xlaxiata.com/
301 Moved Permanently 121 B IP
File type HTML document text\012- HTML document, ASCII text, with no line terminators
Hash 1c557a7421fdacc33f46f415d4e408c0
46645fbff712715b70445856396493e6cbea28f8
6b14f61f3e8c896cc5c14513dbf7d71fd3a0c737734be10523d10cd0bca1739d
GET / HTTP/1.1
Host: xlaxiata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: openresty
Date: Thu, 23 Mar 2023 10:34:28 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Permitted-Cross-Domain-Policies: none
Referrer-Policy: strict-origin-when-cross-origin
Location: https://dan.com/buy-domain/xlaxiata.com?redirected=true
Cache-Control: no-cache
X-Request-Id: a3b9dbfd-b0f3-4404-84b0-b7170947cb53
X-Runtime: 0.050478
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 65fc860bc043f3fb83bdc3debdcd322d
418010755deae099ef1284e402813c5837a10f42
d93d50c523c7f735987aba09db628259441eb75efe713a2df3c214e1fb8b5171
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D93D50C523C7F735987ABA09DB628259441EB75EFE713A2DF3C214E1FB8B5171"
Last-Modified: Wed, 22 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5493
Expires: Thu, 23 Mar 2023 12:06:01 GMT
Date: Thu, 23 Mar 2023 10:34:28 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bea3185dd820a31c1981317f37c3456d
1a548a5d27270fc11df9011837a7149571cedd78
469b97bf9f57401b3c9571039483589f2815f4794212b75c7c85cfefe0ae71e9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "469B97BF9F57401B3C9571039483589F2815F4794212B75C7C85CFEFE0AE71E9"
Last-Modified: Wed, 22 Mar 2023 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17385
Expires: Thu, 23 Mar 2023 15:24:13 GMT
Date: Thu, 23 Mar 2023 10:34:28 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash bc86ef2a0cee04915bc360f5821adc8f
3658f9028cce204d38f7f48fcfaa2a8e4f54383a
aeecd718d03811322457de4f20828bdba86b277e7e0e328cae9c0a8075638454
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Backoff, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 23 Mar 2023 10:27:32 GMT
content-type: application/json
age: 416
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dc2752d83fbed82852248898a132467a
b27a6b4af2e07663a58cafb641513f7224c7a7c3
ea7838393d83805a7b8a2b01bd09e4423617c4da285b983a11e9ba36266810d5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EA7838393D83805A7B8A2B01BD09E4423617C4DA285B983A11E9BA36266810D5"
Last-Modified: Wed, 22 Mar 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3813
Expires: Thu, 23 Mar 2023 11:38:01 GMT
Date: Thu, 23 Mar 2023 10:34:28 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
IP
File type PEM certificate\012- , ASCII text
Hash e7bace7c1e04d44012e37ddffe36e5d5
3ac8d7c0a9d3e3f0b28b2530c7b8d8407b4042c2
6b4f80f2e95b26f6122ea8dcd0ef8d762299be822c69e839fc37581ca2bcb5f2
GET /chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: D4WNh7VrQNesZTSvVR27Hk0ZINKfKXn0sb2IpK0IP5ciFsS85TDEwem/c+I3KfrZQRIMHGu3OpcIKpJZAc22aA==
x-amz-request-id: 4ZP16SV0B6TWGWDW
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 23 Mar 2023 09:59:54 GMT
age: 2074
last-modified: Sat, 11 Mar 2023 16:53:15 GMT
etag: "e7bace7c1e04d44012e37ddffe36e5d5"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 23 Mar 2023 10:34:28 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
widget.trustpilot.com/bootstrap/v5/tp.widget.bootstrap.min.js
200 OK 6.1 kB URL HTTP/2 widget.trustpilot.com/bootstrap/v5/tp.widget.bootstrap.min.js
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (19239)
Hash 5add60196e5f96a414fb4b9586764e5d
633f471b3c2fcedeef9cad90cb5bf56f5fe55588
5370f4ba91dda790c7cae92817b812fcbd1ab367cbb4862f5669960ae4e2c9e0
GET /bootstrap/v5/tp.widget.bootstrap.min.js HTTP/1.1
Host: widget.trustpilot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dan.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/x-javascript
content-length: 6124
last-modified: Mon, 30 May 2022 14:38:02 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
date: Thu, 23 Mar 2023 01:27:03 GMT
cache-control: max-age=86400
etag: "5add60196e5f96a414fb4b9586764e5d"
x-cache: Hit from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 64p7Uv18cmdM4pzV4mswGQpgec_7syWpI7cB2Be2UluwmIx5C6PwvQ==
age: 32845
X-Firefox-Spdy: h2
cdn2.dan.com/packs/js/runtime~public/shared-1b01634fd7ca21c7761f.js
200 OK 791 B URL HTTP/2 cdn2.dan.com/packs/js/runtime~public/shared-1b01634fd7ca21c7761f.js
IP
File type ASCII text, with very long lines (1516)
Hash d18255e3cc9ecfa4f5c70d603a3c8fed
4de182dd29bc01585447226e2f1c70398e356602
b61a2b54e8af031bd5c36a6b586aba19bbc704cf9a9431dd2c377257c4b64079
GET /packs/js/runtime~public/shared-1b01634fd7ca21c7761f.js HTTP/1.1
Host: cdn2.dan.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dan.com/
Connection: keep-alive
Cookie: _ga=GA1.2.1015506207.1652829834; _ga_MEVZPVX8WY=GS1.1.1653978938.1.1.1653979303.39; _ga_WXD346M1LN=GS1.1.1654106413.1.0.1654106421.0; _ga_H4YBREXJT6=GS1.1.1654382557.1.0.1654382563.0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 791
server: openresty
date: Sun, 12 Mar 2023 05:46:04 GMT
last-modified: Fri, 10 Mar 2023 13:05:45 GMT
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: _iFuJusK1CHTddfzEIs6HGT-ljrcgB-L2-V02i5T-jytzvRcm0-hHg==
age: 967704
X-Firefox-Spdy: h2
cdn2.dan.com/assets/public/trustpilot-logo-0c24ebada3a61a0fbab3ad699317a1224d0d7cb662136acbaf3411d0efa9f66b.png
200 OK 4.2 kB URL HTTP/2 cdn2.dan.com/assets/public/trustpilot-logo-0c24ebada3a61a0fbab3ad699317a1224d0d7cb662136acbaf3411d0efa9f66b.png
IP
File type PNG image data, 270 x 66, 8-bit/color RGBA, non-interlaced\012- data
Hash 18907774a48bbf9c3e0a1cc915a0d870
7c434b9d7e66d861c54aa7805b7abaaa6d18bcf9
008df92415278c07b98aab23d543867b3eb67c71c794afef0a84823cd7cc0df2
GET /assets/public/trustpilot-logo-0c24ebada3a61a0fbab3ad699317a1224d0d7cb662136acbaf3411d0efa9f66b.png HTTP/1.1
Host: cdn2.dan.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dan.com/
Connection: keep-alive
Cookie: _ga=GA1.2.1015506207.1652829834; _ga_MEVZPVX8WY=GS1.1.1653978938.1.1.1653979303.39; _ga_WXD346M1LN=GS1.1.1654106413.1.0.1654106421.0; _ga_H4YBREXJT6=GS1.1.1654382557.1.0.1654382563.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 4185
server: openresty
date: Thu, 23 Feb 2023 10:12:45 GMT
last-modified: Tue, 21 Feb 2023 14:00:39 GMT
strict-transport-security: max-age=31536000; includeSubDomains
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 5OF6lzmIF0XqoI-Tua4_C59UAim5GA2cdMTZNMRLp9dYJMLjPfeuRw==
age: 2420503
X-Firefox-Spdy: h2
cdn2.dan.com/assets/vendor/svg4everybody-1f5a41bf858a5454d7923542e3380530fc2c4faaaf6ab58f29da7c6b2ebe2313.js
200 OK 982 B URL HTTP/2 cdn2.dan.com/assets/vendor/svg4everybody-1f5a41bf858a5454d7923542e3380530fc2c4faaaf6ab58f29da7c6b2ebe2313.js
IP
File type ASCII text, with very long lines (1896), with no line terminators
Hash 7a32766f88f930804d6e293eca162c97
07393045684497b9c7c482af8bc6ea0909eaa6c1
5ccd098c90b550d5aea2d6ade393850d7f8a2d20db75595c1012af78fc002cb8
GET /assets/vendor/svg4everybody-1f5a41bf858a5454d7923542e3380530fc2c4faaaf6ab58f29da7c6b2ebe2313.js HTTP/1.1
Host: cdn2.dan.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dan.com/
Connection: keep-alive
Cookie: _ga=GA1.2.1015506207.1652829834; _ga_MEVZPVX8WY=GS1.1.1653978938.1.1.1653979303.39; _ga_WXD346M1LN=GS1.1.1654106413.1.0.1654106421.0; _ga_H4YBREXJT6=GS1.1.1654382557.1.0.1654382563.0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 982
server: openresty
date: Thu, 23 Feb 2023 10:13:49 GMT
last-modified: Tue, 21 Feb 2023 14:00:40 GMT
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: cWsYtjSieqFbcO85IedHe0ec7vdDdMy5mFA-Gu8nN1jjTiyA0ZrPXA==
age: 2420439
X-Firefox-Spdy: h2
cdn2.dan.com/packs/js/7-de4ffb688cefe6541bf0.chunk.js
200 OK 65 kB URL HTTP/2 cdn2.dan.com/packs/js/7-de4ffb688cefe6541bf0.chunk.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash b520eeebb583d60e9f271e3473d3219e
aaeb655ad9c47e605f8f762d6b532ed260462055
dbc5bfa996d6bd4f2a29ecb99c435e88901332d1052e7d49e30d42e0230a5108
GET /packs/js/7-de4ffb688cefe6541bf0.chunk.js HTTP/1.1
Host: cdn2.dan.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dan.com/
Connection: keep-alive
Cookie: _ga=GA1.2.1015506207.1652829834; _ga_MEVZPVX8WY=GS1.1.1653978938.1.1.1653979303.39; _ga_WXD346M1LN=GS1.1.1654106413.1.0.1654106421.0; _ga_H4YBREXJT6=GS1.1.1654382557.1.0.1654382563.0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 65352
server: openresty
date: Thu, 16 Mar 2023 09:55:50 GMT
last-modified: Thu, 16 Mar 2023 09:44:47 GMT
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: qUMEsCkGMAujVz82QeS3piEoxtNeeZ14gAVrLyMzCGsjvnnBSo96cQ==
age: 607118
X-Firefox-Spdy: h2
cdn2.dan.com/packs/js/runtime~public/product-c65bfa3764bffa252c98.js
200 OK 790 B URL HTTP/2 cdn2.dan.com/packs/js/runtime~public/product-c65bfa3764bffa252c98.js
IP
File type ASCII text, with very long lines (1516)
Hash d88ffb17ab99053667006c8883d5e450
4373074213f211ee8abf6644b4e4597158330bbc
5577ef30226735b167e13addab55661ffcb4f5e262f879c4f8fa23ef74266bad
GET /packs/js/runtime~public/product-c65bfa3764bffa252c98.js HTTP/1.1
Host: cdn2.dan.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dan.com/
Connection: keep-alive
