firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 1b3053fa528e28810f8a2cc9284cc921
cca9eb471d941881a6b9a1793aecb6c281908f6a
a2427848ba35575dda8a82cf88f104978234c05389deebc3fc8279d9075eff45
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Alert, Content-Type, Backoff, Content-Length, Retry-After
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Mon, 26 Sep 2022 22:24:04 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 55BJegoRGY0OrbSn5xTn4mTV0i3OTOOg_sW5m0WmDf1qHi8uYvSxYQ==
Age: 3474
code.blatnet.com/mtm/direct/.eJxtiksOwjAMBe_iZYlillDEWZAxhkTKj9RIkRB3r-kSsZv3Zt7w6hFmQHBA_bEYGnW5S5duI6i2GZHrTfw1kRZRzzVbE-qil0JZrPqjiVmamlMZikFzctRaikwaa8HxfXbj983p9Dzv_dFNOG10gM8KNJw2fw:1obLfh:kEIFT517vhS6xCbWRKr36K2XCM0/2
302 Found 0 B URL HTTP/1.1 code.blatnet.com/mtm/direct/.eJxtiksOwjAMBe_iZYlillDEWZAxhkTKj9RIkRB3r-kSsZv3Zt7w6hFmQHBA_bEYGnW5S5duI6i2GZHrTfw1kRZRzzVbE-qil0JZrPqjiVmamlMZikFzctRaikwaa8HxfXbj983p9Dzv_dFNOG10gM8KNJw2fw:1obLfh:kEIFT517vhS6xCbWRKr36K2XCM0/2
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Malware
GET /mtm/direct/.eJxtiksOwjAMBe_iZYlillDEWZAxhkTKj9RIkRB3r-kSsZv3Zt7w6hFmQHBA_bEYGnW5S5duI6i2GZHrTfw1kRZRzzVbE-qil0JZrPqjiVmamlMZikFzctRaikwaa8HxfXbj983p9Dzv_dFNOG10gM8KNJw2fw:1obLfh:kEIFT517vhS6xCbWRKr36K2XCM0/2 HTTP/1.1
Host: code.blatnet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
server: openresty/1.13.6.1
date: Mon, 26 Sep 2022 23:21:58 GMT
content-type: text/html; charset=utf-8
content-length: 0
location: http://www1.blatnet.com/?tm=1&subid4=1664234518.0238350000&kw=options&KW1=Social%20Media%20Automation%20Marketing%20Software&KW2=Social%20Media%20Automation%20Marketing%20Software&KW3=Make%20Money%20From%20Home&KW4=Make%20Money%20From%20Home&KW5=Dedicated%20Gaming%20Servers&KW6=Best%20Mortgage%20Refinancing%20Rates&KW7=Lowest%20Car%20Insurance%20Rates&KW8=B2B%20Travel%20Booking%20System&KW9=Elite%20Dating%20Service&searchbox=0&backfill=0
x-mtm-path: 0
vary: Accept-Language
content-language: en
set-cookie: mtm_delivered=WyJibGF0bmV0LmNvbSIsImh0dHA6Ly93d3cxLmJsYXRuZXQuY29tLz90bT0xJnN1YmlkND0xNjY0MjM0NTE4LjAyMzgzNTAwMDAma3c9b3B0aW9ucyZLVzE9U29jaWFsJTIwTWVkaWElMjBBdXRvbWF0aW9uJTIwTWFya2V0aW5nJTIwU29mdHdhcmUmS1cyPVNvY2lhbCUyME1lZGlhJTIwQXV0b21hdGlvbiUyME1hcmtldGluZyUyMFNvZnR3YXJlJktXMz1NYWtlJTIwTW9uZXklMjBGcm9tJTIwSG9tZSZLVzQ9TWFrZSUyME1vbmV5JTIwRnJvbSUyMEhvbWUmS1c1PURlZGljYXRlZCUyMEdhbWluZyUyMFNlcnZlcnMmS1c2PUJlc3QlMjBNb3J0Z2FnZSUyMFJlZmluYW5jaW5nJTIwUmF0ZXMmS1c3PUxvd2VzdCUyMENhciUyMEluc3VyYW5jZSUyMFJhdGVzJktXOD1CMkIlMjBUcmF2ZWwlMjBCb29raW5nJTIwU3lzdGVtJktXOT1FbGl0ZSUyMERhdGluZyUyMFNlcnZpY2Umc2VhcmNoYm94PTAmYmFja2ZpbGw9MCIsMSwiMjAyMi0wOS0yNiAyMzoyMTo1OCIsMSwiMTY2NDIzNDUxOC4wMjM4MzUwMDAwIiwzNTUsbnVsbCxudWxsXQ:1ocxQE:KxxxQ6m2y_GXo-ZQNcWfUIQCJ_Q; expires=Tue, 27-Sep-2022 00:21:58 GMT; Max-Age=3600; Path=/
connection: close
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d2560f62890e75b8de444fed96c22f52
334ce0c48e606ee029f31eeb1463af87b1024bb9
4397e6b45b5822fbab9b83abe0b96ee70efba7cd2160b51936159865ede5fdb1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4397E6B45B5822FBAB9B83ABE0B96EE70EFBA7CD2160B51936159865EDE5FDB1"
Last-Modified: Sun, 25 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8336
Expires: Tue, 27 Sep 2022 01:40:54 GMT
Date: Mon, 26 Sep 2022 23:21:58 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP
File type PEM certificate\012- , ASCII text
Hash 6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Mon, 26 Sep 2022 04:35:16 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 057fdebf738f5915bf38a78949190758.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: k4vE5gN15HGNizEDK1boThGREI-vasCK2XeJZ_rrdg6nwZB2fI43bw==
age: 67603
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 26 Sep 2022 23:21:58 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Mon, 26 Sep 2022 23:10:46 GMT
Cache-Control: max-age=3600, max-age=3600
Expires: Mon, 26 Sep 2022 23:54:13 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 c9f2a4d2bcd548d1a3cbe1617a22f216.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: mw_n7knR8aZqeGKziPl6CVbzkxFgJjajzfHR2RyDQc-X-BROgCN9zQ==
Age: 672
ocsp.digicert.com/
200 OK 471 B IP
Hash 5adb7eb1d103eadeeafac36e663ffdd3
23b784388dd634fa736cd60aed71570661e73d02
5c95ba48bc342887b4f7ef697bd4def50f6f2f472f654169179e5ac44df883d9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4270
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 23:21:59 GMT
Last-Modified: Mon, 26 Sep 2022 22:10:49 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 471
www1.blatnet.com/?tm=1&subid4=1664234518.0238350000&kw=options&KW1=Social%20Media%20Automation%20Marketing%20Software&KW2=Social%20Media%20Automation%20Marketing%20Software&KW3=Make%20Money%20From%20Home&KW4=Make%20Money%20From%20Home&KW5=Dedicated%20Gaming%20Servers&KW6=Best%20Mortgage%20Refinancing%20Rates&KW7=Lowest%20Car%20Insurance%20Rates&KW8=B2B%20Travel%20Booking%20System&KW9=Elite%20Dating%20Service&searchbox=0&backfill=0
200 OK 2.5 kB URL HTTP/1.1 www1.blatnet.com/?tm=1&subid4=1664234518.0238350000&kw=options&KW1=Social%20Media%20Automation%20Marketing%20Software&KW2=Social%20Media%20Automation%20Marketing%20Software&KW3=Make%20Money%20From%20Home&KW4=Make%20Money%20From%20Home&KW5=Dedicated%20Gaming%20Servers&KW6=Best%20Mortgage%20Refinancing%20Rates&KW7=Lowest%20Car%20Insurance%20Rates&KW8=B2B%20Travel%20Booking%20System&KW9=Elite%20Dating%20Service&searchbox=0&backfill=0
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2178)
Hash 4bc92f1b991a3f1367fe19e6ac182e7e
7d6d13320a86ef59605051ceca0abaa38e18df49
960409e0049aa5f89c9b8ef83bc5db6886bfe0d570f1392370272b4f360dc0da
GET /?tm=1&subid4=1664234518.0238350000&kw=options&KW1=Social%20Media%20Automation%20Marketing%20Software&KW2=Social%20Media%20Automation%20Marketing%20Software&KW3=Make%20Money%20From%20Home&KW4=Make%20Money%20From%20Home&KW5=Dedicated%20Gaming%20Servers&KW6=Best%20Mortgage%20Refinancing%20Rates&KW7=Lowest%20Car%20Insurance%20Rates&KW8=B2B%20Travel%20Booking%20System&KW9=Elite%20Dating%20Service&searchbox=0&backfill=0 HTTP/1.1
Host: www1.blatnet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 23:21:59 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Vary: Accept-Encoding
X-Redirect: zeropark_zeroclick
X-Template: tpl_CleanPeppermintBlack_twoclick
X-Language: norwegian
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
Content-Encoding: gzip
d38psrni17bvxu.cloudfront.net/scripts/js3.js
200 OK 1.1 kB URL HTTP/1.1 d38psrni17bvxu.cloudfront.net/scripts/js3.js
IP
File type ASCII text, with very long lines (506)
Hash 64b79b43df8fbf2c5d082964b9116a68
dc3c763519baf0f4c32bb60bfc429651a491ea01
c57e9feec209e3ea5eb1d75a1ba6fa277242a3df250055be8446052b51e58637
GET /scripts/js3.js HTTP/1.1
Host: d38psrni17bvxu.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www1.blatnet.com/
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 1134
Connection: keep-alive
Server: nginx
Date: Mon, 26 Sep 2022 09:14:29 GMT
Last-Modified: Tue, 17 Aug 2021 09:17:22 GMT
Accept-Ranges: bytes
ETag: "611b7ea2-46e"
X-Cache: Hit from cloudfront
Via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: YPfyJ9ed-gqL6B86DMffmyb8DxNzDd6vyNXwFRglTiCovAU7OioB5Q==
Age: 50850
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 2dJn+CI0cULwUlLpAcefDA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: ubpFcqYkDEEU57lmQT6eBukBp/0=
www1.blatnet.com/track.php?domain=blatnet.com&toggle=browserjs&uid=MTY2NDIzNDUxOC42MTA4OjJlMzc0MjU0ZThkZmM1OGM5N2ZkODNlODVkNWUyODM3NDg2ZWVmMmUzNmE5NmJhNzA4M2ZjYjZiMThlODRiZjE6NjMzMjM0MTY5NTFmNA%3D%3D
200 OK 20 B URL HTTP/1.1 www1.blatnet.com/track.php?domain=blatnet.com&toggle=browserjs&uid=MTY2NDIzNDUxOC42MTA4OjJlMzc0MjU0ZThkZmM1OGM5N2ZkODNlODVkNWUyODM3NDg2ZWVmMmUzNmE5NmJhNzA4M2ZjYjZiMThlODRiZjE6NjMzMjM0MTY5NTFmNA%3D%3D
IP
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /track.php?domain=blatnet.com&toggle=browserjs&uid=MTY2NDIzNDUxOC42MTA4OjJlMzc0MjU0ZThkZmM1OGM5N2ZkODNlODVkNWUyODM3NDg2ZWVmMmUzNmE5NmJhNzA4M2ZjYjZiMThlODRiZjE6NjMzMjM0MTY5NTFmNA%3D%3D HTTP/1.1
Host: www1.blatnet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www1.blatnet.com/?tm=1&subid4=1664234518.0238350000&kw=options&KW1=Social%20Media%20Automation%20Marketing%20Software&KW2=Social%20Media%20Automation%20Marketing%20Software&KW3=Make%20Money%20From%20Home&KW4=Make%20Money%20From%20Home&KW5=Dedicated%20Gaming%20Servers&KW6=Best%20Mortgage%20Refinancing%20Rates&KW7=Lowest%20Car%20Insurance%20Rates&KW8=B2B%20Travel%20Booking%20System&KW9=Elite%20Dating%20Service&searchbox=0&backfill=0
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 23:21:59 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Vary: Accept-Encoding
X-Custom-Track: browserjs
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
Access-Control-Allow-Origin: *
Content-Encoding: gzip
www1.blatnet.com/ls.php
201 Created 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Malware
POST /ls.php HTTP/1.1
Host: www1.blatnet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Content-Length: 2130
Origin: http://www1.blatnet.com
Connection: keep-alive
Referer: http://www1.blatnet.com/?tm=1&subid4=1664234518.0238350000&kw=options&KW1=Social%20Media%20Automation%20Marketing%20Software&KW2=Social%20Media%20Automation%20Marketing%20Software&KW3=Make%20Money%20From%20Home&KW4=Make%20Money%20From%20Home&KW5=Dedicated%20Gaming%20Servers&KW6=Best%20Mortgage%20Refinancing%20Rates&KW7=Lowest%20Car%20Insurance%20Rates&KW8=B2B%20Travel%20Booking%20System&KW9=Elite%20Dating%20Service&searchbox=0&backfill=0
HTTP/1.1 201 Created
Date: Mon, 26 Sep 2022 23:22:00 GMT
Content-Type: text/javascript;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
X-Log-Success: 63323417f3632618d5778573
Charset: utf-8
Access-Control-Allow-Origin: http://www1.blatnet.com
Access-Control-Allow-Methods: POST, OPTIONS
Access-Control-Max-Age: 86400
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_C9zXq9UlCGeB5oNL2Vouk2yf9z7nwsAJwWdpPqfBuH5+DZDmegPMwTtz1A2fRm60hK5FusETYWIELLuUczWamA==
www1.blatnet.com/favicon.ico
200 OK 0 B URL HTTP/1.1 www1.blatnet.com/favicon.ico
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: www1.blatnet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www1.blatnet.com/?tm=1&subid4=1664234518.0238350000&kw=options&KW1=Social%20Media%20Automation%20Marketing%20Software&KW2=Social%20Media%20Automation%20Marketing%20Software&KW3=Make%20Money%20From%20Home&KW4=Make%20Money%20From%20Home&KW5=Dedicated%20Gaming%20Servers&KW6=Best%20Mortgage%20Refinancing%20Rates&KW7=Lowest%20Car%20Insurance%20Rates&KW8=B2B%20Travel%20Booking%20System&KW9=Elite%20Dating%20Service&searchbox=0&backfill=0
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 23:22:00 GMT
Content-Type: image/x-icon
Content-Length: 0
Connection: keep-alive
Server: nginx
Last-Modified: Tue, 12 May 2020 14:25:52 GMT
ETag: "5ebab1f0-0"
Accept-Ranges: bytes
www1.blatnet.com/track.php?click=8bc5311fea51f5d88ad90580a49f43a22d8f5165&domain=blatnet.com&uid=MTY2NDIzNDUxOC42MTA4OjJlMzc0MjU0ZThkZmM1OGM5N2ZkODNlODVkNWUyODM3NDg2ZWVmMmUzNmE5NmJhNzA4M2ZjYjZiMThlODRiZjE6NjMzMjM0MTY5NTFmNA%3D%3D&ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTF8fHx8fHw2MzMyMzQxNjk1MWQ5fHx8MTY2NDIzNDUxOS4wMDU3fDJmMmExODJmODZmYzU3ZDNiYTgxMjc1ZTllOGEwYWE5YThlZjVlOTR8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxkYWM1NzIxYWJjYzgyMTc3MmE0NDljZTAwYTBhNDNiZjBlOTMxZDlifDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MA%3D%3D&kw=&search=&pcat=&rxid=&bucket=&clientID=&adtest=off
200 OK 20 B URL HTTP/1.1 www1.blatnet.com/track.php?click=8bc5311fea51f5d88ad90580a49f43a22d8f5165&domain=blatnet.com&uid=MTY2NDIzNDUxOC42MTA4OjJlMzc0MjU0ZThkZmM1OGM5N2ZkODNlODVkNWUyODM3NDg2ZWVmMmUzNmE5NmJhNzA4M2ZjYjZiMThlODRiZjE6NjMzMjM0MTY5NTFmNA%3D%3D&ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTF8fHx8fHw2MzMyMzQxNjk1MWQ5fHx8MTY2NDIzNDUxOS4wMDU3fDJmMmExODJmODZmYzU3ZDNiYTgxMjc1ZTllOGEwYWE5YThlZjVlOTR8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxkYWM1NzIxYWJjYzgyMTc3MmE0NDljZTAwYTBhNDNiZjBlOTMxZDlifDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MA%3D%3D&kw=&search=&pcat=&rxid=&bucket=&clientID=&adtest=off
IP
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /track.php?click=8bc5311fea51f5d88ad90580a49f43a22d8f5165&domain=blatnet.com&uid=MTY2NDIzNDUxOC42MTA4OjJlMzc0MjU0ZThkZmM1OGM5N2ZkODNlODVkNWUyODM3NDg2ZWVmMmUzNmE5NmJhNzA4M2ZjYjZiMThlODRiZjE6NjMzMjM0MTY5NTFmNA%3D%3D&ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTF8fHx8fHw2MzMyMzQxNjk1MWQ5fHx8MTY2NDIzNDUxOS4wMDU3fDJmMmExODJmODZmYzU3ZDNiYTgxMjc1ZTllOGEwYWE5YThlZjVlOTR8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxkYWM1NzIxYWJjYzgyMTc3MmE0NDljZTAwYTBhNDNiZjBlOTMxZDlifDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MA%3D%3D&kw=&search=&pcat=&rxid=&bucket=&clientID=&adtest=off HTTP/1.1
Host: www1.blatnet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www1.blatnet.com/?tm=1&subid4=1664234518.0238350000&kw=options&KW1=Social%20Media%20Automation%20Marketing%20Software&KW2=Social%20Media%20Automation%20Marketing%20Software&KW3=Make%20Money%20From%20Home&KW4=Make%20Money%20From%20Home&KW5=Dedicated%20Gaming%20Servers&KW6=Best%20Mortgage%20Refinancing%20Rates&KW7=Lowest%20Car%20Insurance%20Rates&KW8=B2B%20Travel%20Booking%20System&KW9=Elite%20Dating%20Service&searchbox=0&backfill=0
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 23:22:00 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Vary: Accept-Encoding
X-View-Match: true
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
Access-Control-Allow-Origin: *
Content-Encoding: gzip
irene-eux.com/zcvisitor/04a64960-3df2-11ed-9a54-0ad06c32f495/85aefdc2-9ed0-48aa-922d-60f9f9fc0f2d?campaignid=04c235d3-3df2-11ed-9a54-0ad06c32f495
200 996 B URL HTTP/1.1 irene-eux.com/zcvisitor/04a64960-3df2-11ed-9a54-0ad06c32f495/85aefdc2-9ed0-48aa-922d-60f9f9fc0f2d?campaignid=04c235d3-3df2-11ed-9a54-0ad06c32f495
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash f2462c4f2987fddc97439b5d114b2c32
f0b7f361e3c6838c05d643980627170c06dc7aee
5d4641a0c57b60e465f4587870cac18a2db62ce1122c99abc712ca408e973402
GET /zcvisitor/04a64960-3df2-11ed-9a54-0ad06c32f495/85aefdc2-9ed0-48aa-922d-60f9f9fc0f2d?campaignid=04c235d3-3df2-11ed-9a54-0ad06c32f495 HTTP/1.1
Host: irene-eux.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www1.blatnet.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200
Date: Mon, 26 Sep 2022 23:22:00 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Headers: X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag
Server: DWQGElkQ
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5a6097201b7da81f6e9a6d99a7353a0c
d4240fe80c76013b9f7b6fd09963aa47151b8d6a
519e9b47ddfa1e1fe047f4dc7df88e3011817f88144fcc3853a7984a781c2070
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "519E9B47DDFA1E1FE047F4DC7DF88E3011817F88144FCC3853A7984A781C2070"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10857
Expires: Tue, 27 Sep 2022 02:22:57 GMT
Date: Mon, 26 Sep 2022 23:22:00 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5a6097201b7da81f6e9a6d99a7353a0c
d4240fe80c76013b9f7b6fd09963aa47151b8d6a
519e9b47ddfa1e1fe047f4dc7df88e3011817f88144fcc3853a7984a781c2070
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "519E9B47DDFA1E1FE047F4DC7DF88E3011817F88144FCC3853A7984A781C2070"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10857
Expires: Tue, 27 Sep 2022 02:22:57 GMT
Date: Mon, 26 Sep 2022 23:22:00 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8342bc11-d95e-4085-a7ca-d421aba94a91.jpeg
200 OK 4.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8342bc11-d95e-4085-a7ca-d421aba94a91.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash efaaa002eb6251769ea6dbf306ced3a1
9f99fa947a603fd6b10ff149e379cd04ad83d27a
238e0ca1aa29223416c34ef2dfcc6570c00e27a98991d91efc16e9bc4083c197
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8342bc11-d95e-4085-a7ca-d421aba94a91.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4573
x-amzn-requestid: ff35a66a-caf2-4ff4-b850-01a584fc2aa0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yv1B8FzLIAMFSPw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63296872-5b4a410a2827baf5598d58e7;Sampled=0
x-amzn-remapped-date: Tue, 20 Sep 2022 07:14:58 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: NFjYOqhUeb3yyjMNWpoBNq_xcsX3wXvc3-rqJt4cGbJXY9Sxr5KpDA==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 5954c6394458ffb44c970b3819d7ff2a.cloudfront.net (CloudFront), 1.1 google
date: Mon, 26 Sep 2022 15:29:19 GMT
age: 28361
etag: "9f99fa947a603fd6b10ff149e379cd04ad83d27a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff092f2d0-abd6-40d2-ad33-9fb0ded1ec0a.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff092f2d0-abd6-40d2-ad33-9fb0ded1ec0a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 91d97447a6a35813e57d942f685544c4
3b660de9902fbfcf2efb477f40480b08545ebc5f
08c1ea19c4918273da12c9a2e962edf4463c486a30f60c8a279a45e5edcf972a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff092f2d0-abd6-40d2-ad33-9fb0ded1ec0a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11881
x-amzn-requestid: 4562e550-9c0f-407b-be2a-3c5d8901d444
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y2apSEPuIAMF5TA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632c0b08-5c5f052f146d25a7190412d1;Sampled=0
x-amzn-remapped-date: Thu, 22 Sep 2022 07:13:12 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: EAiLlHN2h6EPX0idrlQG4TIyGBMt_In0_Tpy79foal99j4xoRasO-A==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Mon, 26 Sep 2022 22:23:49 GMT
age: 3491
etag: "3b660de9902fbfcf2efb477f40480b08545ebc5f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4a2c481a-abce-43aa-89a3-95cd7559102c.jpeg
200 OK 6.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4a2c481a-abce-43aa-89a3-95cd7559102c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b1f571f5fdf5233ffa70132a4504d4fe
1b5f002272083d5e19b5bd18d503f49635b771e5
4563ffe63e1d043c159648a72d9f4c59a3b0fe40379254848a52c11a4f1a6511
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4a2c481a-abce-43aa-89a3-95cd7559102c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6518
x-amzn-requestid: d4a26d13-5318-4491-8aec-4c5c738d3254
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y_HlsHzmoAMFl3Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632f8624-1baed38e2c89933e66870f2f;Sampled=0
x-amzn-remapped-date: Sat, 24 Sep 2022 22:35:16 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: FoSurbU0rYpw1-0snI2b3EC_t2HkfMZpoYnKX6KqFosBv23z4BJCLg==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 32d624dbeb2a8b7f24dbe49007e37c90.cloudfront.net (CloudFront), 1.1 google
date: Mon, 26 Sep 2022 13:32:27 GMT
age: 35373
etag: "1b5f002272083d5e19b5bd18d503f49635b771e5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F63a7aeb3-999a-4e57-9255-c40e0376d08e.jpeg
200 OK 5.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F63a7aeb3-999a-4e57-9255-c40e0376d08e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 46e31aa06b8e86a9a5f9ba1cc3feca08
75df3341e30281fcbf78c7074980356fdf0be8e2
d1fd4f81b7e0f43de960f0ee024d9e87bcb395f032a4ab0360e3829d1ec8a42b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F63a7aeb3-999a-4e57-9255-c40e0376d08e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5319
