Overview

URLhamid0808.blogspot.com/
IP 142.250.74.161 (United States)
ASN#15169 GOOGLE
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2022-09-21 15:08:15 UTC
StatusLoading report..
IDS alerts0
Blocklist alert2
urlquery alerts No alerts detected
Tags None

Domain Summary (65)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
r3.o.lencr.org (6) 344 2020-12-02 08:52:13 UTC 2022-09-21 04:18:22 UTC 23.36.76.226
www.google-analytics.com (2) 40 2012-10-03 01:04:21 UTC 2022-09-21 09:49:55 UTC 142.250.74.174
api.livechatinc.com (3) 5353 2013-12-20 14:27:35 UTC 2022-09-21 08:30:17 UTC 23.36.79.17
www.google.com (1) 7 2016-08-04 12:36:31 UTC 2022-09-21 08:23:34 UTC 142.250.74.164
no.shoppingpunch.com (1) 0 2022-08-09 06:50:33 UTC 2022-09-21 15:08:06 UTC 172.67.200.46 Domain (shoppingpunch.com) ranked at: 470919
beambroth.com (2) 0 2022-07-23 01:33:50 UTC 2022-09-21 15:03:50 UTC 192.243.61.227 Unknown ranking
bat.bing.com (3) 387 2014-04-08 09:23:16 UTC 2022-09-21 04:22:26 UTC 13.107.21.200
dapi.videoly.co (2) 70972 2014-12-22 09:40:28 UTC 2022-09-21 15:08:10 UTC 172.67.74.16
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-09-21 04:20:37 UTC 34.117.237.239
ocsp.sca1b.amazontrust.com (4) 1015 2017-03-03 15:20:51 UTC 2019-03-27 04:05:54 UTC 143.204.42.165
11203568.fls.doubleclick.net (2) 0 2021-08-29 17:38:31 UTC 2022-09-21 15:08:10 UTC 142.250.74.70 Domain (doubleclick.net) ranked at: 2267
s.kelkoogroup.net (2) 316265 2017-09-04 13:00:28 UTC 2022-09-21 15:08:10 UTC 185.60.164.26
contextual.media.net (1) 513 2019-04-30 08:49:36 UTC 2022-09-21 13:02:38 UTC 23.38.200.22
hamid0808.blogspot.com (2) 0 2022-08-29 18:36:00 UTC 2022-09-21 04:06:48 UTC 142.250.74.161 Unknown ranking
widget.porterbuddy.com (4) 798694 2019-07-25 19:10:51 UTC 2022-09-21 15:08:10 UTC 54.230.111.27
s.kk-resources.com (1) 38577 2018-08-25 06:32:23 UTC 2022-09-21 15:08:10 UTC 143.204.55.7
c.bing.com (1) 247 2012-05-22 10:26:32 UTC 2022-09-21 04:19:27 UTC 13.107.21.200
ocsp.sectigo.com (1) 487 2018-12-17 11:31:55 UTC 2022-09-21 12:11:24 UTC 172.64.155.188
criteo-sync.teads.tv (1) 1786 2017-02-17 10:06:41 UTC 2022-09-21 04:54:35 UTC 23.195.255.234
api.videoly.co (1) 65425 2014-10-25 09:10:58 UTC 2022-09-21 15:08:10 UTC 172.67.74.16
sync-t1.taboola.com (1) 1269 2020-06-29 11:52:33 UTC 2022-09-21 04:28:35 UTC 141.226.228.48
simage2.pubmatic.com (1) 578 2012-07-21 03:13:48 UTC 2022-09-21 04:30:29 UTC 185.64.189.110
ocsp.pki.goog (26) 175 2017-06-14 07:23:31 UTC 2022-09-21 04:20:12 UTC 142.250.74.3
ocsp.digicert.com (14) 86 2012-05-21 07:02:23 UTC 2022-09-21 10:02:25 UTC 93.184.220.29
peech2eecha.com (1) 263220 2019-07-10 03:01:12 UTC 2022-09-21 09:47:05 UTC 34.200.91.135
dd.kelkoogroup.net (1) 0 2022-06-24 10:22:42 UTC 2022-09-21 11:21:12 UTC 54.230.111.25 Domain (kelkoogroup.net) ranked at: 79339
www.googletagmanager.com (1) 75 2012-12-25 14:52:06 UTC 2022-09-21 04:18:29 UTC 142.250.74.72
stats.g.doubleclick.net (1) 96 2013-06-02 22:47:44 UTC 2022-09-21 04:18:30 UTC 142.251.1.156
cm.g.doubleclick.net (2) 202 2013-05-30 23:19:45 UTC 2022-09-21 14:47:04 UTC 142.250.74.98
script.hotjar.com (1) 887 2020-11-05 16:23:46 UTC 2022-09-21 13:47:12 UTC 143.204.55.46
ib.adnxs.com (1) 241 2012-05-23 22:36:14 UTC 2022-09-21 04:20:40 UTC 37.252.173.38
static.criteo.net (1) 652 2015-06-24 06:04:54 UTC 2022-09-21 05:07:05 UTC 178.250.0.130
status.thawte.com (4) 5123 2017-11-27 12:33:51 UTC 2022-09-21 05:07:24 UTC 93.184.220.29
cdn.livechatinc.com (4) 6288 2012-06-22 08:37:34 UTC 2022-09-21 08:30:17 UTC 23.36.79.17
fonts.gstatic.com (2) 0 2014-08-29 13:43:22 UTC 2022-09-21 04:18:17 UTC 142.250.74.163 Domain (gstatic.com) ranked at: 540
www.clarity.ms (2) 1404 2018-08-22 07:41:57 UTC 2022-09-21 04:21:20 UTC 13.107.213.53
x.bidswitch.net (1) 286 2017-08-28 15:21:00 UTC 2022-09-21 04:20:43 UTC 3.126.140.73
ag.gbc.criteo.com (1) 5925 2018-12-17 13:17:41 UTC 2022-09-21 06:23:16 UTC 185.235.84.218
secure.livechatinc.com (1) 6541 2012-08-20 19:27:12 UTC 2022-09-21 08:30:17 UTC 23.36.79.17
www.facebook.com (2) 99 2017-01-30 05:00:00 UTC 2022-09-21 04:11:59 UTC 157.240.200.35
adservice.google.no (2) 96969 2017-09-26 14:23:08 UTC 2022-09-21 04:19:09 UTC 216.58.207.194
gem.gbc.criteo.com (1) 6039 2019-02-06 06:21:41 UTC 2022-09-21 14:32:45 UTC 178.250.6.131
r.casalemedia.com (2) 1896 2012-06-24 01:17:14 UTC 2022-09-21 04:54:35 UTC 104.18.19.126
exchange.mediavine.com (1) 2109 2020-11-23 01:20:19 UTC 2022-09-21 04:55:21 UTC 3.66.137.164
googleads.g.doubleclick.net (2) 42 2021-02-20 15:43:32 UTC 2022-09-21 11:43:35 UTC 142.250.74.130
gum.criteo.com (2) 381 2015-01-22 10:58:57 UTC 2022-09-21 13:34:31 UTC 178.250.2.146
uuid-a.akamaihd.net (2) 58960 2020-06-12 05:58:34 UTC 2022-09-21 09:46:55 UTC 23.36.76.99
no-go.kelkoogroup.net (5) 0 2017-10-30 14:27:38 UTC 2022-09-21 11:21:12 UTC 95.211.116.27 Domain (kelkoogroup.net) ranked at: 79339
www.fjellsport.no (1) 728033 2020-11-18 18:12:10 UTC 2022-09-21 09:18:39 UTC 104.18.23.72
fonts.googleapis.com (1) 8877 2014-07-21 13:19:55 UTC 2022-09-21 14:09:32 UTC 142.250.74.10
firefox.settings.services.mozilla.com (2) 867 2020-06-04 20:08:41 UTC 2022-09-21 10:25:05 UTC 143.204.55.36
click.plarimoplus.com (1) 0 2022-03-16 20:16:18 UTC 2022-09-21 07:13:23 UTC 174.137.133.17 Unknown ranking
connect.facebook.net (1) 139 2012-05-22 02:51:28 UTC 2022-09-21 04:18:14 UTC 157.240.200.14
pixel.rubiconproject.com (1) 314 2012-10-09 03:17:38 UTC 2022-09-21 04:20:43 UTC 213.19.162.80
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-09-21 04:18:32 UTC 143.204.55.35
push.services.mozilla.com (1) 2140 2015-09-03 10:29:36 UTC 2022-09-21 04:20:37 UTC 52.89.136.7
img-getpocket.cdn.mozilla.net (6) 1631 2017-09-01 03:40:57 UTC 2022-09-21 14:38:57 UTC 34.120.237.76
accounts.livechatinc.com (1) 7698 2017-07-31 05:50:56 UTC 2022-09-21 08:30:18 UTC 23.36.79.17
js.testfreaks.com (2) 85188 2020-04-02 00:24:48 UTC 2022-09-21 15:08:10 UTC 143.204.55.83
www.google.no (2) 25607 2016-04-05 19:50:59 UTC 2022-09-21 05:12:13 UTC 142.250.74.3
c.clarity.ms (1) 803 2021-02-03 23:22:47 UTC 2022-09-21 04:21:26 UTC 20.234.93.27
static.hotjar.com (1) 641 2014-11-01 05:14:27 UTC 2022-09-21 04:21:58 UTC 143.204.55.84
adservice.google.com (2) 76 2021-02-20 16:10:48 UTC 2022-09-21 13:38:01 UTC 216.58.211.2
dnacdn.net (2) 3760 2019-09-02 15:07:45 UTC 2022-09-21 05:22:50 UTC 178.250.0.157
b.clarity.ms (1) 3462 2021-07-27 12:49:08 UTC 2022-09-21 05:51:38 UTC 20.75.32.255

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
 No alerts detected

mnemonic secure dns
 No alerts detected

Quad9 DNS
Scan Date Severity Indicator Comment
2022-09-21 2 beambroth.com Sinkholed
2022-09-21 2 beambroth.com Sinkholed


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 142.250.74.161
Date UQ / IDS / BL URL IP
2023-03-23 16:23:29 +0000 0 - 0 - 0 ky331mof.page.link/SiJ8 142.250.74.161
2023-03-22 19:04:48 +0000 0 - 0 - 0 fhpat1yg.page.link/1gGs 142.250.74.161
2023-03-21 16:32:09 +0000 0 - 0 - 0 c83dstwf.page.link/nYJz 142.250.74.161
2023-03-20 18:44:34 +0000 0 - 0 - 8 ngwcscyd.page.link/KrvS7LqTXrouZ8fK7 142.250.74.161
2023-03-20 15:11:24 +0000 0 - 0 - 8 ngwcscyd.page.link/KrvS7LqTXrouZ8fK7 142.250.74.161


Last 5 reports on ASN: GOOGLE
Date UQ / IDS / BL URL IP
2023-03-23 18:19:10 +0000 0 - 0 - 1 www.youtube.com/attribution_link?c=coachblog- (...) 216.58.207.206
2023-03-23 18:18:44 +0000 0 - 0 - 2 robloxbloomeffect.blogspot.am/ 142.250.74.1
2023-03-23 18:18:08 +0000 0 - 0 - 2 ip77cc.nzsmtp.12w52k.4ir8yy.76452.exea41.dfah (...) 35.205.61.67
2023-03-23 18:17:50 +0000 0 - 0 - 2 36761.4ir8yy.76452.exea41.dfahyp.edu.cn.lchon (...) 35.205.61.67
2023-03-23 18:17:33 +0000 0 - 1 - 0 filehippo.de/download_ccleaner/download/58156 (...) 35.186.241.3


Last 3 reports on domain: hamid0808.blogspot.com
Date UQ / IDS / BL URL IP
2022-09-21 15:08:15 +0000 0 - 0 - 2 hamid0808.blogspot.com/ 142.250.74.161
2022-09-04 16:11:35 +0000 0 - 0 - 2 hamid0808.blogspot.com/ 142.250.74.161
2022-08-30 20:02:29 +0000 0 - 0 - 2 hamid0808.blogspot.com/ 142.250.74.161


No other reports with similar screenshot

JavaScript

Executed Scripts (63)

Executed Evals (1)
#1 JavaScript::Eval (size: 147) - SHA256: 4570527997213e7b6f1646ca9dbb2aee54e7a767c71412960bd8f5127c11dbad
(function() {
    return /iPad/.test(navigator.userAgent) ? "t" : /Mobile|iP(hone|od)|Android|BlackBerry|IEMobile|Silk/.test(navigator.userAgent) ? "m" : "d"
})();

