r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5eb7c9bc996a0ff420e58af45526f053
8c2614832b8efe1c9da0bbd465d6f3f172d95a9e
c085cf277dd0429fe15e4a4bce5595636e9f2204d5a8e77220f8bf88adf4068f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C085CF277DD0429FE15E4A4BCE5595636E9F2204D5A8E77220F8BF88ADF4068F"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8927
Expires: Mon, 30 Jan 2023 11:21:04 GMT
Date: Mon, 30 Jan 2023 08:52:17 GMT
Connection: keep-alive
productmusics.com/ru53332/APM5916TUwAAtBECAFVTFwAMALT7MdAA/download?ofnyn=54.exe
302 Moved Temporarily 145 B URL HTTP/1.1 productmusics.com/ru53332/APM5916TUwAAtBECAFVTFwAMALT7MdAA/download?ofnyn=54.exe
IP
ASN #27257 WEBAIR-INTERNET
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash ca35f86083c327b09ec3df0adfe284e7
bd680276bffaf6fdb304657003d51a74b5c2f998
84c1fdfe0e68e2ed14b46fd867e91688936072ad51471ea9fa0c7616480ab912
Analyzer Verdict Alert fortinet Malware
GET /ru53332/APM5916TUwAAtBECAFVTFwAMALT7MdAA/download?ofnyn=54.exe HTTP/1.1
Host: productmusics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Moved Temporarily
Server: nginx/1.20.1
Date: Mon, 30 Jan 2023 08:52:17 GMT
Content-Type: text/html
Content-Length: 145
Connection: keep-alive
Location: http://productmusics.com/
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3eb88dea4fe00db1182370e72683c3ab
ca520abf1e91bfd2aef40c6a1270a911071e8922
d8083ee567c7b3023111dc30f32c94237df7db30d4d2daaea0a569e8a3069ad7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D8083EE567C7B3023111DC30F32C94237DF7DB30D4D2DAAEA0A569E8A3069AD7"
Last-Modified: Sat, 28 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2854
Expires: Mon, 30 Jan 2023 09:39:51 GMT
Date: Mon, 30 Jan 2023 08:52:17 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash dcd75ca6daca51c5e39d431468511793
07f76d3bf23d65c9110d810fa71a994e39e085d3
73672a816da4450fe2c938b08d7ae002d9ca29fdcbd3e29cc97084d826f8b459
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Retry-After, Content-Type, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 30 Jan 2023 08:43:11 GMT
content-type: application/json
age: 546
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 302c7548412192add063ad6c8b99cf3b
e5d178931a27db036ce8daae302594d3ff7050b8
fc2bd9091006189e67e8074093805ee5492ce16e1dbfba32e083abeeae34969d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FC2BD9091006189E67E8074093805EE5492CE16E1DBFBA32E083ABEEAE34969D"
Last-Modified: Sat, 28 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5703
Expires: Mon, 30 Jan 2023 10:27:20 GMT
Date: Mon, 30 Jan 2023 08:52:17 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: CwyhzNr/rxoJYim7IMBdPIA1jJS4wmsGHbrl5fLHSUDrwv6vxXuXvM5YSsEPY/JyGh6+INqjAzA=
x-amz-request-id: 3DMNATAEVKHRTTH3
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 30 Jan 2023 08:50:40 GMT
age: 97
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
productmusics.com/
200 OK 249 B IP
ASN #27257 WEBAIR-INTERNET
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash ebb3a409f0acc388938bac002af9a6aa
925b7c9198e73fa55640b851519db2e0767fa952
fc1e2128fbc9f1d479d9a286963b9095dfea2d5324a4327d845c2bc25f5ebd2e
Analyzer Verdict Alert fortinet Phishing
NIDS Severity Alert suricata medium ET ADWARE_PUP Win32/Zonebac Traffic Redirect
GET / HTTP/1.1
Host: productmusics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Mon, 30 Jan 2023 08:52:17 GMT
Content-Type: text/html;charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 08:52:17 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
productmusics.com/favicon.ico
404 Not Found 114 B URL HTTP/1.1 productmusics.com/favicon.ico
IP
ASN #27257 WEBAIR-INTERNET
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4dda89292ffda632595d8e4040ef07c8
55c26cf87340555b3c09ba932bbabfc066a8d0ea
2615795f2aaccceaee3a5a92bcb488c122aed8a152f042633e41657fff9f7278
GET /favicon.ico HTTP/1.1
Host: productmusics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://productmusics.com/
HTTP/1.1 404 Not Found
Server: nginx/1.20.1
Date: Mon, 30 Jan 2023 08:52:17 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Last-Modified, Pragma, ETag, Retry-After, Content-Type, Content-Length, Expires, Cache-Control, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 30 Jan 2023 08:49:04 GMT
age: 194
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 22b9916fc1fafc9bdc9bb37f9eac8a9a
86f640e134a741a0f906a8e3a0f5c6659dd0e394
a29ee843c8a39551a1507cc6ad949ad509e33aaae8b72c58ac4884bad8b0b38e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A29EE843C8A39551A1507CC6AD949AD509E33AAAE8B72C58AC4884BAD8B0B38E"
Last-Modified: Sun, 29 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7243
Expires: Mon, 30 Jan 2023 10:53:01 GMT
Date: Mon, 30 Jan 2023 08:52:18 GMT
Connection: keep-alive
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: JKjJGcdaZYlrJWtybxdzxA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: bdkX54WucWW5i7l0M38g+qW8tOk=
productmusics.com/
200 OK 233 B IP
ASN #27257 WEBAIR-INTERNET
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 7a85917b7af92e47babee9d3d5874d98
599436b313943ed75e9fdf5fde2e07cb26eb21ad
57a35718f03313e833a64e5eb446a83187faeb7f9597125a84f52e5acb8fe249
Analyzer Verdict Alert fortinet Phishing
NIDS Severity Alert suricata medium ET ADWARE_PUP Win32/Zonebac Traffic Redirect
POST / HTTP/1.1
Host: productmusics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
Content-Length: 12
Origin: http://productmusics.com
Connection: keep-alive
Referer: http://productmusics.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Mon, 30 Jan 2023 08:52:18 GMT
Content-Type: text/html;charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: ipc=eyJ2ZXJzaW9uIjoxLCJzdWJJZCI6MywiZm9sZGVySWQiOjEsImZlZWRJZCI6NjQsInRzIjoxNjc1MDY4NzM4LCJoYXNoIjoiOWEyZjBmZWMifQ==;Expires=Mon, 30-Jan-2023 09:52:18 GMT;Max-Age=3600
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Content-Encoding: gzip
orest-vlv.com/zcvisitor/666c7981-a07b-11ed-a13c-122045e259d9/13946a70-a5da-11ec-9226-0a76dcc61f13?campaignid=6679e703-a07b-11ed-a13c-122045e259d9
200 1.1 kB URL HTTP/1.1 orest-vlv.com/zcvisitor/666c7981-a07b-11ed-a13c-122045e259d9/13946a70-a5da-11ec-9226-0a76dcc61f13?campaignid=6679e703-a07b-11ed-a13c-122045e259d9
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash cc1c15b5f5c57b8c0ef0b4ff993be81c
46ebca40ceccc2d1ac72cdeb5c78fd1fc2bd49bc
58045de53c67eba2bd4efad41c7fb1173c97ed823d4f2b2ab6ed850c1435c508
GET /zcvisitor/666c7981-a07b-11ed-a13c-122045e259d9/13946a70-a5da-11ec-9226-0a76dcc61f13?campaignid=6679e703-a07b-11ed-a13c-122045e259d9 HTTP/1.1
Host: orest-vlv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://productmusics.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200
Date: Mon, 30 Jan 2023 08:52:19 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Headers: X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag
Server: WAghKsca
orest-vlv.com/zcredirect?visitid=666c7981-a07b-11ed-a13c-122045e259d9&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false&webdriverDetected=false
200 424 B URL HTTP/1.1 orest-vlv.com/zcredirect?visitid=666c7981-a07b-11ed-a13c-122045e259d9&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false&webdriverDetected=false
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash d7346519e87a9d7770b45ab7a5da3f7e
cdcdb11f4157fca834eb14370a23a1c51a8fd10c
240f7a6690dc87305f7431a5d1f6ef7e1ff90055e48f8c6ecdb8af7c4f7e5138
GET /zcredirect?visitid=666c7981-a07b-11ed-a13c-122045e259d9&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false&webdriverDetected=false HTTP/1.1
Host: orest-vlv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://orest-vlv.com/zcvisitor/666c7981-a07b-11ed-a13c-122045e259d9/13946a70-a5da-11ec-9226-0a76dcc61f13?campaignid=6679e703-a07b-11ed-a13c-122045e259d9
Upgrade-Insecure-Requests: 1
HTTP/1.1 200
Date: Mon, 30 Jan 2023 08:52:19 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Headers: X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag
redirected: JS
Server: mBEfvPWw
orest-vlv.com/favicon.ico
404 653 B URL HTTP/1.1 orest-vlv.com/favicon.ico
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (649), with no line terminators
Hash ba2732b1b2fa2626ffaa15f62f9e7d66
203d4e7fbb1d80449d6e4e1f3ae7a9bf8625debe
879861cb72fe9fbb476dab246021c4c83b4066327de2529e05ec54d3afb0a1c8
GET /favicon.ico HTTP/1.1
Host: orest-vlv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://orest-vlv.com/zcredirect?visitid=666c7981-a07b-11ed-a13c-122045e259d9&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false&webdriverDetected=false
HTTP/1.1 404
Date: Mon, 30 Jan 2023 08:52:19 GMT
Content-Type: text/html;charset=utf-8
Content-Length: 653
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Content-Language: en
Server: dzCLRFEj
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f2a0c2c0f25bdd19baf87cbb3a87dcdb
bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a
c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4345
Expires: Mon, 30 Jan 2023 10:04:44 GMT
Date: Mon, 30 Jan 2023 08:52:19 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f2a0c2c0f25bdd19baf87cbb3a87dcdb
bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a
c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4345
Expires: Mon, 30 Jan 2023 10:04:44 GMT
Date: Mon, 30 Jan 2023 08:52:19 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f2a0c2c0f25bdd19baf87cbb3a87dcdb
bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a
c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4345
Expires: Mon, 30 Jan 2023 10:04:44 GMT
Date: Mon, 30 Jan 2023 08:52:19 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f2a0c2c0f25bdd19baf87cbb3a87dcdb
bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a
c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4345
Expires: Mon, 30 Jan 2023 10:04:44 GMT
Date: Mon, 30 Jan 2023 08:52:19 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f2a0c2c0f25bdd19baf87cbb3a87dcdb
bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a
c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4345
Expires: Mon, 30 Jan 2023 10:04:44 GMT
Date: Mon, 30 Jan 2023 08:52:19 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4bfbdca6-432c-4f19-887a-3165827e4bc6.jpeg
200 OK 3.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4bfbdca6-432c-4f19-887a-3165827e4bc6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e8d680cbaee5ef3e7b8e09b174ed6ecf
6651a0d3041920798240ea67e827c3d458769fa9
4c74e8ebff95e67da678248d3dc1d3f42d98c8a0d33d54d9d2bde36314c9f952
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4bfbdca6-432c-4f19-887a-3165827e4bc6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3678
x-amzn-requestid: 21cd1ae3-b769-418a-b7f8-5efa486db859
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fhkEvE-RIAMFpmg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d6e6ea-6998009c289996563d78616a;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 21:36:43 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: XbMeLjDaYoPiw42pUbszzOEqWeUdx01NI6zVLJFgp0r3B_2dHHxX-w==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 22:11:45 GMT
age: 38434
etag: "6651a0d3041920798240ea67e827c3d458769fa9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3bb7921c-8aaf-40cd-bf87-43903c3f1a74.jpeg
200 OK 7.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3bb7921c-8aaf-40cd-bf87-43903c3f1a74.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3e04b9eaf7449828136ad59e4c9d69f1
b820be4ed885dcf288eb6460c57e1fa7b1c7c476
df75cf7183d401a19655aab025d08ad2c498573c88b32e9b258d951d2993b936
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3bb7921c-8aaf-40cd-bf87-43903c3f1a74.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7679
x-amzn-requestid: 0c7983d5-6040-44e9-b394-21c3784702a2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fhkEtEfHoAMFaNA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d6e6ea-54c55dbd09ca642048af8916;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 21:36:42 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: VHh2SQ21xoDoBnGvM2kRiposhXuCE-DdWW1bM35kEykjbHYmhsldVA==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 21:51:22 GMT
age: 39657
etag: "b820be4ed885dcf288eb6460c57e1fa7b1c7c476"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df754eb-70f9-4576-ac48-68a6ae719511.jpeg
200 OK 9.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df754eb-70f9-4576-ac48-68a6ae719511.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 51aa950d5eed7b90cab6632107092edc
e4388ced02e5576867e77547496dec1ac2338ef7
588830e5f725e8e56270565e40f817f2658b0ee7c0425d138e5f65a17ff40483
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df754eb-70f9-4576-ac48-68a6ae719511.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9457
x-amzn-requestid: 7c48e5ca-2128-43da-ba83-fd91568af1ef
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fhkBOGHVoAMFQtw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d6e6d4-1b850ffd543f51f92dec3894;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 21:36:20 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 3EXFa0gb46AbdZ9ZznGiPTemGZ7zWh9WLs5Yr1zmfyh_jyKA6o7xoA==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 7022a5bbf9872d4a09d63e6cdb457dfe.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 22:19:57 GMT
age: 37942
etag: "e4388ced02e5576867e77547496dec1ac2338ef7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52796f60-dafe-46ba-9c7a-a08ce5e16c34.jpeg
200 OK 8.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52796f60-dafe-46ba-9c7a-a08ce5e16c34.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash fe31ee140c2fd62e616c8a1edc9e78bb
7aa5fbdc8156514770ae620e81f1afef1c77890f
799af4bf9fa07ed27ebdc9d1a3344ee8a2b6529f076c263495b93290c47a1cc4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52796f60-dafe-46ba-9c7a-a08ce5e16c34.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8464
x-amzn-requestid: bf2cf356-ebb1-469b-ba35-a79bb009cad6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fhj3qGeboAMFzNw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d6e697-7c96841f52b6a96d1b0eaf34;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 21:35:19 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: y6bDvcD7a3-A4DLC3cSdZT-yewV1kkFqcGr7AMuqvUeGA4A0pgF4wQ==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 7022a5bbf9872d4a09d63e6cdb457dfe.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 21:59:27 GMT
age: 39172
etag: "7aa5fbdc8156514770ae620e81f1afef1c77890f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9a423a9-16ee-4e3f-b9b4-34f6a469aba9.jpeg
200 OK 9.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9a423a9-16ee-4e3f-b9b4-34f6a469aba9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3be81f83687ddb6c93d3ff3c09a9dba2
50a48e737310d3f31840db4301b25927fbcc12c5
e78c909e2381898e7f546183784a05dff47c31734c95358aaada8c2777ad47be
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9a423a9-16ee-4e3f-b9b4-34f6a469aba9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9167
x-amzn-requestid: e6e0789c-a4a9-4ffa-a0ae-691770d1035b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fPF9YEBmIAMF0kQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cf8388-01d2093432d3959903671a69;Sampled=0
x-amzn-remapped-date: Tue, 24 Jan 2023 07:06:48 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: awfNeaKbFw2bjiTGwUrwUTxU-qbVS2eTjn948H8kn1hy7pi_DwLMlQ==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 17:35:56 GMT
age: 54983
etag: "50a48e737310d3f31840db4301b25927fbcc12c5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9f96350b-0dd8-46ee-a270-85f96329b7c9.png
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9f96350b-0dd8-46ee-a270-85f96329b7c9.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash bb1a5e0a2bb1cacf87189373c118adf4
079974268f755aa38fb2cb32b8bcb748353c793f
1b0519e6bfca30a31b83d427302f7e22140f5b2da6f13cac37ea9c07abc42676
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9f96350b-0dd8-46ee-a270-85f96329b7c9.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11095
x-amzn-requestid: dc7c00e2-cd2d-4265-8763-3dd7dbe223ac
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fhkFyEhJIAMFjpw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d6e6f1-541a17c362e95dfa5e90f58f;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 21:36:49 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: UuPN6Nq84hFgUDMbvpLTysWfU1JcRiecGH3tkdqDOOXBo9hVhmpMBA==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 21:59:52 GMT
age: 39147
etag: "079974268f755aa38fb2cb32b8bcb748353c793f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r.redirekted.com/redirect?redirect_id=99b5cfe33524ad83bde539cda4016fe0&request_id=eb5d8d8079d3a67442e12f07788667e9
200 OK 795 B URL HTTP/1.1 r.redirekted.com/redirect?redirect_id=99b5cfe33524ad83bde539cda4016fe0&request_id=eb5d8d8079d3a67442e12f07788667e9
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (303)
Hash 7942a92c2d2148cb733120f5d6e5a958
29b639105887920ca3734ac3fba581c9b3a6216e
a547a75e256a3a314aa99d2e7bd523cee562bd526647dbde7c4d232ca5cfa107
GET /redirect?redirect_id=99b5cfe33524ad83bde539cda4016fe0&request_id=eb5d8d8079d3a67442e12f07788667e9 HTTP/1.1
Host: r.redirekted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://orest-vlv.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx/1.23.3
Date: Mon, 30 Jan 2023 08:52:19 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/8.1.13
r.redirekted.com/css/adren.css?n=2067728682
200 OK 243 B URL HTTP/1.1 r.redirekted.com/css/adren.css?n=2067728682
IP
Hash f72acd3fece9f7cf58643616c745b2ea
92bc529a83c5466fbf6b9e702eef1e59644687a1
e2d9fd8b995f146baf54bc35d162d3e8169a5345368058b10a3b3bf4592ed777
GET /css/adren.css?n=2067728682 HTTP/1.1
Host: r.redirekted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://r.redirekted.com/redirect?redirect_id=99b5cfe33524ad83bde539cda4016fe0&request_id=eb5d8d8079d3a67442e12f07788667e9