x-amzn-requestid: d4c13fa8-eb03-4abf-9516-b74eac712b87
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZFkreHL5IAMFcOw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63321b16-487923453bd27d6a744b5a31;Sampled=0
x-amzn-remapped-date: Mon, 26 Sep 2022 21:35:18 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: gGfaq_dx7NIHH43-iNn0Ah61HRLT8H3NxPGVoDvkKgBgy8zJWYwRuw==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google
date: Mon, 26 Sep 2022 21:49:18 GMT
age: 5562
etag: "75df3341e30281fcbf78c7074980356fdf0be8e2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F35b718e0-3d37-4447-a38f-12fa37aeae57.jpeg
200 OK 6.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F35b718e0-3d37-4447-a38f-12fa37aeae57.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e88b78ede0e4583585d6bb805fb39470
edff303440c5972381295b4b2602bd3f77f6702a
ce55a1ff5c71ec43884b74a08cd32ef75cb0632a91f3fe8b150f5ead499375a4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F35b718e0-3d37-4447-a38f-12fa37aeae57.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6487
x-amzn-requestid: cd11b94b-24be-4e6d-bce3-a480b2c1cc23
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZDWDQEYAIAMFetw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633136e1-5fcb76b5408fdfa20ec55dd8;Sampled=0
x-amzn-remapped-date: Mon, 26 Sep 2022 05:21:37 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: GcEH02ZlJM-8wUvNf7K7rK7f1cs6_m4i9UYUNxXUGzcDTEz74JH3cA==
via: 1.1 79880188a81becf1687ba18c0e064230.cloudfront.net (CloudFront), 1.1 ddaf46a95abcfc80e8eae76235e2127c.cloudfront.net (CloudFront), 1.1 google
date: Mon, 26 Sep 2022 21:59:28 GMT
age: 4952
etag: "edff303440c5972381295b4b2602bd3f77f6702a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F14ab4d12-a7de-4708-a657-df4600198640.jpeg
200 OK 8.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F14ab4d12-a7de-4708-a657-df4600198640.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash fa70ece15044b7318cb11ae5e37a64e7
04a0665f771562c3e56ac3542abe5bd3c4c1a6b5
8c974283b2ba0058114404af3e4818daa8cc56f270cb8a46f5f2f54de9d2f0e1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F14ab4d12-a7de-4708-a657-df4600198640.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8255
x-amzn-requestid: 3bf29c4a-406a-4645-ad18-44cd6f05d457
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y4VnFEV-IAMFQMQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632ccfc6-3eaa337d1e1c1b6d5e951419;Sampled=0
x-amzn-remapped-date: Thu, 22 Sep 2022 21:12:38 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: qkOlqM6tJ90H9572YLE0J-s79edBSceM5hLbJtyyuH86xdW8juoktA==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Mon, 26 Sep 2022 13:28:31 GMT
age: 35609
etag: "04a0665f771562c3e56ac3542abe5bd3c4c1a6b5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
irene-eux.com/zcredirect?visitid=04a64960-3df2-11ed-9a54-0ad06c32f495&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false
200 5.6 kB URL HTTP/1.1 irene-eux.com/zcredirect?visitid=04a64960-3df2-11ed-9a54-0ad06c32f495&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2774)
Hash e5f579cb71d712675ddf78e3a9728678
c4c1e0863d9183c2d57298767a35def0fa8d0ad3
209a917f6fd3696a804ae0b5a74de8f43fab3ce3f6a3b11b9b17c212117bf364
GET /zcredirect?visitid=04a64960-3df2-11ed-9a54-0ad06c32f495&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false HTTP/1.1
Host: irene-eux.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://irene-eux.com/zcvisitor/04a64960-3df2-11ed-9a54-0ad06c32f495/85aefdc2-9ed0-48aa-922d-60f9f9fc0f2d?campaignid=04c235d3-3df2-11ed-9a54-0ad06c32f495
Upgrade-Insecure-Requests: 1
HTTP/1.1 200
Date: Mon, 26 Sep 2022 23:22:00 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Headers: X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag
redirected: JS
Server: EWIIPIJQ
irene-eux.com/favicon.ico
404 653 B URL HTTP/1.1 irene-eux.com/favicon.ico
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (649), with no line terminators
Hash ba2732b1b2fa2626ffaa15f62f9e7d66
203d4e7fbb1d80449d6e4e1f3ae7a9bf8625debe
879861cb72fe9fbb476dab246021c4c83b4066327de2529e05ec54d3afb0a1c8
GET /favicon.ico HTTP/1.1
Host: irene-eux.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://irene-eux.com/zcredirect?visitid=04a64960-3df2-11ed-9a54-0ad06c32f495&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false
HTTP/1.1 404
Date: Mon, 26 Sep 2022 23:22:00 GMT
Content-Type: text/html;charset=utf-8
Content-Length: 653
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Content-Language: en
Server: vNmWuzQA
ocsp.sectigo.com/
200 OK 471 B IP
Hash 21c8643db6d75b1bc9c09f2ca6881ac6
ff767bac23d4d6318f00f19a99e8a6d17402e864
7a680450a7a73886bb65c29fc23b1a75b652274ad11d0f5cb5055a549239161d
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 23:22:01 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 26 Sep 2022 19:20:06 GMT
Expires: Mon, 03 Oct 2022 19:20:05 GMT
Etag: "ff767bac23d4d6318f00f19a99e8a6d17402e864"
Cache-Control: max-age=589684,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 750fbd3b0d36b4f3-OSL
mybetterck.com/aS/feedclick?s=HFz5zNIIs96fzq49jFkHXa3dDnCBF-q5XQaiCg3BLRsq7qVxrtzI4f-5cgJn_QpsVVH-ImtJpPaG_Nh80WMmwqfTqqBykvhwncn2dNnoElLXQ3MeghEXHDNiE03EdAwuxlOmzgR5fh3nQoQZVtH1UcHY6z5T2K7NFT_4ZRcycYgOzeSdXSQud8gLQ0QuNbeE477-30uHldpRwZuOjIkdGQ3ZqPEVtGdhR0g0Fu54zdp3jl34H6bTOvweej2OYfbpZfLxNVCbg942K0peqd8FFQICSvb0aViCYkygyzx7GWGNTv62JvlyeFDW2P-IrbRGil7u4G-TJbn3bXEt4FBmx6q-RAik_3-YokTKWelooFpYrPorG4OeRDlQuMY8BwKt8dmTRIccUC86SIOVCjzwb8zGGRJBxkRpRGSftzPkqO1NL6z7f5cM6OhvyjcmjG53GV7Eq4R2UXOimCU5BsoTcxNdQpsz-feWqjIOCtV4zKdUXmxiuvs0twUjSZsZ83aulmzrDJhD1NuQ-dAMtH57wESEAsZ5HmuxvrZ0gnhdpdwlhqV4nUq27fEk_fcsEK-euM9_ncJ4VitDqyt3rp5mcfK387xIbYvYC44mkQOyJgX3ndGeu9Eqcx-ltrDzdXzQ_nU_Jf-gboTyc76S3wmcyIUDyc1PjnZvz8jpNNhJM7pmLbGR1odK0bLfVD4olm6vw2WprznBNgSt92sHrm7QM9vkQcHuMzxSLcsAjzTFISdN5aCsoLcLHIoEiDuXlnbGvVe6h4YOt9aDdoN5zHhuEk9k027jPge4dx_abwjKO3h7bCA9tyo6NUk-anHOSVHpcoY9H07mj5TeQCeB0as85XGIA78PqZzCZ6LJ8I53hXjsidmY9Wb-mtny5MrDAEGR89FCT3-GljY64LfFQzLfEHC2dtPoFGlH0wWa0Zf2ng8E0gs-spia3VNYXTzqn5cXKuHKyVcnJyXGJBq_VkJ5SZGMcfMktqLK5nYYmWC-dSK4XDhVkiZG03CGn5-7I0_6ur7CDJDx-J1WUVCLchTe84dgUauFZtpYv3Cl3Ym9GZTucNIn9iCdDmp3V8xSYEz2BUoldPa2Pq1-UQeMUbTTzJSG8NTuwxdQMs-BeYffyVzyXDGJQBJv3UDa6pTc7Ss3MNt1nRAA_-6xb4PR2m6lpnQYsgjJg6o2YpQfQV2YEYFYIZZESTM-xf48w96LcFp2EfVXsHqV_68BAhLVvP-fhphExsYb_nDHVtmAfG-yw3VtuVLZaSBDef3PQndp3jV3roKPRHPKGqAF13JZzaanMYfSM1F2qNREGTTI3uDdlhO5CRzjYfsEe6hAPyq5iEO614GIdUr60t8Ee8MLHUqzXXgjnMpINLrz5jqVrR9DaGPO0C-pddX3MlcNQrkqUrC4TZNkAppK0EJn5v-6iFqnXQRvdYXamHqge_aujXnkwKLwf7BIrlbhXV8wwPpTOdHmtPy-8LGf0jJPxg-GpdikQN0W32RAYsR_D6px9SLBPMb1pRC4ZePKCzg1YXv_NEJ85HS5naRIDcmTdBxjocyPTkREE8yvJA41492d0DaYmff6WxfnIhSwVLOjzlr3gkqejqx-HleIDoZDcBh7XJO-opBqpyIGVr57h8LJl86Nw__tl7RCsLQUIG2z3LTvwB1eu3yT36a6bn5Ksyw5VI6sUh6LB51TyPTJbBKAS1-BEyHvatwJwcWaQnwfHbwKh0Oz2uKkgIrXK7hq3HfKopIPiJpmSuYMQyDi7mYdKiWU3z-dzfSW-8yL3uJ2xpgaiBQs7DviM3YeT2revoCiFtu-XKBm8iVBm87BEJZRj4sC8OPzY9V_k44LoQN8-iDLKN_v7AAUAmvbFJ91ATklqgk7VDU9pAicGcprKWLhbo1iIvDSeGckCSGYRso8oKQdpnWV3eXc2o6wRjcRtJaM4LgOLTgB6jUJztpfPd4iJ3id7YNcfx0th3Q4kUVNqn3CfcAUDuD9Qggmfxsk5DZlde9o47C7fuySQgzWPYDo9h6qwHoI3n7b3dGmJZT5yzNLywV1YdgW9TLOUAM_EtuGym49o2SQ-ipEdTXiFGXdhybwjxZ9xWOC1Jf1P5C4lQoA8VJpUiC4_gfC45Pq3l6cH6HPHJFywbikzADy0KoGQoJEL4IcAot428eM_Qk3uBEp_TCfqqtj-i47JztOJ2NsPUT1mXv4IBsleocXy1P1Y6jjI0IVEVwBdFkC6Vd3HIPdS4tF4HRzGpNpYR9e1qo9surEdufrdBxEtAiFdwluMx5Xv341cCdgLh21r3xtQxPt4cDHiUtmKks78_mih26Ce_wl-kGMnp5jlJ17Ya3qQvnObIvzrhQios4RPoG3ROCSiU27nSTn9kBjtRqIy2nhQEzqRyXFYl9Z07-TRSZdjjOhPO0JUCFkKVKurWj8zgFHSiUYxGccxqzIDtmY8fKoQcQBXgpeS8q-2JwkxLRAEFzWncjqhMSL-uYWuOfrdBxEtAiF70jj8WMVFgjXFtKff5T8EscNhI2TqIIby0yHsX6kueGRZMnRZkKc2VstRsLqDsMBrs3hai6LVXKh9t8LDpWOQ4wAyHXdf8ZlR49jG8aI1jauB0_jGPKvYheZt55Nzvj0SNtQvnzG8r9DVaNUFXi1IaE-yU1YiVPXMzYC3Q2LvYM1PaQInBnKa-76AwuK8-pP
302 Found 0 B URL HTTP/2 mybetterck.com/aS/feedclick?s=HFz5zNIIs96fzq49jFkHXa3dDnCBF-q5XQaiCg3BLRsq7qVxrtzI4f-5cgJn_QpsVVH-ImtJpPaG_Nh80WMmwqfTqqBykvhwncn2dNnoElLXQ3MeghEXHDNiE03EdAwuxlOmzgR5fh3nQoQZVtH1UcHY6z5T2K7NFT_4ZRcycYgOzeSdXSQud8gLQ0QuNbeE477-30uHldpRwZuOjIkdGQ3ZqPEVtGdhR0g0Fu54zdp3jl34H6bTOvweej2OYfbpZfLxNVCbg942K0peqd8FFQICSvb0aViCYkygyzx7GWGNTv62JvlyeFDW2P-IrbRGil7u4G-TJbn3bXEt4FBmx6q-RAik_3-YokTKWelooFpYrPorG4OeRDlQuMY8BwKt8dmTRIccUC86SIOVCjzwb8zGGRJBxkRpRGSftzPkqO1NL6z7f5cM6OhvyjcmjG53GV7Eq4R2UXOimCU5BsoTcxNdQpsz-feWqjIOCtV4zKdUXmxiuvs0twUjSZsZ83aulmzrDJhD1NuQ-dAMtH57wESEAsZ5HmuxvrZ0gnhdpdwlhqV4nUq27fEk_fcsEK-euM9_ncJ4VitDqyt3rp5mcfK387xIbYvYC44mkQOyJgX3ndGeu9Eqcx-ltrDzdXzQ_nU_Jf-gboTyc76S3wmcyIUDyc1PjnZvz8jpNNhJM7pmLbGR1odK0bLfVD4olm6vw2WprznBNgSt92sHrm7QM9vkQcHuMzxSLcsAjzTFISdN5aCsoLcLHIoEiDuXlnbGvVe6h4YOt9aDdoN5zHhuEk9k027jPge4dx_abwjKO3h7bCA9tyo6NUk-anHOSVHpcoY9H07mj5TeQCeB0as85XGIA78PqZzCZ6LJ8I53hXjsidmY9Wb-mtny5MrDAEGR89FCT3-GljY64LfFQzLfEHC2dtPoFGlH0wWa0Zf2ng8E0gs-spia3VNYXTzqn5cXKuHKyVcnJyXGJBq_VkJ5SZGMcfMktqLK5nYYmWC-dSK4XDhVkiZG03CGn5-7I0_6ur7CDJDx-J1WUVCLchTe84dgUauFZtpYv3Cl3Ym9GZTucNIn9iCdDmp3V8xSYEz2BUoldPa2Pq1-UQeMUbTTzJSG8NTuwxdQMs-BeYffyVzyXDGJQBJv3UDa6pTc7Ss3MNt1nRAA_-6xb4PR2m6lpnQYsgjJg6o2YpQfQV2YEYFYIZZESTM-xf48w96LcFp2EfVXsHqV_68BAhLVvP-fhphExsYb_nDHVtmAfG-yw3VtuVLZaSBDef3PQndp3jV3roKPRHPKGqAF13JZzaanMYfSM1F2qNREGTTI3uDdlhO5CRzjYfsEe6hAPyq5iEO614GIdUr60t8Ee8MLHUqzXXgjnMpINLrz5jqVrR9DaGPO0C-pddX3MlcNQrkqUrC4TZNkAppK0EJn5v-6iFqnXQRvdYXamHqge_aujXnkwKLwf7BIrlbhXV8wwPpTOdHmtPy-8LGf0jJPxg-GpdikQN0W32RAYsR_D6px9SLBPMb1pRC4ZePKCzg1YXv_NEJ85HS5naRIDcmTdBxjocyPTkREE8yvJA41492d0DaYmff6WxfnIhSwVLOjzlr3gkqejqx-HleIDoZDcBh7XJO-opBqpyIGVr57h8LJl86Nw__tl7RCsLQUIG2z3LTvwB1eu3yT36a6bn5Ksyw5VI6sUh6LB51TyPTJbBKAS1-BEyHvatwJwcWaQnwfHbwKh0Oz2uKkgIrXK7hq3HfKopIPiJpmSuYMQyDi7mYdKiWU3z-dzfSW-8yL3uJ2xpgaiBQs7DviM3YeT2revoCiFtu-XKBm8iVBm87BEJZRj4sC8OPzY9V_k44LoQN8-iDLKN_v7AAUAmvbFJ91ATklqgk7VDU9pAicGcprKWLhbo1iIvDSeGckCSGYRso8oKQdpnWV3eXc2o6wRjcRtJaM4LgOLTgB6jUJztpfPd4iJ3id7YNcfx0th3Q4kUVNqn3CfcAUDuD9Qggmfxsk5DZlde9o47C7fuySQgzWPYDo9h6qwHoI3n7b3dGmJZT5yzNLywV1YdgW9TLOUAM_EtuGym49o2SQ-ipEdTXiFGXdhybwjxZ9xWOC1Jf1P5C4lQoA8VJpUiC4_gfC45Pq3l6cH6HPHJFywbikzADy0KoGQoJEL4IcAot428eM_Qk3uBEp_TCfqqtj-i47JztOJ2NsPUT1mXv4IBsleocXy1P1Y6jjI0IVEVwBdFkC6Vd3HIPdS4tF4HRzGpNpYR9e1qo9surEdufrdBxEtAiFdwluMx5Xv341cCdgLh21r3xtQxPt4cDHiUtmKks78_mih26Ce_wl-kGMnp5jlJ17Ya3qQvnObIvzrhQios4RPoG3ROCSiU27nSTn9kBjtRqIy2nhQEzqRyXFYl9Z07-TRSZdjjOhPO0JUCFkKVKurWj8zgFHSiUYxGccxqzIDtmY8fKoQcQBXgpeS8q-2JwkxLRAEFzWncjqhMSL-uYWuOfrdBxEtAiF70jj8WMVFgjXFtKff5T8EscNhI2TqIIby0yHsX6kueGRZMnRZkKc2VstRsLqDsMBrs3hai6LVXKh9t8LDpWOQ4wAyHXdf8ZlR49jG8aI1jauB0_jGPKvYheZt55Nzvj0SNtQvnzG8r9DVaNUFXi1IaE-yU1YiVPXMzYC3Q2LvYM1PaQInBnKa-76AwuK8-pP
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /aS/feedclick?s=HFz5zNIIs96fzq49jFkHXa3dDnCBF-q5XQaiCg3BLRsq7qVxrtzI4f-5cgJn_QpsVVH-ImtJpPaG_Nh80WMmwqfTqqBykvhwncn2dNnoElLXQ3MeghEXHDNiE03EdAwuxlOmzgR5fh3nQoQZVtH1UcHY6z5T2K7NFT_4ZRcycYgOzeSdXSQud8gLQ0QuNbeE477-30uHldpRwZuOjIkdGQ3ZqPEVtGdhR0g0Fu54zdp3jl34H6bTOvweej2OYfbpZfLxNVCbg942K0peqd8FFQICSvb0aViCYkygyzx7GWGNTv62JvlyeFDW2P-IrbRGil7u4G-TJbn3bXEt4FBmx6q-RAik_3-YokTKWelooFpYrPorG4OeRDlQuMY8BwKt8dmTRIccUC86SIOVCjzwb8zGGRJBxkRpRGSftzPkqO1NL6z7f5cM6OhvyjcmjG53GV7Eq4R2UXOimCU5BsoTcxNdQpsz-feWqjIOCtV4zKdUXmxiuvs0twUjSZsZ83aulmzrDJhD1NuQ-dAMtH57wESEAsZ5HmuxvrZ0gnhdpdwlhqV4nUq27fEk_fcsEK-euM9_ncJ4VitDqyt3rp5mcfK387xIbYvYC44mkQOyJgX3ndGeu9Eqcx-ltrDzdXzQ_nU_Jf-gboTyc76S3wmcyIUDyc1PjnZvz8jpNNhJM7pmLbGR1odK0bLfVD4olm6vw2WprznBNgSt92sHrm7QM9vkQcHuMzxSLcsAjzTFISdN5aCsoLcLHIoEiDuXlnbGvVe6h4YOt9aDdoN5zHhuEk9k027jPge4dx_abwjKO3h7bCA9tyo6NUk-anHOSVHpcoY9H07mj5TeQCeB0as85XGIA78PqZzCZ6LJ8I53hXjsidmY9Wb-mtny5MrDAEGR89FCT3-GljY64LfFQzLfEHC2dtPoFGlH0wWa0Zf2ng8E0gs-spia3VNYXTzqn5cXKuHKyVcnJyXGJBq_VkJ5SZGMcfMktqLK5nYYmWC-dSK4XDhVkiZG03CGn5-7I0_6ur7CDJDx-J1WUVCLchTe84dgUauFZtpYv3Cl3Ym9GZTucNIn9iCdDmp3V8xSYEz2BUoldPa2Pq1-UQeMUbTTzJSG8NTuwxdQMs-BeYffyVzyXDGJQBJv3UDa6pTc7Ss3MNt1nRAA_-6xb4PR2m6lpnQYsgjJg6o2YpQfQV2YEYFYIZZESTM-xf48w96LcFp2EfVXsHqV_68BAhLVvP-fhphExsYb_nDHVtmAfG-yw3VtuVLZaSBDef3PQndp3jV3roKPRHPKGqAF13JZzaanMYfSM1F2qNREGTTI3uDdlhO5CRzjYfsEe6hAPyq5iEO614GIdUr60t8Ee8MLHUqzXXgjnMpINLrz5jqVrR9DaGPO0C-pddX3MlcNQrkqUrC4TZNkAppK0EJn5v-6iFqnXQRvdYXamHqge_aujXnkwKLwf7BIrlbhXV8wwPpTOdHmtPy-8LGf0jJPxg-GpdikQN0W32RAYsR_D6px9SLBPMb1pRC4ZePKCzg1YXv_NEJ85HS5naRIDcmTdBxjocyPTkREE8yvJA41492d0DaYmff6WxfnIhSwVLOjzlr3gkqejqx-HleIDoZDcBh7XJO-opBqpyIGVr57h8LJl86Nw__tl7RCsLQUIG2z3LTvwB1eu3yT36a6bn5Ksyw5VI6sUh6LB51TyPTJbBKAS1-BEyHvatwJwcWaQnwfHbwKh0Oz2uKkgIrXK7hq3HfKopIPiJpmSuYMQyDi7mYdKiWU3z-dzfSW-8yL3uJ2xpgaiBQs7DviM3YeT2revoCiFtu-XKBm8iVBm87BEJZRj4sC8OPzY9V_k44LoQN8-iDLKN_v7AAUAmvbFJ91ATklqgk7VDU9pAicGcprKWLhbo1iIvDSeGckCSGYRso8oKQdpnWV3eXc2o6wRjcRtJaM4LgOLTgB6jUJztpfPd4iJ3id7YNcfx0th3Q4kUVNqn3CfcAUDuD9Qggmfxsk5DZlde9o47C7fuySQgzWPYDo9h6qwHoI3n7b3dGmJZT5yzNLywV1YdgW9TLOUAM_EtuGym49o2SQ-ipEdTXiFGXdhybwjxZ9xWOC1Jf1P5C4lQoA8VJpUiC4_gfC45Pq3l6cH6HPHJFywbikzADy0KoGQoJEL4IcAot428eM_Qk3uBEp_TCfqqtj-i47JztOJ2NsPUT1mXv4IBsleocXy1P1Y6jjI0IVEVwBdFkC6Vd3HIPdS4tF4HRzGpNpYR9e1qo9surEdufrdBxEtAiFdwluMx5Xv341cCdgLh21r3xtQxPt4cDHiUtmKks78_mih26Ce_wl-kGMnp5jlJ17Ya3qQvnObIvzrhQios4RPoG3ROCSiU27nSTn9kBjtRqIy2nhQEzqRyXFYl9Z07-TRSZdjjOhPO0JUCFkKVKurWj8zgFHSiUYxGccxqzIDtmY8fKoQcQBXgpeS8q-2JwkxLRAEFzWncjqhMSL-uYWuOfrdBxEtAiF70jj8WMVFgjXFtKff5T8EscNhI2TqIIby0yHsX6kueGRZMnRZkKc2VstRsLqDsMBrs3hai6LVXKh9t8LDpWOQ4wAyHXdf8ZlR49jG8aI1jauB0_jGPKvYheZt55Nzvj0SNtQvnzG8r9DVaNUFXi1IaE-yU1YiVPXMzYC3Q2LvYM1PaQInBnKa-76AwuK8-pP HTTP/1.1
Host: mybetterck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://irene-eux.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Mon, 26 Sep 2022 23:22:01 GMT
content-length: 0
set-cookie: rhid=82092868881; Max-Age=15552000; Expires=Sat, 25-Mar-2023 23:22:01 GMT; Domain=mybetterck.com; Path=/; SameSite=None; secure;
location: https://p444222.mybetterck.com/adServe/domainClick?ai=gNSPw4YcvsCApKkKBx7IDLZLh5RGT4s7PRzwjLQJjSv3QC4zB9LcASviNg65Cxr3flx9wpYGTxS3j_KY09q3mwP48WExSvvue4Wee03NpRWjWGZxSaF5uotbBDE-VzQdp_hghD0kmPMD_PW84u0ulUqfBHnk5MSYCByTAVT-sd22hq8NRNDt25Qd73c_XxIrepx7j1kh07VyyGnFKX0au3SDFZgpnKNmkWTJ0WZCnNlxEddAWrunkNO4YFSA4iHoSNV7ac1fOCr2ho5YrvnObP7B18jwcndd9Cj2y8T0f9WAG1C3pJe1jUnMr7JE-iOOohO-HVAt4N0u74i0lxvffLw7yHWY6BM0uGa2Qe8-FjHjOJsHVX4a7bC7fuySQgzWfIMK0NNojN-tm7ItiBkJPboJozIQw_UgE15yz728krV__W_JMtiNWygu4EAhLehVZan_-uJdGeomQjv60MWdW5W77AbEe9ULYlZ0CBoMUA4lO7oBdjPsrvOuFCKizhE-7Ytg_xXfZg7wptjEMNq1V-hBqFh1dYq29BTd-RUQgepW3CtlekMF7mtdQ0LuDC1wMxVChtoIfCxO-mjNJPfAM5bkuHN4kBIxoGHHE-E0IO89GR_yRtA93EIK1wF3pmGlAQYD4ymhSixAzaGfRzy6zyKEGmaBP0_Rg4geqniFAY7JtkfbM-VxMDt1-E2PqFLvvZUw__fvih5ZnHojxjfypQ8_hgTrUCjEC4uYju4ZcZWpZCZFSskpTEZ7QC69B1JTZ8FX4ZthAC4pdY-e_iTnmlG3xytZVl6CMRYO2BLhb_UvdttPjuIdm1toweMxbkUxVnWruyDfRXVfSPcxVQni-afdnKfr5HD5hH96neDjclCgu6tNLJtXf_NVWUy-lk7PFjuED_lYu80Xu88wSWywELxBhUNI1iZDeG75T0AK4q2oKbaB5p9uIiol4S5osn5YR0Ng4Sbb-ewWFMo45vcOlMGzfh0CNUya&ui=HFz5zNIIs96fzq49jFkHXcQzYObQGwwU7xf6tdOZukM-OEui5Z5TxNLj5y5yCjiwOXv-ZinAlSL6Zac98ixPSyg0bQJAfqSRG6wGHgnIOhYzO3o_1-Tv0A&si=1&oref=2f6c52514cb2d5d54f1aba4c48e529e3&optunit=5B1Zjie8r2XomJ5wtw7vIA&rb=LW_v4KVZAgI&rr=4&abtg=0
X-Firefox-Spdy: h2
promoprawn.com/norway?utm_source=no&utm_medium=89403862252
301 Moved Permanently 0 B URL HTTP/2 promoprawn.com/norway?utm_source=no&utm_medium=89403862252
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /norway?utm_source=no&utm_medium=89403862252 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
x-powered-by: PHP/7.4.28
set-cookie: utm_source=no; expires=Wed, 26-Oct-2022 23:22:01 GMT; Max-Age=2592000; path=/; domain=.promoprawn.com
utm_medium=89403862252; expires=Wed, 26-Oct-2022 23:22:01 GMT; Max-Age=2592000; path=/; domain=.promoprawn.com
utm_term=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
utm_content=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
utm_campaign=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
gclid=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
handl_original_ref=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89403862252; expires=Wed, 26-Oct-2022 23:22:01 GMT; Max-Age=2592000; path=/; domain=.promoprawn.com
handl_ip=91.90.42.154; expires=Wed, 26-Oct-2022 23:22:01 GMT; Max-Age=2592000; path=/; domain=.promoprawn.com
handl_ref=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
handl_url=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89403862252; expires=Wed, 26-Oct-2022 23:22:01 GMT; Max-Age=2592000; path=/; domain=.promoprawn.com
email=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
username=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
content-type: text/html; charset=UTF-8
x-redirect-by: WordPress
location: https://promoprawn.com/norway/?utm_source=no&utm_medium=89403862252
content-length: 0
date: Mon, 26 Sep 2022 23:22:01 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/norway/?utm_source=no&utm_medium=89403862252
302 Found 0 B URL HTTP/2 promoprawn.com/norway/?utm_source=no&utm_medium=89403862252
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /norway/?utm_source=no&utm_medium=89403862252 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: utm_source=no; utm_medium=89403862252; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89403862252; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89403862252
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
x-powered-by: PHP/7.4.28
set-cookie: utm_source=no; expires=Wed, 26-Oct-2022 23:22:02 GMT; Max-Age=2592000; path=/; domain=.promoprawn.com
utm_medium=89403862252; expires=Wed, 26-Oct-2022 23:22:02 GMT; Max-Age=2592000; path=/; domain=.promoprawn.com
utm_term=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
utm_content=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
utm_campaign=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
gclid=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
handl_original_ref=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89403862252; expires=Wed, 26-Oct-2022 23:22:02 GMT; Max-Age=2592000; path=/; domain=.promoprawn.com
handl_ip=91.90.42.154; expires=Wed, 26-Oct-2022 23:22:02 GMT; Max-Age=2592000; path=/; domain=.promoprawn.com
handl_ref=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
handl_url=https%3A%2F%2Fpromoprawn.com%2Fnorway%2F%3Futm_source%3Dno%26utm_medium%3D89403862252; expires=Wed, 26-Oct-2022 23:22:02 GMT; Max-Age=2592000; path=/; domain=.promoprawn.com
email=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
username=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
content-type: text/html; charset=UTF-8
x-redirect-by: WordPress
location: https://promoprawn.com/go-to-hhworkwear-com
content-length: 0
date: Mon, 26 Sep 2022 23:22:02 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/go-to-hhworkwear-com
301 Moved Permanently 0 B URL HTTP/2 promoprawn.com/go-to-hhworkwear-com
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go-to-hhworkwear-com HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: utm_source=no; utm_medium=89403862252; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89403862252; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fnorway%2F%3Futm_source%3Dno%26utm_medium%3D89403862252
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
x-powered-by: PHP/7.4.28
set-cookie: utm_source=no; expires=Wed, 26-Oct-2022 23:22:02 GMT; Max-Age=2592000; path=/; domain=.promoprawn.com
utm_medium=89403862252; expires=Wed, 26-Oct-2022 23:22:02 GMT; Max-Age=2592000; path=/; domain=.promoprawn.com
utm_term=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
