| r3.o.lencr.org/ |  23.33.119.27 | 200 OK | 503 B |
IP23.33.119.27:0 ASN#20940 Akamai International B.V.
Hashe935ea42be4feaed61a824b0b903913e f966cfa80d65a805cb9d7c6a53b3340865d7c51a eb0ce9ae50d156fe5924b2d77346735e4e93b5240cff301c9aa835bb0b385815
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EB0CE9AE50D156FE5924B2D77346735E4E93B5240CFF301C9AA835BB0B385815"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4356
Expires: Thu, 02 Feb 2023 08:14:37 GMT
Date: Thu, 02 Feb 2023 07:02:01 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.33.119.27 | 200 OK | 503 B |
IP23.33.119.27:0 ASN#20940 Akamai International B.V.
Hash7e05c8461bd2dc5a149f71e2c465ea29 705983959c887e243cb55a8a1796757b579ee977 4d9ea085d5dda9dabed11af9847c2b0aa6182358673b356a4e2bd631e22a9922
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4D9EA085D5DDA9DABED11AF9847C2B0AA6182358673B356A4E2BD631E22A9922"
Last-Modified: Tue, 31 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10821
Expires: Thu, 02 Feb 2023 10:02:22 GMT
Date: Thu, 02 Feb 2023 07:02:01 GMT
Connection: keep-alive
|
|
| firefox.settings.services.mozilla.com/v1/ |  35.241.9.150 | 200 OK | 939 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/ IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hashff250d3ef3fa45322bf05039a0122a9f b3e7a2c383bce1bab807dbe1a03c375258b51f1d d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Backoff, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 02 Feb 2023 06:43:28 GMT
content-type: application/json
age: 1113
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.33.119.27 | 200 OK | 503 B |
IP23.33.119.27:0 ASN#20940 Akamai International B.V.
Hash9a76feabb767086ae0fa54e0ffbf763f 3655d78994a1e9838340669462728b67c8c12e54 bf215ab858c7785b7c01f7d3d437a918f056f00fe9b065820e1cdd09b7bba8f9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BF215AB858C7785B7C01F7D3D437A918F056F00FE9B065820E1CDD09B7BBA8F9"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6712
Expires: Thu, 02 Feb 2023 08:53:53 GMT
Date: Thu, 02 Feb 2023 07:02:01 GMT
Connection: keep-alive
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain | 34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hash7b922915ebf1fa3639b333f994c74f24 144a3f80b98fd0652d4614f24cf6cbbee40f8938 adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: aV9HUXY6Ow8HbljmdzfYT+c9Y56oqiBTJsMp6lLS3oGITgU2DRSMrSHgneaM9rH+7055o7CaEb4=
x-amz-request-id: 5798NH7Z2NBBR5K6
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 02 Feb 2023 06:51:52 GMT
age: 609
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 07:02:01 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 35.241.9.150 | 200 OK | 329 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Last-Modified, Cache-Control, Pragma, ETag, Backoff, Content-Type, Alert, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 02 Feb 2023 06:41:43 GMT
age: 1218
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| itatooo.com/collections/flowers?xytk=XY167351444365316 | 172.65.227.72 | 301 Moved Permanently | 97 B |
URL HTTP/1.1itatooo.com/collections/flowers?xytk=XY167351444365316 IP172.65.227.72:0
File typeHTML document, ASCII text Hashf6b20c2152fe486098fc58008f3b2490 dba5819594fe6f4ad77d4f89413b9c1c222305f3 62a54f0810eca818c4b4ff9d6dacd458cba22a8c6d4c2764da7078f716b082ca
GET /collections/flowers?xytk=XY167351444365316 HTTP/1.1
Host: itatooo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=utf-8
Location: https://itatooo.com/collections/flowers?xytk=XY167351444365316
Strict-Transport-Security: max-age=315360000; includeSubdomains
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Xss-Protection: 1; mode=block
Date: Thu, 02 Feb 2023 07:02:01 GMT
Content-Length: 97
|
|
| r3.o.lencr.org/ | 23.33.119.27 | 200 OK | 503 B |
IP23.33.119.27:0 ASN#20940 Akamai International B.V.
Hash8913af0be619500295008bb91f506660 a7b8068ba9aa506205a295b24458c2616997a0d1 6a9838d00256431807ca382fc205064b07c08d5054f2895c2ae3cc4e9094179a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6A9838D00256431807CA382FC205064B07C08D5054F2895C2AE3CC4E9094179A"
Last-Modified: Wed, 01 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12639
Expires: Thu, 02 Feb 2023 10:32:40 GMT
Date: Thu, 02 Feb 2023 07:02:01 GMT
Connection: keep-alive
|
|
| push.services.mozilla.com/ | 35.161.100.71 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP35.161.100.71:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: VyyEX7NiCPP1OivLPWtMEw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: FI6tWCabgmHiYju7qJqyzB3WZSk=
|
|
| r3.o.lencr.org/ | 23.33.119.27 | 200 OK | 503 B |
IP23.33.119.27:0 ASN#20940 Akamai International B.V.
Hash84000d2eecbffad431d2296fad244699 fd267928c89b8be074e9580ca447aaf17246aa14 79b9428d69a65bd78d5cc5fe2f7b5e6442474e09dc6806170b2fcbe459768198
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "79B9428D69A65BD78D5CC5FE2F7B5E6442474E09DC6806170B2FCBE459768198"
Last-Modified: Wed, 01 Feb 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Thu, 02 Feb 2023 13:02:02 GMT
Date: Thu, 02 Feb 2023 07:02:02 GMT
Connection: keep-alive
|
|
| itatooo.com/collections/flowers?xytk=XY167351444365316 | 172.65.227.72 | 301 Moved Permanently | 95 B |
URL HTTP/2itatooo.com/collections/flowers?xytk=XY167351444365316 IP172.65.227.72:0
File typeHTML document, ASCII text Hashe4d65ed54cc9f0f9842998e3d4f4a7b5 75d8d2481b41369e4ca5edc6ddda16bf80ed4c2e e11e0910434116591c72285bac8a5d15196dfebe5592f498e36f0f4b15859fbe
GET /collections/flowers?xytk=XY167351444365316 HTTP/1.1
Host: itatooo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 301 Moved Permanently
content-type: text/html; charset=utf-8
location: //www.itatooo.com/collections/flowers?xytk=XY167351444365316
request-id: 6281f976-55fc-4ab7-ad06-4d13db2a126d
strict-transport-security: max-age=315360000; includeSubdomains
x-content-type-options: nosniff
x-download-options: noopen
x-powered-by: ASP.NET
x-xss-protection: 1; mode=block
content-length: 95
date: Thu, 02 Feb 2023 07:02:02 GMT
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ |  93.184.220.29 | 200 OK | 280 B |
IP93.184.220.29:0
Hash8032099b3844c5d6ac6b843ae449c48f c795929cef39e58ff84168a71d72e0d5eb20a5c5 765b1f1ef30e055b1588b733eb729d08a86a179e2fdfd38aa539af441b975850
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=141781
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 07:02:03 GMT
Etag: "63dae6c0-118"
Expires: Fri, 03 Feb 2023 22:25:04 GMT
Last-Modified: Wed, 01 Feb 2023 22:25:04 GMT
Server: nginx
Content-Length: 280
|
|
| r3.o.lencr.org/ | 23.33.119.27 | 200 OK | 503 B |
IP23.33.119.27:0 ASN#20940 Akamai International B.V.
Hashe8e0173672ec76c01676a1ba4e1be857 3d01334320c94972440226cfe96c8c7646cae796 c75aea885e434e8bf53e439c4b441e2af4b228f70212001fcc4c8094f534e0f1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C75AEA885E434E8BF53E439C4B441E2AF4B228F70212001FCC4C8094F534E0F1"
Last-Modified: Tue, 31 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13323
Expires: Thu, 02 Feb 2023 10:44:06 GMT
Date: Thu, 02 Feb 2023 07:02:03 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.33.119.27 | 200 OK | 503 B |
IP23.33.119.27:0 ASN#20940 Akamai International B.V.
