r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9fbe85f42e8ae8ae41cc12df5f98b141
949fa36ff0f22f72565fd584bef094dd4de23037
184d3e4df4bce559b4d7c4836372f5fd2de9782a96b04d364230b7d695d737d8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "184D3E4DF4BCE559B4D7C4836372F5FD2DE9782A96B04D364230B7D695D737D8"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2661
Expires: Thu, 26 Jan 2023 21:51:28 GMT
Date: Thu, 26 Jan 2023 21:07:07 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2405562765b49b2782ebd2e2994851d5
be7ac8e558f7875bb1fb86ab5ec674424a5ff269
422cfa907461cb7b93b9089d600052f9e94951e5e0c93d97651905002e48ad3e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "422CFA907461CB7B93B9089D600052F9E94951E5E0C93D97651905002E48AD3E"
Last-Modified: Thu, 26 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3904
Expires: Thu, 26 Jan 2023 22:12:11 GMT
Date: Thu, 26 Jan 2023 21:07:07 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash dcd75ca6daca51c5e39d431468511793
07f76d3bf23d65c9110d810fa71a994e39e085d3
73672a816da4450fe2c938b08d7ae002d9ca29fdcbd3e29cc97084d826f8b459
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Backoff, Content-Length, Alert, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 26 Jan 2023 20:35:16 GMT
content-type: application/json
age: 1911
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 69f73ac59327cd9ad7d99816ccfcc03e
c54844f82dbee0d5ee4c8ce344eb0139373e6c6b
e81c685b2d8f0e31b89e5cfc911a2c5a99a556646830ac5a8468d991b5e871a3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E81C685B2D8F0E31B89E5CFC911A2C5A99A556646830AC5A8468D991B5E871A3"
Last-Modified: Thu, 26 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10206
Expires: Thu, 26 Jan 2023 23:57:13 GMT
Date: Thu, 26 Jan 2023 21:07:07 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 1aqvpT1s+PfrsbvsamZkHwibly6mvRL9nJi63SclPMV1pwY/x7amSOWVSqd678K0u0mWojjNlU8=
x-amz-request-id: 65W3FZN7S3RVDZ6G
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 26 Jan 2023 20:20:15 GMT
age: 2812
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 26 Jan 2023 21:07:07 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
iuyuy.1be0b.bx.wy5532.com/
302 Found 11 B URL HTTP/1.1 iuyuy.1be0b.bx.wy5532.com/
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type ASCII text, with no line terminators
Hash 32682312d17c7cbf18e73594f5570319
60e22121bdd0bc71cdb2bae2a3aa577006b2eae9
e55fb1a1d731153e943b68844af12dcce8bfac917c98ffdea64c80da0607dd47
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: iuyuy.1be0b.bx.wy5532.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 11
date: Thu, 26 Jan 2023 21:07:06 GMT
location: http://btpnative.com/click?data=WUFMRGExMWcxbkxjUEN3d3VtNWNCa2JtenlaM0hHTXllLUFyMFd4dmpvWGJoQzRtcWd2RjFmVkp0T1JRaHFWcnQ3Um9ZbExIVGVtcnVEZjRyUHZYYUNramxWRHQ2c05RUXFfZWRJOUhCQ1VQN2piaURUZzdwTjNweUV2d1dsMUpWUUpqeS04Yk8ydFJqU01OOW1qaXZBMg2&id=22a3debd-a5d8-4186-a8d8-32f9c28d79bf
server: nginx
set-cookie: sid=63f3e384-9dbd-11ed-9dd5-c70b327ddf05; path=/; domain=.wy5532.com; expires=Wed, 14 Feb 2091 00:21:14 GMT; max-age=2147483647; HttpOnly
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Last-Modified, ETag, Expires, Backoff, Content-Length, Cache-Control, Alert, Retry-After, Pragma
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 26 Jan 2023 20:41:40 GMT
age: 1527
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1e2970e1480a4759282d63bb213051e4
ed5194d4d25dfc199821129be5d74be0ce49197d
18e19ea4c9c262cb9a94f89172eef2604222e779346589d470bf2e95ea295563
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "18E19EA4C9C262CB9A94F89172EEF2604222E779346589D470BF2E95EA295563"
Last-Modified: Tue, 24 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2847
Expires: Thu, 26 Jan 2023 21:54:34 GMT
Date: Thu, 26 Jan 2023 21:07:07 GMT
Connection: keep-alive
btpnative.com/click?data=WUFMRGExMWcxbkxjUEN3d3VtNWNCa2JtenlaM0hHTXllLUFyMFd4dmpvWGJoQzRtcWd2RjFmVkp0T1JRaHFWcnQ3Um9ZbExIVGVtcnVEZjRyUHZYYUNramxWRHQ2c05RUXFfZWRJOUhCQ1VQN2piaURUZzdwTjNweUV2d1dsMUpWUUpqeS04Yk8ydFJqU01OOW1qaXZBMg2&id=22a3debd-a5d8-4186-a8d8-32f9c28d79bf
200 OK 5.4 kB URL HTTP/1.1 btpnative.com/click?data=WUFMRGExMWcxbkxjUEN3d3VtNWNCa2JtenlaM0hHTXllLUFyMFd4dmpvWGJoQzRtcWd2RjFmVkp0T1JRaHFWcnQ3Um9ZbExIVGVtcnVEZjRyUHZYYUNramxWRHQ2c05RUXFfZWRJOUhCQ1VQN2piaURUZzdwTjNweUV2d1dsMUpWUUpqeS04Yk8ydFJqU01OOW1qaXZBMg2&id=22a3debd-a5d8-4186-a8d8-32f9c28d79bf
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (320), with CRLF line terminators
Hash 00e7b5d1641c52928849532547005e62
d8e98509d3f870e6278f27bc9fbfdb815eb227ee
fbceaa793d2f6067912b28459a9cd65510822c4cd1086eb1a9e4f95abfbf6656
GET /click?data=WUFMRGExMWcxbkxjUEN3d3VtNWNCa2JtenlaM0hHTXllLUFyMFd4dmpvWGJoQzRtcWd2RjFmVkp0T1JRaHFWcnQ3Um9ZbExIVGVtcnVEZjRyUHZYYUNramxWRHQ2c05RUXFfZWRJOUhCQ1VQN2piaURUZzdwTjNweUV2d1dsMUpWUUpqeS04Yk8ydFJqU01OOW1qaXZBMg2&id=22a3debd-a5d8-4186-a8d8-32f9c28d79bf HTTP/1.1
Host: btpnative.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Cache-Control: private
Content-Type: text/html; charset=utf-8
Server: Microsoft-IIS/10.0
X-AspNetMvc-Version: 5.2
X-AspNet-Version: 4.0.30319
Set-Cookie: biayLfpafexmkmg=biayLfpafexmkmg; path=/
X-Powered-By: ASP.NET
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: Content-Type
Date: Thu, 26 Jan 2023 21:07:07 GMT
Content-Length: 5412
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: XnBXVY50MGRig391jWE4Ow==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: lpn7jJio4roz9mTd1hpddndh2Bw=
btpnative.com/Redirect/
302 Found 1.5 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (1427), with CRLF line terminators
Hash 18a16b86dc1e87472ceaa9bfe7272bcf
c39cc209893134920ac208e348205ded7e37efaa
419191fd61269da0e34114c41337ce90360a9bffc33bc5aea9563acfb8ce374d
POST /Redirect/ HTTP/1.1
Host: btpnative.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
Content-Length: 330
Origin: http://btpnative.com
Connection: keep-alive
Referer: http://btpnative.com/click?data=WUFMRGExMWcxbkxjUEN3d3VtNWNCa2JtenlaM0hHTXllLUFyMFd4dmpvWGJoQzRtcWd2RjFmVkp0T1JRaHFWcnQ3Um9ZbExIVGVtcnVEZjRyUHZYYUNramxWRHQ2c05RUXFfZWRJOUhCQ1VQN2piaURUZzdwTjNweUV2d1dsMUpWUUpqeS04Yk8ydFJqU01OOW1qaXZBMg2&id=22a3debd-a5d8-4186-a8d8-32f9c28d79bf
Cookie: biayLfpafexmkmg=biayLfpafexmkmg
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Cache-Control: private
Content-Type: text/html; charset=utf-8
Location: https://mybettermb.com/aS/feedclick?s=HFz5zNIIs95ROWPasgEEz6WqQjWtdjqafSMU3tyux_zz84p6QNRjgBwSB56cKSkXT2CTCm3P5TxbC7U30TJp2YOe9KpoUqG_KP9rM2-MnaYmDyfaZRNJu7CyP0WpYsxEJnFYxcsUig_ZjafmTRh4cHzsOTmPHHzVVhTaMWwinq7RGLacBI37lcvFlWEJ6AJqNXCmYCGlL8ySeEceI--DMnQf4m3kj471CL_p296zBYDqjKFd1t7GGjoWauJ0KmZKjqyI4xEVr87DR7FmpYlfDeLpFS7FxIncYfWc_LWSPY7F1fsWYFPafshoKGRslf0NddKsi7pJcNige8ZUo82FnH3oRPL0t3ZZh3LdaFNXKEb6XgTzXwJbO0SZ_K0jAJwPHlqJL7OlybGUtt83Iq61VSMc3By7sz9GScpP_fWLq7tGA2d8qnxNI5Oa7pUv-AWxAO52wYcilCRTJBh56Ga50jNtHjwilP_7S3vNBC8yBhdsPFiJ2XLUVWjoIhkxbMSDiVbOD23FtJmwjj9FrX4Bhjalx0WKThmwDt9LtBYgYit7uTkUxKxJRAlBjFaT70Z9Dzh3B9xj68zLbXC3P6OBOgRKX0bENZS8v-RsVLl9A-WcSVNrDmNQSfnrTsqbH_JrpfHBXx0zIn8K6lcmW2RBZxPWcqD1gA4If-PtquKvwQupBSK6G9damHHOGnuwRsF8OucNJsT-FQu5o6Z0JEfM65kSHR8wMseU5ImlzngRh5JhWFujM_vfbBK3hL3b_8S4BIENl9e3WwAkwItAeHzTXKXvy-bUOv38t4mZMEl49Docb9cFllVULtX-XxStqZRuvereQD0Net2B1JKA86l0GdDNt7hUxFW-vkwrp_VfUjcwkfxMkMn_G9l6zmwxYmZRLjddtNgvdsvFKwAFgloip-ZQ5AdIgfoOE8JF80g8EcMMLluUHoZDmMjPOHSGnqiAg7yEzV9XtwOsi8FtPcgVd_fuLao04_hmufsZRntBDqVPNC_OJaKrruNNVC9UvhJwljCoRyouWo1FrxW_XL0h9YLdDyfApm4RBe5b4Dq96gT8S1bSh8E9vV8hvest8NZzf9v8amTUOOpzC4hrkrlaoTzudx6XBA39XVcMmR7o9X5PUTAv2x7AUWGKtkyD3Tx4-72LstO0SuyTdMHD3Fk2oh9sOejjT3RXh8L1jU7Pmf3zgGkYDzgFOTC0VNWujuQjPoPry5wG1rNEdjrUALwSNwOMgqmTd57ih-atlEAed7eDbUm_dXlPaZgcAQ22i0kehKq2wcHrhZCDbUm_dXlPadPExdJ3McGJ3iJIluMv8CPv651Q7QxrEyYNb-iWwdA0
Server: Microsoft-IIS/10.0
X-AspNetMvc-Version: 5.2
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: Content-Type
Date: Thu, 26 Jan 2023 21:07:07 GMT
Content-Length: 1499
ocsp.sectigo.com/
200 OK 472 B IP
Hash 8b80e7658748fff1e5e0057a59a17c70
400803ffd9a77d82b96a9e1c1aeebedd8545eb9f
34a8f0f6a29cf9281d295aed68fac414a8ea887f9e9826d08e80826f50a017bc
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 21:07:08 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Thu, 26 Jan 2023 07:25:41 GMT
Expires: Thu, 02 Feb 2023 07:25:40 GMT
Etag: "400803ffd9a77d82b96a9e1c1aeebedd8545eb9f"
Cache-Control: max-age=554911,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 78fc376aef030afa-OSL
mybettermb.com/aS/feedclick?s=HFz5zNIIs95ROWPasgEEz6WqQjWtdjqafSMU3tyux_zz84p6QNRjgBwSB56cKSkXT2CTCm3P5TxbC7U30TJp2YOe9KpoUqG_KP9rM2-MnaYmDyfaZRNJu7CyP0WpYsxEJnFYxcsUig_ZjafmTRh4cHzsOTmPHHzVVhTaMWwinq7RGLacBI37lcvFlWEJ6AJqNXCmYCGlL8ySeEceI--DMnQf4m3kj471CL_p296zBYDqjKFd1t7GGjoWauJ0KmZKjqyI4xEVr87DR7FmpYlfDeLpFS7FxIncYfWc_LWSPY7F1fsWYFPafshoKGRslf0NddKsi7pJcNige8ZUo82FnH3oRPL0t3ZZh3LdaFNXKEb6XgTzXwJbO0SZ_K0jAJwPHlqJL7OlybGUtt83Iq61VSMc3By7sz9GScpP_fWLq7tGA2d8qnxNI5Oa7pUv-AWxAO52wYcilCRTJBh56Ga50jNtHjwilP_7S3vNBC8yBhdsPFiJ2XLUVWjoIhkxbMSDiVbOD23FtJmwjj9FrX4Bhjalx0WKThmwDt9LtBYgYit7uTkUxKxJRAlBjFaT70Z9Dzh3B9xj68zLbXC3P6OBOgRKX0bENZS8v-RsVLl9A-WcSVNrDmNQSfnrTsqbH_JrpfHBXx0zIn8K6lcmW2RBZxPWcqD1gA4If-PtquKvwQupBSK6G9damHHOGnuwRsF8OucNJsT-FQu5o6Z0JEfM65kSHR8wMseU5ImlzngRh5JhWFujM_vfbBK3hL3b_8S4BIENl9e3WwAkwItAeHzTXKXvy-bUOv38t4mZMEl49Docb9cFllVULtX-XxStqZRuvereQD0Net2B1JKA86l0GdDNt7hUxFW-vkwrp_VfUjcwkfxMkMn_G9l6zmwxYmZRLjddtNgvdsvFKwAFgloip-ZQ5AdIgfoOE8JF80g8EcMMLluUHoZDmMjPOHSGnqiAg7yEzV9XtwOsi8FtPcgVd_fuLao04_hmufsZRntBDqVPNC_OJaKrruNNVC9UvhJwljCoRyouWo1FrxW_XL0h9YLdDyfApm4RBe5b4Dq96gT8S1bSh8E9vV8hvest8NZzf9v8amTUOOpzC4hrkrlaoTzudx6XBA39XVcMmR7o9X5PUTAv2x7AUWGKtkyD3Tx4-72LstO0SuyTdMHD3Fk2oh9sOejjT3RXh8L1jU7Pmf3zgGkYDzgFOTC0VNWujuQjPoPry5wG1rNEdjrUALwSNwOMgqmTd57ih-atlEAed7eDbUm_dXlPaZgcAQ22i0kehKq2wcHrhZCDbUm_dXlPadPExdJ3McGJ3iJIluMv8CPv651Q7QxrEyYNb-iWwdA0
302 Found 0 B URL HTTP/2 mybettermb.com/aS/feedclick?s=HFz5zNIIs95ROWPasgEEz6WqQjWtdjqafSMU3tyux_zz84p6QNRjgBwSB56cKSkXT2CTCm3P5TxbC7U30TJp2YOe9KpoUqG_KP9rM2-MnaYmDyfaZRNJu7CyP0WpYsxEJnFYxcsUig_ZjafmTRh4cHzsOTmPHHzVVhTaMWwinq7RGLacBI37lcvFlWEJ6AJqNXCmYCGlL8ySeEceI--DMnQf4m3kj471CL_p296zBYDqjKFd1t7GGjoWauJ0KmZKjqyI4xEVr87DR7FmpYlfDeLpFS7FxIncYfWc_LWSPY7F1fsWYFPafshoKGRslf0NddKsi7pJcNige8ZUo82FnH3oRPL0t3ZZh3LdaFNXKEb6XgTzXwJbO0SZ_K0jAJwPHlqJL7OlybGUtt83Iq61VSMc3By7sz9GScpP_fWLq7tGA2d8qnxNI5Oa7pUv-AWxAO52wYcilCRTJBh56Ga50jNtHjwilP_7S3vNBC8yBhdsPFiJ2XLUVWjoIhkxbMSDiVbOD23FtJmwjj9FrX4Bhjalx0WKThmwDt9LtBYgYit7uTkUxKxJRAlBjFaT70Z9Dzh3B9xj68zLbXC3P6OBOgRKX0bENZS8v-RsVLl9A-WcSVNrDmNQSfnrTsqbH_JrpfHBXx0zIn8K6lcmW2RBZxPWcqD1gA4If-PtquKvwQupBSK6G9damHHOGnuwRsF8OucNJsT-FQu5o6Z0JEfM65kSHR8wMseU5ImlzngRh5JhWFujM_vfbBK3hL3b_8S4BIENl9e3WwAkwItAeHzTXKXvy-bUOv38t4mZMEl49Docb9cFllVULtX-XxStqZRuvereQD0Net2B1JKA86l0GdDNt7hUxFW-vkwrp_VfUjcwkfxMkMn_G9l6zmwxYmZRLjddtNgvdsvFKwAFgloip-ZQ5AdIgfoOE8JF80g8EcMMLluUHoZDmMjPOHSGnqiAg7yEzV9XtwOsi8FtPcgVd_fuLao04_hmufsZRntBDqVPNC_OJaKrruNNVC9UvhJwljCoRyouWo1FrxW_XL0h9YLdDyfApm4RBe5b4Dq96gT8S1bSh8E9vV8hvest8NZzf9v8amTUOOpzC4hrkrlaoTzudx6XBA39XVcMmR7o9X5PUTAv2x7AUWGKtkyD3Tx4-72LstO0SuyTdMHD3Fk2oh9sOejjT3RXh8L1jU7Pmf3zgGkYDzgFOTC0VNWujuQjPoPry5wG1rNEdjrUALwSNwOMgqmTd57ih-atlEAed7eDbUm_dXlPaZgcAQ22i0kehKq2wcHrhZCDbUm_dXlPadPExdJ3McGJ3iJIluMv8CPv651Q7QxrEyYNb-iWwdA0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
GET /aS/feedclick?s=HFz5zNIIs95ROWPasgEEz6WqQjWtdjqafSMU3tyux_zz84p6QNRjgBwSB56cKSkXT2CTCm3P5TxbC7U30TJp2YOe9KpoUqG_KP9rM2-MnaYmDyfaZRNJu7CyP0WpYsxEJnFYxcsUig_ZjafmTRh4cHzsOTmPHHzVVhTaMWwinq7RGLacBI37lcvFlWEJ6AJqNXCmYCGlL8ySeEceI--DMnQf4m3kj471CL_p296zBYDqjKFd1t7GGjoWauJ0KmZKjqyI4xEVr87DR7FmpYlfDeLpFS7FxIncYfWc_LWSPY7F1fsWYFPafshoKGRslf0NddKsi7pJcNige8ZUo82FnH3oRPL0t3ZZh3LdaFNXKEb6XgTzXwJbO0SZ_K0jAJwPHlqJL7OlybGUtt83Iq61VSMc3By7sz9GScpP_fWLq7tGA2d8qnxNI5Oa7pUv-AWxAO52wYcilCRTJBh56Ga50jNtHjwilP_7S3vNBC8yBhdsPFiJ2XLUVWjoIhkxbMSDiVbOD23FtJmwjj9FrX4Bhjalx0WKThmwDt9LtBYgYit7uTkUxKxJRAlBjFaT70Z9Dzh3B9xj68zLbXC3P6OBOgRKX0bENZS8v-RsVLl9A-WcSVNrDmNQSfnrTsqbH_JrpfHBXx0zIn8K6lcmW2RBZxPWcqD1gA4If-PtquKvwQupBSK6G9damHHOGnuwRsF8OucNJsT-FQu5o6Z0JEfM65kSHR8wMseU5ImlzngRh5JhWFujM_vfbBK3hL3b_8S4BIENl9e3WwAkwItAeHzTXKXvy-bUOv38t4mZMEl49Docb9cFllVULtX-XxStqZRuvereQD0Net2B1JKA86l0GdDNt7hUxFW-vkwrp_VfUjcwkfxMkMn_G9l6zmwxYmZRLjddtNgvdsvFKwAFgloip-ZQ5AdIgfoOE8JF80g8EcMMLluUHoZDmMjPOHSGnqiAg7yEzV9XtwOsi8FtPcgVd_fuLao04_hmufsZRntBDqVPNC_OJaKrruNNVC9UvhJwljCoRyouWo1FrxW_XL0h9YLdDyfApm4RBe5b4Dq96gT8S1bSh8E9vV8hvest8NZzf9v8amTUOOpzC4hrkrlaoTzudx6XBA39XVcMmR7o9X5PUTAv2x7AUWGKtkyD3Tx4-72LstO0SuyTdMHD3Fk2oh9sOejjT3RXh8L1jU7Pmf3zgGkYDzgFOTC0VNWujuQjPoPry5wG1rNEdjrUALwSNwOMgqmTd57ih-atlEAed7eDbUm_dXlPaZgcAQ22i0kehKq2wcHrhZCDbUm_dXlPadPExdJ3McGJ3iJIluMv8CPv651Q7QxrEyYNb-iWwdA0 HTTP/1.1
Host: mybettermb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://btpnative.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Thu, 26 Jan 2023 21:07:08 GMT
content-length: 0
set-cookie: rhid=82775204609; Max-Age=15552000; Expires=Tue, 25-Jul-2023 21:07:08 GMT; Domain=mybettermb.com; Path=/; SameSite=None; secure;
location: https://p274639.mybettermb.com/adServe/domainClick?ai=gNSPw4YcvsCApKkKBx7IDF_cvGsTSfm9uqHPErRaTXoDgwDsRKusVuSzVpy1vp3RTpegkJelYHUE538Al-L_QYf18T9CpHqCT2L9NFyVXF55Q47z-CV1ol2k4XVJzHJX8mFgHSWE3TZFy0dflvxRpINtSb91eU9pMndT0rcbhtKjIQ6n-5BK5qIjUZf-ReyHtSLHLDCCFTDT-SeEqkQWhsbteTpcMyyAhiRFVIdrvdZq3a-rPX7va44XRKiQejY9l5g72F1sPYafqhWZ-YKZz6rRPbGyYnCcF9nxG1Y8QfZKdkAM850vP-n44YFBbd7ECEomdw_Jheywpth3iNEvd_P4BsKUl697UgDHGPx9sdNAtw4JdPSDlgvGd3WbeZnnbWnaHeEFBuddA-e5aUFqZolKw8Cn_Dl8&ui=HFz5zNIIs96w8gbO8AoGVPmI0xR1wwxS_OHH5_91uopNC9dwcwXYavcIbybJIht8wHFUtjQnYoABcFRKJDw1bMK_nBFe1SieCCRKiGvEirKS5ahooqB2VA&si=1&oref=8e1dd1be172304d34167fb9a89f6676a&optunit=Lm2uYWJ6y1bbEItyw-irrg&rb=kkFnQ3TtWkI&rr=0&abtg=0
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cff5ceba2dae52b4d8b7d3a70355af23
77295dcdc7a10c73c24a0941212da2643edb32cf
9ab22da7bb760d92d982abe4f1ab6e415b98648e7b4e0c7e3677b03ef4003fb6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9AB22DA7BB760D92D982ABE4F1AB6E415B98648E7B4E0C7E3677B03EF4003FB6"
Last-Modified: Thu, 26 Jan 2023 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14023
Expires: Fri, 27 Jan 2023 01:00:52 GMT
Date: Thu, 26 Jan 2023 21:07:09 GMT
Connection: keep-alive
promoprawn.com/norway?utm_source=no&utm_medium=89954630040
301 Moved Permanently 0 B URL HTTP/1.1 promoprawn.com/norway?utm_source=no&utm_medium=89954630040
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /norway?utm_source=no&utm_medium=89954630040 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Date: Thu, 26 Jan 2023 21:07:09 GMT
Server: Apache/2.4.54 (Debian)
cf-edge-cache: cache,platform=wordpress
Set-Cookie: utm_source=no; expires=Sat, 25-Feb-2023 21:07:09 GMT; Max-Age=2592000; path=/; domain=.promoprawn.com
utm_medium=89954630040; expires=Sat, 25-Feb-2023 21:07:09 GMT; Max-Age=2592000; path=/; domain=.promoprawn.com
utm_term=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
utm_content=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
utm_campaign=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
gclid=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
handl_original_ref=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89954630040; expires=Sat, 25-Feb-2023 21:07:09 GMT; Max-Age=2592000; path=/; domain=.promoprawn.com
handl_ip=91.90.42.154; expires=Sat, 25-Feb-2023 21:07:09 GMT; Max-Age=2592000; path=/; domain=.promoprawn.com
handl_ref=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
handl_url=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89954630040; expires=Sat, 25-Feb-2023 21:07:09 GMT; Max-Age=2592000; path=/; domain=.promoprawn.com
email=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
username=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
X-Redirect-By: WordPress
Location: https://promoprawn.com/norway/?utm_source=no&utm_medium=89954630040
Content-Length: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bd56ce22720c6e6072efdabae64669fd
29194390d12177fe0d88e1bd2fb4436509366a1c
c41996d83d942ca58a13e2d1adfd171cf26a84bc9b7fdbd1ca941eb0269b5404
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C41996D83D942CA58A13E2D1ADFD171CF26A84BC9B7FDBD1CA941EB0269B5404"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18052
Expires: Fri, 27 Jan 2023 02:08:01 GMT
Date: Thu, 26 Jan 2023 21:07:09 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bd56ce22720c6e6072efdabae64669fd
29194390d12177fe0d88e1bd2fb4436509366a1c
c41996d83d942ca58a13e2d1adfd171cf26a84bc9b7fdbd1ca941eb0269b5404
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C41996D83D942CA58A13E2D1ADFD171CF26A84BC9B7FDBD1CA941EB0269B5404"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18052
Expires: Fri, 27 Jan 2023 02:08:01 GMT
Date: Thu, 26 Jan 2023 21:07:09 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bd56ce22720c6e6072efdabae64669fd
29194390d12177fe0d88e1bd2fb4436509366a1c
c41996d83d942ca58a13e2d1adfd171cf26a84bc9b7fdbd1ca941eb0269b5404
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C41996D83D942CA58A13E2D1ADFD171CF26A84BC9B7FDBD1CA941EB0269B5404"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18052
Expires: Fri, 27 Jan 2023 02:08:01 GMT
Date: Thu, 26 Jan 2023 21:07:09 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bd56ce22720c6e6072efdabae64669fd
29194390d12177fe0d88e1bd2fb4436509366a1c
c41996d83d942ca58a13e2d1adfd171cf26a84bc9b7fdbd1ca941eb0269b5404
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C41996D83D942CA58A13E2D1ADFD171CF26A84BC9B7FDBD1CA941EB0269B5404"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18052
Expires: Fri, 27 Jan 2023 02:08:01 GMT
Date: Thu, 26 Jan 2023 21:07:09 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F71e9b44e-6d59-411b-90e8-54e0efae62a5.jpeg
200 OK 7.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F71e9b44e-6d59-411b-90e8-54e0efae62a5.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 41fd0074a6ce752b1271302feade4cee
6311d1365504f06cb7516606c56c502d553c9d16
544c508899fe8855b0975a87cb0bf35663ab4ad0ec8fd057b3962d50cc001b8c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F71e9b44e-6d59-411b-90e8-54e0efae62a5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7365
x-amzn-requestid: c2a8ae3d-47f8-415f-bf08-78dd12ede3d1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fUYRwEUbIAMFnag=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d1a0d7-38f72fec78120cf113c7a4f7;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 21:36:23 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: rtbXkTvnYy-L9ludMO-LXo0lFghKSZeQ8UIGoaBHYlMIFGf0RR-zWA==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Wed, 25 Jan 2023 21:49:02 GMT
age: 83887
etag: "6311d1365504f06cb7516606c56c502d553c9d16"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46a5d7d6-d259-4246-b28c-8e4355fbc747.jpeg
200 OK 6.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46a5d7d6-d259-4246-b28c-8e4355fbc747.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b242645f0cc22e3b12c132e6d03722ac
dec70f83182de58e03bfcb95fc240b7c33f20674
59a2d8c972d27598dfe38637197f90053186c4f68b80a5a90283cb11ddaf8a31
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46a5d7d6-d259-4246-b28c-8e4355fbc747.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6609
x-amzn-requestid: 129067f4-c79b-493d-8863-2eb6c1565ee6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fSZABF4IIAMFsig=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d0d533-4908ab6e5c751213084de3c6;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 07:07:31 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: CaxCPk4-9yhypamZa96f4IyujB3AMeGmpcYP1UmJtjp275dwFjVOcw==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 07:21:33 GMT
age: 49536
etag: "dec70f83182de58e03bfcb95fc240b7c33f20674"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6a8a63ec-e0a4-4297-b143-649ad3968ae8.jpeg
200 OK 9.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6a8a63ec-e0a4-4297-b143-649ad3968ae8.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f62e9b7bdca82d18c945851912d8fea8
a7ca44d337c43bc5c6145b26778661c71cc50484