HTTP/1.1 200 OK
Server: nginx/1.23.3
Date: Mon, 30 Jan 2023 08:52:19 GMT
Content-Type: text/css
Content-Length: 243
Last-Modified: Sat, 03 Jul 2021 05:46:18 GMT
Connection: keep-alive
ETag: "60dff9aa-f3"
Accept-Ranges: bytes
r.redirekted.com/js/adren.min.js?n=2067728682
200 OK 7.5 kB URL HTTP/1.1 r.redirekted.com/js/adren.min.js?n=2067728682
IP
File type ASCII text, with very long lines (7528), with no line terminators
Hash 9a9ec61d7e275f25fe83f0aa93bd2e41
8a3a23c432b601e9f8f8fe2b61f0fedbc341c9ac
55afe8ae4db5b6ca9ec5a3aca1f3a7b482ca51d0914acd250093f1a9ecbfccec
GET /js/adren.min.js?n=2067728682 HTTP/1.1
Host: r.redirekted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://r.redirekted.com/redirect?redirect_id=99b5cfe33524ad83bde539cda4016fe0&request_id=eb5d8d8079d3a67442e12f07788667e9
HTTP/1.1 200 OK
Server: nginx/1.23.3
Date: Mon, 30 Jan 2023 08:52:20 GMT
Content-Type: application/javascript
Content-Length: 7528
Last-Modified: Sat, 03 Jul 2021 05:46:18 GMT
Connection: keep-alive
ETag: "60dff9aa-1d68"
Accept-Ranges: bytes
r.redirekted.com/favicon.ico
200 OK 0 B URL HTTP/1.1 r.redirekted.com/favicon.ico
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: r.redirekted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://r.redirekted.com/redirect?redirect_id=99b5cfe33524ad83bde539cda4016fe0&request_id=eb5d8d8079d3a67442e12f07788667e9
HTTP/1.1 200 OK
Server: nginx/1.23.3
Date: Mon, 30 Jan 2023 08:52:20 GMT
Content-Type: image/x-icon
Content-Length: 0
Last-Modified: Sat, 03 Jul 2021 05:46:18 GMT
Connection: keep-alive
ETag: "60dff9aa-0"
Accept-Ranges: bytes
r.redirekted.com/go?e=04mWWSPXabGsbVlLeZUBV13F9jQsuEKL9gxVskaCzxRs-bPF9gRAw53pdRJsuMPM59Gr8RFW8DzX7plBe4wWYk3FzbHs2IUC-AKs6fvqzNTsY1mBeLUqsk3p0S2X-LPF59Gr-RPX58IA3OKM7cRnUEwCafHAlOJLmpaXTcFLbI0rXgvEuHPrV13B0VTs7tGL-AUr-bFLRu2Z_pPEmV3XTEwLwbHVytaCmtvVtEwLwbHVbj3L8uvWvk3B5jwsbVlKdfHr-03B8S2X7NKL9SzXw5UX9gQsyVlL9gGr7x3C9gQA_DQn8IPrwkapefxXvyUDuHPCY5UWe8IVcZvF1tvW
200 OK 1.8 kB URL HTTP/1.1 r.redirekted.com/go?e=04mWWSPXabGsbVlLeZUBV13F9jQsuEKL9gxVskaCzxRs-bPF9gRAw53pdRJsuMPM59Gr8RFW8DzX7plBe4wWYk3FzbHs2IUC-AKs6fvqzNTsY1mBeLUqsk3p0S2X-LPF59Gr-RPX58IA3OKM7cRnUEwCafHAlOJLmpaXTcFLbI0rXgvEuHPrV13B0VTs7tGL-AUr-bFLRu2Z_pPEmV3XTEwLwbHVytaCmtvVtEwLwbHVbj3L8uvWvk3B5jwsbVlKdfHr-03B8S2X7NKL9SzXw5UX9gQsyVlL9gGr7x3C9gQA_DQn8IPrwkapefxXvyUDuHPCY5UWe8IVcZvF1tvW
IP
File type HTML document, ASCII text, with very long lines (464)
Hash 4f8d07292220148152fc505c1c81a3f5
5c57ff57ca75139d6fcf0ec856c6da7c35f9751d
98af99bb54e5268cec7bb6f0c47995c42fc2b891ab3e5aa195ce2551ee21bee4
GET /go?e=04mWWSPXabGsbVlLeZUBV13F9jQsuEKL9gxVskaCzxRs-bPF9gRAw53pdRJsuMPM59Gr8RFW8DzX7plBe4wWYk3FzbHs2IUC-AKs6fvqzNTsY1mBeLUqsk3p0S2X-LPF59Gr-RPX58IA3OKM7cRnUEwCafHAlOJLmpaXTcFLbI0rXgvEuHPrV13B0VTs7tGL-AUr-bFLRu2Z_pPEmV3XTEwLwbHVytaCmtvVtEwLwbHVbj3L8uvWvk3B5jwsbVlKdfHr-03B8S2X7NKL9SzXw5UX9gQsyVlL9gGr7x3C9gQA_DQn8IPrwkapefxXvyUDuHPCY5UWe8IVcZvF1tvW HTTP/1.1
Host: r.redirekted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://r.redirekted.com/redirect?redirect_id=99b5cfe33524ad83bde539cda4016fe0&request_id=eb5d8d8079d3a67442e12f07788667e9
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx/1.23.3
Date: Mon, 30 Jan 2023 08:52:20 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/8.1.13
Set-Cookie: uuid=4144061056158850560; expires=Tue, 31-Jan-2023 08:52:20 GMT; Max-Age=86400
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/1.1 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://r.redirekted.com/
HTTP/1.1 200 OK
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Cross-Origin-Resource-Policy: cross-origin
Server: Golfe2
Content-Length: 20085
Date: Mon, 30 Jan 2023 08:24:47 GMT
Expires: Mon, 30 Jan 2023 10:24:47 GMT
Cache-Control: public, max-age=7200
Age: 1653
Last-Modified: Tue, 10 Jan 2023 21:29:14 GMT
Content-Type: text/javascript
www.google-analytics.com/collect?v=1&_v=j99&a=1167595996&t=pageview&_s=2&dl=http%3A%2F%2Fr.redirekted.com%2Fgo%3Fe%3D04mWWSPXabGsbVlLeZUBV13F9jQsuEKL9gxVskaCzxRs-bPF9gRAw53pdRJsuMPM59Gr8RFW8DzX7plBe4wWYk3FzbHs2IUC-AKs6fvqzNTsY1mBeLUqsk3p0S2X-LPF59Gr-RPX58IA3OKM7cRnUEwCafHAlOJLmpaXTcFLbI0rXgvEuHPrV13B0VTs7tGL-AUr-bFLRu2Z_pPEmV3XTEwLwbHVytaCmtvVtEwLwbHVbj3L8uvWvk3B5jwsbVlKdfHr-03B8S2X7NKL9SzXw5UX9gQsyVlL9gGr7x3C9gQA_DQn8IPrwkapefxXvyUDuHPCY5UWe8IVcZvF1tvW&ul=en-us&de=UTF-8&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=IEBAAEABAAAAACAAI~&jid=&gjid=&cid=1377418233.1675068752&tid=UA-32454353-1&_gid=666806492.1675068752&cd1=oz9lo258n2kesUk8sT5ipz9hsTgfn3k8sUj%3D&z=350742355
200 OK 35 B URL HTTP/1.1 www.google-analytics.com/collect?v=1&_v=j99&a=1167595996&t=pageview&_s=2&dl=http%3A%2F%2Fr.redirekted.com%2Fgo%3Fe%3D04mWWSPXabGsbVlLeZUBV13F9jQsuEKL9gxVskaCzxRs-bPF9gRAw53pdRJsuMPM59Gr8RFW8DzX7plBe4wWYk3FzbHs2IUC-AKs6fvqzNTsY1mBeLUqsk3p0S2X-LPF59Gr-RPX58IA3OKM7cRnUEwCafHAlOJLmpaXTcFLbI0rXgvEuHPrV13B0VTs7tGL-AUr-bFLRu2Z_pPEmV3XTEwLwbHVytaCmtvVtEwLwbHVbj3L8uvWvk3B5jwsbVlKdfHr-03B8S2X7NKL9SzXw5UX9gQsyVlL9gGr7x3C9gQA_DQn8IPrwkapefxXvyUDuHPCY5UWe8IVcZvF1tvW&ul=en-us&de=UTF-8&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=IEBAAEABAAAAACAAI~&jid=&gjid=&cid=1377418233.1675068752&tid=UA-32454353-1&_gid=666806492.1675068752&cd1=oz9lo258n2kesUk8sT5ipz9hsTgfn3k8sUj%3D&z=350742355
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /collect?v=1&_v=j99&a=1167595996&t=pageview&_s=2&dl=http%3A%2F%2Fr.redirekted.com%2Fgo%3Fe%3D04mWWSPXabGsbVlLeZUBV13F9jQsuEKL9gxVskaCzxRs-bPF9gRAw53pdRJsuMPM59Gr8RFW8DzX7plBe4wWYk3FzbHs2IUC-AKs6fvqzNTsY1mBeLUqsk3p0S2X-LPF59Gr-RPX58IA3OKM7cRnUEwCafHAlOJLmpaXTcFLbI0rXgvEuHPrV13B0VTs7tGL-AUr-bFLRu2Z_pPEmV3XTEwLwbHVytaCmtvVtEwLwbHVbj3L8uvWvk3B5jwsbVlKdfHr-03B8S2X7NKL9SzXw5UX9gQsyVlL9gGr7x3C9gQA_DQn8IPrwkapefxXvyUDuHPCY5UWe8IVcZvF1tvW&ul=en-us&de=UTF-8&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=IEBAAEABAAAAACAAI~&jid=&gjid=&cid=1377418233.1675068752&tid=UA-32454353-1&_gid=666806492.1675068752&cd1=oz9lo258n2kesUk8sT5ipz9hsTgfn3k8sUj%3D&z=350742355 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://r.redirekted.com/
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Pragma: no-cache
X-Content-Type-Options: nosniff
Cross-Origin-Resource-Policy: cross-origin
Server: Golfe2
Content-Length: 35
Date: Mon, 30 Jan 2023 03:44:12 GMT
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Age: 18488
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
Content-Type: image/gif
status.thawte.com/
200 OK 471 B IP
Hash 3fc019bfe0b9001e0e9418c99c367858
381aff18ba7449f1a167ec765b34b723665f9e2a
5e00b3da61d26d74edcc939066cbcd93a5d14798eec1d5a2625c4090057f9891
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4091
Cache-Control: max-age=121597
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 08:52:20 GMT
Etag: "63d6ad46-1d7"
Expires: Tue, 31 Jan 2023 18:38:57 GMT
Last-Modified: Sun, 29 Jan 2023 17:30:46 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
no-go.kelkoogroup.net/offersearchGo?.ts=1675007824978&.sig=GLy6x_DxL8nekoENYviWklculoE-&affiliationId=96965866&comId=12930613&country=no&offerId=ffd89baa1fd427c96be27762911ec942&service=37&tokenId=35e025c3-2943-4e2d-874f-eaee491f9fab&wait=true&addedParams=true&custom1=Ns7DQM9gHraEmq5q0X3qlB1LULtEGL9fQAXE2BmRTLaIPCbqzsyDaE-IPpT13p4MRsyLlK3ZUqVk3pzZTsmuUL&custom2=8IPrxk3FjSTsy03MlRJFQqwqxqRA-tzE
200 OK 30 kB URL HTTP/1.1 no-go.kelkoogroup.net/offersearchGo?.ts=1675007824978&.sig=GLy6x_DxL8nekoENYviWklculoE-&affiliationId=96965866&comId=12930613&country=no&offerId=ffd89baa1fd427c96be27762911ec942&service=37&tokenId=35e025c3-2943-4e2d-874f-eaee491f9fab&wait=true&addedParams=true&custom1=Ns7DQM9gHraEmq5q0X3qlB1LULtEGL9fQAXE2BmRTLaIPCbqzsyDaE-IPpT13p4MRsyLlK3ZUqVk3pzZTsmuUL&custom2=8IPrxk3FjSTsy03MlRJFQqwqxqRA-tzE
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (12878)
Hash 48e0dfebdcb972e0cbdb2eac3b2d45a2
61fb4c7f71f380c513f88441d7680228e536d83d
44c3261cd0367aefaa4228dae3ef4c8f0e27611ac1a6cc4aeca33274c1aa8698
GET /offersearchGo?.ts=1675007824978&.sig=GLy6x_DxL8nekoENYviWklculoE-&affiliationId=96965866&comId=12930613&country=no&offerId=ffd89baa1fd427c96be27762911ec942&service=37&tokenId=35e025c3-2943-4e2d-874f-eaee491f9fab&wait=true&addedParams=true&custom1=Ns7DQM9gHraEmq5q0X3qlB1LULtEGL9fQAXE2BmRTLaIPCbqzsyDaE-IPpT13p4MRsyLlK3ZUqVk3pzZTsmuUL&custom2=8IPrxk3FjSTsy03MlRJFQqwqxqRA-tzE HTTP/1.1
Host: no-go.kelkoogroup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://r.redirekted.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
leadId: dc1-kls-prod-ls-04.prod.dc1.kelkoo.net_1675068740525_1204135
clickId: 107698154_1675068740519_5412612
country: no
Accept-CH: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory
Set-Cookie: datadome=77XHCN4_Me5oucx1KisohssHJg8OHxnkf~yrDYGDHUCeflRh3KiCyHw2RY66TeonQMGB0KeEPyGnLIt78vnhZBT3HMZj7yBbz4gT3q~4E2qvFSYMViY0Uy_G--2GM0Jx; Max-Age=31536000; Expires=Tue, 30 Jan 2024 08:52:20 GMT; SameSite=Lax; Path=/; Domain=.kelkoogroup.net; Secure
kelkooID=a4c629a-18601e093a7-fb880; Max-Age=31536000; Expires=Tue, 30 Jan 2024 08:52:20 GMT; SameSite=None; Path=/; Domain=kelkoogroup.net; Secure; HTTPOnly
X-DataDome: protected
Request-Time: PT0.014029S
X-Robots-Tag: noindex,nofollow
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: DENY
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: master-only
Date: Mon, 30 Jan 2023 08:52:20 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 30151
no-go.kelkoogroup.net/assets/images/p.png?country=no&k=612f7a9541cd6ea61eb554c0e4cff437567c460be4e08eed49d56f330fab19bbcf4f591f1b3a90ef17c15a6adff2547076464b1b9c1259c7b0f503e6a87b146bbe93a528fed68a0f577c4fb113e801a6a1e9c949c3d0133f76c7e8931f3085fd42d633305dc64716bb1b81bcf7ef387f43be3458d6e96140048235c88b49f2ee9754390232d83bc549fe521336f388cbe713094441ac81d96251fe1f5dcc00b02d2689b3ec75fa4d234158a219f858a07c674fb014d52bbdf10be3ae63a156e6aa871fffd4633915aec4fca1055c08d99794ba65bf466842e7d9707b47c90da907feb8d118df96a47d7ed648ef9bffed4bc748e159193ca3511609be6a15fc714fc3e217dfa1a54607d7d5bb847c6be3954f09afa5916683fa2566c4da8c1bedd1afa977d13a28c2ceb3c9a2fbb069cf82236a5a64a6439c8f1eb73d88b5a6c4067b3b37c4207ef44687b879a86104491b99fd979e94b4cfdd3cd26176fcf845d3924fc9f5ae09afe536e167bc32d76fc3257b0a05c5c22ec1fc678ae803cc6c2b53905e9f85c8fe859c7003fd5ae599bef6fa0585042d9e27156208a4bf4348
200 OK 68 B URL HTTP/1.1 no-go.kelkoogroup.net/assets/images/p.png?country=no&k=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
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced\012- data
Hash 91e42db1c66c0b276abf6234dc50b2eb
c1986af3c26609b8b7d8933f99c51c1a89e9ea6b
63ef318d96b5d0d0ceba6e04a4e622b1158335cdc67c49e27839132c6f655058
GET /assets/images/p.png?country=no&k=612f7a9541cd6ea61eb554c0e4cff437567c460be4e08eed49d56f330fab19bbcf4f591f1b3a90ef17c15a6adff2547076464b1b9c1259c7b0f503e6a87b146bbe93a528fed68a0f577c4fb113e801a6a1e9c949c3d0133f76c7e8931f3085fd42d633305dc64716bb1b81bcf7ef387f43be3458d6e96140048235c88b49f2ee9754390232d83bc549fe521336f388cbe713094441ac81d96251fe1f5dcc00b02d2689b3ec75fa4d234158a219f858a07c674fb014d52bbdf10be3ae63a156e6aa871fffd4633915aec4fca1055c08d99794ba65bf466842e7d9707b47c90da907feb8d118df96a47d7ed648ef9bffed4bc748e159193ca3511609be6a15fc714fc3e217dfa1a54607d7d5bb847c6be3954f09afa5916683fa2566c4da8c1bedd1afa977d13a28c2ceb3c9a2fbb069cf82236a5a64a6439c8f1eb73d88b5a6c4067b3b37c4207ef44687b879a86104491b99fd979e94b4cfdd3cd26176fcf845d3924fc9f5ae09afe536e167bc32d76fc3257b0a05c5c22ec1fc678ae803cc6c2b53905e9f85c8fe859c7003fd5ae599bef6fa0585042d9e27156208a4bf4348 HTTP/1.1
Host: no-go.kelkoogroup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no-go.kelkoogroup.net/offersearchGo?.ts=1675007824978&.sig=GLy6x_DxL8nekoENYviWklculoE-&affiliationId=96965866&comId=12930613&country=no&offerId=ffd89baa1fd427c96be27762911ec942&service=37&tokenId=35e025c3-2943-4e2d-874f-eaee491f9fab&wait=true&addedParams=true&custom1=Ns7DQM9gHraEmq5q0X3qlB1LULtEGL9fQAXE2BmRTLaIPCbqzsyDaE-IPpT13p4MRsyLlK3ZUqVk3pzZTsmuUL&custom2=8IPrxk3FjSTsy03MlRJFQqwqxqRA-tzE
Connection: keep-alive
Cookie: datadome=77XHCN4_Me5oucx1KisohssHJg8OHxnkf~yrDYGDHUCeflRh3KiCyHw2RY66TeonQMGB0KeEPyGnLIt78vnhZBT3HMZj7yBbz4gT3q~4E2qvFSYMViY0Uy_G--2GM0Jx; kelkooID=a4c629a-18601e093a7-fb880
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
leadId: dc1-kls-prod-ls-04.prod.dc1.kelkoo.net_1675068740525_1204135
clickId: 107698154_1675068740519_5412612
country: no
Request-Time: PT0.001271S
X-Robots-Tag: noindex,nofollow
Cache-Control: private, must-revalidate
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: DENY
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: master-only
Date: Mon, 30 Jan 2023 08:52:20 GMT
Content-Type: image/png
Content-Length: 68
no-go.kelkoogroup.net/fp?country=no&k=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
200 OK 0 B URL HTTP/1.1 no-go.kelkoogroup.net/fp?country=no&k=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
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /fp?country=no&k=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 HTTP/1.1
Host: no-go.kelkoogroup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no-go.kelkoogroup.net/offersearchGo?.ts=1675007824978&.sig=GLy6x_DxL8nekoENYviWklculoE-&affiliationId=96965866&comId=12930613&country=no&offerId=ffd89baa1fd427c96be27762911ec942&service=37&tokenId=35e025c3-2943-4e2d-874f-eaee491f9fab&wait=true&addedParams=true&custom1=Ns7DQM9gHraEmq5q0X3qlB1LULtEGL9fQAXE2BmRTLaIPCbqzsyDaE-IPpT13p4MRsyLlK3ZUqVk3pzZTsmuUL&custom2=8IPrxk3FjSTsy03MlRJFQqwqxqRA-tzE
Content-Type: text/plain;charset=utf-8
Content-Length: 536
Origin: https://no-go.kelkoogroup.net
Connection: keep-alive
Cookie: datadome=77XHCN4_Me5oucx1KisohssHJg8OHxnkf~yrDYGDHUCeflRh3KiCyHw2RY66TeonQMGB0KeEPyGnLIt78vnhZBT3HMZj7yBbz4gT3q~4E2qvFSYMViY0Uy_G--2GM0Jx; kelkooID=a4c629a-18601e093a7-fb880; _ga=GA1.2.64335881.1675068751; _gid=GA1.2.1533336403.1675068751
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
leadId: dc1-kls-prod-ls-04.prod.dc1.kelkoo.net_1675068740525_1204135
clickId: 107698154_1675068740519_5412612
country: no
Request-Time: PT0.002867S
X-Robots-Tag: noindex,nofollow
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: DENY
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: master-only
Date: Mon, 30 Jan 2023 08:52:20 GMT
Content-Type: text/plain; charset=UTF-8
Content-Length: 0
no-go.kelkoogroup.net/redirect?country=no&k=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&url=https%3A%2F%2Fclick.cptrack.de%2F%3Frd%3Dtrue%26k%3DuDKN4_4cjKv6xBl3VU_FGqiL13oTIFZ5Bzo2nqakz04&initiator=timeout
303 See Other 0 B URL HTTP/1.1 no-go.kelkoogroup.net/redirect?country=no&k=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&url=https%3A%2F%2Fclick.cptrack.de%2F%3Frd%3Dtrue%26k%3DuDKN4_4cjKv6xBl3VU_FGqiL13oTIFZ5Bzo2nqakz04&initiator=timeout
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /redirect?country=no&k=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&url=https%3A%2F%2Fclick.cptrack.de%2F%3Frd%3Dtrue%26k%3DuDKN4_4cjKv6xBl3VU_FGqiL13oTIFZ5Bzo2nqakz04&initiator=timeout HTTP/1.1
Host: no-go.kelkoogroup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no-go.kelkoogroup.net/offersearchGo?.ts=1675007824978&.sig=GLy6x_DxL8nekoENYviWklculoE-&affiliationId=96965866&comId=12930613&country=no&offerId=ffd89baa1fd427c96be27762911ec942&service=37&tokenId=35e025c3-2943-4e2d-874f-eaee491f9fab&wait=true&addedParams=true&custom1=Ns7DQM9gHraEmq5q0X3qlB1LULtEGL9fQAXE2BmRTLaIPCbqzsyDaE-IPpT13p4MRsyLlK3ZUqVk3pzZTsmuUL&custom2=8IPrxk3FjSTsy03MlRJFQqwqxqRA-tzE
Connection: keep-alive
Cookie: datadome=77XHCN4_Me5oucx1KisohssHJg8OHxnkf~yrDYGDHUCeflRh3KiCyHw2RY66TeonQMGB0KeEPyGnLIt78vnhZBT3HMZj7yBbz4gT3q~4E2qvFSYMViY0Uy_G--2GM0Jx; kelkooID=a4c629a-18601e093a7-fb880; _ga=GA1.2.64335881.1675068751; _gid=GA1.2.1533336403.1675068751
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
HTTP/1.1 303 See Other
leadId: dc1-kls-prod-ls-04.prod.dc1.kelkoo.net_1675068740525_1204135
clickId: 107698154_1675068740519_5412612
country: no
Location: https://click.cptrack.de/?rd=true&k=uDKN4_4cjKv6xBl3VU_FGqiL13oTIFZ5Bzo2nqakz04
Accept-CH: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory
Set-Cookie: datadome=7Y4NIkSnNdqJ-l-AsWoHuGQNDj4cl6QELVzneTbm0MI0orv~gMPI~l1aZg-1X0H-zt3HYT6VjWQhjDkzzqbHx2ehjunb-AMM59QhebBRfbKdH682bk9xgxxhBuBz940X; Max-Age=31536000; Expires=Tue, 30 Jan 2024 08:52:20 GMT; SameSite=Lax; Path=/; Domain=.kelkoogroup.net; Secure
X-DataDome: protected
Request-Time: PT0.014204S
X-Robots-Tag: noindex,nofollow
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: DENY
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: master-only
Date: Mon, 30 Jan 2023 08:52:20 GMT
Content-Length: 0
status.thawte.com/
200 OK 471 B IP
Hash 2e3407bc08bf2e35fea0945e406322ca
103e2bda1d2d9c8505a2691a94543881c8792f8c
d3a0cd5af44ec9142bc8ef8d2431185552f256b151745dc9fd37738fa55a9ca5
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2376
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 08:52:20 GMT
Last-Modified: Mon, 30 Jan 2023 08:12:44 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
click.cptrack.de/?rd=true&k=uDKN4_4cjKv6xBl3VU_FGqiL13oTIFZ5Bzo2nqakz04
302 Found 0 B URL HTTP/2 click.cptrack.de/?rd=true&k=uDKN4_4cjKv6xBl3VU_FGqiL13oTIFZ5Bzo2nqakz04
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?rd=true&k=uDKN4_4cjKv6xBl3VU_FGqiL13oTIFZ5Bzo2nqakz04 HTTP/1.1
Host: click.cptrack.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no-go.kelkoogroup.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Mon, 30 Jan 2023 08:52:20 GMT
content-length: 0
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
last-modified: Mon, 30 Jan 2023 08:52:20 GMT
server: ChannelPilotTraxport
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