Cookie: _ga=GA1.2.1015506207.1652829834; _ga_MEVZPVX8WY=GS1.1.1653978938.1.1.1653979303.39; _ga_WXD346M1LN=GS1.1.1654106413.1.0.1654106421.0; _ga_H4YBREXJT6=GS1.1.1654382557.1.0.1654382563.0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 790
server: openresty
date: Tue, 24 Jan 2023 01:29:37 GMT
last-modified: Mon, 23 Jan 2023 13:20:04 GMT
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 62FjkSSyChZuJac50bU408HjZI_9eTjuHvXOcpTHtkOfhAp0RVRJjg==
age: 5043891
X-Firefox-Spdy: h2
cdn2.dan.com/packs/js/public/product-11929eacea26b1ec4502.chunk.js
200 OK 65 kB URL HTTP/2 cdn2.dan.com/packs/js/public/product-11929eacea26b1ec4502.chunk.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 1879610a45a2a299545c5d5dfb15de0b
8361bb06edf480a7eee42cd76ab38df0dc1e273e
4523e7fbe50cd9de947d1403bb2337d12193090422c4032c16f52b1b5e1de214
GET /packs/js/public/product-11929eacea26b1ec4502.chunk.js HTTP/1.1
Host: cdn2.dan.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dan.com/
Connection: keep-alive
Cookie: _ga=GA1.2.1015506207.1652829834; _ga_MEVZPVX8WY=GS1.1.1653978938.1.1.1653979303.39; _ga_WXD346M1LN=GS1.1.1654106413.1.0.1654106421.0; _ga_H4YBREXJT6=GS1.1.1654382557.1.0.1654382563.0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 65180
server: openresty
date: Thu, 23 Mar 2023 09:58:57 GMT
last-modified: Tue, 21 Mar 2023 13:47:08 GMT
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: MtK2cgyJ3Sr68Xbu5BXhr9bZD5-j9iSt1XAf-AiihLx2dg-ZdlrqoA==
age: 2131
X-Firefox-Spdy: h2
cdn3.dan.com/assets/public/i18n-5cb6b07d5b73faf36a127e2ae39b1a6549e699600bfdf97bc9fa3164861062fc.js
200 OK 4.4 kB URL HTTP/2 cdn3.dan.com/assets/public/i18n-5cb6b07d5b73faf36a127e2ae39b1a6549e699600bfdf97bc9fa3164861062fc.js
IP
File type ASCII text, with very long lines (15400), with no line terminators
Hash 237460200745329a05f5d23b00feeec9
730d45ece2a03e9641d3a510872d84233b62ae12
b273cc553f8153e5e7702cdb182e19d87680740716a1ec1642cb6284818acacc
GET /assets/public/i18n-5cb6b07d5b73faf36a127e2ae39b1a6549e699600bfdf97bc9fa3164861062fc.js HTTP/1.1
Host: cdn3.dan.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dan.com/
Connection: keep-alive
Cookie: _ga=GA1.2.1015506207.1652829834; _ga_MEVZPVX8WY=GS1.1.1653978938.1.1.1653979303.39; _ga_WXD346M1LN=GS1.1.1654106413.1.0.1654106421.0; _ga_H4YBREXJT6=GS1.1.1654382557.1.0.1654382563.0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 4434
server: openresty
date: Thu, 23 Feb 2023 10:12:51 GMT
last-modified: Tue, 21 Feb 2023 14:00:40 GMT
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: FJ1Ccn-KTCJIIfx2y2iazxPM2XwKfZFRGhuIpP9bLPsLN6lP0UEFaQ==
age: 2420497
X-Firefox-Spdy: h2
cdn0.dan.com/packs/js/8-86be82eea8a939b48bf4.chunk.js
200 OK 3.8 kB URL HTTP/2 cdn0.dan.com/packs/js/8-86be82eea8a939b48bf4.chunk.js
IP
File type ASCII text, with very long lines (10731)
Hash 44f2f8c0adc5cddda3fc2f64e59efaa1
c193e2137abf980f83786c0cfa594a52bfb209c7
7584067bebb85eafff0be2c7c474f27c25ffec9651263343f72e2a941f1860ea
GET /packs/js/8-86be82eea8a939b48bf4.chunk.js HTTP/1.1
Host: cdn0.dan.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dan.com/
Connection: keep-alive
Cookie: _ga=GA1.2.1015506207.1652829834; _ga_MEVZPVX8WY=GS1.1.1653978938.1.1.1653979303.39; _ga_WXD346M1LN=GS1.1.1654106413.1.0.1654106421.0; _ga_H4YBREXJT6=GS1.1.1654382557.1.0.1654382563.0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 3848
server: openresty
date: Thu, 16 Mar 2023 09:52:55 GMT
last-modified: Thu, 16 Mar 2023 09:44:47 GMT
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Yoj7lPKgjm5xno6-NM1_zIli0CqX_UmDUmEPNap-4MwJQH0go0wYLA==
age: 607293
X-Firefox-Spdy: h2
cdn3.dan.com/packs/js/public/fonts-1a48d89fd26abf6fe780.chunk.js
200 OK 439 B URL HTTP/2 cdn3.dan.com/packs/js/public/fonts-1a48d89fd26abf6fe780.chunk.js
IP
File type ASCII text, with very long lines (622)
Hash a945e425a2f0281f5272811a3b583435
d3c61ed6496894a93c91a4a298f7ab30232a96b7
e28786d72f5e29b15664937c14da01863e4622d4ab4c68b112f3b63ead7de190
GET /packs/js/public/fonts-1a48d89fd26abf6fe780.chunk.js HTTP/1.1
Host: cdn3.dan.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dan.com/
Connection: keep-alive
Cookie: _ga=GA1.2.1015506207.1652829834; _ga_MEVZPVX8WY=GS1.1.1653978938.1.1.1653979303.39; _ga_WXD346M1LN=GS1.1.1654106413.1.0.1654106421.0; _ga_H4YBREXJT6=GS1.1.1654382557.1.0.1654382563.0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 439
server: openresty
date: Thu, 16 Mar 2023 09:55:29 GMT
last-modified: Thu, 16 Mar 2023 09:44:47 GMT
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: OEkw-AvmATzLBE5ivCkv7Uq2xDK94ySidpSAiS65PmTYE_ozy5uxaw==
age: 607139
X-Firefox-Spdy: h2
cdn0.dan.com/packs/js/runtime~public/fonts-2fe2dda32aa2d2a2aa67.js
200 OK 786 B URL HTTP/2 cdn0.dan.com/packs/js/runtime~public/fonts-2fe2dda32aa2d2a2aa67.js
IP
File type ASCII text, with very long lines (1516)
Hash b4464e4bebd8bf1006970b2339df46bd
cf15b2248586735b8fdd81e49f13ec5c9e3193c3
fdaf7679528d5a78e2f74b0bbf1072113cef66f31303156c26333f1de1f58ad8
GET /packs/js/runtime~public/fonts-2fe2dda32aa2d2a2aa67.js HTTP/1.1
Host: cdn0.dan.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dan.com/
Connection: keep-alive
Cookie: _ga=GA1.2.1015506207.1652829834; _ga_MEVZPVX8WY=GS1.1.1653978938.1.1.1653979303.39; _ga_WXD346M1LN=GS1.1.1654106413.1.0.1654106421.0; _ga_H4YBREXJT6=GS1.1.1654382557.1.0.1654382563.0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 786
server: openresty
date: Mon, 23 Jan 2023 13:21:34 GMT
last-modified: Mon, 23 Jan 2023 13:20:04 GMT
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: FlW4G-E2DSwnoe0-akXtzuA3An4vQuUQ9ChCcPIQurH_eI1yrwn-Wg==
age: 5087574
X-Firefox-Spdy: h2
cdn0.dan.com/assets/public-38aca3fa401d5672ddf67270ebc0394e2d374a7c6c745c452acf7c3afb141df5.css
200 OK 70 kB URL HTTP/2 cdn0.dan.com/assets/public-38aca3fa401d5672ddf67270ebc0394e2d374a7c6c745c452acf7c3afb141df5.css
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (65533), with no line terminators
Hash cf06a8939ac69589b09bcf427edccc63
d532196523124c3641cf97d40f23b0e631e3d220
b8bfc44c659a58f335f88468a7b29dd967580d34b8f28e32bcc30dc518af5b4a
GET /assets/public-38aca3fa401d5672ddf67270ebc0394e2d374a7c6c745c452acf7c3afb141df5.css HTTP/1.1
Host: cdn0.dan.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dan.com/
Connection: keep-alive
Cookie: _ga=GA1.2.1015506207.1652829834; _ga_MEVZPVX8WY=GS1.1.1653978938.1.1.1653979303.39; _ga_WXD346M1LN=GS1.1.1654106413.1.0.1654106421.0; _ga_H4YBREXJT6=GS1.1.1654382557.1.0.1654382563.0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: text/css
content-length: 70423
server: openresty
date: Tue, 21 Mar 2023 14:23:42 GMT
last-modified: Tue, 21 Mar 2023 14:12:22 GMT
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: KMqb0WEMvibIP1eOCpankoxP4tnbkLtI_EYnV8-nCa2bNWVOhf2xOA==
age: 159046
X-Firefox-Spdy: h2
cdn1.dan.com/packs/js/3-11ef8f862ad8cae35983.chunk.js
200 OK 56 kB URL HTTP/2 cdn1.dan.com/packs/js/3-11ef8f862ad8cae35983.chunk.js
IP
File type ASCII text, with very long lines (65450)
Hash 1bd33511f23649de9f29ebbcfd08a9a1
7feb5cefd4ecd39bda97ecbeb5c34702d8695e7b
0d60f83cdc1c69e2b3ed7a0b91ccd148b9c99cd2800c504497d8049943f5256b
GET /packs/js/3-11ef8f862ad8cae35983.chunk.js HTTP/1.1
Host: cdn1.dan.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dan.com/
Connection: keep-alive
Cookie: _ga=GA1.2.1015506207.1652829834; _ga_MEVZPVX8WY=GS1.1.1653978938.1.1.1653979303.39; _ga_WXD346M1LN=GS1.1.1654106413.1.0.1654106421.0; _ga_H4YBREXJT6=GS1.1.1654382557.1.0.1654382563.0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 55650
server: openresty
date: Wed, 08 Mar 2023 08:35:57 GMT
last-modified: Wed, 08 Mar 2023 08:23:05 GMT
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: KypRhQT5Kd8-X6BtsSvRwx9tBNwT3BU_kp8lvhToZHK68tFQrc29dA==
age: 1303111
X-Firefox-Spdy: h2
ocsp.r2m01.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.r2m01.amazontrust.com/
IP
Hash dc511818420c78ad1faa7e578bb500e3
711361fcd56a81aed9ac8d6517deec45509be5fd
ea78c7989249176dbb3cc3359012f36c4c074c0030301ca64d9882d6846c6bdc
POST / HTTP/1.1
Host: ocsp.r2m01.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=98602
Date: Thu, 23 Mar 2023 10:34:28 GMT
Etag: "641af0db-1d7"
Expires: Fri, 24 Mar 2023 13:57:50 GMT
Last-Modified: Wed, 22 Mar 2023 12:13:15 GMT
Server: ECAcc (nya/78C0)
X-Cache: Miss from cloudfront
Via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: X6oypsou_ggHrHl9fRuoKHmDkixpYTr4SmhxaE_5vXw_E-DdqG9JCQ==
Age: 6275
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Last-Modified, Content-Length, Pragma, Expires, ETag, Backoff, Alert, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 23 Mar 2023 10:14:33 GMT
age: 1195
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
cdn2.dan.com/packs/js/public/shared-9204474748694f4bc399.chunk.js
200 OK 479 B URL HTTP/2 cdn2.dan.com/packs/js/public/shared-9204474748694f4bc399.chunk.js
IP
File type ASCII text, with very long lines (1221)
Hash a706b1ddff374553f266541cbc84e377
7b723206b9e866d2afae4555d648977ba6d4edd9
a3243d7feebbbadb30d9c412a721d770ae5be0a4466441d25274b8213b4c35c1
GET /packs/js/public/shared-9204474748694f4bc399.chunk.js HTTP/1.1
Host: cdn2.dan.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dan.com/
Connection: keep-alive