5da02cc405c1cada55813ffe376844375f1d6ad222cbb63405348b1f5132a0b1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6a8a63ec-e0a4-4297-b143-649ad3968ae8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9595
x-amzn-requestid: c257bfbe-1bd7-4540-bbfa-e4c49a2624a1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fUXwfGigoAMFvBw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d1a002-226c08656eeefbfa3c2dddb6;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 21:32:50 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: k9njnQmggD7UkVJzZqSzo90HJJjTjGK0QIoPU0HWYKrSstjM6s1rOw==
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Wed, 25 Jan 2023 21:49:37 GMT
age: 83852
etag: "a7ca44d337c43bc5c6145b26778661c71cc50484"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F09ccbe5e-77b1-4d6d-98f5-a477f3861d8c.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F09ccbe5e-77b1-4d6d-98f5-a477f3861d8c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7458f7a9b2070055df6f1d496794e43e
0f5d2a6d846f4f8f85dd7e8089e643cacc57d8a9
373097662c419eef9f4a19ce9f3bcead70f6eafbf0acf44806685eece43ce251
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F09ccbe5e-77b1-4d6d-98f5-a477f3861d8c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12758
x-amzn-requestid: c3540562-8c62-4957-9528-7ae952daebaa
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e9gf1E87oAMFpsQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c87acb-49fd3f78275937e24d23fca3;Sampled=0
x-amzn-remapped-date: Wed, 18 Jan 2023 23:03:39 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: mjK4GJ3UCEuHk4XqmXdZCWHTVvJeX8Z2HFaem2GYzqfqlPSd_h6DfA==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 05:14:39 GMT
age: 57150
etag: "0f5d2a6d846f4f8f85dd7e8089e643cacc57d8a9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8017df09-37d9-4c4b-9051-0442b3eb8fbf.jpeg
200 OK 9.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8017df09-37d9-4c4b-9051-0442b3eb8fbf.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 17e1b6f3caa98b0e0972802408dd3f93
07e48bf3565e00d093d72dd4ada606f5d39a4838
7094ef64e04573bea7a81bbcc8ab59d721c5ef433e3fa9203e5861040ced549c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8017df09-37d9-4c4b-9051-0442b3eb8fbf.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9285
x-amzn-requestid: 526bd945-31d8-490e-af9d-5e6fc6ea3561
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fUYT2HzvoAMFYYA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d1a0e5-6812fe4354bbdac4472e7e81;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 21:36:37 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: QEH9CmjfV8QZFNxFz_tEk06i_ELUSNC2QjdTF4K3xc3vS651BZ3NlQ==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Wed, 25 Jan 2023 21:52:28 GMT
age: 83681
etag: "07e48bf3565e00d093d72dd4ada606f5d39a4838"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6418a71b-f89d-45d1-bc77-36d6312f560b.jpeg
200 OK 5.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6418a71b-f89d-45d1-bc77-36d6312f560b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ba0a42dadf6a976df148f652e9cc1844
4d825b74865effa4a858ddcad1d0969671facc07
7276a38c9ba6b13a06f24ab8b802f210f98c5541df53fbcd8e879a14d2957d95
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6418a71b-f89d-45d1-bc77-36d6312f560b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5943
x-amzn-requestid: 6774f4a4-ed83-49df-868f-4517c2af914b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fUXxNF2UIAMFlYw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d1a007-75b1e8975c3f4b503e0a1c5b;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 21:32:55 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: KY05WKpINERD5g9o2QLYdsNMSuuy_YKn2Tl7Qkn7YaAOaPTDfLteeA==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Wed, 25 Jan 2023 21:49:40 GMT
etag: "4d825b74865effa4a858ddcad1d0969671facc07"
content-type: image/jpeg
age: 83849
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
promoprawn.com/norway/?utm_source=no&utm_medium=89954630040
302 Found 0 B URL HTTP/1.1 promoprawn.com/norway/?utm_source=no&utm_medium=89954630040
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /norway/?utm_source=no&utm_medium=89954630040 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: utm_source=no; utm_medium=89954630040; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89954630040; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89954630040
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Date: Thu, 26 Jan 2023 21:07:09 GMT
Server: Apache/2.4.54 (Debian)
cf-edge-cache: cache,platform=wordpress
Set-Cookie: utm_source=no; expires=Sat, 25-Feb-2023 21:07:09 GMT; Max-Age=2592000; path=/; domain=.promoprawn.com
utm_medium=89954630040; expires=Sat, 25-Feb-2023 21:07:09 GMT; Max-Age=2592000; path=/; domain=.promoprawn.com
utm_term=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
utm_content=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
utm_campaign=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
gclid=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
handl_original_ref=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89954630040; expires=Sat, 25-Feb-2023 21:07:09 GMT; Max-Age=2592000; path=/; domain=.promoprawn.com
handl_ip=91.90.42.154; expires=Sat, 25-Feb-2023 21:07:09 GMT; Max-Age=2592000; path=/; domain=.promoprawn.com
handl_ref=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
handl_url=https%3A%2F%2Fpromoprawn.com%2Fnorway%2F%3Futm_source%3Dno%26utm_medium%3D89954630040; expires=Sat, 25-Feb-2023 21:07:09 GMT; Max-Age=2592000; path=/; domain=.promoprawn.com
email=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
username=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
X-Redirect-By: WordPress
Location: https://promoprawn.com/go-to-e-ville-com
Content-Length: 0
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
promoprawn.com/go-to-e-ville-com
301 Moved Permanently 0 B URL HTTP/1.1 promoprawn.com/go-to-e-ville-com
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go-to-e-ville-com HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: utm_source=no; utm_medium=89954630040; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89954630040; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fnorway%2F%3Futm_source%3Dno%26utm_medium%3D89954630040
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Date: Thu, 26 Jan 2023 21:07:09 GMT
Server: Apache/2.4.54 (Debian)
cf-edge-cache: cache,platform=wordpress
Set-Cookie: utm_source=no; expires=Sat, 25-Feb-2023 21:07:09 GMT; Max-Age=2592000; path=/; domain=.promoprawn.com
utm_medium=89954630040; expires=Sat, 25-Feb-2023 21:07:09 GMT; Max-Age=2592000; path=/; domain=.promoprawn.com
utm_term=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
utm_content=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
utm_campaign=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
gclid=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
handl_original_ref=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89954630040; expires=Sat, 25-Feb-2023 21:07:09 GMT; Max-Age=2592000; path=/; domain=.promoprawn.com
handl_ip=91.90.42.154; expires=Sat, 25-Feb-2023 21:07:09 GMT; Max-Age=2592000; path=/; domain=.promoprawn.com
handl_ref=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-e-ville-com; expires=Sat, 25-Feb-2023 21:07:09 GMT; Max-Age=2592000; path=/; domain=.promoprawn.com
email=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
username=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
X-Pingback: https://promoprawn.com/xmlrpc.php
X-Redirect-By: WordPress
Location: https://promoprawn.com/go-to-e-ville-com/
Content-Length: 0
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
promoprawn.com/go-to-e-ville-com/
200 OK 12 kB URL HTTP/1.1 promoprawn.com/go-to-e-ville-com/
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (9381), with CRLF, LF line terminators
Hash 832da6aa48d8adf5da6b367e2dc98062
8f666b1f324c5939435a4b0957221203a2dc439a
8d4f95032512382c2a7340b1359ae8575c51e52959c9ffc53f482f42bce20999
GET /go-to-e-ville-com/ HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: utm_source=no; utm_medium=89954630040; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89954630040; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-e-ville-com
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 21:07:09 GMT
Server: Apache/2.4.54 (Debian)
cf-edge-cache: cache,platform=wordpress
Set-Cookie: utm_source=no; expires=Sat, 25-Feb-2023 21:07:10 GMT; Max-Age=2592000; path=/; domain=.promoprawn.com
utm_medium=89954630040; expires=Sat, 25-Feb-2023 21:07:10 GMT; Max-Age=2592000; path=/; domain=.promoprawn.com
utm_term=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
utm_content=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
utm_campaign=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
gclid=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
handl_original_ref=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89954630040; expires=Sat, 25-Feb-2023 21:07:10 GMT; Max-Age=2592000; path=/; domain=.promoprawn.com
handl_ip=91.90.42.154; expires=Sat, 25-Feb-2023 21:07:10 GMT; Max-Age=2592000; path=/; domain=.promoprawn.com
handl_ref=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-e-ville-com%2F; expires=Sat, 25-Feb-2023 21:07:10 GMT; Max-Age=2592000; path=/; domain=.promoprawn.com
email=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
username=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
X-Pingback: https://promoprawn.com/xmlrpc.php
Link: <https://promoprawn.com/wp-json/>; rel="https://api.w.org/", <https://promoprawn.com/wp-json/wp/v2/pages/2887>; rel="alternate"; type="application/json", <https://promoprawn.com/?p=2887>; rel=shortlink
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 12177
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
promoprawn.com/wp-content/plugins/gtranslate/gtranslate-style16.css?ver=6.1.1
200 OK 297 B URL HTTP/1.1 promoprawn.com/wp-content/plugins/gtranslate/gtranslate-style16.css?ver=6.1.1
IP
ASN #24940 Hetzner Online GmbH
Hash d88ebba95b0f655e9d78d37b26de7383
9c4962d5f43090d0f78aacd7a1d9f25685c144e0
65ca129dcac9b1d71e6482216a9df221a5b2a672497bff2c490c9225cc6b5879
GET /wp-content/plugins/gtranslate/gtranslate-style16.css?ver=6.1.1 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-e-ville-com/
Cookie: utm_source=no; utm_medium=89954630040; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89954630040; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-e-ville-com%2F
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 21:07:10 GMT
Server: Apache/2.4.54 (Debian)
Last-Modified: Mon, 02 Jan 2023 20:51:36 GMT
ETag: "2af-5f14e1e0596af-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 297
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: text/css
promoprawn.com/wp-includes/css/dist/block-library/style.min.css?ver=6.1.1
200 OK 12 kB URL HTTP/1.1 promoprawn.com/wp-includes/css/dist/block-library/style.min.css?ver=6.1.1
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (47826)
Hash 8fa87dd23394a22621248ec378d2af59
9305bc637a89b1700d7f56a19a80bd32b0feb2f7
c162f7de24fa2d4e93e0da254ef287ff72f4a3e03f42443265097968351388dc
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.1.1 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-e-ville-com/
Cookie: utm_source=no; utm_medium=89954630040; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89954630040; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-e-ville-com%2F
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 21:07:10 GMT
Server: Apache/2.4.54 (Debian)
Last-Modified: Mon, 02 Jan 2023 19:59:55 GMT
ETag: "172a9-5f14d65273591-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 12518
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: text/css
cdn.jsdelivr.net/fontawesome/4.7.0/css/font-awesome.min.css?ver=4.7.0
200 OK 7.1 kB URL HTTP/2 cdn.jsdelivr.net/fontawesome/4.7.0/css/font-awesome.min.css?ver=4.7.0
IP
File type ASCII text, with very long lines (30837)
Hash c68c38b6f53bfc3bee6b736afa488757
871df21572c702142a7c237259326013ec2df26a
e2100c6e7b6f0d358ac92d33b11278661c9a80e4c62c056677e24bc572d6da34
GET /fontawesome/4.7.0/css/font-awesome.min.css?ver=4.7.0 HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
etag: W/"7918-USx9eQM+MCipvmG1QM8aaHDIlvg"
content-encoding: gzip
accept-ranges: bytes
date: Thu, 26 Jan 2023 21:07:10 GMT
age: 1800543
x-served-by: cache-fra-eddf8230033-FRA, cache-bma1675-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 7055
X-Firefox-Spdy: h2
promoprawn.com/wp-content/themes/clipper/assets/js/lib/slick/slick-theme.min.css?ver=1.7.1
200 OK 769 B URL HTTP/1.1 promoprawn.com/wp-content/themes/clipper/assets/js/lib/slick/slick-theme.min.css?ver=1.7.1
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 (with BOM) text, with very long lines (2403)
Hash 174cf50d1a3e363b0a1b66891cf52629
480705eed7d3b108025a0a87eac206087cda2435
bae37a52db7a99fef1a9b7ca9b7da45db2711d58a60835d33e0cb13414ec006a
GET /wp-content/themes/clipper/assets/js/lib/slick/slick-theme.min.css?ver=1.7.1 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-e-ville-com/
Cookie: utm_source=no; utm_medium=89954630040; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89954630040; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-e-ville-com%2F
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 21:07:10 GMT
Server: Apache/2.4.54 (Debian)
Last-Modified: Mon, 02 Jan 2023 20:51:38 GMT
ETag: "971-5f14e1e18826b-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 769
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: text/css
promoprawn.com/wp-includes/css/classic-themes.min.css?ver=1
200 OK 189 B URL HTTP/1.1 promoprawn.com/wp-includes/css/classic-themes.min.css?ver=1
IP
ASN #24940 Hetzner Online GmbH
Hash 5a18e16eb01cbaa862eb32e6b77bedb2
3abf9b913cc9f558f02cba7c9b822f8d1812cb96
d2b5af913332941d5ae7786d1fa70e0d009315c4ede6ad5b80d0f663bb54521f
GET /wp-includes/css/classic-themes.min.css?ver=1 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-e-ville-com/
Cookie: utm_source=no; utm_medium=89954630040; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89954630040; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-e-ville-com%2F
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 21:07:10 GMT
Server: Apache/2.4.54 (Debian)
Last-Modified: Mon, 02 Jan 2023 19:59:55 GMT
ETag: "d9-5f14d65274531-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 189
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
promoprawn.com/wp-content/plugins/yc-url-redirection/public/css/yc-url-redirection-public.css?ver=1.0.0
200 OK 106 B URL HTTP/1.1 promoprawn.com/wp-content/plugins/yc-url-redirection/public/css/yc-url-redirection-public.css?ver=1.0.0
IP
ASN #24940 Hetzner Online GmbH
Hash 8af7d01cc8f7698605260aa25a37f45e
854439cb106afae13bace1acbdfd03e0ec2daee4
8b46abceed3ee90f0e9053977b5dcb569c09784270d0e5fff5aebf80256501e0
GET /wp-content/plugins/yc-url-redirection/public/css/yc-url-redirection-public.css?ver=1.0.0 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-e-ville-com/
Cookie: utm_source=no; utm_medium=89954630040; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89954630040; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-e-ville-com%2F
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 21:07:10 GMT
Server: Apache/2.4.54 (Debian)
Last-Modified: Mon, 02 Jan 2023 21:36:30 GMT
ETag: "62-5f14ebe91db01-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 106
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
promoprawn.com/wp-content/themes/clipper/assets/css/foundation.min.css?ver=6.4.3
200 OK 11 kB URL HTTP/1.1 promoprawn.com/wp-content/themes/clipper/assets/css/foundation.min.css?ver=6.4.3
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 (with BOM) text, with very long lines (65531), with no line terminators
Hash a1f83a44dd9c23c97f1fc7e2535cfac2
0ff16bad94a36561a14e145afb538ca322252fb3
ad25daffe32763107ee1a07c0ae1e891b1edf02a97e1073c549650558130a8fb
GET /wp-content/themes/clipper/assets/css/foundation.min.css?ver=6.4.3 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-e-ville-com/
Cookie: utm_source=no; utm_medium=89954630040; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89954630040; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-e-ville-com%2F
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 21:07:10 GMT
Server: Apache/2.4.54 (Debian)
Last-Modified: Mon, 02 Jan 2023 20:51:38 GMT
ETag: "111d7-5f14e1e18920b-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 11356
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
promoprawn.com/wp-content/themes/clipper/assets/js/lib/slick/slick.min.css?ver=1.7.1
200 OK 487 B URL HTTP/1.1 promoprawn.com/wp-content/themes/clipper/assets/js/lib/slick/slick.min.css?ver=1.7.1
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (1342)
Hash 498d01d303aa2e0a7e262165d3da1eab
efe27089a0c929c965980428ef1809a495524cdf
18aba63323cbd72554045e2cdb152b421bfeb7a43af5aa3b2031fe8291e98a27
GET /wp-content/themes/clipper/assets/js/lib/slick/slick.min.css?ver=1.7.1 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-e-ville-com/
Cookie: utm_source=no; utm_medium=89954630040; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89954630040; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-e-ville-com%2F
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 21:07:10 GMT
Server: Apache/2.4.54 (Debian)
Last-Modified: Mon, 02 Jan 2023 20:51:38 GMT
ETag: "53f-5f14e1e1872cb-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 487
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
promoprawn.com/wp-content/themes/clipper/theme-framework/lib/font-awesome/css/font-awesome.min.css?ver=4.7.0
200 OK 7.1 kB URL HTTP/1.1 promoprawn.com/wp-content/themes/clipper/theme-framework/lib/font-awesome/css/font-awesome.min.css?ver=4.7.0
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (30837)
Hash 2a2c987c48fb65bb0e78fa2a37120537
ede7a4d5da37f053251e8b8a33be2a23a660473f
3d3136cdfced0eee9b7766b7a17a591f6fb3ba480e71b8930acbea4db4ab71d1
GET /wp-content/themes/clipper/theme-framework/lib/font-awesome/css/font-awesome.min.css?ver=4.7.0 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-e-ville-com/
Cookie: utm_source=no; utm_medium=89954630040; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89954630040; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-e-ville-com%2F
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 21:07:10 GMT
Server: Apache/2.4.54 (Debian)
Last-Modified: Mon, 02 Jan 2023 20:51:38 GMT
ETag: "7917-5f14e1e18056b-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 7052
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: text/css
promoprawn.com/wp-content/themes/clipper/styles/red.css?ver=6.1.1
200 OK 296 B URL HTTP/1.1 promoprawn.com/wp-content/themes/clipper/styles/red.css?ver=6.1.1
IP
ASN #24940 Hetzner Online GmbH
Hash d0be71b38dc52b8fada38bba810deac6
df1ac957f7412268bab6b86699fcb5e129360eab
325779a365d00b1d497bdad99ba58a757d9fe0adc0d52bf878477d629b06f630
GET /wp-content/themes/clipper/styles/red.css?ver=6.1.1 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-e-ville-com/
Cookie: utm_source=no; utm_medium=89954630040; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89954630040; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-e-ville-com%2F
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 21:07:10 GMT
Server: Apache/2.4.54 (Debian)
Last-Modified: Mon, 02 Jan 2023 20:51:38 GMT
ETag: "27c-5f14e1e1749eb-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 296
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
promoprawn.com/wp-includes/css/dashicons.min.css?ver=6.1.1
200 OK 36 kB URL HTTP/1.1 promoprawn.com/wp-includes/css/dashicons.min.css?ver=6.1.1
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (58981)
Hash 00492d322e5572c7abc3e8701b6c52c1
0802ac2c8280ce7c98af881b1d49ec682acbf314
8bc01632cbc3ab834e04141d444ff82b05a4691444d70a9860477710e330b824