Executed Writes (2)
#1 JavaScript::Write (size: 6234) - SHA256: 5890ef14d253cec12ea19bdbc0b9416a7075a5fb0d6a24d83124754f536fde09
< !DOCTYPE html >
    < html >
    < head >
    < link rel = "stylesheet"
href = "https://fonts.googleapis.com/css?family=Noto+Sans:400,700&subset=latin-ext&display=swap" > < /link> < style >
    * {
        font - family: 'Noto Sans', sans - serif;
        box - sizing: border - box; - webkit - font - smoothing: antialiased; - moz - osx - font - smoothing: grayscale; - webkit - tap - highlight - color: transparent;
    }
body {
    margin: 0;
} < /style> < style data - emotion = "css-global 1yzzujv" > .css - 1 yzzujv {
        max - width: 100 % ;
        position: absolute;
        bottom: 0;
        z - index: 2;
        display: -webkit - box;
        display: -webkit - flex;
        display: -ms - flexbox;
        display: flex; - webkit - align - items: flex - end; - webkit - box - align: flex - end; - ms - flex - align: flex - end;
        align - items: flex - end;
        will - change: width, height, transform, opacity; - webkit - backface - visibility: hidden;
        backface - visibility: hidden;
        padding: 0.5e m 0.5e m 1e m 1e m;
        right: 0; - webkit - box - pack: end; - ms - flex - pack: end; - webkit - justify - content: flex - end;
        justify - content: flex - end;
        --primary - color: #2000F0;--secondary-color:# FFFFFF;
        --tertiary - color: # E3E3E3;
    } < /style><style data-emotion="css-global 1aasxu6">.css-1aasxu6{display:-webkit-box;display:-webkit-flex;display:-ms-flexbox;display:flex;-webkit-flex-direction:column;-ms-flex-direction:column;flex-direction:column;min-width:0;--primary-color:#2000F0;--secondary-color:#FFFFFF;--tertiary-color:#E3E3E3;}</style > < style data - emotion = "css-global 1g9ek8d" > .css - 1 g9ek8d {
        display: -webkit - box;display: -webkit - flex;display: -ms - flexbox;display: flex;min - width: 0;--primary - color: #2000F0;--secondary-color:# FFFFFF;--tertiary - color: # E3E3E3;
    } < /style><style data-emotion="css-global 12o38j9">.css-12o38j9{display:-webkit-box;display:-webkit-flex;display:-ms-flexbox;display:flex;width:60px;height:60px;box-shadow:0 4px 12px rgba(0,0,0,0.3);border-radius:50%;background:#FFFFFF;-webkit-box-pack:center;-ms-flex-pack:center;-webkit-justify-content:center;justify-content:center;margin-left:auto;--primary-color:#2000F0;--secondary-color:#FFFFFF;--tertiary-color:#E3E3E3;position:relative;background:var(--primary-color);color:#111111;background-color:#ED8026;}.css-12o38j9:hover{cursor:pointer;}</style > < style data - emotion = "css-global 2jkngm" > .css - 2 jkngm {
        -webkit - appearance: none; - moz - appearance: none; - ms - appearance: none;
        appearance: none;
        background: transparent;
        border: 0;
        display: inline - block;
        margin: 0;
        padding: 0.5e m;
        color: inherit;
        cursor: pointer;
        --primary - color: #2000F0;--secondary-color:# FFFFFF;
        --tertiary - color: # E3E3E3;
        padding: 0.5e m;
        padding: 0;
        display: -webkit - box;
        display: -webkit - flex;
        display: -ms - flexbox;
        display: flex; - webkit - box - pack: center; - ms - flex - pack: center; - webkit - justify - content: center;
        justify - content: center; - webkit - align - items: center; - webkit - box - align: center; - ms - flex - align: center;
        align - items: center;
        border - radius: 6 px;
        --primary - color: #2000F0;--secondary-color:# FFFFFF;
        --tertiary - color: # E3E3E3;
        padding: 0;
        width: 100 % ;
        display: -webkit - box;
        display: -webkit - flex;
        display: -ms - flexbox;
        display: flex; - webkit - box - pack: center; - ms - flex - pack: center; - webkit - justify - content: center;
        justify - content: center; - webkit - align - items: center; - webkit - box - align: center; - ms - flex - align: center;
        align - items: center;
    }.css - 2 jkngm: disabled {
        cursor: not - allowed;
    } < /style><style data-emotion="css-global eiheq7">.css-eiheq7{position:relative;display:-webkit-box;display:-webkit-flex;display:-ms-flexbox;display:flex;width:32px;height:32px;-webkit-align-items:center;-webkit-box-align:center;-ms-flex-align:center;align-items:center;-webkit-box-pack:center;-ms-flex-pack:center;-webkit-justify-content:center;justify-content:center;--primary-color:#2000F0;--secondary-color:#FFFFFF;--tertiary-color:#E3E3E3;}</style > < style data - emotion = "css-global 1mpchac" > .css - 1 mpchac {
        display: inline - block; - webkit - flex - shrink: 0; - ms - flex - negative: 0;flex - shrink: 0;width: 1e m;height: 1e m;font - size: 2 rem; - webkit - user - select: none; - moz - user - select: none; - ms - user - select: none;user - select: none;fill: currentColor;
    } < /style><style data-emotion="css-global 1adcsh3">.css-1adcsh3{opacity:1;-webkit-transform:scale(1);-moz-transform:scale(1);-ms-transform:scale(1);transform:scale(1);transform-origin:50% 50%;-webkit-transition:200ms cubic-bezier(0.18, 0.89, 0.32, 1.28) 50ms;transition:200ms cubic-bezier(0.18, 0.89, 0.32, 1.28) 50ms;--primary-color:#2000F0;--secondary-color:#FFFFFF;--tertiary-color:#E3E3E3;}</style > < style data - emotion = "css-global 1o92iqh" > .css - 1 o92iqh {
        position: absolute;z - index: 1;left: 0;right: 0;bottom: 1 px; - webkit - transition: opacity 150 ms cubic - bezier(0.33, 0, 0.67, 1) 50 ms;transition: opacity 150 ms cubic - bezier(0.33, 0, 0.67, 1) 50 ms;display: -webkit - box;display: -webkit - flex;display: -ms - flexbox;display: flex;width: 32 px;height: 32 px; - webkit - align - items: center; - webkit - box - align: center; - ms - flex - align: center;align - items: center; - webkit - box - pack: center; - ms - flex - pack: center; - webkit - justify - content: center;justify - content: center;opacity: 0;--primary - color: #2000F0;--secondary-color:# FFFFFF;--tertiary - color: # E3E3E3;
    } < /style><style data-emotion="css "></style >
    < /head> < body > < div dir = "ltr"
role = "main"
data - lc - id = "0"
data - lc - event = "mouseover:hjmi0ciabrq;focus:8kcufl5d89;blur:hf3k49sdz2h"
class = "css-1yzzujv eqd5v0k0" > < div class = "css-1aasxu6 ek650k30" > < div class = "css-1g9ek8d e108e6fy0" > < /div><div class="css-1g9ek8d e108e6fy0"><div data-lc-id="1" data-lc-event="click:qw4xknwbh6i;mouseleave:eyo7bhkw5x;mouseenter:otno4zzh08;focus:nko3si51il;blur:761ioo65ec" class="css-12o38j9 e1ybl9g10"><button aria-label="Open LiveChat chat widget" data-lc-id="2" data-lc-event="click:37ha7qak8m5;focus:dtcvez27m57;blur:80txuahhqi" class="e1mwfyk10 css-2jkngm e1m5b1js0" type="button"><div aria-hidden="true" class="css-eiheq7 e1dmt1bi1"><svg color="inherit" viewBox="0 0 32 32" class="css-1mpchac"><path fill="#FFFFFF" d="M12.63,26.46H8.83a6.61,6.61,0,0,1-6.65-6.07,89.05,89.05,0,0,1,0-11.2A6.5,6.5,0,0,1,8.23,3.25a121.62,121.62,0,0,1,15.51,0A6.51,6.51,0,0,1,29.8,9.19a77.53,77.53,0,0,1,0,11.2,6.61,6.61,0,0,1-6.66,6.07H19.48L12.63,31V26.46"></path > < path fill = "#ED8026"
d = "M19.57,21.68h3.67a2.08,2.08,0,0,0,2.11-1.81,89.86,89.86,0,0,0,0-10.38,1.9,1.9,0,0,0-1.84-1.74,113.15,113.15,0,0,0-15,0A1.9,1.9,0,0,0,6.71,9.49a74.92,74.92,0,0,0-.06,10.38,2,2,0,0,0,2.1,1.81h3.81V26.5Z"
class = "css-1adcsh3 e1nep2br0" > < /path></svg > < div class = "css-1o92iqh e1dmt1bi0" > < /div></div > < /button></div > < /div></div > < /div></body >
    < /html>
#2 JavaScript::Write (size: 5544) - SHA256: 96a6ed556833a53f80cf13d81b5f39cbd9a9c6dcbb1d3e2251786aff47c08173
< html > < head > < title > Dising < /title><script type="text/javascript
">rD = false;function edcTimeout() {rD = true; }function cto_AI(u,n) { if (rD) {return;} var cto_ifr=document.getElementById('cto_sub_ifr_px');var cto_ifr_doc=null;if(typeof(cto_ifr)==='undefined'||cto_ifr==null)cto_ifr_doc=document;else if(cto_ifr.contentDocument)cto_ifr_doc=cto_ifr.contentDocument;else if(cto_ifr.contentWindow)cto_ifr_doc=cto_ifr.contentWindow.document;else if(cto_ifr.document)cto_ifr_doc=cto_ifr.document;else cto_ifr_doc=document;if(cto_ifr_doc.createElement){var im=cto_ifr_doc.createElement('IMG');if(im){var d=document.getElementById('cto_pc');if(d!==null && d.appendChild){d.appendChild(im)}if(n){im.onload=n;im.onerror=n;im.onabort=n}im.src=u}} }function cto_l(){if(typeof(cto_loaded)==='undefined')cto_loaded=1;else cto_loaded++;}function cto_run() {function l_i1_1(){cto_AI('https://x.bidswitch.net/sync?dsp_id=46&user_id=k-C8tPtKF9mtUufYKX9-ft8aXAjckP-8GVhIe01g&expires=30', cto_l);}function l_i2_1(){cto_AI('https://cm.g.doubleclick.net/pixel?google_nid=cjp&google_sc&google_ula=913071&CriteoUserId=k-eEFtXaF9mtUufYKX9-ft8aXAjck7ZDA7-V4-nQ&google_cm&google_hm=ay1lRUZ0WGFGOW10VXVmWUtYOS1mdDhhWEFqY2s3WkRBNy1WNC1uUQ', cto_l);}function l_i3_1(){cto_AI('https://ib.adnxs.com/getuid?https://dis.criteo.com/dis/rtb/appnexus/cookiematch.aspx?appnxsid=$UID', cto_l);}function l_i4_1(){cto_AI('https://r.casalemedia.com/rum?cm_dsp_id=20&external_user_id=k-xChfcqF9mtUufYKX9-ft8aXAjcm5t6W9vUxPPA', cto_l);}function l_i5_1(){cto_AI('https://ad.360yield.com/match?publisher_dsp_id=38&external_user_id=k-6kghBqF9mtUufYKX9-ft8aXAjcnHrzKmacI8qQ', cto_l);}function l_i6_1(){cto_AI('https://contextual.media.net/cksync.php?cs=3&type=crt&ovsid=k-Wtyi46F9mtUufYKX9-ft8aXAjcnRUD2_tiQDEg', cto_l);}function l_i7_1(){cto_AI('https://exchange.mediavine.com/usersync/push?partner=criteo&partnerId=k-ymcfAKF9mtUufYKX9-ft8aXAjcnYvvWipip5GgIYSMMKFYUt', cto_l);}function l_i8_1(){cto_AI('https://sync.outbrain.com/cookie-sync?p=criteo&uid=k-gQY7KKF9mtUufYKX9-ft8aXAjckoX2qUJA6qNg', cto_l);}function l_i9_1(){cto_AI('https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&piggybackCookie=uid:k-oRzYv6F9mtUufYKX9-ft8aXAjcn3nuQQPgSfNw', cto_l);}function l_i10_1(){cto_AI('https://pixel.rubiconproject.com/tap.php?v=6434&nid=2149&put=k-pIDuW6F9mtUufYKX9-ft8aXAjcmyP3ouMYmh2A&expires=30', cto_l);}function l_i11_1(){cto_AI('https://match.sharethrough.com/sync/v1?source_id=7658cb1d77a660882b48db06&source_user_id=k-RqG9R6F9mtUufYKX9-ft8aXAjckzVKY8l2YUGg', cto_l);}function l_i12_1(){cto_AI('https://rtb-csync.smartadserver.com/redir/?partnerid=79&partneruserid=k-mlePGaF9mtUufYKX9-ft8aXAjcnUlHdtxY2knA', cto_l);}function l_i13_1(){cto_AI('https://sync-t1.taboola.com/sg/criteortb-network/1/rtb-h/?taboola_hm=k-qiEeIqF9mtUufYKX9-ft8aXAjcn_pjtQ8mhzQw', cto_l);}function l_i14_1(){cto_AI('https://criteo-sync.teads.tv/um?eid=80&uid=k-QhJCJKF9mtUufYKX9-ft8aXAjckm6BVBnYy8ZQ', cto_l);}function l_i15_1(){cto_AI('https://eb2.3lift.com/xuid?mid=2711&xuid=k-vuY0CqF9mtUufYKX9-ft8aXAjclpl6whwoiTiA&dongle=013b', cto_l);}function l_i16_1(){cto_AI('https://ups.analytics.yahoo.com/ups/58301/sync?_origin=1&uid=k-_iyzpqF9mtUufYKX9-ft8aXAjcl12o8anuxjkw', cto_l);}function l_i17_1(){cto_AI('https://ad.yieldlab.net/m?dm_id=8666&ext_id=k-x29Mo6F9mtUufYKX9-ft8aXAjclt-TFlvp-Q2A', l_i17_2);}function l_i17_2(){cto_AI('https://ad.yieldlab.net/m?dt_id=8664&ext_id=k-x29Mo6F9mtUufYKX9-ft8aXAjclt-TFlvp-Q2A', l_i17_3);}function l_i17_3(){cto_AI('https://ad.yieldlab.net/m?dt_id=12438557&ext_id=k-x29Mo6F9mtUufYKX9-ft8aXAjclt-TFlvp-Q2A', cto_l);}function l_i18_1(){cto_AI('https://cm.adform.net/pixel?adform_pid=15&adform_pc=k-g363m6F9mtUufYKX9-ft8aXAjcnm2_VYy4VlTA', cto_l);}function l_i19_1(){cto_AI('https://visitor.omnitagjs.com/visitor/sync?uid=732efe97317e6352de4c1caf24b5064b&name=CRITEO&visitor=k-qRPYo6F9mtUufYKX9-ft8aXAjcnfJqLS7UdYxA', cto_l);}function l_i20_1(){cto_AI('https://gum.criteo.com/sync?c=8&r=1&a=1&u=https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D28645%26dpuuid%3D%40USERID%40', l_i20_2);}function l_i20_2(){cto_AI('https://gum.criteo.com/sync?c=83&r=1&a=1&u=https%3A%2F%2Fbeacon.krxd.net%2Fusermatch.gif%3Fpartner%3Dcriteo%26partner_uid%3D%40USERID%40', l_i20_3);}function l_i20_3(){cto_AI('https://gum.criteo.com/sync?c=10&r=1&u=https%3A%2F%2Fs.thebrighttag.com%2Fcs%3Fbtt%3D0%26tp%3Dcr%26uid%3D%40USERID%40', cto_l);}function l_i21_1(){cto_AI('https://id5-sync.com/s/966/9.gif?puid=k-vX5rJ6F9mtUufYKX9-ft8aXAjcnQMCr-waK5ZQ', cto_l);}function l_i22_1(){cto_AI('https://criteo-partners.tremorhub.com/sync?UICR=k-6zAdAqF9mtUufYKX9-ft8aXAjcnWB4aUj_nMrg', cto_l);}function l_i23_1(){cto_AI('https://sync-criteo.ads.yieldmo.com/sync?id=k-h8WmsKF9mtUufYKX9-ft8aXAjcmkU1coCyldQA&pn_id=criteo&ext=1', cto_l);}cto_tot = 23;l_i1_1();l_i2_1();l_i3_1();l_i4_1();l_i5_1();l_i6_1();l_i7_1();l_i8_1();l_i9_1();l_i10_1();l_i11_1();l_i12_1();l_i13_1();l_i14_1();l_i15_1();l_i16_1();l_i17_1();l_i18_1();l_i19_1();l_i20_1();l_i21_1();l_i22_1();l_i23_1();}</script></head><body><iframe id="
cto_sub_ifr_px " src="
javascript: false " style="
width: 1 px;
height: 1 px;
display: none;
"><div id='cto_pc' style='display:none'></div></iframe><script type="
text / javascript ">document.body.onload = function(){ if(window.cto_run) cto_run(); };window.setTimeout(function(){ if(typeof(cto_loaded)==='undefined' || cto_loaded<cto_tot) {edcTimeout();var redirectLocation=location.protocol+'//static.criteo.net/empty.html'; location.replace(redirectLocation);}}, 5000);</script></body></html>


HTTP Transactions (153)


Request Response
                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.36
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Backoff, Content-Length, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Wed, 21 Sep 2022 14:12:02 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 4f01f770085624552bc30a98954f963a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: pUuqnWeenUdOZ_7TmDnkjcIQaswNoQ5kWaGhwKfLs_Dv_amQKXzYXQ==
Age: 3361


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    2d12f67fe57a87e7366b662d153a5582
Sha1:   d7b02d81cc74f24a251d9363e0f4b0a149264ec1
Sha256: 73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "35BAAAE7B3CE3110EBB2B075881CFAB55ECF3EAB57D834283FD18AC691B41FA2"
Last-Modified: Tue, 20 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11441
Expires: Wed, 21 Sep 2022 18:18:44 GMT
Date: Wed, 21 Sep 2022 15:08:03 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.35
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Wed, 21 Sep 2022 04:35:14 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: wXRV1MK1jo9oHghPrBPfCQHrkiMrTh2dqLkvT33buh31nmDxKDvbLw==
age: 37970
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    6113f8408c59aebe188d6af273b90743
Sha1:   7398873bf00f99944eaa77ad3ebc0d43c23dba6b
Sha256: b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Wed, 21 Sep 2022 15:08:03 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.36
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Wed, 21 Sep 2022 15:03:22 GMT
Cache-Control: max-age=3600
Expires: Wed, 21 Sep 2022 15:50:33 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 bb1da7862c4968b28920b91b324095c0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: vev-__RvBjCXf00QS9StmkiMxhdBumi83PJdazNXypM78L2CkHyhBA==
Age: 281


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            GET / HTTP/1.1 
Host: hamid0808.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         142.250.74.161
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
                                        
Location: https://hamid0808.blogspot.com/
Content-Encoding: gzip
Date: Wed, 21 Sep 2022 15:08:03 GMT
Expires: Wed, 21 Sep 2022 15:08:03 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
X-XSS-Protection: 1; mode=block
Content-Length: 179
Server: GSE


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Size:   179
Md5:    5d5ad06b0514ba2963ee86f3f7d16dfc
Sha1:   e6b633265c7af8f91236d4d5b14720b0400fe429
Sha256: c79a4f4404724ecbdd0339e3778927bc53e7a648399e0c89bb84f876c00399e0
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 21 Sep 2022 15:08:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 6456
Cache-Control: 'max-age=158059'
Date: Wed, 21 Sep 2022 15:08:04 GMT
Last-Modified: Wed, 21 Sep 2022 13:20:29 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: +FjSn9Yh1nJmNYuqnq3fXw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         52.89.136.7
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: K5dGurJJlQX4AFyR18+/4RB98WE=

