r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d2560f62890e75b8de444fed96c22f52
334ce0c48e606ee029f31eeb1463af87b1024bb9
4397e6b45b5822fbab9b83abe0b96ee70efba7cd2160b51936159865ede5fdb1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4397E6B45B5822FBAB9B83ABE0B96EE70EFBA7CD2160B51936159865EDE5FDB1"
Last-Modified: Sun, 25 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10256
Expires: Tue, 27 Sep 2022 04:08:05 GMT
Date: Tue, 27 Sep 2022 01:17:09 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 2d12f67fe57a87e7366b662d153a5582
d7b02d81cc74f24a251d9363e0f4b0a149264ec1
73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Backoff, Content-Type, Retry-After, Alert
Cache-Control: max-stale=0
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Tue, 27 Sep 2022 01:03:16 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: zSAEm8fX1d2L9N0LuIVY8hBi8FrnC_YinueysFOBcu7nGqEm7FnIIw==
Age: 833
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1017811d25642601e984edc1676d118d
c177c4f7a897584bf91347fa4990c83d6bfd0321
f35bb3a8c877dd8d3c5920f3c917722f12b157aff398e2ec30fab51fa6caa2ef
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F35BB3A8C877DD8D3C5920F3C917722F12B157AFF398E2EC30FAB51FA6CAA2EF"
Last-Modified: Mon, 26 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3671
Expires: Tue, 27 Sep 2022 02:18:20 GMT
Date: Tue, 27 Sep 2022 01:17:09 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP
File type PEM certificate\012- , ASCII text
Hash 6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: U2We0dZk59Fkg5e/KlgLv0Qs/3U8RLL/9WaVe4XLcmRjDTmpiB2V7hpMs6WFUELcQH6f3Div9Qk=
x-amz-request-id: 2X2E7FMNYSW950D1
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 27 Sep 2022 00:49:02 GMT
age: 1687
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
etag: "6113f8408c59aebe188d6af273b90743"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
flightlawyer72.bloggersdelight.dk/2022/09/26/5-must-have-boost-very-high-calorie-drinks-for-anyone-looking-to-bulk-up/
200 OK 8.8 kB URL HTTP/1.1 flightlawyer72.bloggersdelight.dk/2022/09/26/5-must-have-boost-very-high-calorie-drinks-for-anyone-looking-to-bulk-up/
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1787)
Hash a4a387d8297e3fb5d9aff3fa5dfc490e
4237a45e40d2cbcca746d3d7cbb097d30107ea31
d2d85b34498697c1f0d450f4066bd71827ea8c7807417b565b184293087a6229
GET /2022/09/26/5-must-have-boost-very-high-calorie-drinks-for-anyone-looking-to-bulk-up/ HTTP/1.1
Host: flightlawyer72.bloggersdelight.dk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 0
Cache-Control: no-cache, no-store,must-revalidate, max-age=-1
Content-Encoding: gzip
Content-Length: 8767
Content-Type: text/html; charset=UTF-8
Date: Tue, 27 Sep 2022 01:17:09 GMT
Link: <http://flightlawyer72.bloggersdelight.dk/wp-json/>; rel="https://api.w.org/", <http://flightlawyer72.bloggersdelight.dk/?p=6>; rel=shortlink
Server: Apache/2.4.29 (Ubuntu)
Vary: Accept-Encoding
Via: 1.1 varnish (Varnish/6.6)
X-Cacheable: YES
X-Pingback: http://flightlawyer72.bloggersdelight.dk/xmlrpc.php
X-Tonny: was-here
X-Tonny-Quote: Det er Sebastians tur til at hente donuts
X-Varnish: 9621872
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 27 Sep 2022 01:17:09 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash bfc8c650e23854f708a3dd54fca4393f
b54c061cf5a5306a68112d403471914e839a68c8
84b8c36947944ea94b27e053f2abb944e6951157e256991f8b1523b9cacfe362
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 01:17:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
flightlawyer72.bloggersdelight.dk/wp-includes/js/wp-emoji-release.min.js?ver=4.9.6
200 OK 12 kB URL HTTP/1.1 flightlawyer72.bloggersdelight.dk/wp-includes/js/wp-emoji-release.min.js?ver=4.9.6
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (8813)
Hash a7c259ac67b3b4002dc8ac4a09765b9d
95a56d0d0fa8b38105324ddeae45afb36d19f1b9
3d8e94fed6cc8ea56ee5ec6174efb68cb7197d2e729149cb43e85505bf175779
GET /wp-includes/js/wp-emoji-release.min.js?ver=4.9.6 HTTP/1.1
Host: flightlawyer72.bloggersdelight.dk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://flightlawyer72.bloggersdelight.dk/2022/09/26/5-must-have-boost-very-high-calorie-drinks-for-anyone-looking-to-bulk-up/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Age: 0
Cache-Control: no-cache, no-store,must-revalidate, max-age=-1
Content-Length: 11721
Content-Type: application/javascript
Date: Tue, 27 Sep 2022 01:17:10 GMT
Etag: "6331af95-2dc9"
Last-Modified: Mon, 26 Sep 2022 13:56:37 GMT
Server: nginx/1.17.10
Via: 1.1 varnish (Varnish/6.6)
X-Cacheable: YES
X-Tonny: was-here
X-Varnish: 9621876
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c939f97c8bcbfea356e92036803714bc
608c795e7c4fb943a4db49a4e4533c41ea717023
b05b38c78c15c259720bfc6783ac65ab60ceb1e6037b45b08113f183554f08cb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 01:17:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=G-45MKXNQT0R
200 OK 75 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=G-45MKXNQT0R
IP
File type ASCII text, with very long lines (17807)
Hash e02d2f8ad3897ff738fc9a9cf2805ea2
60ed941b2f356f0fe73d9a08da44a64528603ec4
c6719a9f18a873a8cac8cbc44c05ac704368e751606e204d067c77b8e8e84ce0
GET /gtag/js?id=G-45MKXNQT0R HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://flightlawyer72.bloggersdelight.dk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 27 Sep 2022 01:17:10 GMT
expires: Tue, 27 Sep 2022 01:17:10 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 74699
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 727 B IP
Hash 5f5fe7a4571c0b3c8ad685b593cc9d70
006a9a89bc14f1c5edd5e5f008c86a361a743873
6490477cda9094ad8e6f1b99c291f60c9023cc55c6a93553716dc63a4cb2ffc0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2837
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 01:17:10 GMT
Last-Modified: Tue, 27 Sep 2022 00:29:53 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 727
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash bfc8c650e23854f708a3dd54fca4393f
b54c061cf5a5306a68112d403471914e839a68c8
84b8c36947944ea94b27e053f2abb944e6951157e256991f8b1523b9cacfe362
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 01:17:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 727 B IP
Hash 5f5fe7a4571c0b3c8ad685b593cc9d70
006a9a89bc14f1c5edd5e5f008c86a361a743873
6490477cda9094ad8e6f1b99c291f60c9023cc55c6a93553716dc63a4cb2ffc0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 01:17:10 GMT
Server: ECS (amb/6B8D)
Content-Length: 727
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600, max-age=3600
Date: Tue, 27 Sep 2022 01:10:46 GMT
Expires: Tue, 27 Sep 2022 01:47:09 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: t0mcRr2TlLgYHzuXnSoxc9-4WFwuBcbMLWytudpES1Kf1KGAVl7Nhw==
Age: 384
ocsp.digicert.com/
200 OK 471 B IP
Hash 5adb7eb1d103eadeeafac36e663ffdd3
23b784388dd634fa736cd60aed71570661e73d02
5c95ba48bc342887b4f7ef697bd4def50f6f2f472f654169179e5ac44df883d9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6525
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 01:17:10 GMT
Last-Modified: Mon, 26 Sep 2022 23:28:26 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 471
apps-cdn.relevant-digital.com/static/tags/1137356350202375931.js
200 OK 1.6 kB URL HTTP/2 apps-cdn.relevant-digital.com/static/tags/1137356350202375931.js
IP
ASN #60068 Datacamp Limited
Hash 653985a7062d916a005174295774b4cc
60d59a571a233227234cc28983c2c3c4f05e89ce
7f6c6daf527e026975b4401b0835a41e925c882a864126fdef1d3211dcc36aa7
GET /static/tags/1137356350202375931.js HTTP/1.1
Host: apps-cdn.relevant-digital.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://flightlawyer72.bloggersdelight.dk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 27 Sep 2022 01:17:10 GMT
content-type: application/javascript; charset=UTF-8
x-powered-by: Express
cache-control: s-maxage=25920000, max-age=0
last-modified: Mon, 07 Mar 2022 10:16:40 GMT
etag: W/"baa-17f63e18ebd"
vary: Accept-Encoding
x-accel-expires: @1689491592
server: CDN77-Turbo
x-77-nzt: AblMCQ2aqIb/jjgKAA
x-77-nzt-ray: +nxBOAmcWC8
x-cache: HIT
x-age: 669838
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
cdn.bloggersdelight.dk/wp-content/themes/base/style.css?ver=0.69085800%201664241429
200 OK 3.6 kB URL HTTP/2 cdn.bloggersdelight.dk/wp-content/themes/base/style.css?ver=0.69085800%201664241429
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (3447)
Hash 288fad6a70c077f539bf75145306768d
3eca5a1e52f43311cbb7a396f6d864515507c234
c78b85a68e0accea6f0f728ad05f9fb7f78424ae974284b90557a567dbbfca44
GET /wp-content/themes/base/style.css?ver=0.69085800%201664241429 HTTP/1.1
Host: cdn.bloggersdelight.dk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://flightlawyer72.bloggersdelight.dk/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-type: text/css
date: Tue, 27 Sep 2022 01:17:10 GMT
etag: "6331af95-e23"
last-modified: Mon, 26 Sep 2022 13:56:37 GMT
server: nginx/1.17.10
content-length: 3619
X-Firefox-Spdy: h2
cdn.bloggersdelight.dk/wp-content/themes/base/assets/js/window.js?ver=0.69085800%201664241429
200 OK 2.7 kB URL HTTP/2 cdn.bloggersdelight.dk/wp-content/themes/base/assets/js/window.js?ver=0.69085800%201664241429
IP
ASN #24940 Hetzner Online GmbH
Hash fae01ce2794a2215e553eb1bf13ca265
8fe28afd2ba2bb7818a92ad840ed69c89d6c8905
ef0d77919e20fb03b413e61758c353099f8fef5f686b221f37caba9e3b09eaa8
GET /wp-content/themes/base/assets/js/window.js?ver=0.69085800%201664241429 HTTP/1.1
Host: cdn.bloggersdelight.dk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://flightlawyer72.bloggersdelight.dk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-type: application/javascript
date: Tue, 27 Sep 2022 01:17:10 GMT
etag: "6331af95-abc"
last-modified: Mon, 26 Sep 2022 13:56:37 GMT
server: nginx/1.17.10
content-length: 2748
X-Firefox-Spdy: h2
cdn.bloggersdelight.dk/wp-content/themes/base/assets/js/tcf2.js?ver=0.69085800%201664241429
200 OK 1.5 kB URL HTTP/2 cdn.bloggersdelight.dk/wp-content/themes/base/assets/js/tcf2.js?ver=0.69085800%201664241429
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (1337)
Hash ef85f4d39475c06e1be7c3f3dac9cdbd
02bed77892afbf43ffe9c7ff478440c7324ddd14
29bb6f21b13d9c881501f76ceae094d10bf827817e985672c39fc1d6b937ced1
GET /wp-content/themes/base/assets/js/tcf2.js?ver=0.69085800%201664241429 HTTP/1.1
Host: cdn.bloggersdelight.dk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://flightlawyer72.bloggersdelight.dk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-type: application/javascript
date: Tue, 27 Sep 2022 01:17:10 GMT
etag: "6331af95-5d1"
last-modified: Mon, 26 Sep 2022 13:56:37 GMT
server: nginx/1.17.10
content-length: 1489
X-Firefox-Spdy: h2
cdn.bloggersdelight.dk/wp-content/themes/base/assets/js/config.js?ver=0.69085800%201664241429
200 OK 402 B URL HTTP/2 cdn.bloggersdelight.dk/wp-content/themes/base/assets/js/config.js?ver=0.69085800%201664241429
IP
ASN #24940 Hetzner Online GmbH
Hash 7506dd1747dbc341c3cd150abb581282
5201390115d76fd4a77437515a6a4c9551f30021
709aafc0747b3a5cf2ec64844a77d50138719da99c7196f4572189fcb5253c7c
GET /wp-content/themes/base/assets/js/config.js?ver=0.69085800%201664241429 HTTP/1.1
Host: cdn.bloggersdelight.dk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://flightlawyer72.bloggersdelight.dk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-type: application/javascript
date: Tue, 27 Sep 2022 01:17:10 GMT
etag: "6331af95-192"
last-modified: Mon, 26 Sep 2022 13:56:37 GMT
server: nginx/1.17.10
content-length: 402
X-Firefox-Spdy: h2
cdn.bloggersdelight.dk/wp-content/themes/desktop_2015/style.css?ver=0.69085800%201664241429
200 OK 26 kB URL HTTP/2 cdn.bloggersdelight.dk/wp-content/themes/desktop_2015/style.css?ver=0.69085800%201664241429
IP
ASN #24940 Hetzner Online GmbH
File type assembler source, Unicode text, UTF-8 text, with very long lines (308)
Hash e89962813a60a01f40f9474fd1da10c0
42e334e20cc3700939ba23c7320b5e096168c288
d1f39858c6a44f15dccab8399d4bf94f05faa1028f4daf9428bf9ead91060273
GET /wp-content/themes/desktop_2015/style.css?ver=0.69085800%201664241429 HTTP/1.1
Host: cdn.bloggersdelight.dk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://flightlawyer72.bloggersdelight.dk/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-type: text/css
date: Tue, 27 Sep 2022 01:17:10 GMT
etag: "6331af95-6483"
last-modified: Mon, 26 Sep 2022 13:56:37 GMT
server: nginx/1.17.10
content-length: 25731
X-Firefox-Spdy: h2
cdn.bloggersdelight.dk/wp-content/plugins/easy-video-player/lib/skin/skin.css?ver=4.9.6
200 OK 41 kB URL HTTP/2 cdn.bloggersdelight.dk/wp-content/plugins/easy-video-player/lib/skin/skin.css?ver=4.9.6
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (1263)
Hash 1029441784b50806ed2e5bedc26c4144
cbf6a1dc6e8c657003d8c6daf438acd873ee8c94
38cc70fc323877e40c47a87249d894ecaa1e1a2b010945268ecf1c91c72f6467
GET /wp-content/plugins/easy-video-player/lib/skin/skin.css?ver=4.9.6 HTTP/1.1
Host: cdn.bloggersdelight.dk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://flightlawyer72.bloggersdelight.dk/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-type: text/css
date: Tue, 27 Sep 2022 01:17:10 GMT
etag: "6331af94-9f07"
last-modified: Mon, 26 Sep 2022 13:56:36 GMT
server: nginx/1.17.10
content-length: 40711
X-Firefox-Spdy: h2
cdn.bloggersdelight.dk/wp-content/themes/base/assets/js/facebook.js?ver=0.69085800%201664241429
200 OK 313 B URL HTTP/2 cdn.bloggersdelight.dk/wp-content/themes/base/assets/js/facebook.js?ver=0.69085800%201664241429
IP
ASN #24940 Hetzner Online GmbH
Hash 042fb287b2977fee1ee9a76d8c315cbe
e305a453a94b50312a19e7b37bea6e8d3a52c87e
ccb6ba0054ad06c88d28c319f260b0617e78bedd66f883106b31fbf5a5f82b1d
GET /wp-content/themes/base/assets/js/facebook.js?ver=0.69085800%201664241429 HTTP/1.1
Host: cdn.bloggersdelight.dk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://flightlawyer72.bloggersdelight.dk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-type: application/javascript
date: Tue, 27 Sep 2022 01:17:10 GMT
etag: "6331af95-139"
last-modified: Mon, 26 Sep 2022 13:56:37 GMT
server: nginx/1.17.10
content-length: 313
