simuladordeempresa.com/wp-content/kred.exe
200 OK 502 B URL HTTP/1.1 simuladordeempresa.com/wp-content/kred.exe
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (502), with no line terminators
Hash d2082a18c1f0c6a604f29980cc92e667
874f5d3e15a67ac8e71ee053547e4cda5887ded0
6063d2dbc186162609ac240cc9efe76815f70dbdc8488daeac181b39787bca6b
Analyzer Verdict Alert fortinet Malware
GET /wp-content/kred.exe HTTP/1.1
Host: simuladordeempresa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 502
content-type: text/html; charset=utf-8
date: Fri, 20 Jan 2023 08:33:31 GMT
server: nginx
set-cookie: sid=1f1bc88c-989d-11ed-b8ba-9505b784d207; path=/; domain=.simuladordeempresa.com; expires=Wed, 07 Feb 2091 11:47:38 GMT; max-age=2147483647; HttpOnly
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 37284a837312d6586460a3b86bbe7bd0
6ac0847abd48eb8607597218aaa2cb2d434c012b
6a0e11bb042555d72b397ae0cc3d5e242d3a3fe04418e28ffd222decca7d16ca
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6A0E11BB042555D72B397AE0CC3D5E242D3A3FE04418E28FFD222DECCA7D16CA"
Last-Modified: Wed, 18 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17518
Expires: Fri, 20 Jan 2023 13:25:29 GMT
Date: Fri, 20 Jan 2023 08:33:31 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cc07d664b5dadee6f9120d54904dfa57
df75a55b0b2019684a6c512bee528c51a2c4a756
14a1bd6315a3256468edafedfd1c02a6ba147914c0f01e8504e7d8cc67781c34
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "14A1BD6315A3256468EDAFEDFD1C02A6BA147914C0F01E8504E7D8CC67781C34"
Last-Modified: Tue, 17 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2587
Expires: Fri, 20 Jan 2023 09:16:38 GMT
Date: Fri, 20 Jan 2023 08:33:31 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash ff250d3ef3fa45322bf05039a0122a9f
b3e7a2c383bce1bab807dbe1a03c375258b51f1d
d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Content-Type, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 20 Jan 2023 07:49:33 GMT
content-type: application/json
age: 2638
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7afaa97fbfa9baa1485c892eac8e114d
8c17c707c218e28ac14197ce8e5eef873207a732
59db16baacb452453dbf44fc2a24f25ab09c4dbaec3a9271fda84230d8f11925
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "59DB16BAACB452453DBF44FC2A24F25AB09C4DBAEC3A9271FDA84230D8F11925"
Last-Modified: Wed, 18 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5807
Expires: Fri, 20 Jan 2023 10:10:18 GMT
Date: Fri, 20 Jan 2023 08:33:31 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: NSSyOyPGc0/cMr/qQX1m1WUCgyKcz3d05g/mUH6RNhIU+KfO7LtPkayUESp5QTm5X8bSCkAZpso=
x-amz-request-id: 07FRRPNP9CW9ZPY7
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 20 Jan 2023 08:17:32 GMT
age: 960
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 20 Jan 2023 08:33:31 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
simuladordeempresa.com/favicon.ico
404 Not Found 9 B URL HTTP/1.1 simuladordeempresa.com/favicon.ico
IP
File type ASCII text, with no line terminators
Hash d8f4a1993546cc4b850cde3599e27aec
094b763b4cfcc0b05e5d040581cd513c3ca08067
907ba78b4545338d3539683e63ecb51cf51c10adc9dabd86e92bd52339f298b9
GET /favicon.ico HTTP/1.1
Host: simuladordeempresa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://simuladordeempresa.com/wp-content/kred.exe
Cookie: sid=1f1bc88c-989d-11ed-b8ba-9505b784d207
HTTP/1.1 404 Not Found
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 9
date: Fri, 20 Jan 2023 08:33:32 GMT
server: nginx
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Expires, Last-Modified, Alert, Content-Type, Content-Length, ETag, Pragma, Cache-Control, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 20 Jan 2023 08:17:28 GMT
age: 964
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash dce4a8be753d4a93db03ffca50421c43
068040a8f69777484e545c0053ad54f273710797
7e6dddef8a4a5502c9715f8c20dcb75e132ecc875f13459a967c9e235e9ce3e4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5925
Cache-Control: max-age=94318
Content-Type: application/ocsp-response
Date: Fri, 20 Jan 2023 08:33:32 GMT
Etag: "63c90825-1d7"
Expires: Sat, 21 Jan 2023 10:45:30 GMT
Last-Modified: Thu, 19 Jan 2023 09:06:45 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 471
simuladordeempresa.com/wp-content/kred.exe?ch=1&js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTY3NDIxMDgxMSwiaWF0IjoxNjc0MjAzNjExLCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIyc3R2ZWs0OGkyMzNudnM2c2c1NzVxMDMiLCJuYmYiOjE2NzQyMDM2MTEsInRzIjoxNjc0MjAzNjExNzU4ODQxfQ.Vyt_K6mT3q1w5XuwuKrL941sas7KsCJY5FlQIzdDQ6o&sid=1f1bc88c-989d-11ed-b8ba-9505b784d207
302 Found 11 B URL HTTP/1.1 simuladordeempresa.com/wp-content/kred.exe?ch=1&js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTY3NDIxMDgxMSwiaWF0IjoxNjc0MjAzNjExLCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIyc3R2ZWs0OGkyMzNudnM2c2c1NzVxMDMiLCJuYmYiOjE2NzQyMDM2MTEsInRzIjoxNjc0MjAzNjExNzU4ODQxfQ.Vyt_K6mT3q1w5XuwuKrL941sas7KsCJY5FlQIzdDQ6o&sid=1f1bc88c-989d-11ed-b8ba-9505b784d207
IP
File type ASCII text, with no line terminators
Hash 32682312d17c7cbf18e73594f5570319
60e22121bdd0bc71cdb2bae2a3aa577006b2eae9
e55fb1a1d731153e943b68844af12dcce8bfac917c98ffdea64c80da0607dd47
GET /wp-content/kred.exe?ch=1&js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTY3NDIxMDgxMSwiaWF0IjoxNjc0MjAzNjExLCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIyc3R2ZWs0OGkyMzNudnM2c2c1NzVxMDMiLCJuYmYiOjE2NzQyMDM2MTEsInRzIjoxNjc0MjAzNjExNzU4ODQxfQ.Vyt_K6mT3q1w5XuwuKrL941sas7KsCJY5FlQIzdDQ6o&sid=1f1bc88c-989d-11ed-b8ba-9505b784d207 HTTP/1.1
Host: simuladordeempresa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://simuladordeempresa.com/wp-content/kred.exe
Cookie: sid=1f1bc88c-989d-11ed-b8ba-9505b784d207
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 11
date: Fri, 20 Jan 2023 08:33:32 GMT
location: http://r.redirekted.com/redirect?redirect_id=c348a0ba065aecaf64786fe09f77dcc9&request_id=a1b67247728db6f50c51992f27e4ba7d
server: nginx
set-cookie: sid=1f1bc88c-989d-11ed-b8ba-9505b784d207; path=/; domain=.simuladordeempresa.com; expires=Wed, 07 Feb 2091 11:47:39 GMT; max-age=2147483647; HttpOnly
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: gkcPleuo5ZxMqHh7aFdNDg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: X/YAs/KS0j47wDgzxahcTJjPvo8=
r.redirekted.com/redirect?redirect_id=c348a0ba065aecaf64786fe09f77dcc9&request_id=a1b67247728db6f50c51992f27e4ba7d
200 OK 804 B URL HTTP/1.1 r.redirekted.com/redirect?redirect_id=c348a0ba065aecaf64786fe09f77dcc9&request_id=a1b67247728db6f50c51992f27e4ba7d
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (303)
Hash 596f33c58689e6aa0a4f0e05144ef9ff
7fcdf66706a2a92fc7d18941f0da3a9009723744
d6b9dc4588363bb7f5ba91b694e6bd90c0a0ff870def804ba125370c8d825bc6
GET /redirect?redirect_id=c348a0ba065aecaf64786fe09f77dcc9&request_id=a1b67247728db6f50c51992f27e4ba7d HTTP/1.1
Host: r.redirekted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://simuladordeempresa.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx/1.23.3
Date: Fri, 20 Jan 2023 08:33:33 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/8.1.13
r.redirekted.com/css/adren.css?n=2097457267
200 OK 243 B URL HTTP/1.1 r.redirekted.com/css/adren.css?n=2097457267
IP
Hash f72acd3fece9f7cf58643616c745b2ea
92bc529a83c5466fbf6b9e702eef1e59644687a1
e2d9fd8b995f146baf54bc35d162d3e8169a5345368058b10a3b3bf4592ed777
GET /css/adren.css?n=2097457267 HTTP/1.1
Host: r.redirekted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://r.redirekted.com/redirect?redirect_id=c348a0ba065aecaf64786fe09f77dcc9&request_id=a1b67247728db6f50c51992f27e4ba7d
HTTP/1.1 200 OK
Server: nginx/1.23.3
Date: Fri, 20 Jan 2023 08:33:33 GMT
Content-Type: text/css
Content-Length: 243
Last-Modified: Sat, 03 Jul 2021 05:46:18 GMT
Connection: keep-alive
ETag: "60dff9aa-f3"
Accept-Ranges: bytes
r.redirekted.com/js/adren.min.js?n=2097457267
200 OK 7.5 kB URL HTTP/1.1 r.redirekted.com/js/adren.min.js?n=2097457267
IP
File type ASCII text, with very long lines (7528), with no line terminators
Hash 9a9ec61d7e275f25fe83f0aa93bd2e41
8a3a23c432b601e9f8f8fe2b61f0fedbc341c9ac
55afe8ae4db5b6ca9ec5a3aca1f3a7b482ca51d0914acd250093f1a9ecbfccec
GET /js/adren.min.js?n=2097457267 HTTP/1.1
Host: r.redirekted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://r.redirekted.com/redirect?redirect_id=c348a0ba065aecaf64786fe09f77dcc9&request_id=a1b67247728db6f50c51992f27e4ba7d
HTTP/1.1 200 OK
Server: nginx/1.23.3
Date: Fri, 20 Jan 2023 08:33:33 GMT
Content-Type: application/javascript
Content-Length: 7528
Last-Modified: Sat, 03 Jul 2021 05:46:18 GMT
Connection: keep-alive
ETag: "60dff9aa-1d68"
Accept-Ranges: bytes
r.redirekted.com/favicon.ico
200 OK 0 B URL HTTP/1.1 r.redirekted.com/favicon.ico
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: r.redirekted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://r.redirekted.com/redirect?redirect_id=c348a0ba065aecaf64786fe09f77dcc9&request_id=a1b67247728db6f50c51992f27e4ba7d
HTTP/1.1 200 OK
Server: nginx/1.23.3
Date: Fri, 20 Jan 2023 08:33:33 GMT
Content-Type: image/x-icon
Content-Length: 0
Last-Modified: Sat, 03 Jul 2021 05:46:18 GMT
Connection: keep-alive
ETag: "60dff9aa-0"
Accept-Ranges: bytes
r.redirekted.com/go?e=NA-pFFutPqWclBdVTs7VvL9gRrwgvq4S2X7LPFdfxWW5KW8b0X7taLeHlV6bFW1jGr_xUCutPsY13p5xQs2yKB8AaXtcPXafwXbbFL9AUAw1aCe0Qsm1wC9gHA8bFL8EJr_xaCutFBsImqjI2rXu2FltPLtAwq1kmZvyUCetlWSEmq51QAuEaEdRTnSgaFeLHVytUF-IPAs1KW0bHs7DwCdRTEbAmCaD0ZlgvE0V2VXSFW8RJr-NTC9yFssEmBscHs7bPL9SzVtgvCdDTsmuUFeZKr5bvCa4mXyLPL-AUAx1aC4EzsyLlL9W3XYcvL5WJVyDaF-AUp-DGL9cxZm9SM8gRC-Hmpt9SA_pFC
200 OK 1.8 kB URL HTTP/1.1 r.redirekted.com/go?e=NA-pFFutPqWclBdVTs7VvL9gRrwgvq4S2X7LPFdfxWW5KW8b0X7taLeHlV6bFW1jGr_xUCutPsY13p5xQs2yKB8AaXtcPXafwXbbFL9AUAw1aCe0Qsm1wC9gHA8bFL8EJr_xaCutFBsImqjI2rXu2FltPLtAwq1kmZvyUCetlWSEmq51QAuEaEdRTnSgaFeLHVytUF-IPAs1KW0bHs7DwCdRTEbAmCaD0ZlgvE0V2VXSFW8RJr-NTC9yFssEmBscHs7bPL9SzVtgvCdDTsmuUFeZKr5bvCa4mXyLPL-AUAx1aC4EzsyLlL9W3XYcvL5WJVyDaF-AUp-DGL9cxZm9SM8gRC-Hmpt9SA_pFC
IP
File type HTML document, ASCII text, with very long lines (477)
Hash 6c9e9c4db196a99582bbbda075f99f1e
84556531f1fcf4e31cf0ceb70f21af5c7a7b0242
8d559966e7e950696c5d70cf9995b70c3412456384ce3a37ad9b7b350e5d6c6c
GET /go?e=NA-pFFutPqWclBdVTs7VvL9gRrwgvq4S2X7LPFdfxWW5KW8b0X7taLeHlV6bFW1jGr_xUCutPsY13p5xQs2yKB8AaXtcPXafwXbbFL9AUAw1aCe0Qsm1wC9gHA8bFL8EJr_xaCutFBsImqjI2rXu2FltPLtAwq1kmZvyUCetlWSEmq51QAuEaEdRTnSgaFeLHVytUF-IPAs1KW0bHs7DwCdRTEbAmCaD0ZlgvE0V2VXSFW8RJr-NTC9yFssEmBscHs7bPL9SzVtgvCdDTsmuUFeZKr5bvCa4mXyLPL-AUAx1aC4EzsyLlL9W3XYcvL5WJVyDaF-AUp-DGL9cxZm9SM8gRC-Hmpt9SA_pFC HTTP/1.1
Host: r.redirekted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://r.redirekted.com/redirect?redirect_id=c348a0ba065aecaf64786fe09f77dcc9&request_id=a1b67247728db6f50c51992f27e4ba7d
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx/1.23.3
Date: Fri, 20 Jan 2023 08:33:33 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/8.1.13
Set-Cookie: uuid=7375008280669078528; expires=Sat, 21-Jan-2023 08:33:33 GMT; Max-Age=86400
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/1.1 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://r.redirekted.com/
HTTP/1.1 200 OK
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Cross-Origin-Resource-Policy: cross-origin
Server: Golfe2
Content-Length: 20085
Date: Fri, 20 Jan 2023 08:24:21 GMT
Expires: Fri, 20 Jan 2023 10:24:21 GMT
Cache-Control: public, max-age=7200
Age: 552
Last-Modified: Tue, 10 Jan 2023 21:29:14 GMT
Content-Type: text/javascript
www.google-analytics.com/collect?v=1&_v=j99&a=1205305500&t=pageview&_s=2&dl=http%3A%2F%2Fr.redirekted.com%2Fgo%3Fe%3DNA-pFFutPqWclBdVTs7VvL9gRrwgvq4S2X7LPFdfxWW5KW8b0X7taLeHlV6bFW1jGr_xUCutPsY13p5xQs2yKB8AaXtcPXafwXbbFL9AUAw1aCe0Qsm1wC9gHA8bFL8EJr_xaCutFBsImqjI2rXu2FltPLtAwq1kmZvyUCetlWSEmq51QAuEaEdRTnSgaFeLHVytUF-IPAs1KW0bHs7DwCdRTEbAmCaD0ZlgvE0V2VXSFW8RJr-NTC9yFssEmBscHs7bPL9SzVtgvCdDTsmuUFeZKr5bvCa4mXyLPL-AUAx1aC4EzsyLlL9W3XYcvL5WJVyDaF-AUp-DGL9cxZm9SM8gRC-Hmpt9SA_pFC&ul=en-us&de=UTF-8&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=IEBAAEABAAAAACAAI~&jid=&gjid=&cid=863697799.1674203613&tid=UA-32454353-1&_gid=1472706522.1674203613&cd1=oz9lo258n2kesUk8sT5ipz9hsTgfn3k8sUj%3D&z=1967503141
200 OK 35 B URL HTTP/1.1 www.google-analytics.com/collect?v=1&_v=j99&a=1205305500&t=pageview&_s=2&dl=http%3A%2F%2Fr.redirekted.com%2Fgo%3Fe%3DNA-pFFutPqWclBdVTs7VvL9gRrwgvq4S2X7LPFdfxWW5KW8b0X7taLeHlV6bFW1jGr_xUCutPsY13p5xQs2yKB8AaXtcPXafwXbbFL9AUAw1aCe0Qsm1wC9gHA8bFL8EJr_xaCutFBsImqjI2rXu2FltPLtAwq1kmZvyUCetlWSEmq51QAuEaEdRTnSgaFeLHVytUF-IPAs1KW0bHs7DwCdRTEbAmCaD0ZlgvE0V2VXSFW8RJr-NTC9yFssEmBscHs7bPL9SzVtgvCdDTsmuUFeZKr5bvCa4mXyLPL-AUAx1aC4EzsyLlL9W3XYcvL5WJVyDaF-AUp-DGL9cxZm9SM8gRC-Hmpt9SA_pFC&ul=en-us&de=UTF-8&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=IEBAAEABAAAAACAAI~&jid=&gjid=&cid=863697799.1674203613&tid=UA-32454353-1&_gid=1472706522.1674203613&cd1=oz9lo258n2kesUk8sT5ipz9hsTgfn3k8sUj%3D&z=1967503141
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /collect?v=1&_v=j99&a=1205305500&t=pageview&_s=2&dl=http%3A%2F%2Fr.redirekted.com%2Fgo%3Fe%3DNA-pFFutPqWclBdVTs7VvL9gRrwgvq4S2X7LPFdfxWW5KW8b0X7taLeHlV6bFW1jGr_xUCutPsY13p5xQs2yKB8AaXtcPXafwXbbFL9AUAw1aCe0Qsm1wC9gHA8bFL8EJr_xaCutFBsImqjI2rXu2FltPLtAwq1kmZvyUCetlWSEmq51QAuEaEdRTnSgaFeLHVytUF-IPAs1KW0bHs7DwCdRTEbAmCaD0ZlgvE0V2VXSFW8RJr-NTC9yFssEmBscHs7bPL9SzVtgvCdDTsmuUFeZKr5bvCa4mXyLPL-AUAx1aC4EzsyLlL9W3XYcvL5WJVyDaF-AUp-DGL9cxZm9SM8gRC-Hmpt9SA_pFC&ul=en-us&de=UTF-8&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=IEBAAEABAAAAACAAI~&jid=&gjid=&cid=863697799.1674203613&tid=UA-32454353-1&_gid=1472706522.1674203613&cd1=oz9lo258n2kesUk8sT5ipz9hsTgfn3k8sUj%3D&z=1967503141 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://r.redirekted.com/
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Pragma: no-cache
X-Content-Type-Options: nosniff
Cross-Origin-Resource-Policy: cross-origin
Server: Golfe2
Content-Length: 35
Date: Fri, 20 Jan 2023 02:38:30 GMT
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
Content-Type: image/gif
Age: 21303
status.thawte.com/
200 OK 471 B IP
Hash f5f03eb2e3f55113331069909f35c25e
d63f5b1defc9b0039ab8cdda7c03fb6917504a2b
f26a9211a18df58a436fb6ba6a81fbb588426e0322d387d76a77eef0ef2f9926
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3430
Cache-Control: max-age=122060
Content-Type: application/ocsp-response
Date: Fri, 20 Jan 2023 08:33:33 GMT
Etag: "63c97e43-1d7"
Expires: Sat, 21 Jan 2023 18:27:53 GMT
Last-Modified: Thu, 19 Jan 2023 17:30:43 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471
no-go.kelkoogroup.net/offersearchGo?.ts=1674143782614&.sig=JyH7VDwqq9mP82l_VOXVNSmaCcI-&affiliationId=96965866&comId=100542281&country=no&offerId=ff97c2e1075a8a3913331ebdf48eb0aa&service=37&tokenId=35e025c3-2943-4e2d-874f-eaee491f9fab&wait=true&addedParams=true&custom1=j3BvtxsmImM0RJCSIQXWymX2uzFeL3W9ZGXkc0Xc0KB75GsUAGXW5KWvuRM8ElLxkapw9Ss6ZJF9IlVakKWjuHsytQF8gwW&custom2=jKWjuHsyVvF8gQBWqwqSExZvyxEmVJrUAQB
200 OK 32 kB URL HTTP/1.1 no-go.kelkoogroup.net/offersearchGo?.ts=1674143782614&.sig=JyH7VDwqq9mP82l_VOXVNSmaCcI-&affiliationId=96965866&comId=100542281&country=no&offerId=ff97c2e1075a8a3913331ebdf48eb0aa&service=37&tokenId=35e025c3-2943-4e2d-874f-eaee491f9fab&wait=true&addedParams=true&custom1=j3BvtxsmImM0RJCSIQXWymX2uzFeL3W9ZGXkc0Xc0KB75GsUAGXW5KWvuRM8ElLxkapw9Ss6ZJF9IlVakKWjuHsytQF8gwW&custom2=jKWjuHsyVvF8gQBWqwqSExZvyxEmVJrUAQB
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (12878)
Hash 356e3d801e420c85ed682b19f836d908
ac39fc017d896fc53b78b7657a6ccdda8469b644
200d231a99af3521d40d622f99dac26269d70a154adb7604f2166cdcbbfeb8cd
GET /offersearchGo?.ts=1674143782614&.sig=JyH7VDwqq9mP82l_VOXVNSmaCcI-&affiliationId=96965866&comId=100542281&country=no&offerId=ff97c2e1075a8a3913331ebdf48eb0aa&service=37&tokenId=35e025c3-2943-4e2d-874f-eaee491f9fab&wait=true&addedParams=true&custom1=j3BvtxsmImM0RJCSIQXWymX2uzFeL3W9ZGXkc0Xc0KB75GsUAGXW5KWvuRM8ElLxkapw9Ss6ZJF9IlVakKWjuHsytQF8gwW&custom2=jKWjuHsyVvF8gQBWqwqSExZvyxEmVJrUAQB HTTP/1.1
Host: no-go.kelkoogroup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://r.redirekted.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
leadId: dc1-kls-prod-ls-03.prod.dc1.kelkoo.net_1674203613993_1565841
clickId: 107698147_1674203613987_958601
country: no
Accept-CH: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory
Set-Cookie: datadome=6hkDg-dzhD-Gg9jWuAk1G9y3ysr2qHm_CyXZNGuzYZGP8Udnh0RpT6yIG-h5vEyBPB7SqU4XoF8b8yNoAlnNaG5JlKopAN77mMO__qR3INkDdlwNp7iq76I_9WoGEJJv; Max-Age=31536000; Expires=Sat, 20 Jan 2024 08:33:34 GMT; SameSite=Lax; Path=/; Domain=.kelkoogroup.net; Secure
kelkooID=a4c6293-185ce4fcb23-34ad5; Max-Age=31536000; Expires=Sat, 20 Jan 2024 08:33:34 GMT; SameSite=None; Path=/; Domain=kelkoogroup.net; Secure; HTTPOnly
X-DataDome: protected
Request-Time: PT0.017473S
X-Robots-Tag: noindex,nofollow
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: DENY
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: master-only
Date: Fri, 20 Jan 2023 08:33:34 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 32525
no-go.kelkoogroup.net/assets/images/p.png?country=no&k=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
200 OK 68 B URL HTTP/1.1 no-go.kelkoogroup.net/assets/images/p.png?country=no&k=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
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced\012- data