                                        
                                            GET / HTTP/1.1 
Host: hamid0808.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

search
                                         142.250.74.161
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
expires: Wed, 21 Sep 2022 15:08:04 GMT
date: Wed, 21 Sep 2022 15:08:04 GMT
cache-control: private, max-age=0
last-modified: Tue, 20 Sep 2022 16:35:08 GMT
etag: W/"ba67b597866d87e4cd27ee045918f3d9daacb7585caca7e8279508cc2bc275a6"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 1492
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (365)
Size:   1492
Md5:    03ce4c9e659deeec0ef6d2448c767f81
Sha1:   a4569ebf7d249c158363bdff7be97cae07955ddf
Sha256: 1382feb78a011f6f4a073db2a9f58adfc563a31c675befa0bb87e3d95fdf62f1
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 21 Sep 2022 15:08:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "210F3B2018FD4EFC6E80D72F9BB166C1695741A6337BC08F940DD59D033EE546"
Last-Modified: Wed, 21 Sep 2022 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15868
Expires: Wed, 21 Sep 2022 19:32:33 GMT
Date: Wed, 21 Sep 2022 15:08:05 GMT
Connection: keep-alive

                                        
                                            GET /qbeutmap?key=9496916a4336066df825344b94b6ca6b HTTP/1.1 
Host: beambroth.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hamid0808.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         192.243.61.227
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Server: nginx/1.22.0
Date: Wed, 21 Sep 2022 15:08:05 GMT
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: u_pl=17372399; expires=Thu, 22 Sep 2022 15:08:05 GMT ain=eyJhbGciOiJIUzI1NiJ9.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.fxx3UbfN1S-1m9WoePAkUv4PHkPXtHk-eFtj4LLHlSo; expires=Wed, 21 Sep 2022 15:09:05 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 74dca8f0ee29fbcb7f423ccb09026c78
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text
Size:   1235
Md5:    cbbad32f271b879187789957932ca905
Sha1:   2d5cde67a23d40242130c0145957db7d5481579b
Sha256: c4559465a78901231129589c4a6453e59385a0659deeb175f4d047e10434f3f8

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21183
Expires: Wed, 21 Sep 2022 21:01:08 GMT
Date: Wed, 21 Sep 2022 15:08:05 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21183
Expires: Wed, 21 Sep 2022 21:01:08 GMT
Date: Wed, 21 Sep 2022 15:08:05 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21183
Expires: Wed, 21 Sep 2022 21:01:08 GMT
Date: Wed, 21 Sep 2022 15:08:05 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1874c3ef-e614-4fd9-9d88-b87eac5ea0e6.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9201
x-amzn-requestid: 6dbfae76-f9ab-4f31-9b62-bcf5d9ce4515
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YxzxlEYcoAMFaQQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632a333d-7d147481402cc46a751b72ed;Sampled=0
x-amzn-remapped-date: Tue, 20 Sep 2022 21:40:13 GMT
x-amz-cf-pop: SFO5-P2, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: JEb0g486u6AjYFbf8rSbreKjh0m1GsAGbvykHl0oahmVN2ciqe5FOw==
via: 1.1 7dcaa43cd0535d889b549e6a30a57aa0.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Tue, 20 Sep 2022 22:14:57 GMT
etag: "1eef1ab0099d09d1cf965b6e7b55fe2aa4e18e54"
age: 60788
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9201
Md5:    a692964324dbb9c460a1b855808d02e6
Sha1:   1eef1ab0099d09d1cf965b6e7b55fe2aa4e18e54
Sha256: 3fa9e780d62fffb635064aeed542c8e04923ff943c6080476836fab6c24e2426
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4f06ad5e-83fd-449e-b227-1b9d5389e57d.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10244
x-amzn-requestid: 71f08b9e-e977-48de-ad60-5192a43db517
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YYwBkGqjIAMFz0Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63202d3d-0af3334d085ca4a764e31bb5;Sampled=0
x-amzn-remapped-date: Tue, 13 Sep 2022 07:11:57 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: e3MMA-NVstIsR7M9_JGH05i1e8pK17RsjyERrSMlC3uoHsWw_7ABtA==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 28390a4d24ed4fdccd685d99cd06cf4e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 20 Sep 2022 19:18:32 GMT
age: 71373
etag: "b1cd04a66852694284eeef16a1cde38896e33c03"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10244
Md5:    14e6ddceb639a5f4875aecb796f95c79
Sha1:   b1cd04a66852694284eeef16a1cde38896e33c03
Sha256: 4c0657a00d7fb4caefa64c28340cad94a306cc393cffe692fcc69c65a80f2391
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0be442b0-65b4-4d6f-bdd3-b9f3847359a1.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9227
x-amzn-requestid: 26d977d3-f4d2-4218-a8f4-a56c873e6a26
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YiFzKG2zIAMFoDw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6323e9ad-0bfac6c453e6ea5a311a28a8;Sampled=0
x-amzn-remapped-date: Fri, 16 Sep 2022 03:12:45 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: pHepBEdMttNsKHcCRBHNSilQTcZLBjRGUkwzCvgzXLmiASW9UKo3Mw==
via: 1.1 33d72803ad26b392c1b578a2b1276580.cloudfront.net (CloudFront), 1.1 ee330666adf9f04c8c30094f8ddcd004.cloudfront.net (CloudFront), 1.1 google
date: Wed, 21 Sep 2022 05:24:55 GMT
age: 34990
etag: "cb328d0f66f4c2779bc64342ef89735636ae5ded"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9227
Md5:    9556616ca10eb4383b1e15f360fbf6d4
Sha1:   cb328d0f66f4c2779bc64342ef89735636ae5ded
Sha256: 4f945ab342352aea3f4b2242d084d527bb517cf7c6efd0c10a828f0bee9f5d3f
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F06a0b4c5-4223-42cf-b012-2e09b250c8c1.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 12048
x-amzn-requestid: 59e98571-f927-44b3-b088-29ec1e4cc3bb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YYxD-FnIIAMF5Eg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63202ee6-14e47d9a3ae47d0f607033a8;Sampled=0
x-amzn-remapped-date: Tue, 13 Sep 2022 07:19:02 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 55e0txtcytlUpcNWSLrHWN3FC1t4dMHGTrHGhNV7YFIhOz6c45UcCQ==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 cd858042f70b416ca05e042acf3908a4.cloudfront.net (CloudFront), 1.1 google
date: Wed, 21 Sep 2022 12:43:54 GMT
age: 8651
etag: "37222a70df5d9a69073b4b32ebc3a5da60006001"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   12048
Md5:    c2db94039cb675cb250519fe57b2b3c9
Sha1:   37222a70df5d9a69073b4b32ebc3a5da60006001
Sha256: 444f4359ac25747e7c5d7e09202f195d407bc94a4933ac7ebbbaf9839bf59aff
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4c2e0de8-088f-449b-a3cb-bbb83e3883a6.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 11832
x-amzn-requestid: 75065a71-5f2d-4987-915b-9bddc772c76a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YugI_EsLIAMFdmQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6328e09f-1248d25405209da3353d4a4a;Sampled=0
x-amzn-remapped-date: Mon, 19 Sep 2022 21:35:27 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: gLh2EBTPdXvFtZuYKH1NVZebvnz4Rhs-f_rZPtfJpIWNemEk0upeOQ==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 707e733794d52100fde0ab21bf0b1462.cloudfront.net (CloudFront), 1.1 google
date: Tue, 20 Sep 2022 22:07:08 GMT
age: 61257
etag: "8b91bc3069a3217bc719c27959d578b353b5d9dc"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   11832
Md5:    2ed7323b395e757f7766ea0045efdaca
Sha1:   8b91bc3069a3217bc719c27959d578b353b5d9dc
Sha256: 8daf8cb1464daa5f72bc4f1049adb4aba00b2c2dec11cb3ade3454ec2ebbfb63
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fecaa9082-610c-41c1-ae9a-e453d87828ab.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10038
x-amzn-requestid: 4cf38a70-a706-4e6a-b854-9404727c599d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yxy1mHDCIAMF5-g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632a31bd-5aba5b0640221b302a19781b;Sampled=0
x-amzn-remapped-date: Tue, 20 Sep 2022 21:33:49 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: NzOpixfxr2pFiDhF5WUGmjD8r2CTn1grSkCEyWvthxRq0djbDKjknA==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 20 Sep 2022 22:15:05 GMT
age: 60780
etag: "54ed14436a75ba2aeb8459bad2ce70229aff4203"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10038
Md5:    dab1f2cd68979d2004ba4449d759a341
Sha1:   54ed14436a75ba2aeb8459bad2ce70229aff4203
Sha256: e782fb5ede547e1b167719068c6821c62414dcb0991bf9ac38285cb3ce8894e3
                                        
                                            GET /qbeutmap?shu=e33bacc39d0814e12679b84fcd33f7f9cda33bb7142dc4dd900b84e2b31871c4a6e0bed653ec870d834975c25fef237e2f40d12965cc9c15de012b2b75eb70d5b96efd9f709f917bc188f9b2ef7f85089c70b9fd&pst=1663772945&rmtc=t&uuid=&pii=&in=false&key=9496916a4336066df825344b94b6ca6b&refer=https%3A%2F%2Fhamid0808.blogspot.com%2F HTTP/1.1 
Host: beambroth.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://beambroth.com/qbeutmap?key=a969ca5c9ad2611762f11b79a526e2d2&submetric=17372399
Cookie: u_pl=17372399; ain=eyJhbGciOiJIUzI1NiJ9.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.fxx3UbfN1S-1m9WoePAkUv4PHkPXtHk-eFtj4LLHlSo; cjs=t
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin

search
                                         192.243.61.227
HTTP/1.1 302 Found
Content-Type: text/html
                                        
Server: nginx/1.22.0
Date: Wed, 21 Sep 2022 15:08:05 GMT
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Location: http://click.plarimoplus.com/click?seat=453255&adid=453255&i=jG6CVnW9M2Y_0
Set-Cookie: pdhtkv=true; expires=Thu, 22 Sep 2022 15:08:05 GMT uncs=1; expires=Thu, 22 Sep 2022 15:08:05 GMT pdhtkv28=true; expires=Thu, 22 Sep 2022 15:08:05 GMT uncs28=1; expires=Thu, 22 Sep 2022 15:08:05 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 646d8c40834603a9345133b7d7b8486e
Strict-Transport-Security: max-age=0; includeSubdomains


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /click?seat=453255&adid=453255&i=jG6CVnW9M2Y_0 HTTP/1.1 
Host: click.plarimoplus.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         174.137.133.17
HTTP/1.1 302 Found
                                        
Cache-Control: no-store
Content-Length: 0
Age: 0
Connection: keep-alive
Location: https://uuid-a.akamaihd.net/sb/?r=https%3A%2F%2Fpeech2eecha.com%2Fclick%3Fc%3D31f4d94539bf11edaa990242ac110003%26i%3D775%26n%3D3%26subid%3D409777_17372399%26sid%3D
Pragma: no-cache

                                        
                                            GET /sb/?r=https%3A%2F%2Fpeech2eecha.com%2Fclick%3Fc%3D31f4d94539bf11edaa990242ac110003%26i%3D775%26n%3D3%26subid%3D409777_17372399%26sid%3D HTTP/1.1 
Host: uuid-a.akamaihd.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         23.36.76.99
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                        
Server: Apache
Content-Length: 154
Location: /sb/?cc=1&r=https%3A%2F%2Fpeech2eecha.com%2Fclick%3Fc%3D31f4d94539bf11edaa990242ac110003%26i%3D775%26n%3D3%26subid%3D409777_17372399%26sid%3D
Set-Cookie: b53eedc13__=f366aa3f26b3e6df64a79de29140d6763497fe5c4.1663772886; expires=Thu, 21 Sep 2023 15:08:06 GMT; domain=.akamaihd.net; path=/; HttpOnly; SameSite=None; Secure
ETag: "d2715d34e10e5a9f3692d96bd0fbb282:1592835897"
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
P3P: CP="We do not have a P3P policy."
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
Unused62: 8096267
Expires: Wed, 21 Sep 2022 15:08:06 GMT
Cache-Control: max-age=0, no-cache, no-store, private
Pragma: no-cache
Date: Wed, 21 Sep 2022 15:08:06 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   154
Md5:    52558d05355ee6e9d14ff3cf8a5a3ef0
Sha1:   52cfd7dd3859dc0578849a7b1c91bb8f91ad84c2
Sha256: bac5546ea0f819f461c9023592ec2398a45a6c3aab78e55fed8b7c908dce6060
                                        
                                            GET /sb/?cc=1&r=https%3A%2F%2Fpeech2eecha.com%2Fclick%3Fc%3D31f4d94539bf11edaa990242ac110003%26i%3D775%26n%3D3%26subid%3D409777_17372399%26sid%3D HTTP/1.1 
Host: uuid-a.akamaihd.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: b53eedc13__=f366aa3f26b3e6df64a79de29140d6763497fe5c4.1663772886
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         23.36.76.99
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                        
Server: Apache
Content-Length: 154
Location: https://peech2eecha.com/click?c=31f4d94539bf11edaa990242ac110003&i=775&n=3&subid=409777_17372399&sid=f366aa3f26b3e6df64a79de29140d6763497fe5c4
Set-Cookie: b53eedc13__=f366aa3f26b3e6df64a79de29140d6763497fe5c4.1663772886; expires=Thu, 21 Sep 2023 15:08:06 GMT; domain=.akamaihd.net; path=/; HttpOnly; SameSite=None; Secure
ETag: "d2715d34e10e5a9f3692d96bd0fbb282:1592835897"
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
P3P: CP="We do not have a P3P policy."
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
Unused62: 8096267
Expires: Wed, 21 Sep 2022 15:08:06 GMT
Cache-Control: max-age=0, no-cache, no-store, private
Pragma: no-cache
Date: Wed, 21 Sep 2022 15:08:06 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   154
Md5:    52558d05355ee6e9d14ff3cf8a5a3ef0
Sha1:   52cfd7dd3859dc0578849a7b1c91bb8f91ad84c2
Sha256: bac5546ea0f819f461c9023592ec2398a45a6c3aab78e55fed8b7c908dce6060
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         143.204.42.165
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Wed, 21 Sep 2022 15:08:06 GMT
Last-Modified: Wed, 21 Sep 2022 15:01:56 GMT
Server: ECS (bsa/EB1C)
X-Cache: Miss from cloudfront
Via: 1.1 dac7cf040932e0c072eeed10afdd7b3e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: jwSmGQstuSDlzf1QFRYhnLtzw-KWxU2AT0fY1y6TvkHHJYfD-hJPog==
Age: 370

                                        
                                            GET /click?c=31f4d94539bf11edaa990242ac110003&i=775&n=3&subid=409777_17372399&sid=f366aa3f26b3e6df64a79de29140d6763497fe5c4 HTTP/1.1 
Host: peech2eecha.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         34.200.91.135
HTTP/2 302 Found
                                        
date: Wed, 21 Sep 2022 15:08:06 GMT
content-length: 0
location: https://no.shoppingpunch.com/external?merchant=7246223&click_id=31f4d94539bf11edaa990242ac110003&source_id=1068-1fe4n1v--https%3A%2F%2Famazon.com--PATH--0.0011322--FjellsportNO-PO-Amazon&cmp_code=413
set-cookie: tp_usr=61bafbc70d4211ed95a20242ac110003; Path=/; Domain=.peech2eecha.com; Expires=Fri, 21-Oct-2022 15:08:06 GMT; Max-Age=2592000; Secure; SameSite=None
expires: Thu, 01 Jan 1970 00:00:00 GMT
X-Firefox-Spdy: h2