Hashe8e0173672ec76c01676a1ba4e1be857 3d01334320c94972440226cfe96c8c7646cae796 c75aea885e434e8bf53e439c4b441e2af4b228f70212001fcc4c8094f534e0f1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C75AEA885E434E8BF53E439C4B441E2AF4B228F70212001FCC4C8094F534E0F1"
Last-Modified: Tue, 31 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13323
Expires: Thu, 02 Feb 2023 10:44:06 GMT
Date: Thu, 02 Feb 2023 07:02:03 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9dac6192-89b0-4161-86a2-38f3998a1bc4.jpeg | 34.120.237.76 | 200 OK | 6.8 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9dac6192-89b0-4161-86a2-38f3998a1bc4.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashf1d06527f75868ea84da730b7c8b5660 6c0cb65a477d6bc7d013529411d5735bd39e3d46 2ff4fb12b9ac4dff67bf89cc69f1bfce3ffa738696f904172044a5a537a704c9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9dac6192-89b0-4161-86a2-38f3998a1bc4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6783
x-amzn-requestid: 5ab60169-ec65-483a-828b-3312c74ee4b2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: frc5BGjqoAMFV6g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dadb6c-73a465244f89adaa27626246;Sampled=0
x-amzn-remapped-date: Wed, 01 Feb 2023 21:36:44 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: S012XKdrl7ID1qnfD-G2fcAxWoseP_mAnaDi12Y-UmdBW8yXgGlpgQ==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Wed, 01 Feb 2023 22:18:46 GMT
age: 31397
etag: "6c0cb65a477d6bc7d013529411d5735bd39e3d46"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbaa9536b-a4e6-42f5-99dd-75298eecbbb1.jpeg | 34.120.237.76 | 200 OK | 16 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbaa9536b-a4e6-42f5-99dd-75298eecbbb1.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hasha4392f298c9e98515493f1235810838f b89eebf2b8adac69487262100b07da8bc171ecf7 b368d87d3a0fe4e1a8ddc82bed704b3056ad2874b8d325111b399b18807c1e5e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbaa9536b-a4e6-42f5-99dd-75298eecbbb1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 15656
x-amzn-requestid: 6723d22f-8b16-4fb2-af92-9b3257fc2a1d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fi3bIHpRoAMFRYQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d76c47-03b1c6646f63ba716a6298e1;Sampled=0
x-amzn-remapped-date: Mon, 30 Jan 2023 07:05:43 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: alMHzjwJbGegz4F76t9-EhIhCUHgQngtgiZgMo2_MxAIrXqsNxWxBg==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 a847181d425b7fc57e81eb3c800bfdf2.cloudfront.net (CloudFront), 1.1 google
date: Wed, 01 Feb 2023 08:16:33 GMT
age: 81930
etag: "b89eebf2b8adac69487262100b07da8bc171ecf7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffdd8c5ba-bd1b-4dda-ae36-680f02b388f8.jpeg | 34.120.237.76 | 200 OK | 11 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffdd8c5ba-bd1b-4dda-ae36-680f02b388f8.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashb91a1323efe4b01a2d1a2e8485117934 43d04a554f6ef512e7b21ac09287efc0e4e5efee 393e3ab81aee9fda022d06c25789be66e56aaf56f81b0514ab5dfec445087bdf
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffdd8c5ba-bd1b-4dda-ae36-680f02b388f8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10807
x-amzn-requestid: 3c6771b8-3ae0-4300-9d84-9311c15389ba
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fmJ2JGh3oAMFp0A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d8bcf3-27479faf4518900c03b84144;Sampled=0
x-amzn-remapped-date: Tue, 31 Jan 2023 07:02:11 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: oZ6etg6l7SjzCMTg-7DhIeEXMmempp9_kMb3ITzUqbrXKz2wz0qJ0w==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Wed, 01 Feb 2023 07:02:22 GMT
age: 86381
etag: "43d04a554f6ef512e7b21ac09287efc0e4e5efee"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffd3cca56-2e75-4efc-8090-c33c65a99f80.jpeg | 34.120.237.76 | 200 OK | 8.9 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffd3cca56-2e75-4efc-8090-c33c65a99f80.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashb9af1fd56c0de8f128ddce88d49c1b4d e3bb3d4950f7c0267f4476eef21872da332831aa 908153182f76362ff329803d9c11c06c66181e85e8e51dabd927f1f1ac630d5c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffd3cca56-2e75-4efc-8090-c33c65a99f80.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8944
x-amzn-requestid: 07495184-ede8-485c-94e8-5302ec348ea6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: freiLHRPoAMFYbw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dade0d-275437a54eceb40e302a7f55;Sampled=0
x-amzn-remapped-date: Wed, 01 Feb 2023 21:47:57 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 86qoRJHXcrnBGi3REMF5q3ANzKdqEs5F3yFUBmiIt6SCbBVnhGe2Kw==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 7022a5bbf9872d4a09d63e6cdb457dfe.cloudfront.net (CloudFront), 1.1 google
date: Wed, 01 Feb 2023 21:58:57 GMT
age: 32586
etag: "e3bb3d4950f7c0267f4476eef21872da332831aa"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0d335250-c4ff-42af-b9c2-48711573ab39.jpeg | 34.120.237.76 | 200 OK | 4.8 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0d335250-c4ff-42af-b9c2-48711573ab39.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash86664b4d1fc27ba7b5bff8a245604326 b8c7ef73101a497b6c78ad59aafe66a391fdc3fa e4596faadf14051299036a79632951d90183dd0635293687edef11985799a752
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0d335250-c4ff-42af-b9c2-48711573ab39.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4814
x-amzn-requestid: 90da23ab-2c54-40ec-8e26-bdf4eeb1e27b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: frdKWFpvoAMFyPQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dadbdb-70c4cb89413ed6bd44731d76;Sampled=0
x-amzn-remapped-date: Wed, 01 Feb 2023 21:38:35 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: htcecPD3kYwCPwPPCqgVuXnCuKo6TTKntzaB2xFID5fvBXpZQe463A==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Wed, 01 Feb 2023 21:59:38 GMT
age: 32545
etag: "b8c7ef73101a497b6c78ad59aafe66a391fdc3fa"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F85f439bb-b615-43ac-bd20-2466bff7ff50.jpeg | 34.120.237.76 | 200 OK | 5.6 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F85f439bb-b615-43ac-bd20-2466bff7ff50.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashd910c24f5a6108cb74103cd70692a703 9fe648fa464e46d16f685aca1704f3414eda4107 5cbe5e571e62555225621440203ae24a3b8c41ac7f49b6b731bc2c94e620797f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F85f439bb-b615-43ac-bd20-2466bff7ff50.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5561
x-amzn-requestid: 76ca969b-a840-4d5c-97c1-2dfd93b8f630
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: frdKYE3-IAMFqbw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dadbdb-2729fe22420bcc0563c39aff;Sampled=0
x-amzn-remapped-date: Wed, 01 Feb 2023 21:38:35 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: E91BIw8QT3vXXQY8GIPpnRqnTZV4paZ3wynf7UjLnjeIfwS0tiC1Gg==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Wed, 01 Feb 2023 22:12:07 GMT
age: 31796
etag: "9fe648fa464e46d16f685aca1704f3414eda4107"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 280 B |
IP93.184.220.29:0
Hash8032099b3844c5d6ac6b843ae449c48f c795929cef39e58ff84168a71d72e0d5eb20a5c5 765b1f1ef30e055b1588b733eb729d08a86a179e2fdfd38aa539af441b975850
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 0
Cache-Control: max-age=141781
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 07:02:03 GMT
Etag: "63dae6c0-118"
Expires: Fri, 03 Feb 2023 22:25:04 GMT
Last-Modified: Wed, 01 Feb 2023 22:25:04 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 280
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 472 B |
IP216.58.211.3:0
Hash2751084b42dd111d0a7f28241a77201b 680a9ac2f4cf451c9a8449c4df3587595ed9cc4c 1c68a770afbcdb5405fe330f2eabefa576ea1d08740719956083d7f6b490ccf8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 07:02:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 279 B |
IP93.184.220.29:0
Hashd953f6b987a024c751ce57f670d3e148 7b44751d0faef3cb82a7bc6f210929523156aecf 0a7ba2e158fa00edbba9c774ed067bafd94d73ed61d3de4ea91907e2afce168e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4297
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 07:02:03 GMT
Last-Modified: Thu, 02 Feb 2023 05:50:26 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 279
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 280 B |
IP93.184.220.29:0
Hash0629dcf0c3601a2e25c8c9d107f9ee8e f02e513cb0a7235deaaf120c15919087d69ce4f7 5baf1e17b883199f278c1a9ad6a87cc6fce15c4f1f5d8bd2980b4c41adf1249d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4548
Cache-Control: max-age=129775
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 07:02:03 GMT
Etag: "63daa616-118"
Expires: Fri, 03 Feb 2023 19:04:58 GMT
Last-Modified: Wed, 01 Feb 2023 17:49:10 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 280
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 280 B |
IP93.184.220.29:0
Hash0629dcf0c3601a2e25c8c9d107f9ee8e f02e513cb0a7235deaaf120c15919087d69ce4f7 5baf1e17b883199f278c1a9ad6a87cc6fce15c4f1f5d8bd2980b4c41adf1249d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4457
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 07:02:03 GMT
Last-Modified: Thu, 02 Feb 2023 05:47:46 GMT
Server: ECS (amb/6BB2)
X-Cache: HIT
Content-Length: 280
|
|
| www.googletagmanager.com/gtag/js?id=UA-212136402-1 | 142.250.74.168 | 200 OK | 44 kB |
URL HTTP/2www.googletagmanager.com/gtag/js?id=UA-212136402-1 IP142.250.74.168:0
File typeASCII text, with very long lines (1759) Hashd1eed57a6ae834fcb6e51ac1e0c4470a 79cab2bd93f84bd0bd2ba55dc0e5a48c602ea4ae 61ce2eb5b76e94ddf2fd9d01157371fe3cbee25e3433139a5acbfca03fc5314b
GET /gtag/js?id=UA-212136402-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.itatooo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 02 Feb 2023 07:02:03 GMT
expires: Thu, 02 Feb 2023 07:02:03 GMT
cache-control: private, max-age=900
last-modified: Thu, 02 Feb 2023 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43951
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 472 B |
IP216.58.211.3:0
Hash2751084b42dd111d0a7f28241a77201b 680a9ac2f4cf451c9a8449c4df3587595ed9cc4c 1c68a770afbcdb5405fe330f2eabefa576ea1d08740719956083d7f6b490ccf8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 07:02:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 472 B |
IP216.58.211.3:0
Hash2751084b42dd111d0a7f28241a77201b 680a9ac2f4cf451c9a8449c4df3587595ed9cc4c 1c68a770afbcdb5405fe330f2eabefa576ea1d08740719956083d7f6b490ccf8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 07:02:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| static.staticdj.com/iconfont/font_846249_3zb2b60e2ks/iconfont.css,themes/common/assets/vendor-4d14ea7807.css,themes/theme-5ec6062b58313cab1b76042ca61fc73b.css,themes/header-458a37a8a6.css,themes/footer-8f2f17b7cc.css,themes/slider-12dfe38da2.css |  104.17.82.78 | 200 OK | 41 kB |