Cookie: _ga=GA1.2.1015506207.1652829834; _ga_MEVZPVX8WY=GS1.1.1653978938.1.1.1653979303.39; _ga_WXD346M1LN=GS1.1.1654106413.1.0.1654106421.0; _ga_H4YBREXJT6=GS1.1.1654382557.1.0.1654382563.0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 479
server: openresty
date: Thu, 16 Mar 2023 09:52:55 GMT
last-modified: Thu, 16 Mar 2023 09:44:47 GMT
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 06UahetYrtMf6RgKN4ajyRrfj2ooerYTfYhgE_C80rcK45OEQpPX_Q==
age: 607293
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 23c054d3aee551b6fdc42a5a472a7040
b1a46c12ac7d65c979fd1998bdb243f3dba8f956
9e8b91ab91da9ea20dfb5f90c1c06239d2872b0eb80785534d0c59c3b51de404
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 23 Mar 2023 10:34:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtm.js?id=GTM-SXRF&l=_gaDataLayer
200 OK 40 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-SXRF&l=_gaDataLayer
IP
File type ASCII text, with very long lines (3336)
Hash 0d7cbca8143b5f2b57bad0a5d90e4f4a
c4d8f211f4b89a4681e06f7b3f2f381ce339c693
af17a02721d09f57e452b57710f9c9f637cc397aed1eb0304776966c623d7c3f
GET /gtm.js?id=GTM-SXRF&l=_gaDataLayer HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dan.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 23 Mar 2023 10:34:29 GMT
expires: Thu, 23 Mar 2023 10:34:29 GMT
cache-control: private, max-age=900
last-modified: Thu, 23 Mar 2023 09:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 40246
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 23c054d3aee551b6fdc42a5a472a7040
b1a46c12ac7d65c979fd1998bdb243f3dba8f956
9e8b91ab91da9ea20dfb5f90c1c06239d2872b0eb80785534d0c59c3b51de404
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 23 Mar 2023 10:34:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn3.dan.com/assets/logos/Main@2x-46c106d351853c036fe1a9ea927f19ae6e199c26272c60c71dad4077ba5bf335.svg
200 OK 12 kB URL HTTP/2 cdn3.dan.com/assets/logos/Main@2x-46c106d351853c036fe1a9ea927f19ae6e199c26272c60c71dad4077ba5bf335.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (4396)
Hash 386fcff0359a238feae3616089163f60
3861370145d1176cdbeb8d44c70638efd49507e7
0d2a786abd69d2da0f8ab1f105c0da3b8e1baf5c46c13169d6aa5b4c5fea7379
GET /assets/logos/Main@2x-46c106d351853c036fe1a9ea927f19ae6e199c26272c60c71dad4077ba5bf335.svg HTTP/1.1
Host: cdn3.dan.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn0.dan.com/
Cookie: _ga=GA1.2.1015506207.1652829834; _ga_MEVZPVX8WY=GS1.1.1653978938.1.1.1653979303.39; _ga_WXD346M1LN=GS1.1.1654106413.1.0.1654106421.0; _ga_H4YBREXJT6=GS1.1.1654382557.1.0.1654382563.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 11658
server: openresty
date: Thu, 09 Mar 2023 05:15:27 GMT
last-modified: Tue, 21 Feb 2023 14:00:38 GMT
strict-transport-security: max-age=63072000; includeSubDomains
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: CopCYdZ2CWdpxW1dSgSXWBAwrArQyHd9bOAPAKD_BWQ311Hk64aKOQ==
age: 1228742
X-Firefox-Spdy: h2
cdn0.dan.com/assets/public/payment_logos-59054f5b1680bf22696ff46e8efca71737c0e19a2be88d040f2b45ac1343567d.png
200 OK 3.2 kB URL HTTP/2 cdn0.dan.com/assets/public/payment_logos-59054f5b1680bf22696ff46e8efca71737c0e19a2be88d040f2b45ac1343567d.png
IP
File type PNG image data, 272 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 1a20ff7a7df04a852f968c5c988dd6fa
260328a70eeb31d942e6bf3afdc3ba0abf9534f7
5e4dce7612e404dab090fbee14ac1eddd1c710bfce7d22ee87411662934a7387
GET /assets/public/payment_logos-59054f5b1680bf22696ff46e8efca71737c0e19a2be88d040f2b45ac1343567d.png HTTP/1.1
Host: cdn0.dan.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn0.dan.com/assets/public-38aca3fa401d5672ddf67270ebc0394e2d374a7c6c745c452acf7c3afb141df5.css
Cookie: _ga=GA1.2.1015506207.1652829834; _ga_MEVZPVX8WY=GS1.1.1653978938.1.1.1653979303.39; _ga_WXD346M1LN=GS1.1.1654106413.1.0.1654106421.0; _ga_H4YBREXJT6=GS1.1.1654382557.1.0.1654382563.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 3181
server: openresty
date: Thu, 23 Feb 2023 10:44:37 GMT
last-modified: Tue, 21 Feb 2023 14:00:39 GMT
strict-transport-security: max-age=31536000; includeSubDomains
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: eCpjzIm7VoaCyJreut5PdVgYBtxGSetOn_SifXlNZGxQed2Nz6EJsg==
age: 2418592
X-Firefox-Spdy: h2
cdn3.dan.com/assets/GraphikDan-Semibold-Web-0f41cae3a242b38a760ec60c3d0c3882d4c2bc318a8fb0dea97e362bc5e009fe.woff2
200 OK 42 kB URL HTTP/2 cdn3.dan.com/assets/GraphikDan-Semibold-Web-0f41cae3a242b38a760ec60c3d0c3882d4c2bc318a8fb0dea97e362bc5e009fe.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 42052, version 1.0\012- data
Hash 7d992431ee5e40d98d9ab99cb5cde954
3e82b380c81c2f83e143e4bb1a4437903c689f05
560a9afe1c7efc78932e5a841e202476c7af320d0aec9d916cc2f065243cfcfc
GET /assets/GraphikDan-Semibold-Web-0f41cae3a242b38a760ec60c3d0c3882d4c2bc318a8fb0dea97e362bc5e009fe.woff2 HTTP/1.1
Host: cdn3.dan.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://dan.com
Connection: keep-alive
Referer: https://cdn0.dan.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/font-woff2
content-length: 42052
server: openresty
date: Sun, 12 Mar 2023 02:30:06 GMT
last-modified: Tue, 21 Feb 2023 14:00:40 GMT
strict-transport-security: max-age=63072000; includeSubDomains
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: h4Z6zOgRUdnNCFibRQJZjnS8QPrBzQWnBeyDfZUotH4swuevAXO9rg==
age: 979463
X-Firefox-Spdy: h2
cdn1.dan.com/assets/GraphikDan-Regular-Web-3d6859522e94ea684004514b5a900f8a0219dbb06be9271a359abd95c4f1df0a.woff2
200 OK 37 kB URL HTTP/2 cdn1.dan.com/assets/GraphikDan-Regular-Web-3d6859522e94ea684004514b5a900f8a0219dbb06be9271a359abd95c4f1df0a.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 37172, version 1.0\012- data
Hash 6b2f88dd1fc37ad2228bc4b0e12bb011
088cd68a9ce402835ff00e8e2c8ef2ccf4081a3b
1b23e0d886e0602443c35df66f69cf1560710913bf88b512ed9cea147fccf0b6
GET /assets/GraphikDan-Regular-Web-3d6859522e94ea684004514b5a900f8a0219dbb06be9271a359abd95c4f1df0a.woff2 HTTP/1.1
Host: cdn1.dan.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://dan.com
Connection: keep-alive
Referer: https://cdn0.dan.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/font-woff2
content-length: 37172
server: openresty
date: Sat, 11 Mar 2023 20:20:42 GMT
last-modified: Tue, 21 Feb 2023 14:00:40 GMT
strict-transport-security: max-age=63072000; includeSubDomains
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: webcaUnAm5vYqT-w3ZNa_1OrTtJyR_bI5qAf5AbafxhEROmDM6QdcQ==
age: 1001627
X-Firefox-Spdy: h2
cdn3.dan.com/assets/GraphikDan-Bold-Web-eac93a2bef84e2b8c9c68c73a18e42867ba0de882874c00483dc28c328622b2f.woff2
200 OK 39 kB URL HTTP/2 cdn3.dan.com/assets/GraphikDan-Bold-Web-eac93a2bef84e2b8c9c68c73a18e42867ba0de882874c00483dc28c328622b2f.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 38556, version 1.0\012- data
Hash 15e0a4e9b6fc2834eec6ccba1973aa45
080a7126b7fb4063ea36c06beca3ebfdc4cc63ef
11f7002d7b0e45f73367bf8e4f5763dc6a7f8f7d6be4f29f26650f13480a5f6a
GET /assets/GraphikDan-Bold-Web-eac93a2bef84e2b8c9c68c73a18e42867ba0de882874c00483dc28c328622b2f.woff2 HTTP/1.1
Host: cdn3.dan.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://dan.com
Connection: keep-alive
Referer: https://cdn0.dan.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/font-woff2
content-length: 38556
server: openresty
date: Mon, 13 Mar 2023 01:20:15 GMT
last-modified: Tue, 21 Feb 2023 14:00:40 GMT
strict-transport-security: max-age=63072000; includeSubDomains
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: F4yGqqrZ8y2JerpT39fpP0_AMMyYvwT2AAQ0tfyVONZJLn3lMkxYlA==
age: 897254
X-Firefox-Spdy: h2
cdn2.dan.com/assets/GraphikDan-Medium-Web-f6517986e1663e1d662e482993a3c08363c352936be7ccfac953c7674304d71e.woff2
200 OK 36 kB URL HTTP/2 cdn2.dan.com/assets/GraphikDan-Medium-Web-f6517986e1663e1d662e482993a3c08363c352936be7ccfac953c7674304d71e.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 36308, version 1.0\012- data
Hash 47f09a78e5d17d771fb06bc91e174499
b335fe0226d224782678ff7bea49773993e6f052
cf2e4f4feea57b2fb89e83ed56fc49bc0bf21a4f1fa20afe2e83d745c8890fc3
GET /assets/GraphikDan-Medium-Web-f6517986e1663e1d662e482993a3c08363c352936be7ccfac953c7674304d71e.woff2 HTTP/1.1
Host: cdn2.dan.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://dan.com
Connection: keep-alive
Referer: https://cdn0.dan.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/font-woff2
content-length: 36308
server: openresty
date: Sat, 11 Mar 2023 10:18:01 GMT
last-modified: Tue, 21 Feb 2023 14:00:40 GMT
strict-transport-security: max-age=63072000; includeSubDomains
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: KGG4gdi2781Q6e40HH88XfPnPrBBFyXhN3SMNRw_Vr3RT53UXQbgPA==
age: 1037788
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 050ca4dc2182e0a27573b0d9f32b7834
bec14dc5af0d0b32210470673511acd8db404308
b6129b9d1848f75265dca4446c5399927bdaf15c7b49c083765847b0fe276eaf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B6129B9D1848F75265DCA4446C5399927BDAF15C7B49C083765847B0FE276EAF"
Last-Modified: Wed, 22 Mar 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19181
Expires: Thu, 23 Mar 2023 15:54:10 GMT
Date: Thu, 23 Mar 2023 10:34:29 GMT
Connection: keep-alive