Hash 91e42db1c66c0b276abf6234dc50b2eb
c1986af3c26609b8b7d8933f99c51c1a89e9ea6b
63ef318d96b5d0d0ceba6e04a4e622b1158335cdc67c49e27839132c6f655058
GET /assets/images/p.png?country=no&k=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 HTTP/1.1
Host: no-go.kelkoogroup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no-go.kelkoogroup.net/offersearchGo?.ts=1674143782614&.sig=JyH7VDwqq9mP82l_VOXVNSmaCcI-&affiliationId=96965866&comId=100542281&country=no&offerId=ff97c2e1075a8a3913331ebdf48eb0aa&service=37&tokenId=35e025c3-2943-4e2d-874f-eaee491f9fab&wait=true&addedParams=true&custom1=j3BvtxsmImM0RJCSIQXWymX2uzFeL3W9ZGXkc0Xc0KB75GsUAGXW5KWvuRM8ElLxkapw9Ss6ZJF9IlVakKWjuHsytQF8gwW&custom2=jKWjuHsyVvF8gQBWqwqSExZvyxEmVJrUAQB
Connection: keep-alive
Cookie: datadome=6hkDg-dzhD-Gg9jWuAk1G9y3ysr2qHm_CyXZNGuzYZGP8Udnh0RpT6yIG-h5vEyBPB7SqU4XoF8b8yNoAlnNaG5JlKopAN77mMO__qR3INkDdlwNp7iq76I_9WoGEJJv; kelkooID=a4c6293-185ce4fcb23-34ad5
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
leadId: dc1-kls-prod-ls-03.prod.dc1.kelkoo.net_1674203613993_1565841
clickId: 107698147_1674203613987_958601
country: no
Request-Time: PT0.001696S
X-Robots-Tag: noindex,nofollow
Cache-Control: private, must-revalidate
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: DENY
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: master-only
Date: Fri, 20 Jan 2023 08:33:34 GMT
Content-Type: image/png
Content-Length: 68
no-go.kelkoogroup.net/fp?country=no&k=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
200 OK 0 B URL HTTP/1.1 no-go.kelkoogroup.net/fp?country=no&k=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
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /fp?country=no&k=612f7a9541cd6ea61eb554c0e4cff437567c460be4e08eed49d56f330fab19bb7fb00e59ad2eb3d7a6323b7e32c65463878b69d413695d9d35d59136f754d567c0f90b7b1908479cccda88d42379d0c2e019a5a5d7275eca49a2c4d3d8ed6bd39d056fdfdd23c1e640fff5f877033f11b1a548c42301f5ebf7ef528ad34ff13d3129212b178e3982b7b969f5c70612a93fa8f012baed9c62244d2b0b41d8884a4bd114f3e781d95c60e7fd4aa3b05841498cc14bfe8957121ee4a4f6aad0557067f9e491ac9029e081fea30f8d839ab5df8c1876fe72da3f7197bdd2c49f75661cc176dd735960832a58e485b3f93b0f6446a556beb7a03521509701a0ee384790b551c3d98ebaf66cce10f01f9bdef0237806a63d35d49c60aff68bbaedaa15eb51167c2d5ae045e1cefc376e8b080890a5939fadcd6cb094a4246e62daa91577f9c2c1b6fcb0f878ce4df91d95a962dabb719653c706bd45339c166005b69c6d0f527fbaba14f4fa9453c438d063328bcd27a6528ba7a0fb605b14134d353368dfab973de1865b56a530330d161162338035f91016ee36b3d7fcb2338191fd6a0dddfa7eba9fa4c816ca5798c00a7e HTTP/1.1
Host: no-go.kelkoogroup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no-go.kelkoogroup.net/offersearchGo?.ts=1674143782614&.sig=JyH7VDwqq9mP82l_VOXVNSmaCcI-&affiliationId=96965866&comId=100542281&country=no&offerId=ff97c2e1075a8a3913331ebdf48eb0aa&service=37&tokenId=35e025c3-2943-4e2d-874f-eaee491f9fab&wait=true&addedParams=true&custom1=j3BvtxsmImM0RJCSIQXWymX2uzFeL3W9ZGXkc0Xc0KB75GsUAGXW5KWvuRM8ElLxkapw9Ss6ZJF9IlVakKWjuHsytQF8gwW&custom2=jKWjuHsyVvF8gQBWqwqSExZvyxEmVJrUAQB
Content-Type: text/plain;charset=utf-8
Content-Length: 536
Origin: https://no-go.kelkoogroup.net
Connection: keep-alive
Cookie: datadome=6hkDg-dzhD-Gg9jWuAk1G9y3ysr2qHm_CyXZNGuzYZGP8Udnh0RpT6yIG-h5vEyBPB7SqU4XoF8b8yNoAlnNaG5JlKopAN77mMO__qR3INkDdlwNp7iq76I_9WoGEJJv; kelkooID=a4c6293-185ce4fcb23-34ad5; _ga=GA1.2.344673889.1674203613; _gid=GA1.2.330160368.1674203613
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
leadId: dc1-kls-prod-ls-03.prod.dc1.kelkoo.net_1674203613993_1565841
clickId: 107698147_1674203613987_958601
country: no
Request-Time: PT0.003256S
X-Robots-Tag: noindex,nofollow
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: DENY
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: master-only
Date: Fri, 20 Jan 2023 08:33:34 GMT
Content-Type: text/plain; charset=UTF-8
Content-Length: 0
dd.kelkoogroup.net/tags.js
200 OK 42 kB URL HTTP/2 dd.kelkoogroup.net/tags.js
IP
File type ASCII text, with very long lines (65432)
Hash 6335af927e3c9621c1a9a8601e674ad2
0b034829d3ab486b8a051e1c226d59e20e286c49
75169425c5b166e910baa721ca215d61856959e5256f6be8b598953e8830e13f
GET /tags.js HTTP/1.1
Host: dd.kelkoogroup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no-go.kelkoogroup.net/
Connection: keep-alive
Cookie: datadome=6hkDg-dzhD-Gg9jWuAk1G9y3ysr2qHm_CyXZNGuzYZGP8Udnh0RpT6yIG-h5vEyBPB7SqU4XoF8b8yNoAlnNaG5JlKopAN77mMO__qR3INkDdlwNp7iq76I_9WoGEJJv; kelkooID=a4c6293-185ce4fcb23-34ad5; _ga=GA1.2.344673889.1674203613; _gid=GA1.2.330160368.1674203613
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: text/javascript
content-length: 42423
server: Apache
strict-transport-security: max-age=63072000; includeSubDomains; preload
last-modified: Thu, 19 Jan 2023 10:10:01 GMT
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
via: 1.1 d20f19c14113bb86116d01e6cb4e2844.cloudfront.net (CloudFront), 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
date: Fri, 20 Jan 2023 08:10:47 GMT
cache-control: max-age=3600, public
expires: Fri, 20 Jan 2023 09:10:47 GMT
etag: "328d3-5f29b22d0d875-gzip"
vary: Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: FRA60-P2, OSL50-P1
x-amz-cf-id: TuAYT9f1znuzr6VCNGqKlIuSEJgCaJzdOfC4y67fkWerx_TMviTmRg==
age: 1367
X-Firefox-Spdy: h2
no-go.kelkoogroup.net/favicon.ico
404 Not Found 1.1 kB URL HTTP/1.1 no-go.kelkoogroup.net/favicon.ico
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 8560de521c4990c7c870121fc9643508
0cacf7a6b96cceeb6ceae74d5f14dc87406a6f39
73a434285c3a752bc8c44aebd50e10f1a766853cbc7184e78d5c934c7b52b620
GET /favicon.ico HTTP/1.1
Host: no-go.kelkoogroup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no-go.kelkoogroup.net/offersearchGo?.ts=1674143782614&.sig=JyH7VDwqq9mP82l_VOXVNSmaCcI-&affiliationId=96965866&comId=100542281&country=no&offerId=ff97c2e1075a8a3913331ebdf48eb0aa&service=37&tokenId=35e025c3-2943-4e2d-874f-eaee491f9fab&wait=true&addedParams=true&custom1=j3BvtxsmImM0RJCSIQXWymX2uzFeL3W9ZGXkc0Xc0KB75GsUAGXW5KWvuRM8ElLxkapw9Ss6ZJF9IlVakKWjuHsytQF8gwW&custom2=jKWjuHsyVvF8gQBWqwqSExZvyxEmVJrUAQB
Connection: keep-alive
Cookie: datadome=6hkDg-dzhD-Gg9jWuAk1G9y3ysr2qHm_CyXZNGuzYZGP8Udnh0RpT6yIG-h5vEyBPB7SqU4XoF8b8yNoAlnNaG5JlKopAN77mMO__qR3INkDdlwNp7iq76I_9WoGEJJv; kelkooID=a4c6293-185ce4fcb23-34ad5; _ga=GA1.2.344673889.1674203613; _gid=GA1.2.330160368.1674203613
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 404 Not Found
Request-Time: PT0.000221S
X-Robots-Tag: noindex,nofollow
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: DENY
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: master-only
Date: Fri, 20 Jan 2023 08:33:34 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 1144
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 89055b1f42119cc1e7a33ce2fc364e76
20550fd56bf49a8aa30e18a923be22cda3f2ba7b
7698e9bb59f46011dbd3b6b74fc5784ac60d64c9d8403e8fe3aa18a60c17393d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7698E9BB59F46011DBD3B6B74FC5784AC60D64C9D8403E8FE3AA18A60C17393D"
Last-Modified: Wed, 18 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7887
Expires: Fri, 20 Jan 2023 10:45:01 GMT
Date: Fri, 20 Jan 2023 08:33:34 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 89055b1f42119cc1e7a33ce2fc364e76
20550fd56bf49a8aa30e18a923be22cda3f2ba7b
7698e9bb59f46011dbd3b6b74fc5784ac60d64c9d8403e8fe3aa18a60c17393d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7698E9BB59F46011DBD3B6B74FC5784AC60D64C9D8403E8FE3AA18A60C17393D"
Last-Modified: Wed, 18 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7887
Expires: Fri, 20 Jan 2023 10:45:01 GMT
Date: Fri, 20 Jan 2023 08:33:34 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 89055b1f42119cc1e7a33ce2fc364e76
20550fd56bf49a8aa30e18a923be22cda3f2ba7b
7698e9bb59f46011dbd3b6b74fc5784ac60d64c9d8403e8fe3aa18a60c17393d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7698E9BB59F46011DBD3B6B74FC5784AC60D64C9D8403E8FE3AA18A60C17393D"
Last-Modified: Wed, 18 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7887
Expires: Fri, 20 Jan 2023 10:45:01 GMT
Date: Fri, 20 Jan 2023 08:33:34 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 89055b1f42119cc1e7a33ce2fc364e76
20550fd56bf49a8aa30e18a923be22cda3f2ba7b
7698e9bb59f46011dbd3b6b74fc5784ac60d64c9d8403e8fe3aa18a60c17393d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7698E9BB59F46011DBD3B6B74FC5784AC60D64C9D8403E8FE3AA18A60C17393D"
Last-Modified: Wed, 18 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7887
Expires: Fri, 20 Jan 2023 10:45:01 GMT
Date: Fri, 20 Jan 2023 08:33:34 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 89055b1f42119cc1e7a33ce2fc364e76
20550fd56bf49a8aa30e18a923be22cda3f2ba7b
7698e9bb59f46011dbd3b6b74fc5784ac60d64c9d8403e8fe3aa18a60c17393d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7698E9BB59F46011DBD3B6B74FC5784AC60D64C9D8403E8FE3AA18A60C17393D"
Last-Modified: Wed, 18 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7887
Expires: Fri, 20 Jan 2023 10:45:01 GMT
Date: Fri, 20 Jan 2023 08:33:34 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F03285c30-851a-4892-8ad6-994296dfce51.jpeg
200 OK 5.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F03285c30-851a-4892-8ad6-994296dfce51.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1eff6cdee4c98a6f806c5b417b12cdf2
4b4b817055dc2c0699c6e01d85841638e63d9c0e
2f2fdd1e829e4175e8cf915794ffc16e24dac72ab425448cd0ac5165b1b87b2f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F03285c30-851a-4892-8ad6-994296dfce51.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5351
x-amzn-requestid: 86ba43bc-0b0f-40ba-9015-463371baf673
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e3foQFg_IAMFSZA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c61301-0c1461622a361a5d0ab35cbb;Sampled=0
x-amzn-remapped-date: Tue, 17 Jan 2023 03:16:17 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: XH59pHdrdzBmByq_DN9OlVh-Y3MGiR-V9KzWnaR9QR_7evQt--UOdA==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 981753271eb5b6d11bc29d52f173a5da.cloudfront.net (CloudFront), 1.1 google
date: Fri, 20 Jan 2023 07:09:42 GMT
age: 5032
etag: "4b4b817055dc2c0699c6e01d85841638e63d9c0e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbbb60a79-f6ba-46cb-8679-5da65b53c107.webp
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbbb60a79-f6ba-46cb-8679-5da65b53c107.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3638dc76d0638625ac9a31c038df3a44
deff1903d591273a96d538ae77988d8a080e228c
8382af3843ebeca8e5c13fdd60f7fb92b479915416f36686fce40566fd87ce68
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbbb60a79-f6ba-46cb-8679-5da65b53c107.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10867
x-amzn-requestid: 8d882e21-d4c5-49ac-b76a-198cec065377
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fAnVTEfpoAMFgJA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c9b8ee-6579537e6a82269f4bc99395;Sampled=0
x-amzn-remapped-date: Thu, 19 Jan 2023 21:41:02 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 83ssVBkpe4gl1kI8bKYu90Vee3r32V_IiqQxtvt_TfAFk6DsDfyoTw==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Thu, 19 Jan 2023 22:09:52 GMT
age: 37422
etag: "deff1903d591273a96d538ae77988d8a080e228c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
no-go.kelkoogroup.net/redirect?country=no&k=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&url=https%3A%2F%2Fwww.antonsport.no%2Fnike-8-dri-fit-repel-heritage-m-p23023%2Fsail-light-curry-university-bl-xl-v156648%3Fkk%3Da4c6293-185ce4fcb23-34ad5%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DNike%2BDri-Fit%2BRepel%2BHeritage%2BM%2BSail%252FLight&initiator=timeout
303 See Other 0 B URL HTTP/1.1 no-go.kelkoogroup.net/redirect?country=no&k=612f7a9541cd6ea61eb554c0e4cff437567c460be4e08eed49d56f330fab19bb7fb00e59ad2eb3d7a6323b7e32c65463878b69d413695d9d35d59136f754d567c0f90b7b1908479cccda88d42379d0c2e019a5a5d7275eca49a2c4d3d8ed6bd39d056fdfdd23c1e640fff5f877033f11b1a548c42301f5ebf7ef528ad34ff13d3129212b178e3982b7b969f5c70612a93fa8f012baed9c62244d2b0b41d8884a4bd114f3e781d95c60e7fd4aa3b05841498cc14bfe8957121ee4a4f6aad0557067f9e491ac9029e081fea30f8d839ab5df8c1876fe72da3f7197bdd2c49f75661cc176dd735960832a58e485b3f93b0f6446a556beb7a03521509701a0ee384790b551c3d98ebaf66cce10f01f9bdef0237806a63d35d49c60aff68bbaedaa15eb51167c2d5ae045e1cefc376e8b080890a5939fadcd6cb094a4246e62daa91577f9c2c1b6fcb0f878ce4df91d95a962dabb719653c706bd45339c166005b69c6d0f527fbaba14f4fa9453c438d063328bcd27a6528ba7a0fb605b14134d353368dfab973de1865b56a530330d161162338035f91016ee36b3d7fcb2338191fd6a0dddfa7eba9fa4c816ca5798c00a7e&url=https%3A%2F%2Fwww.antonsport.no%2Fnike-8-dri-fit-repel-heritage-m-p23023%2Fsail-light-curry-university-bl-xl-v156648%3Fkk%3Da4c6293-185ce4fcb23-34ad5%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DNike%2BDri-Fit%2BRepel%2BHeritage%2BM%2BSail%252FLight&initiator=timeout
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /redirect?country=no&k=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&url=https%3A%2F%2Fwww.antonsport.no%2Fnike-8-dri-fit-repel-heritage-m-p23023%2Fsail-light-curry-university-bl-xl-v156648%3Fkk%3Da4c6293-185ce4fcb23-34ad5%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DNike%2BDri-Fit%2BRepel%2BHeritage%2BM%2BSail%252FLight&initiator=timeout HTTP/1.1
Host: no-go.kelkoogroup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no-go.kelkoogroup.net/offersearchGo?.ts=1674143782614&.sig=JyH7VDwqq9mP82l_VOXVNSmaCcI-&affiliationId=96965866&comId=100542281&country=no&offerId=ff97c2e1075a8a3913331ebdf48eb0aa&service=37&tokenId=35e025c3-2943-4e2d-874f-eaee491f9fab&wait=true&addedParams=true&custom1=j3BvtxsmImM0RJCSIQXWymX2uzFeL3W9ZGXkc0Xc0KB75GsUAGXW5KWvuRM8ElLxkapw9Ss6ZJF9IlVakKWjuHsytQF8gwW&custom2=jKWjuHsyVvF8gQBWqwqSExZvyxEmVJrUAQB
Connection: keep-alive
Cookie: datadome=6hkDg-dzhD-Gg9jWuAk1G9y3ysr2qHm_CyXZNGuzYZGP8Udnh0RpT6yIG-h5vEyBPB7SqU4XoF8b8yNoAlnNaG5JlKopAN77mMO__qR3INkDdlwNp7iq76I_9WoGEJJv; kelkooID=a4c6293-185ce4fcb23-34ad5; _ga=GA1.2.344673889.1674203613; _gid=GA1.2.330160368.1674203613
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
HTTP/1.1 303 See Other
leadId: dc1-kls-prod-ls-03.prod.dc1.kelkoo.net_1674203613993_1565841
clickId: 107698147_1674203613987_958601
country: no
Location: https://www.antonsport.no/nike-8-dri-fit-repel-heritage-m-p23023/sail-light-curry-university-bl-xl-v156648?kk=a4c6293-185ce4fcb23-34ad5&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Nike+Dri-Fit+Repel+Heritage+M+Sail%2FLight
Accept-CH: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory
Set-Cookie: datadome=0oAta7mjkgkDrjjQfM1HuXKZcVklfXKJc1btGWfSDDBJDkYtcJr1K6B_cEz5mnW_KI4fhwgV1DWM2DDM4l7PmyHOXNBEkEfo~80yE1gawJSBGgH6_aOy~W_Msf5VbuEz; Max-Age=31536000; Expires=Sat, 20 Jan 2024 08:33:34 GMT; SameSite=Lax; Path=/; Domain=.kelkoogroup.net; Secure
X-DataDome: protected
Request-Time: PT0.012231S
X-Robots-Tag: noindex,nofollow
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: DENY
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: master-only
Date: Fri, 20 Jan 2023 08:33:34 GMT
Content-Length: 0
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa1ca04e6-1065-4245-9b8a-3ffd11238e67.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa1ca04e6-1065-4245-9b8a-3ffd11238e67.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 10654c1f4148826354dc8ccd8a3ed20b
6a53a07e284a316073fb2d40c2515978b662c947
d7d46a3c5470f1ead1b3a992782d4f07f913187f47155c62e13acf511930d569
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa1ca04e6-1065-4245-9b8a-3ffd11238e67.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13383
x-amzn-requestid: c9bade48-e562-4b6c-bd14-c9641643ae09
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fAmRaEodIAMFhow=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c9b73c-3e5ddece6ab24f464b4a6cab;Sampled=0
x-amzn-remapped-date: Thu, 19 Jan 2023 21:33:48 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: MPvJJabVYfTMYR4nuKuxwTx3P3uuw_sOrwBXIrG1O0iYQ8fhZzvAOQ==
via: 1.1 0005a84c2971ff4f5bbb79e7ebc622a8.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Thu, 19 Jan 2023 22:12:56 GMT
etag: "6a53a07e284a316073fb2d40c2515978b662c947"
content-type: image/jpeg
age: 37238
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F51d12cb7-b021-47eb-a0b0-ff949f96b6de.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F51d12cb7-b021-47eb-a0b0-ff949f96b6de.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 86ca07c03adbaa31374225110924b188
b1bd67630aea727a624f00b8cfd660d3b0848de1
471e3db64c9a6ec7ae4a76ea1a0835bd90dc55b389e3fe2f90c18c4dd2dbec27
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F51d12cb7-b021-47eb-a0b0-ff949f96b6de.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10359
x-amzn-requestid: 0f2758cc-430d-4fd0-903a-a9acb7f6f7b1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fAmNKHw7oAMFmDQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c9b720-797bcd6220bfa89f0c7a76e1;Sampled=0
x-amzn-remapped-date: Thu, 19 Jan 2023 21:33:20 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 5F3zD1CI_SJgBrnnUC10ysMwNoxcN_CAhpZT4medpy5I3Nxuzo9MJQ==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Thu, 19 Jan 2023 22:08:45 GMT
age: 37489
etag: "b1bd67630aea727a624f00b8cfd660d3b0848de1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F69ec4951-e455-45b6-b3db-95b5ac8a4e52.webp