URL HTTP/2static.staticdj.com/iconfont/font_846249_3zb2b60e2ks/iconfont.css,themes/common/assets/vendor-4d14ea7807.css,themes/theme-5ec6062b58313cab1b76042ca61fc73b.css,themes/header-458a37a8a6.css,themes/footer-8f2f17b7cc.css,themes/slider-12dfe38da2.css IP104.17.82.78:0
File typeASCII text, with very long lines (47646) Hash2ec44ec80aec12b46c639c072669edc3 0eac90c274def4fdf3f5180dca1591dbe8dce16a f18d6cf754a66c0af27d7217fbc3dbeecb14c50eed3affa0d3b4bc9b6f940df9
GET /iconfont/font_846249_3zb2b60e2ks/iconfont.css,themes/common/assets/vendor-4d14ea7807.css,themes/theme-5ec6062b58313cab1b76042ca61fc73b.css,themes/header-458a37a8a6.css,themes/footer-8f2f17b7cc.css,themes/slider-12dfe38da2.css HTTP/1.1
Host: static.staticdj.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.itatooo.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 02 Feb 2023 07:02:03 GMT
content-type: text/css
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-bgj: minify
cf-polished: origSize=191362
request-id: 2e9251dd-6e46-4163-a191-3e520bf227ae
strict-transport-security: max-age=315360000; includeSubdomains
vary: Accept-Encoding
x-content-type-options: nosniff
x-download-options: noopen
x-powered-by: ASP.NET
x-xss-protection: 1; mode=block
last-modified: Thu, 22 Dec 2022 20:16:09 GMT
cf-cache-status: HIT
age: 1217589
server: cloudflare
cf-ray: 79310f21a8c0b529-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.itatooo.com/collections/flowers?xytk=XY167351444365316 | 104.18.128.14 | 200 OK | 135 kB |
URL HTTP/2www.itatooo.com/collections/flowers?xytk=XY167351444365316 IP104.18.128.14:0
Size135 kB (135012 bytes) Hasha123052e0c24f6c1e90539e1d2e7975d a9e2d0e4a9c79832859733478aab3c009fa1b550 28ef8b83140024c84790a3c55d9274cdc8986ee11d9392df6d137cbe6ad39fa5
GET /collections/flowers?xytk=XY167351444365316 HTTP/1.1
Host: www.itatooo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Thu, 02 Feb 2023 07:02:03 GMT
content-type: text/html; charset=UTF-8
request-id: 349983ea-8026-46f8-8009-26e0081bf669
strict-transport-security: max-age=315360000; includeSubdomains
vary: Accept-Encoding
x-content-type-options: nosniff
x-download-options: noopen
x-powered-by: ASP.NET
x-store-id: 238883
x-store-locale: en-US
x-xss-protection: 1; mode=block
cf-cache-status: DYNAMIC
set-cookie: client_id=1675321323498369; Path=/; Domain=itatooo.com; Max-Age=31536000
_c_id=1675321323498245570; Path=/; Max-Age=31536000
store_locale=en-US; Path=/; Max-Age=31536000; HttpOnly
__cf_bm=.voGjoPJu1L1Wt7zhM0Qk3IlrKgy5MGH7GpiJ33NTWI-1675321323-0-AamzTdz291CtP3/m5M+QCmKrFZW88HCGhbBHjNJMV2ok6fh/5zaO0OWYrWH6vQPKbzsMN5VtOfyvjzQOKc/6O88=; path=/; expires=Thu, 02-Feb-23 07:32:03 GMT; domain=.www.itatooo.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 79310f1efbcdb4f1-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| img.staticdj.com/97e9a532589a24fdc6c044de069ceaf1_600x.png | 104.17.82.78 | 200 OK | 7.2 kB |
URL HTTP/2img.staticdj.com/97e9a532589a24fdc6c044de069ceaf1_600x.png IP104.17.82.78:0
File typeRIFF (little-endian) data, Web/P image\012- data Hashae1d2ae0384aca6be4e886b1b8259cf1 546dd93621f6d5632b0586ecc0f04aad7bcd7763 292802f06932c0be2b617a74f70ee6fae8f0c3f8c43effe8fcae2e14546a46db
GET /97e9a532589a24fdc6c044de069ceaf1_600x.png HTTP/1.1
Host: img.staticdj.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.itatooo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 07:02:03 GMT
content-type: image/webp
content-length: 7232
cache-control: public, max-age=31557600, max-age=3600, public
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=12041
content-disposition: inline; filename="97e9a532589a24fdc6c044de069ceaf1_600x.webp"
expires: Thu, 22 Dec 2022 21:58:37 GMT
request-id: acfda3b0-d03e-471d-b0d9-0289ac8b1a85
strict-transport-security: max-age=315360000; includeSubdomains
vary: Accept
x-content-type-options: nosniff
x-download-options: noopen
x-powered-by: ASP.NET
x-request-id: acfda3b0-d03e-471d-b0d9-0289ac8b1a85
x-xss-protection: 1; mode=block
last-modified: Fri, 27 Jan 2023 17:55:26 GMT
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: *
server: cloudflare
cf-ray: 79310f2198b9b529-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 471 B |
IP216.58.211.3:0
Hash42d54c8c12a2f90c448a11bf42800e86 bb66d35435411c825bfcd0a091f33b7d1708191e 3b67d91fbb38e5c47b6ebff53da366b87af3a308e5c588775ac66a808761dbb1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 07:02:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 471 B |
IP216.58.211.3:0
Hash42d54c8c12a2f90c448a11bf42800e86 bb66d35435411c825bfcd0a091f33b7d1708191e 3b67d91fbb38e5c47b6ebff53da366b87af3a308e5c588775ac66a808761dbb1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 07:02:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| fonts.gstatic.com/s/worksans/v17/QGY_z_wNahGAdqQ43RhVcIgYT2Xz5u32K0nXBi8Jpg.woff2 | 216.58.207.227 | 200 OK | 18 kB |
URL HTTP/2fonts.gstatic.com/s/worksans/v17/QGY_z_wNahGAdqQ43RhVcIgYT2Xz5u32K0nXBi8Jpg.woff2 IP216.58.207.227:0
File typeWeb Open Font Format (Version 2), TrueType, length 17996, version 1.0\012- data Hash6384ae17a355b2cb7cdfe0870648dbcd 643f6aa1200a0fdf08fd3b7ca278ef3e27be0996 3dbfd192961150faaa5762d0bf7a6fc352ae6db0e0bc505b815804a026016079
GET /s/worksans/v17/QGY_z_wNahGAdqQ43RhVcIgYT2Xz5u32K0nXBi8Jpg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.itatooo.com
Connection: keep-alive
Referer: https://www.itatooo.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 17996
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 27 Jan 2023 02:19:44 GMT
expires: Sat, 27 Jan 2024 02:19:44 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 27 Apr 2022 16:13:31 GMT
content-type: font/woff2
age: 535340
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/worksans/v17/QGY_z_wNahGAdqQ43RhVcIgYT2Xz5u32K67QBi8Jpg.woff2 | 216.58.207.227 | 200 OK | 19 kB |
URL HTTP/2fonts.gstatic.com/s/worksans/v17/QGY_z_wNahGAdqQ43RhVcIgYT2Xz5u32K67QBi8Jpg.woff2 IP216.58.207.227:0
File typeWeb Open Font Format (Version 2), TrueType, length 18892, version 1.0\012- data Hash9d62fd6cbce6b30999c0ab4fbc9da5a5 28e062fbdf9b60880de1263a1bfb4d55390b5a08 f630ed4887414ba3efcb59aec6e70da814430713f4b13d4960720e6e9e01de50
GET /s/worksans/v17/QGY_z_wNahGAdqQ43RhVcIgYT2Xz5u32K67QBi8Jpg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.itatooo.com
Connection: keep-alive
Referer: https://www.itatooo.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18892
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 31 Jan 2023 00:57:14 GMT
expires: Wed, 31 Jan 2024 00:57:14 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 27 Apr 2022 16:13:33 GMT
content-type: font/woff2
age: 194690
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| e1.o.lencr.org/ | 23.36.76.226 | 200 OK | 346 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash3f024aa0fcbd036a7ac17f5bb1811edb 3e34ff9e7cfa9feacfb12e3e0150eb827e00f5bd e605b70c9502d1f71e42695bd5103f3eb17742665c29ef7c9cae9bfade4f624d
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "E605B70C9502D1F71E42695BD5103F3EB17742665C29EF7C9CAE9BFADE4F624D"
Last-Modified: Tue, 31 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20044
Expires: Thu, 02 Feb 2023 12:36:08 GMT
Date: Thu, 02 Feb 2023 07:02:04 GMT
Connection: keep-alive
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 471 B |
IP216.58.211.3:0
Hash42d54c8c12a2f90c448a11bf42800e86 bb66d35435411c825bfcd0a091f33b7d1708191e 3b67d91fbb38e5c47b6ebff53da366b87af3a308e5c588775ac66a808761dbb1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 07:02:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 279 B |
IP93.184.220.29:0
Hash8c59109fb7f4a868b4985e65605e9175 8cf8f26524c9ab40f4eb0f7f2bc331f8c4185bdb 2de922cc6bc0e65093ff5419b5f9cbcc1438a1124f2279da80edfa6e71255099
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5280
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 07:02:04 GMT
Etag: "63dafffe-117"
Last-Modified: Thu, 02 Feb 2023 05:34:04 GMT
Server: ECS (amb/6BB2)
X-Cache: HIT
Content-Length: 279
|
|
| r.shoplazza.com/beacon/sa.gif?project=production&store_id=238883&gzip=0 | 104.18.14.54 | 200 OK | 3 B |
URL HTTP/2r.shoplazza.com/beacon/sa.gif?project=production&store_id=238883&gzip=0 IP104.18.14.54:0
Hasheff5bc1ef8ec9d03e640fc4370f5eacd 92a949fd41844e1bb8c6812cdea102708fde23a4 dc51b8c96c2d745df3bd5590d990230a482fd247123599548e0632fdbf97fc22
POST /beacon/sa.gif?project=production&store_id=238883&gzip=0 HTTP/1.1
Host: r.shoplazza.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 595
Origin: https://www.itatooo.com
Connection: keep-alive
Referer: https://www.itatooo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 02 Feb 2023 07:02:04 GMT
content-type: image/gif
content-length: 3
cache-control: no-cache, no-store, must-revalidate
request-id: 6c5bbbc8-c72e-410a-8b24-9bd84b9c6cd8
strict-transport-security: max-age=315360000; includeSubdomains
x-content-type-options: nosniff
x-download-options: noopen
x-powered-by: ASP.NET
x-xss-protection: 1; mode=block
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 79310f241d3fb4f9-OSL
X-Firefox-Spdy: h2
|
|
| e1.o.lencr.org/ | 23.36.76.226 | 200 OK | 346 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash3f024aa0fcbd036a7ac17f5bb1811edb 3e34ff9e7cfa9feacfb12e3e0150eb827e00f5bd e605b70c9502d1f71e42695bd5103f3eb17742665c29ef7c9cae9bfade4f624d
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "E605B70C9502D1F71E42695BD5103F3EB17742665C29EF7C9CAE9BFADE4F624D"
Last-Modified: Tue, 31 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20044
Expires: Thu, 02 Feb 2023 12:36:08 GMT
Date: Thu, 02 Feb 2023 07:02:04 GMT
Connection: keep-alive
|
|
| r.shoplazza.com/beacon/sa.gif?project=production&store_id=238883&gzip=0 | 104.18.14.54 | 200 OK | 3 B |
URL HTTP/2r.shoplazza.com/beacon/sa.gif?project=production&store_id=238883&gzip=0 IP104.18.14.54:0
Hasheff5bc1ef8ec9d03e640fc4370f5eacd 92a949fd41844e1bb8c6812cdea102708fde23a4 dc51b8c96c2d745df3bd5590d990230a482fd247123599548e0632fdbf97fc22
POST /beacon/sa.gif?project=production&store_id=238883&gzip=0 HTTP/1.1
Host: r.shoplazza.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1747
Origin: https://www.itatooo.com
Connection: keep-alive
Referer: https://www.itatooo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 07:02:04 GMT
content-type: image/gif
content-length: 3
cache-control: no-cache, no-store, must-revalidate
request-id: cba1ca5b-c682-44d5-9b76-006c680eb6c7
strict-transport-security: max-age=315360000; includeSubdomains
x-content-type-options: nosniff
x-download-options: noopen
x-powered-by: ASP.NET
x-xss-protection: 1; mode=block
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 79310f24cde2b4f9-OSL