cdn3.dan.com/assets/icons/touch-icon-ipad-retina-84ac34f64df88dd80da5e4aafaec29e3416f6a1d65f0f7e57e1cab3c64aba363.png
200 OK 3.1 kB URL HTTP/2 cdn3.dan.com/assets/icons/touch-icon-ipad-retina-84ac34f64df88dd80da5e4aafaec29e3416f6a1d65f0f7e57e1cab3c64aba363.png
IP
File type PNG image data, 152 x 152, 8-bit/color RGBA, non-interlaced\012- data
Hash 0c59777f5725af9a1d2d9153da1d7176
bc06fbcbf2170fe049279b7a1b6003eef8d6986a
56a8f2519ed554a55e6084d77c1ab7ef3511f8ed5e7877db50a9865621a79290
GET /assets/icons/touch-icon-ipad-retina-84ac34f64df88dd80da5e4aafaec29e3416f6a1d65f0f7e57e1cab3c64aba363.png HTTP/1.1
Host: cdn3.dan.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dan.com/
Connection: keep-alive
Cookie: _ga=GA1.2.1015506207.1652829834; _ga_MEVZPVX8WY=GS1.1.1653978938.1.1.1653979303.39; _ga_WXD346M1LN=GS1.1.1654106413.1.0.1654106421.0; _ga_H4YBREXJT6=GS1.1.1654382557.1.0.1654382563.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 3054
server: openresty
date: Thu, 23 Feb 2023 10:13:32 GMT
last-modified: Tue, 21 Feb 2023 14:00:38 GMT
strict-transport-security: max-age=31536000; includeSubDomains
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: E4yxPJYYBnGIYf1yocs9jWn7icbkzDZab5gHSYpjnd7MRbdmnK2U8g==
age: 2420457
X-Firefox-Spdy: h2
cdn0.dan.com/assets/icons/favicon-8f8be32076803305bd39913d14e9f28567adc474d60a95af6e0d21282302ce6a.ico
200 OK 15 kB URL HTTP/2 cdn0.dan.com/assets/icons/favicon-8f8be32076803305bd39913d14e9f28567adc474d60a95af6e0d21282302ce6a.ico
IP
File type MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel\012- data
Hash 91b5b75e4f52df43982200873c1feef6
8a01193959229d10a361d4965e305490544c428c
17cae8213bf0fbeae27b644f0616b74981f348af943f27b73abf8e7b3a557b8f
GET /assets/icons/favicon-8f8be32076803305bd39913d14e9f28567adc474d60a95af6e0d21282302ce6a.ico HTTP/1.1
Host: cdn0.dan.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dan.com/
Connection: keep-alive
Cookie: _ga=GA1.2.1015506207.1652829834; _ga_MEVZPVX8WY=GS1.1.1653978938.1.1.1653979303.39; _ga_WXD346M1LN=GS1.1.1654106413.1.0.1654106421.0; _ga_H4YBREXJT6=GS1.1.1654382557.1.0.1654382563.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/vnd.microsoft.icon
content-length: 15406
server: openresty
date: Thu, 23 Feb 2023 10:13:50 GMT
last-modified: Tue, 21 Feb 2023 14:00:38 GMT
strict-transport-security: max-age=31536000; includeSubDomains
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: F8ktea20IIUek2255zjqT8LWBKx4c7LO41Qd-RA5lK7TpUPiQaB2nA==
age: 2420439
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dan.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Thu, 23 Mar 2023 10:05:11 GMT
expires: Thu, 23 Mar 2023 12:05:11 GMT
cache-control: public, max-age=7200
age: 1758
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5cd8c9b1a21861daf74c130682cea34e
32ceecbbe8fdfc999e4169771cf7633fdaa1f083
328369b9dcb3b3b19b031dd350a02c7cbe5fb250ba4748bf8d055da5342f0837
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 23 Mar 2023 10:34:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-47793354-2&cid=1015506207.1652829834&jid=1610748443&gjid=894640330&_gid=914511032.1679567677&_u=YCDAgEABAAAAAEAAI~&z=1254890881
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-47793354-2&cid=1015506207.1652829834&jid=1610748443&gjid=894640330&_gid=914511032.1679567677&_u=YCDAgEABAAAAAEAAI~&z=1254890881
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-47793354-2&cid=1015506207.1652829834&jid=1610748443&gjid=894640330&_gid=914511032.1679567677&_u=YCDAgEABAAAAAEAAI~&z=1254890881 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dan.com/
Content-Type: text/plain
Content-Length: 0
Origin: https://dan.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://dan.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Thu, 23 Mar 2023 10:34:29 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
widget.intercom.io/widget/e2frgfyw
200 OK 3.3 kB URL HTTP/2 widget.intercom.io/widget/e2frgfyw
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (8520), with no line terminators
Hash 77cb939aaad9181aa31ff2babf58d9b8
8b0ade1f9a18d4b625949373c447a901b55a65a7
a13e4bbf2ddd4f162c052f182de93853f7fd5776206c51b90abce0b75cacc8eb
GET /widget/e2frgfyw HTTP/1.1
Host: widget.intercom.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dan.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 3265
last-modified: Wed, 22 Mar 2023 15:05:13 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
x-amz-version-id: CJAcizWtaNnAXXPlU90yBqSs86lF9zZc
accept-ranges: bytes
server: AmazonS3
date: Thu, 23 Mar 2023 10:19:09 GMT
cache-control: max-age=900, s-maxage=900, public
etag: "77cb939aaad9181aa31ff2babf58d9b8"
x-cache: Error from cloudfront
via: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: DdeFPQWkIS-dG9DhqW7_pFniZKxxd6E8FvhqZFd7C5RlTp71AbUhBA==
age: 1147
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: nMEcsg8kvdDcqqcMmIGzAw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 89pyS637BSpxYI0y55Er40q5dgg=
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5cd8c9b1a21861daf74c130682cea34e
32ceecbbe8fdfc999e4169771cf7633fdaa1f083
328369b9dcb3b3b19b031dd350a02c7cbe5fb250ba4748bf8d055da5342f0837
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 23 Mar 2023 10:34:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
img6.wsimg.com/wrhs/bfce28b11f6e2a6eb5450a872f4c6cc2/tcc.min.js
200 OK 30 kB URL HTTP/2 img6.wsimg.com/wrhs/bfce28b11f6e2a6eb5450a872f4c6cc2/tcc.min.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65536), with no line terminators
Hash 30993c84124390a5d81aae27645fe3c5
14a44407bd6198c0eeb39cb26627b27352c91e48
36381d6afee58dbfbbf943399699561524f190d6bdcf431071311e79e899abbd
GET /wrhs/bfce28b11f6e2a6eb5450a872f4c6cc2/tcc.min.js HTTP/1.1
Host: img6.wsimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dan.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
accept-ranges: bytes
content-encoding: br
etag: "bfce28b11f6e2a6eb5450a872f4c6cc2"
last-modified: Wed, 08 Mar 2023 20:24:49 GMT
vary: Accept-Encoding
x-amz-id-2: jWn6gtvOGi/5SElB52RWz9NyTh2WikZffBcILG9a4HUPT5GIH9Wb4zwpoWL07WXK59AwBb9lXW4=
x-amz-request-id: ZS4YPHJ2B4CD2C7D
x-amz-server-side-encryption: AES256
x-amz-version-id: rQ_p4yIgE_QHqAdSBRiu6yCLzBO9O8Zi
content-length: 29758
cache-control: max-age=31536000
date: Thu, 23 Mar 2023 10:34:29 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc="466546_1600457340_32509963_27_1067_2_0";dur=1
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2
js.intercomcdn.com/frame.a1a37c6c.js
200 OK 144 kB URL HTTP/2 js.intercomcdn.com/frame.a1a37c6c.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Size 144 kB (144031 bytes)
Hash 1037b12b9b1d3b05551cd3cc45dc2d7e
4fc1a1b05f670f87676e971253d8663a1c2c5be4
e334e40af6b3efede8b1c282e0b897b78628d7a33f24a5102eccb98a150ca6a0
GET /frame.a1a37c6c.js HTTP/1.1
Host: js.intercomcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dan.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 144031
last-modified: Wed, 22 Mar 2023 15:02:41 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
x-amz-version-id: PJ4QptkmTcEX4S2JrxBt93akBXqm71yQ
accept-ranges: bytes
server: AmazonS3
date: Thu, 23 Mar 2023 09:12:44 GMT
cache-control: max-age=31536000, s-maxage=7200, public
etag: "1037b12b9b1d3b05551cd3cc45dc2d7e"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: Mw8NsZlECohDuRPwkoZFaaUA_boNudOpY3pw3kV-C2jDyZUMim1xBw==
age: 4906
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2
img6.wsimg.com/wrhs/ce554d2333f3801abafb32da18213ff7/tti.min.js
200 OK 7.5 kB URL HTTP/2 img6.wsimg.com/wrhs/ce554d2333f3801abafb32da18213ff7/tti.min.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (24676)
Hash b8a5a228a358454084c34dd1cf431c61
37aa5fe6e083b8147156ca66a1993a7bd74e8a61
06fae5ccf58a27a8e2ae6a0e7722f42db507c1873751f587cddd090810d94492
GET /wrhs/ce554d2333f3801abafb32da18213ff7/tti.min.js HTTP/1.1
Host: img6.wsimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dan.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
accept-ranges: bytes
content-encoding: br
etag: "ce554d2333f3801abafb32da18213ff7"
last-modified: Wed, 16 Jun 2021 22:03:01 GMT
vary: Accept-Encoding
x-edgeconnect-midmile-rtt: 3
x-edgeconnect-origin-mex-latency: 654
x-amz-id-2: Bt3x3iTv8Fk+aaaS+GUkBMe+ASr0HEMDh339t8gjL9ozG+jBiKIjzxbTtgmm6ZRh5XVuxORtokQ=
x-amz-request-id: XNK8Z8KQATPTCZRH
x-amz-server-side-encryption: AES256
x-amz-version-id: F4fYptXBkP0fCCCWFLfVGE1HXlZmORny
content-length: 7498
x-edgeconnect-cache-status: 1
cache-control: max-age=31536000
date: Thu, 23 Mar 2023 10:34:29 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc="466546_1600457340_32510198_104_1469_1_0";dur=1
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.r2m02.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.r2m02.amazontrust.com/
IP
Hash e585c17fa566e2bfb6f469cc72cca9bb
eda39a235209a9cc61253d9aa80908124576ce3a
4a955d2fe454548b4ae22487534e62956e1e823a82daa4cfcd450089b3091f23
POST / HTTP/1.1
Host: ocsp.r2m02.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 23 Mar 2023 10:34:29 GMT
Last-Modified: Thu, 23 Mar 2023 09:25:46 GMT
Server: ECAcc (bsa/EA9A)
X-Cache: Miss from cloudfront
Via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 94bPK4dKv_l-M1fS3GqBruMnxa0fTFKiWYPAMlIbp9ItxBL2GBNhSQ==