200 OK 7.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F69ec4951-e455-45b6-b3db-95b5ac8a4e52.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 268917e31bd0a91c3eb034ab2f418fa2
f55a434f6cd25183862105ac4a37fa42808624ea
636932b142ba88141285ab52b8374984adafdc16051d150e9ee7723e7433c70d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F69ec4951-e455-45b6-b3db-95b5ac8a4e52.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7864
x-amzn-requestid: b50528d7-6bb6-45c9-bc9c-1ce6a7755b27
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fAmNMEZjoAMF1lw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c9b721-398dbc4a60ff6a0a69f29147;Sampled=0
x-amzn-remapped-date: Thu, 19 Jan 2023 21:33:21 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 2dcR0z2FE9gqSofOSntosSTKdOeXzTCsPhO8VELdh_98AfrBVNENUg==
via: 1.1 9b311162717b41c968f6f00426d88aaa.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Thu, 19 Jan 2023 22:08:45 GMT
age: 37489
etag: "f55a434f6cd25183862105ac4a37fa42808624ea"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fccd80a00-28b1-4908-8a08-93d9379c2c2e.jpeg
200 OK 9.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fccd80a00-28b1-4908-8a08-93d9379c2c2e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7fe166bba32d744d841252f3e0e3957e
0f43812cddf63c4b33dbe922c27ca32ce9e6406f
db17ff864c0a82bee284dbcaaabfb5bb8afc7b764e3882b9b9408594d6000c54
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fccd80a00-28b1-4908-8a08-93d9379c2c2e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8968
x-amzn-requestid: ec02528a-588b-46fe-8a37-eae74c3231fe
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e7UZ2EWqoAMF8Cg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c79aa5-3bc049985202e47479d910ac;Sampled=0
x-amzn-remapped-date: Wed, 18 Jan 2023 07:07:17 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Jf6Ad0o0J4U_QLrvkWF4plIdm3zITZkmQoZ-Zw0eYihzCL6RPrV_ig==
via: 1.1 9b311162717b41c968f6f00426d88aaa.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Fri, 20 Jan 2023 07:50:47 GMT
age: 2567
etag: "0f43812cddf63c4b33dbe922c27ca32ce9e6406f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.usertrust.com/
200 OK 471 B IP
Hash 826f12da88be47258bedce09c9c7b5a1
fcb85e1e02c48732ad0e215917b15dbc6172f0a0
b5501702f2fe1ad9e1cc3f64252d3d7fb704bab067ba0435e8919ee137ad8c75
POST / HTTP/1.1
Host: ocsp.usertrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 20 Jan 2023 08:33:34 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 17 Jan 2023 13:51:17 GMT
Expires: Tue, 24 Jan 2023 13:51:16 GMT
Etag: "fcb85e1e02c48732ad0e215917b15dbc6172f0a0"
Cache-Control: max-age=603587,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 948
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78c6774e4830b4ff-OSL
api-js.datadome.co/js/
200 OK 236 B IP
File type JSON data\012- , ASCII text, with no line terminators
Hash d20e6cdf0604663aedab020fafcd4cc3
6f0ec24e4161a2541fddf6895a78e0da66b87057
a04104d8664e4c80efdeeb634181f69481192aa42cd56f5bc13b3c7939c96c81
POST /js/ HTTP/1.1
Host: api-js.datadome.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 4115
Origin: https://no-go.kelkoogroup.net
Connection: keep-alive
Referer: https://no-go.kelkoogroup.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 20 Jan 2023 08:33:34 GMT
content-type: application/json;charset=utf-8
content-length: 236
server: DataDome
access-control-allow-origin: *
pragma: no-cache
cache-control: no-cache, no-store, must-revalidate
expires: 0
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d202273e867b01591672b07722f430fb
4bbab50550b5b6a583e1fcdeb68c1b6b67b0cd87
5b4ab20a3dc9a884b04e727e6d62a1428984126ea975e308c48a6e9b6581146a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 20 Jan 2023 08:33:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google-analytics.com/collect?v=1&_v=j96&t=pageview&_s=1&dl=https%3A%2F%2Fno-go.kelkoogroup.net%2FoffersearchGo%3F.ts%3D1674143782614%26.sig%3DJyH7VDwqq9mP82l_VOXVNSmaCcI-%26affiliationId%3D96965866%26comId%3D100542281%26country%3Dno%26offerId%3Dff97c2e1075a8a3913331ebdf48eb0aa%26service%3D37%26tokenId%3D35e025c3-2943-4e2d-874f-eaee491f9fab%26wait%3Dtrue%26addedParams%3Dtrue%26custom1%3Dj3BvtxsmImM0RJCSIQXWymX2uzFeL3W9ZGXkc0Xc0KB75GsUAGXW5KWvuRM8ElLxkapw9Ss6ZJF9IlVakKWjuHsytQF8gwW%26custom2%3DjKWjuHsyVvF8gQBWqwqSExZvyxEmVJrUAQB&dr=http%3A%2F%2Fr.redirekted.com%2F&dp=%2F96965866%7C100542281%7C&ul=en-us&de=UTF-8&dt=Du%20sendes%20videre%20til%20Antonsport.no&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=QACAAAABAAAAAC~&cid=344673889.1674203613&tid=UA-168544891-6&_gid=330160368.1674203613&_r=1&cd1=96965866&cd2=dc1-kls-prod-ls-03.prod.dc1.kelkoo.net_1674203613993_1565841&cd3=100542281&cd4=a4c6293-185ce4fcb23-34ad5&cd5=&cd6=96965866%7C100542281%7C&z=1335551483
200 OK 35 B URL HTTP/2 www.google-analytics.com/collect?v=1&_v=j96&t=pageview&_s=1&dl=https%3A%2F%2Fno-go.kelkoogroup.net%2FoffersearchGo%3F.ts%3D1674143782614%26.sig%3DJyH7VDwqq9mP82l_VOXVNSmaCcI-%26affiliationId%3D96965866%26comId%3D100542281%26country%3Dno%26offerId%3Dff97c2e1075a8a3913331ebdf48eb0aa%26service%3D37%26tokenId%3D35e025c3-2943-4e2d-874f-eaee491f9fab%26wait%3Dtrue%26addedParams%3Dtrue%26custom1%3Dj3BvtxsmImM0RJCSIQXWymX2uzFeL3W9ZGXkc0Xc0KB75GsUAGXW5KWvuRM8ElLxkapw9Ss6ZJF9IlVakKWjuHsytQF8gwW%26custom2%3DjKWjuHsyVvF8gQBWqwqSExZvyxEmVJrUAQB&dr=http%3A%2F%2Fr.redirekted.com%2F&dp=%2F96965866%7C100542281%7C&ul=en-us&de=UTF-8&dt=Du%20sendes%20videre%20til%20Antonsport.no&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=QACAAAABAAAAAC~&cid=344673889.1674203613&tid=UA-168544891-6&_gid=330160368.1674203613&_r=1&cd1=96965866&cd2=dc1-kls-prod-ls-03.prod.dc1.kelkoo.net_1674203613993_1565841&cd3=100542281&cd4=a4c6293-185ce4fcb23-34ad5&cd5=&cd6=96965866%7C100542281%7C&z=1335551483
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
POST /collect?v=1&_v=j96&t=pageview&_s=1&dl=https%3A%2F%2Fno-go.kelkoogroup.net%2FoffersearchGo%3F.ts%3D1674143782614%26.sig%3DJyH7VDwqq9mP82l_VOXVNSmaCcI-%26affiliationId%3D96965866%26comId%3D100542281%26country%3Dno%26offerId%3Dff97c2e1075a8a3913331ebdf48eb0aa%26service%3D37%26tokenId%3D35e025c3-2943-4e2d-874f-eaee491f9fab%26wait%3Dtrue%26addedParams%3Dtrue%26custom1%3Dj3BvtxsmImM0RJCSIQXWymX2uzFeL3W9ZGXkc0Xc0KB75GsUAGXW5KWvuRM8ElLxkapw9Ss6ZJF9IlVakKWjuHsytQF8gwW%26custom2%3DjKWjuHsyVvF8gQBWqwqSExZvyxEmVJrUAQB&dr=http%3A%2F%2Fr.redirekted.com%2F&dp=%2F96965866%7C100542281%7C&ul=en-us&de=UTF-8&dt=Du%20sendes%20videre%20til%20Antonsport.no&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=QACAAAABAAAAAC~&cid=344673889.1674203613&tid=UA-168544891-6&_gid=330160368.1674203613&_r=1&cd1=96965866&cd2=dc1-kls-prod-ls-03.prod.dc1.kelkoo.net_1674203613993_1565841&cd3=100542281&cd4=a4c6293-185ce4fcb23-34ad5&cd5=&cd6=96965866%7C100542281%7C&z=1335551483 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://no-go.kelkoogroup.net
Connection: keep-alive
Referer: https://no-go.kelkoogroup.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 200 OK
access-control-allow-origin: https://no-go.kelkoogroup.net
date: Fri, 20 Jan 2023 08:33:34 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
x-content-type-options: nosniff
access-control-allow-credentials: true
content-type: image/gif
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 35
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d202273e867b01591672b07722f430fb
4bbab50550b5b6a583e1fcdeb68c1b6b67b0cd87
5b4ab20a3dc9a884b04e727e6d62a1428984126ea975e308c48a6e9b6581146a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 20 Jan 2023 08:33:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 149a7cdd0e94d31b2237ac241b3bad35
c6e2c3aba0c96ffc26114f79306930a4554964b3
fe9cd8e03a847278924ed338131b5ef16b8ef315db81f3e6387c0621baa46232
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 20 Jan 2023 08:33:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/recaptcha/api.js?render=6LcHIFQiAAAAAH-HFy6MtH6V1w9w3-4rwhmNjyKq
200 OK 587 B URL HTTP/2 www.google.com/recaptcha/api.js?render=6LcHIFQiAAAAAH-HFy6MtH6V1w9w3-4rwhmNjyKq
IP
File type ASCII text, with very long lines (884), with no line terminators
Hash cb741a62271ac8f5cdd77d4bd24ccc95
06949326ac157d928c02cc3b7c3e2a09b3799b53
1ed1e4d1d90af73fcef1b62b12f264e858bc8364f8076327479c963b3717c9a8
GET /recaptcha/api.js?render=6LcHIFQiAAAAAH-HFy6MtH6V1w9w3-4rwhmNjyKq HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.antonsport.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Fri, 20 Jan 2023 08:33:35 GMT
date: Fri, 20 Jan 2023 08:33:35 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 587
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 623f341fa3fd0e09d3a2b649ea882919
98c12490034b5633fcc6386b627947806495fc61
edf2873ae5aee565800ffbd38c62519e683adf9f4624bd49af202b64f158f5eb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 20 Jan 2023 08:33:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
antonclub-res.cloudinary.com/image/upload/e_trim:0/c_fit,g_center,w_363,h_223/q_auto/bqrct7oh7fh19nucs80p.webp
200 OK 5.1 kB URL HTTP/2 antonclub-res.cloudinary.com/image/upload/e_trim:0/c_fit,g_center,w_363,h_223/q_auto/bqrct7oh7fh19nucs80p.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash e801e58bb0ea7d4becc89c8effe1b53b
ec6ac4fd24d0077acbd19512d2388531a47710f4
67f7915f7386fb255738ed1d37bbb7b5a338a6610f754070e2c8161d256be475
GET /image/upload/e_trim:0/c_fit,g_center,w_363,h_223/q_auto/bqrct7oh7fh19nucs80p.webp HTTP/1.1
Host: antonclub-res.cloudinary.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.antonsport.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-disposition: inline; filename="bqrct7oh7fh19nucs80p.webp"
content-type: image/webp
etag: "e801e58bb0ea7d4becc89c8effe1b53b"
last-modified: Wed, 30 Nov 2022 15:51:57 GMT
content-length: 5128
date: Fri, 20 Jan 2023 08:33:35 GMT
cache-control: private, no-transform, immutable, max-age=31536000
access-control-expose-headers: Content-Length,Content-Disposition,Content-Range,Etag,Server-Timing,Vary,X-Cld-Error,X-Content-Type-Options
access-control-allow-origin: *
accept-ranges: bytes
timing-allow-origin: *
server: Cloudinary
strict-transport-security: max-age=604800
vary: Save-Data
x-content-type-options: nosniff
server-timing: akam;dur=3;start=2023-01-20T08:33:35.401Z;desc=hit,rtt;dur=9
X-Firefox-Spdy: h2
antonclub-res.cloudinary.com/image/upload/e_trim:0/c_fit,g_center,w_363,h_223/q_auto/rd37rrooznhk0a3owp6z.webp
200 OK 7.1 kB URL HTTP/2 antonclub-res.cloudinary.com/image/upload/e_trim:0/c_fit,g_center,w_363,h_223/q_auto/rd37rrooznhk0a3owp6z.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 9a0eb3a3403db63faa5c85a05fbcae96
891b115be09d927096eb6110ea53d35800e066ed
997266c6b6540b06013260ef2d7bb68e0cd990b5d2c825af3312a60e3341b9b0
GET /image/upload/e_trim:0/c_fit,g_center,w_363,h_223/q_auto/rd37rrooznhk0a3owp6z.webp HTTP/1.1
Host: antonclub-res.cloudinary.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.antonsport.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-disposition: inline; filename="rd37rrooznhk0a3owp6z.webp"
content-type: image/webp
etag: "9a0eb3a3403db63faa5c85a05fbcae96"
last-modified: Wed, 30 Nov 2022 15:51:57 GMT
content-length: 7096
date: Fri, 20 Jan 2023 08:33:35 GMT
cache-control: private, no-transform, immutable, max-age=31536000
access-control-expose-headers: Content-Length,Content-Disposition,Content-Range,Etag,Server-Timing,Vary,X-Cld-Error,X-Content-Type-Options
access-control-allow-origin: *
accept-ranges: bytes
timing-allow-origin: *
server: Cloudinary
strict-transport-security: max-age=604800
vary: Save-Data
x-content-type-options: nosniff
server-timing: akam;dur=3;start=2023-01-20T08:33:35.401Z;desc=hit,rtt;dur=9
X-Firefox-Spdy: h2
antonclub-res.cloudinary.com/image/upload/e_trim:0/c_fit,g_center,w_363,h_223/q_auto/n4ylepsth0mxlme6daor.webp
200 OK 5.0 kB URL HTTP/2 antonclub-res.cloudinary.com/image/upload/e_trim:0/c_fit,g_center,w_363,h_223/q_auto/n4ylepsth0mxlme6daor.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 170ef166b622207e18d0a20d51490605
f0468326627d086e953e442fa8916bcac535e1b1
cce9b625df29ea3b85a42b1ea78adb350af908e529df8681cb92dd4bb07ab6c3
GET /image/upload/e_trim:0/c_fit,g_center,w_363,h_223/q_auto/n4ylepsth0mxlme6daor.webp HTTP/1.1
Host: antonclub-res.cloudinary.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.antonsport.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-disposition: inline; filename="n4ylepsth0mxlme6daor.webp"
content-type: image/webp
etag: "170ef166b622207e18d0a20d51490605"
last-modified: Tue, 15 Nov 2022 18:14:34 GMT
content-length: 5030
date: Fri, 20 Jan 2023 08:33:35 GMT
cache-control: private, no-transform, immutable, max-age=31536000
access-control-expose-headers: Content-Length,Content-Disposition,Content-Range,Etag,Server-Timing,Vary,X-Cld-Error,X-Content-Type-Options
access-control-allow-origin: *
accept-ranges: bytes
timing-allow-origin: *
server: Cloudinary
strict-transport-security: max-age=604800
vary: Save-Data
x-content-type-options: nosniff
server-timing: akam;dur=3;start=2023-01-20T08:33:35.401Z;desc=hit,rtt;dur=9
X-Firefox-Spdy: h2
antonclub-res.cloudinary.com/image/upload/e_trim:0/c_fit,g_center,w_363,h_223/q_auto/ahfbppicrpu9xusmjw61.webp
200 OK 4.8 kB URL HTTP/2 antonclub-res.cloudinary.com/image/upload/e_trim:0/c_fit,g_center,w_363,h_223/q_auto/ahfbppicrpu9xusmjw61.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 90ea52ac3afc5c06330c4b613b0c921d
5de8a517b0c7aa00301d35d6c7557804ff30fbda
3f1945f6ee2b4fd59e9b575a757daea44a1d0609797402c9c89b3cec118ae26e
GET /image/upload/e_trim:0/c_fit,g_center,w_363,h_223/q_auto/ahfbppicrpu9xusmjw61.webp HTTP/1.1
Host: antonclub-res.cloudinary.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.antonsport.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-disposition: inline; filename="ahfbppicrpu9xusmjw61.webp"
content-type: image/webp
etag: "90ea52ac3afc5c06330c4b613b0c921d"
last-modified: Thu, 01 Dec 2022 12:21:33 GMT
content-length: 4786
date: Fri, 20 Jan 2023 08:33:35 GMT
cache-control: private, no-transform, immutable, max-age=31536000
access-control-expose-headers: Content-Length,Content-Disposition,Content-Range,Etag,Server-Timing,Vary,X-Cld-Error,X-Content-Type-Options
access-control-allow-origin: *
accept-ranges: bytes
timing-allow-origin: *
server: Cloudinary
strict-transport-security: max-age=604800
vary: Save-Data
x-content-type-options: nosniff
server-timing: akam;dur=3;start=2023-01-20T08:33:35.401Z;desc=hit,rtt;dur=9
X-Firefox-Spdy: h2
antonclub-res.cloudinary.com/image/upload/e_trim:0/c_fit,g_center,w_363,h_223/q_auto/fc7rp0iwdqjqky9uwbea.webp
200 OK 10 kB URL HTTP/2 antonclub-res.cloudinary.com/image/upload/e_trim:0/c_fit,g_center,w_363,h_223/q_auto/fc7rp0iwdqjqky9uwbea.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash da17ec7ec48bed1cb0b983936196e47f
fb2e790c1b6b6ef08b3faa0f45e7acae73c741d8
8b51ddce805afde76c684fca136d0d216fc6d2013082d37fecd4e446d7170546
GET /image/upload/e_trim:0/c_fit,g_center,w_363,h_223/q_auto/fc7rp0iwdqjqky9uwbea.webp HTTP/1.1
Host: antonclub-res.cloudinary.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.antonsport.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-disposition: inline; filename="fc7rp0iwdqjqky9uwbea.webp"
content-type: image/webp
etag: "da17ec7ec48bed1cb0b983936196e47f"
last-modified: Wed, 30 Nov 2022 15:51:57 GMT
content-length: 10194
date: Fri, 20 Jan 2023 08:33:35 GMT
cache-control: private, no-transform, immutable, max-age=31536000
access-control-expose-headers: Content-Length,Content-Disposition,Content-Range,Etag,Server-Timing,Vary,X-Cld-Error,X-Content-Type-Options
access-control-allow-origin: *
accept-ranges: bytes
timing-allow-origin: *
server: Cloudinary
strict-transport-security: max-age=604800
vary: Save-Data
x-content-type-options: nosniff
server-timing: akam;dur=3;start=2023-01-20T08:33:35.401Z;desc=hit,rtt;dur=9
X-Firefox-Spdy: h2
antonclub-res.cloudinary.com/image/upload/e_trim:0/c_fit,g_center,w_363,h_223/q_auto/xnsldmaedtvmjdnz0ib1.webp
200 OK 7.4 kB URL HTTP/2 antonclub-res.cloudinary.com/image/upload/e_trim:0/c_fit,g_center,w_363,h_223/q_auto/xnsldmaedtvmjdnz0ib1.webp
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 363x163, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 85ac21df5a124a2dabca9e5b08469601
aeaf6c5bd86ce6d2bf4cda388e6660344728fec1
8c0ae7592e5fcf0ea38c8fc43eb2233278e1ef7dad7779e812c50b62dede9837
GET /image/upload/e_trim:0/c_fit,g_center,w_363,h_223/q_auto/xnsldmaedtvmjdnz0ib1.webp HTTP/1.1
Host: antonclub-res.cloudinary.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.antonsport.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-disposition: inline; filename="xnsldmaedtvmjdnz0ib1.webp"
content-type: image/webp
etag: "85ac21df5a124a2dabca9e5b08469601"
last-modified: Mon, 27 Jun 2022 09:26:34 GMT
content-length: 7410
date: Fri, 20 Jan 2023 08:33:35 GMT
cache-control: private, no-transform, immutable, max-age=31536000
access-control-expose-headers: Content-Length,Content-Disposition,Content-Range,Etag,Server-Timing,Vary,X-Cld-Error,X-Content-Type-Options
access-control-allow-origin: *
accept-ranges: bytes
timing-allow-origin: *
server: Cloudinary
strict-transport-security: max-age=604800
vary: Save-Data
x-content-type-options: nosniff