set-cookie: __cpc=rbDWDay2MglcwzFpIEjH2M8XkhrdfcHNroZIH5NV2e4wJTYtL7v_v2n_4Tf-PKjoOfl8bB0HsdX3oT0Ruj2svxCLVg7dvlXQf44j7Wn4dd4~;Path=/;Domain=.cptrack.de;Expires=Sat, 29-Jul-2023 08:52:20 GMT; Secure; SameSite=None; HttpOnly
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://www.addnature.no/on-cloud-5-sko-dame-M1179224.html?vgid=G1742048&c=816&_cid=22_-1220_236489_236490_236492_5232617_0_kelkoo.no&utm_source=kelkoo&utm_medium=psm&utm_campaign=L�pesko for landevei&utm_content=On&utm_term=1742048
strict-transport-security: max-age=31536000; preload
x-frame-options: DENY
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
content-security-policy: default-src https: 'self'
referrer-policy: strict-origin-when-cross-origin
expect-ct: max-age=0
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 6bebb6d0e2b768fe38910b71bb1a3b97
951afec2c2e2d9c2acc09203077dde404d407d6c
ef49c673b6700f95bbf9bbc8a0b000e7e9be1b65f86df8f7ac3f9ec9726e33bf
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 30 Jan 2023 08:52:21 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 28 Jan 2023 00:10:32 GMT
Expires: Sat, 04 Feb 2023 00:10:31 GMT
Etag: "951afec2c2e2d9c2acc09203077dde404d407d6c"
Cache-Control: max-age=400089,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7918f88fbb7bb506-OSL
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ba2ca6af7b23ce2e11aa4f9d86e66269
212aef55d64b6add292dcf6241b16e7c93d1bae2
f163a94d190f5aeeb05b2e344bc8e1544d9701772b08585e9c92b529c8652b3d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 08:52:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google-analytics.com/collect?v=1&_v=j96&t=pageview&_s=1&dl=https%3A%2F%2Fno-go.kelkoogroup.net%2FoffersearchGo%3F.ts%3D1675007824978%26.sig%3DGLy6x_DxL8nekoENYviWklculoE-%26affiliationId%3D96965866%26comId%3D12930613%26country%3Dno%26offerId%3Dffd89baa1fd427c96be27762911ec942%26service%3D37%26tokenId%3D35e025c3-2943-4e2d-874f-eaee491f9fab%26wait%3Dtrue%26addedParams%3Dtrue%26custom1%3DNs7DQM9gHraEmq5q0X3qlB1LULtEGL9fQAXE2BmRTLaIPCbqzsyDaE-IPpT13p4MRsyLlK3ZUqVk3pzZTsmuUL%26custom2%3D8IPrxk3FjSTsy03MlRJFQqwqxqRA-tzE&dr=http%3A%2F%2Fr.redirekted.com%2F&dp=%2F96965866%7C12930613%7C&ul=en-us&de=UTF-8&dt=Du%20sendes%20videre%20til%20Addnature.no&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=QACAAAABAAAAAC~&cid=64335881.1675068751&tid=UA-168544891-6&_gid=1533336403.1675068751&_r=1&cd1=96965866&cd2=dc1-kls-prod-ls-04.prod.dc1.kelkoo.net_1675068740525_1204135&cd3=12930613&cd4=a4c629a-18601e093a7-fb880&cd5=&cd6=96965866%7C12930613%7C&z=1498134091
200 OK 35 B URL HTTP/2 www.google-analytics.com/collect?v=1&_v=j96&t=pageview&_s=1&dl=https%3A%2F%2Fno-go.kelkoogroup.net%2FoffersearchGo%3F.ts%3D1675007824978%26.sig%3DGLy6x_DxL8nekoENYviWklculoE-%26affiliationId%3D96965866%26comId%3D12930613%26country%3Dno%26offerId%3Dffd89baa1fd427c96be27762911ec942%26service%3D37%26tokenId%3D35e025c3-2943-4e2d-874f-eaee491f9fab%26wait%3Dtrue%26addedParams%3Dtrue%26custom1%3DNs7DQM9gHraEmq5q0X3qlB1LULtEGL9fQAXE2BmRTLaIPCbqzsyDaE-IPpT13p4MRsyLlK3ZUqVk3pzZTsmuUL%26custom2%3D8IPrxk3FjSTsy03MlRJFQqwqxqRA-tzE&dr=http%3A%2F%2Fr.redirekted.com%2F&dp=%2F96965866%7C12930613%7C&ul=en-us&de=UTF-8&dt=Du%20sendes%20videre%20til%20Addnature.no&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=QACAAAABAAAAAC~&cid=64335881.1675068751&tid=UA-168544891-6&_gid=1533336403.1675068751&_r=1&cd1=96965866&cd2=dc1-kls-prod-ls-04.prod.dc1.kelkoo.net_1675068740525_1204135&cd3=12930613&cd4=a4c629a-18601e093a7-fb880&cd5=&cd6=96965866%7C12930613%7C&z=1498134091
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
POST /collect?v=1&_v=j96&t=pageview&_s=1&dl=https%3A%2F%2Fno-go.kelkoogroup.net%2FoffersearchGo%3F.ts%3D1675007824978%26.sig%3DGLy6x_DxL8nekoENYviWklculoE-%26affiliationId%3D96965866%26comId%3D12930613%26country%3Dno%26offerId%3Dffd89baa1fd427c96be27762911ec942%26service%3D37%26tokenId%3D35e025c3-2943-4e2d-874f-eaee491f9fab%26wait%3Dtrue%26addedParams%3Dtrue%26custom1%3DNs7DQM9gHraEmq5q0X3qlB1LULtEGL9fQAXE2BmRTLaIPCbqzsyDaE-IPpT13p4MRsyLlK3ZUqVk3pzZTsmuUL%26custom2%3D8IPrxk3FjSTsy03MlRJFQqwqxqRA-tzE&dr=http%3A%2F%2Fr.redirekted.com%2F&dp=%2F96965866%7C12930613%7C&ul=en-us&de=UTF-8&dt=Du%20sendes%20videre%20til%20Addnature.no&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=QACAAAABAAAAAC~&cid=64335881.1675068751&tid=UA-168544891-6&_gid=1533336403.1675068751&_r=1&cd1=96965866&cd2=dc1-kls-prod-ls-04.prod.dc1.kelkoo.net_1675068740525_1204135&cd3=12930613&cd4=a4c629a-18601e093a7-fb880&cd5=&cd6=96965866%7C12930613%7C&z=1498134091 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://no-go.kelkoogroup.net
Connection: keep-alive
Referer: https://no-go.kelkoogroup.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 200 OK
access-control-allow-origin: https://no-go.kelkoogroup.net
date: Mon, 30 Jan 2023 08:52:21 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
x-content-type-options: nosniff
access-control-allow-credentials: true
content-type: image/gif
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 35
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ba2ca6af7b23ce2e11aa4f9d86e66269
212aef55d64b6add292dcf6241b16e7c93d1bae2
f163a94d190f5aeeb05b2e344bc8e1544d9701772b08585e9c92b529c8652b3d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 08:52:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.addnature.no/on/demandware.static/Sites-addnature-no-Site/-/no_NO/v1675048123452/fonts/opensans/Open-Sans-Regular.woff2
200 OK 14 kB URL HTTP/2 www.addnature.no/on/demandware.static/Sites-addnature-no-Site/-/no_NO/v1675048123452/fonts/opensans/Open-Sans-Regular.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 14048, version 1.0\012- data
Hash cffb686d7d2f4682df8342bd4d276e09
2c07a9656f1e38da408f20f1cf11581a15cbd7a2
3b98b0dc3bed9d40f43e64adba5de47c76895338a96f0a5a314676cd6287eca9
GET /on/demandware.static/Sites-addnature-no-Site/-/no_NO/v1675048123452/fonts/opensans/Open-Sans-Regular.woff2 HTTP/1.1
Host: www.addnature.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.addnature.no/on-cloud-5-sko-dame-M1179224.html?vgid=G1742048&c=816&_cid=22_-1220_236489_236490_236492_5232617_0_kelkoo.no&utm_source=kelkoo&utm_medium=psm&utm_campaign=L%F8pesko%20for%20landevei&utm_content=On&utm_term=1742048
Cookie: sid=AZ5KIuNg3lWbX8BBbY5OBo2Filsn8gHpFTE; dwanonymous_803bf9f7a6242e90119d6af72a2236f6=acCLCaWjgwH2Zmd5MrSFb5ls0s; __cq_dnt=1; dw_dnt=1; dwsid=EJn4X8KV1KpIZLBh42Dz65yCOCYGBwsWxgrlNZLc_kqhm6TEWXrBEeHOfYY6a_dN_ho9GxW9Ujhws2bE_1W9Yg==
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 08:52:21 GMT
content-type: font/woff2
content-length: 14048
x-dw-request-base-id: inI9JOM012MBAAB_
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=2585667
expires: Wed, 01 Mar 2023 03:09:23 GMT
last-modified: Wed, 18 Jan 2023 10:29:29 GMT
cf-cache-status: HIT
age: 14245
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 7918f8949ea91bfe-OSL
X-Firefox-Spdy: h2
www.addnature.no/on/demandware.static/Sites-addnature-no-Site/-/no_NO/v1675048123452/fonts/iconfont/outfitter-iconfont.woff2
200 OK 22 kB URL HTTP/2 www.addnature.no/on/demandware.static/Sites-addnature-no-Site/-/no_NO/v1675048123452/fonts/iconfont/outfitter-iconfont.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 21632, version 1.0\012- data
Hash 7faf7cb986d0b187635557c8ffd28dcd
142ab78f5d3d189ac07e05d021c236f181090ead
c16808355a2f9178731925bc90ea48d1ded6fa988444526cc4af1c32242777f8
GET /on/demandware.static/Sites-addnature-no-Site/-/no_NO/v1675048123452/fonts/iconfont/outfitter-iconfont.woff2 HTTP/1.1
Host: www.addnature.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.addnature.no/on-cloud-5-sko-dame-M1179224.html?vgid=G1742048&c=816&_cid=22_-1220_236489_236490_236492_5232617_0_kelkoo.no&utm_source=kelkoo&utm_medium=psm&utm_campaign=L%F8pesko%20for%20landevei&utm_content=On&utm_term=1742048
Cookie: sid=AZ5KIuNg3lWbX8BBbY5OBo2Filsn8gHpFTE; dwanonymous_803bf9f7a6242e90119d6af72a2236f6=acCLCaWjgwH2Zmd5MrSFb5ls0s; __cq_dnt=1; dw_dnt=1; dwsid=EJn4X8KV1KpIZLBh42Dz65yCOCYGBwsWxgrlNZLc_kqhm6TEWXrBEeHOfYY6a_dN_ho9GxW9Ujhws2bE_1W9Yg==
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 08:52:21 GMT
content-type: font/woff2
content-length: 21632
x-dw-request-base-id: XQoA6XA212MBAAB_
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=2586064
expires: Wed, 01 Mar 2023 03:16:00 GMT
last-modified: Wed, 18 Jan 2023 10:29:29 GMT
cf-cache-status: HIT
age: 14245
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 7918f8949ea61bfe-OSL
X-Firefox-Spdy: h2
www.addnature.no/on/demandware.static/Sites-addnature-no-Site/-/default/dw39b272c9/images/imagenotfound.gif
200 OK 43 B URL HTTP/2 www.addnature.no/on/demandware.static/Sites-addnature-no-Site/-/default/dw39b272c9/images/imagenotfound.gif
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /on/demandware.static/Sites-addnature-no-Site/-/default/dw39b272c9/images/imagenotfound.gif HTTP/1.1
Host: www.addnature.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.addnature.no/on-cloud-5-sko-dame-M1179224.html?vgid=G1742048&c=816&_cid=22_-1220_236489_236490_236492_5232617_0_kelkoo.no&utm_source=kelkoo&utm_medium=psm&utm_campaign=L%F8pesko%20for%20landevei&utm_content=On&utm_term=1742048
Cookie: sid=AZ5KIuNg3lWbX8BBbY5OBo2Filsn8gHpFTE; dwanonymous_803bf9f7a6242e90119d6af72a2236f6=acCLCaWjgwH2Zmd5MrSFb5ls0s; __cq_dnt=1; dw_dnt=1; dwsid=EJn4X8KV1KpIZLBh42Dz65yCOCYGBwsWxgrlNZLc_kqhm6TEWXrBEeHOfYY6a_dN_ho9GxW9Ujhws2bE_1W9Yg==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 08:52:21 GMT
content-type: image/gif
content-length: 43
cache-control: public, max-age=2592000
cf-bgj: imgq:100,h2pri
cf-polished: status=not_needed
cross-origin-resource-policy: cross-origin
expires: Fri, 24 Feb 2023 11:08:40 GMT
last-modified: Wed, 18 Jan 2023 10:29:30 GMT
x-dw-request-base-id: inIgTbgN0WMBAAB_
cf-cache-status: HIT
age: 423820
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 7918f894ef011bfe-OSL
X-Firefox-Spdy: h2
cdn.cookielaw.org/scripttemplates/otSDKStub.js
200 OK 7.2 kB URL HTTP/2 cdn.cookielaw.org/scripttemplates/otSDKStub.js
IP
File type ASCII text, with very long lines (21747)
Hash 4292e44eba0796aac4d0b7aab80daec2
8131fd92ed85c9e8378d78e2b668cd7163fdf875
0deff459ca0049e97fc03f4a80660ef7e69185057ffdcd1a462cd3bcaffb6e5b
GET /scripttemplates/otSDKStub.js HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.addnature.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 30 Jan 2023 08:52:21 GMT
content-type: application/javascript
content-length: 7151
content-encoding: gzip
content-md5: QpLkTroHlqrE0LequA2uwg==
last-modified: Fri, 27 Jan 2023 07:38:15 GMT
etag: 0x8DB003973D2D647
x-ms-request-id: 40175fdc-601e-00c5-10ad-32a6dd000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 51235
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7918f894ed89b505-OSL
X-Firefox-Spdy: h2
static.demoup.com/addnature.com/stage2.min.js
200 OK 24 kB URL HTTP/1.1 static.demoup.com/addnature.com/stage2.min.js
IP
File type Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Hash 99d184d3076d2282ae7c2499b4518a0f
cd0ec03f40a7d785930c8ff9eb44a3c241b1f131
8a8a416b1ed0d094d8ac967a70011e18637194937e91daf475ca759f718e646a
GET /addnature.com/stage2.min.js HTTP/1.1
Host: static.demoup.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.addnature.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST
Last-Modified: Wed, 13 Jul 2022 11:46:37 GMT
Server: AmazonS3
Via: 1.1 367a4718be97a49df7ac0500a986437a.cloudfront.net (CloudFront), 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
Content-Encoding: gzip
Date: Mon, 30 Jan 2023 02:26:21 GMT
Cache-Control: 2592000
ETag: W/"db05147172c8a5784ccf6a43f5fac15f"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
X-Amz-Cf-Pop: FRA56-P2, OSL50-P1
X-Amz-Cf-Id: LLAwtaj0norQl9Iv7ZPAKBEB6bFZH97Tn43FYm8FIvTKnz_y69rHsQ==
Age: 23161
addnature.app.baqend.com/v1/speedkit/install.js?d=production
200 OK 18 kB URL HTTP/2 addnature.app.baqend.com/v1/speedkit/install.js?d=production
IP
File type ASCII text, with very long lines (45618)
Hash 0753e358419ee20fbcaa9ef54a95188e
dc54f6e2361669f79384e12cda27ec2c9253d8fe
89a0a01c7f1221e62506bb8df02bffa8e3a3d0e00c61f9e252d41d2e3b5bd5b1
GET /v1/speedkit/install.js?d=production HTTP/1.1
Host: addnature.app.baqend.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.addnature.no
Connection: keep-alive
Referer: https://www.addnature.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: gzip
content-type: text/javascript; charset=UTF-8
etag: "cGpIWWrI1oZ8sY5o/h6X8Q==--br"
accept-ranges: bytes
date: Mon, 30 Jan 2023 08:52:21 GMT
age: 31533703
cache-control: private,browser-ttl=1800,sw-max-age=31536000,max-age=31535503
x-served-by: cache-bma1680-BMA
x-cache: HIT
x-cache-hits: 3
x-timer: S1675068742.944931,VS0,VE1
access-control-allow-credentials: true
access-control-allow-origin: https://www.addnature.no
access-control-expose-headers: Location, ETag, Baqend-Authorization-Token, Baqend-Acl, Baqend-Size, Baqend-SW-Control, Baqend-Created-At, Date, Age, Baqend-Speed-Kit, Baqend-Custom-Headers, X-Served-By, X-Cache, X-Timer, Access-Control-Allow-Origin, Fastly-Io-Info, Server-Timing
timing-allow-origin: https://www.addnature.no
vary: Accept-Encoding, Origin
via: baqend
server-timing: pop;desc=BMA;dur=1,cache;desc=EDGE,hotness;desc=3,proto;desc=h2
content-length: 17637
X-Firefox-Spdy: h2
cdn.cookielaw.org/consent/766525aa-15df-473d-838d-50e00a067133/766525aa-15df-473d-838d-50e00a067133.json
200 OK 1.3 kB URL HTTP/2 cdn.cookielaw.org/consent/766525aa-15df-473d-838d-50e00a067133/766525aa-15df-473d-838d-50e00a067133.json
IP
File type JSON data\012- , ASCII text, with very long lines (3053), with no line terminators
Hash 2b6d10db2efb1cb413a046ffd739a737
c1e9e0a8d56542a1f9e6877b2bcd26dc3b876550
4dc57d646ad580e66d5458fcb37ebba4962e327ac3e1da1088d93669a2b7a896
GET /consent/766525aa-15df-473d-838d-50e00a067133/766525aa-15df-473d-838d-50e00a067133.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.addnature.no
Connection: keep-alive
Referer: https://www.addnature.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 30 Jan 2023 08:52:22 GMT
content-type: application/x-javascript
content-length: 1325
cache-control: public, max-age=86400
content-encoding: gzip
content-md5: K20Q2y77HLQToEb/1zmnNw==
last-modified: Tue, 14 Jun 2022 11:52:30 GMT
etag: 0x8DA4DFC5C8655B0
x-ms-request-id: df8faa3b-e01e-00f6-53e5-7ffff0000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 11208
expires: Tue, 31 Jan 2023 08:52:22 GMT
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7918f89578cdb51d-OSL
X-Firefox-Spdy: h2
www.addnature.no/on/demandware.static/Sites-addnature-no-Site/-/no_NO/v1675048123452/internal/jscript/dwac-21.7.js
200 OK 3.0 kB URL HTTP/2 www.addnature.no/on/demandware.static/Sites-addnature-no-Site/-/no_NO/v1675048123452/internal/jscript/dwac-21.7.js
IP
File type ASCII text, with very long lines (10865), with no line terminators
Hash ba45708bdb92117b4bf855a787f7ca35
7779ff8ad8c8f6b2c59335c8048b088ebb5b98bd
bb645fa58f69873aafed8c3c91e1875bf32042dac75f2986135baf1412511468
GET /on/demandware.static/Sites-addnature-no-Site/-/no_NO/v1675048123452/internal/jscript/dwac-21.7.js HTTP/1.1
Host: www.addnature.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.addnature.no/on-cloud-5-sko-dame-M1179224.html?vgid=G1742048&c=816&_cid=22_-1220_236489_236490_236492_5232617_0_kelkoo.no&utm_source=kelkoo&utm_medium=psm&utm_campaign=L%F8pesko%20for%20landevei&utm_content=On&utm_term=1742048
Cookie: sid=AZ5KIuNg3lWbX8BBbY5OBo2Filsn8gHpFTE; dwanonymous_803bf9f7a6242e90119d6af72a2236f6=acCLCaWjgwH2Zmd5MrSFb5ls0s; __cq_dnt=1; dw_dnt=1; dwsid=EJn4X8KV1KpIZLBh42Dz65yCOCYGBwsWxgrlNZLc_kqhm6TEWXrBEeHOfYY6a_dN_ho9GxW9Ujhws2bE_1W9Yg==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 08:52:21 GMT
content-type: application/javascript
cache-control: public, max-age=2591434
cf-bgj: minify
cf-polished: origSize=5013
cross-origin-resource-policy: cross-origin
expires: Wed, 01 Mar 2023 03:11:56 GMT
last-modified: Mon, 30 Jan 2023 03:11:56 GMT
vary: accept-encoding
x-dw-request-base-id: inJkNnw112MBAAB_
cf-cache-status: HIT
age: 19268
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 7918f894ff161bfe-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash bafba0045d7ceb85adbd5c1f61276640
8bc2b1253d06433cace4355cfb9eec05c5bf72ff
6f14bd9d2c75a847b7e46cdd5620951ac6dc2ff78f9981cc2c7c03d95405baf3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4015
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 08:52:22 GMT
Last-Modified: Mon, 30 Jan 2023 07:45:27 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 280
www.addnature.no/on/demandware.static/Sites-addnature-no-Site/-/no_NO/v1675048123452/internal/jscript/dwanalytics-22.2.js
200 OK 2.8 kB URL HTTP/2 www.addnature.no/on/demandware.static/Sites-addnature-no-Site/-/no_NO/v1675048123452/internal/jscript/dwanalytics-22.2.js
IP
Hash 254c3d3c07e4fbef254a9ecb1f813fd0
2387de843b99461b4f8beabb22983a1defc6b090
72615b00a1aaa22922ca6c9b9dd9c19cbe154683a33f3d8128d9a1a1a37f4b03
GET /on/demandware.static/Sites-addnature-no-Site/-/no_NO/v1675048123452/internal/jscript/dwanalytics-22.2.js HTTP/1.1
Host: www.addnature.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.addnature.no/on-cloud-5-sko-dame-M1179224.html?vgid=G1742048&c=816&_cid=22_-1220_236489_236490_236492_5232617_0_kelkoo.no&utm_source=kelkoo&utm_medium=psm&utm_campaign=L%F8pesko%20for%20landevei&utm_content=On&utm_term=1742048
Cookie: sid=AZ5KIuNg3lWbX8BBbY5OBo2Filsn8gHpFTE; dwanonymous_803bf9f7a6242e90119d6af72a2236f6=acCLCaWjgwH2Zmd5MrSFb5ls0s; __cq_dnt=1; dw_dnt=1; dwsid=EJn4X8KV1KpIZLBh42Dz65yCOCYGBwsWxgrlNZLc_kqhm6TEWXrBEeHOfYY6a_dN_ho9GxW9Ujhws2bE_1W9Yg==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 08:52:21 GMT
content-type: application/javascript
cache-control: public, max-age=2591286
cf-bgj: minify
cf-polished: origSize=6582
cross-origin-resource-policy: cross-origin