X-Firefox-Spdy: h2
cdn.bloggersdelight.dk/wp-content/themes/base/assets/js/mp4.js?ver=0.69085800%201664241429
200 OK 2.0 kB URL HTTP/2 cdn.bloggersdelight.dk/wp-content/themes/base/assets/js/mp4.js?ver=0.69085800%201664241429
IP
ASN #24940 Hetzner Online GmbH
Hash 8ff19fa5b96549d31093ea162878a0c7
1934350d5baa122a0a35a2ea9f5432586f189a3b
16f09418ac319e1c10abd972330bf966264f1789ee3a5410abdade6dda54341a
GET /wp-content/themes/base/assets/js/mp4.js?ver=0.69085800%201664241429 HTTP/1.1
Host: cdn.bloggersdelight.dk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://flightlawyer72.bloggersdelight.dk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-type: application/javascript
date: Tue, 27 Sep 2022 01:17:10 GMT
etag: "6331af95-7e2"
last-modified: Mon, 26 Sep 2022 13:56:37 GMT
server: nginx/1.17.10
content-length: 2018
X-Firefox-Spdy: h2
cdn.bloggersdelight.dk/wp-content/themes/base/assets/js/activate_adnami.js?ver=0.69085800%201664241429
200 OK 489 B URL HTTP/2 cdn.bloggersdelight.dk/wp-content/themes/base/assets/js/activate_adnami.js?ver=0.69085800%201664241429
IP
ASN #24940 Hetzner Online GmbH
Hash 223b246a76b2d6858a0ff217f2043e81
9d7fc75eb54dc11f7961cdb254d425a2d15b2def
855f892a9c6da743719e69ac0035169912a478823376e76c7b49f3043605e656
GET /wp-content/themes/base/assets/js/activate_adnami.js?ver=0.69085800%201664241429 HTTP/1.1
Host: cdn.bloggersdelight.dk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://flightlawyer72.bloggersdelight.dk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-type: application/javascript
date: Tue, 27 Sep 2022 01:17:10 GMT
etag: "6331af95-1e9"
last-modified: Mon, 26 Sep 2022 13:56:37 GMT
server: nginx/1.17.10
content-length: 489
X-Firefox-Spdy: h2
cdn.bloggersdelight.dk/wp-content/themes/base/assets/js/affiliate.js?ver=0.69085800%201664241429
200 OK 9.0 kB URL HTTP/2 cdn.bloggersdelight.dk/wp-content/themes/base/assets/js/affiliate.js?ver=0.69085800%201664241429
IP
ASN #24940 Hetzner Online GmbH
Hash c78b1c5adba76870372dd9684f0b94bc
1e5e9cb335c922433a31ae9148700c3320e80279
7ecdaf4461cefb236ae50d0c71496b0a6c056a42c74dd7cc62818be291d6f573
GET /wp-content/themes/base/assets/js/affiliate.js?ver=0.69085800%201664241429 HTTP/1.1
Host: cdn.bloggersdelight.dk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://flightlawyer72.bloggersdelight.dk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-type: application/javascript
date: Tue, 27 Sep 2022 01:17:10 GMT
etag: "6331af95-2356"
last-modified: Mon, 26 Sep 2022 13:56:37 GMT
server: nginx/1.17.10
content-length: 9046
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 727 B IP
Hash 5f5fe7a4571c0b3c8ad685b593cc9d70
006a9a89bc14f1c5edd5e5f008c86a361a743873
6490477cda9094ad8e6f1b99c291f60c9023cc55c6a93553716dc63a4cb2ffc0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 01:17:10 GMT
Server: ECS (amb/6BA6)
Content-Length: 727
cdn.bloggersdelight.dk/wp-content/themes/base/assets/js/bdset.js?ver=0.69085800%201664241429
200 OK 12 kB URL HTTP/2 cdn.bloggersdelight.dk/wp-content/themes/base/assets/js/bdset.js?ver=0.69085800%201664241429
IP
ASN #24940 Hetzner Online GmbH
Hash 19e49842aa845a16ed4a8fafc6291827
8533862ee357cd29dafbb25d9bef9c05d99cc0bc
b6666f9197fa28d94e69384ca6b71b39a8cd7438236b7a7b6c48251db06d2078
GET /wp-content/themes/base/assets/js/bdset.js?ver=0.69085800%201664241429 HTTP/1.1
Host: cdn.bloggersdelight.dk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://flightlawyer72.bloggersdelight.dk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-type: application/javascript
date: Tue, 27 Sep 2022 01:17:10 GMT
etag: "6331af95-30a1"
last-modified: Mon, 26 Sep 2022 13:56:37 GMT
server: nginx/1.17.10
content-length: 12449
X-Firefox-Spdy: h2
cdn.bloggersdelight.dk/wp-content/themes/base/assets/js/image_tagging.js?ver=0.69085800%201664241429
200 OK 5.6 kB URL HTTP/2 cdn.bloggersdelight.dk/wp-content/themes/base/assets/js/image_tagging.js?ver=0.69085800%201664241429
IP
ASN #24940 Hetzner Online GmbH
Hash ee8ab3e46879d9bc66c27d7d5a808d7d
5f8485395fc16b823786704b4d5383cede8542f3
002bd2e6490f089d5e8acfad4fd3ab86cca91cd201c471d177290fb7429e6fdd
GET /wp-content/themes/base/assets/js/image_tagging.js?ver=0.69085800%201664241429 HTTP/1.1
Host: cdn.bloggersdelight.dk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://flightlawyer72.bloggersdelight.dk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-type: application/javascript
date: Tue, 27 Sep 2022 01:17:10 GMT
etag: "6331af95-160b"
last-modified: Mon, 26 Sep 2022 13:56:37 GMT
server: nginx/1.17.10
content-length: 5643
X-Firefox-Spdy: h2
cdn.bloggersdelight.dk/wp-content/themes/desktop_2015/assets/js/scripts.js?ver=0.69085800%201664241429
200 OK 17 kB URL HTTP/2 cdn.bloggersdelight.dk/wp-content/themes/desktop_2015/assets/js/scripts.js?ver=0.69085800%201664241429
IP
ASN #24940 Hetzner Online GmbH
Hash f5af3aaf2d798daf1bd85beb86c27d3d
2b8a2a064c6c301f5a321a4081543176518376e2
430806a57b600c0c1846006617e664cfae73b834aff7e164f98deec7f2c53222
GET /wp-content/themes/desktop_2015/assets/js/scripts.js?ver=0.69085800%201664241429 HTTP/1.1
Host: cdn.bloggersdelight.dk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://flightlawyer72.bloggersdelight.dk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-type: application/javascript
date: Tue, 27 Sep 2022 01:17:10 GMT
etag: "6331af95-4108"
last-modified: Mon, 26 Sep 2022 13:56:37 GMT
server: nginx/1.17.10
content-length: 16648
X-Firefox-Spdy: h2
cdn.bloggersdelight.dk/wp-includes/js/wp-embed.min.js?ver=4.9.6
200 OK 1.4 kB URL HTTP/2 cdn.bloggersdelight.dk/wp-includes/js/wp-embed.min.js?ver=4.9.6
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (1398), with no line terminators
Hash 5a03f97cc479b9f5d7efdaccec31bc17
54518be91b7c5d4b139e032d23ffae568cc7e9fd
dcb5e540e62fc85857254a1066afb6a7e8999279c6d4c583eef855d39f9289c0
GET /wp-includes/js/wp-embed.min.js?ver=4.9.6 HTTP/1.1
Host: cdn.bloggersdelight.dk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://flightlawyer72.bloggersdelight.dk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-type: application/javascript
date: Tue, 27 Sep 2022 01:17:10 GMT
etag: "6331af95-576"
last-modified: Mon, 26 Sep 2022 13:56:37 GMT
server: nginx/1.17.10
content-length: 1398
X-Firefox-Spdy: h2
cdn.bloggersdelight.dk/wp-content/themes/base/assets/js/livestamp.min.js?ver=0.69085800%201664241429
200 OK 1.4 kB URL HTTP/2 cdn.bloggersdelight.dk/wp-content/themes/base/assets/js/livestamp.min.js?ver=0.69085800%201664241429
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (520)
Hash e1d6370e267b3aaf2045e69eef7ed17a
34a700591d34f795a479516b7f72fb2ead5fec5b
f2beb92898142c10e2661c03c9d7d6ac4931df2c95fe0ac6b06cda7a4a1b9e02
GET /wp-content/themes/base/assets/js/livestamp.min.js?ver=0.69085800%201664241429 HTTP/1.1
Host: cdn.bloggersdelight.dk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://flightlawyer72.bloggersdelight.dk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-type: application/javascript
date: Tue, 27 Sep 2022 01:17:10 GMT
etag: "6331af95-586"
last-modified: Mon, 26 Sep 2022 13:56:37 GMT
server: nginx/1.17.10
content-length: 1414
X-Firefox-Spdy: h2
cdn.bloggersdelight.dk/wp-content/themes/base/assets/js/livestamp_setup.js?ver=0.69085800%201664241429
200 OK 355 B URL HTTP/2 cdn.bloggersdelight.dk/wp-content/themes/base/assets/js/livestamp_setup.js?ver=0.69085800%201664241429
IP
ASN #24940 Hetzner Online GmbH
Hash a1a60f9de59ab3c955b23359b411ca1a
4510d78dbb22ce2de3b6ef86ee606a42265707ed
fef28c1dd4d329b5deb63aabc551b843701217d253de05402d3b8e1683141672
GET /wp-content/themes/base/assets/js/livestamp_setup.js?ver=0.69085800%201664241429 HTTP/1.1
Host: cdn.bloggersdelight.dk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://flightlawyer72.bloggersdelight.dk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-type: application/javascript
date: Tue, 27 Sep 2022 01:17:10 GMT
etag: "6331af95-163"
last-modified: Mon, 26 Sep 2022 13:56:37 GMT
server: nginx/1.17.10
content-length: 355
X-Firefox-Spdy: h2
cdn.bloggersdelight.dk/wp-content/plugins/yet-another-related-posts-plugin/style/related.css?ver=0.69085800%201664241429
200 OK 640 B URL HTTP/2 cdn.bloggersdelight.dk/wp-content/plugins/yet-another-related-posts-plugin/style/related.css?ver=0.69085800%201664241429
IP
ASN #24940 Hetzner Online GmbH
Hash 12437fd744c958333cab3f953dc0b55b
6511e3d3c9b91d9b9a1cb1b058615f27066c4132
662a5d516ea03927309bbf8ab5adec8f8ac91e281ac66f5cd04ca1899e819129
GET /wp-content/plugins/yet-another-related-posts-plugin/style/related.css?ver=0.69085800%201664241429 HTTP/1.1
Host: cdn.bloggersdelight.dk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://flightlawyer72.bloggersdelight.dk/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-type: text/css
date: Tue, 27 Sep 2022 01:17:10 GMT
etag: "6331af94-280"
last-modified: Mon, 26 Sep 2022 13:56:36 GMT
server: nginx/1.17.10
content-length: 640
X-Firefox-Spdy: h2
cdn.bloggersdelight.dk/wp-content/plugins/lazy-load/images/1x1.trans.gif
200 OK 42 B URL HTTP/2 cdn.bloggersdelight.dk/wp-content/plugins/lazy-load/images/1x1.trans.gif
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /wp-content/plugins/lazy-load/images/1x1.trans.gif HTTP/1.1
Host: cdn.bloggersdelight.dk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://flightlawyer72.bloggersdelight.dk/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-type: image/gif
date: Tue, 27 Sep 2022 01:17:10 GMT
etag: "6331af94-2a"
last-modified: Mon, 26 Sep 2022 13:56:36 GMT
server: nginx/1.17.10
content-length: 42
X-Firefox-Spdy: h2
cdn.bloggersdelight.dk/wp-content/themes/base/assets/js/punycode.js?ver=0.69085800%201664241429
200 OK 10 kB URL HTTP/2 cdn.bloggersdelight.dk/wp-content/themes/base/assets/js/punycode.js?ver=0.69085800%201664241429
IP
ASN #24940 Hetzner Online GmbH
File type Algol 68 source text\012- Pascal source, ASCII text
Hash 109919bf2a6c71c911579eeb47bf45bf
8d0d361a9b4612cb59783a3e9124d33383c9608c
8718f0b2b6f4a964a18c51f6b882f26af6e9ac65e9c9807642d87307ea060d24
GET /wp-content/themes/base/assets/js/punycode.js?ver=0.69085800%201664241429 HTTP/1.1
Host: cdn.bloggersdelight.dk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://flightlawyer72.bloggersdelight.dk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-type: application/javascript
date: Tue, 27 Sep 2022 01:17:10 GMT
etag: "6331af95-27b2"
last-modified: Mon, 26 Sep 2022 13:56:37 GMT
server: nginx/1.17.10
content-length: 10162
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 727 B IP
Hash 5f5fe7a4571c0b3c8ad685b593cc9d70
006a9a89bc14f1c5edd5e5f008c86a361a743873
6490477cda9094ad8e6f1b99c291f60c9023cc55c6a93553716dc63a4cb2ffc0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 01:17:10 GMT
Server: ECS (amb/6BC8)
Content-Length: 727
cdn.bloggersdelight.dk/wp-content/themes/base/assets/font-awesome/4.6.3/css/font-awesome.min.css?ver=0.69085800%201664241429
200 OK 29 kB URL HTTP/2 cdn.bloggersdelight.dk/wp-content/themes/base/assets/font-awesome/4.6.3/css/font-awesome.min.css?ver=0.69085800%201664241429
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (28900)
Hash 4083f5d376eb849a458cc790b53ba080
fb5b49426dee7f1508500e698d1b3c6b04c8fcce
008a1d103902f15fdb1c191fcb1ce8954330e7b8de43d09abb08555ba609f420
GET /wp-content/themes/base/assets/font-awesome/4.6.3/css/font-awesome.min.css?ver=0.69085800%201664241429 HTTP/1.1
Host: cdn.bloggersdelight.dk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://flightlawyer72.bloggersdelight.dk/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-type: text/css
date: Tue, 27 Sep 2022 01:17:10 GMT
etag: "6331af95-7187"
last-modified: Mon, 26 Sep 2022 13:56:37 GMT
server: nginx/1.17.10
content-length: 29063
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: cuD75zL3HGjToKvmgcA0Uw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 83MH9sZGRGBLqYHBbFnUXw11DWM=
cdn.bloggersdelight.dk/wp-content/themes/base/assets/jquery/2.1.4/jquery.min.js?ver=0.69085800%201664241429
200 OK 84 kB URL HTTP/2 cdn.bloggersdelight.dk/wp-content/themes/base/assets/jquery/2.1.4/jquery.min.js?ver=0.69085800%201664241429
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (32025)
Hash 4a356126b9573eb7bd1e9a7494737410
8258d046f17dd3c15a5d3984e1868b7b5d1db329
22642f202577f0ba2f22cbe56b6cf291a09374487567cd3563e0d2a29f75c0c5
GET /wp-content/themes/base/assets/jquery/2.1.4/jquery.min.js?ver=0.69085800%201664241429 HTTP/1.1
Host: cdn.bloggersdelight.dk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://flightlawyer72.bloggersdelight.dk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-type: application/javascript
date: Tue, 27 Sep 2022 01:17:10 GMT
etag: "6331af95-1499c"
last-modified: Mon, 26 Sep 2022 13:56:37 GMT
server: nginx/1.17.10
content-length: 84380
X-Firefox-Spdy: h2
cdn.bloggersdelight.dk/wp-content/plugins/easy-video-player/lib/flowplayer.min.js?ver=4.9.6
200 OK 168 kB URL HTTP/2 cdn.bloggersdelight.dk/wp-content/plugins/easy-video-player/lib/flowplayer.min.js?ver=4.9.6
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (33437)
Size 168 kB (167983 bytes)
Hash 95ddaf55f29c7f5b1c4b27db91536244
2567255adf37762d9c045bda1c1ea26adee29b7b
3eb5e8c135a8e8b244af83d31e998ce6a3f880b3edeab42bb90a0eeddfbcd51f
GET /wp-content/plugins/easy-video-player/lib/flowplayer.min.js?ver=4.9.6 HTTP/1.1
Host: cdn.bloggersdelight.dk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://flightlawyer72.bloggersdelight.dk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-type: application/javascript
date: Tue, 27 Sep 2022 01:17:10 GMT
etag: "6331af93-2902f"
last-modified: Mon, 26 Sep 2022 13:56:35 GMT
server: nginx/1.17.10
content-length: 167983
X-Firefox-Spdy: h2
cdn.bloggersdelight.dk/wp-content/plugins/yet-another-related-posts-plugin/style/widget.css?ver=4.9.6
200 OK 771 B URL HTTP/2 cdn.bloggersdelight.dk/wp-content/plugins/yet-another-related-posts-plugin/style/widget.css?ver=4.9.6
IP
ASN #24940 Hetzner Online GmbH
Hash ccbec26801817b6a6eef8f269fe34020
dc3c2e885f6fb8c68b09965f1ba2afd63336888a
1210b2986220f5f6e6f416d87911e6655eed292f81a8219d8506f57c5d4353a3