                                        
                                            POST / HTTP/1.1 
Host: status.thawte.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 4912
Cache-Control: 'max-age=158059'
Date: Wed, 21 Sep 2022 15:08:08 GMT
Last-Modified: Wed, 21 Sep 2022 13:46:16 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /ctl/go/sitesearchGo?.ts=1663772886870&.sig=eN0X9lPJ0Rxh_aqx95FzZpIr23g-&affiliationId=96980166&comId=7246223&country=no&offerId=a21337412b733f4d3ae3dd5831b3b0ce&searchId=1076100371022_1663772886848_7755052&service=36&tokenId=dbf5736e-e34f-4d32-8841-1632ac5a2a85&custom1=413&custom2=2247873 HTTP/1.1 
Host: no-go.kelkoogroup.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         95.211.116.27
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Wed, 21 Sep 2022 15:08:08 GMT
leadId: dc1-kls-prod-ls-04.prod.dc1.kelkoo.net_1663772888472_714004
clickId: 107698148_1663772888466_1574646
country: no
Accept-CH: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory
X-DataDome: protected
Request-Time: PT0.017459S
X-Robots-Tag: noindex,nofollow
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: DENY
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: master-only
Content-Length: 27946
Set-Cookie: datadome=KK2y~UFxI9hwSLsRGcTTx5.qWKZgl1jzPsFyYYm-pB0sX_yIdqECI6UKQAkk7_xCOqdcC65tf6nOLH7a8Cv1v-aIvjbp9qV0d_ngFa6TafteuEeBpiqtuOCJ8nlNpsy; Max-Age=31536000; Expires=Thu, 21 Sep 2023 15:08:08 GMT; SameSite=Lax; Path=/; Domain=.kelkoogroup.net; Secure kelkooID=a4c6294-18360978d92-68c62; Max-Age=31536000; Expires=Thu, 21 Sep 2023 15:08:08 GMT; SameSite=None; Path=/; Domain=kelkoogroup.net; Secure; HTTPOnly
P3P: CP="Anything"
ApacheTracking: localhost
Keep-Alive: timeout=40, max=94
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (12978)
Size:   27946
Md5:    498c3434eb877cebe95ec222330c8362
Sha1:   ba4bdd40a22be8387ee4d6ed7ce66b6a0e84a0f6
Sha256: 2fe55fca6e37409cfc55c94e56a0fb389322c39f5fb17cc453b389cffd32c2a1
                                        
                                            GET /assets/images/p.png?country=no&k=612f7a9541cd6ea61eb554c0e4cff437ea5e0c10e724056a71100f707743242ffec3eba3df6a1d6518a4602bbf03c38d9b7ed151a3afed44c604edc851c450cbd191c836221a2104d18c737d243fd60a7521c161748d07c236784c7df857ca38f7c4c1546819284edd20ba8366207767b6e5e2114a7a8475ed4cc9ecc7d34a8528b8b89172367cc67f8d582c00e8468b6ad23f279b6ec084f9939a4ab16b2876445d2e146ab3265f1a5be1b382d59d0e384b81e9e0b4ff634f38f343b8220d7954c88d4ff18250c2&leadId=dc1-kls-prod-ls-04.prod.dc1.kelkoo.net_1663772888472_714004&clickId=107698148_1663772888466_1574646 HTTP/1.1 
Host: no-go.kelkoogroup.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no-go.kelkoogroup.net/ctl/go/sitesearchGo?.ts=1663772886870&.sig=eN0X9lPJ0Rxh_aqx95FzZpIr23g-&affiliationId=96980166&comId=7246223&country=no&offerId=a21337412b733f4d3ae3dd5831b3b0ce&searchId=1076100371022_1663772886848_7755052&service=36&tokenId=dbf5736e-e34f-4d32-8841-1632ac5a2a85&custom1=413&custom2=2247873
Connection: keep-alive
Cookie: datadome=KK2y~UFxI9hwSLsRGcTTx5.qWKZgl1jzPsFyYYm-pB0sX_yIdqECI6UKQAkk7_xCOqdcC65tf6nOLH7a8Cv1v-aIvjbp9qV0d_ngFa6TafteuEeBpiqtuOCJ8nlNpsy; kelkooID=a4c6294-18360978d92-68c62
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         95.211.116.27
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Wed, 21 Sep 2022 15:08:08 GMT
Request-Time: PT0.00174S
X-Robots-Tag: noindex,nofollow
Cache-Control: private, must-revalidate
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: DENY
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: master-only
Content-Length: 68
P3P: CP="Anything"
ApacheTracking: localhost
Keep-Alive: timeout=40, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced\012- data
Size:   68
Md5:    91e42db1c66c0b276abf6234dc50b2eb
Sha1:   c1986af3c26609b8b7d8933f99c51c1a89e9ea6b
Sha256: 63ef318d96b5d0d0ceba6e04a4e622b1158335cdc67c49e27839132c6f655058
                                        
                                            GET /tags.js HTTP/1.1 
Host: dd.kelkoogroup.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no-go.kelkoogroup.net/
Connection: keep-alive
Cookie: datadome=KK2y~UFxI9hwSLsRGcTTx5.qWKZgl1jzPsFyYYm-pB0sX_yIdqECI6UKQAkk7_xCOqdcC65tf6nOLH7a8Cv1v-aIvjbp9qV0d_ngFa6TafteuEeBpiqtuOCJ8nlNpsy; kelkooID=a4c6294-18360978d92-68c62
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

search
                                         54.230.111.25
HTTP/2 200 OK
content-type: text/javascript
                                        
content-length: 42506
server: Apache
strict-transport-security: max-age=63072000; includeSubDomains; preload
last-modified: Thu, 08 Sep 2022 07:49:28 GMT
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
via: 1.1 1aa52a2a71a599aaf6b3df3a9c53b268.cloudfront.net (CloudFront), 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
date: Wed, 21 Sep 2022 14:50:02 GMT
cache-control: max-age=3600, public
expires: Wed, 21 Sep 2022 15:49:58 GMT
etag: "32ef7-5e825ab48f67d-gzip"
vary: Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: FRA60-P2, OSL50-P1
x-amz-cf-id: vm8-C1QSeifiitc8BJy9GsvJxazHaF6aPQvE6X2n54jel9lw5vNI_Q==
age: 1090
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65432)
Size:   42506
Md5:    7150acd408b7e8d6c917ecfcfbe47050
Sha1:   cb61fa84f12b95b9be19e8fb351231e393d72dfa
Sha256: f2e8c6d5e71cff0727daf02501140f20ed2980b52a4b9f7db037efbd674a0854
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: no-go.kelkoogroup.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no-go.kelkoogroup.net/ctl/go/sitesearchGo?.ts=1663772886870&.sig=eN0X9lPJ0Rxh_aqx95FzZpIr23g-&affiliationId=96980166&comId=7246223&country=no&offerId=a21337412b733f4d3ae3dd5831b3b0ce&searchId=1076100371022_1663772886848_7755052&service=36&tokenId=dbf5736e-e34f-4d32-8841-1632ac5a2a85&custom1=413&custom2=2247873
Connection: keep-alive
Cookie: datadome=KK2y~UFxI9hwSLsRGcTTx5.qWKZgl1jzPsFyYYm-pB0sX_yIdqECI6UKQAkk7_xCOqdcC65tf6nOLH7a8Cv1v-aIvjbp9qV0d_ngFa6TafteuEeBpiqtuOCJ8nlNpsy; kelkooID=a4c6294-18360978d92-68c62; _ga=GA1.2.325058460.1663772888; _gid=GA1.2.332687042.1663772888
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         95.211.116.27
HTTP/1.0 403 Forbidden
                                        
Server: BigIP
Connection: Keep-Alive
Content-Length: 0

                                        
                                            POST /fp?country=no&k=612f7a9541cd6ea61eb554c0e4cff437ea5e0c10e724056a71100f707743242ffec3eba3df6a1d6518a4602bbf03c38d9b7ed151a3afed44c604edc851c450cbd191c836221a2104d18c737d243fd60a7521c161748d07c236784c7df857ca38f7c4c1546819284edd20ba8366207767b6e5e2114a7a8475ed4cc9ecc7d34a8528b8b89172367cc67f8d582c00e8468b6ad23f279b6ec084f9939a4ab16b2876445d2e146ab3265f1a5be1b382d59d0e384b81e9e0b4ff634f38f343b8220d7954c88d4ff18250c2&leadId=dc1-kls-prod-ls-04.prod.dc1.kelkoo.net_1663772888472_714004&clickId=107698148_1663772888466_1574646 HTTP/1.1 
Host: no-go.kelkoogroup.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no-go.kelkoogroup.net/ctl/go/sitesearchGo?.ts=1663772886870&.sig=eN0X9lPJ0Rxh_aqx95FzZpIr23g-&affiliationId=96980166&comId=7246223&country=no&offerId=a21337412b733f4d3ae3dd5831b3b0ce&searchId=1076100371022_1663772886848_7755052&service=36&tokenId=dbf5736e-e34f-4d32-8841-1632ac5a2a85&custom1=413&custom2=2247873
Content-Type: text/plain;charset=utf-8
Content-Length: 488
Origin: https://no-go.kelkoogroup.net
Connection: keep-alive
Cookie: datadome=KK2y~UFxI9hwSLsRGcTTx5.qWKZgl1jzPsFyYYm-pB0sX_yIdqECI6UKQAkk7_xCOqdcC65tf6nOLH7a8Cv1v-aIvjbp9qV0d_ngFa6TafteuEeBpiqtuOCJ8nlNpsy; kelkooID=a4c6294-18360978d92-68c62; _ga=GA1.2.325058460.1663772888; _gid=GA1.2.332687042.1663772888
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         95.211.116.27
HTTP/1.1 200 OK
Content-Type: text/plain; charset=UTF-8
                                        
Date: Wed, 21 Sep 2022 15:08:08 GMT
Request-Time: PT0.003482S
X-Robots-Tag: noindex,nofollow
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: DENY
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: master-only
Content-Length: 0
P3P: CP="Anything"
ApacheTracking: localhost
Keep-Alive: timeout=40, max=79
Connection: Keep-Alive

                                        
                                            GET /redirect?country=no&k=612f7a9541cd6ea61eb554c0e4cff437ea5e0c10e724056a71100f707743242ffec3eba3df6a1d6518a4602bbf03c38d9b7ed151a3afed44c604edc851c450cbd191c836221a2104d18c737d243fd60a7521c161748d07c236784c7df857ca38f7c4c1546819284edd20ba8366207767b6e5e2114a7a8475ed4cc9ecc7d34a8528b8b89172367cc67f8d582c00e8468b6ad23f279b6ec084f9939a4ab16b2876445d2e146ab3265f1a5be1b382d59d0e384b81e9e0b4ff634f38f343b8220d7954c88d4ff18250c2&leadId=dc1-kls-prod-ls-04.prod.dc1.kelkoo.net_1663772888472_714004&clickId=107698148_1663772888466_1574646&url=https%3A%2F%2Fwww.fjellsport.no%2Fmerker%2Falfa%2Falfa-horizon-a-p-s-gtx-black%3Fkk%3Da4c6294-18360978d92-68c62%26channable%3D03c6f96964003330312d3735373645%26utm_campaign%3D%26utm_content%3D%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_term%3D%26variantId%3D301-7576&initiator=dd HTTP/1.1 
Host: no-go.kelkoogroup.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no-go.kelkoogroup.net/ctl/go/sitesearchGo?.ts=1663772886870&.sig=eN0X9lPJ0Rxh_aqx95FzZpIr23g-&affiliationId=96980166&comId=7246223&country=no&offerId=a21337412b733f4d3ae3dd5831b3b0ce&searchId=1076100371022_1663772886848_7755052&service=36&tokenId=dbf5736e-e34f-4d32-8841-1632ac5a2a85&custom1=413&custom2=2247873
Connection: keep-alive
Cookie: datadome=KK2y~UFxI9hwSLsRGcTTx5.qWKZgl1jzPsFyYYm-pB0sX_yIdqECI6UKQAkk7_xCOqdcC65tf6nOLH7a8Cv1v-aIvjbp9qV0d_ngFa6TafteuEeBpiqtuOCJ8nlNpsy; kelkooID=a4c6294-18360978d92-68c62; _ga=GA1.2.325058460.1663772888; _gid=GA1.2.332687042.1663772888
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin

search
                                         95.211.116.27
HTTP/1.1 303 See Other
Content-Type: text/plain
                                        
Date: Wed, 21 Sep 2022 15:08:08 GMT
leadId: dc1-kls-prod-ls-04.prod.dc1.kelkoo.net_1663772888472_714004
clickId: 107698148_1663772888466_1574646
country: no
Location: https://www.fjellsport.no/merker/alfa/alfa-horizon-a-p-s-gtx-black?kk=a4c6294-18360978d92-68c62&channable=03c6f96964003330312d3735373645&utm_campaign=&utm_content=&utm_source=kelkoono&utm_medium=cpc&utm_term=&variantId=301-7576
Accept-CH: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory
X-DataDome: protected
Request-Time: PT0.012934S
X-Robots-Tag: noindex,nofollow
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: DENY
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: master-only
Content-Length: 0
Set-Cookie: datadome=83i2nQHLgyVvdtDwN6bSbb2xgtedrOnY2.o1eeuCl8wbs-9UDQticia0Ea9ybXYxpAmf9MdqnNMML3QDQwGtw9f.HE8Nx2mLDbq9D-MNQ5btwBh6aJ_TFAz4aiqzJUq; Max-Age=31536000; Expires=Thu, 21 Sep 2023 15:08:08 GMT; SameSite=Lax; Path=/; Domain=.kelkoogroup.net; Secure
P3P: CP="Anything"
ApacheTracking: localhost
Keep-Alive: timeout=40, max=93
Connection: Keep-Alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 2922
Cache-Control: 'max-age=158059'
Date: Wed, 21 Sep 2022 15:08:08 GMT
Last-Modified: Wed, 21 Sep 2022 14:19:26 GMT
Server: ECS (amb/6B77)
X-Cache: HIT
Content-Length: 279

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 2923
Cache-Control: 'max-age=158059'
Date: Wed, 21 Sep 2022 15:08:09 GMT
Last-Modified: Wed, 21 Sep 2022 14:19:26 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 279

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 21 Sep 2022 15:08:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   2334
Md5:    8ab2726fdc56579d2f5058ac931f8904
Sha1:   3abe86a031db62fbdb6333afdcd2ce273f02d5b9
Sha256: 988e507d094ca6bcaa4a8bfc8e12d9a3316bd1b4fdb61fcdbbb6ead790f2adfd
                                        
                                            GET /tracking.js HTTP/1.1 
Host: cdn.livechatinc.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fjellsport.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         23.36.79.17
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
last-modified: Thu, 08 Sep 2022 10:40:48 GMT
etag: W/"007b32487b3fb040f15d1ea195bd2acb"
x-amz-version-id: _xG88gXidICys4xDpATfRKLYWxJ0cOXw
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-amz-cf-pop: HAM50-C2
x-amz-cf-id: XfFQEPhNJ8FEv87XGAfLjDCzthgq9RDoJGT0nCuA8EZGTXxwL48iww==
content-length: 25611
cache-control: max-age=28800
expires: Wed, 21 Sep 2022 23:08:09 GMT
date: Wed, 21 Sep 2022 15:08:09 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   25611
Md5:    a443118060061ab6e271ebe122464239
Sha1:   155d13a2aa3bd75fea5c2298e4678cb76c07b084
Sha256: b98138ab7050589277e5751d6a3818e726bbd106b9523f104e23bd3933bff04d
                                        
                                            POST /collect?v=1&_v=j96&t=pageview&_s=1&dl=https%3A%2F%2Fno-go.kelkoogroup.net%2Fctl%2Fgo%2FsitesearchGo%3F.ts%3D1663772886870%26.sig%3DeN0X9lPJ0Rxh_aqx95FzZpIr23g-%26affiliationId%3D96980166%26comId%3D7246223%26country%3Dno%26offerId%3Da21337412b733f4d3ae3dd5831b3b0ce%26searchId%3D1076100371022_1663772886848_7755052%26service%3D36%26tokenId%3Ddbf5736e-e34f-4d32-8841-1632ac5a2a85%26custom1%3D413%26custom2%3D2247873&dp=%2F96980166%7C7246223%7C&ul=en-us&de=UTF-8&dt=Du%20sendes%20videre%20til%20Fjellsport.no&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=QACAAAABAAAAAC~&cid=325058460.1663772888&tid=UA-168544891-6&_gid=332687042.1663772888&_r=1&cd1=96980166&cd2=dc1-kls-prod-ls-04.prod.dc1.kelkoo.net_1663772888472_714004&cd3=7246223&cd4=a4c6294-18360978d92-68c62&cd5=&cd6=96980166%7C7246223%7C&z=991721712 HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://no-go.kelkoogroup.net
Connection: keep-alive
Referer: https://no-go.kelkoogroup.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0

search
                                         142.250.74.174
HTTP/2 200 OK
content-type: image/gif
                                        
access-control-allow-origin: https://no-go.kelkoogroup.net
date: Wed, 21 Sep 2022 15:08:09 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
x-content-type-options: nosniff
access-control-allow-credentials: true
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 35
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 21 Sep 2022 15:08:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 21 Sep 2022 15:08:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /gtm.js?id=GTM-TP3749N HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fjellsport.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.72
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 21 Sep 2022 15:08:09 GMT
expires: Wed, 21 Sep 2022 15:08:09 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 81930
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (21254)
Size:   81930
Md5:    e7056ad246491e84b988b19d4149ab4c
Sha1:   33df200905fc6c898c7bac80e0349ad71b7d101b
Sha256: 0d5bbc88f013e384d280893ec1a899f702f3bf9f4b074709bc975fba4ea33788
                                        