expires: Wed, 01 Mar 2023 03:09:28 GMT
last-modified: Mon, 30 Jan 2023 03:09:28 GMT
vary: accept-encoding
x-dw-request-base-id: inLFJOg012MBAAB_
cf-cache-status: HIT
age: 19268
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 7918f894ff101bfe-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash bafba0045d7ceb85adbd5c1f61276640
8bc2b1253d06433cace4355cfb9eec05c5bf72ff
6f14bd9d2c75a847b7e46cdd5620951ac6dc2ff78f9981cc2c7c03d95405baf3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3368
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 08:52:22 GMT
Last-Modified: Mon, 30 Jan 2023 07:56:14 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 280
ocsp.digicert.com/
200 OK 278 B IP
Hash 820578e665c531e11d4d31bccd1e8325
d8b3631544ad5869d7dfbccf03a9b3dcfa0f6abb
900579242247437bef5a1647bece24839d12dad805d1a556adacf637f0d79eb8
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 417
Cache-Control: max-age=171956
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 08:52:22 GMT
Etag: "63d78059-116"
Expires: Wed, 01 Feb 2023 08:38:18 GMT
Last-Modified: Mon, 30 Jan 2023 08:31:21 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 278
ocsp.digicert.com/
200 OK 280 B IP
Hash bafba0045d7ceb85adbd5c1f61276640
8bc2b1253d06433cace4355cfb9eec05c5bf72ff
6f14bd9d2c75a847b7e46cdd5620951ac6dc2ff78f9981cc2c7c03d95405baf3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4015
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 08:52:22 GMT
Last-Modified: Mon, 30 Jan 2023 07:45:27 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 280
www.addnature.no/on/demandware.static/Sites-addnature-no-Site/-/no_NO/v1675048123452/svg/symbol/icons.svg
200 OK 192 kB URL HTTP/2 www.addnature.no/on/demandware.static/Sites-addnature-no-Site/-/no_NO/v1675048123452/svg/symbol/icons.svg
IP
Size 192 kB (192161 bytes)
Hash 15497ca1809a824da84ed73b31e0a18d
ef1fd622e03f6580df2addebfb4a03f68041ddf3
6dc3614503dcbb0c64c056f9080a5ad4e6737eb146370c179f373fc8be8aa00d
GET /on/demandware.static/Sites-addnature-no-Site/-/no_NO/v1675048123452/svg/symbol/icons.svg HTTP/1.1
Host: www.addnature.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.addnature.no/on-cloud-5-sko-dame-M1179224.html?vgid=G1742048&c=816&_cid=22_-1220_236489_236490_236492_5232617_0_kelkoo.no&utm_source=kelkoo&utm_medium=psm&utm_campaign=L%F8pesko%20for%20landevei&utm_content=On&utm_term=1742048
Cookie: sid=AZ5KIuNg3lWbX8BBbY5OBo2Filsn8gHpFTE; dwanonymous_803bf9f7a6242e90119d6af72a2236f6=acCLCaWjgwH2Zmd5MrSFb5ls0s; __cq_dnt=1; dw_dnt=1; dwsid=EJn4X8KV1KpIZLBh42Dz65yCOCYGBwsWxgrlNZLc_kqhm6TEWXrBEeHOfYY6a_dN_ho9GxW9Ujhws2bE_1W9Yg==
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 08:52:22 GMT
content-type: image/svg+xml
x-dw-request-base-id: inI0ItU012MBAAB_
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=2592000
expires: Wed, 01 Mar 2023 03:09:10 GMT
last-modified: Wed, 18 Jan 2023 10:29:27 GMT
cf-cache-status: HIT
age: 20592
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 7918f8958f991bfe-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
www.addnature.no/on/demandware.static/Sites-addnature-no-Site/-/no_NO/v1675048123452/fonts/opensans/Open-Sans-Bold.woff2
200 OK 15 kB URL HTTP/2 www.addnature.no/on/demandware.static/Sites-addnature-no-Site/-/no_NO/v1675048123452/fonts/opensans/Open-Sans-Bold.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15056, version 1.0\012- data
Hash 0edb76284a7a0f8db4665b560ee2b48f
02496387a5f7bf7b79df52c7b76ece4ebc7a0710
74201a4b97ec1d5e86252dd0180eafd8c5378a9235864dbcd682f3575b41c85b
GET /on/demandware.static/Sites-addnature-no-Site/-/no_NO/v1675048123452/fonts/opensans/Open-Sans-Bold.woff2 HTTP/1.1
Host: www.addnature.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.addnature.no/on/demandware.static/Sites-addnature-no-Site/-/no_NO/v1675048123452/css/compilation.min.css
Cookie: sid=AZ5KIuNg3lWbX8BBbY5OBo2Filsn8gHpFTE; dwanonymous_803bf9f7a6242e90119d6af72a2236f6=acCLCaWjgwH2Zmd5MrSFb5ls0s; __cq_dnt=1; dw_dnt=1; dwsid=EJn4X8KV1KpIZLBh42Dz65yCOCYGBwsWxgrlNZLc_kqhm6TEWXrBEeHOfYY6a_dN_ho9GxW9Ujhws2bE_1W9Yg==
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 08:52:22 GMT
content-type: font/woff2
content-length: 15056
x-dw-request-base-id: XQrbCp8312MBAAB_
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=2590132
expires: Wed, 01 Mar 2023 03:21:03 GMT
last-modified: Wed, 18 Jan 2023 10:29:29 GMT
cf-cache-status: HIT
age: 17310
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 7918f895cfc01bfe-OSL
X-Firefox-Spdy: h2
images.internetstores.de/products/1742048/02/2efc8c/on-cloud-5-shoes-women-all-white-1.jpg?forceSize=true&forceAspectRatio=true&useTrim=true&size=300x300
200 OK 17 kB URL HTTP/2 images.internetstores.de/products/1742048/02/2efc8c/on-cloud-5-shoes-women-all-white-1.jpg?forceSize=true&forceAspectRatio=true&useTrim=true&size=300x300
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x300, components 3\012- data
Hash ef4be9ec6d9d5ec6b4110bd42aaac68e
a9d0ae52e230251b772df071ba56c1a59f5b27b5
4184d1be183799b1fe4b7e39d16864b71542c572ff8ea967f498f1760cc6f1e2
GET /products/1742048/02/2efc8c/on-cloud-5-shoes-women-all-white-1.jpg?forceSize=true&forceAspectRatio=true&useTrim=true&size=300x300 HTTP/1.1
Host: images.internetstores.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.addnature.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 08:52:22 GMT
content-type: image/jpeg
content-length: 17011
cache-control: max-age=1209600, public
cf-bgj: h2pri
access-control-allow-origin: *
etag: "624d4f66-4273"
expires: Sun, 12 Feb 2023 09:30:15 GMT
last-modified: Wed, 06 Apr 2022 08:29:26 GMT
pragma: public
strict-transport-security: max-age=15768000
cf-cache-status: HIT
age: 84127
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7918f895deceb4f3-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
images.internetstores.de/products/1742048/01/4b449e/on-cloud-5-shoes-women-all-white-5.jpg?forceSize=true&forceAspectRatio=true&useTrim=true&size=613x613
200 OK 80 kB URL HTTP/2 images.internetstores.de/products/1742048/01/4b449e/on-cloud-5-shoes-women-all-white-5.jpg?forceSize=true&forceAspectRatio=true&useTrim=true&size=613x613
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 613x613, components 3\012- data
Hash fb073b5d0696f7a3684723305acd0b8d
8c47d2db629ce5e1ec19542978171494e4b2ab57
65af04c987286648ddf10ddb1bb6b8aac9f5ab4565c57742bb65bbe7d61375b9
GET /products/1742048/01/4b449e/on-cloud-5-shoes-women-all-white-5.jpg?forceSize=true&forceAspectRatio=true&useTrim=true&size=613x613 HTTP/1.1
Host: images.internetstores.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.addnature.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 08:52:22 GMT
content-type: image/jpeg
content-length: 79543
cache-control: max-age=1209600, public
cf-bgj: h2pri
access-control-allow-origin: *
etag: "624ff8a3-136b7"
expires: Wed, 08 Feb 2023 18:28:38 GMT
last-modified: Fri, 08 Apr 2022 08:56:03 GMT
pragma: public
strict-transport-security: max-age=15768000
cf-cache-status: HIT
age: 397423
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7918f895ded1b4f3-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
images.internetstores.de/products/1742048/01/ce067f/on-cloud-5-shoes-women-all-white-6.jpg?forceSize=true&forceAspectRatio=true&useTrim=true&size=613x613
200 OK 60 kB URL HTTP/2 images.internetstores.de/products/1742048/01/ce067f/on-cloud-5-shoes-women-all-white-6.jpg?forceSize=true&forceAspectRatio=true&useTrim=true&size=613x613
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 613x613, components 3\012- data
Hash e88b4ac3e5caae64e7fa715ee96e058e
b2c54de5aeaaf1e61c1354954077f38f14556bf1
1143f488c2dcca33247257ad6c0ae72e4c7d2d2fa2f3422c8f0978d6ee2f93a0
GET /products/1742048/01/ce067f/on-cloud-5-shoes-women-all-white-6.jpg?forceSize=true&forceAspectRatio=true&useTrim=true&size=613x613 HTTP/1.1
Host: images.internetstores.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.addnature.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 08:52:22 GMT
content-type: image/jpeg
content-length: 60046
cache-control: max-age=1209600, public
cf-bgj: h2pri
access-control-allow-origin: *
etag: "624ff8a7-ea8e"
expires: Fri, 10 Feb 2023 04:18:34 GMT
last-modified: Fri, 08 Apr 2022 08:56:07 GMT
pragma: public
strict-transport-security: max-age=15768000
cf-cache-status: HIT
age: 275628
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7918f895decfb4f3-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
images.internetstores.de/products/1810231/02/192d13/on-cloud-5-shoes-women-all-black-1.jpg?forceSize=true&forceAspectRatio=true&useTrim=true&size=90x90
200 OK 5.4 kB URL HTTP/2 images.internetstores.de/products/1810231/02/192d13/on-cloud-5-shoes-women-all-black-1.jpg?forceSize=true&forceAspectRatio=true&useTrim=true&size=90x90
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 90x90, components 3\012- data
Hash 703e0aeb616391415c387e337904b09f
b8db3c4299838827424b8630470ec3a4dc70e2f7
52c2840a19d43d433726074a40851c6028a4c06f95afce53d7036b572babe3ed
GET /products/1810231/02/192d13/on-cloud-5-shoes-women-all-black-1.jpg?forceSize=true&forceAspectRatio=true&useTrim=true&size=90x90 HTTP/1.1
Host: images.internetstores.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.addnature.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 30 Jan 2023 08:52:22 GMT
content-type: image/jpeg
content-length: 5376
cache-control: max-age=1209600, public
cf-bgj: h2pri
access-control-allow-origin: *
etag: "6304fb39-1500"
expires: Fri, 10 Feb 2023 11:33:22 GMT
last-modified: Tue, 23 Aug 2022 16:07:21 GMT
pragma: public
strict-transport-security: max-age=15768000
cf-cache-status: HIT
age: 249540
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7918f895cec1b4f3-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
images.internetstores.de/products/1742048/01/f85cc0/on-cloud-5-shoes-women-all-white-4.jpg?forceSize=true&forceAspectRatio=true&useTrim=true&size=613x613
200 OK 53 kB URL HTTP/2 images.internetstores.de/products/1742048/01/f85cc0/on-cloud-5-shoes-women-all-white-4.jpg?forceSize=true&forceAspectRatio=true&useTrim=true&size=613x613
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 613x613, components 3\012- data
Hash df53606eec4d1f0fdc748b6c68bd189e
18fac96bc3999219bfc7985908f2774d72ef9964
62dd08114bba90f1283c55507c57ab15b715e7c0ffff3cc1f498b50495afda05
GET /products/1742048/01/f85cc0/on-cloud-5-shoes-women-all-white-4.jpg?forceSize=true&forceAspectRatio=true&useTrim=true&size=613x613 HTTP/1.1
Host: images.internetstores.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.addnature.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 08:52:22 GMT
content-type: image/jpeg
content-length: 53132
cache-control: max-age=1209600, public
cf-bgj: h2pri
access-control-allow-origin: *
etag: "624ff89f-cf8c"
expires: Wed, 08 Feb 2023 18:28:39 GMT
last-modified: Fri, 08 Apr 2022 08:55:59 GMT
pragma: public
strict-transport-security: max-age=15768000
cf-cache-status: HIT
age: 397423
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7918f895ded3b4f3-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.addnature.no/on/demandware.static/Sites-addnature-no-Site/-/no_NO/v1675048123452/css/compilation.min.css
200 OK 100 kB URL HTTP/2 www.addnature.no/on/demandware.static/Sites-addnature-no-Site/-/no_NO/v1675048123452/css/compilation.min.css
IP
Size 100 kB (100060 bytes)
Hash 6352beef67c9aad60059c04ff3cad485
70288d317361ad2ca2b333a212f9b6f8cb4297d8
91f7db661e895b377e6ffe09376d3b07eb639a24991489bc7c10832abddb3e8a
GET /on/demandware.static/Sites-addnature-no-Site/-/no_NO/v1675048123452/css/compilation.min.css HTTP/1.1
Host: www.addnature.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.addnature.no/on-cloud-5-sko-dame-M1179224.html?vgid=G1742048&c=816&_cid=22_-1220_236489_236490_236492_5232617_0_kelkoo.no&utm_source=kelkoo&utm_medium=psm&utm_campaign=L%F8pesko%20for%20landevei&utm_content=On&utm_term=1742048
Cookie: sid=AZ5KIuNg3lWbX8BBbY5OBo2Filsn8gHpFTE; dwanonymous_803bf9f7a6242e90119d6af72a2236f6=acCLCaWjgwH2Zmd5MrSFb5ls0s; __cq_dnt=1; dw_dnt=1; dwsid=EJn4X8KV1KpIZLBh42Dz65yCOCYGBwsWxgrlNZLc_kqhm6TEWXrBEeHOfYY6a_dN_ho9GxW9Ujhws2bE_1W9Yg==
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 08:52:21 GMT
content-type: text/css
x-dw-request-base-id: XQrh3RU212MBAAB_
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=2591588
expires: Wed, 01 Mar 2023 03:14:29 GMT
last-modified: Wed, 18 Jan 2023 10:29:27 GMT
vary: accept-encoding
content-encoding: gzip
cf-cache-status: HIT
age: 19268
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 7918f8949eb31bfe-OSL
X-Firefox-Spdy: h2
images.internetstores.de/products/1742054/02/0da567/on-cloud-5-shoes-women-denim-white-1.jpg?forceSize=true&forceAspectRatio=true&useTrim=true&size=90x90
200 OK 6.1 kB URL HTTP/2 images.internetstores.de/products/1742054/02/0da567/on-cloud-5-shoes-women-denim-white-1.jpg?forceSize=true&forceAspectRatio=true&useTrim=true&size=90x90
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 90x90, components 3\012- data
Hash 0c31de4172be438a761f5631c649d2e2
78d41bd643b463e3d3668a3204bd0f68e57697b1
e9fd0f42e3ed433bb1358806881df5a7844d2974f4bb6cc70ccdf27890e433a5
GET /products/1742054/02/0da567/on-cloud-5-shoes-women-denim-white-1.jpg?forceSize=true&forceAspectRatio=true&useTrim=true&size=90x90 HTTP/1.1
Host: images.internetstores.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.addnature.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 30 Jan 2023 08:52:22 GMT
content-type: image/jpeg
content-length: 6128
cache-control: max-age=1209600, public
cf-bgj: h2pri
access-control-allow-origin: *
etag: "624db16e-17f0"
expires: Mon, 30 Jan 2023 19:12:43 GMT
last-modified: Wed, 06 Apr 2022 15:27:42 GMT
pragma: public
strict-transport-security: max-age=15768000
cf-cache-status: HIT
age: 1172379
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7918f895fef2b4f3-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.addnature.no/on/demandware.static/Sites-addnature-no-Site/-/default/dw8ef65d18/images/logo.svg
200 OK 60 kB URL HTTP/2 www.addnature.no/on/demandware.static/Sites-addnature-no-Site/-/default/dw8ef65d18/images/logo.svg
IP
Hash 0791e7c629e204d2d5c94e4e367f1a09
9c8fe0fc088bd6f8e35f1837372bf2d4ffbee797
e63076f5262d9abaaebee8089925fd2360354272fb726576f6b2ebfaf30b41c6
GET /on/demandware.static/Sites-addnature-no-Site/-/default/dw8ef65d18/images/logo.svg HTTP/1.1
Host: www.addnature.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.addnature.no/on-cloud-5-sko-dame-M1179224.html?vgid=G1742048&c=816&_cid=22_-1220_236489_236490_236492_5232617_0_kelkoo.no&utm_source=kelkoo&utm_medium=psm&utm_campaign=L%F8pesko%20for%20landevei&utm_content=On&utm_term=1742048
Cookie: sid=AZ5KIuNg3lWbX8BBbY5OBo2Filsn8gHpFTE; dwanonymous_803bf9f7a6242e90119d6af72a2236f6=acCLCaWjgwH2Zmd5MrSFb5ls0s; __cq_dnt=1; dw_dnt=1; dwsid=EJn4X8KV1KpIZLBh42Dz65yCOCYGBwsWxgrlNZLc_kqhm6TEWXrBEeHOfYY6a_dN_ho9GxW9Ujhws2bE_1W9Yg==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 08:52:21 GMT
content-type: image/svg+xml
x-dw-request-base-id: XQro3rgN0WMBAAB_
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=2592000
expires: Fri, 24 Feb 2023 11:08:40 GMT
last-modified: Wed, 18 Jan 2023 10:29:27 GMT
cf-cache-status: HIT
age: 423820
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 7918f8949ebf1bfe-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
images.internetstores.de/products/1742048/02/2efc8c/on-cloud-5-shoes-women-all-white-1.jpg?forceSize=true&forceAspectRatio=true&useTrim=true&size=90x90
200 OK 5.1 kB URL HTTP/2 images.internetstores.de/products/1742048/02/2efc8c/on-cloud-5-shoes-women-all-white-1.jpg?forceSize=true&forceAspectRatio=true&useTrim=true&size=90x90
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 90x90, components 3\012- data
Hash 8bf1bc6b5ffe7aff53e5ed29ce1bf0f4
8a6903959320624d5270b777d2cf6aec026a9c32
3ae952654cfd8ce9d00787a5f5b66235a0f49ba485f59d7d056cb8203c576f90
GET /products/1742048/02/2efc8c/on-cloud-5-shoes-women-all-white-1.jpg?forceSize=true&forceAspectRatio=true&useTrim=true&size=90x90 HTTP/1.1
Host: images.internetstores.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.addnature.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 30 Jan 2023 08:52:22 GMT
content-type: image/jpeg
content-length: 5098
cache-control: max-age=1209600, public
cf-bgj: h2pri
access-control-allow-origin: *
etag: "624db16f-13ea"
expires: Mon, 30 Jan 2023 19:12:43 GMT
last-modified: Wed, 06 Apr 2022 15:27:43 GMT
pragma: public
strict-transport-security: max-age=15768000
cf-cache-status: HIT
age: 1172379
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7918f8960f0bb4f3-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
images.internetstores.de/products/1742051/02/7eb594/on-cloud-5-shoes-women-black-white-1.jpg?forceSize=true&forceAspectRatio=true&useTrim=true&size=90x90
200 OK 5.5 kB URL HTTP/2 images.internetstores.de/products/1742051/02/7eb594/on-cloud-5-shoes-women-black-white-1.jpg?forceSize=true&forceAspectRatio=true&useTrim=true&size=90x90
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 90x90, components 3\012- data
Hash 3f4dc3fcd564ebe2d6b342059a60d460
1b06d1841186404d3a945c564b2e6eedd0984d2f
4917a6a1e9857eaf5088842e8b650efc809e9f90858d909b2adcd64fe23d8c58
GET /products/1742051/02/7eb594/on-cloud-5-shoes-women-black-white-1.jpg?forceSize=true&forceAspectRatio=true&useTrim=true&size=90x90 HTTP/1.1
Host: images.internetstores.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.addnature.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 30 Jan 2023 08:52:22 GMT
content-type: image/jpeg
content-length: 5521
cache-control: max-age=1209600, public
cf-bgj: h2pri
access-control-allow-origin: *
etag: "624db16f-1591"
expires: Thu, 09 Feb 2023 18:49:37 GMT
last-modified: Wed, 06 Apr 2022 15:27:43 GMT