GET /wp-includes/css/dashicons.min.css?ver=6.1.1 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-e-ville-com/
Cookie: utm_source=no; utm_medium=89954630040; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89954630040; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-e-ville-com%2F
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 21:07:10 GMT
Server: Apache/2.4.54 (Debian)
Last-Modified: Wed, 03 Mar 2021 21:16:22 GMT
ETag: "e688-5bca85cdbf580-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 35730
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
promoprawn.com/wp-content/themes/clipper/theme-framework/js/colorbox/colorbox.min.css?ver=1.6.1
200 OK 935 B URL HTTP/1.1 promoprawn.com/wp-content/themes/clipper/theme-framework/js/colorbox/colorbox.min.css?ver=1.6.1
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (2982)
Hash d012fd1f5daeb9a931a2ddce9164d558
42e70f2fe9c6095b8c07d43912bbf45064bdf609
b100081781e3fa78819e8da97637c82f84c32dfa04a12416d87cc1002baa5fcb
GET /wp-content/themes/clipper/theme-framework/js/colorbox/colorbox.min.css?ver=1.6.1 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-e-ville-com/
Cookie: utm_source=no; utm_medium=89954630040; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89954630040; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-e-ville-com%2F
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 21:07:10 GMT
Server: Apache/2.4.54 (Debian)
Last-Modified: Mon, 02 Jan 2023 20:51:38 GMT
ETag: "ba7-5f14e1e1778cb-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 935
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
promoprawn.com/wp-content/themes/clipper/framework/styles/jquery-ui/jquery-ui.min.css?ver=1.11.2
200 OK 7.5 kB URL HTTP/1.1 promoprawn.com/wp-content/themes/clipper/framework/styles/jquery-ui/jquery-ui.min.css?ver=1.11.2
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (28367)
Hash f41d9ccd107342e114f067d73987685a
8a5f44cbc60a574493b888c53ead633f02193d8d
88e79c1720054e221f5ce88bf909fa001fd7bc53de1c4c8b5508cd4f1ae986f6
GET /wp-content/themes/clipper/framework/styles/jquery-ui/jquery-ui.min.css?ver=1.11.2 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-e-ville-com/
Cookie: utm_source=no; utm_medium=89954630040; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89954630040; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-e-ville-com%2F
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 21:07:10 GMT
Server: Apache/2.4.54 (Debian)
Last-Modified: Mon, 02 Jan 2023 20:51:38 GMT
ETag: "75d3-5f14e1e17598b-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 7547
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
promoprawn.com/wp-content/themes/clipper/framework/styles/datepicker/datepicker.css?ver=6.1.1
200 OK 1.2 kB URL HTTP/1.1 promoprawn.com/wp-content/themes/clipper/framework/styles/datepicker/datepicker.css?ver=6.1.1
IP
ASN #24940 Hetzner Online GmbH
Hash dfaaf563f8295e43951d1df68efe8378
7f89c35b61f0834796d191ac3ec165671e4e5926
fcd3b9437fef9e38521a8d8ba80c9e59532d39375ad06bdacd7dd06cea39a062
GET /wp-content/themes/clipper/framework/styles/datepicker/datepicker.css?ver=6.1.1 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-e-ville-com/
Cookie: utm_source=no; utm_medium=89954630040; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89954630040; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-e-ville-com%2F
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 21:07:10 GMT
Server: Apache/2.4.54 (Debian)
Last-Modified: Mon, 02 Jan 2023 20:51:38 GMT
ETag: "1c06-5f14e1e17598b-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1189
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: text/css
promoprawn.com/wp-content/themes/clipper/assets/css/style.min.css?ver=2.0.9
200 OK 15 kB URL HTTP/1.1 promoprawn.com/wp-content/themes/clipper/assets/css/style.min.css?ver=2.0.9
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (65536), with no line terminators
Hash 540e69dfe657c46985f39301c81b6982
5f8a772f93b392ae90c49e9ba2db3939a8e4e786
a417e5c872799b8837c3d8ce988a5ed1d5bffea954c9df9a92c7cbc9b39ab4de
GET /wp-content/themes/clipper/assets/css/style.min.css?ver=2.0.9 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-e-ville-com/
Cookie: utm_source=no; utm_medium=89954630040; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89954630040; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-e-ville-com%2F
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 21:07:10 GMT
Server: Apache/2.4.54 (Debian)
Last-Modified: Mon, 02 Jan 2023 20:51:38 GMT
ETag: "107a9-5f14e1e18920b-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 14742
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
promoprawn.com/wp-content/themes/clipper/includes/reports/style.css?ver=1.0
200 OK 308 B URL HTTP/1.1 promoprawn.com/wp-content/themes/clipper/includes/reports/style.css?ver=1.0
IP
ASN #24940 Hetzner Online GmbH
Hash 8d71a547f4dc04ef4c6abc9336331806
451cb910081b75eba8e8e9bc391ba116a822f48b
45bd953baceada6c85abea38a2d7a6d6d9887d094ef566414aa0d483a9160e57
GET /wp-content/themes/clipper/includes/reports/style.css?ver=1.0 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-e-ville-com/
Cookie: utm_source=no; utm_medium=89954630040; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89954630040; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-e-ville-com%2F
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 21:07:10 GMT
Server: Apache/2.4.54 (Debian)
Last-Modified: Mon, 02 Jan 2023 20:51:38 GMT
ETag: "2d6-5f14e1e1824ab-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 308
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
promoprawn.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
200 OK 4.2 kB URL HTTP/1.1 promoprawn.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (11126)
Hash 5629711d7fdd5b28441bac39b851299f
4e0bf2b7383097f7c352023a1b1b1b48a50356b6
44c444309c7a6c05ff4a9bc198bed9e9596bedb5658637c85689c9a471dcdd16
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-e-ville-com/
Cookie: utm_source=no; utm_medium=89954630040; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89954630040; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-e-ville-com%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 21:07:10 GMT
Server: Apache/2.4.54 (Debian)
Last-Modified: Wed, 18 Nov 2020 09:06:06 GMT
ETag: "2bd8-5b45debe27b80-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4169
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
promoprawn.com/wp-content/plugins/handl-utm-grabber/js/handl-utm-grabber.js?ver=6.1.1
200 OK 680 B URL HTTP/1.1 promoprawn.com/wp-content/plugins/handl-utm-grabber/js/handl-utm-grabber.js?ver=6.1.1
IP
ASN #24940 Hetzner Online GmbH
Hash 9de0a4cf40d52108df85ec18db92ec25
a203564f83186a99b97f320e981617a6c55d09ba
c555382be49f86edd553fc3f16a3a4428741bde347fa78c1abf984d534e32e41
GET /wp-content/plugins/handl-utm-grabber/js/handl-utm-grabber.js?ver=6.1.1 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-e-ville-com/
Cookie: utm_source=no; utm_medium=89954630040; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89954630040; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-e-ville-com%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 21:07:10 GMT
Server: Apache/2.4.54 (Debian)
Last-Modified: Mon, 02 Jan 2023 20:51:37 GMT
ETag: "5f5-5f14e1e08750e-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 680
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive
Content-Type: application/javascript
promoprawn.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.1
200 OK 31 kB URL HTTP/1.1 promoprawn.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.1
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (65447)
Hash 1b5264c989379b828aff60f65a518a24
98641237f14ccb33ac114f54329a33bd0aa17eb7
6c8e7b78c6dbc13426810c905572db7589cf3e00264e30ce797fddb0b1092237
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.1 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-e-ville-com/
Cookie: utm_source=no; utm_medium=89954630040; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89954630040; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-e-ville-com%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 21:07:10 GMT
Server: Apache/2.4.54 (Debian)
Last-Modified: Mon, 02 Jan 2023 19:59:55 GMT
ETag: "15e54-5f14d65260cb1-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 30995
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
promoprawn.com/wp-content/plugins/handl-utm-grabber/js/js.cookie.js?ver=6.1.1
200 OK 1.4 kB URL HTTP/1.1 promoprawn.com/wp-content/plugins/handl-utm-grabber/js/js.cookie.js?ver=6.1.1
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with CRLF line terminators
Hash fcf7b4d2b11b6f6309d62c0f08ed5f04
2d7fef515d11484a5a39bd00dd888e18f1123495
fb7806cd32803bfaba1828de2107c955cd7400d3ec4f2446b132d8529556a4b8
GET /wp-content/plugins/handl-utm-grabber/js/js.cookie.js?ver=6.1.1 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-e-ville-com/
Cookie: utm_source=no; utm_medium=89954630040; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89954630040; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-e-ville-com%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 21:07:10 GMT
Server: Apache/2.4.54 (Debian)
Last-Modified: Mon, 02 Jan 2023 20:51:37 GMT
ETag: "df1-5f14e1e08750e-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1401
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
promoprawn.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2
200 OK 7.1 kB URL HTTP/1.1 promoprawn.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (8189)
Hash fc922a895f5f92269c928556b67564f6
8759e1f16a826dd6dd73f4161a65a79a049c4d6f
d7445c88608e9da487d81ef5167866c42ff1099b5f48efda4b5f5ac41aa7d9b8
GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.2 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-e-ville-com/
Cookie: utm_source=no; utm_medium=89954630040; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89954630040; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-e-ville-com%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 21:07:10 GMT
Server: Apache/2.4.54 (Debian)
Last-Modified: Mon, 02 Jan 2023 19:59:55 GMT
ETag: "53c0-5f14d65262bf1-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 7097
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
promoprawn.com/wp-content/themes/clipper/framework/js/jquery-ui/jquery.ui.datepicker-lang.js?ver=6.1.1
200 OK 176 B URL HTTP/1.1 promoprawn.com/wp-content/themes/clipper/framework/js/jquery-ui/jquery.ui.datepicker-lang.js?ver=6.1.1
IP
ASN #24940 Hetzner Online GmbH
Hash 62232f1f52cba3d4bd1c0d4be615ce6e
c8d71ce66efc94eab9ce872c3bd964bb4fc81332
f481aa413e6e7c1b9b25301e5647251d9e0f2a88c920c50d8c9885ac986faede
GET /wp-content/themes/clipper/framework/js/jquery-ui/jquery.ui.datepicker-lang.js?ver=6.1.1 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-e-ville-com/
Cookie: utm_source=no; utm_medium=89954630040; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89954630040; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-e-ville-com%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 21:07:10 GMT
Server: Apache/2.4.54 (Debian)
Last-Modified: Mon, 02 Jan 2023 20:51:38 GMT
ETag: "e6-5f14e1e17598b-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 176
Keep-Alive: timeout=5, max=90
Connection: Keep-Alive
Content-Type: application/javascript
promoprawn.com/wp-includes/js/jquery/ui/datepicker.min.js?ver=1.13.2
200 OK 11 kB URL HTTP/1.1 promoprawn.com/wp-includes/js/jquery/ui/datepicker.min.js?ver=1.13.2
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (36548)
Hash 24a3c154c4525d9ee113368f9d371cae
e1d30defe9efd5dd186b93a53e649ece31f31d44
624e56b58253e82aad5449eeb077e0f9938c23544d38dc5c7c48f19ea5c02773
GET /wp-includes/js/jquery/ui/datepicker.min.js?ver=1.13.2 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-e-ville-com/
Cookie: utm_source=no; utm_medium=89954630040; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89954630040; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-e-ville-com%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 21:07:10 GMT
Server: Apache/2.4.54 (Debian)
Last-Modified: Mon, 02 Jan 2023 19:59:55 GMT
ETag: "8f7b-5f14d65262bf1-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 10894
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
promoprawn.com/wp-content/themes/clipper/includes/js/easing.js?ver=1.3
200 OK 1.0 kB URL HTTP/1.1 promoprawn.com/wp-content/themes/clipper/includes/js/easing.js?ver=1.3
IP
ASN #24940 Hetzner Online GmbH
Hash b90586eabddd6058b991707920b49e53
b8fb56fb3d37aa6fbcedcd8936e283182089fd9f
05e8e8550f033c35052446ee1e5bbb2b6675a731ca24ebac80059c57892f9f00
GET /wp-content/themes/clipper/includes/js/easing.js?ver=1.3 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-e-ville-com/
Cookie: utm_source=no; utm_medium=89954630040; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89954630040; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-e-ville-com%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 21:07:10 GMT
Server: Apache/2.4.54 (Debian)
Last-Modified: Mon, 02 Jan 2023 20:51:38 GMT
ETag: "1277-5f14e1e18344b-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1027
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
promoprawn.com/wp-content/themes/clipper/includes/js/jcarousellite.min.js?ver=1.8.5
200 OK 2.9 kB URL HTTP/1.1 promoprawn.com/wp-content/themes/clipper/includes/js/jcarousellite.min.js?ver=1.8.5
IP
ASN #24940 Hetzner Online GmbH
File type HTML document, ASCII text, with very long lines (6965)
Hash 64494550b5967ef360587aed9077930d
6ec03cbe31d40767c84d0a3075af9d8f458ffa9c
5d64b0ace3318d7097ebaa593884074e956833997708628a0fa76f9835c9a045
GET /wp-content/themes/clipper/includes/js/jcarousellite.min.js?ver=1.8.5 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-e-ville-com/
Cookie: utm_source=no; utm_medium=89954630040; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89954630040; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-e-ville-com%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 21:07:10 GMT
Server: Apache/2.4.54 (Debian)
Last-Modified: Mon, 02 Jan 2023 20:51:38 GMT
ETag: "1c1a-5f14e1e18344b-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2932
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
promoprawn.com/wp-content/themes/clipper/includes/js/clipboard.min.js?ver=1.5.15
200 OK 3.3 kB URL HTTP/1.1 promoprawn.com/wp-content/themes/clipper/includes/js/clipboard.min.js?ver=1.5.15
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (10167)
Hash 1142bd4a25df7edd1e4494f51f15ec7c
9adf3165e5d35f97a2f19591bbbe6ce441190a31
68c28f1573caebebba8759c0cf3f1eb39cbbd37f4095c327dfa2204dd1055f12
GET /wp-content/themes/clipper/includes/js/clipboard.min.js?ver=1.5.15 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-e-ville-com/
Cookie: utm_source=no; utm_medium=89954630040; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89954630040; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-e-ville-com%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 21:07:10 GMT
Server: Apache/2.4.54 (Debian)
Last-Modified: Mon, 02 Jan 2023 20:51:38 GMT
ETag: "2824-5f14e1e18344b-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3277
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
promoprawn.com/wp-content/themes/clipper/theme-framework/js/colorbox/jquery.colorbox.min.js?ver=1.6.1
200 OK 4.7 kB URL HTTP/1.1 promoprawn.com/wp-content/themes/clipper/theme-framework/js/colorbox/jquery.colorbox.min.js?ver=1.6.1
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (11827)
Hash 114459024aa27885f2f516416ea94e2a
f0c43e3fd49b73722f3e7fb12cb02b4a0a713f74
7149c522ab8296a61bf632979caf08f12a110a7c91dfbecd111a90ae037090d5
GET /wp-content/themes/clipper/theme-framework/js/colorbox/jquery.colorbox.min.js?ver=1.6.1 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-e-ville-com/
Cookie: utm_source=no; utm_medium=89954630040; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89954630040; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-e-ville-com%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 21:07:10 GMT
Server: Apache/2.4.54 (Debian)
Last-Modified: Mon, 02 Jan 2023 20:51:38 GMT
ETag: "2e7c-5f14e1e1778cb-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4711
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript
promoprawn.com/wp-content/themes/clipper/framework/js/validate/jquery.validate.min.js?ver=1.15.0
200 OK 7.3 kB URL HTTP/1.1 promoprawn.com/wp-content/themes/clipper/framework/js/validate/jquery.validate.min.js?ver=1.15.0
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (22550), with CRLF line terminators
Hash 2d652839c3bd91ce7865468297f163ee
74c6a11431be195b37fd9e010a423ac3f89acd00
d75938c169e6ef12ca0b4d780908cd246497bab1481a860e4ab7ac5046dd6c50
GET /wp-content/themes/clipper/framework/js/validate/jquery.validate.min.js?ver=1.15.0 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-e-ville-com/
Cookie: utm_source=no; utm_medium=89954630040; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89954630040; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-e-ville-com%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 21:07:10 GMT
Server: Apache/2.4.54 (Debian)
Last-Modified: Mon, 02 Jan 2023 20:51:38 GMT
ETag: "58a3-5f14e1e17598b-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 7323
Keep-Alive: timeout=5, max=89
Connection: Keep-Alive
Content-Type: application/javascript
promoprawn.com/wp-content/themes/clipper/framework/js/validate/jquery.validate-lang.js?ver=6.1.1
200 OK 268 B URL HTTP/1.1 promoprawn.com/wp-content/themes/clipper/framework/js/validate/jquery.validate-lang.js?ver=6.1.1
IP
ASN #24940 Hetzner Online GmbH
Hash e3ca9d0aba90bfcb7ceb3a8536a0a38f
42ec7201d060590dc7b14ff5917d6438d6317836
fa269318859baa5dfdaea58f40e337ffe1efb4196d368ef2144b4e396312632e
GET /wp-content/themes/clipper/framework/js/validate/jquery.validate-lang.js?ver=6.1.1 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-e-ville-com/
Cookie: utm_source=no; utm_medium=89954630040; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89954630040; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-e-ville-com%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 21:07:10 GMT
Server: Apache/2.4.54 (Debian)
Last-Modified: Mon, 02 Jan 2023 20:51:38 GMT
ETag: "2f7-5f14e1e17598b-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 268
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript
promoprawn.com/wp-content/themes/clipper/includes/js/jquery.tinynav.min.js?ver=1.2
200 OK 489 B URL HTTP/1.1 promoprawn.com/wp-content/themes/clipper/includes/js/jquery.tinynav.min.js?ver=1.2
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (507)
Hash 62224922fb0f7b8e633b30590414a6be
d25f77bf7bc59de732ac4bba8acce8a23a2083ef
91c3e7afd7dfef69e126370500baadcae2cf39a07e829b1b749a1e1319df150c
GET /wp-content/themes/clipper/includes/js/jquery.tinynav.min.js?ver=1.2 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-e-ville-com/
Cookie: utm_source=no; utm_medium=89954630040; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89954630040; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-e-ville-com%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 21:07:10 GMT
Server: Apache/2.4.54 (Debian)
Last-Modified: Mon, 02 Jan 2023 20:51:38 GMT
ETag: "352-5f14e1e18344b-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 489
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
promoprawn.com/wp-content/plugins/real-time-auto-find-and-replace/assets/js/rtafar.local.js?ver=1.4.2
200 OK 19 B URL HTTP/1.1 promoprawn.com/wp-content/plugins/real-time-auto-find-and-replace/assets/js/rtafar.local.js?ver=1.4.2
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with no line terminators
Hash 8102dc9eee0565de28649497220d8d17
a32963be36656f3dd149892540138913bc88de6c
51ff2b4b46acab057eba32dc5fbd0bcf410f0ad2bb75d7a92b230bc627d930d6