                                            GET /merker/alfa/alfa-horizon-a-p-s-gtx-black?kk=a4c6294-18360978d92-68c62&channable=03c6f96964003330312d3735373645&utm_campaign=&utm_content=&utm_source=kelkoono&utm_medium=cpc&utm_term=&variantId=301-7576 HTTP/1.1 
Host: www.fjellsport.no
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no-go.kelkoogroup.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         104.18.23.72
HTTP/2 200 OK
content-type: text/html; charset=utf-8
                                        
date: Wed, 21 Sep 2022 15:08:09 GMT
cf-ray: 74e3b6eb2bd8b515-OSL
cache-control: no-store
link: </static/runtime.cf090e85760578352103.87.nb-NO.js>; rel="modulepreload"; as="script"; crossorigin="anonymous", </static/main.e2615d9e584b05ce9517.87.nb-NO.js>; rel="modulepreload"; as="script"; crossorigin="anonymous", </static/vendors~main.5b7af246f2ce7d5dd4a2.87.nb-NO.js>; rel="modulepreload"; as="script"; crossorigin="anonymous", </static/globals.87ce85a24e10be7d960b.css>; rel="preload"; as="style", </static/static.7db484bcb82ae1dbf8db.css>; rel="preload"; as="style", </static/f785bde0ec212bfab70652799e038381.woff2>; rel="preload"; as="font"; crossorigin="anonymous"
cf-cache-status: DYNAMIC
request-context: appId=cid-v1:0c613cf3-3219-4402-8e44-accd6521a7dc
set-cookie: session_id=a71c8ca6-cc4f-410a-b180-22b28a62f66c; path=/; secure; samesite=lax; httponly jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJodHRwOi8vc2NoZW1hcy54bWxzb2FwLm9yZy93cy8yMDA1LzA1L2lkZW50aXR5L2NsYWltcy9hbm9ueW1vdXMiOiIwOTkxNTk5My1kN2E4LTQ3ZmMtYjM2NC1jMTk2YmM0YjMwZGUiLCJuYmYiOjE2NjM3NzI4ODgsImV4cCI6MTY5NTMwODg4OCwiaWF0IjoxNjYzNzcyODg4LCJpc3MiOiJleGNpdGUiLCJhdWQiOiJleGNpdGUifQ.aFmHZoo2ExZABa_ModaoApTzoSrwP0He0j1vV_IOLGs; expires=Thu, 21 Sep 2023 15:08:09 GMT; path=/; secure; samesite=lax; httponly
x-worker-time: 265ms
vary: Accept-Encoding
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (25076)
Size:   132740
Md5:    ecbef4ec2f0f5b79917740c0083b715c
Sha1:   8e8b100e2afab3bea0b92119002e6f2cd3e94fa1
Sha256: 08add6c858b4bcb5358e7405481768cf2cda376b8fb214c6d76acd19f7bdc4e6
                                        
                                            GET /v3.3/customer/action/get_configuration?license_id=9240310&version=1261.8.8.1635.90.179.68.8.10.17.7.152&group_id=1&jsonp=__lc_static_config HTTP/1.1 
Host: api.livechatinc.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fjellsport.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         23.36.79.17
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
content-encoding: gzip
legacy: 2023-06-30
vary: Accept-Encoding
content-length: 1424
cache-control: public, max-age=334
expires: Wed, 21 Sep 2022 15:13:43 GMT
date: Wed, 21 Sep 2022 15:08:09 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (3886), with no line terminators
Size:   1424
Md5:    9fe01ccb287ea9d53967d9834587824d
Sha1:   a164dd649677abea81bfe38c313c2744c837e0e5
Sha256: 702e3b12237d236fdf2a321f4329f97825f786ec41174959ebeb169afa1a0f5d
                                        
                                            GET /v3.3/customer/action/get_localization?license_id=9240310&version=a2fb162d3655d456397b7117a50bebbc_75ad11d2d1c3176be554a3e49bc118fc&language=nb&group_id=1&jsonp=__lc_localization HTTP/1.1 
Host: api.livechatinc.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fjellsport.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         23.36.79.17
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
content-encoding: gzip
legacy: 2023-06-30
vary: Accept-Encoding
cache-control: public, max-age=334
expires: Wed, 21 Sep 2022 15:13:43 GMT
date: Wed, 21 Sep 2022 15:08:09 GMT
content-length: 4194
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (11444), with no line terminators
Size:   4194
Md5:    3ca6400e76ee4999d2594de6e9898fce
Sha1:   8a1f0ffebf8e4696494e4af4f99fb1753340c7e4
Sha256: c7d5a4e0acdf63627b19caf856e08f3423566d07b79ec04c6d2c43ce7bc99e07
                                        
                                            GET /customer/action/open_chat?license_id=9240310&group=1&embedded=1&widget_version=3&unique_groups=0 HTTP/1.1 
Host: secure.livechatinc.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fjellsport.no/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         23.36.79.17
HTTP/2 200 OK
content-type: text/html; charset=utf-8
                                        
content-encoding: gzip
vary: Accept-Encoding
content-length: 1968
date: Wed, 21 Sep 2022 15:08:09 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (4424), with no line terminators
Size:   1968
Md5:    6975fc9733be12516047d02256294684
Sha1:   d7d3d381d40b2fc3004bb3d1efbd9b54824466b4
Sha256: 4b673d4636d0081533e90b9bf9a9217d1405207d271aaeced82f90e59a3845d8
                                        
                                            GET /widget/static/js/0.96a16c18.chunk.js HTTP/1.1 
Host: cdn.livechatinc.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.livechatinc.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         23.36.79.17
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
last-modified: Wed, 07 Sep 2022 12:23:44 GMT
etag: W/"6a835528d087d08b1f0fe0642cb6d223"
x-amz-version-id: D3auGCHl.1EBD8fIsGg0TVEJ4vGgzVLu
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-amz-cf-pop: AMS54-C1
x-amz-cf-id: 2Z3Jj0ChNSBBVMOnJi6CzXCHxdv4j89b_Ig-RZcY8UGtT5nFkSAmPg==
content-length: 69542
cache-control: max-age=31536000
expires: Thu, 21 Sep 2023 15:08:09 GMT
date: Wed, 21 Sep 2022 15:08:09 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65462)
Size:   69542
Md5:    4e94f8d92e0b5b5d837c91a71518ae93
Sha1:   3a901f88735fe470d89fabae6f6da1bd6ef57370
Sha256: ad40d01aa34c47aa7e9bc7bf52adc65074e90e7ea81a3646ee536b79a278be8c
                                        
                                            GET /widget/static/js/2.ae17a60b.chunk.js HTTP/1.1 
Host: cdn.livechatinc.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.livechatinc.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         23.36.79.17
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
last-modified: Thu, 08 Sep 2022 10:40:49 GMT
x-amz-version-id: bpU.37FnIOPFeqPnyYN2_ycnjcD2Lb3N
server: AmazonS3
content-encoding: br
etag: W/"e6fe58bbd66bcb579db091bb3857594b"
vary: Accept-Encoding
x-amz-cf-pop: AMS54-C1
x-amz-cf-id: fUoYfoKRf_-mHPxNenC1mgk_IOQLtReBv2PlWcsF8yQyKpu_289HCA==
content-length: 94203
cache-control: max-age=31536000
expires: Thu, 21 Sep 2023 15:08:09 GMT
date: Wed, 21 Sep 2022 15:08:09 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65462)
Size:   94203
Md5:    abe670f887a53cd14952f83930b4e64c
Sha1:   0782b5828efbdc2aab89de12ce7b15d9d5ef9618
Sha256: 03325c5d00828b3c704161dc3264869027f126cd4ce8ed94bc8809b310174a36
                                        
                                            GET /widget/static/js/iframe.222338d2.chunk.js HTTP/1.1 
Host: cdn.livechatinc.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.livechatinc.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         23.36.79.17
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
last-modified: Thu, 08 Sep 2022 10:40:50 GMT
etag: W/"8aed37a370cde495e3ad2a56bc68002c"
x-amz-version-id: Zm7dFJHNhyR_7Soj8ZD0e520uRRz8f2v
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: -FUywuWfFex7fyWEhiDJqoacQOISn6YJ0cZNVdEQx3of7oPZmjdbAA==
content-length: 134381
cache-control: max-age=31536000
expires: Thu, 21 Sep 2023 15:08:09 GMT
date: Wed, 21 Sep 2022 15:08:09 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   134381
Md5:    15833ab236abbee9fc54fb7f73166b9f
Sha1:   27e1adc3a3c0f25d0cb79b561ec9fb658f922013
Sha256: 29286ec76a48a9c2164e7070bcc58a21a6a3c0f6477df1d0d7169d43c1311a25
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 21 Sep 2022 15:08:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /c/hotjar-75470.js?sv=7 HTTP/1.1 
Host: static.hotjar.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fjellsport.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.84
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
access-control-allow-origin: *
content-encoding: br
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=604800; includeSubDomains
x-cache-hit: 1
x-content-type-options: nosniff
date: Wed, 21 Sep 2022 15:07:33 GMT
cache-control: max-age=60
etag: W/44c5b2c28778fbfa99bba82f67827666
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: jOQIMcZDvIQu-qGm3iAMnzFgDflSOQNbNDq2FTBT4h-z7F7uiaWA8w==
age: 36
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (14567)
Size:   5180
Md5:    edc581f3e327e6d5350b522fb6395fad
Sha1:   47cf6ce8d0635031a7a3bcfda5f6bb5368468bee
Sha256: 1bc253eafebd5518203acf2cf1d5a810b596750090bf7e77960730a25f8b6891
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 21 Sep 2022 15:08:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 21 Sep 2022 15:08:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /s/notosans/v27/o-0IIpQlx3QUlC5A4PNr5TRA.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://secure.livechatinc.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.163
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 12860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 19 Sep 2022 21:03:13 GMT
expires: Tue, 19 Sep 2023 21:03:13 GMT
cache-control: public, max-age=31536000
age: 151497
last-modified: Mon, 09 May 2022 18:27:55 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 12860, version 1.0\012- data
Size:   12860
Md5:    ab21c24efd75543e16e34807ebc6cdec
Sha1:   eb2562f9729079333fbcbbe94868695669dd3301
Sha256: 88f00438d26021a325247c4427898f7c778a22976df9f1a9d9876429778bf265
                                        
                                            GET /s/notosans/v27/o-0NIpQlx3QUlC5A4PNjXhFVZNyB.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://secure.livechatinc.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.163
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 12684
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 19 Sep 2022 21:03:15 GMT
expires: Tue, 19 Sep 2023 21:03:15 GMT
cache-control: public, max-age=31536000
age: 151495
last-modified: Mon, 09 May 2022 18:28:04 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 12684, version 1.0\012- data
Size:   12684
Md5:    0c235386bcf6af06f67e6c89fd19e434
Sha1:   10720574d4609322023984a761f32f9518c07bc4
Sha256: c1c30918a861cb6a985ab55d54ad7e861682354197f164cb3b7194f20eed67ac
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 21 Sep 2022 15:08:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /modules.f4179535429bf14e77ee.js HTTP/1.1 
Host: script.hotjar.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fjellsport.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.46
HTTP/2 200 OK
content-type: application/javascript
                                        
content-length: 65420
date: Tue, 20 Sep 2022 16:01:07 GMT
accept-ranges: bytes
access-control-allow-origin: *
cache-control: max-age=31536000
content-encoding: br
cross-origin-resource-policy: cross-origin
etag: "4a99ec558aff503901b33da3d9b4ec1b"
last-modified: Tue, 20 Sep 2022 16:00:26 GMT
strict-transport-security: max-age=604800; includeSubDomains
x-content-type-options: nosniff
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: OE4eZsMWSHkg4BMo9-cYVg1o1mu43nRxI7_VRkQWCsnk5ECbd0F3aA==
age: 83223
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (48714)
Size:   65420
Md5:    4a99ec558aff503901b33da3d9b4ec1b
Sha1:   83d1a24dacc650c18594a5334ae15a144b5704ec
Sha256: ad082098bddf0eed29c4d958450687924b052f783a834f58e59495e0c8f3143b
                                        
                                            GET /v3.3/customer/rtm/ws?license_id=9240310 HTTP/1.1 
Host: api.livechatinc.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://secure.livechatinc.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: NYdKgReIzv8AzxF8GIPaYA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         23.36.79.17
HTTP/1.1 101 Switching Protocols
                                        
sec-websocket-accept: csaghzkevKTgtUdvvVD1F8aX4Tk=
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://secure.livechatinc.com
legacy: 2023-06-30
Date: Wed, 21 Sep 2022 15:08:10 GMT
Upgrade: websocket
Connection: Upgrade

                                        
                                            POST /customer/token HTTP/1.1 
Host: accounts.livechatinc.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 189
Origin: https://secure.livechatinc.com
Connection: keep-alive
Referer: https://secure.livechatinc.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         23.36.79.17
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-credentials: true
access-control-allow-origin: https://secure.livechatinc.com
cache-control: no-cache, no-store, max-age=0, must-revalidate
expires: Fri, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
content-length: 138
date: Wed, 21 Sep 2022 15:08:10 GMT
set-cookie: __lc_cid=6ca29603-4b5a-4db2-6c71-2b6fb0a81118; Path=/v2/customer/token; Domain=accounts.livechatinc.com; Expires=Sat, 21 Sep 2024 15:08:10 GMT; Max-Age=63072000; HttpOnly; Secure; SameSite=None __lc_cst=028e4aef4b974fd7640e6f9b33de6b1e75122dd5b148dc7f2fd6022ce75188321a41727300ea4e45efffd6efb8895b7f0269a4189c747aedaed636f29357; Path=/v2/customer/token; Domain=accounts.livechatinc.com; Expires=Sat, 21 Sep 2024 15:08:10 GMT; Max-Age=63072000; HttpOnly; Secure; SameSite=None __lc_cid=6ca29603-4b5a-4db2-6c71-2b6fb0a81118; Path=/customer/token; Domain=accounts.livechatinc.com; Expires=Sat, 21 Sep 2024 15:08:10 GMT; Max-Age=63072000; HttpOnly; Secure; SameSite=None __lc_cst=028e4aef4b974fd7640e6f9b33de6b1e75122dd5b148dc7f2fd6022ce75188321a41727300ea4e45efffd6efb8895b7f0269a4189c747aedaed636f29357; Path=/customer/token; Domain=accounts.livechatinc.com; Expires=Sat, 21 Sep 2024 15:08:10 GMT; Max-Age=63072000; HttpOnly; Secure; SameSite=None __oauth_redirect_detector=counter=1&t=1663772920&tag=2d7a3421b7087de9971b146854be7fe6189a3d8c; Path=/; Expires=Wed, 21 Sep 2022 15:08:40 GMT; HttpOnly; Secure; SameSite=None
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text
Size:   138
Md5:    d3963451410847dca28a3ef85aa0e57e
Sha1:   3df8742bde65d8d958d9f84521086ada3199d5f4
Sha256: 9a1a5eadb5201970279fcab670c457c761a3f42ef088e01caca7b6cfe819f55a
                                        