pragma: public
strict-transport-security: max-age=15768000
cf-cache-status: HIT
age: 309765
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7918f8961f19b4f3-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
images.internetstores.de/brands/on.jpg?forceSize=true&forceAspectRatio=true&forceAlign=leftbottom&size=120x39
200 OK 3.7 kB URL HTTP/2 images.internetstores.de/brands/on.jpg?forceSize=true&forceAspectRatio=true&forceAlign=leftbottom&size=120x39
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x39, components 3\012- data
Hash b6bb9a3163ab94092fd817588026ab7f
4cfa7d4f20488d0055a23018f463511905c21a29
d8a520f564a06eab73c09899cec036d107f599ffe05d074d93e99ea283627703
GET /brands/on.jpg?forceSize=true&forceAspectRatio=true&forceAlign=leftbottom&size=120x39 HTTP/1.1
Host: images.internetstores.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.addnature.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 30 Jan 2023 08:52:22 GMT
content-type: image/jpeg
content-length: 3691
cache-control: max-age=1209600, public
cf-bgj: h2pri
access-control-allow-origin: *
etag: a75cda55570eccaab055e21029e551ee
expires: Wed, 08 Feb 2023 15:58:45 GMT
last-modified: Tue, 20 Oct 2020 07:38:51 GMT
pragma: public, public
strict-transport-security: max-age=15768000
cf-cache-status: HIT
age: 406417
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7918f8961f17b4f3-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash bafba0045d7ceb85adbd5c1f61276640
8bc2b1253d06433cace4355cfb9eec05c5bf72ff
6f14bd9d2c75a847b7e46cdd5620951ac6dc2ff78f9981cc2c7c03d95405baf3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3368
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 08:52:22 GMT
Last-Modified: Mon, 30 Jan 2023 07:56:14 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 280
static.demoup.com/addnature.com/stage3.js
200 OK 151 kB URL HTTP/1.1 static.demoup.com/addnature.com/stage3.js
IP
File type Unicode text, UTF-8 text, with very long lines (65470)
Size 151 kB (150609 bytes)
Hash 2e49f546563310d5c6355ad8a8db1360
0db155a66cc0b8faa9221045155d715e6f6184f8
0d93ac801b916365e2678f2d5ca4fbf4cfb75f2af7e62237d321f61f393f20d4
GET /addnature.com/stage3.js HTTP/1.1
Host: static.demoup.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.addnature.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 13 Jul 2022 11:46:37 GMT
Server: AmazonS3
Via: 1.1 cb4c4a25e4ef534686959996782c8476.cloudfront.net (CloudFront), 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
Content-Encoding: gzip
Date: Mon, 30 Jan 2023 06:55:09 GMT
Cache-Control: 2592000
ETag: W/"01aec7f92318810e613c73d11c5672eb"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
X-Amz-Cf-Pop: FRA56-P2, OSL50-P1
X-Amz-Cf-Id: yMzzwGjkA0P1LT81dKLYWusBVHLWGEdtq_C2ysUYCdDFKo0ZCxiEqQ==
Age: 7034
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 8375716501c987c1607445de36a877d5
d31f7201a18fab52589caacc1bb23b2ad9f12f5b
b307f13cd49b18b2d92e6ea072659ce748aa384c323d0549061dd28c440156b5
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=100961
Date: Mon, 30 Jan 2023 08:52:22 GMT
Etag: "63d6590c-1d7"
Expires: Tue, 31 Jan 2023 12:55:03 GMT
Last-Modified: Sun, 29 Jan 2023 11:31:24 GMT
Server: ECS (nyb/1D0D)
X-Cache: Miss from cloudfront
Via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: IIuWHga2rzYBojZOqm0niSej757G6o_uZNZtNOgV-6_DjIqwqERqOQ==
Age: 5019
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 8375716501c987c1607445de36a877d5
d31f7201a18fab52589caacc1bb23b2ad9f12f5b
b307f13cd49b18b2d92e6ea072659ce748aa384c323d0549061dd28c440156b5
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=101149
Date: Mon, 30 Jan 2023 08:52:22 GMT
Etag: "63d6590c-1d7"
Expires: Tue, 31 Jan 2023 12:58:11 GMT
Last-Modified: Sun, 29 Jan 2023 11:31:24 GMT
Server: ECS (nyb/1D2C)
X-Cache: Miss from cloudfront
Via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: vJROdWLIUf86nvnNrAh4c1Xw_CC3taGfkrRfEgx4E7skYpcWWE1kCw==
Age: 5207
events.demoup.com/callback/video-event
200 OK 0 B URL HTTP/2 events.demoup.com/callback/video-event
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /callback/video-event HTTP/1.1
Host: events.demoup.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-requested-with
Referer: https://www.addnature.no/
Origin: https://www.addnature.no
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 30 Jan 2023 08:52:22 GMT
content-length: 0
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 6000
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
cache-control: public,max-age=3600,must-revalidate
X-Firefox-Spdy: h2
events.demoup.com/callback/video-event
200 OK 0 B URL HTTP/2 events.demoup.com/callback/video-event
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /callback/video-event HTTP/1.1
Host: events.demoup.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-Requested-With: XMLHttpRequest
Content-Length: 433
Origin: https://www.addnature.no
Connection: keep-alive
Referer: https://www.addnature.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 08:52:22 GMT
content-type: text/plain
content-length: 0
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 6000
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
cache-control: public,max-age=3600,must-revalidate
X-Firefox-Spdy: h2
www.addnature.no/on/demandware.static/-/Library-Sites-addnature/default/dwca7ee5fa/Contentgrafiken/patagonia.png
200 OK 844 B URL HTTP/2 www.addnature.no/on/demandware.static/-/Library-Sites-addnature/default/dwca7ee5fa/Contentgrafiken/patagonia.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash ed7e892f7b63c29d63173e03994f927a
72fa171422567260e867c84da0a3f4acb62009a5
3c343b643b055fd1ccf0928f7ffcfe55bc385b271eb0561069645ee15d28a6de
GET /on/demandware.static/-/Library-Sites-addnature/default/dwca7ee5fa/Contentgrafiken/patagonia.png HTTP/1.1
Host: www.addnature.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.addnature.no/on-cloud-5-sko-dame-M1179224.html?vgid=G1742048&c=816&_cid=22_-1220_236489_236490_236492_5232617_0_kelkoo.no&utm_source=kelkoo&utm_medium=psm&utm_campaign=L%F8pesko%20for%20landevei&utm_content=On&utm_term=1742048
Cookie: sid=AZ5KIuNg3lWbX8BBbY5OBo2Filsn8gHpFTE; dwanonymous_803bf9f7a6242e90119d6af72a2236f6=acCLCaWjgwH2Zmd5MrSFb5ls0s; __cq_dnt=1; dw_dnt=1; dwsid=EJn4X8KV1KpIZLBh42Dz65yCOCYGBwsWxgrlNZLc_kqhm6TEWXrBEeHOfYY6a_dN_ho9GxW9Ujhws2bE_1W9Yg==; baqend-speedkit-user-id=qrFvj8tCJjFBdg8NOs1fCwrW7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 08:52:22 GMT
content-type: image/webp
content-length: 844
cache-control: public, max-age=2562029
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=2376
content-disposition: inline; filename="patagonia.webp"
cross-origin-resource-policy: cross-origin
expires: Sat, 11 Feb 2023 10:50:49 GMT
last-modified: Tue, 30 Aug 2022 13:14:26 GMT
vary: Accept
x-dw-request-base-id: inJlSAnmv2MBAAB_
cf-cache-status: HIT
age: 915649
accept-ranges: bytes
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 7918f8987a651bfe-OSL
X-Firefox-Spdy: h2
www.addnature.no/on/demandware.static/-/Library-Sites-addnature/default/dw1da46da1/Contentgrafiken/holmenkol.png
200 OK 744 B URL HTTP/2 www.addnature.no/on/demandware.static/-/Library-Sites-addnature/default/dw1da46da1/Contentgrafiken/holmenkol.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash f8f46939797ba28297284c6963107210
081dbb2e00d34a5a5262418fad22df50ddb68821
97e977b16fedfe33142855dacaf4197e4be31dc2c661c918fafc66b172662e9b
GET /on/demandware.static/-/Library-Sites-addnature/default/dw1da46da1/Contentgrafiken/holmenkol.png HTTP/1.1
Host: www.addnature.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.addnature.no/on-cloud-5-sko-dame-M1179224.html?vgid=G1742048&c=816&_cid=22_-1220_236489_236490_236492_5232617_0_kelkoo.no&utm_source=kelkoo&utm_medium=psm&utm_campaign=L%F8pesko%20for%20landevei&utm_content=On&utm_term=1742048
Cookie: sid=AZ5KIuNg3lWbX8BBbY5OBo2Filsn8gHpFTE; dwanonymous_803bf9f7a6242e90119d6af72a2236f6=acCLCaWjgwH2Zmd5MrSFb5ls0s; __cq_dnt=1; dw_dnt=1; dwsid=EJn4X8KV1KpIZLBh42Dz65yCOCYGBwsWxgrlNZLc_kqhm6TEWXrBEeHOfYY6a_dN_ho9GxW9Ujhws2bE_1W9Yg==; baqend-speedkit-user-id=qrFvj8tCJjFBdg8NOs1fCwrW7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 08:52:22 GMT
content-type: image/webp
content-length: 744
cache-control: public, max-age=2567297
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=2197
content-disposition: inline; filename="holmenkol.webp"
cross-origin-resource-policy: cross-origin
expires: Fri, 10 Feb 2023 21:20:34 GMT
last-modified: Tue, 30 Aug 2022 13:14:24 GMT
vary: Accept
x-dw-request-base-id: XQp6_yIov2MBAAB_
cf-cache-status: HIT
age: 916314
accept-ranges: bytes
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 7918f8987a681bfe-OSL
X-Firefox-Spdy: h2
www.addnature.no/on/demandware.static/-/Library-Sites-addnature/default/dw7eff2c7c/Contentgrafiken/norrona.png
200 OK 910 B URL HTTP/2 www.addnature.no/on/demandware.static/-/Library-Sites-addnature/default/dw7eff2c7c/Contentgrafiken/norrona.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 056bf40b40379ca85ef226d821406de2
b100b2b39b9c1949e218e0010e78968d697617f5
89c3cb489a4636b2bde9033c599180d7cc859c9e82426fd3d3fd1e1ff45968ac
GET /on/demandware.static/-/Library-Sites-addnature/default/dw7eff2c7c/Contentgrafiken/norrona.png HTTP/1.1
Host: www.addnature.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.addnature.no/on-cloud-5-sko-dame-M1179224.html?vgid=G1742048&c=816&_cid=22_-1220_236489_236490_236492_5232617_0_kelkoo.no&utm_source=kelkoo&utm_medium=psm&utm_campaign=L%F8pesko%20for%20landevei&utm_content=On&utm_term=1742048
Cookie: sid=AZ5KIuNg3lWbX8BBbY5OBo2Filsn8gHpFTE; dwanonymous_803bf9f7a6242e90119d6af72a2236f6=acCLCaWjgwH2Zmd5MrSFb5ls0s; __cq_dnt=1; dw_dnt=1; dwsid=EJn4X8KV1KpIZLBh42Dz65yCOCYGBwsWxgrlNZLc_kqhm6TEWXrBEeHOfYY6a_dN_ho9GxW9Ujhws2bE_1W9Yg==; baqend-speedkit-user-id=qrFvj8tCJjFBdg8NOs1fCwrW7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 08:52:22 GMT
content-type: image/webp
content-length: 910
cache-control: public, max-age=2590790
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=3284
content-disposition: inline; filename="norrona.webp"
cross-origin-resource-policy: cross-origin
expires: Fri, 20 Jan 2023 15:28:06 GMT
last-modified: Tue, 30 Aug 2022 13:14:26 GMT
vary: Accept
x-dw-request-base-id: Op8AENPIDmMBAAB_
cf-cache-status: HIT
age: 2125126
accept-ranges: bytes
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 7918f8988a791bfe-OSL
X-Firefox-Spdy: h2
www.addnature.no/on/demandware.static/-/Library-Sites-addnature/default/dw4b716bb3/Contentgrafiken/OD_fw22_flyout_wintersport_200x200.jpg
200 OK 24 kB URL HTTP/2 www.addnature.no/on/demandware.static/-/Library-Sites-addnature/default/dw4b716bb3/Contentgrafiken/OD_fw22_flyout_wintersport_200x200.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash e092af49ae2ae41aace360e7e1e23368
01d66ced5466ca7abcde5c04bc61da92c694c46f
8bac91fd71455bbd476dc9e4b7d1533bf59c0c5f30ea869b185ded78e8c403af
GET /on/demandware.static/-/Library-Sites-addnature/default/dw4b716bb3/Contentgrafiken/OD_fw22_flyout_wintersport_200x200.jpg HTTP/1.1
Host: www.addnature.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.addnature.no/on-cloud-5-sko-dame-M1179224.html?vgid=G1742048&c=816&_cid=22_-1220_236489_236490_236492_5232617_0_kelkoo.no&utm_source=kelkoo&utm_medium=psm&utm_campaign=L%F8pesko%20for%20landevei&utm_content=On&utm_term=1742048
Cookie: sid=AZ5KIuNg3lWbX8BBbY5OBo2Filsn8gHpFTE; dwanonymous_803bf9f7a6242e90119d6af72a2236f6=acCLCaWjgwH2Zmd5MrSFb5ls0s; __cq_dnt=1; dw_dnt=1; dwsid=EJn4X8KV1KpIZLBh42Dz65yCOCYGBwsWxgrlNZLc_kqhm6TEWXrBEeHOfYY6a_dN_ho9GxW9Ujhws2bE_1W9Yg==; baqend-speedkit-user-id=qrFvj8tCJjFBdg8NOs1fCwrW7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 08:52:22 GMT
content-type: image/webp
content-length: 24416
cache-control: public, max-age=2586888
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=jpeg, origSize=75719
content-disposition: inline; filename="OD_fw22_flyout_wintersport_200x200.webp"
cross-origin-resource-policy: cross-origin
expires: Sat, 11 Feb 2023 03:26:41 GMT
last-modified: Tue, 22 Nov 2022 11:23:20 GMT
vary: Accept
x-dw-request-base-id: inLbgfF9v2MBAAB_
cf-cache-status: HIT
age: 1521346
accept-ranges: bytes
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 7918f8988a781bfe-OSL
X-Firefox-Spdy: h2
www.addnature.no/on/demandware.static/-/Library-Sites-addnature/default/dw53e3e06a/Contentgrafiken/petzl.png
200 OK 736 B URL HTTP/2 www.addnature.no/on/demandware.static/-/Library-Sites-addnature/default/dw53e3e06a/Contentgrafiken/petzl.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash d9f11125c9ff3df3111f656af780ce9f
c9761f6d8813cf05fde6b7297484306174b130c8
5d6da4771e0c1d8be92559961035a72638b6b1ee7af330ce225789188bd1fc37
GET /on/demandware.static/-/Library-Sites-addnature/default/dw53e3e06a/Contentgrafiken/petzl.png HTTP/1.1
Host: www.addnature.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.addnature.no/on-cloud-5-sko-dame-M1179224.html?vgid=G1742048&c=816&_cid=22_-1220_236489_236490_236492_5232617_0_kelkoo.no&utm_source=kelkoo&utm_medium=psm&utm_campaign=L%F8pesko%20for%20landevei&utm_content=On&utm_term=1742048
Cookie: sid=AZ5KIuNg3lWbX8BBbY5OBo2Filsn8gHpFTE; dwanonymous_803bf9f7a6242e90119d6af72a2236f6=acCLCaWjgwH2Zmd5MrSFb5ls0s; __cq_dnt=1; dw_dnt=1; dwsid=EJn4X8KV1KpIZLBh42Dz65yCOCYGBwsWxgrlNZLc_kqhm6TEWXrBEeHOfYY6a_dN_ho9GxW9Ujhws2bE_1W9Yg==; baqend-speedkit-user-id=qrFvj8tCJjFBdg8NOs1fCwrW7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 08:52:22 GMT
content-type: image/webp
content-length: 736
cache-control: public, max-age=2582637
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=2278
content-disposition: inline; filename="petzl.webp"
cross-origin-resource-policy: cross-origin
expires: Wed, 08 Feb 2023 11:18:09 GMT
last-modified: Tue, 30 Aug 2022 13:14:26 GMT
vary: Accept
x-dw-request-base-id: Op_BFAbJDmMBAAB_
cf-cache-status: HIT
age: 233609
accept-ranges: bytes
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 7918f8988a7e1bfe-OSL
X-Firefox-Spdy: h2
www.addnature.no/on/demandware.static/-/Library-Sites-addnature/default/dw65b950f4/Contentgrafiken/houdini.png
200 OK 632 B URL HTTP/2 www.addnature.no/on/demandware.static/-/Library-Sites-addnature/default/dw65b950f4/Contentgrafiken/houdini.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash c564f7dfd3467808218c3482a06490b4
21451a477b9085102eff9c3ba82d5598a6517dc5
613f039f86afcca7cbc86caf0becb99a6b385c35e6cd949606e0e7b92f0ddb49
GET /on/demandware.static/-/Library-Sites-addnature/default/dw65b950f4/Contentgrafiken/houdini.png HTTP/1.1
Host: www.addnature.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.addnature.no/on-cloud-5-sko-dame-M1179224.html?vgid=G1742048&c=816&_cid=22_-1220_236489_236490_236492_5232617_0_kelkoo.no&utm_source=kelkoo&utm_medium=psm&utm_campaign=L%F8pesko%20for%20landevei&utm_content=On&utm_term=1742048
Cookie: sid=AZ5KIuNg3lWbX8BBbY5OBo2Filsn8gHpFTE; dwanonymous_803bf9f7a6242e90119d6af72a2236f6=acCLCaWjgwH2Zmd5MrSFb5ls0s; __cq_dnt=1; dw_dnt=1; dwsid=EJn4X8KV1KpIZLBh42Dz65yCOCYGBwsWxgrlNZLc_kqhm6TEWXrBEeHOfYY6a_dN_ho9GxW9Ujhws2bE_1W9Yg==; baqend-speedkit-user-id=qrFvj8tCJjFBdg8NOs1fCwrW7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 08:52:22 GMT
content-type: image/webp
content-length: 632
cache-control: public, max-age=2578215
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=2158
content-disposition: inline; filename="houdini.webp"
cross-origin-resource-policy: cross-origin
expires: Fri, 10 Feb 2023 21:07:01 GMT
last-modified: Tue, 30 Aug 2022 13:14:25 GMT
vary: Accept
x-dw-request-base-id: 0pLAdTk9TWMBAAB_
cf-cache-status: HIT
age: 1138302
accept-ranges: bytes
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 7918f8988a841bfe-OSL
X-Firefox-Spdy: h2
www.addnature.no/on/demandware.static/-/Library-Sites-addnature/default/dwab320c21/Contentgrafiken/thenorthface.png
200 OK 954 B URL HTTP/2 www.addnature.no/on/demandware.static/-/Library-Sites-addnature/default/dwab320c21/Contentgrafiken/thenorthface.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash f6d9863586a1370a66352e26a91d711a
8bf45e714502cd076eb1ba04d49a6f4d17fee084
d12850c08675a9835179af36b3f5df0081374fa51652a0847389edaf8e6bf6b3
GET /on/demandware.static/-/Library-Sites-addnature/default/dwab320c21/Contentgrafiken/thenorthface.png HTTP/1.1
Host: www.addnature.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.addnature.no/on-cloud-5-sko-dame-M1179224.html?vgid=G1742048&c=816&_cid=22_-1220_236489_236490_236492_5232617_0_kelkoo.no&utm_source=kelkoo&utm_medium=psm&utm_campaign=L%F8pesko%20for%20landevei&utm_content=On&utm_term=1742048
Cookie: sid=AZ5KIuNg3lWbX8BBbY5OBo2Filsn8gHpFTE; dwanonymous_803bf9f7a6242e90119d6af72a2236f6=acCLCaWjgwH2Zmd5MrSFb5ls0s; __cq_dnt=1; dw_dnt=1; dwsid=EJn4X8KV1KpIZLBh42Dz65yCOCYGBwsWxgrlNZLc_kqhm6TEWXrBEeHOfYY6a_dN_ho9GxW9Ujhws2bE_1W9Yg==; baqend-speedkit-user-id=qrFvj8tCJjFBdg8NOs1fCwrW7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 08:52:22 GMT
content-type: image/webp
content-length: 954
cache-control: public, max-age=2559762
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=3390
content-disposition: inline; filename="thenorthface.webp"
cross-origin-resource-policy: cross-origin
expires: Fri, 10 Feb 2023 19:54:36 GMT
last-modified: Tue, 30 Aug 2022 13:14:27 GMT
vary: Accept
x-dw-request-base-id: inJYufwTv2MBAAB_
cf-cache-status: HIT
age: 916313
accept-ranges: bytes
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 7918f8988a7b1bfe-OSL
X-Firefox-Spdy: h2
www.addnature.no/on/demandware.static/-/Library-Sites-addnature/default/dw0fe86760/Contentgrafiken/bergans.png
200 OK 1.2 kB URL HTTP/2 www.addnature.no/on/demandware.static/-/Library-Sites-addnature/default/dw0fe86760/Contentgrafiken/bergans.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash a89b18e095d7d619ce4e0bde7a854558