server-timing: akam;dur=4;start=2023-01-20T08:33:35.401Z;desc=hit,rtt;dur=9
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d202273e867b01591672b07722f430fb
4bbab50550b5b6a583e1fcdeb68c1b6b67b0cd87
5b4ab20a3dc9a884b04e727e6d62a1428984126ea975e308c48a6e9b6581146a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 20 Jan 2023 08:33:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
antonclub-res.cloudinary.com/image/upload/e_trim:0/w_75,h_75,c_fit,c_limit/e_unsharp_mask:50/q_auto,f_auto/c8vlavltntp4gbbufoul
200 OK 672 B URL HTTP/2 antonclub-res.cloudinary.com/image/upload/e_trim:0/w_75,h_75,c_fit,c_limit/e_unsharp_mask:50/q_auto,f_auto/c8vlavltntp4gbbufoul
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 39x75, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 033a1065c1343120ff9418164b07f603
c2b382a2ef667f1a12c85a09506480c4c317c2f2
55f5d4ae47da6fc3f47e12b9e9e5c18f56abc938caf2dea8807b3d8ebe5862f7
GET /image/upload/e_trim:0/w_75,h_75,c_fit,c_limit/e_unsharp_mask:50/q_auto,f_auto/c8vlavltntp4gbbufoul HTTP/1.1
Host: antonclub-res.cloudinary.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.antonsport.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-disposition: inline; filename="c8vlavltntp4gbbufoul.webp"
content-type: image/webp
etag: "033a1065c1343120ff9418164b07f603"
last-modified: Tue, 14 Jun 2022 08:45:16 GMT
content-length: 672
date: Fri, 20 Jan 2023 08:33:35 GMT
cache-control: private, no-transform, immutable, max-age=31536000
access-control-expose-headers: Content-Length,Content-Disposition,Content-Range,Etag,Server-Timing,Vary,X-Cld-Error,X-Content-Type-Options
access-control-allow-origin: *
accept-ranges: bytes
timing-allow-origin: *
server: Cloudinary
strict-transport-security: max-age=604800
vary: Accept,User-Agent,Save-Data
x-content-type-options: nosniff
server-timing: akam;dur=180;cpu=41;start=2023-01-20T08:33:35.402Z;desc=miss,rtt;dur=9,cloudinary;dur=59;start=2023-01-20T08:33:35.469Z
X-Firefox-Spdy: h2
antonclub-res.cloudinary.com/image/upload/e_trim:0/w_75,h_75,c_fit,c_limit/e_unsharp_mask:50/q_auto,f_auto/ylpqqdvhyk3b64o7zfqc
200 OK 908 B URL HTTP/2 antonclub-res.cloudinary.com/image/upload/e_trim:0/w_75,h_75,c_fit,c_limit/e_unsharp_mask:50/q_auto,f_auto/ylpqqdvhyk3b64o7zfqc
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 75x74, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 4f9f33366f0486ecc859278cb0092c2d
f2f79a778c3dc7dabb117ab6e6e70f89e44f5264
c463ea239e43e41c5a09bd7dece8b30498621a7a65ac6887091de3f8c6d4d8fc
GET /image/upload/e_trim:0/w_75,h_75,c_fit,c_limit/e_unsharp_mask:50/q_auto,f_auto/ylpqqdvhyk3b64o7zfqc HTTP/1.1
Host: antonclub-res.cloudinary.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.antonsport.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-disposition: inline; filename="ylpqqdvhyk3b64o7zfqc.webp"
content-type: image/webp
etag: "4f9f33366f0486ecc859278cb0092c2d"
last-modified: Tue, 14 Jun 2022 08:45:16 GMT
content-length: 908
date: Fri, 20 Jan 2023 08:33:35 GMT
cache-control: private, no-transform, immutable, max-age=31536000
access-control-expose-headers: Content-Length,Content-Disposition,Content-Range,Etag,Server-Timing,Vary,X-Cld-Error,X-Content-Type-Options
access-control-allow-origin: *
accept-ranges: bytes
timing-allow-origin: *
server: Cloudinary
strict-transport-security: max-age=604800
vary: Accept,User-Agent,Save-Data
x-content-type-options: nosniff
server-timing: akam;dur=176;cpu=41;start=2023-01-20T08:33:35.411Z;desc=miss,rtt;dur=5,cloudinary;dur=56;start=2023-01-20T08:33:35.478Z
X-Firefox-Spdy: h2
magicwidget.socialboards.com/magic-widget.js
200 OK 32 kB URL HTTP/2 magicwidget.socialboards.com/magic-widget.js
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (54396)
Hash b7b5ba6ee6cca14a80e3af4132427372
b9ad4faa6292113c8099a1fa7c60b4f360a05ba3
11dc4647ed9fbf81200b66f66b907a5f44a1acf1a3004cf7a2e8323cbfaa472b
GET /magic-widget.js HTTP/1.1
Host: magicwidget.socialboards.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.antonsport.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/x-javascript
date: Fri, 20 Jan 2023 08:33:34 GMT
server: Microsoft-IIS/10.0
accept-ranges: bytes
content-encoding: gzip
etag: "090ddcfa81bd91:0"
last-modified: Thu, 29 Dec 2022 17:13:04 GMT
set-cookie: ARRAffinity=942672fa603ff230f208dabc93a617b647bf22f55a8b81877b67daddd28941dc;Path=/;HttpOnly;Secure;Domain=magicwidget.socialboards.com
ARRAffinitySameSite=942672fa603ff230f208dabc93a617b647bf22f55a8b81877b67daddd28941dc;Path=/;HttpOnly;SameSite=None;Secure;Domain=magicwidget.socialboards.com
vary: Accept-Encoding
content-length: 31480
x-powered-by: ASP.NET
X-Firefox-Spdy: h2
antonclub-res.cloudinary.com/image/upload/e_trim:0/c_lpad,g_center,w_60,h_60/q_auto/ixtk0xq3qoxe0mugcv5s.webp
200 OK 516 B URL HTTP/2 antonclub-res.cloudinary.com/image/upload/e_trim:0/c_lpad,g_center,w_60,h_60/q_auto/ixtk0xq3qoxe0mugcv5s.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 630c89284c018df8fd6f97105b35462f
5d3b00428c973c54aea12abb62fd93e94182c800
3793144998c8a89c2bdeb5be75d266d70b087d0da63364909cb28e12c45f582a
GET /image/upload/e_trim:0/c_lpad,g_center,w_60,h_60/q_auto/ixtk0xq3qoxe0mugcv5s.webp HTTP/1.1
Host: antonclub-res.cloudinary.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.antonsport.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-disposition: inline; filename="ixtk0xq3qoxe0mugcv5s.webp"
content-type: image/webp
etag: "630c89284c018df8fd6f97105b35462f"
last-modified: Tue, 14 Jun 2022 08:45:13 GMT
content-length: 516
date: Fri, 20 Jan 2023 08:33:35 GMT
cache-control: private, no-transform, immutable, max-age=31536000
access-control-expose-headers: Content-Length,Content-Disposition,Content-Range,Etag,Server-Timing,Vary,X-Cld-Error,X-Content-Type-Options
access-control-allow-origin: *
accept-ranges: bytes
timing-allow-origin: *
server: Cloudinary
strict-transport-security: max-age=604800
vary: Save-Data
x-content-type-options: nosniff
server-timing: akam;dur=201;cpu=40;start=2023-01-20T08:33:35.396Z;desc=miss,rtt;dur=9,cloudinary;dur=84;start=2023-01-20T08:33:35.461Z
X-Firefox-Spdy: h2
antonclub-res.cloudinary.com/image/upload/e_trim:0/w_75,h_75,c_fit,c_limit/e_unsharp_mask:50/q_auto,f_auto/w02lzenh7s8r3ofb84rf
200 OK 440 B URL HTTP/2 antonclub-res.cloudinary.com/image/upload/e_trim:0/w_75,h_75,c_fit,c_limit/e_unsharp_mask:50/q_auto,f_auto/w02lzenh7s8r3ofb84rf
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 75x75, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash a4996ce8f892d96f312f6305b9e6dd7e
4bfdc2d8903162ef788864b61dc5942904b00f02
0da5de8665c65a3725df6a2b574f3259c188f18b44239d57b17003bdb9c04f52
GET /image/upload/e_trim:0/w_75,h_75,c_fit,c_limit/e_unsharp_mask:50/q_auto,f_auto/w02lzenh7s8r3ofb84rf HTTP/1.1
Host: antonclub-res.cloudinary.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.antonsport.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-disposition: inline; filename="w02lzenh7s8r3ofb84rf.webp"
content-type: image/webp
etag: "a4996ce8f892d96f312f6305b9e6dd7e"
last-modified: Tue, 14 Jun 2022 08:45:16 GMT
content-length: 440
date: Fri, 20 Jan 2023 08:33:35 GMT
cache-control: private, no-transform, immutable, max-age=31536000
access-control-expose-headers: Content-Length,Content-Disposition,Content-Range,Etag,Server-Timing,Vary,X-Cld-Error,X-Content-Type-Options
access-control-allow-origin: *
accept-ranges: bytes
timing-allow-origin: *
server: Cloudinary
strict-transport-security: max-age=604800
vary: Accept,User-Agent,Save-Data
x-content-type-options: nosniff
server-timing: akam;dur=186;cpu=41;start=2023-01-20T08:33:35.421Z;desc=miss,rtt;dur=5,cloudinary;dur=66;start=2023-01-20T08:33:35.489Z
X-Firefox-Spdy: h2
antonclub-res.cloudinary.com/image/upload/e_trim:0/w_75,h_75,c_fit,c_limit/e_unsharp_mask:50/q_auto,f_auto/ixtk0xq3qoxe0mugcv5s
200 OK 748 B URL HTTP/2 antonclub-res.cloudinary.com/image/upload/e_trim:0/w_75,h_75,c_fit,c_limit/e_unsharp_mask:50/q_auto,f_auto/ixtk0xq3qoxe0mugcv5s
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 38x75, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash d9a2be451d3a2faf3df0ef5c241e8561
71e1557eb4e0ff2c94c65d1a09c4039183664b96
9946ba36a2473acca85f7bf2104c5f7db50b4421ff63af99aa376ac2039aaaf4
GET /image/upload/e_trim:0/w_75,h_75,c_fit,c_limit/e_unsharp_mask:50/q_auto,f_auto/ixtk0xq3qoxe0mugcv5s HTTP/1.1
Host: antonclub-res.cloudinary.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.antonsport.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-disposition: inline; filename="ixtk0xq3qoxe0mugcv5s.webp"
content-type: image/webp
etag: "d9a2be451d3a2faf3df0ef5c241e8561"
last-modified: Tue, 14 Jun 2022 08:45:16 GMT
content-length: 748
date: Fri, 20 Jan 2023 08:33:35 GMT
cache-control: private, no-transform, immutable, max-age=31536000
access-control-expose-headers: Content-Length,Content-Disposition,Content-Range,Etag,Server-Timing,Vary,X-Cld-Error,X-Content-Type-Options
access-control-allow-origin: *
accept-ranges: bytes
timing-allow-origin: *
server: Cloudinary
strict-transport-security: max-age=604800
vary: Accept,User-Agent,Save-Data
x-content-type-options: nosniff
server-timing: akam;dur=209;cpu=41;start=2023-01-20T08:33:35.401Z;desc=miss,rtt;dur=9,cloudinary;dur=89;start=2023-01-20T08:33:35.466Z
X-Firefox-Spdy: h2
antonclub-res.cloudinary.com/image/upload/e_trim:0/c_lpad,g_center,w_60,h_60/q_auto/spqppsjkvaw891jfzgli.webp
200 OK 1.5 kB URL HTTP/2 antonclub-res.cloudinary.com/image/upload/e_trim:0/c_lpad,g_center,w_60,h_60/q_auto/spqppsjkvaw891jfzgli.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash aa07d6ee1813a32b3a3b761664fff808
e22f4a3a7d500a7680a5ad9248e9dc42614c6514
0b8de5210aa8e9dc45b63c7fe41ade5a6ec10102e71a26cc5a0c31df91d35b35
GET /image/upload/e_trim:0/c_lpad,g_center,w_60,h_60/q_auto/spqppsjkvaw891jfzgli.webp HTTP/1.1
Host: antonclub-res.cloudinary.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.antonsport.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-disposition: inline; filename="spqppsjkvaw891jfzgli.webp"
content-type: image/webp
etag: "aa07d6ee1813a32b3a3b761664fff808"
last-modified: Wed, 08 Jun 2022 15:01:48 GMT
content-length: 1504
date: Fri, 20 Jan 2023 08:33:35 GMT
cache-control: private, no-transform, immutable, max-age=31536000
access-control-expose-headers: Content-Length,Content-Disposition,Content-Range,Etag,Server-Timing,Vary,X-Cld-Error,X-Content-Type-Options
access-control-allow-origin: *
accept-ranges: bytes
timing-allow-origin: *
server: Cloudinary
strict-transport-security: max-age=604800
vary: Save-Data
x-content-type-options: nosniff
server-timing: akam;dur=201;cpu=43;start=2023-01-20T08:33:35.421Z;desc=miss,rtt;dur=5,cloudinary;dur=79;start=2023-01-20T08:33:35.490Z
X-Firefox-Spdy: h2
antonclub-res.cloudinary.com/image/upload/e_trim:0/w_75,h_75,c_fit,c_limit/e_unsharp_mask:50/q_auto,f_auto/g1petx6ej7mnbtrqt457
200 OK 894 B URL HTTP/2 antonclub-res.cloudinary.com/image/upload/e_trim:0/w_75,h_75,c_fit,c_limit/e_unsharp_mask:50/q_auto,f_auto/g1petx6ej7mnbtrqt457
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 75x75, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 8d8507c62bd48b1e0ff0c3fbac475823
bcd2bd56cd9e5cc3577e3cffdb080f376162b653
8a2f933254838cf43c2808fba24d9db038eef504f8226cd8fd63ec5efa860b05
GET /image/upload/e_trim:0/w_75,h_75,c_fit,c_limit/e_unsharp_mask:50/q_auto,f_auto/g1petx6ej7mnbtrqt457 HTTP/1.1
Host: antonclub-res.cloudinary.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.antonsport.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-disposition: inline; filename="g1petx6ej7mnbtrqt457.webp"
content-type: image/webp
etag: "8d8507c62bd48b1e0ff0c3fbac475823"
last-modified: Tue, 14 Jun 2022 08:45:16 GMT
content-length: 894
date: Fri, 20 Jan 2023 08:33:35 GMT
cache-control: private, no-transform, immutable, max-age=31536000
access-control-expose-headers: Content-Length,Content-Disposition,Content-Range,Etag,Server-Timing,Vary,X-Cld-Error,X-Content-Type-Options
access-control-allow-origin: *
accept-ranges: bytes
timing-allow-origin: *
server: Cloudinary
strict-transport-security: max-age=604800
vary: Accept,User-Agent,Save-Data
x-content-type-options: nosniff
server-timing: akam;dur=218;cpu=39;start=2023-01-20T08:33:35.411Z;desc=miss,rtt;dur=5,cloudinary;dur=99;start=2023-01-20T08:33:35.477Z
X-Firefox-Spdy: h2
antonclub-res.cloudinary.com/image/upload/e_trim:0/w_75,h_75,c_fit,c_limit/e_unsharp_mask:50/q_auto,f_auto/jmgghslherwrhpadhls2
200 OK 744 B URL HTTP/2 antonclub-res.cloudinary.com/image/upload/e_trim:0/w_75,h_75,c_fit,c_limit/e_unsharp_mask:50/q_auto,f_auto/jmgghslherwrhpadhls2
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 75x75, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 2fbab0e46ca5418ab3fca3f29077ed4e
93367bcaa8e1043422c4c55fec06952802fb545d
9300f677539488e8474b6bd2b2ccf052594b7912dee25e04ef2fd918fc7e5104
GET /image/upload/e_trim:0/w_75,h_75,c_fit,c_limit/e_unsharp_mask:50/q_auto,f_auto/jmgghslherwrhpadhls2 HTTP/1.1
Host: antonclub-res.cloudinary.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.antonsport.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-disposition: inline; filename="jmgghslherwrhpadhls2.webp"
content-type: image/webp
etag: "2fbab0e46ca5418ab3fca3f29077ed4e"
last-modified: Tue, 14 Jun 2022 08:45:16 GMT
content-length: 744
date: Fri, 20 Jan 2023 08:33:35 GMT
cache-control: private, no-transform, immutable, max-age=31536000
access-control-expose-headers: Content-Length,Content-Disposition,Content-Range,Etag,Server-Timing,Vary,X-Cld-Error,X-Content-Type-Options
access-control-allow-origin: *
accept-ranges: bytes
timing-allow-origin: *
server: Cloudinary
strict-transport-security: max-age=604800
vary: Accept,User-Agent,Save-Data
x-content-type-options: nosniff
server-timing: akam;dur=233;cpu=38;start=2023-01-20T08:33:35.416Z;desc=miss,rtt;dur=5,cloudinary;dur=116;start=2023-01-20T08:33:35.480Z
X-Firefox-Spdy: h2
antonclub-res.cloudinary.com/image/upload/e_trim:0/w_75,h_75,c_fit,c_limit/e_unsharp_mask:50/q_auto,f_auto/cbbh2ac1hhi9dyg8dbks
200 OK 520 B URL HTTP/2 antonclub-res.cloudinary.com/image/upload/e_trim:0/w_75,h_75,c_fit,c_limit/e_unsharp_mask:50/q_auto,f_auto/cbbh2ac1hhi9dyg8dbks
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 75x75, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash f63102940660dca65ac23f404f467904
85fa064d69097f9529a5ce0c989a956b9112e109
060776d78e1248ec15074f5b0e5ae817af911cb8d8df72fce148ac61f79445a9
GET /image/upload/e_trim:0/w_75,h_75,c_fit,c_limit/e_unsharp_mask:50/q_auto,f_auto/cbbh2ac1hhi9dyg8dbks HTTP/1.1
Host: antonclub-res.cloudinary.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.antonsport.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-disposition: inline; filename="cbbh2ac1hhi9dyg8dbks.webp"
content-type: image/webp
etag: "f63102940660dca65ac23f404f467904"
last-modified: Tue, 14 Jun 2022 08:45:16 GMT
content-length: 520
date: Fri, 20 Jan 2023 08:33:35 GMT
cache-control: private, no-transform, immutable, max-age=31536000
access-control-expose-headers: Content-Length,Content-Disposition,Content-Range,Etag,Server-Timing,Vary,X-Cld-Error,X-Content-Type-Options
access-control-allow-origin: *
accept-ranges: bytes
timing-allow-origin: *
server: Cloudinary
strict-transport-security: max-age=604800
vary: Accept,User-Agent,Save-Data
x-content-type-options: nosniff
server-timing: akam;dur=253;cpu=38;start=2023-01-20T08:33:35.417Z;desc=miss,rtt;dur=5,cloudinary;dur=135;start=2023-01-20T08:33:35.482Z
X-Firefox-Spdy: h2
magicwidgetapi.socialboards.com/api/chat/settings?communityName=antonsport&widgetId=1013&language=1
200 OK 1.5 kB URL HTTP/2 magicwidgetapi.socialboards.com/api/chat/settings?communityName=antonsport&widgetId=1013&language=1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type JSON data\012- HTML document, Unicode text, UTF-8 text, with very long lines (341), with CRLF line terminators
Hash b8ec79bf1cfb246513cfc4c34ad86eaf
498e6de436b4b41ad4a8c9e0b5e5e9d044fa808f
4f79bbe88617dceef5634e34db885c4a2c9d2fe6d7a7b23d3ef9edb9ea2f59e4
GET /api/chat/settings?communityName=antonsport&widgetId=1013&language=1 HTTP/1.1
Host: magicwidgetapi.socialboards.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.antonsport.no
Connection: keep-alive
Referer: https://www.antonsport.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json; charset=utf-8
date: Fri, 20 Jan 2023 08:33:35 GMT
server: Microsoft-IIS/10.0
access-control-allow-credentials: true
access-control-allow-origin: https://www.antonsport.no
cache-control: no-cache, no-store, must-revalidate
content-encoding: gzip
expires: -1
pragma: no-cache
vary: Accept-Encoding
content-length: 1487
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 24d3800c92aba293179c4c8a70110155
66fb2c382fa559f3b546932fa1be0b122321977e
eaa3317a574493890a5ff66f4aeb8f38e29d03572ea3d3c74c88b565d3fa8490
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 20 Jan 2023 08:33:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
pagead2.googlesyndication.com/pagead/landing?gcs=G101&gcd=G101&rnd=2020747657.1674203615&url=https%3A%2F%2Fwww.antonsport.no%2Fnike-8-dri-fit-repel-heritage-m-p23023%2Fsail-light-curry-university-bl-xl-v156648>m=2wg1i0PD2NKQ
200 OK 42 B URL HTTP/2 pagead2.googlesyndication.com/pagead/landing?gcs=G101&gcd=G101&rnd=2020747657.1674203615&url=https%3A%2F%2Fwww.antonsport.no%2Fnike-8-dri-fit-repel-heritage-m-p23023%2Fsail-light-curry-university-bl-xl-v156648>m=2wg1i0PD2NKQ