utm_content=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
utm_campaign=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
gclid=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
handl_original_ref=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89403862252; expires=Wed, 26-Oct-2022 23:22:02 GMT; Max-Age=2592000; path=/; domain=.promoprawn.com
handl_ip=91.90.42.154; expires=Wed, 26-Oct-2022 23:22:02 GMT; Max-Age=2592000; path=/; domain=.promoprawn.com
handl_ref=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-hhworkwear-com; expires=Wed, 26-Oct-2022 23:22:02 GMT; Max-Age=2592000; path=/; domain=.promoprawn.com
email=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
username=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
content-type: text/html; charset=UTF-8
x-pingback: https://promoprawn.com/xmlrpc.php
x-redirect-by: WordPress
location: https://promoprawn.com/go-to-hhworkwear-com/
content-length: 0
date: Mon, 26 Sep 2022 23:22:02 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/go-to-hhworkwear-com/
200 OK 12 kB URL HTTP/2 promoprawn.com/go-to-hhworkwear-com/
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (8047), with CRLF, LF line terminators
Hash 249c505672c12634a0e1834027567a34
135e40787ff950dce2eb2215901986d5dd923577
30d0b78452131046c9837661d051db2544ad6d611ce885c9a814cece4a93fe8f
GET /go-to-hhworkwear-com/ HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: utm_source=no; utm_medium=89403862252; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89403862252; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-hhworkwear-com
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-powered-by: PHP/7.4.28
set-cookie: utm_source=no; expires=Wed, 26-Oct-2022 23:22:02 GMT; Max-Age=2592000; path=/; domain=.promoprawn.com
utm_medium=89403862252; expires=Wed, 26-Oct-2022 23:22:02 GMT; Max-Age=2592000; path=/; domain=.promoprawn.com
utm_term=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
utm_content=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
utm_campaign=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
gclid=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
handl_original_ref=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89403862252; expires=Wed, 26-Oct-2022 23:22:02 GMT; Max-Age=2592000; path=/; domain=.promoprawn.com
handl_ip=91.90.42.154; expires=Wed, 26-Oct-2022 23:22:02 GMT; Max-Age=2592000; path=/; domain=.promoprawn.com
handl_ref=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-hhworkwear-com%2F; expires=Wed, 26-Oct-2022 23:22:02 GMT; Max-Age=2592000; path=/; domain=.promoprawn.com
email=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
username=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
content-type: text/html; charset=UTF-8
x-pingback: https://promoprawn.com/xmlrpc.php
link: <https://promoprawn.com/wp-json/>; rel="https://api.w.org/", <https://promoprawn.com/wp-json/wp/v2/pages/2969>; rel="alternate"; type="application/json", <https://promoprawn.com/?p=2969>; rel=shortlink
content-encoding: gzip
vary: Accept-Encoding
content-length: 12020
date: Mon, 26 Sep 2022 23:22:02 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-content/plugins/gtranslate/gtranslate-style16.css?ver=6.0.2
200 OK 234 B URL HTTP/2 promoprawn.com/wp-content/plugins/gtranslate/gtranslate-style16.css?ver=6.0.2
IP
ASN #24940 Hetzner Online GmbH
Hash 4526c392337283c2a34e10b7cc7579b7
159f80ba532dcc67bc75ddf1bbe7e43f9b7fb33f
df0dff97ed83544627a440c3f3fbd460fb24b34814b10a1aa15e965e3f1f1f9c
GET /wp-content/plugins/gtranslate/gtranslate-style16.css?ver=6.0.2 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-hhworkwear-com/
Cookie: utm_source=no; utm_medium=89403862252; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89403862252; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-hhworkwear-com%2F
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Tue, 27 Sep 2022 11:22:02 GMT
etag: "2af-62cff464-19604d8;br"
last-modified: Thu, 14 Jul 2022 10:48:04 GMT
content-type: text/css
content-length: 234
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Mon, 26 Sep 2022 23:22:02 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-includes/css/dist/block-library/style.min.css?ver=6.0.2
200 OK 11 kB URL HTTP/2 promoprawn.com/wp-includes/css/dist/block-library/style.min.css?ver=6.0.2
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (43771)
Hash 55bbab41f9fc950b6f2939d5a5b11d98
d3fc3d679d075648a22d83f95a08773b4e4a3383
2a5b528b068ef00c9d5acc922818724fe63fd5a8ad107d2d8831797fd244afb1
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.0.2 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-hhworkwear-com/
Cookie: utm_source=no; utm_medium=89403862252; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89403862252; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-hhworkwear-com%2F
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Tue, 27 Sep 2022 11:22:02 GMT
etag: "15b64-62c2d8bd-19a03ff;br"
last-modified: Mon, 04 Jul 2022 12:10:37 GMT
content-type: text/css
content-length: 10775
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Mon, 26 Sep 2022 23:22:02 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-content/plugins/yc-url-redirection/public/css/yc-url-redirection-public.css?ver=1.0.0
200 OK 98 B URL HTTP/2 promoprawn.com/wp-content/plugins/yc-url-redirection/public/css/yc-url-redirection-public.css?ver=1.0.0
IP
ASN #24940 Hetzner Online GmbH
Hash e6094661d8923e95b233019ebff7c8f0
cfd836d385d475baffee45d85cfeb9bb36e70d9e
547dda3c14b284819be511be1e410da94a5efc6ccc4a9afe1c75394f9333191a
GET /wp-content/plugins/yc-url-redirection/public/css/yc-url-redirection-public.css?ver=1.0.0 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-hhworkwear-com/
Cookie: utm_source=no; utm_medium=89403862252; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89403862252; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-hhworkwear-com%2F
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Tue, 27 Sep 2022 11:22:02 GMT
etag: "62-63232e83-19601e3;;;"
last-modified: Thu, 15 Sep 2022 13:54:11 GMT
content-type: text/css
content-length: 98
accept-ranges: bytes
date: Mon, 26 Sep 2022 23:22:02 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-includes/css/dashicons.min.css?ver=6.0.2
200 OK 35 kB URL HTTP/2 promoprawn.com/wp-includes/css/dashicons.min.css?ver=6.0.2
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (58981)
Hash 378455dbd7bf57fceffe7d3e27b264da
d2a55ec3793edbd18b929337e20e02fd1d8e9ad7
87ae07b42b93eedcd94fbfb13a24e8bc997b29589ba33664858fccc5083c5057
GET /wp-includes/css/dashicons.min.css?ver=6.0.2 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-hhworkwear-com/
Cookie: utm_source=no; utm_medium=89403862252; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89403862252; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-hhworkwear-com%2F
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Tue, 27 Sep 2022 11:22:02 GMT
etag: "e688-603ffca6-19a043e;br"
last-modified: Wed, 03 Mar 2021 21:16:22 GMT
content-type: text/css
content-length: 35099
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Mon, 26 Sep 2022 23:22:02 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-content/themes/clipper/assets/css/foundation.min.css?ver=6.4.3
200 OK 10 kB URL HTTP/2 promoprawn.com/wp-content/themes/clipper/assets/css/foundation.min.css?ver=6.4.3
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 (with BOM) text, with very long lines (65531), with no line terminators
Hash 7b179e8f61b3fd5ce76c658751ce95aa
eb9fdfaea9ed6214de7dbd1b5475019effabd663
fa0b913fbb15c761c1e14120cbffe4d8d56108c2deb5ecff51b6a627688e0209
GET /wp-content/themes/clipper/assets/css/foundation.min.css?ver=6.4.3 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-hhworkwear-com/
Cookie: utm_source=no; utm_medium=89403862252; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89403862252; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-hhworkwear-com%2F
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Tue, 27 Sep 2022 11:22:02 GMT
etag: "111d7-620e11aa-1980a5b;br"
last-modified: Thu, 17 Feb 2022 09:13:14 GMT
content-type: text/css
content-length: 10386
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Mon, 26 Sep 2022 23:22:02 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-content/themes/clipper/assets/js/lib/slick/slick.min.css?ver=1.7.1
200 OK 399 B URL HTTP/2 promoprawn.com/wp-content/themes/clipper/assets/js/lib/slick/slick.min.css?ver=1.7.1
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (1342)
Hash 11a7eccde25705200f80299d3c7bc10b
d2ff227b3213365f049c53e34b50bf5ccf3f43a9
ec96ae71c7fe8b4ec4984c78c42e122082b9c9372813e0ea2388fc2f6694b027
GET /wp-content/themes/clipper/assets/js/lib/slick/slick.min.css?ver=1.7.1 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-hhworkwear-com/
Cookie: utm_source=no; utm_medium=89403862252; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89403862252; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-hhworkwear-com%2F
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Tue, 27 Sep 2022 11:22:02 GMT
etag: "53f-620e11aa-1980a4d;br"
last-modified: Thu, 17 Feb 2022 09:13:14 GMT
content-type: text/css
content-length: 399
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Mon, 26 Sep 2022 23:22:02 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-content/themes/clipper/assets/js/lib/slick/slick-theme.min.css?ver=1.7.1
200 OK 659 B URL HTTP/2 promoprawn.com/wp-content/themes/clipper/assets/js/lib/slick/slick-theme.min.css?ver=1.7.1
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 (with BOM) text, with very long lines (2403)
Hash 56d376ae1b4ec1b202f1471c1c9a61dc
edee0781ae929fa5487763400b0d11dd958f2219
15145ebdf1f1d20797fdc47487405ccddb039a013b0590c3bd15a7663d9deb21
GET /wp-content/themes/clipper/assets/js/lib/slick/slick-theme.min.css?ver=1.7.1 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-hhworkwear-com/
Cookie: utm_source=no; utm_medium=89403862252; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89403862252; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-hhworkwear-com%2F
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Tue, 27 Sep 2022 11:22:02 GMT
etag: "971-620e11aa-1980a4c;br"
last-modified: Thu, 17 Feb 2022 09:13:14 GMT
content-type: text/css
content-length: 659
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Mon, 26 Sep 2022 23:22:02 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-content/themes/clipper/theme-framework/lib/font-awesome/css/font-awesome.min.css?ver=4.7.0
200 OK 6.6 kB URL HTTP/2 promoprawn.com/wp-content/themes/clipper/theme-framework/lib/font-awesome/css/font-awesome.min.css?ver=4.7.0
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (30837)
Hash e99e647b2bcbac735756f147437cd30d
a7feff175eb69bc219a4915f56213eb8177116ac
d942ce1121b2caa437ff304808a9079b017b83c77d36e08852cab601efd17b73
GET /wp-content/themes/clipper/theme-framework/lib/font-awesome/css/font-awesome.min.css?ver=4.7.0 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-hhworkwear-com/
Cookie: utm_source=no; utm_medium=89403862252; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89403862252; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-hhworkwear-com%2F
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Tue, 27 Sep 2022 11:22:02 GMT
etag: "7917-620e11aa-1980a80;br"
last-modified: Thu, 17 Feb 2022 09:13:14 GMT
content-type: text/css
content-length: 6644
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Mon, 26 Sep 2022 23:22:02 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
cdn.jsdelivr.net/fontawesome/4.7.0/css/font-awesome.min.css?ver=4.7.0
200 OK 7.1 kB URL HTTP/2 cdn.jsdelivr.net/fontawesome/4.7.0/css/font-awesome.min.css?ver=4.7.0
IP
File type ASCII text, with very long lines (30837)
Hash c68c38b6f53bfc3bee6b736afa488757
871df21572c702142a7c237259326013ec2df26a
e2100c6e7b6f0d358ac92d33b11278661c9a80e4c62c056677e24bc572d6da34
GET /fontawesome/4.7.0/css/font-awesome.min.css?ver=4.7.0 HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
etag: W/"7918-USx9eQM+MCipvmG1QM8aaHDIlvg"
content-encoding: gzip
accept-ranges: bytes
date: Mon, 26 Sep 2022 23:22:02 GMT
age: 7507574
x-served-by: cache-fra19147-FRA, cache-bma1679-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 7055
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c939f97c8bcbfea356e92036803714bc
608c795e7c4fb943a4db49a4e4533c41ea717023
b05b38c78c15c259720bfc6783ac65ab60ceb1e6037b45b08113f183554f08cb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 23:22:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
promoprawn.com/wp-content/themes/clipper/assets/css/style.min.css?ver=2.0.9
200 OK 14 kB URL HTTP/2 promoprawn.com/wp-content/themes/clipper/assets/css/style.min.css?ver=2.0.9
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (65536), with no line terminators
Hash 809e3b62565e9e4578c4ece133445c3c
6fec1ad5fff86bfba5b75e071511f14f22105ca2
50d491d4546fc91311de7b0cc59ba70b6f9f9e7c1c14964d25c4562ba5c9105c
GET /wp-content/themes/clipper/assets/css/style.min.css?ver=2.0.9 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-hhworkwear-com/
Cookie: utm_source=no; utm_medium=89403862252; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89403862252; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-hhworkwear-com%2F
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Tue, 27 Sep 2022 11:22:02 GMT
etag: "107a9-620e11aa-1980a63;br"
last-modified: Thu, 17 Feb 2022 09:13:14 GMT
content-type: text/css
content-length: 13965
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Mon, 26 Sep 2022 23:22:02 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-content/themes/clipper/styles/red.css?ver=6.0.2
200 OK 250 B URL HTTP/2 promoprawn.com/wp-content/themes/clipper/styles/red.css?ver=6.0.2
IP
ASN #24940 Hetzner Online GmbH
Hash 8967441e38649571c6d6671114814c04
8f071b4be7214b99d23f66a1d4473660e34c6c59
dae814740c901b9bf2ff1f43a2aa6b6b02bb335d7114787cc46c1d7fbe035b29
GET /wp-content/themes/clipper/styles/red.css?ver=6.0.2 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-hhworkwear-com/
Cookie: utm_source=no; utm_medium=89403862252; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89403862252; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-hhworkwear-com%2F
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Tue, 27 Sep 2022 11:22:02 GMT
etag: "27c-620e11aa-1980a73;br"
last-modified: Thu, 17 Feb 2022 09:13:14 GMT
content-type: text/css
content-length: 250
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Mon, 26 Sep 2022 23:22:02 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-content/themes/clipper/theme-framework/js/colorbox/colorbox.min.css?ver=1.6.1
200 OK 801 B URL HTTP/2 promoprawn.com/wp-content/themes/clipper/theme-framework/js/colorbox/colorbox.min.css?ver=1.6.1
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (2982)
Hash ed0023e818060f2cc95064da01f70a9f
2a6a701f475d738846ea06fd45437fa80b2ecbb1
262ae1ae3fa68f6e5f74cd07770cea411453c6c8c82212129b316369e89fdac5
GET /wp-content/themes/clipper/theme-framework/js/colorbox/colorbox.min.css?ver=1.6.1 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-hhworkwear-com/
Cookie: utm_source=no; utm_medium=89403862252; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89403862252; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-hhworkwear-com%2F
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Tue, 27 Sep 2022 11:22:02 GMT
etag: "ba7-620e11aa-1980abd;br"
last-modified: Thu, 17 Feb 2022 09:13:14 GMT
content-type: text/css
content-length: 801
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Mon, 26 Sep 2022 23:22:02 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-content/themes/clipper/framework/styles/jquery-ui/jquery-ui.min.css?ver=1.11.2
200 OK 7.0 kB URL HTTP/2 promoprawn.com/wp-content/themes/clipper/framework/styles/jquery-ui/jquery-ui.min.css?ver=1.11.2
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (28367)
Hash 058d6ca773fb6164c07655e85c6902bc
60764b86a193c2daf22278e44059d961c4655cb0
c8fa6e1f1f00e858d665c09d56068347d1f70b612e22a572623d1d0f5b335cce
GET /wp-content/themes/clipper/framework/styles/jquery-ui/jquery-ui.min.css?ver=1.11.2 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-hhworkwear-com/
Cookie: utm_source=no; utm_medium=89403862252; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89403862252; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-hhworkwear-com%2F
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Tue, 27 Sep 2022 11:22:02 GMT
etag: "75d3-620e11ac-198075e;br"
last-modified: Thu, 17 Feb 2022 09:13:16 GMT
content-type: text/css
content-length: 6962
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Mon, 26 Sep 2022 23:22:02 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-content/themes/clipper/framework/styles/datepicker/datepicker.css?ver=6.0.2
200 OK 1.1 kB URL HTTP/2 promoprawn.com/wp-content/themes/clipper/framework/styles/datepicker/datepicker.css?ver=6.0.2
IP
ASN #24940 Hetzner Online GmbH
Hash 9fee7a86a975b17368a842826ddb99c9
78fcdcd23065d6d685e5c9d6c427ff625747d42b
f1374de81cad252dd96c1aec50b73ff5f0325299a0095dae61b06b9cb8544e37
GET /wp-content/themes/clipper/framework/styles/datepicker/datepicker.css?ver=6.0.2 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-hhworkwear-com/
Cookie: utm_source=no; utm_medium=89403862252; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89403862252; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-hhworkwear-com%2F
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Tue, 27 Sep 2022 11:22:02 GMT
etag: "1c06-620e11ac-198075a;br"
last-modified: Thu, 17 Feb 2022 09:13:16 GMT
content-type: text/css
content-length: 1059
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Mon, 26 Sep 2022 23:22:02 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-content/themes/clipper/includes/reports/style.css?ver=1.0
200 OK 235 B URL HTTP/2 promoprawn.com/wp-content/themes/clipper/includes/reports/style.css?ver=1.0
IP
ASN #24940 Hetzner Online GmbH
Hash 19f0401629c2112542768cd94d2d417e
dc7c931dbe8e75a2509917ee6b82b447b33e69f4
47de8110c32b0348d010fe1e717c37dd983f83d9bb1c2e887856917a94516458
GET /wp-content/themes/clipper/includes/reports/style.css?ver=1.0 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-hhworkwear-com/
Cookie: utm_source=no; utm_medium=89403862252; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89403862252; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-hhworkwear-com%2F
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Tue, 27 Sep 2022 11:22:02 GMT
etag: "2d6-620e11aa-1980853;br"
last-modified: Thu, 17 Feb 2022 09:13:14 GMT
content-type: text/css
content-length: 235
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Mon, 26 Sep 2022 23:22:02 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
200 OK 4.0 kB URL HTTP/2 promoprawn.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (11126)
Hash e32c5db077b45cddc36bbdec187ba4c4
dfdbe8e2f28238b3a218785514a452884aa789a8
51bd9696f8c91a26501c40b40842e759b5cbcd352b3ce7d1f6875996abec46f6
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-hhworkwear-com/