7915c2aa7afa0a767e510c46102bf17a41ce1576
2a3b6857fee9ec054812aba2d0114aa152fb13af1e5ec6687bbe582c19e37371
GET /on/demandware.static/-/Library-Sites-addnature/default/dw0fe86760/Contentgrafiken/bergans.png HTTP/1.1
Host: www.addnature.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.addnature.no/on-cloud-5-sko-dame-M1179224.html?vgid=G1742048&c=816&_cid=22_-1220_236489_236490_236492_5232617_0_kelkoo.no&utm_source=kelkoo&utm_medium=psm&utm_campaign=L%F8pesko%20for%20landevei&utm_content=On&utm_term=1742048
Cookie: sid=AZ5KIuNg3lWbX8BBbY5OBo2Filsn8gHpFTE; dwanonymous_803bf9f7a6242e90119d6af72a2236f6=acCLCaWjgwH2Zmd5MrSFb5ls0s; __cq_dnt=1; dw_dnt=1; dwsid=EJn4X8KV1KpIZLBh42Dz65yCOCYGBwsWxgrlNZLc_kqhm6TEWXrBEeHOfYY6a_dN_ho9GxW9Ujhws2bE_1W9Yg==; baqend-speedkit-user-id=qrFvj8tCJjFBdg8NOs1fCwrW7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 08:52:22 GMT
content-type: image/webp
content-length: 1208
cache-control: public, max-age=2569321
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=2795
content-disposition: inline; filename="bergans.webp"
cross-origin-resource-policy: cross-origin
expires: Sat, 11 Feb 2023 13:28:41 GMT
last-modified: Tue, 30 Aug 2022 13:14:23 GMT
vary: Accept
x-dw-request-base-id: inKUlwkLwGMBAAB_
cf-cache-status: HIT
age: 916313
accept-ranges: bytes
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 7918f8988a7f1bfe-OSL
X-Firefox-Spdy: h2
www.addnature.no/on/demandware.static/-/Library-Sites-addnature/default/dwc9bb2c16/Contentgrafiken/oakley.png
200 OK 760 B URL HTTP/2 www.addnature.no/on/demandware.static/-/Library-Sites-addnature/default/dwc9bb2c16/Contentgrafiken/oakley.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 34a563099efb1eff482425e32f8b4b86
8a6f7f86c5182c626120754cd06aab757613ae41
3f66f7bef98d742db6b585c7d44f2a523d6b4617effeca78ea39c10d1a1ac070
GET /on/demandware.static/-/Library-Sites-addnature/default/dwc9bb2c16/Contentgrafiken/oakley.png HTTP/1.1
Host: www.addnature.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.addnature.no/on-cloud-5-sko-dame-M1179224.html?vgid=G1742048&c=816&_cid=22_-1220_236489_236490_236492_5232617_0_kelkoo.no&utm_source=kelkoo&utm_medium=psm&utm_campaign=L%F8pesko%20for%20landevei&utm_content=On&utm_term=1742048
Cookie: sid=AZ5KIuNg3lWbX8BBbY5OBo2Filsn8gHpFTE; dwanonymous_803bf9f7a6242e90119d6af72a2236f6=acCLCaWjgwH2Zmd5MrSFb5ls0s; __cq_dnt=1; dw_dnt=1; dwsid=EJn4X8KV1KpIZLBh42Dz65yCOCYGBwsWxgrlNZLc_kqhm6TEWXrBEeHOfYY6a_dN_ho9GxW9Ujhws2bE_1W9Yg==; baqend-speedkit-user-id=qrFvj8tCJjFBdg8NOs1fCwrW7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 08:52:22 GMT
content-type: image/webp
content-length: 760
cache-control: public, max-age=2591176
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=2244
content-disposition: inline; filename="oakley.webp"
cross-origin-resource-policy: cross-origin
expires: Sat, 14 Jan 2023 18:05:29 GMT
last-modified: Tue, 30 Aug 2022 13:14:26 GMT
vary: Accept
x-dw-request-base-id: KIbc8R3EbWMBAAB_
cf-cache-status: HIT
age: 1726655
accept-ranges: bytes
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 7918f8988a8a1bfe-OSL
X-Firefox-Spdy: h2
www.addnature.no/on/demandware.static/-/Library-Sites-addnature/default/dw9f0b84ef/Contentgrafiken/poc.png
200 OK 956 B URL HTTP/2 www.addnature.no/on/demandware.static/-/Library-Sites-addnature/default/dw9f0b84ef/Contentgrafiken/poc.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash a9b2e38af6eedb996e18b438e6f737c0
103af213789c41b98b19107b3e6c0ae90650def5
32288c69c8e55c896ab1600f93532846c222139c44904bf6c84a6199fc4bd05e
GET /on/demandware.static/-/Library-Sites-addnature/default/dw9f0b84ef/Contentgrafiken/poc.png HTTP/1.1
Host: www.addnature.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.addnature.no/on-cloud-5-sko-dame-M1179224.html?vgid=G1742048&c=816&_cid=22_-1220_236489_236490_236492_5232617_0_kelkoo.no&utm_source=kelkoo&utm_medium=psm&utm_campaign=L%F8pesko%20for%20landevei&utm_content=On&utm_term=1742048
Cookie: sid=AZ5KIuNg3lWbX8BBbY5OBo2Filsn8gHpFTE; dwanonymous_803bf9f7a6242e90119d6af72a2236f6=acCLCaWjgwH2Zmd5MrSFb5ls0s; __cq_dnt=1; dw_dnt=1; dwsid=EJn4X8KV1KpIZLBh42Dz65yCOCYGBwsWxgrlNZLc_kqhm6TEWXrBEeHOfYY6a_dN_ho9GxW9Ujhws2bE_1W9Yg==; baqend-speedkit-user-id=qrFvj8tCJjFBdg8NOs1fCwrW7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 08:52:22 GMT
content-type: image/webp
content-length: 956
cache-control: public, max-age=2580027
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=2515
content-disposition: inline; filename="poc.webp"
cross-origin-resource-policy: cross-origin
expires: Sat, 04 Feb 2023 14:56:51 GMT
last-modified: Tue, 30 Aug 2022 13:14:26 GMT
vary: Accept
x-dw-request-base-id: OYdZ0sr4dGMBAAB_
cf-cache-status: HIT
age: 2058403
accept-ranges: bytes
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 7918f8989a8d1bfe-OSL
X-Firefox-Spdy: h2
www.addnature.no/on/demandware.static/-/Library-Sites-addnature/default/dwbc4cb9ce/Contentgrafiken/hoka-one-one.png
200 OK 1.2 kB URL HTTP/2 www.addnature.no/on/demandware.static/-/Library-Sites-addnature/default/dwbc4cb9ce/Contentgrafiken/hoka-one-one.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash bfed3168cbe84242de77d4b860d18cae
119b716f91fc997a04766835c2e375949e06bca0
e26c5e5a1f9e40e5616b4f721cc875cf98bc05465b81a216ad45da4e4c55101e
GET /on/demandware.static/-/Library-Sites-addnature/default/dwbc4cb9ce/Contentgrafiken/hoka-one-one.png HTTP/1.1
Host: www.addnature.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.addnature.no/on-cloud-5-sko-dame-M1179224.html?vgid=G1742048&c=816&_cid=22_-1220_236489_236490_236492_5232617_0_kelkoo.no&utm_source=kelkoo&utm_medium=psm&utm_campaign=L%F8pesko%20for%20landevei&utm_content=On&utm_term=1742048
Cookie: sid=AZ5KIuNg3lWbX8BBbY5OBo2Filsn8gHpFTE; dwanonymous_803bf9f7a6242e90119d6af72a2236f6=acCLCaWjgwH2Zmd5MrSFb5ls0s; __cq_dnt=1; dw_dnt=1; dwsid=EJn4X8KV1KpIZLBh42Dz65yCOCYGBwsWxgrlNZLc_kqhm6TEWXrBEeHOfYY6a_dN_ho9GxW9Ujhws2bE_1W9Yg==; baqend-speedkit-user-id=qrFvj8tCJjFBdg8NOs1fCwrW7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 08:52:22 GMT
content-type: image/webp
content-length: 1188
cache-control: public, max-age=2567111
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=2753
content-disposition: inline; filename="hoka-one-one.webp"
cross-origin-resource-policy: cross-origin
expires: Thu, 09 Feb 2023 01:51:07 GMT
last-modified: Tue, 30 Aug 2022 13:14:24 GMT
vary: Accept
x-dw-request-base-id: t4JrFTIXR2MBAAB_
cf-cache-status: HIT
age: 1747416
accept-ranges: bytes
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 7918f8989a8f1bfe-OSL
X-Firefox-Spdy: h2
www.addnature.no/on/demandware.static/-/Library-Sites-addnature/default/dw8fd6b14c/Contentgrafiken/klaetermusen.png
200 OK 732 B URL HTTP/2 www.addnature.no/on/demandware.static/-/Library-Sites-addnature/default/dw8fd6b14c/Contentgrafiken/klaetermusen.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 0675c9898ef08a30fa45bee23713ec33
17867aea8f5ad608a2282b72806f3f0cf3b046d3
7c7047209af4cf39223db7e83cba33a1369a0f934a6d11cb15cbaa4e9c21158e
GET /on/demandware.static/-/Library-Sites-addnature/default/dw8fd6b14c/Contentgrafiken/klaetermusen.png HTTP/1.1
Host: www.addnature.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.addnature.no/on-cloud-5-sko-dame-M1179224.html?vgid=G1742048&c=816&_cid=22_-1220_236489_236490_236492_5232617_0_kelkoo.no&utm_source=kelkoo&utm_medium=psm&utm_campaign=L%F8pesko%20for%20landevei&utm_content=On&utm_term=1742048
Cookie: sid=AZ5KIuNg3lWbX8BBbY5OBo2Filsn8gHpFTE; dwanonymous_803bf9f7a6242e90119d6af72a2236f6=acCLCaWjgwH2Zmd5MrSFb5ls0s; __cq_dnt=1; dw_dnt=1; dwsid=EJn4X8KV1KpIZLBh42Dz65yCOCYGBwsWxgrlNZLc_kqhm6TEWXrBEeHOfYY6a_dN_ho9GxW9Ujhws2bE_1W9Yg==; baqend-speedkit-user-id=qrFvj8tCJjFBdg8NOs1fCwrW7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 08:52:22 GMT
content-type: image/webp
content-length: 732
cache-control: public, max-age=2589866
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=2240
content-disposition: inline; filename="klaetermusen.webp"
cross-origin-resource-policy: cross-origin
expires: Sat, 11 Feb 2023 12:50:13 GMT
last-modified: Tue, 30 Aug 2022 13:14:25 GMT
vary: Accept
x-dw-request-base-id: Op-rtzfFDmMBAAB_
cf-cache-status: HIT
age: 463902
accept-ranges: bytes
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 7918f8989a8e1bfe-OSL
X-Firefox-Spdy: h2
www.addnature.no/on/demandware.static/-/Library-Sites-addnature/default/dweb0547d5/Contentgrafiken/black-diamond.png
200 OK 700 B URL HTTP/2 www.addnature.no/on/demandware.static/-/Library-Sites-addnature/default/dweb0547d5/Contentgrafiken/black-diamond.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 70c4dbcb284fadf7cf9f64f719b36e14
10b87bd384db80f4ab0c3e9016ab3a817bb185e0
15fd1f66d11b9ea08dda8b3072e53d3a9d609da658f76f9dff2475aee09ced1c
GET /on/demandware.static/-/Library-Sites-addnature/default/dweb0547d5/Contentgrafiken/black-diamond.png HTTP/1.1
Host: www.addnature.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.addnature.no/on-cloud-5-sko-dame-M1179224.html?vgid=G1742048&c=816&_cid=22_-1220_236489_236490_236492_5232617_0_kelkoo.no&utm_source=kelkoo&utm_medium=psm&utm_campaign=L%F8pesko%20for%20landevei&utm_content=On&utm_term=1742048
Cookie: sid=AZ5KIuNg3lWbX8BBbY5OBo2Filsn8gHpFTE; dwanonymous_803bf9f7a6242e90119d6af72a2236f6=acCLCaWjgwH2Zmd5MrSFb5ls0s; __cq_dnt=1; dw_dnt=1; dwsid=EJn4X8KV1KpIZLBh42Dz65yCOCYGBwsWxgrlNZLc_kqhm6TEWXrBEeHOfYY6a_dN_ho9GxW9Ujhws2bE_1W9Yg==; baqend-speedkit-user-id=qrFvj8tCJjFBdg8NOs1fCwrW7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 08:52:22 GMT
content-type: image/webp
content-length: 700
cache-control: public, max-age=2589709
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=2170
content-disposition: inline; filename="black-diamond.webp"
cross-origin-resource-policy: cross-origin
expires: Sun, 29 Jan 2023 20:44:13 GMT
last-modified: Tue, 30 Aug 2022 13:14:23 GMT
vary: Accept
x-dw-request-base-id: Op9Jq5nEDmMBAAB_
cf-cache-status: HIT
age: 138114
accept-ranges: bytes
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 7918f8988a871bfe-OSL
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ba2ca6af7b23ce2e11aa4f9d86e66269
212aef55d64b6add292dcf6241b16e7c93d1bae2
f163a94d190f5aeeb05b2e344bc8e1544d9701772b08585e9c92b529c8652b3d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 08:52:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.addnature.no/on/demandware.static/-/Library-Sites-addnature/default/dw9e30e481/Contentgrafiken/kari-traa.png
200 OK 574 B URL HTTP/2 www.addnature.no/on/demandware.static/-/Library-Sites-addnature/default/dw9e30e481/Contentgrafiken/kari-traa.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash a6c83ebe66cd2ffb7989d4a11eb7369a
9c9a4fa339f8894e1b3daf78d36626d57ad960e5
16f1223bc2296dac5ba8776063d30ec2f3450541072e97c57e6a7f49c1bf8492
GET /on/demandware.static/-/Library-Sites-addnature/default/dw9e30e481/Contentgrafiken/kari-traa.png HTTP/1.1
Host: www.addnature.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.addnature.no/on-cloud-5-sko-dame-M1179224.html?vgid=G1742048&c=816&_cid=22_-1220_236489_236490_236492_5232617_0_kelkoo.no&utm_source=kelkoo&utm_medium=psm&utm_campaign=L%F8pesko%20for%20landevei&utm_content=On&utm_term=1742048
Cookie: sid=AZ5KIuNg3lWbX8BBbY5OBo2Filsn8gHpFTE; dwanonymous_803bf9f7a6242e90119d6af72a2236f6=acCLCaWjgwH2Zmd5MrSFb5ls0s; __cq_dnt=1; dw_dnt=1; dwsid=EJn4X8KV1KpIZLBh42Dz65yCOCYGBwsWxgrlNZLc_kqhm6TEWXrBEeHOfYY6a_dN_ho9GxW9Ujhws2bE_1W9Yg==; baqend-speedkit-user-id=qrFvj8tCJjFBdg8NOs1fCwrW7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 08:52:22 GMT
content-type: image/webp
content-length: 574
cache-control: public, max-age=2581348
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=1990
content-disposition: inline; filename="kari-traa.webp"
cross-origin-resource-policy: cross-origin
expires: Mon, 13 Feb 2023 18:56:50 GMT
last-modified: Tue, 30 Aug 2022 13:14:25 GMT
vary: Accept
x-dw-request-base-id: 0pIBUDCPR2MBAAB_
cf-cache-status: HIT
age: 706093
accept-ranges: bytes
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 7918f8989a941bfe-OSL
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-TR28KQD
200 OK 41 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-TR28KQD
IP
File type ASCII text, with very long lines (4303)
Hash 86c2141ac70e9280b42479cbaa6c4720
2d423ab4cb60c5f65e1517ad6252aec01d8bc6f6
202c7acd0a5ad9c0b8c50330487c2bc3eb44e459cfed286ce0f23ae2d845099d
GET /gtm.js?id=GTM-TR28KQD HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.addnature.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 30 Jan 2023 08:52:22 GMT
expires: Mon, 30 Jan 2023 08:52:22 GMT
cache-control: private, max-age=900
last-modified: Mon, 30 Jan 2023 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 41400
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
addnature.app.baqend.com/v1/rum/pi?pi=1
204 No Content 0 B URL HTTP/2 addnature.app.baqend.com/v1/rum/pi?pi=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /v1/rum/pi?pi=1 HTTP/1.1
Host: addnature.app.baqend.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 4831
Origin: https://www.addnature.no
Connection: keep-alive
Referer: https://www.addnature.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
cache-control: no-cache, max-age=0
accept-ranges: bytes
date: Mon, 30 Jan 2023 08:52:22 GMT
x-served-by: cache-bma1655-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1675068743.674533,VS0,VE23
access-control-allow-credentials: true
access-control-allow-origin: https://www.addnature.no
access-control-expose-headers: Location, ETag, Baqend-Authorization-Token, Baqend-Acl, Baqend-Size, Baqend-SW-Control, Baqend-Created-At, Date, Age, Baqend-Speed-Kit, Baqend-Custom-Headers, X-Served-By, X-Cache, X-Timer, Access-Control-Allow-Origin, Fastly-Io-Info, Server-Timing
timing-allow-origin: https://www.addnature.no
via: baqend
server-timing: pop;desc=BMA;dur=23,cache;desc=PASS,proto;desc=h2
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 0380db811218574b08e651de4bc275ac
c259396749585ce2bf296c9659b549f8285ff1c8
7e2b5eb0c998e5002efc8dc487ff87a5494f07fd0272cebc6847a1370e590fe2
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Mon, 30 Jan 2023 08:52:22 GMT
Last-Modified: Mon, 30 Jan 2023 07:18:54 GMT
Server: ECS (nyb/1D29)
X-Cache: Miss from cloudfront
Via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: OGfbKz3sAdSyMoiPEtIzx8o8epHmppE7Jmz5Kwdvh_3RUXUfjKUYuA==
Age: 5608
e.cquotient.com/recs/bczl-addnature-no/MiniCart-ANO?callback=CQuotient._callback0&_=1675068753745&_device=windows&userId=&cookieId=&emailId=&anchors=id%3A%3AM1179224%7C%7Csku%3A%3A%7C%7Ctype%3A%3Avgroup%7C%7Calt_id%3A%3AG1742048&slotId=minicart-einstein-personalized&slotConfigId=Complete%20the%20Set&slotConfigTemplate=slots%2Frecommendation%2Feinstein_minicart.isml&ccver=1.03&realm=BCZL&siteId=addnature-no&instanceType=prd&v=v3.0.1&json=%7B%22userId%22%3A%22%22%2C%22cookieId%22%3A%22%22%2C%22emailId%22%3A%22%22%2C%22anchors%22%3A%5B%7B%22id%22%3A%22M1179224%22%2C%22sku%22%3A%22%22%2C%22type%22%3A%22vgroup%22%2C%22alt_id%22%3A%22G1742048%22%7D%5D%2C%22slotId%22%3A%22minicart-einstein-personalized%22%2C%22slotConfigId%22%3A%22Complete%20the%20Set%22%2C%22slotConfigTemplate%22%3A%22slots%2Frecommendation%2Feinstein_minicart.isml%22%2C%22ccver%22%3A%221.03%22%2C%22realm%22%3A%22BCZL%22%2C%22siteId%22%3A%22addnature-no%22%2C%22instanceType%22%3A%22prd%22%2C%22v%22%3A%22v3.0.1%22%7D
200 OK 184 B URL HTTP/2 e.cquotient.com/recs/bczl-addnature-no/MiniCart-ANO?callback=CQuotient._callback0&_=1675068753745&_device=windows&userId=&cookieId=&emailId=&anchors=id%3A%3AM1179224%7C%7Csku%3A%3A%7C%7Ctype%3A%3Avgroup%7C%7Calt_id%3A%3AG1742048&slotId=minicart-einstein-personalized&slotConfigId=Complete%20the%20Set&slotConfigTemplate=slots%2Frecommendation%2Feinstein_minicart.isml&ccver=1.03&realm=BCZL&siteId=addnature-no&instanceType=prd&v=v3.0.1&json=%7B%22userId%22%3A%22%22%2C%22cookieId%22%3A%22%22%2C%22emailId%22%3A%22%22%2C%22anchors%22%3A%5B%7B%22id%22%3A%22M1179224%22%2C%22sku%22%3A%22%22%2C%22type%22%3A%22vgroup%22%2C%22alt_id%22%3A%22G1742048%22%7D%5D%2C%22slotId%22%3A%22minicart-einstein-personalized%22%2C%22slotConfigId%22%3A%22Complete%20the%20Set%22%2C%22slotConfigTemplate%22%3A%22slots%2Frecommendation%2Feinstein_minicart.isml%22%2C%22ccver%22%3A%221.03%22%2C%22realm%22%3A%22BCZL%22%2C%22siteId%22%3A%22addnature-no%22%2C%22instanceType%22%3A%22prd%22%2C%22v%22%3A%22v3.0.1%22%7D
IP
File type ASCII text, with no line terminators
Hash cff602f18dcb0241036e452e39e6d813
58a082d9b87366afe7939cc7b188907437609f3a
c0d190928efc8f3fa740e1648aa380eccaa2cfffd32d4fcc9a355a7fcbf1bffd
GET /recs/bczl-addnature-no/MiniCart-ANO?callback=CQuotient._callback0&_=1675068753745&_device=windows&userId=&cookieId=&emailId=&anchors=id%3A%3AM1179224%7C%7Csku%3A%3A%7C%7Ctype%3A%3Avgroup%7C%7Calt_id%3A%3AG1742048&slotId=minicart-einstein-personalized&slotConfigId=Complete%20the%20Set&slotConfigTemplate=slots%2Frecommendation%2Feinstein_minicart.isml&ccver=1.03&realm=BCZL&siteId=addnature-no&instanceType=prd&v=v3.0.1&json=%7B%22userId%22%3A%22%22%2C%22cookieId%22%3A%22%22%2C%22emailId%22%3A%22%22%2C%22anchors%22%3A%5B%7B%22id%22%3A%22M1179224%22%2C%22sku%22%3A%22%22%2C%22type%22%3A%22vgroup%22%2C%22alt_id%22%3A%22G1742048%22%7D%5D%2C%22slotId%22%3A%22minicart-einstein-personalized%22%2C%22slotConfigId%22%3A%22Complete%20the%20Set%22%2C%22slotConfigTemplate%22%3A%22slots%2Frecommendation%2Feinstein_minicart.isml%22%2C%22ccver%22%3A%221.03%22%2C%22realm%22%3A%22BCZL%22%2C%22siteId%22%3A%22addnature-no%22%2C%22instanceType%22%3A%22prd%22%2C%22v%22%3A%22v3.0.1%22%7D HTTP/1.1
Host: e.cquotient.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.addnature.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 30 Jan 2023 08:52:22 GMT