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
POST /pagead/landing?gcs=G101&gcd=G101&rnd=2020747657.1674203615&url=https%3A%2F%2Fwww.antonsport.no%2Fnike-8-dri-fit-repel-heritage-m-p23023%2Fsail-light-curry-university-bl-xl-v156648>m=2wg1i0PD2NKQ HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.antonsport.no
Connection: keep-alive
Referer: https://www.antonsport.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 20 Jan 2023 08:33:36 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 24d3800c92aba293179c4c8a70110155
66fb2c382fa559f3b546932fa1be0b122321977e
eaa3317a574493890a5ff66f4aeb8f38e29d03572ea3d3c74c88b565d3fa8490
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 20 Jan 2023 08:33:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.antonsport.no/socket.io/?EIO=4&transport=websocket
101 Switching Protocols 0 B URL HTTP/1.1 www.antonsport.no/socket.io/?EIO=4&transport=websocket
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /socket.io/?EIO=4&transport=websocket HTTP/1.1
Host: www.antonsport.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://www.antonsport.no
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: w7dFgKYS3Ly+lAj5TKH/aA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Fri, 20 Jan 2023 08:33:36 GMT
Connection: upgrade
Upgrade: websocket
Sec-Websocket-Accept: pUTj2t/eceihHGRbXyPBZWs9g+w=
Via: 1.1 vegur
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yI2GxoH%2F5tdLOojFzud%2BolhFOmSnfJaHauF9qBjnCoTcFX31F6MRLpSLysT1LU3S%2F0nMMIkZe7Xlz9pYnnx7Q5GQ6UShyN8gbZT00zbk3Cj5CQ7Y2C4AV0onrUx8wUaIEyPdEQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 78c6775b1c82b50b-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
antonclub-res.cloudinary.com/image/upload/e_trim:0/c_fit,g_center,w_256,h_256/q_auto/xnsldmaedtvmjdnz0ib1.jpg
200 OK 5.6 kB URL HTTP/2 antonclub-res.cloudinary.com/image/upload/e_trim:0/c_fit,g_center,w_256,h_256/q_auto/xnsldmaedtvmjdnz0ib1.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 256x115, components 3\012- data
Hash c2caf511e45091b6a3113e5f62b2565e
0460fa49b108bff88c9a3179303de33c433b6df8
163948264a629fc2b7702dd4a101611a86901a5b6c4c3423ffd48f1a42dfdcac
GET /image/upload/e_trim:0/c_fit,g_center,w_256,h_256/q_auto/xnsldmaedtvmjdnz0ib1.jpg HTTP/1.1
Host: antonclub-res.cloudinary.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.antonsport.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
etag: "c2caf511e45091b6a3113e5f62b2565e"
last-modified: Tue, 27 Sep 2022 12:37:34 GMT
content-length: 5624
date: Fri, 20 Jan 2023 08:33:36 GMT
cache-control: private, no-transform, immutable, max-age=31536000
access-control-expose-headers: Content-Length,Content-Disposition,Content-Range,Etag,Server-Timing,Vary,X-Cld-Error,X-Content-Type-Options
access-control-allow-origin: *
accept-ranges: bytes
timing-allow-origin: *
server: Cloudinary
strict-transport-security: max-age=604800
vary: Save-Data
x-content-type-options: nosniff
server-timing: akam;dur=6;start=2023-01-20T08:33:36.617Z;desc=hit,rtt;dur=5
X-Firefox-Spdy: h2
antonclub-res.cloudinary.com/image/upload/e_trim:0/c_fit,g_center,w_256,h_256/q_auto/n4ylepsth0mxlme6daor.jpg
200 OK 24 kB URL HTTP/2 antonclub-res.cloudinary.com/image/upload/e_trim:0/c_fit,g_center,w_256,h_256/q_auto/n4ylepsth0mxlme6daor.jpg
IP
Hash d10ed1caa93cadcd112141b5aeeaf591
09b7fe910ebaac2f49f9752578a578c543c8485e
c9ffbb3e798bb3ac380a7df2789c65659e6cc87bce5cae8bbb56c20c17ea3c4d
GET /image/upload/e_trim:0/c_fit,g_center,w_256,h_256/q_auto/n4ylepsth0mxlme6daor.jpg HTTP/1.1
Host: antonclub-res.cloudinary.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.antonsport.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
etag: "497b2764f3ddb52e4bf10b2cec1d535d"
last-modified: Tue, 15 Nov 2022 15:22:08 GMT
content-length: 8811
date: Fri, 20 Jan 2023 08:33:36 GMT
cache-control: private, no-transform, immutable, max-age=31536000
access-control-expose-headers: Content-Length,Content-Disposition,Content-Range,Etag,Server-Timing,Vary,X-Cld-Error,X-Content-Type-Options
access-control-allow-origin: *
accept-ranges: bytes
timing-allow-origin: *
server: Cloudinary
strict-transport-security: max-age=604800
vary: Save-Data
x-content-type-options: nosniff
server-timing: akam;dur=4;start=2023-01-20T08:33:36.624Z;desc=hit,rtt;dur=4
X-Firefox-Spdy: h2
antonclub-res.cloudinary.com/image/upload/e_trim:0/c_fit,g_center,w_256,h_256/q_auto/ahfbppicrpu9xusmjw61.jpg
200 OK 8.5 kB URL HTTP/2 antonclub-res.cloudinary.com/image/upload/e_trim:0/c_fit,g_center,w_256,h_256/q_auto/ahfbppicrpu9xusmjw61.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 205x256, components 3\012- data
Hash 1f565ea01af0e9c27c6dd5dd881aaf40
4106fb8bd4af77a5f0e797ce91dd2d24811b593f
70eb7a56dc1be01fe06b5828c0cb26f208eb9c3c5474f14ac230917096b657e6
GET /image/upload/e_trim:0/c_fit,g_center,w_256,h_256/q_auto/ahfbppicrpu9xusmjw61.jpg HTTP/1.1
Host: antonclub-res.cloudinary.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.antonsport.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
etag: "1f565ea01af0e9c27c6dd5dd881aaf40"
last-modified: Thu, 01 Dec 2022 12:28:34 GMT
content-length: 8495
date: Fri, 20 Jan 2023 08:33:36 GMT
cache-control: private, no-transform, immutable, max-age=31536000
access-control-expose-headers: Content-Length,Content-Disposition,Content-Range,Etag,Server-Timing,Vary,X-Cld-Error,X-Content-Type-Options
access-control-allow-origin: *
accept-ranges: bytes
timing-allow-origin: *
server: Cloudinary
strict-transport-security: max-age=604800
vary: Save-Data
x-content-type-options: nosniff
server-timing: akam;dur=4;start=2023-01-20T08:33:36.642Z;desc=hit,rtt;dur=3
X-Firefox-Spdy: h2
antonclub-res.cloudinary.com/image/upload/e_trim:0/c_fit,g_center,w_256,h_256/q_auto/bqrct7oh7fh19nucs80p.jpg
200 OK 4.0 kB URL HTTP/2 antonclub-res.cloudinary.com/image/upload/e_trim:0/c_fit,g_center,w_256,h_256/q_auto/bqrct7oh7fh19nucs80p.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 256x109, components 3\012- data
Hash 54a1a9bb78da34165afbd27a23a3ed92
6123b80b2b2ab7f8e67385a22ee7a8eee56b5992
d8a9f5d42eece08363480c7ff2ecee855f36ee110088dbcf571812b31323dc75
GET /image/upload/e_trim:0/c_fit,g_center,w_256,h_256/q_auto/bqrct7oh7fh19nucs80p.jpg HTTP/1.1
Host: antonclub-res.cloudinary.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.antonsport.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
etag: "54a1a9bb78da34165afbd27a23a3ed92"
last-modified: Wed, 30 Nov 2022 15:37:24 GMT
content-length: 3992
date: Fri, 20 Jan 2023 08:33:36 GMT
cache-control: private, no-transform, immutable, max-age=31536000
access-control-expose-headers: Content-Length,Content-Disposition,Content-Range,Etag,Server-Timing,Vary,X-Cld-Error,X-Content-Type-Options
access-control-allow-origin: *
accept-ranges: bytes
timing-allow-origin: *
server: Cloudinary
strict-transport-security: max-age=604800
vary: Save-Data
x-content-type-options: nosniff
server-timing: akam;dur=4;start=2023-01-20T08:33:36.648Z;desc=hit,rtt;dur=3
X-Firefox-Spdy: h2
antonclub-res.cloudinary.com/image/upload/e_trim:0/c_fit,g_center,w_256,h_256/q_auto/rd37rrooznhk0a3owp6z.jpg
200 OK 5.6 kB URL HTTP/2 antonclub-res.cloudinary.com/image/upload/e_trim:0/c_fit,g_center,w_256,h_256/q_auto/rd37rrooznhk0a3owp6z.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 256x126, components 3\012- data
Hash 3c20d46ea11b12afd19716eff589b932
b564c48d4dab54e2f12bed62f507ebc3f12fe505
163fc45f811b1490cbb4e05e722ed3d5809ea9bff1b53a0a986f035fcee25db0
GET /image/upload/e_trim:0/c_fit,g_center,w_256,h_256/q_auto/rd37rrooznhk0a3owp6z.jpg HTTP/1.1
Host: antonclub-res.cloudinary.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.antonsport.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
etag: "3c20d46ea11b12afd19716eff589b932"
last-modified: Wed, 30 Nov 2022 15:37:24 GMT
content-length: 5592
date: Fri, 20 Jan 2023 08:33:36 GMT
cache-control: private, no-transform, immutable, max-age=31536000
access-control-expose-headers: Content-Length,Content-Disposition,Content-Range,Etag,Server-Timing,Vary,X-Cld-Error,X-Content-Type-Options
access-control-allow-origin: *
accept-ranges: bytes
timing-allow-origin: *
server: Cloudinary
strict-transport-security: max-age=604800
vary: Save-Data
x-content-type-options: nosniff
server-timing: akam;dur=6;start=2023-01-20T08:33:36.653Z;desc=hit,rtt;dur=3
X-Firefox-Spdy: h2
antonclub-res.cloudinary.com/image/upload/e_trim:0/c_fit,g_center,w_256,h_256/q_auto/fc7rp0iwdqjqky9uwbea.jpg
200 OK 7.8 kB URL HTTP/2 antonclub-res.cloudinary.com/image/upload/e_trim:0/c_fit,g_center,w_256,h_256/q_auto/fc7rp0iwdqjqky9uwbea.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 256x123, components 3\012- data
Hash cf8859f58efe7250a00a4e08095ec9ce
416e0020c730e6e7aee2180df6105b76112fcf2c
2e16056ddd2323d8aa12e5f09f86c7b830c59da5e24fa7c0786d4015ebcaf4f9
GET /image/upload/e_trim:0/c_fit,g_center,w_256,h_256/q_auto/fc7rp0iwdqjqky9uwbea.jpg HTTP/1.1
Host: antonclub-res.cloudinary.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.antonsport.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
etag: "cf8859f58efe7250a00a4e08095ec9ce"
last-modified: Wed, 30 Nov 2022 15:37:24 GMT
content-length: 7808
date: Fri, 20 Jan 2023 08:33:36 GMT
cache-control: private, no-transform, immutable, max-age=31536000
access-control-expose-headers: Content-Length,Content-Disposition,Content-Range,Etag,Server-Timing,Vary,X-Cld-Error,X-Content-Type-Options
access-control-allow-origin: *
accept-ranges: bytes
timing-allow-origin: *
server: Cloudinary
strict-transport-security: max-age=604800
vary: Save-Data
x-content-type-options: nosniff
server-timing: akam;dur=4;start=2023-01-20T08:33:36.660Z;desc=hit,rtt;dur=2
X-Firefox-Spdy: h2
antonclub-res.cloudinary.com/image/upload/e_trim:0/c_limit,w_100,h_100/q_auto,f_png/logos/gxmxsbdr8lybgjm4cbbt
200 OK 691 B URL HTTP/2 antonclub-res.cloudinary.com/image/upload/e_trim:0/c_limit,w_100,h_100/q_auto,f_png/logos/gxmxsbdr8lybgjm4cbbt
IP
File type PNG image data, 100 x 35, 8-bit colormap, non-interlaced\012- data
Hash 32954789589b7a33dd695b9a2ebe08dd
c50c1e1308a0c596a3129ceae6c2eff176bd930f
b751c77de1df66ddcd33634273f8b7a73fca50cdfdab03686e404a7cfb00bbfd
GET /image/upload/e_trim:0/c_limit,w_100,h_100/q_auto,f_png/logos/gxmxsbdr8lybgjm4cbbt HTTP/1.1
Host: antonclub-res.cloudinary.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.antonsport.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
etag: "32954789589b7a33dd695b9a2ebe08dd"
last-modified: Tue, 14 Mar 2017 10:02:42 GMT
content-length: 691
date: Fri, 20 Jan 2023 08:33:36 GMT
cache-control: private, no-transform, immutable, max-age=31536000
access-control-expose-headers: Content-Length,Content-Disposition,Content-Range,Etag,Server-Timing,Vary,X-Cld-Error,X-Content-Type-Options
access-control-allow-origin: *
accept-ranges: bytes
timing-allow-origin: *
server: Cloudinary
strict-transport-security: max-age=604800
vary: Save-Data
x-content-type-options: nosniff
server-timing: akam;dur=3;start=2023-01-20T08:33:36.698Z;desc=hit,rtt;dur=2
X-Firefox-Spdy: h2
zizr.id/integration/anton-sport.js
200 OK 20 kB URL HTTP/2 zizr.id/integration/anton-sport.js
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with very long lines (20417)
Hash 5fe421a52dfe08f5f166a09062d215b7
04fa9fab8111f79b021baa838f2b48e2af9deb3a
9fa03582c9dc387ef57800b000d5f00e32d605de0e1da9ece3ff0ba3de538ab5
GET /integration/anton-sport.js HTTP/1.1
Host: zizr.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.antonsport.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: no-store
content-type: application/javascript
content-encoding: br
last-modified: Thu, 05 Jan 2023 11:43:05 GMT
accept-ranges: bytes
x-cache: TCP_HIT
access-control-allow-origin: *
access-control-allow-credentials: true
x-azure-ref-originshield: 0wlDKYwAAAAA+o4LoCq4FQqkch90YdJ10RlJBMjMxMDUwNDE3MDM3ADdkYzYzYTgyLWQ4ZWUtNDdhMi1hMDY3LTAxZWI0NDViNGJlNg==
x-azure-ref: 04FHKYwAAAABNa1lxmiZ5QpIf8MI5aDZ8Q1BIMzBFREdFMDQyMAA3ZGM2M2E4Mi1kOGVlLTQ3YTItYTA2Ny0wMWViNDQ1YjRiZTY=
date: Fri, 20 Jan 2023 08:33:35 GMT
X-Firefox-Spdy: h2
magicwidget.socialboards.com/launcher-child/index.html
200 OK 375 B URL HTTP/2 magicwidget.socialboards.com/launcher-child/index.html
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 0f8b6d782f5a56569d19468ee288f266
9bf5edf471280cf9f7c2c4a6f89bcad481bc1596
aa9f3cea9e930e0db4e6e75e1903cd306442720ae0ea7c54d586b4fbb90118d7
GET /launcher-child/index.html HTTP/1.1
Host: magicwidget.socialboards.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.antonsport.no/
Cookie: ARRAffinitySameSite=942672fa603ff230f208dabc93a617b647bf22f55a8b81877b67daddd28941dc
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
date: Fri, 20 Jan 2023 08:33:36 GMT
server: Microsoft-IIS/10.0
accept-ranges: bytes
content-encoding: gzip
etag: "36c04ed5a81bd91:0"
last-modified: Thu, 29 Dec 2022 17:13:13 GMT
vary: Accept-Encoding
content-length: 375
x-powered-by: ASP.NET
X-Firefox-Spdy: h2
magicwidget.socialboards.com/messenger-child/index.html?isWidgetMode=true
200 OK 722 B URL HTTP/2 magicwidget.socialboards.com/messenger-child/index.html?isWidgetMode=true
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (520), with CRLF line terminators
Hash 5c99e94455912415a57f2a90736004bb
1325d9266b8190eafb9d9ab84e74796659249a5c
e5abcfaced4a9d21328e5288c4f271cc13b6efefa46e106f689fb7b49ca25cc2
GET /messenger-child/index.html?isWidgetMode=true HTTP/1.1
Host: magicwidget.socialboards.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.antonsport.no/
Cookie: ARRAffinitySameSite=942672fa603ff230f208dabc93a617b647bf22f55a8b81877b67daddd28941dc
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
date: Fri, 20 Jan 2023 08:33:36 GMT
server: Microsoft-IIS/10.0
accept-ranges: bytes
content-encoding: gzip
etag: "f17ddf8ba91bd91:0"
last-modified: Thu, 29 Dec 2022 17:18:19 GMT
vary: Accept-Encoding
content-length: 722
x-powered-by: ASP.NET
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 47af162ca374f511a0a3c274dd4525e9
3833c30245999ee69718df418dd62470e615a6e3
b21154f76db79f0229ba290d250dccc4c8d33e38a43aadc78dd49e3d0cae43ba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B21154F76DB79F0229BA290D250DCCC4C8D33E38A43AADC78DD49E3D0CAE43BA"
Last-Modified: Fri, 20 Jan 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13973
Expires: Fri, 20 Jan 2023 12:26:30 GMT
Date: Fri, 20 Jan 2023 08:33:37 GMT
Connection: keep-alive
magicwidget.socialboards.com/launcher-child/launcher-child.js
200 OK 18 kB URL HTTP/2 magicwidget.socialboards.com/launcher-child/launcher-child.js
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (56173), with no line terminators
Hash 58614f01650f0039577b2b4f1261ab88
e72c15e48facc3935f7871fb24a4a320e4c86886
80c22d9d162a79a82c835bb5852588f6f62a1c1117420f4b080937f74ab3c3ba
GET /launcher-child/launcher-child.js HTTP/1.1
Host: magicwidget.socialboards.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magicwidget.socialboards.com/launcher-child/index.html
Cookie: ARRAffinitySameSite=942672fa603ff230f208dabc93a617b647bf22f55a8b81877b67daddd28941dc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
date: Fri, 20 Jan 2023 08:33:36 GMT
server: Microsoft-IIS/10.0
accept-ranges: bytes
content-encoding: gzip
etag: "80da3ad5a81bd91:0"
last-modified: Thu, 29 Dec 2022 17:13:13 GMT
vary: Accept-Encoding
content-length: 18522
x-powered-by: ASP.NET
X-Firefox-Spdy: h2
magicwidget.socialboards.com/messenger-child/styles.264dcfab7b9699e7aa1f.css
200 OK 32 kB URL HTTP/2 magicwidget.socialboards.com/messenger-child/styles.264dcfab7b9699e7aa1f.css
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with very long lines (63761)
Hash fdd973d4d701ab5a47dafc2657f4f748
a8ae336a11e4b8bce6211442495e6cadd57432f5
5c753ca58338c61282ba070c4714acbb6d5764ca9c93e464e9a7d446e8e39c12
GET /messenger-child/styles.264dcfab7b9699e7aa1f.css HTTP/1.1
Host: magicwidget.socialboards.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magicwidget.socialboards.com/messenger-child/index.html?isWidgetMode=true
Cookie: ARRAffinitySameSite=942672fa603ff230f208dabc93a617b647bf22f55a8b81877b67daddd28941dc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
date: Fri, 20 Jan 2023 08:33:36 GMT
server: Microsoft-IIS/10.0
accept-ranges: bytes
content-encoding: gzip
etag: "8098e561a91bd91:0"
last-modified: Thu, 29 Dec 2022 17:17:09 GMT
vary: Accept-Encoding
content-length: 32058
x-powered-by: ASP.NET
X-Firefox-Spdy: h2
api.webspec.io/static/js/app-script.js
200 OK 1.9 kB URL HTTP/1.1 api.webspec.io/static/js/app-script.js
IP
Hash a42b564d5f3cbe8aba83e51cc60de2a6
70ebc33630be3f236bbc8301b3f139cf7a7078dd
5468cdc03da05e653d757147ad6c370c2c3824b3051c6da5b4490588692cca92
GET /static/js/app-script.js HTTP/1.1
Host: api.webspec.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.antonsport.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 20 Jan 2023 08:33:37 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Powered-By: Express
Cache-Control: public, max-age=0
Last-Modified: Tue, 13 Dec 2022 08:44:55 GMT
ETag: W/"1db5-1850aa88af4"
Set-Cookie: gsession=s%3A3a5f1502-40ed-469e-bd9e-6302fc8ca5fc.098NAaLGpyCNGGd78XFeY5%2BmM9nJYXdDl%2BeIBqdfe4Y; Path=/; Expires=Thu, 26 Jan 2023 11:47:20 GMT; HttpOnly
Content-Encoding: gzip