X-Firefox-Spdy: h2
|
|
| r.shoplazza.com/beacon/sa.gif?project=production&store_id=238883&gzip=0 | 104.18.14.54 | 200 OK | 3 B |
URL HTTP/2r.shoplazza.com/beacon/sa.gif?project=production&store_id=238883&gzip=0 IP104.18.14.54:0
Hasheff5bc1ef8ec9d03e640fc4370f5eacd 92a949fd41844e1bb8c6812cdea102708fde23a4 dc51b8c96c2d745df3bd5590d990230a482fd247123599548e0632fdbf97fc22
POST /beacon/sa.gif?project=production&store_id=238883&gzip=0 HTTP/1.1
Host: r.shoplazza.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 2093
Origin: https://www.itatooo.com
Connection: keep-alive
Referer: https://www.itatooo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 07:02:04 GMT
content-type: image/gif
content-length: 3
cache-control: no-cache, no-store, must-revalidate
request-id: 7cb4bf68-024c-46ec-aa64-3e035ee411e7
strict-transport-security: max-age=315360000; includeSubdomains
x-content-type-options: nosniff
x-download-options: noopen
x-powered-by: ASP.NET
x-xss-protection: 1; mode=block
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 79310f258ea9b4f9-OSL
X-Firefox-Spdy: h2
|
|
| r.shoplazza.com/beacon/sa.gif?project=production&store_id=238883&gzip=0 | 104.18.14.54 | 200 OK | 3 B |
URL HTTP/2r.shoplazza.com/beacon/sa.gif?project=production&store_id=238883&gzip=0 IP104.18.14.54:0
Hasheff5bc1ef8ec9d03e640fc4370f5eacd 92a949fd41844e1bb8c6812cdea102708fde23a4 dc51b8c96c2d745df3bd5590d990230a482fd247123599548e0632fdbf97fc22
POST /beacon/sa.gif?project=production&store_id=238883&gzip=0 HTTP/1.1
Host: r.shoplazza.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 2876
Origin: https://www.itatooo.com
Connection: keep-alive
Referer: https://www.itatooo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 07:02:04 GMT
content-type: image/gif
content-length: 3
cache-control: no-cache, no-store, must-revalidate
request-id: 1ac131df-0d40-4d7a-9547-9c318f0fa5cf
strict-transport-security: max-age=315360000; includeSubdomains
x-content-type-options: nosniff
x-download-options: noopen
x-powered-by: ASP.NET
x-xss-protection: 1; mode=block
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 79310f25cee8b4f9-OSL
X-Firefox-Spdy: h2
|
|
| www.google-analytics.com/analytics.js | 142.250.74.110 | 200 OK | 20 kB |
URL HTTP/2www.google-analytics.com/analytics.js IP142.250.74.110:0
File typeASCII text, with very long lines (1490) Hashca7fbbfd120e3e329633044190bbf134 d17f81e03dd827554ddd207ea081fb46b3415445 847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.itatooo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Thu, 02 Feb 2023 05:44:08 GMT
expires: Thu, 02 Feb 2023 07:44:08 GMT
cache-control: public, max-age=7200
age: 4676
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 471 B |
IP216.58.211.3:0
Hasha4253e662d539c01b8656dbb6d73aab1 08f71eead367b6fa76b99f7f590680a5f5650b62 f05b99f6b0c8fb5c38221d02c0c9ed96389fbd5105d6329cdc733d1fae411df2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 07:02:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-C39E0VCBJK&cid=743144404.1675321349>m=2oe1u0&aip=1&z=1171244337 | 142.250.74.163 | 200 OK | 42 B |
URL HTTP/2www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-C39E0VCBJK&cid=743144404.1675321349>m=2oe1u0&aip=1&z=1171244337 IP142.250.74.163:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashd89746888da2d9510b64a9f031eaecd5 d5fceb6532643d0d84ffe09c40c481ecdf59e15a ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-C39E0VCBJK&cid=743144404.1675321349>m=2oe1u0&aip=1&z=1171244337 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.itatooo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 02 Feb 2023 07:02:04 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 471 B |
IP216.58.211.3:0
Hasha4253e662d539c01b8656dbb6d73aab1 08f71eead367b6fa76b99f7f590680a5f5650b62 f05b99f6b0c8fb5c38221d02c0c9ed96389fbd5105d6329cdc733d1fae411df2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 07:02:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| region1.analytics.google.com/g/collect?v=2&tid=G-C39E0VCBJK>m=2oe1u0&_p=1154611885&_gaz=1&cid=743144404.1675321349&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675321349&sct=1&seg=0&dl=https%3A%2F%2Fwww.itatooo.com%2Fcollections%2Fflowers%3Fxytk%3DXY167351444365316&dt=Flowers&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 | 216.239.32.36 | 204 No Content | 0 B |
URL HTTP/2region1.analytics.google.com/g/collect?v=2&tid=G-C39E0VCBJK>m=2oe1u0&_p=1154611885&_gaz=1&cid=743144404.1675321349&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675321349&sct=1&seg=0&dl=https%3A%2F%2Fwww.itatooo.com%2Fcollections%2Fflowers%3Fxytk%3DXY167351444365316&dt=Flowers&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 IP216.239.32.36:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-C39E0VCBJK>m=2oe1u0&_p=1154611885&_gaz=1&cid=743144404.1675321349&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675321349&sct=1&seg=0&dl=https%3A%2F%2Fwww.itatooo.com%2Fcollections%2Fflowers%3Fxytk%3DXY167351444365316&dt=Flowers&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.itatooo.com
Connection: keep-alive
Referer: https://www.itatooo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.itatooo.com
date: Thu, 02 Feb 2023 07:02:04 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 472 B |
IP216.58.211.3:0
Hash2dc2e297877f6332a114de88eeeaca61 cc91e58f3dd132b078223d21cd3177f0819e40e7 94f1191402d63bc2757d7ec854bc418dd6929b5aa9efb815d9bd35f8dab98fef
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 07:02:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| stats.g.doubleclick.net/g/collect?v=2&tid=G-C39E0VCBJK&cid=743144404.1675321349>m=2oe1u0&aip=1 | 64.233.162.154 | 204 No Content | 0 B |
URL HTTP/2stats.g.doubleclick.net/g/collect?v=2&tid=G-C39E0VCBJK&cid=743144404.1675321349>m=2oe1u0&aip=1 IP64.233.162.154:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-C39E0VCBJK&cid=743144404.1675321349>m=2oe1u0&aip=1 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.itatooo.com
Connection: keep-alive
Referer: https://www.itatooo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.itatooo.com
date: Thu, 02 Feb 2023 07:02:04 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 472 B |
IP216.58.211.3:0
Hash2dc2e297877f6332a114de88eeeaca61 cc91e58f3dd132b078223d21cd3177f0819e40e7 94f1191402d63bc2757d7ec854bc418dd6929b5aa9efb815d9bd35f8dab98fef
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 07:02:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| analytics.tiktok.com/i18n/pixel/events.js?sdkid=CDDORCJC77UA8DUP5KR0&lib=ttq | 23.36.79.17 | 200 OK | 1.2 kB |
URL HTTP/2analytics.tiktok.com/i18n/pixel/events.js?sdkid=CDDORCJC77UA8DUP5KR0&lib=ttq IP23.36.79.17:0 ASN#20940 Akamai International B.V.
File typeUnicode text, UTF-8 text, with very long lines (2350) Hash4bf69b5d98d829cdc3b1522189c94724 b5fa76c59b5a5699a906e695d02974aba88cca1b 6fa3d0b672d749e64942aecce8b09240eb7d538a5e5bd772b3072fe10820e215
GET /i18n/pixel/events.js?sdkid=CDDORCJC77UA8DUP5KR0&lib=ttq HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.itatooo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
x-tt-logid: 202302020702054F03E1A7334D0C46E055
x-tt-trace-host: 016eabbbec2a80a817c88fdee8d986cf60b294eb1ae32bfdb0da8bf1819280156a8ce8929b2fa9aa2c268b4383d8eeda0324698f834c5c36c7ddb5c49361788d1021e1409146b5bf6b8fd80f3b48c3941091a33b63ce77ec974025fb09e2d22fef
content-encoding: gzip
expires: Thu, 02 Feb 2023 07:02:05 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Thu, 02 Feb 2023 07:02:05 GMT
content-length: 1180
x-cache: TCP_MISS from a23-36-79-13.deploy.akamaitechnologies.com (AkamaiGHost/10.10.3-45298580) (-)
vary: Accept-Encoding
set-cookie: _ttp=2LAkYwfr22ZS9KdBlRidRswStIz; Path=/; Domain=tiktok.com; Max-Age=33696000; Secure; SameSite=None
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: inner; dur=4, cdn-cache; desc=MISS, edge; dur=2, origin; dur=100
x-origin-response-time: 100,23.36.79.13
x-akamai-request-id: a4992100
X-Firefox-Spdy: h2
|
|
| analytics.tiktok.com/i18n/pixel/static/main.MWE2YWY2YTgzMQ.js | 23.36.79.17 | 200 OK | 70 kB |
URL HTTP/2analytics.tiktok.com/i18n/pixel/static/main.MWE2YWY2YTgzMQ.js IP23.36.79.17:0 ASN#20940 Akamai International B.V.
File typeASCII text, with very long lines (21891) Hashe470cdee4fb19533b3076cf5e6445ff0 3fa761e875d60e55f5464f0cee6207bca0d2cbed e7fa855a1d974007175332f96be3ec95d6c6b94f7f4180dac64e4cf7d3d7115a
GET /i18n/pixel/static/main.MWE2YWY2YTgzMQ.js HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.itatooo.com/
Cookie: _ttp=2LAkYwfr22ZS9KdBlRidRswStIz
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
x-tt-logid: 20230112175829D91E25D7003EA9A803DC
x-tt-trace-host: 01f6175df718ab226765794aaab21df67154f0b53b7f693af896ad93db0deb0ef832d63bb31438f0c5e0aa4878e941bb88c0976593910f5ab417b5ca255605e18e5e0fd52686d843afbd593b8bd0d366fe4ffb20082da9c196e6db1f01a9ce8992
content-encoding: gzip
content-length: 70411
date: Thu, 02 Feb 2023 07:02:05 GMT
x-cache: TCP_MEM_HIT from a23-36-79-13.deploy.akamaitechnologies.com (AkamaiGHost/10.10.3-45298580) (-)
vary: Accept-Encoding
x-tt-trace-tag: id=16;cdn-cache=hit;type=static
server-timing: cdn-cache; desc=HIT, edge; dur=0, inner; dur=3
x-akamai-request-id: a4992251
X-Firefox-Spdy: h2
|
|
| analytics.tiktok.com/i18n/pixel/static/identify_c4832.js | 23.36.79.17 | 200 OK | 31 kB |
URL HTTP/2analytics.tiktok.com/i18n/pixel/static/identify_c4832.js IP23.36.79.17:0 ASN#20940 Akamai International B.V.
File typeASCII text, with very long lines (65536), with no line terminators Hash85bd96a56a6a7f09e3e7dadc7980152e 37590c595abeb315046a293a9e53632ae2128ac4 c27be18eef006f48310fb2b0c456d6bcb1f3b0298dcb6e580724923323cb48a7
GET /i18n/pixel/static/identify_c4832.js HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.itatooo.com/
Cookie: _ttp=2LAkYwfr22ZS9KdBlRidRswStIz
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
x-tt-logid: 20230112175825D19F86481431D6BBCCFF
x-tt-trace-host: 012b38305f60bfa8a9f04bdd846fde846b507e69fff233d9a114d447ebe9f93c0f827e6bc0806bd5a24cf0439744099e1e4bba0637571d8edb56c6009f69fe5018b8e38bd5b93708ee64c377fa97874d18ceefbea8a477a7fa2bec40c3b56c69b1
content-encoding: gzip
content-length: 30917
date: Thu, 02 Feb 2023 07:02:05 GMT
x-cache: TCP_MEM_HIT from a23-36-79-13.deploy.akamaitechnologies.com (AkamaiGHost/10.10.3-45298580) (-)
vary: Accept-Encoding
x-tt-trace-tag: id=16;cdn-cache=hit;type=static
server-timing: cdn-cache; desc=HIT, edge; dur=0, inner; dur=3
x-akamai-request-id: a499230c
X-Firefox-Spdy: h2
|
|
| analytics.tiktok.com/i18n/pixel/config.js?sdkid=CDRFNP3C77U4KH13U9B0&hostname=www.itatooo.com | 23.36.79.17 | 200 OK | 344 B |
URL HTTP/2analytics.tiktok.com/i18n/pixel/config.js?sdkid=CDRFNP3C77U4KH13U9B0&hostname=www.itatooo.com IP23.36.79.17:0 ASN#20940 Akamai International B.V.