content-type: text/javascript; charset=utf-8
content-length: 184
strict-transport-security: max-age=15552000; includeSubdomains
cache-control: no-store
x-content-type-options: nosniff
etag: W/"b8-WKCC2bhzZq/nk5zHsYiQdDdgnzo"
vary: Accept-Encoding
x-envoy-upstream-service-time: 7
server: envoy
X-Firefox-Spdy: h2
www.addnature.no/on/demandware.static/Sites-addnature-no-Site/-/no_NO/v1675048123452/js/tns.js
200 OK 61 kB URL HTTP/2 www.addnature.no/on/demandware.static/Sites-addnature-no-Site/-/no_NO/v1675048123452/js/tns.js
IP
Hash 77ad828bb3f92743a4d1ce3e71b96e1b
f087a137048132eed9cde269206255479abe258e
41591a74e0c1efe0d7464b4d19e70e7f089d7392cc570e73a5186760c84fbb91
GET /on/demandware.static/Sites-addnature-no-Site/-/no_NO/v1675048123452/js/tns.js HTTP/1.1
Host: www.addnature.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.addnature.no/on-cloud-5-sko-dame-M1179224.html?vgid=G1742048&c=816&_cid=22_-1220_236489_236490_236492_5232617_0_kelkoo.no&utm_source=kelkoo&utm_medium=psm&utm_campaign=L%F8pesko%20for%20landevei&utm_content=On&utm_term=1742048
Cookie: sid=AZ5KIuNg3lWbX8BBbY5OBo2Filsn8gHpFTE; dwanonymous_803bf9f7a6242e90119d6af72a2236f6=acCLCaWjgwH2Zmd5MrSFb5ls0s; __cq_dnt=1; dw_dnt=1; dwsid=EJn4X8KV1KpIZLBh42Dz65yCOCYGBwsWxgrlNZLc_kqhm6TEWXrBEeHOfYY6a_dN_ho9GxW9Ujhws2bE_1W9Yg==; baqend-speedkit-user-id=qrFvj8tCJjFBdg8NOs1fCwrW7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 08:52:22 GMT
content-type: application/javascript
cache-control: public, max-age=2591561
cf-bgj: minify
cross-origin-resource-policy: cross-origin
expires: Wed, 01 Mar 2023 03:14:04 GMT
last-modified: Wed, 18 Jan 2023 10:29:29 GMT
vary: accept-encoding
x-dw-request-base-id: inLgRfw112MBAAB_
cf-cache-status: HIT
age: 19268
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 7918f8990ae91bfe-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.cookielaw.org/scripttemplates/6.13.0/otBannerSdk.js
200 OK 83 kB URL HTTP/2 cdn.cookielaw.org/scripttemplates/6.13.0/otBannerSdk.js
IP
File type ASCII text, with very long lines (65455)
Hash a58f11af8dfc87b55bd9a7441435b554
737c48d246312f799c01880dfe66276e42a0c2fc
1fdd13d6f164e9d5e108aee5d513dea3af1298b3f07a71107ebe265847b982d7
GET /scripttemplates/6.13.0/otBannerSdk.js HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.addnature.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 08:52:22 GMT
content-type: application/javascript
content-length: 82575
content-encoding: gzip
content-md5: pY8Rr438h7Vb2adEFDW1VA==
last-modified: Thu, 28 Jan 2021 07:38:02 GMT
etag: 0x8D8C35FA49267C6
x-ms-request-id: f1052a54-201e-0041-4f6c-c4f0f5000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 25098
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7918f89abe38b505-OSL
X-Firefox-Spdy: h2
www.addnature.no/wrapper-sw.js?r=be6e2798-c3a1-464e-bfa3-bd9765e3d42d&v=2.12.1&gr=A
200 OK 16 kB URL HTTP/2 www.addnature.no/wrapper-sw.js?r=be6e2798-c3a1-464e-bfa3-bd9765e3d42d&v=2.12.1&gr=A
IP
Hash fcd48e2fa4bd166b92a9c7ee21a3b4d2
43bc3fe658fed88ee59ab60e6f0160cab1494314
fd78cc0988e88351f024d9e9fa97e734726a4961452f65340d7ab1d98e76bfb1
GET /wrapper-sw.js?r=be6e2798-c3a1-464e-bfa3-bd9765e3d42d&v=2.12.1&gr=A HTTP/1.1
Host: www.addnature.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Service-Worker: script
Connection: keep-alive
Cookie: sid=AZ5KIuNg3lWbX8BBbY5OBo2Filsn8gHpFTE; dwanonymous_803bf9f7a6242e90119d6af72a2236f6=acCLCaWjgwH2Zmd5MrSFb5ls0s; __cq_dnt=1; dw_dnt=1; dwsid=EJn4X8KV1KpIZLBh42Dz65yCOCYGBwsWxgrlNZLc_kqhm6TEWXrBEeHOfYY6a_dN_ho9GxW9Ujhws2bE_1W9Yg==; baqend-speedkit-user-id=qrFvj8tCJjFBdg8NOs1fCwrW7
Sec-Fetch-Dest: serviceworker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 08:52:22 GMT
content-type: text/javascript;charset=UTF-8
content-security-policy: frame-ancestors 'self'
x-dw-request-base-id: XQo5BW8312MBAAB_
x-frame-options: SAMEORIGIN
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: Thu, 01 Dec 1994 16:00:00 GMT
last-modified: Mon, 30 Jan 2023 08:52:22 GMT
cf-cache-status: MISS
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 7918f8991b051bfe-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
www.addnature.no/on-cloud-5-sko-dame-M1179224.html?vgid=G1742048&c=816&_cid=22_-1220_236489_236490_236492_5232617_0_kelkoo.no&utm_source=kelkoo&utm_medium=psm&utm_campaign=L%F8pesko%20for%20landevei&utm_content=On&utm_term=1742048
200 OK 70 kB URL HTTP/2 www.addnature.no/on-cloud-5-sko-dame-M1179224.html?vgid=G1742048&c=816&_cid=22_-1220_236489_236490_236492_5232617_0_kelkoo.no&utm_source=kelkoo&utm_medium=psm&utm_campaign=L%F8pesko%20for%20landevei&utm_content=On&utm_term=1742048
IP
Hash b1115780dc4df2fbe5acd74fe694aba2
b43399b8d87d38767c982609910f25a334633c86
31034e6eeb65b0e5c48de33eba429c365aadc733a2b64bf15bcf9ee49fa9cb72
GET /on-cloud-5-sko-dame-M1179224.html?vgid=G1742048&c=816&_cid=22_-1220_236489_236490_236492_5232617_0_kelkoo.no&utm_source=kelkoo&utm_medium=psm&utm_campaign=L%F8pesko%20for%20landevei&utm_content=On&utm_term=1742048 HTTP/1.1
Host: www.addnature.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no-go.kelkoogroup.net/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 30 Jan 2023 08:52:21 GMT
content-type: text/html;charset=UTF-8
set-cookie: sid=AZ5KIuNg3lWbX8BBbY5OBo2Filsn8gHpFTE; Path=/; Secure; SameSite=None
dwanonymous_803bf9f7a6242e90119d6af72a2236f6=acCLCaWjgwH2Zmd5MrSFb5ls0s; Version=1; Comment="Demandware anonymous cookie for site Sites-addnature-no-Site"; Max-Age=15552000; Expires=Sat, 29-Jul-2023 08:52:21 GMT; Path=/; Secure; SameSite=None
__cq_dnt=1; Path=/; Secure; SameSite=None
dw_dnt=1; Path=/; Secure; SameSite=None
dwsid=EJn4X8KV1KpIZLBh42Dz65yCOCYGBwsWxgrlNZLc_kqhm6TEWXrBEeHOfYY6a_dN_ho9GxW9Ujhws2bE_1W9Yg==; path=/; HttpOnly; Secure; SameSite=None
x-dw-request-base-id: inISG0SF12MBAAB_
content-security-policy: frame-ancestors 'self'
x-frame-options: SAMEORIGIN
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: Thu, 01 Dec 1994 16:00:00 GMT
vary: accept-encoding
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 7918f890faf41bfe-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
addnature.app.baqend.com/v1/rum/pi
204 No Content 0 B URL HTTP/2 addnature.app.baqend.com/v1/rum/pi
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /v1/rum/pi HTTP/1.1
Host: addnature.app.baqend.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 305
Origin: https://www.addnature.no
Connection: keep-alive
Referer: https://www.addnature.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache, max-age=0
accept-ranges: bytes
date: Mon, 30 Jan 2023 08:52:23 GMT
x-served-by: cache-bma1655-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1675068743.068587,VS0,VE20
access-control-allow-credentials: true
access-control-allow-origin: https://www.addnature.no
access-control-expose-headers: Location, ETag, Baqend-Authorization-Token, Baqend-Acl, Baqend-Size, Baqend-SW-Control, Baqend-Created-At, Date, Age, Baqend-Speed-Kit, Baqend-Custom-Headers, X-Served-By, X-Cache, X-Timer, Access-Control-Allow-Origin, Fastly-Io-Info, Server-Timing
timing-allow-origin: https://www.addnature.no
via: baqend
server-timing: pop;desc=BMA;dur=20,cache;desc=PASS,proto;desc=h2
X-Firefox-Spdy: h2
cdn.cookielaw.org/consent/766525aa-15df-473d-838d-50e00a067133/3d2424a9-c8ff-452d-b3c1-067e50911016/no.json
200 OK 20 kB URL HTTP/2 cdn.cookielaw.org/consent/766525aa-15df-473d-838d-50e00a067133/3d2424a9-c8ff-452d-b3c1-067e50911016/no.json
IP
File type JSON data\012- HTML document, Unicode text, UTF-8 text, with very long lines (65173), with no line terminators
Hash 6ae88594ceeff209afa4e095c7d025f3
d702111124347dada74794e684636e3980783f28
93793057b8751cdc3c8e53842b46fda333c1ba8ccb1964b8118167073453c904
GET /consent/766525aa-15df-473d-838d-50e00a067133/3d2424a9-c8ff-452d-b3c1-067e50911016/no.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.addnature.no/
Origin: https://www.addnature.no
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 08:52:23 GMT
content-type: application/x-javascript
content-length: 20490
cache-control: public, max-age=86400
content-encoding: gzip
content-md5: auiFlM7v8gmvpOCVx9Al8w==
last-modified: Tue, 14 Jun 2022 11:52:34 GMT
etag: 0x8DA4DFC5EC9B6B2
x-ms-request-id: e32d47b7-601e-00ce-7fe5-7fbea9000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 8222
expires: Tue, 31 Jan 2023 08:52:23 GMT
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7918f89cbb9eb51d-OSL
X-Firefox-Spdy: h2
events.demoup.com/callback/pageload_event
200 OK 0 B URL HTTP/2 events.demoup.com/callback/pageload_event
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /callback/pageload_event HTTP/1.1
Host: events.demoup.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-requested-with
Referer: https://www.addnature.no/
Origin: https://www.addnature.no
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 08:52:23 GMT
content-length: 0
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 6000
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
cache-control: public,max-age=3600,must-revalidate
X-Firefox-Spdy: h2
addnature.app.baqend.com/v1/speedkit/sw.js?r=be6e2798-c3a1-464e-bfa3-bd9765e3d42d&v=2.12.1&gr=A
200 OK 31 kB URL HTTP/2 addnature.app.baqend.com/v1/speedkit/sw.js?r=be6e2798-c3a1-464e-bfa3-bd9765e3d42d&v=2.12.1&gr=A
IP
File type ASCII text, with very long lines (65478)
Hash 0f796fd1ee0ccad324781f503bda66b1
faf7433dd66e88dc5691163ba54979d2dbc55d5c
02e5cf3b764b861984fdf490f7bf9fd21e653f1a7fe02d23a2a0de7f3830fe01
GET /v1/speedkit/sw.js?r=be6e2798-c3a1-464e-bfa3-bd9765e3d42d&v=2.12.1&gr=A HTTP/1.1
Host: addnature.app.baqend.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.addnature.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private,max-age=31536000,sw-max-age=31536000
content-encoding: gzip
content-type: text/javascript; charset=UTF-8
etag: "QnuOZnGdbOqxbLLPw9UYAA==--br"
accept-ranges: bytes
date: Mon, 30 Jan 2023 08:52:23 GMT
age: 501603
x-served-by: cache-bma1655-BMA
x-cache: HIT
x-cache-hits: 1143
x-timer: S1675068743.181619,VS0,VE1
vary: Accept-Encoding, Origin
via: baqend
server-timing: pop;desc=BMA;dur=1,cache;desc=EDGE,hotness;desc=1143,proto;desc=h2
content-length: 31194
X-Firefox-Spdy: h2
cdn.cookielaw.org/scripttemplates/6.13.0/assets/otCenterRounded.json
200 OK 2.4 kB URL HTTP/2 cdn.cookielaw.org/scripttemplates/6.13.0/assets/otCenterRounded.json
IP
File type JSON data\012- , ASCII text, with very long lines (6953)
Hash 2f4b19c0aa84bdbf460ff20071904255
2fc7b945a00ccf38db407041b962f843ac543c2a
7d75a226a06e2adfa4bd5cc2a2af65b8f2beaccad3d5f682358ce295ee455901
GET /scripttemplates/6.13.0/assets/otCenterRounded.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.addnature.no/
Origin: https://www.addnature.no
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 08:52:23 GMT
content-type: application/json
content-length: 2421
content-encoding: gzip
content-md5: L0sZwKqEvb9GD/IAcZBCVQ==
last-modified: Thu, 28 Jan 2021 07:37:53 GMT
etag: 0x8D8C35F9F60BD54
x-ms-request-id: f68fe6c0-901e-0035-526c-c476b3000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 11208
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7918f89d3c45b51d-OSL
X-Firefox-Spdy: h2
www.addnature.no/on/demandware.store/Sites-addnature-no-Site/no_NO/EpoqRecommendations-ProductPage?pid=G1742048
200 OK 18 kB URL HTTP/2 www.addnature.no/on/demandware.store/Sites-addnature-no-Site/no_NO/EpoqRecommendations-ProductPage?pid=G1742048
IP
File type HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (617)
Hash c7bd4571878c449355c354026a1c76bb
a94358c139c064983110ab7e1cc07a7c0a343606
6a1922df875c220fa4edc4dd70efa39bc059e8b92b5baef663e44e0ba211a104
GET /on/demandware.store/Sites-addnature-no-Site/no_NO/EpoqRecommendations-ProductPage?pid=G1742048 HTTP/1.1
Host: www.addnature.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.addnature.no/on-cloud-5-sko-dame-M1179224.html?vgid=G1742048&c=816&_cid=22_-1220_236489_236490_236492_5232617_0_kelkoo.no&utm_source=kelkoo&utm_medium=psm&utm_campaign=L%F8pesko%20for%20landevei&utm_content=On&utm_term=1742048
Cookie: sid=AZ5KIuNg3lWbX8BBbY5OBo2Filsn8gHpFTE; dwanonymous_803bf9f7a6242e90119d6af72a2236f6=acCLCaWjgwH2Zmd5MrSFb5ls0s; __cq_dnt=1; dw_dnt=1; dwsid=EJn4X8KV1KpIZLBh42Dz65yCOCYGBwsWxgrlNZLc_kqhm6TEWXrBEeHOfYY6a_dN_ho9GxW9Ujhws2bE_1W9Yg==; baqend-speedkit-user-id=qrFvj8tCJjFBdg8NOs1fCwrW7
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 08:52:22 GMT
content-type: text/html;charset=UTF-8
x-dw-request-base-id: inJBG0WF12MBAAB_
content-security-policy: frame-ancestors 'self'
x-frame-options: SAMEORIGIN
set-cookie: __cq_dnt=1; Path=/; Secure; SameSite=None
dw_dnt=1; Path=/; Secure; SameSite=None
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: Thu, 01 Dec 1994 16:00:00 GMT
vary: accept-encoding
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 7918f897b9ab1bfe-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
events.demoup.com/callback/pageload_event
200 OK 0 B URL HTTP/2 events.demoup.com/callback/pageload_event
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /callback/pageload_event HTTP/1.1
Host: events.demoup.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-Requested-With: XMLHttpRequest
Content-Length: 437
Origin: https://www.addnature.no
Connection: keep-alive
Referer: https://www.addnature.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 08:52:23 GMT
content-type: text/plain
content-length: 0
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 6000
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
cache-control: public,max-age=3600,must-revalidate
X-Firefox-Spdy: h2
addnature.app.baqend.com/v1/rum/pi
204 No Content 0 B URL HTTP/2 addnature.app.baqend.com/v1/rum/pi
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /v1/rum/pi HTTP/1.1
Host: addnature.app.baqend.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 364
Origin: https://www.addnature.no
Connection: keep-alive
Referer: https://www.addnature.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache, max-age=0
accept-ranges: bytes
date: Mon, 30 Jan 2023 08:52:23 GMT
x-served-by: cache-bma1655-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1675068743.240298,VS0,VE21
access-control-allow-credentials: true
access-control-allow-origin: https://www.addnature.no
access-control-expose-headers: Location, ETag, Baqend-Authorization-Token, Baqend-Acl, Baqend-Size, Baqend-SW-Control, Baqend-Created-At, Date, Age, Baqend-Speed-Kit, Baqend-Custom-Headers, X-Served-By, X-Cache, X-Timer, Access-Control-Allow-Origin, Fastly-Io-Info, Server-Timing
timing-allow-origin: https://www.addnature.no
via: baqend
server-timing: pop;desc=BMA;dur=21,cache;desc=PASS,proto;desc=h2
X-Firefox-Spdy: h2
addnature.app.baqend.com/v1/bloomfilter?BCB=1&skversion=2.12.1
200 OK 7.7 kB URL HTTP/2 addnature.app.baqend.com/v1/bloomfilter?BCB=1&skversion=2.12.1
IP
File type JSON data\012- , ASCII text, with very long lines (10427), with no line terminators
Hash 9106bf4aec65229a629c8996c54389dc
5be9b27da85cd35ccb3c34ebaf10cf4acfebf565
e7deb0633eb8686640bc0152e2542532ae92efaf1332eb73154e08ec90aaa1f5
GET /v1/bloomfilter?BCB=1&skversion=2.12.1 HTTP/1.1
Host: addnature.app.baqend.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.addnature.no/
Origin: https://www.addnature.no
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
baqend-speed-kit: cachingId=80b751c1-cf75-4dbb-8589-dd296f318dc3
content-encoding: gzip
content-type: application/json;charset=utf-8
etag: "/Yq3ByRlCv98Fpg++XjRJA==--br"
accept-ranges: bytes
date: Mon, 30 Jan 2023 08:52:23 GMT
age: 31535477
cache-control: public, max-age=0, must-revalidate
x-served-by: cache-bma1680-BMA
x-cache: HIT
x-cache-hits: 2
x-timer: S1675068743.287959,VS0,VE1
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-origin: https://www.addnature.no
access-control-expose-headers: Location, ETag, Baqend-Authorization-Token, Baqend-Acl, Baqend-Size, Baqend-SW-Control, Baqend-Created-At, Date, Age, Baqend-Speed-Kit, Baqend-Custom-Headers, X-Served-By, X-Cache, X-Timer, Access-Control-Allow-Origin, Fastly-Io-Info, Server-Timing
timing-allow-origin: https://www.addnature.no
via: baqend
server-timing: pop;desc=BMA;dur=1,cache;desc=EDGE,hotness;desc=2,proto;desc=h2
content-length: 7694
X-Firefox-Spdy: h2
www.addnature.no/on/demandware.store/Sites-addnature-no-Site/no_NO/Consent-HandleConsent
200 OK 16 B URL HTTP/2 www.addnature.no/on/demandware.store/Sites-addnature-no-Site/no_NO/Consent-HandleConsent
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 7363e85fe9edee6f053a4b319588c086
a15e2127145548437173fc17f3e980e3f3dee2d0
c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97
POST /on/demandware.store/Sites-addnature-no-Site/no_NO/Consent-HandleConsent HTTP/1.1
Host: www.addnature.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.addnature.no/on-cloud-5-sko-dame-M1179224.html?vgid=G1742048&c=816&_cid=22_-1220_236489_236490_236492_5232617_0_kelkoo.no&utm_source=kelkoo&utm_medium=psm&utm_campaign=L%F8pesko%20for%20landevei&utm_content=On&utm_term=1742048
Content-Type: multipart/form-data; boundary=---------------------------99318066936019978223091083179
Origin: https://www.addnature.no
Content-Length: 181
Connection: keep-alive
Cookie: sid=AZ5KIuNg3lWbX8BBbY5OBo2Filsn8gHpFTE; dwanonymous_803bf9f7a6242e90119d6af72a2236f6=acCLCaWjgwH2Zmd5MrSFb5ls0s; __cq_dnt=1; dw_dnt=1; dwsid=EJn4X8KV1KpIZLBh42Dz65yCOCYGBwsWxgrlNZLc_kqhm6TEWXrBEeHOfYY6a_dN_ho9GxW9Ujhws2bE_1W9Yg==; baqend-speedkit-user-id=qrFvj8tCJjFBdg8NOs1fCwrW7; OptanonConsent=isIABGlobal=false&datestamp=Mon+Jan+30+2023+08%3A52%3A34+GMT%2B0000+(Coordinated+Universal+Time)&version=6.13.0&hosts=&consentId=f1b2444a-9f28-43e2-8b01-5bec61b818fc&interactionCount=0&landingPath=https%3A%2F%2Fwww.addnature.no%2Fon-cloud-5-sko-dame-M1179224.html%3Fvgid%3DG1742048%26c%3D816%26_cid%3D22_-1220_236489_236490_236492_5232617_0_kelkoo.no%26utm_source%3Dkelkoo%26utm_medium%3Dpsm%26utm_campaign%3DL%25F8pesko%2520for%2520landevei%26utm_content%3DOn%26utm_term%3D1742048