Cookie: utm_source=no; utm_medium=89403862252; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89403862252; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-hhworkwear-com%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Tue, 27 Sep 2022 11:22:02 GMT
etag: "2bd8-5fb4e3fe-19a013a;br"
last-modified: Wed, 18 Nov 2020 09:06:06 GMT
content-type: application/x-javascript
content-length: 3992
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Mon, 26 Sep 2022 23:22:02 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-content/plugins/handl-utm-grabber/js/js.cookie.js?ver=6.0.2
200 OK 1.3 kB URL HTTP/2 promoprawn.com/wp-content/plugins/handl-utm-grabber/js/js.cookie.js?ver=6.0.2
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with CRLF line terminators
Hash 002b38bcf8af7d7872f4de5705c8f7a0
a66362e316d0696a15e13acfe7678535a5ced687
3e72ce357bf0551646ad5e2595fa9b6bb08402d56b4a20ece22c5ee7cced5d66
GET /wp-content/plugins/handl-utm-grabber/js/js.cookie.js?ver=6.0.2 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-hhworkwear-com/
Cookie: utm_source=no; utm_medium=89403862252; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89403862252; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-hhworkwear-com%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Tue, 27 Sep 2022 11:22:02 GMT
etag: "df1-62cff46c-1960206;br"
last-modified: Thu, 14 Jul 2022 10:48:12 GMT
content-type: application/x-javascript
content-length: 1266
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Mon, 26 Sep 2022 23:22:02 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-content/plugins/handl-utm-grabber/js/handl-utm-grabber.js?ver=6.0.2
200 OK 627 B URL HTTP/2 promoprawn.com/wp-content/plugins/handl-utm-grabber/js/handl-utm-grabber.js?ver=6.0.2
IP
ASN #24940 Hetzner Online GmbH
Hash addf86ac7ac144fac1f7a1a2f3a27482
2c56ecd51714ebdb0d13f4b16cee2e9a1cafd7fc
71a3a8064fcf51f5acd5a186eeec760653b31fdb8b6e4caa1bf7cc62038f5370
GET /wp-content/plugins/handl-utm-grabber/js/handl-utm-grabber.js?ver=6.0.2 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-hhworkwear-com/
Cookie: utm_source=no; utm_medium=89403862252; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89403862252; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-hhworkwear-com%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Tue, 27 Sep 2022 11:22:02 GMT
etag: "5f5-62cff46c-1960204;br"
last-modified: Thu, 14 Jul 2022 10:48:12 GMT
content-type: application/x-javascript
content-length: 627
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Mon, 26 Sep 2022 23:22:02 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-content/plugins/yc-url-redirection/public/js/yc-url-redirection-public.js?ver=1.0.0
200 OK 411 B URL HTTP/2 promoprawn.com/wp-content/plugins/yc-url-redirection/public/js/yc-url-redirection-public.js?ver=1.0.0
IP
ASN #24940 Hetzner Online GmbH
Hash cf6087d65d454b825a08b1179d2338f1
c1f877b976a59019a9dcce8a8c9c0e208350790b
294f446fb350d542dbff182a02b74e22074c6314f13b301e905a27ab6ba0205e
GET /wp-content/plugins/yc-url-redirection/public/js/yc-url-redirection-public.js?ver=1.0.0 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-hhworkwear-com/
Cookie: utm_source=no; utm_medium=89403862252; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89403862252; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-hhworkwear-com%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Tue, 27 Sep 2022 11:22:02 GMT
etag: "346-63232e83-19601e0;br"
last-modified: Thu, 15 Sep 2022 13:54:11 GMT
content-type: application/x-javascript
content-length: 411
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Mon, 26 Sep 2022 23:22:02 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.1
200 OK 6.6 kB URL HTTP/2 promoprawn.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.1
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (8189)
Hash e2e16e8517ff2fdb0cdc9963f6e6edee
04ad2a9b8f3006d611ab2d9a2e8fadbc249e6cbf
3c49689f85907683c8da5d226bb14a550fcbdaad22582712b774d3ecd67c01b2
GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.1 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-hhworkwear-com/
Cookie: utm_source=no; utm_medium=89403862252; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89403862252; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-hhworkwear-com%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Tue, 27 Sep 2022 11:22:02 GMT
etag: "50eb-625095f6-19a012a;br"
last-modified: Fri, 08 Apr 2022 20:07:18 GMT
content-type: application/x-javascript
content-length: 6622
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Mon, 26 Sep 2022 23:22:02 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-includes/js/jquery/ui/datepicker.min.js?ver=1.13.1
200 OK 10 kB URL HTTP/2 promoprawn.com/wp-includes/js/jquery/ui/datepicker.min.js?ver=1.13.1
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (36560)
Hash fde7d72716207b5314405ae291f64fbe
9651db9753198caba63070531c4e9f2c02cc204e
bce9e74b8745969dcc949d3c8f4765a1ab00be91371c34afd7663bc4364d8594
GET /wp-includes/js/jquery/ui/datepicker.min.js?ver=1.13.1 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-hhworkwear-com/
Cookie: utm_source=no; utm_medium=89403862252; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89403862252; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-hhworkwear-com%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Tue, 27 Sep 2022 11:22:02 GMT
etag: "8f87-625095f6-19a010d;br"
last-modified: Fri, 08 Apr 2022 20:07:18 GMT
content-type: application/x-javascript
content-length: 10462
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Mon, 26 Sep 2022 23:22:02 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-content/plugins/gtranslate/flags/svg/en.svg
200 OK 428 B URL HTTP/2 promoprawn.com/wp-content/plugins/gtranslate/flags/svg/en.svg
IP
ASN #24940 Hetzner Online GmbH
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (862), with no line terminators
Hash 34112ac5b6e76ddfc1f3e393f4588ab5
2a204dbd10899d9e2b645188459a2feea2257150
ab75706d74d752940b60a70940f493975b8b60e33def12f6ff3111b74c8693bf
GET /wp-content/plugins/gtranslate/flags/svg/en.svg HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-hhworkwear-com/
Cookie: utm_source=no; utm_medium=89403862252; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89403862252; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-hhworkwear-com%2F
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Tue, 27 Sep 2022 11:22:02 GMT
etag: "35e-62cff464-19603ee;br"
last-modified: Thu, 14 Jul 2022 10:48:04 GMT
content-type: image/svg+xml
content-length: 428
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Mon, 26 Sep 2022 23:22:02 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
200 OK 30 kB URL HTTP/2 promoprawn.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (65447)
Hash 9f5dbb0b07808181d3bceeeb95120419
ff69f040200c921ffbcd3e01ffddee3c6d63a30d
4398cce5635c0d26b99ca763fb8174721a50403908ec2ad688902891938bfefe
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-hhworkwear-com/
Cookie: utm_source=no; utm_medium=89403862252; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89403862252; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-hhworkwear-com%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Tue, 27 Sep 2022 11:22:02 GMT
etag: "15db1-6048e0ac-19a0136;br"
last-modified: Wed, 10 Mar 2021 15:07:24 GMT
content-type: application/x-javascript
content-length: 30118
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Mon, 26 Sep 2022 23:22:02 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=UA-181731366-4
200 OK 42 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-181731366-4
IP
File type ASCII text, with very long lines (1720)
Hash 7b93c6b430d767cf94dc8c53b52c9ee5
c3c4bd22c9ad695ea1c8a18cec74fc99184ad2bc
a3b78f3ba09740258a9e40f71921e6b2a12e240ed177c7d08271fcaa54daa555
GET /gtag/js?id=UA-181731366-4 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 26 Sep 2022 23:22:02 GMT
expires: Mon, 26 Sep 2022 23:22:02 GMT
cache-control: private, max-age=900
last-modified: Mon, 26 Sep 2022 22:12:40 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 42264
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
200 OK 1.5 kB URL HTTP/1.1 ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
IP
Hash f7a3c1fe493129583ec5a3dc194598f8
1d1a6b428217f5b9a89537aaab85194a35175e0d
c7dfa59c0aaf1ce8c9c5946361621e5b15a0160c3586a831e7c9d1448e4e5440
POST /ca/gsatlasr3dvtlsca2022q1 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 23:22:02 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "8719F3E297F39D2C17A9499494584A1770CA5FD4"
Expires: Tue, 27 Sep 2022 10:00:00 GMT
Last-Modified: Mon, 26 Sep 2022 22:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 1528
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 750fbd486b0c0afe-OSL
promoprawn.com/wp-content/themes/clipper/includes/js/easing.js?ver=1.3
200 OK 979 B URL HTTP/2 promoprawn.com/wp-content/themes/clipper/includes/js/easing.js?ver=1.3
IP
ASN #24940 Hetzner Online GmbH
Hash 9b4413eb236c6e142927da48f3543cc4
ecc3c20045f147b96d363adb0a1424242983d0d1
fb6f81269a0536629540fa1417fd8d29a1dc8aa3deb816aa6697ed6bf1cf31ae
GET /wp-content/themes/clipper/includes/js/easing.js?ver=1.3 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-hhworkwear-com/
Cookie: utm_source=no; utm_medium=89403862252; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89403862252; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-hhworkwear-com%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Tue, 27 Sep 2022 11:22:02 GMT
etag: "1277-620e11aa-19809db;br"
last-modified: Thu, 17 Feb 2022 09:13:14 GMT
content-type: application/x-javascript
content-length: 979
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Mon, 26 Sep 2022 23:22:02 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-content/themes/clipper/includes/js/jcarousellite.min.js?ver=1.8.5
200 OK 2.8 kB URL HTTP/2 promoprawn.com/wp-content/themes/clipper/includes/js/jcarousellite.min.js?ver=1.8.5
IP
ASN #24940 Hetzner Online GmbH
File type HTML document, ASCII text, with very long lines (6965)
Hash 37d9d8e921e53bb7969d679141f1b3c6
5f99634ceb3820c25be3a0973e7d22326e69b4f8
cd2daf3d56682e97107fcf76247704e0404391214677acd10e12fb3e96f8ef5e
GET /wp-content/themes/clipper/includes/js/jcarousellite.min.js?ver=1.8.5 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-hhworkwear-com/
Cookie: utm_source=no; utm_medium=89403862252; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89403862252; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-hhworkwear-com%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Tue, 27 Sep 2022 11:22:02 GMT
etag: "1c1a-620e11aa-19809da;br"
last-modified: Thu, 17 Feb 2022 09:13:14 GMT
content-type: application/x-javascript
content-length: 2791
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Mon, 26 Sep 2022 23:22:02 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-content/themes/clipper/theme-framework/js/colorbox/jquery.colorbox.min.js?ver=1.6.1
200 OK 4.5 kB URL HTTP/2 promoprawn.com/wp-content/themes/clipper/theme-framework/js/colorbox/jquery.colorbox.min.js?ver=1.6.1
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (11827)
Hash ad6d60444980e8a4874117f0f458127f
1f16fe23622ca20745b7607a56b3fba4f5bdf349
cfa97d63da39b950511a6b97941d1d715c67b7abd23ef89788e8571a7da8ba8c
GET /wp-content/themes/clipper/theme-framework/js/colorbox/jquery.colorbox.min.js?ver=1.6.1 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-hhworkwear-com/
Cookie: utm_source=no; utm_medium=89403862252; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89403862252; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-hhworkwear-com%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Tue, 27 Sep 2022 11:22:02 GMT
etag: "2e7c-620e11aa-1980ab6;br"
last-modified: Thu, 17 Feb 2022 09:13:14 GMT
content-type: application/x-javascript
content-length: 4456
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Mon, 26 Sep 2022 23:22:02 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-content/themes/clipper/framework/js/validate/jquery.validate.min.js?ver=1.15.0
200 OK 7.0 kB URL HTTP/2 promoprawn.com/wp-content/themes/clipper/framework/js/validate/jquery.validate.min.js?ver=1.15.0
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (22550), with CRLF line terminators
Hash ef006467da5ca47503437a4c6bab084c
c08f15f2f3626d0f70067692555eeb9deca5c757
86fe98d71dc4ea98d9b43dbf5c67643f57c732dfb97908aa104b8b9cf3c9de34
GET /wp-content/themes/clipper/framework/js/validate/jquery.validate.min.js?ver=1.15.0 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-hhworkwear-com/
Cookie: utm_source=no; utm_medium=89403862252; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89403862252; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-hhworkwear-com%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Tue, 27 Sep 2022 11:22:02 GMT
etag: "58a3-620e11ac-1980755;br"
last-modified: Thu, 17 Feb 2022 09:13:16 GMT
content-type: application/x-javascript
content-length: 7039
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Mon, 26 Sep 2022 23:22:02 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-content/themes/clipper/framework/js/validate/jquery.validate-lang.js?ver=6.0.2
200 OK 231 B URL HTTP/2 promoprawn.com/wp-content/themes/clipper/framework/js/validate/jquery.validate-lang.js?ver=6.0.2
IP
ASN #24940 Hetzner Online GmbH
Hash f390bf7ad5ec9e840cbe75c6df24e5db
7758356d7a9319bf54b1286492369cb9ab2f9878
5e3cea34e2e7e5b62411117dbba36fbe66b87913a350d3b8f2193af0710fac40
GET /wp-content/themes/clipper/framework/js/validate/jquery.validate-lang.js?ver=6.0.2 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-hhworkwear-com/
Cookie: utm_source=no; utm_medium=89403862252; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89403862252; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-hhworkwear-com%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Tue, 27 Sep 2022 11:22:02 GMT
etag: "2f7-620e11ac-1980751;br"
last-modified: Thu, 17 Feb 2022 09:13:16 GMT
content-type: application/x-javascript
content-length: 231
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Mon, 26 Sep 2022 23:22:02 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-content/themes/clipper/includes/js/jquery.tinynav.min.js?ver=1.2
200 OK 434 B URL HTTP/2 promoprawn.com/wp-content/themes/clipper/includes/js/jquery.tinynav.min.js?ver=1.2
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (507)
Hash 44ffdc8bc270e1c6cbc7007c09847b44
6721a81c984ac211221fe1675e046a9b1e95f711
06c9d5a72f21a345facab20aca443e55b6e5ab95e87ebb565de6e13198f41d8b
GET /wp-content/themes/clipper/includes/js/jquery.tinynav.min.js?ver=1.2 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-hhworkwear-com/
Cookie: utm_source=no; utm_medium=89403862252; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89403862252; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-hhworkwear-com%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Tue, 27 Sep 2022 11:22:02 GMT
etag: "352-620e11aa-19809d0;br"
last-modified: Thu, 17 Feb 2022 09:13:14 GMT
content-type: application/x-javascript
content-length: 434
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Mon, 26 Sep 2022 23:22:02 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-content/plugins/real-time-auto-find-and-replace/assets/js/rtafar.local.js?ver=1.3.7
200 OK 19 B URL HTTP/2 promoprawn.com/wp-content/plugins/real-time-auto-find-and-replace/assets/js/rtafar.local.js?ver=1.3.7
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with no line terminators
Hash 8102dc9eee0565de28649497220d8d17
a32963be36656f3dd149892540138913bc88de6c
51ff2b4b46acab057eba32dc5fbd0bcf410f0ad2bb75d7a92b230bc627d930d6
GET /wp-content/plugins/real-time-auto-find-and-replace/assets/js/rtafar.local.js?ver=1.3.7 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-hhworkwear-com/
Cookie: utm_source=no; utm_medium=89403862252; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89403862252; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-hhworkwear-com%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Tue, 27 Sep 2022 11:22:02 GMT
etag: "13-62cff458-1960a36;;;"
last-modified: Thu, 14 Jul 2022 10:47:52 GMT
content-type: application/x-javascript
content-length: 19
accept-ranges: bytes
date: Mon, 26 Sep 2022 23:22:02 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-includes/js/jquery/ui/menu.min.js?ver=1.13.1
200 OK 2.9 kB URL HTTP/2 promoprawn.com/wp-includes/js/jquery/ui/menu.min.js?ver=1.13.1
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (9937)
Hash 9fcb59dd74df643e90b84727f98b2ecc
ac7ffd31e16f3d8c8479ab2640e8c45c111f364d
9683f9fd0a6cc5c891901c7f792a5e01bd58a7499ab45229b7e3bd7a469fb9bb
GET /wp-includes/js/jquery/ui/menu.min.js?ver=1.13.1 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-hhworkwear-com/
Cookie: utm_source=no; utm_medium=89403862252; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89403862252; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-hhworkwear-com%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Tue, 27 Sep 2022 11:22:02 GMT
etag: "2782-625095f6-19a0105;br"
last-modified: Fri, 08 Apr 2022 20:07:18 GMT
content-type: application/x-javascript
content-length: 2868
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Mon, 26 Sep 2022 23:22:02 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9
200 OK 2.4 kB URL HTTP/2 promoprawn.com/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (6475), with no line terminators
Hash 6fc7f6a64943fb700809729d3bd733b4
5f794ac00a49aa543c1f9c3eb7b1d20bc797e6f2
3101fde9e69cf266ba9486abd29a0f82fa43e6d3bebd43218b6d3f9c0fd903bc
GET /wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-hhworkwear-com/
Cookie: utm_source=no; utm_medium=89403862252; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89403862252; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-hhworkwear-com%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Tue, 27 Sep 2022 11:22:02 GMT
etag: "194b-6254194e-19a0248;br"
last-modified: Mon, 11 Apr 2022 12:04:30 GMT
content-type: application/x-javascript
content-length: 2356
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Mon, 26 Sep 2022 23:22:02 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
200 OK 6.9 kB URL HTTP/2 promoprawn.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (19138), with no line terminators
Hash 647e9639c172ea1329b55aea96c5ccd5
0de233c1691cf0a3c9d61d5658ee5b6953fbd958
d1f34aecec229d7714b3fb38af4e4bea63cf3532420bd2d0b02732a64fdba2f8
GET /wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-hhworkwear-com/
Cookie: utm_source=no; utm_medium=89403862252; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89403862252; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-hhworkwear-com%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Tue, 27 Sep 2022 11:22:02 GMT
etag: "4ac6-6254194e-19a0253;br"
last-modified: Mon, 11 Apr 2022 12:04:30 GMT
content-type: application/x-javascript
content-length: 6871
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Mon, 26 Sep 2022 23:22:02 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-includes/js/dist/dom-ready.min.js?ver=d996b53411d1533a84951212ab6ac4ff
200 OK 282 B URL HTTP/2 promoprawn.com/wp-includes/js/dist/dom-ready.min.js?ver=d996b53411d1533a84951212ab6ac4ff
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (463)