GET /wp-content/plugins/yet-another-related-posts-plugin/style/widget.css?ver=4.9.6 HTTP/1.1
Host: cdn.bloggersdelight.dk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://flightlawyer72.bloggersdelight.dk/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-type: text/css
date: Tue, 27 Sep 2022 01:17:10 GMT
etag: "6331af94-303"
last-modified: Mon, 26 Sep 2022 13:56:36 GMT
server: nginx/1.17.10
content-length: 771
X-Firefox-Spdy: h2
cdn.bloggersdelight.dk/wp-content/themes/base/assets/js/moment.min.js?ver=0.69085800%201664241429
200 OK 541 kB URL HTTP/2 cdn.bloggersdelight.dk/wp-content/themes/base/assets/js/moment.min.js?ver=0.69085800%201664241429
IP
ASN #24940 Hetzner Online GmbH
File type Algol 68 source text\012- Pascal source, ASCII text
Size 541 kB (541363 bytes)
Hash d0ec8684ff24778254094cbc0c9b3ca6
67e795cf9f15093505f4886267f1ba0d234659e9
76015ba9b415ce39193d0c5677c3c1b731a244184285ce08db03bfabfb3e5dea
GET /wp-content/themes/base/assets/js/moment.min.js?ver=0.69085800%201664241429 HTTP/1.1
Host: cdn.bloggersdelight.dk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://flightlawyer72.bloggersdelight.dk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-type: application/javascript
date: Tue, 27 Sep 2022 01:17:10 GMT
etag: "6331af95-842b3"
last-modified: Mon, 26 Sep 2022 13:56:37 GMT
server: nginx/1.17.10
content-length: 541363
X-Firefox-Spdy: h2
bloggersdelight.dk/wp-content/themes/bloggersdelight/custom.css.php?blog_id=2365499&ver=0.69085800%201664241429
200 OK 994 B URL HTTP/2 bloggersdelight.dk/wp-content/themes/bloggersdelight/custom.css.php?blog_id=2365499&ver=0.69085800%201664241429
IP
ASN #24940 Hetzner Online GmbH
Hash a045bd598c4474aa0d551ffcfa8de7c1
3b33774d3adb291a035b9a75465225748fd40fa4
3e58a3927d1805b5419790a91b9764249a969afe6446a1dc4a4c4cf5e96612db
GET /wp-content/themes/bloggersdelight/custom.css.php?blog_id=2365499&ver=0.69085800%201664241429 HTTP/1.1
Host: bloggersdelight.dk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://flightlawyer72.bloggersdelight.dk/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 0
cache-control: no-cache, no-store,must-revalidate, max-age=-1
content-encoding: gzip
content-type: text/css;charset=UTF-8
date: Tue, 27 Sep 2022 01:17:10 GMT
server: Apache/2.4.29 (Ubuntu)
vary: Accept-Encoding
via: 1.1 varnish (Varnish/6.6)
x-cacheable: YES
x-tonny: was-here
x-tonny-quote: i Hate git
x-varnish: 3133608
content-length: 994
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 727 B IP
Hash 5f5fe7a4571c0b3c8ad685b593cc9d70
006a9a89bc14f1c5edd5e5f008c86a361a743873
6490477cda9094ad8e6f1b99c291f60c9023cc55c6a93553716dc63a4cb2ffc0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 01:17:10 GMT
Server: ECS (amb/6B99)
Content-Length: 727
cdn.bloggersdelight.dk/wp-content/plugins/gtranslate/gtranslate-style24.css?ver=4.9.6
200 OK 693 B URL HTTP/2 cdn.bloggersdelight.dk/wp-content/plugins/gtranslate/gtranslate-style24.css?ver=4.9.6
IP
ASN #24940 Hetzner Online GmbH
Hash 9b0f26cf8d22d4e9455f67b21c2f9759
f0240a4411d4a2eb073c574d37618e503392b76e
226456d9a9eef8f0831b6b181be100a49cbaec1651a8bd45d7d0cc897d161538
GET /wp-content/plugins/gtranslate/gtranslate-style24.css?ver=4.9.6 HTTP/1.1
Host: cdn.bloggersdelight.dk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://flightlawyer72.bloggersdelight.dk/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-type: text/css
date: Tue, 27 Sep 2022 01:17:10 GMT
etag: "6331af94-2b5"
last-modified: Mon, 26 Sep 2022 13:56:36 GMT
server: nginx/1.17.10
content-length: 693
X-Firefox-Spdy: h2
bloggersdelight.dk/wp-content/themes/bloggersdelight/follow/button_iframe.php?style=bottombar&blog_id=2365499
200 OK 768 B URL HTTP/2 bloggersdelight.dk/wp-content/themes/bloggersdelight/follow/button_iframe.php?style=bottombar&blog_id=2365499
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (1726)
Hash 93b96085a2fdbe2154d82c43880a4c3e
5a49c27278b8aa135d6eee0603b9e1a0849dbe31
b34008c379f03bd74764ca96c74ceca5415af05649fad23be6047e7c2498eb59
GET /wp-content/themes/bloggersdelight/follow/button_iframe.php?style=bottombar&blog_id=2365499 HTTP/1.1
Host: bloggersdelight.dk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://flightlawyer72.bloggersdelight.dk/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
age: 0
cache-control: no-cache, no-store,must-revalidate, max-age=-1
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Tue, 27 Sep 2022 01:17:11 GMT
server: Apache/2.4.29 (Ubuntu)
vary: Accept-Encoding
via: 1.1 varnish (Varnish/6.6)
x-cacheable: YES
x-tonny: was-here
x-varnish: 1096992
content-length: 768
X-Firefox-Spdy: h2
cdn.bloggersdelight.dk/wp-content/themes/desktop_2015/assets/img/sprite.png
200 OK 2.6 kB URL HTTP/2 cdn.bloggersdelight.dk/wp-content/themes/desktop_2015/assets/img/sprite.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 217 x 22, 8-bit/color RGBA, non-interlaced\012- data
Hash 93c38ea50cd8e423d4669076d2238efd
63876283cf01790436968647730bd1f5a5e148ec
caae44e398668d0634ff7d92c3a0d440e4af62cb1f64aa6b5307ca515c00aaba
GET /wp-content/themes/desktop_2015/assets/img/sprite.png HTTP/1.1
Host: cdn.bloggersdelight.dk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.bloggersdelight.dk/wp-content/themes/desktop_2015/style.css?ver=0.69085800%201664241429
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-type: image/png
date: Tue, 27 Sep 2022 01:17:11 GMT
etag: "6331af95-a41"
last-modified: Mon, 26 Sep 2022 13:56:37 GMT
server: nginx/1.17.10
content-length: 2625
X-Firefox-Spdy: h2
cdn.adnuntius.com/adn.js
200 OK 99 kB IP
ASN #60068 Datacamp Limited
File type ASCII text, with very long lines (65536), with no line terminators
Hash acb25ec4244527422fce6efc0acc39f5
37d3582bb44b0e73cda850ed08748c0470691050
5218ee0b613021cae8e4aaebca860147e4e5557b07a320dcc08159c3a26d12d7
GET /adn.js HTTP/1.1
Host: cdn.adnuntius.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://flightlawyer72.bloggersdelight.dk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 27 Sep 2022 01:17:11 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Tue, 23 Aug 2022 01:51:38 GMT
etag: W/"630432aa-18483"
access-control-allow-origin: *
x-accel-expires: @1664242025
server: CDN77-Turbo
x-77-nzt: AblMCQ1Zqx//BgAAAA
x-77-nzt-ray: TIhka0FAxmA
x-cache: HIT
x-age: 6
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
cdn.privacy-mgmt.com/mms/v2/get_site_data?hasCsp=true&href=http%3A%2F%2Fflightlawyer72.bloggersdelight.dk%2F2022%2F09%2F26%2F5-must-have-boost-very-high-calorie-drinks-for-anyone-looking-to-bulk-up%2F&account_id=1468
200 OK 199 B URL HTTP/2 cdn.privacy-mgmt.com/mms/v2/get_site_data?hasCsp=true&href=http%3A%2F%2Fflightlawyer72.bloggersdelight.dk%2F2022%2F09%2F26%2F5-must-have-boost-very-high-calorie-drinks-for-anyone-looking-to-bulk-up%2F&account_id=1468
IP
Hash 5ce736c3953b398895c301efdf1d3f30
9c85f4093c815c646cc6918eca53be339dc94871
1026f2c52735f9a082ee2cba3b7ed28623602c9c4aaad8cf32337c78179ba2bf
GET /mms/v2/get_site_data?hasCsp=true&href=http%3A%2F%2Fflightlawyer72.bloggersdelight.dk%2F2022%2F09%2F26%2F5-must-have-boost-very-high-calorie-drinks-for-anyone-looking-to-bulk-up%2F&account_id=1468 HTTP/1.1
Host: cdn.privacy-mgmt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://flightlawyer72.bloggersdelight.dk
Connection: keep-alive
Referer: http://flightlawyer72.bloggersdelight.dk/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
date: Tue, 27 Sep 2022 01:17:10 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-credentials: true
x-sp-mms-node: ip-10-128-33-40
strict-transport-security: max-age=15552000; includeSubdomains
cache-control: max-age=0, s-maxage=2592000
server: Jetty(9.4.2.v20170220)
x-cache: Miss from cloudfront
via: 1.1 bb1da7862c4968b28920b91b324095c0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: n49xRh4g23ll-iXgQumk_ppFJ5jguXOiCS5mHLcZPnX10C_CsgkQMg==
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/1.1 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash cae538dcce82598fbe43c0bf443e62dd
cc68ac6be9c5e0087a0000e5735b83270ace30f5
954b9e9d9744e1319c51760780a35de2dec353afffac705c2cca6d836a5e056d
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://flightlawyer72.bloggersdelight.dk/
HTTP/1.1 200 OK
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Cross-Origin-Resource-Policy: cross-origin
Server: Golfe2
Content-Length: 19826
Date: Tue, 27 Sep 2022 00:20:53 GMT
Expires: Tue, 27 Sep 2022 02:20:53 GMT
Cache-Control: public, max-age=7200
Age: 3378
Last-Modified: Sun, 11 Sep 2022 13:50:09 GMT
Content-Type: text/javascript
cdn.cxense.com/cx.js
200 OK 31 kB IP
File type C source, ASCII text, with very long lines (65081)
Hash f7fdab41c2e85045a2b04ca130f6c0e8
e8612ac64a4dc10b97f6a056b6bc1236187fedbc
4f94256aa03cc006144bd159fb1ebe96eadb3074385f0cff634201df904e9762
GET /cx.js HTTP/1.1
Host: cdn.cxense.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://flightlawyer72.bloggersdelight.dk/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Last-Modified: Mon, 26 Sep 2022 07:23:15 GMT
Server: AkamaiNetStorage
Content-Length: 30723
Cache-Control: max-age=3600
Expires: Tue, 27 Sep 2022 02:17:11 GMT
Date: Tue, 27 Sep 2022 01:17:11 GMT
Connection: keep-alive
Content-Type: application/x-javascript
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
connect.facebook.net/en_US/sdk.js
200 OK 1.7 kB URL HTTP/1.1 connect.facebook.net/en_US/sdk.js
IP
File type ASCII text, with very long lines (1961)
Hash f2105d6fdc6e08244699f05a38a1c327
b0af9663511ca277a6a41baf2ab385e325085f1a
14dfec57dea027124747b586089d8218182062a612a67a179a2b5adbf4571393
GET /en_US/sdk.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://flightlawyer72.bloggersdelight.dk/
HTTP/1.1 200 OK
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Expose-Headers: X-FB-Content-MD5
x-fb-content-md5: 8b1925c83ec268e84de498eac30cd311
ETag: "60e9fdc7b70b689fb3355c0ffbd56744"
Content-Type: application/x-javascript; charset=utf-8
timing-allow-origin: *
Access-Control-Allow-Origin: *
cross-origin-resource-policy: cross-origin
Expires: Tue, 27 Sep 2022 01:30:48 GMT
Cache-Control: public,max-age=1200,stale-while-revalidate=3600
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
X-Content-Type-Options: nosniff
x-fb-rlafr: 0
X-Frame-Options: DENY
Strict-Transport-Security: max-age=31536000; preload; includeSubDomains
Content-MD5: 8hBdb9xuCCRGmfBaOKHDJw==
X-FB-Debug: 5eMaFTs+GIWSrJy7tOPY+Hi14gDn4UmklU8mhsFCWrZ4zyeEWt+QEFwq3rwWDlChYkbtb70Q4kWxr6YGRa5B1w==
X-FB-TRIP-ID: 1679558926
Date: Tue, 27 Sep 2022 01:17:11 GMT
Alt-Svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
Connection: keep-alive
Content-Length: 1687
bloggersdelight.dk/wp-content/themes/bloggersdelight/follow/follow_overlay.php?blog_id=2365499
200 OK 2.4 kB URL HTTP/2 bloggersdelight.dk/wp-content/themes/bloggersdelight/follow/follow_overlay.php?blog_id=2365499
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (1709)
Hash 677258b1192cb43273eb824547a463c4
fb45692789248242b62ed627554d08ba330fffef
c8f194206eef8b7604ffe148be59b792cd6b49c30e276cd38eb95e5323bb4e3a
GET /wp-content/themes/bloggersdelight/follow/follow_overlay.php?blog_id=2365499 HTTP/1.1
Host: bloggersdelight.dk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://flightlawyer72.bloggersdelight.dk/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
age: 0
cache-control: no-cache, no-store,must-revalidate, max-age=-1
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Tue, 27 Sep 2022 01:17:11 GMT
server: Apache/2.4.29 (Ubuntu)
vary: Accept-Encoding
via: 1.1 varnish (Varnish/6.6)
x-cacheable: YES
x-tonny: was-here
x-varnish: 10720380
content-length: 2431
X-Firefox-Spdy: h2
cdn.bloggersdelight.dk/wp-content/themes/base/assets/bootstrap/3.3.7/css/bootstrap.min.css?ver=0.69085800%201664241429
200 OK 22 B URL HTTP/2 cdn.bloggersdelight.dk/wp-content/themes/base/assets/bootstrap/3.3.7/css/bootstrap.min.css?ver=0.69085800%201664241429
IP
ASN #24940 Hetzner Online GmbH
File type gzip compressed data, from Unix\012- data
Hash 061faf60a30dde2f20ba8f454c3020de
1940a26a9be338cb36f5b50a1d638ef36b124d51
21947b02ead137acb20e602e9448c7c453b2836d1a755aadd5e1c61ecd2eb034
GET /wp-content/themes/base/assets/bootstrap/3.3.7/css/bootstrap.min.css?ver=0.69085800%201664241429 HTTP/1.1
Host: cdn.bloggersdelight.dk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://flightlawyer72.bloggersdelight.dk/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-type: text/css
date: Tue, 27 Sep 2022 01:17:10 GMT
etag: "6331af95-1d970"
last-modified: Mon, 26 Sep 2022 13:56:37 GMT
server: nginx/1.17.10
content-length: 121200
X-Firefox-Spdy: h2
widgets.rewardstyle.com/js/shopthepost.js
200 OK 4.7 kB URL HTTP/1.1 widgets.rewardstyle.com/js/shopthepost.js
IP
File type ASCII text, with very long lines (1976)
Hash 298a9d73079b3b2a7608a86783b93252
5b234a0e1cb663714c3a63d250a06b96059095ac
93f3978f6f2bc2091407becc57f501117a3597f2b6d85b606c7b66c82a64126e
GET /js/shopthepost.js HTTP/1.1
Host: widgets.rewardstyle.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://flightlawyer72.bloggersdelight.dk/
HTTP/1.1 200 OK
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Last-Modified: Mon, 11 Jul 2022 20:42:49 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Credentials: false
Access-Control-Max-Age: 86400
Access-Control-Allow-Methods: GET
Content-Encoding: gzip
Date: Sat, 10 Sep 2022 23:02:05 GMT
ETag: W/"62cc8b49-37a7"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: atw-czh3Roa7Zd6MoYpCke47rC6kvJYp_VqcfFPgJM0I3nCU8J46RQ==
Age: 2311684
flightlawyer72.bloggersdelight.dk/wp-content/themes/base/get_image_tags_all.php?cache=yes&blog_id=2365499&post_ids=6
200 OK 22 B URL HTTP/1.1 flightlawyer72.bloggersdelight.dk/wp-content/themes/base/get_image_tags_all.php?cache=yes&blog_id=2365499&post_ids=6
IP
ASN #24940 Hetzner Online GmbH
File type JSON data\012- , ASCII text, with no line terminators
Hash 061faf60a30dde2f20ba8f454c3020de
1940a26a9be338cb36f5b50a1d638ef36b124d51
21947b02ead137acb20e602e9448c7c453b2836d1a755aadd5e1c61ecd2eb034
GET /wp-content/themes/base/get_image_tags_all.php?cache=yes&blog_id=2365499&post_ids=6 HTTP/1.1