Hash51bc4b40a53bbc312516d103d001287a c21e05bb4d2b17b28c9fc481747800024c598304 7861655cd6ad857d199269c70b26d8110bc1e72be4a261051707f4974299bda4
GET /i18n/pixel/config.js?sdkid=CDRFNP3C77U4KH13U9B0&hostname=www.itatooo.com HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.itatooo.com/
Cookie: _ttp=2LAkYwfr22ZS9KdBlRidRswStIz
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
x-tt-logid: 20230202070205E675218BD4EB0022EECA
x-tt-trace-host: 016eabbbec2a80a817c88fdee8d986cf60b294eb1ae32bfdb0da8bf1819280156a6cd22b94251a4d0b2c53e31e0b6aca4bbf9d676e64d7f8a6ea8a31a47e91457df45593474a202e438c166ae6572ef05aac48913112d2203cd96a66f11bfbd713
content-encoding: gzip
expires: Thu, 02 Feb 2023 07:02:05 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Thu, 02 Feb 2023 07:02:05 GMT
content-length: 344
x-cache: TCP_MISS from a23-36-79-13.deploy.akamaitechnologies.com (AkamaiGHost/10.10.3-45298580) (-)
vary: Accept-Encoding
set-cookie: _ttp=2LAkYwfr22ZS9KdBlRidRswStIz; Path=/; Domain=tiktok.com; Max-Age=33696000; Secure; SameSite=None
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: inner; dur=13, cdn-cache; desc=MISS, edge; dur=0, origin; dur=109
x-origin-response-time: 109,23.36.79.13
x-akamai-request-id: a499232b
X-Firefox-Spdy: h2
|
|
| analytics.tiktok.com/i18n/pixel/config.js?sdkid=CFDL1OJC77UCCRP8UUL0&hostname=www.itatooo.com | 23.36.79.17 | 200 OK | 343 B |
URL HTTP/2analytics.tiktok.com/i18n/pixel/config.js?sdkid=CFDL1OJC77UCCRP8UUL0&hostname=www.itatooo.com IP23.36.79.17:0 ASN#20940 Akamai International B.V.
Hash0746c4e8cabc01987eca99a878a33a25 06a637e2810e1ea1641a0fcfc41ed43857142069 79316fddcb86cce238262e93eadcb4774997786d896f0ce35bbccd9038ab1f9f
GET /i18n/pixel/config.js?sdkid=CFDL1OJC77UCCRP8UUL0&hostname=www.itatooo.com HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.itatooo.com/
Cookie: _ttp=2LAkYwfr22ZS9KdBlRidRswStIz
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
x-tt-logid: 20230202070205D1A096D5B1F57485B9E3
x-tt-trace-host: 016eabbbec2a80a817c88fdee8d986cf600abfded03f52e527228925ae696ca9b59e1fbe534eebc3ac35f9c6e4d9e27ea3829f1fdf5cd2d98ee12e9b4e7fb48f184882a0614a91f35f3aab223dcb3a3d85552eb53eda053bbf2bdf84ab5327f552957e0dd158aceadf3586b23146bed352
content-encoding: gzip
content-length: 343
x-origin-response-time: 17,23.218.223.22
x-akamai-request-id: 407bb72.a499232e
expires: Thu, 02 Feb 2023 07:02:05 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Thu, 02 Feb 2023 07:02:05 GMT
x-cache: TCP_MISS from a23-36-79-13.deploy.akamaitechnologies.com (AkamaiGHost/10.10.3-45298580) (-)
vary: Accept-Encoding
set-cookie: _ttp=2LAkYwfr22ZS9KdBlRidRswStIz; Path=/; Domain=tiktok.com; Max-Age=33696000; Secure; SameSite=None
x-cache-remote: TCP_MISS from a23-218-223-22.deploy.akamaitechnologies.com (AkamaiGHost/10.10.3-45298580) (-)
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: cdn-cache; desc=MISS, edge; dur=108, origin; dur=17, inner; dur=13
x-parent-response-time: 125,23.36.79.13
X-Firefox-Spdy: h2
|
|
| analytics.tiktok.com/api/v2/pixel | 23.36.79.17 | 200 OK | 0 B |
URL HTTP/2analytics.tiktok.com/api/v2/pixel IP23.36.79.17:0 ASN#20940 Akamai International B.V.
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/v2/pixel HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 807
Origin: https://www.itatooo.com
Connection: keep-alive
Referer: https://www.itatooo.com/
Cookie: _ttp=2LAkYwfr22ZS9KdBlRidRswStIz
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 0
access-control-allow-origin: *
x-tt-logid: 202302020702053D5F877B4051B814E0F9
x-tt-trace-host: 016eabbbec2a80a817c88fdee8d986cf6089b3b0dd86ad372d352bdf5a6acd83f5949c5bdf93c1010b856c8e4d22263d93484e7c89ff8eb657e71a9e5240b54dd90595c2f8c5b215231b1a300ffed3f0455b436e0d6acc216c1e379c0be487b5be9bc4abdee39c4845f9424cc067ce4f70
x-origin-response-time: 23,23.221.225.207
x-akamai-request-id: 140ded28.a499233d
expires: Thu, 02 Feb 2023 07:02:05 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Thu, 02 Feb 2023 07:02:05 GMT
x-cache: TCP_MISS from a23-36-79-13.deploy.akamaitechnologies.com (AkamaiGHost/10.10.3-45298580) (-)
x-cache-remote: TCP_MISS from a23-221-225-207.deploy.akamaitechnologies.com (AkamaiGHost/10.10.3-45298580) (-)
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: cdn-cache; desc=MISS, edge; dur=107, origin; dur=23, inner; dur=16
x-parent-response-time: 126,23.36.79.13
X-Firefox-Spdy: h2
|
|
| analytics.tiktok.com/i18n/pixel/events.js?sdkid=CDRFNP3C77U4KH13U9B0&lib=ttq | 23.36.79.17 | 200 OK | 1.1 kB |
URL HTTP/2analytics.tiktok.com/i18n/pixel/events.js?sdkid=CDRFNP3C77U4KH13U9B0&lib=ttq IP23.36.79.17:0 ASN#20940 Akamai International B.V.
File typeASCII text, with very long lines (2342) Hash86ff4fd673abc8e9518d4b074dac76a4 3fb5ea5fbbd644c874a5fca1b9aca0a8871b652a 71b22b12ffffd39e1b10148282b8d8c6dba09e98e51b43681090b46eed23ad91
GET /i18n/pixel/events.js?sdkid=CDRFNP3C77U4KH13U9B0&lib=ttq HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.itatooo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
x-tt-logid: 20230202070205AD13EF4DE882B67093FA
x-tt-trace-host: 016eabbbec2a80a817c88fdee8d986cf60b294eb1ae32bfdb0da8bf1819280156aefcc9fe5827f394c6161060f8cb6abe406d686894b47671e38d41698ab6c60185a806786009cea72458d4e3d7825307dc688375f60c0674b240b10bc85dc58ec
content-encoding: gzip
expires: Thu, 02 Feb 2023 07:02:05 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Thu, 02 Feb 2023 07:02:05 GMT
content-length: 1146
x-cache: TCP_MISS from a23-36-79-13.deploy.akamaitechnologies.com (AkamaiGHost/10.10.3-45298580) (-)
vary: Accept-Encoding
set-cookie: _ttp=2LAkYyac3GJH8pHIBQYww0yP0gD; Path=/; Domain=tiktok.com; Max-Age=33696000; Secure; SameSite=None
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: inner; dur=4, cdn-cache; desc=MISS, edge; dur=0, origin; dur=385
x-origin-response-time: 385,23.36.79.13
x-akamai-request-id: a4992109
X-Firefox-Spdy: h2
|
|
| analytics.tiktok.com/i18n/pixel/events.js?sdkid=CFDL1OJC77UCCRP8UUL0&lib=ttq | 23.36.79.17 | 200 OK | 1.1 kB |
URL HTTP/2analytics.tiktok.com/i18n/pixel/events.js?sdkid=CFDL1OJC77UCCRP8UUL0&lib=ttq IP23.36.79.17:0 ASN#20940 Akamai International B.V.
File typeASCII text, with very long lines (2342) Hash46035fe04f88c90ba77c5eba4323f3e5 008be43af7c3bee63b01ecb44869abf4bd02d883 c485d1512ea7272bf85fdd5c4257ab2662653235b4ad2c4582b269fef2f6f7c1
GET /i18n/pixel/events.js?sdkid=CFDL1OJC77UCCRP8UUL0&lib=ttq HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.itatooo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
x-tt-logid: 202302020702058E28FD44A9EC291B9CCF
x-tt-trace-host: 016eabbbec2a80a817c88fdee8d986cf60b294eb1ae32bfdb0da8bf1819280156a636dff363646c8828fb3a51082416298bb40bc160592132452c129ae9534f5a5f3f2e6983daedae85ef636396b4e86bdbc7d525aaea81c912b62ab9946275d9e
content-encoding: gzip
expires: Thu, 02 Feb 2023 07:02:05 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Thu, 02 Feb 2023 07:02:05 GMT
content-length: 1147
x-cache: TCP_MISS from a23-36-79-13.deploy.akamaitechnologies.com (AkamaiGHost/10.10.3-45298580) (-)
vary: Accept-Encoding
set-cookie: _ttp=2LAkYvFOFCXycTSEthcSz3lNPwz; Path=/; Domain=tiktok.com; Max-Age=33696000; Secure; SameSite=None
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: inner; dur=3, cdn-cache; desc=MISS, edge; dur=0, origin; dur=390
x-origin-response-time: 390,23.36.79.13
x-akamai-request-id: a4992107
X-Firefox-Spdy: h2
|
|
| analytics.tiktok.com/api/v2/pixel | 23.36.79.17 | 200 OK | 0 B |
URL HTTP/2analytics.tiktok.com/api/v2/pixel IP23.36.79.17:0 ASN#20940 Akamai International B.V.
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/v2/pixel HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 807
Origin: https://www.itatooo.com
Connection: keep-alive
Referer: https://www.itatooo.com/
Cookie: _ttp=2LAkYwfr22ZS9KdBlRidRswStIz
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 0
access-control-allow-origin: *
x-tt-logid: 20230202070205E675218BD4EB0022EECF
x-tt-trace-host: 016eabbbec2a80a817c88fdee8d986cf60b294eb1ae32bfdb0da8bf1819280156a6cd22b94251a4d0b2c53e31e0b6aca4b07720257ad079bae63dc9ffe15098edfec516c862fd6204a0aa14311208718fa1db850126efd4f9023b9c4f5c45d048d
expires: Thu, 02 Feb 2023 07:02:05 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Thu, 02 Feb 2023 07:02:05 GMT
x-cache: TCP_MISS from a23-36-79-13.deploy.akamaitechnologies.com (AkamaiGHost/10.10.3-45298580) (-)
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: inner; dur=16, cdn-cache; desc=MISS, edge; dur=4, origin; dur=112
x-origin-response-time: 112,23.36.79.13
x-akamai-request-id: a49924b0
X-Firefox-Spdy: h2
|
|
| analytics.tiktok.com/api/v2/pixel | 23.36.79.17 | 200 OK | 0 B |
URL HTTP/2analytics.tiktok.com/api/v2/pixel IP23.36.79.17:0 ASN#20940 Akamai International B.V.