GET /wp-content/plugins/real-time-auto-find-and-replace/assets/js/rtafar.local.js?ver=1.4.2 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-e-ville-com/
Cookie: utm_source=no; utm_medium=89954630040; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89954630040; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-e-ville-com%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 21:07:10 GMT
Server: Apache/2.4.54 (Debian)
Last-Modified: Mon, 02 Jan 2023 20:51:36 GMT
ETag: "13-5f14e1e05a64f"
Accept-Ranges: bytes
Content-Length: 19
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript
promoprawn.com/wp-includes/js/jquery/ui/menu.min.js?ver=1.13.2
200 OK 3.0 kB URL HTTP/1.1 promoprawn.com/wp-includes/js/jquery/ui/menu.min.js?ver=1.13.2
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (9937)
Hash b3d9bb7257d4b8df3985fa9a64e423ca
a82689c4a06c778e32d271a1657552903279ba14
5f58cddc96bbb61a64163e8c6eab8f41ace3aed25bbc547adae37d7a786d09bf
GET /wp-includes/js/jquery/ui/menu.min.js?ver=1.13.2 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-e-ville-com/
Cookie: utm_source=no; utm_medium=89954630040; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89954630040; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-e-ville-com%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 21:07:10 GMT
Server: Apache/2.4.54 (Debian)
Last-Modified: Mon, 02 Jan 2023 19:59:55 GMT
ETag: "2782-5f14d65261c51-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3024
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript
promoprawn.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
200 OK 6.5 kB URL HTTP/1.1 promoprawn.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (17819), with no line terminators
Hash 287748e15cc4a588d0df39da369d9035
b02e10a775f9d6ab54d448acffbc9253e2d9bfb9
742f6e950eecbeaf0c308f5d3877e48d6d57d48b7f8bd458d81875feb4b58654
GET /wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-e-ville-com/
Cookie: utm_source=no; utm_medium=89954630040; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89954630040; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-e-ville-com%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 21:07:10 GMT
Server: Apache/2.4.54 (Debian)
Last-Modified: Mon, 02 Jan 2023 19:59:55 GMT
ETag: "459f-5f14d65264b31-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 6532
Keep-Alive: timeout=5, max=88
Connection: Keep-Alive
Content-Type: application/javascript
promoprawn.com/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9
200 OK 2.5 kB URL HTTP/1.1 promoprawn.com/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (6475), with no line terminators
Hash 27cbbd0a9d7c5ad9402118c4afc36035
7659d08a005f5ecfa6c779e3cda45c30007fd059
ebc771d0af626966e38535357861fab0090e0bd7ff346cbe3c7ffdde1683809f
GET /wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-e-ville-com/
Cookie: utm_source=no; utm_medium=89954630040; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89954630040; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-e-ville-com%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 21:07:10 GMT
Server: Apache/2.4.54 (Debian)
Last-Modified: Mon, 11 Apr 2022 12:04:30 GMT
ETag: "194b-5dc5fbf1e6f80-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2457
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: application/javascript
promoprawn.com/wp-includes/js/dist/dom-ready.min.js?ver=392bdd43726760d1f3ca
200 OK 331 B URL HTTP/1.1 promoprawn.com/wp-includes/js/dist/dom-ready.min.js?ver=392bdd43726760d1f3ca
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (463)
Hash ba2b50662c393ff6ba69961f66b24d5d
d5694f33b1072b13fc4c3989e90252c0b28030a2
79ad638f020827a6db341526b430e65459aa712bfbdcabf28bb013c6b2c715e9
GET /wp-includes/js/dist/dom-ready.min.js?ver=392bdd43726760d1f3ca HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-e-ville-com/
Cookie: utm_source=no; utm_medium=89954630040; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89954630040; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-e-ville-com%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 21:07:10 GMT
Server: Apache/2.4.54 (Debian)
Last-Modified: Mon, 11 Apr 2022 12:04:30 GMT
ETag: "1f2-5dc5fbf1e6f80-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 331
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: application/javascript
promoprawn.com/wp-includes/js/dist/hooks.min.js?ver=4169d3cf8e8d95a3d6d5
200 OK 1.7 kB URL HTTP/1.1 promoprawn.com/wp-includes/js/dist/hooks.min.js?ver=4169d3cf8e8d95a3d6d5
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (4875)
Hash 320b86bb1a9ce650a5e3553b2bb1c430
c56e8668b398641ed5cdcfbd8a8eba7d631cdb9c
c9ebbb8d122c6be3880d18172abfe308bb07db900689484fa765a73b8b20b3ec
GET /wp-includes/js/dist/hooks.min.js?ver=4169d3cf8e8d95a3d6d5 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-e-ville-com/
Cookie: utm_source=no; utm_medium=89954630040; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89954630040; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-e-ville-com%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 21:07:10 GMT
Server: Apache/2.4.54 (Debian)
Last-Modified: Mon, 11 Apr 2022 12:04:30 GMT
ETag: "132e-5dc5fbf1e6f80-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1661
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript
promoprawn.com/wp-includes/js/dist/i18n.min.js?ver=9e794f35a71bb98672ae
200 OK 3.9 kB URL HTTP/1.1 promoprawn.com/wp-includes/js/dist/i18n.min.js?ver=9e794f35a71bb98672ae
IP
ASN #24940 Hetzner Online GmbH
Hash eb22973e4f9791a1b52550f254a1022e
cfa38e2369070741641968207c1dbb8ccd0c9221
0dbbf082b664afe4556aee3cc7c3e173b1cb9ac665e127ddb0b8db2a60237d01
GET /wp-includes/js/dist/i18n.min.js?ver=9e794f35a71bb98672ae HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-e-ville-com/
Cookie: utm_source=no; utm_medium=89954630040; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89954630040; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-e-ville-com%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 21:07:10 GMT
Server: Apache/2.4.54 (Debian)
Last-Modified: Mon, 02 Jan 2023 19:59:55 GMT
ETag: "27f6-5f14d65266a71-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3866
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: application/javascript
promoprawn.com/wp-includes/js/dist/a11y.min.js?ver=ecce20f002eda4c19664
200 OK 989 B URL HTTP/1.1 promoprawn.com/wp-includes/js/dist/a11y.min.js?ver=ecce20f002eda4c19664
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (2472)
Hash 1a973b2fcb6382cf2f096dc05ac8c879
1b1c2d34623e75e9218132fc3b414543e56af2c3
977f29856fc84e0712763206e1d27ea8aeb94c1d23b2b6de45e293d2284f2360
GET /wp-includes/js/dist/a11y.min.js?ver=ecce20f002eda4c19664 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-e-ville-com/
Cookie: utm_source=no; utm_medium=89954630040; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89954630040; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-e-ville-com%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 21:07:10 GMT
Server: Apache/2.4.54 (Debian)
Last-Modified: Mon, 11 Apr 2022 12:04:30 GMT
ETag: "9cc-5dc5fbf1e6f80-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 989
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: application/javascript
promoprawn.com/wp-includes/js/jquery/ui/autocomplete.min.js?ver=1.13.2
200 OK 2.9 kB URL HTTP/1.1 promoprawn.com/wp-includes/js/jquery/ui/autocomplete.min.js?ver=1.13.2
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (8281)
Hash 700f0b3de82a252b01ac87ee609a9773
28fc9eb29e503904383fc7f9bb6ad29ab7c2a86a
a8fd95b515ffb3d748ee1531c4399766439fb7efb9672843d6a2102e6350b23b
GET /wp-includes/js/jquery/ui/autocomplete.min.js?ver=1.13.2 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-e-ville-com/
Cookie: utm_source=no; utm_medium=89954630040; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89954630040; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-e-ville-com%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 21:07:10 GMT
Server: Apache/2.4.54 (Debian)
Last-Modified: Mon, 02 Jan 2023 19:59:55 GMT
ETag: "2112-5f14d65261c51-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2877
Keep-Alive: timeout=5, max=87
Connection: Keep-Alive
Content-Type: application/javascript
promoprawn.com/wp-content/themes/clipper/assets/js/lib/slick/slick.min.js?ver=1.7.1
200 OK 10 kB URL HTTP/1.1 promoprawn.com/wp-content/themes/clipper/assets/js/lib/slick/slick.min.js?ver=1.7.1
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (42634)
Hash 4f8e7fb2fa17a2446fd5d7500f117595
2ecbda1ff5a6d32397cdf079924b0733953079bd
63b787c117278e7bde1de1ce638da91eab582d9b4075ae02e7fb68c049d0a616
GET /wp-content/themes/clipper/assets/js/lib/slick/slick.min.js?ver=1.7.1 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-e-ville-com/
Cookie: utm_source=no; utm_medium=89954630040; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89954630040; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-e-ville-com%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 21:07:10 GMT
Server: Apache/2.4.54 (Debian)
Last-Modified: Mon, 02 Jan 2023 20:51:38 GMT
ETag: "a68b-5f14e1e1872cb-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 10381
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: application/javascript
promoprawn.com/wp-content/themes/clipper/assets/js/lib/foundation/motion-ui.min.js?ver=1.2.2
200 OK 754 B URL HTTP/1.1 promoprawn.com/wp-content/themes/clipper/assets/js/lib/foundation/motion-ui.min.js?ver=1.2.2
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (1683), with no line terminators
Hash 2bc16ed5d9596c1d4dc42faa568dce97
b38f0b97076a27932db6b7371f797f754b07ca1c
949e447fa7e93ede0c80a9a684da5adbc00059bc62441d1b06ee7aedfe639cdc
GET /wp-content/themes/clipper/assets/js/lib/foundation/motion-ui.min.js?ver=1.2.2 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-e-ville-com/
Cookie: utm_source=no; utm_medium=89954630040; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89954630040; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-e-ville-com%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 21:07:10 GMT
Server: Apache/2.4.54 (Debian)
Last-Modified: Mon, 02 Jan 2023 20:51:38 GMT
ETag: "693-5f14e1e1872cb-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 754
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: application/javascript
promoprawn.com/wp-content/themes/clipper/assets/js/theme-scripts.min.js?ver=2.0.9
200 OK 2.4 kB URL HTTP/1.1 promoprawn.com/wp-content/themes/clipper/assets/js/theme-scripts.min.js?ver=2.0.9
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (6814), with no line terminators
Hash 59721d5c604d3cb539fc7526ccf45aea
737158bb570ab372d6cb824235d7f8d03e72cefb
208f79bc68a1ef02c26da3122cf36c176df92ae265c1dcb872ecf7d703a271b6
GET /wp-content/themes/clipper/assets/js/theme-scripts.min.js?ver=2.0.9 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-e-ville-com/
Cookie: utm_source=no; utm_medium=89954630040; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89954630040; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-e-ville-com%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 21:07:10 GMT
Server: Apache/2.4.54 (Debian)
Last-Modified: Mon, 02 Jan 2023 20:51:38 GMT
ETag: "1a9e-5f14e1e1872cb-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2406
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: application/javascript
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 82e3abc4a7b17efedca67cf215f4bb60
e20e55d87591af7db3a4bcfc429048f85e389b85
df8901d4d87686fb11e17986f5d53cf513f675b4dd71f0a2e35c7ffbefa7fb9e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 21:07:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4
200 OK 1.5 kB URL HTTP/1.1 ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4
IP
Hash c9d02ba789866cf8929856550c81f716
e230734a03ce016999e4a4cd70433f812f64f8b3
118156cba6be84a226f04fc2b99db2cf1c7f3f78cbc0ed835e58fdfc23461eaf
POST /ca/gsatlasr3dvtlsca2022q4 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 21:07:10 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "52CB5CAAD7A9A9496DD77DDDA5CDC08BDFF46EE8"
Expires: Fri, 27 Jan 2023 08:00:00 GMT
Last-Modified: Thu, 26 Jan 2023 20:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 1594
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78fc37773ec30b51-OSL
promoprawn.com/wp-content/themes/clipper/includes/reports/scripts/reports.js?ver=1.0
200 OK 481 B URL HTTP/1.1 promoprawn.com/wp-content/themes/clipper/includes/reports/scripts/reports.js?ver=1.0
IP
ASN #24940 Hetzner Online GmbH
Hash 9b2dc3681d6d602602e6c76520b8eeb7
b04f98041808f5cd683f1fdf76252c8e7dff89c6
fbd4aac8259fe7b1b6db341f78385ddcaaf80c452d5ea513169beff95bd57697
GET /wp-content/themes/clipper/includes/reports/scripts/reports.js?ver=1.0 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-e-ville-com/
Cookie: utm_source=no; utm_medium=89954630040; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89954630040; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-e-ville-com%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 21:07:10 GMT
Server: Apache/2.4.54 (Debian)
Last-Modified: Mon, 02 Jan 2023 20:51:38 GMT
ETag: "40a-5f14e1e1824ab-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 481
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: application/javascript
promoprawn.com/wp-content/plugins/real-time-auto-find-and-replace/assets/js/rtafar.app.min.js?ver=1.4.2
200 OK 198 B URL HTTP/1.1 promoprawn.com/wp-content/plugins/real-time-auto-find-and-replace/assets/js/rtafar.app.min.js?ver=1.4.2
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with no line terminators
Hash a5dc7dead45132519871276f050c6ada
57574eedf40c36431aaa842c194de37c755e92a4
cd90d94d9530cb2213a9f4e34cc1242bae23dbf8505cbfa1d0670380f17d185b
GET /wp-content/plugins/real-time-auto-find-and-replace/assets/js/rtafar.app.min.js?ver=1.4.2 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-e-ville-com/
Cookie: utm_source=no; utm_medium=89954630040; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89954630040; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-e-ville-com%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 21:07:10 GMT
Server: Apache/2.4.54 (Debian)
Last-Modified: Mon, 02 Jan 2023 20:51:36 GMT
ETag: "11c-5f14e1e05a64f-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 198
Keep-Alive: timeout=5, max=86
Connection: Keep-Alive
Content-Type: application/javascript
cdn.jsdelivr.net/fontawesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0
200 OK 77 kB URL HTTP/2 cdn.jsdelivr.net/fontawesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0
IP
File type Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data
Hash af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
GET /fontawesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://promoprawn.com
Connection: keep-alive
Referer: https://cdn.jsdelivr.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: font/woff2
etag: W/"12d68-1vSMun0Hb7by/Wupk6dbncHsvww"
accept-ranges: bytes
date: Thu, 26 Jan 2023 21:07:10 GMT
age: 1977398
x-served-by: cache-fra-eddf8230101-FRA, cache-bma1625-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 77160
X-Firefox-Spdy: h2
promoprawn.com/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1
200 OK 5.0 kB URL HTTP/1.1 promoprawn.com/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (15660)
Hash e6624e0b978e6ddba476be41aaaa82df
822e920d8233072110ed7c8a7f379e5b13209b18
dac86a9ce08e4d8cded47b4fa900a664b0c997d8910c2a1be54a423678925a41
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.1.1 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-e-ville-com/
Cookie: utm_source=no; utm_medium=89954630040; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89954630040; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-e-ville-com%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 21:07:10 GMT
Server: Apache/2.4.54 (Debian)
Last-Modified: Tue, 12 Apr 2022 05:56:23 GMT
ETag: "48b9-5dc6eb878efc0-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 5009
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: application/javascript
www.googletagmanager.com/gtag/js?id=UA-181731366-4
200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-181731366-4
IP
File type ASCII text, with very long lines (1759)
Hash 9b2f77e809f8b1fee2805b69968a3092
14251dafc7c94b2556c6aa769cff9678431f847e
4b79b12b8d06dcd9f1250d122b261ea96279119ef020b8b595bf84e514ee84ca
GET /gtag/js?id=UA-181731366-4 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 26 Jan 2023 21:07:10 GMT
expires: Thu, 26 Jan 2023 21:07:10 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 44094
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
promoprawn.com/wp-content/themes/clipper/assets/js/lib/foundation/foundation.min.js?ver=6.4.3
200 OK 33 kB URL HTTP/1.1 promoprawn.com/wp-content/themes/clipper/assets/js/lib/foundation/foundation.min.js?ver=6.4.3
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (65536), with no line terminators
Hash da585a499fb3f20ebe104ae32d9c5c8e
5b8adbca6e8267514b7cc5ef25d7116d7d7b2de3
4995e0de0dcca5d9209f43fce9677b01f55a886213e496711fceec4638189c3b
GET /wp-content/themes/clipper/assets/js/lib/foundation/foundation.min.js?ver=6.4.3 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-e-ville-com/
Cookie: utm_source=no; utm_medium=89954630040; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89954630040; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-e-ville-com%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 21:07:10 GMT
Server: Apache/2.4.54 (Debian)
Last-Modified: Mon, 02 Jan 2023 20:51:38 GMT
ETag: "2440f-5f14e1e1872cb-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 32661
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: application/javascript
promoprawn.com/wp-content/plugins/gtranslate/flags/svg/en.svg
200 OK 862 B URL HTTP/1.1 promoprawn.com/wp-content/plugins/gtranslate/flags/svg/en.svg
IP
ASN #24940 Hetzner Online GmbH
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (862), with no line terminators
Hash f9bbc4885a348eff84e4ef4155121fae
afaa1646576b96aa105a66c3273f13f0cb30e0c3
de46013c87c1d6b0e4804a6bd8be50f2c5f961c5adbc42ba40b8913af33afe75
GET /wp-content/plugins/gtranslate/flags/svg/en.svg HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-e-ville-com/
Cookie: utm_source=no; utm_medium=89954630040; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89954630040; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-e-ville-com%2F
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 21:07:10 GMT
Server: Apache/2.4.54 (Debian)
Last-Modified: Mon, 02 Jan 2023 20:51:36 GMT
ETag: "35e-5f14e1e0567cf"
Accept-Ranges: bytes
Content-Length: 862
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: image/svg+xml
promoprawn.com/wp-content/themes/clipper/images/bg-footer-red.gif
200 OK 157 B URL HTTP/1.1 promoprawn.com/wp-content/themes/clipper/images/bg-footer-red.gif
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 87a, 1 x 45\012- data
Hash b29b8e308afb688f3f5664660226f9c8
ac3eb9351fdb042c4795cbad9350783b24a44294
563ad2a9e240a6743ae9ff8d8de9e5903d8edb010ea02da74c93abda378afa15
GET /wp-content/themes/clipper/images/bg-footer-red.gif HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/wp-content/themes/clipper/styles/red.css?ver=6.1.1
Cookie: utm_source=no; utm_medium=89954630040; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89954630040; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-e-ville-com%2F
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 21:07:10 GMT
Server: Apache/2.4.54 (Debian)
Last-Modified: Mon, 02 Jan 2023 20:51:38 GMT
ETag: "9d-5f14e1e171b0b"
Accept-Ranges: bytes
Content-Length: 157
Keep-Alive: timeout=5, max=85
Connection: Keep-Alive
Content-Type: image/gif
promoprawn.com/wp-content/themes/clipper/images/bg-sidebox-line.png
200 OK 113 B URL HTTP/1.1 promoprawn.com/wp-content/themes/clipper/images/bg-sidebox-line.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 1 x 19, 8-bit gray+alpha, non-interlaced\012- data