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 08:52:23 GMT
content-type: application/json
content-length: 16
accept-ranges: bytes
x-dw-request-base-id: inJuG0aF12MBAAB_
content-security-policy: frame-ancestors 'self'
x-frame-options: SAMEORIGIN
set-cookie: __cq_dnt=1; Path=/; Secure; SameSite=None
dw_dnt=1; Path=/; Secure; SameSite=None
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: Thu, 01 Dec 1994 16:00:00 GMT
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 7918f89dbfc21bfe-OSL
X-Firefox-Spdy: h2
www.addnature.no/on/demandware.store/Sites-addnature-no-Site/no_NO/__Analytics-Start?url=https%3A%2F%2Fwww.addnature.no%2Fon-cloud-5-sko-dame-M1179224.html%3Fvgid%3DG1742048%26c%3D816%26_cid%3D22_-1220_236489_236490_236492_5232617_0_kelkoo.no%26utm_source%3Dkelkoo%26utm_medium%3Dpsm%26utm_campaign%3DL%25F8pesko%2520for%2520landevei%26utm_content%3DOn%26utm_term%3D1742048&res=1280x1024&cookie=1&ref=https%3A%2F%2Fno-go.kelkoogroup.net%2F&title=On%20Cloud%205%20Sko%20Dame%20Hvit%20%7C%20addnature.no&pdf=0&qt=0&realp=0&wma=0&dir=0&fla=0&java=0&gears=0&ag=0&dwac=0.9866590109654675&cmpn=&tz=Europe/Oslo&pcc=&pct=__ANNONYMOUS__&pcat=240918&pid-0=G1742048&pev-0=event4&dw_dnt=1
200 OK 35 B URL HTTP/2 www.addnature.no/on/demandware.store/Sites-addnature-no-Site/no_NO/__Analytics-Start?url=https%3A%2F%2Fwww.addnature.no%2Fon-cloud-5-sko-dame-M1179224.html%3Fvgid%3DG1742048%26c%3D816%26_cid%3D22_-1220_236489_236490_236492_5232617_0_kelkoo.no%26utm_source%3Dkelkoo%26utm_medium%3Dpsm%26utm_campaign%3DL%25F8pesko%2520for%2520landevei%26utm_content%3DOn%26utm_term%3D1742048&res=1280x1024&cookie=1&ref=https%3A%2F%2Fno-go.kelkoogroup.net%2F&title=On%20Cloud%205%20Sko%20Dame%20Hvit%20%7C%20addnature.no&pdf=0&qt=0&realp=0&wma=0&dir=0&fla=0&java=0&gears=0&ag=0&dwac=0.9866590109654675&cmpn=&tz=Europe/Oslo&pcc=&pct=__ANNONYMOUS__&pcat=240918&pid-0=G1742048&pev-0=event4&dw_dnt=1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash c2196de8ba412c60c22ab491af7b1409
5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b
6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992
GET /on/demandware.store/Sites-addnature-no-Site/no_NO/__Analytics-Start?url=https%3A%2F%2Fwww.addnature.no%2Fon-cloud-5-sko-dame-M1179224.html%3Fvgid%3DG1742048%26c%3D816%26_cid%3D22_-1220_236489_236490_236492_5232617_0_kelkoo.no%26utm_source%3Dkelkoo%26utm_medium%3Dpsm%26utm_campaign%3DL%25F8pesko%2520for%2520landevei%26utm_content%3DOn%26utm_term%3D1742048&res=1280x1024&cookie=1&ref=https%3A%2F%2Fno-go.kelkoogroup.net%2F&title=On%20Cloud%205%20Sko%20Dame%20Hvit%20%7C%20addnature.no&pdf=0&qt=0&realp=0&wma=0&dir=0&fla=0&java=0&gears=0&ag=0&dwac=0.9866590109654675&cmpn=&tz=Europe/Oslo&pcc=&pct=__ANNONYMOUS__&pcat=240918&pid-0=G1742048&pev-0=event4&dw_dnt=1 HTTP/1.1
Host: www.addnature.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Referer: https://www.addnature.no/on-cloud-5-sko-dame-M1179224.html?vgid=G1742048&c=816&_cid=22_-1220_236489_236490_236492_5232617_0_kelkoo.no&utm_source=kelkoo&utm_medium=psm&utm_campaign=L%F8pesko%20for%20landevei&utm_content=On&utm_term=1742048
Connection: keep-alive
Cookie: sid=AZ5KIuNg3lWbX8BBbY5OBo2Filsn8gHpFTE; dwanonymous_803bf9f7a6242e90119d6af72a2236f6=acCLCaWjgwH2Zmd5MrSFb5ls0s; __cq_dnt=1; dw_dnt=1; dwsid=EJn4X8KV1KpIZLBh42Dz65yCOCYGBwsWxgrlNZLc_kqhm6TEWXrBEeHOfYY6a_dN_ho9GxW9Ujhws2bE_1W9Yg==; baqend-speedkit-user-id=qrFvj8tCJjFBdg8NOs1fCwrW7; OptanonConsent=isIABGlobal=false&datestamp=Mon+Jan+30+2023+08%3A52%3A34+GMT%2B0000+(Coordinated+Universal+Time)&version=6.13.0&hosts=&consentId=f1b2444a-9f28-43e2-8b01-5bec61b818fc&interactionCount=0&landingPath=https%3A%2F%2Fwww.addnature.no%2Fon-cloud-5-sko-dame-M1179224.html%3Fvgid%3DG1742048%26c%3D816%26_cid%3D22_-1220_236489_236490_236492_5232617_0_kelkoo.no%26utm_source%3Dkelkoo%26utm_medium%3Dpsm%26utm_campaign%3DL%25F8pesko%2520for%2520landevei%26utm_content%3DOn%26utm_term%3D1742048&groups=C0002%3A0%2CC0004%3A0%2CC0003%3A0%2CC0001%3A1
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 08:52:23 GMT
content-type: image/gif
content-length: 35
accept-ranges: bytes
x-dw-request-base-id: inJyG0eF12MBAAB_
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: Thu, 01 Dec 1994 16:00:00 GMT
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 7918f89e88a01bfe-OSL
X-Firefox-Spdy: h2
addnature.app.baqend.com/v1/asset/https://cdn.cquotient.com/js/v2/gretel.min.js?bqcv=be6e2798&bqsk=2.12.1&bqpi=1
200 OK 19 kB URL HTTP/2 addnature.app.baqend.com/v1/asset/https://cdn.cquotient.com/js/v2/gretel.min.js?bqcv=be6e2798&bqsk=2.12.1&bqpi=1
IP
File type Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Hash 0b5649a6c84f8da2120ac06540d86f79
70cafc5d8a61e7d21ec979b365ce152f8c7ac131
23ef389c1341676088655a06f1734979a7e3499ee6824c501ccb3f3e29de04e3
GET /v1/asset/https://cdn.cquotient.com/js/v2/gretel.min.js?bqcv=be6e2798&bqsk=2.12.1&bqpi=1 HTTP/1.1
Host: addnature.app.baqend.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.addnature.no/
Origin: https://www.addnature.no
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
baqend-created-at: Tue, 6 Dec 2022 13:58:48 GMT
baqend-custom-headers: {"createdat":"1670335128.752"}
baqend-size: 18678
content-encoding: gzip
content-type: application/javascript
createdat: 1670335128.752
last-modified: Wed, 18 Jan 2023 16:12:03 GMT
etag: "0b5649a6c84f8da2120ac06540d86f79--br"
accept-ranges: bytes
date: Mon, 30 Jan 2023 08:52:24 GMT
age: 31182021
cache-control: public,browser-ttl=1800,sw-max-age=31536000,max-age=31183821
x-served-by: cache-bma1680-BMA
x-cache: STORAGE, HIT
x-cache-hits: 302
x-timer: S1675068744.263464,VS0,VE1
access-control-allow-credentials: true
access-control-allow-origin: https://www.addnature.no
access-control-expose-headers: Location, ETag, Baqend-Authorization-Token, Baqend-Acl, Baqend-Size, Baqend-SW-Control, Baqend-Created-At, Date, Age, Baqend-Speed-Kit, Baqend-Custom-Headers, X-Served-By, X-Cache, X-Timer, Access-Control-Allow-Origin, Fastly-Io-Info, Server-Timing
timing-allow-origin: https://www.addnature.no
via: baqend
server-timing: pop;desc=BMA;dur=1,cache;desc=EDGE,hotness;desc=302,proto;desc=h2
content-length: 18678
X-Firefox-Spdy: h2
www.addnature.no/on/demandware.static/-/Library-Sites-addnature/no_NO/v1675048123452/tm-js/addnature-no/anno_production.js
200 OK 0 B URL HTTP/2 www.addnature.no/on/demandware.static/-/Library-Sites-addnature/no_NO/v1675048123452/tm-js/addnature-no/anno_production.js
IP
GET /on/demandware.static/-/Library-Sites-addnature/no_NO/v1675048123452/tm-js/addnature-no/anno_production.js HTTP/1.1
Host: www.addnature.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.addnature.no/on-cloud-5-sko-dame-M1179224.html?vgid=G1742048&c=816&_cid=22_-1220_236489_236490_236492_5232617_0_kelkoo.no&utm_source=kelkoo&utm_medium=psm&utm_campaign=L%F8pesko%20for%20landevei&utm_content=On&utm_term=1742048
Cookie: sid=AZ5KIuNg3lWbX8BBbY5OBo2Filsn8gHpFTE; dwanonymous_803bf9f7a6242e90119d6af72a2236f6=acCLCaWjgwH2Zmd5MrSFb5ls0s; __cq_dnt=1; dw_dnt=1; dwsid=EJn4X8KV1KpIZLBh42Dz65yCOCYGBwsWxgrlNZLc_kqhm6TEWXrBEeHOfYY6a_dN_ho9GxW9Ujhws2bE_1W9Yg==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 08:52:21 GMT
content-type: application/javascript
cache-control: public, max-age=2591436
cf-bgj: minify
cf-polished: origSize=39692
cross-origin-resource-policy: cross-origin
expires: Wed, 01 Mar 2023 03:11:56 GMT
last-modified: Tue, 30 Aug 2022 13:14:47 GMT
vary: accept-encoding
x-dw-request-base-id: inJyNnw112MBAAB_
cf-cache-status: HIT
age: 19268
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 7918f8948ea41bfe-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.cquotient.com/js/v2/gretel.min.js
200 OK 0 B URL HTTP/2 cdn.cquotient.com/js/v2/gretel.min.js
IP
GET /js/v2/gretel.min.js HTTP/1.1
Host: cdn.cquotient.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.addnature.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
date: Mon, 30 Jan 2023 08:15:06 GMT
last-modified: Wed, 18 Jan 2023 16:09:21 GMT
etag: W/"0497920c3a1175f967fd3029b4026318"
x-amz-server-side-encryption: AES256
cache-control: max-age=3600
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Bz2dSzjVxGTdmIG8k2O9V0UgeBS53MmEakeJWmZW9zxLQV3A5vIs0g==
age: 2237
X-Firefox-Spdy: h2
www.addnature.no/on/demandware.static/-/Library-Sites-addnature/no_NO/v1675048123452/icons/icons.svg
200 OK 0 B URL HTTP/2 www.addnature.no/on/demandware.static/-/Library-Sites-addnature/no_NO/v1675048123452/icons/icons.svg
IP
GET /on/demandware.static/-/Library-Sites-addnature/no_NO/v1675048123452/icons/icons.svg HTTP/1.1
Host: www.addnature.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.addnature.no/on-cloud-5-sko-dame-M1179224.html?vgid=G1742048&c=816&_cid=22_-1220_236489_236490_236492_5232617_0_kelkoo.no&utm_source=kelkoo&utm_medium=psm&utm_campaign=L%F8pesko%20for%20landevei&utm_content=On&utm_term=1742048
Cookie: sid=AZ5KIuNg3lWbX8BBbY5OBo2Filsn8gHpFTE; dwanonymous_803bf9f7a6242e90119d6af72a2236f6=acCLCaWjgwH2Zmd5MrSFb5ls0s; __cq_dnt=1; dw_dnt=1; dwsid=EJn4X8KV1KpIZLBh42Dz65yCOCYGBwsWxgrlNZLc_kqhm6TEWXrBEeHOfYY6a_dN_ho9GxW9Ujhws2bE_1W9Yg==; baqend-speedkit-user-id=qrFvj8tCJjFBdg8NOs1fCwrW7
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 08:52:22 GMT
content-type: image/svg+xml
x-dw-request-base-id: XQqJ5Es212MBAAB_
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=2591824
expires: Wed, 01 Mar 2023 03:15:23 GMT
last-modified: Tue, 30 Aug 2022 13:14:47 GMT
cf-cache-status: HIT
age: 20043
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 7918f896f8de1bfe-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
www.addnature.no/on/demandware.static/Sites-addnature-no-Site/-/default/dwa2a08c56/svg/loader.svg
200 OK 0 B URL HTTP/2 www.addnature.no/on/demandware.static/Sites-addnature-no-Site/-/default/dwa2a08c56/svg/loader.svg
IP
GET /on/demandware.static/Sites-addnature-no-Site/-/default/dwa2a08c56/svg/loader.svg HTTP/1.1
Host: www.addnature.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.addnature.no/on-cloud-5-sko-dame-M1179224.html?vgid=G1742048&c=816&_cid=22_-1220_236489_236490_236492_5232617_0_kelkoo.no&utm_source=kelkoo&utm_medium=psm&utm_campaign=L%F8pesko%20for%20landevei&utm_content=On&utm_term=1742048
Cookie: sid=AZ5KIuNg3lWbX8BBbY5OBo2Filsn8gHpFTE; dwanonymous_803bf9f7a6242e90119d6af72a2236f6=acCLCaWjgwH2Zmd5MrSFb5ls0s; __cq_dnt=1; dw_dnt=1; dwsid=EJn4X8KV1KpIZLBh42Dz65yCOCYGBwsWxgrlNZLc_kqhm6TEWXrBEeHOfYY6a_dN_ho9GxW9Ujhws2bE_1W9Yg==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 08:52:21 GMT
content-type: image/svg+xml
x-dw-request-base-id: XQrm3rgN0WMBAAB_
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=2592000
expires: Fri, 24 Feb 2023 11:08:40 GMT
last-modified: Wed, 18 Jan 2023 10:29:27 GMT
cf-cache-status: HIT
age: 423820
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 7918f894ff0d1bfe-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
www.addnature.no/on/demandware.static/Sites-addnature-no-Site/-/no_NO/v1675048123452/js/productdetails.js
200 OK 0 B URL HTTP/2 www.addnature.no/on/demandware.static/Sites-addnature-no-Site/-/no_NO/v1675048123452/js/productdetails.js
IP
GET /on/demandware.static/Sites-addnature-no-Site/-/no_NO/v1675048123452/js/productdetails.js HTTP/1.1
Host: www.addnature.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.addnature.no/on-cloud-5-sko-dame-M1179224.html?vgid=G1742048&c=816&_cid=22_-1220_236489_236490_236492_5232617_0_kelkoo.no&utm_source=kelkoo&utm_medium=psm&utm_campaign=L%F8pesko%20for%20landevei&utm_content=On&utm_term=1742048
Cookie: sid=AZ5KIuNg3lWbX8BBbY5OBo2Filsn8gHpFTE; dwanonymous_803bf9f7a6242e90119d6af72a2236f6=acCLCaWjgwH2Zmd5MrSFb5ls0s; __cq_dnt=1; dw_dnt=1; dwsid=EJn4X8KV1KpIZLBh42Dz65yCOCYGBwsWxgrlNZLc_kqhm6TEWXrBEeHOfYY6a_dN_ho9GxW9Ujhws2bE_1W9Yg==; baqend-speedkit-user-id=qrFvj8tCJjFBdg8NOs1fCwrW7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 08:52:22 GMT
content-type: application/javascript
cache-control: public, max-age=2591757
cf-bgj: minify
cf-polished: origSize=102184
cross-origin-resource-policy: cross-origin
expires: Wed, 01 Mar 2023 03:17:20 GMT
last-modified: Wed, 18 Jan 2023 10:29:29 GMT
vary: accept-encoding
x-dw-request-base-id: inKsX8A212MBAAB_
cf-cache-status: HIT
age: 19268
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 7918f897b9aa1bfe-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
www.addnature.no/on/demandware.static/Sites-addnature-no-Site/-/no_NO/v1675048123452/js/app.js
200 OK 0 B URL HTTP/2 www.addnature.no/on/demandware.static/Sites-addnature-no-Site/-/no_NO/v1675048123452/js/app.js
IP
GET /on/demandware.static/Sites-addnature-no-Site/-/no_NO/v1675048123452/js/app.js HTTP/1.1
Host: www.addnature.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.addnature.no/on-cloud-5-sko-dame-M1179224.html?vgid=G1742048&c=816&_cid=22_-1220_236489_236490_236492_5232617_0_kelkoo.no&utm_source=kelkoo&utm_medium=psm&utm_campaign=L%F8pesko%20for%20landevei&utm_content=On&utm_term=1742048
Cookie: sid=AZ5KIuNg3lWbX8BBbY5OBo2Filsn8gHpFTE; dwanonymous_803bf9f7a6242e90119d6af72a2236f6=acCLCaWjgwH2Zmd5MrSFb5ls0s; __cq_dnt=1; dw_dnt=1; dwsid=EJn4X8KV1KpIZLBh42Dz65yCOCYGBwsWxgrlNZLc_kqhm6TEWXrBEeHOfYY6a_dN_ho9GxW9Ujhws2bE_1W9Yg==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 08:52:21 GMT
content-type: application/javascript
cache-control: public, max-age=2591405
cf-bgj: minify
cf-polished: origSize=394147
cross-origin-resource-policy: cross-origin
expires: Wed, 01 Mar 2023 03:11:26 GMT
last-modified: Wed, 18 Jan 2023 10:29:29 GMT
vary: accept-encoding
x-dw-request-base-id: XQqhx14112MBAAB_
cf-cache-status: HIT
age: 19268
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 7918f894ff0e1bfe-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
www.addnature.no/on/demandware.static/Sites-addnature-no-Site/-/no_NO/v1675048123452/css/style.min.css
200 OK 0 B URL HTTP/2 www.addnature.no/on/demandware.static/Sites-addnature-no-Site/-/no_NO/v1675048123452/css/style.min.css
IP
GET /on/demandware.static/Sites-addnature-no-Site/-/no_NO/v1675048123452/css/style.min.css HTTP/1.1
Host: www.addnature.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://www.addnature.no/on-cloud-5-sko-dame-M1179224.html?vgid=G1742048&c=816&_cid=22_-1220_236489_236490_236492_5232617_0_kelkoo.no&utm_source=kelkoo&utm_medium=psm&utm_campaign=L%F8pesko%20for%20landevei&utm_content=On&utm_term=1742048
Cookie: sid=AZ5KIuNg3lWbX8BBbY5OBo2Filsn8gHpFTE; dwanonymous_803bf9f7a6242e90119d6af72a2236f6=acCLCaWjgwH2Zmd5MrSFb5ls0s; __cq_dnt=1; dw_dnt=1; dwsid=EJn4X8KV1KpIZLBh42Dz65yCOCYGBwsWxgrlNZLc_kqhm6TEWXrBEeHOfYY6a_dN_ho9GxW9Ujhws2bE_1W9Yg==; baqend-speedkit-user-id=qrFvj8tCJjFBdg8NOs1fCwrW7
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 08:52:22 GMT
content-type: text/css
x-dw-request-base-id: inJzNXY112MBAAB_
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=2591427
expires: Wed, 01 Mar 2023 03:11:50 GMT
last-modified: Wed, 18 Jan 2023 10:29:27 GMT
vary: accept-encoding
content-encoding: gzip
cf-cache-status: HIT
age: 19269
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 7918f89a9c471bfe-OSL
X-Firefox-Spdy: h2
www.addnature.no/on/demandware.static/Sites-addnature-no-Site/-/default/dw25c490bc/images/favicon.ico
200 OK 0 B URL HTTP/2 www.addnature.no/on/demandware.static/Sites-addnature-no-Site/-/default/dw25c490bc/images/favicon.ico
IP
GET /on/demandware.static/Sites-addnature-no-Site/-/default/dw25c490bc/images/favicon.ico HTTP/1.1
Host: www.addnature.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.addnature.no/on-cloud-5-sko-dame-M1179224.html?vgid=G1742048&c=816&_cid=22_-1220_236489_236490_236492_5232617_0_kelkoo.no&utm_source=kelkoo&utm_medium=psm&utm_campaign=L%F8pesko%20for%20landevei&utm_content=On&utm_term=1742048
Cookie: sid=AZ5KIuNg3lWbX8BBbY5OBo2Filsn8gHpFTE; dwanonymous_803bf9f7a6242e90119d6af72a2236f6=acCLCaWjgwH2Zmd5MrSFb5ls0s; __cq_dnt=1; dw_dnt=1; dwsid=EJn4X8KV1KpIZLBh42Dz65yCOCYGBwsWxgrlNZLc_kqhm6TEWXrBEeHOfYY6a_dN_ho9GxW9Ujhws2bE_1W9Yg==; baqend-speedkit-user-id=qrFvj8tCJjFBdg8NOs1fCwrW7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 08:52:22 GMT
content-type: image/x-icon
x-dw-request-base-id: inKBTboN0WMBAAB_
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=2592000
expires: Fri, 24 Feb 2023 11:08:42 GMT
last-modified: Wed, 18 Jan 2023 10:29:27 GMT
vary: accept-encoding
content-encoding: gzip
cf-cache-status: HIT
age: 423819
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 7918f89a8c3a1bfe-OSL
X-Firefox-Spdy: h2
images.internetstores.de/products/1742048/02/2efc8c/on-cloud-5-shoes-women-all-white-1.jpg?forceSize=true&forceAspectRatio=true&useTrim=true&size=613x613
200 OK 0 B URL HTTP/2 images.internetstores.de/products/1742048/02/2efc8c/on-cloud-5-shoes-women-all-white-1.jpg?forceSize=true&forceAspectRatio=true&useTrim=true&size=613x613
IP
GET /products/1742048/02/2efc8c/on-cloud-5-shoes-women-all-white-1.jpg?forceSize=true&forceAspectRatio=true&useTrim=true&size=613x613 HTTP/1.1
Host: images.internetstores.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.addnature.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 08:52:22 GMT
content-type: image/jpeg
content-length: 56499
cache-control: max-age=1209600, public
cf-bgj: h2pri
access-control-allow-origin: *
etag: "624ff898-dcb3"
expires: Thu, 09 Feb 2023 10:10:09 GMT
last-modified: Fri, 08 Apr 2022 08:55:52 GMT
pragma: public
strict-transport-security: max-age=15768000
cf-cache-status: HIT
age: 340933
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7918f895dedbb4f3-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
74.206.228.78
23.33.119.27
93.184.220.29
104.16.149.64
213.133.127.252
52.19.31.244
95.211.116.26