magicwidget.socialboards.com/messenger-child/runtime-es2015.c7545cfc7f6938475128.js
200 OK 1.7 kB URL HTTP/2 magicwidget.socialboards.com/messenger-child/runtime-es2015.c7545cfc7f6938475128.js
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with very long lines (2551), with no line terminators
Hash 885ae558bae43d36d445e2415529db46
e1d4a60ab3c356f3708644332dd96793d0cc8ea6
49a9989c9856c1dd36279a5f6b618ebd9210c1645d333e56f6efd027a02aa666
GET /messenger-child/runtime-es2015.c7545cfc7f6938475128.js HTTP/1.1
Host: magicwidget.socialboards.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magicwidget.socialboards.com/messenger-child/index.html?isWidgetMode=true
Cookie: ARRAffinitySameSite=942672fa603ff230f208dabc93a617b647bf22f55a8b81877b67daddd28941dc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
date: Fri, 20 Jan 2023 08:33:36 GMT
server: Microsoft-IIS/10.0
accept-ranges: bytes
content-encoding: gzip
etag: "d2f3a6aa91bd91:0"
last-modified: Thu, 29 Dec 2022 17:17:22 GMT
vary: Accept-Encoding
content-length: 1685
x-powered-by: ASP.NET
X-Firefox-Spdy: h2
magicwidget.socialboards.com/messenger-child/polyfills-es2015.68c57873205f360e1278.js
200 OK 110 kB URL HTTP/2 magicwidget.socialboards.com/messenger-child/polyfills-es2015.68c57873205f360e1278.js
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with very long lines (65536), with no line terminators
Size 110 kB (109537 bytes)
Hash 227f427bfa4a8fce62aba5ec58ae58a4
49053f290d407eb5b442bb6c49660812062efda8
67254dca51e6ea93fe761f12a3643bc81b3fe38f92edaffd698d507f7e558941
GET /messenger-child/polyfills-es2015.68c57873205f360e1278.js HTTP/1.1
Host: magicwidget.socialboards.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magicwidget.socialboards.com/messenger-child/index.html?isWidgetMode=true
Cookie: ARRAffinitySameSite=942672fa603ff230f208dabc93a617b647bf22f55a8b81877b67daddd28941dc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
date: Fri, 20 Jan 2023 08:33:36 GMT
server: Microsoft-IIS/10.0
accept-ranges: bytes
content-encoding: gzip
etag: "04bcc70a91bd91:0"
last-modified: Thu, 29 Dec 2022 17:17:34 GMT
vary: Accept-Encoding
content-length: 109537
x-powered-by: ASP.NET
X-Firefox-Spdy: h2
magicwidget.socialboards.com/messenger-child/scripts.9a493c2c3614341ec254.js
200 OK 209 kB URL HTTP/2 magicwidget.socialboards.com/messenger-child/scripts.9a493c2c3614341ec254.js
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Size 209 kB (209285 bytes)
Hash fd67bfb771887e72f50dce71809f770e
59ace2077c9524d9bffa0f7a583df31470f1ccd6
599e6bfd83bf5dfcb241d4b867f8c8497f3b8c391eb6c84219590aa99bc01802
GET /messenger-child/scripts.9a493c2c3614341ec254.js HTTP/1.1
Host: magicwidget.socialboards.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magicwidget.socialboards.com/messenger-child/index.html?isWidgetMode=true
Cookie: ARRAffinitySameSite=942672fa603ff230f208dabc93a617b647bf22f55a8b81877b67daddd28941dc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
date: Fri, 20 Jan 2023 08:33:36 GMT
server: Microsoft-IIS/10.0
accept-ranges: bytes
content-encoding: gzip
etag: "8098e561a91bd91:0"
last-modified: Thu, 29 Dec 2022 17:17:09 GMT
vary: Accept-Encoding
content-length: 209285
x-powered-by: ASP.NET
X-Firefox-Spdy: h2
dapi.videoly.co/1/videos/0/971/?productId=23023&productTitle=Nike%20Dri-FIT%20Repel%20Heritage%20Herre&SKU=156648&brandName=&productPrice=¤cy=&categoryTree=&ean=&oos=0&maxItems=15&ytwv=&_b=Firefox&_bv=105.0&p=1&_w=1268&_h=939&_pl=no&_cl=no&tsltd=0&product_view_uuid=5305e02e-d945-4c01-ba43-1a90a03bc634&hn=www.antonsport.no&href=https%3A%2F%2Fw%C4%88.antonsport.no%2Fnike-8-dri-fit-repel-he%C4%A1tag%C4%9Cm-p230%C4%B8%2Fsai%C4%AClig%C4%80-curry-u%C4%99v%C4%AFs%C4%A5%C5%8Ab%C4%ACx%C4%ACv156648%3Fkk%3Da4c6293-185ce4fcb%C4%B8-34ad5%26utm_so%C5%87%C5%AD%3D%C4%9Blko%C4%8Eo%C5%BA%C5%BC_medium%3Dcpc%C6%8A%C5%BDcamp%C4%BEgn%C6%83%C4%AB%C6%86oc%C5%81ck%C6%97_t%C4%AF%C6%92N%C4%9Ae%2BD%C4%A1-F%C4%A5%2BR%C4%A9%C4%AB%2BH%C4%AF%C4%A5%C4%B2%C6%AFM%2BS%C4%BEl%252FL%C5%82%C4%80&callback=_vdly1c73965f8a
200 OK 262 B URL HTTP/2 dapi.videoly.co/1/videos/0/971/?productId=23023&productTitle=Nike%20Dri-FIT%20Repel%20Heritage%20Herre&SKU=156648&brandName=&productPrice=¤cy=&categoryTree=&ean=&oos=0&maxItems=15&ytwv=&_b=Firefox&_bv=105.0&p=1&_w=1268&_h=939&_pl=no&_cl=no&tsltd=0&product_view_uuid=5305e02e-d945-4c01-ba43-1a90a03bc634&hn=www.antonsport.no&href=https%3A%2F%2Fw%C4%88.antonsport.no%2Fnike-8-dri-fit-repel-he%C4%A1tag%C4%9Cm-p230%C4%B8%2Fsai%C4%AClig%C4%80-curry-u%C4%99v%C4%AFs%C4%A5%C5%8Ab%C4%ACx%C4%ACv156648%3Fkk%3Da4c6293-185ce4fcb%C4%B8-34ad5%26utm_so%C5%87%C5%AD%3D%C4%9Blko%C4%8Eo%C5%BA%C5%BC_medium%3Dcpc%C6%8A%C5%BDcamp%C4%BEgn%C6%83%C4%AB%C6%86oc%C5%81ck%C6%97_t%C4%AF%C6%92N%C4%9Ae%2BD%C4%A1-F%C4%A5%2BR%C4%A9%C4%AB%2BH%C4%AF%C4%A5%C4%B2%C6%AFM%2BS%C4%BEl%252FL%C5%82%C4%80&callback=_vdly1c73965f8a
IP
File type ASCII text, with very long lines (330), with no line terminators
Hash 223dea921a47d735d2784c76cf900bf2
aecd4586883c1a076f26196a54cdbf5cb55cfdfd
4c2e3f26d824a862f7cfa6ce80bb474b1f017a27b377331cb9f7618b075703e4
GET /1/videos/0/971/?productId=23023&productTitle=Nike%20Dri-FIT%20Repel%20Heritage%20Herre&SKU=156648&brandName=&productPrice=¤cy=&categoryTree=&ean=&oos=0&maxItems=15&ytwv=&_b=Firefox&_bv=105.0&p=1&_w=1268&_h=939&_pl=no&_cl=no&tsltd=0&product_view_uuid=5305e02e-d945-4c01-ba43-1a90a03bc634&hn=www.antonsport.no&href=https%3A%2F%2Fw%C4%88.antonsport.no%2Fnike-8-dri-fit-repel-he%C4%A1tag%C4%9Cm-p230%C4%B8%2Fsai%C4%AClig%C4%80-curry-u%C4%99v%C4%AFs%C4%A5%C5%8Ab%C4%ACx%C4%ACv156648%3Fkk%3Da4c6293-185ce4fcb%C4%B8-34ad5%26utm_so%C5%87%C5%AD%3D%C4%9Blko%C4%8Eo%C5%BA%C5%BC_medium%3Dcpc%C6%8A%C5%BDcamp%C4%BEgn%C6%83%C4%AB%C6%86oc%C5%81ck%C6%97_t%C4%AF%C6%92N%C4%9Ae%2BD%C4%A1-F%C4%A5%2BR%C4%A9%C4%AB%2BH%C4%AF%C4%A5%C4%B2%C6%AFM%2BS%C4%BEl%252FL%C5%82%C4%80&callback=_vdly1c73965f8a HTTP/1.1
Host: dapi.videoly.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.antonsport.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 20 Jan 2023 08:33:37 GMT
content-type: text/javascript; charset=utf-8
x-powered-by: Express
access-control-allow-origin: *
access-control-allow-methods: GET,PUT,POST,OPTIONS
access-control-allow-headers: Content-Type
access-control-allow-credentials: true
x-videoly-cached: 1
x-content-type-options: nosniff
etag: W/"14a-w8pDO61fT//VKjAMdXtKfvgv6ao"
set-cookie: vdly=s%3ARHwzIg0yCvAhb0CAJBE79YOAdcD7VIt3.k1ORIKbP9fAmW7k4At7rB6%2FiGdMrXN5o8KhpeNMUSGs; Path=/; Expires=Sun, 23 Apr 2023 08:33:37 GMT; HttpOnly; Secure; SameSite=None
via: 1.1 vegur
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Yb2wVxnvf0x6mxsAyQO7LfKVJu3pdYSUV6E0F7zECZh%2FcmsuQyr%2FM41hhAjiu0htCMUFdBgV4%2FicN9KbPz%2FBbcsskULHuFwdC4tJ1Pt3zU7Y1O922t%2F76bxIDd8wEYMgIg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78c6775e7c50b4ff-OSL
content-encoding: br
X-Firefox-Spdy: h2
magicwidget.socialboards.com/messenger-child/main-es2015.abcd08835b03f3a65216.js
200 OK 70 B URL HTTP/2 magicwidget.socialboards.com/messenger-child/main-es2015.abcd08835b03f3a65216.js
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash 1345e4b81de872ac866c1aec54d80aa3
4bbf8d4e78ee44e89dd9caa7c0c6d803491aa714
b2eca9332dc4b7fc352bcfe372d08508028d3a95647d149452f98a793b84e229
GET /messenger-child/main-es2015.abcd08835b03f3a65216.js HTTP/1.1
Host: magicwidget.socialboards.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magicwidget.socialboards.com/messenger-child/index.html?isWidgetMode=true
Cookie: ARRAffinitySameSite=942672fa603ff230f208dabc93a617b647bf22f55a8b81877b67daddd28941dc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
date: Fri, 20 Jan 2023 08:33:36 GMT
server: Microsoft-IIS/10.0
accept-ranges: bytes
content-encoding: gzip
etag: "80b17784a91bd91:0"
last-modified: Thu, 29 Dec 2022 17:18:07 GMT
vary: Accept-Encoding
content-length: 291683
x-powered-by: ASP.NET
X-Firefox-Spdy: h2
region1.google-analytics.com/g/collect?v=2&tid=G-FQ4H9XCCMT>m=2oe1i0&_p=471602000&gcs=G101&cid=330056818.1674203616&ul=en-us&sr=1280x1024&_s=1&sid=1674203616&sct=1&seg=0&dl=https%3A%2F%2Fwww.antonsport.no%2Fnike-8-dri-fit-repel-heritage-m-p23023%2Fsail-light-curry-university-bl-xl-v156648%3Fkk%3Da4c6293-185ce4fcb23-34ad5%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DNike%2BDri-Fit%2BRepel%2BHeritage%2BM%2BSail%252FLight&dr=https%3A%2F%2Fno-go.kelkoogroup.net%2F&dt=Nike%20Dri-FIT%20Repel%20Heritage%20Herre%20%7C%20Anton%20Sport&en=product_view_in_stock&_fv=1&_nsi=1&_ss=1
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-FQ4H9XCCMT>m=2oe1i0&_p=471602000&gcs=G101&cid=330056818.1674203616&ul=en-us&sr=1280x1024&_s=1&sid=1674203616&sct=1&seg=0&dl=https%3A%2F%2Fwww.antonsport.no%2Fnike-8-dri-fit-repel-heritage-m-p23023%2Fsail-light-curry-university-bl-xl-v156648%3Fkk%3Da4c6293-185ce4fcb23-34ad5%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DNike%2BDri-Fit%2BRepel%2BHeritage%2BM%2BSail%252FLight&dr=https%3A%2F%2Fno-go.kelkoogroup.net%2F&dt=Nike%20Dri-FIT%20Repel%20Heritage%20Herre%20%7C%20Anton%20Sport&en=product_view_in_stock&_fv=1&_nsi=1&_ss=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-FQ4H9XCCMT>m=2oe1i0&_p=471602000&gcs=G101&cid=330056818.1674203616&ul=en-us&sr=1280x1024&_s=1&sid=1674203616&sct=1&seg=0&dl=https%3A%2F%2Fwww.antonsport.no%2Fnike-8-dri-fit-repel-heritage-m-p23023%2Fsail-light-curry-university-bl-xl-v156648%3Fkk%3Da4c6293-185ce4fcb23-34ad5%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DNike%2BDri-Fit%2BRepel%2BHeritage%2BM%2BSail%252FLight&dr=https%3A%2F%2Fno-go.kelkoogroup.net%2F&dt=Nike%20Dri-FIT%20Repel%20Heritage%20Herre%20%7C%20Anton%20Sport&en=product_view_in_stock&_fv=1&_nsi=1&_ss=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.antonsport.no
Connection: keep-alive
Referer: https://www.antonsport.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.antonsport.no
date: Fri, 20 Jan 2023 08:33:37 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.antonsport.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Fri, 20 Jan 2023 06:41:07 GMT
expires: Fri, 20 Jan 2023 08:41:07 GMT
cache-control: public, max-age=7200
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
age: 6750
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
zizr.id/core/api/v1/recommendations?retailerIdentifier=anton-sport&referer=https%3A%2F%2Fwww.antonsport.no%2Fnike-8-dri-fit-repel-heritage-m-p23023%2Fsail-light-curry-university-bl-xl-v156648%3Fkk%3Da4c6293-185ce4fcb23-34ad5%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DNike%2BDri-Fit%2BRepel%2BHeritage%2BM%2BSail%252FLight&modelStyleId=23023-sail%2Flight+curry+university+bl
200 OK 18 kB URL HTTP/2 zizr.id/core/api/v1/recommendations?retailerIdentifier=anton-sport&referer=https%3A%2F%2Fwww.antonsport.no%2Fnike-8-dri-fit-repel-heritage-m-p23023%2Fsail-light-curry-university-bl-xl-v156648%3Fkk%3Da4c6293-185ce4fcb23-34ad5%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DNike%2BDri-Fit%2BRepel%2BHeritage%2BM%2BSail%252FLight&modelStyleId=23023-sail%2Flight+curry+university+bl
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash 09545a01e80a6f7100541ac97f7e0431
afe0d3458b8c2ae5fa87f719e6c7740fc4f98250
9aee56c2ec57684829e3988bab62381e2d4285d4eb977fd04c5dc356aaafa43a
GET /core/api/v1/recommendations?retailerIdentifier=anton-sport&referer=https%3A%2F%2Fwww.antonsport.no%2Fnike-8-dri-fit-repel-heritage-m-p23023%2Fsail-light-curry-university-bl-xl-v156648%3Fkk%3Da4c6293-185ce4fcb23-34ad5%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DNike%2BDri-Fit%2BRepel%2BHeritage%2BM%2BSail%252FLight&modelStyleId=23023-sail%2Flight+curry+university+bl HTTP/1.1
Host: zizr.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.antonsport.no/
Origin: https://www.antonsport.no
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public,max-age=1800
content-type: application/json; charset=utf-8
vary: *
x-cache: TCP_MISS
request-context: appId=cid-v1:aa86738b-95bc-41e3-8c97-185fc5b915c7
access-control-allow-origin: *
access-control-allow-credentials: true
x-azure-ref-originshield: 04FHKYwAAAAAH0b3/vxhZR72dYwqceuqwRlJBMjMxMDUwNDE4MDM1ADdkYzYzYTgyLWQ4ZWUtNDdhMi1hMDY3LTAxZWI0NDViNGJlNg==
x-azure-ref: 04FHKYwAAAACC45Jq9cS9S5KLTN0faVm/Q1BIMzBFREdFMDQyMAA3ZGM2M2E4Mi1kOGVlLTQ3YTItYTA2Ny0wMWViNDQ1YjRiZTY=
date: Fri, 20 Jan 2023 08:33:36 GMT
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/releases/Gg72x2_SHmxi8X0BLo33HMpr/recaptcha__en.js
200 OK 164 kB URL HTTP/2 www.gstatic.com/recaptcha/releases/Gg72x2_SHmxi8X0BLo33HMpr/recaptcha__en.js
IP
File type ASCII text, with very long lines (636)
Size 164 kB (163892 bytes)
Hash f2995e9cc3eedf3359420fb8d714b2ca
bdc68875ff161b35dbe9d8d85241e41c862ec8e3
fbe663b4f0f239aca19a5a2720c2b494ac58a53e0d68288155eb772ae04935c1
GET /recaptcha/releases/Gg72x2_SHmxi8X0BLo33HMpr/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.antonsport.no
Connection: keep-alive
Referer: https://www.antonsport.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 163892
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 17 Jan 2023 15:41:18 GMT
expires: Wed, 17 Jan 2024 15:41:18 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Jan 2023 01:02:16 GMT
content-type: text/javascript
age: 233539
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static.hotjar.com/c/hotjar-2790581.js?sv=7
200 OK 7.0 kB URL HTTP/2 static.hotjar.com/c/hotjar-2790581.js?sv=7
IP
File type ASCII text, with very long lines (7669)
Hash eeb5ce775d4d31d7c5a2bdf095bf743c
004623377e771aeb153f90d74a4cd6015185ebae
35ed059567e7c80269ccab78ffd6405766874e903c0304cb9331bfbc16a6f039
GET /c/hotjar-2790581.js?sv=7 HTTP/1.1
Host: static.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.antonsport.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
date: Fri, 20 Jan 2023 08:33:06 GMT
access-control-allow-origin: *
cache-control: max-age=60
content-encoding: br
cross-origin-resource-policy: cross-origin
etag: W/9f73cc89f6792186d66376097593b68f
strict-transport-security: max-age=2592000; includeSubDomains
x-cache-hit: 1
x-content-type-options: nosniff
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: -Pz208bk2nox4NJRoVozzp_Dp8XA3XqbmEq-NXnf9nPj7EmV3FpHTQ==
age: 31
X-Firefox-Spdy: h2
rcgmal4n.klarnaservices.com/v3/s?ver=2.26.1&d=credit-promotion-small&e=no-NO&g=7dc81983-468c-5fa1-a5e3-01e4f9ee6e07&purchase_amount=129900
200 OK 1.7 kB URL HTTP/2 rcgmal4n.klarnaservices.com/v3/s?ver=2.26.1&d=credit-promotion-small&e=no-NO&g=7dc81983-468c-5fa1-a5e3-01e4f9ee6e07&purchase_amount=129900
IP
Hash 48a12bfa58f1fe2f97fb635038d34716
ab0e6d4d2a64f601060f7b785e251bbecec90368
31843cd6ee8665a1517cd9f045b95f2674f210a4cb2e8d7694f1433d6931451e
GET /v3/s?ver=2.26.1&d=credit-promotion-small&e=no-NO&g=7dc81983-468c-5fa1-a5e3-01e4f9ee6e07&purchase_amount=129900 HTTP/1.1
Host: rcgmal4n.klarnaservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.antonsport.no/
Origin: https://www.antonsport.no
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json; charset=utf-8
date: Fri, 20 Jan 2023 08:33:36 GMT
access-control-allow-origin: https://www.antonsport.no
vary: Accept-Encoding, Origin
access-control-allow-credentials: true
klarna-correlation-id: 06fd648f-7c0e-4836-8186-80607c13b20d
timing-allow-origin: *
cache-control: public, max-age=86400
etag: W/"82f-KGTflp/nkeFWraDblHtCBTRZ6gg"
x-envoy-upstream-service-time: 6
server: envoy
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 475d4ecb64796af058573c6f1048e898.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: k56V2JS5e02_26f62KMKdV1ouL-IB_JR9T9sCT_wI9aG4LglUhr3xw==
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 58b3433737966a7aae0c293073ae5806
6c081275509d3a4c4de96c8462bed78bce191385
6d590eeda4306c6036e8f3fc1d71bac1a016b4018959778cb750d7d0cbcd5387
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 20 Jan 2023 08:33:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
apis.google.com/js/api.js
200 OK 6.9 kB URL HTTP/2 apis.google.com/js/api.js
IP
File type ASCII text, with very long lines (2054)
Hash a90cde5db377c82c737ab51f1e32a96e
6adcd5822988b45b44f91e073122720147bfc830
6dfd2ae8b18ab306799a5453849ea20e3b25ac8227e2806270e456f72a0d835d
GET /js/api.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magicwidget.socialboards.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 6893
date: Fri, 20 Jan 2023 08:33:37 GMT
expires: Fri, 20 Jan 2023 08:33:37 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "23bba806bc465f03"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
vars.hotjar.com/box-ff00c703c3bbdf54ae44ee858d64f69e.html
200 OK 1.0 kB URL HTTP/2 vars.hotjar.com/box-ff00c703c3bbdf54ae44ee858d64f69e.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2368), with no line terminators
Hash 730971b89ffa8b99e4157f49a4275594
7041ce872cc30e32c6b04a958b0cf810e5fc5651
da09da5b55ce65cdb58f29842d654aa637580d8c4d5d3cddfa08de6d866dcf65
GET /box-ff00c703c3bbdf54ae44ee858d64f69e.html HTTP/1.1
Host: vars.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.antonsport.no/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html
content-length: 1035
date: Wed, 18 Jan 2023 10:13:06 GMT
accept-ranges: bytes
cache-control: max-age=31536000
content-encoding: br
cross-origin-embedder-policy: require-corp
cross-origin-resource-policy: cross-origin
etag: "730971b89ffa8b99e4157f49a4275594"
last-modified: Wed, 18 Jan 2023 10:12:30 GMT