Hash d759e787150faba42a8e2c123ee015ae
0403b47562bb5cebcd5111d572fdf665fcdc1e6c
9826d17ba5806594bcda5d7c739422b90c809d7bb3ac91221c7ccd0135c58a7d
GET /wp-content/themes/clipper/images/bg-sidebox-line.png HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/wp-content/themes/clipper/assets/css/style.min.css?ver=2.0.9
Cookie: utm_source=no; utm_medium=89954630040; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89954630040; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-e-ville-com%2F
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 21:07:10 GMT
Server: Apache/2.4.54 (Debian)
Last-Modified: Mon, 02 Jan 2023 20:51:38 GMT
ETag: "71-5f14e1e172aab"
Accept-Ranges: bytes
Content-Length: 113
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: image/png
promoprawn.com/wp-content/themes/clipper/images/bg-footer.png
200 OK 178 B URL HTTP/1.1 promoprawn.com/wp-content/themes/clipper/images/bg-footer.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 1 x 150, 8-bit/color RGBA, non-interlaced\012- data
Hash 35d17bb07bd51bd7150bb7a0534b8811
9e4bc0d51ae379319dbef287c89c59ae01ae472d
7c4b06affdad61721db74e921fd27c6681fa4f01f6d97e0a54b08c4ed5ac41af
GET /wp-content/themes/clipper/images/bg-footer.png HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/wp-content/themes/clipper/assets/css/style.min.css?ver=2.0.9
Cookie: utm_source=no; utm_medium=89954630040; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89954630040; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-e-ville-com%2F
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 21:07:10 GMT
Server: Apache/2.4.54 (Debian)
Last-Modified: Mon, 02 Jan 2023 20:51:38 GMT
ETag: "b2-5f14e1e172aab"
Accept-Ranges: bytes
Content-Length: 178
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: image/png
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 82e3abc4a7b17efedca67cf215f4bb60
e20e55d87591af7db3a4bcfc429048f85e389b85
df8901d4d87686fb11e17986f5d53cf513f675b4dd71f0a2e35c7ffbefa7fb9e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 21:07:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.promoprawn.com/wp-content/uploads/2022/02/cropped-resized_header_logo-removebg-preview2.png
200 OK 64 kB URL HTTP/1.1 www.promoprawn.com/wp-content/uploads/2022/02/cropped-resized_header_logo-removebg-preview2.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 821 x 294, 8-bit/color RGBA, non-interlaced\012- data
Hash 07db10e79d004a9eed551896874dc040
02b3dd694b3e32a944de5c4105b395a842ece865
a747c3a902b5f085b7b874d9b0bc1b3d9292238d7331d45e3fdddd08f5076a7d
GET /wp-content/uploads/2022/02/cropped-resized_header_logo-removebg-preview2.png HTTP/1.1
Host: www.promoprawn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/
Cookie: utm_source=no; utm_medium=89954630040; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89954630040; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-e-ville-com%2F
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 21:07:10 GMT
Server: Apache/2.4.54 (Debian)
Last-Modified: Mon, 02 Jan 2023 20:51:38 GMT
ETag: "f927-5f14e1e1c5aca"
Accept-Ranges: bytes
Content-Length: 63783
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/png
www.promoprawn.com/wp-content/uploads/2022/02/logo-with-writing.jpg
200 OK 99 kB URL HTTP/1.1 www.promoprawn.com/wp-content/uploads/2022/02/logo-with-writing.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 192x192, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 960x678, components 3\012- data
Hash 8f1781d3eba83d8482d02be904b306d8
c04a74d3273720db6e0cfa828b9a76eb193451ba
59efb0d045dfcdf62c836f3e72d44843a832fa071bb4fdffa97b99099eb625db
GET /wp-content/uploads/2022/02/logo-with-writing.jpg HTTP/1.1
Host: www.promoprawn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/
Cookie: utm_source=no; utm_medium=89954630040; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89954630040; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-e-ville-com%2F
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 21:07:10 GMT
Server: Apache/2.4.54 (Debian)
Last-Modified: Mon, 02 Jan 2023 20:51:38 GMT
ETag: "181e2-5f14e1e1c7a0a"
Accept-Ranges: bytes
Content-Length: 98786
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/jpeg
promoprawn.com/wp-content/uploads/2022/02/cropped-prawn_favicon-removebg-preview-192x192.png
200 OK 21 kB URL HTTP/1.1 promoprawn.com/wp-content/uploads/2022/02/cropped-prawn_favicon-removebg-preview-192x192.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash 75336744e0240d8bb03a116fe4a0fe71
d4edee03869b0d53596193c745e6f8bdf537c646
e6e770dc40baafdca752013a5a39125b26ccd5d1f5b4235df61ff72fc5069dbb
GET /wp-content/uploads/2022/02/cropped-prawn_favicon-removebg-preview-192x192.png HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-e-ville-com/
Cookie: utm_source=no; utm_medium=89954630040; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89954630040; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-e-ville-com%2F; _ga_GZH27V8EPY=GS1.1.1674767230.1.0.1674767230.0.0.0; _ga=GA1.1.319386779.1674767231
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 21:07:10 GMT
Server: Apache/2.4.54 (Debian)
Last-Modified: Mon, 02 Jan 2023 20:51:38 GMT
ETag: "50e1-5f14e1e1cf70a"
Accept-Ranges: bytes
Content-Length: 20705
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: image/png
promoprawn.com/wp-content/uploads/2022/02/cropped-prawn_favicon-removebg-preview-32x32.png
200 OK 1.1 kB URL HTTP/1.1 promoprawn.com/wp-content/uploads/2022/02/cropped-prawn_favicon-removebg-preview-32x32.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash c029e0b9abdc5aacb520f5b9faf03105
dca9e8e13b5260dd951da772d79bd0c04f0f87e5
09711854e11cce389d4c9d3931975604849a2376ea31786e69dce5e20bb6115f
GET /wp-content/uploads/2022/02/cropped-prawn_favicon-removebg-preview-32x32.png HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-e-ville-com/
Cookie: utm_source=no; utm_medium=89954630040; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89954630040; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-e-ville-com%2F; _ga_GZH27V8EPY=GS1.1.1674767230.1.0.1674767230.0.0.0; _ga=GA1.1.319386779.1674767231
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 21:07:10 GMT
Server: Apache/2.4.54 (Debian)
Last-Modified: Mon, 02 Jan 2023 20:51:38 GMT
ETag: "467-5f14e1e1d06aa"
Accept-Ranges: bytes
Content-Length: 1127
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: image/png
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 97ccaa279f6ade845b71b57615d40388
5186089108dca0136feab418da66a9e027c7e427
515128c713e98c9a0546c35d9a1e0719057136509b5b2312e4af56a9acc80ec2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 21:07:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Thu, 26 Jan 2023 19:46:59 GMT
expires: Thu, 26 Jan 2023 21:46:59 GMT
cache-control: public, max-age=7200
age: 4812
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 58bee798660dae739b64c6c857490fff
bcfe56f00b749385ca3d2ffb7a68c4a13c186317
800396e3a57e9ebd98a56f8ebab32c3bc576310632d9ece8b282e88c6d20d8f3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3014
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 21:07:11 GMT
Last-Modified: Thu, 26 Jan 2023 20:16:57 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 471
connect.facebook.net/en_GB/sdk.js
200 OK 1.7 kB URL HTTP/2 connect.facebook.net/en_GB/sdk.js
IP
File type ASCII text, with very long lines (1957)
Hash 51e6767d44e7fca875894aed48ae624a
02a1852d0d5730b4c821337fea054ef4acc90573
cebdff8c889250451363e094c35122965754538592ddc73823f4cc4760717f47
GET /en_GB/sdk.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: cd17f7f83fe82fe064eaddad9bc24286
etag: "fff08085bd415b8994fe540f6a00fed6"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Thu, 26 Jan 2023 21:20:53 GMT
cache-control: public,max-age=1200,stale-while-revalidate=3600
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: UeZ2fUTn/Kh1iUrtSK5iSg==
x-fb-debug: /EoDFk+SzFlg4+XAXO73SSUr+5LUxfvcLVAmUNipOnP7IFw6nfJ3xAxYbEqHt37qsol0Y+QypKnQZeJ+RHOcmg==
priority: u=3,i
content-length: 1686
x-fb-trip-id: 1679558926
date: Thu, 26 Jan 2023 21:07:11 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 58bee798660dae739b64c6c857490fff
bcfe56f00b749385ca3d2ffb7a68c4a13c186317
800396e3a57e9ebd98a56f8ebab32c3bc576310632d9ece8b282e88c6d20d8f3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3014
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 21:07:11 GMT
Last-Modified: Thu, 26 Jan 2023 20:16:57 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 97ccaa279f6ade845b71b57615d40388
5186089108dca0136feab418da66a9e027c7e427
515128c713e98c9a0546c35d9a1e0719057136509b5b2312e4af56a9acc80ec2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 21:07:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2ebcc7cd4c50e87a984668828c1e612e
f693d36335f333e3647f9fb2460e34dd73e17421
27f1d63422ccd02a6af514c2c0a36ac6f4e0d6f74ad6d9fc8c32e8ea487ffe15
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 21:07:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
translate.googleapis.com/translate_static/css/translateelement.css
200 OK 3.6 kB URL HTTP/2 translate.googleapis.com/translate_static/css/translateelement.css
IP
File type ASCII text, with very long lines (22967)
Hash f7bf2121608909b56672e6398ac2335c
864ef3bac46b08ab6609fad23f00d5f09815647d
b9d3a8600d9b6edf9c71b793c42782282ecfb01e2026e0128608b949e91e152c
GET /translate_static/css/translateelement.css HTTP/1.1
Host: translate.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="rosetta"
report-to: {"group":"rosetta","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/rosetta"}]}
content-length: 3632
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 26 Jan 2023 20:15:31 GMT
expires: Thu, 26 Jan 2023 21:15:31 GMT
cache-control: public, max-age=3600
age: 3100
last-modified: Mon, 09 Jan 2023 20:58:00 GMT
content-type: text/css
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
translate.google.com/translate_a/element.js?cb=googleTranslateElementInit2
200 OK 115 kB URL HTTP/2 translate.google.com/translate_a/element.js?cb=googleTranslateElementInit2
IP
File type ASCII text, with very long lines (560)
Size 115 kB (114775 bytes)
Hash ecf1f6e05c532db58e32e30b7f11f097
f75a6083acdd363ddb70cd26384f9d738bd982c6
cfca07d6c5a974ea7d2181dc620cbe292cca7e196da966b91d7f7790a85379be
GET /translate_a/element.js?cb=googleTranslateElementInit2 HTTP/1.1
Host: translate.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 26 Jan 2023 21:07:11 GMT
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+184; expires=Sat, 25-Jan-2025 21:07:11 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2ebcc7cd4c50e87a984668828c1e612e
f693d36335f333e3647f9fb2460e34dd73e17421
27f1d63422ccd02a6af514c2c0a36ac6f4e0d6f74ad6d9fc8c32e8ea487ffe15
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 21:07:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash d9bf2793558044193d7e5d27708a9144
5a8f73462cfda6544cc3efe488854c3cd80bb0a7
e1db5ce5f130aa6d6a1bf18da60fee5c6bb76625a26aef0fee67702e7209ef7e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 21:07:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash d9bf2793558044193d7e5d27708a9144
5a8f73462cfda6544cc3efe488854c3cd80bb0a7
e1db5ce5f130aa6d6a1bf18da60fee5c6bb76625a26aef0fee67702e7209ef7e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 21:07:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.gstatic.com/images/branding/product/1x/translate_24dp.png
200 OK 846 B URL HTTP/2 www.gstatic.com/images/branding/product/1x/translate_24dp.png
IP
File type PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Hash e9cd262114358f26b7608b56905185dc
6dbde0a96deaab2b529723ce26c62043cf9180ab
5a861509b658aa24fc3aed2867ac3c061e7d818d90b9990959afc6d1b5d4ff99
GET /images/branding/product/1x/translate_24dp.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 846
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 23 Jan 2023 12:53:47 GMT
expires: Tue, 23 Jan 2024 12:53:47 GMT
cache-control: public, max-age=31536000
age: 288804
last-modified: Thu, 14 Oct 2021 09:08:00 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.gstatic.com/images/branding/product/2x/translate_24dp.png
200 OK 1.8 kB URL HTTP/2 www.gstatic.com/images/branding/product/2x/translate_24dp.png
IP
File type PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\012- data
Hash c69c796362406f9e11c7f4bf5bb628da
e489ce95ab56208090868882113d7416abf46775
4dac0026fbfa2615dce30c0af12830863fe885f84387a0147b9e338f548d5d82
GET /images/branding/product/2x/translate_24dp.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://translate.googleapis.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 1842
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 23 Jan 2023 16:07:41 GMT
expires: Tue, 23 Jan 2024 16:07:41 GMT
cache-control: public, max-age=31536000
age: 277170
last-modified: Thu, 14 Oct 2021 09:08:00 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash d9bf2793558044193d7e5d27708a9144
5a8f73462cfda6544cc3efe488854c3cd80bb0a7
e1db5ce5f130aa6d6a1bf18da60fee5c6bb76625a26aef0fee67702e7209ef7e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 21:07:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
region1.google-analytics.com/g/collect?v=2&tid=G-GZH27V8EPY>m=2oe1p0&_p=1638153835&gdid=dZTNiMT&cid=319386779.1674767231&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1674767230&sct=1&seg=0&dl=https%3A%2F%2Fpromoprawn.com%2Fgo-to-e-ville-com%2F&dt=Go%20to%20e-ville-com&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-GZH27V8EPY>m=2oe1p0&_p=1638153835&gdid=dZTNiMT&cid=319386779.1674767231&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1674767230&sct=1&seg=0&dl=https%3A%2F%2Fpromoprawn.com%2Fgo-to-e-ville-com%2F&dt=Go%20to%20e-ville-com&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-GZH27V8EPY>m=2oe1p0&_p=1638153835&gdid=dZTNiMT&cid=319386779.1674767231&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1674767230&sct=1&seg=0&dl=https%3A%2F%2Fpromoprawn.com%2Fgo-to-e-ville-com%2F&dt=Go%20to%20e-ville-com&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://promoprawn.com
Connection: keep-alive
Referer: https://promoprawn.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://promoprawn.com
date: Thu, 26 Jan 2023 21:07:11 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r.srvtrck.com/v1/redirect?url=https%3A%2F%2Fe-ville.com&type=url&api_key=75e8ee737d4fc03bfc0d76000b6f72b0&site_id=e7e6bb15baa647a58253d090ef5d387a&yk_tag=89954630040
301 Moved Permanently 0 B URL HTTP/1.1 r.srvtrck.com/v1/redirect?url=https%3A%2F%2Fe-ville.com&type=url&api_key=75e8ee737d4fc03bfc0d76000b6f72b0&site_id=e7e6bb15baa647a58253d090ef5d387a&yk_tag=89954630040
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v1/redirect?url=https%3A%2F%2Fe-ville.com&type=url&api_key=75e8ee737d4fc03bfc0d76000b6f72b0&site_id=e7e6bb15baa647a58253d090ef5d387a&yk_tag=89954630040 HTTP/1.1
Host: r.srvtrck.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Thu, 26 Jan 2023 21:07:11 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Thu, 26 Jan 2023 22:07:11 GMT
Location: https://r.srvtrck.com/v1/redirect?url=https%3A%2F%2Fe-ville.com&type=url&api_key=75e8ee737d4fc03bfc0d76000b6f72b0&site_id=e7e6bb15baa647a58253d090ef5d387a&yk_tag=89954630040
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78fc377d6ecbb4fa-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
r.srvtrck.com/v1/redirect?url=https%3A%2F%2Fe-ville.com&type=url&api_key=75e8ee737d4fc03bfc0d76000b6f72b0&site_id=e7e6bb15baa647a58253d090ef5d387a&yk_tag=89954630040
302 Found 0 B URL HTTP/2 r.srvtrck.com/v1/redirect?url=https%3A%2F%2Fe-ville.com&type=url&api_key=75e8ee737d4fc03bfc0d76000b6f72b0&site_id=e7e6bb15baa647a58253d090ef5d387a&yk_tag=89954630040
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v1/redirect?url=https%3A%2F%2Fe-ville.com&type=url&api_key=75e8ee737d4fc03bfc0d76000b6f72b0&site_id=e7e6bb15baa647a58253d090ef5d387a&yk_tag=89954630040 HTTP/1.1
Host: r.srvtrck.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Thu, 26 Jan 2023 21:07:11 GMT
content-length: 0
location: https://e-ville.com
p3p: CP="CAO PSA OUR"
set-cookie: ykuid=942ae76ad7404d5e9226613938fccc20; Domain=.srvtrck.com; Expires=Fri, 26-Jan-2024 21:07:11 GMT; Path=/
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 78fc377daf23b4fa-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.e-ville.com/js/tinymce/uploaded/layout/e-ville_blue_logo.webp
200 OK 1.9 kB URL HTTP/2 www.e-ville.com/js/tinymce/uploaded/layout/e-ville_blue_logo.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 378ee835f91e3e50bd7bca79badadc6b
ab696e543504b1e920bf12115ed59b9a2611cf51
cfe3a563d183128cc04715c954184221453b323c05515e1f867d126387e9de97
GET /js/tinymce/uploaded/layout/e-ville_blue_logo.webp HTTP/1.1
Host: www.e-ville.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.e-ville.com/en/
Cookie: bfdd85c0d13ecac8e58768e9f67b18a1=pi7uc5sBV8w%3Dl%2Fxoo7cx85A%3DRD4KQifNXoc%3DitX6faWKn30%3DKjMwpbRdCbY%3DfgxmpqlvGGQ%3DFTOgqAMzVJ0%3DYgQP4lff7vo%3D%2Fb9AWA5ddXE%3DjiQW0d59Ask%3D1LSuG7LB2ek%3D%2FjKkPLmkgvA%3D3yv%2BxOOehbk%3DO8LOB%2BPY7ws%3DeLYkst15gv0%3DuhqWvxjrDGE%3D22sNuM2uAUg%3DjTE2XeiqenI%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 21:07:12 GMT
content-type: image/webp
content-length: 1878
last-modified: Wed, 20 Oct 2021 03:53:11 GMT
etag: "616f92a7-756"
strict-transport-security: max-age=15768000
cache-control: max-age=14400
cf-cache-status: HIT
age: 3774
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WzmebZ95IACQMvklUKf2K43WmnOgXPNHKF%2FLkWy6ClLafHlfkScSVqOnEfBWyV%2BjQd70ezuMmXZY7jnoFBW3tWw7FUGXKiMexXCfPBYIMVFuz%2BUgVIz85m50jRgQAPkUQw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 78fc37836e0b0b45-OSL
X-Firefox-Spdy: h2
www.e-ville.com/js/tinymce/uploaded/layout/icons/envelope.svg
200 OK 1.8 kB URL HTTP/2 www.e-ville.com/js/tinymce/uploaded/layout/icons/envelope.svg
IP
Hash 0da627781f5d8241722d2153c887d720
fbe6a40a858b889dc3b4852d17fe4bde4e4d2507
b4171dd3ba0f6a5a73c189fd7eb37804334b360549e9f77b516e008bbbef033f
GET /js/tinymce/uploaded/layout/icons/envelope.svg HTTP/1.1
Host: www.e-ville.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.e-ville.com/en/
Cookie: bfdd85c0d13ecac8e58768e9f67b18a1=pi7uc5sBV8w%3Dl%2Fxoo7cx85A%3DRD4KQifNXoc%3DitX6faWKn30%3DKjMwpbRdCbY%3DfgxmpqlvGGQ%3DFTOgqAMzVJ0%3DYgQP4lff7vo%3D%2Fb9AWA5ddXE%3DjiQW0d59Ask%3D1LSuG7LB2ek%3D%2FjKkPLmkgvA%3D3yv%2BxOOehbk%3DO8LOB%2BPY7ws%3DeLYkst15gv0%3DuhqWvxjrDGE%3D22sNuM2uAUg%3DjTE2XeiqenI%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 21:07:12 GMT
content-type: image/svg+xml
last-modified: Tue, 12 Jan 2021 08:55:40 GMT
etag: W/"5ffd640c-c59"
expires: Thu, 02 Mar 2023 01:28:43 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15768000
cf-cache-status: HIT
age: 28580740
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=f58rAokau4B%2FFJTdBrZ2BP3EtQZvmpkgUHk760lgf8r9%2Beuw6x%2FX1A9XUtDENecjBXTqeNDncL%2Bj2QlyM4jYU%2BQRMiv9nh1Ip0WJa62hW7eYxFzONaSSHFUyBMEce5qWRg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 78fc37838e310b45-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/js/bootstrap.bundle.min.js
200 OK 23 kB URL HTTP/2 cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/js/bootstrap.bundle.min.js
IP
File type ASCII text, with very long lines (65299)
Hash 1753c16688d0d51f0b3dc7ed7d4dbc4d
6a4842b3dc99394c6584c203175570ff8737c777
a61044d56003744699349a1ffbd6f85e0c62d4ac59b50d185363dd85d755b5c9
GET /npm/bootstrap@5.1.3/dist/js/bootstrap.bundle.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.e-ville.com
Connection: keep-alive
Referer: https://www.e-ville.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 5.1.3
x-jsd-version-type: version
etag: W/"13131-qF5oFiTJGhBqUUwx6s+A3oF7LMM"
content-encoding: gzip
accept-ranges: bytes
date: Thu, 26 Jan 2023 21:07:12 GMT
age: 13136765
x-served-by: cache-fra19170-FRA, cache-bma1668-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 23046
X-Firefox-Spdy: h2