Hash 76f8633b8a727174600f2bf180b2fc62
601739aff913ae441dc5da803fdee8d0812c4747
b06a5da5f87d6f76cfc4b6975730e91a118919b519f02c3f01ac791a85480c08
GET /wp-includes/js/dist/dom-ready.min.js?ver=d996b53411d1533a84951212ab6ac4ff HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-hhworkwear-com/
Cookie: utm_source=no; utm_medium=89403862252; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89403862252; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-hhworkwear-com%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Tue, 27 Sep 2022 11:22:02 GMT
etag: "1f2-6254194e-19a023b;br"
last-modified: Mon, 11 Apr 2022 12:04:30 GMT
content-type: application/x-javascript
content-length: 282
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Mon, 26 Sep 2022 23:22:02 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-includes/js/dist/hooks.min.js?ver=c6d64f2cb8f5c6bb49caca37f8828ce3
200 OK 1.6 kB URL HTTP/2 promoprawn.com/wp-includes/js/dist/hooks.min.js?ver=c6d64f2cb8f5c6bb49caca37f8828ce3
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (4875)
Hash 334c10434c5114c1b6a896a4bfb97762
3141a7c37d1d5775dd56e0a971420aa95e952eed
4bc9855c90cecf283f832865270bd1a718c3d5cf3054e2df60cecbbb6fdd51e0
GET /wp-includes/js/dist/hooks.min.js?ver=c6d64f2cb8f5c6bb49caca37f8828ce3 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-hhworkwear-com/
Cookie: utm_source=no; utm_medium=89403862252; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89403862252; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-hhworkwear-com%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Tue, 27 Sep 2022 11:22:02 GMT
etag: "132e-6254194e-19a028f;br"
last-modified: Mon, 11 Apr 2022 12:04:30 GMT
content-type: application/x-javascript
content-length: 1575
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Mon, 26 Sep 2022 23:22:02 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-includes/js/dist/i18n.min.js?ver=ebee46757c6a411e38fd079a7ac71d94
200 OK 3.7 kB URL HTTP/2 promoprawn.com/wp-includes/js/dist/i18n.min.js?ver=ebee46757c6a411e38fd079a7ac71d94
IP
ASN #24940 Hetzner Online GmbH
Hash f76cd901010039724af10d37e014d290
61bb0147adee02a22e013aacd95b40bc18431603
ddee8f13a9822816f3f427e407c6b5e268dedc80c6cc02df03fd4c754bfbddd3
GET /wp-includes/js/dist/i18n.min.js?ver=ebee46757c6a411e38fd079a7ac71d94 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-hhworkwear-com/
Cookie: utm_source=no; utm_medium=89403862252; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89403862252; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-hhworkwear-com%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Tue, 27 Sep 2022 11:22:02 GMT
etag: "27ee-625596ef-19a02af;br"
last-modified: Tue, 12 Apr 2022 15:12:47 GMT
content-type: application/x-javascript
content-length: 3718
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Mon, 26 Sep 2022 23:22:02 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-includes/js/dist/a11y.min.js?ver=a38319d7ba46c6e60f7f9d4c371222c5
200 OK 858 B URL HTTP/2 promoprawn.com/wp-includes/js/dist/a11y.min.js?ver=a38319d7ba46c6e60f7f9d4c371222c5
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (2472)
Hash b0c4f225b053a315d5079627f1091a62
c3840f47d840cbc0acd525900895d812abd4346c
99162da318f3a7cc12a83fc818fe8240e921a5b9e8416ceb0f48e3e70d9d4fcc
GET /wp-includes/js/dist/a11y.min.js?ver=a38319d7ba46c6e60f7f9d4c371222c5 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-hhworkwear-com/
Cookie: utm_source=no; utm_medium=89403862252; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89403862252; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-hhworkwear-com%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Tue, 27 Sep 2022 11:22:02 GMT
etag: "9cc-6254194e-19a0235;br"
last-modified: Mon, 11 Apr 2022 12:04:30 GMT
content-type: application/x-javascript
content-length: 858
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Mon, 26 Sep 2022 23:22:02 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-content/themes/clipper/assets/js/lib/slick/slick.min.js?ver=1.7.1
200 OK 9.9 kB URL HTTP/2 promoprawn.com/wp-content/themes/clipper/assets/js/lib/slick/slick.min.js?ver=1.7.1
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (42634)
Hash 762efe221b6b5e41560e5ea0b4d311f0
8a26e405ab5656759decc9b662a6da1b277bf596
1a4f5d684b37667a6dd73cc0b5fddba230d9537adfd3b30ff5e2298729a9e962
GET /wp-content/themes/clipper/assets/js/lib/slick/slick.min.js?ver=1.7.1 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-hhworkwear-com/
Cookie: utm_source=no; utm_medium=89403862252; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89403862252; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-hhworkwear-com%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Tue, 27 Sep 2022 11:22:02 GMT
etag: "a68b-620e11aa-1980a4e;br"
last-modified: Thu, 17 Feb 2022 09:13:14 GMT
content-type: application/x-javascript
content-length: 9941
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Mon, 26 Sep 2022 23:22:02 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-content/themes/clipper/assets/js/lib/foundation/foundation.min.js?ver=6.4.3
200 OK 30 kB URL HTTP/2 promoprawn.com/wp-content/themes/clipper/assets/js/lib/foundation/foundation.min.js?ver=6.4.3
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (65536), with no line terminators
Hash ee3061888f79f5f4d331d2de2abeed64
85523c19a2d0da39e67f407cde66afe45961e1a4
35d8dd7c8c79159886c47f42195ea63f02656238632afda83d9fb8b130684cf6
GET /wp-content/themes/clipper/assets/js/lib/foundation/foundation.min.js?ver=6.4.3 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-hhworkwear-com/
Cookie: utm_source=no; utm_medium=89403862252; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89403862252; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-hhworkwear-com%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Tue, 27 Sep 2022 11:22:02 GMT
etag: "2440f-620e11aa-1980a54;br"
last-modified: Thu, 17 Feb 2022 09:13:14 GMT
content-type: application/x-javascript
content-length: 30137
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Mon, 26 Sep 2022 23:22:02 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-content/themes/clipper/assets/js/lib/foundation/motion-ui.min.js?ver=1.2.2
200 OK 672 B URL HTTP/2 promoprawn.com/wp-content/themes/clipper/assets/js/lib/foundation/motion-ui.min.js?ver=1.2.2
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (1683), with no line terminators
Hash b94465fd6a5dca879afbe6e86dad686f
ca81a8c96e5a440e08dc6036cefcfdc6b3779008
373c770a484e647dafe5c8b30ac0d7c8b942b32b1a29e0c2cc32645ed60f646f
GET /wp-content/themes/clipper/assets/js/lib/foundation/motion-ui.min.js?ver=1.2.2 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-hhworkwear-com/
Cookie: utm_source=no; utm_medium=89403862252; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89403862252; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-hhworkwear-com%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Tue, 27 Sep 2022 11:22:02 GMT
etag: "693-620e11aa-1980a53;br"
last-modified: Thu, 17 Feb 2022 09:13:14 GMT
content-type: application/x-javascript
content-length: 672
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Mon, 26 Sep 2022 23:22:02 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-content/themes/clipper/assets/js/theme-scripts.min.js?ver=2.0.9
200 OK 2.2 kB URL HTTP/2 promoprawn.com/wp-content/themes/clipper/assets/js/theme-scripts.min.js?ver=2.0.9
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (6814), with no line terminators
Hash 0639cf7204db2598b7b6e44666a279eb
aef294252f44cb8875cc52cb1d836d969ac9cf3c
33ddb4f2dad0f29729bd7dd78dedf8b20ca78c82e45eaafc8a4e44d19287d4d4
GET /wp-content/themes/clipper/assets/js/theme-scripts.min.js?ver=2.0.9 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-hhworkwear-com/
Cookie: utm_source=no; utm_medium=89403862252; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89403862252; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-hhworkwear-com%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Tue, 27 Sep 2022 11:22:02 GMT
etag: "1a9e-620e11aa-1980a58;br"
last-modified: Thu, 17 Feb 2022 09:13:14 GMT
content-type: application/x-javascript
content-length: 2172
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Mon, 26 Sep 2022 23:22:02 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-content/themes/clipper/includes/reports/scripts/reports.js?ver=1.0
200 OK 412 B URL HTTP/2 promoprawn.com/wp-content/themes/clipper/includes/reports/scripts/reports.js?ver=1.0
IP
ASN #24940 Hetzner Online GmbH
Hash 257ae7dae5cf066cc3ffa06d37a2f556
79b845a88029af15e79d0c1f1569ba3f1208bd90
6c4fedce38d11dee2749ae828ead9f3569ef0a0e4551a71eafd17a31d1d66b2b
GET /wp-content/themes/clipper/includes/reports/scripts/reports.js?ver=1.0 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-hhworkwear-com/
Cookie: utm_source=no; utm_medium=89403862252; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89403862252; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-hhworkwear-com%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Tue, 27 Sep 2022 11:22:02 GMT
etag: "40a-620e11aa-1980851;br"
last-modified: Thu, 17 Feb 2022 09:13:14 GMT
content-type: application/x-javascript
content-length: 412
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Mon, 26 Sep 2022 23:22:02 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
www.promoprawn.com/wp-content/uploads/2022/02/cropped-resized_header_logo-removebg-preview2.png
200 OK 64 kB URL HTTP/2 www.promoprawn.com/wp-content/uploads/2022/02/cropped-resized_header_logo-removebg-preview2.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 821 x 294, 8-bit/color RGBA, non-interlaced\012- data
Hash 07db10e79d004a9eed551896874dc040
02b3dd694b3e32a944de5c4105b395a842ece865
a747c3a902b5f085b7b874d9b0bc1b3d9292238d7331d45e3fdddd08f5076a7d
GET /wp-content/uploads/2022/02/cropped-resized_header_logo-removebg-preview2.png HTTP/1.1
Host: www.promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/
Cookie: utm_source=no; utm_medium=89403862252; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89403862252; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-hhworkwear-com%2F
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Tue, 27 Sep 2022 11:22:02 GMT
etag: "f927-620de978-1940643;;;"
last-modified: Thu, 17 Feb 2022 06:21:44 GMT
content-type: image/png
content-length: 63783
accept-ranges: bytes
date: Mon, 26 Sep 2022 23:22:02 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-includes/js/wp-emoji-release.min.js?ver=6.0.2
200 OK 4.6 kB URL HTTP/2 promoprawn.com/wp-includes/js/wp-emoji-release.min.js?ver=6.0.2
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (15660)
Hash 8b21827e4cc06ac9d6c686e463be1fb2
395e1545d76868371b3110d48179027eadef1b39
bf023dff36bcaa1d34063e0804ebfc1598550f64915890b39a2afbe95b8aed8a
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.0.2 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-hhworkwear-com/
Cookie: utm_source=no; utm_medium=89403862252; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89403862252; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-hhworkwear-com%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Tue, 27 Sep 2022 11:22:02 GMT
etag: "48b9-62551487-19a00d3;br"
last-modified: Tue, 12 Apr 2022 05:56:23 GMT
content-type: application/x-javascript
content-length: 4584
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Mon, 26 Sep 2022 23:22:02 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c939f97c8bcbfea356e92036803714bc
608c795e7c4fb943a4db49a4e4533c41ea717023
b05b38c78c15c259720bfc6783ac65ab60ceb1e6037b45b08113f183554f08cb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 23:22:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
promoprawn.com/wp-content/themes/clipper/images/bg-sidebox-line.png
200 OK 113 B URL HTTP/2 promoprawn.com/wp-content/themes/clipper/images/bg-sidebox-line.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 1 x 19, 8-bit gray+alpha, non-interlaced\012- data
Hash d759e787150faba42a8e2c123ee015ae
0403b47562bb5cebcd5111d572fdf665fcdc1e6c
9826d17ba5806594bcda5d7c739422b90c809d7bb3ac91221c7ccd0135c58a7d
GET /wp-content/themes/clipper/images/bg-sidebox-line.png HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/wp-content/themes/clipper/assets/css/style.min.css?ver=2.0.9
Cookie: utm_source=no; utm_medium=89403862252; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89403862252; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-hhworkwear-com%2F
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Tue, 27 Sep 2022 11:22:03 GMT
etag: "71-620e11ac-1980822;;;"
last-modified: Thu, 17 Feb 2022 09:13:16 GMT
content-type: image/png
content-length: 113
accept-ranges: bytes
date: Mon, 26 Sep 2022 23:22:03 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-content/themes/clipper/images/bg-footer.png
200 OK 178 B URL HTTP/2 promoprawn.com/wp-content/themes/clipper/images/bg-footer.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 1 x 150, 8-bit/color RGBA, non-interlaced\012- data
Hash 35d17bb07bd51bd7150bb7a0534b8811
9e4bc0d51ae379319dbef287c89c59ae01ae472d
7c4b06affdad61721db74e921fd27c6681fa4f01f6d97e0a54b08c4ed5ac41af
GET /wp-content/themes/clipper/images/bg-footer.png HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/wp-content/themes/clipper/assets/css/style.min.css?ver=2.0.9
Cookie: utm_source=no; utm_medium=89403862252; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89403862252; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-hhworkwear-com%2F
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Tue, 27 Sep 2022 11:22:03 GMT
etag: "b2-620e11ac-198080b;;;"
last-modified: Thu, 17 Feb 2022 09:13:16 GMT
content-type: image/png
content-length: 178
accept-ranges: bytes
date: Mon, 26 Sep 2022 23:22:03 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-content/themes/clipper/images/bg-footer-red.gif
200 OK 157 B URL HTTP/2 promoprawn.com/wp-content/themes/clipper/images/bg-footer-red.gif
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 87a, 1 x 45\012- data
Hash b29b8e308afb688f3f5664660226f9c8
ac3eb9351fdb042c4795cbad9350783b24a44294
563ad2a9e240a6743ae9ff8d8de9e5903d8edb010ea02da74c93abda378afa15
GET /wp-content/themes/clipper/images/bg-footer-red.gif HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/wp-content/themes/clipper/styles/red.css?ver=6.0.2
Cookie: utm_source=no; utm_medium=89403862252; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89403862252; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-hhworkwear-com%2F
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Tue, 27 Sep 2022 11:22:03 GMT
etag: "9d-620e11ac-19807b8;;;"
last-modified: Thu, 17 Feb 2022 09:13:16 GMT
content-type: image/gif
content-length: 157
accept-ranges: bytes
date: Mon, 26 Sep 2022 23:22:03 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-content/uploads/2022/02/cropped-prawn_favicon-removebg-preview-192x192.png
200 OK 21 kB URL HTTP/2 promoprawn.com/wp-content/uploads/2022/02/cropped-prawn_favicon-removebg-preview-192x192.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash 75336744e0240d8bb03a116fe4a0fe71
d4edee03869b0d53596193c745e6f8bdf537c646
e6e770dc40baafdca752013a5a39125b26ccd5d1f5b4235df61ff72fc5069dbb
GET /wp-content/uploads/2022/02/cropped-prawn_favicon-removebg-preview-192x192.png HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-hhworkwear-com/
Cookie: utm_source=no; utm_medium=89403862252; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89403862252; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-hhworkwear-com%2F
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Tue, 27 Sep 2022 11:22:03 GMT
etag: "50e1-620dd166-19406c3;;;"
last-modified: Thu, 17 Feb 2022 04:39:02 GMT
content-type: image/png
content-length: 20705
accept-ranges: bytes
date: Mon, 26 Sep 2022 23:22:03 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-content/uploads/2022/02/cropped-prawn_favicon-removebg-preview-32x32.png
200 OK 1.1 kB URL HTTP/2 promoprawn.com/wp-content/uploads/2022/02/cropped-prawn_favicon-removebg-preview-32x32.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash c029e0b9abdc5aacb520f5b9faf03105
dca9e8e13b5260dd951da772d79bd0c04f0f87e5
09711854e11cce389d4c9d3931975604849a2376ea31786e69dce5e20bb6115f
GET /wp-content/uploads/2022/02/cropped-prawn_favicon-removebg-preview-32x32.png HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-hhworkwear-com/
Cookie: utm_source=no; utm_medium=89403862252; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89403862252; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-hhworkwear-com%2F
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Tue, 27 Sep 2022 11:22:03 GMT
etag: "467-620dd166-194065a;;;"
last-modified: Thu, 17 Feb 2022 04:39:02 GMT
content-type: image/png
content-length: 1127
accept-ranges: bytes
date: Mon, 26 Sep 2022 23:22:03 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash cf99681f6f1d6e00e0abca7033eb6219
73261f7daa90ce6fd7a81b10ed7bd762200c3f28
3f4bfe673679f8f0650774c07f8707a7013ac7e1c3e1b3b03e68cbaa5ccc1af6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4523
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 23:22:03 GMT
Last-Modified: Mon, 26 Sep 2022 22:06:40 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4538701cf9bc34d908f50370beb922f4
df141b9c3ec626ecaba7c1899073a48b811c4113
61497b93eb237687a8fff5845a7a81aff2f2f53dc56f2d0818bfb98dd1256d6f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 23:22:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
connect.facebook.net/en_GB/sdk.js
200 OK 1.7 kB URL HTTP/2 connect.facebook.net/en_GB/sdk.js
IP
File type ASCII text, with very long lines (1961)
Hash c2f3666911907505aee0510e82e539d8
17e3b71b0a84876ff3d3c1bdacca424bd8b3e29a
bb95fc01b08d7d651b74f6332bc93b64b4aa01f96e4237b760171c352a69296c
GET /en_GB/sdk.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 18d00754ae19b5abd12c61399675f944
etag: "8ce4321f8118a43757cde1a91934d0e6"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Mon, 26 Sep 2022 23:22:51 GMT
cache-control: public,max-age=1200,stale-while-revalidate=3600
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: wvNmaRGQdQWu4FEOguU52A==
x-fb-debug: UnuF1qoqEoRxMHG7V4NhCdvNguoihjMNgD4mah92xg+VMOcXuftuQyVKLIh1PyFiWoTL57EaBDqUYjTqViejxw==
priority: u=6
content-length: 1686
x-fb-trip-id: 1679558926
date: Mon, 26 Sep 2022 23:22:03 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash cf99681f6f1d6e00e0abca7033eb6219
73261f7daa90ce6fd7a81b10ed7bd762200c3f28
3f4bfe673679f8f0650774c07f8707a7013ac7e1c3e1b3b03e68cbaa5ccc1af6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4523
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 23:22:03 GMT
Last-Modified: Mon, 26 Sep 2022 22:06:40 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4538701cf9bc34d908f50370beb922f4
df141b9c3ec626ecaba7c1899073a48b811c4113
61497b93eb237687a8fff5845a7a81aff2f2f53dc56f2d0818bfb98dd1256d6f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 23:22:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
promoprawn.com/wp-content/themes/clipper/framework/js/jquery-ui/jquery.ui.datepicker-lang.js?ver=6.0.2
200 OK 75 kB URL HTTP/2 promoprawn.com/wp-content/themes/clipper/framework/js/jquery-ui/jquery.ui.datepicker-lang.js?ver=6.0.2