Host: flightlawyer72.bloggersdelight.dk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: http://flightlawyer72.bloggersdelight.dk/2022/09/26/5-must-have-boost-very-high-calorie-drinks-for-anyone-looking-to-bulk-up/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 0
Cache-Control: no-cache, no-store,must-revalidate, max-age=-1
Content-Encoding: gzip
Content-Length: 22
Content-Type: text/html; charset=UTF-8
Date: Tue, 27 Sep 2022 01:17:11 GMT
Server: Apache/2.4.29 (Ubuntu)
Vary: Accept-Encoding
Via: 1.1 varnish (Varnish/6.6)
X-Cacheable: YES
X-Tonny: was-here
X-Varnish: 9133035 9133034
cdn.bloggersdelight.dk/wp-content/themes/base/assets/font-awesome/4.6.3/fonts/fontawesome-webfont.woff?v=4.6.3
200 OK 90 kB URL HTTP/2 cdn.bloggersdelight.dk/wp-content/themes/base/assets/font-awesome/4.6.3/fonts/fontawesome-webfont.woff?v=4.6.3
IP
ASN #24940 Hetzner Online GmbH
File type Web Open Font Format, TrueType, length 90412, version 1.0\012- data
Hash c8ddf1e5e5bf3682bc7bebf30f394148
6d7e6a5fc802b13694d8820fc0138037c0977d2e
adbc4f95eb6d7f2738959cf0ecbc374672fce47e856050a8e9791f457623ac2c
GET /wp-content/themes/base/assets/font-awesome/4.6.3/fonts/fontawesome-webfont.woff?v=4.6.3 HTTP/1.1
Host: cdn.bloggersdelight.dk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://flightlawyer72.bloggersdelight.dk
Connection: keep-alive
Referer: https://cdn.bloggersdelight.dk/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-type: font/woff
date: Tue, 27 Sep 2022 01:17:11 GMT
etag: "6331af95-1612c"
last-modified: Mon, 26 Sep 2022 13:56:37 GMT
server: nginx/1.17.10
content-length: 90412
X-Firefox-Spdy: h2
cdn.bloggersdelight.dk/wp-content/themes/base/assets/font-awesome/4.6.3/css/font-awesome.min.css?ver=0.08394900%201664241431
200 OK 29 kB URL HTTP/2 cdn.bloggersdelight.dk/wp-content/themes/base/assets/font-awesome/4.6.3/css/font-awesome.min.css?ver=0.08394900%201664241431
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (28900)
Hash 4083f5d376eb849a458cc790b53ba080
fb5b49426dee7f1508500e698d1b3c6b04c8fcce
008a1d103902f15fdb1c191fcb1ce8954330e7b8de43d09abb08555ba609f420
GET /wp-content/themes/base/assets/font-awesome/4.6.3/css/font-awesome.min.css?ver=0.08394900%201664241431 HTTP/1.1
Host: cdn.bloggersdelight.dk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloggersdelight.dk/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-type: text/css
date: Tue, 27 Sep 2022 01:17:11 GMT
etag: "6331af95-7187"
last-modified: Mon, 26 Sep 2022 13:56:37 GMT
server: nginx/1.17.10
content-length: 29063
X-Firefox-Spdy: h2
cdn.bloggersdelight.dk/wp-content/themes/bloggersdelight/follow/button_iframe.css?ver=0.08394900%201664241431
200 OK 544 B URL HTTP/2 cdn.bloggersdelight.dk/wp-content/themes/bloggersdelight/follow/button_iframe.css?ver=0.08394900%201664241431
IP
ASN #24940 Hetzner Online GmbH
Hash 8a99032666d65b8ba6e795c42c598c73
60cac9edf391de541f449d13bc53fc1aad91fb37
6d6be1ff643127e79b774244577961cb64f2a680398104f3489363f5376ad289
GET /wp-content/themes/bloggersdelight/follow/button_iframe.css?ver=0.08394900%201664241431 HTTP/1.1
Host: cdn.bloggersdelight.dk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloggersdelight.dk/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-type: text/css
date: Tue, 27 Sep 2022 01:17:11 GMT
etag: "6331af95-220"
last-modified: Mon, 26 Sep 2022 13:56:37 GMT
server: nginx/1.17.10
content-length: 544
X-Firefox-Spdy: h2
cdn.bloggersdelight.dk/wp-content/themes/base/assets/js/config.js?ver=0.08394900%201664241431
200 OK 402 B URL HTTP/2 cdn.bloggersdelight.dk/wp-content/themes/base/assets/js/config.js?ver=0.08394900%201664241431
IP
ASN #24940 Hetzner Online GmbH
Hash 7506dd1747dbc341c3cd150abb581282
5201390115d76fd4a77437515a6a4c9551f30021
709aafc0747b3a5cf2ec64844a77d50138719da99c7196f4572189fcb5253c7c
GET /wp-content/themes/base/assets/js/config.js?ver=0.08394900%201664241431 HTTP/1.1
Host: cdn.bloggersdelight.dk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloggersdelight.dk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-type: application/javascript
date: Tue, 27 Sep 2022 01:17:11 GMT
etag: "6331af95-192"
last-modified: Mon, 26 Sep 2022 13:56:37 GMT
server: nginx/1.17.10
content-length: 402
X-Firefox-Spdy: h2
cdn.bloggersdelight.dk/wp-content/themes/desktop_2015/favicon.ico
404 Not Found 2.9 kB URL HTTP/2 cdn.bloggersdelight.dk/wp-content/themes/desktop_2015/favicon.ico
IP
ASN #24940 Hetzner Online GmbH
Hash 01c57168c533489f6260d51ae91d675b
38bef14ac369f9881531c8555b265c36bfb86c5d
13d673424805009ca81026af75e88e1551f305d7d75f2d30eac59ca3204ed49d
GET /wp-content/themes/desktop_2015/favicon.ico HTTP/1.1
Host: cdn.bloggersdelight.dk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://flightlawyer72.bloggersdelight.dk/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
content-encoding: gzip
content-type: text/html
date: Tue, 27 Sep 2022 01:17:11 GMT
server: nginx/1.17.10
X-Firefox-Spdy: h2
cdn.bloggersdelight.dk/wp-content/themes/bloggersdelight/follow/button_iframe.js?ver=0.08394900%201664241431
200 OK 2.7 kB URL HTTP/2 cdn.bloggersdelight.dk/wp-content/themes/bloggersdelight/follow/button_iframe.js?ver=0.08394900%201664241431
IP
ASN #24940 Hetzner Online GmbH
Hash 21c4b8568b89b74f4db92142a10dc329
9f1f0e0fde24dc66c41fe1c8538e5309e1335c14
6dd9292b4a0141fcd7c6f7d5816a7f5017f9e457a9cd11e68bf8fafc7b411924
GET /wp-content/themes/bloggersdelight/follow/button_iframe.js?ver=0.08394900%201664241431 HTTP/1.1
Host: cdn.bloggersdelight.dk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloggersdelight.dk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-type: application/javascript
date: Tue, 27 Sep 2022 01:17:11 GMT
etag: "6331af95-a6f"
last-modified: Mon, 26 Sep 2022 13:56:37 GMT
server: nginx/1.17.10
content-length: 2671
X-Firefox-Spdy: h2
cdn.bloggersdelight.dk/wp-content/themes/base/assets/js/config.js?ver=0.18786700%201664241431
200 OK 402 B URL HTTP/2 cdn.bloggersdelight.dk/wp-content/themes/base/assets/js/config.js?ver=0.18786700%201664241431
IP
ASN #24940 Hetzner Online GmbH
Hash 7506dd1747dbc341c3cd150abb581282
5201390115d76fd4a77437515a6a4c9551f30021
709aafc0747b3a5cf2ec64844a77d50138719da99c7196f4572189fcb5253c7c
GET /wp-content/themes/base/assets/js/config.js?ver=0.18786700%201664241431 HTTP/1.1
Host: cdn.bloggersdelight.dk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloggersdelight.dk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-type: application/javascript
date: Tue, 27 Sep 2022 01:17:11 GMT
etag: "6331af95-192"
last-modified: Mon, 26 Sep 2022 13:56:37 GMT
server: nginx/1.17.10
content-length: 402
X-Firefox-Spdy: h2
cdn.bloggersdelight.dk/wp-content/themes/base/assets/jquery/2.2.3/jquery.min.js?ver=0.08394900%201664241431
200 OK 86 kB URL HTTP/2 cdn.bloggersdelight.dk/wp-content/themes/base/assets/jquery/2.2.3/jquery.min.js?ver=0.08394900%201664241431
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (32065)
Hash 33cabfa15c1060aaa3d207c653afb1ee
e3dbb65f2b541d842b50d37304b0102a2d5f2387
6b6de0d4db7876d1183a3edb47ebd3bbbf93f153f5de1ba6645049348628109a
Analyzer Verdict Alert urlquery Phishing - Adobe
GET /wp-content/themes/base/assets/jquery/2.2.3/jquery.min.js?ver=0.08394900%201664241431 HTTP/1.1
Host: cdn.bloggersdelight.dk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloggersdelight.dk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-type: application/javascript
date: Tue, 27 Sep 2022 01:17:11 GMT
etag: "6331af95-14e9b"
last-modified: Mon, 26 Sep 2022 13:56:37 GMT
server: nginx/1.17.10
content-length: 85659
X-Firefox-Spdy: h2
cdn.bloggersdelight.dk/wp-content/themes/base/assets/js/window.js?ver=0.18786700%201664241431
200 OK 2.7 kB URL HTTP/2 cdn.bloggersdelight.dk/wp-content/themes/base/assets/js/window.js?ver=0.18786700%201664241431
IP
ASN #24940 Hetzner Online GmbH
Hash fae01ce2794a2215e553eb1bf13ca265
8fe28afd2ba2bb7818a92ad840ed69c89d6c8905
ef0d77919e20fb03b413e61758c353099f8fef5f686b221f37caba9e3b09eaa8
GET /wp-content/themes/base/assets/js/window.js?ver=0.18786700%201664241431 HTTP/1.1
Host: cdn.bloggersdelight.dk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloggersdelight.dk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-type: application/javascript
date: Tue, 27 Sep 2022 01:17:11 GMT
etag: "6331af95-abc"
last-modified: Mon, 26 Sep 2022 13:56:37 GMT
server: nginx/1.17.10
content-length: 2748
X-Firefox-Spdy: h2
cdn.bloggersdelight.dk/wp-content/themes/base/assets/jquery/2.1.4/jquery.min.js?ver=0.18786700%201664241431
200 OK 84 kB URL HTTP/2 cdn.bloggersdelight.dk/wp-content/themes/base/assets/jquery/2.1.4/jquery.min.js?ver=0.18786700%201664241431
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (32025)
Hash 4a356126b9573eb7bd1e9a7494737410
8258d046f17dd3c15a5d3984e1868b7b5d1db329
22642f202577f0ba2f22cbe56b6cf291a09374487567cd3563e0d2a29f75c0c5
GET /wp-content/themes/base/assets/jquery/2.1.4/jquery.min.js?ver=0.18786700%201664241431 HTTP/1.1
Host: cdn.bloggersdelight.dk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloggersdelight.dk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-type: application/javascript
date: Tue, 27 Sep 2022 01:17:11 GMT
etag: "6331af95-1499c"
last-modified: Mon, 26 Sep 2022 13:56:37 GMT
server: nginx/1.17.10
content-length: 84380
X-Firefox-Spdy: h2
cdn.bloggersdelight.dk/wp-content/themes/bloggersdelight/follow/follow_overlay.js?ver=0.18786700%201664241431
200 OK 3.0 kB URL HTTP/2 cdn.bloggersdelight.dk/wp-content/themes/bloggersdelight/follow/follow_overlay.js?ver=0.18786700%201664241431
IP
ASN #24940 Hetzner Online GmbH
Hash 7394f54890f944294b850f9eb81d8cee
271a8b9402dc91f7b4a6801b0c0dd9ea990c45ce
bf62138166c5ca9ade22dfd9eeb8ce34c1c6bd3e9289ac122a01ca4a940df834
GET /wp-content/themes/bloggersdelight/follow/follow_overlay.js?ver=0.18786700%201664241431 HTTP/1.1
Host: cdn.bloggersdelight.dk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloggersdelight.dk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-type: application/javascript
date: Tue, 27 Sep 2022 01:17:11 GMT
etag: "6331af95-bbd"
last-modified: Mon, 26 Sep 2022 13:56:37 GMT
server: nginx/1.17.10
content-length: 3005
X-Firefox-Spdy: h2
flightlawyer72.bloggersdelight.dk/wp-admin/admin-ajax.php
200 OK 33 B URL HTTP/1.1 flightlawyer72.bloggersdelight.dk/wp-admin/admin-ajax.php
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with no line terminators
Hash bc308c84b86cab71270f411a9b60c1c5
36cbba1c198cb73afbe18f9f41c3da87d0f3b9ac
6b0dcdd88614718da7bf708fc502f56216dcd66c35342add091ee6339acb65af
POST /wp-admin/admin-ajax.php HTTP/1.1
Host: flightlawyer72.bloggersdelight.dk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/plain, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 24
Origin: http://flightlawyer72.bloggersdelight.dk
Connection: keep-alive
Referer: http://flightlawyer72.bloggersdelight.dk/2022/09/26/5-must-have-boost-very-high-calorie-drinks-for-anyone-looking-to-bulk-up/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: http://flightlawyer72.bloggersdelight.dk
Age: 0
Cache-Control: no-cache, no-store,must-revalidate, max-age=-1
Content-Encoding: gzip
Content-Length: 33
Content-Type: text/html; charset=UTF-8
Date: Tue, 27 Sep 2022 01:17:11 GMT
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Referrer-Policy: strict-origin-when-cross-origin
Server: Apache/2.4.29 (Ubuntu)
Vary: Accept-Encoding
Via: 1.1 varnish (Varnish/6.6)
X-Cacheable: NO:Got POST data
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Robots-Tag: noindex
X-Tonny: was-here
X-Tonny-Quote: Husk det er ulvefredag imorgen
X-Varnish: 9133036
flightlawyer72.bloggersdelight.dk/wp-admin/admin-ajax.php?action=affiliate_get_list&blog_id=2365499&ajax=true
200 OK 62 B URL HTTP/1.1 flightlawyer72.bloggersdelight.dk/wp-admin/admin-ajax.php?action=affiliate_get_list&blog_id=2365499&ajax=true
IP
ASN #24940 Hetzner Online GmbH
File type JSON data\012- , ASCII text, with no line terminators
Hash 8765b6ad7ad97628d072a1cc03e35e2d
37c2707c9c8bce17a346f5c2924d41fba7720115
d609aa5e8d1cfd8117c24de555feec42927ac8bd5cc4a84c78fc688d41ce0b32
GET /wp-admin/admin-ajax.php?action=affiliate_get_list&blog_id=2365499&ajax=true HTTP/1.1
Host: flightlawyer72.bloggersdelight.dk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: http://flightlawyer72.bloggersdelight.dk/2022/09/26/5-must-have-boost-very-high-calorie-drinks-for-anyone-looking-to-bulk-up/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Age: 0
Cache-Control: no-cache, must-revalidate, max-age=0
Content-Encoding: gzip
Content-Length: 62
Content-Type: text/html; charset=UTF-8
Date: Tue, 27 Sep 2022 01:17:11 GMT
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Referrer-Policy: strict-origin-when-cross-origin
Server: Apache/2.4.29 (Ubuntu)
Vary: Accept-Encoding
Via: 1.1 varnish (Varnish/6.6)
X-Cacheable: YES: but only 5 minuttes
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Robots-Tag: noindex
X-Tonny: was-here
X-Tonny-Quote: Det er Sebastians tur til at hente donuts
X-Varnish: 8320485
www.google-analytics.com/collect?v=1&_v=j97&aip=1&a=827838133&t=pageview&_s=1&dl=http%3A%2F%2Fflightlawyer72.bloggersdelight.dk%2F2022%2F09%2F26%2F5-must-have-boost-very-high-calorie-drinks-for-anyone-looking-to-bulk-up%2F&ul=en-us&de=UTF-8&dt=5%20MUST-HAVE%20BOOST%20VERY%20HIGH%20CALORIE%20DRINKS%20FOR%20ANYONE%20LOOKING%20TO%20BULK%20UP%20%7C%20flightlawyer72&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YGBAgEAB~&jid=250777164&gjid=105172867&cid=1225679110.1664241429&tid=UA-22265853-1&_gid=1149689532.1664241429&cd1=basic&z=1331692346
200 OK 35 B URL HTTP/1.1 www.google-analytics.com/collect?v=1&_v=j97&aip=1&a=827838133&t=pageview&_s=1&dl=http%3A%2F%2Fflightlawyer72.bloggersdelight.dk%2F2022%2F09%2F26%2F5-must-have-boost-very-high-calorie-drinks-for-anyone-looking-to-bulk-up%2F&ul=en-us&de=UTF-8&dt=5%20MUST-HAVE%20BOOST%20VERY%20HIGH%20CALORIE%20DRINKS%20FOR%20ANYONE%20LOOKING%20TO%20BULK%20UP%20%7C%20flightlawyer72&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YGBAgEAB~&jid=250777164&gjid=105172867&cid=1225679110.1664241429&tid=UA-22265853-1&_gid=1149689532.1664241429&cd1=basic&z=1331692346