strict-transport-security: max-age=2592000; includeSubDomains
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 83a23d85c009b0c0e3626072e9f997fe.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 2fQ3Zmzj8hxXWx7v9MBZpomvrxWX6beAbV6wqG0ldDc2E5Kl4lE2ew==
age: 166831
X-Firefox-Spdy: h2
magicwidget.socialboards.com/launcher-child/assets/chat-active.png
200 OK 2.7 kB URL HTTP/2 magicwidget.socialboards.com/launcher-child/assets/chat-active.png
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type PNG image data, 77 x 77, 8-bit/color RGBA, interlaced\012- data
Hash 2b22a2369b7fd29c921c9ffc7e882768
2b5d0828f92348ea175a6c904031dde3ce177b10
91adffb44fb98787a278495c0474e9a8dbb657d06df874e23de205bba50c18eb
GET /launcher-child/assets/chat-active.png HTTP/1.1
Host: magicwidget.socialboards.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magicwidget.socialboards.com/launcher-child/index.html
Cookie: ARRAffinitySameSite=942672fa603ff230f208dabc93a617b647bf22f55a8b81877b67daddd28941dc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
date: Fri, 20 Jan 2023 08:33:36 GMT
server: Microsoft-IIS/10.0
accept-ranges: bytes
etag: "48e74ed5a81bd91:0"
last-modified: Thu, 29 Dec 2022 17:13:13 GMT
content-length: 2690
x-powered-by: ASP.NET
X-Firefox-Spdy: h2
magicwidget.socialboards.com/launcher-child/assets/chat-inactive.png
200 OK 3.8 kB URL HTTP/2 magicwidget.socialboards.com/launcher-child/assets/chat-inactive.png
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type PNG image data, 77 x 77, 8-bit/color RGBA, interlaced\012- data
Hash d29ec7986b0b4f0c4b11e1fdd6816c39
034fb984d62b490992d2b274dd26620c44c93a85
36fc1cefd481e75abd19d04c4ede07e2182fba532763d374242290727c1b8769
GET /launcher-child/assets/chat-inactive.png HTTP/1.1
Host: magicwidget.socialboards.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magicwidget.socialboards.com/launcher-child/index.html
Cookie: ARRAffinitySameSite=942672fa603ff230f208dabc93a617b647bf22f55a8b81877b67daddd28941dc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
date: Fri, 20 Jan 2023 08:33:36 GMT
server: Microsoft-IIS/10.0
accept-ranges: bytes
etag: "48e74ed5a81bd91:0"
last-modified: Thu, 29 Dec 2022 17:13:13 GMT
content-length: 3847
x-powered-by: ASP.NET
X-Firefox-Spdy: h2
script.hotjar.com/modules.4829238839b92db7e6b6.js
200 OK 69 kB URL HTTP/2 script.hotjar.com/modules.4829238839b92db7e6b6.js
IP
File type Unicode text, UTF-8 text, with very long lines (48015)
Hash 33cdf1335ebc1b6d54f0110dc31bd36c
0fb8d71d83bb707ad67943e4fff34423909949dd
7dfc08ff97621de55cfbe9e0235669f54d91ddc83e2d38c5edb69473bc728672
GET /modules.4829238839b92db7e6b6.js HTTP/1.1
Host: script.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.antonsport.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 68627
date: Wed, 18 Jan 2023 10:13:05 GMT
accept-ranges: bytes
access-control-allow-origin: *
cache-control: max-age=31536000
content-encoding: br
cross-origin-resource-policy: cross-origin
etag: "33cdf1335ebc1b6d54f0110dc31bd36c"
last-modified: Wed, 18 Jan 2023 10:12:30 GMT
strict-transport-security: max-age=2592000; includeSubDomains
x-content-type-options: nosniff
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6cb1d4b545e7beb4ead790454f4807c6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: -z1x8vehOGTWN8ZHSoUIZANMwXP7YX0JhNdddI-ArdRGiky8Tz5rag==
age: 166832
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 19 Jan 2023 21:48:03 GMT
expires: Fri, 19 Jan 2024 21:48:03 GMT
cache-control: public, max-age=31536000
age: 38735
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 19 Jan 2023 16:40:43 GMT
expires: Fri, 19 Jan 2024 16:40:43 GMT
cache-control: public, max-age=31536000
age: 57175
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
antonclub-res.cloudinary.com/image/upload/e_trim:0/c_lpad,g_center,w_998,h_600,a_0/q_auto/c8vlavltntp4gbbufoul.webp
200 OK 13 kB URL HTTP/2 antonclub-res.cloudinary.com/image/upload/e_trim:0/c_lpad,g_center,w_998,h_600,a_0/q_auto/c8vlavltntp4gbbufoul.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash c94a8a29d549c9defdad37d54ebee4f3
069024b96c2e679395e7e6b5d87f4848b7469318
3eb2072e1ee673dd5b620cffe319d58f685e8917761bbd6a6982085ee40c546c
GET /image/upload/e_trim:0/c_lpad,g_center,w_998,h_600,a_0/q_auto/c8vlavltntp4gbbufoul.webp HTTP/1.1
Host: antonclub-res.cloudinary.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.antonsport.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-disposition: inline; filename="c8vlavltntp4gbbufoul.webp"
content-type: image/webp
etag: "c94a8a29d549c9defdad37d54ebee4f3"
last-modified: Tue, 14 Jun 2022 08:45:16 GMT
content-length: 13098
date: Fri, 20 Jan 2023 08:33:38 GMT
cache-control: private, no-transform, immutable, max-age=31536000
access-control-expose-headers: Content-Length,Content-Disposition,Content-Range,Etag,Server-Timing,Vary,X-Cld-Error,X-Content-Type-Options
access-control-allow-origin: *
accept-ranges: bytes
timing-allow-origin: *
server: Cloudinary
strict-transport-security: max-age=604800
vary: Save-Data
x-content-type-options: nosniff
server-timing: akam;dur=325;cpu=136;start=2023-01-20T08:33:37.730Z;desc=miss,rtt;dur=2,cloudinary;dur=97;start=2023-01-20T08:33:37.850Z
X-Firefox-Spdy: h2
x.klarnacdn.net/ui/fonts/v1.3/KlarnaHeadline-Bold.woff2
200 OK 21 kB URL HTTP/2 x.klarnacdn.net/ui/fonts/v1.3/KlarnaHeadline-Bold.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 20860, version 1.0\012- data
Hash e934031557d0c1b8904d2d0dd4584614
0aa2a5b830a5a6add80045b9816c0c7a35c6a504
6fa9b909ad56404a9024bf64eb4fdd303ac3872310460aaa6e8ae0c6f7093448
GET /ui/fonts/v1.3/KlarnaHeadline-Bold.woff2 HTTP/1.1
Host: x.klarnacdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.antonsport.no
Connection: keep-alive
Referer: https://x.klarnacdn.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: font/woff2
content-length: 20860
date: Sun, 25 Dec 2022 15:59:12 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 86400
x-amz-replication-status: COMPLETED
last-modified: Fri, 30 Apr 2021 10:01:44 GMT
etag: "e934031557d0c1b8904d2d0dd4584614"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
x-amz-meta-ui: ui
x-amz-version-id: FnFe7S43tQvuoAoiPn5yrVkdL3FZK045
accept-ranges: bytes
server: AmazonS3
vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 475d4ecb64796af058573c6f1048e898.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: DhkAMGboAEyQMSc8uQ1Qx7eQRDVhOQk4JJKztL-YVMKSAcyT4vhXuQ==
age: 2219667
X-Firefox-Spdy: h2
master.socialboards.com/api/customer
200 OK 0 B URL HTTP/2 master.socialboards.com/api/customer
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/customer HTTP/1.1
Host: master.socialboards.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: community
Referer: https://magicwidget.socialboards.com/
Origin: https://magicwidget.socialboards.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Fri, 20 Jan 2023 08:33:37 GMT
server: Microsoft-IIS/10.0
access-control-allow-credentials: true
access-control-allow-headers: community
access-control-allow-origin: https://magicwidget.socialboards.com
access-control-expose-headers: date
access-control-max-age: 86400
content-length: 0
X-Firefox-Spdy: h2
master.socialboards.com/api/customer
200 OK 426 B URL HTTP/2 master.socialboards.com/api/customer
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type JSON data\012- , ASCII text, with CRLF line terminators
Hash 550bd7ebb413ac31cf9b86936722f7c2
da1302a8a875f3c27508ba6a77d3710417bbe914
b86da94837d360fb68bfc84c1802fd2c1fb3dc02f1b45bed4c24c9b47d83ed74
GET /api/customer HTTP/1.1
Host: master.socialboards.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Community: antonsport
Origin: https://magicwidget.socialboards.com
Connection: keep-alive
Referer: https://magicwidget.socialboards.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
date: Fri, 20 Jan 2023 08:33:37 GMT
server: Microsoft-IIS/10.0
access-control-allow-credentials: true
access-control-allow-origin: https://magicwidget.socialboards.com
access-control-expose-headers: date
cache-control: no-cache, no-store, must-revalidate
content-encoding: gzip
expires: -1
pragma: no-cache
vary: Accept-Encoding
content-length: 426
X-Firefox-Spdy: h2
zizr.id/core/api/v1/recommendations?retailerIdentifier=anton-sport&referer=https%3A%2F%2Fwww.antonsport.no%2Fnike-8-dri-fit-repel-heritage-m-p23023%2Fsail-light-curry-university-bl-xl-v156648%3Fkk%3Da4c6293-185ce4fcb23-34ad5%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DNike%2BDri-Fit%2BRepel%2BHeritage%2BM%2BSail%252FLight&modelStyleId=23023-sail%2Flight+curry+university+bl
200 OK 6.6 kB URL HTTP/2 zizr.id/core/api/v1/recommendations?retailerIdentifier=anton-sport&referer=https%3A%2F%2Fwww.antonsport.no%2Fnike-8-dri-fit-repel-heritage-m-p23023%2Fsail-light-curry-university-bl-xl-v156648%3Fkk%3Da4c6293-185ce4fcb23-34ad5%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DNike%2BDri-Fit%2BRepel%2BHeritage%2BM%2BSail%252FLight&modelStyleId=23023-sail%2Flight+curry+university+bl
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash 341a413b39461bd9f63fd59dc51d42cc
7315b2865645a1e0ee4309534fc5b2f6cb7c4899
0abca6215a804d5ff90d9a5f8ac00791c9b32efa773c3426663f47e46b0d2662
GET /core/api/v1/recommendations?retailerIdentifier=anton-sport&referer=https%3A%2F%2Fwww.antonsport.no%2Fnike-8-dri-fit-repel-heritage-m-p23023%2Fsail-light-curry-university-bl-xl-v156648%3Fkk%3Da4c6293-185ce4fcb23-34ad5%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DNike%2BDri-Fit%2BRepel%2BHeritage%2BM%2BSail%252FLight&modelStyleId=23023-sail%2Flight+curry+university+bl HTTP/1.1
Host: zizr.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.antonsport.no/
Origin: https://www.antonsport.no
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public,max-age=1800
content-type: application/json; charset=utf-8
vary: *
x-cache: TCP_HIT
request-context: appId=cid-v1:aa86738b-95bc-41e3-8c97-185fc5b915c7
access-control-allow-origin: *
access-control-allow-credentials: true
x-azure-ref-originshield: 04FHKYwAAAAAH0b3/vxhZR72dYwqceuqwRlJBMjMxMDUwNDE4MDM1ADdkYzYzYTgyLWQ4ZWUtNDdhMi1hMDY3LTAxZWI0NDViNGJlNg==
x-azure-ref: 04lHKYwAAAABJLpFZNLDkS7dbA6Sgrsb0Q1BIMzBFREdFMDQyMAA3ZGM2M2E4Mi1kOGVlLTQ3YTItYTA2Ny0wMWViNDQ1YjRiZTY=
date: Fri, 20 Jan 2023 08:33:37 GMT
X-Firefox-Spdy: h2
magicwidget.socialboards.com/messenger-child/0-es2015.7ad77b58b91cb12bda32.js
200 OK 23 kB URL HTTP/2 magicwidget.socialboards.com/messenger-child/0-es2015.7ad77b58b91cb12bda32.js
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with very long lines (65536), with no line terminators
Hash ac1775d42f4b06024d243aeb004f9707
fde96f575b48882bb5b3fa58487fba9e4b4b70f2
71d81b067d66d73f39e78b6795e5082174eb5f3e548c15ee7048f6378dddb29b
GET /messenger-child/0-es2015.7ad77b58b91cb12bda32.js HTTP/1.1
Host: magicwidget.socialboards.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magicwidget.socialboards.com/messenger-child/index.html?isWidgetMode=true
Cookie: ARRAffinitySameSite=942672fa603ff230f208dabc93a617b647bf22f55a8b81877b67daddd28941dc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
date: Fri, 20 Jan 2023 08:33:37 GMT
server: Microsoft-IIS/10.0
accept-ranges: bytes
content-encoding: gzip
etag: "06ad66aa91bd91:0"
last-modified: Thu, 29 Dec 2022 17:17:24 GMT
vary: Accept-Encoding
content-length: 22785
x-powered-by: ASP.NET
X-Firefox-Spdy: h2
magicwidget.socialboards.com/messenger-child/13-es2015.1db707ef88438c57a032.js
200 OK 5.1 kB URL HTTP/2 magicwidget.socialboards.com/messenger-child/13-es2015.1db707ef88438c57a032.js
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with very long lines (19480), with no line terminators
Hash ec6f13c45d93ebb2584acfeb202af710
2132efe252607e79ef7f5b2509fbfe990343e1b4
9cba8c8ef5fb014f483dd030d926762cbd9ffc93ca62da32ab22b3f7c726347a
GET /messenger-child/13-es2015.1db707ef88438c57a032.js HTTP/1.1
Host: magicwidget.socialboards.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magicwidget.socialboards.com/messenger-child/index.html?isWidgetMode=true
Cookie: ARRAffinitySameSite=942672fa603ff230f208dabc93a617b647bf22f55a8b81877b67daddd28941dc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
date: Fri, 20 Jan 2023 08:33:37 GMT
server: Microsoft-IIS/10.0
accept-ranges: bytes
content-encoding: gzip
etag: "8006f6ba91bd91:0"
last-modified: Thu, 29 Dec 2022 17:17:25 GMT
vary: Accept-Encoding
content-length: 5075
x-powered-by: ASP.NET
X-Firefox-Spdy: h2
magicwidget.socialboards.com/messenger-child/11-es2015.aa93f2235c57658886c5.js
200 OK 11 kB URL HTTP/2 magicwidget.socialboards.com/messenger-child/11-es2015.aa93f2235c57658886c5.js
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with very long lines (58075), with no line terminators
Hash e60759f50cb201b0beb592b33a92d738
a7c902d32f6ca21538046e5f16c864f10fa104a7
8e78333fb95371e7ae0840991bc23dcef8a0fa3259341b7765ddb8130d4fc157
GET /messenger-child/11-es2015.aa93f2235c57658886c5.js HTTP/1.1
Host: magicwidget.socialboards.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magicwidget.socialboards.com/messenger-child/index.html/home?isWidgetMode=true
Cookie: ARRAffinitySameSite=942672fa603ff230f208dabc93a617b647bf22f55a8b81877b67daddd28941dc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
date: Fri, 20 Jan 2023 08:33:37 GMT
server: Microsoft-IIS/10.0
accept-ranges: bytes
content-encoding: gzip
etag: "8049ee7aa91bd91:0"
last-modified: Thu, 29 Dec 2022 17:17:51 GMT
vary: Accept-Encoding
content-length: 10700
x-powered-by: ASP.NET
X-Firefox-Spdy: h2
magicwidget.socialboards.com/messenger-child/3-es2015.097569bfc1dafa2ed989.js
200 OK 46 kB URL HTTP/2 magicwidget.socialboards.com/messenger-child/3-es2015.097569bfc1dafa2ed989.js
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with very long lines (65536), with no line terminators
Hash 429fae1e74a5dd1fa4c66cc7fc17083f
95c334086b549b880ae95d3935e810001ef92e1c
f93ec485d74bfa3fb52f2010ef6f5fce7afb2cdc4a5056d6061ac0d549b787b0
GET /messenger-child/3-es2015.097569bfc1dafa2ed989.js HTTP/1.1
Host: magicwidget.socialboards.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magicwidget.socialboards.com/messenger-child/index.html/home?isWidgetMode=true
Cookie: ARRAffinitySameSite=942672fa603ff230f208dabc93a617b647bf22f55a8b81877b67daddd28941dc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
date: Fri, 20 Jan 2023 08:33:37 GMT
server: Microsoft-IIS/10.0
accept-ranges: bytes
content-encoding: gzip
etag: "808726fa91bd91:0"
last-modified: Thu, 29 Dec 2022 17:17:31 GMT
vary: Accept-Encoding
content-length: 46083
x-powered-by: ASP.NET
X-Firefox-Spdy: h2
magicwidget.socialboards.com/messenger-child/14-es2015.47cddb5baf30cd54c401.js
200 OK 6.5 kB URL HTTP/2 magicwidget.socialboards.com/messenger-child/14-es2015.47cddb5baf30cd54c401.js
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with very long lines (25205), with no line terminators
Hash 2b42d4d0b33212a790bbfd74c8d0bb01
ff05d4637a095f3884677e43a7a9c6b96a2263b9
117bc346c2499e5229d6bd3742c5677b9b75940cade6fcb6d1efa8dc98f7c4a0
GET /messenger-child/14-es2015.47cddb5baf30cd54c401.js HTTP/1.1
Host: magicwidget.socialboards.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magicwidget.socialboards.com/messenger-child/index.html/home?isWidgetMode=true
Cookie: ARRAffinitySameSite=942672fa603ff230f208dabc93a617b647bf22f55a8b81877b67daddd28941dc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
date: Fri, 20 Jan 2023 08:33:37 GMT
server: Microsoft-IIS/10.0
accept-ranges: bytes
content-encoding: gzip
etag: "0e0867ba91bd91:0"
last-modified: Thu, 29 Dec 2022 17:17:52 GMT
vary: Accept-Encoding
content-length: 6527
x-powered-by: ASP.NET
X-Firefox-Spdy: h2
master.socialboards.com/api/customerByCommunity
200 OK 0 B URL HTTP/2 master.socialboards.com/api/customerByCommunity
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/customerByCommunity HTTP/1.1
Host: master.socialboards.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: community
Referer: https://magicwidget.socialboards.com/
Origin: https://magicwidget.socialboards.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Fri, 20 Jan 2023 08:33:37 GMT
server: Microsoft-IIS/10.0
access-control-allow-credentials: true
access-control-allow-headers: community
access-control-allow-origin: https://magicwidget.socialboards.com
access-control-expose-headers: date
access-control-max-age: 86400
content-length: 0
X-Firefox-Spdy: h2
magicwidget.socialboards.com/messenger-child/5-es2015.7be231f6eca682455d4a.js
200 OK 6.1 kB URL HTTP/2 magicwidget.socialboards.com/messenger-child/5-es2015.7be231f6eca682455d4a.js
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with very long lines (24055), with no line terminators
Hash e11509a6676456dd9f37aaa0869e4c35
14ab1f8a8951ba35526e3f30ab66b7b03a5b6cc6
033bc4aa624fe688fff5832669838b411ee15accca98fc817252f01b143fbe27
GET /messenger-child/5-es2015.7be231f6eca682455d4a.js HTTP/1.1
Host: magicwidget.socialboards.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magicwidget.socialboards.com/messenger-child/index.html/home?isWidgetMode=true
Cookie: ARRAffinitySameSite=942672fa603ff230f208dabc93a617b647bf22f55a8b81877b67daddd28941dc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
date: Fri, 20 Jan 2023 08:33:37 GMT
server: Microsoft-IIS/10.0
accept-ranges: bytes
content-encoding: gzip
etag: "09776ca91bd91:0"
last-modified: Thu, 29 Dec 2022 17:17:26 GMT