Age: 4124
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 8795e5b287f501dc39ee441cd6bd7125
9d420cfc40477940eff7fcfc1aee2c7731fd17a5
a2f6bc52d276e1f73a3e823606457e033bccf8eca8631940a55c298f952451ed
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 23 Mar 2023 10:34:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-47793354-2&cid=1015506207.1652829834&jid=1610748443&_u=YCDAgEABAAAAAEAAI~&z=2011414805
200 OK 42 B URL HTTP/2 www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-47793354-2&cid=1015506207.1652829834&jid=1610748443&_u=YCDAgEABAAAAAEAAI~&z=2011414805
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-47793354-2&cid=1015506207.1652829834&jid=1610748443&_u=YCDAgEABAAAAAEAAI~&z=2011414805 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dan.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 23 Mar 2023 10:34:29 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-47793354-2&cid=1015506207.1652829834&jid=1610748443&_u=YCDAgEABAAAAAEAAI~&z=2011414805
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-47793354-2&cid=1015506207.1652829834&jid=1610748443&_u=YCDAgEABAAAAAEAAI~&z=2011414805
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-47793354-2&cid=1015506207.1652829834&jid=1610748443&_u=YCDAgEABAAAAAEAAI~&z=2011414805 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dan.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 23 Mar 2023 10:34:29 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 9f0607231b4674d2bfb5a6798b0b4093
6c14f5c952e413365703144951b09b7126ff8e2d
869816689cb9507d294d69f953e8ea33452a177d405816ad86f729b123ceaa98
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 23 Mar 2023 10:34:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 8795e5b287f501dc39ee441cd6bd7125
9d420cfc40477940eff7fcfc1aee2c7731fd17a5
a2f6bc52d276e1f73a3e823606457e033bccf8eca8631940a55c298f952451ed
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 23 Mar 2023 10:34:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.r2m01.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.r2m01.amazontrust.com/
IP
Hash 34f4765d4d6b70ee67d80f5805eabc95
74a140e6614adb395c45b5f57aa164ad5dc8fd34
64c2cd6d4d6f59b71bc7537b2de86593eff911a80f089d536cc88933709244d9
POST / HTTP/1.1
Host: ocsp.r2m01.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 23 Mar 2023 10:34:29 GMT
Last-Modified: Thu, 23 Mar 2023 08:50:07 GMT
Server: ECAcc (nya/790B)
X-Cache: Miss from cloudfront
Via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: R8mzgrgZUGwlj8i3nM_19VRyqJV2iY5JztmL4yTmSFzDJPmh2UikLQ==
Age: 6262
tags.tiqcdn.com/utag/tiqapp/utag.v.js?a=gpl/main/202212210441&nocookie=1
200 OK 2 B URL HTTP/2 tags.tiqcdn.com/utag/tiqapp/utag.v.js?a=gpl/main/202212210441&nocookie=1
IP
File type ASCII text, with no line terminators
Hash 7bc0ee636b3b83484fc3b9348863bd22
ebbffb7d7ea5362a22bfa1bab0bfdeb1617cd610
a2c2339691fc48fbd14fb307292dff3e21222712d9240810742d7df0c6d74dfb
GET /utag/tiqapp/utag.v.js?a=gpl/main/202212210441&nocookie=1 HTTP/1.1
Host: tags.tiqcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dan.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 2
last-modified: Sat, 11 Mar 2023 06:57:46 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: 2XUX04X5QEw0.xFya64khU._sHTRl_Pz
accept-ranges: bytes
server: AmazonS3
date: Thu, 23 Mar 2023 10:29:56 GMT
etag: "7bc0ee636b3b83484fc3b9348863bd22"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: y2vy0xCHeiu-faF7NZDyi2ZI5rqqR3rcrE_IP1da3PJaNFsc3GaCrw==
age: 274
X-Firefox-Spdy: h2
events.api.secureserver.net/b.aspx?timestamp=1679567677349&corrid=287538193&referrer=&vs=visible&rand=1213196282&sitename=dan.com&page=%2Fbuy-domain%2Fxlaxiata.com&location=https%3A%2F%2Fdan.com%2Fbuy-domain%2Fxlaxiata.com%3Fredirected%3Dtrue&agent=false&delegated=false&salessite=false&event=gtm.load&ap=dan-app&loadSource=gtm&page_level_properties=ap%2CloadSource&event_type=page.log&eventdate=2023-03-23T10%3A34%3A37.350Z&eventtype=pageperf&nav_type=hard&tccin=auto&connectEnd=1679567676110&connectStart=1679567676048&domComplete=1679567677137&domContentLoadedEventEnd=1679567676978&domContentLoadedEventStart=1679567676976&domInteractive=1679567676945&domLoading=1679567676295&domainLookupEnd=1679567676048&domainLookupStart=1679567676038&fetchStart=1679567676030&navigationStart=1679567675744&requestStart=1679567676110&responseEnd=1679567676265&responseStart=1679567676265&loadEventStart=1679567677137&loadEventEnd=1679567677139&transferSize=16090&encodedBodySize=12458&decodedBodySize=40421&navigationType=navigate&fcp=1212&hit_id=3486c607-560e-5d9a-bdcb-6ba578881d83&visitor_guid=8b61fbbc-cf46-5e2c-963e-e7fc0a8a904b&visit_guid=8b61fbbc-cf46-5e2c-963e-e7fc0a8a904b&page_count=1&has_consent=0&cv=3.39.1&client_name=tcc&same_site=none&trace_id=3a28d2b1cc5f5f05ba913416ec2dc4b5
200 OK 43 B URL HTTP/2 events.api.secureserver.net/b.aspx?timestamp=1679567677349&corrid=287538193&referrer=&vs=visible&rand=1213196282&sitename=dan.com&page=%2Fbuy-domain%2Fxlaxiata.com&location=https%3A%2F%2Fdan.com%2Fbuy-domain%2Fxlaxiata.com%3Fredirected%3Dtrue&agent=false&delegated=false&salessite=false&event=gtm.load&ap=dan-app&loadSource=gtm&page_level_properties=ap%2CloadSource&event_type=page.log&eventdate=2023-03-23T10%3A34%3A37.350Z&eventtype=pageperf&nav_type=hard&tccin=auto&connectEnd=1679567676110&connectStart=1679567676048&domComplete=1679567677137&domContentLoadedEventEnd=1679567676978&domContentLoadedEventStart=1679567676976&domInteractive=1679567676945&domLoading=1679567676295&domainLookupEnd=1679567676048&domainLookupStart=1679567676038&fetchStart=1679567676030&navigationStart=1679567675744&requestStart=1679567676110&responseEnd=1679567676265&responseStart=1679567676265&loadEventStart=1679567677137&loadEventEnd=1679567677139&transferSize=16090&encodedBodySize=12458&decodedBodySize=40421&navigationType=navigate&fcp=1212&hit_id=3486c607-560e-5d9a-bdcb-6ba578881d83&visitor_guid=8b61fbbc-cf46-5e2c-963e-e7fc0a8a904b&visit_guid=8b61fbbc-cf46-5e2c-963e-e7fc0a8a904b&page_count=1&has_consent=0&cv=3.39.1&client_name=tcc&same_site=none&trace_id=3a28d2b1cc5f5f05ba913416ec2dc4b5
IP
ASN #20940 Akamai International B.V.
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /b.aspx?timestamp=1679567677349&corrid=287538193&referrer=&vs=visible&rand=1213196282&sitename=dan.com&page=%2Fbuy-domain%2Fxlaxiata.com&location=https%3A%2F%2Fdan.com%2Fbuy-domain%2Fxlaxiata.com%3Fredirected%3Dtrue&agent=false&delegated=false&salessite=false&event=gtm.load&ap=dan-app&loadSource=gtm&page_level_properties=ap%2CloadSource&event_type=page.log&eventdate=2023-03-23T10%3A34%3A37.350Z&eventtype=pageperf&nav_type=hard&tccin=auto&connectEnd=1679567676110&connectStart=1679567676048&domComplete=1679567677137&domContentLoadedEventEnd=1679567676978&domContentLoadedEventStart=1679567676976&domInteractive=1679567676945&domLoading=1679567676295&domainLookupEnd=1679567676048&domainLookupStart=1679567676038&fetchStart=1679567676030&navigationStart=1679567675744&requestStart=1679567676110&responseEnd=1679567676265&responseStart=1679567676265&loadEventStart=1679567677137&loadEventEnd=1679567677139&transferSize=16090&encodedBodySize=12458&decodedBodySize=40421&navigationType=navigate&fcp=1212&hit_id=3486c607-560e-5d9a-bdcb-6ba578881d83&visitor_guid=8b61fbbc-cf46-5e2c-963e-e7fc0a8a904b&visit_guid=8b61fbbc-cf46-5e2c-963e-e7fc0a8a904b&page_count=1&has_consent=0&cv=3.39.1&client_name=tcc&same_site=none&trace_id=3a28d2b1cc5f5f05ba913416ec2dc4b5 HTTP/1.1
Host: events.api.secureserver.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dan.com/
Origin: https://dan.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
content-length: 43
access-control-allow-origin: https://dan.com
access-control-allow-credentials: true
x-robots-tag: noindex, nofollow
cache-control: private
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000 ; includeSubDomains
x-frame-options: DENY
date: Thu, 23 Mar 2023 10:34:29 GMT
X-Firefox-Spdy: h2
events.api.secureserver.net/image.aspx?referrer=&trace_id=3a28d2b1cc5f5f05ba913416ec2dc4b5×tamp=1679567677333&corrid=287538193&vs=visible&rand=1418005572&sitename=dan.com&page=%2Fbuy-domain%2Fxlaxiata.com&location=https%3A%2F%2Fdan.com%2Fbuy-domain%2Fxlaxiata.com%3Fredirected%3Dtrue&agent=false&delegated=false&salessite=false&event=gtm.load&ap=dan-app&loadSource=gtm&page_level_properties=ap%2CloadSource&event_type=page.request&hw=1&browx=1280&browy=939&resx=1280&resy=1024&cdepth=24&querystring=%3Fredirected%3Dtrue&hit_id=374ba854-cd5c-516c-b7af-685c8c0099e2&visitor_guid=8b61fbbc-cf46-5e2c-963e-e7fc0a8a904b&visit_guid=8b61fbbc-cf46-5e2c-963e-e7fc0a8a904b&page_count=1&has_consent=0&cv=3.39.1&client_name=tcc&same_site=none
302 Found 0 B URL HTTP/2 events.api.secureserver.net/image.aspx?referrer=&trace_id=3a28d2b1cc5f5f05ba913416ec2dc4b5×tamp=1679567677333&corrid=287538193&vs=visible&rand=1418005572&sitename=dan.com&page=%2Fbuy-domain%2Fxlaxiata.com&location=https%3A%2F%2Fdan.com%2Fbuy-domain%2Fxlaxiata.com%3Fredirected%3Dtrue&agent=false&delegated=false&salessite=false&event=gtm.load&ap=dan-app&loadSource=gtm&page_level_properties=ap%2CloadSource&event_type=page.request&hw=1&browx=1280&browy=939&resx=1280&resy=1024&cdepth=24&querystring=%3Fredirected%3Dtrue&hit_id=374ba854-cd5c-516c-b7af-685c8c0099e2&visitor_guid=8b61fbbc-cf46-5e2c-963e-e7fc0a8a904b&visit_guid=8b61fbbc-cf46-5e2c-963e-e7fc0a8a904b&page_count=1&has_consent=0&cv=3.39.1&client_name=tcc&same_site=none