www.googleoptimize.com/optimize.js?id=OPT-N6K3H3V
200 OK 47 kB URL HTTP/2 www.googleoptimize.com/optimize.js?id=OPT-N6K3H3V
IP
File type ASCII text, with very long lines (1811)
Hash c157bae6830700682ffea8f621ca8de6
d82ab4ea20008befdcbd946c9c504ad37020dd0f
3331d57bdfe232a8397e348347da5c0efec99f26c6abb0f3b8b3191e8c376359
GET /optimize.js?id=OPT-N6K3H3V HTTP/1.1
Host: www.googleoptimize.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.e-ville.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 26 Jan 2023 21:07:12 GMT
expires: Thu, 26 Jan 2023 21:07:12 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 46771
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static.klaviyo.com/onsite/js/klaviyo.js?company_id=RKwBSK
200 OK 918 B URL HTTP/2 static.klaviyo.com/onsite/js/klaviyo.js?company_id=RKwBSK
IP
File type ASCII text, with very long lines (2028)
Hash a7058c3fc566a9cc39842443985ab4a4
b239a857e1f35a02be187b223ac782ee9283edbb
050d513eff44a5fbef6b6a0bd1e7c03edfb74573e7d423987b15744eb32c5e46
GET /onsite/js/klaviyo.js?company_id=RKwBSK HTTP/1.1
Host: static.klaviyo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.e-ville.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-headers:
access-control-allow-methods: GET
access-control-allow-origin: *
access-control-max-age: 86400
allow: OPTIONS, GET
cache-control: max-age=1, stale-while-revalidate=10800
content-encoding: gzip
content-type: application/javascript
etag: W/"0d20bb5b57568e256a47509e90776674"
server: nginx
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 26 Jan 2023 21:07:12 GMT
age: 1607
x-served-by: cache-lga21925-LGA, cache-bma1660-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 2
x-timer: S1674767233.671748,VS0,VE0
vary: Accept-Encoding
content-length: 918
X-Firefox-Spdy: h2
www.e-ville.com/
301 Moved Permanently 64 kB IP
File type Web Open Font Format (Version 2), TrueType, length 64464, version 4.262\012- data
Hash 4b5a84aaf1c9485e060c503a0ff8cadb
574ea2698c03ae9477db2ea3baf460ee32f1a7ea
3c4a1bb7ce3234407184f0d80cc4dec075e4ad616b44dcc5778e1cfb1bc24019
GET / HTTP/1.1
Host: www.e-ville.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
date: Thu, 26 Jan 2023 21:07:12 GMT
content-type: text/html; charset=utf-8
location: https://www.e-ville.com/en/
x-frame-options: deny
set-cookie: bfdd85c0d13ecac8e58768e9f67b18a1=pi7uc5sBV8w%3Dl%2Fxoo7cx85A%3DRD4KQifNXoc%3DitX6faWKn30%3DKjMwpbRdCbY%3DfgxmpqlvGGQ%3DFTOgqAMzVJ0%3DYgQP4lff7vo%3D%2Fb9AWA5ddXE%3DjiQW0d59Ask%3D1LSuG7LB2ek%3DuWyQaN0l6eQ%3D7DqUph4yzTo%3DiKvBOTkYBvY%3DMXJ4tVb%2FXdI%3D; expires=Fri, 26-Jan-2024 21:07:11 GMT; Max-Age=31536000; path=/; domain=.e-ville.com; HttpOnly
bfdd85c0d13ecac8e58768e9f67b18a1=pi7uc5sBV8w%3Dl%2Fxoo7cx85A%3DRD4KQifNXoc%3DitX6faWKn30%3DKjMwpbRdCbY%3DfgxmpqlvGGQ%3DFTOgqAMzVJ0%3DYgQP4lff7vo%3D%2Fb9AWA5ddXE%3DjiQW0d59Ask%3D1LSuG7LB2ek%3D%2FjKkPLmkgvA%3D3yv%2BxOOehbk%3DO8LOB%2BPY7ws%3DeLYkst15gv0%3DuhqWvxjrDGE%3D22sNuM2uAUg%3DjTE2XeiqenI%3D; expires=Fri, 26-Jan-2024 21:07:11 GMT; Max-Age=31535999; path=/; domain=.e-ville.com; HttpOnly
cache-control: max-age=3600
strict-transport-security: max-age=15768000
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Hr7zc4OAYblDrdPzKKVMSyqs6S5gaVWFEpNAapGPS6vzAN5EBAoQBAlLgzJp5YR3rsIwZIzArrZVf0mhmtjSM8FLwO3c9YyrObyIHkXflIyKPa6b32PXzRm33QoZSw7vHg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78fc377f396f0b45-OSL
X-Firefox-Spdy: h2
www.e-ville.com/js/tinymce/uploaded/Language%20banners/SVENSKA.webp
200 OK 8.5 kB URL HTTP/2 www.e-ville.com/js/tinymce/uploaded/Language%20banners/SVENSKA.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 517a3bbdf53cee7ff6859b2e103f4e95
5f1b854c27edac6b1d3d3ed0b6e44326da228eeb
34f6edec571d36968b629042bde44ee10ecc276852324ffa89e7cafb0ffbd1e3
GET /js/tinymce/uploaded/Language%20banners/SVENSKA.webp HTTP/1.1
Host: www.e-ville.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.e-ville.com/en/
Cookie: bfdd85c0d13ecac8e58768e9f67b18a1=pi7uc5sBV8w%3Dl%2Fxoo7cx85A%3DRD4KQifNXoc%3DitX6faWKn30%3DKjMwpbRdCbY%3DfgxmpqlvGGQ%3DFTOgqAMzVJ0%3DYgQP4lff7vo%3D%2Fb9AWA5ddXE%3DjiQW0d59Ask%3D1LSuG7LB2ek%3D%2FjKkPLmkgvA%3D3yv%2BxOOehbk%3DO8LOB%2BPY7ws%3DeLYkst15gv0%3DuhqWvxjrDGE%3D22sNuM2uAUg%3DjTE2XeiqenI%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 21:07:12 GMT
content-type: image/webp
content-length: 8502
last-modified: Tue, 27 Dec 2022 06:22:32 GMT
etag: "63aa8f28-2136"
strict-transport-security: max-age=15768000
cache-control: max-age=14400
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BAMe5f3vRaDQAVOpmDAxvlvJmFb63X%2BdwXSK1D9Ib8w7cjlZ4k2GFt96ZvjRUvetlwAh3mtyRXootcbEPTq4qM5XI4CKrgirtilu4aqmnOGGzsdkt0zLjaqLY%2FhJt5HJMA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 78fc37838e500b45-OSL
X-Firefox-Spdy: h2
www.e-ville.com/js/tinymce/uploaded/Language%20banners/suomeksi.webp
200 OK 10 kB URL HTTP/2 www.e-ville.com/js/tinymce/uploaded/Language%20banners/suomeksi.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 9e554b726d540976b52cb0ec3cf8f31c
f81668d494ed1b2e84eec975cb5344436ba7f7c2
f960855830fc48ce7b393233836b3fed0c2ff07dc14f4cf14dcdb15545919323
GET /js/tinymce/uploaded/Language%20banners/suomeksi.webp HTTP/1.1
Host: www.e-ville.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.e-ville.com/en/
Cookie: bfdd85c0d13ecac8e58768e9f67b18a1=pi7uc5sBV8w%3Dl%2Fxoo7cx85A%3DRD4KQifNXoc%3DitX6faWKn30%3DKjMwpbRdCbY%3DfgxmpqlvGGQ%3DFTOgqAMzVJ0%3DYgQP4lff7vo%3D%2Fb9AWA5ddXE%3DjiQW0d59Ask%3D1LSuG7LB2ek%3D%2FjKkPLmkgvA%3D3yv%2BxOOehbk%3DO8LOB%2BPY7ws%3DeLYkst15gv0%3DuhqWvxjrDGE%3D22sNuM2uAUg%3DjTE2XeiqenI%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 21:07:12 GMT
content-type: image/webp
content-length: 9976
last-modified: Tue, 27 Dec 2022 06:22:50 GMT
etag: "63aa8f3a-26f8"
strict-transport-security: max-age=15768000
cache-control: max-age=14400
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=L4muEv1bJZTyk1RVli5q6Mh5kMIryrBjYdfp5YrN%2B%2BYnEIvjPxm2xffD4W1289bectynuMp9BR096yylbTLuJdeGVp16C6gyj%2B5elq0jJl7bepw1czo2o5bjmIBk1Eebhg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 78fc37838e4f0b45-OSL
X-Firefox-Spdy: h2
www.e-ville.com/js/tinymce/uploaded/Language%20banners/dansk.webp
200 OK 7.8 kB URL HTTP/2 www.e-ville.com/js/tinymce/uploaded/Language%20banners/dansk.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 1fd911e54f1632e5f988fac95a7882c2
7ef4d171f9af69c429ab882f2580387d9d567030
1745ca5775f46cc7e8678e84b01afc085281f79984a057383b490649d465f8a2
GET /js/tinymce/uploaded/Language%20banners/dansk.webp HTTP/1.1
Host: www.e-ville.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.e-ville.com/en/
Cookie: bfdd85c0d13ecac8e58768e9f67b18a1=pi7uc5sBV8w%3Dl%2Fxoo7cx85A%3DRD4KQifNXoc%3DitX6faWKn30%3DKjMwpbRdCbY%3DfgxmpqlvGGQ%3DFTOgqAMzVJ0%3DYgQP4lff7vo%3D%2Fb9AWA5ddXE%3DjiQW0d59Ask%3D1LSuG7LB2ek%3D%2FjKkPLmkgvA%3D3yv%2BxOOehbk%3DO8LOB%2BPY7ws%3DeLYkst15gv0%3DuhqWvxjrDGE%3D22sNuM2uAUg%3DjTE2XeiqenI%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 21:07:12 GMT
content-type: image/webp
content-length: 7810
last-modified: Tue, 27 Dec 2022 06:23:49 GMT
etag: "63aa8f75-1e82"
strict-transport-security: max-age=15768000
cache-control: max-age=14400
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OrevNIN7rUxiKI9tMQgNuiruCCav8aaXRv2ZxvyboCc%2BuGFWFcgvkwIrp8W3LnGbR1gmYfZ%2FlKnTizNPDS%2B8RYTRsHkrr2Z%2FtqlCQqL1XMtD5YJ1vhuUuvCmpAfst6HuFQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 78fc37839e530b45-OSL
X-Firefox-Spdy: h2
www.e-ville.com/img/l/4.jpg
200 OK 336 B URL HTTP/2 www.e-ville.com/img/l/4.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 16x11, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 05979df014179b5d2ac27698717542d1
c09e4587280f5aa28d4a7548efc519a2879f74aa
9dcb4583e5fd1737e334751c57ff558de70f6030a00a03d49cc87243f4981a82
GET /img/l/4.jpg HTTP/1.1
Host: www.e-ville.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.e-ville.com/en/
Cookie: bfdd85c0d13ecac8e58768e9f67b18a1=pi7uc5sBV8w%3Dl%2Fxoo7cx85A%3DRD4KQifNXoc%3DitX6faWKn30%3DKjMwpbRdCbY%3DfgxmpqlvGGQ%3DFTOgqAMzVJ0%3DYgQP4lff7vo%3D%2Fb9AWA5ddXE%3DjiQW0d59Ask%3D1LSuG7LB2ek%3D%2FjKkPLmkgvA%3D3yv%2BxOOehbk%3DO8LOB%2BPY7ws%3DeLYkst15gv0%3DuhqWvxjrDGE%3D22sNuM2uAUg%3DjTE2XeiqenI%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 21:07:12 GMT
content-type: image/webp
content-length: 336
cache-control: max-age=31536000
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=jpeg, origSize=1109
content-disposition: inline; filename="4.webp"
vary: Accept
etag: "4e9560a4-455"
expires: Thu, 02 Mar 2023 01:32:56 GMT
last-modified: Wed, 12 Oct 2011 09:40:52 GMT
strict-transport-security: max-age=15768000
cf-cache-status: HIT
age: 17805294
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vmpYElY76D%2BGitGdQVb8V5cISfnKn16eRUZLK8u0WQc%2F0o3NcEbQQUUocinNS%2BrG289sUB4p9VAZu2YToqms1ui30eYDDAqbakyqCVvvL95%2BAmNcsIy8ues4PExlchJXbw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78fc37853fe60b45-OSL
X-Firefox-Spdy: h2
www.e-ville.com/img/l/10.jpg
200 OK 372 B URL HTTP/2 www.e-ville.com/img/l/10.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 16x11, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash a0de36705c088e6ef552a4b44385c4b9
639f036cb36d7f4c01bc952fd97f50b26445bb2a
5cfb2677b0c875c6b984beed00123191024a527e755820cc0e91b79d1f93b482
GET /img/l/10.jpg HTTP/1.1
Host: www.e-ville.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.e-ville.com/en/
Cookie: bfdd85c0d13ecac8e58768e9f67b18a1=pi7uc5sBV8w%3Dl%2Fxoo7cx85A%3DRD4KQifNXoc%3DitX6faWKn30%3DKjMwpbRdCbY%3DfgxmpqlvGGQ%3DFTOgqAMzVJ0%3DYgQP4lff7vo%3D%2Fb9AWA5ddXE%3DjiQW0d59Ask%3D1LSuG7LB2ek%3D%2FjKkPLmkgvA%3D3yv%2BxOOehbk%3DO8LOB%2BPY7ws%3DeLYkst15gv0%3DuhqWvxjrDGE%3D22sNuM2uAUg%3DjTE2XeiqenI%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 21:07:12 GMT
content-type: image/webp
content-length: 372
cache-control: max-age=31536000
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=jpeg, origSize=1146
content-disposition: inline; filename="10.webp"
vary: Accept
etag: "4e9560a4-47a"
expires: Tue, 12 Dec 2023 21:17:04 GMT
last-modified: Wed, 12 Oct 2011 09:40:52 GMT
strict-transport-security: max-age=15768000
cf-cache-status: HIT
age: 154816
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=urewCPBNnsya6WWJzkG17x2x1A6wItrocvriPBIiVXvV0hF1Od5eQP2gicm1hro8DvmSUlnAE4BaXeS52%2F20ljd38eOwCW8ftnDZZ5GhwSVm%2FlT7ViNVZ40dDFdKaW08ZA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78fc37853fe80b45-OSL
X-Firefox-Spdy: h2
www.e-ville.com/img/l/9.jpg
200 OK 332 B URL HTTP/2 www.e-ville.com/img/l/9.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 16x11, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 6f74b6e4b7d7e440ae07a80985e7405b
ca70d57c00bd49496779a54854578bf8f92d1a72
4377e29cb8a65a823da13a343ec9164fa2fd6d4b620f6620a519d151d6c86c83
GET /img/l/9.jpg HTTP/1.1
Host: www.e-ville.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.e-ville.com/en/
Cookie: bfdd85c0d13ecac8e58768e9f67b18a1=pi7uc5sBV8w%3Dl%2Fxoo7cx85A%3DRD4KQifNXoc%3DitX6faWKn30%3DKjMwpbRdCbY%3DfgxmpqlvGGQ%3DFTOgqAMzVJ0%3DYgQP4lff7vo%3D%2Fb9AWA5ddXE%3DjiQW0d59Ask%3D1LSuG7LB2ek%3D%2FjKkPLmkgvA%3D3yv%2BxOOehbk%3DO8LOB%2BPY7ws%3DeLYkst15gv0%3DuhqWvxjrDGE%3D22sNuM2uAUg%3DjTE2XeiqenI%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 21:07:12 GMT
content-type: image/webp
content-length: 332
cache-control: max-age=31536000
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=jpeg, origSize=1080
content-disposition: inline; filename="9.webp"
vary: Accept
etag: "4e9560a4-438"
expires: Wed, 15 Nov 2023 22:01:12 GMT
last-modified: Wed, 12 Oct 2011 09:40:52 GMT
strict-transport-security: max-age=15768000
cf-cache-status: HIT
age: 154816
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=oFcIyepI5LE3pND1NG7wi1VdjDdrORvmgfCe%2FOzWp9m8LtD5yek%2F41UTMjTxfQURnz2eJiXfIHD4GmIqSWqZe6j5nYUt%2Be%2F1aSk86KrSJ33WjgzunHhH%2FLxLxK4EmOCdeg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78fc37853fed0b45-OSL
X-Firefox-Spdy: h2
www.e-ville.com/img/l/15.jpg
200 OK 380 B URL HTTP/2 www.e-ville.com/img/l/15.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 16x11, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 2c2d6b0c65abe767e5757bfcc58d11fb
f4ec961abed08fbf8411ff366975918f9d286cfd
8e51a39d3ea7f160ee3e2f2cbe18ad32b1677076510d035d0f9e142a68f87c2e
GET /img/l/15.jpg HTTP/1.1
Host: www.e-ville.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.e-ville.com/en/
Cookie: bfdd85c0d13ecac8e58768e9f67b18a1=pi7uc5sBV8w%3Dl%2Fxoo7cx85A%3DRD4KQifNXoc%3DitX6faWKn30%3DKjMwpbRdCbY%3DfgxmpqlvGGQ%3DFTOgqAMzVJ0%3DYgQP4lff7vo%3D%2Fb9AWA5ddXE%3DjiQW0d59Ask%3D1LSuG7LB2ek%3D%2FjKkPLmkgvA%3D3yv%2BxOOehbk%3DO8LOB%2BPY7ws%3DeLYkst15gv0%3DuhqWvxjrDGE%3D22sNuM2uAUg%3DjTE2XeiqenI%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 21:07:12 GMT
content-type: image/webp
content-length: 380
cache-control: max-age=31536000
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=jpeg, origSize=879
content-disposition: inline; filename="15.webp"
vary: Accept
etag: "4e9d5837-36f"
expires: Fri, 12 Jan 2024 05:04:04 GMT
last-modified: Tue, 18 Oct 2011 10:43:03 GMT
strict-transport-security: max-age=15768000
cf-cache-status: HIT
age: 154816
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QhAWtTpMkfYfsJiO1HBEfoT6StHatlztzMH7x9YYfrpD77P%2Fj9Cix4xJ4uraIq1qYTFP0ZeMIrMx8fpuREm9kkHiF0K2fGiPt4usVM3IQI7lH49CDqOyusFX6r1w417xuw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78fc37853fee0b45-OSL
X-Firefox-Spdy: h2
www.e-ville.com/static/js/7.3557acb0.chunk.js
200 OK 109 kB URL HTTP/2 www.e-ville.com/static/js/7.3557acb0.chunk.js
IP
Size 109 kB (109266 bytes)
Hash 28b3652c858b1fae4e779a008551cd13
163f26cd022239e989251463a9ddc12a0b577a06
476b36f0cf8152d610081ee0df65e56887085990ce3746ad625bc1602c8a97ac
GET /static/js/7.3557acb0.chunk.js HTTP/1.1
Host: www.e-ville.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.e-ville.com/en/
Cookie: bfdd85c0d13ecac8e58768e9f67b18a1=pi7uc5sBV8w%3Dl%2Fxoo7cx85A%3DRD4KQifNXoc%3DitX6faWKn30%3DKjMwpbRdCbY%3DfgxmpqlvGGQ%3DFTOgqAMzVJ0%3DYgQP4lff7vo%3D%2Fb9AWA5ddXE%3DjiQW0d59Ask%3D1LSuG7LB2ek%3D%2FjKkPLmkgvA%3D3yv%2BxOOehbk%3DO8LOB%2BPY7ws%3DeLYkst15gv0%3DuhqWvxjrDGE%3D22sNuM2uAUg%3DjTE2XeiqenI%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 21:07:12 GMT
content-type: application/javascript; charset=UTF-8
x-powered-by: Express
cache-control: public, max-age=14400
last-modified: Mon, 23 Jan 2023 05:20:56 GMT
etag: W/"20c21-185dd12832f"
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=15768000
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5uSZk2uTWTTKN6%2FQ7Zkqhh3Zg8Gh7K10Mb9VRpnukQrXOV3y%2By1WT5UHvF5G%2F57cy%2FKNO8Kv5kffDjWlU3Bn1vvLDA9iZ%2B73JroN4c%2FiVtehzvX8gCbZScNVg%2FY3dq4HDg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78fc37839e590b45-OSL
X-Firefox-Spdy: h2
static.klaviyo.com/onsite/js/runtime.81f6cc401344ed6c92c2.js?cb=1
200 OK 8.1 kB URL HTTP/2 static.klaviyo.com/onsite/js/runtime.81f6cc401344ed6c92c2.js?cb=1
IP
File type ASCII text, with very long lines (19473), with no line terminators
Hash 674356d5e38bd70278300a937855cb81
cd439fbfd5d1ecbf5362d3e130f9312885fd5583
404c57fa7e3d4e7f64126a89848ede3878116e624f76fd283085bcf081186d83
GET /onsite/js/runtime.81f6cc401344ed6c92c2.js?cb=1 HTTP/1.1
Host: static.klaviyo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.e-ville.com
Connection: keep-alive
Referer: https://www.e-ville.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: ZHoe1JKI1Rph3iOf4IQhZp16xxgfZaMMfW8KEIP2txI5AOHYJ6NfXRv/lkoA3cPNyKoaq1CVWPw=
x-amz-request-id: V04X7QK3GHYB10N1
last-modified: Tue, 24 Jan 2023 18:51:15 GMT
etag: "b48a12053d908bc286759bb17690a56b"
cache-control: max-age=2592000,stale-while-revalidate=10800
x-amz-meta-surrogate-control: max-age=31536000
x-amz-meta-surrogate-key: fender-asset
x-amz-version-id: mm.IBp1r3HZuPGxv_asbIgsC7t4Otydh
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
access-control-allow-origin: *
accept-ranges: bytes
date: Thu, 26 Jan 2023 21:07:12 GMT
age: 1610
x-served-by: cache-lga21938-LGA, cache-bma1620-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 1223
vary: Accept-Encoding
content-length: 8050
X-Firefox-Spdy: h2
static.klaviyo.com/onsite/js/sharedUtils.ae687c467514b4d47273.js?cb=1
200 OK 14 kB URL HTTP/2 static.klaviyo.com/onsite/js/sharedUtils.ae687c467514b4d47273.js?cb=1
IP
File type Unicode text, UTF-8 text, with very long lines (36133), with no line terminators
Hash 0db021708abc74dfe85ba118ecc34481
951536046889dba4f7ffb154aba35be53407690d
ba2dacae93edf0e6636740381c4054f26739780f7788fc679065df8d95032a00
GET /onsite/js/sharedUtils.ae687c467514b4d47273.js?cb=1 HTTP/1.1
Host: static.klaviyo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.e-ville.com
Connection: keep-alive
Referer: https://www.e-ville.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: NnCqawIw1fpak2Up+J8/KtBbkRVWMFjw/MWRIHZNNYB9eiAhAxUuxIE2VC5q8AD8VMdQm3gq5gw=
x-amz-request-id: V04N693NW3B8EEZ0
last-modified: Tue, 24 Jan 2023 18:51:15 GMT
etag: "1fb73e0c373ef5c434e6183564900794"
cache-control: max-age=2592000,stale-while-revalidate=10800
x-amz-meta-surrogate-control: max-age=31536000
x-amz-meta-surrogate-key: fender-asset
x-amz-version-id: Fmsfgx1k20uBmvmDBcCPGzYUwE5hl.MF
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
access-control-allow-origin: *
accept-ranges: bytes
date: Thu, 26 Jan 2023 21:07:12 GMT
age: 1610
x-served-by: cache-lga21946-LGA, cache-bma1620-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 1218
vary: Accept-Encoding
content-length: 13974
X-Firefox-Spdy: h2
static-tracking.klaviyo.com/onsite/js/fender_analytics.7d9ea490a2bcf6e5fa8b.js?cb=1
200 OK 11 kB URL HTTP/2 static-tracking.klaviyo.com/onsite/js/fender_analytics.7d9ea490a2bcf6e5fa8b.js?cb=1
IP
File type ASCII text, with very long lines (27750), with no line terminators
Hash 4130f27ac8ffe6d8372b514b42281df3
84e6672d7ac2f7aa25f3dcb4e1cd63c85fd833a4
cb7d951f9bacc656f2cdf7bb08868d653fa2450df11c1a2f65ca8f4982ee24f9
GET /onsite/js/fender_analytics.7d9ea490a2bcf6e5fa8b.js?cb=1 HTTP/1.1
Host: static-tracking.klaviyo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.e-ville.com
Connection: keep-alive
Referer: https://www.e-ville.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: Ok1pIBKKenTajb2ZnvpqLw9m6LGN/bbVrbskFadwZmoLN85EBCiXhJYlfXu4FiFZddQCuKdTm4k=
x-amz-request-id: V04XGMKFZMFWPPN7
last-modified: Tue, 24 Jan 2023 18:51:15 GMT
etag: "741d6862910c2aa5664c150b294f6e12"
cache-control: max-age=2592000,stale-while-revalidate=10800
x-amz-meta-surrogate-control: max-age=31536000
x-amz-meta-surrogate-key: fender-asset
x-amz-version-id: KrrTOk0oYJRzUIk3dg9jfBxuiktosyCx
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
access-control-allow-origin: *
accept-ranges: bytes
date: Thu, 26 Jan 2023 21:07:12 GMT
age: 1610
x-served-by: cache-lga21943-LGA, cache-bma1680-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 1213
vary: Accept-Encoding
content-length: 10696
X-Firefox-Spdy: h2
static-tracking.klaviyo.com/onsite/js/static.aa7cf055e48f28bbd282.js?cb=1
200 OK 5.3 kB URL HTTP/2 static-tracking.klaviyo.com/onsite/js/static.aa7cf055e48f28bbd282.js?cb=1
IP
File type ASCII text, with very long lines (12659), with no line terminators
Hash 1e5719bef9a29c3e7287ac08b5e2b2ef
d129764a0061300a471cb30380f111c7fc0b7af1
6ee1100c614754007ec9d1b3a313367d1851a0ba18bcfff63e62a49ec5bad9cd
GET /onsite/js/static.aa7cf055e48f28bbd282.js?cb=1 HTTP/1.1
Host: static-tracking.klaviyo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.e-ville.com
Connection: keep-alive
Referer: https://www.e-ville.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: KnNSjGvhnyY9GXLzqrCH6+xKs4IkYpc6LQLGufO+AIXqk2X+Z5fZTQdUadmoApY4+8OVXpCI8NNQDBICBZizqg==
x-amz-request-id: V04VTKJYF01KKH9E
last-modified: Tue, 24 Jan 2023 18:51:15 GMT
etag: "bdc532ee042e650b2a4d06cfc862f93c"
cache-control: max-age=2592000,stale-while-revalidate=10800
x-amz-meta-surrogate-control: max-age=31536000
x-amz-meta-surrogate-key: fender-asset
x-amz-version-id: 4zv8jtgnhp0NWMPbxgpvocWDELtx98tW
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
access-control-allow-origin: *
