/js/defer-inline-js-c5f4326dbc809014a25d8dbb8388f92d.js
200 OK 0 B URL HTTP/2 www.comfyballs.no/wp-content/cache/min/9/wp-content/themes/proto/js/defer-inline-js-c5f4326dbc809014a25d8dbb8388f92d.js
IP
GET /wp-content/cache/min/9/wp-content/themes/proto/js/defer-inline-js-c5f4326dbc809014a25d8dbb8388f92d.js HTTP/1.1
Host: www.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 04 Oct 2022 11:45:17 GMT
content-type: application/javascript
last-modified: Tue, 04 Oct 2022 01:31:59 GMT
vary: Accept-Encoding
etag: W/"633b8d0f-b6"
expires: Wed, 04 Oct 2023 11:45:17 GMT
cache-control: max-age=31536000
x-rocket-nginx-bypass: No
content-encoding: gzip
X-Firefox-Spdy: h2
www.comfyballs.no/wp-content/plugins/wp-rocket/assets/js/lazyload/12.0/lazyload.min.js
200 OK 0 B URL HTTP/2 www.comfyballs.no/wp-content/plugins/wp-rocket/assets/js/lazyload/12.0/lazyload.min.js
IP
GET /wp-content/plugins/wp-rocket/assets/js/lazyload/12.0/lazyload.min.js HTTP/1.1
Host: www.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 04 Oct 2022 11:45:17 GMT
content-type: application/javascript
last-modified: Tue, 24 Nov 2020 08:31:44 GMT
vary: Accept-Encoding
etag: W/"5fbcc4f0-15d1"
expires: Wed, 04 Oct 2023 11:45:17 GMT
cache-control: max-age=31536000
x-rocket-nginx-bypass: No
content-encoding: gzip
X-Firefox-Spdy: h2
www.comfyballs.no/wp-content/themes/comfyballs/img/logo-dark.svg
200 OK 0 B URL HTTP/2 www.comfyballs.no/wp-content/themes/comfyballs/img/logo-dark.svg
IP
GET /wp-content/themes/comfyballs/img/logo-dark.svg HTTP/1.1
Host: www.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 04 Oct 2022 11:45:17 GMT
content-type: image/svg+xml
last-modified: Tue, 29 Jun 2021 07:54:18 GMT
vary: Accept-Encoding
etag: W/"60dad1aa-3dfd"
expires: Wed, 04 Oct 2023 11:45:17 GMT
cache-control: max-age=31536000
x-rocket-nginx-bypass: No
content-encoding: gzip
X-Firefox-Spdy: h2
www.comfyballs.no/wp-content/cache/busting/9/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min-1638874946.js
200 OK 0 B URL HTTP/2 www.comfyballs.no/wp-content/cache/busting/9/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min-1638874946.js
IP
GET /wp-content/cache/busting/9/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min-1638874946.js HTTP/1.1
Host: www.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 04 Oct 2022 11:45:17 GMT
content-type: application/javascript
last-modified: Tue, 04 Oct 2022 01:31:59 GMT
vary: Accept-Encoding
etag: W/"633b8d0f-72a"
expires: Wed, 04 Oct 2023 11:45:17 GMT
cache-control: max-age=31536000
x-rocket-nginx-bypass: No
content-encoding: gzip
X-Firefox-Spdy: h2
www.comfyballs.no/wp-content/cache/busting/9/wp-content/themes/proto/js/jquery.countdown.min-1624953258.js
200 OK 0 B URL HTTP/2 www.comfyballs.no/wp-content/cache/busting/9/wp-content/themes/proto/js/jquery.countdown.min-1624953258.js
IP
GET /wp-content/cache/busting/9/wp-content/themes/proto/js/jquery.countdown.min-1624953258.js HTTP/1.1
Host: www.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 04 Oct 2022 11:45:17 GMT
content-type: application/javascript
last-modified: Tue, 04 Oct 2022 01:31:59 GMT
vary: Accept-Encoding
etag: W/"633b8d0f-14db"
expires: Wed, 04 Oct 2023 11:45:17 GMT