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/v2/pixel HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 807
Origin: https://www.itatooo.com
Connection: keep-alive
Referer: https://www.itatooo.com/
Cookie: _ttp=2LAkYwfr22ZS9KdBlRidRswStIz
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 0
access-control-allow-origin: *
x-tt-logid: 2023020207020525F59E44AB664D4E082A
x-tt-trace-host: 016eabbbec2a80a817c88fdee8d986cf60b294eb1ae32bfdb0da8bf1819280156a2a450342fbcd598435a306f05fd13b8a20cf95b83f50fc186a4a2aa9969fe3e72700a90d61e8bb73f5dc633ab0003e57f6d2e43ad2402675c4f6f18007e6116b
expires: Thu, 02 Feb 2023 07:02:05 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Thu, 02 Feb 2023 07:02:05 GMT
x-cache: TCP_MISS from a23-36-79-13.deploy.akamaitechnologies.com (AkamaiGHost/10.10.3-45298580) (-)
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: inner; dur=13, cdn-cache; desc=MISS, edge; dur=4, origin; dur=111
x-origin-response-time: 112,23.36.79.13
x-akamai-request-id: a49924df
X-Firefox-Spdy: h2
|
|
| xytk.cc/?m=&c=Api3&a=Addlinkvisitor | 172.67.134.223 | 200 OK | 668 B |
URL HTTP/2xytk.cc/?m=&c=Api3&a=Addlinkvisitor IP172.67.134.223:0
Hashf42e393aee625a7daeefe219b76eca60 03bc592000a0b0e42559def064ec334152a67a4b 7a9fb24de2712bd21b43fa431536127c15de32eebc230d458ad2fcf9a7b7ab66
POST /?m=&c=Api3&a=Addlinkvisitor HTTP/1.1
Host: xytk.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: multipart/form-data; boundary=---------------------------223707877911117313203561938786
Content-Length: 723
Origin: https://www.itatooo.com
Connection: keep-alive
Referer: https://www.itatooo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 02 Feb 2023 07:02:04 GMT
content-type: text/html;charset=utf-8
vary: Accept-Encoding
set-cookie: PHPSESSID=nqi8k67q7mqcoopf6k6qeoprt2; path=/
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6DNMsI8ta%2B2WGUXCmtIe2yJxGGYBFex3VhORDrILMEmw5aDlX3lNqx40jVcchqnIfMPwUpY9B6q9p4vinSVivEVT4pSEOZbIHmSrgfybk%2FRmjkR5Zen%2BKa0Z"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 79310f234e52b511-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| r.shoplazza.com/beacon/sa.gif?project=production&store_id=238883&gzip=0 | 104.18.14.54 | 200 OK | 3 B |
URL HTTP/2r.shoplazza.com/beacon/sa.gif?project=production&store_id=238883&gzip=0 IP104.18.14.54:0
Hasheff5bc1ef8ec9d03e640fc4370f5eacd 92a949fd41844e1bb8c6812cdea102708fde23a4 dc51b8c96c2d745df3bd5590d990230a482fd247123599548e0632fdbf97fc22
POST /beacon/sa.gif?project=production&store_id=238883&gzip=0 HTTP/1.1
Host: r.shoplazza.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1733
Origin: https://www.itatooo.com
Connection: keep-alive
Referer: https://www.itatooo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 07:02:05 GMT
content-type: image/gif
content-length: 3
cache-control: no-cache, no-store, must-revalidate
request-id: 6b80ed65-2c50-4c64-918a-41b45fae62a3
strict-transport-security: max-age=315360000; includeSubdomains
x-content-type-options: nosniff
x-download-options: noopen
x-powered-by: ASP.NET
x-xss-protection: 1; mode=block
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 79310f2e0e79b4f9-OSL
X-Firefox-Spdy: h2
|
|
| www.paypal.com/sdk/js?client-id=AUwoRlv3iZ3jt3o3hhcft_tZ5g6tvefEpjCf9YNGeH7q8p_WraleitkKfLnWIs8HLpzalgRA5AMT0BYO¤cy=USD | 192.229.221.25 | 200 OK | 94 kB |
URL HTTP/2www.paypal.com/sdk/js?client-id=AUwoRlv3iZ3jt3o3hhcft_tZ5g6tvefEpjCf9YNGeH7q8p_WraleitkKfLnWIs8HLpzalgRA5AMT0BYO¤cy=USD IP192.229.221.25:0
File typeASCII text, with very long lines (65472) Hash4314e222edc6b5bdeb6d24160cde4ab8 03348fd440914b20ef77496447207a6587d4df20 961656f100c01c2148aa23b8f3e4e5d80345ec8096805bddb75262ccdb402e5c
GET /sdk/js?client-id=AUwoRlv3iZ3jt3o3hhcft_tZ5g6tvefEpjCf9YNGeH7q8p_WraleitkKfLnWIs8HLpzalgRA5AMT0BYO¤cy=USD HTTP/1.1
Host: www.paypal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.itatooo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: Server-Timing
age: 8350
cache-control: public, max-age=3600, s-maxage=10800
content-security-policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com; connect-src 'self' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; frame-src 'self' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; script-src 'nonce-8y/S4rRaV1YBulkh/eWXONBZkMjE3xWwvMgdk0IKvRH4TxKG' 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; style-src 'nonce-8y/S4rRaV1YBulkh/eWXONBZkMjE3xWwvMgdk0IKvRH4TxKG' 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; object-src 'none'; img-src https: data:; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp
content-type: application/javascript; charset=utf-8
date: Thu, 02 Feb 2023 07:02:05 GMT
dc: ccg11-origin-www-1.paypal.com
etag: W/"1711a-AzSP1ECRSyDvd0lkRyB6ZYfU3yA"
last-modified: Thu, 02 Feb 2023 04:42:55 GMT
p3p: true
paypal-debug-id: 033176413351b
server: ECAcc (ska/F77E)
server-timing: content-encoding;desc="", x-cdn;desc="edgecast"
strict-transport-security: max-age=63072000; includeSubDomains; preload
timing-allow-origin: *
traceparent: 00-0000000000000000000033176413351b-05b59057f973cae1-01
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 94490
X-Firefox-Spdy: h2
|
|
| r.shoplazza.com/beacon/sa.gif?project=production&store_id=238883&gzip=0 | 104.18.14.54 | 200 OK | 3 B |
URL HTTP/2r.shoplazza.com/beacon/sa.gif?project=production&store_id=238883&gzip=0 IP104.18.14.54:0
Hasheff5bc1ef8ec9d03e640fc4370f5eacd 92a949fd41844e1bb8c6812cdea102708fde23a4 dc51b8c96c2d745df3bd5590d990230a482fd247123599548e0632fdbf97fc22
POST /beacon/sa.gif?project=production&store_id=238883&gzip=0 HTTP/1.1
Host: r.shoplazza.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 2268
Origin: https://www.itatooo.com
Connection: keep-alive
Referer: https://www.itatooo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 07:02:06 GMT
content-type: image/gif
content-length: 3
cache-control: no-cache, no-store, must-revalidate
request-id: fc93ac2c-9db6-4028-bde0-65a5a9bccf71
strict-transport-security: max-age=315360000; includeSubdomains
x-content-type-options: nosniff
x-download-options: noopen
x-powered-by: ASP.NET
x-xss-protection: 1; mode=block
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 79310f2f4fd2b4f9-OSL
X-Firefox-Spdy: h2
|
|
| r.shoplazza.com/beacon/sa.gif?project=production&store_id=238883&gzip=0 | 104.18.14.54 | 200 OK | 3 B |
URL HTTP/2r.shoplazza.com/beacon/sa.gif?project=production&store_id=238883&gzip=0 IP104.18.14.54:0
Hasheff5bc1ef8ec9d03e640fc4370f5eacd 92a949fd41844e1bb8c6812cdea102708fde23a4 dc51b8c96c2d745df3bd5590d990230a482fd247123599548e0632fdbf97fc22
POST /beacon/sa.gif?project=production&store_id=238883&gzip=0 HTTP/1.1
Host: r.shoplazza.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1764
Origin: https://www.itatooo.com
Connection: keep-alive
Referer: https://www.itatooo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 07:02:06 GMT
content-type: image/gif
content-length: 3
cache-control: no-cache, no-store, must-revalidate
request-id: 2c363044-c089-4a6f-9437-5cb18c6c5a26
strict-transport-security: max-age=315360000; includeSubdomains
x-content-type-options: nosniff
x-download-options: noopen
x-powered-by: ASP.NET
x-xss-protection: 1; mode=block
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 79310f2f9827b4f9-OSL
X-Firefox-Spdy: h2
|
|
| www.paypal.com/xoplatform/logger/api/logger | 192.229.221.25 | 200 OK | 596 B |
URL HTTP/2www.paypal.com/xoplatform/logger/api/logger IP192.229.221.25:0
File typeJSON data\012- , ASCII text, with very long lines (1007), with no line terminators Hash1edeb807a8bc02afeb29dbd482e368b0 e520cf2dfc3415b7dd944cebc480af3c7c6a931c bcab0d02526bae10a4b53e88ddf8f89fb30d687a40961660a31bd911b1ec9d1d
POST /xoplatform/logger/api/logger HTTP/1.1
Host: www.paypal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/json
Content-Length: 1448
Origin: https://www.itatooo.com
Connection: keep-alive
Referer: https://www.itatooo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
access-control-allow-credentials: true
access-control-allow-origin: https://www.itatooo.com
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-type: application/json; charset=utf-8
date: Thu, 02 Feb 2023 07:02:06 GMT
dc: ccg11-origin-www-1.paypal.com
etag: W/"3ef-t5GY+HZhguSgWCL99DYnMAY9IAk"
paypal-debug-id: 0a42a6b631960
server: ECAcc (frc/4CE9)
server-timing: content-encoding;desc="", x-cdn;desc="edgecast"
set-cookie: enforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Fri, 02 Feb 2024 07:02:06 GMT; Secure
LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Thu, 02 Feb 2023 15:48:02 GMT; HttpOnly; Secure
tsrce=loggernodeweb; Max-Age=259199; Domain=.paypal.com; Path=/; Expires=Sun, 05 Feb 2023 07:02:05 GMT; HttpOnly; Secure
x-pp-s=eyJ0IjoiMTY3NTMyMTMyNjQyNiIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure
l7_az=dcg01.phx; Path=/; Domain=paypal.com; Expires=Thu, 02 Feb 2023 07:32:06 GMT; HttpOnly; Secure
ts=vreXpYrS%3D1770015726%26vteXpYrS%3D1675323126%26vr%3D10eebb411860a7a08eda56e0fec1503e%26vt%3D10eebb411860a7a08eda56e0fec1503d%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Sun, 01 Feb 2026 07:02:06 GMT; HttpOnly; Secure
ts_c=vr%3D10eebb411860a7a08eda56e0fec1503e%26vt%3D10eebb411860a7a08eda56e0fec1503d; Path=/; Domain=paypal.com; Expires=Sun, 01 Feb 2026 07:02:06 GMT; Secure
strict-transport-security: max-age=63072000; includeSubDomains; preload
timing-allow-origin: *
traceparent: 00-00000000000000000000a42a6b631960-1a5e237f396697d9-01
vary: Accept-Encoding
x-content-type-options: nosniff
content-length: 596
X-Firefox-Spdy: h2
|
|
| r.shoplazza.com/beacon/sa.gif?project=production&store_id=238883&gzip=0 | 104.18.14.54 | 200 OK | 55 B |
URL HTTP/2r.shoplazza.com/beacon/sa.gif?project=production&store_id=238883&gzip=0 IP104.18.14.54:0
Hash3392bfdd36f6680bd378aeb133ad562e 620c63ffaa719e5256da4ce2bd81bc0c0b64287c 3858d8415f2c772bbfd93181ffa247b98363467928df37971e14547df04dd77f
POST /beacon/sa.gif?project=production&store_id=238883&gzip=0 HTTP/1.1
Host: r.shoplazza.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 2121
Origin: https://www.itatooo.com
Connection: keep-alive
Referer: https://www.itatooo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 07:02:06 GMT
content-type: image/gif
content-length: 3