accept-ranges: bytes
date: Thu, 26 Jan 2023 21:07:13 GMT
age: 1610
x-served-by: cache-lga21962-LGA, cache-bma1680-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 1201
vary: Accept-Encoding
content-length: 5320
X-Firefox-Spdy: h2
www.e-ville.com/static/css/flaticon2.css?t=20210114
200 OK 2.2 kB URL HTTP/2 www.e-ville.com/static/css/flaticon2.css?t=20210114
IP
File type ASCII text, with very long lines (307)
Hash 0b3039c147a45a7d450e7c2c17412403
1ce1741af8cda3996b7e2c4fe7a9e6cef6031f0f
52e92ae871b7aec108154376533a5f9de8b82a121d8cf8a879a62c9f1ef56b1c
GET /static/css/flaticon2.css?t=20210114 HTTP/1.1
Host: www.e-ville.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.e-ville.com/en/
Cookie: bfdd85c0d13ecac8e58768e9f67b18a1=pi7uc5sBV8w%3Dl%2Fxoo7cx85A%3DRD4KQifNXoc%3DitX6faWKn30%3DKjMwpbRdCbY%3DfgxmpqlvGGQ%3DFTOgqAMzVJ0%3DYgQP4lff7vo%3D%2Fb9AWA5ddXE%3DjiQW0d59Ask%3D1LSuG7LB2ek%3D%2FjKkPLmkgvA%3D3yv%2BxOOehbk%3DO8LOB%2BPY7ws%3DeLYkst15gv0%3DuhqWvxjrDGE%3D22sNuM2uAUg%3DjTE2XeiqenI%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 21:07:12 GMT
content-type: text/css; charset=UTF-8
x-powered-by: Express
cache-control: public, max-age=14400
last-modified: Mon, 23 Jan 2023 05:20:56 GMT
etag: W/"20bc-185dd128327"
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=15768000
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QDBfZ2yGxkmn7IzX%2B2DnMBh13nL%2Ba4IjaRjPmqWLZKNYhTvkJ2nHrixeRUdoBOgbh4wJbayphRJk2NUXyJ6wgpfUA%2FqLNVt7IPSocua1A47jtRPegm7I5gGGi5T3jtiM5g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78fc3784df8e0b45-OSL
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.e-ville.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Thu, 26 Jan 2023 19:46:59 GMT
expires: Thu, 26 Jan 2023 21:46:59 GMT
cache-control: public, max-age=7200
age: 4814
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7b8dcc42710b2f68c0ec782d2b2a3ae3
b865da423aa26e774270b8e3942b6fbe76793133
2da0fcf67d020f7c563946fca7ade89803cbe7cfe484f123640f8a9950b3f2b1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 21:07:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2ebcc7cd4c50e87a984668828c1e612e
f693d36335f333e3647f9fb2460e34dd73e17421
27f1d63422ccd02a6af514c2c0a36ac6f4e0d6f74ad6d9fc8c32e8ea487ffe15
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 21:07:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.e-ville.com/en/
200 OK 64 kB IP
Hash 9c4615a69094482ae8468b4779d680cd
a10c0dae8295e04a7615627eabedb39248e79e64
c2ee5b19223f73dcdab05ab3cada328ef307ac77a89f1a48ffb5559c4a359c88
GET /en/ HTTP/1.1
Host: www.e-ville.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: bfdd85c0d13ecac8e58768e9f67b18a1=pi7uc5sBV8w%3Dl%2Fxoo7cx85A%3DRD4KQifNXoc%3DitX6faWKn30%3DKjMwpbRdCbY%3DfgxmpqlvGGQ%3DFTOgqAMzVJ0%3DYgQP4lff7vo%3D%2Fb9AWA5ddXE%3DjiQW0d59Ask%3D1LSuG7LB2ek%3D%2FjKkPLmkgvA%3D3yv%2BxOOehbk%3DO8LOB%2BPY7ws%3DeLYkst15gv0%3DuhqWvxjrDGE%3D22sNuM2uAUg%3DjTE2XeiqenI%3D
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 21:07:12 GMT
content-type: text/html; charset=utf-8
x-powered-by: Express
vary: Accept-Encoding
strict-transport-security: max-age=15768000
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YRoNysy8jCXRC6b3UkkDHOoOxRN1zQH85rM5XhtkJi1OmRWbMEELv2gaLgAdvsd0kMj5QnG8f5OwAqUNqEQBlZBM2xD7Qy0KuPjQzE7LQVOmEAMyaktUMpMO4qFfvuDrqA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78fc37808ad80b45-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7b8dcc42710b2f68c0ec782d2b2a3ae3
b865da423aa26e774270b8e3942b6fbe76793133
2da0fcf67d020f7c563946fca7ade89803cbe7cfe484f123640f8a9950b3f2b1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 21:07:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.e-ville.com/static/webfonts/fa-solid-900.woff2
200 OK 150 kB URL HTTP/2 www.e-ville.com/static/webfonts/fa-solid-900.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 150516, version 770.768\012- data
Size 150 kB (150516 bytes)
Hash 328a9d0f59f0ebb55cddac6f39995bea
c0e6e76b4a02c34656ff2a41b671e02f2821829b
8f06540fd77f1effe1e2da8ea10cec4a382dda9cc6ef05d816e1d6de444072f2
GET /static/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: www.e-ville.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.e-ville.com/static/css/solid.css?t=20220531
Cookie: bfdd85c0d13ecac8e58768e9f67b18a1=pi7uc5sBV8w%3Dl%2Fxoo7cx85A%3DRD4KQifNXoc%3DitX6faWKn30%3DKjMwpbRdCbY%3DfgxmpqlvGGQ%3DFTOgqAMzVJ0%3DYgQP4lff7vo%3D%2Fb9AWA5ddXE%3DjiQW0d59Ask%3D1LSuG7LB2ek%3D%2FjKkPLmkgvA%3D3yv%2BxOOehbk%3Deh9%2FLC9xBqU%3DeLYkst15gv0%3DizvwC7y%2FVcs%3DV0fIRrjlyA8%3Ds5fEQWkdZZs%3DqPri6I%2Bj%2F0k%3DPfOaCI2QMCE%3DqHcH7mZiGKY%3DFmWfA1%2BJZqg%3DXQyd89pyLf0%3Dhq90qagrm3o%3D%2BxamtBQfH7c%3DIMoy7O5AuFw%3DNrVVidF4PpA%3DXVALCrnirEQ%3DSHBJOpqJ%2BMg%3DrtACT8GLgpM%3DPmF3LjpR4K8%3Dk0EC4Aj2BaE%3DA3LAQEH9pBk%3DG4Rzvly%2BlyI%3DMXJ4tVb%2FXdI%3D; __kla_id=eyIkcmVmZXJyZXIiOnsidHMiOjE2NzQ3NjcyMzMsInZhbHVlIjoiIiwiZmlyc3RfcGFnZSI6Imh0dHBzOi8vd3d3LmUtdmlsbGUuY29tL2VuLyJ9LCIkbGFzdF9yZWZlcnJlciI6eyJ0cyI6MTY3NDc2NzIzMywidmFsdWUiOiIiLCJmaXJzdF9wYWdlIjoiaHR0cHM6Ly93d3cuZS12aWxsZS5jb20vZW4vIn19; _gcl_au=1.1.1799616877.1674767233
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 21:07:13 GMT
content-type: font/woff2
content-length: 150516
x-powered-by: Express
cache-control: public, max-age=14400
last-modified: Mon, 23 Jan 2023 05:20:56 GMT
etag: W/"24bf4-185dd128333"
strict-transport-security: max-age=15768000
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Vv3ArLsTN89tEOG1AFHH52fyBndNb0Tjpe25Ze7ux9SLIXo2bvg%2FZvQwy4Yl97eVgU6R14NyswLQWuLnKe00Cp6Oq2UH0%2BxAt9jjKI9aj2%2FjnLlVswpL9XlT9PHFehDdQg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 78fc3787ba8f0b45-OSL
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash d9bf2793558044193d7e5d27708a9144
5a8f73462cfda6544cc3efe488854c3cd80bb0a7
e1db5ce5f130aa6d6a1bf18da60fee5c6bb76625a26aef0fee67702e7209ef7e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 21:07:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash d9bf2793558044193d7e5d27708a9144
5a8f73462cfda6544cc3efe488854c3cd80bb0a7
e1db5ce5f130aa6d6a1bf18da60fee5c6bb76625a26aef0fee67702e7209ef7e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 21:07:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.e-ville.com/static/css/flaticon.css?t=20201007
200 OK 49 kB URL HTTP/2 www.e-ville.com/static/css/flaticon.css?t=20201007
IP
Hash 66167d49f94f38fd1286be52eb3848bd
0655cd21a7c73ff326f3ceebdff53e802b5f0408
1728de24b0ead38952e93dcb748fdbf762115239eccc46c4dcaa07321dd704e1
GET /static/css/flaticon.css?t=20201007 HTTP/1.1
Host: www.e-ville.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.e-ville.com/en/
Cookie: bfdd85c0d13ecac8e58768e9f67b18a1=pi7uc5sBV8w%3Dl%2Fxoo7cx85A%3DRD4KQifNXoc%3DitX6faWKn30%3DKjMwpbRdCbY%3DfgxmpqlvGGQ%3DFTOgqAMzVJ0%3DYgQP4lff7vo%3D%2Fb9AWA5ddXE%3DjiQW0d59Ask%3D1LSuG7LB2ek%3D%2FjKkPLmkgvA%3D3yv%2BxOOehbk%3DO8LOB%2BPY7ws%3DeLYkst15gv0%3DuhqWvxjrDGE%3D22sNuM2uAUg%3DjTE2XeiqenI%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 21:07:12 GMT
content-type: text/css; charset=UTF-8
x-powered-by: Express
cache-control: public, max-age=14400
last-modified: Mon, 23 Jan 2023 05:20:56 GMT
etag: W/"3602-185dd128327"
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=15768000
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KBEfMqw9RQmBjhwwwLRUwQZMiKfBTg4d6FxupI9AQ0CvPOAOH4iFG79sz2JNMGafN7%2Bfvu8NbeZjQYwNuX9L7RLTU7ZVtVdsbHp3BYFcpXyD6jYu3J3ueUuoIh1%2F0i3atA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78fc3784cf810b45-OSL
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c8a0d6bc80301700d6fb1d520beb8b49
f33a1a1e491fcd6ca31360b28b092457a2d48f23
ef0535b52ccb717c1200d5974ea8841b92f655234d67ace0e71c1ec7f5fbb3f4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 21:07:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 3ebf9d7211aba4c70b84fb470a61b414
28fe29a24e47d6abda88eeeb5e22eddda03c7fca
a8276e099d9d8452b65b70d161a459fae25afb37cea7eff9cc5563b7de972acc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 21:07:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/pagead/1p-user-list/967009131/?random=1674767233100&cv=11&fst=1674766800000&bg=ffffff&guid=ON&async=1>m=2oa1p0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.e-ville.com%2Fen%2F&tiba=Onlineshop%20e-ville.com&data=event%3Dpage_view%3Bpage_path%3D%2Fen%2F&fmt=3&is_vtc=1&random=4027921669&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/967009131/?random=1674767233100&cv=11&fst=1674766800000&bg=ffffff&guid=ON&async=1>m=2oa1p0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.e-ville.com%2Fen%2F&tiba=Onlineshop%20e-ville.com&data=event%3Dpage_view%3Bpage_path%3D%2Fen%2F&fmt=3&is_vtc=1&random=4027921669&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/967009131/?random=1674767233100&cv=11&fst=1674766800000&bg=ffffff&guid=ON&async=1>m=2oa1p0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.e-ville.com%2Fen%2F&tiba=Onlineshop%20e-ville.com&data=event%3Dpage_view%3Bpage_path%3D%2Fen%2F&fmt=3&is_vtc=1&random=4027921669&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.e-ville.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 26 Jan 2023 21:07:13 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.e-ville.com/static/css/19.8a084a6b.chunk.css
200 OK 600 B URL HTTP/2 www.e-ville.com/static/css/19.8a084a6b.chunk.css
IP
Hash d9b7e1554f2dcc4f5806603b605840b6
5452993f3ae3d4fce40e172f2e1332e3cc986fcb
d30099d79de36afcd45e51d6d202002fa7fa6b7c4b54ef2e8d9a852de60201be
GET /static/css/19.8a084a6b.chunk.css HTTP/1.1
Host: www.e-ville.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.e-ville.com/en/
Cookie: bfdd85c0d13ecac8e58768e9f67b18a1=pi7uc5sBV8w%3Dl%2Fxoo7cx85A%3DRD4KQifNXoc%3DitX6faWKn30%3DKjMwpbRdCbY%3DfgxmpqlvGGQ%3DFTOgqAMzVJ0%3DYgQP4lff7vo%3D%2Fb9AWA5ddXE%3DjiQW0d59Ask%3D1LSuG7LB2ek%3D%2FjKkPLmkgvA%3D3yv%2BxOOehbk%3DO8LOB%2BPY7ws%3DeLYkst15gv0%3DuhqWvxjrDGE%3D22sNuM2uAUg%3DjTE2XeiqenI%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 21:07:13 GMT
content-type: text/css; charset=UTF-8
x-powered-by: Express
cache-control: public, max-age=14400
last-modified: Mon, 23 Jan 2023 05:20:56 GMT
etag: W/"5ab-185dd128327"
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=15768000
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MSOL%2B%2FNgODrhVSMRG0%2BxbhXyG5W7cfdGqRI%2FD91jdWxHnrnDwQGwd2UoXuTlvonLWEtCuQPl0WovaLOBYmoh9HM1KsTRUqoTTHfy%2BQ4p3H%2BsZx1F9CWy8Jd3wALntTIcUA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78fc378628d50b45-OSL
X-Firefox-Spdy: h2
www.google.com/pagead/1p-user-list/undefined/?random=1674767233250&cv=11&fst=1674766800000&bg=ffffff&guid=ON&async=1>m=2wg1p0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.e-ville.com%2Fen%2F&tiba=Onlineshop%20e-ville.com&data=event%3Dpage_view&fmt=3&is_vtc=1&random=3236404259&rmt_tld=0&ipr=y
200 OK 42 B URL HTTP/2 www.google.com/pagead/1p-user-list/undefined/?random=1674767233250&cv=11&fst=1674766800000&bg=ffffff&guid=ON&async=1>m=2wg1p0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.e-ville.com%2Fen%2F&tiba=Onlineshop%20e-ville.com&data=event%3Dpage_view&fmt=3&is_vtc=1&random=3236404259&rmt_tld=0&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/undefined/?random=1674767233250&cv=11&fst=1674766800000&bg=ffffff&guid=ON&async=1>m=2wg1p0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.e-ville.com%2Fen%2F&tiba=Onlineshop%20e-ville.com&data=event%3Dpage_view&fmt=3&is_vtc=1&random=3236404259&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.e-ville.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 26 Jan 2023 21:07:13 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/undefined/?random=1674767233250&cv=11&fst=1674766800000&bg=ffffff&guid=ON&async=1>m=2wg1p0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.e-ville.com%2Fen%2F&tiba=Onlineshop%20e-ville.com&data=event%3Dpage_view&fmt=3&is_vtc=1&random=3236404259&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/undefined/?random=1674767233250&cv=11&fst=1674766800000&bg=ffffff&guid=ON&async=1>m=2wg1p0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.e-ville.com%2Fen%2F&tiba=Onlineshop%20e-ville.com&data=event%3Dpage_view&fmt=3&is_vtc=1&random=3236404259&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/undefined/?random=1674767233250&cv=11&fst=1674766800000&bg=ffffff&guid=ON&async=1>m=2wg1p0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.e-ville.com%2Fen%2F&tiba=Onlineshop%20e-ville.com&data=event%3Dpage_view&fmt=3&is_vtc=1&random=3236404259&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.e-ville.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 26 Jan 2023 21:07:13 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c8a0d6bc80301700d6fb1d520beb8b49
f33a1a1e491fcd6ca31360b28b092457a2d48f23
ef0535b52ccb717c1200d5974ea8841b92f655234d67ace0e71c1ec7f5fbb3f4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 21:07:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
s.kk-resources.com/leadtag.js
200 OK 2.6 kB URL HTTP/1.1 s.kk-resources.com/leadtag.js
IP
File type C source, ASCII text, with very long lines (6910)
Hash b9c7aa9898d0e7b5d8dfa27c81eda1ac
3e22a4f4ac1fd469128de60e1a80433513242071
980531f0a81016e3a7a4c3fa56f75e7b791f1f4c09296992221bd766b91a53a0
GET /leadtag.js HTTP/1.1
Host: s.kk-resources.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.e-ville.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
Content-Length: 2595
Connection: keep-alive
X-Gravitee-Transaction-Id: b5cac65b-8fde-4ed1-8ac6-5b8fde1ed1d2
X-Gravitee-Request-Id: b5cac65b-8fde-4ed1-8ac6-5b8fde1ed1d2
Request-Time: 3
Accept-Ranges: bytes
Cache-Control: public, max-age=3600
Last-Modified: Thu, 05 Jan 2023 14:36:32 GMT
Content-Encoding: gzip
Date: Thu, 26 Jan 2023 20:34:54 GMT
ETag: "4ce868c0fdc969d380979979f635e5c92f06898b"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: XAaElzp4Y6LgNhbi9xe9UbjC4EsWmaeMkbwrq5pMAINmhbqk7HVVcA==
Age: 1939
ocsp.digicert.com/
200 OK 471 B IP
Hash 58bee798660dae739b64c6c857490fff
bcfe56f00b749385ca3d2ffb7a68c4a13c186317
800396e3a57e9ebd98a56f8ebab32c3bc576310632d9ece8b282e88c6d20d8f3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3016
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 21:07:13 GMT
Last-Modified: Thu, 26 Jan 2023 20:16:57 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 471
connect.facebook.net/en_US/fbevents.js
200 OK 28 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
File type ASCII text, with very long lines (64348)
Hash 9ba458c0d3060a442f3094daf58ec05d
fc35d487d0dd81e6855f1b02367b755609d9608d
17087257ea25c2232c025f338b9f3153d35c3d953cb382b7b6e01728a643bc0b
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.e-ville.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: drUjD9skUnXkLpA7BVrKrc5FLPhGzRLjN+diOFaXZ1omJLWO3JXDftOx0D8zUZKnWykswatZ0dSOPL0T/Pkm7Q==
content-length: 27859
x-fb-trip-id: 1679558926
date: Thu, 26 Jan 2023 21:07:13 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
region1.google-analytics.com/g/collect?v=2&tid=G-8HKZ3V3NB6>m=2oe1p0&_p=1406959932&cid=1389450167.1674767233&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1674767233&sct=1&seg=0&dl=https%3A%2F%2Fwww.e-ville.com%2Fen%2F&dt=Onlineshop%20e-ville.com&en=page_view&_fv=1&_ss=1&_ee=1&ep.page_path=%2Fen%2F
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-8HKZ3V3NB6>m=2oe1p0&_p=1406959932&cid=1389450167.1674767233&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1674767233&sct=1&seg=0&dl=https%3A%2F%2Fwww.e-ville.com%2Fen%2F&dt=Onlineshop%20e-ville.com&en=page_view&_fv=1&_ss=1&_ee=1&ep.page_path=%2Fen%2F
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-8HKZ3V3NB6>m=2oe1p0&_p=1406959932&cid=1389450167.1674767233&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1674767233&sct=1&seg=0&dl=https%3A%2F%2Fwww.e-ville.com%2Fen%2F&dt=Onlineshop%20e-ville.com&en=page_view&_fv=1&_ss=1&_ee=1&ep.page_path=%2Fen%2F HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.e-ville.com
Connection: keep-alive
Referer: https://www.e-ville.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.e-ville.com
date: Thu, 26 Jan 2023 21:07:14 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=709719419121796&ev=ViewPage&dl=https%3A%2F%2Fwww.e-ville.com%2Fen%2F&rl=&if=false&ts=1674767234012&cd[language]=en&cd[userAgent]=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&cd[referrer]=&sw=1280&sh=1024&v=2.9.94&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=30&fbp=fb.1.1674767234012.744120218&it=1674767233836&coo=false&tm=2&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=709719419121796&ev=ViewPage&dl=https%3A%2F%2Fwww.e-ville.com%2Fen%2F&rl=&if=false&ts=1674767234012&cd[language]=en&cd[userAgent]=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&cd[referrer]=&sw=1280&sh=1024&v=2.9.94&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=30&fbp=fb.1.1674767234012.744120218&it=1674767233836&coo=false&tm=2&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=709719419121796&ev=ViewPage&dl=https%3A%2F%2Fwww.e-ville.com%2Fen%2F&rl=&if=false&ts=1674767234012&cd[language]=en&cd[userAgent]=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&cd[referrer]=&sw=1280&sh=1024&v=2.9.94&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=30&fbp=fb.1.1674767234012.744120218&it=1674767233836&coo=false&tm=2&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.e-ville.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Thu, 26 Jan 2023 21:07:14 GMT
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=709719419121796&ev=PageView&dl=https%3A%2F%2Fwww.e-ville.com%2Fen%2F&rl=&if=false&ts=1674767234016&sw=1280&sh=1024&v=2.9.94&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=30&fbp=fb.1.1674767234012.744120218&it=1674767233836&coo=false&tm=1&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=709719419121796&ev=PageView&dl=https%3A%2F%2Fwww.e-ville.com%2Fen%2F&rl=&if=false&ts=1674767234016&sw=1280&sh=1024&v=2.9.94&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=30&fbp=fb.1.1674767234012.744120218&it=1674767233836&coo=false&tm=1&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=709719419121796&ev=PageView&dl=https%3A%2F%2Fwww.e-ville.com%2Fen%2F&rl=&if=false&ts=1674767234016&sw=1280&sh=1024&v=2.9.94&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=30&fbp=fb.1.1674767234012.744120218&it=1674767233836&coo=false&tm=1&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.e-ville.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Thu, 26 Jan 2023 21:07:14 GMT
X-Firefox-Spdy: h2
www.e-ville.com/js/tinymce/uploaded/layout/icons/wishlist.svg
200 OK 0 B URL HTTP/2 www.e-ville.com/js/tinymce/uploaded/layout/icons/wishlist.svg
IP
GET /js/tinymce/uploaded/layout/icons/wishlist.svg HTTP/1.1
Host: www.e-ville.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.e-ville.com/en/
Cookie: bfdd85c0d13ecac8e58768e9f67b18a1=pi7uc5sBV8w%3Dl%2Fxoo7cx85A%3DRD4KQifNXoc%3DitX6faWKn30%3DKjMwpbRdCbY%3DfgxmpqlvGGQ%3DFTOgqAMzVJ0%3DYgQP4lff7vo%3D%2Fb9AWA5ddXE%3DjiQW0d59Ask%3D1LSuG7LB2ek%3D%2FjKkPLmkgvA%3D3yv%2BxOOehbk%3DO8LOB%2BPY7ws%3DeLYkst15gv0%3DuhqWvxjrDGE%3D22sNuM2uAUg%3DjTE2XeiqenI%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 21:07:12 GMT
content-type: image/svg+xml
last-modified: Mon, 11 Jan 2021 06:49:22 GMT
etag: W/"5ffbf4f2-d23"
expires: Sun, 23 Apr 2023 12:46:52 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15768000
cf-cache-status: HIT
age: 20207746
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=D5ap7lpb2YRjkNC%2Bt68VjHK9e%2FMggYHti0x5I5ut5zB%2BlK0KxUotAJQQk85F6ArKv8AxM%2FAk7lb9wwcmspnGkOy%2FW%2BmHRaVwu3YZLKsAOREQ02L1dPuhPQ0r%2B2eq8NZbbg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 78fc37838e430b45-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
www.e-ville.com/static/css/main-31ecd969.de3c1310.chunk.css
200 OK 0 B URL HTTP/2 www.e-ville.com/static/css/main-31ecd969.de3c1310.chunk.css
IP
GET /static/css/main-31ecd969.de3c1310.chunk.css HTTP/1.1
Host: www.e-ville.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.e-ville.com/en/