                                            GET /onpage/fjellsport.no/head.js HTTP/1.1 
Host: js.testfreaks.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fjellsport.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.83
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                        
content-length: 29238
server: nginx
access-control-allow-origin: *
access-control-allow-methods: POST, PUT, DELETE, GET, OPTIONS
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
cache-control: max-age=1800, public
x-ua-compatible: IE=Edge,chrome=1
x-request-id: 1733be932589ce8187e055eaf1b2633d
x-runtime: 0.010175
content-encoding: gzip
accept-ranges: bytes
date: Wed, 21 Sep 2022 14:49:02 GMT
x-varnish: 1754584424
via: 1.1 varnish, 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront)
vary: Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: u0MGdSjmgiHlQ1_xJ55_ISQM24ejDGTamRfHbCH-4ZXm3z0AdD_VMA==
age: 1148
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (32765)
Size:   29238
Md5:    ee846fd5f2e745f4d6cc53cde165a844
Sha1:   7fda582852392933611621c7f731a97496c12efb
Sha256: 9b602ff076089a19d8d96760ba1447c7399a3e1000cdf173dbe5ee6a2049f005
                                        
                                            GET /porterbuddy-widget.css HTTP/1.1 
Host: widget.porterbuddy.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fjellsport.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         54.230.111.27
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Mon, 01 Aug 2022 07:45:32 GMT
server: AmazonS3
content-encoding: gzip
date: Wed, 21 Sep 2022 01:24:59 GMT
cache-control: public, max-age=300, s-maxage=86400
etag: W/"44e07c559e0e666e3da9d739fcc682cc"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: qqbaj8bxkdP-O8py1iOaGXYfm9FP5_ZhcOgOkLPNdMHZUEoWeVLEEQ==
age: 49392
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   8773
Md5:    cf61c91ae743b98b4e275c74f9877b45
Sha1:   72df024dcb3ca696d9bd8dc77a86f0bcb5aca62b
Sha256: becee04a45e58acd5fb364587f0b2c56b0095c3492cdc28afe8e55133d1df9b3
                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fjellsport.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.174
HTTP/2 200 OK
content-type: text/javascript
                                        
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 19826
date: Wed, 21 Sep 2022 14:41:12 GMT
expires: Wed, 21 Sep 2022 16:41:12 GMT
cache-control: public, max-age=7200
age: 1618
last-modified: Sun, 11 Sep 2022 13:50:09 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1325)
Size:   19826
Md5:    cae538dcce82598fbe43c0bf443e62dd
Sha1:   cc68ac6be9c5e0087a0000e5735b83270ace30f5
Sha256: 954b9e9d9744e1319c51760780a35de2dec353afffac705c2cca6d836a5e056d
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 3285
Cache-Control: 'max-age=158059'
Date: Wed, 21 Sep 2022 15:08:10 GMT
Last-Modified: Wed, 21 Sep 2022 14:13:25 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 312

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 21 Sep 2022 15:08:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /leadtag.js HTTP/1.1 
Host: s.kk-resources.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fjellsport.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.7
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
Content-Length: 2595
Connection: keep-alive
X-Gravitee-Transaction-Id: 0d75a8dd-2208-4f24-b5a8-dd2208af244b
X-Gravitee-Request-Id: 0d75a8dd-2208-4f24-b5a8-dd2208af244b
Request-Time: 3
Accept-Ranges: bytes
Last-Modified: Tue, 12 Jul 2022 13:51:05 GMT
Content-Encoding: gzip
Date: Wed, 21 Sep 2022 14:32:12 GMT
Cache-Control: public, max-age=3600
ETag: "05e089e0c08fd98ee6b4f6497ec87752b123fc2f"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: fA0TRcDr_9Fq-c8fhn79I2taa6jT7I8dyTQ7rcmXV_T3d-2fdJIjIQ==
Age: 2158


--- Additional Info ---
Magic:  C source, ASCII text, with very long lines (6910)
Size:   2595
Md5:    b9c7aa9898d0e7b5d8dfa27c81eda1ac
Sha1:   3e22a4f4ac1fd469128de60e1a80433513242071
Sha256: 980531f0a81016e3a7a4c3fa56f75e7b791f1f4c09296992221bd766b91a53a0
                                        
                                            GET /en_US/fbevents.js HTTP/1.1 
Host: connect.facebook.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fjellsport.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         157.240.200.14
HTTP/2 200 OK
content-type: application/x-javascript; charset=utf-8
                                        
vary: Accept-Encoding
content-encoding: gzip
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: c5gRugRzz5auog3JrxetMv3xiQ3SvQFPw+1HO+jSu/AMK6MK1dD9ccoKWEWUAUQ+yKkMNBez/y5O3ICP1tvwxg==
content-length: 26839
x-fb-trip-id: 1679558926
date: Wed, 21 Sep 2022 15:08:10 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (64348)
Size:   26839
Md5:    9ecd89752214ef749272eef344b9089a
Sha1:   70a58a49c08934265ee34c74efb01d6b3124095d
Sha256: f76c51487e348977288fcaf83984cd8fe4e73758cc352402774d9eb94680d528
                                        
                                            GET /pagead/conversion_async.js HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fjellsport.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.164
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Wed, 21 Sep 2022 15:08:10 GMT
expires: Wed, 21 Sep 2022 15:08:10 GMT
cache-control: private, max-age=3600
etag: 3080337328058561381
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 15693
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1654)
Size:   15693
Md5:    890f716858b5f72587e47c5eca121cb5
Sha1:   91871a0acd9a0ab644d51036bb5ca0c3bdc5e687
Sha256: 7a3629e375468328b3fb25e1a6cc5749604f09099e8d2109f366e7e0226aee4a
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 21 Sep 2022 15:08:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 21 Sep 2022 15:08:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 6446
Cache-Control: 'max-age=158059'
Date: Wed, 21 Sep 2022 15:08:10 GMT
Last-Modified: Wed, 21 Sep 2022 13:20:44 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /widgetframe.html HTTP/1.1 
Host: widget.porterbuddy.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fjellsport.no/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         54.230.111.27
HTTP/2 200 OK
content-type: text/html
                                        
content-length: 101
last-modified: Mon, 01 Aug 2022 07:45:33 GMT
accept-ranges: bytes
server: AmazonS3
date: Wed, 21 Sep 2022 01:38:51 GMT
cache-control: public, max-age=300, s-maxage=86400
etag: "2946dfbe162d793818e2bd45f5338537"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 7gI-qlFpKn-hX6r4P34YQOPUBm986tUxASBuQOXMVQW6m2SW8CzZPw==
age: 48560
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text
Size:   101
Md5:    2946dfbe162d793818e2bd45f5338537
Sha1:   ac2a60035df5d7202f985956443ed580a0f53ecb
Sha256: 3e788329e1f4d21f3bf962b605d86cd5d6ca4703f44b2d695bb81953e7ad94d6
                                        
                                            GET /activityi;src=11203568;type=produ0;cat=produ0;ord=4737066675616;gtm=2wg9j0;auiddc=401301485.1663772889;u1=undefined;u3=FS188912;u4=Skist%C3%B8vler%20fjellski%2C%20langrenn%20og%20rulleski;~oref=https%3A%2F%2Fwww.fjellsport.no%2Fmerker%2Falfa%2Falfa-horizon-a-p-s-gtx-black%3Fkk%3Da4c6294-18360978d92-68c62%26channable%3D03c6f96964003330312d3735373645%26utm_campaign%3D%26utm_content%3D%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_term%3D%26variantId%3D301-7576? HTTP/1.1 
Host: 11203568.fls.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fjellsport.no/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         142.250.74.70
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 21 Sep 2022 15:08:10 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
strict-transport-security: max-age=21600
pragma: no-cache
x-content-type-options: nosniff
content-encoding: gzip
server: cafe
content-length: 555
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Wed, 21-Sep-2022 15:23:10 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (770), with no line terminators
Size:   555
Md5:    b18668011fa180de50f391f0b3832e7f
Sha1:   6e6d32a9ec26228b3ab47a5dc6a70e95033f5937
Sha256: 0fac6247cce2fa459d4544546081a0b83e97d85b408620fc570aa3f6be34cc10
                                        
                                            GET /activityi;src=11203568;type=all-p0;cat=visit0;ord=6800687187873;gtm=2wg9j0;auiddc=401301485.1663772889;u1=%2Fmerker%2Falfa%2Falfa-horizon-a-p-s-gtx-black;~oref=https%3A%2F%2Fwww.fjellsport.no%2Fmerker%2Falfa%2Falfa-horizon-a-p-s-gtx-black%3Fkk%3Da4c6294-18360978d92-68c62%26channable%3D03c6f96964003330312d3735373645%26utm_campaign%3D%26utm_content%3D%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_term%3D%26variantId%3D301-7576? HTTP/1.1 
Host: 11203568.fls.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fjellsport.no/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         142.250.74.70
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 21 Sep 2022 15:08:10 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
strict-transport-security: max-age=21600
pragma: no-cache
x-content-type-options: nosniff
content-encoding: gzip
server: cafe
content-length: 509
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Wed, 21-Sep-2022 15:23:10 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (736), with no line terminators
Size:   509
Md5:    6a1ba5be4eaa87e481fea4c1cfcd7505
Sha1:   317b960cfe50e9af52f8732ca5e436991ce5d158
Sha256: 0f3ab1f778fc9fdc530f92a2c2a16390ca85929c784329c7552a8c0f7e31e43d
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 21 Sep 2022 15:08:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /onpage/fjellsport.no/reviews.json?key=301-7514&url_key=Horizon%20A%2FP%2FS%20GTX&callback=testFreaks.cb HTTP/1.1 
Host: js.testfreaks.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fjellsport.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         143.204.55.83
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
content-length: 630
server: nginx
access-control-allow-origin: *
access-control-allow-methods: POST, PUT, DELETE, GET, OPTIONS
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
cache-control: max-age=3600, public
x-ua-compatible: IE=Edge,chrome=1
etag: "c6662072edc01cda36cf682467eb44ff"
x-request-id: f2dd89e7bcf2ff6e56d46c251043fe4b
x-runtime: 0.028936
accept-ranges: bytes
date: Wed, 21 Sep 2022 15:08:10 GMT
x-varnish: 1754798579
via: 1.1 varnish, 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront)
x-cache: Miss from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: gUNgd0ac7MvlV_stWxx1CZ2_lcjs68ztgE7k_tAjYSgMI-GqWfi4mQ==
age: 0
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (630), with no line terminators
Size:   630
Md5:    c6662072edc01cda36cf682467eb44ff
Sha1:   46bc1c04f9318fd82e79ca6a56fd4e51cc11992f
Sha256: ce814f119e8d3ed9c47a0820b20064bc01e6a66e3358b1c559ac858f0a1b646d
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 21 Sep 2022 15:08:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: status.thawte.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 1710
Cache-Control: 'max-age=158059'
Date: Wed, 21 Sep 2022 15:08:10 GMT
Last-Modified: Wed, 21 Sep 2022 14:39:41 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: status.thawte.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 4914
Cache-Control: 'max-age=158059'
Date: Wed, 21 Sep 2022 15:08:10 GMT
Last-Modified: Wed, 21 Sep 2022 13:46:16 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471

                                        
                                            OPTIONS /k.gif HTTP/1.1 
Host: s.kelkoogroup.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: etag
Referer: https://www.fjellsport.no/
Origin: https://www.fjellsport.no
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         185.60.164.26
HTTP/1.1 200 OK
                                        
X-Gravitee-Transaction-Id: 3a5d0cc2-551b-49b7-9d0c-c2551be9b713
X-Gravitee-Request-Id: 3a5d0cc2-551b-49b7-9d0c-c2551be9b713
Vary: Origin
Access-Control-Max-Age: 3600
Access-Control-Allow-Origin: https://www.fjellsport.no
Access-Control-Allow-Headers: etag
Access-Control-Allow-Methods: GET
Access-Control-Allow-Credentials: true
Date: Wed, 21 Sep 2022 15:08:10 GMT
content-length: 0

                                        
                                            GET /k.gif HTTP/1.1 
Host: s.kelkoogroup.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
ETag: a2Vsa29vSWQ9YTRjNjI5NC0xODM2MDk3OGQ5Mi02OGM2Mg==
Origin: https://www.fjellsport.no
Connection: keep-alive
Referer: https://www.fjellsport.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         185.60.164.26
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
X-Gravitee-Transaction-Id: c2b5855f-6339-47c7-b585-5f6339f7c748
X-Gravitee-Request-Id: c2b5855f-6339-47c7-b585-5f6339f7c748
ETag: a2Vsa29vSWQ9YTRjNjI5NC0xODM2MDk3OGQ5Mi02OGM2Mg==
Vary: *,Origin
Pragma: no-cache
Expires: 0
Request-Time: 0
Accept-Ranges: bytes
Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate
Last-Modified: Fri, 01 Jan 2010 00:00:00 GMT
Access-Control-Allow-Origin: https://www.fjellsport.no
Access-Control-Expose-Headers: ETag
Access-Control-Allow-Credentials: true
Date: Wed, 21 Sep 2022 15:08:10 GMT
content-length: 43

                                        
                                            GET /bat.js HTTP/1.1 
Host: bat.bing.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fjellsport.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         13.107.21.200
HTTP/2 200 OK
content-type: application/javascript
                                        
cache-control: private,max-age=1800
content-length: 11367
content-encoding: gzip
last-modified: Thu, 28 Jul 2022 17:32:37 GMT
accept-ranges: bytes
etag: "80a8697a8a2d81:0"
vary: Accept-Encoding
set-cookie: MUID=0B08F0AAC9816CB60480E28CC8746D69; domain=.bing.com; expires=Mon, 16-Oct-2023 15:08:10 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: D92ECE64E98744DFB54877DE1C5B0DA6 Ref B: OSL30EDGE0122 Ref C: 2022-09-21T15:08:10Z
date: Wed, 21 Sep 2022 15:08:10 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (38826), with no line terminators
Size:   11367
Md5:    293ae3e0fc8b0d5c143fdf9d8490228d
Sha1:   3976c659b908e70818a3a1ac71860b497fe2d1a9
Sha256: 04a840d967ae836e14179bde574cabf14a1fc871182ca0f8193e7a0b06c727ab
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 21 Sep 2022 15:08:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   7455
Md5:    889d0ad442cc36abb3017b941d50691a
Sha1:   7e76d6ff6a51b566cde2946aa4de7e7eb8759b0d
Sha256: 45c2a43ce94614700d4c19ec373109233a584055dcf67ee07a51fda1e014608d
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 21 Sep 2022 15:08:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   64147
Md5:    213d4cd0da857b9e06e59caa957530dc
Sha1:   79fc9b352574338f1412e37a2ce9feb4dd91243f
Sha256: 468752ce5285356eaca3ed1f0748e3d1e6ddabc4e98487e7b299b74f4e6d0090
                                        
                                            GET /pagead/viewthroughconversion/785054750/?random=1663772890852&cv=9&fst=1663772890852&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=4&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2wg9j0&sendb=1&ig=0&data=event%3Dview_item&frm=0&url=https%3A%2F%2Fwww.fjellsport.no%2Fmerker%2Falfa%2Falfa-horizon-a-p-s-gtx-black%3Fkk%3Da4c6294-18360978d92-68c62%26channable%3D03c6f96964003330312d3735373645%26utm_campaign%3D%26utm_content%3D%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_term%3D%26variantId%3D301-7576&ref=https%3A%2F%2Fno-go.kelkoogroup.net%2F&tiba=Alfa%20Horizon%20A%2FP%2FS%20Gtx%20Black%20%7C%20Fjellsport.no&auid=401301485.1663772889&hn=www.google.com&async=1&rfmt=3&fmt=4 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fjellsport.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.130
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 21 Sep 2022 15:08:11 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 1225
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Wed, 21-Sep-2022 15:23:11 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2892), with no line terminators
Size:   1225
Md5:    09578bcb1887edf9015415224ac77d89
Sha1:   55c4c2e87f30cab0296b9675bb15818079408f79
Sha256: dcf82fd558c2497e452d6d1e2d3b15cfbd32ff8285e269b6a3865bd014273939
                                        