IP
ASN #24940 Hetzner Online GmbH
Hash d1ae533ac5613dee6181ba1691597a86
022cb06fde8eb891d4614e6e3db74928a8de594a
8f1e939a4fd4ab5d1c05135f55eabaee512c9c2d218179ee1055202f64392553
GET /wp-content/themes/clipper/framework/js/jquery-ui/jquery.ui.datepicker-lang.js?ver=6.0.2 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-hhworkwear-com/
Cookie: utm_source=no; utm_medium=89403862252; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89403862252; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-hhworkwear-com%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Tue, 27 Sep 2022 11:22:02 GMT
etag: "e6-620e11ac-198074f;gz"
last-modified: Thu, 17 Feb 2022 09:13:16 GMT
content-type: application/x-javascript
accept-ranges: bytes
date: Mon, 26 Sep 2022 23:22:02 GMT
server: LiteSpeed
content-encoding: gzip
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash bfc8c650e23854f708a3dd54fca4393f
b54c061cf5a5306a68112d403471914e839a68c8
84b8c36947944ea94b27e053f2abb944e6951157e256991f8b1523b9cacfe362
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 23:22:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
translate.googleapis.com/translate_static/css/translateelement.css
200 OK 3.6 kB URL HTTP/2 translate.googleapis.com/translate_static/css/translateelement.css
IP
File type ASCII text, with very long lines (18670)
Hash 897ba9a21d9625286674da769dacc2e2
84b4923ab7dee562395160824d53496314499b77
696cbf5c2f3f1efae555562b72abbbb22bed02eff03d62074555cab241190ae0
GET /translate_static/css/translateelement.css HTTP/1.1
Host: translate.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="rosetta"
report-to: {"group":"rosetta","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/rosetta"}]}
content-length: 3619
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 26 Sep 2022 23:16:38 GMT
expires: Tue, 27 Sep 2022 00:16:38 GMT
cache-control: public, max-age=3600
age: 325
last-modified: Wed, 17 Aug 2022 23:38:00 GMT
content-type: text/css
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.Aw0KCF0YAxE.O/d=1/exm=el_conf/ed=1/rs=AN8SPfoKgx5LsdYmbmnxU3cRYVKJn0Zzig/m=el_main
200 OK 94 kB URL HTTP/2 translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.Aw0KCF0YAxE.O/d=1/exm=el_conf/ed=1/rs=AN8SPfoKgx5LsdYmbmnxU3cRYVKJn0Zzig/m=el_main
IP
File type ASCII text, with very long lines (1613)
Hash abe5dfbfca8f0907abb1bab1f3597906
ec03951a1465e01b2d4170e1c9aeaf34d21d16d0
4e9df864bff28fb550b7f19254a3d007ba4db0c3cdd7071cc9e6b5d8418d4238
GET /_/translate_http/_/js/k=translate_http.tr.no.Aw0KCF0YAxE.O/d=1/exm=el_conf/ed=1/rs=AN8SPfoKgx5LsdYmbmnxU3cRYVKJn0Zzig/m=el_main HTTP/1.1
Host: translate.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="rosetta"
report-to: {"group":"rosetta","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/rosetta"}]}
content-length: 93858
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 26 Sep 2022 19:14:48 GMT
expires: Tue, 26 Sep 2023 19:14:48 GMT
cache-control: public, max-age=31536000
last-modified: Sat, 24 Sep 2022 05:12:23 GMT
content-type: text/javascript; charset=UTF-8
age: 14835
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash bfc8c650e23854f708a3dd54fca4393f
b54c061cf5a5306a68112d403471914e839a68c8
84b8c36947944ea94b27e053f2abb944e6951157e256991f8b1523b9cacfe362
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 23:22:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash cae538dcce82598fbe43c0bf443e62dd
cc68ac6be9c5e0087a0000e5735b83270ace30f5
954b9e9d9744e1319c51760780a35de2dec353afffac705c2cca6d836a5e056d
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 19826
date: Mon, 26 Sep 2022 22:41:09 GMT
expires: Tue, 27 Sep 2022 00:41:09 GMT
cache-control: public, max-age=7200
age: 2454
last-modified: Sun, 11 Sep 2022 13:50:09 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 737756d717fd215d94458a21028ae486
ee3c3097bcb2ff3f5482b0dc6056b1549afa8f1f
8e705bae2060960e1b2f79c42ebc445d52f307aeac41b34d3a1789879e51b85a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 23:22:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.gstatic.com/images/branding/product/1x/translate_24dp.png
200 OK 846 B URL HTTP/2 www.gstatic.com/images/branding/product/1x/translate_24dp.png
IP
File type PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Hash e9cd262114358f26b7608b56905185dc
6dbde0a96deaab2b529723ce26c62043cf9180ab
5a861509b658aa24fc3aed2867ac3c061e7d818d90b9990959afc6d1b5d4ff99
GET /images/branding/product/1x/translate_24dp.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 846
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 25 Sep 2022 08:57:26 GMT
expires: Mon, 25 Sep 2023 08:57:26 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 14 Oct 2021 09:08:00 GMT
content-type: image/png
age: 138277
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 737756d717fd215d94458a21028ae486
ee3c3097bcb2ff3f5482b0dc6056b1549afa8f1f
8e705bae2060960e1b2f79c42ebc445d52f307aeac41b34d3a1789879e51b85a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 23:22:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 737756d717fd215d94458a21028ae486
ee3c3097bcb2ff3f5482b0dc6056b1549afa8f1f
8e705bae2060960e1b2f79c42ebc445d52f307aeac41b34d3a1789879e51b85a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 23:22:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_42x16dp.png
200 OK 910 B URL HTTP/2 www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_42x16dp.png
IP
File type PNG image data, 42 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash efa6bb2bfe459bc6f4bdafa3db0383f6
52d15ce52fe50643e542c17812de43f4ed1b6ee0
6318394f737c66f0e2ccfcd88e3935c6667633a1b95fa29fba2b75431d55eef2
GET /images/branding/googlelogo/1x/googlelogo_color_42x16dp.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 910
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 25 Sep 2022 05:24:04 GMT
expires: Mon, 25 Sep 2023 05:24:04 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 22 Oct 2019 18:15:00 GMT
content-type: image/png
age: 151079
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.gstatic.com/images/branding/product/2x/translate_24dp.png
200 OK 1.8 kB URL HTTP/2 www.gstatic.com/images/branding/product/2x/translate_24dp.png
IP
File type PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\012- data
Hash c69c796362406f9e11c7f4bf5bb628da
e489ce95ab56208090868882113d7416abf46775
4dac0026fbfa2615dce30c0af12830863fe885f84387a0147b9e338f548d5d82
GET /images/branding/product/2x/translate_24dp.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://translate.googleapis.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 1842
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 26 Sep 2022 11:06:43 GMT
expires: Tue, 26 Sep 2023 11:06:43 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 14 Oct 2021 09:08:00 GMT
content-type: image/png
age: 44120
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 737756d717fd215d94458a21028ae486
ee3c3097bcb2ff3f5482b0dc6056b1549afa8f1f
8e705bae2060960e1b2f79c42ebc445d52f307aeac41b34d3a1789879e51b85a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 23:22:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static.xx.fbcdn.net/rsrc.php/v3/yu/l/0,cross/bYH8ziu5vE6.css?_nc_x=Ij3Wp8lg5Kz
200 OK 5.6 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yu/l/0,cross/bYH8ziu5vE6.css?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (4093)
Hash b18c98bf10210112f3786f96119140b5
62a42017a24d3bf13313400c6bf95b8da6c330fd
d4fd3380e2bfec1adfb559d585f568f48f066a9c6df1d89e608f1794a7f7bf85
GET /rsrc.php/v3/yu/l/0,cross/bYH8ziu5vE6.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: text/css; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Tue, 26 Sep 2023 17:54:33 GMT
cache-control: public,max-age=31536000,immutable
timing-allow-origin: *
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-fb-rlafr: 0
content-md5: sYyYvxAhARLzeG+WEZFAtQ==
x-fb-debug: mTHUlhfqbi7EyaEaJoSx0d6GW8WzXm3UYK1OdRLOhpGRFh0iuVabFmI2j68Wd6WjA+y0KxLpgUNqiNZDCYY9CA==
priority: u=3,i
content-length: 5625
x-fb-trip-id: 1679558926
date: Mon, 26 Sep 2022 23:22:04 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r.srvtrck.com/v1/redirect?url=https%3A%2F%2Fhhworkwear.com&type=url&api_key=75e8ee737d4fc03bfc0d76000b6f72b0&site_id=e7e6bb15baa647a58253d090ef5d387a&yk_tag=89403862252
301 Moved Permanently 0 B URL HTTP/1.1 r.srvtrck.com/v1/redirect?url=https%3A%2F%2Fhhworkwear.com&type=url&api_key=75e8ee737d4fc03bfc0d76000b6f72b0&site_id=e7e6bb15baa647a58253d090ef5d387a&yk_tag=89403862252
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v1/redirect?url=https%3A%2F%2Fhhworkwear.com&type=url&api_key=75e8ee737d4fc03bfc0d76000b6f72b0&site_id=e7e6bb15baa647a58253d090ef5d387a&yk_tag=89403862252 HTTP/1.1
Host: r.srvtrck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Mon, 26 Sep 2022 23:22:04 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Tue, 27 Sep 2022 00:22:04 GMT
Location: https://r.srvtrck.com/v1/redirect?url=https%3A%2F%2Fhhworkwear.com&type=url&api_key=75e8ee737d4fc03bfc0d76000b6f72b0&site_id=e7e6bb15baa647a58253d090ef5d387a&yk_tag=89403862252
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 750fbd50e886b4ee-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
region1.google-analytics.com/g/collect?v=2&tid=G-GZH27V8EPY>m=2oe9l0&_p=1433692640&gdid=dZTNiMT&cid=1729574242.1664234522&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1664234521&sct=1&seg=0&dl=https%3A%2F%2Fpromoprawn.com%2Fgo-to-hhworkwear-com%2F&dt=Go%20to%20hhworkwear-com&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-GZH27V8EPY>m=2oe9l0&_p=1433692640&gdid=dZTNiMT&cid=1729574242.1664234522&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1664234521&sct=1&seg=0&dl=https%3A%2F%2Fpromoprawn.com%2Fgo-to-hhworkwear-com%2F&dt=Go%20to%20hhworkwear-com&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-GZH27V8EPY>m=2oe9l0&_p=1433692640&gdid=dZTNiMT&cid=1729574242.1664234522&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1664234521&sct=1&seg=0&dl=https%3A%2F%2Fpromoprawn.com%2Fgo-to-hhworkwear-com%2F&dt=Go%20to%20hhworkwear-com&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://promoprawn.com
Connection: keep-alive
Referer: https://promoprawn.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://promoprawn.com
date: Mon, 26 Sep 2022 23:22:04 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r.srvtrck.com/v1/redirect?url=https%3A%2F%2Fhhworkwear.com&type=url&api_key=75e8ee737d4fc03bfc0d76000b6f72b0&site_id=e7e6bb15baa647a58253d090ef5d387a&yk_tag=89403862252
302 Found 0 B URL HTTP/2 r.srvtrck.com/v1/redirect?url=https%3A%2F%2Fhhworkwear.com&type=url&api_key=75e8ee737d4fc03bfc0d76000b6f72b0&site_id=e7e6bb15baa647a58253d090ef5d387a&yk_tag=89403862252
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v1/redirect?url=https%3A%2F%2Fhhworkwear.com&type=url&api_key=75e8ee737d4fc03bfc0d76000b6f72b0&site_id=e7e6bb15baa647a58253d090ef5d387a&yk_tag=89403862252 HTTP/1.1
Host: r.srvtrck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Mon, 26 Sep 2022 23:22:04 GMT
content-length: 0
p3p: CP="CAO PSA OUR"
set-cookie: ykuid=64487da263904546847dd05543b7cd50; Domain=.srvtrck.com; Expires=Tue, 26-Sep-2023 23:22:04 GMT; Path=/
location: /v2/go?t=gtipo%3Au%2Fcoag8.defk0o0r3u2.5e7%2F6ta%2F5obs6t7s%3DamctGu%3F%26t0%3D36e403d2a3f28%260s4g9kcS5Z0v3T9a0W420r0L050M%3Damst%26uf%26iuittsoaIa%3Dd6d6a6455c9m3d8170-27785bc5u-tdy7n6%269f3e1I%3D%3DI8e4o4%2603aeei4r3s79a571057_b823d2s3a4c6I_%3D0016300137010d1h6r2e3%26775990278c1c97%26cecv9c3%3D56bt7k2n1dd3rbf3o3o-%3Ddr6n4o7%26-7d805a0a%3D8Iaod%2612%266d9e9Pdrnmi%3Darlefcas-oB1pvc3K420n1I2F69f7dI5v6C0%3Deid.32764763026671asb.coshor2eeeeib%2F1gblac4tan8p5odg9oel5k3o7--no%2Fpsntnh&e=1&ai=b38bb4861def4fd88323c9f4abe07b8c&sct=1&ct=1664234524395&cu=9f3d0556c09e4d0387f4a6d006e73a0b&ykuid=64487da263904546847dd05543b7cd50&sc=1&cs=e4daebe0c4dc05fc2d921e51b202bbcc
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 750fbd512ad3fac4-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
status.thawte.com/
200 OK 471 B IP
Hash b59d1394cd85140e9594a47a61b95c28
d794c3f1fdcbad9b9491b398b5f149105677ab09
d7d1be356e702c5c2a42857125574ca922d68e481a6935facf22b7f0cb207f8f
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6270
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 23:22:04 GMT
Last-Modified: Mon, 26 Sep 2022 21:37:34 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471
no-go.kelkoogroup.net/ctl/go/sitesearchGo?.ts=1664233273622&.sig=kCSvZIv7T9aFWI2nr2LK5cMpaBs-&affiliationId=96966625&comId=100528775&country=no&offerId=182474b05a3e94c3c77ac7c0770b927d&searchId=1076100331000_1664233273589_25811599&service=36&tokenId=31b33936-7dd6-457b-8d70-a7a883a9d514&addedParams=true&custom1=v0304000142069f3d0556c09e4d0387f4a6d006e73a0b&custom2=e7e6bb15baa647a58253d090ef5d387a-couponing
200 OK 29 kB URL HTTP/1.1 no-go.kelkoogroup.net/ctl/go/sitesearchGo?.ts=1664233273622&.sig=kCSvZIv7T9aFWI2nr2LK5cMpaBs-&affiliationId=96966625&comId=100528775&country=no&offerId=182474b05a3e94c3c77ac7c0770b927d&searchId=1076100331000_1664233273589_25811599&service=36&tokenId=31b33936-7dd6-457b-8d70-a7a883a9d514&addedParams=true&custom1=v0304000142069f3d0556c09e4d0387f4a6d006e73a0b&custom2=e7e6bb15baa647a58253d090ef5d387a-couponing
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (12978)
Hash 2684867f2b58ae083a3e12b95cbb409d
0ccab7747da3c7873910ae186e767961d739a327
106b544f7049ed23f9ddae52e12c5309aacce4053d5202a3a3bccc28031e38aa
GET /ctl/go/sitesearchGo?.ts=1664233273622&.sig=kCSvZIv7T9aFWI2nr2LK5cMpaBs-&affiliationId=96966625&comId=100528775&country=no&offerId=182474b05a3e94c3c77ac7c0770b927d&searchId=1076100331000_1664233273589_25811599&service=36&tokenId=31b33936-7dd6-457b-8d70-a7a883a9d514&addedParams=true&custom1=v0304000142069f3d0556c09e4d0387f4a6d006e73a0b&custom2=e7e6bb15baa647a58253d090ef5d387a-couponing HTTP/1.1
Host: no-go.kelkoogroup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://r.srvtrck.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 23:22:04 GMT
leadId: dc1-kls-prod-ls-01.prod.dc1.kelkoo.net_1664234524657_2215926
clickId: 107698154_1664234524651_4655139
country: no
Accept-CH: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory
X-DataDome: protected
Request-Time: PT0.016093S
X-Robots-Tag: noindex,nofollow
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: ALLOWALL
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: master-only
Content-Type: text/html; charset=UTF-8
Content-Length: 29426
Set-Cookie: datadome=~zMf7fC~kQKoaqI0BRMRJcC4jP3rv5jjGVC2zKf6n9NOw5ag6sry3ShJsSfw2lbcZ8Jr~ykhYAStk0FCFI9IRVh9ant94cYxatUA3XEo74qxI1t2rTV-j7_mqGSbZ20; Max-Age=31536000; Expires=Tue, 26 Sep 2023 23:22:04 GMT; SameSite=Lax; Path=/; Domain=.kelkoogroup.net; Secure
kelkooID=a4c629a-1837c1b8fec-12fab1; Max-Age=31536000; Expires=Tue, 26 Sep 2023 23:22:04 GMT; SameSite=None; Path=/; Domain=kelkoogroup.net; Secure; HTTPOnly
P3P: CP="Anything"
ApacheTracking: localhost
Keep-Alive: timeout=40, max=91
Connection: Keep-Alive
no-go.kelkoogroup.net/assets/images/p.png?country=no&k=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&leadId=dc1-kls-prod-ls-01.prod.dc1.kelkoo.net_1664234524657_2215926&clickId=107698154_1664234524651_4655139
200 OK 68 B URL HTTP/1.1 no-go.kelkoogroup.net/assets/images/p.png?country=no&k=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&leadId=dc1-kls-prod-ls-01.prod.dc1.kelkoo.net_1664234524657_2215926&clickId=107698154_1664234524651_4655139
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced\012- data
Hash 91e42db1c66c0b276abf6234dc50b2eb
c1986af3c26609b8b7d8933f99c51c1a89e9ea6b
63ef318d96b5d0d0ceba6e04a4e622b1158335cdc67c49e27839132c6f655058
GET /assets/images/p.png?country=no&k=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&leadId=dc1-kls-prod-ls-01.prod.dc1.kelkoo.net_1664234524657_2215926&clickId=107698154_1664234524651_4655139 HTTP/1.1
Host: no-go.kelkoogroup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no-go.kelkoogroup.net/ctl/go/sitesearchGo?.ts=1664233273622&.sig=kCSvZIv7T9aFWI2nr2LK5cMpaBs-&affiliationId=96966625&comId=100528775&country=no&offerId=182474b05a3e94c3c77ac7c0770b927d&searchId=1076100331000_1664233273589_25811599&service=36&tokenId=31b33936-7dd6-457b-8d70-a7a883a9d514&addedParams=true&custom1=v0304000142069f3d0556c09e4d0387f4a6d006e73a0b&custom2=e7e6bb15baa647a58253d090ef5d387a-couponing
Connection: keep-alive
Cookie: datadome=~zMf7fC~kQKoaqI0BRMRJcC4jP3rv5jjGVC2zKf6n9NOw5ag6sry3ShJsSfw2lbcZ8Jr~ykhYAStk0FCFI9IRVh9ant94cYxatUA3XEo74qxI1t2rTV-j7_mqGSbZ20; kelkooID=a4c629a-1837c1b8fec-12fab1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 23:22:04 GMT
Request-Time: PT0.002172S
X-Robots-Tag: noindex,nofollow
Cache-Control: private, must-revalidate
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: ALLOWALL
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: master-only
Content-Type: image/png
Content-Length: 68
P3P: CP="Anything"
ApacheTracking: localhost
Keep-Alive: timeout=40, max=86
Connection: Keep-Alive
r.srvtrck.com/v2/go?t=gtipo%3Au%2Fcoag8.defk0o0r3u2.5e7%2F6ta%2F5obs6t7s%3DamctGu%3F%26t0%3D36e403d2a3f28%260s4g9kcS5Z0v3T9a0W420r0L050M%3Damst%26uf%26iuittsoaIa%3Dd6d6a6455c9m3d8170-27785bc5u-tdy7n6%269f3e1I%3D%3DI8e4o4%2603aeei4r3s79a571057_b823d2s3a4c6I_%3D0016300137010d1h6r2e3%26775990278c1c97%26cecv9c3%3D56bt7k2n1dd3rbf3o3o-%3Ddr6n4o7%26-7d805a0a%3D8Iaod%2612%266d9e9Pdrnmi%3Darlefcas-oB1pvc3K420n1I2F69f7dI5v6C0%3Deid.32764763026671asb.coshor2eeeeib%2F1gblac4tan8p5odg9oel5k3o7--no%2Fpsntnh&e=1&ai=b38bb4861def4fd88323c9f4abe07b8c&sct=1&ct=1664234524395&cu=9f3d0556c09e4d0387f4a6d006e73a0b&ykuid=64487da263904546847dd05543b7cd50&sc=1&cs=e4daebe0c4dc05fc2d921e51b202bbcc
200 OK 1.2 kB URL HTTP/2 r.srvtrck.com/v2/go?t=gtipo%3Au%2Fcoag8.defk0o0r3u2.5e7%2F6ta%2F5obs6t7s%3DamctGu%3F%26t0%3D36e403d2a3f28%260s4g9kcS5Z0v3T9a0W420r0L050M%3Damst%26uf%26iuittsoaIa%3Dd6d6a6455c9m3d8170-27785bc5u-tdy7n6%269f3e1I%3D%3DI8e4o4%2603aeei4r3s79a571057_b823d2s3a4c6I_%3D0016300137010d1h6r2e3%26775990278c1c97%26cecv9c3%3D56bt7k2n1dd3rbf3o3o-%3Ddr6n4o7%26-7d805a0a%3D8Iaod%2612%266d9e9Pdrnmi%3Darlefcas-oB1pvc3K420n1I2F69f7dI5v6C0%3Deid.32764763026671asb.coshor2eeeeib%2F1gblac4tan8p5odg9oel5k3o7--no%2Fpsntnh&e=1&ai=b38bb4861def4fd88323c9f4abe07b8c&sct=1&ct=1664234524395&cu=9f3d0556c09e4d0387f4a6d006e73a0b&ykuid=64487da263904546847dd05543b7cd50&sc=1&cs=e4daebe0c4dc05fc2d921e51b202bbcc
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (579)
Hash 08324fd57e5b32cbe3fab21651243cb3
08822c81539dd101872d94d7635a940bb6f3a5c6
b0da7959cc6e2b9d8998469cccc15f7eb70c04356bb25ec3c2fd9612887a6aee
GET /v2/go?t=gtipo%3Au%2Fcoag8.defk0o0r3u2.5e7%2F6ta%2F5obs6t7s%3DamctGu%3F%26t0%3D36e403d2a3f28%260s4g9kcS5Z0v3T9a0W420r0L050M%3Damst%26uf%26iuittsoaIa%3Dd6d6a6455c9m3d8170-27785bc5u-tdy7n6%269f3e1I%3D%3DI8e4o4%2603aeei4r3s79a571057_b823d2s3a4c6I_%3D0016300137010d1h6r2e3%26775990278c1c97%26cecv9c3%3D56bt7k2n1dd3rbf3o3o-%3Ddr6n4o7%26-7d805a0a%3D8Iaod%2612%266d9e9Pdrnmi%3Darlefcas-oB1pvc3K420n1I2F69f7dI5v6C0%3Deid.32764763026671asb.coshor2eeeeib%2F1gblac4tan8p5odg9oel5k3o7--no%2Fpsntnh&e=1&ai=b38bb4861def4fd88323c9f4abe07b8c&sct=1&ct=1664234524395&cu=9f3d0556c09e4d0387f4a6d006e73a0b&ykuid=64487da263904546847dd05543b7cd50&sc=1&cs=e4daebe0c4dc05fc2d921e51b202bbcc HTTP/1.1