cache-control: max-age=31536000
x-rocket-nginx-bypass: No
content-encoding: gzip
X-Firefox-Spdy: h2
www.comfyballs.no/wp-content/cache/min/9/wp-content/plugins/nhg-klaviyo/assets/js/identify-browser-0d157c01fb5ed89060ff72337ae8945e.js
200 OK 0 B URL HTTP/2 www.comfyballs.no/wp-content/cache/min/9/wp-content/plugins/nhg-klaviyo/assets/js/identify-browser-0d157c01fb5ed89060ff72337ae8945e.js
IP
GET /wp-content/cache/min/9/wp-content/plugins/nhg-klaviyo/assets/js/identify-browser-0d157c01fb5ed89060ff72337ae8945e.js HTTP/1.1
Host: www.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 04 Oct 2022 11:45:17 GMT
content-type: application/javascript
last-modified: Tue, 04 Oct 2022 01:31:59 GMT
vary: Accept-Encoding
etag: W/"633b8d0f-187"
expires: Wed, 04 Oct 2023 11:45:17 GMT
cache-control: max-age=31536000
x-rocket-nginx-bypass: No
content-encoding: gzip
X-Firefox-Spdy: h2
www.comfyballs.no/wp-content/cache/busting/9/wp/wp-includes/js/jquery/jquery.min-1638874947.js
200 OK 0 B URL HTTP/2 www.comfyballs.no/wp-content/cache/busting/9/wp/wp-includes/js/jquery/jquery.min-1638874947.js
IP
GET /wp-content/cache/busting/9/wp/wp-includes/js/jquery/jquery.min-1638874947.js HTTP/1.1
Host: www.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 04 Oct 2022 11:45:17 GMT
content-type: application/javascript
last-modified: Tue, 04 Oct 2022 01:31:59 GMT
vary: Accept-Encoding
etag: W/"633b8d0f-15db1"
expires: Wed, 04 Oct 2023 11:45:17 GMT
cache-control: max-age=31536000
x-rocket-nginx-bypass: No
content-encoding: gzip
X-Firefox-Spdy: h2
www.comfyballs.no/wp-content/cache/busting/9/wp-content/plugins/nhg-js-cookie-analytics/js/url.min-1606206701.js
200 OK 0 B URL HTTP/2 www.comfyballs.no/wp-content/cache/busting/9/wp-content/plugins/nhg-js-cookie-analytics/js/url.min-1606206701.js
IP
GET /wp-content/cache/busting/9/wp-content/plugins/nhg-js-cookie-analytics/js/url.min-1606206701.js HTTP/1.1
Host: www.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 04 Oct 2022 11:45:17 GMT
content-type: application/javascript
last-modified: Tue, 04 Oct 2022 01:31:59 GMT
vary: Accept-Encoding
etag: W/"633b8d0f-793"
expires: Wed, 04 Oct 2023 11:45:17 GMT
cache-control: max-age=31536000
x-rocket-nginx-bypass: No
content-encoding: gzip
X-Firefox-Spdy: h2
www.comfyballs.no/wp-content/cache/min/9/wp-content/plugins/nhg-js-cookie-analytics/js/nhgjsca-9b29bc31c7f94a25c96bf8bc611e5607.js
200 OK 0 B URL HTTP/2 www.comfyballs.no/wp-content/cache/min/9/wp-content/plugins/nhg-js-cookie-analytics/js/nhgjsca-9b29bc31c7f94a25c96bf8bc611e5607.js
IP
GET /wp-content/cache/min/9/wp-content/plugins/nhg-js-cookie-analytics/js/nhgjsca-9b29bc31c7f94a25c96bf8bc611e5607.js HTTP/1.1
Host: www.comfyballs.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.comfyballs.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 04 Oct 2022 11:45:17 GMT
content-type: application/javascript
last-modified: Tue, 04 Oct 2022 01:31:59 GMT
vary: Accept-Encoding
etag: W/"633b8d0f-28f"
expires: Wed, 04 Oct 2023 11:45:17 GMT
cache-control: max-age=31536000
x-rocket-nginx-bypass: No
content-encoding: gzip
X-Firefox-Spdy: h2
95.211.219.66
151.101.86.133
162.159.138.60
23.36.79.43
142.250.74.3
93.184.220.29