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /collect?v=1&_v=j97&aip=1&a=827838133&t=pageview&_s=1&dl=http%3A%2F%2Fflightlawyer72.bloggersdelight.dk%2F2022%2F09%2F26%2F5-must-have-boost-very-high-calorie-drinks-for-anyone-looking-to-bulk-up%2F&ul=en-us&de=UTF-8&dt=5%20MUST-HAVE%20BOOST%20VERY%20HIGH%20CALORIE%20DRINKS%20FOR%20ANYONE%20LOOKING%20TO%20BULK%20UP%20%7C%20flightlawyer72&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YGBAgEAB~&jid=250777164&gjid=105172867&cid=1225679110.1664241429&tid=UA-22265853-1&_gid=1149689532.1664241429&cd1=basic&z=1331692346 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://flightlawyer72.bloggersdelight.dk/
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Pragma: no-cache
X-Content-Type-Options: nosniff
Cross-Origin-Resource-Policy: cross-origin
Server: Golfe2
Content-Length: 35
Date: Mon, 26 Sep 2022 03:04:04 GMT
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Age: 79987
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
Content-Type: image/gif
macro.adnami.io/macro/spec/adsm.macro.e7c94703-00f4-4d12-bb61-8cdb3b1b17db.js
200 OK 29 kB URL HTTP/2 macro.adnami.io/macro/spec/adsm.macro.e7c94703-00f4-4d12-bb61-8cdb3b1b17db.js
IP
File type Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Hash bde35f90c2021fb1e3ed097f7c785b4c
f409cbb511e7d3e3b9f6e129662e344a13c53de9
61c0ef81388bba01cee8956b86b239a44d88df2ed722f813ee48c7074c006d42
GET /macro/spec/adsm.macro.e7c94703-00f4-4d12-bb61-8cdb3b1b17db.js HTTP/1.1
Host: macro.adnami.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://flightlawyer72.bloggersdelight.dk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 27 Sep 2022 01:17:11 GMT
content-type: application/javascript
content-md5: GVGdL14OkR2nLmmOAB/iAQ==
last-modified: Wed, 24 Aug 2022 11:02:08 GMT
x-ms-request-id: 19a42e55-b01e-0061-07a8-b724fa000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cf-cache-status: HIT
expires: Tue, 27 Sep 2022 05:17:11 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
server: cloudflare
cf-ray: 751065f03b50b517-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
dw6vol2k7d4iu.cloudfront.net/1x1.png?loaded=true&site=bloggersdelight.dk&someunique=pgxwhdm2d
200 OK 67 B URL HTTP/2 dw6vol2k7d4iu.cloudfront.net/1x1.png?loaded=true&site=bloggersdelight.dk&someunique=pgxwhdm2d
IP
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash 93ca32a536da1698ea979f183679af29
c530c06cf89c410c0355d7852644a73fc3ec8c04
ebf4f635a17d10d6eb46ba680b70142419aa3220f228001a036d311a22ee9d2a
GET /1x1.png?loaded=true&site=bloggersdelight.dk&someunique=pgxwhdm2d HTTP/1.1
Host: dw6vol2k7d4iu.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://flightlawyer72.bloggersdelight.dk/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/png
content-length: 67
last-modified: Thu, 23 Jun 2022 05:57:07 GMT
accept-ranges: bytes
server: AmazonS3
date: Mon, 26 Sep 2022 01:21:35 GMT
etag: "93ca32a536da1698ea979f183679af29"
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: rvzJpx0PgozQCf5GqtLEgXo521wvAT2g6y09ybwh9RDPto4ZPajUTA==
age: 86136
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 992 B IP
File type gzip compressed data, max compression\012- data
Hash c11625c7e869665313e4e7ab0f4f3f5f
ae6fa15f470b686f29523216338cac033a288743
a8a81c68565ae461a6439d49ffe6f4f2fe250a8e5536fb279ce089608a293ace
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3494
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 01:17:11 GMT
Last-Modified: Tue, 27 Sep 2022 00:18:57 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471
www.google-analytics.com/j/collect?v=1&_v=j97&a=827838133&t=pageview&_s=1&dl=http%3A%2F%2Fflightlawyer72.bloggersdelight.dk%2F2022%2F09%2F26%2F5-must-have-boost-very-high-calorie-drinks-for-anyone-looking-to-bulk-up%2F&ul=en-us&de=UTF-8&dt=5%20MUST-HAVE%20BOOST%20VERY%20HIGH%20CALORIE%20DRINKS%20FOR%20ANYONE%20LOOKING%20TO%20BULK%20UP%20%7C%20flightlawyer72&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YGDAAEABAAAAAG~&jid=249757807&gjid=900465202&cid=1225679110.1664241429&tid=UA-30244962-1&_gid=1149689532.1664241429&_r=1&_slc=1&z=1419578749
200 OK 4 B URL HTTP/2 www.google-analytics.com/j/collect?v=1&_v=j97&a=827838133&t=pageview&_s=1&dl=http%3A%2F%2Fflightlawyer72.bloggersdelight.dk%2F2022%2F09%2F26%2F5-must-have-boost-very-high-calorie-drinks-for-anyone-looking-to-bulk-up%2F&ul=en-us&de=UTF-8&dt=5%20MUST-HAVE%20BOOST%20VERY%20HIGH%20CALORIE%20DRINKS%20FOR%20ANYONE%20LOOKING%20TO%20BULK%20UP%20%7C%20flightlawyer72&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YGDAAEABAAAAAG~&jid=249757807&gjid=900465202&cid=1225679110.1664241429&tid=UA-30244962-1&_gid=1149689532.1664241429&_r=1&_slc=1&z=1419578749
IP
File type ASCII text, with no line terminators
Hash 9e92e190700c1af4539b40c2171320a9
209bcdb79e6067b51091ce8586d4b977f25b67d8
aec60bc104db041b1512185839f18f52986df7e569e5445f740dd60f763fbca8
POST /j/collect?v=1&_v=j97&a=827838133&t=pageview&_s=1&dl=http%3A%2F%2Fflightlawyer72.bloggersdelight.dk%2F2022%2F09%2F26%2F5-must-have-boost-very-high-calorie-drinks-for-anyone-looking-to-bulk-up%2F&ul=en-us&de=UTF-8&dt=5%20MUST-HAVE%20BOOST%20VERY%20HIGH%20CALORIE%20DRINKS%20FOR%20ANYONE%20LOOKING%20TO%20BULK%20UP%20%7C%20flightlawyer72&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YGDAAEABAAAAAG~&jid=249757807&gjid=900465202&cid=1225679110.1664241429&tid=UA-30244962-1&_gid=1149689532.1664241429&_r=1&_slc=1&z=1419578749 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: http://flightlawyer72.bloggersdelight.dk
Connection: keep-alive
Referer: http://flightlawyer72.bloggersdelight.dk/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: http://flightlawyer72.bloggersdelight.dk
date: Tue, 27 Sep 2022 01:17:11 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 48c074926167685cef6859d940f0b451
bacd22b12e1e4f435225df08ed044391ca1c162a
bd68c2e430f25349e884dcd2982114db7bc62f05cce124d6c075ae98a959fd28
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5573
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 01:17:11 GMT
Last-Modified: Mon, 26 Sep 2022 23:44:18 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 002d49bafbcc428a44fe523322ad9e05
b39aad0d1e941121f28af8f9b6d76f19216800d5
59a10c7762be219b689cd518aea4d034aa725c6a632b7f866989dcf984b5e007
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 01:17:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
p1cluster.cxense.com/p1.js
200 OK 46 B URL HTTP/1.1 p1cluster.cxense.com/p1.js
IP
Hash e4897358b8844eaa5c4eb3b28f67fae0
8dec61b446fe5ce8f361e41b442e540f70a41810
09bf8f04db1527d709159fe71a93664a9b3f2ec2cadd73820aafd5b84830bfba
GET /p1.js HTTP/1.1
Host: p1cluster.cxense.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://flightlawyer72.bloggersdelight.dk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Tue, 27 Sep 2022 01:17:11 GMT
set-cookie: gckp=1m2sch5yo1b7g1yt01g6v4czkz;Path=/;Domain=cxense.com;Expires=Wed, 27 Sep 2023 01:17:11 GMT;Max-Age=31536000;HttpOnly;Secure;Version=1;SameSite=None
p3p: policyref="http://www.cxense.com/w3c/p3p.xml", CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
expires: Wed, 27 Sep 2023 01:17:11 GMT
last-modified: Sun, 27 Mar 2022 01:17:11 GMT
cache-control: private, proxy-revalidate
etag: lqguo5y4uj1v2zptl48fdh60v
content-type: text/javascript;charset=utf-8
content-length: 46
server: Jetty(9.4.28.v20200408)
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j97&tid=UA-22265853-1&cid=1225679110.1664241429&jid=250777164&gjid=105172867&_gid=1149689532.1664241429&_u=YGBAgEABAAAAAE~&z=1040099683
200 OK 1 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j97&tid=UA-22265853-1&cid=1225679110.1664241429&jid=250777164&gjid=105172867&_gid=1149689532.1664241429&_u=YGBAgEABAAAAAE~&z=1040099683
IP
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j97&tid=UA-22265853-1&cid=1225679110.1664241429&jid=250777164&gjid=105172867&_gid=1149689532.1664241429&_u=YGBAgEABAAAAAE~&z=1040099683 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: http://flightlawyer72.bloggersdelight.dk
Connection: keep-alive
Referer: http://flightlawyer72.bloggersdelight.dk/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: http://flightlawyer72.bloggersdelight.dk
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Tue, 27 Sep 2022 01:17:11 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash cf99681f6f1d6e00e0abca7033eb6219
73261f7daa90ce6fd7a81b10ed7bd762200c3f28
3f4bfe673679f8f0650774c07f8707a7013ac7e1c3e1b3b03e68cbaa5ccc1af6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6088
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 01:17:11 GMT
Last-Modified: Mon, 26 Sep 2022 23:35:43 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471
connect.facebook.net/en_US/sdk.js?hash=97d535858a4a774c59a74558b41c4ea3
200 OK 87 kB URL HTTP/2 connect.facebook.net/en_US/sdk.js?hash=97d535858a4a774c59a74558b41c4ea3
IP
File type ASCII text, with very long lines (13260)
Hash be86a8764d6b124ceaddaf690f926e14
7088fca4a1a7af72534b73b8899e8bbf54bd5cbc
a18ec7bceb0b2cb81363cfb992c08000cef08c487388130845c6fd6beb89ca93
GET /en_US/sdk.js?hash=97d535858a4a774c59a74558b41c4ea3 HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://flightlawyer72.bloggersdelight.dk
Connection: keep-alive
Referer: http://flightlawyer72.bloggersdelight.dk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 10b885545357d2652b733c797dff520f
etag: "e069b7f813b549a797bf08ab904fd958"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Wed, 27 Sep 2023 00:46:48 GMT
cache-control: public,max-age=31536000,stale-while-revalidate=3600,immutable
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: voaodk1rEkzq3a9pD5JuFA==
x-fb-debug: tITwWj7eAzfER5SNmqjC23jd8JloJi/0Y4WlX0Elthrqn4RmB5xLtLYVO7Ed9+6oPtyooIMjuRR9w/H1UQ79yQ==
priority: u=3,i
content-length: 87331
x-fb-trip-id: 1679558926
date: Tue, 27 Sep 2022 01:17:11 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 002d49bafbcc428a44fe523322ad9e05
b39aad0d1e941121f28af8f9b6d76f19216800d5
59a10c7762be219b689cd518aea4d034aa725c6a632b7f866989dcf984b5e007
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 01:17:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.bloggersdelight.dk/wp-content/themes/base/assets/bootstrap/3.3.4/css/bootstrap.min.css?ver=0.18786700%201664241431
200 OK 43 B URL HTTP/2 cdn.bloggersdelight.dk/wp-content/themes/base/assets/bootstrap/3.3.4/css/bootstrap.min.css?ver=0.18786700%201664241431
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /wp-content/themes/base/assets/bootstrap/3.3.4/css/bootstrap.min.css?ver=0.18786700%201664241431 HTTP/1.1
Host: cdn.bloggersdelight.dk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloggersdelight.dk/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-type: text/css
date: Tue, 27 Sep 2022 01:17:11 GMT
etag: "6331af95-1ca39"
last-modified: Mon, 26 Sep 2022 13:56:37 GMT
server: nginx/1.17.10
content-length: 117305
X-Firefox-Spdy: h2
id.cxense.com/public/user/id?json=%7B%22identities%22%3A%5B%7B%22type%22%3A%22ckp%22%2C%22id%22%3A%22l8jidlbxo3dxqsrf%22%7D%2C%7B%22type%22%3A%22cst%22%2C%22id%22%3A%22lqguo5y4uj1v2zptl48fdh60v%22%7D%5D%2C%22siteId%22%3A%221137356350202375931%22%2C%22location%22%3A%22http%3A%2F%2Fflightlawyer72.bloggersdelight.dk%2F2022%2F09%2F26%2F5-must-have-boost-very-high-calorie-drinks-for-anyone-looking-to-bulk-up%2F%22%7D&callback=cXJsonpCB1
200 OK 101 B URL HTTP/1.1 id.cxense.com/public/user/id?json=%7B%22identities%22%3A%5B%7B%22type%22%3A%22ckp%22%2C%22id%22%3A%22l8jidlbxo3dxqsrf%22%7D%2C%7B%22type%22%3A%22cst%22%2C%22id%22%3A%22lqguo5y4uj1v2zptl48fdh60v%22%7D%5D%2C%22siteId%22%3A%221137356350202375931%22%2C%22location%22%3A%22http%3A%2F%2Fflightlawyer72.bloggersdelight.dk%2F2022%2F09%2F26%2F5-must-have-boost-very-high-calorie-drinks-for-anyone-looking-to-bulk-up%2F%22%7D&callback=cXJsonpCB1
IP
Hash 04b6d0111a484aeb5d2de9bd1fdd71a4
a15d57d314e497f2d438555472528bcb5f1cb248
b5499f07c314552442de92160ee61ce9a3a1bce52720259257c1cdecb17ccb21
GET /public/user/id?json=%7B%22identities%22%3A%5B%7B%22type%22%3A%22ckp%22%2C%22id%22%3A%22l8jidlbxo3dxqsrf%22%7D%2C%7B%22type%22%3A%22cst%22%2C%22id%22%3A%22lqguo5y4uj1v2zptl48fdh60v%22%7D%5D%2C%22siteId%22%3A%221137356350202375931%22%2C%22location%22%3A%22http%3A%2F%2Fflightlawyer72.bloggersdelight.dk%2F2022%2F09%2F26%2F5-must-have-boost-very-high-calorie-drinks-for-anyone-looking-to-bulk-up%2F%22%7D&callback=cXJsonpCB1 HTTP/1.1
Host: id.cxense.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://flightlawyer72.bloggersdelight.dk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Tue, 27 Sep 2022 01:17:11 GMT
expires: Mon, 26 Jul 1997 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/javascript;charset=utf-8
x-content-type-options: nosniff
set-cookie: gckp=2t6t74ky9kjsj3tg3xi4ntcj3w;Path=/;Domain=cxense.com;Expires=Wed, 27 Sep 2023 01:17:11 GMT;Max-Age=31536000;HttpOnly;Secure;Version=1;SameSite=None
p3p: policyref="http://www.cxense.com/w3c/p3p.xml", CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
content-length: 101
server: Jetty(9.4.28.v20200408)
cdn.privacy-mgmt.com/wrapper/tcfv2/v2/gdpr/native-message/new-user?hasCsp=true&env=prod&body=%7B%22propertyId%22%3A10851%2C%22accountId%22%3A1468%2C%22propertyHref%22%3A%22http%3A%2F%2Fflightlawyer72.bloggersdelight.dk%2F2022%2F09%2F26%2F5-must-have-boost-very-high-calorie-drinks-for-anyone-looking-to-bulk-up%2F%22%2C%22meta%22%3A%22%7B%5C%22mmsCookies%5C%22%3A%5B%5D%2C%5C%22resolved%5C%22%3Anull%7D%22%2C%22clientMMSOrigin%22%3A%22https%3A%2F%2Fcdn.privacy-mgmt.com%22%2C%22targetingParams%22%3Anull%2C%22campaignEnv%22%3A%22prod%22%2C%22legalBasisChanges%22%3Afalse%2C%22vendorListAdditions%22%3Afalse%7D&nonkeyed=%7B%22_sp_v1_uid%22%3Anull%2C%22_sp_v1_data%22%3Anull%7D