cache-control: no-cache, no-store, must-revalidate
request-id: 4bb93ab9-38da-40a3-9efc-dd6a5f15a5e2
strict-transport-security: max-age=315360000; includeSubdomains
x-content-type-options: nosniff
x-download-options: noopen
x-powered-by: ASP.NET
x-xss-protection: 1; mode=block
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 79310f31dabab4f9-OSL
X-Firefox-Spdy: h2
|
|
| www.paypal.com/tagmanager/pptm.js?id=www.itatooo.com&t=xo&v=5.0.350&source=payments_sdk&client_id=AUwoRlv3iZ3jt3o3hhcft_tZ5g6tvefEpjCf9YNGeH7q8p_WraleitkKfLnWIs8HLpzalgRA5AMT0BYO&vault=false | 192.229.221.25 | 200 OK | 4.3 kB |
URL HTTP/2www.paypal.com/tagmanager/pptm.js?id=www.itatooo.com&t=xo&v=5.0.350&source=payments_sdk&client_id=AUwoRlv3iZ3jt3o3hhcft_tZ5g6tvefEpjCf9YNGeH7q8p_WraleitkKfLnWIs8HLpzalgRA5AMT0BYO&vault=false IP192.229.221.25:0
Hash3e78a08d7e5fe163a8826957a9945381 c5d73b2207473e5d3dabc99f0f1803b90414ef77 627d371964a1c25e4b7283ee04fabf0a33df568499e48beba3d94bb72d197e24
GET /tagmanager/pptm.js?id=www.itatooo.com&t=xo&v=5.0.350&source=payments_sdk&client_id=AUwoRlv3iZ3jt3o3hhcft_tZ5g6tvefEpjCf9YNGeH7q8p_WraleitkKfLnWIs8HLpzalgRA5AMT0BYO&vault=false HTTP/1.1
Host: www.paypal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.itatooo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-expose-headers: Server-Timing
cache-control: public, max-age=3600
content-security-policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; script-src 'nonce-cUhHVpUqix8funeTKXb+4MTV6z3483d+NVGMsPUuCxexBSat' 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline' 'unsafe-eval'; img-src * data:; object-src 'none'; font-src 'self' https://*.paypalobjects.com https://*.paypal.com; connect-src 'self' https://*.paypal.com https://*.paypalobjects.com https://nexus.ensighten.com https://*.google-analytics.com 'unsafe-inline' https://*.qualtrics.com; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp; frame-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline' https://*.qualtrics.com;
content-type: application/x-javascript; charset=utf-8
date: Thu, 02 Feb 2023 07:02:06 GMT
dc: ccg11-origin-www-1.paypal.com
etag: W/"2f34-zQQ0FVqIlbkbuS4WgpPW/nUPXC4"
last-modified: Mon, 30 Jan 2023 09:24:59 GMT
paypal-debug-id: 08115917344b4
server: ECAcc (frc/4CD3)
server-timing: traceparent;desc="00-000000000000000000008115917344b4-a126c24706cca766-01", content-encoding;desc="", x-cdn;desc="edgecast"
set-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Thu, 02 Feb 2023 15:48:02 GMT; HttpOnly; Secure
enforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Fri, 02 Feb 2024 07:02:06 GMT; Secure
x-pp-s=eyJ0IjoiMTY3NTMyMTMyNjIzNCIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure
tsrce=tagmanagernodeweb; Domain=.paypal.com; Path=/; Expires=Sun, 05 Feb 2023 07:02:06 GMT; HttpOnly; Secure; SameSite=None
nsid=s%3AbZcNdbTsRrdL37JLVNyWKBq5IYSTIjw1.AAUYR5VRm0jRkSqNkmiPXTnPDrpKoDCbARLpkjlvUQY; Path=/; HttpOnly; Secure
l7_az=dcg02.phx; Path=/; Domain=paypal.com; Expires=Thu, 02 Feb 2023 07:32:06 GMT; HttpOnly; Secure
ts=vreXpYrS%3D1770015726%26vteXpYrS%3D1675323126%26vr%3D10eeba171860a1d30a9c1b30fd0290fc%26vt%3D10eeba171860a1d30a9c1b30fd0290fb%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Sun, 01 Feb 2026 07:02:06 GMT; HttpOnly; Secure
ts_c=vr%3D10eeba171860a1d30a9c1b30fd0290fc%26vt%3D10eeba171860a1d30a9c1b30fd0290fb; Path=/; Domain=paypal.com; Expires=Sun, 01 Feb 2026 07:02:06 GMT; Secure
strict-transport-security: max-age=63072000; includeSubDomains; preload
timing-allow-origin: *
traceparent: 00-000000000000000000008115917344b4-bc8a7da2f10888cc-01
vary: Accept-Encoding
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| ocsp.sca1b.amazontrust.com/ | 54.230.245.39 | 200 OK | 471 B |
URL HTTP/1.1ocsp.sca1b.amazontrust.com/ IP54.230.245.39:0
Hash6604ea745c4a5d8eb81cf5fa0f53846a e55f6336b1aceba7f7cafe2c78b09112492240b0 90ed3b3eb7697da58d506772aa90faaa2cd669460094ee24620bb1f8d97e2668
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=140047
Date: Thu, 02 Feb 2023 07:02:07 GMT
Etag: "63dac668-1d7"
Expires: Fri, 03 Feb 2023 21:56:14 GMT
Last-Modified: Wed, 01 Feb 2023 20:07:04 GMT
Server: ECS (bsa/EB1D)
X-Cache: Miss from cloudfront
Via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: bznBwfMZo1iRKjSbcN6zD8bR28jKBcft0tXiBbq-Z-wFHIaevAYA9w==
Age: 6550
|
|
| ocsp.sca1b.amazontrust.com/ | 54.230.245.39 | 200 OK | 471 B |
URL HTTP/1.1ocsp.sca1b.amazontrust.com/ IP54.230.245.39:0
Hash6604ea745c4a5d8eb81cf5fa0f53846a e55f6336b1aceba7f7cafe2c78b09112492240b0 90ed3b3eb7697da58d506772aa90faaa2cd669460094ee24620bb1f8d97e2668
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 02 Feb 2023 07:02:07 GMT
Last-Modified: Thu, 02 Feb 2023 06:10:15 GMT
Server: ECS (bsa/EB1F)
X-Cache: Miss from cloudfront
Via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: CY5xQrgdXO49PwMU--LKNqxlW0eg4x3gmVG76iDq4hYNySOncdFYfw==
Age: 3112
|
|
| moose.apps.shoplazza.com/api/multi-language/configs | 44.241.18.126 | 200 OK | 0 B |
URL HTTP/2moose.apps.shoplazza.com/api/multi-language/configs IP44.241.18.126:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/multi-language/configs HTTP/1.1
Host: moose.apps.shoplazza.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: store-id
Referer: https://www.itatooo.com/
Origin: https://www.itatooo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 02 Feb 2023 07:02:07 GMT
content-length: 0
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Store-Id,X-Csrf-token,Login-User-Id,X-Locale
access-control-allow-methods: OPTIONS, GET, POST, DELETE, PUT, PATCH, OPTIONS
access-control-allow-origin: https://www.itatooo.com
vary: Accept-Encoding
X-Firefox-Spdy: h2
|
|
| moose.apps.shoplazza.com/api/multi-language/configs | 44.241.18.126 | 200 OK | 354 B |
URL HTTP/2moose.apps.shoplazza.com/api/multi-language/configs IP44.241.18.126:0
File typeJSON data\012- , Unicode text, UTF-8 text, with very long lines (815), with no line terminators Hashfc43eaf7d84a0e15db14e7a4bd924ec2 296d25220966b0fd2fa6db00d866a21454f9ef36 c779563da6ec755a6495af929ccf9ca9d2e918e63e5ff04732dcd5e864897e00
GET /api/multi-language/configs HTTP/1.1
Host: moose.apps.shoplazza.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.itatooo.com/
Store-Id: 238883
Origin: https://www.itatooo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 07:02:07 GMT
content-type: application/json; charset=utf-8
content-length: 354
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Store-Id,X-Csrf-token,Login-User-Id,X-Locale
access-control-allow-methods: OPTIONS, GET, POST, DELETE, PUT, PATCH, OPTIONS
access-control-allow-origin: https://www.itatooo.com
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 471 B |
IP216.58.211.3:0
Hashde49044c9365e16fec3a6d361cb94728 2b7b69c16de6fda1ae5206f92fe781ee07bd182a 6e76887b036544a5da3918116a180876c094cc3b31676abce8d5b7b716b00c30
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 07:02:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| translate.googleapis.com/translate_static/css/translateelement.css | 216.58.211.10 | 200 OK | 3.6 kB |
URL HTTP/2translate.googleapis.com/translate_static/css/translateelement.css IP216.58.211.10:0
File typeASCII text, with very long lines (22967) Hashf7bf2121608909b56672e6398ac2335c 864ef3bac46b08ab6609fad23f00d5f09815647d b9d3a8600d9b6edf9c71b793c42782282ecfb01e2026e0128608b949e91e152c
GET /translate_static/css/translateelement.css HTTP/1.1
Host: translate.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.itatooo.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="rosetta"
report-to: {"group":"rosetta","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/rosetta"}]}
content-length: 3632
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 Feb 2023 06:51:11 GMT
expires: Thu, 02 Feb 2023 07:51:11 GMT
cache-control: public, max-age=3600
age: 656
last-modified: Mon, 09 Jan 2023 20:58:00 GMT
content-type: text/css
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| translate.googleapis.com/translate_static/js/element/main_zh-CN.js | 216.58.211.10 | 200 OK | 3.0 kB |
URL HTTP/2translate.googleapis.com/translate_static/js/element/main_zh-CN.js IP216.58.211.10:0
File typeASCII text, with very long lines (842) Hashbe080c5bd55f10c58ac56ff73bbebb32 0fd3b26c48a4ee466c483da6e27c5a80d1336247 be2f38fda27486a68a02366fe36c238373fd4b774e49ad2c551ff5161188264c
GET /translate_static/js/element/main_zh-CN.js HTTP/1.1
Host: translate.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.itatooo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="rosetta"
report-to: {"group":"rosetta","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/rosetta"}]}
content-length: 2968
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 Feb 2023 06:40:32 GMT
expires: Thu, 02 Feb 2023 07:40:32 GMT
cache-control: public, max-age=3600
age: 1296
last-modified: Mon, 22 Aug 2022 08:08:00 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| translate.googleapis.com/element/TE_20220815_00/e/js/element/element_main.js | 216.58.211.10 | 200 OK | 90 kB |
URL HTTP/2translate.googleapis.com/element/TE_20220815_00/e/js/element/element_main.js IP216.58.211.10:0
File typeHTML document, ASCII text, with very long lines (1801) Hash838506fe6f8b2e63e21649206b32c9af 937ead3b73afdf4e96824edf3b76b386b94d02ed ed6ada3a8a39b62aa5e7a503f7c0b9529ce46b1eab13fedc74b161a3da0b9362
GET /element/TE_20220815_00/e/js/element/element_main.js HTTP/1.1
Host: translate.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.itatooo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="rosetta"
report-to: {"group":"rosetta","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/rosetta"}]}
content-length: 90192
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 Feb 2023 00:53:46 GMT
expires: Fri, 02 Feb 2024 00:53:46 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 15 Aug 2022 09:51:24 GMT
content-type: text/javascript
age: 22102
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 471 B |
IP216.58.211.3:0
Hashde49044c9365e16fec3a6d361cb94728 2b7b69c16de6fda1ae5206f92fe781ee07bd182a 6e76887b036544a5da3918116a180876c094cc3b31676abce8d5b7b716b00c30
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 07:02:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.gstatic.com/images/branding/product/1x/translate_24dp.png | 142.250.74.35 | 200 OK | 846 B |