IP
ASN #20940 Akamai International B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /image.aspx?referrer=&trace_id=3a28d2b1cc5f5f05ba913416ec2dc4b5×tamp=1679567677333&corrid=287538193&vs=visible&rand=1418005572&sitename=dan.com&page=%2Fbuy-domain%2Fxlaxiata.com&location=https%3A%2F%2Fdan.com%2Fbuy-domain%2Fxlaxiata.com%3Fredirected%3Dtrue&agent=false&delegated=false&salessite=false&event=gtm.load&ap=dan-app&loadSource=gtm&page_level_properties=ap%2CloadSource&event_type=page.request&hw=1&browx=1280&browy=939&resx=1280&resy=1024&cdepth=24&querystring=%3Fredirected%3Dtrue&hit_id=374ba854-cd5c-516c-b7af-685c8c0099e2&visitor_guid=8b61fbbc-cf46-5e2c-963e-e7fc0a8a904b&visit_guid=8b61fbbc-cf46-5e2c-963e-e7fc0a8a904b&page_count=1&has_consent=0&cv=3.39.1&client_name=tcc&same_site=none HTTP/1.1
Host: events.api.secureserver.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dan.com/
Origin: https://dan.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
content-length: 0
access-control-allow-origin: https://dan.com
access-control-allow-credentials: true
x-robots-tag: noindex, nofollow
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
strict-transport-security: max-age=31536000 ; includeSubDomains
x-frame-options: DENY
location: https://events.api.secureserver.net/image.aspx?referrer=&trace_id=3a28d2b1cc5f5f05ba913416ec2dc4b5×tamp=1679567677333&corrid=287538193&vs=visible&rand=1418005572&sitename=dan.com&page=%2Fbuy-domain%2Fxlaxiata.com&location=https%3A%2F%2Fdan.com%2Fbuy-domain%2Fxlaxiata.com%3Fredirected%3Dtrue&agent=false&delegated=false&salessite=false&event=gtm.load&ap=dan-app&loadSource=gtm&page_level_properties=ap%2CloadSource&event_type=page.request&hw=1&browx=1280&browy=939&resx=1280&resy=1024&cdepth=24&querystring=%3Fredirected%3Dtrue&hit_id=374ba854-cd5c-516c-b7af-685c8c0099e2&visitor_guid=8b61fbbc-cf46-5e2c-963e-e7fc0a8a904b&visit_guid=8b61fbbc-cf46-5e2c-963e-e7fc0a8a904b&page_count=1&has_consent=0&cv=3.39.1&client_name=tcc&same_site=none&CookieTest=1
date: Thu, 23 Mar 2023 10:34:29 GMT
set-cookie: traffic=; domain=.secureserver.net; path=/;
X-Firefox-Spdy: h2
events.api.secureserver.net/image.aspx?referrer=&trace_id=3a28d2b1cc5f5f05ba913416ec2dc4b5×tamp=1679567677333&corrid=287538193&vs=visible&rand=1418005572&sitename=dan.com&page=%2Fbuy-domain%2Fxlaxiata.com&location=https%3A%2F%2Fdan.com%2Fbuy-domain%2Fxlaxiata.com%3Fredirected%3Dtrue&agent=false&delegated=false&salessite=false&event=gtm.load&ap=dan-app&loadSource=gtm&page_level_properties=ap%2CloadSource&event_type=page.request&hw=1&browx=1280&browy=939&resx=1280&resy=1024&cdepth=24&querystring=%3Fredirected%3Dtrue&hit_id=374ba854-cd5c-516c-b7af-685c8c0099e2&visitor_guid=8b61fbbc-cf46-5e2c-963e-e7fc0a8a904b&visit_guid=8b61fbbc-cf46-5e2c-963e-e7fc0a8a904b&page_count=1&has_consent=0&cv=3.39.1&client_name=tcc&same_site=none&CookieTest=1
200 OK 43 B URL HTTP/2 events.api.secureserver.net/image.aspx?referrer=&trace_id=3a28d2b1cc5f5f05ba913416ec2dc4b5×tamp=1679567677333&corrid=287538193&vs=visible&rand=1418005572&sitename=dan.com&page=%2Fbuy-domain%2Fxlaxiata.com&location=https%3A%2F%2Fdan.com%2Fbuy-domain%2Fxlaxiata.com%3Fredirected%3Dtrue&agent=false&delegated=false&salessite=false&event=gtm.load&ap=dan-app&loadSource=gtm&page_level_properties=ap%2CloadSource&event_type=page.request&hw=1&browx=1280&browy=939&resx=1280&resy=1024&cdepth=24&querystring=%3Fredirected%3Dtrue&hit_id=374ba854-cd5c-516c-b7af-685c8c0099e2&visitor_guid=8b61fbbc-cf46-5e2c-963e-e7fc0a8a904b&visit_guid=8b61fbbc-cf46-5e2c-963e-e7fc0a8a904b&page_count=1&has_consent=0&cv=3.39.1&client_name=tcc&same_site=none&CookieTest=1
IP
ASN #20940 Akamai International B.V.
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /image.aspx?referrer=&trace_id=3a28d2b1cc5f5f05ba913416ec2dc4b5×tamp=1679567677333&corrid=287538193&vs=visible&rand=1418005572&sitename=dan.com&page=%2Fbuy-domain%2Fxlaxiata.com&location=https%3A%2F%2Fdan.com%2Fbuy-domain%2Fxlaxiata.com%3Fredirected%3Dtrue&agent=false&delegated=false&salessite=false&event=gtm.load&ap=dan-app&loadSource=gtm&page_level_properties=ap%2CloadSource&event_type=page.request&hw=1&browx=1280&browy=939&resx=1280&resy=1024&cdepth=24&querystring=%3Fredirected%3Dtrue&hit_id=374ba854-cd5c-516c-b7af-685c8c0099e2&visitor_guid=8b61fbbc-cf46-5e2c-963e-e7fc0a8a904b&visit_guid=8b61fbbc-cf46-5e2c-963e-e7fc0a8a904b&page_count=1&has_consent=0&cv=3.39.1&client_name=tcc&same_site=none&CookieTest=1 HTTP/1.1
Host: events.api.secureserver.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dan.com
Referer: https://dan.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/gif
content-length: 43
access-control-allow-origin: https://dan.com
access-control-allow-credentials: true
x-robots-tag: noindex, nofollow
cache-control: private
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000 ; includeSubDomains
x-frame-options: DENY
date: Thu, 23 Mar 2023 10:34:29 GMT
X-Firefox-Spdy: h2
csp.secureserver.net/eventbus
200 OK 0 B URL HTTP/1.1 csp.secureserver.net/eventbus
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /eventbus HTTP/1.1
Host: csp.secureserver.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: authorization,content-type
Referer: https://dan.com/
Origin: https://dan.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 0
x-amzn-requestid: cee8cbd3-8f29-4c1a-9f11-fde29cbc2812
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: content-type,authorization
x-amz-apigw-id: COuweE3roAMF6Pg=
Access-Control-Allow-Methods: OPTIONS,POST
x-amzn-trace-id: Root=1-641c2b35-4297e5ee210d16a20e8e844e
x-envoy-upstream-service-time: 88
Expires: Thu, 23 Mar 2023 10:34:30 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Thu, 23 Mar 2023 10:34:30 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=86400 ; includeSubDomains ; preload
csp.secureserver.net/eventbus
202 Accepted 0 B URL HTTP/1.1 csp.secureserver.net/eventbus
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /eventbus HTTP/1.1
Host: csp.secureserver.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dan.com/
Authorization: api-key b18ef4f046435b64a469b32c3c1c20a3
Content-Type: application/json
Content-Length: 1103
Origin: https://dan.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 202 Accepted
Content-Type: application/json
Content-Length: 0
x-amzn-requestid: e90a81b8-5c1b-48de-81b9-599039e043b4
Access-Control-Allow-Origin: *
x-amz-apigw-id: COuwgEOaIAMF-yA=
x-amzn-trace-id: Root=1-641c2b36-3f9b70c653fd16974ee6fac3
x-envoy-upstream-service-time: 189
Expires: Thu, 23 Mar 2023 10:34:30 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Thu, 23 Mar 2023 10:34:30 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=86400 ; includeSubDomains ; preload
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a0d3d7099bbc5fed74a6e78e1a3096bf
96afaf8b3ac053577c56aca5f4a20d8655ecb771
c8ff32c6809a506d4c656d3200dbfc6682c156c3de0647d13ab8f07a6f9a38ba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C8FF32C6809A506D4C656D3200DBFC6682C156C3DE0647D13AB8F07A6F9A38BA"
Last-Modified: Tue, 21 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2205
Expires: Thu, 23 Mar 2023 11:11:15 GMT
Date: Thu, 23 Mar 2023 10:34:30 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a0d3d7099bbc5fed74a6e78e1a3096bf
96afaf8b3ac053577c56aca5f4a20d8655ecb771
c8ff32c6809a506d4c656d3200dbfc6682c156c3de0647d13ab8f07a6f9a38ba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C8FF32C6809A506D4C656D3200DBFC6682C156C3DE0647D13AB8F07A6F9A38BA"
Last-Modified: Tue, 21 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2205
Expires: Thu, 23 Mar 2023 11:11:15 GMT
Date: Thu, 23 Mar 2023 10:34:30 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a0d3d7099bbc5fed74a6e78e1a3096bf
96afaf8b3ac053577c56aca5f4a20d8655ecb771
c8ff32c6809a506d4c656d3200dbfc6682c156c3de0647d13ab8f07a6f9a38ba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C8FF32C6809A506D4C656D3200DBFC6682C156C3DE0647D13AB8F07A6F9A38BA"
Last-Modified: Tue, 21 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2205
Expires: Thu, 23 Mar 2023 11:11:15 GMT
Date: Thu, 23 Mar 2023 10:34:30 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a0d3d7099bbc5fed74a6e78e1a3096bf
96afaf8b3ac053577c56aca5f4a20d8655ecb771
c8ff32c6809a506d4c656d3200dbfc6682c156c3de0647d13ab8f07a6f9a38ba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C8FF32C6809A506D4C656D3200DBFC6682C156C3DE0647D13AB8F07A6F9A38BA"
Last-Modified: Tue, 21 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2205
Expires: Thu, 23 Mar 2023 11:11:15 GMT
Date: Thu, 23 Mar 2023 10:34:30 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a0d3d7099bbc5fed74a6e78e1a3096bf
96afaf8b3ac053577c56aca5f4a20d8655ecb771
c8ff32c6809a506d4c656d3200dbfc6682c156c3de0647d13ab8f07a6f9a38ba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C8FF32C6809A506D4C656D3200DBFC6682C156C3DE0647D13AB8F07A6F9A38BA"