vary: Accept-Encoding
content-length: 6073
x-powered-by: ASP.NET
X-Firefox-Spdy: h2
magicwidget.socialboards.com/messenger-child/15-es2015.e51e8620a54bc0822b67.js
200 OK 1.8 kB URL HTTP/2 magicwidget.socialboards.com/messenger-child/15-es2015.e51e8620a54bc0822b67.js
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with very long lines (5321), with no line terminators
Hash d48b9ac2bf53961535b75907cecd3a5a
e641f63af51960e6c93c7f67c5a70729e172e8b5
e2d5b97866a8a096b7428214512fb33578199b805ae87ec780560c3721f832b2
GET /messenger-child/15-es2015.e51e8620a54bc0822b67.js HTTP/1.1
Host: magicwidget.socialboards.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magicwidget.socialboards.com/messenger-child/index.html/home?isWidgetMode=true
Cookie: ARRAffinitySameSite=942672fa603ff230f208dabc93a617b647bf22f55a8b81877b67daddd28941dc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
date: Fri, 20 Jan 2023 08:33:37 GMT
server: Microsoft-IIS/10.0
accept-ranges: bytes
content-encoding: gzip
etag: "09776ca91bd91:0"
last-modified: Thu, 29 Dec 2022 17:17:26 GMT
vary: Accept-Encoding
content-length: 1829
x-powered-by: ASP.NET
X-Firefox-Spdy: h2
magicwidget.socialboards.com/messenger-child/12-es2015.24b517fd8699765c9d6b.js
200 OK 2.2 kB URL HTTP/2 magicwidget.socialboards.com/messenger-child/12-es2015.24b517fd8699765c9d6b.js
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with very long lines (7050), with no line terminators
Hash 3fd61c2793c7231b9c511529c2838519
c81ed754f6c7de07d87f208e3aed7d05503f37d4
a3b67269da8d51123feb8c4b4917ddb22bc096c8a693071b0150d297962e7d40
GET /messenger-child/12-es2015.24b517fd8699765c9d6b.js HTTP/1.1
Host: magicwidget.socialboards.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magicwidget.socialboards.com/messenger-child/index.html/home?isWidgetMode=true
Cookie: ARRAffinitySameSite=942672fa603ff230f208dabc93a617b647bf22f55a8b81877b67daddd28941dc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
date: Fri, 20 Jan 2023 08:33:37 GMT
server: Microsoft-IIS/10.0
accept-ranges: bytes
content-encoding: gzip
etag: "03da569a91bd91:0"
last-modified: Thu, 29 Dec 2022 17:17:22 GMT
vary: Accept-Encoding
content-length: 2198
x-powered-by: ASP.NET
X-Firefox-Spdy: h2
socialboardsbproduction.blob.core.windows.net/123/f538dc1d-3287-44c3-a78e-9f05f101dfd4.png
200 OK 10 kB URL HTTP/1.1 socialboardsbproduction.blob.core.windows.net/123/f538dc1d-3287-44c3-a78e-9f05f101dfd4.png
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type PNG image data, 494 x 52, 8-bit/color RGBA, non-interlaced\012- data
Hash 0c79a6749afb1d1127b97513c3714bee
e199e5bae3f91bd8e01bfd3dadab831d77b84434
9b9efbdb8c7dce261691955ba2d21d7c428575e23d2d55101a2b63451c3c4c5d
GET /123/f538dc1d-3287-44c3-a78e-9f05f101dfd4.png HTTP/1.1
Host: socialboardsbproduction.blob.core.windows.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magicwidget.socialboards.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 10435
Content-Type: image/png
Content-MD5: DHmmdJr7HREnuXUTw3FL7g==
Last-Modified: Tue, 12 Jun 2018 09:07:12 GMT
Accept-Ranges: bytes
ETag: "0x8D5D043E2BC7B62"
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 05e1c6ed-001e-015e-2ba9-2c8659000000
x-ms-version: 2013-08-15
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
Content-Disposition: attachment;filename="AntonLogo.png"
Date: Fri, 20 Jan 2023 08:33:38 GMT
magicwidgetapi.socialboards.com/api/chat/agents
200 OK 0 B URL HTTP/2 magicwidgetapi.socialboards.com/api/chat/agents
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/chat/agents HTTP/1.1
Host: magicwidgetapi.socialboards.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: community
Referer: https://magicwidget.socialboards.com/
Origin: https://magicwidget.socialboards.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Fri, 20 Jan 2023 08:33:38 GMT
server: Microsoft-IIS/10.0
access-control-allow-credentials: true
access-control-allow-headers: community
access-control-allow-origin: https://magicwidget.socialboards.com
access-control-max-age: 86400
content-length: 0
X-Firefox-Spdy: h2
magicwidget.socialboards.com/messenger-child/10-es2015.acc3bf5b7f9a512cc57b.js
200 OK 163 B URL HTTP/2 magicwidget.socialboards.com/messenger-child/10-es2015.acc3bf5b7f9a512cc57b.js
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type JSON data\012- , ASCII text, with CRLF line terminators
Hash 41eb9b973a295f01cf1f38d4d1f3b123
c1e5b3de0bce5a08774e97a15673e077e719d9f0
e3ddb67239eb1b411047cf31d52c20099feabbbc14d4ec9c543d0407b3912ff2
GET /messenger-child/10-es2015.acc3bf5b7f9a512cc57b.js HTTP/1.1
Host: magicwidget.socialboards.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magicwidget.socialboards.com/messenger-child/index.html/home?isWidgetMode=true
Cookie: ARRAffinitySameSite=942672fa603ff230f208dabc93a617b647bf22f55a8b81877b67daddd28941dc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
date: Fri, 20 Jan 2023 08:33:37 GMT
server: Microsoft-IIS/10.0
accept-ranges: bytes
content-encoding: gzip
etag: "02968ba91bd91:0"
last-modified: Thu, 29 Dec 2022 17:18:18 GMT
vary: Accept-Encoding
content-length: 596427
x-powered-by: ASP.NET
X-Firefox-Spdy: h2
magicwidget.socialboards.com/messenger-child/assets/img/default-agent-avatar.png
200 OK 4.3 kB URL HTTP/2 magicwidget.socialboards.com/messenger-child/assets/img/default-agent-avatar.png
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash de306a0c5be332d99e9821213f57d5b8
fc959508de0c93807cb23bc30971864d9b367339
6e9de9e5ea8ff99b757dfdea11769f64e6e601589c8f3b1be3ce8f2d88392a34
GET /messenger-child/assets/img/default-agent-avatar.png HTTP/1.1
Host: magicwidget.socialboards.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magicwidget.socialboards.com/messenger-child/index.html/home?isWidgetMode=true
Cookie: ARRAffinitySameSite=942672fa603ff230f208dabc93a617b647bf22f55a8b81877b67daddd28941dc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
date: Fri, 20 Jan 2023 08:33:38 GMT
server: Microsoft-IIS/10.0
accept-ranges: bytes
etag: "3b35b85a71bd91:0"
last-modified: Thu, 29 Dec 2022 17:03:49 GMT
content-length: 4287
x-powered-by: ASP.NET
X-Firefox-Spdy: h2
antonclub-res.cloudinary.com/image/upload/e_trim:0/c_lpad,g_center,w_998,h_600,a_0/q_auto/ylpqqdvhyk3b64o7zfqc.webp
200 OK 19 kB URL HTTP/2 antonclub-res.cloudinary.com/image/upload/e_trim:0/c_lpad,g_center,w_998,h_600,a_0/q_auto/ylpqqdvhyk3b64o7zfqc.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 90c0a2e91b3e19fcc4161666916f73bb
7ef764188c733ab359e59a3f5e8e1d67780b72e6
f7462a0822cfe40543ce3dba40ee919c7e6993150937b798399f79a730022304
GET /image/upload/e_trim:0/c_lpad,g_center,w_998,h_600,a_0/q_auto/ylpqqdvhyk3b64o7zfqc.webp HTTP/1.1
Host: antonclub-res.cloudinary.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.antonsport.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-disposition: inline; filename="ylpqqdvhyk3b64o7zfqc.webp"
content-type: image/webp
etag: "90c0a2e91b3e19fcc4161666916f73bb"
last-modified: Tue, 14 Jun 2022 08:45:17 GMT
content-length: 18956
date: Fri, 20 Jan 2023 08:33:39 GMT
cache-control: private, no-transform, immutable, max-age=31536000
access-control-expose-headers: Content-Length,Content-Disposition,Content-Range,Etag,Server-Timing,Vary,X-Cld-Error,X-Content-Type-Options
access-control-allow-origin: *
accept-ranges: bytes
timing-allow-origin: *
server: Cloudinary
strict-transport-security: max-age=604800
vary: Save-Data
x-content-type-options: nosniff
server-timing: akam;dur=210;cpu=41;start=2023-01-20T08:33:38.812Z;desc=miss,rtt;dur=2,cloudinary;dur=86;start=2023-01-20T08:33:38.881Z
X-Firefox-Spdy: h2
antonclub-res.cloudinary.com/image/upload/e_trim:0/c_lpad,g_center,w_998,h_600,a_0/q_auto/g1petx6ej7mnbtrqt457.webp
200 OK 21 kB URL HTTP/2 antonclub-res.cloudinary.com/image/upload/e_trim:0/c_lpad,g_center,w_998,h_600,a_0/q_auto/g1petx6ej7mnbtrqt457.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 833a26552ed6e4a3d05801c79db94fe1
c54c6c43d805ecf5113220fedac1f2a80152e6c8
f6c8208600bb3ccd8ca01a88658b9092752531812d664e5af26bd4374b80286b
GET /image/upload/e_trim:0/c_lpad,g_center,w_998,h_600,a_0/q_auto/g1petx6ej7mnbtrqt457.webp HTTP/1.1
Host: antonclub-res.cloudinary.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.antonsport.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-disposition: inline; filename="g1petx6ej7mnbtrqt457.webp"
content-type: image/webp
etag: "833a26552ed6e4a3d05801c79db94fe1"
last-modified: Tue, 14 Jun 2022 08:45:17 GMT
content-length: 20994
date: Fri, 20 Jan 2023 08:33:40 GMT
cache-control: private, no-transform, immutable, max-age=31536000
access-control-expose-headers: Content-Length,Content-Disposition,Content-Range,Etag,Server-Timing,Vary,X-Cld-Error,X-Content-Type-Options
access-control-allow-origin: *
accept-ranges: bytes
timing-allow-origin: *
server: Cloudinary
strict-transport-security: max-age=604800
vary: Save-Data
x-content-type-options: nosniff
server-timing: akam;dur=210;cpu=57;start=2023-01-20T08:33:39.830Z;desc=miss,rtt;dur=1,cloudinary;dur=73;start=2023-01-20T08:33:39.914Z
X-Firefox-Spdy: h2
www.antonsport.no/nike-8-dri-fit-repel-heritage-m-p23023/sail-light-curry-university-bl-xl-v156648?kk=a4c6293-185ce4fcb23-34ad5&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Nike+Dri-Fit+Repel+Heritage+M+Sail%2FLight
200 OK 0 B URL HTTP/2 www.antonsport.no/nike-8-dri-fit-repel-heritage-m-p23023/sail-light-curry-university-bl-xl-v156648?kk=a4c6293-185ce4fcb23-34ad5&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Nike+Dri-Fit+Repel+Heritage+M+Sail%2FLight
IP
GET /nike-8-dri-fit-repel-heritage-m-p23023/sail-light-curry-university-bl-xl-v156648?kk=a4c6293-185ce4fcb23-34ad5&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Nike+Dri-Fit+Repel+Heritage+M+Sail%2FLight HTTP/1.1
Host: www.antonsport.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no-go.kelkoogroup.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 20 Jan 2023 08:33:35 GMT
content-type: text/html; charset=utf-8
x-powered-by: Express
cache-control: public, s-maxage=180, max-age=0, must-revalidate, proxy-revalidate
via: 1.1 vegur
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FRV%2BCzNBYyGNe7ioX4DyHSwX8ZB6E0j0y0x5IjieezunPOr43IOWWEpY%2B5jxLi87jCQ6D2vubVnvpdhzWl1d7KbZB4gbpp6ACnrCe%2BQC0F33KurpTRXNbmhItjwcAqSfwQbKUA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 78c6774dfeb80b51-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
eu-library.klarnaservices.com/lib.js
200 OK 0 B URL HTTP/2 eu-library.klarnaservices.com/lib.js
IP
GET /lib.js HTTP/1.1
Host: eu-library.klarnaservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.antonsport.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
date: Thu, 19 Jan 2023 10:49:11 GMT
last-modified: Thu, 19 Jan 2023 08:50:09 GMT
etag: W/"ea76297ecec0ef6e264bb9ee7da87495"
x-amz-server-side-encryption: AES256
cache-control: max-age=86400
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: rwQBhtiVXugDBKGzXREWz_JFoXbOmXK-Ovt9eEgJB-5Fxyy2cxyfmQ==
age: 78266
X-Firefox-Spdy: h2
rsms.me/inter/inter.css
200 OK 0 B IP
GET /inter/inter.css HTTP/1.1
Host: rsms.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zizr.id/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 20 Jan 2023 08:33:35 GMT
content-type: text/css; charset=utf-8
x-origin-cache: HIT
last-modified: Tue, 04 Oct 2022 15:53:21 GMT
access-control-allow-origin: *
etag: W/"633c56f1-1490"
expires: Thu, 19 Jan 2023 10:27:24 GMT
cache-control: max-age=14400
x-proxy-cache: HIT
x-github-request-id: 086B:2BED:592860:763083:633C5739
via: 1.1 varnish
age: 112
x-served-by: cache-lcy19259-LCY
x-cache: HIT
x-cache-hits: 1
x-timer: S1664899368.103122,VS0,VE14
vary: Accept-Encoding
x-fastly-request-id: 97db5a73ecf80e594fa2f26ce868967e7f244ccf
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZmYSlwYHH2FjLiQsg%2FHDWzBUllSZbaN8bN92lr8f1wIsQbAbeRv8u9pewGdQXRPEQbkPZwyiSMc5zKAVOI9LTLj0aSSN5G7aamzXbKyQRlKHE%2FHB%2FoQ%2B4DC%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78c67755cb74754d-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.antonsport.no/icon.svg
200 OK 0 B URL HTTP/2 www.antonsport.no/icon.svg
IP
GET /icon.svg HTTP/1.1
Host: www.antonsport.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.antonsport.no/nike-8-dri-fit-repel-heritage-m-p23023/sail-light-curry-university-bl-xl-v156648?kk=a4c6293-185ce4fcb23-34ad5&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Nike+Dri-Fit+Repel+Heritage+M+Sail%2FLight
Cookie: _ga_FQ4H9XCCMT=GS1.1.1674203616.1.0.1674203616.0.0.0; _ga=GA1.1.330056818.1674203616; _vdly_sessionId=s:RHwzIg0yCvAhb0CAJBE79YOAdcD7VIt3.k1ORIKbP9fAmW7k4At7rB6/iGdMrXN5o8KhpeNMUSGs
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 20 Jan 2023 08:33:37 GMT
content-type: image/svg+xml
x-powered-by: Express
cache-control: public, max-age=31536000
last-modified: Mon, 16 Jan 2023 08:53:45 GMT
etag: W/"1b2-185b9c8d5a8"
via: 1.1 vegur
cf-cache-status: HIT
age: 336474
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SUXGjnJYjPQN%2BQoktJIGQx4yPgdIbw8n1sR25m5AbHCdA0dqUujAP9edwHuUw9nQ9ImHLycHbgUklcd66bSm2JktfmWczeujngdYM0LUnE8GisF3SbtJ%2BfEJwlUqH80mJ%2BfI7Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 78c677615846b4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
api.videoly.co/1/quchbox/0/971/quch.js
200 OK 0 B URL HTTP/2 api.videoly.co/1/quchbox/0/971/quch.js
IP
GET /1/quchbox/0/971/quch.js HTTP/1.1
Host: api.videoly.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.antonsport.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 20 Jan 2023 08:33:36 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-credentials: true
access-control-allow-headers: Content-Type
access-control-allow-methods: GET,PUT,POST,OPTIONS
access-control-allow-origin: *
cf-bgj: minify
cf-polished: origSize=251224
etag: W/"3d558-tBPNYhahOlH4hvouroZzM12NpG0"
via: 1.1 vegur
x-powered-by: Express
cache-control: max-age=1800
cf-cache-status: HIT
age: 73285
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HU6YwhuK8ErMypv5lajMaj7aKWrYGSJ51hlTYt40WqzSW910lVQ6KqunEU6k1zGYt6FRIq3yxV59KcXuZ0Owne%2F0gWGd4Dzj6n1RmCzmy6hs8iyY4Kg7HlaihfxyIf45"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 78c6775c691ab4ff-OSL
content-encoding: br
X-Firefox-Spdy: h2
x.klarnacdn.net/ui/fonts/v1.3/fonts.css
200 OK 0 B URL HTTP/2 x.klarnacdn.net/ui/fonts/v1.3/fonts.css
IP
GET /ui/fonts/v1.3/fonts.css HTTP/1.1
Host: x.klarnacdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.antonsport.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css
date: Mon, 26 Dec 2022 07:40:32 GMT
x-amz-replication-status: COMPLETED
last-modified: Fri, 30 Apr 2021 10:01:44 GMT
etag: W/"c992228f869c757b2b0a2f8ecb17fa21"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
x-amz-meta-ui: ui
x-amz-version-id: t6YqdT7IzEDnLlEXrdYp2k7IY4qR3s8G
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 2afd697fc5d0058ea30d6c4b939e714c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: R4chWYVGb6xTlZ94lW_HgIIpRtNPz1whJISuVY7-Ox9u-ECyImiSyA==
age: 2163186
X-Firefox-Spdy: h2
magicwidget.socialboards.com/messenger-child/4-es2015.f4fce6d00906ce9a1417.js
200 OK 0 B URL HTTP/2 magicwidget.socialboards.com/messenger-child/4-es2015.f4fce6d00906ce9a1417.js
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
GET /messenger-child/4-es2015.f4fce6d00906ce9a1417.js HTTP/1.1
Host: magicwidget.socialboards.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magicwidget.socialboards.com/messenger-child/index.html/home?isWidgetMode=true
Cookie: ARRAffinitySameSite=942672fa603ff230f208dabc93a617b647bf22f55a8b81877b67daddd28941dc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
date: Fri, 20 Jan 2023 08:33:37 GMT
server: Microsoft-IIS/10.0
accept-ranges: bytes
content-encoding: gzip
etag: "02cc276a91bd91:0"
last-modified: Thu, 29 Dec 2022 17:17:44 GMT
vary: Accept-Encoding
content-length: 154707
x-powered-by: ASP.NET
X-Firefox-Spdy: h2
zizr.id/integration/anton-sport.css
200 OK 0 B URL HTTP/2 zizr.id/integration/anton-sport.css
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
GET /integration/anton-sport.css HTTP/1.1
Host: zizr.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.antonsport.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-store
content-type: text/css
content-encoding: br
last-modified: Thu, 05 Jan 2023 11:43:05 GMT
accept-ranges: bytes
x-cache: TCP_HIT
access-control-allow-origin: *
access-control-allow-credentials: true
x-azure-ref-originshield: 0N0vKYwAAAABvBPXtI2XvSoEbvQTODZ7sRlJBMjMxMDUwNDE4MDM1ADdkYzYzYTgyLWQ4ZWUtNDdhMi1hMDY3LTAxZWI0NDViNGJlNg==
x-azure-ref: 031HKYwAAAABa7J0ICe0YQLZvXUVHRg+xQ1BIMzBFREdFMDQyMAA3ZGM2M2E4Mi1kOGVlLTQ3YTItYTA2Ny0wMWViNDQ1YjRiZTY=
date: Fri, 20 Jan 2023 08:33:34 GMT
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-PD2NKQ
200 OK 0 B URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-PD2NKQ
IP
GET /gtm.js?id=GTM-PD2NKQ HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.antonsport.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 20 Jan 2023 08:33:35 GMT
expires: Fri, 20 Jan 2023 08:33:35 GMT
cache-control: private, max-age=900
last-modified: Fri, 20 Jan 2023 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 94100
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
172.93.103.101
93.184.220.29
95.101.11.115
52.239.141.68
104.21.19.184
13.50.76.68
139.162.140.67