URL HTTP/2www.gstatic.com/images/branding/product/1x/translate_24dp.png IP142.250.74.35:0
File typePNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data Hashe9cd262114358f26b7608b56905185dc 6dbde0a96deaab2b529723ce26c62043cf9180ab 5a861509b658aa24fc3aed2867ac3c061e7d818d90b9990959afc6d1b5d4ff99
GET /images/branding/product/1x/translate_24dp.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.itatooo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 846
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 30 Jan 2023 12:53:47 GMT
expires: Tue, 30 Jan 2024 12:53:47 GMT
cache-control: public, max-age=31536000
age: 238101
last-modified: Thu, 14 Oct 2021 09:08:00 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_42x16dp.png | 142.250.74.35 | 200 OK | 910 B |
URL HTTP/2www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_42x16dp.png IP142.250.74.35:0
File typePNG image data, 42 x 16, 8-bit/color RGBA, non-interlaced\012- data Hashefa6bb2bfe459bc6f4bdafa3db0383f6 52d15ce52fe50643e542c17812de43f4ed1b6ee0 6318394f737c66f0e2ccfcd88e3935c6667633a1b95fa29fba2b75431d55eef2
GET /images/branding/googlelogo/1x/googlelogo_color_42x16dp.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.itatooo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 910
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 29 Jan 2023 07:32:15 GMT
expires: Mon, 29 Jan 2024 07:32:15 GMT
cache-control: public, max-age=31536000
age: 343793
last-modified: Tue, 22 Oct 2019 18:15:00 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.gstatic.com/images/branding/product/2x/translate_24dp.png | 142.250.74.35 | 200 OK | 1.8 kB |
URL HTTP/2www.gstatic.com/images/branding/product/2x/translate_24dp.png IP142.250.74.35:0
File typePNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\012- data Hashc69c796362406f9e11c7f4bf5bb628da e489ce95ab56208090868882113d7416abf46775 4dac0026fbfa2615dce30c0af12830863fe885f84387a0147b9e338f548d5d82
GET /images/branding/product/2x/translate_24dp.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://translate.googleapis.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 1842
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 30 Jan 2023 16:07:41 GMT
expires: Tue, 30 Jan 2024 16:07:41 GMT
cache-control: public, max-age=31536000
age: 226467
last-modified: Thu, 14 Oct 2021 09:08:00 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 1.9 kB |
IP216.58.211.3:0
File typegzip compressed data, max compression\012- data Hashd33631958cf163c0ab3d04c7e6e1f771 001768307b26c70ed3b0e04b50f61c6dcc9fe6de df42014c21cf3d226a5ff6f36483ab30e50986c94c9d1006a041a18c171b806c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 07:02:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| translate.google.com/gen204?sl=auto&nca=te_ap&client=te&logld=vTE_20220815_00 | 216.58.211.14 | 204 No Content | 0 B |
URL HTTP/2translate.google.com/gen204?sl=auto&nca=te_ap&client=te&logld=vTE_20220815_00 IP216.58.211.14:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /gen204?sl=auto&nca=te_ap&client=te&logld=vTE_20220815_00 HTTP/1.1
Host: translate.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.itatooo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
content-type: image/gif; charset=us-ascii
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 02 Feb 2023 07:02:08 GMT
cross-origin-resource-policy: cross-origin
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
content-security-policy: script-src 'nonce-iPTJj4ZjLeeatTGIkU2OIQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/TranslateApiHttp/cspreport;worker-src 'self', require-trusted-types-for 'script';report-uri /_/TranslateApiHttp/cspreport
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-opener-policy: same-origin
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: __Secure-ENID=10.SE=AWLeEluuO2fUEtzYWddUHMzZKFM8-eeT8kgyu5CuPzusfcRG7bFo0UAkOdfMmY8298R2FUWPVeJicPk1HLcFy7I0wmXGV_jyRMjV15HDZcdU4UPZ-ZVBkYRDapcWZcsGIyDA86tX3HQ33quAOLAsFrgoi2H-kjvOT3umpdLLha0; expires=Sun, 03-Mar-2024 23:20:26 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 471 B |
IP216.58.211.3:0
Hashdf4a6d84addba49571d9f6ae44c61a3f 28c8093de27e27645cf6dfd5ae93a62fc77b9be5 cb6623b08b6245ea11bb871729613e453046d427d738a8c6431c5da8347e6e05
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 07:02:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.google.com/images/cleardot.gif | 216.58.207.228 | 200 OK | 43 B |
URL HTTP/2www.google.com/images/cleardot.gif IP216.58.207.228:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashfc94fb0c3ed8a8f909dbc7630a0987ff 56d45f8a17f5078a20af9962c992ca4678450765 2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363
GET /images/cleardot.gif HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.itatooo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/gif
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 43
date: Thu, 02 Feb 2023 07:02:08 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Tue, 22 Oct 2019 18:30:00 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 472 B |
IP216.58.211.3:0
Hashd06fd066caf4dfa1e21a722a5c468158 acb765577662906ae8e11242bed487ce1051db28 4b45760de269e60345d43ff2da6c5803722f7c052edd0a9f5258ce69b2ffa32f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 07:02:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| r.shoplazza.com/beacon/sa.gif?project=production&store_id=238883&gzip=0 | 104.18.14.54 | 200 OK | 3 B |
URL HTTP/2r.shoplazza.com/beacon/sa.gif?project=production&store_id=238883&gzip=0 IP104.18.14.54:0
Hasheff5bc1ef8ec9d03e640fc4370f5eacd 92a949fd41844e1bb8c6812cdea102708fde23a4 dc51b8c96c2d745df3bd5590d990230a482fd247123599548e0632fdbf97fc22
POST /beacon/sa.gif?project=production&store_id=238883&gzip=0 HTTP/1.1
Host: r.shoplazza.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1764
Origin: https://www.itatooo.com
Connection: keep-alive
Referer: https://www.itatooo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 07:02:08 GMT
content-type: image/gif
content-length: 3
cache-control: no-cache, no-store, must-revalidate
request-id: 7c8a1112-ac0c-461d-b896-45656ab4c6ce
strict-transport-security: max-age=315360000; includeSubdomains
x-content-type-options: nosniff
x-download-options: noopen
x-powered-by: ASP.NET
x-xss-protection: 1; mode=block
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 79310f3d8f06b4f9-OSL
X-Firefox-Spdy: h2
|
|
| r.shoplazza.com/beacon/sa.gif?project=production&store_id=238883&gzip=0 | 104.18.14.54 | 200 OK | 3 B |
URL HTTP/2r.shoplazza.com/beacon/sa.gif?project=production&store_id=238883&gzip=0 IP104.18.14.54:0
Hasheff5bc1ef8ec9d03e640fc4370f5eacd 92a949fd41844e1bb8c6812cdea102708fde23a4 dc51b8c96c2d745df3bd5590d990230a482fd247123599548e0632fdbf97fc22
POST /beacon/sa.gif?project=production&store_id=238883&gzip=0 HTTP/1.1
Host: r.shoplazza.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1756
Origin: https://www.itatooo.com
Connection: keep-alive
Referer: https://www.itatooo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 07:02:08 GMT
content-type: image/gif
content-length: 3
cache-control: no-cache, no-store, must-revalidate
request-id: d980b2a5-ad1b-4173-974b-a7f95308262e
strict-transport-security: max-age=315360000; includeSubdomains
x-content-type-options: nosniff
x-download-options: noopen
x-powered-by: ASP.NET
x-xss-protection: 1; mode=block
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 79310f3dcf49b4f9-OSL
X-Firefox-Spdy: h2
|
|
| www.paypal.com/xoplatform/logger/api/logger | 192.229.221.25 | 200 OK | 0 B |
URL HTTP/2www.paypal.com/xoplatform/logger/api/logger IP192.229.221.25:0
OPTIONS /xoplatform/logger/api/logger HTTP/1.1
Host: www.paypal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.itatooo.com/
Origin: https://www.itatooo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-headers: content-type
access-control-allow-methods: POST
access-control-allow-origin: https://www.itatooo.com
cache-control: max-age=0, no-cache, no-store, must-revalidate
date: Thu, 02 Feb 2023 07:02:06 GMT
dc: ccg11-origin-www-1.paypal.com
paypal-debug-id: 031b08b11b910
server: ECAcc (frc/4CB1)
server-timing: content-encoding;desc="", x-cdn;desc="edgecast"
set-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Thu, 02 Feb 2023 15:48:02 GMT; HttpOnly; Secure
enforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Fri, 02 Feb 2024 07:02:06 GMT; Secure
x-pp-s=eyJ0IjoiMTY3NTMyMTMyNjIwNyIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure
tsrce=loggernodeweb; Domain=.paypal.com; Path=/; Expires=Sun, 05 Feb 2023 07:02:06 GMT; HttpOnly; Secure; SameSite=None
l7_az=dcg02.phx; Path=/; Domain=paypal.com; Expires=Thu, 02 Feb 2023 07:32:06 GMT; HttpOnly; Secure
ts=vreXpYrS%3D1770015726%26vteXpYrS%3D1675323126%26vr%3D10eeba3c1860ad04b17c5937fd3f9842%26vt%3D10eeba3c1860ad04b17c5937fd3f9841%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Sun, 01 Feb 2026 07:02:06 GMT; HttpOnly; Secure
ts_c=vr%3D10eeba3c1860ad04b17c5937fd3f9842%26vt%3D10eeba3c1860ad04b17c5937fd3f9841; Path=/; Domain=paypal.com; Expires=Sun, 01 Feb 2026 07:02:06 GMT; Secure
strict-transport-security: max-age=63072000; includeSubDomains; preload
timing-allow-origin: *
traceparent: 00-0000000000000000000031b08b11b910-969c4c17f895e4f7-01
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| static.cloudflareinsights.com/beacon.min.js/vaafb692b2aea4879b33c060e79fe94621666317369993 | 104.16.56.101 | 200 OK | 0 B |
URL HTTP/2static.cloudflareinsights.com/beacon.min.js/vaafb692b2aea4879b33c060e79fe94621666317369993 IP104.16.56.101:0
GET /beacon.min.js/vaafb692b2aea4879b33c060e79fe94621666317369993 HTTP/1.1
Host: static.cloudflareinsights.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.itatooo.com
Connection: keep-alive
Referer: https://www.itatooo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 02 Feb 2023 07:02:03 GMT
content-type: text/javascript;charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=86400
etag: W/2022.10.1
last-modified: Fri, 21 Oct 2022 01:56:09 GMT
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 79310f219d31b527-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|