                                            GET /pagead/viewthroughconversion/1006168981/?random=1663772890849&cv=9&fst=1663772890849&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=4&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2wg9j0&sendb=1&ig=0&data=event%3Dview_item&frm=0&url=https%3A%2F%2Fwww.fjellsport.no%2Fmerker%2Falfa%2Falfa-horizon-a-p-s-gtx-black%3Fkk%3Da4c6294-18360978d92-68c62%26channable%3D03c6f96964003330312d3735373645%26utm_campaign%3D%26utm_content%3D%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_term%3D%26variantId%3D301-7576&ref=https%3A%2F%2Fno-go.kelkoogroup.net%2F&tiba=Alfa%20Horizon%20A%2FP%2FS%20Gtx%20Black%20%7C%20Fjellsport.no&auid=401301485.1663772889&hn=www.google.com&async=1&rfmt=3&fmt=4 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fjellsport.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.130
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 21 Sep 2022 15:08:11 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 1222
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Wed, 21-Sep-2022 15:23:11 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2894), with no line terminators
Size:   1222
Md5:    7de815fdd3f853989c3ce197a493775b
Sha1:   9ee42b417a28bc404a097981f13af977cd6b6e14
Sha256: 9f6766c9413b699aafb8603d650593384ad7d27080e9cd60bd1302f598173d53
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 6171
Cache-Control: 'max-age=158059'
Date: Wed, 21 Sep 2022 15:08:11 GMT
Last-Modified: Wed, 21 Sep 2022 13:25:20 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 313

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 21 Sep 2022 15:08:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /1/videos/0/387/?categoryTree=&brandName=Alfa&SKU=301-7514&productId=Alfa-mdl348110&productTitle=Alfa%20Horizon%20A%2FP%2FS%20Gtx%20Black&productVariation=301-7514&oos=0&maxItems=15&ytwv=&_b=Firefox&_bv=96.0&p=1&_w=1268&_h=939&_pl=nb&_cl=nb&tsltd=0&product_view_uuid=51cecfed-d74d-4e13-9c00-c3753cc0bcbd&hn=www.fjellsport.no&href=https%3A%2F%2Fw%C4%88.fjellsport.no%2Fmerk%C4%9A%2Falfa%C4%9E%C4%A0a-h%C4%92izon-%C4%A5p-s-gtx-black%3Fkk%3Da4c6294-18360978d92-68%C5%822%26channa%C4%B7e%3D03%C5%82f96%C5%A640%C5%A233%C5%A212d3735%C5%B2%C5%8A45%26utm_campaign%3D%C5%BA%C5%BC%C5%BE%C4%ABtent%C6%87%C5%BB%C5%BDsourc%C5%A0%C4%9Clko%C4%ABo%C6%88%C5%BD%C4%99dium%3Dcpc%C6%9F_%C6%8Cr%C6%A5%26vari%C5%9BtId%3D%C5%AD1-7576&callback=_vdlyb76036037c HTTP/1.1 
Host: dapi.videoly.co
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fjellsport.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         172.67.74.16
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                        
date: Wed, 21 Sep 2022 15:08:11 GMT
x-powered-by: Express
access-control-allow-origin: *
access-control-allow-methods: GET,PUT,POST,OPTIONS
access-control-allow-headers: Content-Type
access-control-allow-credentials: true
x-content-type-options: nosniff
etag: W/"364-hE4d+sfG5+9cIGb/EZ3uXWM2WjA"
set-cookie: vdly=s%3A4DXzX7PjeF1MoUqgLRv2F3aQZQuSlTsA.jJgNLpLQF7W%2F2G2AsxhlZ17W2F89l3yUTf2VizpyiNw; Path=/; Expires=Fri, 23 Dec 2022 15:08:11 GMT; HttpOnly; Secure; SameSite=None
via: 1.1 vegur
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4xhqpC0Z%2F51%2F1%2FYrMox7iA64XOGR32e11zMdWmPqotX8sxoRLgeKzDegbWiTdHCK7L46jQ0enLkVSFkRQQubJRlZwB9cM%2FEKkMFCA%2FQBJTbx0pugYjbWlCiBIwWEHKrZDA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74e3b6f8bed1b4ff-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (868), with no line terminators
Size:   556
Md5:    73a9a753e8790ad96c15c7052dc0bc60
Sha1:   decfbe50d072745c6adf048a2eae3e22a6e00ee7
Sha256: 20603f54772e416561dd2f2d351c458827fec8c0c2cd343d0d48fb9415f82edb
                                        
                                            GET /porterbuddy-storage.js HTTP/1.1 
Host: widget.porterbuddy.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://widget.porterbuddy.com/widgetframe.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         54.230.111.27
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Mon, 01 Aug 2022 07:45:30 GMT
server: AmazonS3
content-encoding: gzip
date: Wed, 21 Sep 2022 00:33:28 GMT
cache-control: public, max-age=300, s-maxage=86400
etag: W/"b314f8ef781f2a4b02e746dac72aedde"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: RgP6LrzhRWHpQOWN361qkJaGzxdYyIrVzztLcKHg7gBZCkZMUbMbTg==
age: 52484
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   1479
Md5:    7b305a6c08020e91d39496614252b918
Sha1:   35329b4286b2d9e9f261a3074141a148c3b687a1
Sha256: 0e0449c4bc2eca349bbf75c56eb679297b42633104b031b3202bccdf491394e5
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 21 Sep 2022 15:08:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /action/0?ti=5820557&tm=gtm002&Ver=2&mid=76bccbba-186f-4d8c-8732-45934a48062c&sid=3511d6a039bf11edbaf979aabaedf5df&vid=351219e039bf11edb0f42d8c7e35a7fd&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Alfa%20Horizon%20A%2FP%2FS%20Gtx%20Black%20%7C%20Fjellsport.no&p=https%3A%2F%2Fwww.fjellsport.no%2Fmerker%2Falfa%2Falfa-horizon-a-p-s-gtx-black%3Fkk%3Da4c6294-18360978d92-68c62%26channable%3D03c6f96964003330312d3735373645%26utm_campaign%3D%26utm_content%3D%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_term%3D%26variantId%3D301-7576&r=https%3A%2F%2Fno-go.kelkoogroup.net%2F&lt=1532&evt=pageLoad&sv=1&rn=60925 HTTP/1.1 
Host: bat.bing.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fjellsport.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         13.107.21.200
HTTP/2 204 No Content
                                        
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=0B0750AC4BB56ECB36E4428A4A406F5D; domain=.bing.com; expires=Mon, 16-Oct-2023 15:08:11 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: E9FF6D2795CD4BDBB1673E18C745A136 Ref B: OSL30EDGE0122 Ref C: 2022-09-21T15:08:11Z
date: Wed, 21 Sep 2022 15:08:10 GMT
X-Firefox-Spdy: h2

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 21 Sep 2022 15:08:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 21 Sep 2022 15:08:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /ddm/fls/i/src=11203568;type=all-p0;cat=visit0;ord=6800687187873;gtm=2wg9j0;auiddc=401301485.1663772889;u1=%2Fmerker%2Falfa%2Falfa-horizon-a-p-s-gtx-black;~oref=https%3A%2F%2Fwww.fjellsport.no%2Fmerker%2Falfa%2Falfa-horizon-a-p-s-gtx-black%3Fkk%3Da4c6294-18360978d92-68c62%26channable%3D03c6f96964003330312d3735373645%26utm_campaign%3D%26utm_content%3D%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_term%3D%26variantId%3D301-7576 HTTP/1.1 
Host: adservice.google.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://11203568.fls.doubleclick.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         216.58.211.2
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 21 Sep 2022 15:08:11 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
pragma: no-cache
x-content-type-options: nosniff
content-encoding: gzip
server: cafe
content-length: 508
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (64471)
Size:   86355
Md5:    45a3319be1d4ac2ae3b6fceb65bedcca
Sha1:   ab6709fad3825c25c0bea3fb753a1e82ed05af61
Sha256: acc0c9478d3d8d6e25f585c0a7221b4b9a99dd87693162feaed24c03e5c1ed0a
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 21 Sep 2022 15:08:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 21 Sep 2022 15:08:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /ddm/fls/i/src=11203568;type=produ0;cat=produ0;ord=4737066675616;gtm=2wg9j0;auiddc=401301485.1663772889;u1=undefined;u3=FS188912;u4=Skist%C3%B8vler%20fjellski%2C%20langrenn%20og%20rulleski;~oref=https%3A%2F%2Fwww.fjellsport.no%2Fmerker%2Falfa%2Falfa-horizon-a-p-s-gtx-black%3Fkk%3Da4c6294-18360978d92-68c62%26channable%3D03c6f96964003330312d3735373645%26utm_campaign%3D%26utm_content%3D%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_term%3D%26variantId%3D301-7576 HTTP/1.1 
Host: adservice.google.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://11203568.fls.doubleclick.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         216.58.211.2
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 21 Sep 2022 15:08:11 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
pragma: no-cache
x-content-type-options: nosniff
content-encoding: gzip
server: cafe
content-length: 553
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (769), with no line terminators
Size:   553
Md5:    dee32d28bfdd93ab6640f246aa518698
Sha1:   583e3f809c18e82197ad4efafd336bfd5cf704c3
Sha256: 6eac123e564d0ddfd81419ee01d4804905d01497e714b29e06ddb6581d205735
                                        
                                            POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j97&tid=UA-1379067-1&cid=956616143.1663772891&jid=912935164&gjid=875884707&_gid=1785399874.1663772891&_u=aGBAgEALAAAAAE~&z=2577373 HTTP/1.1 
Host: stats.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.fjellsport.no
Connection: keep-alive
Referer: https://www.fjellsport.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         142.251.1.156
HTTP/2 200 OK
content-type: text/plain
                                        
access-control-allow-origin: https://www.fjellsport.no
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Wed, 21 Sep 2022 15:08:11 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   4
Md5:    48c0473b7821185d937e685216e2168b
Sha1:   3743e47f8a429a5e87b86cb582d78940733d9d2e
Sha256: 570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
                                        
                                            GET /pagead/1p-user-list/1006168981/?random=1663772890849&cv=9&fst=1663772400000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=4&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2wg9j0&sendb=1&data=event%3Dview_item&frm=0&url=https%3A%2F%2Fwww.fjellsport.no%2Fmerker%2Falfa%2Falfa-horizon-a-p-s-gtx-black%3Fkk%3Da4c6294-18360978d92-68c62%26channable%3D03c6f96964003330312d3735373645%26utm_campaign%3D%26utm_content%3D%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_term%3D%26variantId%3D301-7576&ref=https%3A%2F%2Fno-go.kelkoogroup.net%2F&tiba=Alfa%20Horizon%20A%2FP%2FS%20Gtx%20Black%20%7C%20Fjellsport.no&async=1&fmt=3&is_vtc=1&random=1616120268&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y HTTP/1.1 
Host: www.google.no
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fjellsport.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.3
HTTP/2 200 OK
content-type: image/gif
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 21 Sep 2022 15:08:11 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /pagead/1p-user-list/785054750/?random=1663772890852&cv=9&fst=1663772400000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=4&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2wg9j0&sendb=1&data=event%3Dview_item&frm=0&url=https%3A%2F%2Fwww.fjellsport.no%2Fmerker%2Falfa%2Falfa-horizon-a-p-s-gtx-black%3Fkk%3Da4c6294-18360978d92-68c62%26channable%3D03c6f96964003330312d3735373645%26utm_campaign%3D%26utm_content%3D%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_term%3D%26variantId%3D301-7576&ref=https%3A%2F%2Fno-go.kelkoogroup.net%2F&tiba=Alfa%20Horizon%20A%2FP%2FS%20Gtx%20Black%20%7C%20Fjellsport.no&async=1&fmt=3&is_vtc=1&random=3665640170&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y HTTP/1.1 
Host: www.google.no
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fjellsport.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.3
HTTP/2 200 OK
content-type: image/gif
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 21 Sep 2022 15:08:11 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /p/action/5820557.js HTTP/1.1 
Host: bat.bing.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fjellsport.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         13.107.21.200
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
cache-control: private,max-age=60
content-length: 666
content-encoding: gzip
vary: Accept-Encoding
set-cookie: MUID=3890A4FA6F2F6F5A0893B6DC6EDA6E75; domain=.bing.com; expires=Mon, 16-Oct-2023 15:08:11 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: ARR/3.0
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 0D46E1B86432475FB6C71B4C13A1320B Ref B: OSL30EDGE0122 Ref C: 2022-09-21T15:08:11Z
date: Wed, 21 Sep 2022 15:08:10 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   666
Md5:    cf913fabdf19d6efe36a318b09618183
Sha1:   2a9a7781b1e8c3d369bfad6bccbed83f99ef59ce
Sha256: 6581446f3f6ca25bfd9a66729211af2d7249110acbaba669ba527525ef3bbf52
                                        
                                            GET /tr/?id=3072056353006498&ev=ViewContent&dl=https%3A%2F%2Fwww.fjellsport.no%2Fmerker%2Falfa%2Falfa-horizon-a-p-s-gtx-black%3Fkk%3Da4c6294-18360978d92-68c62%26channable%3D03c6f96964003330312d3735373645%26utm_campaign%3D%26utm_content%3D%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_term%3D%26variantId%3D301-7576&rl=https%3A%2F%2Fno-go.kelkoogroup.net%2F&if=false&ts=1663772891115&cd[content_ids]=%5B%22FS188912%22%5D&cd[content_name]=Alfa%20Horizon%20A%2FP%2FS%20Gtx%20Black&cd[content_type]=product&sw=1280&sh=1024&v=2.9.83&r=stable&ec=1&o=30&fbp=fb.1.1663772891112.844038183&it=1663772890846&coo=false&rqm=GET HTTP/1.1 
Host: www.facebook.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fjellsport.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         157.240.200.35
HTTP/2 200 OK
content-type: image/gif
                                        
date: Wed, 21 Sep 2022 15:08:11 GMT
expires: Wed, 21 Sep 2022 15:08:11 GMT
last-modified: Fri, 21 Dec 2012 00:00:01 GMT
cache-control: no-cache, must-revalidate, max-age=0
set-cookie:
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 44
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   44
Md5:    b798f4ce7359fd815df4bdf76503b295
Sha1:   f8cc6addf1707ad236ad9970b0a48f9733d07da5
Sha256: 10d8d42d73a02ddb877101e72fbfa15a0ec820224d97cedee4cf92d571be5caa
                                        
                                            GET /tr/?id=3072056353006498&ev=PageView&dl=https%3A%2F%2Fwww.fjellsport.no%2Fmerker%2Falfa%2Falfa-horizon-a-p-s-gtx-black%3Fkk%3Da4c6294-18360978d92-68c62%26channable%3D03c6f96964003330312d3735373645%26utm_campaign%3D%26utm_content%3D%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_term%3D%26variantId%3D301-7576&rl=https%3A%2F%2Fno-go.kelkoogroup.net%2F&if=false&ts=1663772891112&sw=1280&sh=1024&v=2.9.83&r=stable&ec=0&o=30&fbp=fb.1.1663772891112.844038183&it=1663772890846&coo=false&rqm=GET HTTP/1.1 
Host: www.facebook.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fjellsport.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         157.240.200.35
HTTP/2 200 OK
content-type: image/gif
                                        
date: Wed, 21 Sep 2022 15:08:11 GMT
expires: Wed, 21 Sep 2022 15:08:11 GMT
last-modified: Fri, 21 Dec 2012 00:00:01 GMT
cache-control: no-cache, must-revalidate, max-age=0
set-cookie:
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 44
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   44
Md5:    b798f4ce7359fd815df4bdf76503b295
Sha1:   f8cc6addf1707ad236ad9970b0a48f9733d07da5
Sha256: 10d8d42d73a02ddb877101e72fbfa15a0ec820224d97cedee4cf92d571be5caa
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 21 Sep 2022 15:08:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 21 Sep 2022 15:08:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /syncframe?topUrl=www.fjellsport.no&origin=onetag HTTP/1.1 
Host: gum.criteo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fjellsport.no/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         178.250.2.146
HTTP/2 200 OK
content-type: text/html; charset=utf-8
                                        
date: Wed, 21 Sep 2022 15:08:10 GMT
server: Kestrel
cache-control: private, max-age=3600
set-cookie: uid=e73e5760-c4ff-4e7a-bf9c-70f64d5221e0; expires=Mon, 16 Oct 2023 15:08:10 GMT; domain=.criteo.com; path=/; secure; samesite=none
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
server-processing-duration-in-ticks: 666530
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   5395
Md5:    d6befcd082f18da51f7d647a91d80c38
Sha1:   2e9d8b8773d84dc9d7de0f3304794631dabc0dae
Sha256: 3650e51b6fc6b519f1bf733df00af925b6264c2319dcd8b4f0fd123d2daa45ac
                                        