200 OK 2 B URL HTTP/2 cdn.privacy-mgmt.com/wrapper/tcfv2/v2/gdpr/native-message/new-user?hasCsp=true&env=prod&body=%7B%22propertyId%22%3A10851%2C%22accountId%22%3A1468%2C%22propertyHref%22%3A%22http%3A%2F%2Fflightlawyer72.bloggersdelight.dk%2F2022%2F09%2F26%2F5-must-have-boost-very-high-calorie-drinks-for-anyone-looking-to-bulk-up%2F%22%2C%22meta%22%3A%22%7B%5C%22mmsCookies%5C%22%3A%5B%5D%2C%5C%22resolved%5C%22%3Anull%7D%22%2C%22clientMMSOrigin%22%3A%22https%3A%2F%2Fcdn.privacy-mgmt.com%22%2C%22targetingParams%22%3Anull%2C%22campaignEnv%22%3A%22prod%22%2C%22legalBasisChanges%22%3Afalse%2C%22vendorListAdditions%22%3Afalse%7D&nonkeyed=%7B%22_sp_v1_uid%22%3Anull%2C%22_sp_v1_data%22%3Anull%7D
IP
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
OPTIONS /wrapper/tcfv2/v2/gdpr/native-message/new-user?hasCsp=true&env=prod&body=%7B%22propertyId%22%3A10851%2C%22accountId%22%3A1468%2C%22propertyHref%22%3A%22http%3A%2F%2Fflightlawyer72.bloggersdelight.dk%2F2022%2F09%2F26%2F5-must-have-boost-very-high-calorie-drinks-for-anyone-looking-to-bulk-up%2F%22%2C%22meta%22%3A%22%7B%5C%22mmsCookies%5C%22%3A%5B%5D%2C%5C%22resolved%5C%22%3Anull%7D%22%2C%22clientMMSOrigin%22%3A%22https%3A%2F%2Fcdn.privacy-mgmt.com%22%2C%22targetingParams%22%3Anull%2C%22campaignEnv%22%3A%22prod%22%2C%22legalBasisChanges%22%3Afalse%2C%22vendorListAdditions%22%3Afalse%7D&nonkeyed=%7B%22_sp_v1_uid%22%3Anull%2C%22_sp_v1_data%22%3Anull%7D HTTP/1.1
Host: cdn.privacy-mgmt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: http://flightlawyer72.bloggersdelight.dk/
Origin: http://flightlawyer72.bloggersdelight.dk
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/plain; charset=utf-8
content-length: 2
date: Tue, 27 Sep 2022 01:17:11 GMT
x-powered-by: Express
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Origin,X-Requested-With,Content-Type,Accept,Authorization,SP_SCRIPT_VERSION
access-control-allow-methods: GET, PUT, POST, DELETE
cache-control: max-age=0, s-maxage=1200
strict-transport-security: max-age=15552000; includeSubDomains
access-control-max-age: 1200
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 bb1da7862c4968b28920b91b324095c0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: b21h84bgMviQPl3seDSuTgny630ZbPD17L7tMLwGbAfbrOUevvX4KA==
X-Firefox-Spdy: h2
region1.google-analytics.com/g/collect?v=2&tid=G-45MKXNQT0R>m=2oe9l0&_p=827838133&cid=1225679110.1664241429&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1664241429&sct=1&seg=0&dl=http%3A%2F%2Fflightlawyer72.bloggersdelight.dk%2F2022%2F09%2F26%2F5-must-have-boost-very-high-calorie-drinks-for-anyone-looking-to-bulk-up%2F&dt=5%20MUST-HAVE%20BOOST%20VERY%20HIGH%20CALORIE%20DRINKS%20FOR%20ANYONE%20LOOKING%20TO%20BULK%20UP%20%7C%20flightlawyer72&en=page_view&_fv=1&_ss=1&_ee=1
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-45MKXNQT0R>m=2oe9l0&_p=827838133&cid=1225679110.1664241429&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1664241429&sct=1&seg=0&dl=http%3A%2F%2Fflightlawyer72.bloggersdelight.dk%2F2022%2F09%2F26%2F5-must-have-boost-very-high-calorie-drinks-for-anyone-looking-to-bulk-up%2F&dt=5%20MUST-HAVE%20BOOST%20VERY%20HIGH%20CALORIE%20DRINKS%20FOR%20ANYONE%20LOOKING%20TO%20BULK%20UP%20%7C%20flightlawyer72&en=page_view&_fv=1&_ss=1&_ee=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-45MKXNQT0R>m=2oe9l0&_p=827838133&cid=1225679110.1664241429&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1664241429&sct=1&seg=0&dl=http%3A%2F%2Fflightlawyer72.bloggersdelight.dk%2F2022%2F09%2F26%2F5-must-have-boost-very-high-calorie-drinks-for-anyone-looking-to-bulk-up%2F&dt=5%20MUST-HAVE%20BOOST%20VERY%20HIGH%20CALORIE%20DRINKS%20FOR%20ANYONE%20LOOKING%20TO%20BULK%20UP%20%7C%20flightlawyer72&en=page_view&_fv=1&_ss=1&_ee=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://flightlawyer72.bloggersdelight.dk
Connection: keep-alive
Referer: http://flightlawyer72.bloggersdelight.dk/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: http://flightlawyer72.bloggersdelight.dk
date: Tue, 27 Sep 2022 01:17:12 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.privacy-mgmt.com/polyfills.d36c5.js
200 OK 2.5 kB URL HTTP/2 cdn.privacy-mgmt.com/polyfills.d36c5.js
IP
Hash 4fd6f521293dc8486b9648933e8f08c1
1b170c547b1b89a1f817fe901a31d269e060cf2b
bbbe3e69811fcbaaa32370ccc8cd8f052d47d8dcfe1e00ec1ab7701df5ef82d6
GET /polyfills.d36c5.js HTTP/1.1
Host: cdn.privacy-mgmt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.privacy-mgmt.com/index.html?message_id=696111&consentUUID=undefined&preload_message=true&hasCsp=true&consent_origin=https%3A%2F%2Fcdn.privacy-mgmt.com%2Fconsent%2Ftcfv2&mms_origin=https%3A%2F%2Fcdn.privacy-mgmt.com%2Fmms%2Fv2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Thu, 15 Sep 2022 22:52:02 GMT
server: AmazonS3
content-encoding: gzip
date: Tue, 27 Sep 2022 00:18:41 GMT
etag: W/"89661b8fd918815bcb224bba79cabab1"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 bb1da7862c4968b28920b91b324095c0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: B8otfXMOPr6Rdc-hxKJuSbHkvgcNqKK5zAfgnPpECje1ipB_ZQff4A==
age: 3511
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5a6097201b7da81f6e9a6d99a7353a0c
d4240fe80c76013b9f7b6fd09963aa47151b8d6a
519e9b47ddfa1e1fe047f4dc7df88e3011817f88144fcc3853a7984a781c2070
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "519E9B47DDFA1E1FE047F4DC7DF88E3011817F88144FCC3853A7984A781C2070"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3945
Expires: Tue, 27 Sep 2022 02:22:57 GMT
Date: Tue, 27 Sep 2022 01:17:12 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5a6097201b7da81f6e9a6d99a7353a0c
d4240fe80c76013b9f7b6fd09963aa47151b8d6a
519e9b47ddfa1e1fe047f4dc7df88e3011817f88144fcc3853a7984a781c2070
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "519E9B47DDFA1E1FE047F4DC7DF88E3011817F88144FCC3853A7984A781C2070"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3945
Expires: Tue, 27 Sep 2022 02:22:57 GMT
Date: Tue, 27 Sep 2022 01:17:12 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5a6097201b7da81f6e9a6d99a7353a0c
d4240fe80c76013b9f7b6fd09963aa47151b8d6a
519e9b47ddfa1e1fe047f4dc7df88e3011817f88144fcc3853a7984a781c2070
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "519E9B47DDFA1E1FE047F4DC7DF88E3011817F88144FCC3853A7984A781C2070"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3945
Expires: Tue, 27 Sep 2022 02:22:57 GMT
Date: Tue, 27 Sep 2022 01:17:12 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb5538bec-989b-434a-bf80-699456665fd7.jpeg
200 OK 6.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb5538bec-989b-434a-bf80-699456665fd7.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 62ece01d7e0036711832df5a25175b3b
c80d9ce02eeaa7b0166a696e811d2cffde4997d0
8a1968c18b44495571ff382a9cacfb7f98d3e1275d650e84cb310d635eae7e70
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb5538bec-989b-434a-bf80-699456665fd7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6829
x-amzn-requestid: cc3229a7-7c7e-472b-b7a4-1216594c4068
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yshb2FwhoAMF2EA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632815e5-0964e463192712fb08a29ee7;Sampled=0
x-amzn-remapped-date: Mon, 19 Sep 2022 07:10:29 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 38UTZEh7vpUlYc9mGIdNrIy4fgLQf4iErqzZLY5mM5fdMQwvJvoBvQ==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 5397b304713f6301c7c94ac084b6ed08.cloudfront.net (CloudFront), 1.1 google
date: Mon, 26 Sep 2022 22:12:45 GMT
age: 11067
etag: "c80d9ce02eeaa7b0166a696e811d2cffde4997d0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6fda34e4-86f9-4fb4-94af-575d6201fccb.jpeg
200 OK 5.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6fda34e4-86f9-4fb4-94af-575d6201fccb.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e6c9691e104001fe54d3c6273b7b8596
481ec2135ca0a96484c36cced30776c871aedf8f
f9e5e087d8b6e9b357c9f93b00c5919d89d90ac9b48d2dcd1ac72bf775a5cf49
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6fda34e4-86f9-4fb4-94af-575d6201fccb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5383
x-amzn-requestid: d7b677b7-25f9-4197-a664-ec68b0dfedfe
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y8ydSEuLoAMF6PA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632e9788-7b57acc9288de40d252766a5;Sampled=0
x-amzn-remapped-date: Sat, 24 Sep 2022 05:37:12 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: iTzA2XJ0QFByhrYBer4ULW96ZdCeXhceaxWEAvznURvaZadKQniVRg==
via: 1.1 0da9bec11a1bde5ca7f71b28194afd5a.cloudfront.net (CloudFront), 1.1 91356d2137f5a7345e93da4516c49ec4.cloudfront.net (CloudFront), 1.1 google
date: Mon, 26 Sep 2022 23:29:31 GMT
age: 6461
etag: "481ec2135ca0a96484c36cced30776c871aedf8f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
cdn.privacy-mgmt.com/consent/tcfv2/vendor-list/categories?siteId=10851&consentLanguage=da
200 OK 11 kB URL HTTP/2 cdn.privacy-mgmt.com/consent/tcfv2/vendor-list/categories?siteId=10851&consentLanguage=da
IP
Hash 97f369b501a91cb106ff43467c19f244
b64617db0d56b8ad1a0cd63140a2494d87e5bf1d
f505f9d833749582c02ff90a5522ebd90cd2838dff3e6c04c6e2cf76dc926b1d
GET /consent/tcfv2/vendor-list/categories?siteId=10851&consentLanguage=da HTTP/1.1
Host: cdn.privacy-mgmt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cdn.privacy-mgmt.com/index.html?message_id=696111&consentUUID=undefined&preload_message=true&hasCsp=true&consent_origin=https%3A%2F%2Fcdn.privacy-mgmt.com%2Fconsent%2Ftcfv2&mms_origin=https%3A%2F%2Fcdn.privacy-mgmt.com%2Fmms%2Fv2
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
date: Tue, 27 Sep 2022 01:17:11 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization
access-control-allow-methods: GET, PUT, POST, DELETE
cache-control: max-age=0, s-maxage=3600
strict-transport-security: max-age=15552000; includeSubDomains
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 bb1da7862c4968b28920b91b324095c0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: RfvoSNEZgZnaSmqF0jF1Pjkzl9nSR_nrmDQP_A7fun98jDlEuv7qRg==
X-Firefox-Spdy: h2
cdn.privacy-mgmt.com/Notice.a2194.css
200 OK 15 kB URL HTTP/2 cdn.privacy-mgmt.com/Notice.a2194.css
IP
Hash 316d1738a7ece736c969baacba13ce8e
c0216264dd067900d079c30f62dedad524712232
4b594aa4abf21dbacce955edb2948908b149c5fe174ff34d6393d7069e239e84
GET /Notice.a2194.css HTTP/1.1
Host: cdn.privacy-mgmt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.privacy-mgmt.com/index.html?message_id=696111&consentUUID=undefined&preload_message=true&hasCsp=true&consent_origin=https%3A%2F%2Fcdn.privacy-mgmt.com%2Fconsent%2Ftcfv2&mms_origin=https%3A%2F%2Fcdn.privacy-mgmt.com%2Fmms%2Fv2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
last-modified: Thu, 15 Sep 2022 22:52:02 GMT
server: AmazonS3
content-encoding: gzip
date: Tue, 27 Sep 2022 00:41:39 GMT
etag: W/"797825cd114f1ba9cd9dba118cc0d8a1"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 bb1da7862c4968b28920b91b324095c0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 5YL6S-rX7yLAQVpWO3JlY2Lem4KyrPz8UYj3vNObh2OLebZ1Ervhtg==
age: 2135
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F79631135-a10c-43bf-85d2-fa2236b96883.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F79631135-a10c-43bf-85d2-fa2236b96883.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 62e68c3cd08dd94d910507512a67e85f
3d4fa8701f17e8818c25584ef5f04bfbee8440cd
058d798963f83f5fb88ab728185f755c5353fa981d93e1b6ff869089f501586b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F79631135-a10c-43bf-85d2-fa2236b96883.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13213
x-amzn-requestid: fe9ec409-2757-4910-8443-5b4d3be7efd3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZFlATEp8oAMFd9Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63321b9b-3230e97a4fe34413285eb578;Sampled=0
x-amzn-remapped-date: Mon, 26 Sep 2022 21:37:31 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: kRSg9NTTAgeAJgIZ_C9_rRodCX4bzGduJEvNPNHUya0Moa2vsmWSoQ==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 2324edbcb8fc72f617442c65f36a40fc.cloudfront.net (CloudFront), 1.1 google
date: Mon, 26 Sep 2022 21:38:57 GMT
age: 13095
etag: "3d4fa8701f17e8818c25584ef5f04bfbee8440cd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3823d156-2245-40a3-a9a3-7cb4a5c4a14d.jpeg
200 OK 7.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3823d156-2245-40a3-a9a3-7cb4a5c4a14d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8ef8d9284ebd57a7cf76ceb762291356
2b53c4f836970501a682dae07235215c487d35cc
3529ab97ab2214ee9c67ee234beac96cd40f0bd6092b92b71c60956ed5710b41
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3823d156-2245-40a3-a9a3-7cb4a5c4a14d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7716
x-amzn-requestid: 1cf0b1c7-4611-40bf-b72a-412ebd03ef79
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y2KguFL7IAMFzKA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632bf137-2b7c15d3071e0266586fd17d;Sampled=0
x-amzn-remapped-date: Thu, 22 Sep 2022 05:23:03 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: eE2AvjvM7j07Go69VVEmTF8Q-KA5bZwOBdn_SgR5fcZj8lL760_q2Q==
via: 1.1 d042f60a962591f741406f28a8170c5a.cloudfront.net (CloudFront), 1.1 ebe4011a81a36e2bf678f69ce1711330.cloudfront.net (CloudFront), 1.1 google
date: Mon, 26 Sep 2022 17:57:22 GMT
age: 26390
etag: "2b53c4f836970501a682dae07235215c487d35cc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ads.pubmatic.com/AdServer/js/user_sync.html?p=30600&predirect=https%3A%2F%2Fcsyn.cxense.com%2Fpcs.gif%3Fcxsite%3D1137356350202375931%26userId%3D
200 OK 5.5 kB URL HTTP/2 ads.pubmatic.com/AdServer/js/user_sync.html?p=30600&predirect=https%3A%2F%2Fcsyn.cxense.com%2Fpcs.gif%3Fcxsite%3D1137356350202375931%26userId%3D
IP
File type HTML document text\012- HTML document, ASCII text, with very long lines (15844), with no line terminators
Hash 7725e8e949141c8ded449d86975d4c04
8cd8c314a2002cc26f821d331ab9512f52a551a2
a0c49aacf6f552bce544eb8516404f696918253cd934a6404ebeafd71f8780ae
GET /AdServer/js/user_sync.html?p=30600&predirect=https%3A%2F%2Fcsyn.cxense.com%2Fpcs.gif%3Fcxsite%3D1137356350202375931%26userId%3D HTTP/1.1
Host: ads.pubmatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://flightlawyer72.bloggersdelight.dk/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Tue, 01 Feb 2022 06:38:00 GMT
etag: "1300708-3de4-5d6ef246ef4cf"
server: Apache
accept-ranges: bytes
content-encoding: gzip
p3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC", CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC"