Host: r.srvtrck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: ykuid=64487da263904546847dd05543b7cd50
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 23:22:04 GMT
content-type: text/html;charset=UTF-8
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 750fbd519af6fac4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
no-go.kelkoogroup.net/fp?country=no&k=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&leadId=dc1-kls-prod-ls-01.prod.dc1.kelkoo.net_1664234524657_2215926&clickId=107698154_1664234524651_4655139
200 OK 0 B URL HTTP/1.1 no-go.kelkoogroup.net/fp?country=no&k=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&leadId=dc1-kls-prod-ls-01.prod.dc1.kelkoo.net_1664234524657_2215926&clickId=107698154_1664234524651_4655139
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /fp?country=no&k=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&leadId=dc1-kls-prod-ls-01.prod.dc1.kelkoo.net_1664234524657_2215926&clickId=107698154_1664234524651_4655139 HTTP/1.1
Host: no-go.kelkoogroup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no-go.kelkoogroup.net/ctl/go/sitesearchGo?.ts=1664233273622&.sig=kCSvZIv7T9aFWI2nr2LK5cMpaBs-&affiliationId=96966625&comId=100528775&country=no&offerId=182474b05a3e94c3c77ac7c0770b927d&searchId=1076100331000_1664233273589_25811599&service=36&tokenId=31b33936-7dd6-457b-8d70-a7a883a9d514&addedParams=true&custom1=v0304000142069f3d0556c09e4d0387f4a6d006e73a0b&custom2=e7e6bb15baa647a58253d090ef5d387a-couponing
Content-Type: text/plain;charset=utf-8
Content-Length: 520
Origin: https://no-go.kelkoogroup.net
Connection: keep-alive
Cookie: datadome=~zMf7fC~kQKoaqI0BRMRJcC4jP3rv5jjGVC2zKf6n9NOw5ag6sry3ShJsSfw2lbcZ8Jr~ykhYAStk0FCFI9IRVh9ant94cYxatUA3XEo74qxI1t2rTV-j7_mqGSbZ20; kelkooID=a4c629a-1837c1b8fec-12fab1; _ga=GA1.2.1108655596.1664234522; _gid=GA1.2.1676259295.1664234522
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 23:22:04 GMT
Request-Time: PT0.002879S
X-Robots-Tag: noindex,nofollow
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: ALLOWALL
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: master-only
Content-Type: text/plain; charset=UTF-8
Content-Length: 0
P3P: CP="Anything"
ApacheTracking: localhost
Keep-Alive: timeout=40, max=96
Connection: Keep-Alive
dd.kelkoogroup.net/tags.js
200 OK 43 kB URL HTTP/2 dd.kelkoogroup.net/tags.js
IP
File type ASCII text, with very long lines (65432)
Hash fbe95e048d875d7afcc3559643637879
a14dceea986b7cdcfd99b9c1780ffd0671eb474c
3a073213b1dc128dcc32cb454889f53f66488d540f71ab8b668f633ed0251865
GET /tags.js HTTP/1.1
Host: dd.kelkoogroup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no-go.kelkoogroup.net/
Connection: keep-alive
Cookie: datadome=~zMf7fC~kQKoaqI0BRMRJcC4jP3rv5jjGVC2zKf6n9NOw5ag6sry3ShJsSfw2lbcZ8Jr~ykhYAStk0FCFI9IRVh9ant94cYxatUA3XEo74qxI1t2rTV-j7_mqGSbZ20; kelkooID=a4c629a-1837c1b8fec-12fab1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: text/javascript
content-length: 42896
server: Apache
strict-transport-security: max-age=63072000; includeSubDomains; preload
last-modified: Fri, 23 Sep 2022 08:38:37 GMT
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
via: 1.1 2f72de1f504b6784c7adb04e7fe314f2.cloudfront.net (CloudFront), 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
date: Mon, 26 Sep 2022 22:39:05 GMT
cache-control: max-age=3600, public
expires: Mon, 26 Sep 2022 23:39:05 GMT
etag: "337cb-5e9541aaa9c3a-gzip"
vary: Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: FRA60-P2, OSL50-P1
x-amz-cf-id: ZUcYzFjhEeEmbSufQSMtps4kUGSb0onaS3FzXXXAPpcowZ-lTGPTaA==
age: 2579
X-Firefox-Spdy: h2
no-go.kelkoogroup.net/favicon.ico
403 Forbidden 0 B URL HTTP/1.0 no-go.kelkoogroup.net/favicon.ico
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: no-go.kelkoogroup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no-go.kelkoogroup.net/ctl/go/sitesearchGo?.ts=1664233273622&.sig=kCSvZIv7T9aFWI2nr2LK5cMpaBs-&affiliationId=96966625&comId=100528775&country=no&offerId=182474b05a3e94c3c77ac7c0770b927d&searchId=1076100331000_1664233273589_25811599&service=36&tokenId=31b33936-7dd6-457b-8d70-a7a883a9d514&addedParams=true&custom1=v0304000142069f3d0556c09e4d0387f4a6d006e73a0b&custom2=e7e6bb15baa647a58253d090ef5d387a-couponing
Connection: keep-alive
Cookie: datadome=~zMf7fC~kQKoaqI0BRMRJcC4jP3rv5jjGVC2zKf6n9NOw5ag6sry3ShJsSfw2lbcZ8Jr~ykhYAStk0FCFI9IRVh9ant94cYxatUA3XEo74qxI1t2rTV-j7_mqGSbZ20; kelkooID=a4c629a-1837c1b8fec-12fab1; _ga=GA1.2.1108655596.1664234522; _gid=GA1.2.1676259295.1664234522
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.0 403 Forbidden
Server: BigIP
Connection: Keep-Alive
Content-Length: 0
no-go.kelkoogroup.net/redirect?country=no&k=612f7a9541cd6ea61eb554c0e4cff4373002ebc12b4ed4644bb21c184ea9effb84bdd131b2850cb5c9fc1d09028fe16a2193a629f9e73b4de221b4f7bef7f38ba97ae19720ee811b350ed86316ccd0ea82ba960c8c06e25508e6d9a61533f4de2240a56fc429d94460cbc189d1dd6227130addb2d5f87fe56dc13d954e6b5140983ec49e81cdfc3c8700220832942fc408bcc327475f4ecb3ea94ad78d7c68151b020f41b010b3e4489c1592e4b1d2ffa6da3efc150505e9b699fd42c6557e9a7f313d2229654632bae6d5a53cbcc09e9c1ac8c27cf3d2994fb9d4902305e68f239840262217ae5f8b337d7f89975a5fded392b6b92a72606614fd09978dc419760aaa50a7fea7641679c796d55dc71d7d5eaf1801cf6167&leadId=dc1-kls-prod-ls-01.prod.dc1.kelkoo.net_1664234524657_2215926&clickId=107698154_1664234524651_4655139&url=https%3A%2F%2Fwww.hhworkwear.com%2Fno_no_ww%2Faberdeen-suit-76679%3Fkk%3Da4c629a-1837c1b8fec-12fab1%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DHH%2BWorkwear%2BWorkwear%2BHelly%2BHansen%2BAberde&initiator=dd
303 See Other 0 B URL HTTP/1.1 no-go.kelkoogroup.net/redirect?country=no&k=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&leadId=dc1-kls-prod-ls-01.prod.dc1.kelkoo.net_1664234524657_2215926&clickId=107698154_1664234524651_4655139&url=https%3A%2F%2Fwww.hhworkwear.com%2Fno_no_ww%2Faberdeen-suit-76679%3Fkk%3Da4c629a-1837c1b8fec-12fab1%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DHH%2BWorkwear%2BWorkwear%2BHelly%2BHansen%2BAberde&initiator=dd
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /redirect?country=no&k=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&leadId=dc1-kls-prod-ls-01.prod.dc1.kelkoo.net_1664234524657_2215926&clickId=107698154_1664234524651_4655139&url=https%3A%2F%2Fwww.hhworkwear.com%2Fno_no_ww%2Faberdeen-suit-76679%3Fkk%3Da4c629a-1837c1b8fec-12fab1%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DHH%2BWorkwear%2BWorkwear%2BHelly%2BHansen%2BAberde&initiator=dd HTTP/1.1
Host: no-go.kelkoogroup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no-go.kelkoogroup.net/ctl/go/sitesearchGo?.ts=1664233273622&.sig=kCSvZIv7T9aFWI2nr2LK5cMpaBs-&affiliationId=96966625&comId=100528775&country=no&offerId=182474b05a3e94c3c77ac7c0770b927d&searchId=1076100331000_1664233273589_25811599&service=36&tokenId=31b33936-7dd6-457b-8d70-a7a883a9d514&addedParams=true&custom1=v0304000142069f3d0556c09e4d0387f4a6d006e73a0b&custom2=e7e6bb15baa647a58253d090ef5d387a-couponing
Connection: keep-alive
Cookie: datadome=~zMf7fC~kQKoaqI0BRMRJcC4jP3rv5jjGVC2zKf6n9NOw5ag6sry3ShJsSfw2lbcZ8Jr~ykhYAStk0FCFI9IRVh9ant94cYxatUA3XEo74qxI1t2rTV-j7_mqGSbZ20; kelkooID=a4c629a-1837c1b8fec-12fab1; _ga=GA1.2.1108655596.1664234522; _gid=GA1.2.1676259295.1664234522
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
HTTP/1.1 303 See Other
Date: Mon, 26 Sep 2022 23:22:04 GMT
leadId: dc1-kls-prod-ls-01.prod.dc1.kelkoo.net_1664234524657_2215926
clickId: 107698154_1664234524651_4655139
country: no
Location: https://www.hhworkwear.com/no_no_ww/aberdeen-suit-76679?kk=a4c629a-1837c1b8fec-12fab1&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=HH+Workwear+Workwear+Helly+Hansen+Aberde
Accept-CH: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory
X-DataDome: protected
Request-Time: PT0.012345S
X-Robots-Tag: noindex,nofollow
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: ALLOWALL
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: master-only
Content-Length: 0
Set-Cookie: datadome=x4PV3r-5JWbOTc2-fmWU4k8RqACd2Fbb~epXL.za3p.TJFNiQoU1wcgBipynGRYhA0W6kNL~m0LYFyTOE51YygH9CXa0OA0-uucDBuRjauI~hZUvjrFV6MIzgMbK.E9; Max-Age=31536000; Expires=Tue, 26 Sep 2023 23:22:04 GMT; SameSite=Lax; Path=/; Domain=.kelkoogroup.net; Secure
P3P: CP="Anything"
ApacheTracking: localhost
Keep-Alive: timeout=40, max=90
Connection: Keep-Alive
Content-Type: text/plain
www.hhworkwear.com/no_no_ww/aberdeen-suit-76679?kk=a4c629a-1837c1b8fec-12fab1&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=HH+Workwear+Workwear+Helly+Hansen+Aberde
403 Forbidden 576 B URL HTTP/2 www.hhworkwear.com/no_no_ww/aberdeen-suit-76679?kk=a4c629a-1837c1b8fec-12fab1&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=HH+Workwear+Workwear+Helly+Hansen+Aberde
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (575)
Hash 3f97c4823c932e5cc8fd9242192ff3d6
e1da32aa4db67ba8ed78a11defcadb0062488b1f
a1087e02cab65343d75d5639e253fa11864e461ea449a7b7de24a725a1293663
GET /no_no_ww/aberdeen-suit-76679?kk=a4c629a-1837c1b8fec-12fab1&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=HH+Workwear+Workwear+Helly+Hansen+Aberde HTTP/1.1
Host: www.hhworkwear.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no-go.kelkoogroup.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 403 Forbidden
x-datadome: protected
content-type: text/html;charset=utf-8
charset: utf-8
cache-control: max-age=0, private, no-cache, no-store, must-revalidate
pragma: no-cache
accept-ch: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory, Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory
x-datadome-cid: AHrlqAAAAAMA9Zu0-paj1zMAW1oqmg==
set-cookie: datadome=jjrX4VSboMtQsxvcheTLZUmaE8Rj7Rgvm.3TAylHrfmVZT6TBTItCkZS8QoHwfcVUmcQxFf7KqMhNvwLB_-OT2LDl7ZDEL4CBy-k7ZxEcoxbpHMvmVqk4dp8BR8P5i9; Max-Age=31536000; Domain=.hhworkwear.com; Path=/; Secure; SameSite=Lax
accept-ranges: bytes
date: Mon, 26 Sep 2022 23:22:05 GMT
x-served-by: cache-bma1660-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1664234525.048585,VS0,VE18
vary: ,Cookie
content-length: 576
X-Firefox-Spdy: h2
ct.captcha-delivery.com/c.js
200 OK 6.7 kB URL HTTP/2 ct.captcha-delivery.com/c.js
IP
File type HTML document, ASCII text, with very long lines (1150)
Hash 9491194e1c5ca5d871f10dc0cfde497e
8a4999d6410851e70005026e5b394015017dfe30
879c4490fa3c526bf956705bf066f1004cdc825fa861377fed7141c0da5dcf9e
GET /c.js HTTP/1.1
Host: ct.captcha-delivery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hhworkwear.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 6656
last-modified: Mon, 29 Aug 2022 16:17:24 GMT
accept-ranges: bytes
server: AmazonS3
date: Mon, 26 Sep 2022 18:51:18 GMT
etag: "9491194e1c5ca5d871f10dc0cfde497e"
x-cache: Hit from cloudfront
via: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: njpI5qY9xW6D3o8bHK-0G_GF9aSR4qQCre_gywUvgs41xc10PHNFtg==
age: 16248
X-Firefox-Spdy: h2
www.hhworkwear.com/favicon.ico
200 OK 3.6 kB URL HTTP/2 www.hhworkwear.com/favicon.ico
IP
File type MS Windows icon resource - 2 icons, 16x16, 32x32\012- data
Hash e669f494e83edf69262d52db3c9eead5
0671f207990294068c662363744c1b9e7dcb3804
bf470aea5455c3432756ef6f4e68b475e736d0cb876f5caed24c4e0e3bf6a0a2
GET /favicon.ico HTTP/1.1
Host: www.hhworkwear.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hhworkwear.com/no_no_ww/aberdeen-suit-76679?kk=a4c629a-1837c1b8fec-12fab1&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=HH+Workwear+Workwear+Helly+Hansen+Aberde
Cookie: datadome=jjrX4VSboMtQsxvcheTLZUmaE8Rj7Rgvm.3TAylHrfmVZT6TBTItCkZS8QoHwfcVUmcQxFf7KqMhNvwLB_-OT2LDl7ZDEL4CBy-k7ZxEcoxbpHMvmVqk4dp8BR8P5i9
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=31536000
content-type: image/png
etag: "5807468d-e36"
expires: Tue, 26 Sep 2023 11:56:36 GMT
fastly-io-error: not a supported image format
fastly-stats: io=1
last-modified: Wed, 19 Oct 2016 10:10:21 GMT
x-debug-info: eyJyZXRyaWVzIjowfQ==
x-request-id: 00-17186713af0f37419f18d0e17a13573a-c01dc9904edb4d98-00
accept-ranges: bytes
date: Mon, 26 Sep 2022 23:22:05 GMT
age: 41129
x-served-by: cache-iad-kcgs7200035-IAD, cache-bma1660-BMA
x-cache: HIT, HIT
x-cache-hits: 3, 1
x-timer: S1664234525.191025,VS0,VE1
vary: Accept
content-length: 3638
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash a75d1249bee0922a714313491bf2f14e
ac56ef9f2b8355e0b0b49b06e79029a1f1fdb155
80292f873583a8216d935f440aa0b61ca25f6ed114c9603602090e21ae9e5ddf
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Mon, 26 Sep 2022 23:22:05 GMT
Last-Modified: Mon, 26 Sep 2022 22:06:55 GMT
Server: ECS (nyb/1D1E)
X-Cache: Miss from cloudfront
Via: 1.1 9dd61138197a68f8d69f12574aab6930.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 6_ipStWu8cHXxb0cokyLGgmULoMQVY4iSdhs37fC_SLN62_cFgMGnQ==
Age: 4510
geo.captcha-delivery.com/captcha/?initialCid=AHrlqAAAAAMA9Zu0-paj1zMAW1oqmg%3D%3D&hash=89760CC56CC73E0E90A59295C7FA25&cid=jjrX4VSboMtQsxvcheTLZUmaE8Rj7Rgvm.3TAylHrfmVZT6TBTItCkZS8QoHwfcVUmcQxFf7KqMhNvwLB_-OT2LDl7ZDEL4CBy-k7ZxEcoxbpHMvmVqk4dp8BR8P5i9&t=fe&referer=https%3A%2F%2Fwww.hhworkwear.com%2Fno_no_ww%2Faberdeen-suit-76679%3Fkk%3Da4c629a-1837c1b8fec-12fab1%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DHH%2BWorkwear%2BWorkwear%2BHelly%2BHansen%2BAberde&s=32601&e=cdd66dd341b654c467119fb8cf18812e2f1a39b266e07e8a508b5c2a40d478de
200 OK 7.2 kB URL HTTP/1.1 geo.captcha-delivery.com/captcha/?initialCid=AHrlqAAAAAMA9Zu0-paj1zMAW1oqmg%3D%3D&hash=89760CC56CC73E0E90A59295C7FA25&cid=jjrX4VSboMtQsxvcheTLZUmaE8Rj7Rgvm.3TAylHrfmVZT6TBTItCkZS8QoHwfcVUmcQxFf7KqMhNvwLB_-OT2LDl7ZDEL4CBy-k7ZxEcoxbpHMvmVqk4dp8BR8P5i9&t=fe&referer=https%3A%2F%2Fwww.hhworkwear.com%2Fno_no_ww%2Faberdeen-suit-76679%3Fkk%3Da4c629a-1837c1b8fec-12fab1%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DHH%2BWorkwear%2BWorkwear%2BHelly%2BHansen%2BAberde&s=32601&e=cdd66dd341b654c467119fb8cf18812e2f1a39b266e07e8a508b5c2a40d478de
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1817)
Hash 184ba1fbd6841146189dfa7c215c058b
0ba1681c152a1aa2ad779f321583c8d39045254b
55b7105f939b87ec0e3bfacd2417feed394c890d8213c7ca2d274b010dd433bb
GET /captcha/?initialCid=AHrlqAAAAAMA9Zu0-paj1zMAW1oqmg%3D%3D&hash=89760CC56CC73E0E90A59295C7FA25&cid=jjrX4VSboMtQsxvcheTLZUmaE8Rj7Rgvm.3TAylHrfmVZT6TBTItCkZS8QoHwfcVUmcQxFf7KqMhNvwLB_-OT2LDl7ZDEL4CBy-k7ZxEcoxbpHMvmVqk4dp8BR8P5i9&t=fe&referer=https%3A%2F%2Fwww.hhworkwear.com%2Fno_no_ww%2Faberdeen-suit-76679%3Fkk%3Da4c629a-1837c1b8fec-12fab1%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DHH%2BWorkwear%2BWorkwear%2BHelly%2BHansen%2BAberde&s=32601&e=cdd66dd341b654c467119fb8cf18812e2f1a39b266e07e8a508b5c2a40d478de HTTP/1.1
Host: geo.captcha-delivery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hhworkwear.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 23:22:05 GMT
Access-Control-Allow-Origin: *
Content-Type: text/html;charset=utf-8
Vary: Accept-Encoding
Content-Encoding: gzip
Transfer-Encoding: chunked
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c939f97c8bcbfea356e92036803714bc
608c795e7c4fb943a4db49a4e4533c41ea717023
b05b38c78c15c259720bfc6783ac65ab60ceb1e6037b45b08113f183554f08cb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 23:22:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static.captcha-delivery.com/captcha/assets/tpl/6dc485c0c428c35b53577b146dc6f9179f55ef9ad41b327a2a179998839364bf/loading_spinner.gif
200 OK 45 kB URL HTTP/2 static.captcha-delivery.com/captcha/assets/tpl/6dc485c0c428c35b53577b146dc6f9179f55ef9ad41b327a2a179998839364bf/loading_spinner.gif
IP
File type GIF image data, version 89a, 512 x 512\012- data
Hash 18be94cf37fa0da67af3c46ddebca50a
591cee951894285ff48ba5f04891783e389dd00e
fab79f1dfdc7b759da9e1c4d80169bc879352b47bf0cf9352e3eeaed39e55de7
GET /captcha/assets/tpl/6dc485c0c428c35b53577b146dc6f9179f55ef9ad41b327a2a179998839364bf/loading_spinner.gif HTTP/1.1
Host: static.captcha-delivery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://geo.captcha-delivery.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/gif
content-length: 44663
last-modified: Tue, 31 Jul 2018 12:27:34 GMT
x-amz-version-id: null
accept-ranges: bytes
server: AmazonS3
date: Mon, 26 Sep 2022 00:31:44 GMT
etag: "18be94cf37fa0da67af3c46ddebca50a"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: b5v--I511sMRs55y98YYvaYewEiigbWgVMIJnsJYRlV1Np47TPZtKA==
age: 82222
X-Firefox-Spdy: h2
static.captcha-delivery.com/common/fonts/roboto/font-face.css
200 OK 287 B URL HTTP/2 static.captcha-delivery.com/common/fonts/roboto/font-face.css
IP
Hash 6fda0c9bdd9b51bc0805fa37f22eb90b
fbdd512058f7a1f8bdc926c7801d41d78366827a
03cd31e4d3c37c852aec70f0c5bb40641131ba56ea401ba48b7b5d4c68f3d39a
GET /common/fonts/roboto/font-face.css HTTP/1.1
Host: static.captcha-delivery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://geo.captcha-delivery.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: text/css
content-length: 287
date: Mon, 26 Sep 2022 07:32:47 GMT
last-modified: Fri, 06 May 2022 16:47:07 GMT
etag: "6fda0c9bdd9b51bc0805fa37f22eb90b"
x-amz-version-id: null
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: sAM720h2FS05wtMc1Ld23lW6qqqftrxb1HgLNNxJgChYTM1cSfFA8g==
age: 56959
X-Firefox-Spdy: h2
www.google-analytics.com/collect?v=1&_v=j96&t=pageview&_s=1&dl=https%3A%2F%2Fno-go.kelkoogroup.net%2Fctl%2Fgo%2FsitesearchGo%3F.ts%3D1664233273622%26.sig%3DkCSvZIv7T9aFWI2nr2LK5cMpaBs-%26affiliationId%3D96966625%26comId%3D100528775%26country%3Dno%26offerId%3D182474b05a3e94c3c77ac7c0770b927d%26searchId%3D1076100331000_1664233273589_25811599%26service%3D36%26tokenId%3D31b33936-7dd6-457b-8d70-a7a883a9d514%26addedParams%3Dtrue%26custom1%3Dv0304000142069f3d0556c09e4d0387f4a6d006e73a0b%26custom2%3De7e6bb15baa647a58253d090ef5d387a-couponing&dr=https%3A%2F%2Fr.srvtrck.com%2F&dp=%2F96966625%7C100528775%7C&ul=en-us&de=UTF-8&dt=Du%20sendes%20videre%20til%20Helly%20Hansen%20Workwear%20NO&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=QACAAAABAAAAAC~&cid=1108655596.1664234522&tid=UA-168544891-6&_gid=1676259295.1664234522&_r=1&cd1=96966625&cd2=dc1-kls-prod-ls-01.prod.dc1.kelkoo.net_1664234524657_2215926&cd3=100528775&cd4=a4c629a-1837c1b8fec-12fab1&cd5=&cd6=96966625%7C100528775%7C&z=1791044356
200 OK 35 B URL HTTP/2 www.google-analytics.com/collect?v=1&_v=j96&t=pageview&_s=1&dl=https%3A%2F%2Fno-go.kelkoogroup.net%2Fctl%2Fgo%2FsitesearchGo%3F.ts%3D1664233273622%26.sig%3DkCSvZIv7T9aFWI2nr2LK5cMpaBs-%26affiliationId%3D96966625%26comId%3D100528775%26country%3Dno%26offerId%3D182474b05a3e94c3c77ac7c0770b927d%26searchId%3D1076100331000_1664233273589_25811599%26service%3D36%26tokenId%3D31b33936-7dd6-457b-8d70-a7a883a9d514%26addedParams%3Dtrue%26custom1%3Dv0304000142069f3d0556c09e4d0387f4a6d006e73a0b%26custom2%3De7e6bb15baa647a58253d090ef5d387a-couponing&dr=https%3A%2F%2Fr.srvtrck.com%2F&dp=%2F96966625%7C100528775%7C&ul=en-us&de=UTF-8&dt=Du%20sendes%20videre%20til%20Helly%20Hansen%20Workwear%20NO&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=QACAAAABAAAAAC~&cid=1108655596.1664234522&tid=UA-168544891-6&_gid=1676259295.1664234522&_r=1&cd1=96966625&cd2=dc1-kls-prod-ls-01.prod.dc1.kelkoo.net_1664234524657_2215926&cd3=100528775&cd4=a4c629a-1837c1b8fec-12fab1&cd5=&cd6=96966625%7C100528775%7C&z=1791044356
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