Last-Modified: Tue, 21 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2205
Expires: Thu, 23 Mar 2023 11:11:15 GMT
Date: Thu, 23 Mar 2023 10:34:30 GMT
Connection: keep-alive
tags.tiqcdn.com/utag/gpl/main/prod/utag.js
200 OK 55 kB URL HTTP/2 tags.tiqcdn.com/utag/gpl/main/prod/utag.js
IP
File type HTML document, Unicode text, UTF-8 text, with very long lines (26214)
Hash 0a57e031e339bd078d7e3252520bee61
f8fb149b6918bd7cec8301a7604fe3dbd89d1ed2
2185e591536000e88d839676552c4fa47e397404342c14c7b06efcbcc8410882
GET /utag/gpl/main/prod/utag.js HTTP/1.1
Host: tags.tiqcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dan.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Wed, 08 Mar 2023 11:30:17 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: O2_fgL_0QJeLzwA5uxDNmajhsu2_BbgO
server: AmazonS3
content-encoding: br
date: Thu, 23 Mar 2023 10:34:29 GMT
etag: W/"57224d9a9707a839ae4d94757696d852"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: taoM0QRaW3qU66qhCtvmcW0dnvzd7-WLzaWPf7er18t-jYeDOa841w==
age: 179
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9a7546f8-3d34-4fb4-b63f-8e8098b48c30.jpeg
200 OK 7.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9a7546f8-3d34-4fb4-b63f-8e8098b48c30.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f777f840a3fc7e500c57a7cbdf88f26d
3518e8a18807209e94011806a96492e0d86ee9c9
44aa32fa1bf15785a4dd8cd6184772fb268113cbf459f5f30a70ff5ca66c9e05
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9a7546f8-3d34-4fb4-b63f-8e8098b48c30.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7419
x-amzn-requestid: bc02abbe-706d-42af-b963-0163b07b87c9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: B9xbnE7OIAMFW2g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641562b0-247606a3713a20d25cf83763;Sampled=0
x-amzn-remapped-date: Sat, 18 Mar 2023 07:05:20 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: 3hcFsEgTbzbZ7idbLT-fhzhzhO6nT7xNDgHvY4iF8Hd934YYbjviLA==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 618052a0d9c86c1a3bf663f82d041d1c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Mar 2023 18:52:41 GMT
age: 56509
etag: "3518e8a18807209e94011806a96492e0d86ee9c9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5be1b286-007a-44a5-a6fd-872190ecfa0b.jpeg
200 OK 6.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5be1b286-007a-44a5-a6fd-872190ecfa0b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c05bfdf1411a931d8ea9adc64b07bc74
156ef59e53564a4f2b27002b2695fafecd578d82
15d17c0df2d2b0625ecf5f576a7ff630ae8b923b28be354ad23aec6a284a801a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5be1b286-007a-44a5-a6fd-872190ecfa0b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6692
x-amzn-requestid: 3a0f6a8d-89b1-43f4-8a15-8749bdbc047b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CM9d9FcOoAMFaFQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641b75f2-3540256d6be3d4f85bba65ea;Sampled=0
x-amzn-remapped-date: Wed, 22 Mar 2023 21:41:06 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: PNAVsyfdAHjn5F6Rt1uz1U46QCIGvTCqZatbAurr6Ilu0quHWExuSw==
via: 1.1 e92cc925fc8895560cd0628c67f58828.cloudfront.net (CloudFront), 1.1 aabd01c4a20dae837d162bd972422efc.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Mar 2023 21:43:34 GMT
age: 46256
etag: "156ef59e53564a4f2b27002b2695fafecd578d82"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fea5d4e17-e42c-49fb-a54b-d7d97ad50ba4.jpeg
200 OK 7.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fea5d4e17-e42c-49fb-a54b-d7d97ad50ba4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 40d24dfcd9f0afe0e4077384f16cc494
76213c7d5c759471ed3823888860f918ac7e8f13
fbbbef0498ddf14bc9b204273a3cd416c357dceed20339c3e8c64a16b0be3caf
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fea5d4e17-e42c-49fb-a54b-d7d97ad50ba4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7083
x-amzn-requestid: 352ae6e5-476d-430b-adf0-84d4a739967b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: B6fGcE1foAMFbRQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64141228-7dc6c3cb72cd40965006ab76;Sampled=0
x-amzn-remapped-date: Fri, 17 Mar 2023 07:09:28 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: bgeeN4oUpN5wPo6UnQKqKTGDiuLWu-ioS9UtrO5a6m5SI7WyiRNLcA==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 6bdc2963c9ed59b475ec36c35e5932a4.cloudfront.net (CloudFront), 1.1 google
date: Thu, 23 Mar 2023 09:43:54 GMT
age: 3036
etag: "76213c7d5c759471ed3823888860f918ac7e8f13"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F255e6a5a-97bb-4a35-8a48-4d120747a63c.jpeg
200 OK 4.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F255e6a5a-97bb-4a35-8a48-4d120747a63c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 85351059b67b0a42eda7e69a31b3b4b4
b798268806dc2f79f033e5872676019faf0e0cc1
86e163b7159b197d6358ab01333ac6da221de0ebe1c5da8d5cef2977d38625fe
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F255e6a5a-97bb-4a35-8a48-4d120747a63c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4000
x-amzn-requestid: 68dc01d7-3eed-48f6-8532-8efaa96cc1ec
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CJpraEqyoAMFgNQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641a2315-3852cc8961365a560d1fa02f;Sampled=0
x-amzn-remapped-date: Tue, 21 Mar 2023 21:35:17 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: Ncagzm12kJaHQtYhhjUUhcfXVfbwMdonoNYqpK-QXEmLfyyENgFnFA==
via: 1.1 288c777a01e22425da9494dad7a69734.cloudfront.net (CloudFront), 1.1 42ef990e439ae115ff739f04e3945234.cloudfront.net (CloudFront), 1.1 google
date: Thu, 23 Mar 2023 02:49:25 GMT
age: 27905
etag: "b798268806dc2f79f033e5872676019faf0e0cc1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F93c300c4-e707-428c-9ae5-d4699c20a7ef.jpeg
200 OK 6.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F93c300c4-e707-428c-9ae5-d4699c20a7ef.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 800c2662fd6ab8829a02b7d63084c38d
0917d2c376f8d2af2a436a33ce2bfe1cbdb8b239
76545e9f75dc558fdb7b54550934c7775318fb4150a9309f60e65d982d2e576e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F93c300c4-e707-428c-9ae5-d4699c20a7ef.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5950
x-amzn-requestid: ce85112e-428d-4ca1-9dac-1d6c8c6dc74a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CKyF9EI3oAMFtyQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641a96f2-05c5948d6f74948b1c67d68c;Sampled=0
x-amzn-remapped-date: Wed, 22 Mar 2023 05:49:38 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: lnMR6Lh4T37cFhMwb1qXIxjoPBghVFOGUz7HTt65DegMaxlElZxfjQ==
via: 1.1 59456abf79b201034ab5c9cfef7355e2.cloudfront.net (CloudFront), 1.1 599f04a365a179d553682d476509c388.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Mar 2023 21:43:32 GMT
age: 56796
etag: "0917d2c376f8d2af2a436a33ce2bfe1cbdb8b239"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
nexus-websocket-a.intercom.io/pubsub/5-NBvSNdUb3UVBzILJwqRACnFSNISm-gTQjmUYstFXIMLRIY4OBKS7kRPzRYCRqtpx11EFWejUEWeht31K_6VwYrtL4b8puunpyLXY?X-Nexus-New-Client=true&X-Nexus-Version=0.9.0&user_role=undefined
101 Switching Protocols 0 B URL HTTP/1.1 nexus-websocket-a.intercom.io/pubsub/5-NBvSNdUb3UVBzILJwqRACnFSNISm-gTQjmUYstFXIMLRIY4OBKS7kRPzRYCRqtpx11EFWejUEWeht31K_6VwYrtL4b8puunpyLXY?X-Nexus-New-Client=true&X-Nexus-Version=0.9.0&user_role=undefined
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pubsub/5-NBvSNdUb3UVBzILJwqRACnFSNISm-gTQjmUYstFXIMLRIY4OBKS7kRPzRYCRqtpx11EFWejUEWeht31K_6VwYrtL4b8puunpyLXY?X-Nexus-New-Client=true&X-Nexus-Version=0.9.0&user_role=undefined HTTP/1.1
Host: nexus-websocket-a.intercom.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://dan.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: +22ZYqAD0sqTAEjgcF5I9g==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Server: nginx
Date: Thu, 23 Mar 2023 10:34:30 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: CZDOmZ42/wv+o2dgX+SN1K6zxxM=
Sec-WebSocket-Extensions: permessage-deflate; server_no_context_takeover; client_no_context_takeover
dan.com/domain_views
200 OK 0 B IP
POST /domain_views HTTP/1.1
Host: dan.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dan.com/buy-domain/xlaxiata.com?redirected=true
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 130
Origin: https://dan.com
Connection: keep-alive
Cookie: _ga=GA1.2.1015506207.1652829834; _ga_MEVZPVX8WY=GS1.1.1653978938.1.1.1653979303.39; _ga_WXD346M1LN=GS1.1.1654106413.1.0.1654106421.0; _ga_H4YBREXJT6=GS1.1.1654382557.1.0.1654382563.0; bc9bd58fe1b6ef954d6d794db6d30e25e8ff50634d24346cf8006ef422e3c05c6e48b07678e34d08c97ad3f91012c80ac690b50f51fbd49b16e301de58d9c5ca=XniAaO4MtyqCwAXI0erLc9vDc2xXmUvgxTwGT9fsVlsRnQa5FqDFZ04v5pW30VejgltfWyrQr9N4W%2FZXH0p3iQ76YVdL7s6eWtvT0lgaWCnQJWStkahu3jKUwqsfT06MEHc9%2BqTjH%2BdiSSLYDSr%2Fl%2Bd5lchtxmiGelC7ieNislRCcUNc8pdepoZxjHeL7sPQR1xSF3gwslBJD%2F7bp34Y2xG%2Fty9er4MHgAH4ghC75bSGobckmrmY1ONbRy09MMnhObShudFst99RVwjx8Wkm7R21hb8IvuTPEESq0YmM4hFvgJfqdzar0maOIrXNmOIkmhJzv4RsBMu5UYu9prHFbJtpgsiTviK9MoSy2TA8bNdWtGlt7stm5aysOODXNSDmLScZK%2BmwVA8P44Sr41oWVDxApMH3g8OLCV5GzmdDGyTMxAybVOHxHKc3%2BJU41IaYudbnlei3KHxR1PTxIgBt3Q%3D%3D--phQf%2FDBBhyrSW8TP--oRFR3xuEIHMTb5EqAS%2FZhg%3D%3D; time_zone_offset=0; _gid=GA1.2.914511032.1679567677; _gat=1; traffic=; _policy=%7B%22restricted_market%22:true,%22tracking_market%22:%22explicit%22%7D; pathway=8b61fbbc-cf46-5e2c-963e-e7fc0a8a904b; fb_sessiontraffic=C_TOUCH=2023-03-23T10:34:37.333Z&pathway=8b61fbbc-cf46-5e2c-963e-e7fc0a8a904b&V_DATE=2023-03-23T10:34:37.331Z&pc=1; visitor=vid=8b61fbbc-cf46-5e2c-963e-e7fc0a8a904b