content-length: 5549
content-type: text/html; charset=UTF-8
cache-control: max-age=64433
expires: Tue, 27 Sep 2022 19:11:05 GMT
date: Tue, 27 Sep 2022 01:17:12 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
csyn-r.cxense.com/?cxsite=1137356350202375931&partnerId=csr&cxckp=cx%3Atozvqa1yyk6d3prxcmlmacqp3%3Apsm7wywjtqe5
302 Found 108 B URL HTTP/1.1 csyn-r.cxense.com/?cxsite=1137356350202375931&partnerId=csr&cxckp=cx%3Atozvqa1yyk6d3prxcmlmacqp3%3Apsm7wywjtqe5
IP
File type HTML document, ASCII text, with CRLF line terminators
Hash c456e85447556fa6aaf44057a88a16bb
f83e1a9846a4297d841c7aac65fe6b2697c08292
4f5a34e770af9c4e8212223912307dfafeedfa8db6a09dc82396052e901cded6
GET /?cxsite=1137356350202375931&partnerId=csr&cxckp=cx%3Atozvqa1yyk6d3prxcmlmacqp3%3Apsm7wywjtqe5 HTTP/1.1
Host: csyn-r.cxense.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://flightlawyer72.bloggersdelight.dk/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
date: Tue, 27 Sep 2022 01:17:12 GMT
location: https://dmp.adform.net/serving/cookie/match/?party=1077&cid=tozvqa1yyk6d3prxcmlmacqp3
strict-transport-security: max-age=31600
content-length: 108
server: Jetty(9.4.28.v20200408)
cm.g.doubleclick.net/pixel?google_nid=cxense_ddp&google_cm&cxckp=cx%3Atozvqa1yyk6d3prxcmlmacqp3%3Apsm7wywjtqe5&cxsite=1137356350202375931
302 Found 370 B URL HTTP/2 cm.g.doubleclick.net/pixel?google_nid=cxense_ddp&google_cm&cxckp=cx%3Atozvqa1yyk6d3prxcmlmacqp3%3Apsm7wywjtqe5&cxsite=1137356350202375931
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash cf3ab73d1c19bb8a5a327b411c0d3f21
baa10f72fa68d5da2a7252cd2b5f9c57887080cd
696cb57aa595d289cff038756241c6a604ae6ff4976d48a195de593ae99bebee
GET /pixel?google_nid=cxense_ddp&google_cm&cxckp=cx%3Atozvqa1yyk6d3prxcmlmacqp3%3Apsm7wywjtqe5&cxsite=1137356350202375931 HTTP/1.1
Host: cm.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://flightlawyer72.bloggersdelight.dk/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
location: https://cm.g.doubleclick.net/pixel?google_nid=cxense_ddp&google_cm=&cxckp=cx%3Atozvqa1yyk6d3prxcmlmacqp3%3Apsm7wywjtqe5&cxsite=1137356350202375931&google_tc=
date: Tue, 27 Sep 2022 01:17:12 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
server: HTTP server (unknown)
content-length: 370
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Tue, 27-Sep-2022 01:32:12 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 312 B IP
Hash e5b5d5773fdf32ea7ce2e6c31050a905
d7949322e700ce9fc71d47138e2c8b296711ed97
1368cd841fcbff7dec43cd2ee60bbe64b39038e6a36d76bdf93cb8354433812a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5451
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 01:17:12 GMT
Last-Modified: Mon, 26 Sep 2022 23:46:21 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 312
cm.g.doubleclick.net/pixel?google_nid=cxense_ddp&google_cm=&cxckp=cx%3Atozvqa1yyk6d3prxcmlmacqp3%3Apsm7wywjtqe5&cxsite=1137356350202375931&google_tc=
302 Found 331 B URL HTTP/2 cm.g.doubleclick.net/pixel?google_nid=cxense_ddp&google_cm=&cxckp=cx%3Atozvqa1yyk6d3prxcmlmacqp3%3Apsm7wywjtqe5&cxsite=1137356350202375931&google_tc=
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 37041d2ea2fdaa115afed91bb6c237aa
586f0ad8b57031ca7fd60d22440e3fdaae863297
2c6f979f2fcb4dfd7c438a4cd87b277157a876048b1fdaf5b2d57327c73d8fb8
GET /pixel?google_nid=cxense_ddp&google_cm=&cxckp=cx%3Atozvqa1yyk6d3prxcmlmacqp3%3Apsm7wywjtqe5&cxsite=1137356350202375931&google_tc= HTTP/1.1
Host: cm.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://flightlawyer72.bloggersdelight.dk/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: https://csyn.cxense.com/gdbm.png?cxckp=cx%3Atozvqa1yyk6d3prxcmlmacqp3%3Apsm7wywjtqe5&cxsite=1137356350202375931&google_error=3
date: Tue, 27 Sep 2022 01:17:12 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
server: HTTP server (unknown)
content-length: 331
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
sync.smartadserver.com/getuid?gdpr=1&gdpr_consent=CPf9mIAPf9mIAAGABCENCiCgAAAAAH_AABpwAAAMjAIMBAQgAAEEAAYIEAIAAAQBiQAAAABBAIBQBIAEigAGRwEcAIEACAQAQgAAhBAQAQCAAQAAJAAgBACgQCAACAQAAgAFAIAAEAAILACQMAAAEAJCQAiACECAggAAA5CAgIgCCAFANGQBABHADLATEAyMaABAXQIgCADLAIAAawBkYSAWAAgARIAy4B_gIAAYoA1gCIQExAJlAYMAyMKACAEUAMINAEAGWAQAA1gCKhUAQARwAywExAMjFgAQF0DoA4BKQCxAGKAOoAiEBdoDIx4AEARRCAQAI4AlIBigDqAIhAWUAu0BkZKAQAAgAD4AiQBhAGKAOoAu0BkZSAIASkBJwC7QGRgA.YAAAAAAAAAAA&url=https%3A%2F%2Fcsyn.cxense.com%2Fsmt.png%3Fcxsite%3D1137356350202375931%26userId%3D%5Bsas_uid%5D%26cxckp%3Dcx%253Atozvqa1yyk6d3prxcmlmacqp3%253Apsm7wywjtqe5
302 Found 0 B URL HTTP/1.1 sync.smartadserver.com/getuid?gdpr=1&gdpr_consent=CPf9mIAPf9mIAAGABCENCiCgAAAAAH_AABpwAAAMjAIMBAQgAAEEAAYIEAIAAAQBiQAAAABBAIBQBIAEigAGRwEcAIEACAQAQgAAhBAQAQCAAQAAJAAgBACgQCAACAQAAgAFAIAAEAAILACQMAAAEAJCQAiACECAggAAA5CAgIgCCAFANGQBABHADLATEAyMaABAXQIgCADLAIAAawBkYSAWAAgARIAy4B_gIAAYoA1gCIQExAJlAYMAyMKACAEUAMINAEAGWAQAA1gCKhUAQARwAywExAMjFgAQF0DoA4BKQCxAGKAOoAiEBdoDIx4AEARRCAQAI4AlIBigDqAIhAWUAu0BkZKAQAAgAD4AiQBhAGKAOoAu0BkZSAIASkBJwC7QGRgA.YAAAAAAAAAAA&url=https%3A%2F%2Fcsyn.cxense.com%2Fsmt.png%3Fcxsite%3D1137356350202375931%26userId%3D%5Bsas_uid%5D%26cxckp%3Dcx%253Atozvqa1yyk6d3prxcmlmacqp3%253Apsm7wywjtqe5
IP
ASN #201081 SmartAdServer SAS
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /getuid?gdpr=1&gdpr_consent=CPf9mIAPf9mIAAGABCENCiCgAAAAAH_AABpwAAAMjAIMBAQgAAEEAAYIEAIAAAQBiQAAAABBAIBQBIAEigAGRwEcAIEACAQAQgAAhBAQAQCAAQAAJAAgBACgQCAACAQAAgAFAIAAEAAILACQMAAAEAJCQAiACECAggAAA5CAgIgCCAFANGQBABHADLATEAyMaABAXQIgCADLAIAAawBkYSAWAAgARIAy4B_gIAAYoA1gCIQExAJlAYMAyMKACAEUAMINAEAGWAQAA1gCKhUAQARwAywExAMjFgAQF0DoA4BKQCxAGKAOoAiEBdoDIx4AEARRCAQAI4AlIBigDqAIhAWUAu0BkZKAQAAgAD4AiQBhAGKAOoAu0BkZSAIASkBJwC7QGRgA.YAAAAAAAAAAA&url=https%3A%2F%2Fcsyn.cxense.com%2Fsmt.png%3Fcxsite%3D1137356350202375931%26userId%3D%5Bsas_uid%5D%26cxckp%3Dcx%253Atozvqa1yyk6d3prxcmlmacqp3%253Apsm7wywjtqe5 HTTP/1.1
Host: sync.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://flightlawyer72.bloggersdelight.dk/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
content-length: 0
date: Tue, 27 Sep 2022 01:17:12 GMT
cache-control: no-cache,no-store
location: https://sync.smartadserver.com:443/getuid?gdpr=1&gdpr_consent=CPf9mIAPf9mIAAGABCENCiCgAAAAAH_AABpwAAAMjAIMBAQgAAEEAAYIEAIAAAQBiQAAAABBAIBQBIAEigAGRwEcAIEACAQAQgAAhBAQAQCAAQAAJAAgBACgQCAACAQAAgAFAIAAEAAILACQMAAAEAJCQAiACECAggAAA5CAgIgCCAFANGQBABHADLATEAyMaABAXQIgCADLAIAAawBkYSAWAAgARIAy4B_gIAAYoA1gCIQExAJlAYMAyMKACAEUAMINAEAGWAQAA1gCKhUAQARwAywExAMjFgAQF0DoA4BKQCxAGKAOoAiEBdoDIx4AEARRCAQAI4AlIBigDqAIhAWUAu0BkZKAQAAgAD4AiQBhAGKAOoAu0BkZSAIASkBJwC7QGRgA.YAAAAAAAAAAA&url=https://csyn.cxense.com/smt.png?cxsite=1137356350202375931&userId=[sas_uid]&cxckp=cx%3Atozvqa1yyk6d3prxcmlmacqp3%3Apsm7wywjtqe5&cklb=1
pragma: no-cache
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
ocsp.digicert.com/
200 OK 471 B IP
Hash c57d433fb39f25c1e4b8de5293753573
bd4fc0d1d4083f6d3da5b8a90f9ee7fce8de3cbf
f927a2d7de10eb71435bc68e9fd82d597576caaa6b95d469d409b303b70e54ae
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5180
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 01:17:12 GMT
Last-Modified: Mon, 26 Sep 2022 23:50:52 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash d2d4e04cee4d7294b987411448d4720b
77f597375e4a69a985c3d7f46d4b63538f357c19
bacab93e744dfde6319198e247d1dcb5031af141c975d8c676c2a45f5c4daef4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1944
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 01:17:12 GMT
Last-Modified: Tue, 27 Sep 2022 00:44:48 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471
dmp.adform.net/serving/cookie/match/?party=1077&cid=tozvqa1yyk6d3prxcmlmacqp3
302 Found 0 B URL HTTP/2 dmp.adform.net/serving/cookie/match/?party=1077&cid=tozvqa1yyk6d3prxcmlmacqp3
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /serving/cookie/match/?party=1077&cid=tozvqa1yyk6d3prxcmlmacqp3 HTTP/1.1
Host: dmp.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://flightlawyer72.bloggersdelight.dk/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Tue, 27 Sep 2022 01:17:12 GMT
content-length: 0
location: https://dmp.adform.net/serving/cookie/match/?CC=1&party=1077&cid=tozvqa1yyk6d3prxcmlmacqp3
cache-control: no-cache, no-store, must-revalidate, no-transform
pragma: no-cache
expires: -1
set-cookie: C=1; expires=Thu, 27 Oct 2022 01:17:12 GMT; domain=adform.net; path=/
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: GET
access-control-allow-origin: *
access-control-max-age: 86400
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
secure.adnxs.com/getuid?https%3A%2F%2Fcsyn.cxense.com%2Fapn.png%3Fcxsite%3D1137356350202375931%26uid%3D%24UID%26cxckp%3Dcx%253Atozvqa1yyk6d3prxcmlmacqp3%253Apsm7wywjtqe5&gdpr=1&gdpr_consent=CPf9mIAPf9mIAAGABCENCiCgAAAAAH_AABpwAAAMjAIMBAQgAAEEAAYIEAIAAAQBiQAAAABBAIBQBIAEigAGRwEcAIEACAQAQgAAhBAQAQCAAQAAJAAgBACgQCAACAQAAgAFAIAAEAAILACQMAAAEAJCQAiACECAggAAA5CAgIgCCAFANGQBABHADLATEAyMaABAXQIgCADLAIAAawBkYSAWAAgARIAy4B_gIAAYoA1gCIQExAJlAYMAyMKACAEUAMINAEAGWAQAA1gCKhUAQARwAywExAMjFgAQF0DoA4BKQCxAGKAOoAiEBdoDIx4AEARRCAQAI4AlIBigDqAIhAWUAu0BkZKAQAAgAD4AiQBhAGKAOoAu0BkZSAIASkBJwC7QGRgA.YAAAAAAAAAAA
400 Request failed due to privacy signals 146 B URL HTTP/1.1 secure.adnxs.com/getuid?https%3A%2F%2Fcsyn.cxense.com%2Fapn.png%3Fcxsite%3D1137356350202375931%26uid%3D%24UID%26cxckp%3Dcx%253Atozvqa1yyk6d3prxcmlmacqp3%253Apsm7wywjtqe5&gdpr=1&gdpr_consent=CPf9mIAPf9mIAAGABCENCiCgAAAAAH_AABpwAAAMjAIMBAQgAAEEAAYIEAIAAAQBiQAAAABBAIBQBIAEigAGRwEcAIEACAQAQgAAhBAQAQCAAQAAJAAgBACgQCAACAQAAgAFAIAAEAAILACQMAAAEAJCQAiACECAggAAA5CAgIgCCAFANGQBABHADLATEAyMaABAXQIgCADLAIAAawBkYSAWAAgARIAy4B_gIAAYoA1gCIQExAJlAYMAyMKACAEUAMINAEAGWAQAA1gCKhUAQARwAywExAMjFgAQF0DoA4BKQCxAGKAOoAiEBdoDIx4AEARRCAQAI4AlIBigDqAIhAWUAu0BkZKAQAAgAD4AiQBhAGKAOoAu0BkZSAIASkBJwC7QGRgA.YAAAAAAAAAAA
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 6ba2e6193e3c04a544b487011a5faf29
01ba4f12b932a934fad5b51614b85f824cc80ffe
bfb16f2d35702077ef9d8416d9eef53d688ff16e6faf73d5b9913d76e1144d9a
GET /getuid?https%3A%2F%2Fcsyn.cxense.com%2Fapn.png%3Fcxsite%3D1137356350202375931%26uid%3D%24UID%26cxckp%3Dcx%253Atozvqa1yyk6d3prxcmlmacqp3%253Apsm7wywjtqe5&gdpr=1&gdpr_consent=CPf9mIAPf9mIAAGABCENCiCgAAAAAH_AABpwAAAMjAIMBAQgAAEEAAYIEAIAAAQBiQAAAABBAIBQBIAEigAGRwEcAIEACAQAQgAAhBAQAQCAAQAAJAAgBACgQCAACAQAAgAFAIAAEAAILACQMAAAEAJCQAiACECAggAAA5CAgIgCCAFANGQBABHADLATEAyMaABAXQIgCADLAIAAawBkYSAWAAgARIAy4B_gIAAYoA1gCIQExAJlAYMAyMKACAEUAMINAEAGWAQAA1gCKhUAQARwAywExAMjFgAQF0DoA4BKQCxAGKAOoAiEBdoDIx4AEARRCAQAI4AlIBigDqAIhAWUAu0BkZKAQAAgAD4AiQBhAGKAOoAu0BkZSAIASkBJwC7QGRgA.YAAAAAAAAAAA HTTP/1.1
Host: secure.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://flightlawyer72.bloggersdelight.dk/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 400 Request failed due to privacy signals
Server: nginx/1.21.3
Date: Tue, 27 Sep 2022 01:17:12 GMT
Content-Type: text/html
Content-Length: 146
Connection: keep-alive
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 984.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
sync.smartadserver.com/getuid?gdpr=1&gdpr_consent=CPf9mIAPf9mIAAGABCENCiCgAAAAAH_AABpwAAAMjAIMBAQgAAEEAAYIEAIAAAQBiQAAAABBAIBQBIAEigAGRwEcAIEACAQAQgAAhBAQAQCAAQAAJAAgBACgQCAACAQAAgAFAIAAEAAILACQMAAAEAJCQAiACECAggAAA5CAgIgCCAFANGQBABHADLATEAyMaABAXQIgCADLAIAAawBkYSAWAAgARIAy4B_gIAAYoA1gCIQExAJlAYMAyMKACAEUAMINAEAGWAQAA1gCKhUAQARwAywExAMjFgAQF0DoA4BKQCxAGKAOoAiEBdoDIx4AEARRCAQAI4AlIBigDqAIhAWUAu0BkZKAQAAgAD4AiQBhAGKAOoAu0BkZSAIASkBJwC7QGRgA.YAAAAAAAAAAA&url=https://csyn.cxense.com/smt.png?cxsite=1137356350202375931&userId=[sas_uid]&cxckp=cx%3Atozvqa1yyk6d3prxcmlmacqp3%3Apsm7wywjtqe5&cklb=1
200 OK 0 B URL HTTP/1.1 sync.smartadserver.com/getuid?gdpr=1&gdpr_consent=CPf9mIAPf9mIAAGABCENCiCgAAAAAH_AABpwAAAMjAIMBAQgAAEEAAYIEAIAAAQBiQAAAABBAIBQBIAEigAGRwEcAIEACAQAQgAAhBAQAQCAAQAAJAAgBACgQCAACAQAAgAFAIAAEAAILACQMAAAEAJCQAiACECAggAAA5CAgIgCCAFANGQBABHADLATEAyMaABAXQIgCADLAIAAawBkYSAWAAgARIAy4B_gIAAYoA1gCIQExAJlAYMAyMKACAEUAMINAEAGWAQAA1gCKhUAQARwAywExAMjFgAQF0DoA4BKQCxAGKAOoAiEBdoDIx4AEARRCAQAI4AlIBigDqAIhAWUAu0BkZKAQAAgAD4AiQBhAGKAOoAu0BkZSAIASkBJwC7QGRgA.YAAAAAAAAAAA&url=https://csyn.cxense.com/smt.png?cxsite=1137356350202375931&userId=[sas_uid]&cxckp=cx%3Atozvqa1yyk6d3prxcmlmacqp3%3Apsm7wywjtqe5&cklb=1
IP
ASN #201081 SmartAdServer SAS
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /getuid?gdpr=1&gdpr_consent=CPf9mIAPf9mIAAGABCENCiCgAAAAAH_AABpwAAAMjAIMBAQgAAEEAAYIEAIAAAQBiQAAAABBAIBQBIAEigAGRwEcAIEACAQAQgAAhBAQAQCAAQAAJAAgBACgQCAACAQAAgAFAIAAEAAILACQMAAAEAJCQAiACECAggAAA5CAgIgCCAFANGQBABHADLATEAyMaABAXQIgCADLAIAAawBkYSAWAAgARIAy4B_gIAAYoA1gCIQExAJlAYMAyMKACAEUAMINAEAGWAQAA1gCKhUAQARwAywExAMjFgAQF0DoA4BKQCxAGKAOoAiEBdoDIx4AEARRCAQAI4AlIBigDqAIhAWUAu0BkZKAQAAgAD4AiQBhAGKAOoAu0BkZSAIASkBJwC7QGRgA.YAAAAAAAAAAA&url=https://csyn.cxense.com/smt.png?cxsite=1137356350202375931&userId=[sas_uid]&cxckp=cx%3Atozvqa1yyk6d3prxcmlmacqp3%3Apsm7wywjtqe5&cklb=1 HTTP/1.1
Host: sync.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://flightlawyer72.bloggersdelight.dk/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-length: 0
date: Tue, 27 Sep 2022 01:17:12 GMT
csyn.cxense.com/gdbm.png?cxckp=cx%3Atozvqa1yyk6d3prxcmlmacqp3%3Apsm7wywjtqe5&cxsite=1137356350202375931&google_error=3
200 OK 42 B URL HTTP/1.1 csyn.cxense.com/gdbm.png?cxckp=cx%3Atozvqa1yyk6d3prxcmlmacqp3%3Apsm7wywjtqe5&cxsite=1137356350202375931&google_error=3
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /gdbm.png?cxckp=cx%3Atozvqa1yyk6d3prxcmlmacqp3%3Apsm7wywjtqe5&cxsite=1137356350202375931&google_error=3 HTTP/1.1
Host: csyn.cxense.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://flightlawyer72.bloggersdelight.dk/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Tue, 27 Sep 2022 01:17:12 GMT
content-type: image/gif
cache-control: max-age=3600
content-length: 42
server: Jetty(9.4.28.v20200408)
image6.pubmatic.com/AdServer/UCookieSetPug?oid=2&cb=PubMatic._uidCB
200 OK 60 B URL HTTP/2 image6.pubmatic.com/AdServer/UCookieSetPug?oid=2&cb=PubMatic._uidCB
IP
File type ASCII text, with no line terminators