                                            GET /dna HTTP/1.1 
Host: dnacdn.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         178.250.0.157
HTTP/2 200 OK
                                        
date: Wed, 21 Sep 2022 15:08:11 GMT
server: Kestrel
content-length: 0
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
set-cookie: browser_data=gjHJvF80M0RITmhlJTJCZkMwOUJGQlhaMUN2cyUyRmlsZ0VidVE3b0FUYWklMkZ4SEJwdzQ4RmtMeFVrS0tRcEhJUCUyQmVFNnJoY2w; expires=Mon, 16 Oct 2023 15:08:11 GMT; domain=dnacdn.net; path=/; secure; samesite=none
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 259525
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2

                                        
                                            GET /1/event/0/387/?brand_ids=null&i=pg-14456481078&delay=242&yt_ready=-1&product_id=629f22ad028f62005758af8e&uuid=51cecfed-d74d-4e13-9c00-c3753cc0bcbd&product_view_uuid=51cecfed-d74d-4e13-9c00-c3753cc0bcbd&gl_split=undefined&p=1&vn=1&pl=nb&hn=www.fjellsport.no&href=https%3A%2F%2Fw%C4%88.fjellsport.no%2Fmerk%C4%9A%2Falfa%C4%9E%C4%A0a-h%C4%92izon-%C4%A5p-s-gtx-black%3Fkk%3Da4c6294-18360978d92-68%C5%822%26channa%C4%B7e%3D03%C5%82f96%C5%A640%C5%A233%C5%A212d3735%C5%B2%C5%8A45%26utm_campaign%3D%C5%BA%C5%BC%C5%BE%C4%ABtent%C6%87%C5%BB%C5%BDsourc%C5%A0%C4%9Clko%C4%ABo%C6%88%C5%BD%C4%99dium%3Dcpc%C6%9F_%C6%8Cr%C6%A5%26vari%C5%9BtId%3D%C5%AD1-7576&br_n=Firefox&br_v=96.0&br_w=1268&br_h=939&oos=0&e=renderDelay&sId=s%3A4DXzX7PjeF1MoUqgLRv2F3aQZQuSlTsA.jJgNLpLQF7W%2F2G2AsxhlZ17W2F89l3yUTf2VizpyiNw HTTP/1.1 
Host: dapi.videoly.co
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fjellsport.no/
Cookie: vdly=s%3A4DXzX7PjeF1MoUqgLRv2F3aQZQuSlTsA.jJgNLpLQF7W%2F2G2AsxhlZ17W2F89l3yUTf2VizpyiNw
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         172.67.74.16
HTTP/2 200 OK
content-type: image/gif
                                        
date: Wed, 21 Sep 2022 15:08:11 GMT
x-powered-by: Express
access-control-allow-origin: *
access-control-allow-methods: GET,PUT,POST,OPTIONS
access-control-allow-headers: Content-Type
access-control-allow-credentials: true
set-cookie: vdly=s%3A4DXzX7PjeF1MoUqgLRv2F3aQZQuSlTsA.jJgNLpLQF7W%2F2G2AsxhlZ17W2F89l3yUTf2VizpyiNw; Path=/; Expires=Fri, 23 Dec 2022 15:08:11 GMT; HttpOnly; Secure; SameSite=None
via: 1.1 vegur
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GPWxz%2BSG5X86Ch0b%2F4nob92xwWDgYsXXB%2BaBA6RT%2BsXkH1xH6dhB%2FcShSS%2BbfYh8EtOBXDrkp2HVa5e2GeejSBytCgv3hL7u6pPThGYCVSAOdGaJRx%2B2gz7N3arXtp5KsA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74e3b6fa494ab4ff-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   80
Md5:    c3712fe3ca987ce9ef2eb1a966fb9bc0
Sha1:   73497690c04c433b374055e3fe8ebba8b28c082a
Sha256: fcb8b1d342705c55b64aa874efdd78d9ea10aba4463252f03c6f54c325d7091e
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 21 Sep 2022 15:08:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /ddm/fls/i/src=11203568;type=produ0;cat=produ0;ord=4737066675616;gtm=2wg9j0;auiddc=401301485.1663772889;u1=undefined;u3=FS188912;u4=Skist%C3%B8vler%20fjellski%2C%20langrenn%20og%20rulleski;~oref=https%3A%2F%2Fwww.fjellsport.no%2Fmerker%2Falfa%2Falfa-horizon-a-p-s-gtx-black%3Fkk%3Da4c6294-18360978d92-68c62%26channable%3D03c6f96964003330312d3735373645%26utm_campaign%3D%26utm_content%3D%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_term%3D%26variantId%3D301-7576 HTTP/1.1 
Host: adservice.google.no
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adservice.google.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         216.58.207.194
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 21 Sep 2022 15:08:11 GMT
expires: Wed, 21 Sep 2022 15:08:11 GMT
cache-control: private, max-age=0
x-content-type-options: nosniff
content-encoding: gzip
server: cafe
content-length: 177
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with no line terminators
Size:   177
Md5:    9393b28661a65a763699c108887882eb
Sha1:   c237ba6491e6fb9ca57da33dd9d048ca8e86cfda
Sha256: 2bdce28c6fb3cb210861d4aba734ab7aedfc979a8fa273512a61d8cf8afc78b0
                                        
                                            GET /ddm/fls/i/src=11203568;type=all-p0;cat=visit0;ord=6800687187873;gtm=2wg9j0;auiddc=401301485.1663772889;u1=%2Fmerker%2Falfa%2Falfa-horizon-a-p-s-gtx-black;~oref=https%3A%2F%2Fwww.fjellsport.no%2Fmerker%2Falfa%2Falfa-horizon-a-p-s-gtx-black%3Fkk%3Da4c6294-18360978d92-68c62%26channable%3D03c6f96964003330312d3735373645%26utm_campaign%3D%26utm_content%3D%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_term%3D%26variantId%3D301-7576 HTTP/1.1 
Host: adservice.google.no
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adservice.google.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         216.58.207.194
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 21 Sep 2022 15:08:11 GMT
expires: Wed, 21 Sep 2022 15:08:11 GMT
cache-control: private, max-age=0
x-content-type-options: nosniff
content-encoding: gzip
server: cafe
content-length: 177
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with no line terminators
Size:   177
Md5:    9393b28661a65a763699c108887882eb
Sha1:   c237ba6491e6fb9ca57da33dd9d048ca8e86cfda
Sha256: 2bdce28c6fb3cb210861d4aba734ab7aedfc979a8fa273512a61d8cf8afc78b0
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 4280
Cache-Control: 'max-age=158059'
Date: Wed, 21 Sep 2022 15:08:11 GMT
Last-Modified: Wed, 21 Sep 2022 13:56:51 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 314

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 4284
Cache-Control: 'max-age=158059'
Date: Wed, 21 Sep 2022 15:08:11 GMT
Last-Modified: Wed, 21 Sep 2022 13:56:47 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 314

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 21 Sep 2022 15:08:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /newidsd HTTP/1.1 
Host: gem.gbc.criteo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site

search
                                         178.250.6.131
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
date: Wed, 21 Sep 2022 15:08:10 GMT
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 50615
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   44
Md5:    0dde768217d6b66cbeda3ac3d1efb6f9
Sha1:   eff1245b35319ef1435129ec3c74a18b2f3abf9c
Sha256: 31fa9901cd1f59e63f1e2b4a342fddc0f564c37513443c4ee01d868899d1938c
                                        
                                            GET /eus2/s/0.6.40/clarity.js HTTP/1.1 
Host: www.clarity.ms
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fjellsport.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         13.107.213.53
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
                                        
cache-control: public,max-age=86400
content-length: 23442
content-encoding: br
last-modified: Wed, 01 Jun 2022 12:22:22 GMT
accept-ranges: bytes
etag: "1d8c7baa5622330"
vary: Accept-Encoding
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
x-powered-by: ASP.NET
x-cache: CONFIG_NOCACHE
x-azure-ref: 02ygrYwAAAABYc/8gWmlmRolax9EsygMnTE9OMjFFREdFMTgwNwA2Y2ZiZWVlMC01MDI3LTQ4NGItODk2Ny00YTI5YWY3N2YxZTE=
date: Wed, 21 Sep 2022 15:08:11 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (54745)
Size:   23442
Md5:    6a87d835543a151541da0ae963173dd7
Sha1:   80bac2abc74d2fa93a63ff82514fd64ee8caf9a0
Sha256: c806647a143cb92f41ed1e60c6be245cd4e78b447c90adbed881ca54ecfa7337
                                        
                                            GET /tag/uet/5820557 HTTP/1.1 
Host: www.clarity.ms
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fjellsport.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         13.107.213.53
HTTP/2 200 OK
content-type: application/x-javascript
                                        
cache-control: no-cache, no-store
expires: -1
set-cookie: CLID=7e7a333895f24f4f90248b241be90cd3.20220921.20230921; expires=Thu, 21 Sep 2023 15:08:11 GMT; path=/; secure; samesite=none; httponly
request-context: appId=cid-v1:e97341f6-8fff-46a6-9229-fbbfe0892c78
x-powered-by: ASP.NET
x-cache: CONFIG_NOCACHE
x-azure-ref: 02ygrYwAAAAAriHVb+bGwSZz1cX5MFBcnTE9OMjFFREdFMTgwNwA2Y2ZiZWVlMC01MDI3LTQ4NGItODk2Ny00YTI5YWY3N2YxZTE=
date: Wed, 21 Sep 2022 15:08:11 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1540), with no line terminators
Size:   1540
Md5:    f39b8d0a503524ad7d6fce6bbb3822ea
Sha1:   7d44ac380dd0b3f1da6627dfee8703cace42f690
Sha256: f6693e1bb496110213defd17103e524d25615e7b1da683194510975b076251ae
                                        
                                            GET /c.gif?CtsSyncId=5A9FE831EFBF48D99BE938273774B468&RedC=c.clarity.ms&MXFR=36898730E38A657B3E539516E78A6B94 HTTP/1.1 
Host: c.bing.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.fjellsport.no/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         13.107.21.200
HTTP/2 302 Found
                                        
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.clarity.ms/c.gif?CtsSyncId=5A9FE831EFBF48D99BE938273774B468&MUID=062357257B84696B008345037A716826
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: SRM_B=062357257B84696B008345037A716826; domain=c.bing.com; expires=Mon, 16-Oct-2023 15:08:11 GMT; path=/; SameSite=None; Secure;
x-powered-by: ASP.NET
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 2C0CFC938C7C435E90BCA91314A61CC4 Ref B: OSL30EDGE0122 Ref C: 2022-09-21T15:08:11Z
date: Wed, 21 Sep 2022 15:08:10 GMT
content-length: 0
X-Firefox-Spdy: h2

                                        
                                            GET /c.gif?CtsSyncId=5A9FE831EFBF48D99BE938273774B468&MUID=062357257B84696B008345037A716826 HTTP/1.1 
Host: c.clarity.ms
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.fjellsport.no/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         20.234.93.27
HTTP/2 200 OK
content-type: image/gif
                                        
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
last-modified: Tue, 13 Sep 2022 19:54:52 GMT
accept-ranges: bytes
etag: "8d3298b0aac7d81:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: ANONCHK=0; domain=c.clarity.ms; expires=Wed, 21-Sep-2022 15:18:11 GMT; path=/; SameSite=None; Secure;
date: Wed, 21 Sep 2022 15:08:10 GMT
content-length: 42
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    32023bb33cfb2a1990a4ef2d85b6ac16
Sha1:   23dcc6d4b5bfe00357fd0248bb5955b8e36bb8f1
Sha256: 99c2917ee5b2a01459a923bdd1c676f15ee73b62b87f696e6735312d26f51e12
                                        
                                            GET /sync?c=8&r=1&a=1&u=https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D28645%26dpuuid%3D%40USERID%40 HTTP/1.1 
Host: gum.criteo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         178.250.2.146
HTTP/2 302 Found
                                        
date: Wed, 21 Sep 2022 15:08:11 GMT
server: Kestrel
content-length: 0
cache-control: private, max-age=0, no-cache, no-store, must-revalidate
location: https://dpm.demdex.net/ibs:dpid=28645&dpuuid=
server-processing-duration-in-ticks: 708566
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         143.204.42.165
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Wed, 21 Sep 2022 15:08:12 GMT
Last-Modified: Wed, 21 Sep 2022 13:24:49 GMT
Server: ECS (nyb/1D2C)
X-Cache: Miss from cloudfront
Via: 1.1 dac7cf040932e0c072eeed10afdd7b3e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: x68wjMlKlv0zVIGV4wV8cuqlCRcAcB7EFQVuZ2ouAAEDvE0p3oLakQ==
Age: 6203

                                        
                                            GET /rum?cm_dsp_id=20&external_user_id=k-xChfcqF9mtUufYKX9-ft8aXAjcm5t6W9vUxPPA HTTP/1.1 
Host: r.casalemedia.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         104.18.19.126
HTTP/2 302 Found
                                        
date: Wed, 21 Sep 2022 15:08:12 GMT
content-length: 0
location: /rum?cm_dsp_id=20&external_user_id=k-xChfcqF9mtUufYKX9-ft8aXAjcm5t6W9vUxPPA&C=1
cf-ray: 74e3b6ffd8e91c0a-OSL
cache-control: no-cache
expires: 0
cf-cache-status: DYNAMIC
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI"
pragma: no-cache
set-cookie: CMID=Yyso3J53NLEGWLqhfA--4QAA; Path=/; Domain=casalemedia.com; Expires=Thu, 21 Sep 2023 15:08:12 GMT; Max-Age=31536000; Secure; SameSite=None CMPS=4553; Path=/; Domain=casalemedia.com; Expires=Tue, 20 Dec 2022 15:08:12 GMT; Max-Age=7776000; Secure; SameSite=None CMPRO=4553; Path=/; Domain=casalemedia.com; Expires=Tue, 20 Dec 2022 15:08:12 GMT; Max-Age=7776000; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wUkwN%2ByjsRFgjC5ivgmzwGFDa6NjfxdvL4ElaFBKMi1l8Vqfy5LMkzOC4kRbP9QzbwyrqUkgdrFyL3UjFmcmcwQo0ln%2FqHtAnvpvBNaO8QYssN82WSoQaiOTUXqu4FhEVbGW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

                                        
                                            GET /pixel?google_nid=cjp&google_sc&google_ula=913071&CriteoUserId=k-eEFtXaF9mtUufYKX9-ft8aXAjck7ZDA7-V4-nQ&google_cm&google_hm=ay1lRUZ0WGFGOW10VXVmWUtYOS1mdDhhWEFqY2s3WkRBNy1WNC1uUQ HTTP/1.1 
Host: cm.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.98
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
                                        
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
location: https://cm.g.doubleclick.net/pixel?google_nid=cjp&google_sc=&google_ula=913071&CriteoUserId=k-eEFtXaF9mtUufYKX9-ft8aXAjck7ZDA7-V4-nQ&google_cm=&google_hm=ay1lRUZ0WGFGOW10VXVmWUtYOS1mdDhhWEFqY2s3WkRBNy1WNC1uUQ&google_tc=
date: Wed, 21 Sep 2022 15:08:12 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
server: HTTP server (unknown)
content-length: 440
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Wed, 21-Sep-2022 15:23:12 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Size:   440
Md5:    5e7aa760e883113e03f015d5ed296622
Sha1:   f0698704d8670863358cb513fc5e8837d06863c9
Sha256: 9be8aa87eeb7061d02d63eefebb4ad9563c8da42266e02952fc673cdf880e117
                                        
                                            GET /cksync.php?cs=3&type=crt&ovsid=k-Wtyi46F9mtUufYKX9-ft8aXAjcnRUD2_tiQDEg HTTP/1.1 
Host: contextual.media.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search