POST /collect?v=1&_v=j96&t=pageview&_s=1&dl=https%3A%2F%2Fno-go.kelkoogroup.net%2Fctl%2Fgo%2FsitesearchGo%3F.ts%3D1664233273622%26.sig%3DkCSvZIv7T9aFWI2nr2LK5cMpaBs-%26affiliationId%3D96966625%26comId%3D100528775%26country%3Dno%26offerId%3D182474b05a3e94c3c77ac7c0770b927d%26searchId%3D1076100331000_1664233273589_25811599%26service%3D36%26tokenId%3D31b33936-7dd6-457b-8d70-a7a883a9d514%26addedParams%3Dtrue%26custom1%3Dv0304000142069f3d0556c09e4d0387f4a6d006e73a0b%26custom2%3De7e6bb15baa647a58253d090ef5d387a-couponing&dr=https%3A%2F%2Fr.srvtrck.com%2F&dp=%2F96966625%7C100528775%7C&ul=en-us&de=UTF-8&dt=Du%20sendes%20videre%20til%20Helly%20Hansen%20Workwear%20NO&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=QACAAAABAAAAAC~&cid=1108655596.1664234522&tid=UA-168544891-6&_gid=1676259295.1664234522&_r=1&cd1=96966625&cd2=dc1-kls-prod-ls-01.prod.dc1.kelkoo.net_1664234524657_2215926&cd3=100528775&cd4=a4c629a-1837c1b8fec-12fab1&cd5=&cd6=96966625%7C100528775%7C&z=1791044356 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://no-go.kelkoogroup.net
Connection: keep-alive
Referer: https://no-go.kelkoogroup.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 200 OK
access-control-allow-origin: https://no-go.kelkoogroup.net
date: Mon, 26 Sep 2022 23:22:05 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
x-content-type-options: nosniff
access-control-allow-credentials: true
content-type: image/gif
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 35
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
js.datadome.co/tags.js
200 OK 43 kB IP
File type ASCII text, with very long lines (65432)
Hash fbe95e048d875d7afcc3559643637879
a14dceea986b7cdcfd99b9c1780ffd0671eb474c
3a073213b1dc128dcc32cb454889f53f66488d540f71ab8b668f633ed0251865
GET /tags.js HTTP/1.1
Host: js.datadome.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://geo.captcha-delivery.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript
content-length: 42896
date: Mon, 26 Sep 2022 22:39:05 GMT
server: Apache
strict-transport-security: max-age=15768000
last-modified: Fri, 23 Sep 2022 08:38:37 GMT
accept-ranges: bytes
content-encoding: gzip
cache-control: max-age=3600, public
expires: Mon, 26 Sep 2022 23:39:05 GMT
access-control-allow-origin: *
etag: "337cb-5e9541aaa9c3a-gzip"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 bb1da7862c4968b28920b91b324095c0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: NTCWrSZIz2Qc4iVq3BjQo4XttXkNtzPTvrhyYIYPdYCfSG5AvdG29A==
age: 2580
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5b7b66f5886a12421c3f3970bbf49d5a
13a31565fb5b2f1e75d67ba1ce09dae339f1c0e8
3ed8ffa99cefdf81381912b426c0ab9091fb5888836665d9012435965f99feba
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 23:22:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static.captcha-delivery.com/common/fonts/roboto/roboto.woff2
200 OK 16 kB URL HTTP/2 static.captcha-delivery.com/common/fonts/roboto/roboto.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15688, version 1.0\012- data
Hash aa23b7b4bcf2b8f0e876106bb3de69c6
106ac454ba4e503e0a1cd15e1275130918049182
cc46322d5c4d41da447f26f7fa714827f2ec9a112968c12ef5736c7494985eca
GET /common/fonts/roboto/roboto.woff2 HTTP/1.1
Host: static.captcha-delivery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://geo.captcha-delivery.com
Connection: keep-alive
Referer: https://static.captcha-delivery.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: font/woff2
content-length: 15688
access-control-allow-origin: https://geo.captcha-delivery.com
access-control-allow-methods: GET, HEAD
access-control-max-age: 3000
access-control-allow-credentials: true
last-modified: Fri, 06 May 2022 16:47:07 GMT
x-amz-version-id: null
accept-ranges: bytes
server: AmazonS3
date: Mon, 26 Sep 2022 01:43:37 GMT
etag: "aa23b7b4bcf2b8f0e876106bb3de69c6"
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Hx31vo3nIPyIOsh6ABEKBqc0tytC1wloOwGEBomf_Oqw7wzSs1SbBA==
age: 78443
X-Firefox-Spdy: h2
www.google.com/recaptcha/api.js?onload=recaptchaLoadCallback&render=explicit&hl=en
200 OK 582 B URL HTTP/2 www.google.com/recaptcha/api.js?onload=recaptchaLoadCallback&render=explicit&hl=en
IP
File type ASCII text, with very long lines (916), with no line terminators
Hash 774a155c80bd99af4b68c6eb1327920d
7d551ab83c369279f6a98c492328e5bff88a8269
9c4f40a62a34152b41f7e778cea4a7712b638690b991ed759d07316df2ab0db6
GET /recaptcha/api.js?onload=recaptchaLoadCallback&render=explicit&hl=en HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://geo.captcha-delivery.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Mon, 26 Sep 2022 23:22:05 GMT
date: Mon, 26 Sep 2022 23:22:05 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 582
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static.captcha-delivery.com/captcha/assets/set/e696878f55372064e78c0151e762f261e0a1dde5/logo.png?update_cache=-717148770652887453
200 OK 4.9 kB URL HTTP/2 static.captcha-delivery.com/captcha/assets/set/e696878f55372064e78c0151e762f261e0a1dde5/logo.png?update_cache=-717148770652887453
IP
File type PNG image data, 299 x 168, 8-bit colormap, non-interlaced\012- data
Hash 7204902a8a037f0ab990f2c8cdd15d77
052473cb0d0385edd2bea48be2a5c6a21f8c2f14
5cc6f824729237d193cecd34fd7d4976452f960ec2de8e0b175579ef608369f0
GET /captcha/assets/set/e696878f55372064e78c0151e762f261e0a1dde5/logo.png?update_cache=-717148770652887453 HTTP/1.1
Host: static.captcha-delivery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://geo.captcha-delivery.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 4908
date: Mon, 26 Sep 2022 23:22:06 GMT
last-modified: Mon, 26 Apr 2021 16:36:09 GMT
etag: "7204902a8a037f0ab990f2c8cdd15d77"
cache-control: public
x-amz-version-id: null
accept-ranges: bytes
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: a-A2_u63ctf6dYjnzej5R9TBjbWvLBdMCjaTURt9Czy7MihS3-JtzA==
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 737756d717fd215d94458a21028ae486
ee3c3097bcb2ff3f5482b0dc6056b1549afa8f1f
8e705bae2060960e1b2f79c42ebc445d52f307aeac41b34d3a1789879e51b85a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 23:22:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
api-js.datadome.co/js/
200 OK 240 B IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 7f1aacd43ccfa6fbc404c72fb6e2b976
f7788e5cae2a1cd4c0c5559b695ef0ff1665d2cb
29f940ea07dff85061f41cd982bf5efc50dbfd4818376962124293c307f61b27
POST /js/ HTTP/1.1
Host: api-js.datadome.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 4427
Origin: https://geo.captcha-delivery.com
Connection: keep-alive
Referer: https://geo.captcha-delivery.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 26 Sep 2022 23:22:05 GMT
content-type: application/json;charset=utf-8
content-length: 240
server: DataDome
access-control-allow-origin: *
pragma: no-cache
cache-control: no-cache, no-store, must-revalidate
expires: 0
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/releases/ovmhLiigaw4D9ujHYlHcKKhP/recaptcha__en.js
200 OK 158 kB URL HTTP/2 www.gstatic.com/recaptcha/releases/ovmhLiigaw4D9ujHYlHcKKhP/recaptcha__en.js
IP
File type ASCII text, with very long lines (826)
Size 158 kB (158248 bytes)
Hash db1b5789e9915e9c82f5df92e5982980
2e193e502995501c85f45fd89d9f83707a7f9573
db9c82b18117d7cff0f674de758f5bbb39bc6dee969cee679c741090968b9206
GET /recaptcha/releases/ovmhLiigaw4D9ujHYlHcKKhP/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://geo.captcha-delivery.com
Connection: keep-alive
Referer: https://geo.captcha-delivery.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 158248
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 25 Sep 2022 22:25:55 GMT
expires: Mon, 25 Sep 2023 22:25:55 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 19 Sep 2022 04:01:43 GMT
content-type: text/javascript
age: 89770
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
p444222.mybetterck.com/adServe/domainClick?ai=gNSPw4YcvsCApKkKBx7IDLZLh5RGT4s7PRzwjLQJjSv3QC4zB9LcASviNg65Cxr3flx9wpYGTxS3j_KY09q3mwP48WExSvvue4Wee03NpRWjWGZxSaF5uotbBDE-VzQdp_hghD0kmPMD_PW84u0ulUqfBHnk5MSYCByTAVT-sd22hq8NRNDt25Qd73c_XxIrepx7j1kh07VyyGnFKX0au3SDFZgpnKNmkWTJ0WZCnNlxEddAWrunkNO4YFSA4iHoSNV7ac1fOCr2ho5YrvnObP7B18jwcndd9Cj2y8T0f9WAG1C3pJe1jUnMr7JE-iOOohO-HVAt4N0u74i0lxvffLw7yHWY6BM0uGa2Qe8-FjHjOJsHVX4a7bC7fuySQgzWfIMK0NNojN-tm7ItiBkJPboJozIQw_UgE15yz728krV__W_JMtiNWygu4EAhLehVZan_-uJdGeomQjv60MWdW5W77AbEe9ULYlZ0CBoMUA4lO7oBdjPsrvOuFCKizhE-7Ytg_xXfZg7wptjEMNq1V-hBqFh1dYq29BTd-RUQgepW3CtlekMF7mtdQ0LuDC1wMxVChtoIfCxO-mjNJPfAM5bkuHN4kBIxoGHHE-E0IO89GR_yRtA93EIK1wF3pmGlAQYD4ymhSixAzaGfRzy6zyKEGmaBP0_Rg4geqniFAY7JtkfbM-VxMDt1-E2PqFLvvZUw__fvih5ZnHojxjfypQ8_hgTrUCjEC4uYju4ZcZWpZCZFSskpTEZ7QC69B1JTZ8FX4ZthAC4pdY-e_iTnmlG3xytZVl6CMRYO2BLhb_UvdttPjuIdm1toweMxbkUxVnWruyDfRXVfSPcxVQni-afdnKfr5HD5hH96neDjclCgu6tNLJtXf_NVWUy-lk7PFjuED_lYu80Xu88wSWywELxBhUNI1iZDeG75T0AK4q2oKbaB5p9uIiol4S5osn5YR0Ng4Sbb-ewWFMo45vcOlMGzfh0CNUya&ui=HFz5zNIIs96fzq49jFkHXcQzYObQGwwU7xf6tdOZukM-OEui5Z5TxNLj5y5yCjiwOXv-ZinAlSL6Zac98ixPSyg0bQJAfqSRG6wGHgnIOhYzO3o_1-Tv0A&si=1&oref=2f6c52514cb2d5d54f1aba4c48e529e3&optunit=5B1Zjie8r2XomJ5wtw7vIA&rb=LW_v4KVZAgI&rr=4&abtg=0
200 OK 158 kB URL HTTP/2 p444222.mybetterck.com/adServe/domainClick?ai=gNSPw4YcvsCApKkKBx7IDLZLh5RGT4s7PRzwjLQJjSv3QC4zB9LcASviNg65Cxr3flx9wpYGTxS3j_KY09q3mwP48WExSvvue4Wee03NpRWjWGZxSaF5uotbBDE-VzQdp_hghD0kmPMD_PW84u0ulUqfBHnk5MSYCByTAVT-sd22hq8NRNDt25Qd73c_XxIrepx7j1kh07VyyGnFKX0au3SDFZgpnKNmkWTJ0WZCnNlxEddAWrunkNO4YFSA4iHoSNV7ac1fOCr2ho5YrvnObP7B18jwcndd9Cj2y8T0f9WAG1C3pJe1jUnMr7JE-iOOohO-HVAt4N0u74i0lxvffLw7yHWY6BM0uGa2Qe8-FjHjOJsHVX4a7bC7fuySQgzWfIMK0NNojN-tm7ItiBkJPboJozIQw_UgE15yz728krV__W_JMtiNWygu4EAhLehVZan_-uJdGeomQjv60MWdW5W77AbEe9ULYlZ0CBoMUA4lO7oBdjPsrvOuFCKizhE-7Ytg_xXfZg7wptjEMNq1V-hBqFh1dYq29BTd-RUQgepW3CtlekMF7mtdQ0LuDC1wMxVChtoIfCxO-mjNJPfAM5bkuHN4kBIxoGHHE-E0IO89GR_yRtA93EIK1wF3pmGlAQYD4ymhSixAzaGfRzy6zyKEGmaBP0_Rg4geqniFAY7JtkfbM-VxMDt1-E2PqFLvvZUw__fvih5ZnHojxjfypQ8_hgTrUCjEC4uYju4ZcZWpZCZFSskpTEZ7QC69B1JTZ8FX4ZthAC4pdY-e_iTnmlG3xytZVl6CMRYO2BLhb_UvdttPjuIdm1toweMxbkUxVnWruyDfRXVfSPcxVQni-afdnKfr5HD5hH96neDjclCgu6tNLJtXf_NVWUy-lk7PFjuED_lYu80Xu88wSWywELxBhUNI1iZDeG75T0AK4q2oKbaB5p9uIiol4S5osn5YR0Ng4Sbb-ewWFMo45vcOlMGzfh0CNUya&ui=HFz5zNIIs96fzq49jFkHXcQzYObQGwwU7xf6tdOZukM-OEui5Z5TxNLj5y5yCjiwOXv-ZinAlSL6Zac98ixPSyg0bQJAfqSRG6wGHgnIOhYzO3o_1-Tv0A&si=1&oref=2f6c52514cb2d5d54f1aba4c48e529e3&optunit=5B1Zjie8r2XomJ5wtw7vIA&rb=LW_v4KVZAgI&rr=4&abtg=0
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (826)
Size 158 kB (158461 bytes)
Hash effb0f1bba4a85bc44eb163bec240304
9214346e20e2e9dcf158ea40ecb208292c742acf
338eb73b6c367480f5643cea56322faf9b88374d6d41335cf059d35c53577ada
GET /adServe/domainClick?ai=gNSPw4YcvsCApKkKBx7IDLZLh5RGT4s7PRzwjLQJjSv3QC4zB9LcASviNg65Cxr3flx9wpYGTxS3j_KY09q3mwP48WExSvvue4Wee03NpRWjWGZxSaF5uotbBDE-VzQdp_hghD0kmPMD_PW84u0ulUqfBHnk5MSYCByTAVT-sd22hq8NRNDt25Qd73c_XxIrepx7j1kh07VyyGnFKX0au3SDFZgpnKNmkWTJ0WZCnNlxEddAWrunkNO4YFSA4iHoSNV7ac1fOCr2ho5YrvnObP7B18jwcndd9Cj2y8T0f9WAG1C3pJe1jUnMr7JE-iOOohO-HVAt4N0u74i0lxvffLw7yHWY6BM0uGa2Qe8-FjHjOJsHVX4a7bC7fuySQgzWfIMK0NNojN-tm7ItiBkJPboJozIQw_UgE15yz728krV__W_JMtiNWygu4EAhLehVZan_-uJdGeomQjv60MWdW5W77AbEe9ULYlZ0CBoMUA4lO7oBdjPsrvOuFCKizhE-7Ytg_xXfZg7wptjEMNq1V-hBqFh1dYq29BTd-RUQgepW3CtlekMF7mtdQ0LuDC1wMxVChtoIfCxO-mjNJPfAM5bkuHN4kBIxoGHHE-E0IO89GR_yRtA93EIK1wF3pmGlAQYD4ymhSixAzaGfRzy6zyKEGmaBP0_Rg4geqniFAY7JtkfbM-VxMDt1-E2PqFLvvZUw__fvih5ZnHojxjfypQ8_hgTrUCjEC4uYju4ZcZWpZCZFSskpTEZ7QC69B1JTZ8FX4ZthAC4pdY-e_iTnmlG3xytZVl6CMRYO2BLhb_UvdttPjuIdm1toweMxbkUxVnWruyDfRXVfSPcxVQni-afdnKfr5HD5hH96neDjclCgu6tNLJtXf_NVWUy-lk7PFjuED_lYu80Xu88wSWywELxBhUNI1iZDeG75T0AK4q2oKbaB5p9uIiol4S5osn5YR0Ng4Sbb-ewWFMo45vcOlMGzfh0CNUya&ui=HFz5zNIIs96fzq49jFkHXcQzYObQGwwU7xf6tdOZukM-OEui5Z5TxNLj5y5yCjiwOXv-ZinAlSL6Zac98ixPSyg0bQJAfqSRG6wGHgnIOhYzO3o_1-Tv0A&si=1&oref=2f6c52514cb2d5d54f1aba4c48e529e3&optunit=5B1Zjie8r2XomJ5wtw7vIA&rb=LW_v4KVZAgI&rr=4&abtg=0 HTTP/1.1
Host: p444222.mybetterck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://irene-eux.com/
Connection: keep-alive
Cookie: rhid=82092868881
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 26 Sep 2022 23:22:01 GMT
content-type: text/html;charset=ISO-8859-1
vary: Accept-Encoding
set-cookie: rhid=82092868881; Max-Age=15552000; Expires=Sat, 25-Mar-2023 23:22:01 GMT; Domain=mybetterck.com; Path=/; SameSite=None; secure;
loi=ad_1173576_off_617426_aff_86324_cid_444222-12294060066_ts_1664234521; Max-Age=3600; Expires=Tue, 27-Sep-2022 00:22:01 GMT; Domain=mybetterck.com; Path=/; SameSite=None; secure;
content-encoding: gzip
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 24 Sep 2022 12:31:58 GMT
expires: Sun, 24 Sep 2023 12:31:58 GMT
cache-control: public, max-age=31536000
age: 211808
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
translate.google.com/translate_a/element.js?cb=googleTranslateElementInit2
200 OK 0 B URL HTTP/2 translate.google.com/translate_a/element.js?cb=googleTranslateElementInit2
IP
GET /translate_a/element.js?cb=googleTranslateElementInit2 HTTP/1.1
Host: translate.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 26 Sep 2022 23:22:03 GMT
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+026; expires=Wed, 25-Sep-2024 23:22:03 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static.captcha-delivery.com/captcha/assets/tpl/6dc485c0c428c35b53577b146dc6f9179f55ef9ad41b327a2a179998839364bf/index.css
200 OK 0 B URL HTTP/2 static.captcha-delivery.com/captcha/assets/tpl/6dc485c0c428c35b53577b146dc6f9179f55ef9ad41b327a2a179998839364bf/index.css
IP
GET /captcha/assets/tpl/6dc485c0c428c35b53577b146dc6f9179f55ef9ad41b327a2a179998839364bf/index.css HTTP/1.1
Host: static.captcha-delivery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://geo.captcha-delivery.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: text/css
last-modified: Tue, 09 Jul 2019 14:35:24 GMT
x-amz-version-id: null
server: AmazonS3
content-encoding: gzip
date: Mon, 26 Sep 2022 18:36:20 GMT
etag: W/"8ba3717dee9fac12ab09dda082b49fac"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 1TOPIdBeFpf3249-abIw8_sEfhiknLwnz0wnsJhFApzMKFrEfs_xrQ==
age: 17146
X-Firefox-Spdy: h2
promoprawn.com/wp-includes/js/jquery/ui/autocomplete.min.js?ver=1.13.1
200 OK 0 B URL HTTP/2 promoprawn.com/wp-includes/js/jquery/ui/autocomplete.min.js?ver=1.13.1
IP
ASN #24940 Hetzner Online GmbH
GET /wp-includes/js/jquery/ui/autocomplete.min.js?ver=1.13.1 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-hhworkwear-com/
Cookie: utm_source=no; utm_medium=89403862252; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89403862252; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-hhworkwear-com%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Tue, 27 Sep 2022 11:22:02 GMT
etag: "214c-625095f6-19a0128;br"
last-modified: Fri, 08 Apr 2022 20:07:18 GMT
content-type: application/x-javascript
content-length: 2685
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Mon, 26 Sep 2022 23:22:02 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-content/plugins/real-time-auto-find-and-replace/assets/js/rtafar.app.min.js?ver=1.3.7
200 OK 0 B URL HTTP/2 promoprawn.com/wp-content/plugins/real-time-auto-find-and-replace/assets/js/rtafar.app.min.js?ver=1.3.7
IP
ASN #24940 Hetzner Online GmbH
GET /wp-content/plugins/real-time-auto-find-and-replace/assets/js/rtafar.app.min.js?ver=1.3.7 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-hhworkwear-com/
Cookie: utm_source=no; utm_medium=89403862252; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89403862252; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-hhworkwear-com%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Tue, 27 Sep 2022 11:22:02 GMT
etag: "11c-62cff458-1960a38;gz"
last-modified: Thu, 14 Jul 2022 10:47:52 GMT
content-type: application/x-javascript
accept-ranges: bytes
date: Mon, 26 Sep 2022 23:22:02 GMT
server: LiteSpeed
content-encoding: gzip
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
www.promoprawn.com/wp-content/uploads/2022/02/logo-with-writing.jpg
200 OK 0 B URL HTTP/2 www.promoprawn.com/wp-content/uploads/2022/02/logo-with-writing.jpg
IP
ASN #24940 Hetzner Online GmbH
GET /wp-content/uploads/2022/02/logo-with-writing.jpg HTTP/1.1
Host: www.promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/
Cookie: utm_source=no; utm_medium=89403862252; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89403862252; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-hhworkwear-com%2F
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Tue, 27 Sep 2022 11:22:02 GMT
etag: "181e2-620dba86-1940646;;;"
last-modified: Thu, 17 Feb 2022 03:01:26 GMT
content-type: image/jpeg
content-length: 98786
accept-ranges: bytes
date: Mon, 26 Sep 2022 23:22:02 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
www.facebook.com/v2.3/plugins/page.php?adapt_container_width=true&app_id=235643263204884&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df304f0226275ee6%26domain%3Dpromoprawn.com%26is_canvas%3Dfalse%26origin%3Dhttps%253A%252F%252Fpromoprawn.com%252Ff11440765cdb89e%26relation%3Dparent.parent&container_width=361&height=290&hide_cover=false&hide_cta=false&href=https%3A%2F%2Fwww.facebook.com%2Fappthemes&locale=en_GB&sdk=joey&show_facepile=true&show_posts=false&small_header=false&width=268
200 OK 0 B URL HTTP/2 www.facebook.com/v2.3/plugins/page.php?adapt_container_width=true&app_id=235643263204884&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df304f0226275ee6%26domain%3Dpromoprawn.com%26is_canvas%3Dfalse%26origin%3Dhttps%253A%252F%252Fpromoprawn.com%252Ff11440765cdb89e%26relation%3Dparent.parent&container_width=361&height=290&hide_cover=false&hide_cta=false&href=https%3A%2F%2Fwww.facebook.com%2Fappthemes&locale=en_GB&sdk=joey&show_facepile=true&show_posts=false&small_header=false&width=268
IP
GET /v2.3/plugins/page.php?adapt_container_width=true&app_id=235643263204884&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df304f0226275ee6%26domain%3Dpromoprawn.com%26is_canvas%3Dfalse%26origin%3Dhttps%253A%252F%252Fpromoprawn.com%252Ff11440765cdb89e%26relation%3Dparent.parent&container_width=361&height=290&hide_cover=false&hide_cta=false&href=https%3A%2F%2Fwww.facebook.com%2Fappthemes&locale=en_GB&sdk=joey&show_facepile=true&show_posts=false&small_header=false&width=268 HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: br
report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}
content-security-policy-report-only: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' connect.facebook.net;style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com;worker-src blob: *.facebook.com data:;report-uri https://www.facebook.com/csp/reporting/?minimize=0;
content-security-policy: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' connect.facebook.net;style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-opener-policy: unsafe-none
pragma: no-cache
cache-control: private, no-cache, no-store, must-revalidate
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
facebook-api-version: v8.0
strict-transport-security: max-age=15552000; preload
content-type: text/html; charset="utf-8"
x-fb-debug: jjHvDii2uJ7j1O0VK1evWOZDk+A6Q7wlanlMdoo8fxxWs/XHlGDtMb23vp4NYIZeXCe31+0FsUr60s3f4AcBmQ==
date: Mon, 26 Sep 2022 23:22:04 GMT
priority: u=3,i
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
72.14.178.174
157.240.200.14
95.211.116.27
16.170.6.25
167.235.15.78
104.19.169.96
23.36.76.226
93.184.220.29