Cookie: bfdd85c0d13ecac8e58768e9f67b18a1=pi7uc5sBV8w%3Dl%2Fxoo7cx85A%3DRD4KQifNXoc%3DitX6faWKn30%3DKjMwpbRdCbY%3DfgxmpqlvGGQ%3DFTOgqAMzVJ0%3DYgQP4lff7vo%3D%2Fb9AWA5ddXE%3DjiQW0d59Ask%3D1LSuG7LB2ek%3D%2FjKkPLmkgvA%3D3yv%2BxOOehbk%3DO8LOB%2BPY7ws%3DeLYkst15gv0%3DuhqWvxjrDGE%3D22sNuM2uAUg%3DjTE2XeiqenI%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 21:07:12 GMT
content-type: text/css; charset=UTF-8
x-powered-by: Express
cache-control: public, max-age=14400
last-modified: Mon, 23 Jan 2023 05:20:56 GMT
etag: W/"b659-185dd128327"
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=15768000
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3ZeZZn6QYOZNXLs1ZFnSAjRqpxkAfIsEDynwq4tpRvBXZJX8GGSHN%2F95dE35obDUzqETrQQouO1iiHtEWhMt1rHHf5VL0lVlVzh%2Fwxaq0zckWXFG5T11q1z4Az7LQ3CRKw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78fc37836dfd0b45-OSL
X-Firefox-Spdy: h2
www.e-ville.com/static/css/bootstrap.css
200 OK 0 B URL HTTP/2 www.e-ville.com/static/css/bootstrap.css
IP
GET /static/css/bootstrap.css HTTP/1.1
Host: www.e-ville.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.e-ville.com/en/
Cookie: bfdd85c0d13ecac8e58768e9f67b18a1=pi7uc5sBV8w%3Dl%2Fxoo7cx85A%3DRD4KQifNXoc%3DitX6faWKn30%3DKjMwpbRdCbY%3DfgxmpqlvGGQ%3DFTOgqAMzVJ0%3DYgQP4lff7vo%3D%2Fb9AWA5ddXE%3DjiQW0d59Ask%3D1LSuG7LB2ek%3D%2FjKkPLmkgvA%3D3yv%2BxOOehbk%3DO8LOB%2BPY7ws%3DeLYkst15gv0%3DuhqWvxjrDGE%3D22sNuM2uAUg%3DjTE2XeiqenI%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 21:07:12 GMT
content-type: text/css; charset=UTF-8
x-powered-by: Express
cache-control: public, max-age=14400
last-modified: Mon, 23 Jan 2023 05:20:56 GMT
etag: W/"8559-185dd128327"
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=15768000
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TZ5MlrOReeV1SATKlk6IkGS0dlhXnydCvognYfA%2BUd9aBUIzLxjDkrntnoPcMJRZGL72p747uMj5c%2FynxrqI6L3iM%2BITVK0lKy4j8UkaWXU44T0AuUa1FbOi%2Fn7vDEE3AQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78fc3784df8c0b45-OSL
X-Firefox-Spdy: h2
www.e-ville.com/static/js/runtime~main.d8170099.js
200 OK 0 B URL HTTP/2 www.e-ville.com/static/js/runtime~main.d8170099.js
IP
GET /static/js/runtime~main.d8170099.js HTTP/1.1
Host: www.e-ville.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.e-ville.com/en/
Cookie: bfdd85c0d13ecac8e58768e9f67b18a1=pi7uc5sBV8w%3Dl%2Fxoo7cx85A%3DRD4KQifNXoc%3DitX6faWKn30%3DKjMwpbRdCbY%3DfgxmpqlvGGQ%3DFTOgqAMzVJ0%3DYgQP4lff7vo%3D%2Fb9AWA5ddXE%3DjiQW0d59Ask%3D1LSuG7LB2ek%3D%2FjKkPLmkgvA%3D3yv%2BxOOehbk%3DO8LOB%2BPY7ws%3DeLYkst15gv0%3DuhqWvxjrDGE%3D22sNuM2uAUg%3DjTE2XeiqenI%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 21:07:12 GMT
content-type: application/javascript; charset=UTF-8
x-powered-by: Express
cache-control: public, max-age=14400
last-modified: Mon, 23 Jan 2023 05:20:56 GMT
etag: W/"ec6-185dd12832f"
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=15768000
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=m3%2F4FjUYpPw%2BS1ZiMbiNJp3UpkVwWwYxR32bVCnzFuC63iU%2BEYatgcOzFiivkM08U9bScvV5jxvRNxnb2wSk%2FXJnFIo479aiqHt1xsr3UWltJ7%2BswaWvXZnaY0FyDQ66rg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78fc37839e5d0b45-OSL
X-Firefox-Spdy: h2
www.e-ville.com/js/tinymce/uploaded/layout/icons/account.svg
200 OK 0 B URL HTTP/2 www.e-ville.com/js/tinymce/uploaded/layout/icons/account.svg
IP
GET /js/tinymce/uploaded/layout/icons/account.svg HTTP/1.1
Host: www.e-ville.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.e-ville.com/en/
Cookie: bfdd85c0d13ecac8e58768e9f67b18a1=pi7uc5sBV8w%3Dl%2Fxoo7cx85A%3DRD4KQifNXoc%3DitX6faWKn30%3DKjMwpbRdCbY%3DfgxmpqlvGGQ%3DFTOgqAMzVJ0%3DYgQP4lff7vo%3D%2Fb9AWA5ddXE%3DjiQW0d59Ask%3D1LSuG7LB2ek%3D%2FjKkPLmkgvA%3D3yv%2BxOOehbk%3DO8LOB%2BPY7ws%3DeLYkst15gv0%3DuhqWvxjrDGE%3D22sNuM2uAUg%3DjTE2XeiqenI%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 21:07:12 GMT
content-type: image/svg+xml
last-modified: Mon, 11 Jan 2021 06:49:22 GMT
etag: W/"5ffbf4f2-b12"
expires: Thu, 02 Mar 2023 01:28:43 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15768000
cf-cache-status: HIT
age: 20207746
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cqM6W5FodJiSQIlINqbyNJzFiJctsCFBLXJ%2BgnaTbYk5x0Y1%2BCDPAHRGCzkoa4FZVZT%2FQ%2FG1NLJ4BThZj4pJ%2Bxn01VwPOeymgz8F1L6MHcRN8uevxP%2FOClHNIE6qz0aFHA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 78fc37838e460b45-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
www.e-ville.com/js/tinymce/uploaded/layout/icons/settings.svg
200 OK 0 B URL HTTP/2 www.e-ville.com/js/tinymce/uploaded/layout/icons/settings.svg
IP
GET /js/tinymce/uploaded/layout/icons/settings.svg HTTP/1.1
Host: www.e-ville.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.e-ville.com/en/
Cookie: bfdd85c0d13ecac8e58768e9f67b18a1=pi7uc5sBV8w%3Dl%2Fxoo7cx85A%3DRD4KQifNXoc%3DitX6faWKn30%3DKjMwpbRdCbY%3DfgxmpqlvGGQ%3DFTOgqAMzVJ0%3DYgQP4lff7vo%3D%2Fb9AWA5ddXE%3DjiQW0d59Ask%3D1LSuG7LB2ek%3D%2FjKkPLmkgvA%3D3yv%2BxOOehbk%3DO8LOB%2BPY7ws%3DeLYkst15gv0%3DuhqWvxjrDGE%3D22sNuM2uAUg%3DjTE2XeiqenI%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 21:07:12 GMT
content-type: image/svg+xml
last-modified: Mon, 11 Jan 2021 06:49:22 GMT
etag: W/"5ffbf4f2-15e5"
expires: Thu, 02 Mar 2023 01:28:43 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15768000
cf-cache-status: HIT
age: 72901
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=m5gytn7c3h74zEPsyQ%2BzNnQsO7KnYcyOEjUuXSPKpPJmnvjhAcTYrB7w3Tvl3WzZL5s7lGXIoJuj0vKHpx9hn0p5%2FKO%2BycrCelBzvAcaAcVGoFq7xnexkIoFQWjghNITTA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 78fc37838e490b45-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
p274639.mybettermb.com/adServe/domainClick?ai=gNSPw4YcvsCApKkKBx7IDF_cvGsTSfm9uqHPErRaTXoDgwDsRKusVuSzVpy1vp3RTpegkJelYHUE538Al-L_QYf18T9CpHqCT2L9NFyVXF55Q47z-CV1ol2k4XVJzHJX8mFgHSWE3TZFy0dflvxRpINtSb91eU9pMndT0rcbhtKjIQ6n-5BK5qIjUZf-ReyHtSLHLDCCFTDT-SeEqkQWhsbteTpcMyyAhiRFVIdrvdZq3a-rPX7va44XRKiQejY9l5g72F1sPYafqhWZ-YKZz6rRPbGyYnCcF9nxG1Y8QfZKdkAM850vP-n44YFBbd7ECEomdw_Jheywpth3iNEvd_P4BsKUl697UgDHGPx9sdNAtw4JdPSDlgvGd3WbeZnnbWnaHeEFBuddA-e5aUFqZolKw8Cn_Dl8&ui=HFz5zNIIs96w8gbO8AoGVPmI0xR1wwxS_OHH5_91uopNC9dwcwXYavcIbybJIht8wHFUtjQnYoABcFRKJDw1bMK_nBFe1SieCCRKiGvEirKS5ahooqB2VA&si=1&oref=8e1dd1be172304d34167fb9a89f6676a&optunit=Lm2uYWJ6y1bbEItyw-irrg&rb=kkFnQ3TtWkI&rr=0&abtg=0
200 OK 0 B URL HTTP/2 p274639.mybettermb.com/adServe/domainClick?ai=gNSPw4YcvsCApKkKBx7IDF_cvGsTSfm9uqHPErRaTXoDgwDsRKusVuSzVpy1vp3RTpegkJelYHUE538Al-L_QYf18T9CpHqCT2L9NFyVXF55Q47z-CV1ol2k4XVJzHJX8mFgHSWE3TZFy0dflvxRpINtSb91eU9pMndT0rcbhtKjIQ6n-5BK5qIjUZf-ReyHtSLHLDCCFTDT-SeEqkQWhsbteTpcMyyAhiRFVIdrvdZq3a-rPX7va44XRKiQejY9l5g72F1sPYafqhWZ-YKZz6rRPbGyYnCcF9nxG1Y8QfZKdkAM850vP-n44YFBbd7ECEomdw_Jheywpth3iNEvd_P4BsKUl697UgDHGPx9sdNAtw4JdPSDlgvGd3WbeZnnbWnaHeEFBuddA-e5aUFqZolKw8Cn_Dl8&ui=HFz5zNIIs96w8gbO8AoGVPmI0xR1wwxS_OHH5_91uopNC9dwcwXYavcIbybJIht8wHFUtjQnYoABcFRKJDw1bMK_nBFe1SieCCRKiGvEirKS5ahooqB2VA&si=1&oref=8e1dd1be172304d34167fb9a89f6676a&optunit=Lm2uYWJ6y1bbEItyw-irrg&rb=kkFnQ3TtWkI&rr=0&abtg=0
IP
GET /adServe/domainClick?ai=gNSPw4YcvsCApKkKBx7IDF_cvGsTSfm9uqHPErRaTXoDgwDsRKusVuSzVpy1vp3RTpegkJelYHUE538Al-L_QYf18T9CpHqCT2L9NFyVXF55Q47z-CV1ol2k4XVJzHJX8mFgHSWE3TZFy0dflvxRpINtSb91eU9pMndT0rcbhtKjIQ6n-5BK5qIjUZf-ReyHtSLHLDCCFTDT-SeEqkQWhsbteTpcMyyAhiRFVIdrvdZq3a-rPX7va44XRKiQejY9l5g72F1sPYafqhWZ-YKZz6rRPbGyYnCcF9nxG1Y8QfZKdkAM850vP-n44YFBbd7ECEomdw_Jheywpth3iNEvd_P4BsKUl697UgDHGPx9sdNAtw4JdPSDlgvGd3WbeZnnbWnaHeEFBuddA-e5aUFqZolKw8Cn_Dl8&ui=HFz5zNIIs96w8gbO8AoGVPmI0xR1wwxS_OHH5_91uopNC9dwcwXYavcIbybJIht8wHFUtjQnYoABcFRKJDw1bMK_nBFe1SieCCRKiGvEirKS5ahooqB2VA&si=1&oref=8e1dd1be172304d34167fb9a89f6676a&optunit=Lm2uYWJ6y1bbEItyw-irrg&rb=kkFnQ3TtWkI&rr=0&abtg=0 HTTP/1.1
Host: p274639.mybettermb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://btpnative.com/
Connection: keep-alive
Cookie: rhid=82775204609
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 26 Jan 2023 21:07:09 GMT
content-type: text/html;charset=ISO-8859-1
vary: Accept-Encoding
set-cookie: rhid=82775204609; Max-Age=15552000; Expires=Tue, 25-Jul-2023 21:07:09 GMT; Domain=mybettermb.com; Path=/; SameSite=None; secure;
loi=ad_1173576_off_617426_aff_86324_cid_274639-581116130-WY5532.COM_ts_1674767229; Max-Age=3600; Expires=Thu, 26-Jan-2023 22:07:09 GMT; Domain=mybettermb.com; Path=/; SameSite=None; secure;
content-encoding: gzip
X-Firefox-Spdy: h2
translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.c2_H6h0zvYw.O/d=1/exm=el_conf/ed=1/rs=AN8SPfraNL4hBUxcHD1JwUr3OofpEUwLhQ/m=el_main
200 OK 0 B URL HTTP/2 translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.c2_H6h0zvYw.O/d=1/exm=el_conf/ed=1/rs=AN8SPfraNL4hBUxcHD1JwUr3OofpEUwLhQ/m=el_main
IP
GET /_/translate_http/_/js/k=translate_http.tr.no.c2_H6h0zvYw.O/d=1/exm=el_conf/ed=1/rs=AN8SPfraNL4hBUxcHD1JwUr3OofpEUwLhQ/m=el_main HTTP/1.1
Host: translate.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="rosetta"
report-to: {"group":"rosetta","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/rosetta"}]}
content-length: 75142
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 23 Jan 2023 21:39:34 GMT
expires: Tue, 23 Jan 2024 21:39:34 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 07 Dec 2022 22:10:10 GMT
content-type: text/javascript; charset=UTF-8
age: 257257
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.e-ville.com/static/css/7.a3356c6f.chunk.css
200 OK 0 B URL HTTP/2 www.e-ville.com/static/css/7.a3356c6f.chunk.css
IP
GET /static/css/7.a3356c6f.chunk.css HTTP/1.1
Host: www.e-ville.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.e-ville.com/en/
Cookie: bfdd85c0d13ecac8e58768e9f67b18a1=pi7uc5sBV8w%3Dl%2Fxoo7cx85A%3DRD4KQifNXoc%3DitX6faWKn30%3DKjMwpbRdCbY%3DfgxmpqlvGGQ%3DFTOgqAMzVJ0%3DYgQP4lff7vo%3D%2Fb9AWA5ddXE%3DjiQW0d59Ask%3D1LSuG7LB2ek%3D%2FjKkPLmkgvA%3D3yv%2BxOOehbk%3DO8LOB%2BPY7ws%3DeLYkst15gv0%3DuhqWvxjrDGE%3D22sNuM2uAUg%3DjTE2XeiqenI%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 21:07:12 GMT
content-type: text/css; charset=UTF-8
x-powered-by: Express
cache-control: public, max-age=14400
last-modified: Mon, 23 Jan 2023 05:20:56 GMT
etag: W/"a47e-185dd128327"
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=15768000
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=A5t8XFAf5sq7HmnrVAXPgFCbOklRgA2kkH6rN9xNToVUUTmbgubjVCMBMsfrNKYsjsvTKxLqAn3MuJnYSlMLFyOUsIANpICTQU2MNxTtWhbNPUeOVaaVb4fTUitXajE5eQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78fc37835dee0b45-OSL
X-Firefox-Spdy: h2
www.e-ville.com/static/js/main-d0ae3f07.89a66e7c.chunk.js
200 OK 0 B URL HTTP/2 www.e-ville.com/static/js/main-d0ae3f07.89a66e7c.chunk.js
IP
GET /static/js/main-d0ae3f07.89a66e7c.chunk.js HTTP/1.1
Host: www.e-ville.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.e-ville.com/en/
Cookie: bfdd85c0d13ecac8e58768e9f67b18a1=pi7uc5sBV8w%3Dl%2Fxoo7cx85A%3DRD4KQifNXoc%3DitX6faWKn30%3DKjMwpbRdCbY%3DfgxmpqlvGGQ%3DFTOgqAMzVJ0%3DYgQP4lff7vo%3D%2Fb9AWA5ddXE%3DjiQW0d59Ask%3D1LSuG7LB2ek%3D%2FjKkPLmkgvA%3D3yv%2BxOOehbk%3DO8LOB%2BPY7ws%3DeLYkst15gv0%3DuhqWvxjrDGE%3D22sNuM2uAUg%3DjTE2XeiqenI%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 21:07:12 GMT
content-type: application/javascript; charset=UTF-8
x-powered-by: Express
cache-control: public, max-age=14400
last-modified: Mon, 23 Jan 2023 05:20:56 GMT
etag: W/"38a62-185dd12832f"
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=15768000
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=o9na49sLIiYjXDocAtmlh8yY0oC5%2BidRo0Skl6M8Evylxdg%2F0Ua9xVe5GvZqWUorxYqMO6Z11%2BI0Fc5eFWIfIJNCbQoZwxYtwp9oV%2FPYDHfSuJb9ljlemQa0DwpEwPMpLQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78fc37836dfe0b45-OSL
X-Firefox-Spdy: h2
www.e-ville.com/static/js/19.9b85e538.chunk.js
200 OK 0 B URL HTTP/2 www.e-ville.com/static/js/19.9b85e538.chunk.js
IP
GET /static/js/19.9b85e538.chunk.js HTTP/1.1
Host: www.e-ville.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.e-ville.com/en/
Cookie: bfdd85c0d13ecac8e58768e9f67b18a1=pi7uc5sBV8w%3Dl%2Fxoo7cx85A%3DRD4KQifNXoc%3DitX6faWKn30%3DKjMwpbRdCbY%3DfgxmpqlvGGQ%3DFTOgqAMzVJ0%3DYgQP4lff7vo%3D%2Fb9AWA5ddXE%3DjiQW0d59Ask%3D1LSuG7LB2ek%3D%2FjKkPLmkgvA%3D3yv%2BxOOehbk%3DO8LOB%2BPY7ws%3DeLYkst15gv0%3DuhqWvxjrDGE%3D22sNuM2uAUg%3DjTE2XeiqenI%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 21:07:13 GMT
content-type: application/javascript; charset=UTF-8
x-powered-by: Express
cache-control: public, max-age=14400
last-modified: Mon, 23 Jan 2023 05:20:56 GMT
etag: W/"d7a-185dd12832f"
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=15768000
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=B4VBmy48ehHTTC9y%2FsIi%2BSvROF%2FEM%2B3PJt5kk%2B49%2BRDb2goYxoGB%2B9rhIbd9qkK4Z%2FP%2B0BvYoS3tQd7vj4KeW2oonB1Kl5crlc0rj7hI1pG34cLsMfa1ufUbr%2B7cW1IwZg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78fc378638ec0b45-OSL
X-Firefox-Spdy: h2
e-ville.com/
303 See Other 0 B IP
GET / HTTP/1.1
Host: e-ville.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 303 See Other
date: Thu, 26 Jan 2023 21:07:11 GMT
content-type: text/html; charset=utf-8
location: https://www.e-ville.com/
strict-transport-security: max-age=15768000
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lukqm0k9CwO4%2BqnVAk%2F83O9KRh61g%2BiY%2FYpM5VrhhAW55yN9wfEIGfLsFpjwFARBnODjOfXaFRJFL3U2LZTcRhsU2jhwwQbk6M4yNmdekR3NQTJZdWvCirAZhO4q"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78fc377e88ad0b45-OSL
X-Firefox-Spdy: h2
www.e-ville.com/js/tinymce/uploaded/layout/icons/shopping_cart_white.svg
200 OK 0 B URL HTTP/2 www.e-ville.com/js/tinymce/uploaded/layout/icons/shopping_cart_white.svg
IP
GET /js/tinymce/uploaded/layout/icons/shopping_cart_white.svg HTTP/1.1
Host: www.e-ville.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.e-ville.com/en/
Cookie: bfdd85c0d13ecac8e58768e9f67b18a1=pi7uc5sBV8w%3Dl%2Fxoo7cx85A%3DRD4KQifNXoc%3DitX6faWKn30%3DKjMwpbRdCbY%3DfgxmpqlvGGQ%3DFTOgqAMzVJ0%3DYgQP4lff7vo%3D%2Fb9AWA5ddXE%3DjiQW0d59Ask%3D1LSuG7LB2ek%3D%2FjKkPLmkgvA%3D3yv%2BxOOehbk%3DO8LOB%2BPY7ws%3DeLYkst15gv0%3DuhqWvxjrDGE%3D22sNuM2uAUg%3DjTE2XeiqenI%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 21:07:12 GMT
content-type: image/svg+xml
last-modified: Mon, 21 Feb 2022 10:40:48 GMT
etag: W/"62136c30-33d"
expires: Thu, 02 Mar 2023 01:28:43 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15768000
cf-cache-status: HIT
age: 20207746
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4TLjormQn6xKwWBBQ3%2Fm2STqbOvuIJF%2FWXmsGYiQSsJQfvZuXONOpyn7o19%2B3VN9nK0JvwfLcvGZmgGkUmF1WPKYgyG5Crvg%2BoAncpas9fDcFYD48jcY291RIUgQWZhMAA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 78fc37838e4b0b45-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
www.e-ville.com/static/js/21.59403d1a.chunk.js
200 OK 0 B URL HTTP/2 www.e-ville.com/static/js/21.59403d1a.chunk.js
IP
GET /static/js/21.59403d1a.chunk.js HTTP/1.1
Host: www.e-ville.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.e-ville.com/en/
Cookie: bfdd85c0d13ecac8e58768e9f67b18a1=pi7uc5sBV8w%3Dl%2Fxoo7cx85A%3DRD4KQifNXoc%3DitX6faWKn30%3DKjMwpbRdCbY%3DfgxmpqlvGGQ%3DFTOgqAMzVJ0%3DYgQP4lff7vo%3D%2Fb9AWA5ddXE%3DjiQW0d59Ask%3D1LSuG7LB2ek%3D%2FjKkPLmkgvA%3D3yv%2BxOOehbk%3DO8LOB%2BPY7ws%3DeLYkst15gv0%3DuhqWvxjrDGE%3D22sNuM2uAUg%3DjTE2XeiqenI%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 21:07:13 GMT
content-type: application/javascript; charset=UTF-8
x-powered-by: Express
cache-control: public, max-age=14400
last-modified: Mon, 23 Jan 2023 05:20:56 GMT
etag: W/"e94-185dd12832f"
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=15768000
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yRvhqcNVlTkBUeCgs6BHHLRd8XYeoIOeOy1yLoxO%2FH40hZ%2F7TUuk%2BDXzIIKYtG3rGtcS%2FVy8mykVgeWjFTtY3Limr2latFbCqXYsr6mu3rsC7vHiT4PghotHnYABj6L7dw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78fc378638ed0b45-OSL
X-Firefox-Spdy: h2
www.e-ville.com/themes/20130816/ajax/json-cart.php?ajax=true&token=387deb8e11250afdd2ad135d4603ed33&old_checkout=1
200 OK 0 B URL HTTP/2 www.e-ville.com/themes/20130816/ajax/json-cart.php?ajax=true&token=387deb8e11250afdd2ad135d4603ed33&old_checkout=1
IP
GET /themes/20130816/ajax/json-cart.php?ajax=true&token=387deb8e11250afdd2ad135d4603ed33&old_checkout=1 HTTP/1.1
Host: www.e-ville.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.e-ville.com/en/
Cookie: bfdd85c0d13ecac8e58768e9f67b18a1=pi7uc5sBV8w%3Dl%2Fxoo7cx85A%3DRD4KQifNXoc%3DitX6faWKn30%3DKjMwpbRdCbY%3DfgxmpqlvGGQ%3DFTOgqAMzVJ0%3DYgQP4lff7vo%3D%2Fb9AWA5ddXE%3DjiQW0d59Ask%3D1LSuG7LB2ek%3D%2FjKkPLmkgvA%3D3yv%2BxOOehbk%3Deh9%2FLC9xBqU%3DeLYkst15gv0%3DizvwC7y%2FVcs%3DV0fIRrjlyA8%3Ds5fEQWkdZZs%3DqPri6I%2Bj%2F0k%3DPfOaCI2QMCE%3DqHcH7mZiGKY%3DFmWfA1%2BJZqg%3DXQyd89pyLf0%3Dhq90qagrm3o%3D%2BxamtBQfH7c%3DIMoy7O5AuFw%3DNrVVidF4PpA%3DXVALCrnirEQ%3DSHBJOpqJ%2BMg%3DrtACT8GLgpM%3DPmF3LjpR4K8%3Dk0EC4Aj2BaE%3DA3LAQEH9pBk%3DG4Rzvly%2BlyI%3DMXJ4tVb%2FXdI%3D; __kla_id=eyIkcmVmZXJyZXIiOnsidHMiOjE2NzQ3NjcyMzMsInZhbHVlIjoiIiwiZmlyc3RfcGFnZSI6Imh0dHBzOi8vd3d3LmUtdmlsbGUuY29tL2VuLyJ9LCIkbGFzdF9yZWZlcnJlciI6eyJ0cyI6MTY3NDc2NzIzMywidmFsdWUiOiIiLCJmaXJzdF9wYWdlIjoiaHR0cHM6Ly93d3cuZS12aWxsZS5jb20vZW4vIn19; _gcl_au=1.1.1799616877.1674767233; _ga=GA1.1.1389450167.1674767233; _gid=GA1.2.2068829632.1674767233; _ga_8HKZ3V3NB6=GS1.1.1674767233.1.0.1674767233.0.0.0; _gat=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 21:07:13 GMT
content-type: application/json; charset=UTF-8
x-frame-options: deny
access-control-allow-origin: *
set-cookie: bfdd85c0d13ecac8e58768e9f67b18a1=pi7uc5sBV8w%3Dl%2Fxoo7cx85A%3DRD4KQifNXoc%3DitX6faWKn30%3DKjMwpbRdCbY%3DfgxmpqlvGGQ%3DFTOgqAMzVJ0%3DYgQP4lff7vo%3D%2Fb9AWA5ddXE%3DjiQW0d59Ask%3D1LSuG7LB2ek%3D%2FjKkPLmkgvA%3D3yv%2BxOOehbk%3Deh9%2FLC9xBqU%3DeLYkst15gv0%3DizvwC7y%2FVcs%3DV0fIRrjlyA8%3Ds5fEQWkdZZs%3DqPri6I%2Bj%2F0k%3DPfOaCI2QMCE%3DqHcH7mZiGKY%3DFmWfA1%2BJZqg%3DXQyd89pyLf0%3DO%2BN8fQaqE7E%3D%2BxamtBQfH7c%3DIMoy7O5AuFw%3DNrVVidF4PpA%3DXVALCrnirEQ%3DSHBJOpqJ%2BMg%3DrtACT8GLgpM%3DPmF3LjpR4K8%3Dk0EC4Aj2BaE%3DwhACMHCw5BA%3DzU8L6E1D3Rw%3DMXJ4tVb%2FXdI%3D; expires=Fri, 26-Jan-2024 21:07:13 GMT; Max-Age=31536000; path=/; domain=.e-ville.com; HttpOnly
strict-transport-security: max-age=15768000
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jXs1Ml7B6RpWjyW6pi692aWnR7J4IiGOTmhhDWOodrwvIjzFxMUVqf2NkdwWBJh0OFcq9Qbzkt7uRBhmS2WETK98l6WVMBBL3fDPxRjDvI87RKLlPUpodp3FTWhH9ExUtA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78fc3789fcd10b45-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
www.e-ville.com/static/favicon.ico
200 OK 0 B URL HTTP/2 www.e-ville.com/static/favicon.ico
IP
GET /static/favicon.ico HTTP/1.1
Host: www.e-ville.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.e-ville.com/en/
Cookie: bfdd85c0d13ecac8e58768e9f67b18a1=pi7uc5sBV8w%3Dl%2Fxoo7cx85A%3DRD4KQifNXoc%3DitX6faWKn30%3DKjMwpbRdCbY%3DfgxmpqlvGGQ%3DFTOgqAMzVJ0%3DYgQP4lff7vo%3D%2Fb9AWA5ddXE%3DjiQW0d59Ask%3D1LSuG7LB2ek%3D%2FjKkPLmkgvA%3D3yv%2BxOOehbk%3Deh9%2FLC9xBqU%3DeLYkst15gv0%3DizvwC7y%2FVcs%3DV0fIRrjlyA8%3Ds5fEQWkdZZs%3DqPri6I%2Bj%2F0k%3DPfOaCI2QMCE%3DqHcH7mZiGKY%3DFmWfA1%2BJZqg%3DXQyd89pyLf0%3Dhq90qagrm3o%3D%2BxamtBQfH7c%3DIMoy7O5AuFw%3DNrVVidF4PpA%3DXVALCrnirEQ%3DSHBJOpqJ%2BMg%3DrtACT8GLgpM%3DPmF3LjpR4K8%3Dk0EC4Aj2BaE%3DA3LAQEH9pBk%3DG4Rzvly%2BlyI%3DMXJ4tVb%2FXdI%3D; __kla_id=eyIkcmVmZXJyZXIiOnsidHMiOjE2NzQ3NjcyMzMsInZhbHVlIjoiIiwiZmlyc3RfcGFnZSI6Imh0dHBzOi8vd3d3LmUtdmlsbGUuY29tL2VuLyJ9LCIkbGFzdF9yZWZlcnJlciI6eyJ0cyI6MTY3NDc2NzIzMywidmFsdWUiOiIiLCJmaXJzdF9wYWdlIjoiaHR0cHM6Ly93d3cuZS12aWxsZS5jb20vZW4vIn19; _gcl_au=1.1.1799616877.1674767233
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 21:07:13 GMT
content-type: image/x-icon
x-powered-by: Express
cache-control: public, max-age=14400
last-modified: Mon, 23 Jan 2023 05:20:56 GMT
etag: W/"18ba4-185dd128333"
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=15768000
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=94R%2B1botapprjbsWTxFW76iExpxxYOjTHmBUp1CyFrcCpMfpKSaQOGSNU8%2B5Ai0vju2hk3q%2FXijZXWhkQASLFRgvbE%2BvtzpT7WA2exzojh%2FnQRPGBvDpyhXBm1sUKhQOkg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78fc37878a4c0b45-OSL
X-Firefox-Spdy: h2
37.48.65.149
52.116.53.155
157.240.205.11
104.18.32.68
167.235.15.78
93.184.220.29
23.36.76.226
192.99.158.241