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: openresty
date: Thu, 23 Mar 2023 10:34:29 GMT
content-type: text/html
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-download-options: noopen
x-permitted-cross-domain-policies: none
referrer-policy: strict-origin-when-cross-origin
cache-control: no-cache
set-cookie: bc9bd58fe1b6ef954d6d794db6d30e25e8ff50634d24346cf8006ef422e3c05c6e48b07678e34d08c97ad3f91012c80ac690b50f51fbd49b16e301de58d9c5ca=%2BHZtHPyfQlhWt%2B3npvroLRUXivil149L8wLqNf%2F7Oy8%2F6Nnjeo7LteClmAFzOTBV8xmwZyCShPeSXFS4ZFSpkbHZGI%2BXG6lVe8QPDD30sSReA6KkxZrHHHj0WaUEl12swyO56QghPDOpkeKrbm7CtiDQgydJYoVh1kb7KdWVni86Y6e1ZYCC44QPzH%2F%2B6GvEA5%2F%2BxIOx7TD9k9mH39fWr5b1ZjwcWAxXCTgoLeNrSsEEJ87gEynnS9fmGMd7zQrJ75hKxIqZz78DCT6n6XubqEHUbrAkcghdcHCMroypZCt2vt99h2WyxNTxKill%2Fu%2BMmj4SbXJg5hXUpA1zAhBM4ZnqMJ2EMImN6zmutgacH4mQBE5Jp0h6ey1AJ%2FK7MCmEkR0pCYz%2BIcWTIcXTiFbqpV9VL7zZfIVx%2B5plzR3T7%2B8LgMWb5LmoE6neRa%2BijxWIIUJ44mHXPVUvirwe%2BuTv4PeBp5Z%2B1Nf4GkvxJ23Bms5zpWycri97CpumsEAXeXC7r2RdFX97Voc%3D--eZ5b05btKJUhSmgx--NRtfkZBHvQHf20lbX2URww%3D%3D; path=/; secure; HttpOnly; SameSite=Lax
x-request-id: 6f049d73-fb2e-44d6-9ff6-fc4237a11768
x-runtime: 0.046719
strict-transport-security: max-age=63072000; includeSubDomains
content-security-policy: frame-ancestors 'self';
content-encoding: gzip
X-Firefox-Spdy: h2
api-iam.intercom.io/messenger/web/ping
200 OK 0 B URL HTTP/2 api-iam.intercom.io/messenger/web/ping
IP
POST /messenger/web/ping HTTP/1.1
Host: api-iam.intercom.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 433
Origin: https://dan.com
Connection: keep-alive
Referer: https://dan.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 23 Mar 2023 10:34:30 GMT
content-type: application/json; charset=utf-8
status: 200 OK
cache-control: max-age=0, private, must-revalidate
x-ratelimit-limit: 13333
x-ratelimit-reset: 1679567680
strict-transport-security: max-age=31556952; includeSubDomains; preload
x-ratelimit-remaining: 13332
access-control-allow-origin: https://dan.com
vary: Accept,Accept-Encoding
x-intercom-version: 9e379dc8ffda4c93ea80e9efcfce2a5ac905a5ab
x-xss-protection: 1; mode=block
content-encoding: gzip
x-request-id: 001e5him8bcolsgbb4m0
access-control-allow-headers: Content-Type, Idempotency-Key, X-INTERCOM-APP, X-INTERCOM-PAGE-TITLE, X-INTERCOM-USER-DATA
access-control-allow-credentials: true
access-control-allow-methods: POST, GET, OPTIONS
etag: W/"4370cdb4f56164dd05d33649a43a72bd"
x-runtime: 0.248694
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
server: nginx
x-ami-version: ami-087c2d0cb2ae07534
X-Firefox-Spdy: h2
dan.com/buy-domain/xlaxiata.com?redirected=true
200 OK 0 B URL HTTP/2 dan.com/buy-domain/xlaxiata.com?redirected=true
IP
GET /buy-domain/xlaxiata.com?redirected=true HTTP/1.1
Host: dan.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _ga=GA1.2.1015506207.1652829834; _ga_MEVZPVX8WY=GS1.1.1653978938.1.1.1653979303.39; _ga_WXD346M1LN=GS1.1.1654106413.1.0.1654106421.0; _ga_H4YBREXJT6=GS1.1.1654382557.1.0.1654382563.0
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
server: openresty
date: Thu, 23 Mar 2023 10:34:28 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-download-options: noopen
x-permitted-cross-domain-policies: none
referrer-policy: strict-origin-when-cross-origin
link: <https://cdn3.dan.com/assets/public/i18n-5cb6b07d5b73faf36a127e2ae39b1a6549e699600bfdf97bc9fa3164861062fc.js>; rel=preload; as=script; nopush,<https://cdn2.dan.com/packs/js/runtime~public/product-c65bfa3764bffa252c98.js>; rel=preload; as=script; nopush,<https://cdn1.dan.com/packs/js/3-11ef8f862ad8cae35983.chunk.js>; rel=preload; as=script; nopush,<https://cdn2.dan.com/packs/js/7-de4ffb688cefe6541bf0.chunk.js>; rel=preload; as=script; nopush,<https://cdn2.dan.com/packs/js/public/product-11929eacea26b1ec4502.chunk.js>; rel=preload; as=script; nopush,<https://cdn3.dan.com/assets/GraphikDan-Semibold-Web-0f41cae3a242b38a760ec60c3d0c3882d4c2bc318a8fb0dea97e362bc5e009fe.woff2>; rel=preload; as=; type=application/font-woff2,<https://cdn1.dan.com/assets/GraphikDan-Regular-Web-3d6859522e94ea684004514b5a900f8a0219dbb06be9271a359abd95c4f1df0a.woff2>; rel=preload; as=; type=application/font-woff2,<https://cdn3.dan.com/assets/GraphikDan-Bold-Web-eac93a2bef84e2b8c9c68c73a18e42867ba0de882874c00483dc28c328622b2f.woff2>; rel=preload; as=; type=application/font-woff2,<https://cdn2.dan.com/assets/GraphikDan-Medium-Web-f6517986e1663e1d662e482993a3c08363c352936be7ccfac953c7674304d71e.woff2>; rel=preload; as=; type=application/font-woff2,<https://cdn1.dan.com/assets/GraphikDan-Light-Web-fc582b515686a456805ed816f59bc30ed5415460f1ee248c62efbcf1d90c8b9a.woff2>; rel=preload; as=; type=application/font-woff2,<https://cdn0.dan.com/assets/public-38aca3fa401d5672ddf67270ebc0394e2d374a7c6c745c452acf7c3afb141df5.css>; rel=preload; as=style; nopush,<https://cdn2.dan.com/assets/vendor/svg4everybody-1f5a41bf858a5454d7923542e3380530fc2c4faaaf6ab58f29da7c6b2ebe2313.js>; rel=preload; as=script; nopush,<https://cdn0.dan.com/packs/js/runtime~public/fonts-2fe2dda32aa2d2a2aa67.js>; rel=preload; as=script; nopush,<https://cdn3.dan.com/packs/js/public/fonts-1a48d89fd26abf6fe780.chunk.js>; rel=preload; as=script; nopush,<https://cdn2.dan.com/packs/js/runtime~public/shared-1b01634fd7ca21c7761f.js>; rel=preload; as=script; nopush,<https://cdn0.dan.com/packs/js/8-86be82eea8a939b48bf4.chunk.js>; rel=preload; as=script; nopush,<https://cdn2.dan.com/packs/js/public/shared-9204474748694f4bc399.chunk.js>; rel=preload; as=script; nopush
etag: W/"4540411927de8c32ffbf58e882e144d4"
cache-control: max-age=0, private, must-revalidate
set-cookie: bc9bd58fe1b6ef954d6d794db6d30e25e8ff50634d24346cf8006ef422e3c05c6e48b07678e34d08c97ad3f91012c80ac690b50f51fbd49b16e301de58d9c5ca=XniAaO4MtyqCwAXI0erLc9vDc2xXmUvgxTwGT9fsVlsRnQa5FqDFZ04v5pW30VejgltfWyrQr9N4W%2FZXH0p3iQ76YVdL7s6eWtvT0lgaWCnQJWStkahu3jKUwqsfT06MEHc9%2BqTjH%2BdiSSLYDSr%2Fl%2Bd5lchtxmiGelC7ieNislRCcUNc8pdepoZxjHeL7sPQR1xSF3gwslBJD%2F7bp34Y2xG%2Fty9er4MHgAH4ghC75bSGobckmrmY1ONbRy09MMnhObShudFst99RVwjx8Wkm7R21hb8IvuTPEESq0YmM4hFvgJfqdzar0maOIrXNmOIkmhJzv4RsBMu5UYu9prHFbJtpgsiTviK9MoSy2TA8bNdWtGlt7stm5aysOODXNSDmLScZK%2BmwVA8P44Sr41oWVDxApMH3g8OLCV5GzmdDGyTMxAybVOHxHKc3%2BJU41IaYudbnlei3KHxR1PTxIgBt3Q%3D%3D--phQf%2FDBBhyrSW8TP--oRFR3xuEIHMTb5EqAS%2FZhg%3D%3D; path=/; secure; HttpOnly; SameSite=Lax
x-request-id: d364fddc-3cdb-49b0-a8f1-ec8a284f219f
x-runtime: 0.098918
strict-transport-security: max-age=63072000; includeSubDomains
content-security-policy: frame-ancestors 'self';
content-encoding: gzip
X-Firefox-Spdy: h2
dan.com/packs/spritemap.svg
200 OK 0 B URL HTTP/2 dan.com/packs/spritemap.svg
IP
GET /packs/spritemap.svg HTTP/1.1
Host: dan.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dan.com/buy-domain/xlaxiata.com?redirected=true
Connection: keep-alive
Cookie: _ga=GA1.2.1015506207.1652829834; _ga_MEVZPVX8WY=GS1.1.1653978938.1.1.1653979303.39; _ga_WXD346M1LN=GS1.1.1654106413.1.0.1654106421.0; _ga_H4YBREXJT6=GS1.1.1654382557.1.0.1654382563.0; bc9bd58fe1b6ef954d6d794db6d30e25e8ff50634d24346cf8006ef422e3c05c6e48b07678e34d08c97ad3f91012c80ac690b50f51fbd49b16e301de58d9c5ca=XniAaO4MtyqCwAXI0erLc9vDc2xXmUvgxTwGT9fsVlsRnQa5FqDFZ04v5pW30VejgltfWyrQr9N4W%2FZXH0p3iQ76YVdL7s6eWtvT0lgaWCnQJWStkahu3jKUwqsfT06MEHc9%2BqTjH%2BdiSSLYDSr%2Fl%2Bd5lchtxmiGelC7ieNislRCcUNc8pdepoZxjHeL7sPQR1xSF3gwslBJD%2F7bp34Y2xG%2Fty9er4MHgAH4ghC75bSGobckmrmY1ONbRy09MMnhObShudFst99RVwjx8Wkm7R21hb8IvuTPEESq0YmM4hFvgJfqdzar0maOIrXNmOIkmhJzv4RsBMu5UYu9prHFbJtpgsiTviK9MoSy2TA8bNdWtGlt7stm5aysOODXNSDmLScZK%2BmwVA8P44Sr41oWVDxApMH3g8OLCV5GzmdDGyTMxAybVOHxHKc3%2BJU41IaYudbnlei3KHxR1PTxIgBt3Q%3D%3D--phQf%2FDBBhyrSW8TP--oRFR3xuEIHMTb5EqAS%2FZhg%3D%3D; time_zone_offset=0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: openresty
date: Thu, 23 Mar 2023 10:34:29 GMT
content-type: image/svg+xml
vary: Accept-Encoding
last-modified: Thu, 23 Mar 2023 09:50:18 GMT
strict-transport-security: max-age=63072000; includeSubDomains
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
js.intercomcdn.com/vendor.be6897a8.js
200 OK 0 B URL HTTP/2 js.intercomcdn.com/vendor.be6897a8.js
IP
GET /vendor.be6897a8.js HTTP/1.1
Host: js.intercomcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dan.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 108559
last-modified: Wed, 22 Mar 2023 15:02:41 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
x-amz-version-id: t9CZ347Itz3d0Vr69UVu9w_ro4La0qfW
accept-ranges: bytes
server: AmazonS3
date: Thu, 23 Mar 2023 09:58:56 GMT
cache-control: max-age=31536000, s-maxage=7200, public
etag: "378807b8e8c9dbd15e28e6539e2a1e68"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: _fkQK7mcFanj8avYMd_m_GRV9dkKyIUeW8W_E1XDuXXfRO0MKgZr-A==
age: 2133
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2
3.64.163.50
34.120.237.76
95.101.10.130
0.0.0.0