Hash 8f295e45731883afcd575990aaec9bbe
3f145a278f568c7e3645450d1d48a42aff837a1d
5e4deae78b640a096bfa4145818120ab693e2ed02eb3ede0a370f6f0ef043d07
GET /AdServer/UCookieSetPug?oid=2&cb=PubMatic._uidCB HTTP/1.1
Host: image6.pubmatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.pubmatic.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
cache-control: private
content-type: text/html; charset=UTF-8
expires: Sun, 25 Dec 2022 16:25:38 GMT
p3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC"
date: Tue, 27 Sep 2022 01:17:11 GMT
content-length: 60
X-Firefox-Spdy: h2
simage4.pubmatic.com/AdServer/SPug?o=1&p=30600&sc=1&pr=https%3A%2F%2Fcsyn.cxense.com%2Fpcs.gif%3Fcxsite%3D1137356350202375931%26userId%3D&u=75B735FD-29E3-4FD6-9B80-06C3A5D6849C&rs=3&gdpr=0&gdpr_consent=&us_privacy=
302 Found 42 B URL HTTP/2 simage4.pubmatic.com/AdServer/SPug?o=1&p=30600&sc=1&pr=https%3A%2F%2Fcsyn.cxense.com%2Fpcs.gif%3Fcxsite%3D1137356350202375931%26userId%3D&u=75B735FD-29E3-4FD6-9B80-06C3A5D6849C&rs=3&gdpr=0&gdpr_consent=&us_privacy=
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /AdServer/SPug?o=1&p=30600&sc=1&pr=https%3A%2F%2Fcsyn.cxense.com%2Fpcs.gif%3Fcxsite%3D1137356350202375931%26userId%3D&u=75B735FD-29E3-4FD6-9B80-06C3A5D6849C&rs=3&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1
Host: simage4.pubmatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.pubmatic.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
HTTP/2 302 Found
server: nginx
date: Tue, 27 Sep 2022 01:17:11 GMT
location: https://csyn.cxense.com/pcs.gif?cxsite=1137356350202375931&userId=
p3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC"
cache-control: no-store, no-cache, private
X-Firefox-Spdy: h2
cdn.privacy-mgmt.com/index.html?message_id=696111&consentUUID=undefined&preload_message=true&hasCsp=true&consent_origin=https%3A%2F%2Fcdn.privacy-mgmt.com%2Fconsent%2Ftcfv2&mms_origin=https%3A%2F%2Fcdn.privacy-mgmt.com%2Fmms%2Fv2
200 OK 0 B URL HTTP/2 cdn.privacy-mgmt.com/index.html?message_id=696111&consentUUID=undefined&preload_message=true&hasCsp=true&consent_origin=https%3A%2F%2Fcdn.privacy-mgmt.com%2Fconsent%2Ftcfv2&mms_origin=https%3A%2F%2Fcdn.privacy-mgmt.com%2Fmms%2Fv2
IP
GET /index.html?message_id=696111&consentUUID=undefined&preload_message=true&hasCsp=true&consent_origin=https%3A%2F%2Fcdn.privacy-mgmt.com%2Fconsent%2Ftcfv2&mms_origin=https%3A%2F%2Fcdn.privacy-mgmt.com%2Fmms%2Fv2 HTTP/1.1
Host: cdn.privacy-mgmt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://flightlawyer72.bloggersdelight.dk/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Thu, 15 Sep 2022 22:52:02 GMT
server: AmazonS3
content-encoding: gzip
date: Tue, 27 Sep 2022 00:40:11 GMT
etag: W/"559d48c2ecfde305fed258f00b78a7a9"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 bb1da7862c4968b28920b91b324095c0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: xJ4zG7mVfTa9MGjshXXGlHLL5Hi0R8eWz3mtERbIZ_XxjBk4BLRLkg==
age: 2224
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Raleway%3A100%2C400&ver=0.69085800%201664241429
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Raleway%3A100%2C400&ver=0.69085800%201664241429
IP
GET /css?family=Raleway%3A100%2C400&ver=0.69085800%201664241429 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://flightlawyer72.bloggersdelight.dk/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 27 Sep 2022 01:17:10 GMT
date: Tue, 27 Sep 2022 01:17:10 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
gdpr-tcfv2.sp-prod.net/wrapperMessagingWithoutDetection.js?ver=4.9.6
200 OK 0 B URL HTTP/2 gdpr-tcfv2.sp-prod.net/wrapperMessagingWithoutDetection.js?ver=4.9.6
IP
GET /wrapperMessagingWithoutDetection.js?ver=4.9.6 HTTP/1.1
Host: gdpr-tcfv2.sp-prod.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://flightlawyer72.bloggersdelight.dk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Wed, 31 Aug 2022 13:19:06 GMT
x-amz-version-id: null
server: AmazonS3
content-encoding: gzip
date: Tue, 27 Sep 2022 01:04:52 GMT
cache-control: max-age=3600
etag: W/"a0479f9c7c91e5add1ebb18f20683637"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4f01f770085624552bc30a98954f963a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: V22LUCguQbT8k2fofNFPbHc8dpwdSV85bvgMW6GILpumqUa35RW7-A==
age: 738
X-Firefox-Spdy: h2
scale.bloggersdelight.dk/new/scale.php?w=250&h=250&src=http%3A%2F%2Fcdn.bloggersdelight.dk%2Fcache%2Fnopic.jpg
200 OK 0 B URL HTTP/2 scale.bloggersdelight.dk/new/scale.php?w=250&h=250&src=http%3A%2F%2Fcdn.bloggersdelight.dk%2Fcache%2Fnopic.jpg
IP
ASN #24940 Hetzner Online GmbH
GET /new/scale.php?w=250&h=250&src=http%3A%2F%2Fcdn.bloggersdelight.dk%2Fcache%2Fnopic.jpg HTTP/1.1
Host: scale.bloggersdelight.dk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://flightlawyer72.bloggersdelight.dk/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
date: Tue, 27 Sep 2022 01:17:10 GMT
server: nginx/1.17.10
X-Firefox-Spdy: h2
dmp.adform.net/serving/cookie/match/?CC=1&party=1077&cid=tozvqa1yyk6d3prxcmlmacqp3
200 OK 0 B URL HTTP/2 dmp.adform.net/serving/cookie/match/?CC=1&party=1077&cid=tozvqa1yyk6d3prxcmlmacqp3
IP
GET /serving/cookie/match/?CC=1&party=1077&cid=tozvqa1yyk6d3prxcmlmacqp3 HTTP/1.1
Host: dmp.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://flightlawyer72.bloggersdelight.dk/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 27 Sep 2022 01:17:12 GMT
content-type: image/gif
cache-control: no-cache, no-store, must-revalidate, no-transform
pragma: no-cache
expires: -1
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: GET
access-control-allow-origin: *
access-control-max-age: 86400
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
tags.adnuntius.com/concept_cph/6xWQDkhzp.prod.js
200 OK 0 B URL HTTP/2 tags.adnuntius.com/concept_cph/6xWQDkhzp.prod.js
IP
ASN #60068 Datacamp Limited
GET /concept_cph/6xWQDkhzp.prod.js HTTP/1.1
Host: tags.adnuntius.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://flightlawyer72.bloggersdelight.dk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 27 Sep 2022 01:17:10 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Tue, 20 Sep 2022 12:49:01 GMT
etag: W/"6329b6bd-227f2"
access-control-allow-origin: *
x-accel-expires: @1664715008
server: CDN77-Turbo
x-77-nzt: AblMCRQlTMT/FpgIAA
x-77-nzt-ray: LLOtvOOItkI
x-cache: HIT
x-age: 563222
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
scale.bloggersdelight.dk/new/scale.php?w=250&h=250&src=http%3A%2F%2Fcdn.bloggersdelight.dk%2Fcache%2Fnopic.jpg&video=true
200 OK 0 B URL HTTP/2 scale.bloggersdelight.dk/new/scale.php?w=250&h=250&src=http%3A%2F%2Fcdn.bloggersdelight.dk%2Fcache%2Fnopic.jpg&video=true
IP
ASN #24940 Hetzner Online GmbH
GET /new/scale.php?w=250&h=250&src=http%3A%2F%2Fcdn.bloggersdelight.dk%2Fcache%2Fnopic.jpg&video=true HTTP/1.1
Host: scale.bloggersdelight.dk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://flightlawyer72.bloggersdelight.dk/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
date: Tue, 27 Sep 2022 01:17:10 GMT
server: nginx/1.17.10
X-Firefox-Spdy: h2
trackingmaster.bloggersdelight.dk/track.php?url=http://flightlawyer72.bloggersdelight.dk/2022/09/26/5-must-have-boost-very-high-calorie-drinks-for-anyone-looking-to-bulk-up/&target_bid=2365499&target_blog_type=basic&blog_network=1&cluster=
200 OK 0 B URL HTTP/2 trackingmaster.bloggersdelight.dk/track.php?url=http://flightlawyer72.bloggersdelight.dk/2022/09/26/5-must-have-boost-very-high-calorie-drinks-for-anyone-looking-to-bulk-up/&target_bid=2365499&target_blog_type=basic&blog_network=1&cluster=
IP
ASN #24940 Hetzner Online GmbH
GET /track.php?url=http://flightlawyer72.bloggersdelight.dk/2022/09/26/5-must-have-boost-very-high-calorie-drinks-for-anyone-looking-to-bulk-up/&target_bid=2365499&target_blog_type=basic&blog_network=1&cluster= HTTP/1.1
Host: trackingmaster.bloggersdelight.dk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://flightlawyer72.bloggersdelight.dk/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: no-store, no-cache, must-revalidate
content-type: image/gif
date: Tue, 27 Sep 2022 01:17:10 GMT
expires: Thu, 19 Nov 1981 08:52:00 GMT
pragma: no-cache
server: nginx/1.12.2
set-cookie: userhash=034c1f55ef0ebae7fd01e9ee1fce900a; expires=Wed, 27-Sep-2023 01:17:10 GMT; Max-Age=31536000; path=/; domain=trackingmaster.bloggersdelight.dk
PHPSESSID=knsuig9ta18ndh7h47n3neifdj; expires=Tue, 27-Sep-2022 01:37:10 GMT; Max-Age=1200; path=/
X-Firefox-Spdy: h2
trackingmaster.bloggersdelight.dk/post_track.php?url=http://flightlawyer72.bloggersdelight.dk/2022/09/26/5-must-have-boost-very-high-calorie-drinks-for-anyone-looking-to-bulk-up/&target_bid=2365499&target_blog_type=basic&blog_network=1&post_id=6
200 OK 0 B URL HTTP/2 trackingmaster.bloggersdelight.dk/post_track.php?url=http://flightlawyer72.bloggersdelight.dk/2022/09/26/5-must-have-boost-very-high-calorie-drinks-for-anyone-looking-to-bulk-up/&target_bid=2365499&target_blog_type=basic&blog_network=1&post_id=6
IP
ASN #24940 Hetzner Online GmbH
GET /post_track.php?url=http://flightlawyer72.bloggersdelight.dk/2022/09/26/5-must-have-boost-very-high-calorie-drinks-for-anyone-looking-to-bulk-up/&target_bid=2365499&target_blog_type=basic&blog_network=1&post_id=6 HTTP/1.1
Host: trackingmaster.bloggersdelight.dk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://flightlawyer72.bloggersdelight.dk/
Cookie: userhash=034c1f55ef0ebae7fd01e9ee1fce900a; PHPSESSID=knsuig9ta18ndh7h47n3neifdj
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: no-store, no-cache, must-revalidate
content-type: image/gif
date: Tue, 27 Sep 2022 01:17:11 GMT
expires: Thu, 19 Nov 1981 08:52:00 GMT
pragma: no-cache
server: nginx/1.12.2
X-Firefox-Spdy: h2
cdn.privacy-mgmt.com/Notice.930bf.js
200 OK 0 B URL HTTP/2 cdn.privacy-mgmt.com/Notice.930bf.js
IP
GET /Notice.930bf.js HTTP/1.1
Host: cdn.privacy-mgmt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.privacy-mgmt.com/index.html?message_id=696111&consentUUID=undefined&preload_message=true&hasCsp=true&consent_origin=https%3A%2F%2Fcdn.privacy-mgmt.com%2Fconsent%2Ftcfv2&mms_origin=https%3A%2F%2Fcdn.privacy-mgmt.com%2Fmms%2Fv2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Thu, 15 Sep 2022 22:52:02 GMT
server: AmazonS3
content-encoding: gzip
date: Tue, 27 Sep 2022 00:34:48 GMT
etag: W/"e6729abd9beea39a3ca2c3b6ba0ca5c6"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 bb1da7862c4968b28920b91b324095c0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: wh1qrH5mhaGDgR2XzTBkp0vzb7Q7bs8sRkEzzGbOUqAm_O4Ahj9agw==
age: 2544
X-Firefox-Spdy: h2
scale.bloggersdelight.dk/new/scale.php?w=360&h=300&src=http%3A%2F%2Fcdn.bloggersdelight.dk%2Fcache%2Fnopic.jpg
200 OK 0 B URL HTTP/2 scale.bloggersdelight.dk/new/scale.php?w=360&h=300&src=http%3A%2F%2Fcdn.bloggersdelight.dk%2Fcache%2Fnopic.jpg
IP
ASN #24940 Hetzner Online GmbH
GET /new/scale.php?w=360&h=300&src=http%3A%2F%2Fcdn.bloggersdelight.dk%2Fcache%2Fnopic.jpg HTTP/1.1
Host: scale.bloggersdelight.dk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://flightlawyer72.bloggersdelight.dk/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
date: Tue, 27 Sep 2022 01:17:10 GMT
server: nginx/1.17.10
X-Firefox-Spdy: h2
cdn.privacy-mgmt.com/wrapper/tcfv2/v2/gdpr/native-message/new-user?hasCsp=true&env=prod&body=%7B%22propertyId%22%3A10851%2C%22accountId%22%3A1468%2C%22propertyHref%22%3A%22http%3A%2F%2Fflightlawyer72.bloggersdelight.dk%2F2022%2F09%2F26%2F5-must-have-boost-very-high-calorie-drinks-for-anyone-looking-to-bulk-up%2F%22%2C%22meta%22%3A%22%7B%5C%22mmsCookies%5C%22%3A%5B%5D%2C%5C%22resolved%5C%22%3Anull%7D%22%2C%22clientMMSOrigin%22%3A%22https%3A%2F%2Fcdn.privacy-mgmt.com%22%2C%22targetingParams%22%3Anull%2C%22campaignEnv%22%3A%22prod%22%2C%22legalBasisChanges%22%3Afalse%2C%22vendorListAdditions%22%3Afalse%7D&nonkeyed=%7B%22_sp_v1_uid%22%3Anull%2C%22_sp_v1_data%22%3Anull%7D
200 OK 0 B URL HTTP/2 cdn.privacy-mgmt.com/wrapper/tcfv2/v2/gdpr/native-message/new-user?hasCsp=true&env=prod&body=%7B%22propertyId%22%3A10851%2C%22accountId%22%3A1468%2C%22propertyHref%22%3A%22http%3A%2F%2Fflightlawyer72.bloggersdelight.dk%2F2022%2F09%2F26%2F5-must-have-boost-very-high-calorie-drinks-for-anyone-looking-to-bulk-up%2F%22%2C%22meta%22%3A%22%7B%5C%22mmsCookies%5C%22%3A%5B%5D%2C%5C%22resolved%5C%22%3Anull%7D%22%2C%22clientMMSOrigin%22%3A%22https%3A%2F%2Fcdn.privacy-mgmt.com%22%2C%22targetingParams%22%3Anull%2C%22campaignEnv%22%3A%22prod%22%2C%22legalBasisChanges%22%3Afalse%2C%22vendorListAdditions%22%3Afalse%7D&nonkeyed=%7B%22_sp_v1_uid%22%3Anull%2C%22_sp_v1_data%22%3Anull%7D
IP
GET /wrapper/tcfv2/v2/gdpr/native-message/new-user?hasCsp=true&env=prod&body=%7B%22propertyId%22%3A10851%2C%22accountId%22%3A1468%2C%22propertyHref%22%3A%22http%3A%2F%2Fflightlawyer72.bloggersdelight.dk%2F2022%2F09%2F26%2F5-must-have-boost-very-high-calorie-drinks-for-anyone-looking-to-bulk-up%2F%22%2C%22meta%22%3A%22%7B%5C%22mmsCookies%5C%22%3A%5B%5D%2C%5C%22resolved%5C%22%3Anull%7D%22%2C%22clientMMSOrigin%22%3A%22https%3A%2F%2Fcdn.privacy-mgmt.com%22%2C%22targetingParams%22%3Anull%2C%22campaignEnv%22%3A%22prod%22%2C%22legalBasisChanges%22%3Afalse%2C%22vendorListAdditions%22%3Afalse%7D&nonkeyed=%7B%22_sp_v1_uid%22%3Anull%2C%22_sp_v1_data%22%3Anull%7D HTTP/1.1
Host: cdn.privacy-mgmt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Origin: http://flightlawyer72.bloggersdelight.dk
Connection: keep-alive
Referer: http://flightlawyer72.bloggersdelight.dk/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
date: Tue, 27 Sep 2022 01:17:11 GMT
x-powered-by: Express
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, SP_SCRIPT_VERSION
access-control-allow-methods: GET, PUT, POST, DELETE
cache-control: max-age=0, s-maxage=1200
strict-transport-security: max-age=15552000; includeSubDomains
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 bb1da7862c4968b28920b91b324095c0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: IEe6Bz2obG78DEHMrx-vbv2Y6XcILSL39tz5SoysZWOnoxhgwUxuzA==
X-Firefox-Spdy: h2
49.12.130.166
198.47.127.20
147.75.83.64
185.86.137.110
37.157.3.29
93.184.220.29
185.76.9.18
23.38.200.201
104.18.4.186